Packets parser Model training Diagnostics Data filtering Data pairing Input data processing Protocol model PCAP

Network diagnostics is a time-consuming activity that requires an administrator with good knowledge of network principles and technologies. Even if some network errors have been resolved in the past, the administrator must spend considerable time removing these errors when they reoccur. This article presents an automated tool to learn the expected behavior of network protocols and possible variations. The created model can be used to automate the diagnostic process. The model presents a finite automaton containing protocol behavior for different situations. Diagnostics of unknown communication is performed by checking the created model and searching for error states and their descriptions. We have also created a proof-of-concept tool that demonstrates the practical potential of this approach.