CN103414596B - The method that all manufacturer Trap and processing are recognized based on simple management procotol - Google Patents
The method that all manufacturer Trap and processing are recognized based on simple management procotol Download PDFInfo
- Publication number
- CN103414596B CN103414596B CN201310383380.7A CN201310383380A CN103414596B CN 103414596 B CN103414596 B CN 103414596B CN 201310383380 A CN201310383380 A CN 201310383380A CN 103414596 B CN103414596 B CN 103414596B
- Authority
- CN
- China
- Prior art keywords
- trap
- alarm
- storage
- original messages
- messages
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000012545 processing Methods 0.000 title claims abstract description 41
- 238000000034 method Methods 0.000 title claims abstract description 39
- 238000003860 storage Methods 0.000 claims abstract description 113
- 238000003780 insertion Methods 0.000 claims description 5
- 230000037431 insertion Effects 0.000 claims description 5
- 238000004458 analytical method Methods 0.000 claims description 2
- 241000208340 Araliaceae Species 0.000 claims 1
- 235000005035 Panax pseudoginseng ssp. pseudoginseng Nutrition 0.000 claims 1
- 235000003140 Panax quinquefolius Nutrition 0.000 claims 1
- 235000008434 ginseng Nutrition 0.000 claims 1
- 230000003139 buffering effect Effects 0.000 abstract description 2
- 238000005516 engineering process Methods 0.000 description 5
- 238000012986 modification Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 230000008901 benefit Effects 0.000 description 2
- 230000008859 change Effects 0.000 description 2
- 230000000694 effects Effects 0.000 description 2
- 230000008030 elimination Effects 0.000 description 2
- 238000003379 elimination reaction Methods 0.000 description 2
- 238000012423 maintenance Methods 0.000 description 2
- 230000007257 malfunction Effects 0.000 description 2
- 238000003672 processing method Methods 0.000 description 2
- 230000004075 alteration Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000012790 confirmation Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 235000013399 edible fruits Nutrition 0.000 description 1
- 230000008676 import Effects 0.000 description 1
- 238000007689 inspection Methods 0.000 description 1
- 230000014759 maintenance of location Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 230000009467 reduction Effects 0.000 description 1
- 239000002699 waste material Substances 0.000 description 1
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The present invention provides a kind of method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, and methods described comprises the following steps：Trap receivers open listening port, the Trap original message information that receiving device is sent；Trap resolvers take out Trap original messages from buffering queue, and the Trap original messages received are parsed into user-defined warning information according to self-defined parsing template；Trap alarm processor carries out alarm in-stockroom operation to the warning information of successfully resolved.The method based on all manufacturer Trap of Simple Network Management Protocol identification and processing of the present invention is carried to be judged by the unique mark attribute column to Trap original messages, the parsing to the Trap of third party's vendor equipment is realized, the reception, parsing, storage of Trap original messages can be efficiently carried out.
Description
Technical field
The invention belongs to network communication technology field, and in particular to one kind is based on Simple Network Management Protocol（Simple
Network Management Protocol, SNMP）The method for recognizing all manufacturer Trap and processing.
Background technology
With continuing to develop for computer networking technology, equipment vendors are more and more.Want compatible all manufacturers well
Equipment become extremely difficult.How the discrimination one very big problem of Trap alarm is effectively improved.Trap messages
Effectively identification can greatly improve availability, performance, service quality, malfunction elimination of the network equipment etc., so as to help network
Administrative staff mitigate the burden of load-bearing.
What the Trap processing of the NMS of current each manufacturer exploitation was reported primarily directed to itself vendor equipment
Trap is alerted and by management information bank（Management Information Base, MIB）Import Trap and define work(
Can, third party manufacturer can not be supported substantially or the real meaning of Trap messages can not be effectively identified.Trap identification functions
It is mainly used in the quick identification alarm in the different model equipment such as carrier network, enterprise's school web.
In the prior art, the technology related to Trap identifying processings is concentrated mainly on the processing logic to known Trap.Shen
Please number Chinese patent for being 200810217071.1《A kind of trap processing methods based on Simple Network Management Protocol》It is main public
Open the network management software and receive the methods such as parsing, Error disposal after Trap messages to message.Application No.
200610160737.5 Chinese patent《A kind of Trap confirmation methods based on Simple Network Management Protocol》Disclosed Trap is true
In verifying method, SNMP agent adds the Trap keywords for whether needing to confirm, snmp management person in group's name of Trap message
Message inspection Trap is received whether comprising Trap keywords are confirmed, if it is, setting management information variate-value on SNMP.Application
Number be 201010591676.4 Chinese patent《A kind of method of the Trap processing based on SNMP》Disclosed Trap processing methods
In, to detect and send Trap message to SNMP webmasters after alarm event, position is occurred according to the alarm event carried in Trap,
SNMP webmasters are contrasted built-in warning information and the warning information that is carried in Trap message, and Trap is verified if consistent
Message effectively, and is alerted.
However, Trap recognizes that alarm function is very limited in existing webmaster, it is impossible to recognize the third-party network equipment, also
Which device interior component of possible None- identified sends the port shutdown or stopping inside Trap alarms, such as None- identified interchanger
Alarm sent from which port.For the Mib storehouses identification of importing, identification gets up very not directly perceived, and user can not be direct
Find out where out of joint equipment is.If installing a network management software for the product of each manufacturer, it can waste more
Many resources, usually management equipment is also required to check in multiple systems user, and limitation is very big.If each manufacturer customizes oneself
Privately owned Mib storehouses, identification versatility is a very big problem.
The content of the invention
The shortcoming of prior art, is assisted it is an object of the invention to provide one kind based on simple network management in view of the above
All manufacturer Trap of view identification and the method for processing, each parameter reported according to self-defined parsing masterplate to Trap original messages
Value carries out contrast judgement, so as to be alerted or cancelled the alarm reported, it is possible to self-defined warning content.
In order to achieve the above objects and other related objects, the present invention provides a kind of based on Simple Network Management Protocol identification institute
There is the method for manufacturer Trap and processing, wherein, the self-defined parsing template of a Trap original message is set, a Trap is set
Original message storage queue and a Trap alarm storage storage queue, methods described at least comprise the following steps：
The Trap original messages that step S1, the reception network equipment are reported, and the Trap original messages are loaded into Trap originals
In beginning packet storage queue；
Step S2, synchronously read Trap original messages from Trap original message storage queues, and by Trap original messages
Parameter with it is self-defined parsing template in parameter carry out contrast judgement；If the parameter of Trap original messages and self-defined parsing
Parameter matching in masterplate, then it is user-defined according to the Trap original messages of reading are parsed into according to self-defined parsing template
Warning information, and the warning information parsed is added in Trap alarm storage storage queues；
Step S3, by Trap warning information from Trap alarm storage storage queue in take out, judgement be cleared alarm or
Produce alarm；If cleared alarm then updates Trap alarm storage storage queues, if producing, alarm is then new to produce one
In alarm insertion Trap alarm storage storage queues.
According to the above-mentioned method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, wherein：Trap
Original message storage queue is fifo queue form.
According to the above-mentioned method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, wherein：It is described
Self-defined parsing template disappears including rule name, regular description, attribute type, particular type, enterprise Oid, alarm grade, alarm
Breath, unique mark attribute column, matching alarm conditions, cleared alarm condition.
According to the above-mentioned method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, wherein：Step
S1 and step S2 specifically include following steps：
Failure is issued NMS by step S101, the network equipment in Trap message forms；
Step S102, Trap messages are fitted into Trap original message storage queues；
Step S103, by Trap original message storage queues Trap original messages take out；
Set in step S104, the Trap original message information searching network equipments storehouse according to taking-up with the presence or absence of the network
Standby, if entering step S105 in the presence of if, otherwise directly terminating, Trap original messages are abandoned；
Step S105, the self-defined parsing template of acquisition, self-defined parsing template and the Trap original messages of reception are carried out
Matching, judges whether that Trap original messages can be parsed, step S106 is entered if it can parse；It can not parse and then enter step
S107；
Trap original messages are parsed into user-defined warning information by step S106, Trap resolver, will be parsed
Warning information add Trap alarm storage storage queue in；
Step S107, by Trap original messages be stored in Trap original message storage queues.
Further, according to the above-mentioned method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol,
Wherein：In step S101, the network equipment must support Simple Network Management Protocol, and the Trap server address of the network equipment is
Network management server address.
According to the above-mentioned method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, wherein：Step
Trap original messages are parsed in S2 to comprise the following steps：
Step S201, the unique mark attribute column of the Trap original messages of acquisition is carried out with self-defined parsing template parameter
Whether matching, each template of cycle criterion be can use, and step S202 is entered if available, using next self-defined if unavailable
Parse template and carry out matching step S201；
Step S202, Trap original messages information is matched with the cleared alarm condition of self-defined parsing template, such as
Fruit meets cleared alarm condition and then enters step S203, otherwise into step S204；
Step S203, is parsed into warning information, and be added into Trap alarm storage storage queues by Trap original messages
In, into step S205；
Step S204, if Trap original messages can not be matched with cleared alarm condition, judges whether matching alarm
Condition, enters if alarm conditions are matched such as step S203, if mismatching alarm conditions, is directly entered step S205；
Step S205, by Trap original messages be stored in Trap original message storage queues.
Further, according to the above-mentioned method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol,
Wherein：In step S202, Trap messages include version 1 and version 2 c/3, and for Trap versions 1, cleared alarm condition includes enterprise
Industry Oid, attribute type, particular type and multiple binding variables；For Trap version 2 c/3, cleared alarm condition only includes enterprise
Oid and multiple binding variables.
According to the above-mentioned method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, wherein：Step
S3 specifically includes following steps：
Step S301, by warning information from Trap alarm storage storage queue in take out；
Step S302, the warning information to taking-up judge, if being non-Trap alarms, without processing, if
It is Trap alarms, then into step S303；
Step S303, the warning information do not removed of lookup, and judge the warning information do not removed whether Trap alert into
In library storage queue, if there is in Trap alarm storage storage queues, then into step S304；If there is no Trap alarms
Be put in storage in storage queue, then into step S305；
Whether step S304, the alarm identifier checked in warning information are customized parsing template and resolve to cleared alarm,
Enter step S306 if cleared alarm is resolved to；If not cleared alarm is resolved to, then into step S307；
Whether step S305, the alarm identifier checked in warning information are customized parsing template and resolve to alarm, if
It is then to enter step S308；If not alarm is resolved to, then flow terminates；
Step S306, setting alarm clearance people and checkout time, and update current Trap alarm storage storage queues, stream
Journey terminates；
Step S307, alarm number of times is set, the last alarm time is updated, and updates current Trap and alert into stock
Queue is stored up, flow terminates；
Step S308, Trap alert storage storage queue in insertion warning information and Trap original messages unique mark
Attribute column, flow terminates.
Further, according to the above-mentioned method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol,
Wherein：In step S301, search what is do not removed by IP address, MAC Address, alarm grade, alarm type, unique mark attribute column
Warning information.
Further, according to the above-mentioned side that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol
Method, wherein：Wherein described unique mark attribute is classified as User Defined, and the different components for distinguishing same equipment may be deposited
Alarm.
As described above, the method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol of the present invention, tool
There is following beneficial effect：
（1）The present invention includes self-defined parsing template, and user is manually entered Rule of judgment and can recognize that any manufacturer
Trap messages, so that the availability of the network equipment, performance, service quality, malfunction elimination ability etc. are improved, reduction keeper's pipe
Manage the load-bearing burden of equipment alarm；
（2）Trap original messages, Trap warning information are cached in queue form, execution is seized by multithreading,
With stable, efficient advantage；
（3）The Trap message of third party manufacturer can be recognized, device interior is can recognize that（Such as port）The Trap that component is sent
Message, effectively reduces the maintenance difficulties and maintenance cost of network.
Brief description of the drawings
Fig. 1 is shown as the core of the method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol of the present invention
Heart flow chart；
Fig. 2 is shown as the flow chart that Trap is parsed in the present invention；
Fig. 3 is shown as the flow chart of Trap alarms storage in the present invention.
Embodiment
Illustrate embodiments of the present invention below by way of specific instantiation, those skilled in the art can be by this specification
Disclosed content understands other advantages and effect of the present invention easily.The present invention can also pass through specific realities different in addition
The mode of applying is embodied or practiced, the various details in this specification can also based on different viewpoints with application, without departing from
Various modifications or alterations are carried out under the spirit of the present invention.
It should be noted that the diagram provided in the present embodiment only illustrates the basic conception of the present invention in a schematic way,
Then only display is painted with relevant component in the present invention rather than according to component count, shape and the size during actual implementation in schema
System, it is actual when implementing, and kenel, quantity and the ratio of each component can be a kind of random change, and its assembly layout kenel also may be used
Can be increasingly complex.
The present invention's recognizes that the method for all manufacturer Trap and processing mainly passes through Trap based on Simple Network Management Protocol
The modules such as receiver, Trap resolvers, Trap alarm processor realize so that the reception of Trap original messages, to report
Text parsing, parse after Trap alarming processings the division of labor clearly, be obviously improved in the real-time of alarm.Wherein, Trap
Receiver opens listening port, the Trap original message information that receiving device is sent.Trap resolvers take out from buffering queue
Trap original messages, and the Trap original messages received are parsed into user-defined alarm letter according to self-defined parsing template
Breath.Trap alarm processor carries out alarm in-stockroom operation to the warning information of successfully resolved.Especially, the invention provides two
Storage queue and a kind of self-defined parsing template.Wherein, two storage queues are Trap original message storage queues respectively, another
Individual is Trap alarm storage storage queues.
With reference to table 1, the self-defined parsing template includes rule name, regular description, attribute type, particular type, enterprise
Oid, alarm grade, alarm information, unique mark attribute column, matching alarm conditions, cleared alarm condition etc..Carrying out at Trap
During reason, according to>、<、=、！=, include, not comprising etc. Rule of judgment, by the Trap original messages of reception and self-defined parsing template
In parameter contrasted, if meet it is self-defined parsing template condition if produce alarm or cleared alarm.Self-defined parsing mould
The condition of plate is all filled in by user according to equipment actual conditions.In the present invention, Trap messages include version 1 and version 2 c/3 two
Kind, self-defined parsing template is respectively processed to the Trap messages of two kinds of version.For in Trap versions 1, self-defined parsing
Template includes particular type, attribute type and Enterprise Object mark（Object identifier, Oid）；For Trap versions
Do not include particular type, attribute type in 2c/3, self-defined parsing masterplate, provide second in matching condition or cleared condition
TrapOid is set in binding variable.
Wherein, unique mark attribute column is by one or more of attribute type, particular type, binding variable condition group
Into for making user uniquely determine an alarm.By the Trap original messages newly received and the warning information be put in storage progress pair
Than the unique mark attribute according to defined in IP address, MAC Address and self-defined parsing template judges the Trap newly received
Original message whether there is in Trap alarm storage storage queues.
Wherein, matching alarm conditions are made up of attribute type, particular type, enterprise Oid and one or more binding variables.
Matching condition is contrasted with original Trap messages, and alarm is produced if matching condition is met.
Cleared alarm condition is made up of attribute type, particular type, enterprise Oid and one or more binding variables.Remove
Condition is contrasted with original Trap messages, the cleared alarm if cleared condition is met.
The self-defined parsing masterplate parameter declaration table of table 1
The main processing step of the method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol of the present invention
It is rapid as follows：
Trap receivers receive the Trap original messages that the network equipment is reported by multithreading, and are loaded into Trap
In original message storage queue；
Trap resolvers synchronously read Trap original messages by multithreading from Trap original message storage queues,
And by the message version of Trap original messages, binding variable, particular type, attribute type with it is self-defined parsing template in parameter
Carry out contrast judgement；If matched with the parameter in user-defined self-defined parsing masterplate, according to self-defined parsing template
Produce alarm or produce to remove and alerted, and the alarm of generation is added in Trap alarm storage storage queues.
Trap alarm processor is taken Trap warning information by multithreading from Trap alarm storage storage queues
Go out, then identical alarm and current alarm identifier are checked whether in Trap alerts storage storage queue, according to current
Alarm identifier judges to be cleared alarm or produces alarm；If cleared alarm then updates warning information storehouse；If producing
Alarm is then new to be produced in an alarm insertion warning information storehouse.
Specifically, refering to Fig. 1, the side of the invention that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol
The core procedure of method is as follows：
Step S101, the network equipment issue failure in Trap messages form the Trap receivers of NMS, net
Network equipment must support SNMP, and the Trap server address of Configuration network equipment is network management server address；
Step S102, Trap receiver is put into Trap messages in Trap original message storage queues；
The storage queue of step S103, Trap original message is fifo queue form, and Trap resolvers pass through multithreading
Mode takes out the Trap original messages in Trap original message storage queues；
Set in step S104, the Trap original message information searching network equipments storehouse according to taking-up with the presence or absence of the network
It is standby, it is eligible, enter step S105, otherwise directly terminate, Trap original messages are abandoned；
Step S105, the self-defined parsing template of acquisition, self-defined parsing template and the Trap original messages of reception are carried out
Matching, judges whether that Trap original messages can be parsed, step S106 is entered if it can parse；It can not parse the original reports of Trap then
In text deposit Trap original message storage queues, analysis etc. is searched with aspect, into step S107；
Trap original messages are parsed into user-defined warning information by step S106, Trap resolver, will be parsed
Warning information add Trap alarm storage storage queue in；
Step S107, by Trap original messages be stored in Trap original message storage queues.
Wherein, Trap original messages are received is increased income bag using SNMP4J, and acquiescence opens 162 port snoops, and the network equipment is sent out
The Trap original messages of NMS are sent to, receiving thread pond size is can control.
Reference picture 2, parses comprising the following steps that for Trap original messages：
Step S201, by the unique mark attribute column of the Trap original messages of acquisition with it is self-defined parsing template list carry out
Whether matching, each template of cycle criterion be can use, and step S202 is entered if available, using next self-defined if unavailable
Parse template and carry out matching step S201；
Step S202, by Trap original messages information with it is self-defined parsing template cleared alarm condition matched, pin
To TrapV1 versions, cleared alarm condition includes enterprise Oid, attribute type, particular type, multiple binding variables；Enterprise Oid is only
Can use be equal to, comprising etc. condition with it is self-defined parsing template self-defining value matched, remaining variable can use be more than, it is small
In, be equal to, comprising etc. condition with it is self-defined parsing template self-defining value matched；For Trap V2c/3 versions, remove
Alarm conditions only include enterprise Oid, and multiple binding variables, Rule of judgment is similar with V1.Enter if cleared alarm condition is met
Enter step S203, otherwise into step S204；
Step S203, Trap original messages are parsed into warning information, and are added into Trap alarm storage storage queues
In, into step S205, wherein, the quantity of warning information in storage storage queue can be alerted according to Trap, auto-changing takes out
The number of the processing thread of warning information；
If step S204, Trap original message can not be matched with cleared alarm condition, judge whether matching alarm
Condition, enters if alarm conditions are matched such as step S203, if mismatching alarm conditions, is directly entered step S205；
Step S205, by Trap original messages be stored in Trap original message storage queues.
Refering to Fig. 3, the Trap original messages of successfully resolved are added Trap alarm storage storage queues by Trap alarm devices,
The step of Trap alarm storages, is as follows：
Step S301, by warning information from Trap alarm storage storage queue in take out；
Step S302, the warning information to taking-up judge, judge by the source of warning information in NMS
Alarm source that may be present, such as active poll, Syslog are alerted, alerted for non-Trap, and Trap alarm processor does not enter
Row processing, if Trap is alerted, then into step S303；
Step S303, by IP address, MAC Address, alarm grade, alarm type, unique mark attribute column search do not remove
Warning information, wherein unique mark attribute is classified as User Defined, can be by attribute type, specific type, TrapOid, multiple
Binding variable is used as unique mark, it is therefore intended that the different components alarm that may be present of the same equipment of difference, and such as one sets
Standby port alarm, it may be necessary to binding variable as unique mark, if the 3rd binding variable of selection as port only
As soon as mark, the 3rd binding variable value of present Trap message and the Trap being stored in alarm storage storage queues are carried out
Contrast, checks whether there is the warning information do not removed.Check and judge the warning information do not removed whether in Trap alarms afterwards
Be put in storage in storage queue, if there is in Trap alarm storage storage queues, then into step S304；Accused if there is no Trap
In alert storage storage queue, then into step S305；
Step S304, check whether alarm identifier is customized parsing template and resolves to cleared alarm, if resolved to clear
Except alarm then enters step S306；If not cleared alarm is resolved to, then into step S307；
Step S305, check alarm identifier whether be customized parsing template resolve to alarm, if yes then enter step
S308；If not alarm is resolved to, then flow terminates；
Step S306, setting alarm clearance people and checkout time, and current alarm record is updated, wherein, remove artificial
System is removed automatically, and flow terminates；
Step S307, setting alarm number of times, update the last alarm time, and update current alarm record, flow
Terminate；
Step S308, Trap alert storage storage queue in insertion warning information and Trap original messages unique mark
Attribute column, so that other alarms are contrasted with unique mark attribute column with Trap original messages, flow terminates.
In summary, it is of the invention to recognize that the method for all manufacturer Trap and processing is provided based on Simple Network Management Protocol
Two storage queues and a kind of self-defined parsing template, are sentenced by the unique mark attribute column to Trap original messages
It is disconnected, the parsing to the Trap of third party's vendor equipment is realized, the reception, parsing, storage of Trap original messages can be efficiently carried out.
So, the present invention effectively overcomes various shortcoming of the prior art and has high industrial utilization.
The above-described embodiments merely illustrate the principles and effects of the present invention, not for the limitation present invention.It is any ripe
Know the personage of this technology all can carry out modifications and changes under the spirit and scope without prejudice to the present invention to above-described embodiment.Cause
This, those of ordinary skill in the art is complete without departing from disclosed spirit and institute under technological thought such as
Into all equivalent modifications or change, should by the present invention claim be covered.
Claims (9)
1. a kind of method that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, it is characterised in that setting one
The self-defined parsing template of individual Trap original messages, one Trap original messages storage queue of setting and a Trap alarm storage
Storage queue, methods described at least comprises the following steps：
The Trap original messages that step S1, the reception network equipment are reported, and the Trap original messages are loaded into the original reports of Trap
In literary storage queue；
Step S2, synchronously read Trap original messages from Trap original message storage queues, and by the ginseng of Trap original messages
Number carries out contrast judgement with the parameter in self-defined parsing template；If the parameter of Trap original messages and self-defined parsing masterplate
In parameter matching, then according to it is self-defined parsing template by the Trap original messages of reading be parsed into it is user-defined alarm believe
Breath, and the warning information parsed is added in Trap alarm storage storage queues；
Trap original messages are parsed in step S2 to comprise the following steps：
Step S201, by the unique mark attribute column of the Trap original messages of acquisition and self-defined parsing template parameter progress
Match somebody with somebody, whether each template of cycle criterion can use, step S202 is entered if available, next self-defined solution is used if unavailable
Analyse template and carry out matching step S201；
Step S202, Trap original messages information is matched with the cleared alarm condition of self-defined parsing template, if full
Sufficient cleared alarm condition then enters step S203, otherwise into step S204；
Step S203, warning information is parsed into by Trap original messages, and is added into Trap alarm storage storage queues, is entered
Enter step S205；
Step S204, if Trap original messages can not be matched with cleared alarm condition, judges whether to match alarm conditions,
Enter if alarm conditions are matched such as step S203, if mismatching alarm conditions, be directly entered step S205；
Step S205, by Trap original messages be stored in Trap original message storage queues；
Step S3, by Trap warning information from Trap alarm storage storage queue in take out, judgement is cleared alarm or generation
Alarm；If cleared alarm then updates Trap alarm storage storage queues, if producing, alarm is then new to produce an alarm
Insert in Trap alarm storage storage queues.
2. the method according to claim 1 that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, its
It is characterised by：The storage queue of Trap original messages is fifo queue form.
3. the method according to claim 1 that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, its
It is characterised by：The self-defined parsing template includes rule name, regular description, attribute type, particular type, enterprise Oid, alarm
Grade, alarm information, unique mark attribute column, matching alarm conditions, cleared alarm condition.
4. the method according to claim 1 that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, its
It is characterised by：Step S1 and step S2 specifically include following steps：
Failure is issued NMS by step S101, the network equipment in Trap message forms；
Step S102, Trap messages are fitted into Trap original message storage queues；
Step S103, by Trap original message storage queues Trap original messages take out；
It whether there is the network equipment in step S104, the Trap original message information searching network equipments storehouse according to taking-up, if
In the presence of then entering step S105, otherwise directly terminating, Trap original messages are abandoned；
Step S105, the self-defined parsing template of acquisition, self-defined parsing template is matched with the Trap original messages received,
Judge whether that Trap original messages can be parsed, step S106 is entered if it can parse；It can not parse and then enter step S107；
Trap original messages are parsed into user-defined warning information by step S106, Trap resolver, by the announcement parsed
Alert information is added in Trap alarm storage storage queues；
Step S107, by Trap original messages be stored in Trap original message storage queues.
5. the method according to claim 4 that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, its
It is characterised by：In step S101, the network equipment must support Simple Network Management Protocol, and the Trap servers of the network equipment
Location is network management server address.
6. the method according to claim 1 that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, its
It is characterised by：In step S202, Trap messages include version 1 and version 2 c/3, for Trap versions 1, cleared alarm condition bag
Include enterprise Oid, attribute type, particular type and multiple binding variables；For Trap version 2 c/3, cleared alarm condition is only included
Enterprise Oid and multiple binding variables.
7. the method according to claim 1 that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, its
It is characterised by：Step S3 specifically includes following steps：
Step S301, by warning information from Trap alarm storage storage queue in take out；
Step S302, the warning information to taking-up judge, if being non-Trap alarms, without processing, if
Trap is alerted, then into step S303；
The warning information that step S303, lookup are not removed, and judge whether the warning information do not removed is alerted into stock in Trap
Store up in queue, if there is in Trap alarm storage storage queues, then into step S304；Alert and be put in storage if there is no Trap
In storage queue, then into step S305；
Whether step S304, the alarm identifier checked in warning information are customized parsing template and resolve to cleared alarm, if
Resolve to cleared alarm and then enter step S306；If not cleared alarm is resolved to, then into step S307；
Whether step S305, the alarm identifier checked in warning information are customized parsing template and resolve to alarm, if it is
Into step S308；If not alarm is resolved to, then flow terminates；
Step S306, setting alarm clearance people and checkout time, and update current Trap alarm storage storage queues, flow knot
Beam；
Step S307, alarm number of times is set, the last alarm time is updated, and updates current Trap and alert into library storage team
Row, flow terminates；
Step S308, Trap alert storage storage queue in insertion warning information and Trap original messages unique mark attribute
Row, flow terminates.
8. the method according to claim 7 that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, its
It is characterised by：In step S301, searched by IP address, MAC Address, alarm grade, alarm type, unique mark attribute column unclear
The warning information removed.
9. the method according to claim 8 that all manufacturer Trap and processing are recognized based on Simple Network Management Protocol, its
It is characterised by：Wherein described unique mark attribute is classified as User Defined, and the different components for distinguishing same equipment are present
Alarm.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310383380.7A CN103414596B (en) | 2013-08-28 | 2013-08-28 | The method that all manufacturer Trap and processing are recognized based on simple management procotol |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310383380.7A CN103414596B (en) | 2013-08-28 | 2013-08-28 | The method that all manufacturer Trap and processing are recognized based on simple management procotol |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103414596A CN103414596A (en) | 2013-11-27 |
| CN103414596B true CN103414596B (en) | 2017-07-14 |
Family
ID=49607582
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310383380.7A Active CN103414596B (en) | 2013-08-28 | 2013-08-28 | The method that all manufacturer Trap and processing are recognized based on simple management procotol |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103414596B (en) |
Families Citing this family (14)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103647667B (en) * | 2013-12-13 | 2017-01-25 | 华为技术有限公司 | Self-trapping Trap message processing method, management end and self-trapping Trap message processing system |
| CN103997420B (en) * | 2014-04-22 | 2018-05-01 | 上海斐讯数据通信技术有限公司 | The processing method and processing unit of Trap information |
| CN106330478A (en) * | 2015-06-16 | 2017-01-11 | 中兴通讯股份有限公司 | Method and device for processing trap message |
| CN105187258B (en) * | 2015-09-30 | 2018-10-02 | 北京英诺威尔科技股份有限公司 | A kind of configurable Trap warning analysis processing methods |
| CN105245379A (en) * | 2015-10-22 | 2016-01-13 | 上海斐讯数据通信技术有限公司 | Method and device for testing network management system through simulating SNMP (simple network management protocol) network element |
| CN105262537B (en) * | 2015-10-26 | 2018-06-29 | 凌云天博光电科技股份有限公司 | A kind of status information reporting method of photoreceiver, device and photoreceiver |
| CN107241237B (en) * | 2017-05-22 | 2019-11-12 | 北京知道创宇信息技术股份有限公司 | A kind of method and calculating equipment of the identification affiliated component of message |
| CN107241415A (en) * | 2017-06-12 | 2017-10-10 | 郑州云海信息技术有限公司 | A kind of collocation method and device in management information bank MIB storehouses |
| CN107835327B (en) * | 2017-10-30 | 2020-01-07 | 北京佳讯飞鸿电气股份有限公司 | Method, device and system for maintaining protocol stack queue of signaling gateway |
| CN109684176A (en) * | 2018-12-26 | 2019-04-26 | 广东浪潮大数据研究有限公司 | A kind of report method of warning information, system and associated component |
| CN110417734A (en) * | 2019-06-24 | 2019-11-05 | 广州迈峰网络科技有限公司 | Remote device data acquisition method, device and system |
| CN112468364B (en) * | 2020-11-25 | 2022-02-22 | 杭州安恒信息技术股份有限公司 | CIP asset detection method and device, computer equipment and readable storage medium |
| CN113608999A (en) * | 2021-07-08 | 2021-11-05 | 宁畅信息产业(北京)有限公司 | Method, equipment and storage medium for processing snmptrap based on Linux system |
| CN116095203B (en) * | 2023-01-31 | 2024-06-25 | 中国电信国际有限公司 | Analysis method based on TRAP message and related equipment |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1708044A (en) * | 2004-06-08 | 2005-12-14 | 华为技术有限公司 | Asynchronous communication mechanism processing method based on simple network management protocol |
| CN101110698A (en) * | 2006-07-21 | 2008-01-23 | 中兴通讯股份有限公司 | Trap analyzing and preprocessing system and method thereof |
| CN101232404A (en) * | 2008-03-04 | 2008-07-30 | 烽火通信科技股份有限公司 | Remote network management method of EPON access system |
| CN101710862A (en) * | 2009-11-17 | 2010-05-19 | 中兴通讯股份有限公司 | Method and device for processing network management operation error message |
| CN102387043A (en) * | 2011-12-07 | 2012-03-21 | 深圳市同洲视讯传媒有限公司 | Alarm analysis method, workstation and system based on simple network management protocol |
| CN102546260A (en) * | 2012-02-06 | 2012-07-04 | 烽火通信科技股份有限公司 | Simulator based on SNMP (Simple Network Management Protocol) network management |
| CN102801569A (en) * | 2012-09-12 | 2012-11-28 | 上海斐讯数据通信技术有限公司 | Data driven Agent end Trap alarming method |
Family Cites Families (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8935388B2 (en) * | 2011-12-20 | 2015-01-13 | Cox Communications, Inc. | Systems and methods of automated event processing |
-
2013
- 2013-08-28 CN CN201310383380.7A patent/CN103414596B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1708044A (en) * | 2004-06-08 | 2005-12-14 | 华为技术有限公司 | Asynchronous communication mechanism processing method based on simple network management protocol |
| CN101110698A (en) * | 2006-07-21 | 2008-01-23 | 中兴通讯股份有限公司 | Trap analyzing and preprocessing system and method thereof |
| CN101232404A (en) * | 2008-03-04 | 2008-07-30 | 烽火通信科技股份有限公司 | Remote network management method of EPON access system |
| CN101710862A (en) * | 2009-11-17 | 2010-05-19 | 中兴通讯股份有限公司 | Method and device for processing network management operation error message |
| CN102387043A (en) * | 2011-12-07 | 2012-03-21 | 深圳市同洲视讯传媒有限公司 | Alarm analysis method, workstation and system based on simple network management protocol |
| CN102546260A (en) * | 2012-02-06 | 2012-07-04 | 烽火通信科技股份有限公司 | Simulator based on SNMP (Simple Network Management Protocol) network management |
| CN102801569A (en) * | 2012-09-12 | 2012-11-28 | 上海斐讯数据通信技术有限公司 | Data driven Agent end Trap alarming method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103414596A (en) | 2013-11-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103414596B (en) | The method that all manufacturer Trap and processing are recognized based on simple management procotol | |
| CN103370904B (en) | Method, network entity for the seriousness that determines network accident | |
| CN103684828B (en) | A kind for the treatment of method and apparatus of telecommunication equipment fault | |
| US8166352B2 (en) | Alarm correlation system | |
| CN1992636B (en) | System and method for processing warning information | |
| US11190390B2 (en) | Alarm information processing method and apparatus, system, and computer storage medium | |
| CN103220173B (en) | A kind of alarm monitoring method and supervisory control system | |
| CN101930656B (en) | Method for processing alarm message of safe city video monitoring system | |
| CN103905240B (en) | The active warning processing method and system of Network failure | |
| CN107341068A (en) | The method and apparatus that O＆M troubleshooting is carried out by natural language processing | |
| CN106789323A (en) | A kind of communication network management method and its device | |
| US20080114874A1 (en) | Root cause analysis in a communication network | |
| US20080181100A1 (en) | Methods and apparatus to manage network correction procedures | |
| CN111884840A (en) | IPRAN network equipment fault alarm merging analysis processing method and device | |
| CN102594598A (en) | Log management system and implementation method thereof | |
| CN110224865A (en) | A kind of log warning system based on Stream Processing | |
| CN103178991A (en) | Method and system for analyzing multiple-network relation | |
| CN101616022A (en) | A kind of intelligent device management method and system based on snmp protocol | |
| CN104426697B (en) | Network fault management system | |
| WO2016062062A1 (en) | Internet of things alarm suppression method and system | |
| CN106814975A (en) | A kind of memory management method and its system for polymorphic type storage device | |
| CN102546311A (en) | Method for realizing loop detection on EOC (Ethernet Over Coax) device | |
| CN110929896A (en) | Security analysis method and device for system equipment | |
| CN109245929A (en) | Method, apparatus, computer storage medium and the equipment of the automatic discovery network equipment | |
| US20090103916A1 (en) | Optical chassis monitoring |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| PP01 | Preservation of patent right | ||
| PP01 | Preservation of patent right |
Effective date of registration: 20180313 Granted publication date: 20170714 |
|
| PD01 | Discharge of preservation of patent |
Date of cancellation: 20210313 Granted publication date: 20170714 |
|
| PD01 | Discharge of preservation of patent | ||
| PP01 | Preservation of patent right |
Effective date of registration: 20210313 Granted publication date: 20170714 |
|
| PP01 | Preservation of patent right | ||
| PD01 | Discharge of preservation of patent |
Date of cancellation: 20240313 Granted publication date: 20170714 |
|
| PD01 | Discharge of preservation of patent |