CN106878108B - Network flow playback test method and device - Google Patents
Network flow playback test method and device Download PDFInfo
- Publication number
- CN106878108B CN106878108B CN201710119772.0A CN201710119772A CN106878108B CN 106878108 B CN106878108 B CN 106878108B CN 201710119772 A CN201710119772 A CN 201710119772A CN 106878108 B CN106878108 B CN 106878108B
- Authority
- CN
- China
- Prior art keywords
- playback
- network traffic
- network flow
- network
- point
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/50—Testing arrangements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Information Transfer Between Computers (AREA)
Abstract
The invention discloses a network flow playback test method, which comprises the following steps: acquiring the network traffic of a target website, and classifying the acquired network traffic according to a preset classification rule; encrypting and identifying the classified network flow, and extracting user information of the identified network flow to obtain network flow for playback; and respectively carrying out network flow playback test on the playback network flow at the preset network flow playback cut-in point and the comparison point. The invention also discloses a network flow playback testing device. The technical scheme provided by the invention solves the technical problems of redundancy and low playback speed of the existing network flow playback data.
Description
Technical Field
The invention relates to the technical field of system testing, in particular to a network flow playback testing method and device.
Background
In the development of computer network/security products and the implementation of security solutions, when network construction or capacity expansion security device selection is performed, comprehensive and systematic testing needs to be performed on the performance of the network/security device, and network traffic playback is a crucial testing method. The existing network flow playback solution is based on tcdisplay playback of pcap packets, and can modify captured messages at will and specify the playback speed of the messages and the like. However, the data played back by tcdisplay is too redundant, and the similarity between data is high, and the playback speed is slow.
Disclosure of Invention
The invention mainly aims to provide a network flow playback test method and a network flow playback test device, and aims to solve the technical problems of redundancy and low playback speed of the existing network flow playback data.
In order to achieve the above object, the network traffic playback test method provided by the present invention comprises the following steps:
acquiring the network traffic of a target website, and classifying the acquired network traffic according to a preset classification rule;
encrypting and identifying the classified network flow, and extracting user information of the identified network flow to obtain network flow for playback;
and respectively carrying out network flow playback test on the playback network flow at the preset network flow playback cut-in point and the comparison point.
Preferably, the step of encrypting and identifying the classified network traffic, and extracting user information from the identified network traffic to obtain the network traffic for playback includes:
encrypting each classified network flow to generate a unique identification code, and identifying each identification code;
extracting user information of the identified network flow corresponding to the identification code based on preset dynamic parameters;
and carrying out playback scene classification on the network flow corresponding to the identified identification code according to the user information so as to obtain the playback network flow under different types of playback scenes.
Preferably, the step of performing the network traffic replay test on the replay network traffic at the preset network traffic replay cut-in point and the preset comparison point respectively includes:
establishing cut-in points and comparison points of network flow playback based on the category of the application server;
and respectively placing network flow for playback at the cut-in point and the comparison point based on the playback scene to perform network flow playback test.
Preferably, after the step of performing the network traffic playback test on the playback network traffic at the preset network traffic playback cut-in point and the preset comparison point respectively, the method further includes:
and respectively acquiring network flow playback test data of the cut-in point and the comparison point and comparing the network flow playback test data to acquire a test result of whether the services provided by the application server of the cut-in point and the application server of the comparison point are consistent.
Preferably, the classification rule is a category of a user side operating system or a category of a user account.
In addition, to achieve the above object, the present invention further provides a network traffic playback testing apparatus, including:
the classification module is used for acquiring the network traffic of the target website and classifying the acquired network traffic according to a preset classification rule;
the extraction module is used for encrypting and identifying the classified network flow, and extracting user information of the identified network flow so as to obtain network flow for playback;
and the playback module is used for carrying out network flow playback test on the playback network flow at a preset network flow playback cut-in point and a preset comparison point respectively.
Preferably, the extraction module comprises:
the identification unit is used for encrypting each classified network flow to generate a unique identification code and identifying each identification code;
the extraction unit is used for extracting user information of the network flow corresponding to the identified identification code based on preset dynamic parameters;
and the obtaining unit is used for classifying the playback scenes of the network traffic corresponding to the identified identification code according to the user information so as to obtain the network traffic for playback under different types of playback scenes.
Preferably, the playback module includes:
the construction unit is used for constructing cut-in points and comparison points of network flow playback based on the category of the application server;
and the playback unit is used for respectively placing the network flow for playback at the cut-in point and the comparison point based on the playback scene to carry out network flow playback test.
Preferably, the network traffic playback testing apparatus further includes:
and the comparison module is used for respectively obtaining the network flow playback test data of the cut-in point and the comparison point and comparing the network flow playback test data to obtain a test result of whether the services provided by the application server of the cut-in point and the application server of the comparison point are consistent.
Preferably, the classification rule is a category of a user side operating system or a category of a user account.
In the technical scheme provided by the invention, the obtained network traffic is classified, and the classified network traffic is encrypted and identified, so that too many playback data with higher similarity can be avoided, and the playback speed of the network traffic is improved; and user information extraction is carried out on the identified network flow to obtain the network flow for playback, so that the divergence and randomness of the network flow playback test are improved, the coverage range of the test is improved, and the accuracy and the authenticity of the network flow playback test data are ensured.
Drawings
Fig. 1 is a schematic flow chart of a network traffic playback testing method according to a first embodiment of the present invention;
fig. 2 is an application architecture diagram of a network traffic playback testing method according to a first embodiment of the present invention;
fig. 3 is a detailed flowchart of the steps of encrypting and identifying the classified network traffic in the second embodiment of the network traffic playback testing method according to the present invention;
fig. 4 is a detailed flowchart of the network traffic playback testing step in the third embodiment of the network traffic playback testing method according to the present invention;
FIG. 5 is a flowchart illustrating a network traffic playback testing method according to a fourth embodiment of the present invention;
FIG. 6 is a functional block diagram of a network traffic playback testing apparatus according to a first embodiment of the present invention;
FIG. 7 is a schematic diagram of a detailed functional module of an extraction module in a second embodiment of the finger recognition remote control device according to the present invention;
FIG. 8 is a schematic diagram showing a detailed function of a playback module in a third embodiment of the finger recognition remote control device according to the present invention;
fig. 9 is a functional block diagram of a network traffic playback testing apparatus according to a fourth embodiment of the present invention.
The implementation, functional features and advantages of the objects of the present invention will be further explained with reference to the accompanying drawings.
Detailed Description
It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
The present invention provides a network traffic playback test method, referring to fig. 1 and fig. 2, in an embodiment, the network traffic playback test method includes:
step S10, acquiring the network traffic of the target website, and classifying the acquired network traffic according to a preset classification rule;
it should be noted that, acquiring the network traffic of the target website may be acquiring all network traffic accessing the target website; or acquiring network traffic of the target website within a certain period of time, for example, acquiring network traffic of accessing the target website between 10 am and 11 am; it may also be to obtain the network traffic of the target website accessed by a specific user within a specific time period, for example, obtain the network traffic of the target website accessed by the a user within the past month.
Further, the classification rule is a category of a user side operating system or a category of a user account. In an implementation of this embodiment, when the network traffic of the target website is obtained, the obtained network traffic is classified based on the category of the operating system of the user side. It should be noted that the operating systems are divided into an android system and an ios system, that is, the obtained network traffic is divided into an android system network traffic and an ios system network traffic according to the difference of the operating systems of the user side accessing the website.
In another implementation of this embodiment, the obtained network traffic is classified according to the category of the user account. It can be understood that there are multiple access users of the website, each access user is provided with a user account, and the user accesses the website through the corresponding user account. When the network traffic of the target website is obtained, the network traffic of the user a accessing the website can be classified into one type, the network traffic of the user B accessing the website can be classified into one type, the network traffic of the user C accessing the website can be classified into one type, and the like.
It should be noted that, when classifying the acquired network traffic according to the category of the user account, the user account is classified into a login state and a non-login state, and when the user account is in the login state, the acquired network traffic is classified according to the category of the user account in the login state; and when the user account is in a non-login state, classifying the acquired network traffic according to the type of the equipment serial number of the user side. It is understood that the user terminal may be a mobile terminal, such as a mobile phone, a tablet computer or a computer, and each mobile terminal device has a specific device serial number different from the other devices when shipped from a factory, for example, the serial number of the mobile phone of each mobile phone is different. Therefore, when the user account is in a non-login state, the acquired network traffic can be classified according to the equipment serial number.
Step S20, encrypting and marking the classified network flow, and extracting the user information of the marked network flow to obtain the network flow for playback;
in this embodiment, the MD5 encryption method is used to encrypt the classified network traffic to generate a unique identifier, so as to avoid storing too many request URLs (Uniform Resource locators) with high similarity, and identify each identifier to distinguish the classified network traffic of different types. It should be noted that the URL is an address of a standard resource on the internet, each file on the internet has a unique URL, and information contained in the URL indicates a location of the file and how the browser should process the file, so that the location and a processing mode of the encrypted network traffic can be obtained according to the identification code.
And further, extracting user information of the identified network flow according to the identification to acquire the network flow for playback. It should be noted that the user information may be behaviors of the user accessing the website, such as web browsing, commodity ordering, commodity payment, and the like.
And step S30, performing network flow playback test on the playback network flow at the preset network flow playback cut-in point and the preset comparison point respectively.
In an implementation of this embodiment, the preset network traffic playback entry point is a new application server to be put into use, and the preset network traffic playback comparison point is a currently used application server. It can be understood that, when a new version of application server is to be put into use, and the service performance of the application server needs to be tested, the network traffic for playback is respectively subjected to a network traffic playback test at a preset network traffic playback cut-in point and a comparison point, and whether the cut-in point, that is, the service performance of the new version of application server to be used meets the requirement is judged according to the test result.
Referring to fig. 2, a network application scenario of the present embodiment will be specifically described. It can be understood that, before the new version application server is put into use, after the pre-located WEB server of the website acquires the network traffic, the network traffic is respectively sent to the new version application server (access point) and the old version server (comparison point) through the load balancing system of the website, so as to perform playback test on the network traffic. And then calling the test data of the cut-in point and the comparison point through the bottom layer and comparing the test data to judge whether the new version application server is suitable for being put into use.
In the technical scheme provided by this embodiment, the obtained network traffic is classified, and the classified network traffic is encrypted and identified, so that too many playback data with high similarity can be avoided, and the playback speed of the network traffic is improved; and user information extraction is carried out on the identified network flow to obtain the network flow for playback, so that the divergence and randomness of the network flow playback test are improved, the coverage range of the test is improved, and the accuracy and the authenticity of the network flow playback test data are ensured.
Further, referring to fig. 3, based on the above embodiment, in this embodiment, the step S20 includes:
step S21, encrypting each classified network flow to generate a unique identification code, and marking each identification code;
step S22, extracting user information of the identified network traffic corresponding to the identification code based on the preset dynamic parameters;
and step S23, according to the user information, carrying out playback scene classification on the identified network traffic corresponding to the identification code so as to obtain playback network traffic under different types of playback scenes.
Specifically, after the obtained network traffic is classified according to a preset classification rule, MD5 encryption is performed on each classified network traffic to generate a unique identification code, so that each class of network traffic is distinguished, and each identification code is identified to better identify the classified network traffic.
Further, extracting user information of the network traffic corresponding to the identified identification code based on preset dynamic parameters; for example, for dynamic parameters such as a request Header, a user Token and the like, user information extraction may be performed on network traffic corresponding to the identified identifier, and a mapping relationship may be established between the network traffic and the user information according to a preset playback scenario. For example, when the user information is a web browsing behavior of the user side, the corresponding playback scene is web browsing playback; when the user information is commodity ordering behavior of the user side, the corresponding playback scene is commodity ordering playback; and when the user information is the commodity payment behavior of the user side, the corresponding playback scene is commodity payment playback, and the like. And further acquiring network flow for playback under different types of playback scenes.
In the technical scheme provided by this embodiment, the user information is extracted from the classified network traffic, and the playback scene classification is performed on the identified network traffic corresponding to the identification code according to the user information, so as to obtain the playback network traffic in different types of playback scenes, so that the network traffic playback has higher pertinence and divergence, and the playback rate of the network traffic is also increased.
Further, referring to fig. 4, based on the third embodiment, in this embodiment, the step S30 includes:
step S31, constructing cut-in points and comparison points of network flow playback based on the category of the application server;
and step S32, respectively placing the network traffic for playback at the cut-in point and the comparison point based on the playback scene to perform network traffic playback test.
It will be appreciated that the application server provides a simple and manageable mechanism for accessing system resources for web applications, and that the application server also needs to be continually updated to ensure proper website performance and website security. When a new version of application server needs to be updated, the service performance of the new version of application server needs to be tested, so that the performance of the new version of application server is ensured to be normal.
Specifically, an entry point and a comparison point of network traffic playback are constructed, in this embodiment, the types of the application servers are a new version application server and an old version application server, that is, the entry point is the new version application server, and the comparison point is the old version application server. And further, network flow for playback is respectively placed at the cut-in point and the comparison point based on the playback scene to carry out network flow playback test, the service performance of the cut-in point is judged according to the test data, the service performance of the application server is ensured, and the performance and the safety of the target website are further ensured.
Further, referring to fig. 5, based on the foregoing embodiment, in this embodiment, the method for network traffic playback test includes:
step S10, acquiring the network traffic of the target website, and classifying the acquired network traffic according to a preset classification rule;
step S20, encrypting and marking the classified network flow, and extracting the user information of the marked network flow to obtain the network flow for playback;
step S30, the network flow for playback is respectively carried out the network flow playback test at the preset network flow playback cut-in point and the comparison point;
step S40, obtaining the network traffic playback test data of the cut-in point and the comparison point, respectively, and comparing them to obtain a test result indicating whether the services provided by the application server of the cut-in point and the application server of the comparison point are consistent.
Specifically, when network traffic for playback is subjected to network traffic playback tests at preset network traffic playback entry points and comparison points respectively, test data of the entry points and the comparison points can be obtained respectively, the obtained test data of the entry points and the test data of the comparison points are compared, whether the two are consistent or not is judged, and if the test data of the entry points and the test data of the comparison points are consistent, a test result that services provided by an application server of the entry points and the application server of the comparison points are consistent is obtained; if the test data of the entry point is inconsistent with the test data of the comparison point, it indicates that the service provided by the application server of the entry point is inconsistent with the service provided by the application server of the comparison point, and performance debugging needs to be performed on the application server of the entry point.
In the technical scheme provided by this embodiment, the network traffic playback test data of the access point and the network traffic playback test data of the comparison point are compared, and then the service provided by the application server of the access point is judged, so that the service performance of the application server of the access point is ensured, and the network performance and the security of the target website are ensured.
Referring to fig. 6, in an embodiment, the network traffic playback testing apparatus provided by the present invention includes:
the classification module 10 is configured to acquire network traffic of a target website and classify the acquired network traffic according to a preset classification rule;
it should be noted that, acquiring the network traffic of the target website may be acquiring all network traffic accessing the target website; or acquiring network traffic of the target website within a certain period of time, for example, acquiring network traffic of accessing the target website between 10 am and 11 am; it may also be to obtain the network traffic of the target website accessed by a specific user within a specific time period, for example, obtain the network traffic of the target website accessed by the a user within the past month.
Further, the classification rule is a category of a user side operating system or a category of a user account. In an implementation of this embodiment, when the network traffic of the target website is obtained, the obtained network traffic is classified based on the category of the operating system of the user side. It should be noted that the operating systems are divided into an android system and an ios system, that is, the obtained network traffic is divided into an android system network traffic and an ios system network traffic according to the difference of the operating systems of the user side accessing the website.
In another implementation of this embodiment, the obtained network traffic is classified according to the category of the user account. It can be understood that there are multiple access users of the website, each access user is provided with a user account, and the user accesses the website through the corresponding user account. When the network traffic of the target website is obtained, the network traffic of the user a accessing the website can be classified into one type, the network traffic of the user B accessing the website can be classified into one type, the network traffic of the user C accessing the website can be classified into one type, and the like.
It should be noted that, when classifying the acquired network traffic according to the category of the user account, the user account is classified into a login state and a non-login state, and when the user account is in the login state, the acquired network traffic is classified according to the category of the user account in the login state; and when the user account is in a non-login state, classifying the acquired network traffic according to the type of the equipment serial number of the user side. It is understood that the user terminal may be a mobile terminal, such as a mobile phone, a tablet computer or a computer, and each mobile terminal device has a specific device serial number different from the other devices when shipped from a factory, for example, the serial number of the mobile phone of each mobile phone is different. Therefore, when the user account is in a non-login state, the acquired network traffic can be classified according to the equipment serial number.
The extraction module 20 is configured to encrypt and identify the classified network traffic, and extract user information of the identified network traffic to obtain network traffic for playback;
in this embodiment, the MD5 encryption method is used to encrypt the classified network traffic to generate a unique identifier, so as to avoid storing too many request URLs (Uniform Resource locators) with high similarity, and identify each identifier to distinguish the classified network traffic of different types. It should be noted that the URL is an address of a standard resource on the internet, each file on the internet has a unique URL, and information contained in the URL indicates a location of the file and how the browser should process the file, so that the location and a processing mode of the encrypted network traffic can be obtained according to the identification code.
And further, extracting user information of the identified network flow according to the identification to acquire the network flow for playback. It should be noted that the user information may be behaviors of the user accessing the website, such as web browsing, commodity ordering, commodity payment, and the like.
The playback module 30 is configured to perform network traffic playback tests on the playback network traffic at preset network traffic playback cut-in points and comparison points, respectively.
In an implementation of this embodiment, the preset network traffic playback entry point is a new application server to be put into use, and the preset network traffic playback comparison point is a currently used application server. It can be understood that, when a new version of application server is to be put into use, and the service performance of the application server needs to be tested, the network traffic for playback is respectively subjected to a network traffic playback test at a preset network traffic playback cut-in point and a comparison point, and whether the cut-in point, that is, the service performance of the new version of application server to be used meets the requirement is judged according to the test result.
In the technical scheme provided by this embodiment, the classification module 10 classifies the acquired network traffic, and the extraction module 20 encrypts and identifies the classified network traffic, so as to avoid too many playback data with higher similarity, and improve the playback speed of the network traffic; and user information extraction is carried out on the identified network flow to obtain the network flow for playback, so that the divergence and randomness of the network flow playback test are improved, the coverage range of the test is improved, and the accuracy and the authenticity of the network flow playback test data are ensured.
Further, referring to fig. 7, based on the above embodiment, in this embodiment, the extracting module 20 includes:
an identification unit 21, configured to encrypt each classified type of network traffic to generate a unique identification code, and identify each identification code;
the extracting unit 22 is configured to extract user information of network traffic corresponding to the identified identification code based on a preset dynamic parameter;
the obtaining unit 23 is configured to classify playback scenes of the network traffic corresponding to the identified identification code according to the user information, so as to obtain network traffic for playback in different types of playback scenes.
Specifically, after the obtained network traffic is classified according to a preset classification rule, MD5 encryption is performed on each classified network traffic to generate a unique identification code, so that each class of network traffic is distinguished, and each identification code is identified to better identify the classified network traffic.
Further, extracting user information of the network traffic corresponding to the identified identification code based on preset dynamic parameters; for example, for dynamic parameters such as a request Header, a user Token and the like, user information extraction may be performed on network traffic corresponding to the identified identifier, and a mapping relationship may be established between the network traffic and the user information according to a preset playback scenario. For example, when the user information is a web browsing behavior of the user side, the corresponding playback scene is web browsing playback; when the user information is commodity ordering behavior of the user side, the corresponding playback scene is commodity ordering playback; and when the user information is the commodity payment behavior of the user side, the corresponding playback scene is commodity payment playback, and the like. And further acquiring network flow for playback under different types of playback scenes.
In the technical scheme provided by this embodiment, the user information is extracted from the classified network traffic, and the playback scene classification is performed on the identified network traffic corresponding to the identification code according to the user information, so as to obtain the playback network traffic in different types of playback scenes, so that the network traffic playback has higher pertinence and divergence, and the playback rate of the network traffic is also increased.
Further, referring to fig. 8, based on the second embodiment, in the present embodiment, the playback module 30 includes:
the construction unit 31 is configured to construct cut-in points and comparison points for network traffic playback based on the category of the application server;
and the playback unit 32 is configured to place the network traffic for playback at the cut-in point and the comparison point respectively based on the playback scene to perform a network traffic playback test.
It will be appreciated that the application server provides a simple and manageable mechanism for accessing system resources for web applications, and that the application server also needs to be continually updated to ensure proper website performance and website security. When a new version of application server needs to be updated, the service performance of the new version of application server needs to be tested, so that the performance of the new version of application server is ensured to be normal.
Specifically, the constructing unit 31 constructs an entry point and a comparison point for network traffic playback, where in this embodiment, the types of the application servers are a new version application server and an old version application server, that is, the entry point is the new version application server, and the comparison point is the old version application server. Further, the playback unit 32 respectively places the network traffic for playback at the cut-in point and the comparison point based on the playback scene to perform a network traffic playback test, and evaluates the service performance of the cut-in point according to the test data, so as to ensure the service performance of the application server, and further ensure the performance and the safety of the target website.
Further, referring to fig. 9, based on the foregoing embodiment, in this embodiment, the network traffic playback testing apparatus includes:
the classification module 10 is configured to acquire network traffic of a target website and classify the acquired network traffic according to a preset classification rule;
the extraction module 20 is configured to encrypt and identify the classified network traffic, and extract user information of the identified network traffic to obtain network traffic for playback;
the playback module 30 is used for performing network traffic playback tests on the playback network traffic at preset network traffic playback cut-in points and comparison points respectively;
and the comparison module 40 is configured to obtain the network traffic playback test data of the cut-in point and the comparison point, and compare the network traffic playback test data to obtain a test result indicating whether the services provided by the application server of the cut-in point and the application server of the comparison point are consistent.
Specifically, when network traffic for playback is subjected to network traffic playback tests at preset network traffic playback entry points and comparison points respectively, the comparison module 40 can acquire test data of the entry points and the comparison points respectively, compare the acquired test data of the entry points with the test data of the comparison points, and determine whether the two are consistent, and if the test data of the entry points are consistent with the test data of the comparison points, obtain a test result that services provided by an application server of the entry points and the application server of the comparison points are consistent; if the test data of the entry point is inconsistent with the test data of the comparison point, it indicates that the service provided by the application server of the entry point is inconsistent with the service provided by the application server of the comparison point, and performance debugging needs to be performed on the application server of the entry point.
In the technical scheme provided by this embodiment, the network traffic playback test data of the access point and the network traffic playback test data of the comparison point are compared, and then the service provided by the application server of the access point is judged, so that the service performance of the application server of the access point is ensured, and the network performance and the security of the target website are ensured.
The above description is only a preferred embodiment of the present invention, and not intended to limit the scope of the present invention, and all modifications of equivalent structures and equivalent processes, which are made by using the contents of the present specification and the accompanying drawings, or directly or indirectly applied to other related technical fields, are included in the scope of the present invention.
Claims (10)
1. A network flow playback test method is characterized by comprising the following steps:
acquiring the network traffic of a target website, and classifying the acquired network traffic according to a preset classification rule;
encrypting and identifying the classified network flow, and extracting user information of the identified network flow to obtain network flow for playback;
and respectively carrying out network flow playback test on the playback network flow at the preset network flow playback cut-in point and the comparison point.
2. The method for testing network traffic playback of claim 1, wherein the step of encrypting and identifying the classified network traffic, and extracting user information from the identified network traffic to obtain the network traffic for playback comprises:
encrypting each classified network flow to generate a unique identification code, and identifying each identification code;
extracting user information of the identified network flow corresponding to the identification code based on preset dynamic parameters;
and carrying out playback scene classification on the network flow corresponding to the identified identification code according to the user information so as to obtain the playback network flow under different types of playback scenes.
3. The method for network traffic playback testing according to claim 2, wherein the step of performing the network traffic playback testing on the playback network traffic at the preset network traffic playback cut-in point and the comparison point respectively comprises:
establishing cut-in points and comparison points of network flow playback based on the category of the application server;
and respectively placing network flow for playback at the cut-in point and the comparison point based on the playback scene to perform network flow playback test.
4. The method for network traffic replay testing according to any one of claims 1 to 3, wherein the step of performing network traffic replay testing on the replay network traffic at the preset network traffic replay cut-in point and the comparison point respectively further includes:
and respectively acquiring network flow playback test data of the cut-in point and the comparison point and comparing the network flow playback test data to acquire a test result of whether the services provided by the application server of the cut-in point and the application server of the comparison point are consistent.
5. The method according to claim 4, wherein the classification rule is a category of a user operating system or a category of a user account.
6. A network traffic playback testing apparatus, comprising:
the classification module is used for acquiring the network traffic of the target website and classifying the acquired network traffic according to a preset classification rule;
the extraction module is used for encrypting and identifying the classified network flow, and extracting user information of the identified network flow so as to obtain network flow for playback;
and the playback module is used for carrying out network flow playback test on the playback network flow at a preset network flow playback cut-in point and a preset comparison point respectively.
7. The network traffic playback testing apparatus of claim 6, wherein the extraction module comprises:
the identification unit is used for encrypting each classified network flow to generate a unique identification code and identifying each identification code;
the extraction unit is used for extracting user information of the network flow corresponding to the identified identification code based on preset dynamic parameters;
and the obtaining unit is used for classifying the playback scenes of the network traffic corresponding to the identified identification code according to the user information so as to obtain the network traffic for playback under different types of playback scenes.
8. The network traffic playback testing apparatus of claim 7, wherein the playback module comprises:
the construction unit is used for constructing cut-in points and comparison points of network flow playback based on the category of the application server;
and the playback unit is used for respectively placing the network flow for playback at the cut-in point and the comparison point based on the playback scene to carry out network flow playback test.
9. The network traffic replay test device of any of claims 6-8, wherein the network traffic replay test device further comprises:
and the comparison module is used for respectively obtaining the network flow playback test data of the cut-in point and the comparison point and comparing the network flow playback test data to obtain a test result of whether the services provided by the application server of the cut-in point and the application server of the comparison point are consistent.
10. The network traffic playback testing apparatus of claim 9, wherein the classification rule is a category of a user side operating system or a category of a user account.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710119772.0A CN106878108B (en) | 2017-03-01 | 2017-03-01 | Network flow playback test method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710119772.0A CN106878108B (en) | 2017-03-01 | 2017-03-01 | Network flow playback test method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106878108A CN106878108A (en) | 2017-06-20 |
| CN106878108B true CN106878108B (en) | 2019-12-20 |
Family
ID=59168506
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710119772.0A Active CN106878108B (en) | 2017-03-01 | 2017-03-01 | Network flow playback test method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106878108B (en) |
Families Citing this family (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111274117B (en) * | 2018-12-04 | 2023-04-18 | 阿里巴巴集团控股有限公司 | Recommended service experiment and management method, device and system thereof |
| CN111382058B (en) * | 2018-12-29 | 2024-02-02 | 北京字节跳动网络技术有限公司 | Service testing method and device, server and storage medium |
| CN117278434A (en) * | 2019-07-17 | 2023-12-22 | 创新先进技术有限公司 | Flow playback method and device and electronic equipment |
| CN112787880B (en) * | 2019-11-08 | 2024-05-31 | 阿里巴巴集团控股有限公司 | Playback data acquisition and flow playback method, device and storage medium |
| CN111045952B (en) * | 2019-12-16 | 2023-03-28 | 广州品唯软件有限公司 | Software testing method, flow playback device, terminal equipment and readable storage medium |
| CN111010316B (en) * | 2019-12-17 | 2021-08-06 | 广州唯品会信息科技有限公司 | Flow playback method, device and system |
| CN113328911B (en) * | 2021-05-28 | 2022-12-20 | 中国工商银行股份有限公司 | Traffic link monitoring method and device during service operation |
| CN117579507B (en) * | 2024-01-17 | 2024-05-28 | 云筑信息科技(成都)有限公司 | Method for automatically extracting recording flow |
Family Cites Families (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7921333B2 (en) * | 2003-03-19 | 2011-04-05 | Jds Uniphase Corporation | Method and systems for providing data replay, reprocess and retrigger functions in an analyzer |
| CN102299828B (en) * | 2011-08-30 | 2014-01-08 | 中国科学院计算技术研究所 | Test traffic synthesis method and device for test on performance of network security equipment |
| CN103546326B (en) * | 2013-11-04 | 2017-01-11 | 北京中搜网络技术股份有限公司 | Website traffic statistic method |
-
2017
- 2017-03-01 CN CN201710119772.0A patent/CN106878108B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN106878108A (en) | 2017-06-20 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106878108B (en) | Network flow playback test method and device | |
| CN109743315B (en) | Behavior identification method, behavior identification device, behavior identification equipment and readable storage medium for website | |
| CN107122297B (en) | Method and equipment for generating request message of test interface | |
| Van Goethem et al. | Accelerometer-based device fingerprinting for multi-factor mobile authentication | |
| CN113574838A (en) | System and method for filtering internet traffic through client fingerprints | |
| CN103024090B (en) | Method and system for identifying user terminal | |
| CN105472052A (en) | Login method and system of cross-domain server | |
| CN110677384B (en) | Phishing website detection method and device, storage medium and electronic device | |
| CN108632213A (en) | Facility information processing method and processing device | |
| CN110516173B (en) | Illegal network station identification method, illegal network station identification device, illegal network station identification equipment and illegal network station identification medium | |
| CN107085549B (en) | Method and device for generating fault information | |
| CN111885007B (en) | Information tracing method, device, system and storage medium | |
| CN114465823B (en) | Industrial Internet terminal encrypted flow data security detection method, device and equipment | |
| US11816249B2 (en) | System and method for dynamic management of private data | |
| CN104182681A (en) | Hook-based iOS (iPhone operating system) key behavior detection device and detection method thereof | |
| JP2019519849A (en) | Method and device for preventing attacks on servers | |
| CN110619022B (en) | Node detection method, device, equipment and storage medium based on block chain network | |
| CN114138590A (en) | Operation and maintenance processing method and device for Kubernetes cluster and electronic equipment | |
| CN113794731B (en) | Method, device, equipment and medium for identifying CDN (content delivery network) -based traffic masquerading attack | |
| US11244053B2 (en) | Counterfeit electronic device detection | |
| CN110929129A (en) | Information detection method, equipment and machine-readable storage medium | |
| CN116776390A (en) | Method, device, storage medium and equipment for monitoring data leakage behavior | |
| CN107995167B (en) | Equipment identification method and server | |
| CN108737350B (en) | Information processing method and client | |
| CN107357562B (en) | Information filling method, device and client |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20171204 Address after: 510000 Guangzhou City, Guangzhou, Guangdong, Fangcun Avenue, one of the 314 self compiled Applicant after: Guangzhou Pinwei Software Co., Ltd. Address before: Liwan District Fangcun Huahai street Guangzhou city Guangdong province 510000 No. 20 self 1-5 building (only for office use) Applicant before: Guangzhou VIPSHOP Information and Technology Co., Ltd. |
|
| TA01 | Transfer of patent application right | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |