CN107370753A - A kind of data pack protocol parses field processing method and system - Google Patents
A kind of data pack protocol parses field processing method and system Download PDFInfo
- Publication number
- CN107370753A CN107370753A CN201710729849.6A CN201710729849A CN107370753A CN 107370753 A CN107370753 A CN 107370753A CN 201710729849 A CN201710729849 A CN 201710729849A CN 107370753 A CN107370753 A CN 107370753A
- Authority
- CN
- China
- Prior art keywords
- dictionary
- data
- field
- data field
- packet
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/06—Notations for structuring of protocol data, e.g. abstract syntax notation one [ASN.1]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Communication Control (AREA)
Abstract
The invention discloses a kind of data pack protocol to parse field processing method and system, the described method comprises the following steps：S10：Obtain packet；S20：Establish the dictionary for including data field；When obtaining a large number of users network behavior data towards big data business, the Rapid matching and extraction process of data pack protocol field are helped；S30：Parse the packet content；S40：The value of information parsed is saved into the correspondence position of the dictionary.Using the present invention, the problem of can solve the problem that the logical miss and low treatment effeciency occurred in the parsing of available data packet protocol, the integration that the user behavior data in the mass data bag under big data can be standardized, preferably to service big data analysis.
Description
Technical field
The present invention relates to network communication field, more particularly to a kind of data pack protocol parsing field processing method and system.
Background technology
In network, the measured agreement of both sides of communication is communicated.When communicating transmission data, data are presented
Form be miscellaneous, the data of wherein most are transmitted after being stored in the form of packet, it is desirable to are obtained
Packet relevant content information value is taken to carry out procotol parsing.
Procotol parsing refers to the agreement head and tail by program network data package, so as to understand information and correlation
Packet produce and transmitting procedure in behavior.The protocol analysis of traditional network equipment is normally based on the side of protocol stack
What formula was carried out, protocol stack is the resolution system of a layering, after each layer handles corresponding head, peels off header data and is thrown to upper strata
Pass, until application layer.In application layer according to specific application type, word is carried out to application protocol by corresponding application processing module
Piecewise analysis, see whether match some predetermined conditions, so as to extract some valuable fields.
With the arrival of big data and cloud computing era, above-mentioned traditional procotol parsing, which is gradually shown, is unfavorable for sea
Measure the one side of the standardization processing of user behavior data, this simple field character combination, for business demand field quantity
In the case of less, the efficiency of processing can also receive, but when the field quantity of business demand is bigger, number just occurs
According to confusion, treatment effeciency is also just undesirable.
Summarized according to a large amount of big data staff research experiences, the skill of mass data processing substantially has following several：
First, from outstanding data base tool, excellent code is write；2nd, division operation is carried out to mass data；3rd, establish extensive
Index, Optimizing Queries；4th, caching mechanism is established, uses interim table and middle table.With well any one therein, to sea
All can more it be got twice the result with half the effort for amount data processing.
Patent document such as Publication No. CN102143148B discloses a kind of " parameter acquiring for puppy parc parsing
With general protocol parsing method and device ", this method includes：Obtain message to be resolved；According to state transition set in advance
Table, matching regular expressions are carried out to the message to be resolved, obtain status number corresponding to the matched rule matched and
The positional information of character；According to regular matching table set in advance, matched rule corresponding with the status number is obtained, according to
The message to be resolved of the matched rule and positional information and caching, exports the field of needs, and the matched rule is starting
Point sub-rule or end point sub-rule.This invents the field that needs are matched by the way of middle table, without according to each agreement
The characteristics of obtain corresponding to delimiter, it is possible to achieve to the general procedure of agreement.But in face of the treatment effeciency side of mass data
Face is also to be strengthened.
And for example Publication No. CN102571922B patent document discloses " a kind of data flow processing method and device ", side
Method includes：It is determined that the data flow received meets HTTP-POST agreements, and network address corresponding to the data flow belongs to predetermined
During the network address set gone out, the field value of feature field corresponding to the data flow is extracted, this method meets HTTP- by checking whether
Whether POST agreements and corresponding network address, which belong to the network address set predefined, is screened the follow-up data audited
Stream, the efficiency of audit can be improved.Also, packet capturing analysis tool is utilized, parses field name set corresponding to this feature field,
It is low and the problem of easily omit to avoid artificial Lookup Field name efficiency, and improves the accuracy of audit.But this method is suitable
It is not extensive enough with scope.
The content of the invention
The technical problem to be solved in the present invention is to be directed to above-mentioned the deficiencies in the prior art, there is provided one kind can solve the problem that existing number
The problem of logical miss and low treatment effeciency for occurring in being parsed according to packet protocol, can be in the mass data bag under big data
The integration that user behavior data is standardized, the big data pack protocol parsing field processing method and system of operation strategies.
To achieve these goals, the technical solution adopted by the present invention is：
A kind of data pack protocol parses field processing method, the described method comprises the following steps：
S10：Obtain packet；The packet can be the packet under any protocol status, also referred to as message.
S20：Establish the dictionary for including data field；Establishing dictionary can be according to the knot of packet in itself under each protocol status
Structure feature crawls out, and establishes and form according to corresponding order and form, and different pieces of information bag has different structure feature.
S30：Parse the packet content；
S40：The value of information parsed is saved into the correspondence position of the dictionary.Described information value is exactly to include network
The value of behavioral data, different values have corresponding position in the dictionary.
Further, the step S20 includes：
S21：Required data field is displayed out according to the packets fields architectural feature, to establish the corresponding packet
The dictionary for including data field；The data field of packet is a lot, and some are that some for including the value of information are simply conventional
Head field, internal memory can be reduced by only displaying out required data field, at the same improve field extraction process and matching efficiency.
S22：Initialize the value of information corresponding to Data field names in the dictionary.Data word in the dictionary after initialization
The value of information corresponding to name section is sky.
Further, the step S20 includes：
S21：Required data field is displayed out according to the packets fields architectural feature, to establish the corresponding packet
The dictionary for including data field；
S22：Initialize the value of information corresponding to Data field names in the dictionary；
S23：All Data field names included in the dictionary are displayed out, to establish list of primary keys.Led by establishing
Comparison data is inquired about in key list, it is possible to reduce the inquiry quantity of data field, accelerates the resolving of information.
Further, the step S30 includes：
S31：When being resolved to data field, then judge that the Data field names whether there is in the dictionary；
S32：If in the presence of, perform step S40, if being not present, continue to parse.
Further, if the parsing carried out in the step S30 in application layer, then comprise the following steps：
S31：The packet is subjected to data conversion, with layer dictionary that be applied.Due to the data field lattice of application layer
Formula and species are unfixed, and packet particularly to be carried out to the conversion of data in application layer, data normalization is combed
After reason, then it is standardized the resolving of data.
S32：The application layer dictionary is checked, judges that the Data field names in the application layer dictionary whether there is in institute
State in dictionary；
S33：If in the presence of, perform step S40, if being not present, continue to parse.
A kind of data pack protocol parses field processing system, and the system includes：
Acquisition module, for obtaining packet；
Module is established, for establishing the dictionary for including data field；
Parsing module, for parsing the packet content；
Preserving module, for the value of information parsed to be saved into the correspondence position of the dictionary.
Further, the module of establishing includes：
Display unit, for displaying out required data field according to the packets fields architectural feature, to establish correspondingly
The dictionary for including data field of the packet；
Initialization unit, for initializing the value of information corresponding to Data field names in the dictionary.
Further, the module of establishing also includes：
List of primary keys unit, for displaying out all Data field names included in the dictionary, to establish primary key column
Table.
Further, the parsing module includes：
Judging unit, for when being resolved to data field, then judging that the Data field names whether there is in the word
In allusion quotation.
Further, the parsing module includes：
Converting unit, for the packet to be carried out into data conversion, with layer dictionary that be applied；
Judging unit, for checking the application layer dictionary, judge that the Data field names in the application layer dictionary are
It is no to be present in the dictionary.
After adopting the above technical scheme, the beneficial effects of the invention are as follows：By establishing dictionary, it would be desirable to list it is whole
Close same place, make data resolving it is apparent more in order, help accelerate Data Matching and meet it is accurate under mass data
Match at a high speed；By establishing list of primary keys, it is possible to reduce matching task total amount, accelerate the matching of data field, while make matching
Accuracy is higher；By establishing application layer dictionary, solution application layer message field is varied, is unfavorable for data normalization processing
The problem of；By the way that data message primary system one to be saved into the correspondence position of the dictionary, it is easy to dictionary described in later use to analyze
A large number of users network behavior data, the user's request of data behind is clearly understood, to provide the user more preferable service.
Brief description of the drawings
In order to illustrate the embodiments of the present invention more clearly or prior art technical scheme, accompanying drawing is as follows：
Fig. 1 is that a kind of data pack protocol that the embodiment of the present invention 1 provides parses field process flow figure；
Fig. 2 is that a kind of data pack protocol that the embodiment of the present invention 2 provides parses field process flow figure；
Fig. 3 is that a kind of data pack protocol that the embodiment of the present invention 2 provides parses field process flow figure；
Fig. 4 is that a kind of data pack protocol that the embodiment of the present invention 3 provides parses field process flow figure；
Fig. 5 is that a kind of data pack protocol that the embodiment of the present invention 4 provides parses field processing system structure chart.
Embodiment
It is the specific embodiment of the present invention and with reference to accompanying drawing below, technical scheme is further described,
But the present invention is not limited to these embodiments.
With the arrival of big data and cloud computing era, data become more and more important, and the form that data are presented is each
Formula various kinds, wherein most data are stored in the form of packet, therefore are just needed according to big data business demand,
Carry out mass data packet protocol parsing field parallelization batch processing.
But traditional protocol fields processing is packet to be displayed according to protocol levels field or simple word
Section character combination.But the method for display is feasible in the case of every layer of field format is unified, but in application layer, field
Information there may be hundreds of, and the field information that user behavior difference is included is also different, unfavorable using the method for display
In the standardization processing of mass users behavioral data, therefore it is worthless.Simple field character combination in addition, for data
In the case of business demand field negligible amounts, the efficiency of processing can also receive, but when the field amount of data traffic requirement
When bigger, the drawbacks such as logical miss and treatment effeciency be low just occur.
For problems described above, needs of the present invention according to big data business platform to user network behavioral data will
The data field that may be included in packet displays out according to certain order and form, establishes dictionary and is initialized, so
Afterwards during resolve packet is carried out, whenever detecting the field name parsed included in dictionary, then by the field
Corresponding value replaces the initialization value in dictionary at corresponding field title.So as to realize the packet towards big data business demand
Protocol fields extraction process and Rapid matching.
Embodiment 1
As shown in figure 1, the present embodiment provides a kind of data pack protocol parsing field processing method, methods described includes following
Step：
S10：Obtain packet；The packet can be the packet under any protocol status, also referred to as message.
S20：Establish the dictionary for including data field；
Dictionary is established in this step will likely to be included according to the architectural feature of packet in itself under each protocol status
Data field displays out, and establishes and form according to corresponding order and form, and different pieces of information bag has different structure feature, this
The mode that a little different features may be by web crawlers is captured and cleaned out.It should be noted that establish dictionary
It need not be established by resolve packet process.
The dictionary established in this step arranges clearly demand inventory such as portion, and content corresponding to inventory is will be from data
Check and extract in Packet analyzing.
S30：Parse the packet content；
In this step, the mode of parsing is exactly that the order of field is read, will should whenever reading one data word section
Data field compares with the data field in dictionary, when data field is consistent, it is possible to which it is exactly to be needed in dictionary to determine it
Information, conversely, comparison result is that data field is inconsistent, then it may proceed to parse；Multiple repeatedly above-mentioned parsing comparison process, until
Resolve packet terminates.
S40：The value of information parsed is saved into the correspondence position of the dictionary.It will particularly be parsed in step S30
The value of information in the data field gone out is saved into the dictionary at identical data field name.
The value of information described in this step is exactly to include the value of network behavior data, and field name corresponding to this value
It must be present in dictionary, different values has corresponding position, rather than random distribution in the dictionary in addition,
Each value is stored under its field name in the present embodiment, is formed and corresponded, to ensure the accuracy of information.
The method that the present embodiment provides, which can standardize mass data, to be integrated, and is matched user network behavioral data, can be made
The accuracy rate and treatment effeciency of information all greatly improve.
Embodiment 2
As shown in Figure 2 and Figure 3, the present embodiment and the difference of embodiment before are, the present embodiment provides and specifically establishes word
The method and parsing process data packet, the step S20 of allusion quotation include：
S21：Required data field is displayed out according to the packets fields architectural feature, to establish the corresponding packet
The dictionary for including data field；It should be noted that the data field of packet is a lot, some include the value of information
Some are conventional head field, and internal memory can be reduced by only displaying out required data field, while improve field extraction process
With the efficiency of matching.
S22：Initialize the value of information corresponding to Data field names in the dictionary.Data word in the dictionary after initialization
The value of information corresponding to name section is sky.
So far, dictionary, which has been established, is finished, and the other information in dictionary is improved during wait resolve packet.
The step S30 includes：
S31：When being resolved to data field, then judge that the Data field names whether there is in the dictionary；
S32：If in the presence of, perform step S40, if being not present, continue to parse.
Such as, it would be desirable to data field be set to key, the corresponding informance value after initialization is null, then dictionary structure
With regard to following dic={ key (1)：null,key(2)：null,…,key(n)：null}.The actual letter checked when parsing packet
It is exactly key (1) to cease, key (2) ..., key (n), but all fields in dictionary are checked in this step, including null.
Field A and key (1) is parsed during resolve packet unanimously, then is replaced value A1 corresponding to field A
Null under key (1), dictionary structure become dic={ key (1)：A1,key(2)：null,…,key(n)：Null }, Ran Houji
Continuous parsing.It should be noted that it is not that each element key (i) can find value corresponding to it, this is mainly had by user network
Body behavior decision.
Or more optimize, the step S20 includes：
S21：Required data field is displayed out according to the packets fields architectural feature, to establish the corresponding packet
The dictionary for including data field；
S22：Initialize the value of information corresponding to Data field names in the dictionary；
S23：All Data field names included in the dictionary are displayed out, to establish list of primary keys.Led by establishing
Comparison data is inquired about in key list, it is possible to reduce the inquiry quantity of data field, accelerates the resolving of information.
In order to reduce parsing burden, accelerate resolution speed, this step combines Analytic principle by all data words in dictionary
Name section extracts, and is incorporated into same list of primary keys, and the mark mode of wherein list of primary keys is as follows：Keys_big=
dic.key()。
The method for establishing dictionary that the present embodiment proposes, can more preferable service data Packet analyzing, quickening parsing progress, word
The Data Matching mode clear logic of allusion quotation, also can guarantee that in the resolving of mass data bag and quickly and accurately matches.
The step S30 includes：
S31：When being resolved to data field, then judge that the Data field names whether there is in the list of primary keys；
In this step, data field is resolved to, the data field and the content in keys_big are compared, judge data word
Section whether there is in keys_big；, can be with a more mesh provided with list of primary keys compared to the resolving of no list of primary keys
That is clear matches corresponding data, and resolving fast and accurately, avoids resolving from interim card occur.
S32：If in the presence of, perform step S40, if being not present, continue to parse.
If the data field is present in keys_big in this step, just corresponding data field value is saved into correspondingly
Key (i) places.
Embodiment 3
Four layers below application layer, protocol architecture and content are all what more regular, mutual order was all to determine,
Therefore the extraction of protocol analysis field and dictionary field value matching operation can sequentially be carried out.But can in application layer, field information
There can be hundreds of, and the field information that user behavior difference is included is also different, the protocol analysis word carried out to application layer
Section processing needs in different ways.
As shown in figure 4, the present embodiment and the difference of embodiment 2 are, the present embodiment is provided more to meet and solved in application layer
The method of analysis, comprise the following steps in the step S30：
S31：The packet is subjected to data conversion, with layer dictionary that be applied.
It is special in application layer because the data field format and species of application layer are unfixed in this step
By packet carry out data conversion, after data normalization is combed, then be standardized the resolving of data.It is described to answer
With the dictionary be in structure with layer dictionary it is identical, unlike data state of value in the dictionary be to be deposited, and institute
It is complete to state the data value in application layer dictionary.
Application layer dictionary is labeled as dic_AE in this step, is also application layer dictionary mark application layer dictionary master in addition
Key list keys_AE=dic_AE.keys (), cross-check information is quickly found out during to parse, and checked successively in keys_AE
Each element keys (i).
S32：The application layer dictionary is checked, judges that the Data field names in the application layer dictionary whether there is in institute
State in dictionary；
In this step, the keys_AE that checks in the application layer dictionary judges whether corresponding keys (i) and institute
The keys (i) stated in the keys_big of dictionary is consistent.
S33：If in the presence of, perform step S40, if being not present, continue to parse.
In this step, if in the presence of consistent keys (i), keys (i) values in the keys_AE of application layer dictionary are preserved
Enter keys (i) places in the keys_big of dictionary, that is, dic [key (i)]=dic_AE [key (i)].
In summary, the application layer data conversion method that the present embodiment provides can be compatible well with the dictionary of foundation,
And logical miss will not occur due to the variation of field information, it can faster match user network behavioral data.
Embodiment 4
As shown in figure 5, the present embodiment provides a kind of data pack protocol parsing field processing system, the system includes：
Acquisition module 100, for obtaining packet；
Module 200 is established, for establishing the dictionary for including data field；
Parsing module 300, for parsing the packet content；
Preserving module 400, for the value of information parsed to be saved into the correspondence position of the dictionary.
The module 200 of establishing includes：
Display unit 210, for displaying out required data field according to the packets fields architectural feature, with foundation pair
Answer the dictionary for including data field of the packet；
Initialization unit 220, for initializing the value of information corresponding to Data field names in the dictionary.
Preferably, the module of establishing also includes：
List of primary keys unit 230, for displaying out all Data field names included in the dictionary, to establish major key
List.
The parsing module 300 includes：
Converting unit 310, for the packet to be carried out into data conversion, with layer dictionary that be applied；
Judging unit 320, for checking the application layer dictionary, judge the Data field names in the application layer dictionary
With the presence or absence of in the dictionary.
When it is the packet in application layer to detect packet, converting unit 310 can just be triggered work, converting unit
310 convert the data into it is consistent with the dictionary structure, can be with more targeted, the accurate appropriate parsing application number of plies
According to.Help to simplify dictionary data field value matching process.Then judging unit 320 judges the data word in the application layer dictionary
Name section whether there is in the dictionary.
When packet is the packet in other protocol layers, parsing module 300 is resolved to data field, can enable judgement
Unit 320 judges that the Data field names whether there is in the dictionary, judges after existing, and preserving module 400 will parse
The value of information of the data field gone out is saved at the Data field names of the dictionary.
The system that the present embodiment provides is provided by the method mentioned in above-described embodiment, can be with by corresponding module setting
Preferable improving method performs, the network data in the acquisition mass data bag that can standardize, and is not in logical miss
And efficiency it is low the problem of, it is more stable to serve big data analysis.
Specific embodiment described herein is only to spirit explanation for example of the invention.Technology belonging to the present invention is led
The technical staff in domain can be made various modifications or supplement to described specific embodiment or be replaced using similar mode
Generation, but without departing from the spiritual of the present invention or surmount scope defined in appended claims.
Claims (10)
1. a kind of data pack protocol parses field processing method, it is characterised in that the described method comprises the following steps：
S10：Obtain packet；
S20：Establish the dictionary for including data field；
S30：Parse the packet content；
S40：The value of information parsed is saved into the correspondence position of the dictionary.
A kind of 2. data pack protocol parsing field processing method according to claim 1, it is characterised in that the step
S20 includes：
S21：Required data field is displayed out according to the packets fields architectural feature, to establish the bag of the corresponding packet
Dictionary containing data field；
S22：Initialize the value of information corresponding to Data field names in the dictionary.
A kind of 3. data pack protocol parsing field processing method according to claim 1, it is characterised in that the step
S20 includes：
S21：Required data field is displayed out according to the packets fields architectural feature, to establish the bag of the corresponding packet
Dictionary containing data field；
S22：Initialize the value of information corresponding to Data field names in the dictionary；
S23：All Data field names included in the dictionary are displayed out, to establish list of primary keys.
A kind of 4. data pack protocol parsing field processing method according to claim 1, it is characterised in that the step
S30 includes：
S31：When being resolved to data field, then judge that the Data field names whether there is in the dictionary；
S32：If in the presence of, perform step S40, if being not present, continue to parse.
A kind of 5. data pack protocol parsing field processing method according to claim 1, it is characterised in that the step
If the parsing carried out in S30 in application layer, then comprise the following steps：
S31：The packet is subjected to data conversion, with layer dictionary that be applied.
S32：The application layer dictionary is checked, judges that the Data field names in the application layer dictionary whether there is in the word
In allusion quotation；
S33：If in the presence of, perform step S40, if being not present, continue to parse.
6. a kind of data pack protocol parses field processing system, it is characterised in that the system includes：
Acquisition module, for obtaining packet；
Module is established, for establishing the dictionary for including data field；
Parsing module, for parsing the packet content；
Preserving module, for the value of information parsed to be saved into the correspondence position of the dictionary.
7. a kind of data pack protocol parsing field processing system according to claim 6, it is characterised in that described to establish mould
Block includes：
Display unit, for displaying out required data field according to the packets fields architectural feature, with described in foundation correspondingly
The dictionary for including data field of packet；
Initialization unit, for initializing the value of information corresponding to Data field names in the dictionary.
8. a kind of data pack protocol parsing field processing system according to claim 7, it is characterised in that described to establish mould
Block also includes：
List of primary keys unit, for displaying out all Data field names included in the dictionary, to establish list of primary keys.
A kind of 9. data pack protocol parsing field processing system according to claim 6, it is characterised in that the parsing mould
Block includes：
Judging unit, for when being resolved to data field, then judging that the Data field names whether there is in the dictionary.
A kind of 10. data pack protocol parsing field processing system according to claim 6, it is characterised in that the parsing
Module includes：
Converting unit, for the packet to be carried out into data conversion, with layer dictionary that be applied；
Judging unit, for checking the application layer dictionary, judge whether the Data field names in the application layer dictionary are deposited
In the dictionary.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710729849.6A CN107370753A (en) | 2017-08-23 | 2017-08-23 | A kind of data pack protocol parses field processing method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710729849.6A CN107370753A (en) | 2017-08-23 | 2017-08-23 | A kind of data pack protocol parses field processing method and system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN107370753A true CN107370753A (en) | 2017-11-21 |
Family
ID=60311325
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710729849.6A Pending CN107370753A (en) | 2017-08-23 | 2017-08-23 | A kind of data pack protocol parses field processing method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107370753A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110719296A (en) * | 2019-10-25 | 2020-01-21 | 福建网能科技开发有限责任公司 | Method for automatically analyzing message data in terminal communication protocol |
| CN112165465A (en) * | 2020-09-16 | 2021-01-01 | 杭州安恒信息技术股份有限公司 | Data processing method and device for outgoing third-party platform and electronic device |
| CN115658240A (en) * | 2022-12-23 | 2023-01-31 | 杭州登虹科技有限公司 | Multi-protocol dictionary grid solution method based on cloud-native technology and storage medium |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103491089A (en) * | 2013-09-22 | 2014-01-01 | 北京锐安科技有限公司 | Transcoding method and system of data recovery based on HTTP |
| US20160224542A1 (en) * | 2015-02-03 | 2016-08-04 | Abbyy Infopoisk Llc | System and method for generating and using user ontological models for natural language processing of user-provided text |
| CN106557974A (en) * | 2016-11-21 | 2017-04-05 | 中国农业银行股份有限公司 | A kind of processing method and system of IMIX protocol datas |
| CN106713357A (en) * | 2017-01-24 | 2017-05-24 | 南京仁谷系统集成有限公司 | Universal network protocol analysis method |
-
2017
- 2017-08-23 CN CN201710729849.6A patent/CN107370753A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103491089A (en) * | 2013-09-22 | 2014-01-01 | 北京锐安科技有限公司 | Transcoding method and system of data recovery based on HTTP |
| US20160224542A1 (en) * | 2015-02-03 | 2016-08-04 | Abbyy Infopoisk Llc | System and method for generating and using user ontological models for natural language processing of user-provided text |
| CN106557974A (en) * | 2016-11-21 | 2017-04-05 | 中国农业银行股份有限公司 | A kind of processing method and system of IMIX protocol datas |
| CN106713357A (en) * | 2017-01-24 | 2017-05-24 | 南京仁谷系统集成有限公司 | Universal network protocol analysis method |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110719296A (en) * | 2019-10-25 | 2020-01-21 | 福建网能科技开发有限责任公司 | Method for automatically analyzing message data in terminal communication protocol |
| CN110719296B (en) * | 2019-10-25 | 2022-11-22 | 福建网能科技开发有限责任公司 | Method for automatically analyzing message data in terminal communication protocol |
| CN112165465A (en) * | 2020-09-16 | 2021-01-01 | 杭州安恒信息技术股份有限公司 | Data processing method and device for outgoing third-party platform and electronic device |
| CN112165465B (en) * | 2020-09-16 | 2023-04-07 | 杭州安恒信息技术股份有限公司 | Data processing method and device for outgoing third-party platform and electronic device |
| CN115658240A (en) * | 2022-12-23 | 2023-01-31 | 杭州登虹科技有限公司 | Multi-protocol dictionary grid solution method based on cloud-native technology and storage medium |
| CN115658240B (en) * | 2022-12-23 | 2023-03-28 | 杭州登虹科技有限公司 | Multi-protocol dictionary grid solution method based on cloud-native and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109510815B (en) | Multi-level phishing website detection method and system based on supervised learning | |
| CN103368992B (en) | Message push method and device | |
| CN1312892C (en) | Method and apparatus for monitoring traffic in network | |
| CN102098331B (en) | Method and system for reducing WEB type application contents | |
| WO2022257436A1 (en) | Data warehouse construction method and system based on wireless communication network, and device and medium | |
| CN105847078B (en) | A kind of HTTP flow fining recognition methods based on DPI self-study mechanism | |
| CN105162626B (en) | Network flow depth recognition system and recognition methods based on many-core processor | |
| CN102664935B (en) | Method and system for associated output of WEB class user behavior and user information | |
| CN109117634A (en) | Malware detection method and system based on network flow multi-view integration | |
| CN108073391B (en) | Method and device for transmitting and processing JSON character string | |
| CN110012029A (en) | A kind of method and system for distinguishing encryption and non-encrypted compression flow | |
| CN109005145A (en) | A kind of malice URL detection system and its method extracted based on automated characterization | |
| CN105491018B (en) | A kind of network data security analysis method based on DPI technology | |
| CN107370753A (en) | A kind of data pack protocol parses field processing method and system | |
| CN106534164B (en) | Effective virtual identity depicting method based on cyberspace user identifier | |
| WO2011050545A1 (en) | Automatic analysis method for unknown application layer protocols | |
| CN107819646A (en) | A kind of net flow assorted system and method for distributed transmission | |
| CN109218124A (en) | DNS tunnel transmission detection method and device | |
| CN111107423A (en) | Video service playing card pause identification method and device | |
| CN104579974A (en) | Hash Bloom filter (HBF) for name lookup in NDN and data forwarding method | |
| CN105302885A (en) | Full-text data extraction method and device | |
| CN107818132A (en) | A kind of webpage agent discovery method based on machine learning | |
| CN112988762A (en) | Real-time identification and early warning method suitable for unit of losing message | |
| CN112104602A (en) | Network intrusion detection method based on CNN transfer learning | |
| CN104125254B (en) | Obtain the method and system of platform user data |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20171121 |
|
| RJ01 | Rejection of invention patent application after publication |