CN111953519B - SDN network flow visualization method and device - Google Patents

SDN network flow visualization method and device Download PDF

Info

Publication number
CN111953519B
CN111953519B CN202010674395.9A CN202010674395A CN111953519B CN 111953519 B CN111953519 B CN 111953519B CN 202010674395 A CN202010674395 A CN 202010674395A CN 111953519 B CN111953519 B CN 111953519B
Authority
CN
China
Prior art keywords
network traffic
module
management system
log management
storage module
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202010674395.9A
Other languages
Chinese (zh)
Other versions
CN111953519A (en
Inventor
向稳
赵海平
张从江
蒋玄
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Inspur Cisco Networking Technology Co Ltd
Original Assignee
Inspur Cisco Networking Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Inspur Cisco Networking Technology Co Ltd filed Critical Inspur Cisco Networking Technology Co Ltd
Priority to CN202010674395.9A priority Critical patent/CN111953519B/en
Publication of CN111953519A publication Critical patent/CN111953519A/en
Application granted granted Critical
Publication of CN111953519B publication Critical patent/CN111953519B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08Configuration management of networks or network elements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/22Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks comprising specially adapted graphical user interfaces [GUI]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/04Processing captured monitoring data, e.g. for logfile generation
    • H04L43/045Processing captured monitoring data, e.g. for logfile generation for graphical visualisation of monitoring data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00Reducing energy consumption in communication networks
    • Y02D30/50Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Mining & Analysis (AREA)
  • Human Computer Interaction (AREA)
  • Environmental & Geological Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The application discloses a method and a device for visualizing SDN network traffic, which are used for solving the problems that huge calculation pressure and storage pressure are generated for an SDN controller when the SDN controller receives network traffic, the SDN controller is easy to crash, and the normal operation of the whole network is further affected. In the method, a SDN controller adds a nanotube device; configuring the flow analysis function of the nano-tube equipment, and determining the address of the output network flow; receiving the network traffic from the nano-tube equipment through an acquisition module in a log management system, and processing the received network traffic; receiving the processed network traffic from the acquisition module through a storage module in the log management system, and indexing and storing the network traffic; and displaying the network traffic stored in the storage module through a display module in the log management system. The method can separate the log management system from the SDN controller, and enhance the reliability of data.

Description

SDN network flow visualization method and device
Technical Field
The present disclosure relates to the field of traffic visualization technologies, and in particular, to an SDN network traffic visualization method and device.
Background
The software defined network (Software Defined Network, SDN) is a novel network innovation architecture that implements a centralized control plane and a distributed forwarding plane, which are separated from each other, thereby implementing flexible control of network traffic.
In the SDN network, the SDN controller may collect and analyze network traffic in the SDN network through a NetFlow function of a device such as a switch, so as to learn about network traffic conditions in the SDN network.
However, receiving all network traffic through the SDN controller can generate huge computation pressure and storage pressure for the SDN controller, which easily causes the SDN controller to crash, further affecting the normal operation of the whole network.
Disclosure of Invention
The embodiment of the application provides a method and a device for visualizing SDN network traffic, which are used for solving the problems that huge calculation pressure and storage pressure are generated for an SDN controller when the SDN controller receives network traffic, the SDN controller is easy to crash, and the normal operation of the whole network is further affected.
The embodiment of the application provides a method for visualizing SDN network traffic, which comprises the following steps:
adding a nanotube device by the SDN controller;
configuring the flow analysis function of the nano-tube equipment, and determining the address of the output network flow;
receiving the network traffic from the nano-tube equipment through an acquisition module in a log management system, and processing the received network traffic;
receiving the processed network traffic from the acquisition module through a storage module in the log management system, and indexing and storing the network traffic;
and displaying the network traffic stored in the storage module through a display module in the log management system.
In one example, the method further comprises: and calling an application program interface of the storage module to inquire the network traffic stored in the storage module.
In one example, querying the network traffic stored in the storage module includes: and inquiring the network traffic according to the index of the storage module.
In one example, configuring the traffic analysis function of the nanotube device to determine an address of the outgoing network traffic includes: determining the state of the flow analysis function of the nanotube device as on; determining the name of a flow analysis function of the nanotube equipment, an acquisition module IP, an acquisition module port, an acquisition interface, timeout time and virtual routing forwarding; the acquisition module IP and the acquisition module port represent addresses of output network traffic.
In one example, before receiving the network traffic from the nanotube device by an acquisition module in a log management system, the method further comprises: determining an IP and a port of the log management system for receiving network traffic by an acquisition module; determining a network flow analysis rule of a filter in the acquisition module; and determining the address of the processed network traffic output by the acquisition module to the storage module.
In one example, processing received network traffic includes: and according to the network flow analysis rule of the filter, analyzing and splitting the received network flow.
In one example, indexing and storing includes: indexing the received network traffic according to time; and storing the network traffic by adopting a document format.
In one example, the method further comprises: and controlling the storage period of each index in the storage module according to the life cycle corresponding to the template of the storage module.
In one example, the displaying, by the displaying module in the log management system, the network traffic stored in the storage module includes: and acquiring a frame of the display module in the log management system, embedding the frame into a front-end display interface of the SDN controller, and displaying the network traffic stored in the storage module.
An SDN network traffic visualization device provided in an embodiment of the present application includes:
an adding module for adding the nanotube device;
the nanotube configuration module is used for configuring the flow analysis function of the nanotube equipment and determining the address of the output network flow;
the acquisition processing module is used for receiving the network traffic from the nanotube equipment through the acquisition module in the log management system and processing the received network traffic;
the index storage module is used for receiving the processed network traffic from the acquisition module through the storage module in the log management system and carrying out indexing and storage;
and the flow display module displays the network flow stored in the storage module through the display module in the log management system.
The embodiment of the application provides a method and a device for visualizing SDN network traffic, which at least comprise the following beneficial effects:
the log management system is completely separated from the SDN controller, and can realize statistical analysis of network traffic under the condition of not affecting the SDN controller, so that the workload and the working pressure of the SDN controller are not increased, the performance of the SDN controller is not affected, the SDN controller can concentrate on arranging and controlling forwarding functions, and the reliability of data is enhanced.
Accordingly, even if the SDN controller fails, crashes and the like, normal and safe storage of network traffic in the log management system is not affected. Under the condition, the SDN controller is only required to be restored to be normal, and the complete display of the network traffic can be realized.
The ELK big data analysis framework has more advantages in big data query, and because of iframe integration, the SDN controller does not need complex rest interface interaction, so that development cost is greatly saved, and development is simpler and faster. If the user needs to create the monitoring interface, the user only needs to use the ready-made components on the Kibana to associate the data. Moreover, the ELK framework has strong expansibility, can realize various deployment schemes and meets various business requirements.
Furthermore, the elastiscearch supports full text retrieval and is not only digitally sensitive. For the data to be displayed, the SDN controller can flexibly call the API of the elastic search to perform flexible, quick and efficient query.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiments of the application and together with the description serve to explain the application and do not constitute an undue limitation to the application. In the drawings:
fig. 1 is a flowchart of an SDN network traffic visualization method provided in an embodiment of the present application;
fig. 2 is a schematic diagram of an SDN network structure provided in an embodiment of the present application;
fig. 3 is a schematic diagram of a network traffic processing flow provided in an embodiment of the present application;
fig. 4 is a schematic structural diagram of an SDN network traffic visualization device provided in an embodiment of the present application.
Detailed Description
For the purposes, technical solutions and advantages of the present application, the technical solutions of the present application will be clearly and completely described below with reference to specific embodiments of the present application and corresponding drawings. It will be apparent that the described embodiments are only some, but not all, of the embodiments of the present application. All other embodiments, which can be made by one of ordinary skill in the art without undue burden from the present disclosure, are within the scope of the present disclosure.
Fig. 1 is a flowchart of an SDN network traffic visualization method provided in an embodiment of the present application, and specifically includes the following steps:
s101: the SDN controller adds a nanotube device.
As shown in fig. 2, in the SDN network, the SDN controller may add forwarding devices such as an SDN switch, a router, a virtual operating system, and the like, as a nanotube device of the SDN controller.
Specifically, when adding a nanotube device, the SDN controller may determine relevant information of the nanotube device, including management internet protocol (Internet Protocol, IP) of the device, device role, device authentication, device description, device location, secure Shell (ssh) configuration information, simple network management protocol (Simple Network Management Protocol, snmp) configuration information, configuration management protocol (Network Configuration Protocol, netconf) configuration information, and the like.
S102: and configuring the flow analysis function of the nano-tube equipment, and determining the address of the output network flow.
In the embodiment of the application, the SDN controller may collect network traffic through a traffic analysis function of the nanotube device, and send the collected network traffic to a corresponding log management system to perform processing, analysis, storage, and so on of the network traffic.
For convenience of explanation, the log management system ELK is taken as an example for the embodiment of the present application. The ELK system mainly comprises Logstash, elasticsearch and Kibana, wherein the Logstar represents an acquisition module, is used for collecting, filtering and forwarding various logs, the elastic search represents a storage module, is a distributed storage and index engine which is based on Lucene and supports full-text index, is used for indexing and storing the logs so as to facilitate search and query, and the Kibana represents a display module, is a visualization tool and is used for summarizing, analyzing and displaying log data.
Therefore, before collecting network traffic, the SDN controller may perform corresponding configuration on the traffic analysis function of the nanotube device, so that the nanotube device can collect the network traffic normally, and send the collected network traffic to a collection module in the log management system, i.e. log stack.
Specifically, when the SDN controller configures the flow analysis function of the nanotube device, the state of the flow analysis function of the nanotube device may be set to be on. Then, the SDN controller may determine parameters such as a name of a traffic analysis function of the nanotube device, an acquisition module IP, an acquisition module port, an acquisition interface, a timeout time, virtual routing forwarding vrf, and the like.
The acquisition module IP and the acquisition module port jointly represent a target address of the output network flow of the nano-tube equipment, namely the IP address and the port of the acquisition module Logmesh in the log management system for receiving the network flow from the nano-tube equipment; the acquisition interface represents interface information of the nano-tube equipment for acquiring network traffic; the overtime time is used for limiting the grabbing time to be too long without responding to the error conditions, so that the grabbing process can be smoothly carried out; virtual routing forwarding represents virtual router information, including routing tables, routing protocols, and the like.
S103: and receiving the network traffic from the nano-tube equipment through an acquisition module in the log management system, and processing the received network traffic.
In the embodiment of the present application, as shown in fig. 2, a log management system ELK may be added to the SDN network architecture, so as to collect, analyze and manage network traffic. The acquisition module in the log management system can receive the network traffic from the nano-tube equipment through the IP and the port set when the nano-tube equipment is preconfigured, and process the received network traffic.
In one embodiment, the collecting module logstack may configure its own relevant parameters before receiving network traffic.
Specifically, as shown in fig. 3, the logstack may determine an IP and a port for receiving network traffic from an input, and determine that the configuration of the IP and the port is consistent with the configuration in the nanotube device, so as to ensure that the acquisition module can correctly receive the network traffic from the nanotube device. And, the logstack may determine a network traffic parsing rule for parsing the network traffic from the filter. The network traffic analysis rules preset in the logstack are several, and the logstack can determine the adopted network traffic analysis rules according to the needs when being configured, which is not limited in the application. Finally, the logstack may determine, from the output, a destination address of the processed network traffic to the memory module elastic search in the ELK through the pipe, that is, an address of the memory module elastic search for receiving the processed network traffic, including IP, port, etc.
In one embodiment, when the collecting module logstack analyzes network traffic, the collecting module logstack may analyze, split, filter and format the received network traffic according to the network traffic analysis rule set by the filter in the collecting module, so as to split each piece of network traffic data into a fixed field format. By parsing each piece of data into a regular json key-value pair format, the processed network traffic data can be conveniently output to other components for use.
For example, each piece of data is split according to the formats of server IP, client IP, log source, user identification, access time.
In one embodiment, the collecting module logstack may also automatically ignore the monitoring of part of the data, i.e. exclude the data that need not be received, by excluding the include function when receiving the network traffic. Therefore, redundant workload of the acquisition module can be reduced, and the efficiency of analyzing the network flow by the acquisition module is improved.
S104: and receiving the processed network traffic from the acquisition module through a storage module in the log management system, and indexing and storing the network traffic.
In this embodiment of the present application, the storage module in the log management system may receive the processed network traffic from the acquisition module according to the preconfigured IP and port, and establish a corresponding index to store the network traffic.
In one embodiment, the storage module elastic search is a document-oriented database. When storing network traffic, the storage module elastic search stores the network traffic in a document format, that is, doc format and JSON as a document serialization format. Wherein a document in the elastic search database represents a piece of data.
For example, the reference format of one piece of data stored in the elastic search may be:
{
"name":"Ann",
"sex":"Female",
"age":25,
"birthDate":"2000/01/01",
"interests":["read","music"]
}
in one embodiment, the collecting module logstack in the ELK system may time stamp each piece of received data to indicate the time when the network traffic is captured when the network traffic is parsed. When the storage module elastic search stores the network traffic, a corresponding index with time as a condition can be established according to the timestamp carried by the data, and the network traffic is stored according to the established index. By establishing the index, a large amount of data can be managed well, and subsequent data inquiry is facilitated.
In one embodiment, the collecting module logstar may timestamp the network traffic in a yyyy.mm.dd manner when analyzing the network traffic. Thus, when the memory module elastic search stores network traffic, the memory module can also index and store the network traffic according to the Netflow-yyyy.mm.dd format. Where yyyy represents year, mm represents month, and dd represents day.
In one embodiment, in order to avoid the problem that the network traffic stored in the storage module elastic search is excessive, so that the operation efficiency of the ELK system is affected due to the excessive storage space occupied, and meanwhile, the workload of data query is increased, the storage module elastic search can delete and update the stored data.
Specifically, the storage module elastic search may preset a default template, and set a life cycle corresponding to the template. Thus, the storage module elastic search can perform corresponding database storage according to the default template after receiving the network traffic.
In one embodiment, the life cycle set in the template may limit the number, the size or the time of the indexed data, and if the number of the indexed data exceeds the first preset threshold, or the size exceeds the second preset threshold, or the time corresponding to the index is earlier than the preset period limit, the storage module may scroll and delete the part of the index with the earliest time and the corresponding data, so as to replace the old data with the new data. Therefore, the storage period of each index in the storage module can be controlled, partial indexes with earlier storage time are cleaned, the index update of the network traffic is realized, and the network traffic stored in the storage module is prevented from being excessive. The first preset threshold, the second preset threshold and the preset period can be set according to needs, and the application is not limited to the first preset threshold, the second preset threshold and the preset period.
S105: and displaying the network traffic stored in the storage module through a display module in the log management system.
In the embodiment of the application, the display module Kibana in the log management system can call the interface of the storage module elastic search and display the network traffic returned by the storage module elastic search in a chart visualization mode.
In one embodiment, the SDN controller may obtain a frame iFrame of the display module Kibana, and embed the frame iFrame in a display interface of the SDN controller, so as to display network traffic stored in the storage module in a front-end display interface.
In the embodiment of the application, the statistical network flow is sent to the log management system for data analysis and storage through the flow analysis function of the nano-tube equipment such as the switch and the like, and graphical display is performed, so that the flow visualization scheme is convenient and quick.
The log management system is completely separated from the SDN controller, and can realize statistical analysis of network traffic under the condition of not affecting the SDN controller, so that the workload and the working pressure of the SDN controller are not increased, the performance of the SDN controller is not affected, the SDN controller can concentrate on arranging and controlling forwarding functions, and the reliability of data is enhanced.
Accordingly, even if the SDN controller fails, crashes and the like, normal and safe storage of network traffic in the log management system is not affected. Under the condition, the SDN controller is only required to be restored to be normal, and the complete display of the network traffic can be realized.
The ELK big data analysis framework has more advantages in big data query, and because of iframe integration, the SDN controller does not need complex rest interface interaction, so that development cost is greatly saved, and development is simpler and faster. If the user needs to create the monitoring interface, the user only needs to use the ready-made components on the Kibana to associate the data. Moreover, the ELK framework has strong expansibility, can realize various deployment schemes and meets various business requirements.
Furthermore, the elastiscearch supports full text retrieval and is not only digitally sensitive. For the data to be displayed, the SDN controller can flexibly call the API of the elastic search to perform flexible, quick and efficient query.
In one embodiment, an SDN controller may call an application program interface (Application Programming Interface, API) of a storage module to query network traffic stored in the storage module.
In one embodiment, when the SDN controller queries the network traffic stored in the storage module, the SDN controller may query the network traffic according to the index of the storage module to speed up query efficiency.
It should be noted that, in practical application, the present application may also implement the scheme by using an acquisition module with the same logstack function as the ELK, a storage module with the same elastiscearch function, and a display module with the same Kibana function, and the ELK system provided in the present application does not form a limitation to other similar implementation manners.
The foregoing provides an SDN network traffic visualization method for the embodiment of the present application, and based on the same inventive concept, the embodiment of the present application further provides a corresponding SDN network traffic visualization device, as shown in fig. 4.
Fig. 4 is a schematic structural diagram of an SDN network traffic visualization device provided in an embodiment of the present application, and specifically includes:
an adding module 401 for adding a nanotube device;
a nanotube configuration module 402, configured to configure a flow analysis function of the nanotube device, and determine an address of an output network flow;
the acquisition processing module 403 receives the network traffic from the nanotube device through the acquisition module in the log management system and processes the received network traffic;
an index storage module 404, configured to receive, through a storage module in the log management system, the processed network traffic from the acquisition module, and perform indexing and storage;
and the flow display module 405 displays the network flow stored in the storage module through a display module in the log management system.
The foregoing is merely exemplary of the present application and is not intended to limit the present application. Various modifications and changes may be made to the present application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc. which are within the spirit and principles of the present application are intended to be included within the scope of the claims of the present application.

Claims (7)

1. The SDN network traffic visualization method is characterized by comprising the following steps:
adding a nanotube device by the SDN controller;
configuring the flow analysis function of the nano-tube equipment, and determining the address of the output network flow;
the method comprises the steps of determining the state of a flow analysis function of the nanotube equipment to be on;
determining the name of a flow analysis function of the nanotube equipment, an acquisition module IP, an acquisition module port, an acquisition interface, timeout time and virtual routing forwarding; the acquisition module IP and the acquisition module port represent addresses of output network traffic;
receiving the network traffic from the nano-tube equipment through an acquisition module in a log management system, and processing the received network traffic;
receiving the processed network traffic from the acquisition module through a storage module in the log management system, and indexing and storing the network traffic;
wherein, according to time, index the network flow received;
storing the network traffic by adopting a document format;
displaying the network traffic stored in the storage module through a display module in the log management system;
and calling an application program interface of the storage module to inquire the network traffic stored in the storage module.
2. The method of claim 1, wherein querying the network traffic stored in the storage module comprises:
and inquiring the network traffic according to the index of the storage module.
3. The method of claim 1, wherein prior to receiving network traffic from the nanotube device by an acquisition module in a log management system, the method further comprises:
determining an IP and a port of the log management system for receiving network traffic by an acquisition module;
determining a network flow analysis rule of a filter in the acquisition module;
and determining the address of the processed network traffic output by the acquisition module to the storage module.
4. A method according to claim 3, wherein processing the received network traffic comprises:
and according to the network flow analysis rule of the filter, analyzing and splitting the received network flow.
5. The method according to claim 1, wherein the method further comprises:
and controlling the storage period of each index in the storage module according to the life cycle corresponding to the template of the storage module.
6. The method of claim 1, wherein exposing, by an exposing module in the log management system, the network traffic stored in the storage module, comprises:
and acquiring a frame of the display module in the log management system, embedding the frame into a front-end display interface of the SDN controller, and displaying the network traffic stored in the storage module.
7. An SDN network traffic visualization device, comprising:
an adding module for adding the nanotube device;
the nanotube configuration module is used for configuring the flow analysis function of the nanotube equipment and determining the address of the output network flow;
the acquisition processing module is used for receiving the network traffic from the nanotube equipment through the acquisition module in the log management system and processing the received network traffic;
the index storage module is used for receiving the processed network traffic from the acquisition module through the storage module in the log management system and carrying out indexing and storage;
and the flow display module displays the network flow stored in the storage module through the display module in the log management system.
CN202010674395.9A 2020-07-14 2020-07-14 SDN network flow visualization method and device Active CN111953519B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202010674395.9A CN111953519B (en) 2020-07-14 2020-07-14 SDN network flow visualization method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202010674395.9A CN111953519B (en) 2020-07-14 2020-07-14 SDN network flow visualization method and device

Publications (2)

Publication Number Publication Date
CN111953519A CN111953519A (en) 2020-11-17
CN111953519B true CN111953519B (en) 2023-07-25

Family

ID=73341824

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202010674395.9A Active CN111953519B (en) 2020-07-14 2020-07-14 SDN network flow visualization method and device

Country Status (1)

Country Link
CN (1) CN111953519B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113595782B (en) * 2021-07-26 2024-05-24 浪潮思科网络科技有限公司 Network equipment management method based on SDN

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106130796A (en) * 2016-08-29 2016-11-16 广州西麦科技股份有限公司 SDN topology traffic visualization monitoring method and control terminal
CN207977980U (en) * 2017-12-13 2018-10-16 湖南师范大学 A kind of network bandwidth and flow control system based on Transmission Control Protocol
CN108989147A (en) * 2018-07-16 2018-12-11 西安电子科技大学 SDN network Flow Measuring System and method based on FPGA
CN109376532A (en) * 2018-10-31 2019-02-22 云南电网有限责任公司 Power network security monitoring method and system based on the analysis of ELK log collection
KR20190074071A (en) * 2017-12-19 2019-06-27 숭실대학교산학협력단 Sdn controller for resolving arp poisoning attack and method for managing the same
CN110545199A (en) * 2019-07-24 2019-12-06 浪潮思科网络科技有限公司 SDN network flow statistical device and method based on Netflow

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9756121B2 (en) * 2015-06-24 2017-09-05 International Business Machines Corporation Optimizing routing and load balancing in an SDN-enabled cloud during enterprise data center migration

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106130796A (en) * 2016-08-29 2016-11-16 广州西麦科技股份有限公司 SDN topology traffic visualization monitoring method and control terminal
CN207977980U (en) * 2017-12-13 2018-10-16 湖南师范大学 A kind of network bandwidth and flow control system based on Transmission Control Protocol
KR20190074071A (en) * 2017-12-19 2019-06-27 숭실대학교산학협력단 Sdn controller for resolving arp poisoning attack and method for managing the same
CN108989147A (en) * 2018-07-16 2018-12-11 西安电子科技大学 SDN network Flow Measuring System and method based on FPGA
CN109376532A (en) * 2018-10-31 2019-02-22 云南电网有限责任公司 Power network security monitoring method and system based on the analysis of ELK log collection
CN110545199A (en) * 2019-07-24 2019-12-06 浪潮思科网络科技有限公司 SDN network flow statistical device and method based on Netflow

Also Published As

Publication number Publication date
CN111953519A (en) 2020-11-17

Similar Documents

Publication Publication Date Title
US11681678B2 (en) Fast circular database
US10469346B2 (en) Correlating performance data of client and host to identify performance issue of a third device
CN108667725A (en) A kind of industrial AnyRouter and implementation method based on a variety of accesses and edge calculations
US10169434B1 (en) Tokenized HTTP event collector
CN108509326B (en) Service state statistical method and system based on nginx log
WO2019223062A1 (en) Method and system for processing system exceptions
US11386113B2 (en) Data source tokens
US11449371B1 (en) Indexing data at a data intake and query system based on a node capacity threshold
US11436116B1 (en) Recovering pre-indexed data from a shared storage system following a failed indexer
US11755531B1 (en) System and method for storage of data utilizing a persistent queue
US20190034500A1 (en) Creating dashboards for viewing data in a data storage system based on natural language requests
CN113259467B (en) Webpage asset fingerprint tag identification and discovery method based on big data
US20190034247A1 (en) Creating alerts associated with a data storage system based on natural language requests
US20120072589A1 (en) Information Processing Apparatus and Method of Operating the Same
CN108390782A (en) A kind of centralization application system performance question synthesis analysis method
CN111367760A (en) Log collection method and device, computer equipment and storage medium
CN111953519B (en) SDN network flow visualization method and device
CN112491609A (en) System application architecture discovery method and system based on business service
JP6950576B2 (en) Network systems, topology management methods, and programs
CN110989537A (en) Production data processing method, apparatus, medium, and system
CN116346680A (en) Inter-process network flow tracking control method and system based on topology sniffing
US20160217188A1 (en) Method and device for displaying browser resources and computer readable storage medium
US11949547B2 (en) Enhanced simple network management protocol (SNMP) connector
CN115617750A (en) Log display method and device, electronic equipment and nonvolatile storage medium
CN113821412A (en) Equipment operation and maintenance management method and device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant