CN106330478A - Method and device for processing trap message - Google Patents

Method and device for processing trap message Download PDF

Info

Publication number
CN106330478A
CN106330478A CN201510333033.2A CN201510333033A CN106330478A CN 106330478 A CN106330478 A CN 106330478A CN 201510333033 A CN201510333033 A CN 201510333033A CN 106330478 A CN106330478 A CN 106330478A
Authority
CN
China
Prior art keywords
trap
message
trap message
rule
abandon
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
CN201510333033.2A
Other languages
Chinese (zh)
Inventor
李伟东
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN201510333033.2A priority Critical patent/CN106330478A/en
Priority to PCT/CN2016/076645 priority patent/WO2016202025A1/en
Publication of CN106330478A publication Critical patent/CN106330478A/en
Withdrawn legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0604Management of faults, events, alarms or notifications using filtering, e.g. reduction of information by using priority, element types, position or time
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention provides a method and a device for processing a trap message. The method comprises steps: a trap message for identifying device warning information is received; the trap message is matched with a discarding rule for discarding the trap message; and according to the matching result, the trap message is processed. Thus, the problem that as useful trap messages are submerged by useless trap messages and are discarded, and thus, the trap message error discarding rate is high in a related technology is solved, and the effect of reducing the trap message error discarding rate is achieved.

Description

Trap Trap message processing method and device
Technical field
The present invention relates to the communications field, in particular to a kind of trap Trap message processing method and device.
Background technology
Under network communication environment, NMS is mainly responsible for the alarm management of network, safety management, configuration management Deng work, wherein, alarm management plays very important effect to the properly functioning of network operation.
In current network domain of communication equipment, when network element occurs abnormal conditions due to environmental effect or hardware fault, need Network management system is reported in the way of alarm.In view of simple network management system (Simple Network Management System, referred to as SNMP) simplification of agreement and maturity, it is widely used by each big equipment supplier.Equipment Warning information generally uses transmission snmp trap Trap message to network management system, and network management system resolves Trap message for accusing The mode of alert data.
Along with the increase of network equipment scale, the network element Trap message in the whole network that network management system receives is the hugest Greatly, little on service impact or without impact Trap message is received and parsed through process by network management system, wastes net in a large number The calculating resource of guard system, and useless Trap message the most also can fully support alarm business process Buffer Pool, cause later Significant alarm is lost.Therefore abandoning useless Trap message is requisite part.
Alarm discard processing technology in presently relevant technology mainly uses Trap message after protocol stack resolves Report network management system, abandon further according to service filtering rule after being mapped to service alarm information in systems, agreement Stack User Datagram Protocol (User Datagram Protocol, referred to as UDP) the message solution to SNMP Trap message Although analysis is fast, but waste system resource, wastage and useless Trap through the flow process such as business mapping of flow process below The quantity of message is directly proportional.Additionally user abandons rule by the alarm that network management system configures and is typically only capable to be accurate to alarm code, And if the Trap message possessing specific properties value under this alarm code possesses Special Significance when should not abandon to network management system, Also it is dropped, it is impossible to accomplishing that the Trap message possessing specific properties value under an alarm code does not abandons, other are then lost Abandon.Therefore, there is useful Trap message in the related can be dropped, and the mistake loss ratio of Trap message is high Problem.
It is dropped owing to useful Trap message can be flooded by useless Trap message present in correlation technique, Thus the problem that the mistake loss ratio of the Trap message caused is high, effective solution is the most not yet proposed.
Summary of the invention
The invention provides a kind of trap Trap message processing method and device, at least to solve present in correlation technique Useful Trap message can be flooded by useless Trap message and be dropped, thus the mistake loss ratio of the Trap message caused High problem.
According to an aspect of the invention, it is provided a kind of trap Trap message processing method, including: receive and be used for marking Know the Trap message of equipment alarm information;Described Trap message and the rule that abandons being used for abandoning Trap message are carried out Join;According to matching result, described Trap message is processed.
Alternatively, abandon rule described in and include at least one of: abandon pre-configured Trap object identifier OID mark The Trap message known;Abandon pre-configured Trap object identifier OID mark, and message attribute is the first predetermined genus The Trap message of property value;Abandon pre-configured Trap object identifier OID mark, and message attribute non-second makes a reservation for The Trap message of property value.
Alternatively, before receiving the described Trap message for identifying equipment alarm information, also include: resolve described Abandon rule;According to after resolving abandon rule generate possess predetermined internal storage structure abandon rule.
Alternatively, carry out mating including with the rule that abandons being used for abandoning Trap message by described Trap message: to described Trap message carries out original protocol layer architecture and resolves;Trap message after resolving and described possess predetermined internal storage structure The rule that abandons mate.
Alternatively, according to matching result, described Trap message is carried out process to include: when described Trap message is lost with described Abandon rule when matching, abandon described Trap message;And/or, when described Trap message does not mates with the described rule that abandons Time, described Trap message is mapped to warning information;Described warning information is sent to for entering described warning information The upper layer module that row processes.
According to a further aspect in the invention, it is provided that a kind of trap Trap message process device, including: receiver module, For receiving the Trap message for identifying equipment alarm information;Matching module, for by described Trap message be used for The rule that abandons abandoning Trap message is mated;Processing module, for entering described Trap message according to matching result Row processes.
Alternatively, abandon rule described in and include at least one of: abandon pre-configured Trap object identifier OID mark The Trap message known;Abandon pre-configured Trap object identifier OID mark, and message attribute is the first predetermined genus The Trap message of property value;Abandon pre-configured Trap object identifier OID mark, and message attribute non-second makes a reservation for The Trap message of property value.
Alternatively, described device also includes: parsing module, be used for resolving described in abandon rule;Generation module, for root According to after resolving abandon rule generate possess predetermined internal storage structure abandon rule.
Alternatively, described matching module includes: resolution unit, for described Trap message is carried out original protocol layer Structure elucidation;Matching unit, Trap message after resolving and described possess predetermined internal storage structure abandon rule Mate.
Alternatively, described processing module includes: discarding unit, for abandoning rule phase when described Trap message with described During coupling, abandon described Trap message;And/or, map unit, for abandoning rule when described Trap message with described When not mating, described Trap message is mapped to warning information;Transmitting element, for being sent to described warning information For the upper layer module that described warning information is processed.
By the present invention, use the Trap message received for identifying equipment alarm information;By described Trap message and use Mate in the rule that abandons abandoning Trap message;According to matching result, described Trap message is processed, solve Present in correlation technique, useful Trap message can be flooded by useless Trap message and be dropped, thus cause The problem that the mistake loss ratio of Trap message is high, and then reached the effect of the mistake loss ratio reducing Trap message.
Accompanying drawing explanation
Accompanying drawing described herein is used for providing a further understanding of the present invention, constitutes the part of the application, the present invention Schematic description and description be used for explaining the present invention, be not intended that inappropriate limitation of the present invention.In the accompanying drawings:
Fig. 1 is the flow chart of trap Trap message processing method according to embodiments of the present invention;
Fig. 2 is the structured flowchart of trap Trap message process device according to embodiments of the present invention;
Fig. 3 is the preferred structure block diagram of trap Trap message process device according to embodiments of the present invention;
Fig. 4 is the structured flowchart of matching module 24 in trap Trap message process device according to embodiments of the present invention;
Fig. 5 is the structured flowchart of processing module 26 in trap Trap message process device according to embodiments of the present invention;
Fig. 6 is that Trap packet loss according to embodiments of the present invention processes structured flowchart;
Fig. 7 is the judgement stream that use Trap OID according to embodiments of the present invention and attribute appointment abandon specific T rap message Cheng Tu;
Fig. 8 be use Trap OID according to embodiments of the present invention and attribute exception specify abandon sentencing of specific T rap message Disconnected flow chart.
Detailed description of the invention
Below with reference to accompanying drawing and describe the present invention in detail in conjunction with the embodiments.It should be noted that in the feelings do not conflicted Under condition, the embodiment in the application and the feature in embodiment can be mutually combined.
It should be noted that term " first " in description and claims of this specification and above-mentioned accompanying drawing, " second " Etc. being for distinguishing similar object, without being used for describing specific order or precedence.
Providing a kind of trap Trap message processing method in the present embodiment, Fig. 1 is falling into according to embodiments of the present invention The flow chart of trap Trap message processing method, as it is shown in figure 1, this flow process comprises the steps:
Step S102, receives the Trap message for identifying equipment alarm information;
Step S104, mates this Trap message with the rule that abandons being used for abandoning Trap message;
Step S106, processes this Trap message according to matching result.
By above-mentioned steps, when performing the discard processing of Trap message, be by Trap message with abandon rule and carry out Join, relative to alarm code corresponding for Trap message is mated with abandoning rule in correlation technique, above-mentioned enforcement Coupling in example is the finest, it is possible to decide whether to hold this Trap message according to some characteristics of Trap message itself Row discard processing.Thus solve useful Trap message present in correlation technique and can be flooded by useless Trap message And be dropped, thus the problem that the mistake loss ratio of the Trap message caused is high, and then reached to reduce the mistake of Trap message The effect of loss ratio.
In an optional embodiment, the above-mentioned rule that abandons includes at least one of: abandon pre-configured Trap pair Trap message as identifier OID mark;Abandon pre-configured Trap object identifier OID mark, and message Attribute is the Trap message of the first predetermined attribute value;Abandon pre-configured Trap object identifier OID mark, and report The Trap message of the literary composition non-second predetermined attribute value of attribute.Abandon rule it can be seen that latter two abandons rule from above-mentioned Not only allow for the Trap OID of Trap message in then, it is also contemplated that the property value of Trap message, further increase Trap The accuracy rate of packet loss.The above-mentioned rule that abandons carries out several example, it is also possible to have other abandons rule, such as, Abandon other Trap messages in addition to the Trap message of certain Trap OID mark.Relative to abandoning in correlation technique Mode, the above-mentioned granularity abandoning rule is the finest, thus solves that to abandon granularity present in correlation technique excessive and lead The Trap message the caused problem that loss ratio is high by mistake, effectively reduces the mistake loss ratio of Trap message.
In an optional embodiment, before receiving the Trap message for identifying equipment alarm information, also include: Resolve and above-mentioned abandon rule;According to after resolving abandon rule generate possess predetermined internal storage structure abandon rule.To abandon Rule treatments becomes to possess abandoning rule and can more easily mating with Trap message of predetermined internal storage structure.
In an optional embodiment, carry out mating bag with the rule that abandons being used for abandoning Trap message by Trap message Include: Trap message is carried out original protocol layer architecture and resolves;Trap message after resolving is tied with possessing predetermined internal memory The rule that abandons of structure is mated.
In an optional embodiment, according to matching result, Trap message is carried out process and include: when this Trap message With abandon rule match time, abandon this Trap message;And/or, when this Trap message with abandon rule do not mate time, This Trap message is mapped to warning information;Warning information is sent to the upper strata mould for processing warning information Block.That is, advise with abandoning in rule when the Trap OID of Trap message or the Trap OID of Trap message and property value Fixed corresponding time, illustrate that this Trap message should be dropped, thus this Trap message performed discard processing. Otherwise, illustrate that this Trap message possesses certain meaning to network management system, should not abandon, thus will be from Trap message In the warning information that maps out be sent to upper layer module and process.
Through the above description of the embodiments, those skilled in the art is it can be understood that arrive according to above-described embodiment Method can add the mode of required general hardware platform by software and realize, naturally it is also possible to by hardware, but a lot In the case of the former is more preferably embodiment.Based on such understanding, technical scheme is the most in other words to existing The part having technology to contribute can embody with the form of software product, and this computer software product is stored in one In storage medium (such as ROM/RAM, magnetic disc, CD), including some instructions with so that a station terminal equipment (can To be mobile phone, computer, server, or the network equipment etc.) perform the method described in each embodiment of the present invention.
Additionally providing a kind of trap Trap message process device in the present embodiment, this device is used for realizing above-described embodiment And preferred implementation, carried out repeating no more of explanation.As used below, term " module " can be real The software of existing predetermined function and/or the combination of hardware.Although the device described by following example preferably comes real with software Existing, but hardware, or the realization of the combination of software and hardware also may and be contemplated.
Fig. 2 is the structured flowchart of trap Trap message process device according to embodiments of the present invention, as in figure 2 it is shown, should Device includes receiver module 22, matching module 24 and processing module 26, illustrates this device below.
Receiver module 22, for receiving the Trap message for identifying equipment alarm information;Matching module 24, is connected to Above-mentioned receiver module 22, for mating Trap message with the rule that abandons being used for abandoning Trap message;Process mould Block 26, is connected to above-mentioned matching module 24, for processing Trap message according to matching result.
Alternatively, the above-mentioned rule that abandons includes at least one of: abandon pre-configured Trap object identifier OID mark The Trap message known;Abandon pre-configured Trap object identifier OID mark, and message attribute is the first predetermined genus The Trap message of property value;Abandon pre-configured Trap object identifier OID mark, and message attribute non-second makes a reservation for The Trap message of property value.
Fig. 3 is the preferred structure block diagram of trap Trap message process device according to embodiments of the present invention, as it is shown on figure 3, This device, in addition to including all modules shown in Fig. 2, also includes parsing module 32 and generation module 34, below to this dress Put and illustrate.
Parsing module 32, is used for resolving and above-mentioned abandons rule;Generation module 34, is connected to above-mentioned parsing module 32 and connects Receive module 22, for according to after resolving abandon rule generate possess predetermined internal storage structure abandon rule.
Fig. 4 is the structured flowchart of matching module 24 in trap Trap message process device according to embodiments of the present invention, as Shown in Fig. 4, this matching module 24 includes resolution unit 42 and matching unit 44, carries out this matching module 24 below Explanation.
Resolution unit 42, resolves for Trap message carries out original protocol layer architecture;Matching unit 44, is connected to Above-mentioned resolution unit 42, the Trap message after resolving and the rule that abandons possessing predetermined internal storage structure are mated.
Fig. 5 is the structured flowchart of processing module 26 in trap Trap message process device according to embodiments of the present invention, as Shown in Fig. 5, this processing module 26 includes discarding unit 52, and/or map unit 54, transmitting element 56, below right This processing module 26 illustrates.
Discarding unit 52, for when Trap message with abandon rule match time, abandon this Trap message;And/or, reflect Penetrate unit 54, for when Trap message with abandon rule do not mate time, this Trap message is mapped to warning information;Send out Send unit 56, be connected to above-mentioned map unit 54, for above-mentioned warning information is sent to for carrying out warning information The upper layer module processed.
Knowable to above-described embodiment, the embodiment of the present invention provides one and abandons based on SNMP Trap message Method so that the behavior that abandons occurs, before entering operation layer and processing, and not differentiate between equipment, come into force the whole network.Base The discarding method that can configure the Trap possessing particular community and property value on rule-based approach further is abandoned in Trap OID. Thus overcome the alarm of existing network management system to abandon the problem that efficiency is low, granularity cannot be accurate to Trap attribute.To based on Trap The appliance services of method is opened significant.
Fig. 6 is that Trap packet loss according to embodiments of the present invention processes structured flowchart, as shown in Figure 6, including abandoning Rule parsing device 62 (with above-mentioned receiver module 22 and resolution unit 42), Trap packet parsing processor 64 are (ibid The parsing module 32 stated and generation module 34), discard processing device 66 (discarding unit 52 with above-mentioned) and report transmission Device 68 (with above-mentioned map unit 54 and transmitting element 56), illustrates each several part below.
Abandon rule parsing device 62: the alarm pre-set is abandoned rule (abandoning rule with above-mentioned) and resolves to system Data structure in internal memory.
Trap packet parsing processor 64: receive Trap message from webmaster Trap receiving port, and according to protocol format solution Analysis message data structure.
Discard processing device 66: according to the feature abandoned in rule Rapid matching Trap message.For the match is successful, Trap reports Civilian carries out discard processing.
Report transmitter 68: the Trap message not being dropped is processed, through mapping etc., the alarm being converted in network management system Information, and it is pushed to webmaster upper strata processing module.
Wherein Trap packet parsing processor 64, abandon rule parsing device 62, discard processing device 66 can be located immediately at In snmp stack, such treatment effeciency is the highest.
The embodiment of the present invention additionally provides a kind of discard processing method of Trap message, comprises the following steps:
The alarm pre-set is abandoned rule parsing and becomes the data structure in Installed System Memory by step A.;
Step B. receives Trap message from webmaster Trap receiving port, and according to protocol format analytic message data structure;
Step C., according to the feature abandoned in rule Rapid matching Trap message, is entered for the Trap message that the match is successful Row discard processing;
The Trap message not being dropped is processed, through mapping etc., the warning information being converted in network management system by step D., And it is pushed to webmaster upper strata processing module.
In the embodiment of the present invention, customization alarm abandons regular method and is based on directly on Trap message structure configuration network management system Alarm abandons rule, carries out alarm according to protocol massages field and abandons, it is not necessary to industry before entering operation layer process in alarm Business is analyzed, and this abandons rule can be to use following form:
Form 1: configuration abandons the Trap OID of Trap message, and all Trap messages meeting this Trap OID are all lost Abandon;
Form 2: configuration abandons the Trap OID of Trap message, the attribute that in configuration attribute regional structure, specific bit is put simultaneously The regular expression (being the first predetermined attribute value with above-mentioned message attribute) of OID or importance value.All meet This Trap OID, and specifying position to occur in that attribute OID or the Trap message of coupling regular expression value It is dropped;
Form 3: configuration abandons the Trap OID of Trap message, configuration simultaneously meets the Trap message under this Trap OID Exception (with the Trap message of the above-mentioned non-second predetermined attribute value of message attribute).Exception is put by specific bit in Trap The configuration regular expression that meets of attribute OID and value is specified.In this fashion, when the Trap report being an actually-received The Trap OID of literary composition meets the rule that above-mentioned Trap message exception is specified, then continues to report this Trap message, otherwise loses Abandon this Trap message.
Below in conjunction with the concrete rule that abandons, the present invention is illustrated.
Embodiment one
Trap OID mode is used to specify the process abandoning Trap message:
Abandon rule parsing device 62 after step 1. system start-up to resolve predefined alarm and abandon rule, generate in internal memory just In the internal storage structure that discard processing device 66 quickly reads.The rule that abandons configured uses the mode of above-mentioned 1, such as:
/ trap/1/exclude/oid=.1.3.6.1.2.1.11.2
Representing that meeting the Trap message that Trap OID is .1.3.6.1.2.1.11.2 will be dropped, other Trap messages are reported to Upper-layer service module.
Step 2. network management system receives Trap message at alarm receiving port, and Trap is reported by Trap dissection process device 64 Literary composition carries out original protocol layer architecture and resolves.
Trap structure after step 3. resolves enters discard processing device 66, complete herein Trap OID and attribute field with Pre-configured rule compares, and according to comparative structure Discard alarm, or feeding reports transmitter 68.
Step 4. reports transmitter 68 that alarm is respectively fed to each needs reception alarm to carry out the upper layer module of Business Processing.
Embodiment two
Trap OID and attribute is used to specify the process abandoning specific T rap message:
Abandon rule parsing device 62 after step 1. system start-up to resolve predefined alarm and abandon rule, generate in internal memory just In the internal storage structure that discard processing device 66 quickly reads.The rule that abandons such as configured uses the side in above-mentioned form two Formula, such as:
/ trap/1/exclude/oid=.1.3.6.1.2.1.11.2
/ trap/1/exclude/value=2_.1.3.6.1.2.1.2.2.1.1_^ [0-9] * $
It is configured with the 1st article of alarm in this embodiment and abandons rule, represent that meeting Trap OID is .1.3.6.1.2.1.11.2, And in attribute region, the key of the 2nd attribute is .1.3.6.1.2.1.2.2.1.1, and value meets regular expression The Trap of ^ [0-9] * $ will be dropped.
Step 2. network management system is after alarm receiving port receives Trap, and Trap is entered by Trap dissection process device 64 The protocol layer architecture parsing that row is original.
Trap structure after step 3. resolves enters discard processing device 66, complete herein TrapOID and attribute field with Pre-configured rule compares, and according to comparative structure Discard alarm, or feeding reports transmitter 68.
Judge flow process in detail as it is shown in fig. 7, Fig. 7 is use Trap OID according to embodiments of the present invention and attribute appointment Abandon the decision flow chart of specific T rap message.Fig. 7 comprises the steps: Trap OID in S1 analytic message, D1 judging, if not finding corresponding Trap OID rule just by S4 in rule, entering into step 4.As Fruit is configured with this Trap OID rule, and in S2 analytic message, attribute field extracts attribute OID and value, and sentences in D2 Disconnected, matched rule exclude then abandons S3, does not send into step 4, and otherwise S4 sends into step 4.
Step 4. reports transmitter 68 that warning information is respectively fed to each needs reception alarm to carry out the upper strata of Business Processing Module.
Embodiment three
Use Trap OID and attribute to make an exception and specify the process abandoning specific T rap message:
After step 1. system start-up, 62 abandon rule parsing device and resolve predefined alarm and abandon rule, generate in internal memory just In the internal storage structure that discard processing device 66 quickly reads.The rule that abandons such as configured uses the mode of above-mentioned form three, As:
/ trap/1/exclude/oid=.1.3.6.1.2.1.11.2
/ trap/1/exception/value=2_.1.3.6.1.2.1.2.2.1.1_^ [0-9] * $
In embodiment three, it is configured with the 1st article of alarm abandons rule, represent that meeting Trap OID is .1.3.6.1.2.1.11.2 Trap will be dropped, but have an exception, it is simply that if the key of the 2nd attribute is .1.3.6.1.2.1.2.2.1.1 in attribute region, And value meets the Trap of regular expression ^ [0-9] * $ will be continued to be reported to upper-layer service mould not by this rule impact Block.
Step 2. network management system is after alarm receiving port receives Trap, and Trap is entered by Trap dissection process device 64 The protocol layer architecture parsing that row is original.
Trap structure after step 3. resolves enters discard processing device 66, complete herein TrapOID and attribute field with Pre-configured rule compares, and according to comparative structure Discard alarm, or feeding reports transmitter 68.
Judging flow process as shown in Figure 8 in detail, Fig. 8 is use Trap OID according to embodiments of the present invention and attribute exception Specify the decision flow chart abandoning specific T rap message.This flow process comprises the steps: that S1 resolves in Trap message TrapOID, judges in D1, if not finding corresponding TrapOID regular just by S4 in abandoning rule, Enter into step 4.If being configured with this TrapID rule, in S2 analytic message, attribute field extracts attribute OID and value, And in D2, judge do not have matched rule exception then to abandon S3, and do not send into step 4, otherwise S4 sends into step 4。
Step 4. reports transmitter 68 that warning information is respectively fed to each needs reception alarm to carry out the upper strata of Business Processing Module.
Alarm in correlation technique abandons or filter method is all based on specific warnings occurring source, or Trap is through industry Business resolve, map after user's intelligible alarm code comparison and abandon.Relative to the scheme in correlation technique, this Scheme in bright embodiment is based on Trap message data, does not enters into abandoning before any Business treatment, the most not Distinguishing alarm occurring source, the alarm sending whole network equipment comes into force, and treatment effeciency is high, and overhead is little.And can base Specify, according to the attribute in Trap message, the action taked in abandoning of Trap OID configuration further on rule, accomplish Fine-grained alarm abandons rule configuration.Appliance services based on Trap is automatically opened network management system and is generally only concerned on a small quantity Trap type, the scheme in the embodiment of the present invention is significant for such system.
It should be noted that above-mentioned modules can be by software or hardware realizes, for the latter, Ke Yitong Cross in the following manner to realize, but be not limited to this: above-mentioned module is respectively positioned in same processor;Or, above-mentioned module position respectively In multiple processors.
Embodiments of the invention additionally provide a kind of storage medium.Alternatively, in the present embodiment, above-mentioned storage medium can To be arranged to storage for the program code performing following steps:
S1, receives the Trap message for identifying equipment alarm information;
S2, mates this Trap message with the rule that abandons being used for abandoning Trap message;
S3, processes this Trap message according to matching result.
Alternatively, in the present embodiment, above-mentioned storage medium can include but not limited to: USB flash disk, read only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, letter Be referred to as RAM), portable hard drive, the various media that can store program code such as magnetic disc or CD.
Alternatively, the concrete example in the present embodiment is referred to showing described in above-described embodiment and optional embodiment Example, the present embodiment does not repeats them here.
Obviously, those skilled in the art should be understood that each module of the above-mentioned present invention or each step can be with general Calculating device to realize, they can concentrate on single calculating device, or be distributed in multiple calculating device and formed Network on, alternatively, they can realize, it is thus possible to by them with calculating the executable program code of device Storage is performed by calculating device in the storage device, and in some cases, can hold with the order being different from herein Step shown or described by row, or they are fabricated to respectively each integrated circuit modules, or by many in them Individual module or step are fabricated to single integrated circuit module and realize.So, the present invention is not restricted to any specific hardware Combine with software.
The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for the technology of this area For personnel, the present invention can have various modifications and variations.All within the spirit and principles in the present invention, that is made is any Amendment, equivalent, improvement etc., should be included within the scope of the present invention.

Claims (10)

1. a trap Trap message processing method, it is characterised in that including:
Receive the Trap message for identifying equipment alarm information;
Described Trap message is mated with the rule that abandons being used for abandoning Trap message;
According to matching result, described Trap message is processed.
Method the most according to claim 1, it is characterised in that described in abandon rule and include at least one of:
Abandon the Trap message of pre-configured Trap object identifier OID mark;
Abandon pre-configured Trap object identifier OID mark, and message attribute is the first predetermined attribute value Trap message;
Abandon what pre-configured Trap object identifier OID identified, and the non-second predetermined attribute value of message attribute Trap message.
Method the most according to claim 1, it is characterised in that receiving the described Trap for identifying equipment alarm information Before message, also include:
Rule is abandoned described in parsing;
According to after resolving abandon rule generate possess predetermined internal storage structure abandon rule.
Method the most according to claim 3, it is characterised in that by described Trap message be used for abandoning Trap message The rule that abandons carry out coupling and include:
Described Trap message carries out original protocol layer architecture resolve;
Trap message and the described rule that abandons possessing predetermined internal storage structure after resolving are mated.
Method the most according to any one of claim 1 to 4, it is characterised in that according to matching result to described Trap Message carries out process and includes:
When described Trap message with described abandon rule match time, abandon described Trap message;And/or,
When described Trap message with described abandon rule do not mate time, described Trap message is mapped to warning information; Described warning information is sent to the upper layer module for processing described warning information.
6. a trap Trap message process device, it is characterised in that including:
Receiver module, for receiving the Trap message for identifying equipment alarm information;
Matching module, for mating described Trap message with the rule that abandons being used for abandoning Trap message;
Processing module, for processing described Trap message according to matching result.
Device the most according to claim 6, it is characterised in that described in abandon rule and include at least one of:
Abandon the Trap message of pre-configured Trap object identifier OID mark;
Abandon pre-configured Trap object identifier OID mark, and message attribute is the first predetermined attribute value Trap message;
Abandon what pre-configured Trap object identifier OID identified, and the non-second predetermined attribute value of message attribute Trap message.
Device the most according to claim 6, it is characterised in that also include:
Parsing module, be used for resolving described in abandon rule;
Generation module, for according to after resolving abandon rule generate possess predetermined internal storage structure abandon rule.
Device the most according to claim 8, it is characterised in that described matching module includes:
Resolution unit, resolves for described Trap message carries out original protocol layer architecture;
Matching unit, Trap message and the described rule that abandons possessing predetermined internal storage structure after resolving are entered Row coupling.
10. according to the device according to any one of claim 6 to 9, it is characterised in that described processing module includes:
Discarding unit, for when described Trap message with described abandon rule match time, abandon described Trap report Literary composition;And/or,
Map unit, for when described Trap message with described abandon rule do not mate time, by described Trap message It is mapped to warning information;Transmitting element, for being sent to described warning information for carrying out described warning information The upper layer module processed.
CN201510333033.2A 2015-06-16 2015-06-16 Method and device for processing trap message Withdrawn CN106330478A (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201510333033.2A CN106330478A (en) 2015-06-16 2015-06-16 Method and device for processing trap message
PCT/CN2016/076645 WO2016202025A1 (en) 2015-06-16 2016-03-17 Trap message processing method and apparatus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510333033.2A CN106330478A (en) 2015-06-16 2015-06-16 Method and device for processing trap message

Publications (1)

Publication Number Publication Date
CN106330478A true CN106330478A (en) 2017-01-11

Family

ID=57544901

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510333033.2A Withdrawn CN106330478A (en) 2015-06-16 2015-06-16 Method and device for processing trap message

Country Status (2)

Country Link
CN (1) CN106330478A (en)
WO (1) WO2016202025A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112787847A (en) * 2020-12-24 2021-05-11 凌云天博光电科技股份有限公司 Method and device for rapidly processing large number of Trap based on network management system EPON

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111885180B (en) * 2020-07-28 2023-06-20 海尔优家智能科技(北京)有限公司 Message issuing method and device

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101056228A (en) * 2007-06-22 2007-10-17 中兴通讯股份有限公司 Test method and system for data device alarming
CN101369918A (en) * 2008-09-25 2009-02-18 浙江工业大学 Network management browser
CN101388808A (en) * 2008-10-24 2009-03-18 中兴通讯股份有限公司 Trap processing method on the basis of simple network management protocol
CN102571382A (en) * 2010-12-16 2012-07-11 中兴通讯股份有限公司 Trap processing method, webmaster and system based on SNMP (Simple Network Management Protocol)
CN103138958A (en) * 2011-11-23 2013-06-05 上海寰创通信科技股份有限公司 Implementation method of network management standard interface
CN103414596A (en) * 2013-08-28 2013-11-27 上海斐讯数据通信技术有限公司 Method for recognizing and processing all manufacturer Traps based on simple network management protocol

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101312405B (en) * 2007-05-24 2011-06-08 杭州华三通信技术有限公司 Alarm processing method and network management system
CN101540700A (en) * 2009-04-10 2009-09-23 成都市华为赛门铁克科技有限公司 Configuration linkage method, system, terminal and network equipment management server
WO2012114343A1 (en) * 2011-02-24 2012-08-30 Hewlett-Packard Development Company, L.P. System and method for error reporting in a network

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101056228A (en) * 2007-06-22 2007-10-17 中兴通讯股份有限公司 Test method and system for data device alarming
CN101369918A (en) * 2008-09-25 2009-02-18 浙江工业大学 Network management browser
CN101388808A (en) * 2008-10-24 2009-03-18 中兴通讯股份有限公司 Trap processing method on the basis of simple network management protocol
CN102571382A (en) * 2010-12-16 2012-07-11 中兴通讯股份有限公司 Trap processing method, webmaster and system based on SNMP (Simple Network Management Protocol)
CN103138958A (en) * 2011-11-23 2013-06-05 上海寰创通信科技股份有限公司 Implementation method of network management standard interface
CN103414596A (en) * 2013-08-28 2013-11-27 上海斐讯数据通信技术有限公司 Method for recognizing and processing all manufacturer Traps based on simple network management protocol

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112787847A (en) * 2020-12-24 2021-05-11 凌云天博光电科技股份有限公司 Method and device for rapidly processing large number of Trap based on network management system EPON

Also Published As

Publication number Publication date
WO2016202025A1 (en) 2016-12-22

Similar Documents

Publication Publication Date Title
US10795992B2 (en) Self-adaptive application programming interface level security monitoring
CN103370904B (en) Method, network entity for the seriousness that determines network accident
US20130191890A1 (en) Method and system for user identity recognition based on specific information
WO2016054992A1 (en) Network data collection system and method
CN103546343B (en) The network traffics methods of exhibiting of network traffic analysis system and system
US10979921B2 (en) Systems and methods for monitoring network slices using probes
WO2006120039A1 (en) Distributed traffic analysis
CN109525412B (en) Method and device for managing network slices
CN113825129B (en) Industrial Internet asset mapping method in 5G network environment
CN101217403B (en) A realization method of alarming based on SNMP
CN101848107A (en) SNMP (Simple Network Management Protocol) network element and communication method of SNMP network element and proprietary protocol network element
CN106656998A (en) Server communication method and device
CN109379764A (en) File transmitting method and device
EP3096492B1 (en) Page push method and system
CN104363187A (en) Gateway resource response method and gateway resource response device for internet of things
CN101267335B (en) A method for guaranteeing successful alarm receiving/transmission in simple network management protocol
CN101667932A (en) Method of network element equipment log management and device
CN106330478A (en) Method and device for processing trap message
CN112616127A (en) Method for realizing gateway data processing and related components thereof
CN101686223B (en) Feedback method of content filtering and device
CN106959903A (en) Trap instruction Trap processing method and processing device
CN116192761A (en) Message forwarding method, forwarding layer device, system, electronic device and storage medium
CN107529190B (en) User data acquisition system and method
CN106559838B (en) business processing optimization method and device
CN101714950A (en) Method and device for realizing fault positioning

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
WW01 Invention patent application withdrawn after publication

Application publication date: 20170111

WW01 Invention patent application withdrawn after publication