CN103117888B - Method and device and system for carrying out application performance evaluation through network event - Google Patents
Method and device and system for carrying out application performance evaluation through network event Download PDFInfo
- Publication number
- CN103117888B CN103117888B CN201310017072.2A CN201310017072A CN103117888B CN 103117888 B CN103117888 B CN 103117888B CN 201310017072 A CN201310017072 A CN 201310017072A CN 103117888 B CN103117888 B CN 103117888B
- Authority
- CN
- China
- Prior art keywords
- network
- network event
- application
- event
- health degree
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Medical Treatment And Welfare Office Work (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a method for carrying out application performance evaluation through a network event. The method comprises the steps of defining network interaction behaviors of different-level application to be a plurality of independent network events, and carrying out health degree grading of application related to the network events according to properties of the network events. The invention further provides a device and a system which are used for achieving the method and carrying out the application performance evaluation through the network event. According to the method, the device and the system for carrying out the application performance evaluation through the network event, network events existing in network background traffic can be analyzed, the fact that some key factors are ignored and then performance reduction of the whole application is caused is avoided.
Description
Technical field
The present invention relates to network field, particularly to a kind of method, dress carrying out application performance assessment by network event
Put and system.
Background technology
Shown in Figure 1, in prior art, a typical network application unit, generally comprise several nodes as follows：Hold
Carry main frame 1, the network exchange of application program（Route）Several parts such as equipment 2, client 3.If one node of any of which goes out
Existing performance bottleneck is likely to cause the decline of whole application performance it is therefore desirable to be monitored to application.
At present, mainly carry out performance evaluation using several monitor modes as follows：
1st, pass through the protocol link such as SNMP, SSH on equipment, the running status of each network element is monitored, such as passes through
Snmp protocol obtains each equipment cpu busy percentage, memory usage.
2nd, by way of disposing some agent clients, analog subscriber actively access situation.
3rd, it is analyzed by the internal interface that application program itself provides, the performance such as being provided by oracle database
Parameter list, is monitored to the internal operation state of oracle.
4th, pass through to dispose flow analysis equipment, the traffic conditions in analysis network, thus judging the time delay of current application, weight
Pass, concurrent situations such as, such as by the software analysis network packet such as sniffer, wireshark.
In above monitor mode, the 1st kind of mode often can only monitor the running status of network element device, it can be found that network element
The application performance problems that equipment performance itself is not enough and causes；But the performance bottleneck that application program design reasons itself are caused is just
Cannot monitor.
2nd kind of mode can be with the access behavior of pseudo-terminal user, in agent client location itself and institute's mould
The behavior intended is when just performance bottleneck, being capable of correct feedback problem；But can't find problem in some cases,
As：Network environment residing for agent client is good, and when being just that network problem causes whole application performance bottleneck, this
The method of kind lost efficacy.
3rd kind of mode, it can be found that the not enough situation of the performance of application program design initiation itself, such as buffer queue are not
Enough, situations such as task queue is full；But the application performance bottleneck that network itself is caused cannot monitor.
4th kind of mode, it is right generally to be come with KPI indexs such as the network delay of statistics application, packet loss, the response times of main frame
The performance of application is judged, this mode can be good at judging the performance bottleneck that the related factor of application itself causes（As：
The response delay that host performance deficiency leads to increases, the network delay of host side to terminal can be good at carrying out situations such as excessive
Assessment）；But for the analysis deficiency of network event present in background traffic so that some key factors are ignored, thus leading to
Deviation in assessment to whole application performance, such as：When " collision " that occur in network increases, or one party sends " TCP
The sender of zero window event " then data adjust automatically may send window, and then automatically control transmission speed, entirely should lead to
Decline with performance.
To sum up, needing badly provides a kind of monitoring method of application performance, can be to network event present in network context flow
It is analyzed, it is to avoid the decline of whole application performance.
Content of the invention
Present invention is primarily targeted at offer is a kind of carries out the method for application performance assessment it is intended to solve by network event
Certainly in prior art, deficiency is analyzed so that some key factors are ignored for network event present in background traffic, thus
Lead to the technical problem that deviation occurs to the assessment of whole application performance.
In order to realize goal of the invention, the present invention provides a kind of method carrying out application performance assessment by network event, bag
Include following steps：
The network interaction behavior that different levels are applied is defined as network event independent one by one；
Property according to described network event carries out health degree scoring to its associated application.
Preferably, the described property according to described network event carries out health degree scoring inclusion to its associated application：
According to the frequency of network event, number of times or the different point value of evaluation of historical baseline setting；
Health degree scoring is carried out to the application associated by network event according to described point value of evaluation.
Preferably, the described network interaction behavior applying different levels is defined as network event bag independent one by one
Include：
Obtain the whole flows in network using shunting or spectroscopic modes；
Described network interaction behavior is defined as by described network event according to procotol.
The present invention also provides a kind of device carrying out application performance assessment by network event, and it includes：
Network event definition module, the network interaction behavior that different levels are applied is defined as network thing independent one by one
Part；
Grading module, carries out health degree scoring for the property according to described network event to its associated application.
Preferably, institute's scoring module specifically for：
According to the frequency of network event, number of times or the different point value of evaluation of historical baseline setting；
Health degree scoring is carried out to the application associated by network event according to described point value of evaluation.
Preferably, described network event definition module specifically for：
Obtain the whole flows in network using shunting or spectroscopic modes；
Described network interaction behavior is defined as by described network event according to procotol.
The present invention separately provides a kind of system carrying out application performance assessment by network event, including network application unit,
It also includes carrying out the device of application performance assessment by network event, and this device includes：
Network event definition module, the network interaction behavior that different levels are applied is defined as network thing independent one by one
Part；
Grading module, carries out health degree scoring for the property according to described network event to its associated application.
The present invention is defined as network event independent one by one by the network interaction behavior applying different levels, and root
Property according to network event carries out health degree scoring to its associated application, can be to network thing present in network context flow
Part is analyzed, it is to avoid some key factors are ignored and lead to the decline of whole application performance.
Brief description
Fig. 1 is the structural representation of network application in prior art；
Fig. 2 is the flow chart of steps of the method carrying out application performance assessment in one embodiment of the invention by network event；
Fig. 3 is the schematic diagram of network event code of points in one embodiment of the invention；
Fig. 4 is the schematic diagram of network event code of points in one embodiment of the invention；
Fig. 5 is the structural representation of the system carrying out application performance assessment in one embodiment of the invention by network event；
Fig. 6 is to carry out health according to preset code of points to the application associated by network event in one embodiment of the invention
The flow chart of steps of degree scoring；
Fig. 7 is that the network interaction behavior in one embodiment of the invention applied different levels is defined as net independent one by one
The application schematic diagram of network event；
Fig. 8 is health degree scoring effect diagram in one embodiment of the invention；
Fig. 9 is the structural representation of the device carrying out application performance assessment in one embodiment of the invention by network event.
The realization of the object of the invention, functional characteristics and advantage will be described further in conjunction with the embodiments referring to the drawings.
Specific embodiment
It should be appreciated that specific embodiment described herein is used only for explaining the present invention, it is not intended to limit the present invention.
With reference to Fig. 2, it is the method flow diagram carrying out application performance assessment in one embodiment of the invention by network event.This
In inventive embodiments, comprised the following steps by the method that network event carries out application performance assessment：
Step S10, the network interaction behavior that different levels are applied is defined as network event independent one by one；The present invention
In embodiment, can obtain whole in current network using modes such as shunting or light splitting between each node of NE first
Flow, and import in an analytical equipment, each data interaction behavior is defined as by network event by this analytical equipment, for example
The behavior acies such as TCP connection failure, unreachable, the half-open link of tcp of icmp network.Referring to table 1 below, in the embodiment of the present invention, net
Network event includes but is not limited to the following event：
Table 1
Step S20, the property according to described network event carries out health degree scoring to its associated application.Specifically,
In the embodiment of the present invention, can be handed over according to the importance of network event and to network using the code of points shown in Fig. 3 or Fig. 4
The mutually different score value of the impact setting of process.Then, when network event occurs, deducted points according to corresponding score value, with to net
Application associated by network event is scored, the different health degree of the corresponding application of different appraisal result.Specifically application is strong
Relation between Kang Du and its appraisal result and scoring process can be found in shown in Fig. 8.
The present invention is monitored to all flows in network, and extracts critical eventss therein and be analyzed, can be to net
Present in network background traffic, network event is analyzed, it is to avoid some key factors are ignored and lead to whole application performance
Decline.
Referring to Fig. 6, in the above embodiment of the present invention, step S20 may include：
Step S21, according to the frequency of network event, number of times or the different point value of evaluation of historical baseline setting；For example, can set
Put full marks and be 100 points, then the factor such as frequency according to network event arranges score value to each network event.Referring to Fig. 3 or Fig. 4,
For the little event of some impacts, even if the frequency that event occurs is higher, generation repeatedly 1 point of button can be set, and for some
Affect larger event, even if the frequency that event occurs is relatively low, may also set up generation and once detain 1 point.
Step S22, carries out health degree scoring according to described point value of evaluation to the application associated by network event.Referring to Fig. 8
Shown, operation system health degree model can be set up previously according to score value-health degree, then when appearance impact in data exchange process
During the network event of data exchange process, according to default code of points（As shown in Figure 3 or Figure 4）To TCP connection failure, TCP
In transmitting procedure, the network event such as connection and the severity level with regard to system is deducted points, and obtains 95 points of comprehensive grading, now
Show corresponding operation system health degree, that is, the health degree applied further according to the model set up before.
In the embodiment of the present invention, step S10 may include：
Obtain the whole flows in network using shunting or spectroscopic modes；For example, can the node device of NE it
Between analytical equipment is set, then overall network stream between each node is obtained by the way of shunting or light splitting by this analytical equipment
Amount.
Described network interaction behavior is defined as by described network event according to procotol.For example, with reference to shown in Fig. 7, this
In inventive embodiments, the procotol according to each application layer is different, using by layer monitor mode, to the transport layer of composition network, answers
It is monitored with the data flow alternation of bed such as layer.
The present invention also provides a kind of device carrying out application performance assessment by network event, and this device is applied to network system
In system, in order to realize said method.Shown in Figure 9, in one embodiment of the invention, this device may include：
Network event definition module 10, the network interaction behavior for applying different levels is defined as independent one by one
Network event；In the embodiment of the present invention, network event definition module 10 can adopt shunting between each node of NE or divide
The modes such as light, obtain the whole flows in current network, the network interaction behavior that then procotol according to application will be applied
It is defined as network event independent one by one.Network event refers to occur a series of interactive actions in a network, and such as TCP is even
Connect the actions such as failure, unreachable, the half-open link of tcp of icmp network, specifically can be found in the content in front table 1.
Grading module 20, carries out health degree scoring for the property according to described network event to its associated application.
Specifically, in the embodiment of the present invention, can be using the code of points shown in Fig. 3 or Fig. 4, the importance according to network event is arranged not
Same score value.Then when network event occurs, deducted points according to corresponding score value, with to the application corresponding to network event
Scored, the different health degree of the corresponding application of different appraisal result.The health degree of specific application can with its scoring process
Shown in Figure 8.
Preferably, institute's scoring module 20 specifically for：
According to the frequency of event, number of times or the different point value of evaluation of historical baseline setting；
Health degree scoring is carried out to the application associated by network event according to described point value of evaluation.Referring to Fig. 3 or Fig. 4, right
In the little event of some impacts, even if the frequency that event occurs is higher, grading module 20 can arrange generation repeatedly 1 point of button, and
For the event that some impacts are larger, even if the frequency that event occurs is relatively low, may also set up generation and once detain 1 point.
In one embodiment of the invention, network event definition module 10 can be used for：
Obtain the whole flows in network using shunting or spectroscopic modes；
Described network interaction behavior is defined as by described network event according to procotol.
For example, with reference to Fig. 7, in the embodiment of the present invention, network event definition module 10 adopts by layer monitor mode, to composition
The data flow alternation of bed such as the transport layer of network, application layer is monitored, and the network event in data exchange process is counted
Analysis, sets up the baseline of network event generation.
In the embodiment of the present invention, the device carrying out application performance assessment above by network event can be previous embodiment
In analytical equipment, shown in Figure 5, it can be between each data flow alternation of bed（Such as A, B, C, D, E）Any point or
Multiple points are using shunting（Or light splitting）Etc. mode, obtain the whole flows in current network, and statistical analysiss are carried out to it.This leads to
Cross that network event carries out the work process of device of application performance assessment and principle refers to Fig. 1 to Fig. 8 and its corresponding method
Embodiment, contains whole features of preceding method embodiment.
The present invention also provides a kind of system carrying out application performance assessment by network event, including network application unit,
Also include carrying out the device of application performance assessment mentioned by network event, its concrete structure can be found in shown in Fig. 5.In the present invention
Its function of device of application performance assessment is carried out by network event and implementation can be found in aforementioned Fig. 1 to Fig. 9 and its correspondence
Embodiment, be not described in detail here.Due to having the device carrying out application performance assessment mentioned by network event, the present invention is real
Apply the system in example network event present in network context flow can be analyzed, it is to avoid some key factors be ignored and
Lead to the decline of whole application performance.
These are only the preferred embodiments of the present invention, not thereby limit the present invention the scope of the claims, every using this
Equivalent structure or equivalent flow conversion that bright description and accompanying drawing content are made, or directly or indirectly it is used in other related skills
Art field, is included within the scope of the present invention.
Claims (3)
1. a kind of the method for application performance assessment is carried out it is characterised in that comprising the following steps by network event：
Using shunting or spectroscopic modes between each node of NE, obtain the whole flows in current network, and import to
In one analytical equipment, the network interaction behavior that different levels are applied is defined as by network independent one by one by this analytical equipment
Event；
Property according to described network event carries out health degree scoring to its associated application；The described property according to network event
Verify its associated application carry out health degree scoring include：
According to the frequency of network event, number of times or the different point value of evaluation of historical baseline setting；
When network event occurs, deducted points according to corresponding score value, to score to the application associated by network event,
The different health degree of the corresponding application of different appraisal result.
2. a kind of by network event carry out application performance assessment device it is characterised in that include：
Network event definition module, using shunting or spectroscopic modes between each node of NE, obtains in current network
Then the network interaction behavior that different levels are applied is defined as independent one by one by all flows according to the procotol of application
Network event；
Grading module, carries out health degree scoring for the property according to described network event to its associated application；Institute's commentary
Sub-module specifically for：
According to the frequency of network event, number of times or the different point value of evaluation of historical baseline setting；
When network event occurs, deducted points according to corresponding score value, to score to the application associated by network event,
The different health degree of the corresponding application of different appraisal result.
3. a kind of system carrying out application performance assessment by network event, including network application unit it is characterised in that also wrapping
Include the device carrying out application performance assessment by network event, this device includes：
Network event definition module, using shunting or spectroscopic modes between each node of NE, obtains in current network
Then the network interaction behavior that different levels are applied is defined as independent one by one by all flows according to the procotol of application
Network event；
Grading module, carries out health degree scoring for the property according to described network event to its associated application；Institute's commentary
Sub-module specifically for：
According to the frequency of network event, number of times or the different point value of evaluation of historical baseline setting；
When network event occurs, deducted points according to corresponding score value, to score to the application associated by network event,
The different health degree of the corresponding application of different appraisal result.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310017072.2A CN103117888B (en) | 2013-01-17 | 2013-01-17 | Method and device and system for carrying out application performance evaluation through network event |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310017072.2A CN103117888B (en) | 2013-01-17 | 2013-01-17 | Method and device and system for carrying out application performance evaluation through network event |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103117888A CN103117888A (en) | 2013-05-22 |
| CN103117888B true CN103117888B (en) | 2017-02-08 |
Family
ID=48416166
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310017072.2A Active CN103117888B (en) | 2013-01-17 | 2013-01-17 | Method and device and system for carrying out application performance evaluation through network event |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103117888B (en) |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105512009B (en) * | 2014-09-22 | 2019-01-08 | 腾讯科技（深圳）有限公司 | The detection method and device of application program running state |
| CN108494625A (en) * | 2018-03-21 | 2018-09-04 | 上海精鲲计算机科技有限公司 | A kind of analysis system on network performance evaluation |
| CN111865639B (en) * | 2019-04-30 | 2023-07-14 | 深信服科技股份有限公司 | Method and device for collecting information of snmp service equipment and electronic equipment |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101882997A (en) * | 2009-05-04 | 2010-11-10 | 上海庆青网络信息科技有限公司 | Network safety evaluation method based on NBA |
| CN102025733A (en) * | 2010-12-07 | 2011-04-20 | 南京邮电大学 | Health degree evaluation method based on cognitive network |
| CN102546292A (en) * | 2011-12-16 | 2012-07-04 | 深信服网络科技（深圳）有限公司 | Method and device for detecting healthy status of server application |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20120064862A (en) * | 2010-12-10 | 2012-06-20 | 주식회사 케이티 | Method and system for the performance evaluation of next generation network |
-
2013
- 2013-01-17 CN CN201310017072.2A patent/CN103117888B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101882997A (en) * | 2009-05-04 | 2010-11-10 | 上海庆青网络信息科技有限公司 | Network safety evaluation method based on NBA |
| CN102025733A (en) * | 2010-12-07 | 2011-04-20 | 南京邮电大学 | Health degree evaluation method based on cognitive network |
| CN102546292A (en) * | 2011-12-16 | 2012-07-04 | 深信服网络科技（深圳）有限公司 | Method and device for detecting healthy status of server application |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103117888A (en) | 2013-05-22 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Schuchard et al. | Losing control of the internet: using the data plane to attack the control plane | |
| DE602005005700T2 (en) | Method for monitoring the quality of a real-time communication | |
| Hariri et al. | Impact analysis of faults and attacks in large-scale networks | |
| US20100008248A1 (en) | Network tester for real-time measuring of tcp throughput | |
| CN106357685A (en) | Method and device for defending distributed denial of service attack | |
| CN101145977B (en) | A QoS monitoring system and its measuring method of IP data network | |
| CN103117888B (en) | Method and device and system for carrying out application performance evaluation through network event | |
| CN105577670B (en) | A kind of warning system hitting library attack | |
| DE102020124426A1 (en) | Methods, systems and computer readable media for threat simulation and recommendations for threat reduction | |
| CN107872503B (en) | Firewall session number monitoring method and device | |
| Tao et al. | Unraveling the RTT-fairness Problem for BBR: A queueing model | |
| CN112073128A (en) | Communication equipment performance test method and device | |
| Daniel et al. | An interarrival delay jitter model using multistructure network delay characteristics for packet networks | |
| Phung et al. | An open dataset for beyond-5g data-driven network automation experiments | |
| US8068584B2 (en) | System and method for selecting a profile for a digital subscriber line | |
| US7844443B2 (en) | Network subscriber experience modeling | |
| Rewaskar et al. | A passive state-machine approach for accurate analysis of TCP out-of-sequence segments | |
| Wisitpongphan et al. | Effect of TCP on self-similarity of network traffic | |
| Papadopoulos et al. | Performance preserving topological downscaling of internet-like networks | |
| EP3091724A1 (en) | Method and device for determining the stability of a digital subscriber line | |
| Xiong | An Analysis of the Queueing Delays and Throughput of the TCP BBR Congestion Control in NS-3 | |
| Hershey et al. | Monitoring real-time applications events in net-centric enterprise systems to ensure high quality of experience | |
| Mao et al. | The statistics and analysis of packet traffic distribution characters in access network based on NetMagic platform | |
| CN114363160B (en) | Network management method and device based on wide area network | |
| Schmidt et al. | A hybrid procedure for efficient link dimensioning |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20200615 Address after: Nanshan District Xueyuan Road in Shenzhen city of Guangdong province 518000 No. 1001 Nanshan Chi Park building A1 layer Patentee after: SANGFOR TECHNOLOGIES Inc. Address before: 518000 Nanshan Science and Technology Pioneering service center, No. 1 Qilin Road, Guangdong, Shenzhen 418, 419, Patentee before: Shenxin network technology (Shenzhen) Co.,Ltd. |
|
| TR01 | Transfer of patent right |