Method, computer system, and computer program product for problem determination using system run-time behavior analysis

Abstract

Run-time behavior is recorded using traces that are generated at run-time. A set of valid system behaviors is maintained. A recorded behavior can be added to the set of valid system behaviors if the run-time operation is completed successfully. Otherwise, the recorded behavior can be compared with members of the set of valid behaviors to determine differences. Such differences can be analysed to determine the cause of run-time errors.

1 - 16 . (canceled) 
     
     
         17 . A computer implemented method for analyzing computer system behavior, the method comprising the steps of:
 a) detecting first actual computer system behaviors occurring during first run time executions in the computer system of operations including store operations, retrieve operations, create operations, and delete operations;   b) storing respective records of valid traces relating to the computer system execution responsive to detecting that ones of the respective first run times resulted in respective valid system executions, wherein the records are stored in respective sets corresponding to valid system executions of the respective store, retrieve, create, and delete operations;   c) detecting a failure for a second run time execution of the computer system;   d) responsive to the failure detection in c), comparing i) a trace record of second behavior of the computer system during the second run time execution and ii) a selected one of the sets of the trace records of the first behaviors, wherein the selected set is for a same type of operation as an operation of the second run time execution;   e) selecting one of the first behavior trace records responsive to the comparing in d), wherein the selected first behavior trace record has, in comparison to the trace record of the second behavior, fewer differences than any of the other trace records of the selected first behavior trace record set; and   f) determining and presenting one or more differences between the selected one of the first behavior trace records and the trace record of the second behavior, wherein the one more differences between the selected one of the first behavior trace records and the trace record of the second behavior indicate a cause of the detected failure.   
     
     
         18 . The method as claimed in  claim 17 , wherein the first and second behaviors are selected from among behaviors including sequences of functions called during run times. 
     
     
         19 . The method as claimed in  claim 17 , wherein the first and second behaviors are selected from among behaviors including conditions evaluated as true during run times. 
     
     
         20 . The method as claimed in  claim 17 , wherein the first and second behaviors are selected from among behaviors including conditions evaluated as false during run times. 
     
     
         21 . The method as claimed in  claim 17 , wherein the first and second behaviors are selected from among behaviors including loops encountered and numbers of iterations of the encountered loops during run times. 
     
     
         22 . The method as claimed in  claim 17 , wherein the first and second behaviors are selected from among behaviors including goto statements encountered that affect execution flow during run times. 
     
     
         23 . The method as claimed in  claim 17 , wherein the second run time execution is an execution of a type of operation selected from a group including a store operation, a retrieve operation and a delete operation. 
     
     
         24 . A computer system comprising:
 a processor; and   a storage device connected to the processor, wherein the storage device has stored thereon a system behavior analysis program for controlling the processor, and wherein the processor is operative with the program to execute the program for performing the steps of:
 a) detecting first actual computer system behaviors occurring during first run time executions in the computer system of operations including store operations, retrieve operations, create operations, and delete operations; 
 b) storing respective records of valid traces relating to the computer system execution responsive to detecting that ones of the respective first run times resulted in respective valid system executions, wherein the records are stored in respective sets corresponding to valid system executions of the respective store, retrieve, create, and delete operations; 
 c) detecting a failure for a second run time execution of the computer system; 
 d) responsive to the failure detection in c), comparing i) a trace record of second behavior of the computer system during the second run time execution and ii) a selected one of the sets of the trace records of the first behaviors, wherein the selected set is for a same type of operation as an operation of the second run time execution; 
 e) selecting one of the first behavior trace records responsive to the comparing in d), wherein the selected first behavior trace record has, in comparison to the trace record of the second behavior, fewer differences than any of the other trace records of the selected first behavior trace record set; and 
   f) determining and presenting one or more differences between the selected one of the first behavior trace records and the trace record of the second behavior, wherein the one more differences between the selected one of the first behavior trace records and the trace record of the second behavior indicate a cause of the detected failure.   
     
     
         25 . The computer system of  claim 24 , wherein the first and second behaviors are selected from among behaviors including sequences of functions called during run times. 
     
     
         26 . The computer system of  claim 24 , wherein the first and second behaviors are selected from among behaviors including conditions evaluated as true during run times. 
     
     
         27 . The computer system of  claim 24 , wherein the first and second behaviors are selected from among behaviors including conditions evaluated as false during run times. 
     
     
         28 . The computer system of  claim 24 , wherein the first and second behaviors are selected from among behaviors including loops encountered and numbers of iterations of the encountered loops during run times. 
     
     
         29 . The computer system of  claim 24 , wherein the first and second behaviors are selected from among behaviors including goto statements encountered that affect execution flow during run times. 
     
     
         30 . The computer system of  claim 24 , wherein the second run time execution is an execution of a type of operation selected from a group including a store operation, a retrieve operation and a delete operation. 
     
     
         31 . A computer program product recorded on a storage device for analyzing system behavior, the computer program product having instructions for execution by a computer, wherein the instructions, when executed by the computer, cause the computer to implement a method comprising the steps of:
 a) detecting first actual computer system behaviors occurring during first run time executions in the computer system of operations including store operations, retrieve operations, create operations, and delete operations;   b) storing respective records of valid traces relating to the computer system execution responsive to detecting that ones of the respective first run times resulted in respective valid system executions, wherein the records are stored in respective sets corresponding to valid system executions of the respective store, retrieve, create, and delete operations;   c) detecting a failure for a second run time execution of the computer system;   d) responsive to the failure detection in c), comparing i) a trace record of second behavior of the computer system during the second run time execution and ii) a selected one of the sets of the trace records of the first behaviors, wherein the selected set is for a same type of operation as an operation of the second run time execution;   e) selecting one of the first behavior trace records responsive to the comparing in d), wherein the selected first behavior trace record has, in comparison to the trace record of the second behavior, fewer differences than any of the other trace records of the selected first behavior trace record set; and   f) determining and presenting one or more differences between the selected one of the first behavior trace records and the trace record of the second behavior, wherein the one more differences between the selected one of the first behavior trace records and the trace record of the second behavior indicate a cause of the detected failure.   
     
     
         32 . The computer program product of  claim 31 , wherein the first and second behaviors are selected from among behaviors including sequences of functions called during run times. 
     
     
         33 . The computer program product of  claim 31 , wherein the first and second behaviors are selected from among behaviors including conditions evaluated as true during run times. 
     
     
         34 . The computer program product of  claim 31 , wherein the first and second behaviors are selected from among behaviors including conditions evaluated as false during run times. 
     
     
         35 . The computer program product of  claim 31 , wherein the first and second behaviors are selected from among behaviors including loops encountered and numbers of iterations of the encountered loops during run times. 
     
     
         36 . The computer program product of  claim 31 , wherein the first and second behaviors are selected from among behaviors including goto statements encountered that affect execution flow during run times. 
     
     
         37 . The computer program product of  claim 31 , wherein the second run time execution is an execution of a type of operation selected from a group including a store operation, a retrieve operation and a delete operation.