NetOpsBench
Benchmark Runs

NetOpsBench v0.2.0 Results

Seven-scale DeepSeek release validation, diagnosis quality, observability, and cost.

This page reports the current NetOpsBench v0.2.0 release snapshot. It is a reproducible benchmark reference, not a permanent model ranking: provider behavior, prompts, tool policy, and benchmark contracts can change absolute values.

ExperimentConfiguration
Agentminimal-deepagent
Modeldeepseek-v4-pro, thinking disabled, temperature 0
Benchmark contractnetopsbench-0.2-release
Coverage7 topology scales, 319 operational cases
Validity319 / 319 case-valid and Agent-scored
Traces319 Harbor/ATIF v1.7 trajectories

Results at a glance

Diagnosis score is the mean verdict-gated case score. Healthy cases require the correct verdict; fault cases receive localization credit only after the fault is detected. Fault detection F1 measures the fault-versus-healthy decision independently.

ScaleCasesDiagnosis score (%)Fault detection F1 (%)Device loc. (%)Interface loc. (%)Input tokens (K)Time (s)
XS1475.095.775.057.1174.361.3
Small1583.395.783.357.1221.465.1
Medium2871.485.770.842.9298.479.6
Large5270.284.368.842.9405.784.3
Xlarge7056.481.156.130.0727.897.5
Fat-tree K=87063.680.063.645.0594.7102.9
Fat-tree K=127055.073.156.127.5784.3102.9

Dumbbell chart comparing Diagnosis score and Fault detection F1 across all seven NetOpsBench v0.2 topology scales

Three results define the release snapshot:

  • Healthy precision is stable: all 25 / 25 healthy cases had zero formal Pingmesh anomaly and were diagnosed as healthy.
  • Diagnosis quality falls with topology size. CLOS Diagnosis score decreases from 75.0% on XS to 56.4% on Xlarge; Fat-tree decreases from 63.6% on K=8 to 55.0% on K=12.
  • Device localization is usually strong after the Agent commits to a fault. The main loss is missed detection or non-termination; interface localization remains the weakest quality dimension on the largest topologies.

Where diagnosis breaks down

The following figure separates the evidence available to the Agent from the Agent's verdict and localization. Each point is a case-level micro average across all 319 cases; interface accuracy uses only cases for which the evaluator requires an interface.

Fault-family comparison of formal Pingmesh signals, correct Agent verdicts, correct device localization, and interface localization across 319 cases

Fault familyFormal signalCorrect verdictCorrect deviceCorrect interface
High latency26 / 266 / 264 / 261 / 26
Packet loss25 / 265 / 263 / 260 / 26
Packet corruption22 / 269 / 264 / 260 / 26
MTU mismatch26 / 2615 / 2612 / 2612 / 26
Link down18 / 2625 / 2625 / 2623 / 26
BGP neighbor2 / 2626 / 2626 / 26N/A

This is the central quality finding: data-plane impairment evidence is usually present, but the Agent often fails to convert it into a fault verdict. By contrast, BGP neighbor faults rarely create endpoint Pingmesh anomalies under ECMP, yet the Agent diagnoses them reliably from control-plane telemetry. Pingmesh is therefore evidence, not the only source of truth.

Trace review identifies three recurring failure modes:

  1. The Agent mixes episode-window evidence with recovered live state.
  2. A single successful live ping is used to dismiss historical multi-hash Pingmesh loss.
  3. Transit attribution expands into an undirected device search and sometimes reaches the graph recursion limit.

Large-topology behavior

Xlarge, Fat-tree K=8, and Fat-tree K=12 contributed 210 / 210 valid observations and Agent results. All had complete Pingmesh coverage, successful injection/recovery and cleanup, zero unexplained local probe-error cases, and four clean healthy cases per topology.

TopologySwitchesClientsPathsCasesOperationalAgent-scored
Xlarge CLOS14412816,2567070 / 7070 / 70
Fat-tree K=88012816,2567070 / 7070 / 70
Fat-tree K=1218014420,5927070 / 7070 / 70

Upper-fabric link-down and link-flapping can produce zero or only a few endpoint anomalies when ECMP reconverges before enough full-window probes are lost. The physical fault is still visible in interface and BGP telemetry. Packet corruption is similarly hash-selective because the impairment applies to one selected egress member.

Access faults retain the expected blast radius: an isolated client affects 2 × (client_count - 1) directed paths—254 paths on Xlarge and K=8, and 286 paths on K=12. High-latency and MTU faults remain well separated from healthy observations: Xlarge recorded 12–17 latency paths and 57–97 DF-loss paths, while K=12 recorded 169–242 and 247–302 respectively.

Fat-tree K=12 case-level deep dive

The largest validated Fat-tree profile provides a compact view of every case. Outcome colors are mutually exclusive; “complete” means fully localized for a fault case or correctly healthy for a negative case.

All 70 Fat-tree K=12 cases grouped by fault family and categorized by diagnosis outcome

The K=12 distribution is a representative deep dive, not a substitute for the per-topology aggregates above.

Diagnosis cost

Three-panel chart comparing input tokens, tool calls, and diagnosis time across seven topology scales

Tool calls remain in a narrow range—20.9 to 26.3 per case—while average input context grows from 174K tokens on XS to 784K on K12. Diagnosis time rises from 61.3 seconds to approximately 103 seconds. The primary scaling cost is therefore evidence and topology volume, not an explosion in the number of tool calls.

Reproducibility

SnapshotAgent trajectoriesSelection
XS–Large109Four complete scale runs
Xlarge70Valid results selected by scenario ID from the canonical composite
Fat-tree K=87016 completed initial results plus 54 completed resumed results
Fat-tree K=1270Canonical composite including the validated access-link retry
Total319One scoring sidecar per Agent trajectory

Only infrastructure/API-invalid attempts were replaced. Successful original Agent attempts were not rerun or substituted. Two unfinished K8 orphan traces were excluded because they never completed post-recovery validation.

The machine-readable release snapshot, fault-family analysis snapshot, and K12 case snapshot contain the plotted numerators, denominators, provenance, and archive references. All seven archives and their SHA-256 values are published in the NetOpsBench Trace Dataset v0.2 release.