CN111131756B - Anomaly detection method, device, equipment and medium based on video network - Google Patents
Anomaly detection method, device, equipment and medium based on video network Download PDFInfo
- Publication number
- CN111131756B CN111131756B CN201911371656.3A CN201911371656A CN111131756B CN 111131756 B CN111131756 B CN 111131756B CN 201911371656 A CN201911371656 A CN 201911371656A CN 111131756 B CN111131756 B CN 111131756B
- Authority
- CN
- China
- Prior art keywords
- data packets
- video conference
- control operation
- video
- conference control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/14—Systems for two-way working
- H04N7/15—Conference systems
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N17/00—Diagnosis, testing or measuring for television systems or their details
Landscapes
- Engineering & Computer Science (AREA)
- Multimedia (AREA)
- Signal Processing (AREA)
- Health & Medical Sciences (AREA)
- Biomedical Technology (AREA)
- General Health & Medical Sciences (AREA)
- Telephonic Communication Services (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the invention provides an anomaly detection method and device based on a video network. The data packets between the video conference management server and the plurality of conference terminals are captured in real time, then the number of the target data packets corresponding to the video conference control operation in the captured data packets is determined, and then the abnormal condition of the video conference control operation is detected according to the number of the terminals of the plurality of conference terminals and the number of the target data packets, so that the data packets in the video conference are automatically captured in real time, the abnormal condition of the data packets corresponding to the video conference control operation is detected in time, the problem that the data packets are manually checked after the abnormal condition occurs is avoided, and the abnormal detection efficiency is improved.
Description
Technical Field
The present invention relates to the field of data processing technologies, and in particular, to an anomaly detection method based on a video network, an anomaly detection apparatus based on a video network, an electronic device, and a computer-readable storage medium.
Background
The video networking is an important milestone for network development, is a real-time network, can realize high-definition video real-time transmission, and pushes a plurality of internet applications to high-definition video, and high-definition faces each other.
In the video conference of the video network, the data packet in the video conference can be grabbed and exported to a local computer only by hand, the data packet is manually analyzed after being opened by using the grabbing package software, when the data volume is overlarge, the analysis difficulty is high, and an analyst needs to learn and know a large amount of protocol knowledge, most importantly, the grabbing of the data packet is operated after the conference has problems, so that the problem that the scene when the fault occurs is difficult to restore is solved, the problem that the fault efficiency of the video conference service is low is solved, and the problem that the fault efficiency of the video conference service is checked exists.
Disclosure of Invention
The embodiment of the invention discloses an anomaly detection method based on a video network, an anomaly detection device based on the video network, electronic equipment and a computer readable storage medium.
In a first aspect, an embodiment of the present invention shows an anomaly detection method based on a video networking, where the video networking includes a video conference management server and a plurality of conference terminals, and the method is applied to the video conference management server, and the method includes:
capturing data packets between the video conference management server and the plurality of conference terminals in real time;
determining the number of target data packets corresponding to video conference control operation in the captured data packets;
and detecting the abnormal condition of the video conference control operation according to the number of the terminals of the plurality of conference terminals and the number of the target data packets.
In an optional implementation manner, the capturing, in real time, data packets between the video conference management server and the plurality of conference terminals includes:
creating a data file and storing the captured data packet into the data file;
and when the data packets stored in one data file are accumulated to a preset data amount every time, establishing a next data file, and storing the data packets captured later into the next data file.
In an optional implementation manner, before the determining the number of target data packets corresponding to the video conference control operation in the captured data packets, the method further includes:
and analyzing the plurality of data files in parallel to obtain the data packets in the plurality of data files.
In an optional implementation manner, the target data packet includes a request data packet and a response data packet, and the determining the number of the target data packets corresponding to the video conference control operation in the captured data packets includes:
acquiring terminal identifiers of the plurality of conference terminals, operation identifiers of each video conference control operation, request markers corresponding to the request data packets and response markers corresponding to the response data packets from the video conference management server;
according to the terminal identifications of the conference terminals, the operation identifications of the video conference control operations, the request marks and the response marks, filtering the captured data packets to obtain request data packets and response data packets corresponding to the video conference control operations;
and counting the number of the request data packets and the number of the response data packets corresponding to each video conference control operation.
In an optional implementation manner, the detecting, according to the number of the terminals of the plurality of conference terminals and the number of the target data packets, an abnormal condition of the video conference control operation includes:
and when the video conference control operation is detected to be abnormal, determining the abnormal conference terminal in the video conference control operation according to the terminal identifications of the plurality of conference terminals and the terminal identification carried by the target data packet.
In an optional implementation manner, the detecting, according to the number of the terminals of the plurality of conference terminals and the number of the target data packets, an abnormal condition of the video conference control operation includes:
acquiring the number of the plurality of conference terminals;
according to the number of the terminals, the number of data packets which are generated by the video conference control operation is calculated;
and detecting the abnormal condition of the video conference control operation by comparing the number of the data packets which should be generated by the video conference control operation with the number of the target data packets.
In an optional implementation manner, the target data packet includes a request data packet and a response data packet, and the detecting an abnormal condition of the video conference control operation by comparing the number of data packets that should be generated by the video conference control operation with the number of target data packets includes:
comparing the number of data packets generated by the video conference control operation with the total number of request data packets and response data packets corresponding to the video conference control operation;
and if the number is inconsistent as a result of the comparison, detecting that the video conference control operation is abnormal.
In a second aspect, an embodiment of the present invention shows an anomaly detection apparatus based on a video network, where the video network includes a video conference management server and a plurality of conference terminals, and the apparatus is applied to the video conference management server, and the apparatus includes:
the data packet capturing module is used for capturing data packets between the video conference management server and the plurality of conference terminals in real time;
the quantity determining module is used for determining the quantity of target data packets corresponding to the video conference control operation in the captured data packets;
and the abnormity detection module is used for detecting the abnormal condition of the video conference control operation according to the number of the terminals of the plurality of conference terminals and the number of the target data packets.
In an optional implementation manner, the packet capture module includes:
the first storing module is used for creating a data file and storing the captured data packet into the data file;
and the second storing module is used for creating a next data file each time when the data packet stored in one data file is detected to be accumulated to a preset data amount, and storing the captured data packet into the next data file.
In an optional implementation manner, the video conference management server further includes:
and the analysis module is used for analyzing the plurality of data files in parallel before the number of the target data packets corresponding to the video conference control operation in the captured data packets is determined to obtain the data packets in the plurality of data files.
In an optional implementation manner, the target data packet includes a request data packet and a response data packet, and the quantity determination module includes:
the acquisition submodule is used for acquiring the terminal identifications of the conference terminals, the operation identifications of the control operation of each video conference, the request marks corresponding to the request data packets and the response marks corresponding to the response data packets from the video conference management server;
the filtering submodule is used for filtering the captured data packets to obtain request data packets and response data packets corresponding to the video conference control operations according to the terminal identifiers of the plurality of conference terminals, the operation identifiers of the video conference control operations, and the request tags and the response tags;
and the counting submodule is used for counting the number of the request data packets and the number of the response data packets corresponding to each video conference control operation.
In an optional implementation manner, the anomaly detection module includes:
and the terminal determining submodule is used for determining the abnormal conference terminal in the video conference control operation according to the terminal identifications of the plurality of conference terminals and the terminal identification carried by the target data packet when the video conference control operation is detected to be abnormal.
In an optional implementation manner, the anomaly detection module includes:
the terminal number obtaining submodule is used for obtaining the number of the terminals of the conference terminals;
the quantity calculation submodule is used for calculating the quantity of the data packets generated by the video conference control operation according to the quantity of the terminals;
and the abnormity detection submodule is used for detecting the abnormal condition of the video conference control operation by comparing the number of the data packets which are generated by the video conference control operation with the number of the target data packets.
In an optional implementation manner, the target data packet includes a request data packet and a response data packet, and the anomaly detection sub-module includes:
the comparison unit is used for comparing the number of the data packets generated by the video conference control operation with the total number of the request data packets and the response data packets corresponding to the video conference control operation;
and the detection unit is used for detecting that the video conference control operation is abnormal if the number is inconsistent according to the comparison result.
In a third aspect, the embodiment of the present invention shows an electronic device, which includes a memory, a processor, and a computer program stored on the memory and executable on the processor, and when the processor executes the computer program, the processor implements the method for detecting an anomaly based on a video network.
In a fourth aspect, an embodiment of the present invention shows a computer-readable storage medium, on which a computer program is stored, the computer program causing a processor to execute the method for detecting abnormality based on the internet of view.
The embodiment of the invention has the following advantages:
in the method, in the video conference process, data packets between the video conference management server and the plurality of conference terminals are captured in real time, then the number of target data packets corresponding to video conference control operation in the captured data packets is determined, and abnormal conditions of the video conference control operation are detected according to the number of the terminals of the plurality of conference terminals and the number of the target data packets, so that the data packets in the video conference are automatically captured in real time, abnormal conditions of the data packets corresponding to the video conference control operation are detected in time, the problem that the data packets are manually checked after the abnormal conditions occur is avoided, and abnormal detection efficiency is improved.
Drawings
Fig. 1 is a block diagram of a video network according to an embodiment of the present invention.
Fig. 2 is a flowchart illustrating the steps of an anomaly detection method based on the internet of view according to an embodiment of the present invention.
Fig. 3 is a schematic diagram of a flow of automatic packet analysis.
Fig. 4 is a flowchart illustrating the steps of a method for detecting anomaly based on a video network according to an embodiment of the present invention.
Fig. 5 is a block diagram of an abnormality detection apparatus based on a video network according to an embodiment of the present invention.
Fig. 6 is a networking schematic diagram of a video network of the present invention.
Fig. 7 is a schematic diagram of a hardware structure of a node server according to the present invention.
Fig. 8 is a schematic diagram of a hardware structure of an access switch of the present invention.
Fig. 9 is a schematic diagram of a hardware structure of an ethernet protocol conversion gateway according to the present invention.
Detailed Description
In order to make the aforementioned objects, features and advantages of the present invention more comprehensible, the present invention is described in detail with reference to the accompanying drawings and the detailed description thereof.
Referring to fig. 1, a block diagram of a video network according to an embodiment of the present invention is shown, where the video network includes a video conference management server 01 and a plurality of conference terminals 02 connected to the video conference management server.
Referring to fig. 2, a flowchart illustrating steps of an anomaly detection method based on a video network according to an embodiment of the present invention is shown, where the method may be applied to the video conference management server 01 shown in fig. 1, and the method may specifically include the following steps:
and S11, capturing data packets between the video conference management server and the plurality of conference terminals in real time.
In the embodiment of the invention, the video network is a real-time large-bandwidth transmission network based on Ethernet hardware, and is a special network for transmitting high-definition video and a special protocol at high speed. A video conference may include a video conference management server and a plurality of conference terminals connected via an internet of view, where the plurality of conference terminals generally include a chairman terminal and a plurality of participant terminals, that is, a chairman terminal is corresponding to each conference.
After the video conference software is started, a data packet may be sent between the video conference management server and the plurality of conference terminals, for example, the video conference management server sends the data packet to all the conference terminals, or the conference terminals send the data packet to the video conference management server in response to receiving the data packet, or any other suitable data packet.
The conference terminal may include, but is not limited to, a mobile phone, a computer, and a set top box (SetTopBox, STB). A set-top box, also called a set-top box or set-top box, is a device that connects a television set to an external signal source and can convert compressed digital signals into television content for display on the television set. Generally, the set-top box may be connected to a camera and a microphone for collecting multimedia data such as video data and audio data, and may also be connected to a television for playing multimedia data such as video data and audio data.
In the embodiment of the present invention, the video conference management server synchronously captures the data packets generated by the local conference in real time after the video conference software starts the video conference according to the packet capturing program, for example, the video conference software immediately triggers the packet capturing program on the autonomous server of the video conference to capture the packets after the video conference software starts the video conference, such as a tcpdump instruction carried by itself on a Linux operating system, where tcpdump filters and captures the data packets of the network interface in a manner of a command line.
To automatically capture and analyze a data packet, video conference software needs to be configured, and an IP (Internet Protocol ) address, an account, a password of a video conference management server and parameters required for starting a video conference are filled in a video conference software interface: the total number of participants, the chairman number, etc.
In an optional implementation manner, in an implementation manner of capturing a data packet between the video conference management server and the plurality of conference terminals in real time, the method includes: creating a data file, and storing the captured data packet into the data file; and when the data packets stored in one data file are accumulated to a preset data amount every time, establishing a next data file, and storing the data packets captured later into the next data file.
When the data package is captured, a data file is created first, the data package is captured in real time, the captured data package is stored in the data file, the data quantity of the data package in which the data file is already stored is detected, when the data package is accumulated to a preset data quantity, for example, the preset data quantity is 300M, the data package is not stored in the first data file, the next data file is created again, the data package captured later is stored in the data file, and the like is repeated, and the next data file is created again each time the data package is detected to be accumulated to the preset data quantity.
In an optional implementation manner, before the determining the number of target data packets corresponding to the video conference control operation in the captured data packets, the method further includes: and analyzing the plurality of data files in parallel to obtain the data packets in the plurality of data files.
And analyzing the data file, and analyzing the data packet in the data file. When one data file is not analyzed, the next data file can be analyzed in parallel, so that a plurality of data files can be analyzed in parallel, and the analysis speed of the data files is improved.
And S12, determining the number of target data packets corresponding to the video conference control operation in the captured data packets.
The video conference control operation includes conference uploading, conference starting, chairman setting, speaking party setting, conference polling, participant adding, participant deleting, conference ending, and the like, or any other suitable control operation in the video conference, which is not limited in the embodiment of the present invention. The conference uploading refers to data uploading operation in a preparation stage before the video conference starts, for example, attribute information such as an IP address, a client type, and a resolution of a conference terminal is uploaded. The conference start and the conference end refer to a start operation and an end operation of the video conference. Setting the chairman refers to an operation of setting a certain conference terminal as a chairman terminal. Setting a talker refers to an operation of setting a certain conference terminal as a talker. The conference polling refers to an operation of polling the conference terminal. The newly added party refers to the newly added operation of the party participating in the conference. And the participant deletion refers to the deletion operation of the participant.
And screening out target data packets corresponding to the video conference control operation from the captured data packets, and then determining the number of the target data packets. For example, the video conference control operation has a corresponding operation identifier, and a target data packet can be screened out from the captured data packets according to the operation identifier.
And S13, detecting the abnormal condition of the video conference control operation according to the number of the terminals of the conference terminals and the number of the target data packets.
In the embodiment of the present invention, the number of terminals of the conference terminal may be obtained in advance, for example, the number of participants is filled in the video conference software interface, and the number of participants is the same as the number of terminals. The number of terminals can be obtained from the video conferencing software. The video conference management server needs to send the target data packets corresponding to the video conference control operation to each conference terminal, for example, the number of terminals of the conference terminal is 3, and for the video conference control operation at the beginning of the conference, the video conference management server needs to send the 3 corresponding target data packets to the 3 conference terminals respectively. Therefore, for a video conference control operation, the number of terminals of the conference terminal and the number of target packets have a fixed relationship, which may include an equal relationship, a multiple relationship, or any other applicable relationship, and this is not limited in the embodiment of the present invention.
In the embodiment of the present invention, according to the number of terminals and the number of target data packets, an abnormal situation of a video conference control operation may be detected, for example, the number of participants may be known through video conference software, so that the number of target data packets that should be generated by each video conference control operation after the local conference is started may be obtained, the number of target data packets that should be generated is transmitted to an unpacking program, the unpacking program may perform a concurrent unpacking operation after obtaining captured data packets, the number of target data packets that should be generated through the unpacking program is compared with the number of target data packets that should be generated through the unpacking program, if the comparison result is that the number of target data packets counted by the unpacking program is consistent with the number of target data packets that should be generated through the unpacking program, the corresponding video conference control operation is not abnormal, and if the comparison result is that the number of target data packets counted by the unpacking program is inconsistent with the number of target data packets that should be generated, the corresponding video conference control operation is abnormal.
For example, as shown in the schematic diagram of the automatic data packet analysis process shown in fig. 3, parameters required for a video conference are filled in an interface of video conference software, a packet capturing program is provided on a video conference management server, the packet capturing program is started immediately after the video conference is started, the packet capturing is finished when the conference is finished, the captured data packets are sent to a packet unpacking program by the packet capturing program, the packet unpacking program parallelly unpacks a plurality of data packets, counts the number of target data packets, can detect an abnormal situation of video conference control operation according to the number of terminals and the number of target data packets, and reports when the abnormal situation occurs.
In the method, in the video conference process, data packets between the video conference management server and the plurality of conference terminals are captured in real time, then the number of target data packets corresponding to video conference control operation in the captured data packets is determined, and abnormal conditions of the video conference control operation are detected according to the number of the terminals of the plurality of conference terminals and the number of the target data packets, so that the data packets in the video conference are automatically captured in real time, abnormal conditions of the data packets corresponding to the video conference control operation are detected in time, the problem that the data packets are manually checked after the abnormal conditions occur is avoided, and abnormal detection efficiency is improved.
Referring to fig. 4, a flowchart of steps of an anomaly detection method based on a video network according to an embodiment of the present invention is shown, where the method may be applied to the video conference management server 01 shown in fig. 1, and the method may specifically include the following steps:
and S21, capturing data packets between the video conference management server and the plurality of conference terminals in real time.
Step S22, obtaining, from the videoconference management server, the terminal identifiers of the multiple conference terminals, the operation identifiers of the respective videoconference control operations, and the request tag corresponding to the request data packet and the response tag corresponding to the response data packet.
In the embodiment of the invention, the target data packet comprises a request data packet and a response data packet, the request data packet corresponds to a request mark, and the response data packet corresponds to a response mark. For example, the request flag of the contract request packet is 0, and the response flag of the response packet is 1. The terminal identifier includes a Media Access Control Address (MAC Address) of the conference terminal, a serial number of the conference terminal, or any other suitable information, which is not limited in this embodiment of the present invention. The operation identifier is used to distinguish various video conference control operations. For example, the operation identifier corresponding to the convention conference start is 1025, the operation identifier corresponding to the conference switch is 1026, and the operation identifier corresponding to the conference end is 1027.
For example, the unpacking program after starting the video conference learns the login information of the video conference management server from the video conference software, and automatically downloads the device registration file on the video conference management server, where the device registration file includes a device MAC address, an event code (i.e., an operation identifier), a request flag, a response flag, and the like of the conference terminal.
And S23, filtering the captured data packets to obtain request data packets and response data packets corresponding to the video conference control operations according to the terminal identifiers of the plurality of conference terminals, the operation identifiers of the video conference control operations, and the request tags and the response tags.
In the embodiment of the invention, the request data packet and the response data packet corresponding to each video conference control operation can be obtained by filtering the captured data packets according to the terminal identifiers of the plurality of conference terminals, the operation identifiers of each video conference control operation, and the request tags and the response tags. And the target request packet corresponding to each video conference control operation can be screened out according to the operation identifier of each video conference control operation and the terminal identifiers of the plurality of conference terminals, and the target request packet can be distinguished as a request data packet or a response data packet according to the request mark and the response mark.
In specific implementation, the filtering condition for filtering the data packet may be generated according to the terminal identifiers of the plurality of conference terminals, the operation identifiers of the video conference control operations, and the request tag and the response tag, and then the request data packet and the response data packet may be obtained by filtering from the captured data packets according to the filtering condition.
And step S24, counting the number of the request data packets and the number of the response data packets corresponding to each video conference control operation.
In the embodiment of the invention, the number of the corresponding request data packets and the number of the corresponding response data packets are counted respectively aiming at each video conference control operation.
And step S25, acquiring the number of the plurality of conference terminals.
In the embodiment of the present invention, the number of terminals of the conference terminal is obtained from the video conference management server, for example, the total number of participants, that is, the number of terminals, is obtained from video conference software.
And S26, calculating the number of data packets which should be generated by the video conference control operation according to the number of the terminals.
In the embodiment of the invention, the number of data packets generated by the video conference control operation can be calculated according to the number of the terminals. Because the data packets generated by the video conference control operation include the request data packet and the response data packet, the number of the data packets generated by the general video conference control operation is 2 times of the number of the terminals, and specifically, the conversion relationship between the number of the terminals and the number of the data packets generated by the video conference control operation may be determined according to an actual situation, which is not limited in the embodiment of the present invention.
And S27, comparing the number of the data packets generated by the video conference control operation with the number of the target data packets, and detecting the abnormal condition of the video conference control operation.
In the embodiment of the invention, the number of the data packets generated by the video conference control operation is compared with the number of the target data packets, if the number of the data packets is consistent with the number of the target data packets, the video conference control operation is not abnormal, and if the number of the data packets is inconsistent with the number of the target data packets, the video conference control operation is detected to be abnormal.
In an optional implementation manner, the target data packet includes a request data packet and a response data packet, and in an implementation manner of detecting an abnormal condition of the video conference control operation by comparing the number of data packets that should be generated by the video conference control operation with the number of the target data packets, the method includes: comparing the number of data packets generated by the video conference control operation with the total number of request data packets and response data packets corresponding to the video conference control operation; and if the number is inconsistent as a result of the comparison, detecting that the video conference control operation is abnormal.
The method comprises the steps that the number of data packets which are generated by video conference control operation, the total number of request data packets and response data packets which correspond to the video conference control operation are determined, if the number is inconsistent, the video conference control operation is detected to be abnormal, and if the number is consistent, the video conference control operation is detected not to be abnormal.
In an optional implementation manner, an implementation manner of detecting an abnormal situation of the video conference control operation according to the number of the terminals of the plurality of conference terminals and the number of the target data packets includes: and when the video conference control operation is detected to be abnormal, determining the abnormal conference terminal in the video conference control operation according to the terminal identifications of the plurality of conference terminals and the terminal identification carried by the target data packet.
When detecting that the video conference control operation is abnormal, according to the terminal identifications of the plurality of conference terminals and the terminal identification carried by the target data packet, abnormal conference terminals can appear, for example, the terminal identification carried by the target data packet lacks the terminal identification of one or more conference terminals recorded on the video conference management server, and the terminal identification of the lacking one or more conference terminals is the abnormal conference terminal, so that the efficiency of determining the abnormal conference terminal can be improved, and the problem that manual troubleshooting is time-consuming and labor-consuming is avoided.
In the application, in the video conference process, capturing the data packets between the video conference management server and the plurality of conference terminals in real time, obtaining the terminal identifiers of the plurality of conference terminals, the operation identifiers of each video conference control operation and the response identifiers corresponding to the request identifiers and the response identifiers corresponding to the response data packets by the video conference management server, filtering the captured data packets to obtain the request data packets and the response data packets corresponding to each video conference control operation, counting the number of the request data packets and the number of the response data packets corresponding to each video conference control operation, obtaining the number of the terminals of the plurality of conference terminals, calculating the number of the data packets which should be generated by the video conference control operation according to the number of the terminals, detecting the abnormal situation of the video conference control operation by comparing the number of the data packets which should be generated by the video conference control operation with the number of the target data packets, and avoiding the abnormal detection of the manual capturing of the corresponding video conference control operation after automatically performing real-time conference on the data packets in the video conference.
It should be noted that, for simplicity of description, the method embodiments are described as a series of acts or combination of acts, but those skilled in the art will recognize that the present invention is not limited by the illustrated order of acts, as some steps may occur in other orders or concurrently in accordance with the embodiments of the present invention. Further, those of skill in the art will appreciate that the embodiments described in the specification are presently preferred and that no particular act is required to implement the embodiments of the invention.
Referring to fig. 5, a block diagram of a video network-based anomaly detection apparatus according to an embodiment of the present invention is shown, where the apparatus is applied to the video conference management server, and the apparatus may specifically include the following modules:
a data packet capturing module 31, configured to capture a data packet between the video conference management server and the plurality of conference terminals in real time;
the quantity determining module 32 is configured to determine the quantity of target data packets corresponding to the video conference control operation in the captured data packets;
an anomaly detection module 33, configured to detect an anomaly of the video conference control operation according to the number of terminals of the multiple conference terminals and the number of the target data packets.
In an optional implementation manner, the packet capture module includes:
the first storing module is used for creating a data file and storing the captured data packet into the data file;
and the second storing module is used for creating a next data file each time when the data packet stored in one data file is detected to be accumulated to a preset data amount, and storing the captured data packet into the next data file.
In an optional implementation manner, the video conference management server further includes:
and the analysis module is used for analyzing the plurality of data files in parallel before determining the number of target data packets corresponding to the video conference control operation in the captured data packets to obtain the data packets in the plurality of data files.
In an optional implementation manner, the target data packet includes a request data packet and a response data packet, and the quantity determination module includes:
the acquisition submodule is used for acquiring the terminal identifications of the conference terminals, the operation identifications of the control operation of each video conference, the request marks corresponding to the request data packets and the response marks corresponding to the response data packets from the video conference management server;
the filtering submodule is used for filtering the captured data packets to obtain request data packets and response data packets corresponding to the video conference control operations according to the terminal identifiers of the plurality of conference terminals, the operation identifiers of the video conference control operations, and the request tags and the response tags;
and the counting submodule is used for counting the number of the request data packets and the number of the response data packets corresponding to each video conference control operation.
In an optional implementation manner, the anomaly detection module includes:
and the terminal determining submodule is used for determining the abnormal conference terminal in the video conference control operation according to the terminal identifications of the plurality of conference terminals and the terminal identification carried by the target data packet when the video conference control operation is detected to be abnormal.
In an optional implementation manner, the anomaly detection module includes:
the terminal number obtaining submodule is used for obtaining the number of the terminals of the conference terminals;
the quantity calculation submodule is used for calculating the quantity of the data packets generated by the video conference control operation according to the quantity of the terminals;
and the abnormity detection submodule is used for detecting the abnormal condition of the video conference control operation by comparing the number of the data packets which are generated by the video conference control operation with the number of the target data packets.
In an optional implementation manner, the target data packet includes a request data packet and a response data packet, and the anomaly detection sub-module includes:
the comparison unit is used for comparing the number of data packets generated by the video conference control operation with the total number of request data packets and response data packets corresponding to the video conference control operation;
and the detection unit is used for detecting that the video conference control operation is abnormal if the number is inconsistent according to the comparison result.
In the method, in the video conference process, data packets between the video conference management server and the plurality of conference terminals are captured in real time, then the number of target data packets corresponding to video conference control operation in the captured data packets is determined, and abnormal conditions of the video conference control operation are detected according to the number of the terminals of the plurality of conference terminals and the number of the target data packets, so that the data packets in the video conference are automatically captured in real time, abnormal conditions of the data packets corresponding to the video conference control operation are detected in time, the problem that the data packets are manually checked after the abnormal conditions occur is avoided, and abnormal detection efficiency is improved.
For the apparatus embodiment, since it is substantially similar to the method embodiment, the description is relatively simple, and reference may be made to the partial description of the method embodiment for relevant points.
An embodiment of the present invention further illustrates an electronic device, where the electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor executes the computer program to implement the method for detecting an anomaly based on a video network as shown in fig. 2.
An embodiment of the present invention also shows a computer-readable storage medium, on which a computer program is stored, where the computer program enables a processor to execute the anomaly detection method based on the video network shown in fig. 2.
The video networking is an important milestone of network development, is a real-time network, can realize high-definition video real-time transmission, and pushes a plurality of Internet applications to high-definition video, and high definition is face-to-face.
The video networking adopts a real-time high-definition video exchange technology, can integrate required services such as dozens of services of video, voice, pictures, characters, communication, data and the like on a system platform on a network platform, such as high-definition video conference, video monitoring, intelligent monitoring analysis, emergency command, digital broadcast television, delayed television, network teaching, live broadcast, VOD on demand, television mail, personal Video Recorder (PVR), intranet (self-office) channels, intelligent video broadcast control, information distribution and the like, and realizes high-definition quality video broadcast through a television or a computer.
To enable those skilled in the art to better understand the embodiments of the present invention, the following description is given of the internet of view:
some of the technologies applied in the video networking are as follows:
network Technology (Network Technology)
Network technology innovation in video networking has improved the traditional Ethernet (Ethernet) to face the potentially huge first video traffic on the network. Unlike pure network Packet Switching (Packet Switching) or network Circuit Switching (Circuit Switching), the Packet Switching is adopted by the technology of the video networking to meet the Streaming requirement. The video networking technology has the advantages of flexibility, simplicity and low price of packet switching, and simultaneously has the quality and safety guarantee of circuit switching, thereby realizing the seamless connection of the whole network switching type virtual circuit and the data format.
Switching Technology (Switching Technology)
The video network adopts two advantages of asynchronism and packet exchange of the Ethernet, eliminates the Ethernet defect on the premise of full compatibility, and has end-to-end seamless connection of the whole network, direct connection with a user terminal and direct bearing of an IP data packet. The user data does not require any format conversion across the entire network. The video network is a higher-level form of the Ethernet, is a real-time exchange platform, can realize the large-scale high-definition video real-time transmission of the whole network which can not be realized by the current Internet, and pushes a plurality of network video applications to high-definition and unification.
Server Technology (Server Technology)
The server technology on the video network and the unified video platform is different from the traditional server, the streaming media transmission of the video network and the unified video platform is established on the basis of connection orientation, the data processing capability of the video network and the unified video platform is irrelevant to flow and communication time, and a single network layer can contain signaling and data transmission. For voice and video services, the complexity of video networking and unified video platform streaming media processing is much simpler than that of data processing, and the efficiency is greatly improved by more than one hundred times compared with that of a traditional server.
Storage Technology (Storage Technology)
The super-high speed storage technology of the unified video platform adopts the most advanced real-time operating system in order to adapt to the media content with super-large capacity and super-large flow, the program information in the server instruction is mapped to the specific hard disk space, the media content is not passed through the server any more, and is directly sent to the user terminal instantly, and the general waiting time of the user is less than 0.2 second. The optimized sector distribution greatly reduces the mechanical motion of the magnetic head track seeking of the hard disk, the resource consumption only accounts for 20% of that of the IP internet of the same grade, but concurrent flow which is 3 times larger than that of the traditional hard disk array is generated, and the comprehensive efficiency is improved by more than 10 times.
Network Security Technology (Network Security Technology)
The structural design of the video network completely eradicates the network security problem disturbing the Internet from the structure by the modes of independent admission control of each service, complete isolation of equipment and user data and the like, generally does not need antivirus programs and firewalls, stops the attack of hackers and viruses and provides a structural carefree security network for users.
Service Innovation Technology (Service Innovation Technology)
The unified video platform integrates services and transmission, and is not only automatically connected once whether a single user, a private network user or a network aggregate. The user terminal, the set-top box or the PC are directly connected to the unified video platform to obtain various multimedia video services in various forms. The unified video platform adopts a menu type configuration table mode to replace the traditional complex application programming, can realize complex application by using very few codes, and realizes infinite new service innovation.
Networking of the video network is as follows:
the video network is a centralized control network structure, and the network can be a tree network, a star network, a ring network and the like, but on the basis of the centralized control node, the whole network is controlled by the centralized control node in the network.
As shown in fig. 6, the video network is divided into an access network and a metropolitan network.
The devices of the access network part can be mainly classified into 3 types: node server, access switch, terminal (including various set-top boxes, coding boards, memories, etc.). The node server is connected to an access switch, which may be connected to a plurality of terminals and may be connected to an ethernet network.
The node server is a node which plays a centralized control function in the access network and can control the access switch and the terminal. The node server may be directly connected to the access switch or may be directly connected to the terminal.
Similarly, devices of the metropolitan network portion may also be classified into 3 types: a metropolitan area server, a node switch and a node server. The metro server is connected to a node switch, which may be connected to a plurality of node servers.
The node server is a node server of the access network part, namely the node server belongs to both the access network part and the metropolitan area network part.
The metropolitan area server is a node which plays a centralized control function in the metropolitan area network and can control a node switch and a node server. The metropolitan area server can be directly connected with the node switch or directly connected with the node server.
Therefore, the whole video network is a network structure with layered centralized control, and the network controlled by the node server and the metropolitan area server can be in various structures such as tree, star and ring.
The access network part can form a unified video platform (the part in the dotted circle), and a plurality of unified video platforms can form a video network; each unified video platform may interconnect and interwork via metropolitan and wide area video networks.
Video networking device classification
1.1 devices in the video network of the embodiment of the present invention can be mainly classified into 3 types: server, exchanger (including Ethernet protocol conversion gateway), terminal (including various set-top boxes, code board, memory, etc.). The video network as a whole can be divided into a metropolitan area network (or national network, global network, etc.) and an access network.
1.2 wherein the devices of the access network part can be mainly classified into 3 types: node server, access switch (including Ethernet protocol gateway), terminal (including various set-top boxes, coding board, memory, etc.).
The specific hardware structure of each access network device is as follows:
a node server:
as shown in fig. 7, the system mainly includes a network interface module 201, a switching engine module 202, a CPU module 203, and a disk array module 204;
the packets coming from the network interface module 201, the cpu module 203 and the disk array module 204 all enter the switching engine module 202; the switching engine module 202 performs an operation of looking up the address table 205 on the incoming packet, thereby obtaining the direction information of the packet; and stores the packet in a queue of the corresponding packet buffer 206 based on the packet's steering information; if the queue of the packet buffer 206 is nearly full, it is discarded; the switching engine module 202 polls all packet buffer queues for forwarding if the following conditions are met: 1) The port send buffer is not full; 2) The queued packet counter is greater than zero. The disk array module 204 mainly implements control over the hard disk, including initialization, read-write, and other operations on the hard disk; the CPU module 203 is mainly responsible for protocol processing with an access switch and a terminal (not shown in the figure), configuring an address table 205 (including a downlink protocol packet address table, an uplink protocol packet address table, and a data packet address table), and configuring the disk array module 204.
The access switch:
as shown in fig. 8, the network interface module (downlink network interface module 301, uplink network interface module 302), switching engine module 303 and CPU module 304 are mainly included;
wherein, the packet (uplink data) coming from the downlink network interface module 301 enters the packet detection module 305; the packet detection module 305 detects whether the Destination Address (DA), the Source Address (SA), the packet type, and the packet length of the packet meet the requirements, and if so, allocates a corresponding stream identifier (stream-id) and enters the switching engine module 303, otherwise, discards the stream identifier; the packet (downstream data) coming from the upstream network interface module 302 enters the switching engine module 303; the incoming data packet of the CPU module 304 enters the switching engine module 303; the switching engine module 303 performs an operation of looking up the address table 306 on the incoming packet, thereby obtaining the direction information of the packet; if the packet entering the switching engine module 303 is from the downstream network interface to the upstream network interface, the packet is stored in the queue of the corresponding packet buffer 307 in association with the stream-id; if the queue of the packet buffer 307 is close to full, it is discarded; if the packet entering the switching engine module 303 does not go from the downlink network interface to the uplink network interface, the data packet is stored into the queue of the corresponding packet buffer 307 according to the packet guiding information; if the queue of the packet buffer 307 is nearly full, it is discarded.
The switching engine module 303 polls all packet buffer queues and may include two cases:
if the queue is from the downlink network interface to the uplink network interface, the following conditions are met for forwarding: 1) The port send buffer is not full; 2) The queued packet counter is greater than zero; 3) Obtaining a token generated by a code rate control module;
if the queue is not from the downlink network interface to the uplink network interface, the following conditions are met for forwarding: 1) The port send buffer is not full; 2) The queued packet counter is greater than zero.
The rate control module 308 is configured by the CPU module 304, and generates tokens for packet buffer queues from all downstream network interfaces to upstream network interfaces at programmable intervals to control the rate of upstream forwarding.
The CPU module 304 is mainly responsible for protocol processing with the node server, configuration of the address table 306, and configuration of the code rate control module 308.
Ethernet protocol conversion gateway：
As shown in fig. 9, the system mainly includes a network interface module (a downlink network interface module 401 and an uplink network interface module 402), a switching engine module 403, a CPU module 404, a packet detection module 405, a rate control module 408, an address table 406, a packet buffer 407, a MAC adding module 409, and a MAC deleting module 410.
Wherein, the data packet coming from the downlink network interface module 401 enters the packet detection module 405; the packet detection module 405 detects whether the ethernet MAC DA, the ethernet MAC SA, the ethernet length or frame type, the video network destination address DA, the video network source address SA, the video network packet type, and the packet length of the packet meet the requirements, and if so, allocates a corresponding stream identifier (stream-id); then, the MAC DA, MAC SA, length or frame type (2 byte) is subtracted by the MAC deletion module 410 and enters the corresponding receiving buffer, otherwise it is discarded;
the downlink network interface module 401 detects the sending buffer of the port, and if there is a packet, obtains the ethernet MAC DA of the corresponding terminal according to the destination address DA of the packet, adds the ethernet MAC DA of the terminal, the MAC SA of the ethernet protocol gateway, and the ethernet length or frame type, and sends the packet.
The other modules in the ethernet protocol gateway function similarly to the access switch.
A terminal:
the system mainly comprises a network interface module, a service processing module and a CPU module; for example, the set-top box mainly comprises a network interface module, a video and audio coding and decoding engine module and a CPU module; the coding board mainly comprises a network interface module, a video and audio coding engine module and a CPU module; the memory mainly comprises a network interface module, a CPU module and a disk array module.
1.3 devices of the metropolitan area network part can be mainly classified into 2 types: node server, node exchanger, metropolitan area server. The node switch mainly comprises a network interface module, a switching engine module and a CPU module; the metropolitan area server mainly comprises a network interface module, a switching engine module and a CPU module.
2. Vission networking data packet definition
2.1 Access network packet definition
The data packet of the access network mainly comprises the following parts: destination Address (DA), source Address (SA), reserved byte, payload (PDU), CRC.
As shown in the following table, the data packet of the access network mainly includes the following parts:
| DA | SA | Reserved | Payload | CRC |
wherein:
the Destination Address (DA) is composed of 8 bytes (byte), the first byte represents the type of the data packet (such as various protocol packets, multicast data packets, unicast data packets, etc.), there are 256 possibilities at most, the second byte to the sixth byte are metropolitan area network addresses, and the seventh byte and the eighth byte are access network addresses;
the Source Address (SA) is also composed of 8 bytes (byte), defined as the same as the Destination Address (DA);
reserved bytes consist of 2 bytes;
the payload part has different lengths according to the types of different datagrams, 64 bytes if it is a packet of various protocols, 32+1024=1056 bytes if it is a packet of unicast data, and certainly not limited to the above 2 types;
the CRC consists of 4 bytes and is calculated in accordance with the standard ethernet CRC algorithm.
2.2 metropolitan area network packet definition
The topology of a metropolitan area network is a graph and there may be 2, or even more than 2, connections between two devices, i.e., there may be more than 2 connections between a node switch and a node server, a node switch and a node switch, and a node switch and a node server. However, the metro network address of the metro network device is unique, and in order to accurately describe the connection relationship between the metro network devices, parameters are introduced in the embodiment of the present invention: a label to uniquely describe a metropolitan area network device.
In this specification, the definition of the Label is similar to that of the Label of MPLS (Multi-Protocol Label Switch), and assuming that there are two connections between the device a and the device B, there are 2 labels for the packet from the device a to the device B, and 2 labels for the packet from the device B to the device a. The label is classified into an incoming label and an outgoing label, and assuming that the label (incoming label) of the packet entering the device a is 0x0000, the label (outgoing label) of the packet leaving the device a may become 0x0001. The network access process of the metro network is a network access process under centralized control, that is, address allocation and label allocation of the metro network are both dominated by the metro server, and the node switch and the node server are both passively executed, which is different from label allocation of MPLS, and label allocation of MPLS is a result of mutual negotiation between the switch and the server.
As shown in the following table, the data packet of the metro network mainly includes the following parts:
| DA | SA | Reserved | label (R) | Payload | CRC |
Namely Destination Address (DA), source Address (SA), reserved byte (Reserved), tag, payload (PDU), CRC. The format of the tag may be defined by reference to the following: the tag is 32 bits with the upper 16 bits reserved and only the lower 16 bits used, and its position is between the reserved bytes and payload of the packet.
The embodiments in the present specification are all described in a progressive manner, and each embodiment focuses on differences from other embodiments, and portions that are the same and similar between the embodiments may be referred to each other.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, apparatus, or computer program product. Accordingly, embodiments of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
Embodiments of the present invention are described with reference to flowchart illustrations and/or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing terminal to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing terminal to cause a series of operational steps to be performed on the computer or other programmable terminal to produce a computer implemented process such that the instructions which execute on the computer or other programmable terminal provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present invention have been described, additional variations and modifications of these embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including preferred embodiments and all such alterations and modifications as fall within the scope of the embodiments of the invention.
Finally, it should also be noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or terminal. Without further limitation, an element defined by the phrases "comprising one of \ 8230; \8230;" does not exclude the presence of additional like elements in a process, method, article, or terminal device that comprises the element.
The foregoing describes in detail a method and apparatus for detecting an anomaly based on a video networking, and specific examples are applied herein to explain the principles and embodiments of the present invention, and the descriptions of the foregoing examples are only used to help understanding the method and its core idea of the present invention; meanwhile, for a person skilled in the art, according to the idea of the present invention, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present invention.
Claims (10)
1. An anomaly detection method based on video networking, wherein the video networking comprises a video conference management server and a plurality of conference terminals, and the method is applied to the video conference management server, and comprises the following steps:
capturing data packets between the video conference management server and the plurality of conference terminals in real time;
determining the number of target data packets corresponding to the video conference control operation in the captured data packets through a conference terminal identifier, a conference control operation identifier, a request data packet marker and a response data packet marker;
determining the number of data packets which should be generated by the video conference control operation according to the number of the conference terminals;
and comparing the number of the data packets generated by the video conference control operation with the number of the target data packets, and detecting the abnormal condition of the video conference control operation.
2. The method of claim 1, wherein the capturing the data packets between the video conference management server and the plurality of conference terminals in real time comprises:
creating a data file, and storing the captured data packet into the data file;
and when the data packet stored in one data file is accumulated to a preset data amount every time, creating the next data file, and storing the captured data packet into the next data file.
3. The method of claim 2, wherein prior to said determining a number of target ones of said grabbed data packets corresponding to a video conference control operation, said method further comprises:
and analyzing the plurality of data files in parallel to obtain the data packets in the plurality of data files.
4. The method of claim 1, wherein the target data packets comprise request data packets and response data packets, and wherein the determining the number of target data packets corresponding to the video conference control operation in the captured data packets comprises:
acquiring terminal identifiers of the plurality of conference terminals, operation identifiers of each video conference control operation, request markers corresponding to the request data packets and response markers corresponding to the response data packets from the video conference management server;
according to the terminal identifications of the conference terminals, the operation identifications of the video conference control operations, the request marks and the response marks, filtering the captured data packets to obtain request data packets and response data packets corresponding to the video conference control operations;
and counting the number of the request data packets and the number of the response data packets corresponding to each video conference control operation.
5. The method of claim 4, wherein the detecting the abnormal condition of the video conference control operation comprises:
and when the video conference control operation is detected to be abnormal, determining the abnormal conference terminal in the video conference control operation according to the terminal identifications of the plurality of conference terminals and the terminal identification carried by the target data packet.
6. The method of claim 1, wherein the detecting the abnormal condition of the video conference control operation comprises:
acquiring the number of the plurality of conference terminals;
and detecting the abnormal condition of the video conference control operation by comparing the number of the data packets which should be generated by the video conference control operation with the number of the target data packets.
7. The method of claim 6, wherein the target packets comprise request packets and response packets, and wherein comparing the number of packets generated by the video conference control operation with the number of target packets to detect an abnormal condition of the video conference control operation comprises:
comparing the number of data packets generated by the video conference control operation with the total number of request data packets and response data packets corresponding to the video conference control operation;
and if the number is inconsistent as a result of the comparison, detecting that the video conference control operation is abnormal.
8. An abnormality detection apparatus based on a video network, wherein the video network includes a video conference management server and a plurality of conference terminals, the apparatus being applied to the video conference management server, the apparatus comprising:
the data packet capturing module is used for capturing data packets between the video conference management server and the plurality of conference terminals in real time;
the quantity determining module is used for determining the quantity of target data packets corresponding to the video conference control operation in the captured data packets; the device comprises a conference terminal identifier, a conference control operation identifier, a request data packet marker and a response data packet marker, wherein the conference terminal identifier, the conference control operation identifier, the request data packet marker and the response data packet marker are used for determining the number of corresponding target data packets in the captured data packets; and the system is used for determining the number of data packets which should be generated by the video conference control operation according to the number of the conference terminals;
an anomaly detection module, configured to detect an anomaly of the video conference control operation according to the number of the plurality of conference terminals and the number of the target data packets; and the system is used for comparing the number of the data packets generated by the video conference control operation with the number of the target data packets and detecting the abnormal condition of the video conference control operation.
9. An electronic device comprising a memory, a processor, and a computer program stored on the memory and executable on the processor, the processor implementing the method of detecting an anomaly based on an internet of view of any of claims 1 to 7 when executing the computer program.
10. A computer-readable storage medium having stored thereon a computer program for causing a processor to execute the method for video-networking based anomaly detection according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911371656.3A CN111131756B (en) | 2019-12-26 | 2019-12-26 | Anomaly detection method, device, equipment and medium based on video network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911371656.3A CN111131756B (en) | 2019-12-26 | 2019-12-26 | Anomaly detection method, device, equipment and medium based on video network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN111131756A CN111131756A (en) | 2020-05-08 |
| CN111131756B true CN111131756B (en) | 2022-11-01 |
Family
ID=70503572
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911371656.3A Active CN111131756B (en) | 2019-12-26 | 2019-12-26 | Anomaly detection method, device, equipment and medium based on video network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111131756B (en) |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2011041153A (en) * | 2009-08-17 | 2011-02-24 | Ricoh Co Ltd | Electronic conference system, distribution management server, data control method, program, and recording medium |
| CN107743228A (en) * | 2017-11-24 | 2018-02-27 | 深圳市创维软件有限公司 | Video quality detection method, monitoring device and storage medium |
| CN107769957A (en) * | 2017-08-30 | 2018-03-06 | 贵州白山云科技有限公司 | A kind of domain name system failure cause analysis method and device |
| CN108293013A (en) * | 2016-02-29 | 2018-07-17 | 铁三角有限公司 | Conference system |
| CN108718398A (en) * | 2018-05-25 | 2018-10-30 | 苏州科达科技股份有限公司 | Code stream transmission method, device and the conference facility of video conferencing system |
| WO2018196434A1 (en) * | 2017-04-27 | 2018-11-01 | 华为技术有限公司 | Video quality evaluation method and device |
| CN109996127A (en) * | 2019-03-20 | 2019-07-09 | 视联动力信息技术股份有限公司 | Data transmission method and device based on view networking |
| CN110099051A (en) * | 2019-04-25 | 2019-08-06 | 深圳市腾讯网域计算机网络有限公司 | Detection method, device and the electronic equipment of Caton risk |
| CN110519302A (en) * | 2019-09-29 | 2019-11-29 | 锐捷网络股份有限公司 | A kind of method and apparatus of anti-message aggression |
| CN110545397A (en) * | 2018-05-28 | 2019-12-06 | 中国移动通信有限公司研究院 | method, device, medium and system for intelligent management of cell |
-
2019
- 2019-12-26 CN CN201911371656.3A patent/CN111131756B/en active Active
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2011041153A (en) * | 2009-08-17 | 2011-02-24 | Ricoh Co Ltd | Electronic conference system, distribution management server, data control method, program, and recording medium |
| CN108293013A (en) * | 2016-02-29 | 2018-07-17 | 铁三角有限公司 | Conference system |
| WO2018196434A1 (en) * | 2017-04-27 | 2018-11-01 | 华为技术有限公司 | Video quality evaluation method and device |
| CN107769957A (en) * | 2017-08-30 | 2018-03-06 | 贵州白山云科技有限公司 | A kind of domain name system failure cause analysis method and device |
| CN107743228A (en) * | 2017-11-24 | 2018-02-27 | 深圳市创维软件有限公司 | Video quality detection method, monitoring device and storage medium |
| CN108718398A (en) * | 2018-05-25 | 2018-10-30 | 苏州科达科技股份有限公司 | Code stream transmission method, device and the conference facility of video conferencing system |
| CN110545397A (en) * | 2018-05-28 | 2019-12-06 | 中国移动通信有限公司研究院 | method, device, medium and system for intelligent management of cell |
| CN109996127A (en) * | 2019-03-20 | 2019-07-09 | 视联动力信息技术股份有限公司 | Data transmission method and device based on view networking |
| CN110099051A (en) * | 2019-04-25 | 2019-08-06 | 深圳市腾讯网域计算机网络有限公司 | Detection method, device and the electronic equipment of Caton risk |
| CN110519302A (en) * | 2019-09-29 | 2019-11-29 | 锐捷网络股份有限公司 | A kind of method and apparatus of anti-message aggression |
Non-Patent Citations (1)
| Title |
|---|
| 远程医疗中的通信问题;廉世俊等;《国外医学.生物医学工程分册》;19991018(第05期);全文 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN111131756A (en) | 2020-05-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110166728B (en) | Video networking conference opening method and device | |
| CN108965040B (en) | Service monitoring method and device for video network | |
| CN108632558B (en) | Video call method and device | |
| CN109803111B (en) | Method and device for watching video conference after meeting | |
| CN110190973B (en) | Online state detection method and device | |
| CN109587002B (en) | State detection method and system for video network monitoring equipment | |
| CN110769310B (en) | Video processing method and device based on video network | |
| CN109246486B (en) | Method and device for framing | |
| CN110572607A (en) | Video conference method, system and device and storage medium | |
| CN108965220B (en) | Method and system for synchronizing conference control right | |
| CN110049273B (en) | Video networking-based conference recording method and transfer server | |
| CN109922351B (en) | Method and device for releasing live broadcast service | |
| CN109040656B (en) | Video conference processing method and system | |
| CN108965227B (en) | Data processing method and video networking conference server | |
| CN109743284B (en) | Video processing method and system based on video network | |
| CN111327868A (en) | Method, terminal, server, device and medium for setting conference speaking party role | |
| CN110891156B (en) | Conference entering method and device of monitoring camera | |
| CN110446058B (en) | Video acquisition method, system, device and computer readable storage medium | |
| CN109698953B (en) | State detection method and system for video network monitoring equipment | |
| CN108574609B (en) | Transmission monitoring method and device | |
| CN111614480A (en) | Service detection method, device and storage medium | |
| CN110049069B (en) | Data acquisition method and device | |
| CN110113555B (en) | Video conference processing method and system based on video networking | |
| CN110958461B (en) | Method and device for detecting connection state of video networking server | |
| CN110213533B (en) | Method and device for acquiring video stream monitored by video network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |