<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: connectionless]]></title>
    <link>http://securityratty.com/tag/connectionless</link>
    <description></description>
    <pubDate>Sun, 13 Jul 2008 05:02:47 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Messaging and Event Processing]]></title>
      <link>http://securityratty.com/article/fd1957191d920d6269f4de936020f086</link>
      <guid>http://securityratty.com/article/fd1957191d920d6269f4de936020f086</guid>
      <description><![CDATA[In On Messaging and Events Opher asks, Is event processing just fancy name to message processing
Most event processing systems would be incomplete without the ability to process events in the form of...]]></description>
      <content:encoded><![CDATA[<p>In <a href="http://http://epthinking.blogspot.com/2008/07/on-messages-and-events.html" target="_blank">On Messaging and Events</a> Opher asks, <em>&#8220;Is event processing just fancy name to message processing ?&#8221;</em></p>
<p>Most event processing systems would be incomplete without the ability to process events in the form of messages.   Messages can be delivered in either a connection-oriented protocol or a connectionless protocol.   Most enterprise-class messaging systems have both.   Many messaging systems have features like guarenteed delivery, which are important to many applications.</p>
<p>On the other hand, you do not have to work with a messaging system or enterprise service bus (ESB) to process events, because the transport layer is independent from the event processing layer, theoretically.  Most enterprise-class event processing system architectures will use a combination of both asynchronous and synchronous messaging. </p>
<p>To understand event processing I recommend you turn to network management and the practical use of Simple Network Management Protocol (SMNP) for a basic undertanding of event processing.   SNMP uses both synchronous event-based messaging, called polling, and asynchronous messaging, called traps.   Network management systems engineers use a combination of both polling and trapping in all enterprise-class operational NMS.  Optimizing polling and trapping is one of the tasks good NMS engineers do well. The same holds true in most distributed event processing architectures.  </p>
<p>For example, look at the <a href="http://www.thecepblog.com/what-is-complex-event-processing/" target="_blank">CEP/EP reference architecture</a> on this site.  You will notice that the mechanism for event transport is generic, represented as an event bus, but it does not specify the transport protocol.  If you are receiving raw events and comparing correlated results against a signature in a database, you are using both asynchronous and synchronous messaging.    In theory, you could build an event processing system with only connection-oriented protocols, but this would be an exeception, not the rule.</p>
<p>Event processing is generally associated with messaging because we generally represent event-objects as electronic messages.   In theory, we could call these cyber event-objects anything we want; for example, we could call them &#8220;packets.&#8221; However, packets are generally associated with the underlying Internet Protocol (IP) layer by network engineers.  </p>
<p>Moving up the stack, we think in terms of a complete message-object, which we generally call &#8220;a message.&#8221;  This message could be an SNMP event-object, an SMTP event-object (an email message), or an HTML request to a web server, to only name a few.    In fact, the basic unit of work at the application level of a distributed network application is what we call &#8220;a message.&#8221;  </p>
<p>So, in <a href="http://http://epthinking.blogspot.com/2008/07/on-messages-and-events.html" target="_blank">On Messaging and Events</a> Opher asks, <em>&#8220;Is event processing just fancy name to message processing ?&#8221;</em></p>
<p>Events are generally represented in some electronic format.  The event-object must be transported electronically in cyberspace, and the way that it is transported is in what network engineers generally call &#8220;a message.&#8221;   It make no difference what we call it, really; because whatever we call it, it is still binary data representing information we are interested in, hopefully in a format we can efficiently process.    Enterprise-class event processing systems are designed to work with myriad formats, protocols and transports.   One size does not fit all.</p>
<p> </p>
<p> </p>
]]></content:encoded>
      <pubDate>Sun, 13 Jul 2008 05:02:47 +0000</pubDate>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/smtp event-object">smtp event-object</category>
      <category domain="http://securityratty.com/tag/event-object">event-object</category>
      <category domain="http://securityratty.com/tag/cyber event-objects">cyber event-objects</category>
      <category domain="http://securityratty.com/tag/snmp event-object">snmp event-object</category>
      <category domain="http://securityratty.com/tag/snmp">snmp</category>
      <category domain="http://securityratty.com/tag/event bus">event bus</category>
      <category domain="http://securityratty.com/tag/event-objects">event-objects</category>
      <category domain="http://securityratty.com/tag/event transport">event transport</category>
      <source url="http://www.thecepblog.com/2008/07/13/messaging-and-event-processing/">Messaging and Event Processing</source>
    </item>
  </channel>
</rss>
