CN107888455A - A kind of data detection method, device and system - Google Patents
A kind of data detection method, device and system Download PDFInfo
- Publication number
- CN107888455A CN107888455A CN201711259278.0A CN201711259278A CN107888455A CN 107888455 A CN107888455 A CN 107888455A CN 201711259278 A CN201711259278 A CN 201711259278A CN 107888455 A CN107888455 A CN 107888455A
- Authority
- CN
- China
- Prior art keywords
- network element
- kpi
- element device
- server
- network
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/16—Threshold monitoring
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0681—Configuration of triggering conditions
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/12—Network monitoring probes
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0823—Errors, e.g. transmission errors
- H04L43/0829—Packet loss
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0852—Delays
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
- H04L43/0882—Utilisation of link capacity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
- H04L43/0894—Packet rate
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
This application discloses a kind of data detection method, device and system, methods described includes：Server obtains the mirror image data on flows at network element device both ends in real time；The server carries out processing to the mirror image data on flows and generates at least one KPI Key Performance Indicator KPI, and the KPI includes：Packet delay, real-time traffic, bandwidth availability ratio, enter at least one of outflow, disengaging packet rate, network transmission packet loss, small packet rate and unidentified flow；Detect whether the KPI exceedes threshold value, if it exceeds, it is determined that the network element device occurs abnormal.This method can detect to the link on each network element device in real time, and manager is reported in time when detecting to occur exception, and then it can ensure to know the point that may be broken down in network in advance, so that the maintenance for the test point and the redundancy backup of link have reserved the time, it ensure that network service continues not interrupt.
Description
Technical field
The application is related to LAN field, more particularly to a kind of data detection method, device and system.
Background technology
In LAN field, the fault detect to each network element device in network mainly passes through legacy network pipe
Reason system (Network Management System, NMS) is realized.NMS is to be based on simple network management protocol (Simple
Network Management Protocol, SNMP) network-management tool, each network element device (such as server, interchanger,
Router, fire wall etc.) by sending Trap information to specified log server, wherein, each network element is included in the Trap information
The status information of equipment, for example, hardware load, uninterrupted, Interface status etc. then again by log server it is unified collect, exhibition
Show to network manager.
NMS is it is intended that client provides a kind of working condition of detection network element device in real time, the work of physical link connectedness situation
Tool.For example, NMS helps user to understand whether current network available and the function such as judgement to trouble point.But NMS for
The monitoring of network performance can not provide direct, effective technical support, i.e., when detecting that a certain network element device breaks down,
The link for passing in and out the network element device has occurred that failure, influences the connectedness of the network element device and network system, and then causes
Network service is unavailable, therefore, how before network service is unavailable, it is therefore foreseen that the link of each network element device both sides connects
The fact that the general character declines, early detect that abnormal network element device occurs, be those skilled in the art's urgent problem to be solved.
The content of the invention
This application provides a kind of data detection method, device and system, so as to early detect that exception occurs
Network element device, avoid network service unavailable.
In a first aspect, this application provides a kind of data detection method, methods described includes：Server obtains net in real time
The mirror image data on flows at element device both ends；The server carries out processing to the mirror image data on flows and generates at least one key
Performance indicators KPI, the KPI include：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow, disengaging packet speed
At least one of rate, network transmission packet loss, small packet rate and unidentified flow；Detect whether the KPI exceedes threshold value, such as
Fruit exceedes, it is determined that the network element device occurs abnormal.
Wherein, the mirror image data on flows be apply enabled on network element device, such as interchanger by portion complete one
The flow of cause is copied to server, in case server analysis and use.
The method that present aspect provides, server by obtaining the mirror image data on flows of network element device in real time, and generation is at least
One KPI, and to KPI value compared with threshold value, because KPI value includes packet delay, real-time traffic, bandwidth usage
Rate, enter the information such as outflow, packet loss, so data on flows of each moment by network element device can be observantly being perceived,
For example, when the transmission delay for detecting packet exceedes threshold value, exception can be fed back in time, it is existing so as to avoid
NMS detections are only unavailable in network, i.e., when link disconnects, just feed back testing result.When being tested with any one KPI index
During more than threshold value, with regard to alarm report, and then it can ensure just know in network before service disruption and may break down
Point, so as to which the time has been reserved in the maintenance for the test point and the redundancy backup of link, ensure that network service continuation and
Availability.
With reference in a first aspect, in a kind of implementation of first aspect, the mirror image data on flows includes at least one
Packet,
The server carries out processing to the mirror image data on flows and generates at least one KPI, including：
The server carries out parsing life at least one packet of the mirror image data on flows at the network element device both ends
Into two groups of parameters, two groups of parameters include：Forward to data and going out for the network element device is flowed out into the network element device
To data；The server calculate it is all it is described go out to data and the difference forward between data, at least one described in generation
Individual KPI.
With reference in a first aspect, in another implementation of first aspect, whether the detection KPI exceedes threshold value
Before, methods described also includes：The threshold value is obtained, for the threshold value including multiple, i.e., different KPI corresponds to different threshold values.
The server obtains the threshold value, including：The server determines to need what is detected according to the network element device
At least one KPI；The server determines its corresponding threshold value according to each KPI attribute.
With reference in a first aspect, in another implementation of first aspect, methods described also includes：The server will
Testing result is sent to manager by way of mail or short message, so that the manager is according to the testing result pair
Abnormal network element device occurs to be repaired.
With reference in a first aspect, in another implementation of first aspect, the server includes network management electricity
Source controller NPM, the NPM are deployed in network system by the way of bypass, and the network system includes the server
With at least one network element device, wherein, the both sides of each network element device are provided with Flow Observation point, each flow
Observation station is used to report mirror image data on flows to the server in real time.
With reference in a first aspect, in another implementation of first aspect, detect whether the KPI exceedes threshold value, wrap
Include：
Each KPI compared with corresponding threshold value, is recorded all result of the comparison by the server, and by the ratio
Relatively result is sent to manager.
Further, if the value for wherein having a KPI is more than or equal to threshold value, it is determined that exception occurs for the network element device,
Otherwise, illustrate that the network element device is normal.If multiple KPI value is above its corresponding threshold value, and it can determine that the network element is set
Exception occurs for standby multiple measurement amounts, and then detects and determine to break down by the link of the network element device.
Second aspect, present invention also provides a kind of data detection device, the device can be applied to server, such as daily record
In server, and the server includes NPM, and further, described device includes：
Acquiring unit, for obtaining the mirror image data on flows at network element device both ends in real time；
Processing unit, at least one KPI Key Performance Indicator KPI, institute are generated for carrying out processing to the mirror image data on flows
Stating KPI includes：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow, disengaging packet rate, network transmission packet loss
At least one of rate, small packet rate and unidentified flow；
The processing unit, it is additionally operable to detect whether the KPI exceedes threshold value, if it exceeds, it is determined that the network element is set
Preparation life is abnormal.
With reference to second aspect, in a kind of implementation of second aspect, the mirror image data on flows includes at least one
Packet, the processing unit, specifically at least one packet of the mirror image data on flows to the network element device both ends
Parsing two groups of parameters of generation are carried out, two groups of parameters include：Forward to data and the net is flowed out into the network element device
Element device goes out to data, and, calculate it is all it is described go out to data and the difference forward between data, described in generation extremely
A few KPI.
With reference to second aspect, in another implementation of second aspect, the acquiring unit, it is additionally operable to described in acquisition
Threshold value；Further, the acquiring unit, specifically for being determined to need at least one KPI detected according to the network element device,
Its corresponding threshold value is determined according to each KPI attribute.
With reference to second aspect, in another implementation of second aspect, described device also includes：Transmitting element,
The transmitting element, for testing result to be sent into manager by way of mail or short message, so that
The manager repairs according to the testing result to abnormal network element device occurs.
With reference to second aspect, in another implementation of second aspect, described device includes network management power supply
Controller NPM, the NPM using bypass by the way of be deployed in network system, the network system include the server and
At least one network element device, wherein, the both sides of each network element device are provided with Flow Observation point, and each flow is seen
Measuring point is used to report mirror image data on flows to the server in real time.
The third aspect, present invention also provides a kind of network equipment, such as server, the server includes network pipe
Power-supply controller of electric NPM is managed, further, also includes transceiver, processor and memory in the server, the processor can be with
The program stored in the memory or instruction are performed, so as to realize with Data Detection side described in the various implementations of first aspect
Method.
Fourth aspect, present invention also provides a kind of computer-readable storage medium, the computer-readable storage medium can be stored with journey
Sequence, the program can realize the part or all of step in each embodiment of data detection method provided including the application when performing.
5th aspect, present invention also provides a kind of data detection system, the system includes：Server and at least one
Network element device, the both sides of each network element device are provided with Flow Observation point,
Each Flow Observation point, for gathering the mirror image data on flows of network element device, and by the mirror image flow number
According to being sent to server；
The server, for receiving the mirror image data on flows of each Flow Observation point in real time, to the mirror image flow
Data carry out processing and generate at least one KPI Key Performance Indicator KPI, detect whether the KPI exceedes threshold value, if it does, then true
Exception occurs for the fixed network element device, wherein, the KPI includes：Packet delay, real-time traffic, bandwidth availability ratio, disengaging stream
At least one of amount, disengaging packet rate, network transmission packet loss, small packet rate and unidentified flow.
With reference to the 5th aspect, in a kind of implementation of the 5th aspect, the system also includes manager, in addition, institute
The system of stating can also include other network element devices, such as interchanger, types of applications server etc..
The server, it is additionally operable to testing result being sent to the manager；
The manager, for receiving and counting the testing result of each network element device, determined according to the testing result
Abnormal network element device is sent, and the abnormal network element device is repaired.
A kind of data detection method of the application offer, device and system, can be in real time on each network element device
Link is detected, and reports manager in time when detecting to occur exception, and solving legacy network management system can only examine
It is available or unavailable to measure network, and the fault data of the accumulation in malfunction analysis procedure due to different time is more, leads
Cause the long short slab of network-troubleshooting, recovery time.This programme generates multiple KPI values by quiescent flow data, then detects each
Whether KPI value exceedes its corresponding threshold value, when being tested with any one KPI index and exceeding threshold value, with regard to alarm report, enters
And can ensure to know the point that may be broken down in network in advance, so as to which the maintenance for the test point and the redundancy of link are standby
Part has reserved the time, ensure that the continuation and availability of network service.
In this programme, due to setting NPM in the server, built-in hard disk in the NPM, real-time analysis result can be stored in
It is local, in order to which manager or user carry out failure backtracking at any time.Further, since NPM is disposed in user network using bypass,
Therefore the existing network architecture is not interfered with, avoids increasing trouble point yet.
Brief description of the drawings
In order to illustrate more clearly of the technical scheme of the application, letter will be made to the required accompanying drawing used in embodiment below
Singly introduce, it should be apparent that, for those of ordinary skills, without having to pay creative labor,
Other accompanying drawings can also be obtained according to these accompanying drawings.
Fig. 1 is a kind of scene structure schematic diagram for Data Detection network that the embodiment of the present application provides；
Fig. 2 is a kind of flow chart for data detection method that the embodiment of the present application provides；
Fig. 3 is a kind of flow chart for data configuration method that the embodiment of the present application provides；
Fig. 4 is a kind of schematic flow sheet for real-time intelligent network performance monitoring runtime that the embodiment of the present application provides；
Fig. 5 is a kind of structural representation for data detection device that the embodiment of the present application provides；
Fig. 6 is a kind of structural representation for server that the embodiment of the present application provides.
Embodiment
To make the purpose, technical scheme and advantage of the application clearer, below in conjunction with the application specific embodiment and
Technical scheme is clearly and completely described corresponding accompanying drawing.Obviously, described embodiment is only the application one
Section Example, rather than whole embodiments.Based on the embodiment in the application, those of ordinary skill in the art are not doing
Go out under the premise of creative work the every other embodiment obtained, belong to the scope of the application protection.
Below in conjunction with accompanying drawing, the technical scheme that each embodiment of the application provides is described in detail.
Fig. 1 is a kind of Data Detection network system that the embodiment of the present application provides.As described in Figure 1, the network system includes：
User's LAN, internet and user, wherein, LAN subscriber is communicated by internet with Internet user.In user
LAN includes fire wall, interchanger, types of applications server and network management power-supply controller of electric (Network Power
Manager, NPM) etc..Specifically, fire wall is provided between user side operator access switch and core switch, such as
Fire wall -1 and fire wall -2 shown in Fig. 1.And the both sides of fire wall -1 are provided with observation station one and observation station two, for observing
Pass in and out the data on flows of fire wall -1.Similarly, observation station, such as observation station two are also equipped with the both sides of core switch -1
With observation station three, in addition, each observation station is connected with NPM equipment, for the data of observation to be reported into NPM, in order to
NPM is analyzed and detected to the data of each observation station.
Wherein, in each embodiment of the application, by NPM configurations in the server.Also, in network system, pass through
Set more observation stations to analyze user network flow in real time, help the behavior pattern of user's moment awareness network aspect, carry
Preceding early warning simultaneously provides the risk point that objective data on flows analysis result helps user's fast positioning to influence performance.
In order to solve the above-mentioned technical problem, the embodiment of the present application provides a kind of real-time intelligent network performance monitoring operation system
Unite (operating system, OS), referred to as NPM OS, the technical scheme of the application needs NPM OS being deployed in traditional clothes
It is engaged on device, such as X86 servers, and in order to not influence the network architecture of user, reduce user network trouble point, using bypass
Mode is deployed in user's LAN.Wherein, in each embodiment of following the application, real-time intelligent network performance will be installed
Monitoring OS server is referred to as NPM.
Embodiment one
A kind of data detection method is present embodiments provided, for being detected to each network element device, to extract precognition
By being detected the link circuit condition of network element device, risk is predicted.
Specifically, as shown in Fig. 2 the described method comprises the following steps：
Step 201：Server obtains the mirror image data on flows at network element device both ends in real time.
Wherein, the server is NPM or includes NPM log server.The mirror image data on flows is tested
Survey grid element device, for example, fire wall or the test point of interchanger both sides report with its actual a duplicate stream obtained
Amount copy data, and flow copy data are sent to server by the port of setting.The mirror image flow number at the both ends
According to, it is believed that be that data enter and the data of the flow network element device, for example, network element device receive packet when
At the time of carving, and packet be sent to by processing.
Step 202：Server carries out processing to the mirror image data on flows and generates at least one KPI Key Performance Indicator KPI,
The KPI includes：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow, disengaging packet rate, network transmission are lost
At least one of bag rate, small packet rate and unidentified flow etc., wherein, the mirror image data on flows includes at least one data
Bag, each packet can be used for one group of KPI of generation.
Wherein, the KPI also includes：Transmitting data stream enters outflow etc. under TCP/UDP agreements, can also include other
Attribute information, the application are not limited this.
Optionally, server is extracted to obtain KPI after receiving mirror image flow to data, is specifically included：
The server carries out parsing life at least one packet of the mirror image data on flows at the network element device both ends
Into two groups of parameters, two groups of parameters include：Forward to data and going out for the network element device is flowed out into the network element device
To data, such as enter outflow, disengaging packet rate etc..
The server calculate it is all it is described go out to data and the difference forward between data, at least one described in generation
Individual KPI.
Wherein, two data of the calculating difference need to meet the physical quantity for belonging to same attribute, and often calculate
One difference one KPI of corresponding generation, if calculating has N number of difference, correspond to generation N number of KPI, N and be more than or equal to 1.
Step 203：Detect whether the KPI exceedes threshold value, if it exceeds, it is determined that the network element device occurs abnormal；
If not less than the threshold value, it is considered that the link of network element device is normal.
Specifically, during detection, if there is N number of KPI, then need by each KPI with it corresponding to threshold
Value is compared.Wherein, the threshold value corresponding to each KPI can be by pre-setting generation.Detecting whether each KPI exceedes threshold
During value, if wherein there is a KPI, for example transmission delay would exceed preset duration, then can determine the network element device
Exception between two observation stations be present, safe hidden danger be present.If detecting multiple KPI exceedes threshold value, can be by entering
Analyze to one step to determine whether the network element device breaks down.
Optionally, methods described also includes：
Testing result is sent to manager by the server so that the manager according to the testing result to occur
Abnormal network element device is repaired.Further, the inspection can occur by way of mail or short message for server
Survey result.
Optionally, in order to which NPM is deployed in user's LAN by the way of bypass, the network architecture is not influenceed, is reduced
User network trouble point quantity.
Optionally, multiple observation stations are disposed in user's LAN, so can detect in real time into network element device and
Go out the flow of network element device, these results are reported into server, for server analysis and compared.
The method that the present embodiment provides, server by obtaining the mirror image data on flows of network element device in real time, and generation is extremely
A few KPI, and to KPI value with threshold value compared with, due to KPI value, to include packet delay, real-time traffic, bandwidth sharp
With rate, enter the information such as outflow, packet loss, so flow number of each moment by network element device can observantly perceived
According to, for example, when the transmission delay for detecting packet exceedes threshold value, exception can be fed back in time, it is existing so as to avoid
NMS detection it is only unavailable in network, i.e., link disconnect when, just feedback testing result.Refer to when being tested with any one KPI
Mark is when exceeding threshold value, with regard to alarm report, and then can ensure before service disruption can just know in network may occur it is former
The point of barrier, so as to which the time has been reserved in the maintenance for the test point and the redundancy backup of link, it ensure that the continuation of network service
And availability.
Embodiment two
A kind of data configuration method is provided in the present embodiment, for setting KPI threshold values for server, and is completed
The deployment of NPM equipment, and then the abnormal state detection of network element device is prepared for the server.
Specifically, as shown in figure 3, the collocation method comprises the following steps：
Step 301：Real-time intelligent network performance monitoring runtime (NPM OS) is deployed on X86 servers.
Step 302：Parameter configuration is carried out to the NPM on the X86 servers, for example, in sequence table, such as KPI forms
In choose the KPI of network element device to be detected and threshold value corresponding to each KPI be set, the threshold value includes preset range.
The threshold value can determine according to the actual conditions of network system, can also be according to the feature of network element to be detected come really
Fixed, the present embodiment is not limited this.
Step 303：NPM is deployed in network system by the way of bypass, and each in network system treats
Multiple Flow Observation points are set on detection network element.
Wherein, each Flow Observation point is respectively provided with the function of configuration mirroring flow, for by the data copy of observation
Portion is sent to X86 servers.
In the present embodiment, after using real-time intelligent network performance monitoring runtime, because NPM OS have Real-time Network
The function of network performance health examination, place, occurs the more apparent decline of big abnormal flow or network performance appearance that happens suddenly in a network
When, it can in advance predict and send the report to manager in time or IT keepers, and then serve and predict risk in advance, and
Prevention of risk effect is excluded, and then reduces the number that reporting of user network performance declines in LAN, improves user's body
Test.
On the one hand, by using real-time intelligent network performance monitoring runtime so that the threshold of O＆M is greatly reduced, fortune
Battalion's cost is reduced to for 1,500,000/year from 4,000,000/year before, specifically includes：O＆M team is simplified, and personnel cost is effectively controlled
System；And reduce bought network equipment vendor's genuine service class so that equipment maintenance cost is effectively controlled.
On the other hand, after real-time intelligent network performance monitoring system has been used, due to NPM device interiors store it is all
KPI forms, so clear for the historical data working order and performance bottleneck of overall network, provided for HardwareUpgring
More objective data foundation.
Embodiment three
In a specific embodiment, Fig. 4 represents that the flow of a real-time intelligent network performance monitoring runtime is shown
It is intended to, the system includes user/various application systems, server and manager, wherein, the user/various application systems are used
It is used to configure NPM equipment into service in server offer mirror image data on flows, manager, and the portion of multiple observation stations
Administration, the server are used for the link for obtaining mirror image data on flows and each network element device being detected according to the mirror image data on flows
Situation.
Specifically, as shown in figure 4, this method comprises the following steps：
Step 1：Manager completes NPM device configurations, i.e., by NPM OS deployment on the server, and, in addition to set
Multiple KPI threshold values.
Step 2：NPM bypasses are arranged in the monitoring runtime, and multiple observation stations are set in the system, its
In, each observation station possesses mirror image traffic engineering capability.
Step 3：The server for being configured with NPM obtains the mirror image data on flows in user and each application system.
Step 4：Server carries out processing to the mirror image data on flows of acquisition and generates at least one KPI, wherein, the KPI
Including：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow, be disengaging packet rate, network transmission packet loss, small
At least one of packet rate and unidentified flow etc..
Step 5：Server detects to the KPI of generation in real time, judges whether each KPI exceedes threshold value.
Step 6：If it exceeds the threshold, then show that exception occurs for the link between detected network element device.
For example, the mirror image data on flows that server obtains includes the packet transmission time into and out of fire wall -1, it is respectively
24s and 20s, and then it is 4s to obtain the time difference, judges that the transmission delay of the 4s exceedes preset duration 2s, it is determined that the fire prevention
Exception may occur for the link between wall -1.
Step 7：The abnormal testing result of the generation is reported into manager.Optionally, server passes through mail or short message
Mode report the testing result.
If not less than threshold value, it is determined that the link between two observation stations of the tested measurement equipment is normal.
Manager receives the testing result from server, and is quickly determined according to the testing result and abnormal chain occurs
Road or trouble point, and the anomaly link or trouble point are repaired or replaced, to ensure that network service does not interrupt.
The monitoring runtime that the present embodiment provides can detect to the link on each network element device in real time, and
Report manager in time when detecting to occur exception, solving legacy network management system can only detect that network is available or not
It can use, and the fault data of the accumulation in malfunction analysis procedure due to different time is more, when causing network-troubleshooting, recovering
Between long short slab.
This programme generates multiple KPI values by quiescent flow data, then whether detects each KPI value more than corresponding to it
Threshold value, when being tested with any one KPI index and exceeding threshold value, with regard to alarm report, and then it can ensure to know network in advance
In the point that may break down, so as to which the time has been reserved in the maintenance for the test point and the redundancy backup of link, ensure that net
The continuation and availability of network service.
In this programme, due to setting NPM in the server, built-in hard disk in the NPM, real-time analysis result can be stored in
It is local, in order to which manager or user carry out failure backtracking at any time.Further, since NPM is disposed in user network using bypass,
Therefore the existing network architecture is not interfered with, avoids increasing trouble point yet.
Referring to Fig. 5, for the structural representation of the application data detection device one embodiment.Described device can be foregoing
NPM in embodiment, it can also set on the server, for performing the data detection method corresponding to Fig. 2 to Fig. 4.
As shown in figure 5, the device includes：Acquiring unit 501, processing unit 502 and transmitting element 503.In addition, the device
Other units and structure member, such as memory cell etc. can also be included.
Further, acquiring unit 501, for obtaining the mirror image data on flows at network element device both ends in real time；
Processing unit 502, at least one KPI Key Performance Indicator is generated for carrying out processing to the mirror image data on flows
KPI, the KPI include：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow, disengaging packet rate, network pass
At least one of defeated packet loss, small packet rate and unidentified flow；
The processing unit 502, it is additionally operable to detect whether the KPI exceedes threshold value, if it exceeds, it is determined that the network element
Equipment occurs abnormal；If not less than, it is determined that the link between the network element device is normal.
Optionally, in a kind of specific implementation of the present embodiment, the mirror image data on flows includes at least one number
According to bag,
The processing unit 502, specifically at least one number of the mirror image data on flows to the network element device both ends
Parsing two groups of parameters of generation are carried out according to bag, two groups of parameters include：Forward to data and institute is flowed out into the network element device
State going out to data for network element device, and, calculate it is all it is described go out to data and the difference forward between data, generate institute
State at least one KPI.
Optionally, in a kind of specific implementation of the present embodiment, acquiring unit 501, it is additionally operable to obtain the threshold value.
Further, the acquiring unit 501, specifically for being determined to need at least one detected according to the network element device
Individual KPI, its corresponding threshold value is determined according to each KPI attribute.
Optionally, in a kind of specific implementation of the present embodiment, transmitting element 503, for testing result to be passed through
The mode of mail or short message is sent to manager, so that net of the manager according to the testing result to generation exception
Element device is repaired.
Optionally, in a kind of specific implementation of the present embodiment, described device includes NPM, and the NPM uses other
The mode on road is deployed in network system, and the network system includes the server and at least one network element device, wherein, often
The both sides of the individual network element device are provided with Flow Observation point, and each Flow Observation point is used in real time to the service
Device reports mirror image data on flows.
Optionally, described device also includes memory cell, for KPI lists, memory image data on flows, KPI and inspection
Survey result etc..
It is foregoing each for realizing in the specific implementation, present invention also provides a kind of server for being provided with NPM OS
Method and step in embodiment.
As shown in fig. 6, the server can include transceiver 601, processor 602 and memory 603, the server
More or less parts can also be included, some parts are either combined or different parts arrangement, the application do not enter to this
Row limits.
The transceiver 601 is used to establish with equipment such as each network element device in user's LAN, observation station, managers
Communication connection, so as to realize detection and the data transfer Link State network element device in network.
Optionally, the various transceiver modules in the transceiver 601 are typically with IC chip (Integrated
Circuit Chip) form occur, and the property of can be chosen combine.
In the present embodiment, the function to be realized of receiver 601 can be filled by the Data Detection in embodiment two
The acquiring unit 501 put and transmitting element 503 are realized, or the transceiver 601 controlled by processor 602 is realized；The place
The reason function to be realized of unit 502 can then be realized by processor 602.
The processor 602 is the control centre of NPM equipment or server, is entirely taken using various interfaces and connection
The various pieces of business device, by running or performing the software program and/or module that are stored in memory 603, and call and deposit
The data in memory 603 are stored up, with the various functions and/or processing data of execute server.
The processor 602 can only include central processing unit (Central Processing Unit, CPU), can also
Be in GPU, digital signal processor (Digital Signal Processor, DSP) and transceiver control chip (such as
Baseband chip) combination.In the various embodiments of the application, CPU can be single arithmetic core, can also include multioperation
Core.
The memory 603 can include volatile memory (volatile memory), such as random access memory
(Random Access Memory, RAM)；Nonvolatile memory (non-volatile memory) can also be included, such as
Flash memory (flash memory), hard disk (Hard Sisk Drive, HDD) or solid state hard disc (Solid-State
Drive, SSD)；Memory can also include the combination of the memory of mentioned kind.It can be had program stored therein in the memory
Or code, processor 602 can realize the function of the server by performing described program or code.
In addition, present invention also provides a kind of data detection system, as shown in figure 1, system includes：Server and at least one
Individual network element device, the both sides of each network element device are provided with Flow Observation point.
Each Flow Observation point, for gathering the mirror image data on flows of network element device, and by the mirror image flow number
According to being sent to server；
Server, for receiving the mirror image data on flows of each Flow Observation point in real time, to the mirror image data on flows
Carry out processing and generate at least one KPI Key Performance Indicator KPI, detect whether the KPI exceedes threshold value, if it exceeds, it is determined that institute
State network element device and exception occurs, wherein, the KPI includes：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow,
Pass in and out at least one of packet rate, network transmission packet loss, small packet rate and unidentified flow.
Optionally, the server, it is additionally operable to testing result being sent to the manager；The system also includes management
Device, the manager, for receiving and counting the testing result of each network element device, determine that transmission is different according to the testing result
Normal network element device, and the abnormal network element device is repaired.
It should be noted that the network element device described in the above-mentioned each embodiment of the application includes but is not limited to terminal and set
The equipment such as standby, server, interchanger, router, fire wall.Wherein, the terminal device can be mobile terminal, such as mobile electricity
Words and the computer with mobile terminal；Terminal device can also be movement station (mobile station, MS), distant station
(remote station, RS), remote equipment (remote terminal, RT), access terminal (access terminal,
AT), user terminal (user terminal, UT), user agent (user agent, UA), user equipment or subscriber's installation
(user equipment, UE) etc..
In the specific implementation, the present invention also provides a kind of computer-readable storage medium, wherein, the computer-readable storage medium can store
There is program, the program may include the part or all of step in each embodiment of data detection method provided by the invention when performing
Suddenly.
A kind of computer program product is also proposed in the specific embodiment of the application, the computer program product may include
Instruction, when the instruction is run on computers so that computer performs the method as described in Fig. 2 to Fig. 4 each side.
It is required that those skilled in the art can be understood that the technology in the embodiment of the present invention can add by software
The mode of general hardware platform realize.Based on such understanding, the technical scheme in the embodiment of the present invention substantially or
Say that the part to be contributed to prior art can be embodied in the form of software product, the computer software product can be deposited
Storage is in storage medium, such as ROM/RAM, magnetic disc, CD, including some instructions are causing a computer equipment (can be with
Be personal computer, server, either network equipment etc.) perform some part institutes of each embodiment of the present invention or embodiment
The method stated.
In this specification between each embodiment identical similar part mutually referring to.Especially for Data Detection
For embodiment, because it is substantially similar to embodiment of the method, so description is fairly simple, related part is implemented referring to method
Explanation in example.
Invention described above embodiment is not intended to limit the scope of the present invention..
Claims (12)
1. a kind of data detection method, it is characterised in that methods described includes：
Server obtains the mirror image data on flows at network element device both ends in real time；
The server carries out processing to the mirror image data on flows and generates at least one KPI Key Performance Indicator KPI, the KPI bags
Include：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow, disengaging packet rate, network transmission packet loss, parcel
At least one of speed and unidentified flow；
Detect whether the KPI exceedes threshold value, if it exceeds, it is determined that the network element device occurs abnormal.
2. according to the method for claim 1, it is characterised in that the mirror image data on flows includes at least one packet,
The server carries out processing to the mirror image data on flows and generates at least one KPI, including：
The server carries out parsing generation two at least one packet of the mirror image data on flows at the network element device both ends
Group parameter, two groups of parameters include：Forward to data and the going out to number of the network element device is flowed out into the network element device
According to；
Go out described in the server calculating is all described at least one to data and the difference forward between data, generation
KPI。
3. method according to claim 1 or 2, it is characterised in that before whether the detection KPI exceedes threshold value,
Methods described also includes：The threshold value is obtained,
The server obtains the threshold value, including：
The server determines to need at least one KPI detected according to the network element device；
The server determines its corresponding threshold value according to each KPI attribute.
4. method according to claim 1 or 2, it is characterised in that methods described also includes：
Testing result is sent to manager by the server by way of mail or short message, so that the manager root
Repaired according to the testing result to abnormal network element device occurs.
5. method according to claim 1 or 2, it is characterised in that the server includes network management power supply
Device NPM,
The NPM is deployed in network system by the way of bypass, and the network system includes the server and at least one
Individual network element device, wherein, the both sides of each network element device are provided with Flow Observation point, and each Flow Observation point is used
In in real time mirror image data on flows is reported to the server.
6. a kind of data detection device, it is characterised in that described device includes：
Acquiring unit, for obtaining the mirror image data on flows at network element device both ends in real time；
Processing unit, at least one KPI Key Performance Indicator KPI is generated for carrying out processing to the mirror image data on flows, it is described
KPI includes：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow, disengaging packet rate, network transmission packet loss
At least one of rate, small packet rate and unidentified flow；
The processing unit, it is additionally operable to detect whether the KPI exceedes threshold value, if it exceeds, it is determined that the network element device hair
It is raw abnormal.
7. device according to claim 6, it is characterised in that the mirror image data on flows includes at least one packet,
The processing unit, carried out specifically at least one packet of the mirror image data on flows to the network element device both ends
Parsing two groups of parameters of generation, two groups of parameters include：Set into the network element device forward to data and the outflow network element
Standby goes out to data, and, calculate it is all it is described go out to data and the difference forward between data, at least one described in generation
Individual KPI.
8. the device according to claim 6 or 7, it is characterised in that
The acquiring unit, it is additionally operable to obtain the threshold value；
The acquiring unit, specifically for being determined to need at least one KPI detected according to the network element device, according to each institute
The attribute for stating KPI determines its corresponding threshold value.
9. the device according to claim 6 or 7, it is characterised in that described device also includes：Transmitting element,
The transmitting element, for testing result to be sent into manager by way of mail or short message, so that described
Manager repairs according to the testing result to abnormal network element device occurs.
10. the device according to claim 6 or 7, it is characterised in that described device includes network management power-supply controller of electric
NPM,
The NPM is deployed in network system by the way of bypass, and the network system includes the server and at least one
Individual network element device, wherein, the both sides of each network element device are provided with Flow Observation point, and each Flow Observation point is used
In in real time mirror image data on flows is reported to the server.
11. a kind of data detection system, it is characterised in that the system includes：Server and at least one network element device, each
The both sides of the network element device are provided with Flow Observation point,
Each Flow Observation point, sent out for gathering the mirror image data on flows of network element device, and by the mirror image data on flows
Give server；
The server, for receiving the mirror image data on flows of each Flow Observation point in real time, to the mirror image data on flows
Carry out processing and generate at least one KPI Key Performance Indicator KPI, detect whether the KPI exceedes threshold value, if it exceeds, it is determined that institute
State network element device and exception occurs, wherein, the KPI includes：Packet delay, real-time traffic, bandwidth availability ratio, enter outflow,
Pass in and out at least one of packet rate, network transmission packet loss, small packet rate and unidentified flow.
12. system according to claim 11, it is characterised in that the system also includes manager,
The server, it is additionally operable to testing result being sent to the manager；
The manager, for receiving and counting the testing result of each network element device, determine to send according to the testing result
Abnormal network element device, and the abnormal network element device is repaired.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711259278.0A CN107888455A (en) | 2017-12-04 | 2017-12-04 | A kind of data detection method, device and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711259278.0A CN107888455A (en) | 2017-12-04 | 2017-12-04 | A kind of data detection method, device and system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN107888455A true CN107888455A (en) | 2018-04-06 |
Family
ID=61772924
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711259278.0A Pending CN107888455A (en) | 2017-12-04 | 2017-12-04 | A kind of data detection method, device and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107888455A (en) |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109347701A (en) * | 2018-11-09 | 2019-02-15 | 公安部第三研究所 | Realize the system and method that Network Isolation properties of product are carried out with testing and control |
| CN110198228A (en) * | 2018-04-12 | 2019-09-03 | 腾讯科技（深圳）有限公司 | A kind of failure monitoring method, device, server and storage medium |
| CN110266532A (en) * | 2019-06-17 | 2019-09-20 | 福建广电网络集团股份有限公司 | A kind of united net management method and system based on CMTS |
| CN111818231A (en) * | 2020-07-06 | 2020-10-23 | 全时云商务服务股份有限公司 | Packet loss compensation method, device, data message transmission system and storage medium |
| CN112883001A (en) * | 2021-01-28 | 2021-06-01 | 国网冀北电力有限公司智能配电网中心 | Data processing method, device and medium based on marketing and distribution through data visualization platform |
| CN115174429A (en) * | 2022-05-25 | 2022-10-11 | 深信服科技股份有限公司 | Network bandwidth detection method, device, system, equipment and storage medium |
| CN115914038A (en) * | 2022-11-11 | 2023-04-04 | 中国联合网络通信集团有限公司 | Degradation forwarding equipment detection method, device, equipment and storage medium |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1878384A (en) * | 2006-07-10 | 2006-12-13 | 华为技术有限公司 | Network element failure detecting method |
| US20070025389A1 (en) * | 2005-07-29 | 2007-02-01 | Proactivenet, Inc. | Abnormality indicator of a desired group of resource elements |
| CN104639388A (en) * | 2014-12-30 | 2015-05-20 | 中国科学院计算机网络信息中心 | DNS server availability detection method based on user perception |
| CN106385339A (en) * | 2016-11-01 | 2017-02-08 | 上海携程商务有限公司 | Monitoring method and monitoring system for access performance of enterprise network |
| CN106792876A (en) * | 2016-12-26 | 2017-05-31 | 浙江省公众信息产业有限公司 | End to end network perception evaluating method and system |
| CN106789442A (en) * | 2017-01-12 | 2017-05-31 | 上海新炬网络信息技术有限公司 | LAN client performance analysis method based on data on flows |
-
2017
- 2017-12-04 CN CN201711259278.0A patent/CN107888455A/en active Pending
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20070025389A1 (en) * | 2005-07-29 | 2007-02-01 | Proactivenet, Inc. | Abnormality indicator of a desired group of resource elements |
| CN1878384A (en) * | 2006-07-10 | 2006-12-13 | 华为技术有限公司 | Network element failure detecting method |
| CN104639388A (en) * | 2014-12-30 | 2015-05-20 | 中国科学院计算机网络信息中心 | DNS server availability detection method based on user perception |
| CN106385339A (en) * | 2016-11-01 | 2017-02-08 | 上海携程商务有限公司 | Monitoring method and monitoring system for access performance of enterprise network |
| CN106792876A (en) * | 2016-12-26 | 2017-05-31 | 浙江省公众信息产业有限公司 | End to end network perception evaluating method and system |
| CN106789442A (en) * | 2017-01-12 | 2017-05-31 | 上海新炬网络信息技术有限公司 | LAN client performance analysis method based on data on flows |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110198228A (en) * | 2018-04-12 | 2019-09-03 | 腾讯科技（深圳）有限公司 | A kind of failure monitoring method, device, server and storage medium |
| CN109347701A (en) * | 2018-11-09 | 2019-02-15 | 公安部第三研究所 | Realize the system and method that Network Isolation properties of product are carried out with testing and control |
| CN110266532A (en) * | 2019-06-17 | 2019-09-20 | 福建广电网络集团股份有限公司 | A kind of united net management method and system based on CMTS |
| CN110266532B (en) * | 2019-06-17 | 2021-11-16 | 福建广电网络集团股份有限公司 | CMTS-based unified network management method and system |
| CN111818231A (en) * | 2020-07-06 | 2020-10-23 | 全时云商务服务股份有限公司 | Packet loss compensation method, device, data message transmission system and storage medium |
| CN112883001A (en) * | 2021-01-28 | 2021-06-01 | 国网冀北电力有限公司智能配电网中心 | Data processing method, device and medium based on marketing and distribution through data visualization platform |
| CN115174429A (en) * | 2022-05-25 | 2022-10-11 | 深信服科技股份有限公司 | Network bandwidth detection method, device, system, equipment and storage medium |
| CN115174429B (en) * | 2022-05-25 | 2024-04-09 | 深信服科技股份有限公司 | Network bandwidth detection method, device, system, equipment and storage medium |
| CN115914038A (en) * | 2022-11-11 | 2023-04-04 | 中国联合网络通信集团有限公司 | Degradation forwarding equipment detection method, device, equipment and storage medium |
| CN115914038B (en) * | 2022-11-11 | 2024-04-09 | 中国联合网络通信集团有限公司 | Degradation forwarding device detection method, device, equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107888455A (en) | A kind of data detection method, device and system | |
| CN104796273B (en) | A kind of method and apparatus of network fault root diagnosis | |
| CN103370904B (en) | Method, network entity for the seriousness that determines network accident | |
| CN104798341B (en) | Service level is characterized on electric network | |
| CN111817911B (en) | Method, device, computing equipment and storage medium for detecting network quality | |
| CN106789323A (en) | A kind of communication network management method and its device | |
| US9270560B2 (en) | Session layer for monitoring utility application traffic | |
| CN107659423A (en) | Method for processing business and device | |
| CN101577872A (en) | System for determining real time network up time | |
| CN102158360A (en) | Network fault self-diagnosis method based on causal relationship positioning of time factors | |
| CN108306747B (en) | Cloud security detection method and device and electronic equipment | |
| CN112291075B (en) | Network fault positioning method and device, computer equipment and storage medium | |
| US20080181134A1 (en) | System and method for monitoring large-scale distribution networks by data sampling | |
| CN102136958B (en) | Method and system for diagnosing access node | |
| Brand et al. | A framework for the integration of ict-relevant data in power system applications | |
| CN113572654A (en) | Network performance monitoring method, network device and storage medium | |
| CN109964450B (en) | Method and device for determining shared risk link group | |
| CN108599978B (en) | Cloud monitoring method and device | |
| CN103457792A (en) | Fault detection method and fault detection device | |
| CN113873560A (en) | Network fault processing method and device | |
| CN104394038B (en) | Suspension bypass automatic detection early warning system and method | |
| Song et al. | Internet router outage measurement: An embedded approach | |
| WO2024051258A1 (en) | Event processing method, apparatus and system | |
| CN108111429A (en) | It is a kind of to detect and solve the method and system of local network attack | |
| KR20090038123A (en) | System and method for network management, storage medium recording that metho program |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20180406 |