CN102572753A - Method and system for analyzing signaling of mobile application part - Google Patents
Method and system for analyzing signaling of mobile application part Download PDFInfo
- Publication number
- CN102572753A CN102572753A CN2012100267460A CN201210026746A CN102572753A CN 102572753 A CN102572753 A CN 102572753A CN 2012100267460 A CN2012100267460 A CN 2012100267460A CN 201210026746 A CN201210026746 A CN 201210026746A CN 102572753 A CN102572753 A CN 102572753A
- Authority
- CN
- China
- Prior art keywords
- analysis result
- information
- key message
- analysis
- map
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a method and a system for analyzing signaling of a mobile application part (MAP). The method for analyzing MAP signaling comprises the following steps: collecting original MAP signaling data transmitted in a link; analyzing the original MAP signaling data to obtain the key information in the original MAP signaling data; and analyzing the key information to obtain the analyzing result based on the preset logic comparison result. Compared with the prior art, the method provided by the invention can monitor the original MAP signaling data on real time, thus, the variation of the link can be monitored online on real time during transmitting the original MAP signaling data, and the original MAP signaling data can be automatically analyzed as well. Compared with manual analysis, the method of the invention improves the precision of analysis on original MAP signaling data, and the precision in signaling monitoring can be further improved.
Description
Technical field
The application relates to communication technical field, particularly a kind of MAP signalling analysis method and system.
Background technology
MAP (Mobile Application Part; MAP) signaling belongs to GSM (Global System of Mobile communication; Global system for mobile communications) core network signalling is used to MSC (Mobile Switching Center, mobile switching centre), HLR (Home Location Register; Attaching position register), AC (Authenticator Center; AUC), transmit information such as customer position information, roaming number and note between VLR (Visitor Location Register, VLR Visitor Location Register) and the SMSC (Short Message Service Center, SMS service center).Signaling monitoring system among the mobile network can carry out collection analysis to the original signaling data of MAP, and the authentic data of monitoring network running status is provided for operator.
Yet with original signaling data process LSTP (Low Signal Transfer Point, Low Level Signaling Transfer Point LSTP) of the MAP of E1 carrying and HSTP (High signal transfer point, HSTP High Signaling Transport Point); Therefore, signaling monitoring system often runs into imperfect when gathering the original signaling data of MAP, error code; The link dilatation; Engineering inserts mistake, the analog input card packet loss, the signaling addressing system variable with problem such as signalling route variation; Reduce the accuracy that the original signaling data of MAP is gathered, further influence the accuracy that signaling monitoring system is analyzed.
Existing signaling monitoring system is when gathering the original signaling data of MAP; Use the signalling analysis tool analysis to go out OPC (the Originating Point Code in the original signaling data of MAP; Original Point Code)/DPC (Destinating Point Code; Destination code), by operating personnel the OPC/DPC that itself and operator provide is checked again.But this kind method can't real time on-line monitoring the link change of the original signaling data of transmission MAP; Simultaneously OPC/DPC being checked also needs operating personnel's manual work to carry out; When the original signaling data number of MAP more for a long time; As easy as rolling off a log to mistake, thus the accuracy that the original signaling data of MAP is analyzed reduced, further influence the accuracy that signaling monitoring system is analyzed.
Summary of the invention
In view of this, the application provides a kind of MAP signalling analysis method, with the link change of the original signaling data of real time on-line monitoring transmission MAP, improves the accuracy that the original signaling data of MAP is analyzed simultaneously, further improves the accuracy of monitoring signaling.
The application also provides a kind of MAP signalling analysis system, in order to guarantee realization and the application of said method in reality.Technical scheme is following:
Based on the application's one side, a kind of MAP MAP signalling analysis method is provided, comprising:
Gather the original signaling data of MAP that transmits in the link;
Resolve the original signaling data of said MAP, obtain the key message in the original signaling data of said MAP;
According to the logic of propositions comparison rule, said key message is analyzed, obtain analysis result.
Preferably, said key message comprises: the InvokeID information and the source order Sid/Did information of temporal information, signaling network test post SNT identification information, forward sequence number FSN information, Original Point Code OPC/ destination code DPC information, calling/called information, TCAP Transaction Capability Application Part TCAP layer.
Preferably, said according to the logic of propositions comparison rule, said key message is analyzed, obtain analysis result and comprise:
Choose the SNT information in the said key message, judge the signaling link in it selects SLS whether disappearance is arranged, if then generate SLS deletion analysis result, and carry SLS disappearance number among the said SLS deletion analysis result;
Obtain the FSN information in the said key message, judge whether the FSN value is continuous, if not, then generate FSN jump analysis result, and carry FSN jump rate in the said FSN jump analysis result;
Extract the InvokeID information in the said key message, judge whether the number of the up-downgoing data in the said InvokeID information equates,, and carry the equal rate of InvokeID in the said packet loss analysis result if not, then generate the packet loss analysis result;
Carry out operation flow according to said key message and synthesize, calculate synthetic ratio, whether judge said synthetic ratio less than preset synthetic ratio, if then generate synthetic ratio harmonic analysis result, and said synthetic ratio harmonic analysis result carries said synthetic ratio;
According to said logic of propositions comparison rule, respectively the said SLS disappearance of said analysis number, FSN jump rate, InvokeID are equated that rate and synthetic ratio and the preset value of self compare, and generate Comprehensive analysis results.
Preferably, said said key message is analyzed, is obtained analysis result and also comprise:
Obtain the OPC/DPC information in the said key message, each OPC/DPC during OPC/DPC and preset OPC/DPC are shown matees, if do not match, then generates the unsuccessful analysis result of coupling;
Obtain the temporal information in the said key message, whether the judgement time value is continuous, if not, then generate out of order analysis result.
Preferably, said key message also comprises link ID number, comprises for said link ID number gathering plane No., plate card number, link No. and time slot; Carry in the said analysis result said link ID number.
Preferably, also comprise:
Analysis result is carried out grade classification;
During greater than preset alarm level, send said analysis result in the grade of analysis result to the office terminal.
Preferably, also comprise:
Detect data flow transmitted amount in the said link,, confirm said analytical cycle according to the corresponding relation of said data traffic and analytical cycle;
Said said key message is analyzed, obtain analysis result and comprise: a said analytical cycle is once analyzed said key message at interval, obtains analysis result.
Preferably, adopt fast decoding method to resolve the original signaling data of said MAP.
Based on the application on the other hand, a kind of MAP MAP signalling analysis system is provided also, comprises:
Collector is used for gathering the original signaling data of MAP that link transmits;
Resolver is used to resolve the original signaling data of said MAP, obtains the key message in the original signaling data of said MAP;
Analysis module is used for according to the logic of propositions comparison rule said key message being analyzed, and obtains analysis result.
Preferably, said key message comprises: the InvokeID information and the source order Sid/Did information of temporal information, signaling network test post SNT identification information, forward sequence number FSN information, Original Point Code OPC/ destination code DPC information, calling/called information, TCAP Transaction Capability Application Part TCAP layer.
Preferably, said analysis module comprises:
The SLS analytic unit is used for choosing the SNT information of said key message, judges the signaling link in it selects SLS whether disappearance is arranged, if then generate SLS deletion analysis result, and carry SLS disappearance number among the said SLS deletion analysis result;
The FSN analytic unit is used for obtaining the FSN information of said key message, judges whether the FSN value is continuous, if not, then generate FSN jump analysis result, and carry FSN jump rate in the said FSN jump analysis result;
The InvokeID analytic unit; Be used for extracting the InvokeID information of said key message, judge whether the number of the up-downgoing data in the said InvokeID information equates, if not; Then generate the packet loss analysis result, and carry the equal rate of InvokeID in the said packet loss analysis result;
The synthesis analysis unit is used for carrying out operation flow according to said key message and synthesizes, and calculates synthetic ratio; Judge that whether said synthetic ratio is less than preset synthetic ratio; If then generate synthetic ratio harmonic analysis result, and said synthetic ratio harmonic analysis result carries said synthetic ratio;
Analytic unit is used for according to said logic of propositions comparison rule, analyzes said SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, generates Comprehensive analysis results.
Preferably, said analysis module also comprises:
The OPC/DPC analytic unit is used for obtaining the OPC/DPC information of said key message, and OPC/DPC and each OPC/DPC in the preset OPC/DPC table are mated, if do not match, then generates the unsuccessful analysis result of coupling;
The time series analysis unit is used for obtaining the temporal information of said key message, and whether the judgement time value is continuous, if not, then generate out of order analysis result.
Preferably, said key message also comprises link ID number, comprises for said link ID number gathering plane No., plate card number, link No. and time slot; Carry in the said analysis result said link ID number.
Preferably, also comprise:
Divide module, be used for analysis result is carried out grade classification;
Transmitter is used for during greater than preset alarm level, sending said analysis result to the office terminal in the grade of analysis result.
Preferably, also comprise:
Detection module is used for detecting said link data flow transmitted amount, according to the corresponding relation of said data traffic and analytical cycle, confirms said analytical cycle;
Said analysis module specifically is used for the said analytical cycle in interval once to be analyzed said key message, obtains analysis result.
Preferably, said resolver specifically is used to adopt fast decoding method to resolve the original signaling data of said MAP.
The specific embodiment that provides according to the application; The application discloses following technique effect: the application is through to original signaling data collection of the MAP that transmits on the link and parsing; Obtain the key message in the original signaling data of MAP; Again said key message is analyzed, obtained analysis result, further can monitor link according to analysis result.Compared with prior art; Can monitor the original signaling data of MAP in real time; Thereby realized the link change of the original signaling data of real time on-line monitoring transmission MAP, the application has realized the automatic analysis of the original signaling data of MAP simultaneously, with respect to manual analysis; Improve the accuracy that the original signaling data of MAP is analyzed, further improve the accuracy of monitoring signaling.
Description of drawings
In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art; To do to introduce simply to the accompanying drawing of required use among the embodiment below; Obviously, the accompanying drawing in describing below only is some embodiments of the present invention, for those of ordinary skills; Under the prerequisite of not paying creative work property, can also obtain other accompanying drawing according to these accompanying drawings.
A kind of flow chart of the MAP signalling analysis method that Fig. 1 provides for the application;
The flow chart of step 103 in the MAP signalling analysis method that Fig. 2 provides for the application;
The another kind of flow chart of the MAP signalling analysis method that Fig. 3 provides for the application;
A kind of structural representation of the MAP signalling analysis system that Fig. 4 provides for the application;
The structural representation of analysis module in the MAP signalling analysis system that Fig. 5 provides for the application;
The another kind of structural representation of the MAP signalling analysis system that Fig. 6 provides for the application.
Embodiment
To combine the accompanying drawing in the embodiment of the invention below, the technical scheme in the embodiment of the invention is carried out clear, intactly description, obviously, described embodiment only is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills are not making the every other embodiment that is obtained under the creative work prerequisite, all belong to the scope of the present invention's protection.
For make above-mentioned purpose of the present invention, feature and advantage can be more obviously understandable, below in conjunction with accompanying drawing and embodiment the present invention done further detailed explanation.
See also Fig. 1, the flow chart that it shows a kind of MAP signalling analysis method that the application provides can may further comprise the steps:
Step 101: gather the original signaling data of MAP that transmits in the link.
Wherein, The original signaling data collection of MAP can be used distinct device, gathers IP (Internet Protocol as adopting FE (Fast Ethernet, Fast Ethernet) integrated circuit board; The agreement that interconnects between the network) the original signaling data of the MAP of link; Adopt the CPOS integrated circuit board to gather the original signaling data of MAP of 64K or 2M link, wherein CPOS is meant that the POS link is carried out the road, crack to be divided, and C representes Channelized; POS (Packet Over SONET/SDH) is a kind of technology of using in metropolitan area network and the wide area network, can be used in transmitting grouped data.
The original signaling data of the MAP that collects can adopt flexible bus technology buffer memory.Wherein, the flexible bus technology is a kind of data sharing caching technology, and it can be buffered in the untreatment data of preset capacity in the internal memory, or deposits into file, avoids can't receiving or handling at the terminal obliterated data when slow.The original signaling data of the MAP that collects can also adopt the shared drive mode to carry out buffer memory, but the shared drive buffer memory can't be realized big data quantity buffer memory and data and duplicates the function of transmission.
Step 102: resolve the original signaling data of MAP, obtain the key message in the original signaling data of MAP.
In the present embodiment, resolve the original signaling data of MAP and can adopt coding/decoding method or fast decoding method at a slow speed.Wherein, coding/decoding method is meant from the bearing bed to the application layer at a slow speed, and successively decoding decodes all information that the original signaling data of MAP carries.Fast decoding method is meant the original signaling data of skip floor parsing MAP; During like the 2M link; Can directly skip MTP (Media Transfer Protocol; Media transmission protocol) 6 byte lengths of layer can solve OPC/DPC, can skip protocol type and Message Processing return information, directly solve calling and called Gt/Gted.
In order to improve decoding efficiency, when resolving the original signaling data of MAP, adopt fast decoding method.Resolving the key message that obtains behind the original signaling data of MAP comprises: temporal information, SNT (Signaling Network Test; The signaling network test post) the InvokeID information and the source order Sid/Did information of identification information, FSN (Forwarding Sequence Number forward sequence number) information, OPC/DPC information, calling/called information, TCAP (Transaction Capabilities Application Part, TCAP Transaction Capability Application Part) layer.Wherein, key message can adopt the data format shown in the table 1 to represent.
Wherein, Sid is the business ID that starts, and Did is business purpose ID.The TCAP layer identifies a business procedure with Sid/Did.A TCAP layer service begins from begin message; To the end or abort (failed) end of message; In each message, use OTID and DTID to represent the ID that carries in each message in the business procedure, the OTID Business Processing ID that representes to originate from, DTID representes purpose Business Processing ID.In complete business procedure, possibly need repeatedly dialogue, promptly ask and respond, call whenever once that dialogue identifies with an InvokeID, InvokeID representes to call ID.
Table 1 key message data format
| Time | ?SNT | FSN | OPC | DPC | Gt | Gted | InvokeID | Sid | Did |
Step 103: according to the logic of propositions comparison rule, key message is analyzed, obtained analysis result.
Wherein, the logic of propositions comparison rule is provided with by having the engineer who enriches the link experience in advance.The detailed process of this step sees also Fig. 2, can may further comprise the steps:
Step 1031: choose the SNT information in the said key message; Judge whether the SLS (Signaling Link Selection, signaling link is selected) in it has disappearance, if; Then generate SLS deletion analysis result, and carry SLS disappearance number among the said SLS deletion analysis result.
SNT message is two link test message between network element device, and so two network element devices that signalling point on it can unique identification message two ends are numbering and state that the link information on the SNT message can the unique identification link.Link between two network element devices is under complete situation, and the SLS that carries in all SNT message should evenly occur with 0 to 15, or for odd number occurs, or be the even number appearance, or be first half 0 to 7 data, or be latter half 8 to 15 appearance.Judge whether the SLS that carries in the SNT message has disappearance, if then generate SLS deletion analysis result, and carry SLS disappearance number among the said SLS deletion analysis result.If, do not generate any result.
Step 1032: obtain the FSN information in the said key message, judge whether the FSN value is continuous, if not, then generate FSN jump analysis result, and carry FSN jump rate in the said FSN jump analysis result.
Jump to the FSN value of every link is counted, and normal link FSN should be continuously, if judge that the FSN value is not continuous, then generates FSN jump analysis result, and carries FSN jump rate in the said FSN jump analysis result.
Step 1033: extract the InvokeID information in the said key message; Whether the number of judging the up-downgoing data in the said InvokeID information equates; If not, then generate the packet loss analysis result, and carry the equal rate of InvokeID in the said packet loss analysis result.
Step 1034: carry out operation flow according to said key message and synthesize, calculate synthetic ratio, whether judge said synthetic ratio less than preset synthetic ratio, if then generate synthetic ratio harmonic analysis result, and said synthetic ratio harmonic analysis result carries said synthetic ratio.
Wherein, key message carries out operation flow when synthetic, needs according to professional composition rule.Professional composition rule generally is meant and utilizes calling/called information, source order Sid/Did information that the once professional original signaling data of all MAP is synthesized in the signaling packet of a flow process composition, for the information of checking in the business procedure.
Step 1035: according to the logic of propositions comparison rule, analyze said SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, generate Comprehensive analysis results.
Wherein, A kind of logic of propositions comparison rule equates that for SLS being lacked number, FSN jump rate, InvokeID rate and synthetic ratio compare with separately preset value respectively; Equate that at said SLS disappearance number, FSN jump rate, InvokeID rate is respectively less than self preset value; And under the situation of said synthetic ratio greater than self preset value, generate the analysis result that signal collecting repeats and signaling is lost.For example: when synthetic ratio greater than 97%; SLS lacks 1 numeral; The discontinuous jump rate of FSN is less than 5%, and the equal rate of InvokeID thinks promptly that less than 20% o'clock there is repetition in the original signaling data collection of MAP between OPC and the DPC; And the original signaling data of the MAP that collects has disappearance, generates the analysis result that signal collecting repeats and signaling is lost this moment.
After generating analysis result, analysis result is sent to the office terminal, link is monitored according to analysis result by operating personnel.
Need to prove: each analysis result that generates in the above-mentioned steps 1031 to 1035 can be sent to the office terminal as an independent analysis result, and the analysis result that perhaps only step 1035 is generated is sent to the office terminal, and this is no longer limited.Wherein, the transmission of analysis result can be at first carrying out grade classification to analysis result,, sends said analysis result to the office terminal, otherwise do not send analysis result during greater than preset alarm level in the grade of analysis result.
In the present embodiment, the analysis of step 103 pair key message can also comprise: to the analysis of OPC/DPC information and temporal information.Wherein, Information analysis comprises to OPC/DPC: obtain the OPC/DPC information in the said key message, each OPC/DPC during OPC/DPC and preset OPC/DPC are shown matees, if do not match; Then generate the unsuccessful analysis result of coupling; Realized automatic detection, saved operating personnel's workload, improved operating efficiency OPC/DPC.The OPC/DPC table is preestablished by operating personnel.
Can comprise the temporal information analysis: obtain the temporal information in the said key message, whether the judgement time value is continuous, if not, then generate out of order analysis result.
Above-mentioned key message can also comprise: link ID number, be used for the unique identification link said link ID number, and it can comprise gathers plane No., plate card number, link No. and time slot.Carry link ID number in the analysis result that obtains in the step 103, the attendant checks link ID number that carries among the result through the analysis result in the office terminal, thereby finds link corresponding physics access device, and link is safeguarded.
Need to prove: link ID is used for searching to make things convenient for the engineering staff position of unique identification link in collecting device, and according to harvester, and the difference of wiring, then link ID is different, and promptly link ID is used for the ID of the link position of unique identification collection in disposing.And SNT is a link test message, is that network reality is in service, and network element device is given the SNT message of link assignment, in the message with link information, discern like the network element device that numbering and the state of link can be used this link.
Use technique scheme; The application obtains the key message in the original signaling data of MAP through to original signaling data collection of the MAP that transmits on the link and parsing, more said key message is analyzed; Obtain analysis result, further can monitor link according to analysis result.Compared with prior art; Can monitor the original signaling data of MAP in real time; Thereby realized the link change of the original signaling data of real time on-line monitoring transmission MAP, the application has realized the automatic analysis of the original signaling data of MAP simultaneously, with respect to manual analysis; Improve the accuracy that the original signaling data of MAP is analyzed, further improve the accuracy of monitoring signaling.
See also Fig. 3, the another kind of flow chart that it shows a kind of MAP signalling analysis method that the application provides can may further comprise the steps:
Step 301: detect data flow transmitted amount in the said link,, confirm said analytical cycle according to the corresponding relation of said data traffic and analytical cycle.For example: when data flow transmitted amount in the link was big, acquisition time reduced, and the short time can obtain bigger data, therefore shortened analytical cycle; In link the data flow transmitted amount hour, acquisition time increases, and expends the long period just can obtain bigger data, therefore prolongs analytical cycle.
Step 302: gather the original signaling data of MAP that transmits in the link.
Step 303: resolve the original signaling data of said MAP, obtain the key message in the original signaling data of said MAP.
The implementation process of step 302 and step 303 is identical with step 101 and step 102 respectively, and this is no longer set forth.
Step 304: according to the logic of propositions comparison rule, said key message is analyzed, obtained analysis result.
In the present embodiment, said key message is analyzed, obtain analysis result and comprise: an analytical cycle is once analyzed said key message at interval, obtains analysis result.Wherein, the concrete analysis to key message sees also the explanation in the step 103.
Embodiment is corresponding with said method, and the application also provides a kind of MAP signalling analysis system, and its structural representation sees also shown in Figure 4, comprising: collector 41, resolver 42 and analysis module 43.Wherein,
In the present embodiment, can adopt flexible bus technical transmission data between resolver 42 and the analysis module 43.The original signaling data of the MAP that collector 41 collects is by flexible bus technology buffer memory, and is transferred to analysis module 43 by resolver 42 through flexible bus.Certainly, in the present embodiment, data are preserved and transmission can also be adopted shared drive mode mode, and this is not limited.
In the present embodiment, SLS analytic unit 431 is used for choosing the SNT information of said key message; Judge the signaling link in it selects SLS whether disappearance is arranged; If then generate SLS deletion analysis result, and carry SLS disappearance number among the said SLS deletion analysis result.
FSN analytic unit 432 is used for obtaining the FSN information of said key message, judges whether the FSN value is continuous, if not, then generate FSN jump analysis result, and carry FSN jump rate in the said FSN jump analysis result.
The jump of the FSN value of 432 pairs of every links of FSN analytic unit is counted, and normal link FSN should be continuously, if judge that the FSN value is not continuous, then generates FSN jump analysis result, and carries FSN jump rate in the said FSN jump analysis result.
InvokeID analytic unit 433; Be used for extracting the InvokeID information of said key message, judge whether the number of the up-downgoing data in the said InvokeID information equates, if not; Then generate the packet loss analysis result, and carry the equal rate of InvokeID in the said packet loss analysis result.
Wherein, A kind of logic of propositions comparison rule equates that for SLS being lacked number, FSN jump rate, InvokeID rate and synthetic ratio compare with separately preset value respectively; Equate that at said SLS disappearance number, FSN jump rate, InvokeID rate is respectively less than self preset value; And under the situation of said synthetic ratio greater than self preset value, generate the analysis result that signal collecting repeats and signaling is lost.For example: when synthetic ratio greater than 97%; SLS lacks 1 numeral; The discontinuous jump rate of FSN is less than 5%, and the equal rate of InvokeID thinks promptly that less than 20% o'clock there is repetition in the original signaling data collection of MAP between OPC and the DPC; And the original signaling data of the MAP that collects has disappearance, generates the analysis result that signal collecting repeats and signaling is lost this moment.
The analysis of 43 pairs of key messages of analysis module can also comprise: to the analysis of OPC/DPC information and temporal information.It can also increase OPC/DPC analytic unit and time series analysis unit on basis shown in Figure 5.Wherein, the OPC/DPC analytic unit is used for obtaining the OPC/DPC information of said key message, and OPC/DPC and each OPC/DPC in the preset OPC/DPC table are mated, if do not match, then generates the unsuccessful analysis result of coupling.The time series analysis unit is used for obtaining the temporal information of said key message, and whether the judgement time value is continuous, if not, then generate out of order analysis result.
The key message that above-mentioned resolver 42 obtains can also comprise link ID number, is used for the unique identification link said link ID number.It can comprise gathers plane No., plate card number, link No. and time slot.Carry in the analysis result that analysis module 43 draws said link ID number, the attendant checks link ID number that carries among the result through the analysis result in the office terminal, thereby finds link corresponding physics access device, and link is safeguarded.
After generating analysis result, analysis result can directly be sent to the office terminal, can also send according to grade classification.See also Fig. 6, the another kind of structural representation of a kind of MAP signalling analysis system that it shows that the application provides on basis shown in Figure 4, can also comprise: divide module 44 and transmitter 45.
Need to prove: each analysis result that analysis module 43 generates can be sent to the office terminal as an independent analysis result; Signal collecting repeats and signaling is lost analysis result or other result that perhaps only analysis module 43 are generated are sent to the office terminal, and this is no longer limited.
In addition; A kind of MAP signalling analysis system that the application provides can also increase detection module on Fig. 4 or basis shown in Figure 6; Be used for detecting said link data flow transmitted amount,, confirm said analytical cycle according to the corresponding relation of said data traffic and analytical cycle.Analysis module 43 specifically is used for the said analytical cycle in interval once to be analyzed said key message, obtains analysis result.
The described MAP signalling analysis of present embodiment system can be integrated on the switch; Also can link to each other with switch as an entity separately, in addition, need to prove; When the described method of the application adopts software to realize; Can be used as a newly-increased function of switch, can write corresponding program separately yet, the application does not limit the implementation of said method or system.
Need to prove that each embodiment all adopts the mode of going forward one by one to describe in this specification, what each embodiment stressed all is and the difference of other embodiment that identical similar part is mutually referring to getting final product between each embodiment.For system class embodiment, because it is similar basically with method embodiment, so description is fairly simple, relevant part gets final product referring to the part explanation of method embodiment.
At last; Also need to prove; In this article; Relational terms such as first and second grades only is used for an entity or operation are made a distinction with another entity or operation, and not necessarily requires or hint relation or the order that has any this reality between these entities or the operation.And; Term " comprises ", " comprising " or its any other variant are intended to contain comprising of nonexcludability; Thereby make and comprise that process, method, article or the equipment of a series of key elements not only comprise those key elements; But also comprise other key elements of clearly not listing, or also be included as this process, method, article or equipment intrinsic key element.Under the situation that do not having much more more restrictions, the key element that limits by statement " comprising ... ", and be not precluded within process, method, article or the equipment that comprises said key element and also have other identical element.
For the convenience of describing, be divided into various unit with function when describing above system and describe respectively.Certainly, when implementing the application, can in same or a plurality of softwares and/or hardware, realize the function of each unit.
Description through above execution mode can know, those skilled in the art can be well understood to the application and can realize by the mode that software adds essential general hardware platform.Based on such understanding; The part that the application's technical scheme contributes to prior art in essence in other words can be come out with the embodied of software product; This computer software product can be stored in the storage medium, like ROM/RAM, magnetic disc, CD etc., comprises that some instructions are with so that a computer equipment (can be a personal computer; Server, the perhaps network equipment etc.) carry out the described method of some part of each embodiment of the application or embodiment.
More than a kind of MAP signalling analysis method and system that the application provided are described in detail; Used concrete example among this paper the application's principle and execution mode are set forth, the explanation of above embodiment just is used to help to understand the application's method and core concept thereof; Simultaneously, for one of ordinary skill in the art, according to the application's thought, the part that on embodiment and range of application, all can change, in sum, this description should not be construed as the restriction to the application.
Claims (16)
1. a MAP MAP signalling analysis method is characterized in that, comprising:
Gather the original signaling data of MAP that transmits in the link;
Resolve the original signaling data of said MAP, obtain the key message in the original signaling data of said MAP;
According to the logic of propositions comparison rule, said key message is analyzed, obtain analysis result.
2. MAP signalling analysis method according to claim 1; It is characterized in that said key message comprises: the InvokeID information and the source order Sid/Did information of temporal information, signaling network test post SNT identification information, forward sequence number FSN information, Original Point Code OPC/ destination code DPC information, calling/called information, TCAP Transaction Capability Application Part TCAP layer.
3. MAP signalling analysis method according to claim 2 is characterized in that, and is said according to the logic of propositions comparison rule, and said key message is analyzed, and obtains analysis result and comprises:
Choose the SNT information in the said key message, judge the signaling link in it selects SLS whether disappearance is arranged, if then generate SLS deletion analysis result, and carry SLS disappearance number among the said SLS deletion analysis result;
Obtain the FSN information in the said key message, judge whether the FSN value is continuous, if not, then generate FSN jump analysis result, and carry FSN jump rate in the said FSN jump analysis result;
Extract the InvokeID information in the said key message, judge whether the number of the up-downgoing data in the said InvokeID information equates,, and carry the equal rate of InvokeID in the said packet loss analysis result if not, then generate the packet loss analysis result;
Carry out operation flow according to said key message and synthesize, calculate synthetic ratio, whether judge said synthetic ratio less than preset synthetic ratio, if then generate synthetic ratio harmonic analysis result, and said synthetic ratio harmonic analysis result carries said synthetic ratio;
According to said logic of propositions comparison rule, analyze said SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, generate Comprehensive analysis results.
4. MAP signalling analysis method according to claim 3 is characterized in that, said said key message is analyzed, and obtains analysis result and also comprises:
Obtain the OPC/DPC information in the said key message, each OPC/DPC during OPC/DPC and preset OPC/DPC are shown matees, if do not match, then generates the unsuccessful analysis result of coupling;
Obtain the temporal information in the said key message, whether the judgement time value is continuous, if not, then generate out of order analysis result.
5. according to any described MAP signalling analysis method of claim 1 to 4, it is characterized in that said key message also comprises link ID number, comprise for said link ID number and to gather plane No., plate card number, link No. and time slot; Carry in the said analysis result said link ID number.
6. according to any described MAP signalling analysis method of claim 1 to 4, it is characterized in that, also comprise:
Analysis result is carried out grade classification;
During greater than preset alarm level, send said analysis result in the grade of analysis result to the office terminal.
7. according to any described MAP signalling analysis method of claim 1 to 4, it is characterized in that, also comprise:
Detect data flow transmitted amount in the said link,, confirm said analytical cycle according to the corresponding relation of said data traffic and analytical cycle;
Said said key message is analyzed, obtain analysis result and comprise: a said analytical cycle is once analyzed said key message at interval, obtains analysis result.
8. according to any described MAP signalling analysis method of claim 1 to 4, it is characterized in that, adopt fast decoding method to resolve the original signaling data of said MAP.
9. a MAP MAP signalling analysis system is characterized in that, comprising:
Collector is used for gathering the original signaling data of MAP that link transmits;
Resolver is used to resolve the original signaling data of said MAP, obtains the key message in the original signaling data of said MAP;
Analysis module is used for according to the logic of propositions comparison rule said key message being analyzed, and obtains analysis result.
10. MAP signalling analysis according to claim 9 system; It is characterized in that said key message comprises: the InvokeID information and the source order Sid/Did information of temporal information, signaling network test post SNT identification information, forward sequence number FSN information, Original Point Code OPC/ destination code DPC information, calling/called information, TCAP Transaction Capability Application Part TCAP layer.
11. MAP signalling analysis according to claim 10 system is characterized in that said analysis module comprises:
The SLS analytic unit is used for choosing the SNT information of said key message, judges the signaling link in it selects SLS whether disappearance is arranged, if then generate SLS deletion analysis result, and carry SLS disappearance number among the said SLS deletion analysis result;
The FSN analytic unit is used for obtaining the FSN information of said key message, judges whether the FSN value is continuous, if not, then generate FSN jump analysis result, and carry FSN jump rate in the said FSN jump analysis result;
The InvokeID analytic unit; Be used for extracting the InvokeID information of said key message, judge whether the number of the up-downgoing data in the said InvokeID information equates, if not; Then generate the packet loss analysis result, and carry the equal rate of InvokeID in the said packet loss analysis result;
The synthesis analysis unit is used for carrying out operation flow according to said key message and synthesizes, and calculates synthetic ratio; Judge that whether said synthetic ratio is less than preset synthetic ratio; If then generate synthetic ratio harmonic analysis result, and said synthetic ratio harmonic analysis result carries said synthetic ratio;
Analytic unit is used for according to said logic of propositions comparison rule, analyzes said SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, generates Comprehensive analysis results.
12. MAP signalling analysis according to claim 11 system is characterized in that said analysis module also comprises:
The OPC/DPC analytic unit is used for obtaining the OPC/DPC information of said key message, and OPC/DPC and each OPC/DPC in the preset OPC/DPC table are mated, if do not match, then generates the unsuccessful analysis result of coupling;
The time series analysis unit is used for obtaining the temporal information of said key message, and whether the judgement time value is continuous, if not, then generate out of order analysis result.
13., it is characterized in that said key message also comprises link ID number according to any described MAP signalling analysis system of claim 9 to 12, comprise for said link ID number and to gather plane No., plate card number, link No. and time slot; Carry in the said analysis result said link ID number.
14. according to any described MAP signalling analysis system of claim 9 to 12, it is characterized in that, also comprise:
Divide module, be used for analysis result is carried out grade classification;
Transmitter is used for during greater than preset alarm level, sending said analysis result to the office terminal in the grade of analysis result.
15. according to any described MAP signalling analysis system of claim 9 to 12, it is characterized in that, also comprise:
Detection module is used for detecting said link data flow transmitted amount, according to the corresponding relation of said data traffic and analytical cycle, confirms said analytical cycle;
Said analysis module specifically is used for the said analytical cycle in interval once to be analyzed said key message, obtains analysis result.
16., it is characterized in that said resolver specifically is used to adopt fast decoding method to resolve the original signaling data of said MAP according to any described MAP signalling analysis system of claim 9 to 12.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210026746.0A CN102572753B (en) | 2012-02-07 | 2012-02-07 | Method and system for analyzing signaling of mobile application part |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210026746.0A CN102572753B (en) | 2012-02-07 | 2012-02-07 | Method and system for analyzing signaling of mobile application part |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102572753A true CN102572753A (en) | 2012-07-11 |
| CN102572753B CN102572753B (en) | 2014-12-03 |
Family
ID=46416978
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210026746.0A Expired - Fee Related CN102572753B (en) | 2012-02-07 | 2012-02-07 | Method and system for analyzing signaling of mobile application part |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102572753B (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104811981A (en) * | 2014-01-24 | 2015-07-29 | 中国移动通信集团广东有限公司 | Method and device for evaluating abnormal call |
| CN107579878A (en) * | 2017-09-19 | 2018-01-12 | 浙江明讯网络技术有限公司 | A kind of monitoring signaling method and device |
| CN108123789A (en) * | 2016-11-28 | 2018-06-05 | 中国移动通信有限公司研究院 | Analyze the method and apparatus of security attack |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1571526A (en) * | 2003-07-23 | 2005-01-26 | 中兴通讯股份有限公司 | Signal interception method implementing one-number-dual-machine function in mobile network |
| KR20080068323A (en) * | 2007-01-19 | 2008-07-23 | 삼성전자주식회사 | Method and apparatus for map statistics in mobile communication system |
| CN101562801A (en) * | 2008-04-16 | 2009-10-21 | 华为技术有限公司 | Method, system and server for shielding call forwarding function |
| CN101873594A (en) * | 2010-06-29 | 2010-10-27 | 中兴通讯股份有限公司 | Method and system for detecting if SIM card is copied for international roaming |
-
2012
- 2012-02-07 CN CN201210026746.0A patent/CN102572753B/en not_active Expired - Fee Related
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1571526A (en) * | 2003-07-23 | 2005-01-26 | 中兴通讯股份有限公司 | Signal interception method implementing one-number-dual-machine function in mobile network |
| KR20080068323A (en) * | 2007-01-19 | 2008-07-23 | 삼성전자주식회사 | Method and apparatus for map statistics in mobile communication system |
| CN101562801A (en) * | 2008-04-16 | 2009-10-21 | 华为技术有限公司 | Method, system and server for shielding call forwarding function |
| CN101873594A (en) * | 2010-06-29 | 2010-10-27 | 中兴通讯股份有限公司 | Method and system for detecting if SIM card is copied for international roaming |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104811981A (en) * | 2014-01-24 | 2015-07-29 | 中国移动通信集团广东有限公司 | Method and device for evaluating abnormal call |
| CN108123789A (en) * | 2016-11-28 | 2018-06-05 | 中国移动通信有限公司研究院 | Analyze the method and apparatus of security attack |
| CN107579878A (en) * | 2017-09-19 | 2018-01-12 | 浙江明讯网络技术有限公司 | A kind of monitoring signaling method and device |
| CN107579878B (en) * | 2017-09-19 | 2020-08-21 | 浙江明讯网络技术有限公司 | Signaling monitoring method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102572753B (en) | 2014-12-03 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108092854B (en) | Test method and device for train-level Ethernet equipment based on IEC61375 protocol | |
| CN101877659B (en) | Method, device and system for monitoring packet loss | |
| CN103023693B (en) | A kind of user behaviors log data management system and method | |
| CN103052044B (en) | A kind of processing method of Stranger Calls and mobile terminal | |
| CN102301764A (en) | Terminal distributed information acquiring method, data acquiring device and communication system | |
| CN104427534B (en) | The soft detection method adopted of long term evolution and removable motion detection device | |
| JP2012175706A (en) | System for testing intelligent electronic devices | |
| CN104023082A (en) | Method for achieving cluster load balance | |
| CN102572753B (en) | Method and system for analyzing signaling of mobile application part | |
| CN109861998B (en) | Plug-in type dynamic analysis system and method based on Beidou short message protocol | |
| CN113453229B (en) | Remote wireless safety automatic test method, device and equipment | |
| CN104243623A (en) | Passenger-information-system-to-ATS-system interface data processing system and method | |
| CN105844846A (en) | Safety monitoring method, device and system based on Ibeacon technology | |
| CN107980124A (en) | A kind of collecting method and server | |
| CN106304085B (en) | Information processing method and device | |
| CN106878965B (en) | A kind of method and apparatus for assessing mobile terminal performance | |
| CN103944779B (en) | A kind of WAP service features monitoring method and system | |
| CN111935767B (en) | Network simulation system | |
| CN106304084B (en) | Information processing method and device | |
| CN108647315A (en) | Collecting method and system | |
| CN108829568A (en) | A kind of data monitoring method and device | |
| CN113807697B (en) | Alarm association-based order sending method and device | |
| CN106304122B (en) | Business data analysis method and system | |
| CN108989116B (en) | Big data collection and analysis system and method | |
| CN104486047B (en) | Self-aided terminal monitoring method, device and system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| ASS | Succession or assignment of patent right |
Owner name: BEIJING ZHONGCHUANG XINCE INFORMATION TECHNOLOGY C Free format text: FORMER OWNER: BEIJING ZHONGCHUANG XINCE SCIENCE + TECHNOLOGY CO., LTD. Effective date: 20141023 |
|
| C41 | Transfer of patent application or patent right or utility model | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20141023 Address after: 100081, Beijing, Zhongguancun, Haidian District South Avenue, No. 18, Beijing international C block 12-14 Applicant after: Beijing Zhongchuang Xince Information Technology Co., Ltd. Address before: 100081, Beijing, Zhongguancun, Haidian District South Avenue, No. 18, Beijing international C block 12-14 Applicant before: Beijing Zhongchuang Xince Science & Technology Co., Ltd. |
|
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20141203 Termination date: 20170207 |
|
| CF01 | Termination of patent right due to non-payment of annual fee |