CN102439905A

CN102439905A - Method, device and system of finding network topology automatically

Info

Publication number: CN102439905A
Application number: CN2011800023421A
Authority: CN
Inventors: 李�浩; 袁学文
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Cloud Computing Technologies Co Ltd
Priority date: 2011-09-30
Filing date: 2011-09-30
Publication date: 2012-05-02
Anticipated expiration: 2031-09-30
Also published as: CN102439905B; WO2012149794A1

Abstract

The invention provides a method, a device and a system of finding a network topology automatically, wherein, ,the method comprises the steps of using a network topology automatic finding terminal agent to obtain the network type of an IP message; if the network type of the IP message is a straight connection network, carrying out a request immediate response detection on a purpose IP address of the IP message to obtain a first detection result; if the network type of the IP message is a route network, carrying out a route detection on the purpose IP address of the IP message to obtain the IP address of a router between a local end and an opposite end; carrying out request immediate response detections on the IP address of the router and the purpose address of the IP message respectively to obtain a second detection result; reporting the first and second detection results to a network topology finding analysis server to making the network topology finding analysis server draw a network topology picture after the network topology finding analysis server receives the first detection result or the second detection result.

Description

Network topology automatic discovering method, Apparatus and system

Technical field

The embodiment of the invention relates to the network management technology field, relates in particular to network topology automatic discovering method, Apparatus and system.

Background technology

The main purpose of discovering network topology be the acquiring and maintaining network node have information and a connection relation information between them, and draw out whole network topological diagram on this basis.The network management personnel can locate malfunctioning node on the basis of network topological diagram fast.

Exist a kind of in the prior art based on Simple Network Management Protocol (SNMP; Simple NetworkManagement Protocol) method that network topology is found automatically; At first obtain the subnet tabulation of existence through the default gateway router; Traversal is specified all vehicular equipments in the subnet then, and goes for group's name of equipment with group of system name storehouse, if find then obtain the essential information of equipment with snmp protocol; And judge the type (for example device type can be router or switch or fire compartment wall or main frame etc.) of equipment, and obtain the details of relevant device on this basis.If do not find group's name of equipment, then giving tacit consent to this equipment is main frame.

Automatically the method for finding based on the network topology of SNMP finds the mode of the routing gateway of acquiescence to be: search the ipRouteTable among the SNMP MIBII of Topology Discovery program place computer; If find that the ipRouteDest value is the record of 0.0.0.0; Then explain Topology Discovery program place computer installation default gateway, the ipRouteNextHop value is the address of default gateway.Check the ipForwarding value of default gateway then,, show that then this default gateway is routing device really, otherwise be not if be 1.

The mode of obtaining the subnet tabulation of existence based on the automatic method of finding of the network topology of SNMP is: all objects in the IP management group of traversal router mib II under the management object ipRouteDest; With each route purpose network number is index, the value of inquiry ipRoute the type field.If this value is 3 to be indicated as direct route,, this value is indirect route if being 4.Indirect route shows will lead to the purpose network or destination host also will pass through other router, and directly route shows with purpose network or destination host and directly links to each other, and so just can obtain the network number that directly links to each other with router.Again according to its route mask (ipRouteMask) of every in network number record queries.According to the route mask of obtaining, just can confirm the IP address range of the network subnet of each existence.

Method based on the network topology of SNMP is found automatically finds that the mode of other routing device is: search that type is the route table items of indirect route in the IP management group routing table of default route gateway MIBII, obtain the next hop address (ipRouteNextHop) of route.The routing device that the traversal next hop address provides just can obtain bigger network topology.

Method based on the network topology of SNMP is found automatically finds that the mode of the annexation of network layer device is: the subnet that comprises under each router of annexation traversal of subnet and router confirms that the relation of main frame and subnet can be confirmed through host ip and subnet mask.

Inventor of the present invention finds to have following defective in the prior art at least in realizing process of the present invention:

1, the method for finding automatically based on the network topology of SNMP has the particular arrangement requirement to router; Router need be supported the SNMP MIB storehouse of table of query and routing item; And require the Topology Discovery program to know the structure of this MIB, exist system's incompatibility, cause this scheme versatility not strong;

2, the method for finding automatically based on the network topology of SNMP need be opened the SNMP query interface, but the router in the network of reality possibly not open, because router is a lot, all opens and possibly be difficult to realize, causes this scheme versatility not strong;

3, the method for finding automatically based on the network topology of SNMP uses SNMP need know the SNMP password of router, and open like this these router passwords are very big to the influence of internet security, have bigger security risk.

Summary of the invention

The embodiment of the invention provides network topology automatic discovering method, Apparatus and system, need particular arrangement be provided to the network equipment, can be applicable to various network device, finds the network topology structure of IP system automatically, highly versatile.

On the one hand, the network topology automatic discovering method that the embodiment of the invention provides comprises:

Network topology finds that automatically proxy module obtains the network type of interconnection agreement IP message between net; Said network type comprises directly-connected network or route network; Said directly-connected network is source IP address and the purpose IP address network in the same network segment of IP message, and said route network is source IP address and the purpose IP address network in the same network segment not of IP message;

If the network type of said IP message is a directly-connected network, said network topology finds that automatically proxy module asks immediate answer to be surveyed to the purpose IP address of said IP message, obtains first result of detection;

If the network type of said IP message is a route network, said network topology finds that automatically proxy module carries out route exploration to the purpose IP address of said IP message, to get access to the IP address of the router between local terminal and the opposite end;

Said network topology finds that automatically proxy module asks immediate answer to be surveyed to the purpose IP address of the IP address of said router, said IP message respectively, obtains second result of detection;

Said network topology finds that automatically proxy module reports said first result of detection or said second result of detection to the discovering network topology Analysis server; So that said discovering network topology Analysis server is drawn network topological diagram after receiving said first result of detection or said second result of detection, said network topological diagram comprises the interconnect information between each network element device in the network.

On the other hand, the network topology automatic discovering method that the embodiment of the invention provides comprises:

The discovering network topology Analysis server receives each network topology and finds first result of detection or second result of detection that proxy module reports respectively automatically; Said first result of detection is that network topology finds that automatically the network type of interconnection agreement IP message between net that proxy module obtains is that directly-connected network, network topology find that automatically proxy module asks immediate answer to be surveyed to the purpose IP address of said IP message and obtain, and said second result of detection is that network topology finds that automatically the network type of the IP message that proxy module obtains is that route network, network topology find that automatically proxy module asks immediate answer to be surveyed to the IP address of the purpose IP address of said IP message and router and obtain;

Said discovering network topology Analysis server finds automatically that to each network topology first result of detection or second result of detection that proxy module reports respectively analyze; Draw out network topological diagram, said network topological diagram comprises the interconnect information between each network element device in the network.

On the one hand, the network topology that the embodiment of the invention provides is found proxy module automatically, comprising:

Acquiring unit; Be used to obtain the network type of interconnection agreement IP message between net; Said network type comprises directly-connected network or route network; Said directly-connected network is source IP address and the purpose IP address network in the same network segment of IP message, and said route network is source IP address and the purpose IP address network in the same network segment not of IP message;

First probe unit is used for asking immediate answer to be surveyed if the network type of said IP message is a directly-connected network to the purpose IP address of said IP message, obtains first result of detection;

Second probe unit is used for route exploration being carried out in the purpose IP address of said IP message, to get access to the IP address of the router between local terminal and the opposite end if the network type of said IP message is a route network;

The 3rd probe unit is used for asking immediate answer to be surveyed to the purpose IP address of the IP address of said router, said IP message respectively, obtains second result of detection;

Report the unit; Be used for reporting said first result of detection or said second result of detection to the discovering network topology Analysis server; So that said discovering network topology Analysis server is drawn network topological diagram after receiving said first result of detection or said second result of detection, said network topological diagram comprises the interconnect information between each network element device in the network.

On the other hand, the discovering network topology Analysis server that the embodiment of the invention provides comprises:

Receiving element; Be used to receive first result of detection or second result of detection that each network topology finds that automatically proxy module reports respectively; Said first result of detection is that network topology finds that automatically the network type of interconnection agreement IP message between net that proxy module obtains is that directly-connected network, network topology find that automatically proxy module asks immediate answer to be surveyed to the purpose IP address of said IP message and obtain, and said second result of detection is that network topology finds that automatically the network type of the IP message that proxy module obtains is that route network, network topology find that automatically proxy module asks immediate answer to be surveyed to the IP address of the purpose IP address of said IP message and router and obtain;

The drawing unit is used for each network topology is found that automatically first result of detection or second result of detection that proxy module reports respectively analyze that draw out network topological diagram, said network topological diagram comprises the interconnect information between each network element device in the network.

Can find out that from above technical scheme the embodiment of the invention has the following advantages:

In the embodiment of the invention; Network topology is found proxy module utilization request immediate answer detection and route exploration automatically; Obtain first result of detection or second result of detection, and report, draw out network topological diagram by the discovering network topology Analysis server to the discovering network topology Analysis server.Realized the automatic discovery of network topology through the technology of request immediate answer detection and route exploration, it does not need the special requirement of providing of the network equipment, finds the network topology structure of IP system automatically, and its highly versatile can effectively be implemented.

Description of drawings

Fig. 1 is embodiment sketch map of network topology automatic discovering method of the present invention;

Fig. 2 sends the sketch map of message for two nodes of network topology automatic discovering method of the present invention;

Fig. 3 is application scenarios sketch map of network topology automatic discovering method of the present invention;

Fig. 4 is another embodiment sketch map of network topology automatic discovering method of the present invention;

The network topological diagram that Fig. 5 draws out for network topology automatic discovering method of the present invention;

Another network topological diagram that Fig. 6 draws out for network topology automatic discovering method of the present invention;

Another network topological diagram that Fig. 7 draws out for network topology automatic discovering method of the present invention;

Fig. 8 finds embodiment sketch map of proxy module automatically for network topology of the present invention;

Fig. 9 is embodiment sketch map of discovering network topology Analysis server of the present invention;

Figure 10 finds embodiment sketch map of system automatically for network topology of the present invention.

Embodiment

For make goal of the invention of the present invention, characteristic, advantage can be more obvious and understandable; To combine the accompanying drawing in the embodiment of the invention below; Technical scheme in the embodiment of the invention is carried out clear, intactly description; Obviously, the embodiments described below only are the present invention's part embodiment, but not whole embodiment.Based on the embodiment among the present invention, the every other embodiment that those skilled in the art obtained belongs to the scope that the present invention protects.

Embodiment of network topology automatic discovering method of the present invention; Network topology among this embodiment finds that automatically proxy module is deployed on the monitoring server; Discovering network topology Analysis server of NMS (NMS, ElementManagement System) server deploy.See also Fig. 1, network topology automatic discovering method of the present invention comprises:

101, network topology finds that automatically proxy module obtains the network type of interconnection agreement IP message between net.

Wherein, The network type of IP message comprises directly-connected network or route network; Directly-connected network is source IP address and the purpose IP address network in the same network segment of IP message, and route network is source IP address and the purpose IP address network in the same network segment not of IP message.

In embodiments of the present invention; Network topology finds that automatically proxy module is deployed on the monitoring server; Interconnection agreement (IP between net is arranged on the interface filtration system of operating system; Internet Protocol) message gets into and flows out, and network topology finds that automatically proxy module can obtain interconnection agreement IP message between net from the interface filtration system of operating system.

In embodiments of the present invention, network topology finds that automatically the network type of the IP message in the interface filtration system of proxy module decision operation system is directly-connected network or route network, specifically can comprise:

A1, network topology find that automatically proxy module obtains the purpose IP address and the source IP address of IP message.

A2, network topology are found the IP address of proxy module according to local terminal automatically, get access to the corresponding mask in IP address of local terminal.

A3, network topology find that automatically proxy module carries out position and computing with purpose IP address, source IP address respectively with mask; The position and the operation result that compare both; If both positions are identical with operation result; Then the network type of IP message is a directly-connected network, otherwise the network type of IP message is a route network.

In embodiments of the present invention, network topology is found proxy module automatically according to purpose IP address and source IP address, judges that the network type of IP message is directly-connected network or route network, judges that this IP message is in a network segment, to transmit, or the transmission of inter-network section.In embodiments of the present invention, the same network segment be labeled as directly-connected network, different segment is a route network, route network is source IP address and the purpose IP address network in the same network segment not of IP message.

For example, the purpose IP address in the IP message that receives is 120.17.233.1, and source IP address is 120.17.233.2; The IP address of query manipulation system can obtain the corresponding mask in this IP address; Suppose that mask is 255.255.255.0, like this purpose IP and mask being carried out position and computing, to obtain destination network segment be 120.17.233.0, same; Source IP address 120.17.233.2 and mask are carried out position and computing, and to obtain the source network segment be 120.17.233.0; The reference source network segment and destination network segment find that both are identical, are direct-connected networkings for the network type of this IP message so then.The purpose IP address of the IP message that and for example receives is 120.17.233.1; Source IP address is 240.12.56.71, and in like manner obtaining destination network segment is 120.17.233.0, but the source network segment is 240.12.56.0; Both are unequal, think that then the network type of this IP message is a route network.

Need to prove; In embodiments of the present invention; Network topology finds that automatically proxy module also comprises after from the interface filtration system of operating system, obtaining the IP message: network topology is found the port numbers of proxy module according to the IP message automatically, obtains the protocol type of IP message; Network topology finds that automatically proxy module reports the protocol type of IP message to the discovering network topology Analysis server.

Need to prove; Network topology is found the port numbers of proxy module according to the IP message automatically; The protocol type that obtains the IP message can also comprise afterwards: network topology is found the difference of proxy module according to protocol type automatically; Statistic of classification is the message data flow under each agreement in the time period of presetting; Report to the discovering network topology Analysis server then, will in the time period of presetting, the message data flow information of each agreement be plotted on the network topological diagram by the discovering network topology Analysis server.

For example; Network topology finds that automatically proxy module can add up in the regular hour section, and each IP message of the interface filtration system turnover of operating system is all carried out traffic statistics, after getting access to each protocol type, can carry out the statistic of classification of flow; In time period like a setting; Message data flow under the http protocol is 27M, and the message data flow under the DNS Protocol is 6M, and the message data flow under the SSH agreement is 8M etc.; Statistics reports to the discovering network topology Analysis server after accomplishing.

In practical application, application layer protocol can judge that usually, port all has has clearly stipulated employed application layer protocol through port numbers, and for example, well known port and protocol type are in the network:

HTTP (the Chinese full name of HTTP is a HTTP, and English full name is HyperTextTransfer Protocol): port is 80.

DHCP (the Chinese full name of DHCP is that DynamicHost is provided with agreement, and English full name is Dynamic HostConfiguration Protocol): port is 67, is the Dynamic Host Configuration Protocol server end.

DHCP: port is 68, is the DHCP client-side.

POP3 (the Chinese full name of POP3 is a Post Office Protocol,Version 3, and English full name is Post OfficeProtocol-Version 3): port is 110.

SMTP (the Chinese full name of SMTP is a Simple Mail Transfer protocol, and English full name is Simple MailTransfer Protocol): port is 25.

Telnet (the Chinese full name of Telnet is the communication network agreement, and English full name is TelecommunicationNetwork Protocol): port is 23.

The port that FTP (the Chinese full name of FTP is a FTP, and English full name is File TransferProtocol): FTP uses has 20 and 21.20 ports are used for transfer of data, and 21 ports are used to control the transmission of signaling.

TFTP (the Chinese full name of TFTP is a TFTP, and English full name is Trivial FileTransfer Protocol): port is 69.

DNS (the Chinese full name of DNS is a domain name system, and English full name is Domain Name System): port is 53.

NetBIOS (the Chinese full name of NetBIOS is a NetBIOS, and English full name is Network Basic Input Output System): port is 137,138,139.

NNTP (the Chinese full name of NNTP is a NNTP, and English full name is NetworkNews Transport Protocol): port is 119.

SNMP (the Chinese full name of SNMP is a Simple Network Management Protocol, and English full name is SimpleNetwork Management Protocol): port is 161.

RPC (the Chinese full name of RPC is a remote procedure call protocol, and English full name is RemoteProcedure Call Protocol): port is 135.

QQ: using port is 8000 and 4000, and wherein service end is 8000, and client is 4000.

The Bootstrap Protocol Server (boot protocol service end) and the Bootstrap Protocol Client (bootstrap protocol client) of Bootp service, port is 67,68.

Finger: port is 79.

The service of Metagram Relay (metagame time-delay): port is 99.

POP2 (the post office protocol version 2, Post Office Protocol Version2): port is 109.

RPC (Chinese full name is a remote procedure call, and English full name is Remote Procedure Call): port is 111.

Authentication Service (service for checking credentials): port is 113.

IMAP (Chinese full name is an internet message access protocol, and English full name is Internet MessageAccess Protocol): port is 143.

HTTPS (Chinese full name is a Secure Hypertext Transfer Protocol, and English full name is Hypertext TransferProtocol over Secure Socket Layer): port is 443.

RTSP (Chinese full name is a real-time streaming protocol, and English full name is Real Time StreamingProtocol): port is 554.

Reserved (reservation): port is 1024.

The Socks agency service: port is 1080.

MMS (Chinese full name is a Microsoft Media Server, and English full name is Microsoft Media Server): port is 1755.

The remote desktop service: port is 3389 ports.

More than for example corresponding relation between the port and protocol type has been described just, in practical application, has also been had other port and corresponding protocols type separately, here only as the usefulness of explanation, as qualification.

Need to prove that in embodiments of the present invention, network topology finds that automatically proxy module gets access to after the purpose IP address of IP message, network type, the protocol type, can make like following table 1, is used to describe the association attributes of each IP message.

Table 1 finds automatically that for network topology proxy module is to the relation table between the destination address of IP message, network type, the protocol type:

Purpose IP address	Network type	Protocol type
			120.17.233.2	Directly-connected network	DNS，HTTP
120.17.233.5	Directly-connected network	NTP
			120.17.233.89	Directly-connected network	FTP，HTTP
240.12.56.71	Route network	HTTP
			81.23.211.90	Route network	SSH

102, if the network type of IP message is a directly-connected network, network topology finds that automatically proxy module asks immediate answer to be surveyed to the purpose IP address of IP message, obtains first result of detection.

In embodiments of the present invention; Network type by the IP message that gets access to of step 101 can be known; If the network type of IP message is a directly-connected network; Then network topology find proxy module automatically IP and purpose IP at consolidated network, network topology finds that automatically proxy module asks immediate answer to be surveyed to purpose IP address, obtains first result of detection.

In practical application, network topology finds that automatically proxy module specifically can carry out ICMP to purpose IP address and respond request (ICMP Ping) detection, obtains first result of detection.Wherein, first result of detection specifically can for: respond (ICMPReply) message if receive ICMP, then the network between local terminal and the opposite end connects normally, and showing has direct-connected topological line between local terminal and the opposite end; If do not receive ICMP Reply message, then the network between local terminal and the opposite end is connected with variation, need refresh the topology.

Need to prove that network topology finds that automatically it can be the cycle that proxy module carries out ICMP Ping to purpose IP address, its detect cycle can be according to the requirement setting of the service quality (QoS, Qualityof Service) of link in the network topology.

Need to prove that in embodiments of the present invention, network topology finds that automatically proxy module asks immediate answer also to comprise after surveying to the purpose IP address of IP message:

Network topology is found proxy module statistics request immediate answer message number of in the detect cycle that presets, sending and the response message number that receives the opposite end feedback automatically.

Network topology is found the response message number of proxy module according to request immediate answer message number and opposite end feedback automatically, obtains the packet loss between local terminal and the opposite end.

Network topology finds that automatically proxy module reports packet loss to the discovering network topology Analysis server.

For example, after step 102 network topology finds that automatically proxy module carries out the ICMPPing detection to purpose IP address, can also comprise:

Network topology is found proxy module statistics transmission ICMP Ping message number and reception ICMP Reply message number in the detect cycle that presets automatically;

Network topology finds that automatically proxy module multiply by 100% with ICMP Reply number message divided by ICMP Ping message number, obtains the packet loss between local terminal and the opposite end.

Network topology finds that automatically proxy module reports said packet loss to the discovering network topology Analysis server.

For example, each opposite end is surveyed repeatedly, as 20 times, if all receive response message, then packet loss is 0%, if there are 2 to abandon, then packet loss is 10%.

Network topology finds that automatically proxy module obtains local terminal and sends the time of request immediate answer message and the time that local terminal receives the response message of opposite end feedback.

Network topology finds that automatically proxy module deducts the time that local terminal sends request immediate answer message with the time that local terminal receives the response message of opposite end feedback, obtains the message round trip delay time.

Network topology finds that automatically proxy module reports the message round trip delay time to the discovering network topology Analysis server.

For example, after network topology finds that automatically proxy module carries out ICMP Ping detection to purpose IP address, can also comprise:

Network topology finds that automatically proxy module obtains local terminal and sends the time of ICMP Ping message and the time that local terminal receives the ICMP Reply message of opposite end feedback.

Network topology finds that automatically proxy module deducts the time that local terminal sends ICMP Ping message with the time that local terminal receives the ICMP Reply message of opposite end feedback, obtains the message round trip delay time.

For example, as shown in Figure 2, the time that node A sends ICMP Ping message for the first time to Node B is T1, and the time that node A receives the ICMP Reply message of Node B feedback is T3, then message round trip delay time (RTD, Round-Trip Delay) RTD1=T3 T1.When sending for the first time the time of record be 10: 22 323 milliseconds, the time that receives when replying be 10: 22 327 milliseconds, then 327 milliseconds of round-trip delay=10 o'clock 22 minutes 10: 22 are 323 milliseconds=5 milliseconds.

Need to prove that network topology finds that automatically proxy module obtains also comprising after the message round trip delay time:

Network topology finds that automatically proxy module calculates the message delay that last time sends request immediate answer message respectively and sends the message delay of request immediate answer message with this.

Network topology finds that automatically proxy module deducts the message delay that last time sends request immediate answer message with the message delay that this sends request immediate answer message, obtains the network jitter between local terminal and the opposite end.

Network topology finds that automatically proxy module shakes to discovering network topology Analysis server report network.

For example, network topology finds that automatically proxy module obtains also comprising after the message round trip delay time:

Network topology finds that automatically proxy module calculates the message delay that last time sent ICMP Ping message respectively and sends the message delay of ICMP Ping message with this.

Network topology finds that automatically proxy module deducts the message delay that last time sends ICMP Ping message with the message delay that this sends ICMP Ping message, obtains the network jitter between local terminal and the opposite end.

For example; As shown in Figure 2; The time that node A sends ICMP Ping message for the first time to Node B is T1; The time that node A receives the ICMP Reply message of Node B feedback is T3, and the time that node A sends ICMP Ping message for the second time to Node B is T4, and the time that node A receives the ICMP Reply message of Node B feedback is T6.The message delay that then sends for the first time message is T3 T1, and the message delay that sends message for the second time is T6 T4.Then network jitter=(T6 T4) (T3 T1).The time of for example sending for the first time the ICMP request be 10: 22 323 milliseconds, receive reply be 10: 22 327 milliseconds, then time delay is 5 milliseconds for the first time.The time of sending for the second time the ICMP request be 10: 22 330 milliseconds, receive reply be 10: 22 338 milliseconds, then time delay is 8 milliseconds for the second time.Then network jitter is 8 milliseconds 5 milliseconds=3 milliseconds.

103, if the network type of IP message is a route network, network topology finds that automatically proxy module carries out route exploration to the purpose IP address of IP message, to get access to the IP address of the router between local terminal and the opposite end.

In embodiments of the present invention; Get access to by step 101 after the network type of IP message; If the network type of IP message is a route network; Then network topology find proxy module automatically IP and purpose IP not at consolidated network, network topology finds that automatically proxy module carries out route exploration to purpose IP address and specifically can find that automatically proxy module carries out traceroute (TraceRoute) to purpose IP address and surveys for network topology, to get access to the IP address of the router between local terminal and the opposite end.

The implementation of using TraceRoute is: network topology finds that automatically proxy module at first sends a life span (TTL to destination host; Time To Live) is 1 IP packet, jumps routing device when first on the path and TTL is subtracted 1 when receiving this packet, and check whether the TTL of this packet is 0; If be 0; Then find automatically that with data packet discarding and to network topology proxy module sends it back an ICMP error message,, then continue to transmit this packet if be not 0.Because this moment, the TTL of packet became 0; Therefore this first jumping routing device can be with data packet discarding; And send it back an ICMP error message and can not be sent out because TTL is overtime to indicate this packet, wherein the ICMP error message is to send through the overtime error message of ICMP.Network topology finds that automatically it is 2 IP packet that proxy module resends a TTL afterwards, and same second jumps routing device receives that will return one behind the packet indicates the overtime and ICMP error message that can not be sent out of TTL.This process is constantly carried out, till arriving destination host.The purpose of carrying out these processes is the source address of the overtime error message of each ICMP of record, arrives the path that destination host was experienced so that an IP packet to be provided.When receiving the ICMP response message of destination host response at last; The network of explanation from the source host to the destination host is communicated with; And according to the overtime error message source address of the ICMP of above-mentioned record; Can know and cross over which gateway device between source, destination host, get access to the IP address of the router between local terminal and the opposite end.

104, network topology finds that automatically proxy module asks immediate answer to be surveyed to the purpose IP address of the IP address of router, IP message, obtains second result of detection.

In embodiments of the present invention; Obtain in the step 103 after the IP address of the whole routers between the local terminal and opposite end under the situation that network is connected to route network; Network topology finds that automatically proxy module asks immediate answer to be surveyed to the IP address of the IP address of each router and opposite end, obtains second result of detection.

Wherein, Network topology finds that automatically proxy module carries out ICMP Ping detection to the IP address of router, the purpose IP address of IP message; Second result of detection specifically can for: if receive the ICMP Reply message of router feedback; Then the network between local terminal and this router connects normally, if do not receive the ICMP Reply message of router feedback, then the network between local terminal and this router is connected with variation; If receive the ICMP Reply message of opposite end feedback, then the network between local terminal and the opposite end connects normally, if do not receive the ICMP Reply message of opposite end feedback, then the network between local terminal and the opposite end is connected with variation.

For example, through step 103, the IP address that has obtained router is respectively R1:210.9.34.1, R2:32.223.43.1, R3:76.52.31.4, opposite end main frame Host:100.4.1.43.Then network topology finds that automatically proxy module begins each router and opposite end main frame are carried out ICMP Ping detection, obtains second result of detection.

In order to specify the implementation procedure of step 102 to step 104; See also interaction diagrams shown in Figure 3, finding to be connected with altogether between proxy module and the opposite end main frame two router devices (being specially router-A and router B) automatically with network topology is that example describes.

301, if network type is a directly-connected network, network topology finds that automatically proxy module carries out ICMP Ping to the local terminal main frame and surveys, and receives the ICMP Reply message that the local terminal main frame returns.

302, if network type is a route network; Network topology finds that automatically proxy module carries out TraceRoute to the opposite end main frame and surveys; Get access to network topology and find automatically to be connected with two routers between proxy module and the opposite end main frame, be respectively router-A and router B.

303, network topology finds that automatically proxy module carries out ICMP Ping to router-A and surveys, and receives the ICMP Reply message that router-A returns.

304, network topology finds that automatically proxy module carries out ICMP Ping to router B and surveys, and receives the ICMP Reply message that router B returns.

305, network topology finds that automatically proxy module carries out ICMP Ping to the opposite end main frame and surveys, and receives the ICMP Reply message that the opposite end main frame returns.

Need to prove; In Fig. 3, finding to be connected with altogether between proxy module and the opposite end main frame two router devices automatically with network topology is that example describes; In practical application; The number of the concrete router device that connects can be surveyed by TraceRoute and obtain, and for illustrative purposes only, does not do qualification here.

Need to prove; First result of detection of in the step 102 of the embodiment of the invention, describing is a kind of result of detection in fact; Second result of detection of describing in the subsequent step 104 in addition also is a kind of result of detection; In step 102 why called after first result of detection just for subsequent step 104 in second result of detection that occurs distinguish mutually; Its " first " and " second " do not have on the sequential or any relation in logic; When first result of detection occurring is not second result of detection to occur, when second result of detection occurring, first result of detection neither occur certainly, only in order to represent it is respectively two different result of detections.Certainly in order to distinguish the naming method that the result of detection that occurs respectively in step 102 and the step 104 can also adopt other; As long as can represent this result of detection is two different result of detections; For example, can distinguish called after result of detection a and result of detection b etc.

105, network topology finds that automatically proxy module reports first result of detection or second result of detection to the discovering network topology Analysis server, so that the discovering network topology Analysis server is drawn network topological diagram after receiving first result of detection or second result of detection.

Wherein, network topological diagram comprises the interconnect information between each network element device in the network.

In embodiments of the present invention; After network topology finds that automatically proxy module obtains first result of detection or second result of detection; Report to the discovering network topology Analysis server, so that the discovering network topology Analysis server is drawn network topological diagram after receiving first result of detection or second result of detection.

Next, see also shown in Figure 4ly, the network topology automatic discovering method that the embodiment of the invention provides comprises:

401, the discovering network topology Analysis server receives each network topology and finds first result of detection or second result of detection that proxy module reports respectively automatically.

Wherein, first result of detection is that network topology finds that automatically the network type of interconnection agreement IP message between net that proxy module obtains is that directly-connected network, network topology find that automatically proxy module asks immediate answer to be surveyed to the purpose IP address of IP message and obtain.Second result of detection is that network topology finds that automatically the network type of the IP message that proxy module obtains is that route network, network topology find that automatically proxy module asks immediate answer to be surveyed to the IP address of the purpose IP address of IP message and router and obtain.

In embodiments of the present invention; The discovering network topology Analysis server receives each network topology and finds first result of detection separately or second result of detection that proxy module reports respectively automatically; Wherein network topology finds that automatically proxy module obtains first result of detection or second result of detection sees also embodiment shown in Figure 1, repeats no more here.

402, the discovering network topology Analysis server to each network topology find automatically proxy module report respectively first result of detection or second result of detection analyze, draw out network topological diagram.

In embodiments of the present invention; Be deployed in discovering network topology Analysis server on the NMS server after receiving first result of detection or second result of detection that each network topology finds that automatically proxy module reports; Each network topology is found that automatically first result of detection or second result of detection that proxy module reports analyze, draw out network topological diagram.If each network topology is found first result of detection or second result of detection that proxy module reports and has redundancy that then the discovering network topology Analysis server is deleted redundant result of detection, draws out network topological diagram automatically.

For example: the discovering network topology Analysis server is collected local host Host1 and to the path of destination host Host2 is: Host1:102.11.21.33, Route1:102.11.21.1, Route2:12.3.41.76, destination host Host2:32.4.34.56.Local host Host1 to the path of destination host 2 is: Host1:102.11.21.33, Route1:102.11.21.1, Route3:56.53.2.1, Host3:78.6.42.5.The node data that data between its 2 of the analysis-by-synthesis, deletion are wherein redundant, as: local host Host1 draws out the whole network topological diagram to the duplicate paths of router Route1:102.11.21.1, and is as shown in Figure 5.

Need to prove, before step 402, can also further comprise:

The discovering network topology Analysis server receives the protocol type that each network topology is found the IP message that proxy module reports automatically.

The discovering network topology Analysis server receives network topology and finds that automatically after the protocol type of the IP message that proxy module reports, the discovering network topology Analysis server is drawn out network topological diagram respectively according to each different protocol type.

For example; In the table 1 that provides according to the embodiment of the invention; The corresponding relation that each purpose IP address and protocol type are arranged; Then the discovering network topology Analysis server protocol type that can appear according to user's selection needs and draw out network topological diagram separately need present the network topology that agreement is HTTP like the user, and then the discovering network topology Analysis server network topological diagram that when drawing network topological diagram, only need draw HTTP gets final product.

Need to prove, in embodiments of the present invention, after each network topology of discovering network topology Analysis server reception is found the protocol type of the IP message that proxy module reports automatically, can also comprise:

The discovering network topology Analysis server receives each network topology and finds the message data flow under each protocol type in the time period of presetting that proxy module reports automatically.

The discovering network topology Analysis server receives network topology and finds automatically after the protocol type of the IP message that proxy module reports; The discovering network topology Analysis server is plotted in the message data flow under each protocol type in the time period of presetting on the network topological diagram respectively according to each different protocol type.

Also add up during discovering network topology Analysis server statistics, can demonstrate the corresponding topological diagram of agreement, management that can more become more meticulous and monitor network on the superincumbent agreement topological diagram like this according to its application layer protocol type.

Need to prove, before step 402, can also further comprise the steps at least one step among S1, step S2, the step S3:

S1, discovering network topology Analysis server receive each network topology and find the packet loss that proxy module reports automatically.

S2, discovering network topology Analysis server receive each network topology and find the message round trip delay time that proxy module reports automatically.

S3, discovering network topology Analysis server receive each network topology and find the network jitter that proxy module reports automatically.

The discovering network topology Analysis server is drawn out network topological diagram and is specially: at least one in the packet loss that the discovering network topology Analysis server will receive through at least one step among step S1, step S2, the step S3, message round trip delay time, the network jitter is plotted on the network topological diagram.Its implication is: if the discovering network topology Analysis server has been carried out step S1, then the discovering network topology Analysis server is plotted in the packet loss that receives among the step S1 on the network diagram.If the discovering network topology Analysis server has been carried out step S2, then the discovering network topology Analysis server is plotted in the message round trip delay time that receives among the step S2 on the network diagram.If the discovering network topology Analysis server has been carried out step S3, then the discovering network topology Analysis server is plotted in the network jitter that receives among the step S3 on the network diagram.If it is S1 and S2 that the discovering network topology Analysis server has been carried out step, then the discovering network topology Analysis server is plotted in packet loss that receives and message round-trip delay on the network diagram.If it is S1 and S3 that the discovering network topology Analysis server has been carried out step, then the discovering network topology Analysis server is plotted in packet loss that receives and network jitter on the network diagram.If to have carried out step be S2 and S3 to the discovering network topology Analysis server, when then the discovering network topology Analysis server comes and goes the message that receives and network jitter prolong and be plotted on the network diagram.If to have carried out step be S1, S2 and S3 to the discovering network topology Analysis server, then the discovering network topology Analysis server with the packet loss that receives, when message comes and goes and network jitter prolong and be plotted on the network diagram.

For example; In 5 minutes time period of a setting; The discovering network topology Analysis server receives after the result of detection that Host1, Host2, Host3, Host4, Host5, Route report separately, can draw out network topological diagram, and can draw network topological diagram respectively according to different protocol; As shown in Figure 6; In 5 minutes time period of a setting, the message data flow that http protocol produces altogether is 6M, and then the bandwidth average of the http protocol in 5 minutes time period is 6 * 8 ÷ 300Mbps=0.16Mbps.Message delay between Host1 and the Host2 is 10ms, and packet loss is 1%.Message delay between Host2 and the Host3 is 5ms, and packet loss is 1%.Message delay between Host2 and the Route is 2ms, and packet loss is 0%.Message delay between Host4 and the Route is 1ms, and packet loss is 1%.Message delay between Host5 and the Route is 1ms, and packet loss is 1%.With the application layer protocol is that HTTP is that example describes, and can draw out the network topological diagram that uses http protocol separately.In the figure, the information such as packet loss that proxy module reports, time delay, bandwidth average of finding automatically through the network topology on each node can be embodied in the network topological diagram, with the management that realizes more becoming more meticulous with to the monitoring of network.

Again for example; In 10 minutes time period of a setting; The discovering network topology Analysis server receives after the result of detection that Host1, Host2, Host3, Route report separately, can draw out network topological diagram, and can draw network topological diagram respectively according to different protocol; As shown in Figure 7; In 10 minutes time period of a setting, the message data flow that File Transfer Protocol produces altogether is 25M, and then the bandwidth average of the File Transfer Protocol in 10 minutes time period is 25 * 8 ÷ 600Mbps=0.33Mbps.Message delay between Host1 and the Host2 is 30ms, and packet loss is 3%.Message delay between Host2 and the Route is 10ms, and packet loss is 1%.Message delay between Host3 and the Route is 1ms, and packet loss is 1%.With the application layer protocol is that FTP is that example describes, and can draw out the network topological diagram that uses File Transfer Protocol separately.In the figure, the information such as packet loss that proxy module reports, time delay, bandwidth average of finding automatically through the network topology on each node can be embodied in the network topological diagram, with the management that realizes more becoming more meticulous with to the monitoring of network.

Above embodiment has introduced the network topology automatic discovering method that the embodiment of the invention provides, and next sees also shown in Figure 8ly, and the network topology that the embodiment of the invention provides is found proxy module 800 automatically, comprising:

Acquiring unit 801; Be used to obtain the network type of IP message; Network type comprises directly-connected network or route network; Directly-connected network is source IP address and the purpose IP address network in the same network segment of IP message, and route network is source IP address and the purpose IP address network in the same network segment not of IP message.

First probe unit 802 is used for asking immediate answer to be surveyed if the network type of IP message is a directly-connected network to the purpose IP address of IP message, obtains first result of detection.

Second probe unit 803 is used for route exploration being carried out in the purpose IP address of IP message, to get access to the IP address of the router between local terminal and the opposite end if the network type of IP message is a route network.

The 3rd probe unit 804 is used for asking immediate answer to be surveyed to the IP address of router, the purpose IP address of IP message respectively, obtains second result of detection.

Report unit 805; Be used for reporting first result of detection or second result of detection to the discovering network topology Analysis server; So that the discovering network topology Analysis server is drawn network topological diagram after receiving first result of detection or second result of detection, network topological diagram comprises the interconnect information between each network element device in the network.

Need to prove that in practical application, for acquiring unit 801, a kind of attainable mode is that acquiring unit 801 specifically is used to obtain the purpose IP address and the source IP address of IP message; According to the IP address of local terminal, get access to the corresponding mask in IP address of local terminal; Mask is carried out position and computing with purpose IP address, source IP address respectively, compare both position and operation results, if both positions are identical with operation result, then the network type of IP message is a directly-connected network, otherwise the network type of IP message is a route network.

Need to prove, in practical application, for acquiring unit 801 with report for the unit 805, a kind of attainable mode is that acquiring unit 801 also is used for the port numbers according to the IP message, obtains the protocol type of IP message.

Report unit 805, also be used for reporting the protocol type of IP message to the discovering network topology Analysis server.

Need to prove, in practical application, for acquiring unit 801 with report for the unit 805; Another kind of attainable mode is; Acquiring unit 801 also is used for the difference according to protocol type, and statistic of classification is the message data flow under each agreement in the time period of presetting.

Report unit 805, also be used for reporting the message data flow under each agreement in the time period of presetting to the discovering network topology Analysis server.

Need to prove; In practical application; For acquiring unit 801 with report for the unit 805, another kind of attainable mode is that acquiring unit 801 also is used to add up request immediate answer message number of in the detect cycle that presets, sending and the response message number that receives the opposite end feedback; According to the response message number of request immediate answer message number and opposite end feedback, obtain the packet loss between local terminal and the opposite end.

Report unit 805, also be used for reporting packet loss to the discovering network topology Analysis server.

Need to prove; In practical application; For acquiring unit 801 with report for the unit 805, another kind of attainable mode is, acquiring unit 801 also is used to obtain the time that time that local terminal sends request immediate answer message and local terminal receive the response message that feeds back the opposite end; The time that local terminal is received the response message of opposite end feedback deducts the time that local terminal sends request immediate answer message, obtains the message round trip delay time.

Report unit 805, also be used for reporting the message round trip delay time to the discovering network topology Analysis server.

Need to prove; In practical application; For acquiring unit 801 with report for the unit 805; Another kind of attainable mode is that acquiring unit 801 also is used for calculating respectively the message delay that last time sends request immediate answer message and sends the message delay of request immediate answer message with this; This message delay that sends request immediate answer message is deducted the message delay that last time sends request immediate answer message, obtain the network jitter between local terminal and the opposite end.

Report unit 805, also be used for shaking to discovering network topology Analysis server report network.

Need to prove; Contents such as the information interaction between each module/unit of said apparatus, implementation; Since with the inventive method embodiment based on same design; Its technique effect that brings is identical with the inventive method embodiment, and particular content can repeat no more referring to the narration among the present invention method embodiment as shown in Figure 1 here.

Next introduce the discovering network topology Analysis server that the embodiment of the invention provides, see also shown in Figure 9ly, discovering network topology Analysis server 900 comprises:

Receiving element 901 is used to receive first result of detection or second result of detection that each network topology finds that automatically proxy module reports respectively.First result of detection is that network topology finds that automatically the network type of interconnection agreement IP message between net that proxy module obtains is that directly-connected network, network topology find that automatically proxy module carries out ICMP to the purpose IP address of IP message and responds request request immediate answer and survey and obtain.Second result of detection is that network topology finds that automatically the network type of the IP message that proxy module obtains is that route network, network topology find that automatically proxy module asks immediate answer to be surveyed to the IP address of the purpose IP address of IP message and router and obtain, and network topological diagram comprises the interconnect information between each network element device in the network.

Drawing unit 902 is used for each network topology is found that automatically first result of detection that reports respectively or second result of detection of proxy module analyze that draw out network topological diagram, network topological diagram comprises the interconnect information between each network element device in the network.

Need to prove that in practical application, for receiving element 901 and drawing unit 902, a kind of attainable mode is that receiving element 901 also is used to receive the protocol type that each network topology is found the IP message that proxy module reports automatically.

Drawing unit 902 specifically is used for drawing out network topological diagram respectively according to each different protocol type.

Need to prove; In practical application; For receiving element 901 and drawing unit 902; Another kind of attainable mode is that receiving element 901 also is used to receive the message data flow under each protocol type in the time period of presetting that each network topology finds that automatically proxy module reports.

Drawing unit 902 specifically is used for according to each different protocol type the message data flow under each protocol type in the time period of presetting being plotted on the network topological diagram respectively.

Need to prove; In practical application; For receiving element 901 and drawing unit 902, another kind of attainable mode is, receiving element also is used for receiving at least one of packet loss that each network topology finds that automatically proxy module reports, message round trip delay time, network jitter.

Drawing unit 902, at least one of the packet loss that specifically is used for receiving element 901 is received, message round trip delay time, network jitter is plotted in network topological diagram.

Need to prove; Contents such as the information interaction between each module/unit of said apparatus, implementation; Since with the inventive method embodiment based on same design; Its technique effect that brings is identical with the inventive method embodiment, and particular content can repeat no more referring to the narration among the present invention method embodiment as shown in Figure 4 here.

The network topology that above embodiment has introduced the embodiment of the invention to be provided is found proxy module and discovering network topology Analysis server automatically, next, sees also Figure 10, and the network topology that the embodiment of the invention provides is found system 1000 automatically, comprising:

Network topology is found proxy module 1001 and discovering network topology Analysis server 1002 automatically.

Wherein, it is as shown in Figure 8 that network topology finds that automatically proxy module 1001 implementations see also, and repeats no more here.Discovering network topology Analysis server 1002 implementations see also as shown in Figure 9, repeat no more here.

Need to prove; In practical application; Discovering network topology Analysis server 1002 can find that automatically proxy module 1001 links to each other with a plurality of network topologies usually, and each network topology finds that automatically proxy module 1001 independently reports result of detection to discovering network

topology Analysis server

1002,1 network topology has been shown among Figure 10 has found proxy module 1001 automatically; But in practical application; The concrete network topology that connects finds that automatically the proxy module number by concrete application scenarios decision, is an example here, does not do qualification.

In the network topology discovery system automatically that the embodiment of the invention provides; Network topology is found proxy module utilization request immediate answer detection and route exploration automatically; Obtain first result of detection or second result of detection; And report to the discovering network topology Analysis server, draw out network topological diagram by the discovering network topology Analysis server.Realized the automatic discovery of network topology through the technology of request immediate answer detection and route exploration, it does not need the special requirement of providing of the network equipment, finds the network topology structure of IP system automatically, and its highly versatile can effectively be implemented.

One of ordinary skill in the art will appreciate that all or part of step that realizes in the foregoing description method is to instruct relevant hardware to accomplish through program; Described program can be stored in a kind of computer-readable recording medium; The above-mentioned storage medium of mentioning can be a read-only memory, disk or CD etc.

More than network topology automatic discovering method provided by the present invention, Apparatus and system have been carried out detailed introduction; For one of ordinary skill in the art; Thought according to the embodiment of the invention; The part that on embodiment and range of application, all can change, in sum, this description should not be construed as limitation of the present invention.

Claims

1. a network topology automatic discovering method is characterized in that, comprising:

2. network topology automatic discovering method according to claim 1 is characterized in that, said method also comprises:

Said network topology is found the port numbers of proxy module according to said IP message automatically, obtains the protocol type of said IP message;

Said network topology finds that automatically proxy module reports the protocol type of said IP message to said discovering network topology Analysis server.

3. network topology automatic discovering method according to claim 2 is characterized in that, said method also comprises:

Said network topology is found the difference of proxy module according to protocol type automatically, and statistic of classification is the message data flow under each agreement in the preset time section, reports to said discovering network topology Analysis server then.

4. according to each described network topology automatic discovering method in the claim 1 to 3, it is characterized in that said network topology finds that automatically proxy module asks immediate answer also to comprise after surveying to the purpose IP address of said IP message:

Said network topology is found proxy module statistics request immediate answer message number of in the detect cycle that presets, sending and the response message number that receives the opposite end feedback automatically;

Said network topology is found the response message number of proxy module according to described request immediate answer message number and said opposite end feedback automatically, obtains the packet loss between local terminal and the opposite end;

Said network topology finds that automatically proxy module reports said packet loss to the discovering network topology Analysis server.

5. according to each described network topology automatic discovering method in the claim 1 to 4, it is characterized in that said network topology finds that automatically proxy module asks immediate answer also to comprise after surveying to the purpose IP address of said IP message:

Said network topology finds that automatically proxy module obtains local terminal and sends the time of request immediate answer message and the time that local terminal receives the response message of opposite end feedback;

Said network topology finds that automatically proxy module deducts the time that local terminal sends request immediate answer message with the time that local terminal receives the response message of opposite end feedback, obtains the message round trip delay time;

Said network topology finds that automatically proxy module reports said message round trip delay time to the discovering network topology Analysis server.

6. network topology automatic discovering method according to claim 5 is characterized in that, said method also comprises:

Said network topology finds that automatically proxy module calculates the message delay that last time sends request immediate answer message respectively and sends the message delay of request immediate answer message with this;

Said network topology finds that automatically proxy module deducts the message delay that last time sends request immediate answer message with the message delay that this sends request immediate answer message, obtains the network jitter between local terminal and the opposite end;

Said network topology finds that automatically proxy module reports said network jitter to the discovering network topology Analysis server.

7. according to each described network topology automatic discovering method in the claim 1 to 6, it is characterized in that said network topology finds that automatically the network type that proxy module obtains interconnection agreement IP message between net comprises:

Said network topology finds that automatically proxy module obtains the purpose IP address and the source IP address of said IP message;

Said network topology is found the IP address of proxy module according to local terminal automatically, obtains the corresponding mask in IP address of said local terminal;

Said network topology finds that automatically proxy module carries out position and computing with said purpose IP address, said source IP address respectively with said mask; The position and the operation result that compare both; If both positions are identical with operation result; The network type of then said IP message is a directly-connected network, otherwise the network type of said IP message is a route network.

8. according to each said network topology automatic discovering method in the claim 1 to 7; It is characterized in that; Said network topology finds that automatically proxy module asks immediate answer to be surveyed to the purpose IP address of said IP message and be specially: said network topology finds that automatically proxy module carries out ICMP to the purpose IP address of said IP message and responds request ICMP Ping and survey; Said first result of detection is: respond ICMP Reply message if receive ICMP, then the network between local terminal and the opposite end connects normal; If do not receive ICMP Reply message, then the network between local terminal and the opposite end is connected with variation.

9. according to each described network topology automatic discovering method in the claim 1 to 7; It is characterized in that; Said network topology finds that automatically proxy module carries out route exploration to the purpose IP address of said IP message and is specially: said network topology finds that automatically proxy module carries out traceroute TraceRoute to the purpose IP address of said IP message and surveys; Said second result of detection is: if receive the ICMP Reply message of said router feedback; Then the network between local terminal and the said router connects normally, if do not receive the ICMP Reply message of said router feedback, then the network between local terminal and the said router is connected with variation; If receive the ICMP Reply message of opposite end feedback, then the network between local terminal and the said opposite end connects normally, if do not receive the ICMP Reply message of opposite end feedback, then the network between local terminal and the opposite end is connected with variation.

10. a network topology automatic discovering method is characterized in that, comprising:

11. network topology automatic discovering method according to claim 10 is characterized in that, said discovering network topology Analysis server also comprises before drawing out network topological diagram:

Said discovering network topology Analysis server receives the protocol type that each network topology is found the IP message that proxy module reports automatically;

Said discovering network topology Analysis server is drawn out network topological diagram and is specially: said discovering network topology Analysis server is drawn out network topological diagram respectively according to each different protocol type.

12. network topology automatic discovering method according to claim 11 is characterized in that, said discovering network topology Analysis server receives each network topology and finds automatically also to comprise after the protocol type of the IP message that proxy module reports:

Said discovering network topology Analysis server receives each network topology and finds the message data flow under each protocol type in the time period of presetting that proxy module reports automatically;

Said discovering network topology Analysis server is drawn out network topological diagram and is specially: said discovering network topology Analysis server is plotted in the message data flow under each protocol type in the time period of presetting on the network topological diagram respectively according to each different protocol type.

13. network topology automatic discovering method according to claim 10 is characterized in that, said discovering network topology Analysis server is drawn out network topological diagram and is also comprised the steps at least one step among S1, step S2, the step S3 before:

S1, said discovering network topology Analysis server receive each network topology and find the packet loss that proxy module reports automatically;

S2, said discovering network topology Analysis server receive each network topology and find the message round trip delay time that proxy module reports automatically;

S3, said discovering network topology Analysis server receive each network topology and find the network jitter that proxy module reports automatically;

Said discovering network topology Analysis server is drawn out network topological diagram and is specially: said packet loss, said message round trip delay time, said network jitter that said discovering network topology Analysis server will receive through at least one step among step S1, step S2, the step S3 are plotted on the network topological diagram.

14. a network topology is found proxy module automatically, it is characterized in that, comprising:

15. network topology according to claim 14 is found proxy module automatically, it is characterized in that,

Said acquiring unit also is used for the port numbers according to said IP message, obtains the protocol type of said IP message;

The said unit that reports also is used for reporting to the discovering network topology Analysis server protocol type of said IP message.

16. network topology according to claim 15 is found proxy module automatically, it is characterized in that,

Said acquiring unit also is used for the difference according to protocol type, and statistic of classification is the message data flow under each agreement in the time period of presetting;

The said unit that reports also is used for reporting the message data flow under each agreement in the time period of presetting to the discovering network topology Analysis server.

17. find proxy module automatically according to each described network topology in the claim 14 to 16, it is characterized in that,

Said acquiring unit also is used to add up request immediate answer message message number of in the detect cycle that presets, sending and the response message number that receives the opposite end feedback; According to the response message number of described request immediate answer message number and said opposite end feedback, obtain the packet loss between local terminal and the opposite end;

The said unit that reports also is used for reporting said packet loss to the discovering network topology Analysis server.

18. find proxy module automatically according to each described network topology in the claim 14 to 17, it is characterized in that,

Said acquiring unit also is used to obtain local terminal and sends the time of request immediate answer message and the time that local terminal receives the response message of opposite end feedback; The time that local terminal is received the response message of opposite end feedback deducts the time that local terminal sends request immediate answer message, obtains the message round trip delay time;

The said unit that reports also is used for reporting said message round trip delay time to the discovering network topology Analysis server.

19. find proxy module automatically according to each described network topology in the claim 14 to 18, it is characterized in that,

Said acquiring unit also is used for calculating respectively the message delay that last time sends request immediate answer message and sends the message delay of request immediate answer message with this; This message delay that sends request immediate answer message is deducted the message delay that last time sends request immediate answer message, obtain the network jitter between local terminal and the opposite end;

The said unit that reports also is used for reporting said network jitter to the discovering network topology Analysis server.

20. find proxy module automatically according to each described network topology in the claim 14 to 19, it is characterized in that,

Said acquiring unit specifically is used to obtain the purpose IP address and the source IP address of said IP message; According to the IP address of local terminal, obtain the corresponding mask in IP address of said local terminal; Said mask is carried out position and computing with said purpose IP address, said source IP address respectively; The position and the operation result that compare both; If both positions are identical with operation result, the network type of then said IP message is a directly-connected network, otherwise the network type of said IP message is a route network.

21. a discovering network topology Analysis server is characterized in that, comprising:

22. discovering network topology Analysis server according to claim 21 is characterized in that,

Said receiving element also is used to receive the protocol type that each network topology is found the IP message that proxy module reports automatically;

Said drawing unit specifically is used for drawing out network topological diagram respectively according to each different protocol type.

23. discovering network topology Analysis server according to claim 22 is characterized in that,

Said receiving element also is used to receive the message data flow under each protocol type in the time period of presetting that each network topology finds that automatically proxy module reports;

Said drawing unit specifically is used for according to each different protocol type the message data flow under each protocol type in the time period of presetting being plotted on the network topological diagram respectively.

24. according to each described discovering network topology Analysis server in the claim 21 to 23, it is characterized in that,

Said receiving element also is used for receiving at least one of packet loss that each network topology finds that automatically proxy module reports, message round trip delay time, network jitter;

Said drawing unit, at least one that specifically is used for the said packet loss that said receiving element is received, said message round trip delay time, said network jitter is plotted in network topological diagram.

25. a network topology is found system automatically, it is characterized in that, comprising: as the described network topology of claim 14 to 20 find proxy module automatically, like the described discovering network topology Analysis server of claim 21 to 24.