CN106789301B - Method and device for generating running log of WEB gateway - Google Patents

Method and device for generating running log of WEB gateway Download PDF

Info

Publication number
CN106789301B
CN106789301B CN201611250049.8A CN201611250049A CN106789301B CN 106789301 B CN106789301 B CN 106789301B CN 201611250049 A CN201611250049 A CN 201611250049A CN 106789301 B CN106789301 B CN 106789301B
Authority
CN
China
Prior art keywords
request message
generating
tracking
object set
index
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201611250049.8A
Other languages
Chinese (zh)
Other versions
CN106789301A (en
Inventor
付程
尹海明
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Nsfocus Technologies Inc
Nsfocus Technologies Group Co Ltd
Original Assignee
Nsfocus Technologies Inc
Beijing NSFocus Information Security Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nsfocus Technologies Inc, Beijing NSFocus Information Security Technology Co Ltd filed Critical Nsfocus Technologies Inc
Priority to CN201611250049.8A priority Critical patent/CN106789301B/en
Publication of CN106789301A publication Critical patent/CN106789301A/en
Application granted granted Critical
Publication of CN106789301B publication Critical patent/CN106789301B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/069Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/02Standardisation; Integration
    • H04L41/0246Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols
    • H04L41/0273Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols using web services for network management, e.g. simple object access protocol [SOAP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0695Management of faults, events, alarms or notifications the faulty arrangement being the maintenance, administration or management system
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/02Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

The invention provides a method and a device for generating an operation log of a WEB gateway, which relate to the technical field of communication, and are used for only distributing a tracking index to a request message which accords with the characteristics of a preset tracking object on the premise of not influencing the processing performance of the gateway, and generating the operation log according to the processing process of the request message carrying the tracking index, so that when a software fault occurs, a maintainer can quickly diagnose the fault only by calling and analyzing the operation log marked with the tracking index. The method comprises the following steps: determining whether a preset tracking object set comprises a user identifier or not according to the user identifier in a request message sent by a sending end; and if so, generating an operation log, wherein the operation log comprises a tracking index for identifying the request message.

Description

Method and device for generating running log of WEB gateway
Technical Field
The present invention relates to the field of communications technologies, and in particular, to a method and an apparatus for generating an operation log of a WEB gateway.
Background
The log saving is a technology for recording the behavior of the user in the network, and the behavior of the user in the network can be conveniently inquired, tracked and analyzed by adopting the log saving technology. The log saving technology is widely applied to network systems such as instant messaging systems, bank systems, telephone systems, website systems and the like. Since the gateway devices such as routers and firewalls carry high-load outgoing traffic and incoming traffic, the main program thereof sets a fixed operation level when operating.
When the network management equipment has a software fault, the running log recorded in the background only provides ERROR message or WARNING message, however, the specific ERROR information for analyzing the software fault can only be used for restarting the main program of the network management equipment and starting the debugging mode, and the running log for determining the software fault can only be traced.
In summary, calling all the running logs of the print record will cause the demand of the disk space to increase instantly, the memory space is seriously insufficient, and the performance is affected; finding a log of software failures from a large number of running logs is extremely inefficient.
Disclosure of Invention
The embodiment of the invention provides a method and a device for generating an operation log of a WEB gateway, wherein the method and the device are used for allocating a tracking index to a request message which accords with the preset characteristics of a tracked object and generating the operation log according to the processing process of the request message carrying the tracking index, so that when a software fault occurs, a maintainer can quickly diagnose the fault only by calling and analyzing the operation log marked with the tracking index.
The method for generating the operation log of the WEB gateway provided by the embodiment of the invention comprises the following steps:
determining whether a preset tracking object set comprises a user identifier or not according to the user identifier in a request message sent by a sending end;
and if so, generating an operation log, wherein the operation log comprises a tracking index for identifying the request message.
In the embodiment of the invention, the tracing index is distributed to the request message which accords with the preset tracing object characteristics, and the operation log is generated according to the processing process of the request message carrying the tracing index, so that when a software fault occurs, a maintainer only needs to call and analyze the operation log marked with the tracing index to quickly diagnose the fault, the problems of instant increase of the demand of a disk space and serious shortage of a memory space caused by calling all the operation logs are avoided, and the efficiency of analyzing the fault is improved on the premise of not influencing the performance of the operation log.
Preferably, before generating the running log according to the trace index for identifying the current request message and the processing procedure of the request message, the method further includes:
and generating a tracking index for identifying the current request message according to the process identification of the request message and the cumulative times of receiving the request message.
Preferably, determining whether a preset tracking object set includes the user identifier according to the user identifier in the request message sent by the sending end includes:
acquiring a source IP address from a received HTTP/HTTPS request sent by a sending end;
and determining whether the source IP address is included in a preset tracking object set.
Preferably, determining whether a preset tracking object set includes the user identifier according to the user identifier in the request message sent by the sending end includes:
acquiring a request URL from a received HTTP/HTTPS request sent by a sending end;
and determining whether the URL is included in a preset tracking object set.
Preferably, the method further comprises:
adding or deleting the user identification in the tracking object set according to the received modification instruction; or deleting the user identifier in the tracking object set if the preset tracking time or the preset tracking times are met.
The device for generating the running log of the WEB gateway provided by the embodiment of the invention comprises:
the query module is used for determining whether a preset tracking object set comprises the user identification or not according to the user identification in the request message sent by the sending end;
and the generating module is used for generating an operation log if the request message is received, wherein the operation log comprises a tracking index used for identifying the request message.
In the embodiment of the invention, the tracing index is distributed to the request message which accords with the preset tracing object characteristics, and the operation log is generated according to the processing process of the request message carrying the tracing index, so that when a software fault occurs, a maintainer only needs to call and analyze the operation log marked with the tracing index to quickly diagnose the fault, the problems of instant increase of the demand of a disk space and serious shortage of a memory space caused by calling all the operation logs are avoided, and the efficiency of analyzing the fault is improved on the premise of not influencing the performance of the operation log.
Preferably, before generating the running log according to the trace index for identifying the current request message and the processing procedure of the request message, the generating module is further configured to:
and generating a tracking index for identifying the current request message according to the process identification of the request message and the cumulative times of receiving the request message.
Preferably, the query module is specifically configured to:
acquiring a source IP address from a received HTTP/HTTPS request sent by a sending end;
and determining whether the source IP address is included in a preset tracking object set.
Preferably, the query module is specifically configured to:
acquiring a request URL from a received HTTP/HTTPS request sent by a sending end;
and determining whether the URL is included in a preset tracking object set.
Preferably, the query module is further configured to:
adding or deleting the user identification in the tracking object set according to the received modification instruction; or deleting the user identifier in the tracking object set if the preset tracking time or the preset tracking times are met.
Drawings
Fig. 1 is a schematic flowchart of a method for generating a log of a WEB gateway according to an embodiment of the present invention;
fig. 2 is a schematic flowchart of a method for generating a log of a WEB gateway according to an embodiment of the present invention;
fig. 3 is a schematic structural diagram of an apparatus for generating a log of a WEB gateway according to an embodiment of the present invention.
Detailed Description
The embodiment of the invention provides a method and a device for generating an operation log of a WEB gateway, which are used for allocating a tracking index to a request message which accords with the preset characteristics of a tracked object and generating the operation log according to the processing process of the request message carrying the tracking index, so that when a software fault occurs, a maintainer can quickly diagnose the fault only by calling and analyzing the operation log marked with the tracking index, the problems of instant increase of the demand of a disk space and serious shortage of a memory space caused by calling all the operation logs are avoided, and the efficiency of analyzing the fault is improved on the premise of not influencing the performance of the operation log.
The technical solutions in the present invention will be described clearly and completely with reference to the accompanying drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Referring to fig. 1, an embodiment of the present invention provides a method for generating a log of a WEB gateway, where the method includes:
s101, determining whether a preset tracking object set comprises a user identifier or not according to the user identifier in a request message sent by a sending end;
and S102, if so, generating an operation log, wherein the operation log comprises a tracking index for identifying the request message.
By the method for generating the operation log of the WEB gateway, provided by the embodiment of the invention, when a software fault occurs, a maintainer can quickly diagnose the fault only by calling and analyzing the operation log marked with the tracking index, and the problems of instant increase of the demand of a disk space and serious shortage of a memory space caused by calling all the operation logs are avoided.
The sending end in the embodiment of the invention can be a client, and the receiving end can be a WEB server or a WEB gateway.
Before generating the operation log in step S102, the method further includes:
and generating a tracking index for identifying the current request message according to the process identification of the request message.
When multiple threads exist in one process, the request message can not be accurately identified only by the tracking index determined according to the process identification of the request message. Therefore, preferably, a trace index for identifying the current request message is generated according to the process identifier of the request message and the accumulated number of times of receiving the request message. Wherein the trace index is a non-zero value. The process identification may be pid (process identity), and the accumulation number may be a private global counter in the process for accumulating the number of HTTP/HTTPs requests received. The trace index is a unique identification used to determine the HTTP/HTTPs request. Namely, the tracking index and the HTTP/HTTPs request are in a one-to-one correspondence relationship.
Specifically, generating a trace index for identifying the current request message according to the process identifier of the request message and the cumulative number of times of receiving the request message includes:
and carrying out OR operation on the low 16 bits of the accumulated times of the received HTTP/HTTPS request and the process identifier of the request message to generate a 32-bit tracking index.
In step S101, determining whether a preset tracking object set includes a user identifier according to the user identifier in the request message sent by the sending end, includes:
acquiring a source IP address from a received HTTP/HTTPS request sent by a sending end;
and determining whether the source IP address is included in a preset tracking object set.
Acquiring a source IP (Source Internet protocol) address from a received HTTP/HTTPS request sent by a sending end, and determining whether a preset tracking object set comprises the source IP address. Alternatively, the first and second electrodes may be,
a request URL (Uniform resource Locator) is obtained from a received HTTP/HTTPs request sent by a sending end, and it is determined whether a preset tracking object set includes the URL.
Wherein, the method also comprises:
adding or deleting the user identification in the tracking object set according to the received modification instruction; or deleting the user identifier in the tracking object set if the preset tracking time or the preset tracking times are met. That is, the user identifier in the tracking object set may be added or deleted according to the received modification instruction of the user requirement, or the user identifier (IP address or request URL) of the client is deleted when the time of tracking the client sending the HTTP/HTTPs request satisfies a preset tracking time threshold; or deleting the user identification (IP address or request URL) of the client sending the HTTP/HTTPS request when the tracking number of the client meets the preset tracking number.
When the WEB gateway equipment receives a large number of HTTP/HTTPS requests at the same time, analyzing each HTTP/HTTPS request to determine whether a preset tracking object set comprises the user identification; if so, the WEB gateway generates a trace index for identifying the HTTP/HTTPS session request aiming at the HTTP/HTTPS request, records the detailed processing process of the HTTP/HTTPS request carrying the trace index in the WEB gateway, and generates an operation log.
An overall process of generating a WEB log according to an embodiment of the present invention will be described below with reference to fig. 2:
s201, constructing a preset tracking object set, namely reading a configuration file comprising related information of the tracking object for initialization, and storing a user identifier of the tracking object in the tracking object set;
s202, when the WEB gateway receives an HTTP/HTTPS request sent by a client, inquiring whether a preset tracking object set comprises an IP address of the client or a URL (Uniform resource locator) of the HTTP/HTTPS; i.e. determining whether the IP address or the URL of the HTTP/HTTPs needs to be traced;
s203, if yes, placing the global counter increased by the interior of the WEB gateway to the high 16 bits of an index value, and performing OR operation with the process identification of the WEB gateway to generate a 32-bit non-zero tracking index;
and S204, recording a detailed processing process of the HTTP/HTTPS request carrying the tracking index in the WEB gateway, and storing the generated running log in a storage module of the WEB server. When a software fault occurs, only the operation log marked with the tracking index needs to be called and analyzed, so that the problems that the demand of disk space is increased instantly and the memory space is seriously insufficient due to calling of all the operation logs are solved, and the efficiency of analyzing the fault is improved on the premise of not influencing the performance of the operation logs.
Because the trace index generated according to the index generation algorithm corresponds to each session one by one, the debugging granularity can be refined to a single service, namely each HTTP session, so that when a fault occurs and the running log is called, the specific content of each HTTP session can be accurately called, the problem of insufficient survival space when all the running logs are called is avoided, and the influence on the processing performance of the gateway is also avoided.
Referring to fig. 3, an embodiment of the present invention provides an apparatus for generating a log of a WEB gateway, where the apparatus includes:
the query module 301 is configured to determine whether a preset tracking object set includes a user identifier according to the user identifier in a request message sent by a sending end;
a generating module 302, configured to generate an operation log if the request message is a request message, where the operation log includes a tracking index for identifying the request message.
Specifically, before generating the running log according to the trace index for identifying the current request message and the processing procedure of the request message, the generating module 302 is further configured to:
and generating a tracking index for identifying the current request message according to the process identification of the request message and the cumulative times of receiving the request message.
Specifically, the query module 301 is specifically configured to:
acquiring a source IP address from a received HTTP/HTTPS request sent by a sending end;
and determining whether the source IP address is included in a preset tracking object set.
Specifically, the query module 301 is specifically configured to:
acquiring a request URL from a received HTTP/HTTPS request sent by a sending end;
and determining whether the URL is included in a preset tracking object set.
Specifically, the query module 301 is further configured to:
adding or deleting the user identification in the tracking object set according to the received modification instruction; or deleting the user identifier in the tracking object set if the preset tracking time or the preset tracking times are met.
The device for generating the operation log may be a WEB server, a WEB gateway, or a WAF device (WEB Application Firewall, website Application level intrusion prevention system).
In summary, embodiments of the present invention provide a method and an apparatus for generating a running log of a WEB gateway, which can query an interactive message and a specific execution step of an HTTP session of a specific tracked object according to a tracking index in the running log. When an error message or an alarm message is reported, a specific HTTP session of the message with the error or the alarm can be tracked, so that a method for tracking a specific HTTP/HTTPS request from a large number of HTTP/HTTPS requests is provided on the premise of not influencing the performance of a running log, and the efficiency of analyzing faults is improved.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
It will be apparent to those skilled in the art that various changes and modifications may be made in the present invention without departing from the spirit and scope of the invention. Thus, if such modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.

Claims (6)

1. A method for generating a running log of a WEB gateway is characterized by comprising the following steps:
determining whether a preset tracking object set comprises a user identifier or not according to the user identifier in a request message sent by a sending end;
if so, generating an operation log, wherein the operation log comprises a tracking index for identifying the request message;
determining whether a preset tracking object set comprises a user identifier according to the user identifier in a request message sent by a sending end, wherein the determining comprises the following steps:
acquiring a source IP address from a received HTTP/HTTPS request sent by a sending end; determining whether a preset tracking object set comprises the source IP address or not; and
generating the log according to the following steps:
generating a tracking index for identifying the HTTP/HTTPS request, and recording the processing process of the HTTP/HTTPS request carrying the tracking index in the WEB gateway to obtain the running log;
generating the trace index according to the following steps:
and generating a tracking index for identifying the current request message according to the process identification of the request message and the cumulative times of receiving the request message.
2. The method of claim 1, wherein determining whether a preset tracking object set includes the user identifier according to the user identifier in the request message sent by the sending end includes:
acquiring a request URL from a received HTTP/HTTPS request sent by a sending end;
and determining whether the URL is included in a preset tracking object set.
3. The method according to claim 1 or 2, characterized in that the method further comprises:
adding or deleting the user identification in the tracking object set according to the received modification instruction; or deleting the user identifier in the tracking object set if the preset tracking time or the preset tracking times are met.
4. An apparatus for generating a log of a WEB gateway, comprising:
the query module is used for determining whether a preset tracking object set comprises the user identification or not according to the user identification in the request message sent by the sending end;
the generating module is used for generating an operation log if the request message is received, wherein the operation log comprises a tracking index used for identifying the request message;
the query module is specifically configured to obtain a source IP address from a received HTTP/HTTPs request sent by a sending end; determining whether a preset tracking object set comprises the source IP address or not; and
generating the log according to the following steps:
generating a tracking index for identifying the HTTP/HTTPS request, and recording the processing process of the HTTP/HTTPS request carrying the tracking index in the WEB gateway to obtain the running log;
generating the trace index according to the following steps:
and generating a tracking index for identifying the current request message according to the process identification of the request message and the cumulative times of receiving the request message.
5. The apparatus of claim 4, wherein the query module is specifically configured to:
acquiring a request URL from a received HTTP/HTTPS request sent by a sending end;
and determining whether the URL is included in a preset tracking object set.
6. The apparatus of claim 4 or 5, wherein the query module is further configured to:
adding or deleting the user identification in the tracking object set according to the received modification instruction; or deleting the user identifier in the tracking object set if the preset tracking time or the preset tracking times are met.
CN201611250049.8A 2016-12-29 2016-12-29 Method and device for generating running log of WEB gateway Active CN106789301B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201611250049.8A CN106789301B (en) 2016-12-29 2016-12-29 Method and device for generating running log of WEB gateway

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201611250049.8A CN106789301B (en) 2016-12-29 2016-12-29 Method and device for generating running log of WEB gateway

Publications (2)

Publication Number Publication Date
CN106789301A CN106789301A (en) 2017-05-31
CN106789301B true CN106789301B (en) 2020-11-20

Family

ID=58927621

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201611250049.8A Active CN106789301B (en) 2016-12-29 2016-12-29 Method and device for generating running log of WEB gateway

Country Status (1)

Country Link
CN (1) CN106789301B (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108197200B (en) * 2017-12-27 2021-06-15 金蝶软件(中国)有限公司 Log tracking method and device, computer equipment and storage medium
CN108289038A (en) * 2017-12-30 2018-07-17 金蝶软件(中国)有限公司 Request tracing method, apparatus, computer equipment and storage medium
CN109669915A (en) * 2018-12-12 2019-04-23 浪潮(北京)电子信息产业有限公司 A kind of computer task management method, device and relevant device
CN112925757A (en) * 2021-03-26 2021-06-08 广东好太太智能家居有限公司 Method, equipment and storage medium for tracking operation log of intelligent equipment

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101489243A (en) * 2008-01-14 2009-07-22 中国移动通信集团公司 Malfunction analysis apparatus, method and malfunction processing system
CN103268277A (en) * 2013-04-23 2013-08-28 青岛海信传媒网络技术有限公司 Method and system for outputting log information
CN104618144A (en) * 2014-12-31 2015-05-13 深圳市兰丁科技有限公司 Method and system for tracking data package according to message identifier
CN105653625A (en) * 2015-12-23 2016-06-08 郑州悉知信息科技股份有限公司 Analysis method and device of abnormal data
CN106156328A (en) * 2016-07-06 2016-11-23 中国银行股份有限公司 A kind of bank's running log data monitoring method and system

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7606814B2 (en) * 2004-03-11 2009-10-20 Microsoft Corporation Tracing a web request through a web server

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101489243A (en) * 2008-01-14 2009-07-22 中国移动通信集团公司 Malfunction analysis apparatus, method and malfunction processing system
CN103268277A (en) * 2013-04-23 2013-08-28 青岛海信传媒网络技术有限公司 Method and system for outputting log information
CN104618144A (en) * 2014-12-31 2015-05-13 深圳市兰丁科技有限公司 Method and system for tracking data package according to message identifier
CN105653625A (en) * 2015-12-23 2016-06-08 郑州悉知信息科技股份有限公司 Analysis method and device of abnormal data
CN106156328A (en) * 2016-07-06 2016-11-23 中国银行股份有限公司 A kind of bank's running log data monitoring method and system

Also Published As

Publication number Publication date
CN106789301A (en) 2017-05-31

Similar Documents

Publication Publication Date Title
US10623516B2 (en) Data cloud storage system, client terminal, storage server and application method
CN106789301B (en) Method and device for generating running log of WEB gateway
US9369435B2 (en) Method for providing authoritative application-based routing and an improved application firewall
US8904524B1 (en) Detection of fast flux networks
WO2019232071A1 (en) Aggregation of scalable network flow events
US20140330960A1 (en) Systems and Methods for Identifying Applications in Mobile Networks
CN111176941B (en) Data processing method, device and storage medium
CN112737800B (en) Service node fault positioning method, call chain generating method and server
US11032358B2 (en) Monitoring web applications including microservices
CN111641585A (en) DDoS attack detection method and device
CN104468201A (en) Automatic deleting method and device for offline network equipment
CN104866296A (en) Data processing method and device
US9191285B1 (en) Automatic web service monitoring
CN112165451A (en) APT attack analysis method, system and server
CN110602171B (en) Interaction method and device
CN114465791A (en) Method and device for establishing white list in network management equipment, storage medium and processor
CN110727563A (en) Cloud service alarm method and device for preset customer
CN112217777A (en) Attack backtracking method and equipment
CN113411209A (en) Distributed password service full-link detection system and method
KR20200007912A (en) Methods, devices, and systems for monitoring data traffic
CN104579753A (en) User data statistical method, access layer server and statistical server
CN106210159B (en) Domain name resolution method and device
CN115756888A (en) Data processing method, processor, device and storage medium
CN113778709B (en) Interface calling method, device, server and storage medium
CN109347766A (en) A kind of method and device of scheduling of resource

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
CP01 Change in the name or title of a patent holder

Address after: 100089 Beijing city Haidian District Road No. 4 North wa Yitai three storey building

Patentee after: NSFOCUS Technologies Group Co.,Ltd.

Patentee after: NSFOCUS TECHNOLOGIES Inc.

Address before: 100089 Beijing city Haidian District Road No. 4 North wa Yitai three storey building

Patentee before: NSFOCUS INFORMATION TECHNOLOGY Co.,Ltd.

Patentee before: NSFOCUS TECHNOLOGIES Inc.

CP01 Change in the name or title of a patent holder