Capture point determination method and capture point determination system

Patent metadata

Field	Value
Publication number	US-2015277959-A1
Application number	US-201514665490-A
Country	US
Kind code	A1
Filing date	Mar 23, 2015
Priority date	Mar 31, 2014
Publication date	Oct 1, 2015
Grant date	—

Abstract

A physical machine calculates, for each virtual switch, an increment of a usage of a processor in accordance with the number of packets to be collected, by using a usage of the processor by a virtual switch and a number of packets passing through each port when mirroring is executed and when mirroring is not executed, respectively. For each of candidates for capture point, the physical machine calculates, for each physical machine, a usage of the processor by a hypervisor when mirroring is executed, by using an increment of a usage of the processor by the virtual switch and a usage of the processor by the hypervisor when mirroring is not executed. The physical machine determines a combination of ports used for collection of packets from among the candidates for capture point, in accordance with a deviation of the calculated usage of the processor by each hypervisor.

First claim

What is claimed is:

1 . A capture point determination method in a system including a first physical machine including a first processor and a plurality of second physical machines each including a second processor capable of executing a hypervisor that operates virtual machines and a virtual switch, the method comprising:
obtaining, by the first processor, a plurality of candidates for a combination of ports of each virtual switch through which packets transmitted and received between the virtual machines are collected, and calculating, for each virtual switch, an increment of a usage of the second processor in accordance with a number of packets to be collected, by using a usage of the second processor by the virtual switch and a number of packets passing through each port when mirroring is executed and when mirroring is not executed, respectively; calculating, by the first processor, for each of the second physical machines, a usage of the second processor by the hypervisor when mirroring is executed, by using a calculated increment of a usage of the second processor by the virtual switch and a usage of the second processor by the hypervisor when mirroring is not executed, for each of the plurality of candidates; and determining, by the first processor, a combination of ports used for collection of packets, from among the plurality of candidates in accordance with a deviation of the usage of the second processor by each hypervisor calculated for each candidate.

2 . The capture point determination method according to claim 1 , wherein the determining includes selecting a candidate in which a standard deviation or dispersion of a usage of the second processor by each hypervisor when mirroring is executed becomes the smallest.

3 . The capture point determination method according to claim 1 , wherein the determining includes excluding a candidate in which a usage of the second processor by any hypervisor when mirroring is executed is larger than a threshold, from the plurality of candidates for selection.

4 . The capture point determination method according to claim 1 , wherein the calculating includes:
calculating a usage of the second processor of the virtual switch due to mirroring from a usage of the second processor of the virtual switch when mirroring is not executed and when mirroring is executed and a number of packets passing through a mirroring port when mirroring is not executed and when mirroring is executed; and calculating, based on the calculation result, an increment of the usage of the second processor by the virtual switch in accordance with a number of packets to be collected.

5 . The capture point determination method according to claim 1 , wherein the calculating includes calculating a usage of the second processor by a hypervisor by adding a value, which is obtained by multiplying an increment of the usage of the second processor by a virtual switch associated with mirroring of a predetermined number of packets by a number of packets passing through a mirroring port, and a usage of the second processor by the hypervisor when mirroring is not executed.

6 . A capture point determination system comprising:
a first physical machine including a first processor; and a plurality of second physical machines each including a second processor capable of executing a hypervisor that operates virtual machines and a virtual switch, wherein the first physical machine performs a process including: obtaining a plurality of candidates for a combination of ports of each virtual switch through which packets transmitted and received between the virtual machines are collected, and calculating, for each virtual switch, an increment of a usage of the second processor in accordance with a number of packets to be collected, by using a usage of the second processor by the virtual switch and a number of packets passing through each port when mirroring is executed and when mirroring is not executed, respectively; calculating, for each of the second physical machines, a usage of the second processor by the hypervisor when mirroring is executed, by using a calculated increment of a usage of the second processor by the virtual switch and a usage of the second processor by the hypervisor when mirroring is not executed, for each of the plurality of candidates; and determining a combination of ports used for collection of packets, from among the plurality of candidates in accordance with a deviation of the usage of the second processor by each hypervisor calculated for each candidate.

7 . A non-transitory computer-readable storage medium storing a computer program that causes a computer used as a first physical machine including a first processor in a system including the first physical machine and a plurality of second physical machines each including a second processor capable of executing a hypervisor that operates virtual machines and a virtual switch to perform a process comprising:
obtaining a plurality of candidates for a combination of ports of each virtual switch through which packets transmitted and received between the virtual machines are collected, and calculating, for each virtual switch, an increment of a usage of the second processor in accordance with a number of packets to be collected, by using a usage of the second processor by the virtual switch and a number of packets passing through each port when mirroring is executed and when mirroring is not executed, respectively; calculating, for each of the second physical machines, a usage of the second processor by the hypervisor when mirroring is executed, by using a calculated increment of a usage of the second processor by the virtual switch and a usage of the second processor by the hypervisor when mirroring is not executed, for each of the plurality of candidates; and determining a combination of ports used for collection of packets, from among the plurality of candidates in accordance with a deviation of the usage of the second processor by each hypervisor calculated for each candidate.

Assignees

• Fujitsu Ltd

Inventors

• Higuchi Junichi
• Nomura Yuji
• Kanemasa Yasuhiko

Classifications

• H04L49/70 Primary

  Virtual switches · CPC title

• G06F2009/45595

  Network integration; Enabling network access in virtual machine instances · CPC title

• G06F9/45558 Primary

  Hypervisor-specific management and integration aspects · CPC title

• H04L49/208

  Port mirroring · CPC title

• G06F21/53

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title