CN107241283A - A kind of East and West direction network traffics mirror image acquisition method across main frame tenant - Google Patents

A kind of East and West direction network traffics mirror image acquisition method across main frame tenant Download PDF

Info

Publication number
CN107241283A
CN107241283A CN201710367940.8A CN201710367940A CN107241283A CN 107241283 A CN107241283 A CN 107241283A CN 201710367940 A CN201710367940 A CN 201710367940A CN 107241283 A CN107241283 A CN 107241283A
Authority
CN
China
Prior art keywords
flow
tenant
collection
flow collection
mirror image
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201710367940.8A
Other languages
Chinese (zh)
Other versions
CN107241283B (en
Inventor
马秀娟
吴震
李传海
孙伟
唐积强
毛洪亮
徐小磊
何清林
张家琦
王子厚
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
National Computer Network and Information Security Management Center
Original Assignee
National Computer Network and Information Security Management Center
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by National Computer Network and Information Security Management Center filed Critical National Computer Network and Information Security Management Center
Priority to CN201710367940.8A priority Critical patent/CN107241283B/en
Publication of CN107241283A publication Critical patent/CN107241283A/en
Application granted granted Critical
Publication of CN107241283B publication Critical patent/CN107241283B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L49/00Packet switching elements
    • H04L49/20Support for services
    • H04L49/208Port mirroring
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14Network analysis or design
    • H04L41/145Network analysis or design involving simulating, designing, planning or modelling of a network
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/1095Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/455Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533Hypervisors; Virtual machine monitors
    • G06F9/45558Hypervisor-specific management and integration aspects
    • G06F2009/4557Distribution of virtual machine instances; Migration and load balancing

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The present invention provides a kind of East and West direction network traffics mirror image acquisition method across main frame tenant, and its step includes:1) distributed intelligence of the network configuration information for the tenant that flow collection control server is obtained according to tenant's name of tenant to be collected and from cloud service main control server and the virtual machine of tenant on physical host generates flow collection configuration parameter corresponding with tenant to be collected;2) above-mentioned flow collection configuration parameter is issued to flow collection driver by flow collection control server by the flow collection Agent of cloud service main frame;3) the collection flow that flow collection driver is specified to above-mentioned flow collection configuration parameter carries out mirror image, and the collection flow of mirror image is sent into flow collection Agent.The inventive method can be in linux kernel driver layer, according to the distributed intelligence of tenant's name and the network configuration information of tenant and the virtual machine of tenant on physical host, the East and West direction network traffics of dynamic acquisition tenant.

Description

A kind of East and West direction network traffics mirror image acquisition method across main frame tenant
Technical field
The present invention relates to communication technology security fields, more particularly to a kind of East and West direction network traffics mirror image across main frame tenant Acquisition method.
Background technology
With the broad development of cloud calculation service, for security needs, it is necessary to enter to the East and West direction network traffics in cloud Row monitoring, this is accomplished by carrying out mirror image to the East and West direction network traffics of tenant in cloud.And to complete the mirror of East and West direction network traffics Picture, it is necessary to realize following functions:
1) network traffics to tenant make a distinction;
2) effectively by the network traffics of tenant carry out mirror image and be transferred to network data analysis center to be analyzed.
Network traffics mirror image is realized typically by the way of light splitting or interchanger mirror port at present.The light splitting is Refer to by optical splitter, the light in optical fiber is cloned, be exactly, by lens, the photocopy in optical fiber to be come out in fact;Such as Incident light is divided into two beams, a branch of energy is 70%, the energy of another beam is 30%, because the just carrier of data, light quilt Replicate, also imply that the data of network transmission are replicated.But the light splitting is commonly used on the interface of data center and outer net, It is used for the collection of north-south network traffics.
The interchanger mirror port refers to be configured on switches, the data that will be transmitted on an interface, replicates To mirror port, the data being replicated so can be just received in mirror port.Because the virtual machine of a tenant may be distributed On multiple physical hosts, network traffics may be related to multiple frames, therefore not can determine which the network traffics of tenant are related to A little physical interfaces, nor mirror image may be carried out to all switch ports themselves.Therefore above two mode in cloud for renting The East and West direction network traffics at family are not applied to simultaneously.
The content of the invention
It is an object of the invention to provide a kind of East and West direction network traffics mirror image acquisition method across main frame tenant, this method Based on the respective tenant's name of tenant, being set on configuration interface needs the tenant for doing traffic mirroring name, to complete to tenant's net The collection and analysis of network flow.
For up to above-mentioned purpose, the technical solution adopted in the present invention is:
A kind of East and West direction network traffics mirror image acquisition method across main frame tenant, its step includes:
1) flow collection control server is obtained according to tenant's name of tenant to be collected and from cloud service main control server Tenant network configuration information and tenant virtual machine on physical host distributed intelligence generation it is corresponding with tenant to be collected Flow collection configuration parameter;
2) flow collection that above-mentioned flow collection configuration parameter is passed through cloud service main frame by flow collection control server Agent is issued to flow collection driver;
3) flow collection driver is specified to above-mentioned flow collection configuration parameter collection flow carries out mirror image, and by mirror The collection flow of picture is sent to flow collection Agent.
Further, this method step also includes:The collection flow of above-mentioned image is sent to flow by flow collection Agent Analysis server, and the collection flow of the mirror image is analyzed by flow analysis servers, to be verified according to analysis result The corresponding situation for gathering flow and tenant to be collected.
Further, step 1) described in flow collection configuration parameter refer to tenant virtual network type and ID.
Further, step 2) described in flow collection Agent be deployed on cloud service main frame.
Further, step 2) and step 3) specifically include following steps:
A) flow collection Agent receives the order of flow acquisition control server, by above-mentioned flow collection configuration parameter The mark of the flow of tenant to be collected is set into flow collection driver;
B) flow collection driver receives flow collection Agent order, according to the flow of above-mentioned tenant to be collected Identify and the flow collection configuration parameter of the tenant is configured;
C) flow collection driver is according to network flow of the above-mentioned configured flow collection configuration parameter to physical host Amount is filtered, and the collection flow specified to the configured flow collection configuration parameter carries out mirror image, by adopting for mirror image Collection flow is sent to flow collection Agent.
Further, step 3) described in flow collection driver be deployed in the linux kernel of cloud service main frame.
Further, step 3) described in flow collection driver by way of simulating TCP by the collection stream of mirror image Amount is sent to flow collection Agent.
The beneficial effects of the present invention are:The present invention provides a kind of East and West direction network traffics mirror image across main frame tenant and gathered Method, this method is real by a kind of software for supporting that dynamic configuration, the relatively flexible East and West direction traffic mirroring across main frame tenant are gathered Show scheme to realize.Because the network data of tenant is likely distributed in multiple network switch of data center, tenant's is virtual Distribution of the machine on physical host is also dynamic.Again because the mirror port of interchanger is limited, using interchanger The method of mirror port is acquired to the network traffics of tenant, will for network traffics and specific tenant progress to it is corresponding when very It is more difficult, it is not easy to realize;And optical spectroscopy is commonly used on the interface of data center and outer net, i.e., for north-south network traffics Collection;Carried out because the East and West direction network traffics between the interchanger in data center are larger, therefore using optical spectroscopy The cost of analysis and processing is higher.And the inventive method then can be in linux kernel driver layer, according to tenant's name and tenant Network configuration information and tenant distributed intelligence of the virtual machine on physical host, the East and West direction network of dynamic acquisition tenant Flow.
Brief description of the drawings
Fig. 1 is a kind of East and West direction network traffics mirror image acquisition method schematic diagram across main frame tenant of the invention.
Fig. 2 realizes the schematic diagram of network traffics mirror image for the present invention.
Fig. 3 is the schematic diagram that inventive flow acquisition driver simulates TCP.
Embodiment
To enable the features described above and advantage of the present invention to become apparent, special embodiment below, and coordinate institute's accompanying drawing work Describe in detail as follows.
The present invention provides a kind of East and West direction network traffics mirror image acquisition method across main frame tenant, it is adaptable to a collection system System, the acquisition system includes cloud service main control server, flow collection control server, flow collection Agent, flow collection Driver and flow analysis servers.
Fig. 1 is refer to, the flow collection control server is used to complete following functions:
1) network configuration information of tenant and the virtual machine of tenant are obtained on physical host from cloud service main control server Distributed intelligence;
2) tenant's name of tenant to be collected is received from system control position, according to tenant name and the network configuration of the tenant Distributed intelligence of the virtual machine of information and the tenant on physical host, generates flow collection configuration ginseng corresponding with the tenant Number;
The flow collection configuration parameter refers to the type and ID of the virtual network of tenant.If the virtual network class of tenant Type is VLAN (VLAN) network, then the corresponding flow collection configuration parameter of the tenant refers to vlan network and VLAN ID.If the virtual network type of tenant is VXLAN (expansible VLAN) network, the corresponding flow of the tenant is adopted Collection configuration parameter refers to VXLAN networks and VXLAN ID.
3) above-mentioned flow collection configuration parameter is sent to the flow collection for the cloud service main frame that tenant's resource is related to Agent, completes the setting to flow image parameter, and flow collection Agent will be adopted according to the traffic mirroring parameter call flow Collect driver, carry out traffic mirroring collection.
The flow collection Agent is deployed on cloud service main frame, mainly completes following functions:
1) order of flow acquisition control server is received, by the stream of tenant to be collected in above-mentioned flow collection configuration parameter The mark of amount is set into flow collection driver;
2) the collection flow of flow acquisition driver mirror image is received, and the collection flow of mirror image is sent to flow analysis Server is analyzed.
The flow collection driver is deployed in the linux kernel of cloud service main frame, mainly completes following functions:
1) flow collection Agent order is received, the flow of the tenant is adopted according to the mark of the flow of tenant to be collected Collection configuration parameter is configured;
2) network traffics of physical host are filtered according to above-mentioned configured flow collection configuration parameter, and to institute State the collection flow progress mirror image that configured flow collection configuration parameter is specified;
3) the collection flow of mirror image is sent to flow collection Agent inside flow collection driver.
The flow analysis servers are used for adopting for the flow collection driver mirror image for receiving flow collection Agent transmissions Collect flow, and it is analyzed, to verify the corresponding situation of the collection flow and tenant to be collected according to analysis result, and Support is provided for subsequent acquisition flow analysis.
A specific embodiment is named, to better illustrate the inventive method, this method is implemented including following step Suddenly:
1) flow collection control server is obtained according to tenant's name of tenant to be collected and from cloud service main control server Tenant network configuration information and distributed intelligence of the virtual machine on physical host of tenant, generation and the tenant institute to be collected Corresponding flow collection configuration parameter.
It is the concrete form of the network configuration information of tenant below.The virtual network of current tenant typically using VLAN or VXLAN form, as long as so the data (flow) to corresponding VLAN or VXLAN carry out mirror image, it is possible to complete to tenant The image feature of data.
In the range of same cloud service, its virtual network form used is consistent, if cloud service is used Vlan network, then the virtual network that all tenants use all is vlan network;If using VXLAN networks, then all Tenant use virtual network be all VXLAN networks.
Table 1:The network configuration information of tenant under vlan network
Tenant ID Network VLAN ID
Tenant 1 Tenant1_network1 1010
Tenant 1 Tenant1_network2 1011
Tenant 2 Tenant2_network1 2020
Tenant 2 Tenant2_network2 2021
Tenant 3 Tenant3_network1 2301
Assuming that cloud service deployment uses vlan network, as shown in table 1, flow collection control service can obtain following tenant Network configuration information:
The corresponding VLAN ID of network traffics of tenant 1 are 1010 and 1011;
The corresponding VLAN ID of network traffics of tenant 2 are 2020 and 2021;
The corresponding VLAN ID of network traffics of tenant 3 are 2031;
If the network of cloud service uses VXLAN networks, then corresponding ID is exactly VXLAN ID.
2) distributed intelligence of the flow collection control server according to the virtual machine of tenant on physical host, by above-mentioned flow Acquisition configuration parameter is only issued to the flow collection agent on the cloud service main frame related to tenant, completes traffic mirroring parameter Setting.
3) flow collection agent receives the order of flow acquisition control server, by the mark of the flow of tenant to be collected Set in flow collection driver, and according to above-mentioned traffic mirroring parameter call flow collection driver, carry out flow Mirror image is gathered.
4) flow collection driver receives flow collection Agent order, according to the mark of the flow of tenant to be collected The flow collection configuration parameter of the tenant is configured;And according to the configured flow collection configuration parameter to physics master The network traffics of machine are filtered, and its Key Implementation is the filtering by the carry flow collection driver in netfilter Hook, to realize mirror image and the collection to network traffics.Fig. 2 is refer to, the filtering hook is the flow collection in the figure Hook.Netfilter is the standard network flow processing routine of linux kernel, and others Hook is that it is carried in the figure 's.The present invention realizes mirror image and the collection of network traffics by the Netfilter.
The process that implements of the mirror image is:Zero-copy, flow collection driving journey are realized by sk buffer characteristic The network traffics that ordered pair tenant sends and receives, all carry out mirror image;
5) the collection flow of mirror image is sent to flow collection Agent from flow collection driver.Its implementation process is:Stream The collection flow of amount acquisition driver mirror image is sent to flow collection Agent by way of simulating TCP, as shown in figure 3, In flow collection driver, a TCP protocol stack is realized, flow collection driver is by TCP three-way handshake, with cloud service The flow collection Agent disposed in host operating system set up TCP connections (for flow collection Agent, this TCP connection It is exactly common TCP connections, in this TCP connection, normal TCP data transmitting-receiving can be carried out), connected by this TCP, The data collected are sent to flow collection Agent.
It is using TCP advantage, TCP connection identifier tenant's information can be used, so can be directly by the number of tenant According to being sent in TCP connections, follow-up tenant data, without carrying the mark of tenant again, effectively saves transmission cost;And TCP is stateful link, and receiving efficiency is higher, it is possible to achieve compare the data transfer of high efficient and reliable.
6) when the virtual network of tenant or the virtual machine distribution of tenant change, flow collection control service Device can update the flow collection configuration parameter of the flow collection Agent on related cloud service main frame.
Implement to be merely illustrative of the technical solution of the present invention rather than be limited above, the ordinary skill people of this area Member can modify or equivalent substitution to technical scheme, without departing from the spirit and scope of the present invention, this hair Bright protection domain should be to be defined described in claims.

Claims (7)

1. a kind of East and West direction network traffics mirror image acquisition method across main frame tenant, its step includes:
1) rent that flow collection control server is obtained according to tenant's name of tenant to be collected and from cloud service main control server The distributed intelligence generation stream corresponding with tenant to be collected of the network configuration information at family and the virtual machine of tenant on physical host Measure acquisition configuration parameter;
2) under the flow collection Agent that above-mentioned flow collection configuration parameter is passed through cloud service main frame by flow collection control server It is dealt into flow collection driver;
3) flow collection driver is specified to above-mentioned flow collection configuration parameter collection flow carries out mirror image, and by mirror image Collection flow is sent to flow collection Agent.
2. the method as described in claim 1, it is characterised in that this method step also includes:Flow collection Agent is by above-mentioned mirror The collection flow of picture is sent to flow analysis servers, and the collection flow of the mirror image is divided by flow analysis servers Analysis, to verify the corresponding situation of the collection flow and tenant to be collected according to analysis result.
3. the method as described in claim 1, it is characterised in that step 1) described in flow collection configuration parameter refer to tenant's The type and ID of virtual network.
4. the method as described in claim 1, it is characterised in that step 2) described in flow collection Agent be deployed in cloud service On main frame.
5. the method as described in claim 1, it is characterised in that step 2) and step 3) specifically include following steps:
A) flow collection Agent receives the order of flow acquisition control server, will wait to adopt in above-mentioned flow collection configuration parameter The mark for collecting the flow of tenant is set into flow collection driver;
B) flow collection driver receives flow collection Agent order, according to the mark of the flow of above-mentioned tenant to be collected The flow collection configuration parameter of the tenant is configured;
C) flow collection driver enters according to above-mentioned configured flow collection configuration parameter to the network traffics of physical host Row filtering, and the collection flow specified to the configured flow collection configuration parameter carries out mirror image, by the collection stream of mirror image Amount is sent to flow collection Agent.
6. the method as described in claim 1, it is characterised in that step 3) described in flow collection driver be deployed in cloud clothes It is engaged in the linux kernel of main frame.
7. the method as described in claim 1, it is characterised in that step 3) described in flow collection driver pass through simulation The collection flow of mirror image is sent to flow collection Agent by TCP mode.
CN201710367940.8A 2017-05-23 2017-05-23 Cross-host tenant east-west network traffic mirror image acquisition method Expired - Fee Related CN107241283B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710367940.8A CN107241283B (en) 2017-05-23 2017-05-23 Cross-host tenant east-west network traffic mirror image acquisition method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710367940.8A CN107241283B (en) 2017-05-23 2017-05-23 Cross-host tenant east-west network traffic mirror image acquisition method

Publications (2)

Publication Number Publication Date
CN107241283A true CN107241283A (en) 2017-10-10
CN107241283B CN107241283B (en) 2020-06-05

Family

ID=59985661

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710367940.8A Expired - Fee Related CN107241283B (en) 2017-05-23 2017-05-23 Cross-host tenant east-west network traffic mirror image acquisition method

Country Status (1)

Country Link
CN (1) CN107241283B (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109785606A (en) * 2019-02-02 2019-05-21 中能瑞通(北京)科技有限公司 A kind of power information acquisition system acquisition quality analysis method and device
CN113709017A (en) * 2021-08-17 2021-11-26 中盈优创资讯科技有限公司 Method and device for acquiring virtualization traffic
CN114006839A (en) * 2021-09-27 2022-02-01 中盈优创资讯科技有限公司 eBPF-based traffic collection method and device
CN114285667A (en) * 2021-12-30 2022-04-05 湖南泛联新安信息科技有限公司 Network target range flow real-time acquisition system and method

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103139315A (en) * 2013-03-26 2013-06-05 烽火通信科技股份有限公司 Application layer protocol analysis method suitable for home gateway
CN105245504A (en) * 2015-09-10 2016-01-13 北京汉柏科技有限公司 North-south flow safety protection system in cloud computing network
CN105591833A (en) * 2014-11-26 2016-05-18 中国银联股份有限公司 Flow-acquiring method based on rule engine
CN106100999A (en) * 2016-08-28 2016-11-09 北京瑞和云图科技有限公司 Image network flow control protocol in a kind of virtualized network environment
CN106375384A (en) * 2016-08-28 2017-02-01 北京瑞和云图科技有限公司 Management system of mirror network flow in virtual network environment and control method
CN106452856A (en) * 2016-09-28 2017-02-22 杭州鸿雁智能科技有限公司 Traffic flow statistics method and device, and wireless access equipment with traffic flow statistics function
US20170134278A1 (en) * 2013-01-22 2017-05-11 International Business Machines Corporation Independent network interfaces for virtual network environments

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20170134278A1 (en) * 2013-01-22 2017-05-11 International Business Machines Corporation Independent network interfaces for virtual network environments
CN103139315A (en) * 2013-03-26 2013-06-05 烽火通信科技股份有限公司 Application layer protocol analysis method suitable for home gateway
CN105591833A (en) * 2014-11-26 2016-05-18 中国银联股份有限公司 Flow-acquiring method based on rule engine
CN105245504A (en) * 2015-09-10 2016-01-13 北京汉柏科技有限公司 North-south flow safety protection system in cloud computing network
CN106100999A (en) * 2016-08-28 2016-11-09 北京瑞和云图科技有限公司 Image network flow control protocol in a kind of virtualized network environment
CN106375384A (en) * 2016-08-28 2017-02-01 北京瑞和云图科技有限公司 Management system of mirror network flow in virtual network environment and control method
CN106452856A (en) * 2016-09-28 2017-02-22 杭州鸿雁智能科技有限公司 Traffic flow statistics method and device, and wireless access equipment with traffic flow statistics function

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109785606A (en) * 2019-02-02 2019-05-21 中能瑞通(北京)科技有限公司 A kind of power information acquisition system acquisition quality analysis method and device
CN113709017A (en) * 2021-08-17 2021-11-26 中盈优创资讯科技有限公司 Method and device for acquiring virtualization traffic
CN113709017B (en) * 2021-08-17 2022-10-04 中盈优创资讯科技有限公司 Method and device for acquiring virtualization traffic
CN114006839A (en) * 2021-09-27 2022-02-01 中盈优创资讯科技有限公司 eBPF-based traffic collection method and device
CN114006839B (en) * 2021-09-27 2023-06-23 中盈优创资讯科技有限公司 Flow acquisition method and device based on eBPF
CN114285667A (en) * 2021-12-30 2022-04-05 湖南泛联新安信息科技有限公司 Network target range flow real-time acquisition system and method
CN114285667B (en) * 2021-12-30 2023-06-02 湖南泛联新安信息科技有限公司 Real-time acquisition system and method for network target range flow

Also Published As

Publication number Publication date
CN107241283B (en) 2020-06-05

Similar Documents

Publication Publication Date Title
CN109802852B (en) Method and system for constructing network simulation topology applied to network target range
CN104685507B (en) Virtual secure device architecture is provided to virtual cloud foundation structure
CN107241283A (en) A kind of East and West direction network traffics mirror image acquisition method across main frame tenant
CN102761534B (en) Realize the method and apparatus of media access control layer Transparent Proxy
EP2883123B1 (en) Forwarding packet in stacking system
CN114265666B (en) Network shooting range data acquisition system and method
CN112988572B (en) Multi-environment multi-channel multi-version simulation test method and device
CN107846304A (en) A kind of automation engine of mixing cloud service architecture centralized management
CN112437072A (en) Virtual machine flow traction system, method, equipment and medium in cloud platform
CN105337789A (en) Method and device for monitoring flow of virtual network
CN107979614A (en) Data packet detection method and device
CN106357726A (en) Load balancing method and device
CN106254178B (en) network test platform NFVNTP based on NFV and test method thereof
CN105959347A (en) All-digital collaborative simulation system communication method based on P2P network
CN108390774A (en) A kind of wide area network network-building method and system based on software definition
CN104735101B (en) Shared processing, sharing method and the device of Internet resources, system
CN107306230A (en) A kind of method, device, controller and the equipment of the core network of Internet resources deployment
CN104601400B (en) Shunting device performance test methods, test client and test server
CN110764987A (en) Hardware equipment access method in network simulation test system based on virtualization technology
CN112333711B (en) Wireless network providing method, device and storage medium
CN113518045B (en) Flow acquisition configuration method, flow acquisition method and equipment
CN103117880A (en) Web technology based network topological generation method
CN113542092A (en) Openstack-based automatic drainage method
CN116668384A (en) Flow acquisition device and system for network target range
CN112235158B (en) Flow mirroring method and device, virtual machine platform and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20200605