CN103414594A - IP stream information statistical method for charging and monitoring - Google Patents
IP stream information statistical method for charging and monitoring Download PDFInfo
- Publication number
- CN103414594A CN103414594A CN2013103734341A CN201310373434A CN103414594A CN 103414594 A CN103414594 A CN 103414594A CN 2013103734341 A CN2013103734341 A CN 2013103734341A CN 201310373434 A CN201310373434 A CN 201310373434A CN 103414594 A CN103414594 A CN 103414594A
- Authority
- CN
- China
- Prior art keywords
- information
- module
- message
- stream
- statistical
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention relates to an IP stream information statistical method for charging and monitoring. Flow statistical analysis is carried out on an IP data packet through a stream sampling module to obtain original, detailed and basic IP data streams flowing through a port, and the flow statistical analysis comprises message analysis, message information statistics, statistical information aging and collection and statistical information output. The stream sampling module is arranged in a common service board card, and comprises four submodules, namely, a packet collecting module, a statistical module, an aging and collection module and a communication module. The IP stream information statistical method can accurately grasp a network operating state, provides the accurate information of network flow in real time, can find and process network abnormal conditions in real time, can allow management and the charging for service application, helps network administers to carry out network planning, network monitoring and flow trend analysis, and achieves network visualization management.
Description
Technical field
The present invention relates to IP stream information statistical technique field, is a kind of stream information of IP for charging and monitoring statistical method specifically.Espespecially to the flow statistical analysis method of the Ipv4 with the conversion of Vlan and Mpls label and Ipv6 stream.
Background technology
Along with the business of network support and application day by day increase, the user to flow statistical analysis have higher requirement, tradition flow statistical analysis such as SNMP(Simple Network Management Protocol, Simple Network Management Protocol), RMON(Remote Network Monitoring, RMON) probe processing etc., because the statistic flow mode is dumb or needs are invested the reasons such as private server, can't meet network is carried out to finer management, need a kind of new technology to come better network enabled traffic statistics to analyze.
Traffic statistics analysis based on SNMP, by the snmp protocol access means, obtain the port flow information in the MIB storehouse exactly, exemplary tool has MRTG(Multi Router Traffic Grapher), by snmp protocol, obtain flow information from equipment, the flow load situation is depicted as to the PNG format picture, and is shown to the user with the WEB form.The data that SNMP gathers port are mainly to come the function ratio of the performance of monitoring traffic in network and equipment and MRTG more single at Network Element Layer, the flow information of collecting is only that two layers of simple port go out, the inbound traffics statistical information, end-to-end flow information accurately can't be provided, can not analyse in depth the type of packet etc.
RMON is by the network management workstation of ietf definition and the interface between remote monitor, makes between remote monitor and network management workstation and can carry out the exchange of network monitoring data, has realized the function for monitoring to the data traffic of a network segment and even whole network.Utilize the RMON probe carry out flow and flow to the technical limitation that management can partly make up SNMP carrier network, its business diagnosis and protocol analyzing function are stronger.But, adopt the flow monitoring system of RMON probe construction the handling property deficiency is also arranged and be difficult to the limitation of generally disposing at catenet.
For overcoming the technical limitation of existing network management system to the network flow statistic analytic function, operator is in the urgent need to finding a kind of feature richness, mature and stable new technology.
Summary of the invention
For the defect existed in prior art, the object of the present invention is to provide a kind of stream information of IP for charging and monitoring statistical method, a difficult problem that solves the details of basic I P data flow how to obtain the port of flowing through and how to utilize the stream sampling module to realize.
For reaching above purpose, the technical scheme that the present invention takes is:
A kind of stream information of IP for charging and monitoring statistical method, it is characterized in that: by the stream sampling module, the IP packet is carried out to original, the detailed basic I P data flow that the port of flowing through is obtained in the traffic statistics analysis, described traffic statistics analysis comprises: packet parsing, message information statistics, the aging polymerization of statistical information, statistical information output.
On the basis of technique scheme, when traffic statistics are analyzed, by IP seven tuples, carry out marked network stream, define a network flow according to purpose IP address, source IP address, destination slogan, source port number, protocol number, COS ToS, input interface or the output interface of message.
On the basis of technique scheme, described stream sampling module is located in the general service board,
The general service board comprises: network processing unit NP unit, and Computer card CPU, the ARAD chip,
When on the general service board, starting the stream sampling functions, network data by NP unit mirror image to Computer card CPU, Computer card CPU passes through senior peripheral component interconnection PCIE interface receiving network data, and completes by the stream sampling module run on Computer card CPU the function that the flow of certain port of flowing through is added up.
On the basis of technique scheme, the stream sampling module carries out sampling processing to network data according to the sampling ratio of setting by ACL, and the network data after sampling is sent to Computer card CPU, and Computer card CPU work comprises:
Packet parsing, message information statistics, the aging polymerization of statistical information and statistical information output four aspect contents, the information of final output comprises that message is from information, routing iinformation and traffic statistics information;
Message carries information and comprises: two-layer protocol information, three layer protocol information and four layer protocol information etc.: IP protocol version, source/destination IP address, source/destination port, ToS, protocol type, input or output interface, Tcp flag, Icmp type, Igmp type, flow path direction, message time of advent, message byte number, message number, aggregation scheme;
Routing iinformation comprises: source AS, purpose AS, next-hop ip address, source subnet mask, purpose subnet mask, outgoing interface or the incoming interface index of the route selection information of message in network: IP stream;
Traffic statistics information comprises: total message number and the total byte length of the initial sum termination time of IP stream, IP stream.
On the basis of technique scheme, the stream sampling module comprises four submodules: packet receiving module, statistical module, ageing poly compound module and communication module;
Control program, is controlled submodule and is normally moved to each submodule Transfer Parameters by CLI.
On the basis of technique scheme, mirror image is to Computer card CPU in proportion by the network data on the NP interface by acl rule is set for the packet receiving module, and packet receiving module is subsequently resolved the IP packet, extracts the message of IP packet from information; Other non-IP packet will be disregarded.
On the basis of technique scheme, the message that statistical module obtains the packet receiving module is divided into not homogeneous turbulence from information with IP seven tuples, or statistical module message that the packet receiving module is obtained is homogeneous turbulence not from information according to the regular partition of configuration, obtain simultaneously routing iinformation and the traffic statistics information of stream.
On the basis of technique scheme, the ageing poly compound module calculates traffic statistics information in buffer memory and whether meets aging condition, and the traffic statistics information that needs converging operationJu Hecaozuo after aging is carried out to polymerization calculating.
On the basis of technique scheme, communication module is safeguarded the template attribute, and the form of traffic statistics information with regulation encapsulated to framing and send to server.
On the basis of technique scheme, statistical module and packet receiving module share the statistical information receiving queue, and the packet receiving module is to the essential information of statistical information receiving queue incoming message, and statistical module reads message information from the statistical information receiving queue; The packet receiving piece is received release conditions semaphore after message, and statistical module reads message information from the statistical information receiving queue after obtaining the conditioned signal amount;
Communication module and ageing poly compound module share aging polymerization output queue, and the ageing poly compound module sends message information, release conditions variable to aging polymerization output queue after carrying out taking turns aging polymerization processing; Communication module reads message information and message is exported to processing from aging polymerization output queue after obtaining conditional-variable.
IP for charging and monitoring stream information statistical method of the present invention, can accurately hold network operation state, the accurate information of network traffics is provided in real time, the real-time discovering network abnormal conditions of energy are also processed, also can seating surface to management and the charging of service application, help network manager to carry out the network planning, network monitoring, traffic trends analysis, realize the network visualization management.
The accompanying drawing explanation
The present invention has following accompanying drawing:
General service board hardware block diagram in Fig. 1 the present invention;
Stream sampling module basic framework figure in Fig. 2 the present invention;
Packet receiving module flow chart in Fig. 3 the present invention;
Statistical module flow chart in Fig. 4 the present invention;
Ageing poly compound module flow chart in Fig. 5 the present invention;
Communication module flow chart in Fig. 6 the present invention.
Embodiment
Below in conjunction with accompanying drawing, the present invention is described in further detail.Should be appreciated that following described enforcement use-case, only for description and interpretation the present invention, is not intended to limit the present invention.
IP for charging and monitoring stream information statistical method of the present invention, it is a kind of IP stream information statistical method that realizes charging and monitoring by the stream sampling module, by the stream sampling module, the IP packet is carried out to original, the detailed basic I P data flow that the port of flowing through is obtained in the traffic statistics analysis, described traffic statistics analysis comprises: packet parsing, message information statistics, the aging polymerization of statistical information, statistical information output.
When traffic statistics are analyzed, by IP seven tuples, carry out marked network stream, according to purpose IP address, source IP address, destination slogan, source port number, protocol number, the COS ToS(Type of Service of message), input interface or output interface define a stream (network flow).
IP for charging and monitoring stream information statistical method of the present invention, can accurately hold network operation state, and in real time the discovering network abnormal conditions are also processed, also can seating surface to management and the charging of service application.
On the basis of technique scheme, described stream sampling module is located in the general service board, and the general service board has the stream sampling functions, and as shown in Figure 1, the general service board mainly comprises:
Network processing unit NP(Network Processor) unit, Computer card CPU and ARAD chip, described ARAD chip is sent to the queue scheduling before Computer card CPU for the NP unit by network data, for example can select model is the ARAD chip with traffic management function of BCM88650, what NP unit biography was come is exactly " network data ", the stream sampling module is only processed " ip packet " in " network data ", and other packets are ignored;
When on the general service board, starting the stream sampling functions, network data by NP unit mirror image to Computer card CPU, Computer card CPU passes through senior peripheral component interconnection PCIE interface (Peripheral Component Interconnect-Express) receiving network data, and completes by the stream sampling module run on Computer card CPU the function that the flow of certain port of flowing through is added up;
Further, in order to reduce the Computer card CPU load, the stream sampling module can pass through ACL(Acess Control List, Access Control List (ACL)) network data is carried out to sampling processing according to the sampling ratio of setting, and the network data after sampling is sent to Computer card CPU, Computer card CPU work comprises:
Packet parsing, message information statistics, the aging polymerization of statistical information and statistical information output four aspect contents, the information of final output comprises that message is from information, routing iinformation and traffic statistics information;
Message carries information and comprises: two-layer protocol information, three layer protocol information and four layer protocol information etc.: IP protocol version, source/destination IP address, source/destination port, ToS, protocol type, input or output interface, Tcp flag, Icmp type, Igmp type, flow path direction, message time of advent, message byte number, message number, aggregation scheme;
Routing iinformation comprises: source AS, purpose AS, next-hop ip address, source subnet mask, purpose subnet mask, outgoing interface or the incoming interface index of the route selection information of message in network: IP stream;
Traffic statistics information comprises: total message number and the total byte length of the initial sum termination time of IP stream, IP stream.
For these information (referring to that the message of final output is from information, routing iinformation and traffic statistics information) are extracted and are processed, the stream sampling module comprises four submodules, as shown in Figure 2, comprising: the packet receiving module, statistical module, ageing poly compound module and communication module.Control program is by CLI(Command Line Interface, Command Line Interface) to each submodule Transfer Parameters, control submodule and normally move.
Below four submodules are made introductions all round:
The packet receiving module by arrange acl rule by the network data on NP interface (the NP interface refers to that packet receiving module and NP unit are connected and obtain the interface of data) in proportion mirror image to Computer card CPU, packet receiving module is subsequently resolved IP packet (the Ip packet refers to ipv4 message or ipv6 message), extracts the message of IP packet from information; Other non-IP packet will be disregarded.
The message that statistical module obtains the packet receiving module is divided into not homogeneous turbulence (network flow) from information with IP seven tuples, or statistical module message that the packet receiving module is obtained is homogeneous turbulence (network flow) not from information according to the regular partition of configuration, obtain simultaneously routing iinformation and the traffic statistics information of stream.
The ageing poly compound module calculates traffic statistics information in buffer memory and whether meets aging condition, and the traffic statistics information that needs converging operationJu Hecaozuo after aging is carried out to polymerization calculating.
Communication module encapsulates the output version of traffic statistics information according to configuration framing and sends to server with the form of stipulating.The output version completes concrete configuration by the template attribute.
The present invention can provide and comprise required original, the detailed information of network traffics after packet receiving module, statistical module, ageing poly compound module and communication module, relate to IP seven tuple information, routing iinformation and traffic statistics information, the approach of awareness network, access traffic details is provided for the network management personnel, help network manager to carry out the network planning, network monitoring, traffic trends analysis, realize network visualization.
The packet receiving module, statistical module, the concrete treatment step of ageing poly compound module and communication module is as follows:
Steps A 10: mirror image is to Computer card CPU in proportion by the network data on the NP interface by acl rule is set for the packet receiving module, and packet receiving module is subsequently resolved the IP packet, extracts the message of IP packet from information; Other non-IP packet will be disregarded;
The packet receiving module receives the network data sended over from the NP unit by the communication interface between Computer card CPU and NP unit, resolve and extract the message of IP packet from information;
For the packet receiving module can normally be moved, need to start statistical module thread, ageing poly compound module thread and communication module thread; The statistical module thread is from the information extraction of statistical information receiving queue, can prevent statistical information receiving queue buffer memory from exhausting and cause operation exception, ageing poly compound module thread and communication module thread can discharge stream sampling module buffer memory, and anti-fluid stopping sampling buffer memory exhausts and the operation exception that causes;
Steps A 20: the message that statistical module obtains the packet receiving module from information with the regular partition of IP seven tuples or configuration for homogeneous turbulence not, obtain simultaneously routing iinformation and the traffic statistics information of stream;
Statistical module and packet receiving module share the statistical information receiving queue, and the packet receiving module is to the essential information of statistical information receiving queue incoming message, and statistical module reads message information from the statistical information receiving queue; The packet receiving piece is received release conditions semaphore after message, and statistical module reads message information from the statistical information receiving queue after obtaining the conditioned signal amount;
Steps A 30: the ageing poly compound module calculates traffic statistics information in buffer memory and whether meets aging condition, and the traffic statistics information that needs converging operationJu Hecaozuo after aging is carried out to polymerization calculating;
Steps A 40: communication module is safeguarded the template attribute, and the form of traffic statistics information with regulation encapsulated to framing and send to server;
Communication module and ageing poly compound module share aging polymerization output queue, and the ageing poly compound module sends message information, release conditions variable to aging polymerization output queue after carrying out taking turns aging polymerization processing; Communication module reads message information and message is exported to processing from aging polymerization output queue after obtaining conditional-variable.
Flow chart below in conjunction with each submodule provides specific embodiment:
The concrete treatment step of packet receiving module as shown in Figure 3, is:
A101, registration packet receiving call back function, the type of message of dynamic-configuration stream sampling module statistics, comprise Ipv4, Ipv6 message, the equal portability Vlan of Ipv4 and Ipv6 message and Mpls;
A102, acl rule is set, monitoring PCIE interface from the physical port up-sampling, receive the Ipv4, the Ipv6 message that from the NP unit, obtain;
A103, according to type of message, select corresponding analytical function to extract message from information, the type of message of not supporting in this way directly abandons original message, message carries information and comprises: source IP address, purpose IP address, protocol type, ToS, source port, destination interface, incoming interface, outgoing interface, IP version, the Tcp flag bit, flow path direction, message time of advent, the message byte number, the stream number, aggregation scheme, the Igmp type, Icmp type and various flag bit (flags), independent control interface Inbound and outgoing packet statistics, during information extraction to whether extracting Vlan information or the Mpls label information is controlled respectively,
If message is with Vlan information, whether configuration determines extraction source Vlan or purpose Vlan, the setting of the line flag position flags that goes forward side by side according to the Vlan switch;
If message is with Mpls information, configuration determines whether to extract ground floor and second layer Mpls label, the setting of the line flag position flags that goes forward side by side according to the Mpls switch;
Without vlan and mpls, do not extract vlan and mpls label;
A104, the message of extraction is inserted to the statistical information receiving queue from information with the Flow structure, abandon original message and notify statistical module to have stream information to reach, the statistical information receiving queue is a round-robin queue, by its round-robin queue's length of initialization function setup.
As shown in Figure 4, the concrete treatment step of statistical module is:
A201, create the statistics thread, wait for and obtain the conditioned signal amount, obtain stream information from the statistical information receiving queue, IP seven tuples of take are classified as the key-value pair stream information, while enabling flexible stream sampling functions, and the key assignments used during configurable dividing flow;
IP seven tuples: source IP address, purpose IP address, interface, ToS, source port, destination interface and protocol type;
A202, hash searches the memory location of current flow statistic in the statistical module buffer memory, the timestamp that successfully upgrades already present flow statistic if search and stream length information, if search failure, flow statistic is copied to the statistical module buffer memory, obtains simultaneously stream by information: No. AS, subnet mask, next-hop ip address, incoming interface/outgoing interface call number, Mpls top-level tab type;
Due in the situation that routing iinformation that the routing iinformation of all messages in the same IP of conversion stream does not occur is identical, statistical module does not need to calculate routing iinformation for the IP message of each arrival, and it only needs first message of IP stream is carried out to routing iinformation calculating and storage;
During the statistics fragment message, do not consider 4 layer protocol information, when hash searches in the statistical module buffer memory, do not use 4 layer protocol information as key assignments;
A203, statistical module are buffered in initialization while starting the stream sampling functions, by the program dynamic assignment, also can dynamically be emptied by the order line webmaster when buffer memory is not enough;
A204, on the multi-core CPU platform, can distribute a plurality of CPU core, statistical module copy of each core operation, realize the statistical module parallel computation, in order to promote whole stream sampling module throughput.
As shown in Figure 5, the concrete treatment step of ageing poly compound module is:
A301, establishment ageing poly zygonema journey, arrange timer automatic regular polling statistical module buffer memory, by stream inspection, whether meets aging condition, the configuration of aging condition capable of dynamic;
The IP stream one of met the following conditions will be aging:
A, be transmitted (detect TCP FIN or RST sign);
B, total length surpass threshold value;
C, inactive time are overtime, and IP stream free time surpasses n second; The n value can be self-defined as required;
D, activity time are overtime, and the IP stream time of enlivening surpasses n minute; The n value can be self-defined as required;
E, order line network management control, force output;
If A302 stream meets aging condition and the not enabled aggregation scheme is transferred to aging polymerization output queue by the statistical information of stream from the statistical module buffer memory;
If A303 meet aging condition and enable aggregation scheme the statistical information of convection current carry out the polymerization processing, the configuration of aggregation scheme capable of dynamic, the polymerization result is placed in to the polymerization buffer memory, when after end of polling(EOP), the statistical information in the polymerization buffer memory being transferred to aging polymerization output queue;
The aggregation scheme that the ageing poly compound module relates to is divided into two classes, and a class is that a class is the polymerization methods (6 kinds) based on ToS not with the polymerization methods (5 kinds) of ToS;
Not with the polymerization methods of ToS: AS polymerization, former network prefix polymerization, the polymerization of purpose network prefix, network prefix polymerization, agreement-port trunking;
A.AS polymerization keyword: input interface number, output interface number, source AS, purpose AS;
B. source network prefix polymerization keyword: No. AS, source network address, source network mask, input interface number and source;
C. purpose network prefix polymerization keyword: the purpose network address, purpose netmask, output interface number and purpose AS;
D. network prefix polymerization keyword: network prefix, network prefix mask, interface number and No. AS;
E. agreement _ port trunking keyword: source port number, destination slogan, IP protocol type;
Polymerization methods based on ToS: AS-ToS polymerization, source network prefix-ToS polymerization, purpose network prefix-ToS polymerization, network prefix-ToS polymerization, agreement-port-ToS polymerization, network prefix-port trunking;
A. front 5 kinds of polymerization methods keywords considered when not being with the ToS polymerization more ToS this;
B. agreement-port trunking keyword: source and destination port numbers, input/output interface number, protocol type, ToS;
During converging operationJu Hecaozuo, step is as follows:
1. according to aggregation scheme, obtain the polymerization keyword of current stream, the polymerization keyword that every kind of aggregation scheme is used as mentioned above;
2. utilize keyword and key length, obtain index value in the polymerization chained list by the hash algorithm;
3. hash searches the memory location of current flow statistic in the polymerization buffer memory, flow statistic is transferred to the polymerization buffer memory from the statistical module buffer memory if search failure;
4. the timestamp that successfully upgrades already present statistical information if search and stream length information.These 11 kinds of aggregation schemes all need the aggregation information recorded to be: the byte number of the stream number of polymerization, the message number of polymerization, polymerization, first message repeating timestamp and last message repeating timestamp;
When A304, aging polymerization output queue non-NULL, release conditions variable notice communication module has stream information to need output, and polymerization can reduce stream sampling output communication flow, reduces offered load.
As shown in Figure 6, the concrete treatment step of communication module is:
A401, establishment communication thread, wait for and obtain the conditioned signal amount, and logging template and outlet template are provided, and the outlet template dynamically can be joined;
Whether A402, the aging polymerization output queue of inspection are empty, from aging polymerization output queue, extract statistical information if not empty and encapsulate, and after having encapsulated, deliver to the message transmit queue, and encapsulation format is selected according to the configuration capable of dynamic;
Encapsulation format be take output version v5, v8, v9 and is foundation, if the output version is V5, uses fixing encapsulation format to export the statistical information of every stream, does not carry out the polymerization processing; If the output version is v8, according to different aggregation schemes, 11 kinds of different encapsulation format are arranged; If the output version is v9, need regularly to server, to send communications module, during encapsulated message, filling template id is also by template id requirement form padding data territory;
Output version v9 can dynamically configure whether carry out converging operationJu Hecaozuo, and the output information form is flexible, and the stream sampling module need to and export masterplate to server for different type of messages and different aggregation scheme (11 kinds) custom communication masterplate;
If the aging polymerization output queue of A403 is empty, check successively whether the message transmit queue has data to send, and every kind of message transmit queue is only supported a kind of encapsulation format;
A404, when meeting the transmission condition, the message transmit queue is added to corresponding heads form assembling framing, synthetic complete network packet;
Message sends to server must meet one of two conditions: 1, the message transmit queue reaches maximum message segment transmission length; 2, transmit queue still is sky after waiting for a period of time;
A405, packed network data message is exported to 1-2 server simultaneously, server dynamically can be joined, Ipv4 and Ipv6 message are sent to respectively different server, send to the Frame of server only for a pattern (primary flow, various aggregated flows etc.), and once can only send the message of a version.
The present invention is not limited to above-mentioned preferred forms, and anyone should learn the structural change of making under enlightenment of the present invention, and every have identical or close technical scheme with the present invention, within all falling into protection scope of the present invention.
The content be not described in detail in this specification belongs to the known prior art of professional and technical personnel in the field.
Claims (10)
1. the stream information of the IP for charging and monitoring statistical method, it is characterized in that: by the stream sampling module, the IP packet is carried out to original, the detailed basic I P data flow that the port of flowing through is obtained in the traffic statistics analysis, described traffic statistics analysis comprises: packet parsing, message information statistics, the aging polymerization of statistical information, statistical information output.
2. the stream information of the IP for charging and monitoring statistical method as claimed in claim 1, it is characterized in that: when traffic statistics are analyzed, by IP seven tuples, carry out marked network stream, define a network flow according to purpose IP address, source IP address, destination slogan, source port number, protocol number, COS ToS, input interface or the output interface of message.
3. the stream information of the IP for charging and monitoring statistical method as claimed in claim 1, it is characterized in that: described stream sampling module is located in the general service board, and the general service board comprises: network processing unit NP unit, Computer card CPU, ARAD chip.
When on the general service board, starting the stream sampling functions, network data by NP unit mirror image to Computer card CPU, Computer card CPU passes through senior peripheral component interconnection PCIE interface receiving network data, and completes by the stream sampling module run on Computer card CPU the function that the flow of certain port of flowing through is added up.
4. the stream information of the IP for charging and monitoring statistical method as claimed in claim 3, it is characterized in that: the stream sampling module carries out sampling processing to network data according to the sampling ratio of setting by ACL, and the network data after sampling is sent to Computer card CPU, Computer card CPU work comprises:
Packet parsing, message information statistics, the aging polymerization of statistical information and statistical information output four aspect contents, the information of final output comprises that message is from information, routing iinformation and traffic statistics information;
Message carries information and comprises: two-layer protocol information, three layer protocol information and four layer protocol information etc.: IP protocol version, source/destination IP address, source/destination port, ToS, protocol type, input or output interface, Tcp flag, Icmp type, Igmp type, flow path direction, message time of advent, message byte number, message number, aggregation scheme;
Routing iinformation comprises: source AS, purpose AS, next-hop ip address, source subnet mask, purpose subnet mask, outgoing interface or the incoming interface index of the route selection information of message in network: IP stream;
Traffic statistics information comprises: total message number and the total byte length of the initial sum termination time of IP stream, IP stream.
5. the stream information of the IP for charging and monitoring statistical method as claimed in claim 3, is characterized in that: flow sampling module and comprise four submodules: packet receiving module, statistical module, ageing poly compound module and communication module;
Control program, is controlled submodule and is normally moved to each submodule Transfer Parameters by CLI.
6. the stream information of the IP for charging and monitoring statistical method as claimed in claim 5, it is characterized in that: the packet receiving module by arrange acl rule by the network data on the NP interface in proportion mirror image to Computer card CPU, packet receiving module is subsequently resolved the IP packet, extracts the message of IP packet from information; Other non-IP packet will be disregarded.
7. the stream information of the IP for charging and monitoring statistical method as claimed in claim 5, it is characterized in that: the message that statistical module obtains the packet receiving module is divided into not homogeneous turbulence from information with IP seven tuples, or statistical module message that the packet receiving module is obtained is homogeneous turbulence not from information according to the regular partition of configuration, obtain simultaneously routing iinformation and the traffic statistics information of stream.
8. the stream information of the IP for charging and monitoring statistical method as claimed in claim 5, it is characterized in that: the ageing poly compound module calculates traffic statistics information in buffer memory and whether meets aging condition, and the traffic statistics information that needs converging operationJu Hecaozuo after aging is carried out to polymerization calculating.
9. the stream information of the IP for charging and monitoring statistical method as claimed in claim 5, it is characterized in that: communication module is safeguarded the template attribute, by traffic statistics information with the form encapsulation framing of regulation and send to server.
10. the stream information of the IP for charging and monitoring statistical method as claimed in claim 5, it is characterized in that: statistical module and packet receiving module share the statistical information receiving queue, the packet receiving module is to the essential information of statistical information receiving queue incoming message, and statistical module reads message information from the statistical information receiving queue;
The packet receiving piece is received release conditions semaphore after message, and statistical module reads message information from the statistical information receiving queue after obtaining the conditioned signal amount;
Communication module and ageing poly compound module share aging polymerization output queue, and the ageing poly compound module sends message information, release conditions variable to aging polymerization output queue after carrying out taking turns aging polymerization processing; Communication module reads message information and message is exported to processing from aging polymerization output queue after obtaining conditional-variable.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2013103734341A CN103414594A (en) | 2013-08-23 | 2013-08-23 | IP stream information statistical method for charging and monitoring |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2013103734341A CN103414594A (en) | 2013-08-23 | 2013-08-23 | IP stream information statistical method for charging and monitoring |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN103414594A true CN103414594A (en) | 2013-11-27 |
Family
ID=49607580
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2013103734341A Pending CN103414594A (en) | 2013-08-23 | 2013-08-23 | IP stream information statistical method for charging and monitoring |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103414594A (en) |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105763480A (en) * | 2016-04-12 | 2016-07-13 | 烽火通信科技股份有限公司 | FPGA-based flow sampling device and method |
| CN106059792A (en) * | 2016-05-13 | 2016-10-26 | 北京英诺威尔科技股份有限公司 | Traffic analyzing and processing method with low delay |
| WO2017147808A1 (en) * | 2016-03-02 | 2017-09-08 | 华为技术有限公司 | Method and device for managing network apparatus |
| CN106664213B (en) * | 2014-06-23 | 2020-03-06 | 思科技术公司 | Method and medium for managing rendezvous point redundancy in dynamic network architecture |
| CN111835641A (en) * | 2019-04-16 | 2020-10-27 | 北京华为数字技术有限公司 | Fault detection method, server and acquisition equipment |
| CN112822650A (en) * | 2020-12-23 | 2021-05-18 | 北京思特奇信息技术股份有限公司 | Method and system for auditing accounting accuracy of MAS (Multi-agent System) service |
| CN114189484A (en) * | 2021-12-28 | 2022-03-15 | 杭州迪普科技股份有限公司 | Method and device for forwarding message internally |
| CN117827497A (en) * | 2024-03-05 | 2024-04-05 | 中国电子科技集团公司第三十研究所 | Method and device for flow statistics and real-time sequencing based on domestic multi-core processor |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1612562A (en) * | 2003-10-28 | 2005-05-04 | 武汉烽火网络有限责任公司 | Method and device for realizing different IP data packet repeating using strategic flow |
| CN101431424A (en) * | 2008-12-12 | 2009-05-13 | 南京邮电大学 | Accounting method based on data packet |
| KR20110062561A (en) * | 2009-12-03 | 2011-06-10 | 한국인터넷진흥원 | Visualization system for security information of network and method for visualizing the information |
-
2013
- 2013-08-23 CN CN2013103734341A patent/CN103414594A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1612562A (en) * | 2003-10-28 | 2005-05-04 | 武汉烽火网络有限责任公司 | Method and device for realizing different IP data packet repeating using strategic flow |
| CN101431424A (en) * | 2008-12-12 | 2009-05-13 | 南京邮电大学 | Accounting method based on data packet |
| KR20110062561A (en) * | 2009-12-03 | 2011-06-10 | 한국인터넷진흥원 | Visualization system for security information of network and method for visualizing the information |
Cited By (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106664213B (en) * | 2014-06-23 | 2020-03-06 | 思科技术公司 | Method and medium for managing rendezvous point redundancy in dynamic network architecture |
| CN107710686A (en) * | 2016-03-02 | 2018-02-16 | 华为技术有限公司 | The method and apparatus for managing the network equipment |
| WO2017147808A1 (en) * | 2016-03-02 | 2017-09-08 | 华为技术有限公司 | Method and device for managing network apparatus |
| US10819583B2 (en) | 2016-03-02 | 2020-10-27 | Huawei Technologies Co., Ltd. | Network device management method and apparatus |
| CN105763480A (en) * | 2016-04-12 | 2016-07-13 | 烽火通信科技股份有限公司 | FPGA-based flow sampling device and method |
| CN105763480B (en) * | 2016-04-12 | 2018-09-18 | 烽火通信科技股份有限公司 | A kind of device and method for realizing stream sampling based on FPGA |
| CN106059792B (en) * | 2016-05-13 | 2019-03-29 | 北京英诺威尔科技股份有限公司 | A kind of flow analyzing and processing method of low latency |
| CN106059792A (en) * | 2016-05-13 | 2016-10-26 | 北京英诺威尔科技股份有限公司 | Traffic analyzing and processing method with low delay |
| CN111835641A (en) * | 2019-04-16 | 2020-10-27 | 北京华为数字技术有限公司 | Fault detection method, server and acquisition equipment |
| CN112822650A (en) * | 2020-12-23 | 2021-05-18 | 北京思特奇信息技术股份有限公司 | Method and system for auditing accounting accuracy of MAS (Multi-agent System) service |
| CN114189484A (en) * | 2021-12-28 | 2022-03-15 | 杭州迪普科技股份有限公司 | Method and device for forwarding message internally |
| CN114189484B (en) * | 2021-12-28 | 2023-10-27 | 杭州迪普科技股份有限公司 | Method and device for forwarding message internally |
| CN117827497A (en) * | 2024-03-05 | 2024-04-05 | 中国电子科技集团公司第三十研究所 | Method and device for flow statistics and real-time sequencing based on domestic multi-core processor |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103414594A (en) | IP stream information statistical method for charging and monitoring | |
| CN103326884B (en) | SDN combines Business Stream sensory perceptual system and the method for stream detection and bag detection | |
| US9847922B2 (en) | System and method for continuous measurement of transit latency in individual data switches and multi-device topologies | |
| JP4774357B2 (en) | Statistical information collection system and statistical information collection device | |
| WO2017005223A1 (en) | Information sharing method of smart electricity meter, smart electricity meter and acquisition router | |
| US10296551B2 (en) | Analytics for a distributed network | |
| WO2021109610A1 (en) | Transmission quality test method and apparatus, system, and storage medium | |
| US9705745B2 (en) | System and method for virtualizing software defined network (SDN)-based network monitoring | |
| CN108809857A (en) | A method of the traffic monitoring based on SDN and service quality securing strategy | |
| US11272396B2 (en) | Frame aggregation method, network setting frame sending method, and device | |
| EP4024778A1 (en) | Method for determining required bandwidth for data stream transmission, and devices and system | |
| CN111049698B (en) | Telemetering data acquisition method and device | |
| EP3065360A1 (en) | Traffic cleaning method and device, and computer storage medium | |
| CN104272657A (en) | Method and apparatus for providing tenant information for network flows | |
| US11165716B2 (en) | Data flow processing method and device | |
| CN1725718A (en) | Network QoS test method and system | |
| CN111092840B (en) | Processing strategy generation method, system and storage medium | |
| CN103618677A (en) | Network flow regulation method and system | |
| CN103416022B (en) | Throughput testing approach and system in service in distribution router/exchange board structure | |
| CN108696452A (en) | A kind of container levels network flow acquisition, network quality identification method, device, system | |
| JP6671112B2 (en) | Method and apparatus for flexible and efficient analysis in network switch | |
| CN112105056A (en) | Code stream transmission method and device based on 5GSA network | |
| CN106341296A (en) | Method of avoiding data message collision in communication network within transformer substation | |
| WO2024021495A1 (en) | Method and apparatus for identifying flooding attack in cloud platform, and device and storage medium | |
| RU2598293C1 (en) | Method and apparatus for transmitting standard configuration data of improved system of selecting a transmitting protocol |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20131127 |
|
| RJ01 | Rejection of invention patent application after publication |