CN101640823B - Method and equipment for shunting multi-analysis system - Google Patents

Method and equipment for shunting multi-analysis system Download PDF

Info

Publication number
CN101640823B
CN101640823B CN 200910169862 CN200910169862A CN101640823B CN 101640823 B CN101640823 B CN 101640823B CN 200910169862 CN200910169862 CN 200910169862 CN 200910169862 A CN200910169862 A CN 200910169862A CN 101640823 B CN101640823 B CN 101640823B
Authority
CN
China
Prior art keywords
flow
analysis system
mark
shunting device
goal analysis
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN 200910169862
Other languages
Chinese (zh)
Other versions
CN101640823A (en
Inventor
汪小勇
苏立
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
New H3C Technologies Co Ltd
Original Assignee
Hangzhou H3C Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hangzhou H3C Technologies Co Ltd filed Critical Hangzhou H3C Technologies Co Ltd
Priority to CN 200910169862 priority Critical patent/CN101640823B/en
Publication of CN101640823A publication Critical patent/CN101640823A/en
Application granted granted Critical
Publication of CN101640823B publication Critical patent/CN101640823B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a method for shunting a multi-analysis system, comprising the following steps: shunting equipment enables mark information carried in a received flow to be matched with stored mark information of a flow; when the matching succeeds, the shunting equipment copies the flow according to a corresponding target analysis system of the flow and adds a marker of the corresponding target analysis system of the flow in each copied flow; and the shunting equipment sends the copied flow to the corresponding target analysis system according to the marker of the target analysis system carried in the copied flow. In the invention, the shunting equipment has low cost and efficiently finishes shunting treatment of the multi-analysis system.

Description

A kind of method and apparatus of shunting multi-analysis system
Technical field
The present invention relates to the communications field, relate in particular to a kind of method and apparatus of shunting multi-analysis system.
Background technology
Along with the very big of internet, applications popularized the number of users of the Internet, Web content and flow sustainable growth.Being applied in when bringing many beneficial effects for equipment development of the Internet, the importance and the urgency that ensure information safety have also been given prominence to, if can not effectively manage and monitor the Internet, bring significant damage will for country, enterprise, individual's network security, separate system arises at the historic moment under this background exactly, becomes active data net Lawful Interception scheme.
As shown in Figure 1, shunting device is linked into by optical splitter in user's the backbone network, because this access way is in parallel the access, does not influence the legacy network flow.When receiving the flow of coming from the light splitting of prime equipment or mirror image, shunting device is according to pre-configured ACL (Access Control List, Access Control List (ACL)) rule is mated and moved: the message to any acl rule that do not match directly abandons, message redirecting to the coupling acl rule is organized to balanced, organizes between each port in equilibrium and exports in the load balancing mode.So just finish introducing, shunting and the load balancing of a flow, for back level equipment, for example server detects flow and analyzes and supervision.
Among Fig. 1, a plurality of analytical systems such as safety monitoring system, green internet system require to finish corresponding flow analysis according to own service; From service layer, analyze the situation that may there be intersection in flow between system, be that a flow needs to be analyzed by a plurality of systems simultaneously, and these analytical systems manage and are distributed on the different Analysis servers by different departments, this just need provide shunting multi-analysis system, i.e. the function of multi-user's shunting.
When disposing above-mentioned shunting multi-analysis system function, prior art increases an optical splitter again before the shunting device drainage, as shown in Figure 2, copy the flow that needs a plurality of network analyses based on optical principle, and the signal after the light splitting is linked into the different physical ports of shunting device respectively, as the drainage input interface, at this interface deploy user's distributing strategy, finish the shunting multi-analysis system function distributing.
But, the corresponding input physical port of every part of flow after the secondary light splitting, port number depends on the number of multi-analysis system like this, for example: in 4 analytical systems, need to use 4 physical ports, take 3 physical ports than original shunting device, more in the exigent shunting device of port density, both take valuable port resource, increased equipment cost again greatly.And, optical splitter is based on optical signal replicating, can't realize flow by rule match and copy, therefore optical splitter copies all flows and sends to each analytical system, cause each analytical system to receive all flows, but the flow that each analytical system actual needs is analyzed is the part of total flow, and a large amount of useless flows have taken the bandwidth resources of analytical system, has reduced the flow disposal ability of analytical system.Simultaneously, attenuated optical signal is very big after secondary is introduced optical splitter, may cause the correctly too weak message information of identification signal of shunting device.
Summary of the invention
The invention provides a kind of method and apparatus of shunting multi-analysis system, shunting low-cost, that efficiently finish multi-analysis system is handled.
In order to realize this purpose, the invention provides a kind of method of shunting multi-analysis system, be applied to comprise in the separate system of shunting device and a plurality of analytical systems, in the described shunting device in advance the storage purpose analytical system be the identification information of a plurality of flow, this method comprises:
Described shunting device mates the identification information that carries in the flow that receives the identification information of the flow of described storage;
When the match is successful, described shunting device copied described flow according to the number of the goal analysis system of described flow correspondence, and added the mark of the goal analysis system of this flow correspondence in each flow after copying;
The flow identifier information that each flow after described shunting device basis copies carries and the mark of goal analysis system mate the shunting mode of the goal analysis system of this flow correspondence;
When the match is successful, described shunting device obtained the outbound port that sends the flow after described the copying to described goal analysis system according to the shunting mode of described goal analysis system, and sent flow after described the copying by described outbound port;
Wherein, each analytical system comprises a plurality of Analysis servers, and a plurality of outbound ports of described shunting device connect a plurality of servers of described analytical system respectively.
The mark of the described goal analysis system of carrying in the flow of described shunting device after according to described copying, the goal analysis system to correspondence sends with the flow after described the copying.
Described shunting device copies described flow according to the number of the goal analysis system of described flow correspondence and comprises:
Described shunting device adds multi-analysis system never mark and number of copies in described flow, the number of the goal analysis system that described number of copies and described flow are corresponding is identical;
Described shunting device is identified described multi-analysis system never mark, further copies described flow according to described number of copies.
The mark that adds the goal analysis system of this flow correspondence in described shunting device each flow after copying is specially:
Described shunting device is selected still at random in the mark of a plurality of goal analysis system, and unappropriated mark adds in the described flow; Perhaps set in advance the priority of the mark of a plurality of goal analysis system, described shunting device adds the mark that still unappropriated priority is high in the described flow to.
The mark of the described goal analysis system of carrying in the flow of described shunting device after according to described copying sends the flow after described the copying and to comprise to the goal analysis system of correspondence:
The flow identifier information that each flow after described shunting device basis copies carries and the mark of goal analysis system mate the shunting mode of the goal analysis system of this flow correspondence;
When the match is successful, described shunting device obtained the outbound port that sends the flow after described the copying to described goal analysis system according to the shunting mode of described goal analysis system, and sent flow after described the copying by described outbound port.
Described shunting device mates the identification information that carries in the flow that receives after the identification information of flow of described storage, also comprises:
When it fails to match, the described flow of the normal forwarding of described shunting device.
The invention provides a kind of shunting device, be applied to comprise in the separate system of shunting device and a plurality of analytical systems, in the described shunting device in advance the storage purpose analytical system be the identification information of a plurality of flow,
This equipment comprises:
Matching unit is used for the identification information that the flow that receives carries is mated the identification information of the flow of described storage;
Copied cells when being used for described matching unit the match is successful, copies described flow according to the number of the goal analysis system of described flow correspondence, and adds the mark of the goal analysis system of this flow correspondence in each flow after copying;
The mark of the described goal analysis system that transmitting element, the flow after being used for copying according to described copied cells carry, the goal analysis system to correspondence sends with the flow after described the copying;
Wherein, each analytical system comprises a plurality of Analysis servers, and a plurality of outbound ports of described shunting device connect a plurality of servers of described analytical system respectively, and described transmitting element specifically is used for:
The flow identifier information that each flow after copying according to described copied cells carries and the mark of goal analysis system mate the shunting mode of the goal analysis system of this flow correspondence;
When the match is successful, obtain the outbound port that sends the flow after described the copying to described goal analysis system according to the shunting mode of described goal analysis system, and send flow after described the copying by described outbound port.
Described copied cells specifically is used for:
Add multi-analysis system never mark and number of copies in described flow, the number of the goal analysis system that described number of copies and described flow are corresponding is identical;
Identify described multi-analysis system never mark, further copy described flow according to described number of copies.
Described copied cells also is used for:
Selecting still at random in the mark of a plurality of goal analysis system, unappropriated mark adds in the described flow; Perhaps set in advance the priority of the mark of a plurality of goal analysis system, the mark that still unappropriated priority is high is added in the described flow.
Described transmitting element specifically is used for:
The flow identifier information that each flow after copying according to described copied cells carries and the mark of goal analysis system mate the shunting mode of the goal analysis system of this flow correspondence;
When the match is successful, obtain the outbound port that sends the flow after described the copying to described goal analysis system according to the shunting mode of described goal analysis system, and send flow after described the copying by described outbound port.
Described transmitting element also is used for:
Described matching unit is normally transmitted described flow when it fails to match.
Compared with prior art, the present invention has the following advantages at least:
Among the present invention, shunting device obtains the flow that needs send to a plurality of goal analysis system according to the matched rule that sets in advance, and copy this flow according to the number of goal analysis system, goal analysis system for each assignment of traffic correspondence after copying, thereby do not increasing under the situation of external resources such as port, realization is to the shunting of multi-analysis system flow, and low-cost the realization efficiently shunted.
Description of drawings
Fig. 1 is the networking mode schematic diagram of separate system in the prior art;
Fig. 2 is the implementation schematic diagram of shunting multi-analysis system function in the prior art;
Fig. 3 is the schematic flow sheet of the method for shunting multi-analysis system provided by the invention;
Fig. 4 is the networking mode schematic diagram of the multi-analysis system that provides of application scenarios of the present invention;
Fig. 5 is the schematic flow sheet of the method for the shunting multi-analysis system that provides of application scenarios of the present invention;
Fig. 6 is the structural representation of shunting device provided by the invention.
Embodiment
Core concept of the present invention is: two kinds of message matched rules are set in shunting device inside, select the flow that needs send to a plurality of analytical systems and copy according to first kind of matched rule, obtain to the outbound port of each analytical system transmitted traffic according to second kind of matched rule, and the flow after will copying by this outbound port sends to the analytical system of correspondence.
Concrete, the invention provides a kind of method of shunting multi-analysis system, be applied to comprise in the separate system of shunting device and a plurality of analytical systems, the storage purpose analytical system is the identification information of a plurality of flow in the described shunting device, as shown in Figure 3, this method comprises:
Step 301, described shunting device are mated the identification information that carries in the flow that receives the identification information of the flow of described storage;
Step 302, when the match is successful, described shunting device copied described flow according to the number of the goal analysis system of described flow correspondence, and added the mark of the goal analysis system of this flow correspondence in each flow after copying;
The mark of the described goal analysis system of carrying in step 303, the described shunting device flow after according to described copying, the goal analysis system to correspondence sends with the flow after described the copying.
Introduce the method for shunting multi-analysis system provided by the invention in detail below in conjunction with concrete application scenarios, in conjunction with networking mode shown in Figure 4, the specific implementation process may further comprise the steps as shown in Figure 5:
Step 501, shunting device receives the flow that optical splitter sends, and mates this flow according to pre-configured acl rule; If the match is successful, then execution in step 502; Otherwise, send this flow according to normal flow.
Concrete, pre-configured distributing strategy in the shunting device, the identification information of the flow that storage need send to a plurality of analytical systems, for example the IP five-tuple information of flow or condition code information etc. are set up the corresponding relation of this identification information and corresponding a plurality of analytical systems.For example, set in advance the flow that destination address is the first website, need to send to safety monitoring system and green internet system simultaneously, then store the IP address of first website and the corresponding relation of safety monitoring system and green internet system in the shunting device in advance.
Shunting device can also judge whether needs send to a plurality of analytical systems this message according to information self-contained in the message.The destination address that for example shows this flow in the IP five-tuple information of this flow is a plurality of, and perhaps the condition code in this flow is when to identify the destination address of this flow be a plurality of, and shunting device is judged this flow matches success.
Pre-configured acl rule namely needs to the identification information of the flow of a plurality of analytical systems transmissions and the corresponding relation of a plurality of analytical systems.After shunting device obtains flow, mate this pre-configured acl rule according to the identification information of this flow, if having in the flow with acl rule in identical identification information, then the match is successful, execution in step 502; Otherwise it fails to match.
When it fails to match, shunting device was according to the normal flow converting flow, according to the purpose IP address choice goal analysis system transmission of flow.
Step 502, shunting device arrange multi-analysis system never mark and number of copies in flow.
Concrete, the match is successful in the step 501 shows that this flow need send to a plurality of analytical systems, carry out copying of flow for the ease of follow-up, shunting device is that the flow that the match is successful adds multi-analysis system never mark and number of copies, and this number of copies is identical with the number of the goal analysis system of flow.
Wherein, the multi-analysis system never mark that shunting device adds in flow and number of copies such as can be added in the middle of the heading of flow or the message at the position that sets in advance, and can identify multi-analysis system never mark and number of copies when according to the content shunting device of this interpolation is follow-up flow being copied from flow.
Flow after shunting device copies is with consistent from the initial flow of input port input, and umber is consistent with pre-configured acl rule.
Step 503, shunting device copies flow according to multi-analysis system never mark and number of copies, and the mark of the goal analysis system of each flow correspondence is set.
Shunting device is the mark of each flow adding purpose analytical system when flow is copied, i.e. balanced group ID.Concrete, shunting device can be automatically selected still in the mark of a plurality of goal analysis system, and unappropriated mark adds in the flow, perhaps set in advance the priority of the mark of a plurality of goal analysis system, the high mark of priority is given flow after copying by priority allocation.
Step 504, shunting device carries out the secondary rule match according to mark and the purpose IP address of the goal analysis system of carrying in the flow after copying, when the match is successful, execution in step 505; Otherwise, abandon this flow.
Concrete, each analytical system in many separate systems all has the corresponding branch flow algorithm that is used for the calculated flow rate outbound port, for example hash algorithm.Shunting device sets in advance the corresponding relation of the branch flow algorithm of the mark of purpose IP, analytical system of flow and analytical system.Shunting device copies flow finish after, the purpose IP that carries according to the flow after copying, the mark of analytical system, the branch flow algorithm of the analytical system that coupling is corresponding; If the match is successful, namely exist mark while of the purpose IP that carries with flow and analytical system during corresponding branch flow algorithm, the match is successful, execution in step 505; Otherwise it fails to match, abandons this flow.
Step 505, shunting device are obtained the branch flow algorithm of the goal analysis system of flow correspondence, according to this minute flow algorithm shunt calculating, obtain the outbound port that this flow sends to the goal analysis system.
Concrete, for each analytical system, can comprise a plurality of Analysis servers and other analytical equipments, therefore, shunting device and the connected mode of analytical system can be a plurality of Analysis servers that a plurality of ports of shunting device are connected analytical system respectively.In this application scene, after shunting device obtains and divides flow algorithm accordingly with flow, according to this minute flow algorithm calculate corresponding outbound port.
Step 506, shunting device are proceeded flow by follow-up equipment and are handled according to the transmit port transmitted traffic of selecting.
By adopting method provided by the invention, shunting device obtains the flow that needs send to a plurality of goal analysis system according to the matched rule that sets in advance, and copy this flow according to the number of goal analysis system, goal analysis system for each assignment of traffic correspondence after copying, thereby do not increasing under the situation of external resources such as port, realization is to the shunting of multi-analysis system flow, and low-cost the realization efficiently shunted.
The invention provides a kind of shunting device, be applied to comprise in the separate system of shunting device and a plurality of analytical systems, the storage purpose analytical system is the identification information of a plurality of flow in the described shunting device, and as shown in Figure 6, this equipment comprises:
Matching unit 11 is used for the identification information that the flow that receives carries is mated the identification information of the flow of described storage.Pre-configured distributing strategy in the shunting device, the identification information of the flow that storage need send to a plurality of analytical systems, for example the IP five-tuple information of flow or condition code information etc. are set up the corresponding relation of this identification information and corresponding a plurality of analytical systems.After shunting device obtained flow, matching unit 11 was according to the identification information of the identification information of this flow coupling storage, if having identical identification information in the identification information with storage in the flow, then the match is successful; Otherwise it fails to match.
Copied cells 12 when being used for described matching unit 11 the match is successful, copies described flow according to the number of the goal analysis system of described flow correspondence, and adds the mark of the goal analysis system of this flow correspondence in each flow after copying.Concrete, described copied cells 12 adds multi-analysis system never mark and number of copies in described flow, and the number of the goal analysis system that described number of copies and described flow are corresponding is identical; Identify described multi-analysis system never mark, further copy described flow according to described number of copies.Described copied cells 12 also is used at random selecting still at the mark of a plurality of goal analysis system, and unappropriated mark adds in the described flow; Perhaps set in advance the priority of the mark of a plurality of goal analysis system, the mark that still unappropriated priority is high is added in the described flow; The multi-analysis system never mark of wherein, adding in flow and number of copies such as can be added in the middle of the heading of flow or the message at the position that sets in advance.
The mark of the described goal analysis system that transmitting element 13, the flow after being used for copying according to described copied cells 12 carry, the goal analysis system to correspondence sends with the flow after described the copying.Concrete, the flow identifier information that each flow after described transmitting element 13 copies according to described copied cells 12 carries and the mark of goal analysis system mate the shunting mode of the goal analysis system of this flow correspondence; When the match is successful, obtain the outbound port that sends the flow after described the copying to described goal analysis system according to the shunting mode of described goal analysis system, and send flow after described the copying by described outbound port.Each analytical system in many separate systems all has the corresponding branch flow algorithm that is used for the calculated flow rate outbound port, for example hash algorithm.Shunting device sets in advance the corresponding relation of the branch flow algorithm of the mark of purpose IP, analytical system of flow and analytical system.After copied cells 12 copies the flow end, the purpose IP that transmitting element 13 carries according to the flow after copying, the mark of analytical system, the branch flow algorithm of the analytical system that coupling is corresponding; Exist mark while of the purpose IP that carries with flow and analytical system during corresponding branch flow algorithm, the match is successful; Otherwise it fails to match.
Described transmitting element 13 also is used for:
Described matching unit 11 is normally transmitted described flow when it fails to match.
The identification information of described flow is specially five-tuple information or condition code information.
By adopting equipment provided by the invention, shunting device obtains the flow that needs send to a plurality of goal analysis system according to the matched rule that sets in advance, and copy this flow according to the number of goal analysis system, goal analysis system for each assignment of traffic correspondence after copying, thereby do not increasing under the situation of external resources such as port, realization is to the shunting of multi-analysis system flow, and low-cost the realization efficiently shunted.
Through the above description of the embodiments, those skilled in the art can be well understood to the present invention and can realize by the mode that software adds essential general hardware platform, can certainly pass through hardware, but the former is better execution mode under a lot of situation.Based on such understanding, the part that technical scheme of the present invention contributes to prior art in essence in other words can embody with the form of software product, this computer software product is stored in the storage medium, comprise that some instructions are with so that a computer equipment (can be personal computer, server, the perhaps network equipment etc.) carry out the described method of each embodiment of the present invention.
It will be appreciated by those skilled in the art that accompanying drawing is the schematic diagram of a preferred embodiment, the module in the accompanying drawing or flow process might not be that enforcement the present invention is necessary.
It will be appreciated by those skilled in the art that the module in the device among the embodiment can be distributed in the device of embodiment according to the embodiment description, also can carry out respective change and be arranged in the one or more devices that are different from present embodiment.The module of above-described embodiment can be merged into a module, also can further split into a plurality of submodules.
The invention described above embodiment sequence number does not represent the quality of embodiment just to description.
More than disclosed only be several specific embodiment of the present invention, still, the present invention is not limited thereto, any those skilled in the art can think variation all should fall into protection scope of the present invention.

Claims (8)

1. the method for a shunting multi-analysis system is applied to comprise in the separate system of shunting device and a plurality of analytical systems, in the described shunting device in advance the storage purpose analytical system be the identification information of a plurality of flow, it is characterized in that this method comprises:
Described shunting device mates the identification information that carries in the flow that receives the identification information of the flow of described storage;
When the match is successful, described shunting device copied described flow according to the number of the goal analysis system of described flow correspondence, and added the mark of the goal analysis system of this flow correspondence in each flow after copying;
The flow identifier information that each flow after described shunting device basis copies carries and the mark of goal analysis system mate the shunting mode of the goal analysis system of this flow correspondence;
When the match is successful, described shunting device obtained the outbound port that sends the flow after described the copying to described goal analysis system according to the shunting mode of described goal analysis system, and sent flow after described the copying by described outbound port;
Wherein, each analytical system comprises a plurality of Analysis servers, and a plurality of outbound ports of described shunting device connect a plurality of servers of described analytical system respectively.
2. the method for claim 1 is characterized in that, described shunting device copies described flow according to the number of the goal analysis system of described flow correspondence and comprises:
Described shunting device adds multi-analysis system never mark and number of copies in described flow, the number of the goal analysis system that described number of copies and described flow are corresponding is identical;
Described shunting device is identified described multi-analysis system never mark, further copies described flow according to described number of copies.
3. the method for claim 1 is characterized in that, the mark that adds the goal analysis system of this flow correspondence in described shunting device each flow after copying is specially:
Described shunting device is selected still at random in the mark of a plurality of goal analysis system, and unappropriated mark adds in the described flow; Perhaps set in advance the priority of the mark of a plurality of goal analysis system, described shunting device adds the mark that still unappropriated priority is high in the described flow to.
4. as each described method among the claim 1-3, it is characterized in that described shunting device mates the identification information that carries in the flow that receives after the identification information of flow of described storage, also comprises:
When it fails to match, the described flow of the normal forwarding of described shunting device.
5. a shunting device is applied to comprise in the separate system of shunting device and a plurality of analytical systems, in the described shunting device in advance the storage purpose analytical system be the identification information of a plurality of flow, it is characterized in that this equipment comprises:
Matching unit is used for the identification information that the flow that receives carries is mated the identification information of the flow of described storage;
Copied cells when being used for described matching unit the match is successful, copies described flow according to the number of the goal analysis system of described flow correspondence, and adds the mark of the goal analysis system of this flow correspondence in each flow after copying;
The mark of the described goal analysis system that transmitting element, the flow after being used for copying according to described copied cells carry, the goal analysis system to correspondence sends with the flow after described the copying;
Wherein, each analytical system comprises a plurality of Analysis servers, and a plurality of outbound ports of described shunting device connect a plurality of servers of described analytical system respectively, and described transmitting element specifically is used for:
The flow identifier information that each flow after copying according to described copied cells carries and the mark of goal analysis system mate the shunting mode of the goal analysis system of this flow correspondence;
When the match is successful, obtain the outbound port that sends the flow after described the copying to described goal analysis system according to the shunting mode of described goal analysis system, and send flow after described the copying by described outbound port.
6. equipment as claimed in claim 5 is characterized in that, described copied cells specifically is used for:
Add multi-analysis system never mark and number of copies in described flow, the number of the goal analysis system that described number of copies and described flow are corresponding is identical;
Identify described multi-analysis system never mark, further copy described flow according to described number of copies.
7. equipment as claimed in claim 5 is characterized in that, described copied cells also is used for:
Selecting still at random in the mark of a plurality of goal analysis system, unappropriated mark adds in the described flow; Perhaps set in advance the priority of the mark of a plurality of goal analysis system, the mark that still unappropriated priority is high is added in the described flow.
8. as each described equipment among the claim 5-7, it is characterized in that described transmitting element also is used for:
Described matching unit is normally transmitted described flow when it fails to match.
CN 200910169862 2009-09-07 2009-09-07 Method and equipment for shunting multi-analysis system Active CN101640823B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 200910169862 CN101640823B (en) 2009-09-07 2009-09-07 Method and equipment for shunting multi-analysis system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 200910169862 CN101640823B (en) 2009-09-07 2009-09-07 Method and equipment for shunting multi-analysis system

Publications (2)

Publication Number Publication Date
CN101640823A CN101640823A (en) 2010-02-03
CN101640823B true CN101640823B (en) 2013-07-03

Family

ID=41615564

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 200910169862 Active CN101640823B (en) 2009-09-07 2009-09-07 Method and equipment for shunting multi-analysis system

Country Status (1)

Country Link
CN (1) CN101640823B (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103004145B (en) * 2011-07-21 2015-04-08 华为技术有限公司 Flow distribution method, flow distribution device and flow distribution system for virtual private network
CN102495764A (en) * 2011-12-06 2012-06-13 曙光信息产业股份有限公司 Method and device for realizing data distribution
CN107318132B (en) * 2016-04-26 2019-12-06 上海大唐移动通信设备有限公司 Data distribution method and device in acquisition system
CN108683610A (en) * 2018-04-12 2018-10-19 国家计算机网络与信息安全管理中心 A kind of system and method realized multi-service rule match and flow and replicated
CN111596633B (en) * 2020-06-15 2021-07-09 中国人民解放军63796部队 Industrial control system
CN112910686B (en) * 2021-01-14 2022-10-25 牙木科技股份有限公司 Flow analysis system, method of operating flow analysis system, and computer-readable storage medium
CN115913970A (en) * 2021-11-04 2023-04-04 贵州电网有限责任公司 Monitoring flow centralized management system based on software defined network
CN115334003B (en) * 2022-08-10 2023-07-21 上海欣诺通信技术股份有限公司 Data stream processing method and system based on convergence and distribution equipment

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7185067B1 (en) * 2002-08-27 2007-02-27 Cisco Technology, Inc. Load balancing network access requests
CN101335709A (en) * 2008-08-07 2008-12-31 杭州华三通信技术有限公司 Method for implementing load sharing among flow analysis servers and shunting equipment
CN101431440A (en) * 2008-11-28 2009-05-13 杭州华三通信技术有限公司 Flux monitoring method and apparatus

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7185067B1 (en) * 2002-08-27 2007-02-27 Cisco Technology, Inc. Load balancing network access requests
CN101335709A (en) * 2008-08-07 2008-12-31 杭州华三通信技术有限公司 Method for implementing load sharing among flow analysis servers and shunting equipment
CN101431440A (en) * 2008-11-28 2009-05-13 杭州华三通信技术有限公司 Flux monitoring method and apparatus

Also Published As

Publication number Publication date
CN101640823A (en) 2010-02-03

Similar Documents

Publication Publication Date Title
CN101640823B (en) Method and equipment for shunting multi-analysis system
KR101641844B1 (en) Information Processing Method, and Priority Information Sending Method and Device
CN109194468B (en) Relay node deployment method, device and equipment and computer readable storage medium
CN110289999B (en) Data processing method, system and device
CN111901249A (en) Service current limiting method, device, equipment and storage medium
Mayer et al. Machine-learning-based soft-failure localization with partial software-defined networking telemetry
KR102262093B1 (en) Gateway apparatus, and control method thereof
CN101753592B (en) Method and system for data processing
CN111858083B (en) Remote service calling method and device, electronic equipment and storage medium
CN106408096A (en) Data processing method in online ticketing system and online ticketing system
Eltaieb et al. Modulation format identification of optical signals: an approach based on singular value decomposition of Stokes space projections
Halder et al. Shared backup path protection-based resource allocation considering inter-core and inter-mode crosstalk for spectrally-spatially elastic optical networks
US8386777B2 (en) Method and equipment for controlling access to multicast IP flows
CN107577700A (en) The processing method and processing device of database disaster tolerance
US20090083379A1 (en) Enabling connections for use with a network
WO2016202127A1 (en) Method for allocating wavelength paths in passive optical network, optical line terminal, and system
CN102281299A (en) Interactive service processing method and service control layer server
CN112350982B (en) Resource authentication method and device
CN101505295B (en) Method and equipment for correlating content with type
CN109525553B (en) Transmission protection method, intermediate device, server and system for URL (Uniform resource locator) request
CN112291185B (en) Method and device for collecting network data
US20130110913A1 (en) Apparatus and method for providing distributed cloud service
EP2731299B1 (en) Multicast program forwarding method, device and system
US20140164608A1 (en) Content transmission system
CN116233032B (en) Broadband narrowband fusion networking system and method

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CP03 Change of name, title or address

Address after: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No.

Patentee after: Xinhua three Technology Co., Ltd.

Address before: 310053 Hangzhou hi tech Industrial Development Zone, Zhejiang province science and Technology Industrial Park, No. 310 and No. six road, HUAWEI, Hangzhou production base

Patentee before: Huasan Communication Technology Co., Ltd.

CP03 Change of name, title or address