Event Driven Network Topology Discovery and Inventory Listing Using REAMS
- Network Topology Discovery and Inventory Listing are two of the primary features of modern network monitoring systems (NMS). Current NMSs rely heavily on active scanning techniques for discovering and mapping network information. Although this approach works, it introduces some major drawbacks such as the performance impact it can exact, specially in larger network environments. As a consequence, scans are often run less frequently which can result in stale information being presented and used by the network monitoring system. Alternatively, some NMSs rely on their agents being deployed on the hosts they monitor. In this article, we present a new approach to Network Topology Discovery and Network Inventory Listing using only passive monitoring and scanning techniques. The proposed techniques rely solely on the event logs produced by the hosts and network devices present within a network. Finally, we discuss some of the advantages and disadvantages of our approach.
Author details: | Amir AzodiGND, Feng ChengGND, Christoph MeinelORCiDGND |
---|---|
DOI: | https://doi.org/10.1007/s11277-015-3061-3 |
ISSN: | 0929-6212 |
ISSN: | 1572-834X |
Title of parent work (English): | Wireless personal communications : an international journal |
Publisher: | Springer |
Place of publishing: | New York |
Publication type: | Article |
Language: | English |
Date of first publication: | 2015/09/10 |
Publication year: | 2015 |
Release date: | 2022/06/07 |
Tag: | Event normalization; Event processing; Inventory systems; Network graph; Network monitoring; Network topology; Service detection |
Volume: | 94 |
Number of pages: | 16 |
First page: | 415 |
Last Page: | 430 |
Organizational units: | An-Institute / Hasso-Plattner-Institut für Digital Engineering gGmbH |
DDC classification: | 0 Informatik, Informationswissenschaft, allgemeine Werke / 00 Informatik, Wissen, Systeme / 000 Informatik, Informationswissenschaft, allgemeine Werke |
Peer review: | Referiert |