CN106027405A - Data stream probe method and device - Google Patents
Data stream probe method and device Download PDFInfo
- Publication number
- CN106027405A CN106027405A CN201610289433.2A CN201610289433A CN106027405A CN 106027405 A CN106027405 A CN 106027405A CN 201610289433 A CN201610289433 A CN 201610289433A CN 106027405 A CN106027405 A CN 106027405A
- Authority
- CN
- China
- Prior art keywords
- data stream
- safety
- equipment
- threshold value
- connecting port
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/25—Flow control; Congestion control with rate being modified by the source upon detecting a change of network conditions
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L47/00—Traffic control in data switching networks
- H04L47/10—Flow control; Congestion control
- H04L47/29—Flow control; Congestion control using a combination of thresholds
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
- H04L65/60—Network streaming of media packets
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/18—Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast
Abstract
The invention relates to a data stream probe method and device. The method comprises the steps of judging whether received data streams are the data streams passing through security detection or not; for the data streams which are judged as the data streams passing through the security detection, forwarding the data streams; for the data streams which are judged as the data streams not passing through the security detection, judging whether the flow magnitude of the data streams exceeds a maximum processing threshold value supported by equipment or not; carrying out security detection on the partial data streams not exceeding the maximum processing threshold value in the data streams when the flow magnitude of the data streams not passing through the security detection exceeds the maximum processing threshold value and then forwarding the partial data streams, and forwarding the message load exceeding the maximum processing threshold value in the data streams; and carrying out security detection on the data streams not passing through the security detection and then forwarding the data streams when the flow magnitude of the data streams does not exceed the maximum processing threshold value. According to the method and the device, the problem that in the prior art, the forwarding efficiency of the security equipment is low when there is a great deal of data streams can be solved.
Description
Technical field
The present invention relates to communication technical field, particularly relate to shunt method and the device of a kind of data stream.
Background technology
In video monitoring system, the data stream got can be sent to the network storage by web camera
Equipment carries out storing to preserve video monitoring data.At web camera, data stream is sent to the network storage
During equipment, in order to avoid may be on the network storage equipment by illegal, attack, unauthorized etc.
Storage system hurtful data stream send to the network storage equipment, correlation technique add safety set
This network equipment standby.
In correlation technique, safety equipment may be located between web camera and the network storage equipment, works as net
When the data stream got is sent to the network storage equipment by network video camera, safety equipment can be to these data
Stream detects, and will be sent to the network storage equipment by the data stream of detection.
As shown in the above, correlation technique can realize sending web camera extremely by safety equipment
The detection of the data stream of the network storage equipment, but, owing to the process performance of safety equipment is limited, face to face
During to bigger data stream, safety equipment need the longer time to detect this data stream, now,
The forward efficiency of safety equipment is low.
Summary of the invention
For overcoming problem present in correlation technique, the invention provides shunt method and the device of data stream.
The present invention provides the shunt method of a kind of data stream, is applied to include that the safety of some mutual cascades sets
The standby safety equipment in video monitoring system, described video monitoring system also include headend equipment and after
End equipment, the safety equipment of described some mutual cascades are connected to described headend equipment and described rear end equipment
Between, it is characterised in that described method includes:
Judge whether the data stream received is the data stream through safety detection；
For being judged as the data stream through safety detection, forward described data stream；For be judged as without
Cross the data stream of safety detection, it is judged that the maximum whether uninterrupted of described data stream is supported beyond equipment
Process threshold value；
When the uninterrupted of the described data stream without safety detection is beyond described maximum process threshold value,
Forward after described data stream carries out safety detection without departing from the described maximum partial data stream processing threshold value,
Forward beyond the described maximum message load processing threshold value in described data stream；When described without
When the uninterrupted of the data stream of safety detection is without departing from described maximum process threshold value, to described without safety
The data stream of detection forwards after carrying out safety detection.
As improvement, the subtending port on described safety equipment includes that first order connecting port and the second level couple
Mouthful, wherein, between two safety equipment of adjacent level first order connecting port be connected with first order connecting port,
Second level connecting port is connected with second level connecting port, and the most described first order connecting port study MAC Address,
Other safety equipment in described safety equipment are by video monitoring system and headend equipment and rear end equipment
When being connected, described method also includes:
When described data stream is the data stream through safety detection, is received by first order connecting port and turn
Send out data stream described；
When the data stream that described data stream is without safety detection, by second level connecting port receive and
Forward described data stream.
As improvement, described method also includes:
When the uninterrupted of the described data stream without safety detection is beyond described maximum process threshold value,
According to default shunting rule, described data stream is divided into without departing from the described maximum part number processing threshold value
According to stream and beyond described maximum message load two parts processing threshold value.
As improvement, described shunting rule includes:
Described data stream is divided into several sub data flows；
Different process actions is performed for several sub data flows described；
Described data stream is divided into without departing from described maximum process threshold by the shunting rule that described basis is preset
The partial data stream being worth and the message load two parts processing threshold value beyond described maximum, also include:
Based on the described shunting rule part number to processing threshold value in described data stream without departing from described maximum
Carry out safety detection according to stream, and the described partial data stream after safety detection is entered by first order connecting port
Row forwards；
Described data stream will process the message load of threshold value beyond described maximum based on described shunting rule
Forwarded by second level connecting port.
As improvement, described method also includes:
In described safety equipment are the safety equipment cascaded mutually, level is near the safety of headend equipment
During equipment, it is mutual that described safety equipment carry out data stream by default interface and headend equipment；
In described safety equipment are the safety equipment cascaded mutually, level is near the safety of rear end equipment
During equipment, it is mutual that described safety equipment carry out data stream by default interface and rear end equipment.
The present invention also provides for the part flow arrangement of a kind of data stream simultaneously, is applied to include some mutual cascades
Safety equipment in the video monitoring system of safety equipment, described video monitoring system also includes headend equipment
And rear end equipment, the safety equipment of described some mutual cascades be connected to described headend equipment and described after
Between end equipment, it is characterised in that described device includes:
Whether judge module, be the data stream through safety detection for judging the data stream received；
First processing module, for for being judged as the data stream through safety detection, forwards described data
Stream；For being judged as the data stream without safety detection, it is judged that whether the uninterrupted of described data stream
The maximum process threshold value supported beyond equipment；
Second processing module, for the uninterrupted when the described data stream without safety detection beyond institute
When stating maximum process threshold value, to the partial data stream processing threshold value in described data stream without departing from described maximum
Forward after carrying out safety detection, enter beyond the described maximum message load processing threshold value in described data stream
Row forwards；When the uninterrupted of the described data stream without safety detection is without departing from described maximum process threshold
During value, forward after the described data stream without safety detection is carried out safety detection.
As improvement, the subtending port on described safety equipment includes that first order connecting port and the second level couple
Mouthful, wherein, between two safety equipment of adjacent level first order connecting port be connected with first order connecting port,
Second level connecting port is connected with second level connecting port, and the most described first order connecting port study MAC Address,
Other safety equipment in described safety equipment are by video monitoring system and headend equipment and rear end equipment
When being connected, described device also includes:
3rd processing module, for when described data stream be the data stream through safety detection, by the
One subtending port receives and forwards described data stream；When described data stream is the data without safety detection
During stream, received by second level connecting port and forward described data stream.
As improvement, described device also includes:
Divide module, for when the described data stream without safety detection uninterrupted beyond described
During big process threshold value, according to default shunting rule, described data stream is divided into without departing from described maximum
Manage the partial data stream of threshold value and beyond described maximum message load two parts processing threshold value.
As improvement, described shunting rule includes:
Described data stream is divided into several sub data flows；
Different process actions is performed for several sub data flows described；
Described division module is further used for:
Based on the described shunting rule part number to processing threshold value in described data stream without departing from described maximum
Carry out safety detection according to stream, and the described partial data stream after safety detection is entered by first order connecting port
Row forwards；
Described data stream will process the message load of threshold value beyond described maximum based on described shunting rule
Forwarded by second level connecting port.
As improvement, described device also includes:
Interactive module, in being, when described safety equipment, the safety equipment cascaded mutually, level is near front
During the safety equipment of end equipment, described safety equipment carry out data stream by the interface preset with headend equipment
Alternately；And when in the safety equipment that described safety equipment are mutually cascade level near rear end equipment
During safety equipment, it is mutual that described safety equipment carry out data stream by default interface and rear end equipment.
In the present invention, the safety equipment in video monitoring system can first judge the data stream that receives whether
For the data stream through safety detection, and for being judged as that the data stream through safety detection forwards；With
And for being judged as further being judged without the data stream of safety detection, described safety equipment are permissible
Judge whether the uninterrupted of the described data stream without safety detection processes threshold beyond the maximum of equipment support
Value, when the uninterrupted of the described data stream without safety detection is beyond described maximum process threshold value, can
To turn after described data stream carries out safety detection without departing from the described maximum partial data stream processing threshold value
Send out, forward beyond the described maximum segment message load processing threshold value in described data stream；When described
When processing threshold value without the uninterrupted of the data stream of safety detection without departing from described maximum, described safety sets
Forward for after the described data stream without safety detection can being carried out safety detection.
The application present invention can use several safety equipment to detect data stream, such that it is able to solve phase
The problem that in the technology of pass, safety equipment forward efficiency is low when in the face of larger data stream.
It should be appreciated that it is only exemplary and explanatory that above general description and details hereinafter describe
, the present invention can not be limited.
Accompanying drawing explanation
Accompanying drawing herein is merged in description and constitutes the part of this specification, it is shown that meet the present invention
Embodiment, and for explaining the principle of the present invention together with description.
Fig. 1 is the networking diagram of the video monitoring system in a kind of correlation technique illustrated.
Fig. 2 is the flow chart of the shunt method of a kind of data stream shown in one embodiment of the invention.
Fig. 3 is the schematic diagram that a kind of safety equipment illustrated mutually cascade.
Fig. 4 is the application scenarios figure that the application present invention realizes the shunting of data stream.
Fig. 5 is the hardware block diagram of the part flow arrangement of data stream in the embodiment of the present invention.
Fig. 6 is the present invention block diagram according to the part flow arrangement of a kind of data stream shown in an exemplary embodiment.
Detailed description of the invention
Here will illustrate exemplary embodiment in detail, its example represents in the accompanying drawings.Following retouches
Stating when relating to accompanying drawing, unless otherwise indicated, the same numbers in different accompanying drawings represents same or analogous key element.
Embodiment described in following exemplary embodiment does not represent all embodiment party consistent with the present invention
Formula.On the contrary, they only with describe in detail in appended claims, the present invention some in terms of mutually one
The example of the apparatus and method caused.
Refer to the networking diagram that Fig. 1, Fig. 1 are the video monitoring system in a kind of correlation technique illustrated.
In the video monitoring system shown in Fig. 1, including headend equipment IPC (IP Camera, network shooting
Machine), rear end equipment IPSAN (IP Storage Area Network, the network storage equipment) and be arranged at IPC,
Safety equipment between IPSAN.
When IPC gets data stream, the transmission of data stream can be preserved to IPSAN.In order to avoid
Illegal in this data stream, attack and unauthorized etc. may be damaged the malice of storage system on IPSAN
Content sends to IPSAN, adds safety equipment and to send IPC to IPSAN's in video monitoring system
Data stream carries out safety detection.
As shown in Figure 1, safety equipment can receive IPC and send the data stream to IPSAN, and to data stream
Be analyzed and process, so that it is determined that send to the data stream of IPSAN be safe data stream.But due to
The disposal ability of safety equipment is limited, and therefore, when in the face of bigger data stream, safety equipment need longer
Time this data stream is carried out safety detection, thus the problem that the forward efficiency of making paired data stream is low.
In the present invention, the safety equipment in video monitoring system can first judge the data stream that receives whether
For the data stream through safety detection, and for being judged as that the data stream through safety detection forwards；With
And for being judged as further being judged without the data stream of safety detection, these safety equipment can be sentenced
The maximum process the threshold whether uninterrupted of the disconnected above-mentioned data stream without safety detection is supported beyond equipment
Value, when the uninterrupted of the above-mentioned data stream without safety detection processes threshold value beyond maximum, can be right
Forward, to above-mentioned after above-mentioned data stream carries out safety detection without departing from the partial data stream of maximum process threshold value
In data stream, the segment message load beyond maximum process threshold value forwards；When above-mentioned without safety detection
Data stream uninterrupted without departing from maximum process threshold value time, described safety equipment can to above-mentioned without
The data stream of safety detection forwards after carrying out safety detection.
The application present invention can use several safety equipment to detect data stream, such that it is able to solve phase
The problem that in the technology of pass, safety equipment forward efficiency is low when in the face of larger data stream.
See Fig. 2, for the flow chart of the shunt method of a kind of data stream shown in one embodiment of the invention,
This embodiment is applied to the safety equipment including in the video monitoring system of the safety equipment of some mutual cascades,
Comprise the following steps:
Step 201: judge whether the data stream received is the data stream through safety detection.
In the present invention, above-mentioned video monitoring system can include the IPC of front monitoring front-end, monitor rear end
The safety cascaded mutually by subtending port between IPSAN and some IPC of being connected to, IPSAN is set
Standby.
In the present invention, safety equipment can include the incoming interface for receiving IPC flow and for
The outgoing interface of IPSAN transmitted traffic.It addition, in addition to outgoing interface illustrated above and incoming interface, peace
Subtending port can also be included on full equipment.
Wherein, above-mentioned subtending port can include first order connecting port and second level connecting port, adjacent level
Two safety equipment between first order connecting port be connected with first order connecting port, second level connecting port and
Two subtending ports are connected.
Above-mentioned first order connecting port can be to pass through safety equipment safety for forwarding on safety equipment
The interface of the data stream after detection, second level connecting port can be for forwarding without safety on safety equipment
The interface of the data stream after equipment safety detection.
Owing to first order connecting port sets for the stream compression after safety equipment safety detection is sent to safety
In standby group, the safety equipment of next cascade, therefore in first order connecting port and second level connecting port, permissible
Only participated in MAC address learning by first order connecting port；Such as, in actual applications, the first order couples
Mouth can learn to enter with self on safety equipment of next cascade in safety equipment group by monitoring message
The first order connecting port of row docking and the MAC Address of IPSAN.
Referring to Fig. 3, Fig. 3 is the schematic diagram that a kind of safety equipment illustrated mutually cascade.
Wherein, the A interface of safety equipment 1 is the incoming interface for receiving IPC flow, safety equipment 3
J interface be for the outgoing interface to IPSAN transmitted traffic.In addition to A interface and J interface, these are three years old
B interface in individual safety equipment is subtending port to these 8 interfaces of PCI interface.Wherein, safety equipment
The H interface of B interface, the D interface of safety equipment 2 and F interface and the secure box 3 of 1 is
One subtending port；The C interface of safety equipment 1, the E interface of safety equipment 2 and G interface and safety
The PCI interface of equipment 3 is second level connecting port.By the first order between two safety equipment of adjacent level
Connecting port is connected with first order connecting port, second level connecting port is connected with second level connecting port understands, Fig. 3
In, between safety equipment 1 and safety equipment 2 can by interface B be connected with interface D, interface C
The mode being connected with interface E cascades；Interface can be passed through between safety equipment 2 and safety equipment 3
The mode that F is connected with interface H, interface G is connected with interface I cascades.
After safety equipment in Fig. 3 are cascaded by said method, when safety equipment 1 pass through incoming interface
When A receives the data stream from IPC transmission, all data streams to receiving can be selected to pacify
Entirely detecting or the partial data stream received carries out safety detection, then secure box 1 can will pass through
The data stream of safety detection sends the D interface to safety equipment 2 by interface B；To examine without safety
The message load surveyed sends the E interface to safety equipment 2 by interface C.Safety equipment 2 can by through
The data stream crossing safety detection sends the H interface to safety equipment 3 by F interface；Will be without safety
The message load of detection sends the PCI interface to safety equipment 3 by interface G.Secure box 3 passes through H
Data stream, to after data stream, can be sent to IPSAN by interface by outgoing interface J；Safety equipment
After 3 receive message load by PCI interface, message load can be carried out safety detection, and by safety
Message load after detection is sent to IPSAN by interface J.
In the present invention, can pre-set a shunting rule, this shunting rule can be to receive
Data stream be divided into several sub data flows, and perform different process for this several sub data flow
The rule of action.The maximum data stream processing threshold value is exceeded without the uninterrupted of safety detection when receiving
Time, safety equipment can use this shunting rule, and flow to, according to this shunting rule, the data received
Row divides, so that safety equipment can perform different process actions to the different sub data flows after dividing.
Such as, the data stream received can be divided into partial data stream and report according to shunting rule by safety equipment
Literary composition load two parts, and only above-mentioned partial data stream is carried out safety detection, then, safety equipment are permissible
Partial data stream after safety detection and the above-mentioned message load without safety detection are forwarded.
In one embodiment, above-mentioned shunting rule can be that the different data streams assigned stages after dividing couples
Mouthful, such as, shunting rule can be the partial data stream appointment first order connecting port through safety detection,
Then this partial data stream can be forwarded by first order connecting port；This shunting rule can also be without
The message load crossing safety detection specifies second level connecting port, then this message load can be by the second cascade
Interface forwards.
In the present invention, when the safety equipment in video monitoring system receive data stream, right in selection
The all data streams received carry out safety detection or the partial data stream received is carried out safety detection it
Before, can first judge whether this data stream is the data stream through safety detection.
Wherein, when receive data stream safety equipment be by other safety equipment in video monitoring system
During the safety equipment being connected with IPC, these safety equipment can be coupled by first order connecting port or the second level
Mouth receives above-mentioned data stream；When the safety equipment receiving data stream are cascade mutually in video monitoring system
When in safety equipment, level is near the safety equipment of IPC, these safety equipment can be received by incoming interface
Above-mentioned data stream.
It should be noted that judge that whether a certain data stream be to be through the technology of the data stream of safety detection
Prior art, therefore the present invention does not repeats them here.
Step 202: for being judged as the data stream through safety detection, forward described data stream；For
It is judged as the data stream without safety detection, it is judged that whether the uninterrupted of described data stream is beyond equipment
The maximum process threshold value supported；
In the present invention, for being judged as the data stream through safety detection, it can be forwarded.
Wherein, it is the peace being connected with IPSAN by other safety equipment in video monitoring system when safety equipment
During full equipment, these safety equipment can by first order connecting port by this through the stream compression of safety detection
Send to the safety equipment of next level；In safety equipment are video monitoring system, the safety of cascade mutually sets
When standby middle level is near the safety equipment of IPSAN, above-mentioned data stream can be passed through by these safety equipment
Interface sends to rear end equipment.
For being judged as the data stream without safety detection, safety equipment can determine whether these data
The maximum process the threshold value whether uninterrupted of stream is supported beyond safety equipment.
It should be noted that the maximum threshold value that processes of safety equipment can be made by oneself by the performance of equipment or user
Justice sets, and the maximum threshold value that processes of different safety equipment can be different, and this is not limited by the present invention.
Step 203: when the uninterrupted of the described data stream without safety detection is beyond described maximum
During reason threshold value, carry out safety in described data stream without departing from the described maximum partial data stream processing threshold value
Forward after detection, forward beyond the described maximum message load processing threshold value in described data stream；
When the uninterrupted of the described data stream without safety detection is without departing from described maximum process threshold value, right
The described data stream without safety detection forwards after carrying out safety detection.
In the present invention, threshold is processed when the uninterrupted of the data stream received without departing from the maximum of this equipment
During value, this data stream can be carried out safety detection.Wherein, safety equipment carry out safe inspection to data stream
The process surveyed is prior art, and the present invention does not repeats them here.
After this data stream is carried out safety detection, if current safety equipment are not the safety of cascade mutually
In equipment, level is near the safety equipment of IPSAN, then these safety equipment can be by the first order thereon
If connecting port and in these safety equipment and above-mentioned level near between the safety equipment of IPSAN
This data stream after safety detection is sent to above-mentioned level by the first order connecting port of dry safety equipment
Near the safety equipment of IPSAN, above-mentioned level receives this number near the safety equipment of IPSAN
After stream, by outgoing interface, this data stream can be sent to IPSAN.
Certainly, if current safety equipment are the above-mentioned level safety equipment near IPSAN, then should
This can be sent to IPSAN by outgoing interface by safety equipment through the data stream of safety detection.
In one embodiment, when safety equipment in video monitoring system are by other safety equipment
When being connected with IPSAN, the data stream after safety detection is being turned by these safety equipment by first order connecting port
Send to above-mentioned level near during the safety equipment of IPSAN, can be based on several safety equipment
The MAC Address that learns of first order connecting port this data stream is forwarded.
In the present invention, set beyond this when the uninterrupted of the data stream without safety detection received
When standby maximum processes threshold value, can be to the partial data stream processing threshold value in this data stream without departing from maximum
Forward after carrying out safety detection, and carry out beyond the maximum message load processing threshold value in this data stream
Forward.
Wherein, when safety equipment are not level near the safety equipment of IPSAN, these safety equipment can
Will this data stream be pacified without departing from the partial data stream of maximum process threshold value by first order connecting port
Forward after full detection, and this data stream will process the report of threshold value beyond maximum by second level connecting port
Literary composition load is forwarded to the safety equipment of next level, to be born this message by the safety equipment of this next level
It is loaded into row safety detection.
In one embodiment, it is not the safety equipment near IPSAN for level, when receive
When processing threshold value without the uninterrupted of the data stream of safety detection beyond the maximum that safety equipment are supported, can
With use the shunting rule preset this data stream is divided into without departing from maximum process threshold value partial data stream and
Message load two parts of threshold value are processed beyond maximum.Then, safety equipment can be right based on this shunting rule
Should be forwarded by first order connecting port after carrying out safety detection without departing from the partial data stream of maximum process threshold value,
And this message load processing threshold value beyond maximum is forwarded by second level connecting port.
In the embodiment illustrated, it can be assumed that be not the level safety equipment near IPSAN
The maximum threshold value that processes is 300Mb, and the uninterrupted of the data stream that these safety equipment receive is 500Mb,
Then this data flow point can be Part I data stream and Part II based on shunting rule by these safety equipment
Message load.Wherein, the partial data stream of 300Mb before Part I data stream is this data stream；Second
Segment message loads as the message load of 200Mb after this data stream.Then, these safety equipment can be to
A part of data stream carries out safety detection, and the Part I data stream after safety detection is passed through the first order
Connecting port sends the first order connecting port of the safety equipment to next level；These safety equipment can not be to
Two segment message loads carry out safety detection, but by Part II message load by second level connecting port
It is forwarded to the second level connecting port of the safety equipment of next level, to be carried out by the safety equipment of next level
Safety detection.
Certainly, safety equipment are being advised beyond its maximum data flow point partition stream processing threshold value for uninterrupted
Time then, can first this data stream be identified five-tuple information based on data stream, so that it is determined that this number
The data stream for which IPC sent according to stream.
In the present invention, when the uninterrupted of the data stream without safety detection received is without departing from safety
When the maximum of equipment processes threshold value, these safety equipment can not use above-mentioned shunting rule to flow to these data
Row shunting.
In one embodiment, increase when the IPC in video monitoring system sends out stream bit rate so that this does not surpasses
When the uninterrupted of the partial data stream going out maximum process threshold value increases to process threshold value beyond maximum, safety
Equipment can be above-mentioned super by being divided to beyond the maximum part data stream processing threshold value in this partial data stream
Go out in the maximum message load processing threshold value, so that these safety equipment can complete to process without departing from maximum
The safety detection of the partial data stream of threshold value.
In the present invention, the safety equipment in video monitoring system can first judge the data stream that receives whether
For the data stream through safety detection, and for being judged as that the data stream through safety detection forwards；With
And for being judged as further being judged without the data stream of safety detection, these safety equipment can be sentenced
The maximum process the threshold whether uninterrupted of the disconnected above-mentioned data stream without safety detection is supported beyond equipment
Value, when the uninterrupted of the above-mentioned data stream without safety detection processes threshold value beyond maximum, can be right
Forward, to above-mentioned after above-mentioned data stream carries out safety detection without departing from the partial data stream of maximum process threshold value
In data stream, the segment message load beyond maximum process threshold value forwards；When above-mentioned without safety detection
Data stream uninterrupted without departing from maximum process threshold value time, described safety equipment can to above-mentioned without
The data stream of safety detection forwards after carrying out safety detection.
The application present invention can use several safety equipment to detect data stream, such that it is able to solve phase
The problem that in the technology of pass, safety equipment forward efficiency is low when in the face of larger data stream.
Below in conjunction with application scenarios figure, above-described embodiment is described in detail:
Refer to Fig. 4, realize an application scenarios figure of the shunting of data stream for the application present invention.Fig. 4
In, safety equipment 1,2 and 3 can mutually cascade, and these three safety equipment may be located at IPC and IPSAN
Between.Wherein, these three safety equipment can include the incoming interface A for receiving IPC flow and use
In to the outgoing interface J of IPSAN transmitted traffic.It addition, except outgoing interface illustrated above and incoming interface with
Outward, safety equipment can also include subtending port B to I.
It should be noted that video monitoring system can include multiple safety equipment, the bag shown in Fig. 4
Include 3 safety equipment and be only schematic example.
Wherein, above-mentioned subtending port B to I can be divided into first order connecting port (as the B in Fig. 4, D,
F and H interface) and second level connecting port (such as C, E, the G in Fig. 4 and PCI interface).Safety equipment
1, between 2 and safety equipment 2,3 first order connecting port be connected with first order connecting port, second cascade
Interface is connected with second level connecting port.
About the cascade system between the safety equipment of level adjacent in video monitoring system in above-mentioned enforcement
Describing in detail in example, the present invention repeats no more in this embodiment.
Above-mentioned first order connecting port can be to pass through safety equipment safety for forwarding on safety equipment
The interface of the data stream after detection, second level connecting port can be for forwarding without safety on safety equipment
The interface of the data stream after equipment safety detection.
Owing to first order connecting port sets for the stream compression after safety equipment safety detection is sent to safety
In standby group, the safety equipment of next cascade, therefore in first order connecting port and second level connecting port, permissible
Only learnt MAC Address by first order connecting port.
When the data stream got is sent to IPSAN by IPC, the safety equipment in video monitoring system
Data stream can be carried out safety detection, and will be sent to IPSAN by the data stream of safety detection.
When IPC gets data stream, data stream can be sent to coupled safety equipment 1,
After safety equipment 1 receive data stream by interface A, it may be determined that this data stream is to examine without safety
The data stream surveyed, then safety equipment 1 can determine whether whether the uninterrupted of this data stream exceeds
Its maximum process threshold value supported.Owing to this judge process is prior art, therefore this is not done by the present invention
Limit.
It should be noted that the maximum threshold value that processes of safety equipment can be made by oneself by the performance of equipment or user
Justice sets, and the maximum threshold value that processes of different safety equipment can be different, and therefore this is not limited by the present invention
Fixed.
After completing above-mentioned judge process, if the size of this data stream is without departing from the maximum of safety equipment 1
Reason threshold value, then safety equipment 1 can carry out safety detection to this data stream, and by the number after safety detection
Forward according to stream.
In one embodiment, the data stream after safety detection first can be passed through the first order by safety equipment 1
Connecting port B sends the first order connecting port D to safety equipment 2, and then safety equipment 2 are by interface D
After receiving this data stream, after can being safety detection by the analysis of this data stream being determined this data stream
Data stream, therefore safety equipment 2 can not carry out safety detection to this data stream, but based on self
Mac address table this data stream is forwarded to by the first order connecting port F first order of safety equipment 3
Connecting port H, after safety equipment 3 receive this data stream by interface H, can be by this data stream
Analysis determine that this data stream is the data stream after safety detection, therefore secure box 3 can not be to data
Stream carries out safety detection, is sent to IPSAN by interface J by this data stream.
In the embodiment illustrated, it can be assumed that the maximum threshold value that processes of safety equipment 1 is 300Mb,
And the uninterrupted of data stream that safety equipment 1 receive from interface A is 100Mb.Then safety equipment 1
Can learn that this uninterrupted without the data stream of safety detection is without departing from its maximum process threshold through judgement
Value, then, safety equipment 1 can carry out safety detection, and MAC based on self to this data stream
Data after safety detection are flowed through first order connecting port B and send the first order to safety equipment 2 by address table
Connecting port D, after safety equipment 2 receive data stream by interface D, it may be determined that this data stream is peace
Data stream after full detection, then safety equipment 2 can pass through the first order by mac address table based on self
This data stream is sent the first order connecting port H to safety equipment 3 by connecting port F, and safety equipment 3 pass through
After interface H receives data stream, it may be determined that this data stream is the data stream after safety detection, then,
Data stream is sent to IPSAN by safety equipment 3 by interface J.
In the present invention, if the uninterrupted of data stream that safety equipment 1 receive sets beyond safety
The maximum threshold value that processes of standby 1, then safety equipment 1 can will process threshold value without departing from maximum in this data stream
Partial data stream carry out safety detection, and the partial data stream after safety detection is coupled by the first order
Mouth forwards.Detailed process can be same as the previously described embodiments, and the present invention does not repeats them here.
In another embodiment, if the uninterrupted of data stream that receives of safety equipment 1 beyond
The maximum threshold value that processes of safety equipment 1, then the second level connecting port that safety equipment 1 can pass through to preset will
Above-mentioned data stream processes the message load transmission safety equipment to next level of threshold value beyond maximum, i.e.
Safety equipment 2, carry out safety detection.Specifically, safety equipment 1 can pass through first order connecting port C
This message load is sent the second level connecting port E to safety equipment 2, so that safety equipment 2 can be right
This message load carries out safety detection.
In the present invention, when safety equipment 1 receive data stream beyond maximum process threshold value, can be with base
In default shunting rule this data stream is divided into and processes the partial data stream of threshold value and super without departing from maximum
Go out maximum message load two parts processing threshold value.Then, safety equipment 1 can be based on this shunting rule
Turned by first order connecting port after this is carried out safety detection without departing from the partial data stream of maximum process threshold value
Send to the first order connecting port of safety equipment 2, and this message load processing threshold value beyond maximum is led to
Cross second level connecting port and be forwarded to the second level connecting port of safety equipment 2.
In the embodiment illustrated, it can be assumed that the maximum threshold value that processes of safety equipment 1 is 300Mb,
When safety equipment 1 receive the data stream that uninterrupted is 500Mb, safety equipment 1 can be based in advance
If shunting rule this data stream is divided into two parts, wherein, before Part I is this data stream
The partial data stream of 300Mb, Part II is the message load of the rear 200Mb of this data stream.Safety sets
The partial data stream of front 300Mb can be carried out safety detection by standby 1, and safety is examined based on shunting rule
Front 300Mb partial data stream after survey is sent to the first of safety equipment 2 by first order connecting port B
Subtending port D, after safety equipment 2 receive the partial data stream after safety detection by interface D, can
This partial data stream is sent the first order connecting port H to safety equipment 3 by first order connecting port F,
Safety equipment 3 receive after receiving this partial data stream by first order connecting port H, can pass through interface
This partial data stream is sent to IPSAN by J；Safety equipment 1 can not be to the message load of rear 200Mb
Carry out safety detection, but passed through second level connecting port C and send the safety equipment 2 to mutually cascade
Second level connecting port E carry out safety detection.After safety equipment 2 receive message load by interface E,
May determine that this message load without safety detection, then this message load can be carried out by safety equipment 2
Safety detection.Assuming that the maximum of safety equipment 2 processes threshold value is 100Mb, then safety equipment 2 are by judging
Understanding, the uninterrupted of this message load is beyond its maximum process threshold value, and now, safety equipment 2 are permissible
Based on default shunting rule, this message load is divided into without departing from its maximum segment message processing threshold value
Load and the message beyond its maximum process threshold value, i.e. safety equipment 2 can be by the report of this rear 200Mb
The front 100Mb of literary composition load is divided into the segment message load of front 100Mb, and by this rear 200Mb's
The rear 100Mb of message load is divided into the message of rear 100Mb.Then, safety equipment 2 can be to this
The segment message load of front 100Mb carries out safety detection, and is loaded by the segment message after safety detection logical
Crossing first order connecting port F and send the first order connecting port H to safety equipment 3, safety equipment 3 are by connecing
After mouth H receives segment message load, by interface J, the load of this segment message can be sent extremely
IPSAN；Safety equipment 2 can not carry out safety detection to the message of rear 100Mb, but uses second
This segment message is sent the second level connection to safety equipment 3 by second level connecting port G by shunting rule
Mouth I, after equipment 3 receives message by interface I, it may be determined that this message is without safety detection, so
Rear safety equipment 3 can carry out safety detection to this message, and the message after safety detection is passed through interface
J sends to IPSAN.
Certainly, safety equipment are being advised beyond its maximum data flow point partition stream processing threshold value for uninterrupted
Time then, can first this data stream be identified five-tuple information based on data stream, so that it is determined that this number
The data stream for which IPC sent according to stream.
In one embodiment, stream is sent out as the IPC (IPC1 in such as Fig. 4) in video monitoring system
Code check increases so that should increase to exceed without departing from the uninterrupted of the partial data stream that maximum processes threshold value
During maximum process threshold value, safety equipment can process that portion of threshold value beyond maximum in this partial data stream
Divided data stream is divided in the above-mentioned message load processing threshold value beyond maximum, so that these safety equipment are permissible
Complete the safety detection to the partial data stream processing threshold value without departing from maximum.
In another embodiment, do not surpass when the uninterrupted without the data stream of safety detection received
When going out the maximum process threshold value of safety equipment, these safety equipment can not use above-mentioned shunting rule to this number
Shunt according to stream.
In the present invention, the safety equipment in video monitoring system can first judge the data stream that receives whether
For the data stream through safety detection, and for being judged as that the data stream through safety detection forwards；With
And for being judged as further being judged without the data stream of safety detection, these safety equipment can be sentenced
The maximum process the threshold whether uninterrupted of the disconnected above-mentioned data stream without safety detection is supported beyond equipment
Value, when the uninterrupted of the above-mentioned data stream without safety detection processes threshold value beyond maximum, can be right
Forward, to above-mentioned after above-mentioned data stream carries out safety detection without departing from the partial data stream of maximum process threshold value
In data stream, the segment message load beyond maximum process threshold value forwards；When above-mentioned without safety detection
Data stream uninterrupted without departing from maximum process threshold value time, described safety equipment can to above-mentioned without
The data stream of safety detection forwards after carrying out safety detection.
The application present invention can use several safety equipment to detect data stream, such that it is able to solve phase
The problem that in the technology of pass, safety equipment forward efficiency is low when in the face of larger data stream.
Based on the inventive concept same with said method, the embodiment of the present invention additionally provides the shunting of data stream
The embodiment of device, the part flow arrangement of this data stream can apply on safety equipment.Wherein, these data
The part flow arrangement of stream can be realized by software, it is also possible to real by the way of hardware or software and hardware combining
Existing.As a example by implemented in software, as the device on a logical meaning, it is the processor by its place,
Computer program instructions corresponding in nonvolatile memory is read in internal memory and run formation.From answering
For aspect, as it is shown in figure 5, be the hardware configuration of the part flow arrangement of data stream in the embodiment of the present invention
Block diagram, in addition to the processor shown in Fig. 5, network interface, internal memory and nonvolatile memory, also
Other hardware can be included, such as camera head, be responsible for processing the forwarding chip etc. of message.
As shown in Figure 6, fill according to the shunting of a kind of data stream shown in an exemplary embodiment for the present invention
The block diagram put, described device includes: judge module the 610, first processing module 620 and second processes
Module 630.
Wherein, it is judged that module 610, whether the data stream received for judgement is through safety detection
Data stream；
First processing module 620, for for being judged as the data stream through safety detection, forwards described
Data stream；For being judged as the data stream without safety detection, it is judged that the uninterrupted of described data stream
The maximum process threshold value whether supported beyond equipment；
Second processing module 630, surpasses for the uninterrupted when the described data stream without safety detection
When going out described maximum process threshold value, to the part number processing threshold value in described data stream without departing from described maximum
Forward after carrying out safety detection according to stream, bear beyond the described maximum message processing threshold value in described data stream
It is loaded into row forwarding；When the uninterrupted of the described data stream without safety detection is without departing from described maximum
During reason threshold value, forward after the described data stream without safety detection is carried out safety detection.
In an optional implementation, the subtending port on described safety equipment includes that the first order couples
Mouthful and second level connecting port, wherein, first order connecting port and the between two safety equipment of adjacent level
One subtending port is connected, second level connecting port is connected with second level connecting port, and the most described first order couples
Mouthful study MAC Address, when described safety equipment by other safety equipment in video monitoring system with
When headend equipment is connected with rear end equipment, described device can also include (not shown in Fig. 6):
3rd processing module 640, is used for when described data stream is the data stream through safety detection, logical
Cross first order connecting port receive and forward described data stream；When described data stream is without safety detection
During data stream, received by second level connecting port and forward described data stream.
In an optional implementation, described device can also include (not shown in Fig. 6):
Divide module 650, for the uninterrupted when the described data stream without safety detection beyond institute
State maximum when processing threshold value, according to default shunting rule described data stream is divided into without departing from described
The big partial data stream processing threshold value and the message load two parts beyond described maximum process threshold value.
In an optional implementation, described shunting rule may include that
Described data stream is divided into several sub data flows；
Different process actions is performed for several sub data flows described；
Described division module 650 can be further used for:
Based on the described shunting rule part number to processing threshold value in described data stream without departing from described maximum
Carry out safety detection according to stream, and the described partial data stream after safety detection is entered by first order connecting port
Row forwards；
Described data stream will process the message load of threshold value beyond described maximum based on described shunting rule
Forwarded by second level connecting port.
In an optional implementation, described device can also include (not shown in Fig. 6):
Interactive module, in being, when described safety equipment, the safety equipment cascaded mutually, level is near front end
During the safety equipment of equipment, it is mutual that described safety equipment carry out data stream by the interface preset and headend equipment；
And when in the safety equipment that described safety equipment are mutually cascade level near the safety equipment of rear end equipment
Time, it is mutual that described safety equipment carry out data stream by default interface and rear end equipment.
In the present invention, the safety equipment in video monitoring system can first judge the data stream that receives whether
For the data stream through safety detection, and for being judged as that the data stream through safety detection forwards；With
And for being judged as further being judged without the data stream of safety detection, these safety equipment can be sentenced
The maximum process the threshold whether uninterrupted of the disconnected above-mentioned data stream without safety detection is supported beyond equipment
Value, when the uninterrupted of the above-mentioned data stream without safety detection processes threshold value beyond maximum, can be right
Forward, to above-mentioned after above-mentioned data stream carries out safety detection without departing from the partial data stream of maximum process threshold value
In data stream, the segment message load beyond maximum process threshold value forwards；When above-mentioned without safety detection
Data stream uninterrupted without departing from maximum process threshold value time, described safety equipment can to above-mentioned without
The data stream of safety detection forwards after carrying out safety detection.
The application present invention can use several safety equipment to detect data stream, such that it is able to solve phase
The problem that in the technology of pass, safety equipment forward efficiency is low when in the face of larger data stream.
Those skilled in the art, after considering the invention that description and practice are invented here, will readily occur to this
Other embodiment of invention.It is contemplated that contain any modification, purposes or the adaptability of the present invention
Change, these modification, purposes or adaptations are followed the general principle of the present invention and include this
The common knowledge in the art of bright invention or conventional techniques means.Description and embodiments only by
Being considered as exemplary, true scope and spirit of the invention are pointed out by claim below.
It should be appreciated that the invention is not limited in accurate knot described above and illustrated in the accompanying drawings
Structure, and various modifications and changes can carried out without departing from the scope.The scope of the present invention is only by appended
Claim limits.
The foregoing is only presently preferred embodiments of the present invention, not in order to limit the present invention, all at this
Within the spirit of invention and principle, any modification, equivalent substitution and improvement etc. done, should be included in
Within the scope of protection of the invention.
Claims (10)
1. a shunt method for data stream, is applied to include the regarding of safety equipment of some mutual cascades
Frequently the safety equipment in monitoring system, described video monitoring system also includes headend equipment and rear end equipment,
The safety equipment of described some mutual cascades are connected between described headend equipment and described rear end equipment, its
Being characterised by, described method includes:
Judge whether the data stream received is the data stream through safety detection；
For being judged as the data stream through safety detection, forward described data stream；For be judged as without
Cross the data stream of safety detection, it is judged that the maximum whether uninterrupted of described data stream is supported beyond equipment
Process threshold value；
When the uninterrupted of the described data stream without safety detection is beyond described maximum process threshold value,
Forward after described data stream carries out safety detection without departing from the described maximum partial data stream processing threshold value,
Forward beyond the described maximum message load processing threshold value in described data stream；When described without
When the uninterrupted of the data stream of safety detection is without departing from described maximum process threshold value, to described without safety
The data stream of detection forwards after carrying out safety detection.
Method the most according to claim 1, it is characterised in that the cascade on described safety equipment
Interface includes first order connecting port and second level connecting port, wherein, two safety equipment of adjacent level it
Between first order connecting port is connected with first order connecting port, second level connecting port is connected with second level connecting port,
And the most described first order connecting port study MAC Address, when described safety equipment pass through video monitoring system
In other safety equipment when being connected with headend equipment and rear end equipment, described method also includes:
When described data stream is the data stream through safety detection, is received by first order connecting port and turn
Send out data stream described；
When the data stream that described data stream is without safety detection, by second level connecting port receive and
Forward described data stream.
Method the most according to claim 2, it is characterised in that described method also includes:
When the uninterrupted of the described data stream without safety detection is beyond described maximum process threshold value,
According to default shunting rule, described data stream is divided into without departing from the described maximum part number processing threshold value
According to stream and beyond described maximum message load two parts processing threshold value.
Method the most according to claim 3, it is characterised in that described shunting rule includes:
Described data stream is divided into several sub data flows；
Different process actions is performed for several sub data flows described；
Described data stream is divided into without departing from described maximum process threshold by the shunting rule that described basis is preset
The partial data stream being worth and the message load two parts processing threshold value beyond described maximum, also include:
Based on the described shunting rule part number to processing threshold value in described data stream without departing from described maximum
Carry out safety detection according to stream, and the described partial data stream after safety detection is entered by first order connecting port
Row forwards；
Described data stream will process the message load of threshold value beyond described maximum based on described shunting rule
Forwarded by second level connecting port.
Method the most according to claim 2, it is characterised in that described method also includes:
In described safety equipment are the safety equipment cascaded mutually, level is near the safety of headend equipment
During equipment, it is mutual that described safety equipment carry out data stream by default interface and headend equipment；
In described safety equipment are the safety equipment cascaded mutually, level is near the safety of rear end equipment
During equipment, it is mutual that described safety equipment carry out data stream by default interface and rear end equipment.
6. a part flow arrangement for data stream, is applied to include the regarding of safety equipment of some mutual cascades
Frequently the safety equipment in monitoring system, described video monitoring system also includes headend equipment and rear end equipment,
The safety equipment of described some mutual cascades are connected between described headend equipment and described rear end equipment, its
Being characterised by, described device includes:
Whether judge module, be the data stream through safety detection for judging the data stream received；
First processing module, for for being judged as the data stream through safety detection, forwards described data
Stream；For being judged as the data stream without safety detection, it is judged that whether the uninterrupted of described data stream
The maximum process threshold value supported beyond equipment；
Second processing module, for the uninterrupted when the described data stream without safety detection beyond institute
When stating maximum process threshold value, to the partial data stream processing threshold value in described data stream without departing from described maximum
Forward after carrying out safety detection, enter beyond the described maximum message load processing threshold value in described data stream
Row forwards；When the uninterrupted of the described data stream without safety detection is without departing from described maximum process threshold
During value, forward after the described data stream without safety detection is carried out safety detection.
Device the most according to claim 6, it is characterised in that the cascade on described safety equipment
Interface includes first order connecting port and second level connecting port, wherein, two safety equipment of adjacent level it
Between first order connecting port is connected with first order connecting port, second level connecting port is connected with second level connecting port,
And the most described first order connecting port study MAC Address, when described safety equipment pass through video monitoring system
In other safety equipment when being connected with headend equipment and rear end equipment, described device also includes:
3rd processing module, for when described data stream be the data stream through safety detection, by the
One subtending port receives and forwards described data stream；When described data stream is the data without safety detection
During stream, received by second level connecting port and forward described data stream.
Device the most according to claim 7, it is characterised in that described device also includes:
Divide module, for when the described data stream without safety detection uninterrupted beyond described
During big process threshold value, according to default shunting rule, described data stream is divided into without departing from described maximum
Manage the partial data stream of threshold value and beyond described maximum message load two parts processing threshold value.
Device the most according to claim 8, it is characterised in that described shunting rule includes:
Described data stream is divided into several sub data flows；
Different process actions is performed for several sub data flows described；
Described division module is further used for:
Based on the described shunting rule part number to processing threshold value in described data stream without departing from described maximum
Carry out safety detection according to stream, and the described partial data stream after safety detection is entered by first order connecting port
Row forwards；
Described data stream will process the message load of threshold value beyond described maximum based on described shunting rule
Forwarded by second level connecting port.
Device the most according to claim 7, it is characterised in that described device also includes:
Interactive module, in being, when described safety equipment, the safety equipment cascaded mutually, level is near front
During the safety equipment of end equipment, described safety equipment carry out data stream by the interface preset with headend equipment
Alternately；And when in the safety equipment that described safety equipment are mutually cascade level near rear end equipment
During safety equipment, it is mutual that described safety equipment carry out data stream by default interface and rear end equipment.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610289433.2A CN106027405B (en) | 2016-05-03 | 2016-05-03 | Data stream shunting method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610289433.2A CN106027405B (en) | 2016-05-03 | 2016-05-03 | Data stream shunting method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106027405A true CN106027405A (en) | 2016-10-12 |
| CN106027405B CN106027405B (en) | 2020-04-10 |
Family
ID=57082049
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610289433.2A Active CN106027405B (en) | 2016-05-03 | 2016-05-03 | Data stream shunting method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106027405B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108322403A (en) * | 2018-01-31 | 2018-07-24 | 杭州迪普科技股份有限公司 | A kind of Netflow flow shunts method and device |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070016938A1 (en) * | 2005-07-07 | 2007-01-18 | Reti Corporation | Apparatus and method for identifying safe data in a data stream |
| CN101729424A (en) * | 2009-12-16 | 2010-06-09 | 杭州华三通信技术有限公司 | Flow forwarding method, devices and system |
| CN103051557A (en) * | 2012-12-27 | 2013-04-17 | 华为技术有限公司 | Data stream processing method and system, controller and switching equipment |
| CN103609070A (en) * | 2012-10-29 | 2014-02-26 | 华为技术有限公司 | Network traffic detection method, system, equipment and controller |
| CN103685052A (en) * | 2012-09-21 | 2014-03-26 | 中国电信股份有限公司 | Method and system for diversion control of network data traffic |
| CN103685321A (en) * | 2013-12-31 | 2014-03-26 | 北京神州绿盟信息安全科技股份有限公司 | Data packet forwarding and safety protection detection system, load balancing method and device |
| CN104158761A (en) * | 2014-08-05 | 2014-11-19 | 华为技术有限公司 | Flow distribution method and device |
| CN104753738A (en) * | 2015-03-26 | 2015-07-01 | 杭州华三通信技术有限公司 | Flow measurement method and device |
-
2016
- 2016-05-03 CN CN201610289433.2A patent/CN106027405B/en active Active
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070016938A1 (en) * | 2005-07-07 | 2007-01-18 | Reti Corporation | Apparatus and method for identifying safe data in a data stream |
| CN101729424A (en) * | 2009-12-16 | 2010-06-09 | 杭州华三通信技术有限公司 | Flow forwarding method, devices and system |
| CN103685052A (en) * | 2012-09-21 | 2014-03-26 | 中国电信股份有限公司 | Method and system for diversion control of network data traffic |
| CN103609070A (en) * | 2012-10-29 | 2014-02-26 | 华为技术有限公司 | Network traffic detection method, system, equipment and controller |
| CN103051557A (en) * | 2012-12-27 | 2013-04-17 | 华为技术有限公司 | Data stream processing method and system, controller and switching equipment |
| CN103685321A (en) * | 2013-12-31 | 2014-03-26 | 北京神州绿盟信息安全科技股份有限公司 | Data packet forwarding and safety protection detection system, load balancing method and device |
| CN104158761A (en) * | 2014-08-05 | 2014-11-19 | 华为技术有限公司 | Flow distribution method and device |
| CN104753738A (en) * | 2015-03-26 | 2015-07-01 | 杭州华三通信技术有限公司 | Flow measurement method and device |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108322403A (en) * | 2018-01-31 | 2018-07-24 | 杭州迪普科技股份有限公司 | A kind of Netflow flow shunts method and device |
| CN108322403B (en) * | 2018-01-31 | 2022-03-25 | 杭州迪普科技股份有限公司 | Netflow flow shunting method and device |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106027405B (en) | 2020-04-10 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10785130B2 (en) | Network infrastructure device to implement pre-filter rules | |
| CN108092913A (en) | A kind of method and the multi-core CPU network equipment of message shunting | |
| US20070276938A1 (en) | Utilizing captured IP packets to determine operations performed on packets by a network device | |
| CN110661716B (en) | Network packet loss notification method, monitoring device, switch and storage medium | |
| CN104468107B (en) | Verify data processing method and processing device | |
| CN106650589A (en) | Real-time face recognition system and method | |
| CN106330944A (en) | Method and device for recognizing malicious system vulnerability scanner | |
| CN110290154A (en) | A kind of illegal external connection detection device, method and storage medium | |
| CN106878164A (en) | A kind of message transmitting method and device | |
| CN105591835B (en) | A kind of detection method and device of link-quality | |
| CN107222451A (en) | data flow monitoring method and device | |
| CN106789652A (en) | Service shunting method and device | |
| CN104009986A (en) | Network attack springboard detection method and device based on host | |
| CN110225062A (en) | A kind of method and apparatus monitoring network attack | |
| KR20140047221A (en) | Hardward engine for high-capacity packet processing of network data loss prevention appliance | |
| CN106027405A (en) | Data stream probe method and device | |
| CN104883362A (en) | Method and device for controlling abnormal access behaviors | |
| CN106506265B (en) | Detection fpga chip hangs dead method and device | |
| CN107210969B (en) | Data processing method based on software defined network and related equipment | |
| CN110881016B (en) | Network security threat assessment method and device | |
| CN106357446B (en) | A kind of acquisition methods and device of flow forward-path | |
| CN109167707A (en) | A kind of shunting device test macro, method, apparatus, server and storage medium | |
| CN105704057B (en) | The method and apparatus for determining the type of service of burst port congestion packet loss | |
| CN105634839B (en) | A kind of method and apparatus for obtaining network reachable address space | |
| CN108566380A (en) | A kind of proxy surfing Activity recognition and detection method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |