CN101465809B - Method, equipment and system for managing network flux - Google Patents
Method, equipment and system for managing network flux Download PDFInfo
- Publication number
- CN101465809B CN101465809B CN2009100002932A CN200910000293A CN101465809B CN 101465809 B CN101465809 B CN 101465809B CN 2009100002932 A CN2009100002932 A CN 2009100002932A CN 200910000293 A CN200910000293 A CN 200910000293A CN 101465809 B CN101465809 B CN 101465809B
- Authority
- CN
- China
- Prior art keywords
- network
- keyword
- behavioural information
- module
- network traffics
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Images
Abstract
The invention discloses a network traffic management method, a device and a system thereof, belonging to network application filed. The method includes the following steps: analyzing the received management signal to obtain at least one keyword and at least one piece of behavior information corresponding to the keyword; matching the network traffic passing through a network traffic management device with the keyword(at least one) to get a matching keyword, acquiring the behavior information corresponding to the keyword, and managing the received network traffic according to the behavior information. The device comprises an analyzing module, a matching module, an acquisition module and a management module. The system comprises a network traffic control center and a network traffic management device connected in a network link in series; and the network traffic control center generates a management signal which is sent to the network traffic management device. The network traffic management method, the device and the system thereof realize effective management to the network traffic.
Description
Technical field
The present invention relates to the network application field, particularly a kind of network flux management method, equipment and system.
Background technology
Along with the expansion of internet, applications scope and the surge of number of users, network application is fast development on the basis of traditional E-mail, Web web page access, ftp file transmission also, and the flow of transfer of data is also increasing, has caused blocking up of network.Existing flow control generally is to adopt software approach such as flow control algorithm to realize that router or access device are provided with a threshold value on every network link, when flow surpasses threshold value, carries out flow control.But this method exists speed low, the problem of autgmentability difference.
In addition,, make operator can not carry out the business expansion targetedly, limited the sustainable development of network application to a certain extent owing to lack the solution that behavior is effectively managed to user network at present.Also have credible, the safe and highly efficient operation of invalid information serious threat networks such as internet worm, network attack, spam.
It is thus clear that; Exist network application increase in demand and the contradiction of effectively managing in the network application at present; Limited the development of network application greatly; The network signal that the miscellaneous service that our general title transmits on network link pools is network traffics, so network traffics have effectively been managed into urgent problem.
Summary of the invention
Network flux management method provided by the invention, equipment and system are to solve the problem that network traffics are effectively managed.
On the one hand, a kind of network flux management method is provided, has comprised
The supervisory signal that parsing receives obtains at least one keyword and at least one corresponding with said keyword respectively behavioural information;
Network traffics and said at least one keyword that will pass through network flow management equipment mate, and the keyword that obtains mating obtains the behavioural information corresponding with the keyword of said coupling, according to said behavioural information said network traffics are managed.
On the other hand, a kind of network flow management equipment is provided also, has comprised
Parsing module is used to resolve the supervisory signal that receives, and obtains at least one keyword and at least one corresponding with said keyword respectively behavioural information;
Matching module is used for mating the keyword that obtains mating through the network traffics of said equipment and at least one keyword that said parsing module obtains;
Acquisition module is used to obtain the corresponding behavioural information of keyword that finds with said matching module;
Administration module is used for according to the behavioural information that said acquisition module obtains said network traffics being managed.
Again on the one hand; A kind of network flow managing system also is provided; Said system comprises the network flow management equipment in network traffics control centre and the serial access network link; The said network control center generates the supervisory signal that comprises keyword and behavioural information, is handed down to said network flow management equipment;
Said network flow management equipment comprises,
Parsing module is used to resolve the supervisory signal that receives, and obtains at least one keyword and at least one corresponding with said keyword respectively behavioural information;
Matching module is used for mating the keyword that obtains mating through the network traffics of said equipment and at least one keyword that said parsing module obtains;
Acquisition module is used to obtain the corresponding behavioural information of keyword that finds with said matching module;
Administration module is used for according to the behavioural information that said acquisition module obtains said network traffics being managed.
The beneficial effect of network flux management method provided by the invention, equipment and system is: network traffics have been realized effective management, further, the network flow management equipment that adopts FPGA or ASIC to design and develop; Improve disposal ability greatly, in addition, adopted TCAM to realize unsteady keyword table lookup function; Feasible management to network traffics can be more flexible and diversified, and, through management to user behavior; For operator carries out promoting service targetedly prerequisite is provided; Also have, filter the fail safe that management has improved network, once more; Network flow management equipment serial access network link makes it possible to network traffics are managed more flexibly and effectively.
Description of drawings
Fig. 1 is a kind of network flux management method flow chart that the embodiment of the invention provides;
Fig. 2 is a kind of network flow management equipment structure chart that the embodiment of the invention provides;
Fig. 3 is a kind of preferred network flow management apparatus circuit block diagram that the embodiment of the invention provides;
Fig. 4 is a kind of network flow managing system structure chart that the embodiment of the invention provides.
Embodiment
For making the object of the invention, technical scheme and advantage clearer, will combine accompanying drawing that embodiment of the present invention is done to describe in detail further below.
Embodiment one
Referring to Fig. 1, a kind of network flux management method for the embodiment of the invention provides comprises
Step 101: network flow management equipment receives the supervisory signal that network traffics control centre produces;
Network traffics control centre generates supervisory signal according to the operation demand; Be issued to network flow management equipment, every supervisory signal comprises keyword and behavioural information, and wherein keyword can be ID number; Be used for a certain user of unique identification; Perhaps certain type of business, perhaps user behavior etc. is determined by the operation demand.
Preferably; Basic data information is collected by network traffics control centre; Comprise management result that network flow management equipment reports, and through the basic data information in the network traffics of network traffics control centre etc.; Basic data information to collecting is analyzed, as: webserver traffic statistics and analysis, network link traffic statistics and analysis etc., to Business Stream carry out that analyses and prediction, professional profit contribution rate are analyzed, professional resource utilization analysis, professional flow distribution signature analysis, professional in the customer group analyze, professional in TOPN site analysis etc.; Formulate the macroscopic view strategy according to above-mentioned analysis result; Like the analysis of customer group's resource utilization, customer loyalty analysis etc.; Generate the supervisory signal that comprises keyword and behavioural information according to the macroscopic view strategy; Network traffics control centre just can constantly adjust the supervisory signal that each network flow management equipment is issued according to current situation like this, and whole network is controlled in real time and managed.
Step 102: the supervisory signal that the network flow management device parses receives obtains at least one keyword and at least one corresponding with above-mentioned keyword respectively behavioural information;
Step 103: network traffics and above-mentioned at least one keyword that will pass through network flow management equipment mate the keyword that obtains mating;
Keyword in the embodiment of the invention comprises fixed keyword and/or unsteady keyword; Accordingly; Network traffics and said at least one keyword that will pass through network flow management equipment mate; The step of the keyword that obtains mating is specially: content and said at least one fixed keyword that will pass through the network traffics fixed position of network flow management equipment mate the fixed keyword that obtains mating; And/or content and said at least one unsteady keyword that will pass through the network traffics optional position of network flow management equipment mate the unsteady keyword that obtains mating.
Generally speaking; The position relative fixed of user profile in network traffics; Realize searching so can utilize fixed keyword to user profile; And be unfixed for the position of information such as type of service, accessed content in network traffics, this moment with unsteady keyword search understand convenient.Preferably; The analytic expression of header is realized by the fixed keyword strategy; Message load zones analytic expression is realized by the keyword strategy that floats; The user is by the five-tuple sign, and professional by fixed keyword strategy sign, customer service is identified by fixed keyword strategy and unsteady keyword strategy jointly.Certainly in practical application, be not limited to search user profile with fixed keyword, search information such as business, accessed content with unsteady keyword, also can search user profile etc. with unsteady keyword.The method that the network traffics header is resolved that provides in the embodiment of the invention can realize fixed keyword and/or unsteady keyword resolution; The unsteady keyword quantity of embodiment of the invention support is not limited to one; Can be a plurality of, for realizing that network flow management provides great facility.
Further; The professional perception of " multidimensional " key words content level that coupling in the embodiment of the invention can also expand to and support fixed keyword, float keyword and scope keyword etc., wherein the scope keyword is for to mate with the content of certain scope of network traffics.
Can realize multistage keyword query,, in network traffics, adopt the keyword coupling business information of floating again such as in network traffics, adopting fixed keyword match user information earlier.
In order to obtain better effect,, network traffics also comprise the step of signal being carried out format conversion in the embodiment of the invention before being mated, the network traffics of the original physical frame formats that is about to receive convert the signal of IP packet format into.
Step 104: obtain the behavioural information corresponding with above-mentioned keyword;
Step 105: the network traffics of process network flow management equipment are managed according to above-mentioned behavioural information.
Behavioural information is specially the flow control behavioural information; According to behavioural information network traffics are managed and to be; Trigger the flow control behavior according to above-mentioned flow control behavioural information; Relatively be included in threshold value and the flow value of network traffics in the behavioural information, when flow value surpasses threshold value, the network traffics that receive carried out the flow process control and management.Wherein, the up total flow control of flow control behavior behavior, descending total flow control behavior, protocol traffic control behavior in up minute, descending branch laundry flow control behavior, single user uplink total flow control behavior, the descending total flow control of single user behavior etc.The method of flow control management can be carried out through directly abandoning traffic packet; Traffic packet can be that message (like TCP, UDP link building messages etc.) is set up in professional connection; It also can be service message etc.; Thereby can selectively carry out flow control, solve the problem that influences user's regular traffic flow user or business.In addition, flow control can be based on user or professional, such as we can send supervisory signal to network flow management equipment through network traffics control centre; Control a certain type of professional flow upper limit or lower limit; Or the flow upper limit or the lower limit of a certain user's a certain business, even can control etc. for a certain crowd user's business, that is to say; The granularity of control is adjustable, and the flow control management method that the visible embodiment of the invention provides is more flexible.
Behavioural information is specially customer service statistics behavioural information and/or user grouping replication information, and according to behavioural information network traffics being managed can also be that user behavior is managed, and comprises the management of customer service behavior management and/or user access activity,
Wherein the customer service behavior management does, triggers the business statistics behavior according to the business statistics behavioural information, upgrades the business statistics counter, realizes network traffics are carried out the customer service behavior management; Illustrate, the keyword that from supervisory signal, parses comprises the fixed keyword A and the professional unsteady keyword B of sign P2P of identifying user A, then when user A visit P2P is professional; Corresponding network traffics are through network flow management equipment the time, and network flow management equipment is earlier with these network traffics and at least one fixed keyword coupling, the fixed keyword A that obtains mating; Identifying user A is again with these network traffics and at least one unsteady keyword coupling, the unsteady keyword B that obtains mating; Sign P2P is professional, and like this, network flow management equipment just adds 1 operation with the P2P business statistics counter of user A; Like this, network flow management equipment just can be learnt the customer service behavior situation of user A, through analyzing; Can know information such as the more interested business of user A, realize management the customer service behavior.
User access activity is managed, and triggers the user grouping replication according to user grouping replication information, and user profile is copied in the corresponding user grouping of accessed content information, realizes network traffics are carried out the user access activity management.Illustrate, the keyword that from supervisory signal, parses comprises the fixed keyword A of identifying user A and the unsteady keyword B of sign financial web site, then when user A visit finance and economic website; Corresponding network traffics are through network flow management equipment the time, and network flow management equipment is earlier with these network traffics and at least one fixed keyword coupling, the fixed keyword A that obtains mating; Identifying user A is again with these network traffics and at least one unsteady keyword coupling, the unsteady keyword B that obtains mating; Identification access be financial web site; Like this, network flow management equipment just with the information reproduction of user A in the corresponding user grouping of visit finance and economics content information, like this; Network flow management equipment just can obtain different user grouping information; Such as the user grouping of visit finance and economics content, the user grouping of visit sports content etc., realize management, so that operator pushes corresponding service item to different user grouping to user access activity.
Further; The network flux management method that the embodiment of the invention provides also comprises network traffics control centre according to the statistics of above-mentioned business statistics counter and/or the dissimilar user grouping step to user's Push Service information, and information on services comprises service item, advertisement etc. here.Such as, the result of business statistics counters count is the maximum of usefulness for present P2P business, and then operator can be directed against P2P business customizing service item, and network traffics control centre is pushed to the user with the service item that operator is directed against the P2P business customizing; For another example; User grouping is divided into user in the Finance Mgmt Team grouping, physical culture user grouping etc.; Then operator just can be according to the service item of different user grouping customization finance and economics, the service item or the advertisement of sport category; Network traffics control centre pushes corresponding information on services by user grouping to the user of correspondence, and the sustainable development of using for Network provides bigger space.
Behavioural information can also be specially the network filtering behavioural information; According to behavioural information the said network traffics that receive are managed and to be; Filter behavior according to network filtering behavioural information trigger network; Filter the network traffics corresponding with keyword, the network traffics of receiving that achieve a butt joint are carried out the network filtering management.Can be set to relevant keyword such as some viruses, pornographic website such as keyword; When network traffics are flowed through network flow management equipment; Just can the site information of the keyword coupling relevant with above-mentioned virus, pornographic website etc. be screened and filter, thereby promoted the fail safe of network greatly.
The embodiment of the invention provide to network flux management method be not limited to network traffics control and management, filter at least a in three kinds of the management to the management of user behavior with to network traffics; Every combination that keyword and behavioural information are set that can utilize embodiment of the invention thought; Through in network traffics, carrying out the keyword of match query, all being included within the thought of the present invention of corresponding management carried out in the behavior that triggers in the behavioural information.
Network flow management equipment in the embodiment of the invention has at least one; Each network flow management equipment is managed the network traffics through said equipment to the supervisory signal that each network flow management equipment sends according to network traffics control centre; Each network flow management equipment can by regular time at interval or other preset rules to network traffics control centre report network Flow Control Center; Network traffics control centre analyzes the management result; Such as the analysis of network situation, abnormal flow analysis and value-added service etc.; Generate new supervisory signal according to above-mentioned analysis result, network traffics control centre just can constantly adjust the supervisory signal that each network flow management equipment is issued according to current situation like this, and whole network is controlled in real time and managed.
In order to obtain better effect, network traffics also comprised the step of network traffics being carried out signal shaping in the embodiment of the invention before the output of network flow management equipment.
Embodiment two
Referring to Fig. 2, a kind of network flow management equipment for the embodiment of the invention provides comprises:
Parsing module is used to resolve the supervisory signal that receives, and obtains at least one keyword and at least one corresponding with keyword respectively behavioural information;
Matching module is used for mating the keyword that obtains mating through the network traffics of said equipment and at least one keyword that said parsing module obtains;
Acquisition module is used to obtain the corresponding behavioural information of keyword that finds with matching module;
Administration module, the behavioural information that is used for obtaining according to acquisition module is managed the above-mentioned network traffics that receive.
Wherein, matching module comprises,
The fixed keyword matching unit is used for the content of the network traffics fixed position of passing through said equipment and at least one fixed keyword that said parsing module obtains are mated the fixed keyword that obtains mating; And/or unsteady keyword matching unit, be used for the content of the network traffics optional position of passing through said equipment and at least one unsteady keyword that said parsing module obtains are mated the unsteady keyword that obtains mating.
The behavioural information that said acquisition module obtains is specially the flow control behavioural information; Said administration module is specially flow control management module; Specifically be used for triggering the flow control behavior according to said flow control behavioural information; Relatively be included in threshold value and the flow value of said network traffics in the said behavioural information, when said flow value surpasses threshold value, said network traffics carried out the flow process control and management.
Administration module is specially the user behavior administration module, comprises
The behavioural information that said acquisition module obtains is specially the business statistics behavioural information; Customer service behavior management unit; Be used for triggering the business statistics behavior, upgrade the business statistics counter, realize said network traffics are carried out the customer service behavior management according to said business statistics behavioural information; And/or
The behavioural information that said acquisition module obtains is specially user grouping replication information; The user access activity administrative unit; Be used for triggering the user grouping replication according to said user grouping replication information; User profile is copied in the corresponding user grouping of accessed content information, realize said network traffics are carried out the user access activity management.
The behavioural information that said acquisition module obtains is specially the network filtering behavioural information; Said administration module is specially the network filtering administration module; Specifically be used for filtering behavior according to said network filtering behavioural information trigger network; Filter said network traffics, realize said network traffics are carried out the network filtering management.
Preferably; Matching module in the embodiment of the invention can be realized by ternary content addressable memory TCAM; At least one behavioural information can be stored among the static random access memory SRAM, and parsing module, acquisition module and administration module can be integrated in on-site programmable gate array FPGA or the medium realization of specialized large scale integrated circuit ASIC.Because what the network flow management equipment that the embodiment of the invention provides adopted is that FPGA (or ASIC)+TCAM+SRAM hardware mode is realized; Referring to Fig. 3, be the preferred embodiment of a network flow management equipment, wherein be provided with keyword among the TCAM; Store behavioural information among the SRAM; Parsing module, acquisition module and administration module are integrated among the FPGA and realize, thus can support very high disposal ability, such as reaching 10Gbps or higher disposal ability.
Embodiment three,
Referring to Fig. 4; A kind of network flow managing system that provides for the embodiment of the invention; It is characterized in that; Said system comprises the network flow management equipment in network traffics control centre and the serial access network link, and the said network control center generates supervisory signal and is handed down to said network flow management equipment;
Said network flow management equipment comprises,
Parsing module is used to resolve the supervisory signal that receives, and obtains at least one keyword and at least one corresponding with said keyword respectively behavioural information;
Matching module is used for mating the keyword that obtains mating through the network traffics of said equipment and at least one keyword that said parsing module obtains;
Acquisition module is used to obtain the corresponding behavioural information of keyword that finds with said matching module;
Administration module is used for according to the behavioural information that said acquisition module obtains the said network traffics that receive being managed.
Further, said system comprises also and the parallelly connected handover module of said network flow management equipment that said network flow management equipment also comprises the switching controls module, is used to control said handover module and is in UNICOM or off-state.Preferably, handover module can adopt switchgear to realize.When the network flow management monitoring of tools when the running status of the key chip of system, device etc. goes wrong; Comprise link layer chip, TCAM table look-up device, Flow Control queue scheduling FPGA, plate level processor etc.; The switching controls module sends instructions under handover module; Handover module (such as light lotus root switch) is made as UNICOM's state; Make directly process from the handover module of network traffics, be about to network traffics and switch to the direct-passing mode of network traffics, thereby avoid influencing the operation of network traffics through handover module through the serial connection mode of network flow management equipment.
Further again, said network traffics control centre comprises that also information on services pushes module, and the statistics of the business statistics counter that is used for obtaining according to said network flow management equipment and/or said user grouping are to user's Push Service information.
Network flow management equipment in the embodiment of the invention has at least one; Each network flow management equipment is managed the network traffics through said equipment to the supervisory signal that each network flow management equipment sends according to network traffics control centre; Each network flow management equipment can by regular time at interval or other preset rules to network traffics control centre report network Flow Control Center; Network traffics control centre analyzes the management result; Such as the analysis of network situation, abnormal flow analysis and value-added service etc.; Generate new supervisory signal according to above-mentioned analysis result, network traffics control centre just can constantly adjust the supervisory signal that each network flow management equipment is issued according to current situation like this, and whole network is controlled in real time and managed.
In the embodiment of the invention with in the network flow management equipment serial access network link; Make the network traffics of output be through the signal after the network flow management equipment control; With the mode of the parallel access network link of network flow management equipment, can realize bigger management intensity relatively.
The network flow managing system that the embodiment of the invention provides adopts the thought of network traffics control centre and network flow management device separates, helps independent upgrade maintenance.
The above is merely preferred embodiment of the present invention, is not to be used to limit protection scope of the present invention.All any modifications of within spirit of the present invention and principle, being done, be equal to replacement, improvement etc., all be included in protection scope of the present invention.
Claims (17)
1. a network flux management method is characterized in that, said method comprises:
The supervisory signal that parsing receives obtains at least one keyword and at least one corresponding with said keyword respectively behavioural information; Wherein, said supervisory signal generates according to the operation demand;
Network traffics and said at least one keyword that will pass through network flow management equipment mate, and the keyword that obtains mating obtains the behavioural information corresponding with the keyword of said coupling, according to said behavioural information said network traffics are managed.
2. network flux management method as claimed in claim 1 is characterized in that, said keyword comprises fixed keyword and/or unsteady keyword,
Accordingly; Network traffics and said at least one keyword that will pass through network flow management equipment mate; The step of the keyword that obtains mating is specially: content and said at least one fixed keyword that will pass through the network traffics fixed position of network flow management equipment mate the fixed keyword that obtains mating; And/or content and said at least one unsteady keyword that will pass through the network traffics optional position of network flow management equipment mate the unsteady keyword that obtains mating.
3. according to claim 1 or claim 2 network flux management method; It is characterized in that said behavioural information is specially the flow control behavioural information, the step of said network traffics being managed according to said behavioural information is specially; Trigger the flow control behavior according to said flow control behavioural information; Relatively be included in threshold value and the flow value of said network traffics in the said flow control behavioural information, when said flow value surpasses threshold value, said network traffics carried out the flow process control and management.
4. according to claim 1 or claim 2 network flux management method; It is characterized in that; Said behavioural information is specially customer service statistics behavioural information and/or user grouping replication information, and the step of said network traffics being managed according to said behavioural information is specially, and triggers the behavior of customer service statistics according to said customer service statistics behavioural information; Upgrade the customer service statistical counter, realize said network traffics are carried out the customer service behavior management; And/or according to the replication of said user grouping replication information triggering user grouping, user profile is copied in the corresponding user grouping of accessed content, realize said network traffics are carried out the user access activity management.
5. network flux management method as claimed in claim 4 is characterized in that, said method also comprises according to the statistics of said business statistics counter and/or the said user grouping step to user's Push Service information.
6. according to claim 1 or claim 2 network flux management method; It is characterized in that; Said behavioural information is specially the network filtering behavioural information, and the step of said network traffics being managed according to said behavioural information is specially, and filters behavior according to said network filtering behavioural information trigger network; Filter said network traffics, realize said network traffics are carried out the network filtering management.
7. a network flow management equipment is characterized in that, said equipment comprises:
Parsing module is used to resolve the supervisory signal that receives, and obtains at least one keyword and at least one corresponding with said keyword respectively behavioural information; Said supervisory signal generates according to the operation demand;
Matching module is used for mating the keyword that obtains mating through the network traffics of said equipment and at least one keyword that said parsing module obtains;
Acquisition module is used to obtain the corresponding behavioural information of keyword that finds with said matching module;
Administration module is used for according to the behavioural information that said acquisition module obtains said network traffics being managed.
8. network flow management equipment as claimed in claim 7 is characterized in that said matching module comprises
The fixed keyword matching unit is used for the content of the network traffics fixed position of passing through said equipment and at least one fixed keyword that said parsing module obtains are mated the fixed keyword that obtains mating; And/or
Unsteady keyword matching unit is used for the content of the network traffics optional position of passing through said equipment and at least one unsteady keyword that said parsing module obtains are mated the unsteady keyword that obtains mating.
9. like claim 7 or 8 described network flow management equipment; It is characterized in that the behavioural information that said acquisition module obtains is specially the flow control behavioural information, said administration module is specially flow control management module; Specifically be used for triggering the flow control behavior according to said flow control behavioural information; Relatively be included in threshold value and the flow value of said network traffics in the said flow control behavioural information, when said flow value surpasses threshold value, said network traffics carried out the flow process control and management.
10. like claim 7 or 8 described network flow management equipment, it is characterized in that said administration module is specially the user behavior administration module;
The behavioural information that said acquisition module obtains is specially the business statistics behavioural information; Said user behavior administration module comprises: customer service behavior management unit; Said customer service behavior management unit is used for triggering the business statistics behavior according to said business statistics behavioural information; Upgrade the business statistics counter, realize said network traffics are carried out the customer service behavior management; Or
The behavioural information that said acquisition module obtains is specially user grouping replication information; Said user behavior administration module comprises: the user access activity administrative unit; Said user access activity administrative unit is used for triggering the user grouping replication according to said user grouping replication information; User profile is copied in the corresponding user grouping of accessed content information, realize said network traffics are carried out the user access activity management.
11., it is characterized in that said administration module is specially the user behavior administration module like claim 7 or 8 described network flow management equipment;
The behavioural information that said acquisition module obtains is specially business statistics behavioural information and user grouping replication information; Said user behavior administration module comprises: customer service behavior management unit and user access activity administrative unit; Said customer service behavior management unit is used for triggering the business statistics behavior according to said business statistics behavioural information; Upgrade the business statistics counter; Realization is carried out the customer service behavior management to said network traffics; Said user access activity administrative unit is used for triggering the user grouping replication according to said user grouping replication information, and user profile is copied in the corresponding user grouping of accessed content information, realizes said network traffics are carried out the user access activity management.
12. like claim 7 or 8 described network flow management equipment; It is characterized in that; The behavioural information that said acquisition module obtains is specially the network filtering behavioural information, and said administration module is specially the network filtering administration module, specifically is used for filtering behavior according to said network filtering behavioural information trigger network; Filter said network traffics, realize said network traffics are carried out the network filtering management.
13. like claim 7 or 8 described network flow management equipment; It is characterized in that; Said matching module is specially ternary content addressable memory TCAM; Said at least one behavioural information is stored among the static random access memory SRAM, and said parsing module, acquisition module and administration module are integrated among on-site programmable gate array FPGA or the specialized large scale integrated circuit ASIC.
14. network flow managing system; It is characterized in that; Said system comprises the network flow management equipment in network traffics control centre and the serial access network link; Said network traffics control centre generates the supervisory signal that comprises keyword and behavioural information, is handed down to said network flow management equipment;
Said network flow management equipment comprises,
Parsing module is used to resolve the supervisory signal that receives, and obtains at least one keyword and at least one corresponding with said keyword respectively behavioural information; Said supervisory signal generates according to the operation demand;
Matching module is used for mating the keyword that obtains mating through the network traffics of said equipment and at least one keyword that said parsing module obtains;
Acquisition module is used to obtain the corresponding behavioural information of keyword that finds with said matching module;
Administration module is used for according to the behavioural information that said acquisition module obtains said network traffics being managed.
15. network flow managing system as claimed in claim 14; It is characterized in that; Said system comprises also and the parallelly connected handover module of said network flow management equipment that said network flow management equipment also comprises the switching controls module, is used to control said handover module and is in UNICOM or off-state.
16. network flow managing system as claimed in claim 15 is characterized in that, said handover module is specially switch.
17. network flow managing system as claimed in claim 14; It is characterized in that; Said network traffics control centre comprises that also information on services pushes module, and the corresponding user grouping of the statistics of the business statistics counter that is used for obtaining according to said network flow management equipment and/or user capture content is to user's Push Service information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2009100002932A CN101465809B (en) | 2009-01-16 | 2009-01-16 | Method, equipment and system for managing network flux |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2009100002932A CN101465809B (en) | 2009-01-16 | 2009-01-16 | Method, equipment and system for managing network flux |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101465809A CN101465809A (en) | 2009-06-24 |
| CN101465809B true CN101465809B (en) | 2012-11-14 |
Family
ID=40806179
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2009100002932A Expired - Fee Related CN101465809B (en) | 2009-01-16 | 2009-01-16 | Method, equipment and system for managing network flux |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101465809B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101951623B (en) * | 2010-09-13 | 2014-11-05 | 中兴通讯股份有限公司 | User behavior statistical method and device based on user events |
| CN102662888A (en) * | 2012-03-20 | 2012-09-12 | 大连梯耐德网络技术有限公司 | System for controlling multi-user parallel operation of TCAM, and control method thereof |
| TWI540860B (en) * | 2013-09-26 | 2016-07-01 | 緯創資通股份有限公司 | Network management system, network path control module, and network management method thereof |
| CN104601486A (en) * | 2013-10-30 | 2015-05-06 | 阿里巴巴集团控股有限公司 | Method and device for shunt of network flow |
| CN105101302B (en) * | 2014-04-30 | 2019-03-08 | 宇龙计算机通信科技(深圳)有限公司 | Flow managing method and system based on user's use habit |
| CN109962956B (en) * | 2017-12-26 | 2022-06-07 | 中国电信股份有限公司 | Method and system for recommending communication services to a user |
| CN109164786B (en) * | 2018-08-24 | 2020-05-29 | 杭州安恒信息技术股份有限公司 | Abnormal behavior detection method, device and equipment based on time-dependent baseline |
| CN111581371A (en) * | 2020-05-07 | 2020-08-25 | 中国信息安全测评中心 | Network security analysis method and device based on outbound data network flow |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1852297A (en) * | 2005-11-11 | 2006-10-25 | 华为技术有限公司 | Network data flow recognizing system and method |
| CN101141390A (en) * | 2007-07-17 | 2008-03-12 | 武汉烽火网络有限责任公司 | Novel self-defining ethernet out-of-band data packet filtering method and device |
-
2009
- 2009-01-16 CN CN2009100002932A patent/CN101465809B/en not_active Expired - Fee Related
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1852297A (en) * | 2005-11-11 | 2006-10-25 | 华为技术有限公司 | Network data flow recognizing system and method |
| CN101141390A (en) * | 2007-07-17 | 2008-03-12 | 武汉烽火网络有限责任公司 | Novel self-defining ethernet out-of-band data packet filtering method and device |
Non-Patent Citations (2)
| Title |
|---|
| 张棣兴.下一代网络业务流量识别与控制的研究.《电信网技术》.2006,(第11期),12-15. * |
| 韦安明等.高速网络中P2P流量检测及控制方法.《北京邮电大学学报》.2007,第30卷(第5期),117-120. * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101465809A (en) | 2009-06-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101465809B (en) | Method, equipment and system for managing network flux | |
| Zheng et al. | Realtime DDoS defense using COTS SDN switches via adaptive correlation analysis | |
| D’Alconzo et al. | A survey on big data for network traffic monitoring and analysis | |
| US10154053B2 (en) | Method and apparatus for grouping features into bins with selected bin boundaries for use in anomaly detection | |
| CN101779434B (en) | Processing packet flows | |
| Dao et al. | A feasible method to combat against DDoS attack in SDN network | |
| US8549139B2 (en) | Method and system for monitoring control signal traffic over a computer network | |
| Das et al. | Distributed set-expression cardinality estimation | |
| US20070147246A1 (en) | Method and device for configuring a network device | |
| EP3304813A1 (en) | Network behavior data collection and analytics for anomaly detection | |
| CN106101015A (en) | A kind of mobile Internet traffic classes labeling method and system | |
| CN103546343B (en) | The network traffics methods of exhibiting of network traffic analysis system and system | |
| KR20180120558A (en) | System and method for predicting communication apparatuses failure based on deep learning | |
| CN102104611A (en) | Promiscuous mode-based DDoS (Distributed Denial of Service) attack detection method and device | |
| CN104378264A (en) | sFlow based virtual machine process traffic monitoring method | |
| CN104618377A (en) | NetFlow based botnet network detection system and detection method | |
| WO2013026362A1 (en) | Method and system for monitoring network traffic | |
| CN111930886A (en) | Log processing method, system, storage medium and computer equipment | |
| CN105471670A (en) | Flow data classification method and device | |
| CN105763387A (en) | Network traffic monitoring method and device | |
| CN107517143A (en) | A kind of network traffics collection and monitoring method based on bgp protocol | |
| CN108809752B (en) | Adaptive monitoring method and device for network traffic, NPB (network provider node B) equipment and medium | |
| Zhang et al. | Identifying elephant flows in internet backbone traffic with bloom filters and LRU | |
| Muthuprasanna et al. | Distributed divide-and-conquer techniques for effective DDoS attack defenses | |
| CN102124698A (en) | System and method for exporting structured data in a network management environment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20121114 Termination date: 20180116 |