Background technology
It is a kind of conventional means that solves network failure and process user complaint that communication network is carried out signaling tracing.By signaling tracing, can be fast, the problem that occurs of fixer network equipment intuitively, therefore for the network equipment, the function of signaling tracing is an indispensable function.Existing signaling tracing technology can be divided into two classes: the first kind is the tracking to signaling, and second class is the tracking to the physical signalling of carrier signaling.
The main user oriented of first kind signaling tracing technology is followed the tracks of.This technology may further comprise the steps:
At first, signaling tracing module and signaling sending module are set in the network equipment, and tracking condition are sent to the signaling tracing module by control desk;
Then, all signalings of network device internal transmission are sent to the signaling tracing module judge, if signaling satisfy tracking condition (for example: this signaling for and certain user-dependent signaling), then with this signaling copy portion, send to signaling sending module; Because the signaling between the network equipment need be delivered to the signaling of another network equipment in fact exactly from a network equipment, these signalings need be at a described network device internal after the processing of corresponding module, just can be delivered to described another network equipment, therefore, the signaling of network device internal transmission had both comprised the signaling of present networks device interior, also comprised the signaling between present networks equipment and other network equipments;
At last, by signaling sending module the signaling (also can be described as tracking signaling) of duplicating is sent to the signaling receiving system.Described signaling receiving system is to be exclusively used in the device that receives tracking signaling and be shown to the user.
Adopts above-mentioned first kind signaling tracing technology, can follow the tracks of the signaling that all meet tracking condition, but there is following shortcoming in this signaling tracing technology:
1, in order to realize signaling tracing, all signalings of network device internal transmission need be sent to the signaling tracing module and judge; And, when signaling satisfies tracking condition, need duplicate portion and send to signaling sending module, this will greatly increase the transmission burden of network device internal, make that the cost that carries out signaling tracing is higher.
2, because this signaling tracing technology only just comes into effect tracking when tracking condition satisfies, therefore, the signaling that some do not satisfy condition will be abandoned; But, might be provided with wrong tracking condition, make that the signaling that abandons might be the reason that causes network equipment failure, and some causes the scene of network equipment failure to be difficult to reproduction usually, therefore under some application scenario, described signaling tracing technology has been owing to abandoned some signalings that do not satisfy condition, so, be difficult to obtain signaling tracing effect preferably.
3, this signaling tracing technology need add signaling tracing code and signaling transmission code usually to realize the function of described signaling tracing module and signaling sending module in the functional code of the network equipment, this one side will reduce the readability of network equipment code, will increase the maintenance difficulties of code on the other hand.Because, when in the network equipment, introducing new function or increasing new signaling, correspondingly need to increase the signaling tracing code, and the new function development of the realization of signaling tracing function and the network equipment normally is responsible for finishing by two team, so, this signaling tracing technology not only will increase the maintenance difficulties of code, and will prolong the construction cycle of the network equipment, and this makes that also the cost of signaling tracing is higher.
The second class signaling tracing technology is mainly followed the tracks of towards interface.This technology is at first determined the interface that needs are followed the tracks of according to tracking condition, then from the corresponding physical link of this interface tell a branch road, that is: from the physical link that connects two network equipments, tell a branch road, by this branch road the physical signalling between described two network equipments is passed to a special equipment, resolve physical signalling by this special equipment, therefrom extract interface signaling.For example, the K15 equipment of extensive use.Adopt this technology, can follow the tracks of all signalings of certain interface.
The above-mentioned second class signaling tracing technology, need from the physical link of two network equipments, tell a branch road, this will weaken the intensity of described two LA Management Room physical signallings, bring adverse effect for the physical signalling transmission between described two physical equipments, that is: the cost of signaling tracing is higher; And, adopt this technology to follow the tracks of to the signaling between the network equipment, can't follow the tracks of the signaling of network device internal exchange.
As seen by above-mentioned, the cost of existing signaling tracing technology is higher, and has omission in the signaling tracing process.
Summary of the invention
In view of this, main purpose of the present invention is to provide a kind of signaling tracking method and a kind of signal following system, with the cost of reduction signaling tracing, and realizes signaling tracing exhaustively.
For achieving the above object, technical scheme of the present invention specifically is achieved in that
A kind of signaling tracking method comprises: port is transmitted in expansion in the Switching Module in the network equipment in advance, and described forwarding port links to each other with signaling tracing device by ethernet link; Described Switching Module duplicates the packet of its route, and by described forwarding port institute's duplicated data packet is sent to signaling tracing device; Signaling tracing device filters out the signaling that satisfies default signaling tracing condition from institute's duplicated data packet.
This method can also comprise: port is transmitted in expansion in described Switching Module in advance, and described forwarding port links to each other with described signaling tracing device by ethernet link; Described Switching Module sends to signaling tracing device with institute's duplicated data packet and comprises: Switching Module sends to signaling tracing device by described forwarding port with institute's duplicated data packet.
After Switching Module sends to signaling tracing device with institute's duplicated data packet, may further include: signaling tracing device is preserved institute's duplicated data packet.
Before signaling tracing device was preserved institute's duplicated data packet, may further include: signaling tracing device was extracted User Datagram Protoco (UDP) UDP message bag from institute's duplicated data packet; Described signaling tracing device is preserved institute's duplicated data packet and is comprised: preserve the UDP message bag that is extracted from institute's duplicated data packet.
Before preserving the UDP message bag that is extracted, may further include: the UDP message bag that is extracted is classified; The UDP message bag that described preservation is extracted comprises: according to described sorting result to the UDP message bag that the is extracted preservation of classifying.
After filtering out the signaling that satisfies tracking condition, may further include: described signaling is resolved, present the result that described parsing obtains.
A kind of signal following system comprises: the Switching Module in the network equipment is used to duplicate the packet of its route; Described Switching Module comprises the forwarding port, links to each other with signaling tracing device by ethernet link, is used for institute's duplicated data packet is sent to described signaling tracing device by described ethernet link;
Signaling tracing device is used for filtering out the signaling that satisfies default tracking condition from institute's duplicated data packet.
Described signaling tracing device can comprise: receiver module is used to receive the packet that comes from described Switching Module; Filtering module is used for filtering out the signaling that satisfies default tracking condition from described packet.
Can also comprise in the described signaling tracing device: memory module is used to preserve the packet of described reception, and the packet of described preservation is provided to described filtering module.
Can also comprise in this signaling tracing device: storage control module, be used for extracting the UDP message bag from the packet of described reception, described UDP message bag is stored in the memory module.
Described storage control module can also be used for the UDP message bag of described extraction is carried out preliminary treatment, and according to described pretreated result described UDP message bag is stored in the memory module.
Can also comprise in this signaling tracing device: present module, be used for the signaling that described filtering module filters out is resolved, and be used to present the result that described parsing obtains.
As seen from the above technical solution, the present invention is by in the Switching Module route data packets, this packet is duplicated portion, and this duplicated data packet sent to signaling tracing device, from institute's duplicated data packet, filter out the signaling that satisfies default tracking condition by signaling tracing device again, thereby realized signaling tracing.
On the one hand, because all signalings itself in the network equipment just need be aggregated into Switching Module and carry out route, and the present invention only needs Switching Module this packet to be duplicated portion in route data packets, and send to signaling tracing device and get final product, thereby, reduced the cost of signaling tracing not increasing the network device internal network burden and not destroying under the condition of network equipment physical signalling intensity and realized signaling tracing; On the other hand,, comprise the signaling between the network equipment again, therefore, adopt the present invention can realize signaling tracing exhaustively owing to both comprised the signaling of network device internal in the packet of Switching Module institute route.
Adopt technical solution of the present invention except the cost that can reduce signaling tracing and realize that exhaustively in addition signaling tracing can also obtain following beneficial effect:
Signaling tracing device is after receiving packet, can preserve, thereby make the user can utilize various filterconditions to filter the signaling that signaling tracing device receive off-line, also can trace into and cause unusual signaling even the user is provided with wrong filtercondition.
Place special signaling tracing device to realize the signaling tracing function, therefore, the code relevant with signaling tracing all transferred on the signaling tracing device, thereby can not occur the code of signaling tracing in the software of the network equipment.So both realize the separation of difference in functionality code, the exploitation of network device software can be carried out synchronously with the exploitation of signaling tracing device software, shortened the cycle of equipment development.
Make two groups can be engaged in the exploitation of the network equipment and the exploitation of signaling tracing device respectively with different professional backgrounds.For example: the team with people's composition of communications industry working experience can be engaged in the exploitation of the network equipment; Team with people's composition of software development industry experience can be engaged in the exploitation of signaling tracing device.
Embodiment
For making purpose of the present invention, technical scheme and advantage clearer, below with reference to the accompanying drawing embodiment that develops simultaneously, the present invention is described in further detail.
The present invention is based on such fact: usually, the network equipment itself is exactly a distributed processing system(DPS), by a plurality of CPU collaborative works, therefore, there is the inner exchanging network based on fast Ethernet technology usually in network device internal, and described inner exchanging network is used for transmitting various signalings and data at network device internal (for example: between described a plurality of CPU).
Particularly, described signaling and the data transmittance process in the inner exchanging network is: transmitting terminal is that packet sends in the inner exchanging network with signaling and/or data encapsulation, upward the packet that comes from each transmitting terminal is carried out route by the Switching Module in the inner exchanging network in data link layer (L2), thereby route a data packet to corresponding receiving terminal.Described transmitting terminal and receiving terminal can be to be in CPU on the inner exchanging network, critical function module etc. in the network equipment.
At network device internal, organize Ethernet in the above described manner, both can avoid forming broadcast storm, and can give full play to the advantage of Ethernet quick data transfering bag again, and make signaling on the inner exchanging network of the network equipment, to transmit reliably at network device internal.
Main thought of the present invention is: in the Switching Module route data packets, this packet is duplicated portion, and this duplicated data packet sent to signaling tracing device, from institute's duplicated data packet, filter out the signaling that satisfies tracking condition by signaling tracing device again.
Fig. 1 is the schematic flow sheet of signaling tracking method of the present invention.Referring to Fig. 1, this method comprises:
Step 101: port is transmitted in expansion in Switching Module.
This step institute Extended Capabilities Port---transmit port and be used for communicating by letter between Switching Module and the signaling tracing device, because the switching network of network device internal is based on ethernet technology, described Switching Module is the module that is used to carry out the packet route in this inner exchanging network, therefore, preferably, described forwarding port links to each other with signaling tracing device by ethernet link.
Step 102: Switching Module duplicates this packet, and duplicated data packet is sent to signaling tracing device in route data packets.
Step 103: signaling tracing device receives packet.
In this step, because the destination address that comes from the packet of Switching Module is actually the module or the CPU of network device internal, rather than signaling tracing device, in order to make signaling tracing device can receive the packet that destination address is not this machine, the ethernet network adapter of signaling receiving equipment need be configured to be operated in mixed mode, so, could receive the packet that comes from Switching Module smoothly.
Step 104: from the packet that receives, extract User Datagram Protoco (UDP) (UDP) packet.
In this step, the packet that comes from Switching Module is actually the IP packet, therefore, after receiving the IP packet, can remove the IP data packet head, extracts the UDP message bag from the data field of this IP packet.
Step 105: the UDP message bag is carried out preliminary treatment.
For foundation being provided for follow-up SIP signaling filtering, and accelerate the speed of SIP signaling filtering, can carry out preliminary treatment the UDP message bag that extracts.Described preliminary treatment can comprise: the UDP message bag that receives is classified.For example: can be data or signaling according to what comprise in the UDP message bag, the UDP message bag is classified, can also be the packet of network device internal or the packet between the network equipment according to the UDP message bag, and the UDP message bag is classified.
Step 106: store the UDP message bag according to pretreated result.
In this step, can the UDP message bag be stored in the signaling tracing device on the special-purpose memory module according to pretreated result, that is: according to sorting result to the storage of classifying of UDP message bag.When storing, can be by calling application storing interface (API) realization that memory module provides.
Step 107: from the UDP message bag of preserving, filter out the signaling that satisfies default tracking condition.
Before carrying out the described filtration of this step, can set in advance tracking condition, when carrying out the described filtration of this step, can carry out in the following manner:
A) at first generate corresponding filtration parameter according to tracking condition (for example: interface tracking or usertracking);
B) judge the type of following the tracks of then, follow the tracks of subscriber signaling if desired, then jump to c); Follow the tracks of interface signaling if desired, then jump to d); If not only need to follow the tracks of subscriber signaling but also need to follow the tracks of interface signaling, then jump to e);
C) subscriber signaling that will satisfy tracking condition is exported; Circulation is carried out, and stops until tracking.
D) interface signaling that will satisfy tracking condition is exported; Circulation is carried out, and stops until tracking.
E) subscriber signaling and the interface signaling that will satisfy tracking condition exported; Circulation is carried out, and stops until tracking.
Step 108: present the signaling that filters out.
In this step, carrying out that signaling presents is to present to the user for the signaling that will filter out in mode intuitively.Can resolve described signaling as required before signaling presents carrying out, the upper-layer protocol Context resolution that is included in the lower layer protocol data field is come out.
In fact, when step 105 pair UDP message bag carries out preliminary treatment, also can carry out the operation of described protocol analysis, still, this operation be placed present the signaling stage and carry out, can save memory space, because the data volume after resolving will be than big before resolving.
So far, finish signaling tracking method of the present invention.
As seen from the above technical solution, the present invention is by in the Switching Module route data packets, this packet is duplicated portion, and this duplicated data packet sent to signaling tracing device, from institute's duplicated data packet, filter out the signaling that satisfies default tracking condition by signaling tracing device again, thereby realized signaling tracing.
On the one hand, because all signalings itself in the network equipment just need be aggregated into Switching Module and carry out route, and the present invention only needs Switching Module this packet to be duplicated portion in route data packets, and send to signaling tracing device and get final product, thereby, reduced the cost of signaling tracing not increasing the network device internal network burden and not destroying under the condition of network equipment physical signalling intensity and realized signaling tracing; On the other hand,, comprise the signaling between the network equipment again, therefore, adopt the present invention can realize signaling tracing exhaustively owing to both comprised the signaling of network device internal in the packet of Switching Module institute route.
Adopt technical solution of the present invention except the cost that can reduce signaling tracing and realize that exhaustively in addition signaling tracing can also obtain following beneficial effect:
Signaling tracing device is after receiving packet, can preserve, thereby make the user can utilize various filterconditions to filter the signaling that signaling tracing device receive off-line, also can trace into and cause unusual signaling even the user is provided with wrong filtercondition.
Place special signaling tracing device to realize the signaling tracing function, therefore, the code relevant with signaling tracing all transferred on the signaling tracing device, thereby can not occur the code of signaling tracing in the software of the network equipment.So both realize the separation of difference in functionality code, the exploitation of network device software can be carried out synchronously with the exploitation of signaling tracing device software, shortened the cycle of equipment development.
Make two groups can be engaged in the exploitation of the network equipment and the exploitation of signaling tracing device respectively with different professional backgrounds.For example: the team with people's composition of communications industry working experience can be engaged in the exploitation of the network equipment; Team with people's composition of software development industry experience can be engaged in the exploitation of signaling tracing device.
Below in conjunction with accompanying drawing, signal following system of the present invention is introduced.Fig. 2 is the composition structural representation of signal following system of the present invention.Referring to Fig. 2.This signal following system comprises:
Switching Module 210 in the network equipment is used to duplicate the packet of its route, and institute's duplicated data packet is sent to signaling tracing device;
Signaling tracing device 220 is used for filtering out the signaling that satisfies default tracking condition from institute's duplicated data packet.
Comprise in the Switching Module 210 in the described system of Fig. 2: transmit port, this forwarding port links to each other with described signaling tracing device by ethernet link, is used for institute's duplicated data packet is sent to signaling tracing device by described ethernet link.
Comprise in the signaling tracing device 220 in the described system of Fig. 2:
Receiver module 221 is used to receive the packet that comes from described Switching Module;
Filtering module 222 is used for filtering out the signaling that satisfies default tracking condition from described packet.
Can also comprise in the signaling tracing device 220 shown in Figure 2: memory module 223 is used to preserve the packet of described reception, and the packet of described preservation is provided to described filtering module.
Preferably, can also comprise in the signaling tracing device shown in Figure 2: storage control module 224, be used for extracting the UDP message bag from the packet of described reception, described UDP message bag is stored in the memory module.
Storage control module 224 shown in Figure 2 can also be used for the UDP message bag of described extraction is carried out preliminary treatment, and according to described pretreated result described UDP message bag is stored in the memory module.
Can also comprise in the signaling tracing device 220 shown in Figure 2: present module 225, be used for the signaling that described filtering module filters out is resolved, and be used to present the result that described parsing obtains.
The above is preferred embodiment of the present invention only, is not to be used to limit protection scope of the present invention.All any modifications of being done within the spirit and principles in the present invention, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.