CN106452940A - Method and device for identifying Internet business flow ownership - Google Patents
Method and device for identifying Internet business flow ownership Download PDFInfo
- Publication number
- CN106452940A CN106452940A CN201610694311.1A CN201610694311A CN106452940A CN 106452940 A CN106452940 A CN 106452940A CN 201610694311 A CN201610694311 A CN 201610694311A CN 106452940 A CN106452940 A CN 106452940A
- Authority
- CN
- China
- Prior art keywords
- ownership
- domain name
- netflow
- address
- flow
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 32
- 238000004458 analytical method Methods 0.000 claims abstract description 15
- 230000008569 process Effects 0.000 claims description 12
- 230000004044 response Effects 0.000 claims description 8
- 230000004907 flux Effects 0.000 claims description 5
- 238000013475 authorization Methods 0.000 abstract 1
- 230000008901 benefit Effects 0.000 description 3
- 230000000694 effects Effects 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 3
- 230000009471 action Effects 0.000 description 2
- 238000004590 computer program Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 230000006870 function Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 1
- 230000015572 biosynthetic process Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 238000005206 flow analysis Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 238000013507 mapping Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/02—Capturing of monitoring data
- H04L43/026—Capturing of monitoring data using flow identification
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/45—Network directories; Name-to-address mapping
- H04L61/4505—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols
- H04L61/4511—Network directories; Name-to-address mapping using standardised directories; using standardised directory access protocols using domain name system [DNS]
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a method for identifying Internet business flow ownership. The method comprises steps that 1), real-time DNS analysis on the acquired data is carried out, a corresponding relationship between ip addresses and domain names is established, a dynamic inverse solution database is formed, and the inverse solution database is updated according to addresses returned through authorization; and 2), when Netflow analysis on Netflow logs is carried out, the corresponding relationship between the ip addresses and the domain names is acquired through an established interface, a domain name ownership manufacturer is acquired through domain name ownership identification, or a CDN distribution portion is employed, ownership manufacturers of one Flow, business type subsections and IP position ownership can be identified.
Description
Technical field
The invention belongs to the Internet identification field, it is related to a kind of recognition methodss of Internet service flow ownership and device.
Background technology
With the continuous development of China's Base communication, with the popularization in broadband, the high speed development of 4G and constantly speed-raising；Net
Interior flow becomes increasingly complex, how the flux and flow direction of each service provider, distribution in monitoring network, content introduces becomes
Ge great operator treats a difficult problem to solve.
Domain name system (Domain Name System abbreviation DNS, Domain Name are translated into domain name) is the one of the Internet
Kernel service, it is as can be by a distributed data base of domain name and IP address mutually mapping.
Wherein, according to the related definition in the Internet, a NetFlow stream is defined as in a source IP address and purpose IP
The data packet stream of transmission between address, and all packets have common transport layer source, destination slogan.
The shortcoming of existing Netflow flow analysis：
Existing Netflow analytical technology is difficult to service traffics ownership content business is accurately identified；
Although existing Netflow technology is also integrated with DNS identification function, provide service because existing network business is rarely it
Ip does reverse name resolution, leads to this function cannot actual play a role.
Content of the invention
The technical problem to be solved is to provide a kind of recognition methodss of Internet service flow ownership, for solving
The problem that certainly prior art exists.
The technical scheme that present invention solution above-mentioned technical problem is taken is as follows：
A kind of recognition methodss of Internet service flow ownership, including：
Step 1) by real-time dns resolution data acquisition and set up the corresponding relation of ip address and domain name, form one and move
The anti-Xie Ku of state；
Update this anti-Xie Ku according to authorizing the address returning；
Step 2) when Netflow daily record is carried out with Netflow analysis, ip at that time and domain are obtained by the interface set up
The corresponding relation of name, obtains this domain name by domain name ownership identification simultaneously and belongs to producer or adopt CDN distributing portion, thus know
Do not go out the ownership producer of a stream (Flow), type of service is segmented, IP position ownership.
Further, it is preferred that, the form that described DNS gathers daily record is as follows：
Source IP, source port, purpose IP destination interface, No. ID, request domain name, request type, analysis result, request time,
Conditional code, request q or response r.
Further, it is preferred that, step 1) in set up the corresponding relation of ip address and domain name, formed one dynamically anti-
Xie Ku, specifically includes：The authorized address being obtained by response log, forms the corresponding reverse address base of a certain domain name addresses.
Further, it is preferred that, step 2) in, also include：According to the daily record of Netflow, can get
The flow information of two authorized addresses of wwwbaidu.com.
Further, it is preferred that, described NETFLOW journal format is as follows：
Source address, destination, source autonomous domain, purpose Autonomous Domain, inflow interface number, outflow interface number, source port, destination
Mouth, protocol type, bag quantity, byte number and stream quantity.
Further, it is preferred that, step 2) in, specifically include following subprocess：
First process passes through DNS log acquisition dynamic address storehouse；
Second process passes through purpose IP and the port of Netflow log information, in conjunction with the anti-Xie Ku of DNS, obtains content clothes
Certain service traffics information of business provider.
Further, it is preferred that, also include：By the flux and flow direction data in Netflow daily record and by the total evidence of DNS
The ip that collection builds combines to domain name reverse corresponding relation storehouse, Metropolitan Area Network (MAN) rate of discharge is sub-divided into each content producer, CDN divides
Send out business and classified with the service traffics within producer.
Further, it is preferred that, the classification of described service traffics includes：Web portal, video, game or electric business.
A kind of identifying device of Internet service flow ownership, including：
DNS analytic unit, for by real-time dns resolution data acquisition and set up the corresponding relation of ip address and domain name,
Form a dynamically anti-Xie Ku；
Update this anti-Xie Ku according to authorizing the address returning；
Netflow analytic unit, for when Netflow daily record is carried out with Netflow analysis, being obtained by the interface set up
Take the corresponding relation of ip at that time and domain name, this domain name is obtained by domain name ownership identification simultaneously and belong to producer or adopt CDN
Distributing portion, thus identifies that the ownership producer of a stream (Flow), type of service segment, IP position belongs to.
After this invention takes such scheme, thus set up a set of business domain name and the dynamic corresponding relation of business ip
Storehouse；And accordingly netflow analysis depth is lifted, it is possible to obtain in Ben Sheng, this Metropolitan Area Network (MAN), user is to concrete application provider's
Flow distribution situation, and the flowed fluctuation producing because content side dispatches etc., there is good effect.
Other features and advantages of the present invention will illustrate in the following description, and, partly become from description
Obtain it is clear that or being understood by implementing the present invention.The purpose of the present invention and other advantages can be by the explanations write
In book, claims and accompanying drawing, specifically noted structure is realizing and to obtain.
Brief description
Below in conjunction with the accompanying drawings the present invention is described in detail, so that the above-mentioned advantage of the present invention is definitely.Its
In,
Fig. 1 is a kind of schematic diagram of the recognition methodss of present invention Internet service flow ownership.
Specific embodiment
To describe embodiments of the present invention in detail below with reference to drawings and Examples, whereby how the present invention to be applied
Technological means are solving technical problem, and reach realizing process and fully understanding and implement according to this of technique effect.Need explanation
As long as not constituting conflict, each embodiment in the present invention and each feature in each embodiment can be combined with each other,
The technical scheme being formed is all within protection scope of the present invention.
In addition, the step that illustrates of flow process in accompanying drawing can be in the department of computer science of such as one group of computer executable instructions
Execute in system, and although showing logical order in flow charts, but in some cases, can be with different from herein
The shown or described step of order execution.
Embodiment one：
Specifically, a kind of recognition methodss of Internet service flow ownership, including：
Step 1) by real-time dns resolution data acquisition and set up the corresponding relation of ip address and domain name, form one and move
The anti-Xie Ku of state；
Update this anti-Xie Ku according to authorizing the address returning；
Step 2) when Netflow daily record is carried out with Netflow analysis, ip at that time and domain are obtained by the interface set up
The corresponding relation of name, obtains this domain name by domain name ownership identification simultaneously and belongs to producer or adopt CDN distributing portion, thus know
Do not go out the ownership producer of a stream (Flow), type of service is segmented, IP position ownership.
Further, it is preferred that, the form that described DNS gathers daily record is as follows：
Source IP, source port, purpose IP destination interface, No. ID, request domain name, request type, analysis result, request time,
Conditional code, request q or response r.
Further, it is preferred that, step 1) in set up the corresponding relation of ip address and domain name, formed one dynamically anti-
Xie Ku, specifically includes：The authorized address being obtained by response log, forms the corresponding reverse address base of a certain domain name addresses.
Further, it is preferred that, step 2) in, also include：According to the daily record of Netflow, can get
The flow information of two authorized addresses of www.baidu.com.
Further, it is preferred that, described NETFLOW journal format is as follows：
Source address, destination, source autonomous domain, purpose Autonomous Domain, inflow interface number, outflow interface number, source port, destination
Mouth, protocol type, bag quantity, byte number and stream quantity.
Further, it is preferred that, step 2) in, specifically include following subprocess：
First process passes through DNS log acquisition dynamic address storehouse；
Second process passes through purpose IP and the port of Netflow log information, in conjunction with the anti-Xie Ku of DNS, obtains content clothes
Certain service traffics information of business provider.
Further, it is preferred that, also include：By the flux and flow direction data in Netflow daily record and by the total evidence of DNS
The ip that collection builds combines to domain name reverse corresponding relation storehouse, Metropolitan Area Network (MAN) rate of discharge is sub-divided into each content producer, CDN divides
Send out business and classified with the service traffics within producer.
Further, it is preferred that, the classification of described service traffics includes：Web portal, video, game or electric business.
After this invention takes such scheme, thus set up a set of business domain name and the dynamic corresponding relation of business ip
Storehouse；And accordingly netflow analysis depth is lifted, it is possible to obtain in Ben Sheng, this Metropolitan Area Network (MAN), user is to concrete application provider's
Flow distribution situation, and the flowed fluctuation producing because content side dispatches etc., there is good effect.
Embodiment two：
Specifically, the problem that the present invention solves is as follows：
Set up a set of business domain name and business ip dynamic corresponding relation storehouse；
Netflow analysis depth is lifted, it is possible to obtain in Ben Sheng, this Metropolitan Area Network (MAN), user is to the stream of concrete application provider
Amount distribution situation, and because the flowed fluctuation that scheduling is generation is done by content side；
For this reason, the technical program is the flux and flow direction data collecting NETFLOW building with by the full data acquisition of DNS
Ip to domain name reverse corresponding relation storehouse combine, by Metropolitan Area Network (MAN) rate of discharge be sub-divided into each content producer, CDN distributor and
Classified with the service traffics within producer, such as：Web portal, video, game, electric business etc..
Specifically, this programme is made up of two parts：Dynamic reverse resolution address base, parser.As shown in Figure 1：
Flow process is as follows：
Set up the corresponding relation of ip address and domain name by real-time dns resolution data acquisition, formation one is dynamically counter to be solved
Storehouse, and this anti-Xie Ku is updated according to the address authorizing return；
As：Www.baidu.com, the authorized address obtaining is as shown below：
Wherein, the form of DNS collection daily record is as follows：
No. ID request domain name request type analysis result request time of source IP source port purpose IP destination interface
Conditional code request q or response r；
The authorized address being obtained by response log, forms the reverse address base of a www.baidu.com.
When Netflow analyzes, obtain the corresponding relation of ip at that time and domain name by the interface set up, pass through domain simultaneously
Name ownership identification obtain this domain name ownership producer (including using CDN distributing portion), can identify one stream ownership producer,
Type of service subdivision, IP position ownership etc.；
As：According to the daily record of Netflow, the flow information of two authorized addresses of www.baidu.com can be got, such as
Shown below.
NETFLOW journal format is as follows：
Source address destination source autonomous domain purpose Autonomous Domain flows into interface number and flows out interface number source port destination
Mouth protocol type bag quantum byte number stream quantity
Wherein, the parser of the present invention is as follows：
Parser is divided into two processes：First process passes through DNS log acquisition dynamic address storehouse,；Second process
By purpose IP and the port of Netflow log information, in conjunction with the anti-Xie Ku of DNS, obtain certain Business Stream of content and service provider
Amount information.
Wherein, taking Baidu as a example：
Can be seen by the log information of netflow and go to two mesh of 61.135.169.121 and 61.135.169.125
The port information (443) of IP address and flow information, be destined to the web page class stream of Baidu according to the locking of the reverse resolution storehouse of DNS
To information, according to the drop point of address, show that this flow is destined to Pekinese.
Embodiment three：
A kind of identifying device of Internet service flow ownership, including：
DNS analytic unit, for by real-time dns resolution data acquisition and set up the corresponding relation of ip address and domain name,
Form a dynamically anti-Xie Ku；
Update this anti-Xie Ku according to authorizing the address returning；
Netflow analytic unit, for when Netflow daily record is carried out with Netflow analysis, being obtained by the interface set up
Take the corresponding relation of ip at that time and domain name, this domain name is obtained by domain name ownership identification simultaneously and belong to producer or adopt CDN
Distributing portion, thus identifies that the ownership producer of a stream (Flow), type of service segment, IP position belongs to.
It should be noted that for said method embodiment, in order to be briefly described, therefore it is all expressed as a series of
Combination of actions, but those skilled in the art should know, the application is not limited by described sequence of movement because
According to the application, some steps can be carried out using other orders or simultaneously.Secondly, those skilled in the art also should know
Know, embodiment described in this description belongs to preferred embodiment, involved action and module not necessarily the application
Necessary.
Those skilled in the art are it should be appreciated that embodiments herein can be provided as method, system or computer program
Product.Therefore, the application can be using complete hardware embodiment, complete software embodiment or the reality combining software and hardware aspect
Apply the form of example.
And, the application can use using in one or more computers wherein including computer usable program code
The upper computer program implemented of storage medium (including but not limited to disk memory, CD-ROM, optical memory etc.)
Form.
Finally it should be noted that：The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention,
Although being described in detail to the present invention with reference to the foregoing embodiments, for a person skilled in the art, it still may be used
To modify to the technical scheme described in foregoing embodiments, or equivalent is carried out to wherein some technical characteristics.
All any modification, equivalent substitution and improvement within the spirit and principles in the present invention, made etc., should be included in the present invention's
Within protection domain.
Claims (9)
1. a kind of recognition methodss of Internet service flow ownership, including：
Step 1) by real-time dns resolution data acquisition and set up the corresponding relation of ip address and domain name, formed one dynamic
Anti- Xie Ku；
Update this anti-Xie Ku according to authorizing the address returning；
Step 2) when Netflow daily record is carried out with Netflow analysis, ip at that time and domain name are obtained by the interface set up
Corresponding relation, obtains this domain name by domain name ownership identification simultaneously and belongs to producer or adopt CDN distributing portion, thus identify
The ownership producer of one stream (Flow), type of service subdivision, IP position ownership.
2. the recognition methodss of Internet service flow ownership according to claim 1 are it is characterised in that DNS gathers daily record
Form as follows：
Source IP, source port, purpose IP destination interface, No. ID, request domain name, request type, analysis result, request time, state
Code, request q or response r.
3. the recognition methodss of Internet service flow according to claim 2 ownership are it is characterised in that step 1) in set up
Ip address and the corresponding relation of domain name, form a dynamically anti-Xie Ku, specifically include：The mandate ground being obtained by response log
Location, forms the corresponding reverse address base of a certain domain name addresses.
4. the recognition methodss of Internet service flow according to claim 1 ownership are it is characterised in that step 2) in, also
Including：According to the daily record of Netflow, the flow information of two authorized addresses of www.baidu.com can be got.
5. the recognition methodss of Internet service flow according to claim 1 ownership are it is characterised in that NETFLOW daily record
Form is as follows：
Source address, destination, source autonomous domain, purpose Autonomous Domain, flow into interface number, flow out interface number, source port, destination interface,
Protocol type, bag quantity, byte number and stream quantity.
6. the recognition methodss of Internet service flow according to claim 1 ownership are it is characterised in that step 2) in, tool
Body includes following subprocess：
First process passes through DNS log acquisition dynamic address storehouse；
Second process passes through purpose IP and the port of Netflow log information, in conjunction with the anti-Xie Ku of DNS, obtains content service and carries
For certain service traffics information of business.
7. the recognition methodss of Internet service flow ownership according to claim 6 are it is characterised in that also include：Will
Flux and flow direction data in Netflow daily record is tied to domain name reverse corresponding relation storehouse with the ip being built by the full data acquisition of DNS
Close, Metropolitan Area Network (MAN) rate of discharge is sub-divided into each content producer, CDN distributor and carries out point with the service traffics within producer
Class.
8. the recognition methodss of Internet service flow according to claim 7 ownership are it is characterised in that described service traffics
Classification include：Web portal, video, game or electric business.
9. a kind of identifying device of Internet service flow ownership, including：
DNS analytic unit, for by real-time dns resolution data acquisition and set up the corresponding relation of ip address and domain name, forming
One dynamic anti-Xie Ku；
Update this anti-Xie Ku according to authorizing the address returning；
Netflow analytic unit, for when Netflow daily record is carried out with Netflow analysis, being obtained by the interface set up and working as
When ip and domain name corresponding relation, pass through domain name ownership identification simultaneously and obtain this domain name to belong to producer or distribute using CDN
Part, thus identifies that the ownership producer of a stream (Flow), type of service segment, IP position belongs to.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610694311.1A CN106452940A (en) | 2016-08-22 | 2016-08-22 | Method and device for identifying Internet business flow ownership |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610694311.1A CN106452940A (en) | 2016-08-22 | 2016-08-22 | Method and device for identifying Internet business flow ownership |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106452940A true CN106452940A (en) | 2017-02-22 |
Family
ID=58181329
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610694311.1A Pending CN106452940A (en) | 2016-08-22 | 2016-08-22 | Method and device for identifying Internet business flow ownership |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106452940A (en) |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107809353A (en) * | 2017-11-03 | 2018-03-16 | 赛尔网络有限公司 | Multiport surveys the measuring method and inter-network settlement method of bandwidth |
| CN109361575A (en) * | 2018-12-20 | 2019-02-19 | 哈尔滨工业大学（威海） | A kind of method and its system obtaining analysis DNS data on flows |
| CN109905288A (en) * | 2018-12-21 | 2019-06-18 | 中国科学院信息工程研究所 | A kind of application service classification method and device |
| CN111245975A (en) * | 2020-03-15 | 2020-06-05 | 上海商米科技集团股份有限公司 | Method and device for determining attribution of flow information |
| CN111431771A (en) * | 2020-04-07 | 2020-07-17 | 江苏省互联网行业管理服务中心 | Anti-noise interference urban area network data verification device |
| CN111625359A (en) * | 2020-05-25 | 2020-09-04 | 北京金山云网络技术有限公司 | Method and device for determining CDN usage of user and terminal equipment |
| CN112492056A (en) * | 2020-11-13 | 2021-03-12 | 中盈优创资讯科技有限公司 | IP address use analysis method and device |
| CN112565106A (en) * | 2019-09-26 | 2021-03-26 | 中国移动通信集团河北有限公司 | Flow business identification method, device, equipment and computer storage medium |
| CN112714078A (en) * | 2019-10-24 | 2021-04-27 | 中兴通讯股份有限公司 | Network traffic identification method and device, storage medium and server |
| CN113746654A (en) * | 2020-05-29 | 2021-12-03 | 中国移动通信集团河北有限公司 | IPv6 address management and flow analysis method and device |
| CN114338471A (en) * | 2021-12-28 | 2022-04-12 | 浙江云诺通信科技有限公司 | Analysis method based on ICP record combination netflow |
| CN117221242A (en) * | 2023-09-01 | 2023-12-12 | 安徽慢音科技有限公司 | Network flow direction identification method, device and medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2006090392A2 (en) * | 2005-02-24 | 2006-08-31 | Rsa Security Inc. | System and method for detecting and mitigating dns spoofing trojans |
| CN101990003A (en) * | 2010-10-22 | 2011-03-23 | 西安交通大学 | User action monitoring system and method based on IP address attribute |
| CN102710504A (en) * | 2012-05-16 | 2012-10-03 | 华为技术有限公司 | Application identification method and application identification device |
| CN103404182A (en) * | 2012-12-26 | 2013-11-20 | 华为技术有限公司 | Method and apparatus for preventing illegal access of business |
| CN103685601A (en) * | 2013-12-10 | 2014-03-26 | 华为技术有限公司 | Application identification method and device |
-
2016
- 2016-08-22 CN CN201610694311.1A patent/CN106452940A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2006090392A2 (en) * | 2005-02-24 | 2006-08-31 | Rsa Security Inc. | System and method for detecting and mitigating dns spoofing trojans |
| CN101990003A (en) * | 2010-10-22 | 2011-03-23 | 西安交通大学 | User action monitoring system and method based on IP address attribute |
| CN102710504A (en) * | 2012-05-16 | 2012-10-03 | 华为技术有限公司 | Application identification method and application identification device |
| CN103404182A (en) * | 2012-12-26 | 2013-11-20 | 华为技术有限公司 | Method and apparatus for preventing illegal access of business |
| CN103685601A (en) * | 2013-12-10 | 2014-03-26 | 华为技术有限公司 | Application identification method and device |
Cited By (18)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107809353A (en) * | 2017-11-03 | 2018-03-16 | 赛尔网络有限公司 | Multiport surveys the measuring method and inter-network settlement method of bandwidth |
| CN107809353B (en) * | 2017-11-03 | 2020-10-13 | 赛尔网络有限公司 | Method for measuring multi-port actual measurement bandwidth and internetwork settlement method |
| CN109361575A (en) * | 2018-12-20 | 2019-02-19 | 哈尔滨工业大学（威海） | A kind of method and its system obtaining analysis DNS data on flows |
| CN109905288A (en) * | 2018-12-21 | 2019-06-18 | 中国科学院信息工程研究所 | A kind of application service classification method and device |
| CN109905288B (en) * | 2018-12-21 | 2021-09-14 | 中国科学院信息工程研究所 | Application service classification method and device |
| CN112565106B (en) * | 2019-09-26 | 2023-04-28 | 中国移动通信集团河北有限公司 | Traffic service identification method, device, equipment and computer storage medium |
| CN112565106A (en) * | 2019-09-26 | 2021-03-26 | 中国移动通信集团河北有限公司 | Flow business identification method, device, equipment and computer storage medium |
| CN112714078A (en) * | 2019-10-24 | 2021-04-27 | 中兴通讯股份有限公司 | Network traffic identification method and device, storage medium and server |
| CN111245975A (en) * | 2020-03-15 | 2020-06-05 | 上海商米科技集团股份有限公司 | Method and device for determining attribution of flow information |
| CN111431771A (en) * | 2020-04-07 | 2020-07-17 | 江苏省互联网行业管理服务中心 | Anti-noise interference urban area network data verification device |
| CN111431771B (en) * | 2020-04-07 | 2022-11-18 | 江苏省互联网行业管理服务中心 | Anti-noise interference urban area network data verification device |
| CN111625359B (en) * | 2020-05-25 | 2023-04-18 | 北京金山云网络技术有限公司 | Method and device for determining CDN usage of user and terminal equipment |
| CN111625359A (en) * | 2020-05-25 | 2020-09-04 | 北京金山云网络技术有限公司 | Method and device for determining CDN usage of user and terminal equipment |
| CN113746654A (en) * | 2020-05-29 | 2021-12-03 | 中国移动通信集团河北有限公司 | IPv6 address management and flow analysis method and device |
| CN113746654B (en) * | 2020-05-29 | 2024-01-12 | 中国移动通信集团河北有限公司 | IPv6 address management and flow analysis method and device |
| CN112492056A (en) * | 2020-11-13 | 2021-03-12 | 中盈优创资讯科技有限公司 | IP address use analysis method and device |
| CN114338471A (en) * | 2021-12-28 | 2022-04-12 | 浙江云诺通信科技有限公司 | Analysis method based on ICP record combination netflow |
| CN117221242A (en) * | 2023-09-01 | 2023-12-12 | 安徽慢音科技有限公司 | Network flow direction identification method, device and medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106452940A (en) | Method and device for identifying Internet business flow ownership | |
| CN103119907B (en) | It is provided for the system and method for the smart group of access control | |
| US20190213326A1 (en) | Self-adaptive application programming interface level security monitoring | |
| CN103917967B (en) | For configuring the network control system of middleboxes | |
| CN103403707B (en) | The system and method exchanged for database proxy request | |
| TW201835784A (en) | The internet of things | |
| CN109076028A (en) | Heterogeneous software defines the differential section in network environment | |
| CN108259371A (en) | A kind of network flow data analysis method and device based on stream process | |
| CN102984159B (en) | Based on secure accessing logic control method and the Platform Server of terminal access behavior | |
| US20080034438A1 (en) | Multiple hierarchy access control method | |
| CN103617287A (en) | Log management method and device in distributed environment | |
| CN102663009B (en) | Web-service integration method supporting data privatization of enterprise users | |
| CN105187378A (en) | Computerized System And Method For Handling Network Traffic | |
| CN107277086A (en) | Transaction processing system, method for processing business and service updating method | |
| CN112699089B (en) | Data sharing system, data sharing method and device | |
| CN103530379B (en) | tree structure data display method and device | |
| CN103414605A (en) | Desktop cloud monitoring method based on exchange gateway | |
| CN106464584A (en) | Providing router information according to a programmatic interface | |
| KR102435498B1 (en) | System and method to control a cross domain workflow based on a hierachical engine framework | |
| US20130152102A1 (en) | Runtime-agnostic management of applications | |
| CN106063204A (en) | Domain name server traffic volume estimation | |
| CN108521362A (en) | A kind of network architecture and its access method based on P2P-VPN | |
| CN103533094B (en) | Coding all-in-one and coding system | |
| KR20180047467A (en) | System and method for providing user profile | |
| Poltavtseva et al. | High-performance NIDS architecture for enterprise networking |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170222 |
|
| RJ01 | Rejection of invention patent application after publication |