CN103458438B - The treatment process of business wireless side behavioural analysis and device - Google Patents
The treatment process of business wireless side behavioural analysis and device Download PDFInfo
- Publication number
- CN103458438B CN103458438B CN201310368100.5A CN201310368100A CN103458438B CN 103458438 B CN103458438 B CN 103458438B CN 201310368100 A CN201310368100 A CN 201310368100A CN 103458438 B CN103458438 B CN 103458438B
- Authority
- CN
- China
- Prior art keywords
- message
- user face
- face data
- address
- rab
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 230000003542 behavioural effect Effects 0.000 title claims abstract description 47
- 238000000034 method Methods 0.000 title claims abstract description 41
- 230000005540 biological transmission Effects 0.000 claims abstract description 75
- 238000012790 confirmation Methods 0.000 claims description 70
- 238000012098 association analyses Methods 0.000 claims description 9
- 238000005457 optimization Methods 0.000 abstract description 5
- 230000011664 signaling Effects 0.000 description 11
- 230000004044 response Effects 0.000 description 10
- 230000006399 behavior Effects 0.000 description 5
- 238000001514 detection method Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000010276 construction Methods 0.000 description 1
- 230000007547 defect Effects 0.000 description 1
- 230000002708 enhancing effect Effects 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 238000010295 mobile communication Methods 0.000 description 1
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
The present invention provides treatment process and the device of a kind of business wireless side behavioural analysis, described method comprises: identify that RNC and SGSN passes through the mutual surface message of Iu-PS interface, and the user face data bag that RNC and SGSN is sent by Iu-PS interface is resolved, surface and the association of user face data bag is carried out again according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, to carry out business wireless side behavioural analysis. When can be economized by technical scheme provided by the invention, laborsaving, carry out business wireless side behavioural analysis at low cost, greatly improve the efficiency of service optimization.
Description
Technical field
The present invention relates to the treatment process of a kind of business wireless side behavioural analysis and device, particularly relate to a kind of method of data service wireless side behavior in 3GWCDMA network being analyzed and device, belong to 3G mobile communication technical field.
Background technology
It is well known that third generation mobile systems is just worldwide day by day universal, WCDMA is the third generation radio communication system that current use range is the widest. Universal fast along with the continuous enhancing of network service capabilities and intelligent terminal, in current 3GWCDMA network, the data service of carrying is of a great variety, as instant messaging, Web browse, FTP downloads and video etc.
But different kinds of business has different Business Stream features, the Business Stream such as instant messaging class business is characterized as periodically short data packet; The Business Stream of downloading business is characterized as has long-time big data packet. Just due to the difference of Business Stream feature, different kinds of business is caused to produce different carrying behaviors when wireless side carries. According to relevant statistics, the signaling number that instant messaging class business produces accounts for the 40% of the whole network, and the flow of generation then only accounts for about 7%; And the signaling number that downloading business produces accounts for the 0.4% of the whole network, and the flow produced accounts for about 10%. Dissimilar have different Business Stream features, causes it to produce different carrying behaviors in wireless side, and consumption of natural resource situation is also completely different. Therefore, the analysis of WCDMA network data service wireless side behavior is not only beneficial to the resource consumption analysis now netted by WCDMA, and to how carrying out resource distribution, there is important directive significance in the process of construction, optimization, dilatation network.
In a wcdma network, general data service calls all comprises following several processes: terminal UE and wireless network control device (RNC) set up RRC connection, terminal UE and core net (CN) is connected by initial direct-sending message (initial direct-sending+initial UE message), wireless access carrying RAB connection building process, data traffic transmission, wireless access carry RAB Connection Release flow process, Iu Connection Release flow process and RRC Connection Release flow process, as shown in Figure 1. Prior art, for the analysis of WCDMA network data service wireless side behavior, is generally all realized by association Gn/Iu-PS interface data and Iu-b interface data. But, in a wcdma network, the physical interface of Iu-b is more, and Iu-b interface and Gn/Iu-PS interface are often apart from each other physically. Therefore, existing technical scheme is more time-consuming, effort, cost height, also very inconvenient in deployment.
Summary of the invention
For the defect of prior art, the present invention provides a kind for the treatment of process and the device that just can realize business wireless side behavioural analysis by means of only analysis Iu-PS interface user plane and surface data.
First aspect, the embodiment of the present invention provides the treatment process of a kind of business wireless side behavioural analysis, comprising:
Identify that RNC and SGSN passes through the mutual surface message of Iu-PS interface, described surface message comprises RRC connection establishment confirmation message, IU Connection Release completes message, wireless access carrying RAB request message and RAB respond message, and records described RRC connection establishment confirmation message and described IU Connection Release completes transmission times and the transmission time of message;
The user face data bag that RNC and SGSN is sent by Iu-PS interface is resolved, obtains TEID corresponding to described user face data bag, IP address, source, object IP address and business type;
Carry out surface and the association of user face data bag according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, carry out business wireless side behavioural analysis.
In the implementation that the first is possible, described preset rules comprises:
Downlink user face data packet ownership correlation rule, comprising:
RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, RAB request message and RAB and respond message, belong to same session;
It is identical that TEID and RAB in user face data handbag head responds in message the TEID carried;
The IP address, source that user face data bag is corresponding is identical with the IP address of SGSN, and the object IP address that user face data bag is corresponding is identical with the IP address of RNC;
The time of arrival of user face data bag is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message;
Uplink user face data packet ownership correlation rule, comprising:
RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, wireless access carrying RAB request message and RAB and respond message, belong to same session;
The TEID carried in TEID and RAB request message in user face data handbag head is identical;
The IP address, source that user face data bag is corresponding is identical with the IP address of RNC, and the object IP address that user face data bag is corresponding is identical with the IP address of SGSN;
The time of arrival of user face data bag is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message.
In the implementation that the first is possible, the transmission times of described each message according to recording, transmission time and described business type, carry out business wireless side behavioural analysis, comprising:
Complete the transmission times of message according to described RRC connection establishment confirmation message and described IU Connection Release, obtain the connection number of times of each business type; And the transmission time of message is completed according to described RRC connection establishment confirmation message and described IU Connection Release, long when obtaining the connection of each business type;
Connection number of times according to each business type, with long when connecting, carries out business wireless side behavioural analysis.
In the first possible implementation, described the user face data bag that RNC and SGSN is sent by Iu-PS interface is resolved, comprising:
Application deep packet identification DPI method, resolves the user face data bag that RNC and SGSN is sent by Iu-PS interface.
Second aspect, the embodiment of the present invention provides the treatment unit of a kind of business wireless side behavioural analysis, comprising:
Identify module, for identifying that RNC and SGSN is by the mutual surface message of Iu-PS interface, described surface message comprises RRC connection establishment confirmation message, IU Connection Release completes message, wireless access carrying RAB request message and RAB respond message, and records described RRC connection establishment confirmation message and described IU Connection Release completes transmission times and the transmission time of message;
Parsing module, for being resolved by the user face data bag that RNC and SGSN is sent by Iu-PS interface, obtains TEID corresponding to described user face data bag, IP address, source, object IP address and business type;
Association analysis module, for carrying out surface and the association of user face data bag according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, carries out business wireless side behavioural analysis.
In the implementation that the first is possible, the preset rules of the treatment unit of described business wireless side behavioural analysis comprises:
Downlink user face data packet ownership correlation rule, comprising:
RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, RAB request message and RAB and respond message, belong to same session;
It is identical that TEID and RAB in user face data handbag head responds in message the TEID carried;
The IP address, source that user face data bag is corresponding is identical with the IP address of SGSN, and the object IP address that user face data bag is corresponding is identical with the IP address of RNC;
The time of arrival of user face data bag is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message;
Uplink user face data packet ownership correlation rule, comprising:
RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, wireless access carrying RAB request message and RAB and respond message, belong to same session;
The TEID carried in TEID and RAB request message in user face data handbag head is identical;
The IP address, source that user face data bag is corresponding is identical with the IP address of RNC, and the object IP address that user face data bag is corresponding is identical with the IP address of SGSN;
The time of arrival of user face data bag is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message.
In the implementation that the first is possible, the described association analysis module of described device comprises:
Association unit, for carrying out surface and the association of user face data bag, and according to the transmission times of each message recorded, transmission time and described business type according to preset rules;
Analytical unit, according to the transmission times of association each message of recording of unit, transmission time and described business type, carries out business wireless side behavioural analysis.
In the implementation that the first is possible, described parsing module specifically for:
Application deep packet identification DPI method, resolves the user face data bag that RNC and SGSN is sent by Iu-PS interface.
As shown from the above technical solution, the treatment process of business wireless side behavioural analysis provided by the invention and device, by identifying that RNC and SGSN passes through the mutual surface message of Iu-PS interface, and the user face data bag that RNC and SGSN is sent by Iu-PS interface is resolved, surface and the association of user face data bag is carried out again according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, to carry out business wireless side behavioural analysis; When can be economized by technical scheme provided by the invention, laborsaving, carry out business wireless side behavioural analysis at low cost, greatly improve the efficiency of service optimization.
Accompanying drawing explanation
In order to be illustrated more clearly in the embodiment of the present invention or technical scheme of the prior art, simply introduce the accompanying drawing used required in embodiment or description of the prior art is done one below, apparently, accompanying drawing in the following describes is some embodiments of the present invention, for those of ordinary skill in the art, under the prerequisite not paying creative work, it is also possible to obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 is the calling schema of data service in WCDMA network;
Fig. 2 is the treatment process embodiment schematic flow sheet of business wireless side behavioural analysis of the present invention;
The business wireless side behavioral statistics that Fig. 3 is the present invention analyzes embodiment schematic flow sheet;
Fig. 4 is the treatment unit example structure schematic diagram of business wireless side behavioural analysis of the present invention;
Fig. 5 is the structural representation of another embodiment for the treatment of unit of business wireless side behavioural analysis of the present invention.
Embodiment
For making the object of the embodiment of the present invention, technical scheme and advantage clearly, below in conjunction with the accompanying drawing in the embodiment of the present invention, technical scheme in the embodiment of the present invention is clearly and completely described, obviously, described embodiment is the present invention's part embodiment, instead of whole embodiments. Based on the embodiment in the present invention, those of ordinary skill in the art, not making other embodiments all obtained under creative work prerequisite, belong to the scope of protection of the invention.
Fig. 2 is the treatment process embodiment schematic flow sheet of business wireless side behavioural analysis of the present invention, the calling schema of WCDMA network data service in composition graphs 1, and the treatment process of business wireless side behavioural analysis of the present invention comprises the steps: as shown in Figure 2
Step 201, identify wireless network control device (RadioNetworkController, it is called for short RNC) and GPRS service support node (ServingGPRSSUPPORTNODE, it is called for short SGSN) by the mutual surface message of Iu-PS interface, described surface message comprises RRC connection establishment confirmation message, IU Connection Release completes message, wireless access carrying RAB request message and RAB respond message, and records described RRC connection establishment confirmation message and described IU Connection Release completes transmission times and the transmission time of message.
RNC and SGSN can be obtained by the message of Iu-PS interactive interfacing by third party's network entity and identify by the embodiment of the present invention. Specifically, identify RNC and SGSN by the mutual surface message of Iu-PS interface, described surface message comprises RRC connection establishment confirmation message, IU Connection Release completes message, wireless access carries RAB request message and RAB responds message, and complete message authentication by RRC connection establishment confirmation message and IU Connection Release and belong to same RRC and connect, respond message authentication by RAB request message and RAB and belong to same RAB and carry.
Wherein, by identifying inner call control protocol (SignalingConnectionControlProtocol, be called for short SCCP) in RRC(RadioResourceControl) (step 5) in Fig. 1 identifies RRC connection establishment and confirms connection establishment confirmation message (Connect_Confirm), and this connection establishment confirms that the value of " SCCPMessageType " attribute in inner call control protocol (SCCP agreement) of type of message corresponding to (Connect_Confirm) message is 0x02. Record the time of its transmission time as RRC connection establishment simultaneously, and record SLR and DLR included by " Connect_Confirm " message.
By identifying wireless access network application part (RadioAccessNetworkApplicationPart, it being called for short RANAP) IU Connection Release in agreement completes message (in figure step 14) IU Connection Release and completes message to identify RRC Connection Release, it is " Iu_Release_Complete " that this Iu Connection Release completes " ProcedureName " attribute corresponding to message in RANAP agreement, record IU Connection Release simultaneously and complete the time of transmission time as RRC Connection Release of message, and record Iu_Release_Complete " SLR and DLR included by message.
SLR is the local reference code (SourceLocalReference) of source, DLR is the local reference code (DestinationLocalReference) of object, in SCCP agreement, the message transmitted during one time SCCP connects all has identical SLR and DLR, therefore connect reference SLR and DLR by the SCCP in analysis signalling message and realize message relating, judge whether according to SLR and DLR carried in the message received to belong to a SCCP connection.
The embodiment of the present invention also to record RRC connection establishment confirmation message and IU Connection Release completes the transmission times of message.
Identify that (step 8) and RAB in Fig. 1 respond the message (step 11) in Fig. 1 to the RAB request message in RANAP agreement, " ProcedureName " attribute corresponding to these two message is respectively " RAB_AssignmentRequest " and " RAB_AssignmentResponse " in RANAP agreement, the IP address carried in record wireless access carrying RAB request message and tunnel end points mark (TunnelEndpointIdentifier, be called for short TEID) as Iu-PS user face in this conversation procedure at the identifier of SGSN side, and record SLR and DLR included by " RAB_AssignmentRequest " message, record RAB responds in message the IP address and TEID carried as Iu-PS user face in this conversation procedure at the identifier of RNC side, and records SLR and DLR included by " RAB_AssignmentResponse " message.
It should be understood that the IP address carried in RAB request message is a field in message, its information carried is the IP address of SGSN, and it is a field in message that RAB responds in message the IP address carried, and its information carried is the IP address of RNC. The TEID carried in RAB request message is the TEID of GPRS tunnel agreement (GPRSTunnelProtocol is called for short GTP) tunnel in SGSN side, and it is the TEID of GTP tunnel in RNC side that RAB responds in message the TEID carried.
Step 202, resolves the user face GTP data packet that RNC and SGSN is sent by Iu-PS interface, obtains described user face GTP data packet corresponding tunnel end points mark (TEID), IP address, source, object IP address and business type.
The user face GTP data packet that RNC and SGSN is sent by Iu-PS interface is resolved, specifically apply deep packet identification DPI (DeepPacketInspection) detection method, the user face GTP data packet that RNC and SGSN is sent by Iu-PS interface is resolved, obtains TEID value, IP address, source, object IP address and business type (such as micro-letter, FTP download and web page browsing etc.) that in the GTP packet header of described user face, TEID attribute is corresponding.
Step 203, carries out surface and the association of user face GTP data packet according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, carries out business wireless side behavioural analysis.
Further, described preset rules comprises: downlink user face GTP data packet ownership correlation rule and uplink user face GTP data packet ownership correlation rule.
Wherein, downlink user face GTP data packet is the GTP data packet that SGSN is sent to RNC, and uplink user face GTP data packet is the GTP data packet that RNC is sent to SGSN.
Described downlink user face GTP data packet ownership correlation rule, comprising:
(1) RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, RAB request message and RAB and respond message, belong to same session.
Because there is identical SLR and DLR with the RANAP signaling in a SCCP session, with the SCCP message carrying RANAP signaling in a connection procedure, there is identical SLR and DLR, therefore when RRC connection establishment confirmation message, IU Connection Release complete message there is identical SLR and DLR value time, can be judged as that this RRC connection establishment confirmation message, IU Connection Release complete message and belong to same SCCP session; When RAB request message and RAB respond message there is identical SLR and DLR value time, can be judged as that this RAB request message and RAB response message belong to same SCCP session; When RRC connection establishment confirmation message, IU Connection Release complete message, RAB request message and RAB respond message there is identical SLR and DLR value simultaneously time, can be judged as that RRC connection establishment confirmation message, IU Connection Release complete message, RAB request message and RAB response message and belong to same SCCP session.
(2) tunnel end points mark (TEID) carried in the response of TEID and the RAB in user face GTP packet header message is identical.
TEID in the GTP packet header of downlink user face is a field in message, and its information carried is the TEID of RNC side. It is the TEID of GTP tunnel in RNC side that RAB responds in message the TEID carried.
(3) the IP address, source that user face GTP data packet is corresponding is identical with the IP address of SGSN, and the object IP address that user face GTP data packet is corresponding is identical with the IP address of RNC.
The IP address of SGSN is in the RAB request message recorded in step 201 the IP address carried, and the RAB that the IP address of RNC is in step 201 and records responds in message the IP address carried.
(4) time of arrival of user face GTP data packet is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message.
Described uplink user face GTP data packet ownership correlation rule, comprising:
(1) RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, wireless access carrying RAB request message and RAB and respond message, belong to same session;
Because there is identical SLR and DLR with the RANAP signaling in a SCCP session, with the SCCP message carrying RANAP signaling in a connection procedure, there is identical SLR and DLR, therefore when RRC connection establishment confirmation message, IU Connection Release complete message there is identical SLR and DLR value time, can be judged as that this RRC connection establishment confirmation message, IU Connection Release complete message and belong to same session; When RAB request message and RAB respond message there is identical SLR and DLR value time, can be judged as that this RAB request message and RAB response message belong to same session; When RRC connection establishment confirmation message, IU Connection Release complete message, RAB request message and RAB respond message there is identical SLR and DLR value simultaneously time, can be judged as that RRC connection establishment confirmation message, IU Connection Release complete message, RAB request message and RAB response message and belong to same session.
(2) tunnel end points mark (TEID) carried in TEID and the RAB request message in user face GTP packet header is identical.
TEID in the GTP packet header of uplink user face is a field in message, and its information carried is the TEID of SGSN side. The TEID carried in RAB request message is the TEID of GTP tunnel in SGSN side.
(3) the IP address, source that user face GTP data packet is corresponding is identical with the IP address of RNC, and the object IP address that user face GTP data packet is corresponding is identical with the IP address of SGSN.
The RAB that the IP address of RNC is in step 201 and records responds in message the IP address carried, and the IP address of SGSN is in the RAB request message recorded in step 201 the IP address carried.
(4) time of arrival of user face GTP data packet is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message.
The business wireless side behavioral statistics that Fig. 3 is the present invention analyzes embodiment schematic flow sheet, the transmission times of described each message according to recording, transmission time and described business type, carry out business wireless side behavioural analysis, as shown in Figure 3, it is possible to comprise the following steps:
Step 30, completes the transmission times of message, obtains the connection number of times of each business type according to described RRC connection establishment confirmation message and described IU Connection Release.
Specifically, add up RRC connection establishment confirmation message (Connect_Confirm) and Iu Connection Release in a business procedure and complete the number of (Iu_Release_Complete) message pair, thus obtain connection number of times.
Step 31, completes the transmission time of message according to described RRC connection establishment confirmation message and described IU Connection Release, long when obtaining the connection of each business type.
Specifically, adding up in a business procedure, often pair of RRC connection establishment confirmation message (Connect_Confirm) and IU Connection Release complete the time difference sum of message (Iu_Release_Complete), long when thus obtaining connection.
Step 32, according to long when the connection number of times of each business type and connection, carries out business wireless side behavioural analysis.
The treatment process of business wireless side behavioural analysis provided by the invention, by identifying that RNC and SGSN passes through the mutual surface message of Iu-PS interface, and the user face data bag that RNC and SGSN is sent by Iu-PS interface is resolved, surface and the association of user face data bag is carried out again according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, to carry out business wireless side behavioural analysis; The treatment process of business wireless side behavioural analysis provided by the invention by means of only analysis Iu-PS interface user plane and surface data, when just can economize, laborsaving, carry out business wireless side behavioural analysis at low cost, greatly improve the efficiency of service optimization.
Fig. 4 is the treatment unit example structure schematic diagram of business wireless side behavioural analysis of the present invention, and as shown in Figure 4, this device comprises identification module 41, parsing module 42 and association analysis module 43.
Identification module 41, parsing module 42 and association analysis module 43 are described by existing composition graphs 1 respectively. Identify module 41, for identifying that RNC and SGSN is by the mutual surface message of Iu-PS interface, described surface message comprises RRC connection establishment confirmation message, IU Connection Release completes message, wireless access carrying RAB request message and RAB respond message, and records described RRC connection establishment confirmation message and described IU Connection Release completes transmission times and the transmission time of message.
Specifically, identify that module 41 to be identified RNC and SGSN by the mutual surface message of Iu-PS interface, described surface message comprises RRC connection establishment confirmation message, IU Connection Release completes message, wireless access carries RAB request message and RAB responds message, and complete message authentication by RRC connection establishment confirmation message and IU Connection Release and belong to same RRC and connect, respond message authentication by RAB request message and RAB and belong to same RAB and carry.
Wherein, being confirmed by RRC connection establishment confirmation message (Connect_Confirm) (step 5) in Fig. 1 the identifies RRC(RadioResourceControl) connection establishment identified in inner call control protocol (SCCP agreement), this connection establishment confirms that the value of " SCCPMessageType " attribute in inner call control protocol (SCCP agreement) of type of message corresponding to (Connect_Confirm) message is 0x02. Record the time of its transmission time as RRC connection establishment simultaneously, and record SLR and DLR included by " Connect_Confirm " message.
Complete message (in figure step 14) IU Connection Release by the IU Connection Release identified in RANAP agreement to complete message and identify RRC Connection Release, it is " Iu_Release_Complete " that this Iu Connection Release completes " ProcedureName " attribute corresponding to message in RANAP agreement, record IU Connection Release completes the time of transmission time as RRC Connection Release of message, and records Iu_Release_Complete " SLR and DLR included by message.
The embodiment of the present invention also to record RRC connection establishment confirmation message and IU Connection Release completes the transmission times of message.
Identify that (step 8) and RAB in Fig. 1 respond the message (step 11) in Fig. 1 to the RAB request message in RANAP agreement, " ProcedureName " attribute corresponding to these two message is respectively " RAB-AssignmentRequest " and " RAB_AssignmentResponse " in RANAP agreement, record wireless access carries in RAB request message the IP address and TEID carried as Iu-PS user face in this conversation procedure at the identifier of SGSN side, and records SLR and DLR included by " RAB_AssignmentRequest " message; Record RAB responds in message the IP address and TEID carried as Iu-PS user face in this conversation procedure at the identifier of RNC side, and records SLR and DLR included by " RAB_AssignmentResponse " message.
Parsing module 42, for being resolved by the user face GTP data packet that RNC and SGSN is sent by Iu-PS interface, obtains described user face GTP data packet corresponding tunnel end points mark (TEID), IP address, source, object IP address and business type.
Specifically, the user face GTP data packet that RNC and SGSN is sent by Iu-PS interface is resolved by parsing module 42, it it is application deep packet identification DPI (DeepPacketInspection) detection method, the user face GTP data packet that RNC and SGSN is sent by Iu-PS interface is resolved, obtains TEID attribute in the GTP packet header of described user face corresponding tunnel end points mark (TEID), IP address, source, object IP address and business type (such as micro-letter, FTP download and web page browsing etc.).
Association analysis module 43, for carrying out surface and the association of user face GTP data packet according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, carries out business wireless side behavioural analysis.
Further, described preset rules comprises: downlink user face GTP data packet ownership correlation rule and uplink user face GTP data packet ownership correlation rule.
Described downlink user face GTP data packet ownership correlation rule, comprising:
(1) RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, RAB request message and RAB and respond message, belong to same session;
Because there is identical SLR and DLR with the RANAP signaling in a SCCP session, with the SCCP message carrying RANAP signaling in a connection procedure, there is identical SLR and DLR, therefore when RRC connection establishment confirmation message, IU Connection Release complete message there is identical SLR and DLR value time, can be judged as that this RRC connection establishment confirmation message, IU Connection Release complete message and belong to same session; When RAB request message and RAB respond message there is identical SLR and DLR value time, can be judged as that this RAB request message and RAB response message belong to same session; When RRC connection establishment confirmation message, IU Connection Release complete message, RAB request message and RAB respond message there is identical SLR and DLR value simultaneously time, can be judged as that RRC connection establishment confirmation message, IU Connection Release complete message, RAB request message and RAB response message and belong to same session.
(2) tunnel end points mark (TEID) carried in the response of TEID and the RAB in user face GTP packet header message is identical.
TEID in the GTP packet header of downlink user face is a field in message, and its information carried is the TEID of RNC side. It is the TEID of GTP tunnel in RNC side that RAB responds in message the TEID carried.
Described user face GTP data packet is the data packet that RNC is sent to SGSN.
(3) the IP address, source that user face GTP data packet is corresponding is identical with the IP address of SGSN, and the object IP address that user face GTP data packet is corresponding is identical with the IP address of RNC.
(4) time of arrival of user face GTP data packet is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message.
Described uplink user face data packet ownership correlation rule, comprising:
(1) RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, wireless access carrying RAB request message and RAB and respond message, belong to same session;
Because there is identical SLR and DLR with the RANAP signaling in a SCCP session, with the SCCP message carrying RANAP signaling in a connection procedure, there is identical SLR and DLR, therefore when RRC connection establishment confirmation message, IU Connection Release complete message there is identical SLR and DLR value time, can be judged as that this RRC connection establishment confirmation message, IU Connection Release complete message and belong to same session; When RAB request message and RAB respond message there is identical SLR and DLR value time, can be judged as that this RAB request message and RAB response message belong to same session; When RRC connection establishment confirmation message, IU Connection Release complete message, RAB request message and RAB respond message there is identical SLR and DLR value simultaneously time, can be judged as that RRC connection establishment confirmation message, IU Connection Release complete message, RAB request message and RAB response message and belong to same session.
(2) tunnel end points mark (TEID) carried in TEID and the RAB request message in user face GTP packet header is identical.
TEID in the GTP packet header of uplink user face is a field in message, and its information carried is the TEID of SGSN side. The TEID carried in RAB request message is the TEID of GTP tunnel in SGSN side.
(3) the IP address, source that user face GTP data packet is corresponding is identical with the IP address of RNC, and the object IP address that user face GTP data packet is corresponding is identical with the IP address of SGSN.
(4) time of arrival of user face GTP data packet is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message.
Further, as shown in Figure 5, Fig. 5 is the structural representation of another embodiment of the treatment unit of business wireless side behavioural analysis of the present invention, and described association analysis module comprises: association unit 51 and analytical unit 52. Wherein:
Association unit 51, for carrying out surface and the association of user face GTP data packet according to preset rules, and the transmission times of each message recorded, transmission time and described business type.
Analytical unit 52, carries out business wireless side behavioural analysis according to the transmission times of association each message of recording of unit, transmission time and described business type.
Specifically, add up RRC connection establishment confirmation message (Connect_Confirm) and IU Connection Release in a business procedure and complete the number of message (Iu_Release_Complete) message pair, thus obtain connection number of times. Adding up in a business procedure, often pair of RRC connection establishment confirmation message (Connect_Confirm) and Iu Connection Release complete the time difference sum of message (Iu_Release_Complete), long when thus obtaining connection.
Owing to the treatment unit of business wireless side behavioural analysis provided by the invention possesses: identify that RNC and SGSN passes through the identification module 41 of the mutual surface message of Iu-PS interface, to the parsing module 42 that RNC and SGSN is resolved by the user face data bag that Iu-PS interface sends, surface and the association of user face data bag is carried out according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, to carry out the association analysis module 43 of business wireless side behavioural analysis; When therefore providing the treatment unit of business wireless side behavioural analysis to economize by the present invention, laborsaving, carry out business wireless side behavioural analysis at low cost, greatly improve the efficiency of service optimization.
One of ordinary skill in the art will appreciate that: all or part of step realizing above-mentioned each embodiment of the method can be completed by the hardware that programmed instruction is relevant. Aforesaid program can be stored in a computer read/write memory medium. This program, when performing, performs the step comprising above-mentioned each embodiment of the method; And aforesaid storage media comprises: ROM, RAM, magnetic disc or CD etc. various can be program code stored medium.
Last it is noted that above each embodiment is only in order to illustrate the technical scheme of the present invention, it is not intended to limit; Although with reference to foregoing embodiments to invention has been detailed description, it will be understood by those within the art that: the technical scheme described in foregoing embodiments still can be modified by it, or wherein some or all of technology feature is carried out equivalent replacement; And these amendments or replacement, do not make the scope of the essence disengaging various embodiments of the present invention technical scheme of appropriate technical solution.
Claims (6)
1. the treatment process of a business wireless side behavioural analysis, it is characterised in that, comprising:
Identify that RNC and SGSN passes through the mutual surface message of Iu-PS interface, described surface message comprises RRC connection establishment confirmation message, IU Connection Release completes message, wireless access carrying RAB request message and RAB respond message, and records described RRC connection establishment confirmation message and described IU Connection Release completes transmission times and the transmission time of message;
The user face data bag that RNC and SGSN is sent by Iu-PS interface is resolved, obtains TEID corresponding to described user face data bag, IP address, source, object IP address and business type;
Carry out surface and the association of user face data bag according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, carry out business wireless side behavioural analysis;
Described preset rules comprises:
Downlink user face data packet ownership correlation rule, comprising:
RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, RAB request message and RAB and respond message, belong to same session;
It is identical that TEID and RAB in user face data handbag head responds in message the TEID carried;
The IP address, source that user face data bag is corresponding is identical with the IP address of SGSN, and the object IP address that user face data bag is corresponding is identical with the IP address of RNC;
The time of arrival of user face data bag is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message;
Uplink user face data packet ownership correlation rule, comprising:
RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, wireless access carrying RAB request message and RAB and respond message, belong to same session;
The TEID carried in TEID and RAB request message in user face data handbag head is identical;
The IP address, source that user face data bag is corresponding is identical with the IP address of RNC, and the object IP address that user face data bag is corresponding is identical with the IP address of SGSN;
The time of arrival of user face data bag is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message.
2. method according to claim 1, it is characterised in that, the transmission times of described each message according to recording, transmission time and described business type, carry out business wireless side behavioural analysis, comprising:
Complete the transmission times of message according to described RRC connection establishment confirmation message and described IU Connection Release, obtain the connection number of times of each business type; And the transmission time of message is completed according to described RRC connection establishment confirmation message and described IU Connection Release, long when obtaining the connection of each business type;
Connection number of times according to each business type, with long when connecting, carries out business wireless side behavioural analysis.
3. method according to claim 2, it is characterised in that, described the user face data bag that RNC and SGSN is sent by Iu-PS interface is resolved, comprising:
Application deep packet identification DPI method, resolves the user face data bag that RNC and SGSN is sent by Iu-PS interface.
4. the treatment unit of a business wireless side behavioural analysis, it is characterised in that, comprising:
Identify module, for identifying that RNC and SGSN is by the mutual surface message of Iu-PS interface, described surface message comprises RRC connection establishment confirmation message, IU Connection Release completes message, wireless access carrying RAB request message and RAB respond message, and records described RRC connection establishment confirmation message and described IU Connection Release completes transmission times and the transmission time of message;
Parsing module, for being resolved by the user face data bag that RNC and SGSN is sent by Iu-PS interface, obtains TEID corresponding to described user face data bag, source and object IP address and business type;
Association analysis module, for carrying out surface and the association of user face data bag according to preset rules, and according to the transmission times of each message recorded, transmission time and described business type, carries out business wireless side behavioural analysis;
Described preset rules comprises:
Downlink user face data packet ownership correlation rule, comprising:
RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, RAB request message and RAB and respond message, belong to same session;
It is identical that TEID and RAB in user face data handbag head responds in message the TEID carried;
The IP address, source that user face data bag is corresponding is identical with the IP address of SGSN, and the object IP address that user face data bag is corresponding is identical with the IP address of RNC;
The time of arrival of user face data bag is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message;
Uplink user face data packet ownership correlation rule, comprising:
RRC connection establishment confirmation message, the IU Connection Release with identical SLR and DLR complete message, wireless access carrying RAB request message and RAB and respond message, belong to same session;
The TEID carried in TEID and RAB request message in user face data handbag head is identical;
The IP address, source that user face data bag is corresponding is identical with the IP address of RNC, and the object IP address that user face data bag is corresponding is identical with the IP address of SGSN;
The time of arrival of user face data bag is between the transmission time that RRC connection establishment confirmation message and IU Connection Release complete message.
5. device according to claim 4, it is characterised in that, described association analysis module comprises:
Association unit, for carrying out surface and the association of user face data bag according to preset rules, and the transmission times of each message recorded, transmission time and described business type;
Analytical unit, carries out business wireless side behavioural analysis according to the transmission times of association each message of recording of unit, transmission time and described business type.
6. device according to claim 5, it is characterised in that, described parsing module specifically for:
Application deep packet identification DPI method, resolves the user face data bag that RNC and SGSN is sent by Iu-PS interface.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310368100.5A CN103458438B (en) | 2013-08-21 | 2013-08-21 | The treatment process of business wireless side behavioural analysis and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201310368100.5A CN103458438B (en) | 2013-08-21 | 2013-08-21 | The treatment process of business wireless side behavioural analysis and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN103458438A CN103458438A (en) | 2013-12-18 |
| CN103458438B true CN103458438B (en) | 2016-06-01 |
Family
ID=49740301
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201310368100.5A Active CN103458438B (en) | 2013-08-21 | 2013-08-21 | The treatment process of business wireless side behavioural analysis and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN103458438B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105359568B (en) * | 2014-05-15 | 2019-11-12 | 华为技术有限公司 | Detection device and the method for determining the interface-free resources that business consumes |
| CN105323785B (en) * | 2014-06-04 | 2019-06-14 | 中国移动通信集团广东有限公司 | A kind of determination method and device of network session characteristic |
| CN104768172B (en) * | 2014-10-24 | 2018-11-09 | 北京中创信测科技股份有限公司 | A method of 3G wireless channels are occupied based on IuPS interface analysis data services |
| WO2018098609A1 (en) | 2016-11-29 | 2018-06-07 | 华为技术有限公司 | Communication method and apparatus |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP1708535A1 (en) * | 2005-03-31 | 2006-10-04 | Hitachi Kokusai Electric Inc. | Base station apparatus |
| CN101090358A (en) * | 2006-06-15 | 2007-12-19 | 华为技术有限公司 | Method for recoverying user data transmission |
| CN101505472A (en) * | 2008-02-05 | 2009-08-12 | 华为技术有限公司 | User data server system and apparatus |
-
2013
- 2013-08-21 CN CN201310368100.5A patent/CN103458438B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| EP1708535A1 (en) * | 2005-03-31 | 2006-10-04 | Hitachi Kokusai Electric Inc. | Base station apparatus |
| CN101090358A (en) * | 2006-06-15 | 2007-12-19 | 华为技术有限公司 | Method for recoverying user data transmission |
| CN101505472A (en) * | 2008-02-05 | 2009-08-12 | 华为技术有限公司 | User data server system and apparatus |
Also Published As
| Publication number | Publication date |
|---|---|
| CN103458438A (en) | 2013-12-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104798391B (en) | The report of service network, time zone and UCI | |
| CN100486382C (en) | Aging processing apparatus and method in communications system | |
| CN102118796B (en) | Bandwidth control method, device and system | |
| CN102934489B (en) | Method, device and system for reporting location | |
| CN103458438B (en) | The treatment process of business wireless side behavioural analysis and device | |
| CN101562824B (en) | Method, device and system for analyzing user plane | |
| CN103686906B (en) | Method for switching network, terminal equipment and gateway equipment | |
| CN103491517A (en) | Method and equipment for obtaining PCC rules | |
| CN101572861B (en) | Method, device and system for context management based on Sl uniform interface | |
| CN101588571B (en) | Method, device and system for managing position based on S1 uniform interface | |
| CN102036304B (en) | Method for providing maximum transmission unit length for terminal and packet switch gateway | |
| CN102595380B (en) | Data service processing method, equipment and communication system | |
| CN102781068B (en) | Equipment triggering method and network element equipment | |
| CN103024876B (en) | Connection control method, gateway and system | |
| CN101111059B (en) | Method for associated update of position district and routing district | |
| CN103096433A (en) | Service gateway choosing method and system of terminal group | |
| CN106797632A (en) | Realize method, the apparatus and system of business continuance | |
| CN101795478A (en) | Method for data bypass, network side equipment and access gateway | |
| CN102238506B (en) | Signaling tracing method, device and system | |
| CN103348713B (en) | A kind of network name and traffic type information display methods, apparatus and system | |
| CN103188822A (en) | Machine communication method and device | |
| CN101674200A (en) | Generation method of SGSN topological graph and device thereof | |
| US20140241241A1 (en) | Method and apparatus for supporting short message services for packet switched devices | |
| CN105376851A (en) | Network attachment method and system | |
| CN102026140B (en) | Charging information processing method and equipment and communication system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |