CN115967688A - OpenSwitch-based traffic acquisition performance optimization method - Google Patents
OpenSwitch-based traffic acquisition performance optimization method Download PDFInfo
- Publication number
- CN115967688A CN115967688A CN202111299722.8A CN202111299722A CN115967688A CN 115967688 A CN115967688 A CN 115967688A CN 202111299722 A CN202111299722 A CN 202111299722A CN 115967688 A CN115967688 A CN 115967688A
- Authority
- CN
- China
- Prior art keywords
- port
- mirroring
- traffic
- openswitch
- flow
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 31
- 238000005457 optimization Methods 0.000 title claims abstract description 13
- 238000012544 monitoring process Methods 0.000 claims abstract description 14
- 238000004590 computer program Methods 0.000 claims description 13
- 239000000523 sample Substances 0.000 claims description 9
- 230000006870 function Effects 0.000 claims description 6
- 238000002955 isolation Methods 0.000 claims description 3
- 238000004806 packaging method and process Methods 0.000 claims description 2
- 238000005516 engineering process Methods 0.000 description 7
- 238000009434 installation Methods 0.000 description 4
- 238000012423 maintenance Methods 0.000 description 4
- 238000004891 communication Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 238000005070 sampling Methods 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000005538 encapsulation Methods 0.000 description 1
- 238000003384 imaging method Methods 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 239000002245 particle Substances 0.000 description 1
- 238000006467 substitution reaction Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Images
Classifications
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D30/00—Reducing energy consumption in communication networks
- Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a traffic collection performance optimization method based on OpenSwitch, and belongs to the field of computers. The method comprises the following steps: s1: carrying out flow collection by using NetFlow; s2: and collecting the flow of the OpenStack cloud platform. The S1 specifically comprises the following steps: the VDS or the third party virtual switch environment uses the NetFlow to collect the flow under the VDS environment: s11: configure the NetFlow setting of VDS itself: s12: monitoring is enabled on any port group that needs monitoring. The invention can optimize the performance and realize high throughput.
Description
Technical Field
The invention relates to the technical field of cloud computing, in particular to a traffic collection performance optimization method based on OpenSwitch.
Background
With the rapid development of cloud computing technology, many services of a data center are gradually migrated to a cloud data center network. Cloud computing is a new mode for allocating IT resources as required, and the utilization rate of hardware resources is further improved in a virtual and multiple mode by depending on a virtualization technology. Tenants can purchase and dynamically expand corresponding resource scales at any time as required, and corresponding tenant networks also need to be dynamically changed, so that very high requirements are provided for network operation and maintenance of the cloud data center.
The internet and cloud computing push the scale of data centers to be continuously enlarged, and the network operation and maintenance currently face 4 challenges: network security; network performance; network management; performance of the network application.
However, from the perspective of network and service operation and maintenance, operation and maintenance departments cannot be effectively matched, and generally speaking, the problems of low performance and low throughput exist at present.
Disclosure of Invention
In view of this, an object of the present invention is to provide a method for optimizing traffic collection performance based on OpenSwitch. The problems in the background art can be overcome.
One of the purposes of the invention is realized by the following technical scheme:
a traffic collection performance optimization method based on OpenSwitch comprises the following steps:
s1: carrying out flow collection by using NetFlow;
s2: and collecting the flow of the OpenStack cloud platform.
Optionally, the S1 specifically includes the following steps:
the VDS or the third party virtual switch environment uses NetFlow to collect the flow under the VDS environment:
s11: configure the NetFlow setting of VDS itself:
s12: monitoring is enabled on any port group that needs monitoring.
Optionally, in 12, port mirroring is used for collecting:
starting with vsphere5.0, the distributed switch begins to provide the capability of virtual port mirroring; an administrator controls port mirroring for a particular distributed port; starting with VDS5.1, 4 different port mirror session types are used;
distributed port mirroring: mirroring data packets from any number of distributed ports to any number of distributed ports of the same host; if the source and target are on different hosts, this session type is invalid;
remote mirror source: mirroring data packets from a certain number of distributed ports to a specific uplink port of a corresponding host;
remote mirroring of an object: mirroring data packets from a certain number of VLANs to a distributed port;
packaging a remote mirror image source: mirroring data packets from a number of distributed ports to an IP address of a remote agent; the traffic of the VM is mirrored to the remote physical target through the IP channel.
Optionally, the step S2 specifically includes the following steps:
s21: collecting by using a port mirror image mode;
in Openstack, responsible for the component OpenvSwitch _ vswitch of the virtual switch, i.e. OVS; on a virtualization platform, the OVS provides a layer 2 switching function for a dynamically changing endpoint, and controls an access strategy, network isolation and flow monitoring in a virtual network;
packet capturing port flow mirroring is carried out in a port flow mirroring mode:
creating a mirror image, and specifying a source port and a destination port in the mirror image;
binding the mirror to the bridge;
s22: and collecting the data in a mode of installing an agent.
Optionally, in S22, the virtual machine sends traffic through the virtual network card, and this part of traffic is communicated to the tap device, and finally flows through br-int of the OVS, and captures all traffic information and sends it to the specified destination by installing the acquisition probe on the network bridge; if other data of the network bridge needs to be filtered is provided with a collecting probe in the virtual machine, and required information including the flow of each interface is obtained from the operating system level; because the installation is based on the virtual machine, the installation scale is large in quantity, and the root authority of the virtual machine needs to be acquired.
Optionally, the collection probe is developed by the scapy library of python; scapy is a Python program that enables users to send, sniff, dissect, and forge network packets.
It is another object of the present invention to provide a computer apparatus, which comprises a memory, a processor and a computer program stored in the memory and capable of running on the processor, wherein the processor implements the method when executing the computer program.
It is a further object of the invention to provide a computer-readable storage medium, on which a computer program is stored, which computer program, when being executed by a processor, carries out the method.
The invention has the beneficial effects that: the invention can optimize the performance and realize high throughput.
Additional advantages, objects, and features of the invention will be set forth in part in the description which follows and in part will become apparent to those having ordinary skill in the art upon examination of the following or may be learned from practice of the invention. The objectives and other advantages of the present invention will be realized and attained by the structure particularly pointed out in the written description and claims hereof as well as the appended drawings.
Drawings
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be further described in detail with reference to the accompanying drawings, in which:
FIG. 1 is a schematic diagram of an actual scene;
fig. 2 is a schematic diagram of an actual scene two.
Detailed Description
Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. It should be understood that the preferred embodiments are illustrative of the invention only and are not limiting upon the scope of the invention.
As shown in fig. 1, a method for optimizing traffic collection performance based on OpenSwitch is disclosed.
S1: flow collection using NetFlow (IPFIX);
scene one: in VDS or a third-party virtual switch environment, flow acquisition is performed using NetFlow in the VDS environment, and two steps need to be performed.
S11: configure the NetFlow setting of VDS itself:
IP Address this is the IP of the NetFlow collector, where the traffic will be sent.
Port (Port): this is the Port used by the NetFlow collector, typically UDP Port 2055, but the Port may be different depending on the vendor that collects the data.
Switch IP Address-in a typical hardware environment, each Switch has some kind of IP identity for management. Where an IP address is specified, the NetFlow collector will treat VDS as a single entity. This IP is not necessarily a valid, routable IP, but merely serves as an identifier. Active flow export timeout in seconds (Active flow output time seconds): the time that must elapse before the switch segments and sends the data stream to the collector. This avoids the situation where a large amount of data is transmitted when a special long data stream occurs.
Idle flow export timeout in seconds is similar to the active flow timeout, but for flows entering the Idle state. This can be seen as a necessary cleanup procedure to ensure that idle flows are sent to the collector in time.
Sampling rate-the first several packets are determined to be collected. The default value is 0, which means that all packets are collected. If it is set to a value other than 0, it will collect the last of every N packets. For example, set to 3, the last of every 3 packets will be collected.
Process internal flow only options are Enabled or Disabled, default. Enabling this option can ensure that only traffic that occurs between VMs on the same host is collected. This configuration is helpful if you just seek to collect dark traffic, already have configured NetFlow on the physical infrastructure, with the intention of avoiding two samplings (one at the virtual layer and the other at the physical layer).
S12: monitoring is enabled on any port group that needs monitoring.
Collection using port mirroring
Scene one: VDS or third party virtual switch environment
The following is the configuration method
Starting with vsphere5.0, the distributed switch begins to provide the capability of virtual port mirroring. The administrator can finely control the port mirroring of a particular distributed port. Starting with VDS5.1, 4 different port mirroring session types can be used.
Di stributed Port Mirroring (distributed Port Mirroring): data packets from any number of distributed ports are mirrored to any number of distributed ports of the same host. This session type is not valid if the source and target are on different hosts.
Remote Mirroring Source (Remote mirror Source): packets from a certain number of distributed ports are mirrored to a particular uplink port of the corresponding host.
Remote Mirroring Destination (Remote Mirroring Destination): packets from a certain number of VLANs are mirrored to the distributed ports.
Encapsulated Remote Mirroring (layer 3) Source: data packets from a number of distributed ports are mirrored to the IP address of the remote agent. The traffic of the VM is mirrored to the remote physical target through the IP tunnel. This is similar to ERSPAN (encapsulating remote switch port analyzer).
Although the source and destination of each port image selection are different, the attributes are similar.
The name is as follows: the name of the port mirror session is described. The descriptive names should be taken as far as possible, but not too long.
For example, "Mirroring Server X to destination Y" or "Server X to remote IP" (Server X to remote IP).
And (3) state: by default, port mirroring is disabled. You can create the image while maintaining the disabled state, enable it later, or enable it during configuration.
The session type is as follows: the type of port mirroring session is selected. One of the 4 states listed above is selected.
Encapsulation of the vlan id: the VLAN specified here will be used to encapsulate the frame to be mirrored. The frame may be transmitted over an uplink that may use a different vlan id. If you want the port image to remember the Original VLAN id used by the traffic, you must choose the "Preserve origin VLAN" (keep the Original VLAN) option. Otherwise, the encapsulated VLAN will replace the original VLAN.
Still other high-level properties may be adjusted: the source of a port mirror session may be one or more distributed ports, or even a range of ports. These ports may be ports used by VMs, or VMkernel ports. Each port ID exposes the host that provided the virtual port ID, the virtual port connection, and the direction of communication that one wishes to capture.
Port mirror session source configuration example:
the session is mirrored using an active port encapsulating the remote mirroring (L3) source.
S2: researching an OpenStack cloud platform traffic acquisition technology;
s21: collection using port mirroring
In Openstack, a component OpenvSwitch _ vswitch (hereinafter abbreviated as OVS) responsible for a virtual switch. On a virtualization platform, the component OVS can provide a layer 2 switching function for dynamically changing endpoints, and well control access policies, network isolation, traffic monitoring, and the like in a virtual network.
The SPAN technology is a port mirroring technology of a switch, and is mainly used for monitoring data flow on the switch, and SPAN does not affect data exchange of a source port, and only sends a copy of a data packet sent or received by the source port to a monitoring port. SPAN technology can be used to copy the data stream of some desired monitored port (i.e. controlled port) on the switch and send it to the traffic analysis host connected to the monitoring port. Multi-port traffic data is directed to a specified destination by a port mirroring method in conjunction with the OVS.
Because direct packet capture analysis cannot be performed in the ovs, packet capture port traffic mirroring can be performed in a port traffic mirroring manner, which mainly includes two steps:
creating a mirror image, and specifying a source port and a destination port in the mirror image;
binding the mirror to the bridge;
actual scenario one, as shown in fig. 1.
Actual scenario two, as shown in fig. 2.
And the flow guiding is realized aiming at a certain virtual machine or network space. E.g., two network spaces, in p1 ping p2, the traffic of p2 is mirrored to p3 on the destination port. P3 is only responsible for traffic steering in the P2 space.
RSPAN (remote port mirroring) refers to a switch where the source and destination ports are different.
And mirroring the data of the port p1 or the port p2 to a designated vlan or a port, mirroring the traffic of the vlan to the port p4 on another mspan switch, and mirroring the traffic to a remote port.
S22: collection by installing agent
The virtual machine sends flow through the virtual network card, the flow is communicated to the tap equipment and finally flows through br-int of the OVS, and all flow information is captured and sent to a specified destination by installing an acquisition probe on the network bridge. If other data of the bridge needs to be filtered, a collection probe can be installed in the virtual machine, and required information including the flow of each interface can be obtained from the operating system level. According to the scheme, due to the fact that the installation foundation is arranged on the virtual machine, the installation scale is large in quantity, and the authority of a Root (Root) of the virtual machine needs to be acquired.
The scheme does not affect other services of the bridge and does not generate extra flow data, compared with copy flow sending of port mirror images, the scheme does not need copy flow, immediately captures flow information and sends the flow information, and has extra function expansion, such as function support of analysis, decoding, sending, counterfeiting and the like, aiming at data packets.
The collection probes were developed by the scapy library of python. Scapy is a Python program that enables users to send, sniff, dissect and forge network packets. This functionality allows building instrumentation, scanning or network forwarding tools. Scapy is a powerful interactive packet handler. It can forge or decode packets of various protocols, send them online, capture them, match requests and replies.
It should be recognized that embodiments of the present invention can be realized and implemented by computer hardware, a combination of hardware and software, or by computer instructions stored in a non-transitory computer readable memory. The methods may be implemented in a computer program using standard programming techniques, including a non-transitory computer-readable storage medium configured with the computer program, where the storage medium so configured causes a computer to operate in a specific and predefined manner according to the methods and figures described in the detailed description. Each program may be implemented in a high level procedural or object oriented programming language to communicate with a computer system. However, the program(s) can be implemented in assembly or machine language, if desired. In any case, the language may be a compiled or interpreted language. Furthermore, the program can be run on a programmed application specific integrated circuit for this purpose.
Further, the operations of processes described herein can be performed in any suitable order unless otherwise indicated herein or otherwise clearly contradicted by context. The processes described herein (or variations and/or combinations thereof) may be performed under the control of one or more computer systems configured with executable instructions and may be implemented as code (e.g., executable instructions, one or more computer programs, or one or more applications) collectively executed on one or more processors, by hardware, or combinations thereof. The computer program includes a plurality of instructions executable by one or more processors.
Further, the method may be implemented in any type of computing platform operatively connected to a suitable interface, including but not limited to a personal computer, mini computer, mainframe, workstation, networked or distributed computing environment, separate or integrated computer platform, or in communication with a charged particle tool or other imaging device, and the like. Aspects of the invention may be implemented in machine-readable code stored on a non-transitory storage medium or device, whether removable or integrated onto a computing platform, such as a hard disk, optically read and/or write storage media, RAM, ROM, etc., so that it is readable by a programmable computer, which when read by the computer can be used to configure and operate the computer to perform the procedures described herein. Further, the machine-readable code, or portions thereof, may be transmitted over a wired or wireless network. The invention described herein includes these and other different types of non-transitory computer-readable storage media when such media include instructions or programs that implement the steps described above in conjunction with a microprocessor or other data processor. When the OpenSwitch-based traffic collection performance optimization method and the OpenSwitch-based traffic collection performance optimization technology are programmed, the invention also comprises a computer per se.
A computer program can be applied to input data to perform the functions described herein to transform the input data to generate output data that is stored to non-volatile memory. The output information may also be applied to one or more output devices, such as a display. In a preferred embodiment of the invention, the transformed data represents physical and tangible objects, including particular visual depictions of physical and tangible objects produced on a display.
Finally, the above embodiments are only intended to illustrate the technical solutions of the present invention and not to limit the present invention, and although the present invention has been described in detail with reference to the preferred embodiments, it will be understood by those skilled in the art that modifications or equivalent substitutions may be made on the technical solutions of the present invention without departing from the spirit and scope of the technical solutions, and all of them should be covered by the claims of the present invention.
Claims (8)
1. A traffic collection performance optimization method based on OpenSwitch is characterized by comprising the following steps: the method comprises the following steps:
s1: carrying out flow collection by using NetFlow;
s2: and collecting the flow of the OpenStack cloud platform.
2. The OpenSwitch-based traffic collection performance optimization method according to claim 1, characterized in that: the S1 specifically comprises the following steps:
the VDS or the third party virtual switch environment uses NetFlow to collect the flow under the VDS environment:
s11: configure the NetFlow setting of VDS itself:
s12: monitoring is enabled on any port group that needs monitoring.
3. The OpenSwitch-based traffic acquisition performance optimization method according to claim 2, characterized in that: in step S12, port mirroring is used for acquisition:
starting from vsphere5.0, the distributed switch begins to provide the capability of virtual port mirroring; an administrator controls port mirroring for a particular distributed port; starting with VDS5.1, 4 different port mirror session types are used;
distributed port mirroring: mirroring data packets from any number of distributed ports to any number of distributed ports of the same host; if the source and target are on different hosts, the session type is invalid;
remote mirror source: mirroring data packets from a certain number of distributed ports to a particular uplink port of a corresponding host;
remote mirroring of an object: mirroring data packets from a certain number of VLANs to a distributed port;
packaging a remote mirror image source: mirroring data packets from a number of distributed ports to an IP address of a remote agent; the traffic of the VM is mirrored to the remote physical target through the IP channel.
4. The OpenSwitch-based traffic collection performance optimization method according to claim 3, wherein: the step S2 specifically includes the following steps:
s21: collecting by using a port mirror image mode;
in Openstack, responsible for the component OpenvSwitch _ vswitch of the virtual switch, i.e. OVS; on a virtualization platform, the OVS provides a layer 2 switching function for a dynamically changing endpoint, and controls an access strategy, network isolation and flow monitoring in a virtual network;
packet capturing port traffic mirroring is performed in a port traffic mirroring manner:
creating a mirror image, and specifying a source port and a destination port in the mirror image;
binding the mirror to the bridge;
s22: and collecting the data in a mode of installing an agent.
5. The OpenSwitch-based traffic acquisition performance optimization method according to claim 4, wherein: in the step S22, the virtual machine sends traffic through the virtual network card, and the traffic of this part will be communicated to the tap device, and will finally flow through br-int of the OVS, and capture all traffic information and send to the designated destination by installing the acquisition probe on the network bridge; if other data of the bridge needs to be filtered, a collection probe is installed in the virtual machine, and required information including the flow of each interface is obtained from the operating system level.
6. The OpenSwitch-based traffic collection performance optimization method according to claim 5, wherein: the collection probe was developed by the scapy library of python; scapy is a Python program that enables users to send, sniff, dissect, and forge network packets.
7. A computer apparatus comprising a memory, a processor, and a computer program stored on the memory and capable of running on the processor, wherein: the processor, when executing the computer program, implements the method of any of claims 1-6.
8. A computer-readable storage medium having stored thereon a computer program, characterized in that: the computer program, when executed by a processor, implements the method of any one of claims 1-6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111299722.8A CN115967688A (en) | 2021-11-04 | 2021-11-04 | OpenSwitch-based traffic acquisition performance optimization method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111299722.8A CN115967688A (en) | 2021-11-04 | 2021-11-04 | OpenSwitch-based traffic acquisition performance optimization method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115967688A true CN115967688A (en) | 2023-04-14 |
Family
ID=87356563
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111299722.8A Pending CN115967688A (en) | 2021-11-04 | 2021-11-04 | OpenSwitch-based traffic acquisition performance optimization method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115967688A (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104683165A (en) * | 2013-11-27 | 2015-06-03 | 北京天地超云科技有限公司 | Monitor method for virtual machine network data in Xen virtual environment |
| CN105227403A (en) * | 2015-10-09 | 2016-01-06 | 盛科网络（苏州）有限公司 | A kind of OpenStack network flow monitoring method |
| CN108964959A (en) * | 2017-05-27 | 2018-12-07 | 阿里巴巴集团控股有限公司 | A kind of network interface card direct communication system and data packet monitoring and managing method for virtual platform |
| CN111371640A (en) * | 2020-02-24 | 2020-07-03 | 深圳供电局有限公司 | SDN controller-based traffic collection analysis method and system |
| CN113542160A (en) * | 2021-05-27 | 2021-10-22 | 贵州电网有限责任公司 | SDN-based method and system for pulling east-west flow in cloud |
-
2021
- 2021-11-04 CN CN202111299722.8A patent/CN115967688A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104683165A (en) * | 2013-11-27 | 2015-06-03 | 北京天地超云科技有限公司 | Monitor method for virtual machine network data in Xen virtual environment |
| CN105227403A (en) * | 2015-10-09 | 2016-01-06 | 盛科网络（苏州）有限公司 | A kind of OpenStack network flow monitoring method |
| CN108964959A (en) * | 2017-05-27 | 2018-12-07 | 阿里巴巴集团控股有限公司 | A kind of network interface card direct communication system and data packet monitoring and managing method for virtual platform |
| CN111371640A (en) * | 2020-02-24 | 2020-07-03 | 深圳供电局有限公司 | SDN controller-based traffic collection analysis method and system |
| CN113542160A (en) * | 2021-05-27 | 2021-10-22 | 贵州电网有限责任公司 | SDN-based method and system for pulling east-west flow in cloud |
Non-Patent Citations (4)
| Title |
|---|
| CSDN博客: ""openstack中虚拟机的流量走向"", pages 1 - 2, Retrieved from the Internet <URL:https://blog.csdn.net/u011698800/article/details/107607206> * |
| CSDN博客: ""OVS端口镜像"", pages 1, Retrieved from the Internet <URL:https://blog.csdn.net/qq_20817327/article/details/106982119> * |
| VMWARE: ""VMware 网络连接规划"", pages 29 - 30, Retrieved from the Internet <URL:https://www.doc88.com/p-67239412017555.htm> * |
| 云杉网络: ""混合云全网流量采集与分发方案"", pages 2 - 3, Retrieved from the Internet <URL:https://www.yunshan.net/pdf/DeepFlow%E6%B7%B7%E5%90%88%E4%BA%91%E5%85%A8%E7%BD%91%E6%B5%81%E9%87%8F%E9%87%87%E9%9B%86%E4%B8%8E%E5%88%86%E5%8F%91%E6%96%B9%E6%A1%88.pdf> * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11570090B2 (en) | Flow tracing operation in container cluster | |
| US7752307B2 (en) | Technique of analyzing an information system state | |
| US8266088B2 (en) | Tracking policy decisions in a network | |
| US8004998B2 (en) | Capture and regeneration of a network data using a virtual software switch | |
| JP4076974B2 (en) | Automatic characterization of network traffic | |
| CN111371640B (en) | SDN controller-based traffic collection analysis method and system | |
| CN110226155B (en) | Collecting and processing context attributes on a host | |
| US11706109B2 (en) | Performance of traffic monitoring actions | |
| CN107315667B (en) | Method and system for testing acceleration performance of second-level cache of storage system | |
| CN104683165A (en) | Monitor method for virtual machine network data in Xen virtual environment | |
| CN112994982A (en) | Packet capture control method, device and system of cloud-real machine and storage medium | |
| CN111158865A (en) | Method for realizing multiplexing virtual serial port | |
| CN113225339A (en) | Network security monitoring method and device, computer equipment and storage medium | |
| RU2668394C2 (en) | Packet collection method and system, network device and network management centre | |
| CN111352602A (en) | Control method, device and equipment of LED screen and storage medium | |
| KR20220029142A (en) | Sdn controller server and method for analysing sdn based network traffic usage thereof | |
| CN115967688A (en) | OpenSwitch-based traffic acquisition performance optimization method | |
| Flittner et al. | Trex: Tenant-driven network traffic extraction for sdn-based cloud environments | |
| CN110162276B (en) | Network printer security scanning method and system | |
| KR20180089757A (en) | Apparatus and method for integrated collecting of network data | |
| CN113285904A (en) | RDP-based method for analyzing disk mapping file information | |
| KR100404321B1 (en) | System and method for security evaluation of internet host system | |
| CN112019554B (en) | Intranet host and intra-cloud streaming method and device | |
| Lin et al. | Xmasq: Low-overhead container overlay network based on ebpf | |
| CN113132170B (en) | Data management method and system, association subsystem and computer readable medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |