CN100550933C - Monitor method based on the wireless network call monitoring device of distributed structure/architecture - Google Patents

Monitor method based on the wireless network call monitoring device of distributed structure/architecture Download PDF

Info

Publication number
CN100550933C
CN100550933C CNB2007101322568A CN200710132256A CN100550933C CN 100550933 C CN100550933 C CN 100550933C CN B2007101322568 A CNB2007101322568 A CN B2007101322568A CN 200710132256 A CN200710132256 A CN 200710132256A CN 100550933 C CN100550933 C CN 100550933C
Authority
CN
China
Prior art keywords
module
data
assembly
monitoring center
communication interface
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB2007101322568A
Other languages
Chinese (zh)
Other versions
CN101123641A (en
Inventor
宋宇波
裴文江
胡爱群
刘玉洁
吴亚军
董益宁
陈开志
陈端端
杨晓辉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Southeast University
Original Assignee
Southeast University
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Southeast University filed Critical Southeast University
Priority to CNB2007101322568A priority Critical patent/CN100550933C/en
Publication of CN101123641A publication Critical patent/CN101123641A/en
Application granted granted Critical
Publication of CN100550933C publication Critical patent/CN100550933C/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

Based on the monitor method of the wireless network call monitoring device of distributed structure/architecture is a kind of audio monitoring system, specifically be a kind of radio network telephone monitoring system and its implementation based on distributed structure/architecture, comprise: several are smelt and visit terminal module (103) and remote monitoring center module (108); Wherein: remote monitoring center module (103) is smelt spy terminal module (108) with several and is connected by the wire/wireless link, remote monitoring center module (103) receives to smell visits the VoWLAN data that quilt that terminal module (108) sends is intercepted and captured, and Long-distance Control is smelt and visited terminal module (108) simultaneously; Realize the monitoring of the professional VoWLAN that original speech is monitored.At the signals diverging transmission feature of wireless network, this device is placed embedded audiomonitor in the WLAN (wireless local area network) scope, with unique sign address (MAC Address) of wireless network card unique identification as VoWLAN user; Resolve reduction by media data is transferred to listening center, realize audio monitoring.

Description

Monitor method based on the wireless network call monitoring device of distributed structure/architecture
Technical field
The present invention relates to a kind of audio monitoring system, specifically is a kind of radio network telephone monitoring system and its implementation based on distributed structure/architecture, the invention belongs to the radio network technique field.
Background technology
In recent years, the communication technology constantly develops, and carries out the selection that voice communication has become increasing people by packet network.Packet network not only can be supported the transmission of original speech business, emerging multimedia service also there is better support, and can reduces the expense of originally high Circuit Switching Network, therefore by the Internet transmission data, in future, the packet network communication business has huge prospect.Most importantly in the Packet Service come carry voice traffic by the internet exactly, be commonly called as networking telephone VOIP, (Voice Over Internet Protocol).VOIP is a kind of base transmits voice with procotol (IP, Internet Protocol) a technology.VOIP not only can transmit voice by the Internet, can also realize business such as IP call and video telephone.The VOIP technology is with its low price, and configuration is convenient, is subjected to people's favor in recent years, and development is rapid, and each major company all invests and develops the VOIP field energetically.VOIP agreement commonly used at present has H.323 agreement, these 3 kinds of conversation initialized protocol (SIP) and Media Gateway Control Protocol.Session Initiation Protocol simple and flexible wherein, extensibility is strong, supports the use of VOIP in WLAN (wireless local area network) (WLAN, Wireless LocalArea Network) by the switching capability that application layer is provided.WLAN with its Efficient and Flexible networking advantage in develop rapidly.From professional angle, WLAN (wireless local area network) has utilized these effective ways of wireless multiple access channel to support communication between the computer, and for mobile, personalization and the multimedia application of communication provides may.Up-to-date WLAN (wireless local area network) product data transmission rate can reach 108Mbps, and transmission range can be more than 20km.It makes online computer have mobility, thereby can solve the network UNICOM problem of using wired mode to be difficult for realization quickly and easily.The leading of WLAN (wireless local area network) development at present is IEEE 802.11 standards, and it has stipulated every index of wireless technology.This series comprises four kinds of comparatively ripe standards: 802.11,802.11a, 802.11b and 802.11g.Be to adapt to more wider application, the also having 802.11n, fast roaming agreement 802.11r, be the standards such as 802.11e of guarantee service quality (QoS, Quality ofService) of new development towards high bandwidth more.Along with the maturation of the relevant standard of WLAN (wireless local area network) is also perfect, WLAN has obtained application more and more widely in the whole world.Along with the extensive use of WLAN and developing rapidly of VOIP, radio network telephone (VoWLAN, the Voice over Wireless Local area network) technology that both are combined has caused that people more and more pay close attention to.It is stable that various WLAN standard make that speech on WLAN and transmission of multimedia streams resemble traditional VOIP, and this impels the VoWLAN business day by day to sell well.Utilize existing wlan network to realize wireless VOIP delivery value, enterprise staff is by the place of VoWLAN beyond can be in the office space access voice, Email (E-mail) and other Internet resources that connected at any time, improve utilization rate of network resource like this and reduced the cost of each call, thereby saved the overall expenses of enterprise.
The audio monitoring function is that state security department forces to claim to various means of communication, and along with the develop rapidly of VoWLAN business, its monitoring problem is also more and more brought into schedule.And the user of VoWLAN and manager also wish and can carry out real-time monitoring and management to it.Traditional audio monitoring equipment can't be monitored the speech data in the IP network, and the monitoring device of more existing VOIP is implemented monitoring by monitoring the speech data of intercepting and capturing in the cable network, can't intercept and capture the wireless network speech data, therefore can't effectively monitor the VoWLAN business.Do not retrieve at present the relevant patent documentation that is directed to the monitoring device implementation method of VoWLAN specially.
Summary of the invention
Technical problem: the objective of the invention is to overcome deficiency of the prior art, a kind of monitor method of the wireless network call monitoring device based on distributed structure/architecture is provided, overcome the characteristics that existing monitoring device can't be adapted to wireless network, realize the monitoring of the professional VoWLAN that original speech is monitored.At the signals diverging transmission feature of wireless network, this device is placed embedded audiomonitor in the WLAN (wireless local area network) scope, with unique sign address (MAC Address) of wireless network card unique identification as VoWLAN user; Resolve reduction by media data is transferred to listening center, realize audio monitoring.
Technical scheme: monitoring device of the present invention comprises following assembly: smell and visit terminal module and remote monitoring center module; Smelling spy terminal module and remote monitoring center module is interconnected by wireless (perhaps wired) channel link.
This device comprises: several are smelt and visit terminal module and remote monitoring center module; Wherein: the remote monitoring center module is smelt with several and is visited terminal module and is connected by the wire/wireless link, and the remote monitoring center module receives smells the VoWLAN data that the quilt of visiting the terminal module transmission is intercepted and captured, and the while Long-distance Control is smelt the spy terminal module; Described smelling visited terminal module and formed and move in embedded system by monitoring front end and remote communication interface, the wireless initial data that the monitoring front end will be intercepted and captured is passed to remote communication module, remote communication module according to libpcap reference format group bag, and is uploaded to the remote supervisory center by physical communication link with these data; Described remote monitoring center module is by the analytics engine module, human-computer interface module is formed with the server end communication interface: the server end communication interface modules is connected by the wire/wireless link with the remote communication interface module of smelling the spy terminal module, realizes Data Receiving and sends control information; Analytics engine module invokes server end communication interface modules obtains to smell the intercepted data of visiting terminal module, according to the libpcap standard wherein data content is extracted, and the data that extract are carried out VOIP protocol analysis and content reduction; Human-computer interaction module calls the analytics engine module and shows analysis result, and invoking server end communication interface modules sends control information to control and smells the spy terminal module, thus the Long-distance Control intercept target; Described monitoring front end specifically comprises: less radio-frequency assembly, protocol filtering assembly, data capture assembly and data are kept in assembly: the less radio-frequency assembly adopts the Wireless Communication Equipment of supporting IEEEg02.11b/g on physical equipment, to being monitored by the wireless signal of communicating by letter between intercept target and the wireless router; The data capture assembly calls the less radio-frequency assembly by the mode that loads, and finishes the intercepting and capturing to network packet; The protocol filtering assembly acts on the data capture assembly, by the function of filtering with realization to data capture component passes parameter; There is this locality in the temporary assembly of data capture component call data with the data of catching temporarily, finishes the intercepting and capturing function of initial data.
Described remote communication interface specifically comprises: network service assembly and data transfer components: the network service assembly reads the network data that captures by sockets interface from the temporary assembly of data; The assembly of network service simultaneously calls data transfer components by the mode that loads, and sets up with the remote monitoring center by sockets interface and communicates by letter; Data transfer components connects by the server end communication interface at wire/wireless link and remote monitoring center.
Described server end communication interface by with the remote communication interface module in the corresponding sockets interface of network service assembly connect the communicating data that data transfer components sends, again the data that receive are sent to the parsing that the analytics engine module is carried out procotol.
Described analytics engine module specifically comprises: network protocol analysis assembly and tone decoding assembly: the network protocol analysis assembly is handled the data flow that the server end communication interface receives, by the time analyze after the vocoded data, call the tone decoding assembly again and carry out data decode, inter-module is connected with data flow.
Described human-computer interaction module specifically comprises managing to be checked assembly and smell spy terminal management assembly: two assemblies are separate; Management checks that assembly provides various modes of watching intercepted data with the graphical interfaces form to VoWLAN regulator; Smell spy terminal management assembly and make VoWLAN regulator, set intercept target and monitor strategy by a plurality of spy terminals of smelling of graphical interfaces interactive means Long-distance Control.
This method specifically may further comprise the steps:
1) remote monitoring center module initialization: wait for and smell the spy terminal module;
2) smell the parameter configuration of visiting terminal module, initialization: connect with the remote monitoring center;
3) remote monitoring center module Long-distance Control is smelt the process of spy terminal module: be managed for configuration smelling the spy terminal by human-computer interaction module, comprise scanning quilt monitoring network, determine intercept target, it is tactful that monitoring is set, and starts the data capture assembly of monitoring front end;
4) smell data capture and the processing procedure of visiting terminal module: smell to visit and promptly carry out data capture after terminal module discovery intercept target begins to converse; After the data of catching are filtered extraction the VoWLAN communication data is timed to the remote monitoring center by remote communication interface;
5) the remote monitoring center processing is cut the process of packet: the remote monitoring center module is carried out the procotol parsing to institute's intercepted data packet, and tone decoding, the WAVE audio file that formation can be play;
6) snoop procedure finishes: the remote monitoring center is submitted to the user in the graphical interfaces mode with snoop results.
Beneficial effect: the WLAN scene that the present invention uses embedded device to be placed on monitoring users is monitored, this equipment volume is less, be difficult for by target detection, the VoWLAN data that listen to are transferred to listening center by wire/radio network, resolve reduction, become original call voice, offer the monitoring personnel, realized monitoring to VoWLAN, overcome existing product and can't realize the shortcoming monitored because of setting up inconvenience, and realized audio monitoring targetedly, can directly hear the dialog context of controlled object.Wherein emphatically to the intercepting and capturing and the parsing of voice medium, this is because the environment of wireless network determines, if according to general method, to signaling intercepting and capturing step by step, loses a large amount of critical datas probably, can't reduce for this.Only Media Stream is intercepted and captured herein, as the sign of dialogue once, determined the accuracy of monitoring with the MAC Address of both call sides network interface card.
Description of drawings
Fig. 1 is an operation principle schematic diagram of the present invention;
Wherein have: first by intercept target 101, second by intercept target 102, smell and visit terminal module 103, monitor front-end module 104, remote communication interface module 105, wireless router 106, the Internet 107, remote monitoring center module 108, analytics engine module 109, human-computer interface module 110, server end communication interface 111.
Fig. 2 visits terminal module component communication schematic diagram for smelling;
Wherein: radio network telephone user's communication data 201, monitor the less radio-frequency assembly 202 of front-end module, monitor the protocol filtering assembly 203 of front-end module, monitor the data capture assembly 204 of front-end module, monitor the temporary assembly 205 of data of front-end module, the network service assembly 206 of remote communication interface module, the data transfer components 207 of remote communication interface module.
Fig. 3 is a remote monitoring center module component communication schematic diagram;
Wherein: the communicating data 301 that remote communication interface transmits, the network protocol analysis assembly 302 of analytics engine module, the tone decoding assembly 303 of analytics engine module, assembly 304 is checked in the management of human-computer interaction module, terminal control assembly 305 is visited in smelling of human-computer interaction module.
Fig. 4 is the inventive method flow chart.
Embodiment
In the monitor method based on the wireless network call monitoring device of distributed structure/architecture, this device comprises: several are smelt and visit terminal module 103 and remote monitoring center module 108; Wherein: remote monitoring center module 103 is smelt spy terminal module 108 with several and is connected by the wire/wireless link, remote monitoring center module 103 receives to smell visits the VoWLAN data that quilt that terminal module 108 sends is intercepted and captured, and Long-distance Control is smelt and visited terminal module 108 simultaneously; The described spy terminal module of smelling specifically comprises monitoring front-end functionality module and remote communication interface functional module; Two functional modules are moved in embedded system, monitor the wireless initial data that front end will intercept and capture and pass to remote communication module, and remote communication module according to libpcap reference format group bag, and is uploaded to the remote supervisory center by physical communication link with these data; Smell the spy terminal module and can be one and a plurality of, relevant with the scope that will monitor.
Described remote monitoring center module specifically comprises server end communication interface modules, analytics engine module and human-computer interaction module; The server end communication interface modules is connected by Ethernet interface or CDMA wireless network interface with the remote communication interface module of smelling the spy terminal module, realizes Data Receiving and sends control information; Analytics engine module invokes server end communication interface modules obtains to smell the intercepted data of visiting terminal, according to the libpcap standard wherein data content is extracted, and the data that extract are carried out VOIP protocol analysis and content reduction; Human-computer interaction module calls the analytics engine module and shows analysis result, and invoking server end communication interface modules sends control information to control and smells the spy terminal module, thus the Long-distance Control intercept target.
The above-mentioned monitoring front-end module of visiting in the terminal module of smelling specifically comprises the wireless network radio frequency component, the data capture assembly, and protocol filtering assembly and data are kept in assembly; The wireless network radio frequency component is intercepted and captured the wireless communication data in the monitoring scope; The data capture assembly calls the less radio-frequency assembly in the mode that loads and obtains the wireless communication data that intercept; Protocol filtering assembly and data capture component interaction, the control data capture component extracts the VOIP speech data; Data are kept in component call data capture assembly, and filtration is obtained waiting to be transmitted in the buffer that data are temporarily stored in hardware device.This module is used in the monitoring scope catching the wireless signal of VoWLAN, and the filtration of intercepted user physical address (MAC) and agreement is set, and what guarantee to monitor is accurate, and intercepts wireless data packet and be temporarily stored in this locality earlier;
The above-mentioned remote communication interface module of visiting in the terminal module of smelling specifically comprises network service assembly and data transfer components; The network service assembly reads transmit port by system and is connected with the temporary assembly of the data of monitoring front-end module, reads temporary data; The network service assembly links to each other with data transfer components in the mode that loads; Data transfer components adopts general socket connected mode, communicates with the remote monitoring center; This module is responsible for being sent to the remote monitoring center with intercepting and capturing the VoWLAN wireless data of resolving by wire link or Radio Link mode.
In the heart analytics engine module specifically comprises network protocol analysis assembly and tone decoding assembly in the above-mentioned remote monitoring; Number network protocol analysis assembly is handled the data flow that the server end communication interface receives, and analyzes by the time after the vocoded data, calls the tone decoding assembly again and carries out data decode, and inter-module is connected with data flow; This module is responsible for receiving initial data and is resolved and restores the voice that can play, is the core component in this device.
In the heart human-computer interaction module comprises that management checks assembly and smell and visit the terminal control assembly in the above-mentioned remote monitoring; Human-computer interaction module is presented system manager's (being the regulator of VoWLAN) with the form of user interface, management is checked assembly and is smelt spy terminal control assembly and all is embedded among the interface, management is checked that assembly can be checked and is monitored voice and the original data stream obtain, smell spy terminal control assembly and can specify intercepted user, physical address (MAC) promptly is set filters, also may command is smelt and is visited starting terminal and termination.
Specific implementation method of the present invention is as follows:
1) remote monitoring center initialization is waited for smelling and is visited terminal connection access;
2) smell the spy terminal initialization, connect, carry out to cut and assure fully with the remote monitoring center;
3) the remote monitoring center is managed for configuration smelling the spy terminal, and network is monitored in scanning, determines intercept target, and it is tactful that monitoring is set, and log-on data is intercepted and captured;
4) smell the spy terminal institute's section packet is deposited this locality, regularly be transferred to listening center;
5) the remote monitoring center receives original intercepted data, and carry out procotol and resolve, and tone decoding, the audio file that formation can be play;
6) regulator of VoWLAN can monitor at any time and smell the speech data of visiting the intercept target after SOT state of termination and the reduction, realizes the VoWLAN supervision.
Below in conjunction with accompanying drawing key technology of the present invention and each module are elaborated.
As shown in Figure 1, this wireless network call monitoring device comprise one smell visit terminal module 103 be placed on first by intercept target 101, second by near the intercept target 102 (i.e. the client who converses by radio network telephone), by Wireless/wired channel transfer of data is arrived remote monitoring center 108 after intercepting speech data.Be implemented in the inner data intercept of WLAN (wireless local area network) like this, then data beamed back the remote monitoring center, after protocol analysis is handled, realize the monitoring of original speech.
Of the present inventionly smell that to visit terminal 103 are embedded devices, its effect be placed on first by intercept target 101, second by near the intercept target 102, by monitoring the packet that front end 104 is caught by wireless router 106 accesses 107, and be stored in this locality, regularly pass remote monitoring center 108 back by remote communication interface 105.Wherein first is differed by intercept target 102 by intercept target 101, second that establish a capital will be in the coverage of same wireless router 105, as long as there is one can monitor both sides' dialogue near visiting terminal 103 smelling.After remote monitoring center 108 receives the initial data of intercepting and capturing, resolve the reduction voice, can play.The regulator of VoWLAN can carry out telemanagement and configuration to smelling the spy terminal by the human-computer interaction module at remote monitoring center simultaneously, determines monitoring objective and monitoring strategies.
Divide below to smell and visit terminal module 103 and remote monitoring center module 108 2 parts are introduced specific implementation method in detail.
As shown in Figure 2, smell spy terminal module 103 and comprise monitoring front-end module 104 and remote communication interface module 105.
Monitor front-end module 104 and comprise less radio-frequency assembly 202, protocol filtering assembly 203, data capture assembly 204 and data are kept in assembly 205.Less radio-frequency assembly 202 is wireless network card on physical equipment, can adopt the various wireless network cards of common support IEEE802.11b/g in the realization, it bears the function of detected wireless signals physically, promptly detects by the wireless signal of communicating by letter between intercept target 101,102 and the wireless router.Protocol filtering assembly 203 is specified the physical address and the VoWLAN certain protocol (Session Initiation Protocol and Real-time Transport Protocol) of intercepted user, determines the accuracy of monitoring with this.Protocol filtering assembly 203 acts on the data capture assembly 204, by transmit the function of parameter to realize filtering to data capture assembly 204.Less radio-frequency assembly 202 is realized radio network telephone user's communicating data 201 is caught, it is carried on the less radio-frequency assembly 202 and works, by less radio-frequency assembly 202 detected wireless signals, finish intercepting and capturing by data capture assembly 204 to network packet, then the data of catching are utilized the interim earlier this locality that exists of the temporary assembly 205 of data, finished the intercepting and capturing function of initial data.
Remote communication interface module 105 is made up of network service assembly 206 and data transfer components 207.Network service assembly 206 adopts sockets to realize, it reads the network data that captures from the temporary assembly 205 of data, and connects in remote monitoring center 108, and data are sent to remote monitoring center 108 with the passage of safety.Data transfer components 207 is the physical equipments that send data to the remote monitoring center by the wire/wireless link, it has two kinds of implementations, in wire link, be the Ethernet interface of support 802.3 agreements commonly used, and adopt cdma network or GPRS network interface at Radio Link.Radio Link adopts PPP(Point-to-Point Protocol) transmission data.
As shown in Figure 3, remote monitoring center module 108 comprises analytics engine module 109, human-computer interaction module 110 and server end communication interface 111.
Server end communication interface 111 is the communicating data 301 of receiving remote communication interface transmission from wire/radio network earlier, here used with network service assembly 206 corresponding sockets in the remote communication interface module 105 and be connected, safety receives the data 301 that intercept, and carries out the parsing of procotol by analytics engine module 109 again.
Analytics engine module 109 comprises network protocol analysis assembly 302 and tone decoding assembly 303.Analytics engine module 109 realizes the packet parsing is reduced into voice functions.At first, the work of network protocol analysis assembly 302 mainly is the data analysis of doing network layer, network seven layer model according to International Organization for Standardization, again in conjunction with analysis to network packet, at first handle physical layer protocol, the frame of WLAN (wireless local area network) has three seed categories, Frame, control frame, management frames.The effect of Frame is to be used for propagating user profile between station and station.Control frame is used for carrying out that the zone empties that operation, channel are confirmed and the data of receiving such as are confirmed at function.The major function of management frames is to exercise supervision, and is mainly used in work station and adds or leave wireless network, and will unite from an accessing points and move on to another accessing points.Only resolution data is auspicious for we, because its inside just includes the speech data that will resolve, takes drop policy for other two kinds of hardwoods.Next the data message of deal with data link layer (MAC), all mac frames all have following three elements: a mac frame head (MAC Header), and it comprises frame control field, duration/identification field, address field, sequence number control information field; The frame of a variable-length (Frame body), the frame type of corresponding different subtypes; A frame check field (FCS) comprises the cyclic redundancy check (CRC) code (CRC) of one 32 bit.Can extract wireless messages from the MAC header, as the physical address of both call sides, as both sides' only sign; Can also arrange data, reject duplicate message etc.What comprise in the frame is exactly data message, i.e. upper-layer protocol (inter-network agreement) data.Provide unified IP datagram and unified IP address to inter-network agreement (IP) layer, make the otherness of various physical frames and physical address not exist, extract IP address and length of data package herein, judge the information of one deck down the upper strata.Transport layer comprises transmission control protocol (TCP) and User Datagram Protoco (UDP) (UDP), judges after the concrete agreement, further extracts application layer message again.Here application layer to be processed comprises conversation initialized protocol (SIP) and real-time transport protocol (rtp), and the SIP signaling protocol connects, and Real-time Transport Protocol is actual band voice payload in transmission course.After the SIP signaling has been set up connection, just can carry out the transmission of voice.No matter adopt which kind of mode to set up signaling, in case after talking link has been set up, transmit with regard to all adopting Real-time Transport Protocol, analysis focus on Real-time Transport Protocol.Real-time transport protocol (rtp) provides the service of the end-to-end transfer with real-time feature for data.Application program is moved RTP usually so that use its multichannel node and verification service on UDP.RTP carries out in order and transmits, and the sequence number among the RTP allows the recombinate packet sequence of transmit leg of recipient, and sequence number also can be used to determine suitable package location simultaneously.In the RTP data packet head, the sign (PT) of data type in the bag is provided, be used to the coded system that illustrates that multimedia messages adopts, add timestamp (time stamp) at the multi-medium data head, the dependence timestamp can make the timing relationship at the packet of receiving terminal be recovered, thereby has reduced time-delay and shake that network causes; Can correctly sort and locate at receiving terminal according to serial number (SequenceNumber), and the statistical packages Loss Rate.Voice payload is organized into the identical hardwood of length and transmits, and no matter speaker's speech length takes the mode of everyone hardwood of both sides alternately to transmit, if a side is silent, also can weaves into the RTP hardwood to quiet or noise and transmit.The principle of VoWLAN is based on the transmitting-receiving buffering area, there is the transmission buffering area in the voice data that sends, and the voice data that receives exists and receives buffering area, and this two side's data are staggered in simultaneously and transmit in the RTP passage, are that RTP packet interleaving of a side transmits basically.Must be pure RTP data with the VoWLAN data stream filtering of catching, and, save as two different files then, resolve respectively according to the transmit leg mac address filter different with the recipient.Arrive this, network protocol analysis assembly 302 is finished its function, to be treated as pure vocoded data from the primitive network data 301 that server end communication interface 111 receives, submit to tone decoding assembly 303, carry out the processing of next step voice restoration.
Because VoWLAN transmits speech data with the form of grouping, the voice signal that is transmitted promptly quantizes and coding through simulation/data transaction.Therefore tone decoding assembly 303 adopts various tone decoding schemes to realize.(ITU-T) that common speech coding standard has International Telecommunications Union's tissue definition G.711, G.723 and G.729 three kinds, voice signal is through after the quantization encoding, by the voice compression algorithm compressing data is the frame of fixed length, then these speech datas are packed by related protocol, give subsidiary addressing of each datagram and control information, datagram one is forwarded to the destination with standing for a moment through wlan network.Network protocol analysis assembly 302 has removed voice packet addressing and control information, is reduced to pure voice payload, presents tone decoding assembly 303.Tone decoding assembly 303 carries out corresponding decoding earlier with pure voice payload, is reassembled as the audio file that can play again, recovers voice.Wherein G.729 decoded portion is as follows: decoder recovers the parameter of every frame from the code stream that receives, comprise the LSP coefficient, the mark pitch delay of two subframes, fixed codebook vector and self adaptation and fixed codebook gain.The LSP coefficient converts two subframes LP filter coefficient separately to after interpolation.To each subframe, adaptive codebook vector and the arithmetic codebook vectors pumping signal that addition is formed after the gain weighting respectively is by LP composite filter reconstructed speech signal.Reconstructed speech also will be by a last handling process that improves synthetic speech quality, comprises when long and self-adaptive post-filtering and the high-pass filtering and the calibration of composite filter in short-term.After the decoding, add file header and the end-of-file of present General Audio form WAVE, form the voice document that the ordinary playing device can be play, finish the work of voice restoration to voice flow.
Human-computer interaction module 110 comprises management to be checked assembly 304 and smells spy terminal management assembly 305.Management checks that assembly 304 offers VoWLAN regulator and checks original monitored data with the interface form, supervision is by the voice dialogue of intercept target, the voice document of resolving is deposited with the WAVE form, and the regulator can use common playout software to listen the VoWLAN voice content of being monitored.If the regulator is interested in the raw data packets, the interface can be arranged raw data packets according to time series, is presented on the interface that it is further analyzed for the regulator.Make VoWLAN regulator smell the spy terminal and smell spy terminal management assembly 305, set intercept target and monitor strategy by the interface Long-distance Control; This Long-distance Control makes the regulator can need not to be positioned at the monitoring scene and can be configured smelling the spy terminal, and regulator's a plurality of smelling of Long-distance Control simultaneously visits terminals 103.
Shown in figure four, concrete workflow of the present invention is as follows:
1) at first, VoWLAN regulator carries out initialization to the remote monitoring center, and wait is smelt and visited terminal connection access, smells the spy terminal this moment and has been placed in the zone of intercepted user;
2) then, smell and visit terminal initialization, set up socket with the remote monitoring center and be connected, both sides realize proper communication, prepare for monitoring device starts;
3) VoWLAN regulator is managed for configuration smelling the spy terminal by human-computer interaction module at the remote monitoring center, and network is monitored in scanning, determines intercept target, and it is tactful that monitoring is set, and starts the data capture assembly of monitoring front end, and intercept target is monitored;
4) after the discovery intercept target begins conversation, smell the spy terminal and carry out data capture, again the network data of being cut is kept in module stores with data,, regularly transfer of data is arrived the remote monitoring center by remote communication interface;
5) the remote monitoring center receives original intercepted data, and carry out procotol in real time and resolve, and tone decoding, the WAVE audio file that formation can be play;
6) VoWLAN regulator can monitor at any time by human-computer interaction module and smell the speech data of visiting the intercept target after SOT state of termination and the reduction, realizes the VoWLAN supervision.

Claims (4)

1, a kind of monitor method of the wireless network call monitoring device based on distributed structure/architecture, it is characterized in that this monitor method based on device comprise: several are smelt and visit terminal module (103) and remote monitoring center module (108); Wherein: remote monitoring center module (108) is smelt spy terminal module (103) with several and is connected by the wire/wireless link; Remote monitoring center module (108) receives to smell visits the VoWLAN data that quilt that terminal module (103) sends is intercepted and captured, and Long-distance Control is smelt and visited terminal module (103) simultaneously; Described smelling visited terminal module (103) and formed and move in embedded system by monitoring front-end module (104) and remote communication interface module (105), the wireless initial data that monitoring front-end module (104) will be intercepted and captured is passed to remote communication interface module (105), remote communication interface module (105) according to libpcap reference format group bag, and is uploaded to the remote supervisory center by physical communication link with these data; Described remote monitoring center module (108) is by analytics engine module (109), human-computer interaction module (110) is formed with server end communication interface (111): server end communication interface modules (111) is connected by the wire/wireless link with the remote communication interface module (105) of smelling the spy terminal module, realizes Data Receiving and sends control information; Analytics engine module (109) invoking server end communication interface modules (111), the intercepted data of visiting terminal module (103) is smelt in acquisition, according to the libpcap standard wherein data content is extracted, the data that extract are carried out VOIP protocol analysis and content reduction; Human-computer interaction module (110) calls the analytics engine module and shows analysis result, and invoking server end communication interface modules (111) sends control information to control to smell and visits terminal module (103), thus the Long-distance Control intercept target; Described monitoring front-end module (104) specifically comprises: less radio-frequency assembly (202), protocol filtering assembly (203), data capture assembly (204) and data are kept in assembly (205): less radio-frequency assembly (202) adopts the Wireless Communication Equipment of supporting IEEE802.11b/g on physical equipment, to being monitored by the wireless signal of communicating by letter between intercept target and the wireless router (106); Data capture assembly (204) calls less radio-frequency assembly (202) by the mode that loads, and finishes the intercepting and capturing to network packet; Protocol filtering assembly (203) acts on the data capture assembly (204), by transmit the function of parameter to realize filtering to data capture assembly (204); Data capture assembly (204) calls the temporary assembly (205) of data there is this locality in the data of catching temporarily, finishes the intercepting and capturing function of initial data.
2, the monitor method of the wireless network call monitoring device based on distributed structure/architecture as claimed in claim 1 is characterized in that described remote communication interface module (105) specifically comprises: network service assembly (206) and data transfer components (207): network service assembly (206) reads the network data that captures by sockets interface from the temporary assembly (205) of data; Network service assembly (206) calls data transfer components (207) by the mode that loads simultaneously, sets up with remote monitoring center (108) by sockets interface and communicates by letter; Data transfer components (207) connects by the server end communication interface (111) of wire/wireless link and remote monitoring center (108).
3, the monitor method of the wireless network call monitoring device based on distributed structure/architecture as claimed in claim 1 or 2, it is characterized in that described server end communication interface (111) by with remote communication interface module (105) in the corresponding sockets interface of network service assembly (206), receive the communicating data (301) that data transfer components (207) sends, again the data that receive are sent to analytics engine module (109) and carry out the parsing of procotol.
4, the monitor method of the wireless network call monitoring device based on distributed structure/architecture as claimed in claim 1 is characterized in that this method specifically may further comprise the steps:
1) remote monitoring center module (108) initialization: wait for smelling and visit terminal module (103) connection access;
2) smell the parameter configuration of visiting terminal module (103), initialization: set up socket with remote monitoring center module (108) and be connected;
3) remote monitoring center module (108) Long-distance Control is smelt the process of visiting terminal module (103): be managed for configuration smelling the spy terminal by human-computer interaction module (110), comprise that scanning is by the monitoring network, determine intercept target, be provided with and monitor strategy, start the data capture assembly (204) of monitoring front end;
4) smell data capture and the processing procedure of visiting terminal module (103): smell to visit and promptly carry out data capture after terminal module (103) discovery intercept target begins to converse; After the data of catching are filtered extraction the VoWLAN communication data is timed to remote monitoring center (108) by remote communication interface module (105);
5) remote monitoring center (108) handle the process of cutting packet: remote monitoring center module (108) is carried out the procotol parsing to institute's intercepted data packet, and tone decoding, the WAVE audio file that formation can be play;
6) snoop procedure finishes: remote monitoring center (108) submit to the user in the graphical interfaces mode with snoop results.
CNB2007101322568A 2007-09-14 2007-09-14 Monitor method based on the wireless network call monitoring device of distributed structure/architecture Expired - Fee Related CN100550933C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB2007101322568A CN100550933C (en) 2007-09-14 2007-09-14 Monitor method based on the wireless network call monitoring device of distributed structure/architecture

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB2007101322568A CN100550933C (en) 2007-09-14 2007-09-14 Monitor method based on the wireless network call monitoring device of distributed structure/architecture

Publications (2)

Publication Number Publication Date
CN101123641A CN101123641A (en) 2008-02-13
CN100550933C true CN100550933C (en) 2009-10-14

Family

ID=39085817

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2007101322568A Expired - Fee Related CN100550933C (en) 2007-09-14 2007-09-14 Monitor method based on the wireless network call monitoring device of distributed structure/architecture

Country Status (1)

Country Link
CN (1) CN100550933C (en)

Families Citing this family (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101488954A (en) * 2009-01-09 2009-07-22 中兴通讯股份有限公司 Speech monitoring method and access gateway
CN101938572A (en) * 2010-09-07 2011-01-05 南京莱斯信息技术股份有限公司 Telephone whole-network monitoring system and realizing method thereof
CN102065457B (en) * 2010-12-31 2013-07-10 广州联正达通信科技股份有限公司 WLAN (Wireless Local Access Network) quality monitoring system and method based on GSM/EDGE (Global System of Mobile Communication/Enhanced Data Rate for GSM Evolution) network
CN102065460B (en) * 2010-12-31 2013-05-29 广州联正达通信科技股份有限公司 TD-SCDMA network-based WLAN network quality monitoring system and method
CN103260152B (en) * 2012-02-20 2016-08-03 东南大学常州研究院 The equipment of a kind of mobile terminal sound communication safety supervision and method
CN102821364A (en) * 2012-07-23 2012-12-12 圆刚科技股份有限公司 Wireless mobile device, wireless network streaming broadcast system and broadcast method
CN103618679A (en) * 2013-11-25 2014-03-05 上海华为技术有限公司 Service quality control method, device and system
CN105682134A (en) * 2016-03-28 2016-06-15 上海物联网有限公司 WIFI-based intelligent terminal real-time sniffing method and real-time sniffing system
CN107493454A (en) * 2016-06-13 2017-12-19 杭州海康威视数字技术股份有限公司 Video camera cascade system
CN106254246B (en) * 2016-09-20 2019-11-29 上海斐讯数据通信技术有限公司 A kind of method and router of sniff wireless terminal MAC information
CN109462451A (en) * 2018-11-24 2019-03-12 合肥龙泊信息科技有限公司 There is the emergency broadcase system of terminal monitoring function when a kind of audio broadcasting
CN109525341B (en) * 2018-11-24 2020-12-01 六安正健信息技术有限公司 Emergency broadcasting system with terminal monitoring function during text broadcasting
CN110336712B (en) * 2019-07-01 2022-10-28 Oppo广东移动通信有限公司 Method and device for capturing empty packet by mobile terminal, storage medium and mobile terminal

Also Published As

Publication number Publication date
CN101123641A (en) 2008-02-13

Similar Documents

Publication Publication Date Title
CN100550933C (en) Monitor method based on the wireless network call monitoring device of distributed structure/architecture
US20020015387A1 (en) Voice traffic packet capture and analysis tool for a data network
CN101188525B (en) A processing method and device for voice stream
US20020016937A1 (en) Method and apparatus for utilizing a network processor as part of a test system
CN102348240A (en) System, apparatus and method for communcating internet data packets containing different types of data
US7142525B2 (en) Data transmission system
CN1889469A (en) Method and apparatus for monitoring video-calling
CN101517948A (en) Communication device, communication method, and recording medium
EP1724759A1 (en) Method and system for efficient transmission of communication traffic
EP1339193B1 (en) Data rate controller
US8438016B2 (en) Silence-based adaptive real-time voice and video transmission methods and system
CN109147812B (en) Echo cancellation method and device
CN101335687A (en) Subscriber service quality guarantee method for radio communication system
CN103684970A (en) Transmission method and thin terminals for media data streams
Ortega et al. Evaluation of the voice quality and QoS in real calls using different voice over IP codecs
CN101631174B (en) Network telephone real-time identification and filtering method based on session initiation protocol
CN100547997C (en) The method that the IP data compression sends and receives in the mobile communication
JP2003517778A (en) Data call routing in IP connection
Toral-Cruz et al. Traffic analysis for IP telephony
US7035282B1 (en) Wideband telephones, adapters, gateways, software and methods for wideband telephony over IP network
CN104702807B (en) VoIP communication system
JP2007228081A (en) Wireless communication apparatus, wireless communication method, and wireless access apparatus
Hephibah et al. Voice over Internet Protocol over Wireless Local Area Network: A Review
CN100442702C (en) Method and apparatus for realizing modem signal fault analysis
CN108184033A (en) A kind of method, terminal and the system of teleengineering support VoIP

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
C17 Cessation of patent right
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20091014

Termination date: 20120914