Implementation of Network monitoring system using Instinctive Check Packet Generation

Abstract

We found, less number of test packets is enough to test all rules in networks. For example, 4000 packets can cover all rules in Stanford backbone network, while 53 are much enough to cover all links. We implemented an automated and systematic approach for testing and debugging networks by name “Instinctive Check Packet Generation” (ICPG). ICPG reads router configurations and generates a device-independent model. The model is used to generate a minimum set of test packets to (minimally) exercise every link in the network or (maximally) exercise every rule in the network. Test packets are sent periodically, and detected failures trigger a separate mechanism to localize the fault. ICPG can detect both functional (e.g., incorrect firewall rule) and performance problems (e.g., congested queue). ICPG complements but goes beyond earlier work in static checking (which cannot detect liveness or performance faults) or fault localization (which only localize faults given liveness results).