CN110120899A

CN110120899A - A kind of detection method of data flow, device, electronic equipment and storage medium

Info

Publication number: CN110120899A
Application number: CN201910389663.XA
Authority: CN
Inventors: 陈庆龙
Original assignee: Beijing Baidu Netcom Science and Technology Co Ltd
Current assignee: Beijing Baidu Netcom Science and Technology Co Ltd
Priority date: 2019-05-10
Filing date: 2019-05-10
Publication date: 2019-08-13
Anticipated expiration: 2039-05-10
Also published as: CN110120899B

Abstract

The embodiment of the invention discloses a kind of detection method of data flow, device, electronic equipment and storage mediums.The described method includes: receiving the original data stream that client device is sent and the access style for parsing the original data stream；If it is determined that the access style of the original data stream meets corresponding preposition personalized testing conditions, preposition detection is carried out to the original data stream by hook control centre；Logic is detected by predetermined core, and core detection is carried out to the data flow after preposition detection；If it is determined that the access style of the original data stream meets the personalized testing conditions of corresponding postposition, postposition detection is carried out to the data flow after core detection by the hook control centre.In the embodiment of the present invention, personalization detection logical AND core detection logic is separated from each other, and is independent of each other；Detection efficiency can be effectively improved, testing cost is reduced.

Description

A kind of detection method of data flow, device, electronic equipment and storage medium

Technical field

The present embodiments relate to Internet technical field more particularly to a kind of detection methods of data flow, device, electronics Equipment and storage medium.

Background technique

With being continuously increased for data stream type, different data flows is detected more and more important.Usually constructing One when being related to the detection system of multiple users, can go the entire detection system of design and implementation according to the demand of each user System.But with more and more user's access systems, personalized demand constantly can emerge out.

In response to this, different research staff can provide different processing modes, one of the most common type processing mode It is: various personalized detection logics is added in core detection logic, for meeting the detection demand of different users, still With being continuously added for personalized detection logic, core detection logic becomes increasingly complex, is not convenient for safeguarding；Existing inspection is used simultaneously Survey method, core logic and personalized detection logic close-coupled can shadows if personalization detection logic goes wrong at one Ring the normal operation of entire detection system.

Summary of the invention

In view of this, detection method, device, electronic equipment and storage that the embodiment of the present invention provides a kind of data flow are situated between Matter, personalization detection logical AND core detection logic are separated from each other, are independent of each other；Detection efficiency can be effectively improved, is reduced Testing cost.

In a first aspect, the embodiment of the invention provides a kind of detection methods of data flow, which comprises

Receive the original data stream that client device is sent and the access style for parsing the original data stream；

If it is determined that the access style of the original data stream meets corresponding preposition personalized testing conditions, pass through Hook control centre carries out preposition detection to the original data stream；

Logic is detected by predetermined core, and core detection is carried out to the data flow after preposition detection；

If it is determined that the access style of the original data stream meets the personalized testing conditions of corresponding postposition, pass through Data flow after core detects in the hook control centre carries out postposition detection.

In the above-described embodiments, the access style for determining the original data stream meets corresponding preposition Property testing conditions, comprising:

If in the corresponding hook logic of access style of the registered original data stream of hook registration center, in the hook Sub- registration center obtains the registration information of the corresponding hook logic of access style of the original data stream；

If in the registration information of the corresponding hook logic of the access style of the original data stream, there are the initial data The registration information of the corresponding preposition hook logic of the access style of stream, and the original data stream access style it is corresponding before Set the corresponding preposition hook of access style of the original data stream pre-saved in the registration information and database of hook logic The record information of sub- logic is identical, then determines that the access style of the original data stream meets corresponding preposition personalization Testing conditions.

It is in the above-described embodiments, described that preposition detection is carried out to the original data stream by hook control centre, comprising:

Determine that the corresponding preposition hook of the original data stream is patrolled in hook module by the hook control centre Volume；

Preposition detection is carried out to the original data stream by the corresponding preposition hook logic of the original data stream.

In the above-described embodiments, the access style for determining the original data stream meets of corresponding postposition Property testing conditions, comprising:

If in the registration information of the corresponding hook logic of the access style of the original data stream, there are the initial data The registration information of the corresponding postposition hook logic of the access style of stream, and the original data stream access style it is corresponding after Set the original data stream pre-saved in the registration information and the database of hook logic access style it is corresponding after The record information for setting hook logic is identical, then determines that the access style of the original data stream meets of corresponding postposition Property testing conditions.

It is in the above-described embodiments, described that postposition detection is carried out to the data flow after core detection by hook control centre, Include:

Determine that the corresponding postposition hook of the original data stream is patrolled in hook module by the hook control centre Volume；

Postposition detection is carried out to the data flow after core detection by the original data stream corresponding postposition hook logic.

In the above-described embodiments, described that the original data stream pair is determined in hook module by hook control centre The preposition hook logic answered, comprising:

Preposition detection request is sent to the hook control centre；Wherein, the original is carried in the preposition detection request The access style of beginning data flow；

The preposition detection that the hook control centre is returned in response to the preposition detection request is received to respond；Wherein, institute State the identification information that the corresponding preposition hook logic of the original data stream is carried in preposition detection response.

In the above-described embodiments, described to determine that the original data stream is corresponding in hook module by hook control centre Postposition hook logic, comprising:

Postposition detection request is sent to the hook control centre；Wherein, the original is carried in the postposition detection request The access style of beginning data flow；

It receives the hook control centre and detects the postposition detection response that request returns in response to the postposition；Wherein, institute State the identification information that the corresponding postposition hook logic of the original data stream is carried in postposition detection response.

In the above-described embodiments, before sending preposition detection request to the hook control centre described, the method Further include:

The corresponding preposition hook logic of the original data stream is configured in the hook module；And in the hook module The middle identification information for distributing the corresponding preposition hook logic of the original data stream；Wherein, before the original data stream is corresponding Set hook logic to include at least: data adaptation, data are exempted or the logic of traffic monitoring.

In the above-described embodiments, before sending postposition detection request to the hook control centre described, the method Further include:

The corresponding postposition hook logic of the original data stream is configured in the hook module；And in the hook module The middle identification information for distributing the corresponding postposition hook logic of the original data stream；Wherein, after the original data stream is corresponding It sets hook logic to include at least: data subscription or the logic of data statistics.

Second aspect, the embodiment of the invention provides a kind of detection device of data flow, described device includes: reception mould Block, preposition detection module, core detection module and postposition detection module；Wherein,

The receiving module, for receiving the original data stream of client device transmission and parsing the original data stream Access style；

The preposition detection module, for if it is determined that the access style of the original data stream meet it is corresponding preposition Personalized testing conditions, preposition detection is carried out to the original data stream by hook control centre；

The core detection module flows into the data after preposition detection for detecting logic by predetermined core The detection of row core；

The postposition detection module, for if it is determined that the access style of the original data stream meets corresponding postposition Personalized testing conditions, by the hook control centre to core detection after data flow carry out postposition detection.

In the above-described embodiments, the preposition detection module, if being specifically used in the registered original of hook registration center The corresponding hook logic of the access style of beginning data flow obtains the access class of the original data stream in the hook registration center The registration information of the corresponding hook logic of type；If the registration information of the corresponding hook logic of the access style of the original data stream It is middle there are the registration information of the corresponding preposition hook logic of the access style of the original data stream, and the original data stream Access style corresponding preposition hook logic registration information and database in the original data stream that pre-saves connect The record information for entering the corresponding preposition hook logic of type is identical, then determine the original data stream access style meet and its Corresponding preposition personalized testing conditions.

In the above-described embodiments, the preposition detection module includes: the first determining submodule and preposition detection sub-module；Its In,

Described first determines submodule, described original for being determined in hook module by the hook control centre The corresponding preposition hook logic of data flow；

The preposition detection sub-module is used for through the corresponding preposition hook logic of the original data stream to described original Data flow carries out preposition detection.

In the above-described embodiments, the postposition detection module, if specifically for the access style pair of the original data stream There are the registrations of the corresponding postposition hook logic of the access style of the original data stream in the registration information for the hook logic answered Information, and it is pre- in the registration information of the corresponding postposition hook logic of access style of the original data stream and the database The record information of the corresponding postposition hook logic of the access style of the original data stream first saved is identical, then determines the original The access style of beginning data flow meets the personalized testing conditions of corresponding postposition.

In the above-described embodiments, the postposition detection module includes: the second determining submodule and postposition detection sub-module；Its In,

Described second determines submodule, described original for being determined in hook module by the hook control centre The corresponding postposition hook logic of data flow；

The postposition detection sub-module, for being detected by the corresponding postposition hook logic of the original data stream to core Data flow afterwards carries out postposition detection.

In the above-described embodiments, it described first determines submodule, is specifically used for sending to the hook control centre preposition Detection request；Wherein, the access style of the original data stream is carried in the preposition detection request；Receive the hook scheduling The preposition detection that center is returned in response to the preposition detection request responds；Wherein, described in being carried in the preposition detection response The identification information of the corresponding preposition hook logic of original data stream.

In the above-described embodiments, it described second determines submodule, is specifically used for sending postposition to the hook control centre Detection request；Wherein, the access style of the original data stream is carried in the postposition detection request；Receive the hook scheduling The postposition that request returns is detected in response to the postposition and detects response in center；Wherein, described in being carried in the postposition detection response The identification information of the corresponding postposition hook logic of original data stream.

In the above-described embodiments, the preposition detection module further include: the first configuration submodule, in the hook mold The corresponding preposition hook logic of the original data stream is configured in block；And the original data stream is distributed in the hook module The identification information of corresponding preposition hook logic；Wherein, the corresponding preposition hook logic of the original data stream includes at least: number According to adaptation, the logic of data exemption or traffic monitoring.

In the above-described embodiments, the postposition detection module further include: the second configuration submodule, in the hook mold The corresponding postposition hook logic of the original data stream is configured in block；And the original data stream is distributed in the hook module The identification information of corresponding postposition hook logic；Wherein, the corresponding postposition hook logic of the original data stream includes at least: number According to the logic of subscription or data statistics.

The third aspect, the embodiment of the invention provides a kind of electronic equipment, comprising:

One or more processors；

Memory, for storing one or more programs,

When one or more of programs are executed by one or more of processors, so that one or more of processing Device realizes the detection method of data flow described in any embodiment of that present invention.

Fourth aspect, the embodiment of the invention provides a kind of storage mediums, are stored thereon with computer program, the program quilt The detection method of data flow described in any embodiment of that present invention is realized when processor executes.

The embodiment of the present invention proposes detection method, device, electronic equipment and the storage medium of a kind of data flow, first receives The original data stream of client device transmission and the access style for parsing original data stream；If it is determined that the access of original data stream Type meets corresponding preposition personalized testing conditions, carries out preposition inspection to original data stream by hook control centre It surveys, preposition detection is carried out to original data stream by hook control centre；Then logic pair is detected by predetermined core Data flow after preposition detection carries out core detection；If it is determined that the access style of original data stream meets corresponding postposition Personalized testing conditions carry out postposition detection to the data flow after core detection by hook control centre.That is, at this In the technical solution of invention, preposition detection can be carried out to original data stream by hook control centre；Hook can also be passed through Data flow after core detects in control centre carries out postposition detection.And in the detection method of existing data flow, usually exist Various personalized detection logics are added in core detection logic, for meeting the detection demand of different users, but with Personalization detection logic is continuously added, and core detection logic becomes increasingly complex, is not convenient for safeguarding；Existing detection side is used simultaneously Method, core logic and personalized detection logic close-coupled will affect whole if personalization detection logic goes wrong at one The normal operation of a detection system.The detection method for the data flow that therefore, compared to the prior art, the embodiment of the present invention proposes, Device, electronic equipment and storage medium, personalization detection logical AND core detection logic are separated from each other, are independent of each other；Can have Effect ground improves detection efficiency, reduces testing cost；Also, the technical solution realization of the embodiment of the present invention is simple and convenient, it is general to be convenient for And the scope of application is wider.

Detailed description of the invention

Fig. 1 is the flow diagram of the detection method for the data flow that the embodiment of the present invention one provides；

Fig. 2 is the flow diagram of the detection method of data flow provided by Embodiment 2 of the present invention；

Fig. 3 is the flow diagram of the detection method for the data flow that the embodiment of the present invention three provides；

Fig. 4 is the flow diagram of the detection method for the data flow that the embodiment of the present invention four provides；

Fig. 5 is the first structure diagram of the detection device for the data flow that the embodiment of the present invention five provides；

Fig. 6 is the second structural schematic diagram of the detection device for the data flow that the embodiment of the present invention five provides；

Fig. 7 is the structural schematic diagram for the electronic equipment that the embodiment of the present invention six provides.

Specific embodiment

The present invention is described in further detail with reference to the accompanying drawings and examples.It is understood that this place is retouched The specific embodiment stated is used only for explaining the present invention rather than limiting the invention.It also should be noted that in order to just In description, only some but not all contents related to the present invention are shown in the drawings.

Embodiment one

Fig. 1 is the flow diagram of the detection method for the data flow that the embodiment of the present invention one provides, and this method can be by counting According to stream detection device perhaps electronic equipment come execute the device or electronic equipment can be by the mode of software and/or hardware It realizes, the device or electronic equipment can integrate in any smart machine with network communicating function.As shown in Figure 1, The detection method of data flow may comprise steps of:

S101, original data stream and the access style for parsing original data stream that client device is sent are received.

In a specific embodiment of the present invention, electronic equipment can receive the original data stream and solution of client device transmission The access style of original data stream is precipitated；Wherein, the access style of original data stream includes at least: picture and text type, atlas type, Comment on type or question and answer type.Specifically, electronic equipment can receive the original data stream 1 of client device transmission and parse The access style 1 of original data stream 1 out；The original data stream 2 of client device transmission can also be received and parse original number According to the access style 2 of stream 2；…；The original data stream X of client device transmission can also be received and parse original data stream X Access style X；Wherein, X is the natural number more than or equal to 1.For example, electronic equipment can receive the figure of client device transmission The original data stream of literary type and the access style for parsing the original data stream are picture and text type；Client can also be received to set The original data stream for the atlas type that preparation is sent and the access style for parsing the original data stream are atlas type；It can also connect It receives the original data stream for the comment type that client device is sent and parses the access style of the original data stream as comment class Type；The original data stream of the question and answer type of client device transmission can also be received and parse the access class of the original data stream Type is question and answer type；Any restriction is not done herein.

S102, if it is determined that the access style of original data stream meets corresponding preposition personalized testing conditions, lead to It crosses hook control centre and preposition detection is carried out to original data stream.

In a specific embodiment of the present invention, if it is determined that the access style of original data stream meet it is corresponding preposition Personalized testing conditions, electronic equipment can carry out preposition detection to original data stream by hook control centre.Specifically, electric Sub- equipment can also first judge in hook registration before carrying out preposition detection to original data stream by hook control centre The corresponding hook logic of the access style of the registered original data stream of the heart；If in the registered original data stream of hook registration center The corresponding hook logic of access style, the access style that electronic equipment can obtain original data stream in hook registration center are corresponding Hook logic registration information；Then judge be in the registration information of the corresponding hook logic of the access style of original data stream It is no that there are the registration informations of the corresponding preposition hook logic of the access style of original data stream；If the access style of original data stream There are the registration of the corresponding preposition hook logic of the access style of original data stream letters in the registration information of corresponding hook logic Breath；Electronic equipment can also further judge the corresponding preposition hook logic of the access style of original data stream registration information and Whether the record information of the corresponding preposition hook logic of the access style of the original data stream pre-saved in database is identical；If The initial data pre-saved in the registration information and database of the corresponding preposition hook logic of the access style of original data stream The record information of the corresponding preposition hook logic of the access style of stream is identical, then determine original data stream access style meet with Its corresponding preposition personalized testing conditions.Specifically, if the unregistered original data stream of hook registration center access class The corresponding hook logic of type, electronic equipment directly can detect logic by predetermined core and carry out core to original data stream Heart detection；In addition, if original data stream is not present in the registration information of the corresponding hook logic of the access style of original data stream The corresponding preposition hook logic of access style registration information, electronic equipment can also be examined directly by predetermined core It surveys logic and core detection is carried out to original data stream；In addition, if the corresponding preposition hook logic of the access style of original data stream Registration information and database in the record letter of the corresponding preposition hook logic of access style of original data stream that pre-saves Breath is not identical, and electronic equipment directly can also detect logic by predetermined core and carry out core inspection to original data stream It surveys.

In a specific embodiment of the present invention, if the registration of the corresponding preposition hook logic of the access style of original data stream The record information of the corresponding preposition hook logic of the access style of the original data stream pre-saved in information and database is identical, Show that the corresponding preposition hook logic of the access style of original data stream is the preposition hook logic an of necessary being；If original The original data stream pre-saved in the registration information and database of the corresponding preposition hook logic of the access style of data flow The record information of the corresponding preposition hook logic of access style is not identical, shows that the access style of original data stream is corresponding preposition Hook logic is not the preposition hook logic an of necessary being.

S103, logic is detected by predetermined core to the data flow progress core detection after preposition detection.

In a specific embodiment of the present invention, electronic equipment can detect logic to preposition inspection by predetermined core Data flow after survey carries out core detection.Specifically, core detection logic is one independently of preposition hook logic and postposition hook One logic entity of sub- logic, its operation is independent of preposition hook logic and postposition hook logic；When preposition hook is patrolled When volume being inserted into hook control centre or extracting from hook control centre, core detection logic can be operated normally, Bu Huishou To the influence of preposition hook logic；Similarly, when postposition hook logic is inserted into hook control centre or from hook control centre When extraction, core detection logic can also be operated normally, and not will receive the influence of postposition hook logic.

S104, if it is determined that the access style of original data stream meets the personalized testing conditions of corresponding postposition, lead to It crosses hook control centre and postposition detection is carried out to the data flow after core detection.

In a specific embodiment of the present invention, if it is determined that the access style of original data stream meets corresponding postposition Personalized testing conditions, electronic equipment can carry out postposition detection to the data flow after core detection by hook control centre. Specifically, electronic equipment, can be with before carrying out postposition detection to the data flow after core detection by hook control centre First judge connecing with the presence or absence of original data stream in the registration information of the corresponding hook logic of the access style of institute's original data stream Enter the registration information of the corresponding postposition hook logic of type；If the registration of the corresponding hook logic of the access style of original data stream The registration information of the corresponding postposition hook logic of access style in information there are original data stream, can also further judge original The original data stream pre-saved in the registration information and database of the corresponding postposition hook logic of the access style of beginning data flow The corresponding postposition hook logic of access style record information it is whether identical；After if the access style of original data stream is corresponding The corresponding postposition hook of access style for setting the original data stream pre-saved in the registration information and database of hook logic is patrolled The record information collected is identical, then determines that the access style of original data stream meets the personalized detector bar of corresponding postposition Part.Specifically, if there is no original data streams in the registration information of the corresponding hook logic of the access style of original data stream The registration information of the corresponding postposition hook logic of access style, electronic equipment can terminate the testing process of original data stream；Separately Outside, if being pre-saved in the registration information of the corresponding postposition hook logic of the access style of original data stream and database original The record information of the corresponding postposition hook logic of the access style of data flow is not identical, then determines the access style of original data stream It is unsatisfactory for the personalized testing conditions of corresponding postposition；Electronic equipment can terminate the detection stream of original data stream at this time Journey.

In a specific embodiment of the present invention, if the registration of the corresponding postposition hook logic of the access style of original data stream The record information of the corresponding postposition hook logic of the access style of the original data stream pre-saved in information and database is identical, Show that the corresponding postposition hook logic of the access style of original data stream is the postposition hook logic an of necessary being；If original The original data stream pre-saved in the registration information and database of the corresponding postposition hook logic of the access style of data flow The record information of the corresponding postposition hook logic of access style is not identical, shows the corresponding postposition of the access style of original data stream Hook logic is not the postposition hook logic an of necessary being.

The detection method for the data flow that the embodiment of the present invention proposes first receives the original data stream of client device transmission simultaneously Parse the access style of original data stream；If it is determined that the access style of original data stream meets corresponding preposition individual character Change testing conditions, preposition detection is carried out to original data stream by hook control centre, by hook control centre to original number Preposition detection is carried out according to stream；Then logic is detected by predetermined core and core inspection is carried out to the data flow after preposition detection It surveys；If it is determined that the access style of original data stream meets the personalized testing conditions of corresponding postposition, dispatched by hook Data flow after core is detected at center carries out postposition detection.That is, in the inventive solutions, hook can be passed through Sub- control centre carries out preposition detection to original data stream；It can also be by hook control centre to the data flow after core detection Carry out postposition detection.And in the detection method of existing data flow, various personalizations usually are added in core detection logic Logic is detected, for meeting the detection demand of different users, but detects being continuously added for logic, core with personalized Detection logic becomes increasingly complex, is not convenient for safeguarding；Existing detection method is used simultaneously, and core logic and personalization detection logic are tight Close coupling is closed, if personalization detection logic goes wrong at one, will affect the normal operation of entire detection system.Therefore, and The prior art is compared, the detection method for the data flow that the embodiment of the present invention proposes, personalization detection logical AND core detects logic It is separated from each other, is independent of each other；Detection efficiency can be effectively improved, testing cost is reduced；Also, the technology of the embodiment of the present invention Scheme realization is simple and convenient, it is universal to be convenient for, and the scope of application is wider.

Embodiment two

Fig. 2 is the flow diagram of the detection method of data flow provided by Embodiment 2 of the present invention.As shown in Fig. 2, data The detection method of stream may comprise steps of:

S201, original data stream and the access style for parsing original data stream that client device is sent are received.

If S202, the corresponding hook logic of access style in the registered original data stream of hook registration center, in hook Registration center obtains the registration information of the corresponding hook logic of access style of original data stream.

In a specific embodiment of the present invention, if the access style in the registered original data stream of hook registration center is corresponding Hook logic, electronic equipment can obtain the access style corresponding hook logic of original data stream in hook registration center Registration information；Wherein, the registration information of the corresponding hook logic of the access style of original data stream can only include initial data The registration information of the corresponding preposition hook logic of the access style of stream；The access style that original data stream can also be only included is corresponding Postposition hook logic registration information；It can also include the note of the corresponding preposition hook logic of access style of original data stream The registration information of volume information and the corresponding postposition hook logic of access style of original data stream.For example, it is assumed that original data stream The corresponding hook logic of access style registration information be A；The corresponding preposition hook logic of the access style of original data stream Registration information be A1；The registration information of the corresponding postposition hook logic of the access style of original data stream is A2；Wherein, A can To only include A1；Alternatively, A can also only include A2；Alternatively, A can also include A1 and A2.

If in the registration information of the corresponding hook logic of the access style of S203, original data stream, there are original data streams The registration information of the corresponding preposition hook logic of access style, and the corresponding preposition hook of access style of original data stream is patrolled The record of the corresponding preposition hook logic of access style of the original data stream pre-saved in the registration information and database collected Information is identical, then determines that the access style of original data stream meets corresponding preposition personalized testing conditions.

In a specific embodiment of the present invention, electronic equipment can first judge in the registered initial data of hook registration center The corresponding hook logic of the access style of stream；If in the corresponding hook of access style of the registered original data stream of hook registration center Sub- logic, electronic equipment can be in the registrations of the corresponding hook logic of access style of hook registration center acquisition original data stream Information；Then judge in the registration information of the corresponding hook logic of the access style of original data stream with the presence or absence of original data stream The corresponding preposition hook logic of access style registration information；If the corresponding hook logic of the access style of original data stream The registration information of the corresponding preposition hook logic of access style in registration information there are original data stream；Electronic equipment can be with Further judge to pre-save in the registration information and database of the corresponding preposition hook logic of the access style of original data stream Original data stream the corresponding preposition hook logic of access style record information it is whether identical；If the access of original data stream The access style of the original data stream pre-saved in the registration information and database of the corresponding preposition hook logic of type is corresponding Preposition hook logic record information it is identical, then determine that the access style of original data stream meets corresponding preposition Property testing conditions.Specifically, if the unregistered original data stream of hook registration center the corresponding hook logic of access style； Alternatively, if the access class of original data stream is not present in the registration information of the corresponding hook logic of the access style of original data stream The registration information of the corresponding preposition hook logic of type；Alternatively, if the corresponding preposition hook logic of the access style of original data stream Registration information and database in the record letter of the corresponding preposition hook logic of access style of original data stream that pre-saves Breath is not identical, then determines that the access style of original data stream is unsatisfactory for corresponding preposition personalized testing conditions；At this time Electronic equipment directly can detect logic by predetermined core and carry out core detection to original data stream.

S204, preposition detection is carried out to original data stream by hook control centre.

In a specific embodiment of the present invention, before electronic equipment can carry out original data stream by hook control centre Set detection.Specifically, electronic equipment can determine that original data stream is corresponding by hook control centre in hook module Preposition hook logic；Then preposition detection is carried out to original data stream by the corresponding preposition hook logic of original data stream.Tool Body, electronic equipment can send preposition detection request to hook control centre；Wherein, original number is carried in preposition detection request According to the access style of stream；Then electronic equipment can receive the preposition inspection that hook control centre is returned in response to preposition detection request Survey response；Wherein, the identification information of the corresponding preposition hook logic of original data stream is carried in preposition detection response.Here, electric Sub- equipment may determine that the identification information of the corresponding preposition hook logic of original data stream and the original data stream pre-saved Whether the record information of the corresponding preposition hook logic of access style is identical；If the corresponding preposition hook logic of original data stream The record information of identification information preposition hook logic corresponding with the access style of the original data stream pre-saved is identical, then leads to It crosses the corresponding preposition hook logic of original data stream and preposition detection is carried out to original data stream.

In a specific embodiment of the present invention, electronic equipment can be pre-configured with different access styles in hook module Corresponding preposition hook logic.For example, electronic equipment can be pre-configured with the corresponding preposition hook of picture and text type in hook module Sub- logic；The corresponding preposition hook logic of atlas type can also be pre-configured in hook module；It can also be in hook module In be pre-configured with the corresponding preposition hook logic of comment type；It is corresponding question and answer type can also to be pre-configured in hook module Preposition hook logic.Therefore, in this step, electronic equipment can determine original by hook control centre in hook module The corresponding preposition hook logic of beginning data flow；Then initial data is flowed by original data stream corresponding preposition hook logic The preposition detection of row.

In a specific embodiment of the present invention, before electronic equipment can carry out original data stream by hook control centre Set detection；Its testing result may include: it is preposition detection pass through or it is preposition detection do not pass through；When pass through hook control centre pair It is preposition detection when passing through that original data stream, which carries out the testing result of preposition detection, and electronic equipment can add on original data stream The label for adding a preposition detection to pass through；When the testing result for carrying out preposition detection to original data stream by hook control centre Obstructed out-of-date for preposition detection, electronic equipment can add the preposition unacceptable label of detection on original data stream.

In a specific embodiment of the present invention, electronic equipment is before sending preposition detection to hook control centre and requesting, Electronic equipment can also configure the corresponding preposition hook logic of original data stream in hook module；And it is distributed in hook module The identification information of the corresponding preposition hook logic of original data stream；Wherein, the corresponding preposition hook logic of original data stream is at least It include: data adaptation, data are exempted or the logic of traffic monitoring；Wherein, data adaptation refers to for original data stream being adapted to The manageable data format of logic is detected at core.For example, if the background format of original data stream and standard data format not It is compatible, the background format of original data stream can be adjusted to by the data lattice mutually compatible with standard data format by data adaptation Formula.Data exempt the partial data for referring to exempting in detection original data stream.For example, exempting detection heading message.Flow prison When control refers to that certain types of data volume reaches alarm threshold value, triggering alarm.For example, the data flow of comment type reaches alarm When threshold value, pass through short message or telephony modalities triggering alarm.

S205, logic is detected by predetermined core to the data flow progress core detection after preposition detection.

In a specific embodiment of the present invention, electronic equipment can detect logic to preposition inspection by predetermined core Data flow after survey carries out core detection；Its testing result may include: core detection pass through or core detection do not pass through；When Logic is detected by predetermined core, and the testing result of core detection is carried out for core inspection to the data flow after preposition detection When survey passes through, electronic equipment can add a core in the data flow after preposition detection and detect the label passed through；When passing through The testing result that predetermined core detection logic carries out core detection to the data flow after preposition detection is that core detects not By when, electronic equipment can add core in the data flow after preposition detection and detect unacceptable label.

If in the registration information of the corresponding hook logic of the access style of S206, original data stream, there are original data streams The registration information of the corresponding postposition hook logic of access style, and the corresponding postposition hook of access style of original data stream is patrolled The record of the corresponding postposition hook logic of access style of the original data stream pre-saved in the registration information and database collected Information is identical, then determines that the access style of original data stream meets the personalized testing conditions of corresponding postposition.

In a specific embodiment of the present invention, data flow of the electronic equipment after being detected by hook control centre to core Before carrying out postposition detection, in the registration information that can also first judge the corresponding hook logic of the access style of institute's original data stream With the presence or absence of the registration information of the corresponding postposition hook logic of access style of original data stream；If the access class of original data stream There are the registrations of the corresponding postposition hook logic of the access style of original data stream in the registration information of the corresponding hook logic of type Information can also further judge the registration information and database of the corresponding postposition hook logic of the access style of original data stream In the record information of the corresponding postposition hook logic of access style of original data stream that pre-saves it is whether identical；If original number According to connecing for the original data stream pre-saved in the registration information and database of the corresponding postposition hook logic of the access style of stream The record information for entering the corresponding postposition hook logic of type is identical, then it is corresponding to determine that the access style of original data stream meets Postposition personalized testing conditions.Specifically, if the registration information of the corresponding hook logic of the access style of original data stream In there is no original data stream the corresponding postposition hook logic of access style registration information；Alternatively, if original data stream The access style of the original data stream pre-saved in the registration information and database of the corresponding postposition hook logic of access style The record information of corresponding postposition hook logic is not identical, then it is corresponding to determine that the access style of original data stream is unsatisfactory for The personalized testing conditions of postposition；Electronic equipment can terminate the testing process of original data stream at this time.

S207, postposition detection is carried out to the data flow after core detection by hook control centre.

In a specific embodiment of the present invention, electronic equipment can be by hook control centre to the data after core detection Stream carries out postposition detection.Specifically, electronic equipment can first pass through hook control centre and determine original number in hook module According to the corresponding postposition hook logic of stream；Then by the corresponding postposition hook logic of original data stream to the data after core detection Stream carries out postposition detection.Specifically, electronic equipment can send postposition detection request to hook control centre；Wherein, postposition is examined It surveys in request and carries the access style of original data stream；Then electronic equipment can receive hook control centre and examine in response to postposition It surveys the postposition that request returns and detects response；Wherein, the corresponding postposition hook logic of original data stream is carried in postposition detection response Identification information.Here, electronic equipment may determine that the corresponding postposition hook logic of original data stream identification information and in advance Whether the record information of the corresponding postposition hook logic of the access style of the original data stream of preservation is identical；If original data stream pair The identification information for the postposition hook logic answered postposition hook logic corresponding with the access style of the original data stream pre-saved Record information it is identical, then by the corresponding postposition hook logic of original data stream to original data stream carry out postposition detection.

In a specific embodiment of the present invention, electronic equipment can be pre-configured with different access styles in hook module Corresponding postposition hook logic.For example, electronic equipment can be pre-configured with the corresponding postposition hook of picture and text type in hook module Sub- logic；The corresponding postposition hook logic of atlas type can also be pre-configured in hook module；It can also be in hook module In be pre-configured with the corresponding postposition hook logic of comment type；It is corresponding question and answer type can also to be pre-saved in hook module Postposition hook logic.Therefore, in this step, electronic equipment can determine original by hook control centre in hook module The corresponding postposition hook logic of beginning data flow；Then after by the corresponding postposition hook logic of original data stream to core detection Data flow carries out postposition detection.

In a specific embodiment of the present invention, electronic equipment to hook control centre send postposition detection request before, The corresponding postposition hook logic of original data stream can also be configured in hook module；And initial data is distributed in hook module Flow the identification information of corresponding postposition hook logic；Wherein, the corresponding postposition hook logic of original data stream includes at least: data The logic of subscription or data statistics；Wherein, data subscription refers to subscribing to certain types of data.For example, subscribing to image-text When the data of type, by the logic of data subscription by the data-pushing of picture and text type into specified message queue.Data statistics Refer to daily or monthly counting certain types of data flow be identified as by or unacceptable quantity.

In a specific embodiment of the present invention, electronic equipment can be by hook control centre to the data after core detection Stream carries out postposition detection；Its testing result may include: postposition detection pass through or postposition detection do not pass through；When pass through hook tune Degree center core is detected after data flow when to carry out the testing result of postposition detection be that postposition detection passes through, electronic equipment can be with One postposition of addition detects the label passed through in the data flow after core detection；Core is detected when passing through hook control centre The testing result that data flow afterwards carries out postposition detection is that postposition detection is obstructed out-of-date, and electronic equipment can be after core detection A postposition is added in data flow detects unacceptable label.

In a specific embodiment of the present invention, hook registration center is used to store the hook logic of each access style, can It to be stored by database, can also be stored by file, the storage for the hook logic of atlas type is shown below Example:

Control centre's example logic:

Embodiment three

Fig. 3 is the flow diagram of the detection method for the data flow that the embodiment of the present invention three provides.As shown in figure 3, data The detection method of stream may comprise steps of:

S301, original data stream and the access style for parsing original data stream that client device is sent are received.

If S302, the corresponding hook logic of access style in the registered original data stream of hook registration center, in hook Registration center obtains the registration information of the corresponding hook logic of access style of original data stream.

If in the registration information of the corresponding hook logic of the access style of S303, original data stream, there are original data streams The registration information of the corresponding preposition hook logic of access style, and the corresponding preposition hook of access style of original data stream is patrolled The record of the corresponding preposition hook logic of access style of the original data stream pre-saved in the registration information and database collected Information is identical, then determines that the access style of original data stream meets corresponding preposition personalized testing conditions.

S304, the corresponding preposition hook logic of original data stream is determined in hook module by hook control centre； Preposition detection is carried out to original data stream by the corresponding preposition hook logic of original data stream.

In a specific embodiment of the present invention, electronic equipment can be determined in hook module by hook control centre The corresponding preposition hook logic of original data stream；Then by the corresponding preposition hook logic of original data stream to original data stream Carry out preposition detection.Specifically, electronic equipment first can send preposition detection request to hook control centre；Wherein, preposition inspection It surveys in request and carries the access style of original data stream；Then receive what hook control centre was returned in response to preposition detection request Preposition detection response；Wherein, the identification information of the corresponding preposition hook logic of original data stream is carried in preposition detection response.Example Such as, electronic equipment first can send a preposition invoke message to hook control centre；Wherein, it is taken in preposition invoke message Access style with original data stream；Then reception hook control centre returns preposition in response to preposition invoke message Return message；Wherein, the identification information of the corresponding preposition hook logic of original data stream is carried in preposition return message.

In a specific embodiment of the present invention, electronic equipment can pass through the corresponding preposition hook logic pair of original data stream Original data stream carries out preposition detection；Its testing result may include: it is preposition detection pass through or it is preposition detection do not pass through；When logical When to cross the testing result that preposition hook logic carries out preposition detection to original data stream be that preposition detection passes through, electronic equipment can be with The label that a preposition detection passes through is added on original data stream；Before being carried out by preposition hook logic to original data stream The testing result for setting detection is that preposition detection is obstructed out-of-date, and electronic equipment can add a preposition detection on original data stream Unacceptable label.

S305, logic is detected by predetermined core to the data flow progress core detection after preposition detection.

If in the registration information of the corresponding hook logic of the access style of S306, original data stream, there are original data streams The registration information of the corresponding postposition hook logic of access style, and the corresponding postposition hook of access style of original data stream is patrolled The record of the corresponding postposition hook logic of access style of the original data stream pre-saved in the registration information and database collected Information is identical, then determines that the access style of original data stream meets the personalized testing conditions of corresponding postposition.

S307, the corresponding postposition hook logic of original data stream is determined in hook module by hook control centre； Postposition detection is carried out to the data flow after core detection by original data stream corresponding postposition hook logic.

In a specific embodiment of the present invention, electronic equipment can be determined in hook module by hook control centre The corresponding postposition hook logic of original data stream；Then after by the corresponding postposition hook logic of original data stream to core detection Data flow carry out postposition detection.Specifically, electronic equipment first can send postposition detection request to hook control centre；Its In, the access style of original data stream is carried in postposition detection request；Then hook control centre is received to detect in response to postposition The postposition that request returns detects response；Wherein, the corresponding postposition hook logic of original data stream is carried in postposition detection response Mark.For example, electronic equipment first can send a postposition invoke message to hook control centre；Wherein, postposition invoke The access style of original data stream is carried in message；Then receive what hook control centre was returned in response to postposition invoke message Postposition return message；Wherein, the mark of the corresponding postposition hook logic of original data stream is carried in postposition return message.

In a specific embodiment of the present invention, electronic equipment can pass through the corresponding postposition hook logic pair of original data stream Data flow after core detection carries out postposition detection；Its testing result may include: postposition detection pass through or postposition detection not Pass through；The testing result that data flow after being detected by postposition hook logic to core carries out postposition detection is that postposition detection is logical Out-of-date, electronic equipment one postposition of addition can detect the label passed through in the data flow after core detection；When passing through postposition Data flow after hook logic detects core carries out the testing result of postposition detection as obstructed out-of-date, the electronic equipment of postposition detection One postposition of addition unacceptable label can be detected in the data flow after core detection.

In a specific embodiment of the present invention, it is preposition detection refer to data flow by core detection logic detection before, Preposition personalized detection is carried out to the data flow by preposition hook logic.For different types of data flow, user can be with Self-defining is carried out to preposition hook logic in hook module.For example, being directed to the data flow of picture and text type, user can be in hook The corresponding preposition hook logic of self-defining picture and text type in submodule；For the data flow of atlas type, user can be in hook The corresponding preposition hook logic of self-defining atlas type in submodule；For the data flow of comment type, user can be in hook The corresponding preposition hook logic of self-defining comment type in submodule；For the data flow of question and answer type, user can be in hook The corresponding preposition hook logic of self-defining question and answer type in submodule.For example, preposition hook logic at least may include: data Adaptation, data are exempted or the logic of traffic monitoring；Wherein, data adaptation refers to for original data stream being adapted to core detection The manageable data format of logic.For example, passing through number if the background format of original data stream is incompatible with standard data format The background format of original data stream can be adjusted to the data format mutually compatible with standard data format according to adaptation.Data are exempted It refers to exempting the partial data in detection original data stream.For example, exempting detection heading message.Traffic monitoring refers to specific When the data volume of type reaches alarm threshold value, triggering alarm.For example, passing through when the data flow of comment type reaches alarm threshold value Short message or telephony modalities triggering alarm.In addition, postposition detection refers to that data flow after detecting logic detection by core, is led to Later the personalized detection that hook logic carries out postposition to the data flow is set.For different types of data flow, user can be Self-defining is carried out to postposition hook logic in hook module.For example, being directed to the data flow of picture and text type, user can be in hook The corresponding postposition hook logic of self-defining picture and text type in module；For the data flow of atlas type, user can be in hook The corresponding postposition hook logic of self-defining atlas type in module；For the data flow of comment type, user can be in hook The corresponding postposition hook logic of self-defining comment type in module；For the data flow of question and answer type, user can be in hook The corresponding postposition hook logic of self-defining question and answer type in module.For example, electronic equipment can match in postposition hook logic It sets: the logic of data subscription and data statistics；Wherein, data subscription refers to subscribing to certain types of data.For example, subscribing to figure When the data of literary type, by the logic of data subscription by the data-pushing of picture and text type into specified message queue.Data Statistics refer to daily or monthly counting certain types of data flow be identified as by or unacceptable quantity.

In a specific embodiment of the present invention, if electronic equipment wishes to get the data flow quilt of some access style Core detects the duration of logic detection, and electronic equipment can be by preposition hook logic record data flow by preposition hook logic The end time of detection；Again by the postposition hook logic record data flow by the beginning of postposition hook logic detection, root According to the data flow by the end time of preposition hook logic detection and by postposition hook logic detection at the beginning of, can calculate The duration that the data flow is detected by core logic out.For example, it is assumed that the data flow of picture and text type is by preposition hook logic detection End time is 0:00；The data flow of the picture and text type is 0:05 at the beginning of postposition hook logic detection, then the figure The data flow of literary type by core detection logic detection when it is 5 seconds a length of.

In addition, in a specific embodiment of the present invention, if the user desired that subscribing to the data flow quilt of some access style Core detects the data after logic detection, and core can be detected what logic detection was completed by postposition hook logic by electronic equipment Data are sent in message queue, can conveniently realize this demand under the premise of not influencing core detection logic in this way.

Example IV

Fig. 4 is the flow diagram of the detection method for the data flow that the embodiment of the present invention four provides.As shown in figure 4, data The detection method of stream may comprise steps of:

S1, original data stream and the access style for parsing original data stream that client device is sent are received.

In a specific embodiment of the present invention, electronic equipment can receive the original data stream and solution of client device transmission The access style of original data stream is precipitated；Wherein, the type of original data stream at least may include: figure be type, atlas type, Comment on type or question and answer type.

S2, judge original data stream in the corresponding hook of access style of the whether registered initial data of hook registration center Logic；If so, executing S3；Otherwise, S4 is executed.

In a specific embodiment of the present invention, if original data stream the registered initial data of hook registration center access The corresponding hook logic of type, electronic equipment can continue to judge in predetermined database with the presence or absence of original data stream The corresponding preposition detection mark of access style；If original data stream is in the access style of the unregistered initial data of hook registration center Corresponding hook logic；Electronic equipment can detect logic by core and carry out core detection to original data stream.

S3, judge whether the access style of original data stream meets corresponding preposition personalized testing conditions；If It is to execute S5；Otherwise, S4 is executed.

In a specific embodiment of the present invention, if the access style in the registered original data stream of hook registration center is corresponding Hook logic, hook registration center obtain original data stream the corresponding hook logic of access style registration information；If There are the access style of original data stream is corresponding in the registration information of the corresponding hook logic of the access style of original data stream The registration information of preposition hook logic, and the registration information of the corresponding preposition hook logic of access style of original data stream and The record information of the corresponding preposition hook logic of the access style of the original data stream pre-saved in database is identical, then determines The access style of original data stream meets corresponding preposition personalized testing conditions；Execute S5；If in hook registration The corresponding hook logic of the access style of the unregistered original data stream of the heart；Alternatively, the corresponding hook of the access style of original data stream There is no the registration informations of the corresponding preposition hook logic of access style of original data stream in the registration information of sub- logic；Or Person, the original number pre-saved in the registration information and database of the corresponding preposition hook logic of the access style of original data stream Record information according to the corresponding preposition hook logic of the access style of stream is not identical, then determines the access style of original data stream not Meet corresponding preposition personalized testing conditions；Execute S4.

S4, logic is detected by core to original data stream progress core detection.

In a specific embodiment of the present invention, electronic equipment can detect logic to original number by predetermined core Core detection is carried out according to stream；Logic can also being detected by predetermined core, core is carried out to the data flow after preposition detection Detection.In this step, if it is determined that the access style of original data stream is unsatisfactory for corresponding preposition personalized detector bar Part, electronic equipment detect logic by core and carry out core detection to original data stream.Specifically, core detection logic is one Independently of a logic entity of preposition hook logic and postposition hook logic, its operation is independent of preposition hook logic sum Postposition hook logic；When preposition hook logic is inserted into hook control centre or extracts from hook control centre, core inspection Surveying logic can operate normally, and not will receive the influence of preposition hook logic；Similarly, when postposition hook logic is inserted into hook tune Degree center or from hook control centre extract when, core detection logic can also operate normally, not will receive postposition hook and patrol The influence collected.

S5, preposition detection is carried out to original data stream by hook control centre.

In a specific embodiment of the present invention, hook module can be used to store the preposition hook logic of each type, example Such as, hook module can store: the corresponding preposition hook logic PreHook of picture and text type；The corresponding preposition hook of atlas type Logic PreHook；Comment on the corresponding preposition hook logic PreHook of type；The corresponding preposition hook logic of question and answer type PreHook；X type refers to including but not limited to one seed type of any of the above.

S6, the data flow after preposition detection is obtained by hook control centre；Data flow after preposition detection is sent to Core detection logic is detected.

S7, judge whether the access style of original data stream meets the personalized testing conditions of corresponding postposition；If It is to execute S8；Otherwise, S10 is executed.

In a specific embodiment of the present invention, if the registration information of the corresponding hook logic of the access style of original data stream It is middle there are the registration information of the corresponding postposition hook logic of the access style of original data stream, and the access class of original data stream The access style of the original data stream pre-saved in the registration information and database of the corresponding postposition hook logic of type is corresponding The record information of postposition hook logic is identical, then determines that the access style of original data stream meets the individual character of corresponding postposition Change testing conditions；Execute S8；If there is no original in the registration information of the corresponding hook logic of the access style of original data stream The registration information of the corresponding postposition hook logic of the access style of data flow；Alternatively, the access style of original data stream is corresponding The corresponding postposition hook of access style of the original data stream pre-saved in the registration information and database of postposition hook logic The record information of logic is not identical, then determines that the access style of original data stream is unsatisfactory for the personalized inspection of corresponding postposition Survey condition；Execute S10.

S8, postposition detection is carried out to the data flow after core detection by hook control centre.

In a specific embodiment of the present invention, hook module can be used to store the postposition hook logic of each type, example Such as, hook module can store: the corresponding postposition hook logic PostHook of picture and text type；The corresponding postposition hook of atlas type Logic PostHook；Comment on the corresponding postposition hook logic PostHook of type；The corresponding postposition hook logic of question and answer type PostHook；X type refers to including but not limited to one seed type of any of the above.

S9, the data flow after postposition detection is obtained by hook control centre.

S10, the testing process for terminating data flow.

Embodiment five

Fig. 5 is the first structure diagram of the detection device for the data flow that the embodiment of the present invention five provides.As shown in figure 5, The detection device of data flow described in the embodiment of the present invention may include: receiving module 501, preposition detection module 502, core inspection Survey module 503 and postposition detection module 504；Wherein,

The receiving module 501, for receiving the original data stream of client device transmission and parsing the original number According to the access style of stream；

The preposition detection module 502, for if it is determined that the access style of the original data stream meet it is corresponding Preposition personalized testing conditions carry out preposition detection to the original data stream by hook control centre；

The core detection module 503, for detecting logic to the data after preposition detection by predetermined core Stream carries out core detection；

The postposition detection module 504, for if it is determined that the access style of the original data stream meet it is corresponding The personalized testing conditions of postposition carry out postposition detection to the data flow after core detection by the hook control centre.

Further, the preposition detection module 502, if being specifically used in the registered original number of hook registration center According to the corresponding hook logic of the access style of stream, the access style pair of the original data stream is obtained in the hook registration center The registration information for the hook logic answered；If being deposited in the registration information of the corresponding hook logic of the access style of the original data stream In the registration information of the corresponding preposition hook logic of the access style of the original data stream, and the original data stream connects Enter the access class of the original data stream pre-saved in the registration information and database of the corresponding preposition hook logic of type The record information of the corresponding preposition hook logic of type is identical, then it is corresponding to determine that the access style of the original data stream meets Preposition personalized testing conditions.

Fig. 6 is the second structural schematic diagram of the detection device for the data flow that the embodiment of the present invention five provides.As shown in fig. 6, The preposition detection module 502 includes: the first determining submodule 5021 and preposition detection sub-module 5022；Wherein,

Described first determines submodule 5021, described for being determined in hook module by the hook control centre The corresponding preposition hook logic of original data stream；

The preposition detection sub-module 5022 is used for through the corresponding preposition hook logic of the original data stream to described Original data stream carries out preposition detection.

Further, the postposition detection module 504, if corresponding specifically for the access style of the original data stream There are the registration information of the corresponding postposition hook logic of the access style of the original data stream in the registration information of hook logic, And it is protected in advance in the registration information of the corresponding postposition hook logic of the access style of the original data stream and the database The record information of the corresponding postposition hook logic of the access style for the original data stream deposited is identical, then determines the original number Meet the personalized testing conditions of corresponding postposition according to the access style of stream.

Further, the postposition detection module 504 includes: the second determining submodule 5041 and postposition detection sub-module 5042；Wherein,

Described second determines submodule 5041, described for being determined in hook module by the hook control centre The corresponding postposition hook logic of original data stream；

The postposition detection sub-module 5042 is used for through the corresponding postposition hook logic of the original data stream to core Data flow after detection carries out postposition detection.

Further, it described first determines submodule 5021, is specifically used for sending preposition inspection to the hook control centre Survey request；Wherein, the access style of the original data stream is carried in the preposition detection request；It receives in the hook scheduling The preposition detection that the heart is returned in response to the preposition detection request responds；Wherein, the original is carried in the preposition detection response The identification information of the corresponding preposition hook logic of beginning data flow.

Further, it described second determines submodule 5041, is specifically used for sending postposition inspection to the hook control centre Survey request；Wherein, the access style of the original data stream is carried in the postposition detection request；It receives in the hook scheduling The heart detects the postposition that request returns in response to the postposition and detects response；Wherein, the original is carried in the postposition detection response The identification information of the corresponding postposition hook logic of beginning data flow.

Further, the preposition detection module 502 further include: the first configuration submodule (not shown) is used for The corresponding preposition hook logic of the original data stream is configured in the hook module；And in the hook module described in distribution The identification information of the corresponding preposition hook logic of original data stream；Wherein, the corresponding preposition hook logic of the original data stream Include at least: data adaptation, data are exempted or the logic of traffic monitoring.

Further, the postposition detection module 504 further include: the second configuration submodule (not shown) is used for The corresponding postposition hook logic of the original data stream is configured in the hook module；And in the hook module described in distribution The identification information of the corresponding postposition hook logic of original data stream；Wherein, the corresponding postposition hook logic of the original data stream It includes at least: data subscription or the logic of data statistics.

Method provided by any embodiment of the invention can be performed in the detection device of above-mentioned data flow, has execution method phase The functional module and beneficial effect answered.The not technical detail of detailed description in the present embodiment, reference can be made to the present invention is arbitrarily implemented The detection method for the data flow that example provides.

Embodiment six

Fig. 7 is the structural schematic diagram for the electronic equipment that the embodiment of the present invention six provides.Fig. 7, which is shown, to be suitable for being used to realizing this The block diagram of the example electronic device of invention embodiment.The electronic equipment 12 that Fig. 7 is shown is only an example, should not be to this The function and use scope of inventive embodiments bring any restrictions.

As shown in fig. 7, electronic equipment 12 is showed in the form of universal computing device.The component of electronic equipment 12 may include But be not limited to: one or more processor or processing unit 16, system storage 28, connect different system components (including System storage 28 and processing unit 16) bus 18.

Bus 18 indicates one of a few class bus structures or a variety of, including memory bus or Memory Controller, Peripheral bus, graphics acceleration port, processor or the local bus using any bus structures in a variety of bus structures.It lifts For example, these architectures include but is not limited to industry standard architecture (ISA) bus, microchannel architecture (MAC) Bus, enhanced isa bus, Video Electronics Standards Association (VESA) local bus and peripheral component interconnection (PCI) bus.

Electronic equipment 12 typically comprises a variety of computer system readable media.These media can be it is any can be electric The usable medium that sub- equipment 12 accesses, including volatile and non-volatile media, moveable and immovable medium.

System storage 28 may include the computer system readable media of form of volatile memory, such as arbitrary access Memory (RAM) 30 and/or cache memory 32.Electronic equipment 12 may further include other removable/not removable Dynamic, volatile/non-volatile computer system storage medium.Only as an example, storage system 34 can be used for read and write can not Mobile, non-volatile magnetic media (Fig. 7 do not show, commonly referred to as " hard disk drive ").Although being not shown in Fig. 7, Ke Yiti For the disc driver for being read and write to removable non-volatile magnetic disk (such as " floppy disk "), and to moving non-volatile light The CD drive of disk (such as CD-ROM, DVD-ROM or other optical mediums) read-write.In these cases, each driver It can be connected by one or more data media interfaces with bus 18.Memory 28 may include that at least one program produces Product, the program product have one group of (for example, at least one) program module, these program modules are configured to perform of the invention each The function of embodiment.

Program/utility 40 with one group of (at least one) program module 42 can store in such as memory 28 In, such program module 42 include but is not limited to operating system, one or more application program, other program modules and It may include the realization of network environment in program data, each of these examples or certain combination.Program module 42 is usual Execute the function and/or method in embodiment described in the invention.

Electronic equipment 12 can also be with one or more external equipments 14 (such as keyboard, sensing equipment, display 24 etc.) Communication, can also be enabled a user to one or more equipment interact with the electronic equipment 12 communicate, and/or with make the electricity Any equipment (such as network interface card, modem etc.) that sub- equipment 12 can be communicated with one or more of the other calculating equipment Communication.This communication can be carried out by input/output (I/O) interface 22.Also, electronic equipment 12 can also be suitable by network Orchestration 20 and one or more network (such as local area network (LAN), wide area network (WAN) and/or public network, such as internet) Communication.As shown, network adapter 20 is communicated by bus 18 with other modules of electronic equipment 12.Although should be understood that It is not shown in Fig. 7, other hardware and/or software module can be used in conjunction with electronic equipment 12, including but not limited to: microcode, Device driver, redundant processing unit, external disk drive array, RAID system, tape drive and data backup storage System etc..

Processing unit 16 by the program that is stored in system storage 28 of operation, thereby executing various function application and Data processing, such as realize the detection method of data flow provided by the embodiment of the present invention.

Embodiment seven

The embodiment of the present invention seven provides a kind of computer storage medium.

The computer readable storage medium of the embodiment of the present invention, can be using one or more computer-readable media Any combination.Computer-readable medium can be computer-readable signal media or computer readable storage medium.Computer Readable storage medium storing program for executing for example may be-but not limited to-the system of electricity, magnetic, optical, electromagnetic, infrared ray or semiconductor, dress It sets or device, or any above combination.The more specific example (non exhaustive list) of computer readable storage medium wraps It includes: there is the electrical connection of one or more conducting wires, portable computer diskette, hard disk, random access memory (RAM), read-only Memory (ROM), erasable programmable read only memory (EPROM or flash memory), optical fiber, portable compact disc read-only memory (CD-ROM), light storage device, magnetic memory device or above-mentioned any appropriate combination.In this document, computer-readable Storage medium can be it is any include or storage program tangible medium, the program can be commanded execution system, device or Device use or in connection.

Computer-readable signal media may include in a base band or as carrier wave a part propagate data-signal, Wherein carry computer-readable program code.The data-signal of this propagation can take various forms, including but unlimited In electromagnetic signal, optical signal or above-mentioned any appropriate combination.Computer-readable signal media can also be that computer can Any computer-readable medium other than storage medium is read, which can send, propagates or transmit and be used for By the use of instruction execution system, device or device or program in connection.

The program code for including on computer-readable medium can transmit with any suitable medium, including --- but it is unlimited In wireless, electric wire, optical cable, RF etc. or above-mentioned any appropriate combination.

The computer for executing operation of the present invention can be write with one or more programming languages or combinations thereof Program code, described program design language include object oriented program language-such as Java, Smalltalk, C++, It further include conventional procedural programming language-such as " C " language or similar programming language.Program code can be with It fully executes, partly execute on the user computer on the user computer, being executed as an independent software package, portion Divide and partially executes or executed on a remote computer or server completely on the remote computer on the user computer.? Be related in the situation of remote computer, remote computer can pass through the network of any kind --- including local area network (LAN) or Wide area network (WAN)-be connected to subscriber computer, or, it may be connected to outer computer (such as mentioned using Internet service It is connected for quotient by internet).

Note that the above is only a better embodiment of the present invention and the applied technical principle.It will be appreciated by those skilled in the art that The invention is not limited to the specific embodiments described herein, be able to carry out for a person skilled in the art it is various it is apparent variation, It readjusts and substitutes without departing from protection scope of the present invention.Therefore, although being carried out by above embodiments to the present invention It is described in further detail, but the present invention is not limited to the above embodiments only, without departing from the inventive concept, also It may include more other equivalent embodiments, and the scope of the invention is determined by the scope of the appended claims.

Claims

1. a kind of detection method of data flow, which is characterized in that the described method includes:

If it is determined that the access style of the original data stream meets the personalized testing conditions of corresponding postposition, by described Data flow after core detects in hook control centre carries out postposition detection.

2. the method according to claim 1, wherein the access style for determining the original data stream meets Corresponding preposition personalized testing conditions, comprising:

If being infused in the corresponding hook logic of access style of the registered original data stream of hook registration center in the hook Volume center obtains the registration information of the corresponding hook logic of access style of the original data stream；

If in the registration information of the corresponding hook logic of the access style of the original data stream, there are the original data streams The registration information of the corresponding preposition hook logic of access style, and the corresponding preposition hook of access style of the original data stream The corresponding preposition hook of the access style of the original data stream pre-saved in the registration information and database of sub- logic is patrolled The record information collected is identical, then determines that the access style of the original data stream meets corresponding preposition personalized detection Condition.

3. according to the method described in claim 2, it is characterized in that, it is described by hook control centre to the original data stream Carry out preposition detection, comprising:

The corresponding preposition hook logic of the original data stream is determined in hook module by the hook control centre；

4. according to the method described in claim 2, it is characterized in that, the access style for determining the original data stream meets The personalized testing conditions of corresponding postposition, comprising:

If in the registration information of the corresponding hook logic of the access style of the original data stream, there are the original data streams The registration information of the corresponding postposition hook logic of access style, and the corresponding postposition hook of access style of the original data stream The corresponding postposition hook of the access style of the original data stream pre-saved in the registration information of sub- logic and the database The record information of sub- logic is identical, then determines that the access style of the original data stream meets the personalization of corresponding postposition Testing conditions.

5. according to the method described in claim 4, it is characterized in that, it is described by hook control centre to core detection after number Postposition detection is carried out according to stream, comprising:

The corresponding postposition hook logic of the original data stream is determined in hook module by the hook control centre；

6. according to the method described in claim 3, it is characterized in that, described determined in hook module by hook control centre The corresponding preposition hook logic of the original data stream out, comprising:

Preposition detection request is sent to the hook control centre；Wherein, the original number is carried in the preposition detection request According to the access style of stream；

The preposition detection that the hook control centre is returned in response to the preposition detection request is received to respond；Wherein, before described Set the identification information that the corresponding preposition hook logic of the original data stream is carried in detection response.

7. according to the method described in claim 5, it is characterized in that, described determined in hook module by hook control centre The corresponding postposition hook logic of the original data stream, comprising:

Postposition detection request is sent to the hook control centre；Wherein, the original number is carried in the postposition detection request According to the access style of stream；

It receives the hook control centre and detects the postposition detection response that request returns in response to the postposition；Wherein, after described Set the identification information that the corresponding postposition hook logic of the original data stream is carried in detection response.

8. according to the method described in claim 6, it is characterized in that, sending preposition detection to the hook control centre described Before request, the method also includes:

The corresponding preposition hook logic of the original data stream is configured in the hook module；And divide in the hook module Identification information with the corresponding preposition hook logic of the original data stream；Wherein, the corresponding preposition hook of the original data stream Sub- logic includes at least: data adaptation, data are exempted or the logic of traffic monitoring.

9. the method according to the description of claim 7 is characterized in that sending postposition detection to the hook control centre described Before request, the method also includes:

The corresponding postposition hook logic of the original data stream is configured in the hook module；And divide in the hook module Identification information with the corresponding postposition hook logic of the original data stream；Wherein, the corresponding postposition hook of the original data stream Sub- logic includes at least: data subscription or the logic of data statistics.

10. a kind of detection device of data flow, which is characterized in that described device includes: receiving module, preposition detection module, core Heart detection module and postposition detection module；Wherein,

The receiving module, for receiving the original data stream of client device transmission and parsing connecing for the original data stream Enter type；

The preposition detection module, for if it is determined that the access style of the original data stream meets corresponding preposition Property testing conditions, preposition detection is carried out to the original data stream by hook control centre；

The core detection module carries out core to the data flow after preposition detection for detecting logic by predetermined core Heart detection；

The postposition detection module, for if it is determined that the access style of the original data stream meets of corresponding postposition Property testing conditions, by the hook control centre to core detection after data flow carry out postposition detection.

11. device according to claim 10, it is characterised in that:

The preposition detection module, if specifically for the access style pair in the registered original data stream of hook registration center The hook logic answered, in the note for the corresponding hook logic of access style that the hook registration center obtains the original data stream Volume information；If in the registration information of the corresponding hook logic of the access style of the original data stream, there are the original data streams The corresponding preposition hook logic of access style registration information, and the access style of the original data stream is corresponding preposition The corresponding preposition hook of the access style of the original data stream pre-saved in the registration information and database of hook logic The record information of logic is identical, then determines that the access style of the original data stream meets corresponding preposition personalized inspection Survey condition.

12. device according to claim 11, which is characterized in that the preposition detection module includes: the first determining submodule Block and preposition detection sub-module；Wherein,

Described first determines submodule, for determining the initial data in hook module by the hook control centre Flow corresponding preposition hook logic；

The preposition detection sub-module is used for through the corresponding preposition hook logic of the original data stream to the initial data Stream carries out preposition detection.

13. device according to claim 11, it is characterised in that:

The postposition detection module, if the registration specifically for the corresponding hook logic of access style of the original data stream is believed There are the registration information of the corresponding postposition hook logic of the access style of the original data stream in breath, and the initial data The initial data pre-saved in the registration information of the corresponding postposition hook logic of the access style of stream and the database The record information of the corresponding postposition hook logic of the access style of stream is identical, then determines that the access style of the original data stream is full The personalized testing conditions of the corresponding postposition of foot.

14. device according to claim 13, which is characterized in that the postposition detection module includes: the second determining submodule Block and postposition detection sub-module；Wherein,

Described second determines submodule, for determining the initial data in hook module by the hook control centre Flow corresponding postposition hook logic；

The postposition detection sub-module, after being detected by the corresponding postposition hook logic of the original data stream to core Data flow carries out postposition detection.

15. device according to claim 12, it is characterised in that:

Described first determines submodule, is specifically used for sending preposition detection request to the hook control centre；Wherein, before described Set the access style that the original data stream is carried in detection request；The hook control centre is received in response to the preposition inspection Survey the preposition detection response that request returns；Wherein, to carry the original data stream in the preposition detection response corresponding preposition The identification information of hook logic.

16. device according to claim 14, it is characterised in that:

Described second determines submodule, is specifically used for sending postposition detection request to the hook control centre；Wherein, after described Set the access style that the original data stream is carried in detection request；The hook control centre is received to examine in response to the postposition It surveys the postposition that request returns and detects response；Wherein, the corresponding postposition of the original data stream is carried in the postposition detection response The identification information of hook logic.

17. device according to claim 15, which is characterized in that the preposition detection module further include: the first configuration Module, for configuring the corresponding preposition hook logic of the original data stream in the hook module；And in the hook mold The identification information of the corresponding preposition hook logic of the original data stream is distributed in block；Wherein, the original data stream is corresponding Preposition hook logic includes at least: data adaptation, data are exempted or the logic of traffic monitoring.

18. device according to claim 16, which is characterized in that the postposition detection module further include: the second configuration Module, for configuring the corresponding postposition hook logic of the original data stream in the hook module；And in the hook mold The identification information of the corresponding postposition hook logic of the original data stream is distributed in block；Wherein, the original data stream is corresponding Postposition hook logic includes at least: data subscription or the logic of data statistics.

19. a kind of electronic equipment characterized by comprising

One or more processors；

Memory, for storing one or more programs,

When one or more of programs are executed by one or more of processors, so that one or more of processors are real The now detection method of data flow as claimed in any one of claims 1-9 wherein.

20. a kind of storage medium, is stored thereon with computer program, which is characterized in that the realization when program is executed by processor The detection method of data flow as claimed in any one of claims 1-9 wherein.