CN102752297A - Data stream identification method and device and behavior management device - Google Patents
Data stream identification method and device and behavior management device Download PDFInfo
- Publication number
- CN102752297A CN102752297A CN2012102225072A CN201210222507A CN102752297A CN 102752297 A CN102752297 A CN 102752297A CN 2012102225072 A CN2012102225072 A CN 2012102225072A CN 201210222507 A CN201210222507 A CN 201210222507A CN 102752297 A CN102752297 A CN 102752297A
- Authority
- CN
- China
- Prior art keywords
- node
- expection
- equipment
- file
- nodal information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention provides a data stream identification method, a data stream identification device and a behavior management device, wherein the method comprises the following steps: when a device runs, according to a preset refresh cycle, regularly acquiring an expected node corresponding to a control stream from a memory of the device, and storing expected node information corresponding to the expected node into a node file of a nonvolatile storing facility in the device; after the device is restarted, reading the expected node information from the node file, and according to the expected node information, generating the expected node in the memory; and carrying out identification on a data stream according to the generated expected node. The invention also provides a data stream identification device and a behavior management device. According to the invention, after the device is restarted, a data stream can be identified accurately and efficiently, and the consumption on device performance can be greatly reduced.
Description
Technical field
The present invention relates to the communication technology, relate in particular to a kind of data flow recognition methods, device and behavior management equipment.
Background technology
Bridge mode network behavior management equipment is with the network bridge mode access network, and data flow is through behind this equipment, and this equipment can be used operations such as identification, content auditing, Flow Control to data stream.Circuitous (bypass) function is meant equipment after outage, and data flow still can be passed through this device forwards, the phenomenon of flow interruption can not occur.Equipment is that the message control flows is analyzed to one of application means of identification of data flow, therefrom extracts expected data flow characteristic, in internal memory, forms the expection node, rapidly and efficiently discerns relevant data flow through these nodes.The information of expection node can comprise five-tuple information, like source IP, purpose IP, protocol type, source port and destination interface, and the perhaps part element in the five-tuple, like source IP, purpose IP and destination interface, these information are kept in the internal memory of equipment.The equipment of supporting the bypass function is realized the interconnection of port through hardware circuit, if device powers down, then data circulation is crossed hardware circuit and directly transmitted, thereby can not be interrupted.Because the expection nodal information is kept in the internal memory; When equipment restarts; When especially after device powers down powers on again, restarting, at this moment the data in the internal memory all are cleared, for the control flows through equipment before equipment is restarted not; Restart these control flows corresponding data flow of back also continuing to pass through equipment, then after device power, can't effectively discern it.
Usually need analyze again the data flow that has existed before powering in the prior art, need to analyze the content of the data division of each message in the data flow, obtain the load characteristic, belong to which application thereby identify this data flow from data division.
Yet prior art is bigger to the consumption of equipment performance after equipment restarts.
Summary of the invention
The present invention provides a kind of data flow recognition methods, device and behavior management equipment, after equipment restarts, on the basis that accurately recognition data flows, reduces the consumption to equipment performance.
First aspect of the present invention provides a kind of data flow recognition methods, comprising:
When equipment work, according to the preset refresh cycle, from the internal memory of said equipment, regularly obtain the corresponding expection node of control flows, the expection nodal information that said expection node is corresponding is kept in the node file of the Nonvolatile memory devices in the said equipment;
After said equipment restarts, from said node file, read the expection nodal information, and in said internal memory, generate the expection node according to said expection nodal information;
According to the expection node that generates data stream is discerned.
Another aspect of the present invention provides a kind of data flow recognition device, comprising:
Preserve module; Be used for when equipment work; According to the preset refresh cycle, from the internal memory of said equipment, regularly obtain the corresponding expection node of control flows, the expection nodal information that said expection node is corresponding is kept in the node file of the Nonvolatile memory devices in the said equipment;
Read module is used for after said equipment restarts, and from said node file, reads the expection nodal information, and in said internal memory, generates the expection node according to said expection nodal information;
Identification module is used for according to the expection node that generates data stream being discerned.
Another aspect of the present invention provides a kind of behavior management equipment, can comprise Nonvolatile memory devices, internal memory and above-mentioned data flow recognition device.
Technique effect of the present invention is: when equipment work, regularly from internal memory, obtain the corresponding expection node of control flows; And will expect that the corresponding expection nodal information of node is kept in the node file; After device powers down powers on again; From the node file, read the expection nodal information, and in said internal memory, generate the expection node, data stream is discerned according to the expection node that generates according to the expection nodal information; The present invention is after equipment restarts, and recognition data stream can reduce the consumption to equipment performance simultaneously greatly accurately and efficiently.
Description of drawings
Fig. 1 is the flow chart of data flow recognition methods embodiment one of the present invention;
Fig. 2 is the flow chart of data flow recognition methods embodiment two of the present invention;
Fig. 3 is the structural representation of data flow recognition device embodiment one of the present invention;
Fig. 4 is the structural representation of data flow recognition device embodiment two of the present invention.
Embodiment
Fig. 1 is the flow chart of data flow recognition methods embodiment one of the present invention, and as shown in Figure 1, as shown in Figure 1, present embodiment provides a kind of data flow recognition methods, can specifically comprise the steps:
Present embodiment is restarting for the feasible behavior management equipment of the network bridge mode of bypass function of supporting; Particularly under the situation of outage back service restoration; The data flow that control flows is arranged is carried out more efficiently identification more accurately, propose a kind of data flow recognition methods, wherein; Behavior management equipment possibly be that abnormal power-down takes place, and also possibly be normal power down such as replacing power module.Equipment in the present embodiment is specially the behavior management equipment of the network bridge mode of supporting the bypass function.When the equipment operate as normal; Can preestablish a refresh cycle; From the internal memory of this equipment, regularly obtain the corresponding expection node of control flows, the interface that specifically regularly application recognition module provides in the invocation facility obtains the expection node of the control flows correspondence in the internal memory of the equipment of being kept at.The expection nodal information that the expection node that will get access to then is corresponding is kept in the node file of the Nonvolatile memory devices in the equipment; Nonvolatile memory devices can be flash, hard disk etc.; Present embodiment is created a node file in the Nonvolatile memory devices of equipment; Like called after expection.txt, the expection node that gets access to is kept in this node file.Wherein, what in the node file, preserve is the corresponding expection nodal information of expection node, and the expection node that is kept in the present embodiment in the internal memory is identical with the content of expection nodal information in being kept at the node file, just the data structure difference.This step is a step that circulation is carried out, and circulates according to the refresh cycle.
Restart at equipment, after especially normal or abnormal power-down powered on again, the expection nodal information of reading and saving from the node file, and in internal memory, generates the expection node according to the expection nodal information promptly was equivalent to reduce and expects the process of node.Expect that in the present embodiment nodal information can be the part element in five-tuple information or the five-tuple, with FTP (File Transfer Protocol; Hereinafter to be referred as: FTP) be example, comprise the negotiation information of client and server negotiated ports in the control flows of FTP, the five-tuple information of the data flow that can obtain through these negotiation informations be about to producing is promptly expected nodal information.The process that generates the expection node according to the expection nodal information in the present embodiment obtains being adapted to the data structure of internal memory for the data structure of expection nodal information is changed, and just can generate corresponding expection node.
From the node file, getting access to the expection nodal information, and after generating corresponding expection node, data stream is being discerned according to the expection node that generates.Promptly after equipment re-powers, when data flow arrives, just can identify data flow through the expection node that generates at once and which belongs to use, for example whether be the data flow of FTP to the expection node through above-mentioned FTP if just can identify data flow.In the present embodiment; Because after equipment powers on again; Got access to the expection node of the control flows before the device power; Only need to extract information such as IP in the heading of each message in the data flow, port this moment, utilize information such as IP, port and the expection node that gets access to mate, just can identify this data flow and belong to which application.This shows; Present embodiment is kept at the expection node in the internal memory in the node file of the Nonvolatile memory devices in the equipment; After device powers down; Loss of data in the internal memory, but the information in the Nonvolatile memory devices can not be affected, therefore can equipment power on again the back directly obtain device powers down in the Nonvolatile memory devices in the slave unit before the expection node of already present control flows; Thereby the data division of each message is analyzed in need not after equipment powers on again again to data flow, has avoided the consumption to equipment performance.
Present embodiment provides a kind of data flow recognition methods; When equipment work, regularly from internal memory, obtain the corresponding expection node of control flows; And will expect that the corresponding expection nodal information of node is kept in the node file, after equipment restarts, reads the expection nodal information from the node file; And according to expecting that nodal information generates the expection node in said internal memory, discern data stream according to the expection node that generates; Present embodiment is recognition data stream accurately and efficiently, can reduce the consumption to equipment performance greatly simultaneously.
Fig. 2 is the flow chart of data flow recognition methods embodiment two of the present invention, and as shown in Figure 2, present embodiment provides a kind of data flow recognition methods, can specifically comprise the steps:
When the equipment operate as normal, set the refresh timer of an expection node according to actual conditions, the timing of this refresh timer can be 3 minutes, is to obtain the corresponding expection node of control flows the cycle with the timing of this refresh timer.Whether this step arrives for the timing of the preset refresh timer of judgement, if, then carry out subsequent step 202, otherwise continue to carry out this step 201, wait for till the timing arrival of refresh timer.
In the present embodiment; Only create a node file in the Nonvolatile memory devices in equipment; When the timing of each refresh timer arrives; The expection node that obtains is write in this node file, and the expection nodal information of expection node identical in the file is merged, and upgrade the expiration time etc. of the nodal information of identical expection node.But the efficient of aforesaid way is lower, possibly take more processor resource, in order to obtain and preserve the expection node fast, reduces the loss that nodal information does not cause full when cutting off the power supply, and present embodiment improves the process of in the node file, preserving the expection node.Particularly; In the present embodiment; When the first timing of refresh timer arrives; Create a node file earlier in the Nonvolatile memory devices in equipment, i.e. the file of called after exception.txt can write direct the expection node that gets access in this node file in the cycle of first refresh timer.When the non-first timing of refresh timer arrives, then create a new node file in the Nonvolatile memory devices in equipment, i.e. order is the file of exception.txt.new.
Step 203, whether the equipment performance of judgment device reaches preset performance requirement, if then execution in step 204, otherwise execution in step 205.
After having created new node file, whether current device performance that can first judgment device reaches preset performance requirement, if then execution in step 204, otherwise execution in step 205.
In the present embodiment; Consider under the very many situation of number of nodes; Whole nodes of single treatment and written document are very big to the overall performance influence; If this moment, the equipment performance of equipment can reach preset performance requirement, then can obtain the corresponding expection node of control flows once in the internal memory of slave unit.
If the equipment performance of equipment does not reach preset performance requirement, then need in the cycle of a refresh timer, the expection node that control flows is corresponding be handled in batches, once obtain a certain amount of expection node.Can preestablish one according to actual conditions here and write timer; This timing that writes timer can be 100ms; Promptly every separated 100ms obtains a certain amount of expection node, accomplishes the operation of obtaining of all expection nodes through several timings that write timer.
Behind the acquisition process of the expection node in the cycle of accomplishing a refresh timer; The expection nodal information that the expection node that gets access to is corresponding is kept among the new node file exception.txt.new; And the node file exception.txt of deletion establishment last time; With new node file exception.txt.new RNTO exception.txt, and return execution in step 201, till device powers down.Even equipment does not cut off the power supply, and then returns execution in step 201, if device powers down is just carried out subsequent step 207.Behind whole expection nodes of finishing dealing with, can write the sign word string of completion in last column of node file, like " Done ", close this node file again.When in a node file, writing the expection node, can write down current system time earlier at first row of node file.
Particularly, the node structure in the node file can be set according to actual conditions, is the node structure example in the node file like following table 1:
Node structure example in the table 1 node file
| Title | Shared bit number |
| Node type (Node type) | 8 |
| Use (Application) | 16 |
| Protocol type (Protocol type) | 1 |
| Source IP (Source IP) | 32 |
| Source port (Source PORT) | 16 |
| Purpose IP (Destination IP) | 32 |
| Destination interface (Destination PORT) | 16 |
| Time (Time) | 16 |
| Reserved field (Reserved) | 7 |
Wherein, Node type is consistent with the node type definition that application identification is adopted, if need, its shared figure place can be expanded as required; Application is used to represent the application type of node correspondence, specifically can be subdivided into the concrete operations type, like the data flow of ftp utility, control flows or electric donkey file in download, the electric donkey upload file etc. of ftp utility; Protocol type is a protocol type, as adopts 0 expression transmission control protocol (Transfer Control Protocol; Hereinafter to be referred as: data flow TCP), adopt 1 expression User Datagram Protocol (User Datagram Protocol; Hereinafter to be referred as: data flow TCP); Source IP is the source IP of the data flow of node representative; Source PORT is the source port of the data flow of node representative; Destination IP is the purpose IP of the data flow of node representative; Destination PORT is the destination interface of the data flow of node representative; Time is the time-out time of node, when its value is 0, representes to delete this node, and unit is second.The node here is specially the expection node.
After normal or abnormal power-down powers on again when equipment; Can from the node file, obtain the wherein node holding time of record earlier, whether the time difference of decision node holding time and current time surpasses preset node threshold value effective time, if; Process ends then, otherwise execution in step 208.In the present embodiment, for differentiation equipment powers on very soon, descend situation about powering on again behind the electricity for a long time after changing power module or abnormal power-down with equipment; Present embodiment is set node threshold value effective time; As 3 minutes, from the node file first the row obtain record the node holding time, for example on March 9th, 2012 the 09:57 branch; If then equipment just plays machine on March 9th, 2012 after the 10:00; Then the time difference of node holding time and current time has surpassed preset node threshold value effective time, and can think that the expection node in the node file all lost efficacy this moment, again its words that import internal memory is just wasted internal memory even is caused erroneous judgement; Therefore no longer carry out the follow-up step that reads the expection nodal information, and process ends.
If node holding time of writing down in the node file and the time difference of current time do not surpass preset node threshold value effective time; Show that then the expection node is still effective; From the node file, read the expection nodal information; And according to expecting that nodal information generates the expection node in said internal memory, the node that the calling application identification module provides inserts interface, and the expection node that generates is inserted in the internal memory.In this step, can search the exception.txt.new file earlier, search the exception.txt file again if can not find, therefrom to read the expection nodal information.
After from the node file, getting access to the expection node, according to node holding time and preset node threshold value effective time, calculate and respectively expect the expiration time of node, when the expiration time of expection node arrived, this expected node expire.
Present embodiment is monitored the expiration time of expection node, judges when the expiration time of expection node arrives whether get access to this expection node corresponding data flow, if then execution in step 211, otherwise execution in step 212.
Step 211 is discerned the expection node corresponding data flow that gets access to according to the expection node, and is returned execution in step 210.
If when the expiration time of expection node arrives, got access to this expection node corresponding data flow, then the data flow that gets access to is carried out data flow identification according to this expection node, promptly identify data flow and belong to which application through the expection node.
Step 212 abandons said expection node, and process ends.
If when the expiration time of expection node arrives, got access to this expection node corresponding data flow, then show the current inefficacy out of date of this expection node, then abandon this expection node.
Present embodiment provides a kind of data flow recognition methods; When equipment work, regularly from internal memory, obtain the corresponding expection node of control flows; And will expect that the corresponding expection nodal information of node is kept in the node file, after device powers down powers on again, reads the expection nodal information from the node file; And according to expecting that nodal information generates the expection node in said internal memory, discern data stream according to the expection node that generates; Present embodiment can be after device powers down powers on again, and recognition data stream can reduce the consumption to equipment performance simultaneously greatly accurately and efficiently.
One of ordinary skill in the art will appreciate that: all or part of step that realizes above-mentioned each method embodiment can be accomplished through the relevant hardware of program command.Aforesaid program can be stored in the computer read/write memory medium.This program the step that comprises above-mentioned each method embodiment when carrying out; And aforesaid storage medium comprises: various media that can be program code stored such as ROM, RAM, magnetic disc or CD.
Fig. 3 is the structural representation of data flow recognition device embodiment one of the present invention, and as shown in Figure 3, present embodiment provides a kind of data flow recognition device, can specifically carry out each step among the said method embodiment one, repeats no more here.The data flow recognition device that present embodiment provides can specifically comprise preserves module 301, read module 302 and identification module 303.Wherein, Preserving module 301 is used for when equipment work; According to the preset refresh cycle, from the internal memory of said equipment, regularly obtain the corresponding expection node of control flows, the expection nodal information that said expection node is corresponding is kept in the node file of the Nonvolatile memory devices in the equipment.Read module 302 is used for after said equipment restarts, and from said node file, reads the expection nodal information, and in said internal memory, generates the expection node according to said expection nodal information.Identification module 303 is used for according to the expection node that generates data stream being discerned.
Fig. 4 is the structural representation of data flow recognition device embodiment two of the present invention, and as shown in Figure 4, present embodiment provides a kind of data flow recognition device, can specifically carry out each step among the said method embodiment two, repeats no more here.The data flow recognition device that present embodiment provides is preserved module 301 and can specifically be comprised establishment unit 311, acquiring unit 321 and preserve unit 331 on above-mentioned basis shown in Figure 3.Wherein, create unit 311 and be used for when equipment work, when the first timing of preset refresh cycle arrives, create a node file in the Nonvolatile memory devices in equipment; Perhaps, when each non-first timing of preset refresh cycle arrives, create a new node file in the Nonvolatile memory devices in equipment.Acquiring unit 321 is used for obtaining the corresponding expection node of control flows from the internal memory of said equipment.Preserve unit 331 and be used for the said node file that the expection nodal information that said expection node is corresponding is kept at establishment when the first timing of said refresh cycle arrives; Perhaps, the expection nodal information that said expection node is corresponding is kept in the said new node file, and the node file of deletion establishment last time.
Particularly, acquiring unit 321 specifically is used for if the equipment performance of said equipment does not reach preset performance requirement, then according to preset write cycle, from the internal memory of said equipment, obtains the corresponding expection node of control flows in batch; Perhaps, if the equipment performance of said equipment reaches preset performance requirement, then obtain the corresponding expection node of control flows in the internal memory of slave unit once.
Further, the data flow recognition device that provides of present embodiment can also comprise logging modle 304 and read control module 305.Logging modle 304 is used for when the said expection nodal information that said expection node is corresponding is kept in the node file of Nonvolatile memory devices of equipment, the record node holding time in the node file.Reading control module 305 is used for after said device powers down powers on again; If node holding time of writing down in the said node file and the time difference of current time surpass preset node threshold value effective time, then control read module 302 and do not carry out the said step that from said node file, reads the expection nodal information; Perhaps, if node holding time of writing down in the said node file and the time difference of current time are no more than preset node threshold value effective time, then control read module 302 and carry out the said step that from said node file, reads the expection nodal information.
Further, the identification module in the present embodiment 303 can specifically comprise computing unit 313 and recognition unit 323.Wherein, computing unit 313 is used for according to the said expiration time of respectively expecting node of node holding time and said node threshold calculations effective time.Recognition unit 323 is used for then abandoning said expection node if when the expiration time of expection node arrives, do not get access to said expection node corresponding data flow; Perhaps, if before the expiration time of expection node arrives, get access to said expection node corresponding data flow, then the said expection node corresponding data flow that gets access to is discerned according to said expection node.
Present embodiment provides a kind of data flow recognition device; When equipment work, regularly from internal memory, obtain the corresponding expection node of control flows; And will expect that the corresponding expection nodal information of node is kept in the node file, after restarting, reads the expection nodal information from the node file; And according to expecting that nodal information generates the expection node in said internal memory, discern data stream according to the expection node that generates; Present embodiment can be after equipment restarts, and recognition data stream can reduce the consumption to equipment performance simultaneously greatly accurately and efficiently.
Present embodiment also provides a kind of behavior management equipment, can specifically comprise Nonvolatile memory devices, internal memory and above-mentioned Fig. 3 or data flow recognition device shown in Figure 4.
What should explain at last is: above each embodiment is only in order to explaining technical scheme of the present invention, but not to its restriction; Although the present invention has been carried out detailed explanation with reference to aforementioned each embodiment; Those of ordinary skill in the art is to be understood that: it still can be made amendment to the technical scheme that aforementioned each embodiment put down in writing, perhaps to wherein part or all technical characteristic are equal to replacement; And these are revised or replacement, do not make the scope of the essence disengaging various embodiments of the present invention technical scheme of relevant art scheme.
Claims (11)
1. a data flow recognition methods is characterized in that, comprising:
When equipment work, according to the preset refresh cycle, from the internal memory of said equipment, regularly obtain the corresponding expection node of control flows, the expection nodal information that said expection node is corresponding is kept in the node file of the Nonvolatile memory devices in the said equipment;
After said equipment restarts, from said node file, read the expection nodal information, and in said internal memory, generate the expection node according to said expection nodal information;
According to the expection node that generates data stream is discerned.
2. method according to claim 1; It is characterized in that; Said according to the preset refresh cycle; From the internal memory of said equipment, regularly obtain the corresponding expection node of control flows, the expection nodal information that said expection node is corresponding is kept in the node file of the Nonvolatile memory devices in the said equipment and comprises:
When the first timing of preset refresh cycle arrives; Create a node file in the Nonvolatile memory devices in said equipment; From the internal memory of said equipment, obtain the corresponding expection node of control flows, the expection nodal information that said expection node is corresponding is kept in the said node file;
When each non-first timing of preset refresh cycle arrives; Create a new node file in the Nonvolatile memory devices in said equipment; From the internal memory of said equipment, obtain the corresponding expection node of control flows; The expection nodal information that said expection node is corresponding is kept in the said new node file, and the node file of deletion establishment last time.
3. method according to claim 2 is characterized in that, the said corresponding expection node of control flows that from the internal memory of said equipment, obtains comprises:
If the equipment performance of said equipment does not reach preset performance requirement,, from the internal memory of said equipment, obtain the corresponding expection node of control flows in batch then according to preset write cycle;
If the equipment performance of said equipment reaches preset performance requirement, then obtain the corresponding expection node of control flows in the internal memory of slave unit once.
4. according to each described method of claim 1-3; It is characterized in that; When the said expection nodal information that said expection node is corresponding is kept in the node file of the Nonvolatile memory devices in the equipment, also comprise: the record node holding time in the node file;
After said equipment restarts, said from said node file, read the expection nodal information before, also comprise:
If the time difference of said node holding time and current time surpasses preset node threshold value effective time, then do not carry out the said step that from said node file, reads the expection nodal information;
If the time difference of said node holding time and current time is no more than preset node threshold value effective time, then carry out the said step that from said node file, reads the expection nodal information.
5. method according to claim 4 is characterized in that, said data stream identification according to the expection node that generates comprises:
According to the said expiration time of respectively expecting node of said node holding time and said node threshold calculations effective time;
If when the expiration time of expection node arrives, do not get access to said expection node corresponding data flow, then abandon said expection node;
If before the expiration time of expection node arrives, get access to said expection node corresponding data flow, then the said expection node corresponding data flow that gets access to discerned according to said expection node.
6. a data flow recognition device is characterized in that, comprising:
Preserve module; Be used for when equipment work; According to the preset refresh cycle, from the internal memory of said equipment, regularly obtain the corresponding expection node of control flows, the expection nodal information that said expection node is corresponding is kept in the node file of the Nonvolatile memory devices in the said equipment;
Read module is used for after said equipment restarts, and from said node file, reads the expection nodal information, and in said internal memory, generates the expection node according to said expection nodal information;
Identification module is used for according to the expection node that generates data stream being discerned.
7. device according to claim 6 is characterized in that, said preservation module comprises:
Create the unit, be used for when equipment work, when the first timing of preset refresh cycle arrives, create a node file in the Nonvolatile memory devices in equipment; Perhaps, when each non-first timing of preset refresh cycle arrives, create a new node file in the Nonvolatile memory devices in equipment;
Acquiring unit is used for obtaining the corresponding expection node of control flows from the internal memory of said equipment;
Preserve the unit, be used for the expection nodal information that said expection node is corresponding and be kept at the said node file of when the first timing of said refresh cycle arrives, creating; Perhaps, the expection nodal information that said expection node is corresponding is kept in the said new node file, and the node file of deletion establishment last time.
8. device according to claim 7; It is characterized in that; Said acquiring unit specifically is used for if the equipment performance of said equipment does not reach preset performance requirement, then according to preset write cycle, from the internal memory of said equipment, obtains the corresponding expection node of control flows in batch; Perhaps, if the equipment performance of said equipment reaches preset performance requirement, then obtain the corresponding expection node of control flows in the internal memory of slave unit once.
9. according to each described device among the claim 6-8, it is characterized in that, also comprise:
Logging modle is used for when the said expection nodal information that said expection node is corresponding is kept in the node file of Nonvolatile memory devices of equipment the record node holding time in the node file;
Read control module; Be used for after said equipment restarts; If the time difference of said node holding time and current time surpasses preset node threshold value effective time, then control said read module and do not carry out the said step that from said node file, reads the expection nodal information; Perhaps, if the time difference of said node holding time and current time is no more than preset node threshold value effective time, then controls said read module and carry out the said step that from said node file, reads the expection nodal information.
10. device according to claim 9 is characterized in that, said identification module comprises:
Computing unit is used for according to the said expiration time of respectively expecting node of said node holding time and said node threshold calculations effective time;
Recognition unit is used for then abandoning said expection node if when the expiration time of expection node arrives, do not get access to said expection node corresponding data flow; Perhaps, if before the expiration time of expection node arrives, get access to said expection node corresponding data flow, then the said expection node corresponding data flow that gets access to is discerned according to said expection node.
11. a behavior management equipment is characterized in that, comprises each described data flow recognition device among Nonvolatile memory devices, internal memory and the claim 6-10.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2012102225072A CN102752297A (en) | 2012-06-28 | 2012-06-28 | Data stream identification method and device and behavior management device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN2012102225072A CN102752297A (en) | 2012-06-28 | 2012-06-28 | Data stream identification method and device and behavior management device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN102752297A true CN102752297A (en) | 2012-10-24 |
Family
ID=47032197
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN2012102225072A Pending CN102752297A (en) | 2012-06-28 | 2012-06-28 | Data stream identification method and device and behavior management device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102752297A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103036648A (en) * | 2012-12-13 | 2013-04-10 | 福建星网锐捷网络有限公司 | Control and provisioning of wireless access point (CAPWAP) message processing method and processing device |
| CN106899453A (en) * | 2017-03-02 | 2017-06-27 | 北京星网锐捷网络技术有限公司 | The detection method and device of power supply adaptor failure |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1427646A (en) * | 2001-12-21 | 2003-07-02 | 日本电气株式会社 | Mobile phone, data protecting method and program thereof |
| CN101707729A (en) * | 2009-11-30 | 2010-05-12 | 中兴通讯股份有限公司 | System and method for realizing automatic backup and recovery of network node data |
-
2012
- 2012-06-28 CN CN2012102225072A patent/CN102752297A/en active Pending
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1427646A (en) * | 2001-12-21 | 2003-07-02 | 日本电气株式会社 | Mobile phone, data protecting method and program thereof |
| CN101707729A (en) * | 2009-11-30 | 2010-05-12 | 中兴通讯股份有限公司 | System and method for realizing automatic backup and recovery of network node data |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103036648A (en) * | 2012-12-13 | 2013-04-10 | 福建星网锐捷网络有限公司 | Control and provisioning of wireless access point (CAPWAP) message processing method and processing device |
| CN103036648B (en) * | 2012-12-13 | 2016-01-27 | 福建星网锐捷网络有限公司 | A kind of CAPWAP message processing method and device |
| CN106899453A (en) * | 2017-03-02 | 2017-06-27 | 北京星网锐捷网络技术有限公司 | The detection method and device of power supply adaptor failure |
| CN106899453B (en) * | 2017-03-02 | 2020-04-24 | 北京星网锐捷网络技术有限公司 | Method and device for detecting power adapter fault |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| RU2009125523A (en) | METHOD AND DEVICE FOR REPLACING THE DEVICE ON THE NETWORK | |
| CN109857239B (en) | Storage control method and device | |
| CN104969192A (en) | Selecting a backup type based on changed data | |
| US20170277439A1 (en) | Techniques for Path Optimization in Storage Networks | |
| CN101937376A (en) | Data management method and data storage device | |
| CN104346264A (en) | System and method for processing system event logs | |
| US20160246512A1 (en) | Data Compression Method and Storage System | |
| CN101739311A (en) | Method and device for carrying out safety backup on memory data | |
| CN113724100B (en) | Power grid monitoring alarm message processing method of distributed cluster | |
| CN1996266A (en) | Multi-level buffering type memory system and method therefor | |
| US8060773B1 (en) | Systems and methods for managing sub-clusters within a multi-cluster computing system subsequent to a network-partition event | |
| CN107623703A (en) | Global transaction identifies GTID synchronous method, apparatus and system | |
| CN114168401A (en) | Log recording method and device and electronic equipment | |
| US20160139996A1 (en) | Methods for providing unified storage for backup and disaster recovery and devices thereof | |
| CN112925759A (en) | Data file processing method and device, storage medium and electronic device | |
| CN102752297A (en) | Data stream identification method and device and behavior management device | |
| CN115827780A (en) | Method, system and storage medium for realizing cross-network-area data synchronization by using scheduling algorithm based on isolation device | |
| CN114528029A (en) | Method, system, equipment and storage medium for realizing BIOS option setting | |
| CN109445988B (en) | Heterogeneous disaster recovery method, device, system, server and disaster recovery platform | |
| CN102622315B (en) | Method, device and system for controlling disc visiting | |
| CN104572339A (en) | Data backup restoring system and method based on distributed file system | |
| CN103092955B (en) | Checkpointed method, Apparatus and system | |
| CN114840488B (en) | Distributed storage method, system and storage medium based on super fusion structure | |
| CN105068760A (en) | Data storage method, data storage apparatus and storage device | |
| CN107436826B (en) | A kind of cold data processing method and terminal |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C02 | Deemed withdrawal of patent application after publication (patent law 2001) | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20121024 |