CN102572753B - Method and system for analyzing signaling of mobile application part - Google Patents
Method and system for analyzing signaling of mobile application part Download PDFInfo
- Publication number
- CN102572753B CN102572753B CN201210026746.0A CN201210026746A CN102572753B CN 102572753 B CN102572753 B CN 102572753B CN 201210026746 A CN201210026746 A CN 201210026746A CN 102572753 B CN102572753 B CN 102572753B
- Authority
- CN
- China
- Prior art keywords
- analysis result
- key message
- information
- map
- analysis
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
Abstract
The invention provides a method and a system for analyzing signaling of a mobile application part (MAP). The method for analyzing MAP signaling comprises the following steps: collecting original MAP signaling data transmitted in a link; analyzing the original MAP signaling data to obtain the key information in the original MAP signaling data; and analyzing the key information to obtain the analyzing result based on the preset logic comparison result. Compared with the prior art, the method provided by the invention can monitor the original MAP signaling data on real time, thus, the variation of the link can be monitored online on real time during transmitting the original MAP signaling data, and the original MAP signaling data can be automatically analyzed as well. Compared with manual analysis, the method of the invention improves the precision of analysis on original MAP signaling data, and the precision in signaling monitoring can be further improved.
Description
Technical field
The application relates to communication technical field, particularly a kind of MAP signalling analysis method and system.
Background technology
MAP (Mobile Application Part, MAP) signaling belongs to GSM (Global System of Mobile communication, global system for mobile communications) core network signalling, be used to MSC (Mobile Switching Center, mobile switching centre), HLR (Home Location Register, attaching position register), AC (Authenticator Center, AUC), VLR (Visitor Location Register, VLR Visitor Location Register) and SMSC (Short Message Service Center, SMS service center) between, transmit customer position information, the information such as roaming number and note.Signaling monitoring system in mobile network can carry out collection analysis to the original signaling data of MAP, for operator provides the authentic data of monitoring network running status.
Yet the original signaling data process of MAP LSTP (the Low Signal Transfer Point with E1 carrying, Low Level Signaling Transfer Point LSTP) and HSTP (High signal transfer point, HSTP High Signaling Transport Point), therefore, signaling monitoring system often runs into imperfect when gathering the original signaling data of MAP, error code, link dilatation, engineering access mistake, analog input card packet loss, the problems such as the variable and signalling route variation of signaling addressing system, reduce the accuracy that the original signaling data of MAP gathers, and further affect the accuracy that signaling monitoring system is analyzed.
Existing signaling monitoring system is when gathering the original signaling data of MAP, use signalling analysis tool analysis to go out OPC (the Originating Point Code in the original signaling data of MAP, Original Point Code)/DPC (Destinating Point Code, destination code), then the OPC/DPC being provided by operating personnel Jiang Qiyu operator check.But the link change that this kind of method cannot the original signaling data of real time on-line monitoring transmission MAP, OPC/DPC is checked and also needs operating personnel manually to carry out simultaneously, when the original signaling data number of MAP is more, as easy as rolling off a log to mistake, thereby reduce the accuracy that the original signaling data of MAP is analyzed, further affect the accuracy that signaling monitoring system is analyzed.
Summary of the invention
In view of this, the application provides a kind of MAP signalling analysis method, with the link change of the original signaling data of real time on-line monitoring transmission MAP, improves the accuracy that the original signaling data of MAP is analyzed simultaneously, further improves the accuracy of monitoring signaling.
The application also provides a kind of MAP signalling analysis system, in order to guarantee said method implementation and application in practice.Technical scheme is as follows:
One side based on the application, provides a kind of MAP MAP signalling analysis method, comprising:
Gather the original signaling data of MAP transmitting in link;
Resolve the original signaling data of described MAP, obtain the key message in the original signaling data of described MAP;
According to logic of propositions comparison rule, described key message is analyzed, obtain analysis result.
Preferably, described key message comprises: InvokeID information and the source order Sid/Did information of temporal information, signaling network test post SNT identification information, forward sequence number FSN information, Original Point Code OPC/ destination code DPC information, calling/called information, TCAP Transaction Capability Application Part TCAP floor.
Preferably, described according to logic of propositions comparison rule, described key message is analyzed, obtain analysis result and comprise:
Choose the SNT information in described key message, judge the signaling link in it selects SLS whether to have disappearance, if so, generate SLS deletion analysis result, and in described SLS deletion analysis result, carry SLS disappearance number;
Obtain the FSN information in described key message, judge that whether FSN value is continuous, if not, generate FSN change point result, and carry FSN jump rate in described FSN change point result;
Extract the InvokeID information in described key message, judge whether the number of the up-downgoing data in described InvokeID information equates, if not, generate packet loss analysis result, and in described packet loss analysis result, carry the equal rate of InvokeID;
According to described key message, carry out operation flow and synthesize, calculate synthetic ratio, judge whether described synthetic ratio is less than default synthetic ratio, if so, generate synthetic ratio harmonic analysis result, and described synthetic ratio harmonic analysis result carries described synthetic ratio;
According to described logic of propositions comparison rule, respectively the described SLS disappearance of described analysis number, FSN jump rate, InvokeID are equated to rate and synthetic ratio and the preset value of self contrast, and generate Comprehensive analysis results.
Preferably, described described key message is analyzed, is obtained analysis result and also comprise:
Obtain the OPC/DPC information in described key message, OPC/DPC is mated with each OPC/DPC in default OPC/DPC table, if do not match, generate the unsuccessful analysis result of coupling;
Obtain the temporal information in described key message, whether the time value of judgement is continuous, if not, generates out of order analysis result.
Preferably, described key message also comprises link No. ID, and described link comprises collection plane No., plate card number, link No. and time slot for No. ID; In described analysis result, carry No. ID, described link.
Preferably, also comprise:
Analysis result is carried out to grade classification;
When the grade of analysis result is greater than preset alarm grade, send described analysis result to office terminal.
Preferably, also comprise:
Detect the data traffic of transmitting in described link, according to the corresponding relation of described data traffic and analytical cycle, determine described analytical cycle;
Described described key message is analyzed, obtained analysis result and comprise: the described analytical cycle in one, interval is once analyzed described key message, obtain analysis result.
Preferably, adopt fast decoding method to resolve the original signaling data of described MAP.
Based on the application on the other hand, also provide a kind of MAP MAP signalling analysis system, comprising:
Collector, the original signaling data of MAP transmitting for gathering link;
Resolver, for resolving the original signaling data of described MAP, obtains the key message in the original signaling data of described MAP;
Analysis module, for according to logic of propositions comparison rule, analyzes described key message, obtains analysis result.
Preferably, described key message comprises: InvokeID information and the source order Sid/Did information of temporal information, signaling network test post SNT identification information, forward sequence number FSN information, Original Point Code OPC/ destination code DPC information, calling/called information, TCAP Transaction Capability Application Part TCAP floor.
Preferably, described analysis module comprises:
SLS analytic unit, for choosing the SNT information of described key message, judges the signaling link in it selects SLS whether to have disappearance, if so, generates SLS deletion analysis result, and in described SLS deletion analysis result, carries SLS disappearance number;
FSN analytic unit, for obtaining the FSN information of described key message, judges that whether FSN value is continuous, if not, generates FSN change point result, and carries FSN jump rate in described FSN change point result;
InvokeID analytic unit, for extracting the InvokeID information of described key message, judge whether the number of the up-downgoing data in described InvokeID information equates, if not, generate packet loss analysis result, and in described packet loss analysis result, carry the equal rate of InvokeID;
Synthesis analysis unit, synthetic for carry out operation flow according to described key message, calculate synthetic ratio, judge whether described synthetic ratio is less than default synthetic ratio, if so, generate synthetic ratio harmonic analysis result, and described synthetic ratio harmonic analysis result carries described synthetic ratio;
Analytic unit, for according to described logic of propositions comparison rule, analyzes described SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, generates Comprehensive analysis results.
Preferably, described analysis module also comprises:
OPC/DPC analytic unit, for obtaining the OPC/DPC information of described key message, mates OPC/DPC with each OPC/DPC in default OPC/DPC table, if do not match, generate the unsuccessful analysis result of coupling;
Time series analysis unit, for obtaining the temporal information of described key message, whether the time value of judgement is continuous, if not, generates out of order analysis result.
Preferably, described key message also comprises link No. ID, and described link comprises collection plane No., plate card number, link No. and time slot for No. ID; In described analysis result, carry No. ID, described link.
Preferably, also comprise:
Divide module, for analysis result is carried out to grade classification;
Transmitter, while being greater than preset alarm grade for the grade at analysis result, sends described analysis result to office terminal.
Preferably, also comprise:
Detection module, for detection of the data traffic of transmitting in described link, according to the corresponding relation of described data traffic and analytical cycle, determines described analytical cycle;
Described analysis module is once analyzed described key message specifically for the described analytical cycle in one, interval, obtains analysis result.
Preferably, described resolver is specifically for adopting fast decoding method to resolve the original signaling data of described MAP.
The specific embodiment providing according to the application, the application discloses following technique effect: the application is by the original signaling data collection of the MAP transmitting on link and parsing, obtain the key message in the original signaling data of MAP, again described key message is analyzed, obtain analysis result, further can to link, monitor according to analysis result.Compared with prior art, can the original signaling data of Real-Time Monitoring MAP, thereby realized the link change of the original signaling data of real time on-line monitoring transmission MAP, the application has realized the automatic analysis of the original signaling data of MAP simultaneously, with respect to manual analysis, improve the accuracy that the original signaling data of MAP is analyzed, further improve the accuracy of monitoring signaling.
Accompanying drawing explanation
In order to be illustrated more clearly in the embodiment of the present invention or technical scheme of the prior art, to the accompanying drawing of required use in embodiment be briefly described below, apparently, accompanying drawing in the following describes is only some embodiments of the present invention, for those of ordinary skills, do not paying under the prerequisite of creative work, can also obtain according to these accompanying drawings other accompanying drawing.
A kind of flow chart of the MAP signalling analysis method that Fig. 1 provides for the application;
The flow chart of step 103 in the MAP signalling analysis method that Fig. 2 provides for the application;
The another kind of flow chart of the MAP signalling analysis method that Fig. 3 provides for the application;
A kind of structural representation of the MAP signalling analysis system that Fig. 4 provides for the application;
The structural representation of analysis module in the MAP signalling analysis system that Fig. 5 provides for the application;
The another kind of structural representation of the MAP signalling analysis system that Fig. 6 provides for the application.
Embodiment
Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is clearly and completely described, obviously, described embodiment is only the present invention's part embodiment, rather than whole embodiment.Embodiment based in the present invention, those of ordinary skills, not making the every other embodiment obtaining under creative work prerequisite, belong to the scope of protection of the invention.
For above-mentioned purpose of the present invention, feature and advantage can be become apparent more, below in conjunction with the drawings and specific embodiments, the present invention is further detailed explanation.
Refer to Fig. 1, the flow chart that it shows a kind of MAP signalling analysis method that the application provides, can comprise the following steps:
Step 101: gather the original signaling data of MAP transmitting in link.
Wherein, the original signaling data collection of MAP can be used distinct device, as adopt FE (Fast Ethernet, Fast Ethernet) board gathers IP (Internet Protocol, the agreement interconnecting between network) the original signaling data of the MAP of link, adopt CPOS board to gather the original signaling data of MAP of 64K or 2M link, wherein CPOS refers to POS link is carried out to the division of gap road, C represents Channelized, POS (Packet Over SONET/SDH) is a kind of technology of applying in metropolitan area network and wide area network, can be used in transmitting grouped data.
The original signaling data of MAP collecting can adopt flexible bus technology buffer memory.Wherein, flexible bus technology is a kind of data sharing caching technology, and it can be buffered in the untreatment data of preset capacity in internal memory, or is saved as file, avoids cannot receiving or process obliterated data when slow in terminal.The original signaling data of MAP collecting can also adopt shared drive mode to carry out buffer memory, but shared drive buffer memory cannot be realized the function of big data quantity buffer memory and data Replica transmission.
Step 102: resolve the original signaling data of MAP, obtain the key message in the original signaling data of MAP.
In the present embodiment, resolve the original signaling data of MAP and can adopt coding/decoding method or fast decoding method at a slow speed.Wherein, coding/decoding method refers to from bearing bed to application layer at a slow speed, and successively decoding, decodes all information that the original signaling data of MAP carries.Fast decoding method refers to the original signaling data of skip floor parsing MAP, during as 2M link, can directly skip MTP (Media Transfer Protocol, media transmission protocol) 6 byte lengths of layer can solve OPC/DPC, can skip protocol type and Message Processing return information, directly solve calling and called Gt/Gted.
In order to improve decoding efficiency, while resolving the original signaling data of MAP, adopt fast decoding method.Resolving the key message obtaining after the original signaling data of MAP comprises: temporal information, SNT (Signaling Network Test, signaling network test post) InvokeID information and the source order Sid/Did information of identification information, FSN (Forwarding Sequence Number forward sequence number) information, OPC/DPC information, calling/called information, TCAP (Transaction Capabilities Application Part, TCAP Transaction Capability Application Part) floor.Wherein, key message can adopt the data format shown in table 1 to represent.
Wherein, Sid is the business ID that starts, and Did is business purpose ID.TCAP layer identifies a business procedure with Sid/Did.A TCAP layer service is from begin message, to end or abort (failed) end of message, in each message, use OTID and DTID to represent the ID carrying in each message in a business procedure, the OTID Business Processing ID that represents to originate from, DTID represents object Business Processing ID.In complete business procedure, may need repeatedly to talk with, ask and respond, often call once dialogue and identify with an InvokeID, InvokeID represents to call ID.
Table 1 key message data format
| Time | SNT | FSN | OPC | DPC | Gt | Gted | InvokeID | Sid | Did |
Step 103: according to logic of propositions comparison rule, key message is analyzed, obtained analysis result.
Wherein, logic of propositions comparison rule sets in advance by having the engineer who enriches link experience.The detailed process of this step refers to Fig. 2, can comprise the following steps:
Step 1031: choose the SNT information in described key message, judge whether the SLS (Signaling Link Selection, signaling link is selected) in it has disappearance, if, generate SLS deletion analysis result, and in described SLS deletion analysis result, carry SLS disappearance number.
SNT message is two link test message between network element device, and two network element devices at the signalling point energy unique identification message two ends on it, so numbering and state that the link information in SNT message can unique identification link.Link between two network element devices is complete in the situation that, and the SLS carrying in all SNT message should evenly occur with 0 to 15, or for odd number occurs, or be even number appearance, or be first half 0 to 7 data, or be latter half 8 to 15 appearance.Judge whether the SLS carrying in SNT message has disappearance, if so, generate SLS deletion analysis result, and in described SLS deletion analysis result, carry SLS disappearance number.If not, do not generate any result.
Step 1032: obtain the FSN information in described key message, judge that whether FSN value is continuous, if not, generate FSN change point result, and carry FSN jump rate in described FSN change point result.
Jump to the FSN value of every link is counted, and normal link FSN should be continuously, if judgement FSN value is not continuous, generates FSN change point result, and carries FSN jump rate in described FSN change point result.
Step 1033: extract the InvokeID information in described key message, whether the number that judges the up-downgoing data in described InvokeID information equates, if not, generate packet loss analysis result, and in described packet loss analysis result, carry the equal rate of InvokeID.
Step 1034: carry out operation flow according to described key message and synthesize, calculate synthetic ratio, judge whether described synthetic ratio is less than default synthetic ratio, if so, generate synthetic ratio harmonic analysis result, and described synthetic ratio harmonic analysis result carries described synthetic ratio.
Wherein, key message carries out operation flow when synthetic, need to be according to integrated service rule.Integrated service rule generally refers to utilizes calling/called information, source order Sid/Did information that the original signaling data of all MAP of a business is synthesized in the signaling bag of a flow process composition, for the information of checking in business procedure.
Step 1035: according to logic of propositions comparison rule, analyze described SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, generate Comprehensive analysis results.
Wherein, a kind of logic of propositions comparison rule contrasts with preset value separately respectively for SLS being lacked to number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, at described SLS disappearance number, FSN jump rate, InvokeID, equate that rate is less than respectively self preset value, and described synthetic ratio is greater than in the situation of self preset value, generates the analysis result that signal collecting repeats and signaling is lost.For example: when synthetic ratio is greater than 97%, SLS lacks 1 numeral, the discontinuous jump rate of FSN is less than 5%, when InvokeID equates that rate is less than 20%, think that the original signaling data collection of MAP between OPC and DPC exists repetition, and the original signaling data of the MAP collecting has disappearance, now generate the analysis result that signal collecting repeats and signaling is lost.
After generating analysis result, analysis result is sent to office terminal, by operating personnel, according to analysis result, link is monitored.
It should be noted that: each analysis result generating in above-mentioned steps 1031 to 1035 can be sent to office terminal as an independent analysis result, or only the analysis result of step 1035 generation is sent to office terminal, this is no longer limited.Wherein, the transmission of analysis result can, for first analysis result being carried out to grade classification, when the grade of analysis result is greater than preset alarm grade, send described analysis result to office terminal, otherwise not send analysis result.
In the present embodiment, the analysis of step 103 pair key message can also comprise: the analysis to OPC/DPC information and temporal information.Wherein, to OPC/DPC, information analysis comprises: obtain the OPC/DPC information in described key message, OPC/DPC is mated with each OPC/DPC in default OPC/DPC table, if do not match, generate the unsuccessful analysis result of coupling, realize the automatic detection to OPC/DPC, saved operating personnel's workload, improved operating efficiency.OPC/DPC table is preset by operating personnel.
To temporal information analysis, can comprise: obtain the temporal information in described key message, whether the time value of judgement is continuous, if not, generate out of order analysis result.
Above-mentioned key message can also comprise: No. ID, link, and No. ID, described link is for unique identification link, and it can comprise and gathers plane No., plate card number, link No. and time slot.In the analysis result obtaining in step 103, carry link No. ID, attendant checks the link that carries in result No. ID by the analysis result in office terminal, thereby finds corresponding link physical access device, and link is safeguarded.
It should be noted that: link ID is used for the position of unique identification link in collecting device, to facilitate engineering staff to search, according to harvester, and the difference of wiring, link ID is different, and link ID is used for the ID of the link position of unique identification collection in disposing.And SNT is link test message, be that network reality is in service, network element device is to the SNT message of link assignment, in message with link information, as the numbering of link and state can be used the network element device of this link identify.
Application technique scheme, the application, by the original signaling data collection of the MAP transmitting on link and parsing, obtains the key message in the original signaling data of MAP, more described key message is analyzed, obtain analysis result, further can to link, monitor according to analysis result.Compared with prior art, can the original signaling data of Real-Time Monitoring MAP, thereby realized the link change of the original signaling data of real time on-line monitoring transmission MAP, the application has realized the automatic analysis of the original signaling data of MAP simultaneously, with respect to manual analysis, improve the accuracy that the original signaling data of MAP is analyzed, further improve the accuracy of monitoring signaling.
Refer to Fig. 3, the another kind of flow chart that it shows a kind of MAP signalling analysis method that the application provides, can comprise the following steps:
Step 301: detect the data traffic of transmitting in described link, according to the corresponding relation of described data traffic and analytical cycle, determine described analytical cycle.For example: when the data traffic transmitted is larger, acquisition time reduces, and the short time can obtain larger data, therefore shorten analytical cycle in link; Hour, acquisition time increases the data traffic of transmitting in link, expends the long period just can obtain larger data, therefore extends analytical cycle.
Step 302: gather the original signaling data of MAP transmitting in link.
Step 303: resolve the original signaling data of described MAP, obtain the key message in the original signaling data of described MAP.
The implementation process of step 302 and step 303 is identical with step 101 and step 102 respectively, and this is no longer set forth.
Step 304: according to logic of propositions comparison rule, described key message is analyzed, obtained analysis result.
In the present embodiment, described key message is analyzed, obtained analysis result and comprise: one, interval analytical cycle is once analyzed described key message, obtain analysis result.Wherein, the concrete analysis of key message is referred to the explanation in step 103.
Embodiment is corresponding with said method, and the application also provides a kind of MAP signalling analysis system, and its structural representation refers to shown in Fig. 4, comprising: collector 41, resolver 42 and analysis module 43.Wherein,
Collector 41, the original signaling data of MAP transmitting for gathering link.
Resolver 42, for resolving the original signaling data of described MAP, obtains the key message in the original signaling data of described MAP.In the present embodiment, key message comprises: the InvokeID information of temporal information, SNT identification information, FSN information, OPC/DPC information, calling/called information, TCAP floor and source order Sid/Did information.
Analysis module 43, for according to logic of propositions comparison rule, analyzes described key message, obtains analysis result.Wherein, the structural representation of analysis module 43 refers to shown in Fig. 5, comprising: SLS analytic unit 431, FSN analytic unit 432, InvokeID analytic unit 433, synthesis analysis unit 434 and analytic unit 435.
In the present embodiment, between resolver 42 and analysis module 43, can adopt flexible bus technical transmission data.The original signaling data of MAP that collector 41 collects is by flexible bus technology buffer memory, and by flexible bus, is transferred to analysis module 43 by resolver 42.Certainly, in the present embodiment, data are preserved and transmission can also adopt shared drive mode mode, and this is not limited.
In the present embodiment, SLS analytic unit 431, for choosing the SNT information of described key message, judge the signaling link in it selects SLS whether to have disappearance, if so, generate SLS deletion analysis result, and in described SLS deletion analysis result, carry SLS disappearance number.
FSN analytic unit 432, for obtaining the FSN information of described key message, judges that whether FSN value is continuous, if not, generates FSN change point result, and carries FSN jump rate in described FSN change point result.
The jump of the FSN value of 432 pairs of every links of FSN analytic unit is counted, and normal link FSN should be continuously, if judgement FSN value is not continuous, generates FSN change point result, and carries FSN jump rate in described FSN change point result.
InvokeID analytic unit 433, for extracting the InvokeID information of described key message, judge whether the number of the up-downgoing data in described InvokeID information equates, if not, generate packet loss analysis result, and in described packet loss analysis result, carry the equal rate of InvokeID.
Synthesis analysis unit 434, synthetic for carry out operation flow according to described key message, calculate synthetic ratio, judge whether described synthetic ratio is less than default synthetic ratio, if so, generate synthetic ratio harmonic analysis result, and described synthetic ratio harmonic analysis result carries described synthetic ratio.
Analytic unit 435, for according to logic of propositions comparison rule, analyzes described SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio.
Wherein, a kind of logic of propositions comparison rule contrasts with preset value separately respectively for SLS being lacked to number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, at described SLS disappearance number, FSN jump rate, InvokeID, equate that rate is less than respectively self preset value, and described synthetic ratio is greater than in the situation of self preset value, generates the analysis result that signal collecting repeats and signaling is lost.For example: when synthetic ratio is greater than 97%, SLS lacks 1 numeral, the discontinuous jump rate of FSN is less than 5%, when InvokeID equates that rate is less than 20%, think that the original signaling data collection of MAP between OPC and DPC exists repetition, and the original signaling data of the MAP collecting has disappearance, now generate the analysis result that signal collecting repeats and signaling is lost.
The analysis of 43 pairs of key messages of analysis module can also comprise: the analysis to OPC/DPC information and temporal information.It can also increase OPC/DPC analytic unit and time series analysis unit on the basis shown in Fig. 5.Wherein, OPC/DPC analytic unit, for obtaining the OPC/DPC information of described key message, mates OPC/DPC with each OPC/DPC in default OPC/DPC table, if do not match, generate the unsuccessful analysis result of coupling.Time series analysis unit, for obtaining the temporal information of described key message, whether the time value of judgement is continuous, if not, generates out of order analysis result.
The key message that above-mentioned resolver 42 obtains can also comprise link No. ID, and No. ID, described link is for unique identification link.It can comprise collection plane No., plate card number, link No. and time slot.In the analysis result that analysis module 43 draws, carry No. ID, described link, attendant checks the link that carries in result No. ID by the analysis result in office terminal, thereby finds corresponding link physical access device, and link is safeguarded.
After generating analysis result, analysis result can directly be sent to office terminal, can also send according to grade classification.Refer to Fig. 6, the another kind of structural representation that it shows a kind of MAP signalling analysis system that the application provides, on the basis shown in Fig. 4, can also comprise: divide module 44 and transmitter 45.
Divide module 44, for analysis result is carried out to grade classification.Transmitter 45, while being greater than preset alarm grade for the grade at analysis result, sends described analysis result to office terminal.
It should be noted that: each analysis result that analysis module 43 generates can be sent to office terminal as an independent analysis result, or signal collecting repeats and signaling is lost analysis result or other result that only analysis module 43 are generated are sent to office terminal, and this is no longer limited.
In addition, a kind of MAP signalling analysis system that the application provides can also increase detection module on the basis shown in Fig. 4 or Fig. 6, for detection of the data traffic of transmitting in described link, according to the corresponding relation of described data traffic and analytical cycle, determine described analytical cycle.Analysis module 43 is once analyzed described key message specifically for the described analytical cycle in one, interval, obtains analysis result.
MAP signalling analysis system described in the present embodiment can be integrated on switch, also can as an entity, be connected with switch separately, in addition, it should be noted that, when the method described in the application adopts software to realize, can be used as a newly-increased function of switch, can write separately corresponding program yet, the application does not limit the implementation of described method or system.
It should be noted that, in this specification, each embodiment all adopts the mode of going forward one by one to describe, and each embodiment stresses is the difference with other embodiment, between each embodiment identical similar part mutually referring to.For system class embodiment, because it is substantially similar to embodiment of the method, so description is fairly simple, relevant part is referring to the part explanation of embodiment of the method.
Finally, also it should be noted that, in this article, relational terms such as the first and second grades is only used for an entity or operation to separate with another entity or operating space, and not necessarily requires or imply and between these entities or operation, have the relation of any this reality or sequentially.And, term " comprises ", " comprising " or its any other variant are intended to contain comprising of nonexcludability, thereby the process, method, article or the equipment that make to comprise a series of key elements not only comprise those key elements, but also comprise other key elements of clearly not listing, or be also included as the intrinsic key element of this process, method, article or equipment.The in the situation that of more restrictions not, the key element being limited by statement " comprising ... ", and be not precluded within process, method, article or the equipment that comprises described key element and also have other identical element.
While for convenience of description, describing above system, with function, being divided into various unit describes respectively.Certainly, when implementing the application, the function of each unit can be realized in same or a plurality of software and/or hardware.
As seen through the above description of the embodiments, those skilled in the art can be well understood to the mode that the application can add essential general hardware platform by software and realizes.Understanding based on such, the part that the application's technical scheme contributes to prior art in essence in other words can embody with the form of software product, this computer software product can be stored in storage medium, as ROM/RAM, magnetic disc, CD etc., comprise that some instructions are with so that a computer equipment (can be personal computer, server, or the network equipment etc.) carry out the method described in some part of each embodiment of the application or embodiment.
A kind of MAP signalling analysis method and system that above the application provided describe in detail, applied specific case herein the application's principle and execution mode are set forth, the explanation of above embodiment is just for helping to understand the application's method and core concept thereof; Meanwhile, for one of ordinary skill in the art, the thought according to the application, all will change in specific embodiments and applications, and in sum, this description should not be construed as the restriction to the application.
Claims (12)
1. a MAP MAP signalling analysis method, is characterized in that, comprising:
Gather the original signaling data of MAP transmitting in link;
Resolve the original signaling data of described MAP, obtain the key message in the original signaling data of described MAP, wherein, described key message comprises: the InvokeID information of signaling network test post SNT identification information, forward sequence number FSN information, calling/called information, TCAP Transaction Capability Application Part TCAP floor and source order Sid/Did information;
According to logic of propositions comparison rule, described key message is analyzed, obtain analysis result, wherein, described according to logic of propositions comparison rule, described key message is analyzed, obtain analysis result, comprising:
Choose the SNT information in described key message, judge the signaling link in it selects SLS whether to have disappearance, if so, generate SLS deletion analysis result, and in described SLS deletion analysis result, carry SLS disappearance number;
Obtain the FSN information in described key message, judge that whether FSN value is continuous, if not, generate FSN change point result, and carry FSN jump rate in described FSN change point result;
Extract the InvokeID information in described key message, judge whether the number of the up-downgoing data in described InvokeID information equates, if not, generate packet loss analysis result, and in described packet loss analysis result, carry the equal rate of InvokeID;
According to described key message, carry out operation flow and synthesize, calculate synthetic ratio, judge whether described synthetic ratio is less than default synthetic ratio, if so, generate synthetic ratio harmonic analysis result, and described synthetic ratio harmonic analysis result carries described synthetic ratio;
According to described logic of propositions comparison rule, analyze described SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, generate Comprehensive analysis results.
2. MAP signalling analysis method according to claim 1, is characterized in that, described key message also comprises Original Point Code OPC/ destination code DPC information and temporal information; Described described key message is analyzed, is obtained analysis result and also comprise:
Obtain the OPC/DPC information in described key message, OPC/DPC is mated with each OPC/DPC in default OPC/DPC table, if do not match, generate the unsuccessful analysis result of coupling;
Obtain the temporal information in described key message, whether the time value of judgement is continuous, if not, generates out of order analysis result.
3. MAP signalling analysis method according to claim 1 and 2, is characterized in that, described key message also comprises link No. ID, and described link comprises collection plane No., plate card number, link No. and time slot for No. ID; In described analysis result, carry No. ID, described link.
4. MAP signalling analysis method according to claim 1 and 2, is characterized in that, also comprises:
Analysis result is carried out to grade classification;
When the grade of analysis result is greater than preset alarm grade, send described analysis result to office terminal.
5. MAP signalling analysis method according to claim 1 and 2, is characterized in that, also comprises:
Detect the data traffic of transmitting in described link, according to the corresponding relation of described data traffic and analytical cycle, determine described analytical cycle;
Described described key message is analyzed, obtained analysis result and comprise: the described analytical cycle in one, interval is once analyzed described key message, obtain analysis result.
6. MAP signalling analysis method according to claim 1 and 2, is characterized in that, adopts fast decoding method to resolve the original signaling data of described MAP.
7. a MAP MAP signalling analysis system, is characterized in that, comprising:
Collector, the original signaling data of MAP transmitting for gathering link;
Resolver, be used for resolving the original signaling data of described MAP, obtain the key message in the original signaling data of described MAP, wherein, described key message comprises: the InvokeID information of signaling network test post SNT identification information, forward sequence number FSN information, calling/called information, TCAP Transaction Capability Application Part TCAP floor and source order Sid/Did information;
Analysis module, be used for according to logic of propositions comparison rule, described key message is analyzed, obtained analysis result, wherein, described analysis module comprises: SLS analytic unit, for choosing the SNT information of described key message, judge the signaling link in it selects SLS whether to have disappearance, if, generate SLS deletion analysis result, and in described SLS deletion analysis result, carry SLS disappearance number;
FSN analytic unit, for obtaining the FSN information of described key message, judges that whether FSN value is continuous, if not, generates FSN change point result, and carries FSN jump rate in described FSN change point result;
InvokeID analytic unit, for extracting the InvokeID information of described key message, judge whether the number of the up-downgoing data in described InvokeID information equates, if not, generate packet loss analysis result, and in described packet loss analysis result, carry the equal rate of InvokeID;
Synthesis analysis unit, synthetic for carry out operation flow according to described key message, calculate synthetic ratio, judge whether described synthetic ratio is less than default synthetic ratio, if so, generate synthetic ratio harmonic analysis result, and described synthetic ratio harmonic analysis result carries described synthetic ratio;
Analytic unit, for according to described logic of propositions comparison rule, analyzes described SLS disappearance number, FSN jump rate, the equal rate of InvokeID and synthetic ratio, generates Comprehensive analysis results.
8. MAP signalling analysis system according to claim 7, is characterized in that, described key message also comprises Original Point Code OPC/ destination code DPC information and temporal information; Described analysis module also comprises:
OPC/DPC analytic unit, for obtaining the OPC/DPC information of described key message, mates OPC/DPC with each OPC/DPC in default OPC/DPC table, if do not match, generate the unsuccessful analysis result of coupling;
Time series analysis unit, for obtaining the temporal information of described key message, whether the time value of judgement is continuous, if not, generates out of order analysis result.
9. according to the MAP signalling analysis system described in claim 7 or 8, it is characterized in that, described key message also comprises link No. ID, and described link comprises collection plane No., plate card number, link No. and time slot for No. ID; In described analysis result, carry No. ID, described link.
10. according to the MAP signalling analysis system described in claim 7 or 8, it is characterized in that, also comprise:
Divide module, for analysis result is carried out to grade classification;
Transmitter, while being greater than preset alarm grade for the grade at analysis result, sends described analysis result to office terminal.
11. according to the MAP signalling analysis system described in claim 7 or 8, it is characterized in that, also comprises:
Detection module, for detection of the data traffic of transmitting in described link, according to the corresponding relation of described data traffic and analytical cycle, determines described analytical cycle;
Described analysis module is once analyzed described key message specifically for the described analytical cycle in one, interval, obtains analysis result.
12. according to the MAP signalling analysis system described in claim 7 or 8, it is characterized in that, described resolver is specifically for adopting fast decoding method to resolve the original signaling data of described MAP.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210026746.0A CN102572753B (en) | 2012-02-07 | 2012-02-07 | Method and system for analyzing signaling of mobile application part |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210026746.0A CN102572753B (en) | 2012-02-07 | 2012-02-07 | Method and system for analyzing signaling of mobile application part |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102572753A CN102572753A (en) | 2012-07-11 |
| CN102572753B true CN102572753B (en) | 2014-12-03 |
Family
ID=46416978
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210026746.0A Expired - Fee Related CN102572753B (en) | 2012-02-07 | 2012-02-07 | Method and system for analyzing signaling of mobile application part |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102572753B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104811981A (en) * | 2014-01-24 | 2015-07-29 | 中国移动通信集团广东有限公司 | Method and device for evaluating abnormal call |
| CN108123789B (en) * | 2016-11-28 | 2021-01-15 | 中国移动通信有限公司研究院 | Method and device for analyzing security attack |
| CN107579878B (en) * | 2017-09-19 | 2020-08-21 | 浙江明讯网络技术有限公司 | Signaling monitoring method and device |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1571526A (en) * | 2003-07-23 | 2005-01-26 | 中兴通讯股份有限公司 | Signal interception method implementing one-number-dual-machine function in mobile network |
| CN101562801A (en) * | 2008-04-16 | 2009-10-21 | 华为技术有限公司 | Method, system and server for shielding call forwarding function |
| CN101873594A (en) * | 2010-06-29 | 2010-10-27 | 中兴通讯股份有限公司 | Method and system for detecting if SIM card is copied for international roaming |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR100871618B1 (en) * | 2007-01-19 | 2008-12-02 | 삼성전자주식회사 | Method and apparatus for map statistics in mobile communication system |
-
2012
- 2012-02-07 CN CN201210026746.0A patent/CN102572753B/en not_active Expired - Fee Related
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1571526A (en) * | 2003-07-23 | 2005-01-26 | 中兴通讯股份有限公司 | Signal interception method implementing one-number-dual-machine function in mobile network |
| CN101562801A (en) * | 2008-04-16 | 2009-10-21 | 华为技术有限公司 | Method, system and server for shielding call forwarding function |
| CN101873594A (en) * | 2010-06-29 | 2010-10-27 | 中兴通讯股份有限公司 | Method and system for detecting if SIM card is copied for international roaming |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102572753A (en) | 2012-07-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108092854B (en) | Test method and device for train-level Ethernet equipment based on IEC61375 protocol | |
| CN101877659B (en) | Method, device and system for monitoring packet loss | |
| CN103971687B (en) | Implementation of load balancing in a kind of speech recognition system and device | |
| CN103052044B (en) | A kind of processing method of Stranger Calls and mobile terminal | |
| CN106060773B (en) | Object positioning system, method and device | |
| CN102301764A (en) | Terminal distributed information acquiring method, data acquiring device and communication system | |
| CN102572753B (en) | Method and system for analyzing signaling of mobile application part | |
| CN109861998B (en) | Plug-in type dynamic analysis system and method based on Beidou short message protocol | |
| CN107980124A (en) | A kind of collecting method and server | |
| CN106304085B (en) | Information processing method and device | |
| CN111181800B (en) | Test data processing method and device, electronic equipment and storage medium | |
| CN106878965B (en) | A kind of method and apparatus for assessing mobile terminal performance | |
| CN102045182B (en) | Service fault localization method, device and system | |
| CN103222288B (en) | The processing method of International Mobile Station Equipment Identification information IMEI and the network equipment | |
| CN103944779B (en) | A kind of WAP service features monitoring method and system | |
| CN111935767B (en) | Network simulation system | |
| JP2004173284A (en) | Tracking method and tracking device for multimedia message through remote communication network | |
| CN106776372B (en) | Emulation data access method and device based on FPGA | |
| CN110932393B (en) | Substation information protection master station system and data initialization method thereof | |
| CN106304084B (en) | Information processing method and device | |
| CN108647315A (en) | Collecting method and system | |
| CN108989116B (en) | Big data collection and analysis system and method | |
| CN113807697B (en) | Alarm association-based order sending method and device | |
| CN106941690A (en) | A kind of quality of data determines method and apparatus | |
| CN109831335A (en) | A kind of data monitoring method, monitor terminal, storage medium and data monitoring system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| ASS | Succession or assignment of patent right |
Owner name: BEIJING ZHONGCHUANG XINCE INFORMATION TECHNOLOGY C Free format text: FORMER OWNER: BEIJING ZHONGCHUANG XINCE SCIENCE + TECHNOLOGY CO., LTD. Effective date: 20141023 |
|
| C41 | Transfer of patent application or patent right or utility model | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20141023 Address after: 100081, Beijing, Zhongguancun, Haidian District South Avenue, No. 18, Beijing international C block 12-14 Applicant after: Beijing Zhongchuang Xince Information Technology Co., Ltd. Address before: 100081, Beijing, Zhongguancun, Haidian District South Avenue, No. 18, Beijing international C block 12-14 Applicant before: Beijing Zhongchuang Xince Science & Technology Co., Ltd. |
|
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20141203 Termination date: 20170207 |