CN107979506A - Flow obtains and high in the clouds display systems, method, apparatus and equipment - Google Patents
Flow obtains and high in the clouds display systems, method, apparatus and equipment Download PDFInfo
- Publication number
- CN107979506A CN107979506A CN201711041361.0A CN201711041361A CN107979506A CN 107979506 A CN107979506 A CN 107979506A CN 201711041361 A CN201711041361 A CN 201711041361A CN 107979506 A CN107979506 A CN 107979506A
- Authority
- CN
- China
- Prior art keywords
- data traffic
- user terminal
- flow
- data
- authority
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/04—Processing captured monitoring data, e.g. for logfile generation
- H04L43/045—Processing captured monitoring data, e.g. for logfile generation for graphical visualisation of monitoring data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
Abstract
This specification embodiment discloses flow and obtains and high in the clouds display systems, method, apparatus and equipment.For the user terminal of different operating system (such as iOS system or android system), according to user the user terminal authority (such as Root authority and non-Root authority), corresponding flow obtaining mode will be adapted to the user terminal by cross-platform Support Library, sent after obtaining flow to high in the clouds, the data traffic acquired with Visual Chart displaying.Further, it is also possible to according to fileinfo is set, the data traffic for belonging to specified APP is obtained, improves the purity level of data traffic.
Description
Technical field
This specification is related to field of computer technology, more particularly to flow obtains and high in the clouds display systems, square law device and
Equipment.
Background technology
User terminal continuously receives or sends data packet, forms data traffic.
In the prior art, to obtain the data traffic of user terminal, generally directed to custom system, exploitation flow obtains work
Tool, obtains the total data flow of user terminal, and will obtain gained flow upload service end, is analyzed, after carrying out
Continuous business (for example, network-troubleshooting).
Based on this, it is necessary to which the wider array of flow of accommodation obtains scheme.
The content of the invention
This specification embodiment provides flow acquisition and high in the clouds display systems, method, apparatus and equipment, as follows for solving
Problem：Scheme is obtained to provide the wider array of flow of accommodation.
Based on this, this specification embodiment provides a kind of flow acquisition and high in the clouds display systems, including：Cross-platform branch
Hold storehouse, uploading module and high in the clouds displaying subsystem；
The cross-platform Support Library, for the user terminal of different operating system, according to user in the user terminal
Authority, by corresponding flow obtaining mode (when it is the data packet occurred one by one to obtain object, being referred to as packet capturing pattern)
The user terminal is adapted to, the data traffic of the user terminal is obtained by the flow obtaining mode, the authority is
Root authority or non-Root authority；
The uploading module, data traffic to the high in the clouds for sending the acquisition show subsystem；
The high in the clouds shows subsystem, and the data flow is shown for receiving the data traffic, and with Visual Chart
Amount.
Meanwhile this specification embodiment also provides a kind of flow acquisition and high in the clouds methods of exhibiting, the described method includes：
For the user terminal of different operating system, according to user the user terminal authority, by corresponding flow
Obtaining mode is adapted to the user terminal；
Data traffic is obtained by the corresponding flow obtaining mode, is shown to send the data traffic to high in the clouds
Subsystem；
Wherein, the authority is Root authority or non-Root authority.
Meanwhile this specification embodiment also provides another flow acquisition and high in the clouds methods of exhibiting, the described method includes：
Receive data traffic/data traffic file；
Data traffic/data traffic the file is shown with Visual Chart.
Meanwhile the embodiment of this specification also provides a kind of flow acquisition device, including：
Adaptation module,, will be right according to user in the authority of the user terminal for the user terminal of different operating system
The flow obtaining mode answered is adapted to the user terminal, wherein, the authority is Root authority or non-Root authority.
Flow acquisition module, data traffic is obtained by the corresponding flow obtaining mode；
Uploading module, sends the data traffic to display systems.
Meanwhile this specification embodiment also provides a kind of flow displaying device, including：
Receiving module, receives data traffic/data traffic file,
Display module, the data traffic/data traffic file is shown with Visual Chart.
Corresponding, this specification embodiment also provides a kind of flow and obtains equipment, including：
Memory, storage data traffic obtain program；
Processor, calls the data traffic in memory to obtain program, and performs：
For the user terminal of different operating system, according to user the user terminal authority, by corresponding flow
Obtaining mode is adapted to the user terminal；
Data traffic is obtained by the corresponding flow obtaining mode, is shown to send the data traffic to high in the clouds
Subsystem；
Wherein, the authority is Root authority or non-Root authority.
Corresponding, this specification embodiment also provides a kind of flow presentation device, including：
Memory, stores data traffic presentation program；
Processor, calls the data traffic presentation program in memory, and performs
Receive data traffic/data traffic file；
Data traffic/data traffic the file is shown with Visual Chart.
Corresponding, the embodiment of this specification also provides a kind of nonvolatile computer storage media, is stored with computer
Executable instruction, the computer executable instructions are arranged to：
For the user terminal of different operating system, according to user the user terminal authority, by corresponding flow
Obtaining mode is adapted to the user terminal；
Data traffic is obtained by the corresponding flow obtaining mode, is shown to send the data traffic to high in the clouds
Subsystem；
Wherein, the authority is Root authority or non-Root authority.
Corresponding, the embodiment of this specification also provides another nonvolatile computer storage media, is stored with calculating
Machine executable instruction, the computer executable instructions are arranged to：
Receive data traffic/data traffic file；
Data traffic/data traffic the file is shown with Visual Chart.
Above-mentioned at least one technical solution that this specification embodiment uses can reach following beneficial effect：
For the user terminal of different operating system (such as iOS system or android system), according to user described
The authority (such as Root authority and non-Root authority) of user terminal, cross-platform Support Library will fit corresponding flow obtaining mode
With the user terminal, sent after obtaining flow to high in the clouds, the data traffic acquired with Visual Chart displaying.
By the type for user terminal operations system, the packet capturing mode adaptation of different rights is accessed so that this
Scheme can support a variety of different operating systems (such as iOS either android system) or different user authority (such as Root
Authority and non-Root authority) user terminal, accommodation is wider；Gained traffic visualization displaying will be obtained, contributes to logarithm
Carry out more directly perceived and deep analysis according to flow, be conducive to the business such as follow-up network-troubleshooting.Further, it is also possible to according to user's
Instruction, acquisition and the relevant flows of specified APP, improve the purity level of flow, are provided for follow-up business (such as network-troubleshooting)
More accurately foundation.
Brief description of the drawings
Fig. 1 is that the flow that this specification embodiment provides obtains and the configuration diagram involved by the display systems of high in the clouds；
Fig. 2 is a kind of modular diagram for exemplary cross-platform Support Library that this specification embodiment provides；
Fig. 3 is a kind of modular diagram for exemplary Root flow obtaining modes that this specification embodiment provides；
Fig. 4 is a kind of modularization signal for exemplary non-Root flows obtaining mode that this specification embodiment provides
Figure；
In terms of Fig. 5 is the user terminal that this specification embodiment provides, flow obtains and high in the clouds display systems perform step
Flow diagram；
Fig. 6 is that the high in the clouds that this specification embodiment provides shows showing for the subsystem displaying error relevant prompt message of type
It is intended to；
Fig. 7 is that flow obtains and high in the clouds display systems are held in terms of the high in the clouds that this specification embodiment provides shows subsystem
The flow diagram of row step；
Fig. 8 is the flow diagram of a kind of flow acquisition that this specification embodiment provides and high in the clouds methods of exhibiting；
Fig. 9 is the flow diagram of another flow acquisition that this specification embodiment provides and high in the clouds methods of exhibiting；
Figure 10 is the structure diagram for the flow acquisition device that this specification embodiment provides；
Figure 11 is the structure diagram for the Root flow acquisition modules that this specification embodiment provides；
Figure 12 is the structure diagram for the non-Root flows acquisition module that this specification embodiment provides；
Figure 13 is the structure diagram that the flow that this specification embodiment provides shows device.
Embodiment
To make the purpose, technical scheme and advantage of the application clearer, below in conjunction with the application specific embodiment and
Technical scheme is clearly and completely described in corresponding attached drawing.Obviously, described embodiment is only the application one
Section Example, instead of all the embodiments.Based on the embodiment in this specification, those of ordinary skill in the art are not having
All other embodiments obtained under the premise of creative work are made, shall fall in the protection scope of this application.
Below in conjunction with attached drawing, the embodiment for describing this specification in detail provides technical solution.
Fig. 1 is that the flow that this specification embodiment provides obtains and the configuration diagram involved by the display systems of high in the clouds, bag
Include cross-platform Support Library 101, uploading module 103 and high in the clouds displaying subsystem 105.
The cross-platform Support Library 101, for the user terminal of different operating system, according to user in the user terminal
Authority, corresponding flow obtaining mode is adapted to the user terminal, passes through the flow obtaining mode and obtains the user
The data traffic of terminal, the authority are Root authority (i.e. superuser right) or non-Root authority.Corresponding flow obtains
Modulus formula includes Root flows obtaining mode corresponding with the authority of user or non-Root flows obtaining mode.
The user terminal, can be mobile terminal or fixed terminal, the personal choice based on user, it is grasped
It may include such as iOS system, android system, linux system, Unix system, Windows systems or MacOS systems as system
Any one in system, certainly, can also extend to other kinds of system, will not enumerate herein as needed.
Specifically, according to the difference of user's authority on the subscriber terminal, usually there are a variety of default packet capturing patterns (when obtaining
When to take object be the data packet occurred one by one, flow obtaining mode is referred to as packet capturing pattern), every kind of packet capturing pattern corresponds to one
Kind packet capturing module, in a modular fashion in access user terminal, for selection by the user.In the user terminal, user's power
The difference of limit, common situation, that is, user have Root authority or non-Root authority.
As a kind of exemplary embodiment, this specification embodiment provides a kind of framework signal of cross-platform Support Library
Figure, as shown in Fig. 2, Fig. 2 is a kind of modular diagram for exemplary cross-platform Support Library that this specification embodiment provides.
When user is Root authority, cross-platform Support Library 101 obtains data traffic, acquisition modes from kernel protocol stack
It may include the interception of concatenation type or the duplication of bypass type.
For example, be based on Netfilter modules, test point is placed in some positions of kernel protocol stack (such as can be by
HOOK functions are set), and some processing functions are registered on each test point and are handled, flow from test point pass through when
It can be acquired, i.e., the data traffic of user terminal is obtained in the slave kernel protocol stack of concatenation type.In another example utilize Libpcap
The interface provided, the replicate data flow of bypass type from the network link layer of kernel protocol stack, obtains the mirror of data traffic
Picture.
When user is non-Root authority, cross-platform Support Library 101 establishes Virtual Private Network (Virtual Private
Network, VPN), data traffic is obtained by the port of the VPN.In other words, cross-platform Support Library 101 is built in user terminal
Vertical VPN, proxy user terminal and extraneous flow interaction, are performed by the port of VPN and act on behalf of type packet capturing.
For example, according to the type (such as iOS system or android system) of user terminal operations system, suitability connects
Enter, and VPN is locally created in user terminal, the data flow that each application APP is external on user terminal is obtained by VPN ports
Amount, and write-back gives each APP；Meanwhile establish user terminal to extraneous connection, it is external to parse received each APP
Data traffic, sends to the external world.
Data traffic includes caused all data packets when the user's terminal is interacted with the external world, it is clear that data flow
Amount is typically that the data packet of multiple APP is mixed in together, based on this, to improve the purity level of data traffic, it is necessary to will be each
The related data packets of APP separate, and only retain user's flow interested.
Based on this, the cross-platform Support Library 101, is additionally operable to：According to the configuration information of user terminal, acquisition belongs to specified
The data traffic of APP, wherein, the configuration information of the user terminal includes the information of the specified APP.That is, specified APP is belonged to
Data traffic only include caused data packet when the APP and the external world interact, without the data packet including other APP.
The configuration information of user terminal can be that acquiescence specifies some or multiple APP, can also provide user terminal
The multiple APP run are specified to user's selection.In other words, i.e., according to the configuration information of user terminal to the flow that acquires
It is identified and screens, only retains the data traffic for belonging to and specifying application.
It should be noted that the specified APP can be one or more.When user specifies multiple APP, each refer to
Fixed APP each corresponds to one group of related data flow.In addition, user APP interested and selection flow obtaining mode are specified,
Usually carried out before flow is obtained.User can first specify APP, then choose flow obtaining mode；Flow can also first be chosen to obtain
Modulus formula, then specify APP.
Under a kind of specific embodiment, the cross-platform Support Library 101, can be obtained by way of port match
Take the relevant data traffics of the APP specified with user.Specifically, obtained by default flow acquisition module and include port numbers
Data packet；The flow port information that the operating system of the port numbers and user terminal provides is matched, obtains port
APP marks corresponding to number, wherein, the flow port information that the operating system of user terminal provides includes port numbers and APP marks
The correspondence of knowledge；According to the data packet for including the port numbers corresponding with the specified APP mark, determine it is described with it is specified
The relevant data traffics of APP.
For example, under Linux/Unix systems, " there is port in the tcp files under/proc/net " catalogues in system
Number and APP unique marks correspondence；Uniquely marked by flow port table storage end slogan and APP in Windows systems
The correspondence of knowledge.That is, the port numbers of each data packet in flow are got, you can the port numbers are obtained by matched mode
Corresponding APP marks, so as to obtain the data flow for belonging to the APP.
Under another specific embodiment, the cross-platform Support Library 101, can pass through the side of packet inspection technical
Formula, acquisition belong to the relevant data traffics of specified APP.Specifically, data traffic is obtained by default flow obtaining mode；
The content of the data traffic is identified, obtains the data traffic for belonging to specified APP；The content of the data traffic includes
The transport protocol of data traffic, port numbers, IP address, unique address identifiers URL either one in payload user data or more
It is a.
Since different APP often relies on different agreements, different agreements has its special feature, these features
It is probably specific port, specific character string or specific server ip, APP in extraneous interaction with may can also
Produce universal resource locator (Uniform Resource Locator, URL) and specific interaction content (for example, APP from
When server-side request is downloaded) etc..Based on this, feature identification technique can be used by being carried out to the correlated characteristic in data traffic
Application of the detection corresponding to definite data packet.For example, using deep packet inspection technical (Deep Packet Inspection,
DPI) payload user data of data packet is identified, to determine the application belonging to the data packet.
By the way that the flow of user terminal is identified, it can be carried out specifying packet capturing according to actual needs, only retain and belong to
The data traffic of user APP interested, improves the degree of purity of flow, and more accurately foundation is provided for follow-up work.
Preceding method describes how that identification belongs to the data traffic of user APP interested, it is necessary to illustrate, one
APP may employ multiple services at the same time, can also be identified by same principle (port numbers match or deep packet identifies)
Go out the service interested to user, so as to further refine the ownership of data traffic, specific method is similar with preceding method, no
Repeat again.
Further, the cross-platform Support Library 101, is additionally operable to：Corresponding data are generated according to the data traffic of acquisition
Flow file, and store.For example, according to the data traffic generation pcap got (pcap is a kind of common data stream format)
File, this document contain all relevant informations of the data packet acquired., can be with i.e. for the data traffic acquired
Upload in real time, can also be stored in and locally upload again.
Flow obtain during, different flow obtaining modes can with flow identify, data traffic storage be combined into
OK.As exemplary embodiment, this specification embodiment provides a kind of modular diagram of Root flows obtaining mode,
As shown in Figure 3；This specification embodiment also provides a kind of modular diagram of non-Root flows obtaining mode, as shown in Figure 4.
It should be noted that when user specifies multiple APP in advance, each APP, which has, belongs to respective one group of data
Flow, and then will also obtain the data traffic file for belonging to each APP during generation file.
The uploading module 103, data traffic/data traffic file to the high in the clouds for sending the acquisition show subsystem.
Foregoing cross-platform Support Library 101 can be in the form of plug-in unit or packet catcher, access user terminal.Connecing
After access customer terminal, as a kind of exemplary embodiment, in practical application scene, for user terminal aspect, the stream
Amount obtains and high in the clouds display systems can perform the steps, as shown in figure 5, Fig. 5 is the user that this specification embodiment provides
In terms of terminal, flow obtains and high in the clouds display systems perform the flow diagram of step：
S501, opens packet catcher, and system initialization simultaneously prompts flow obtaining mode；
S503, user selects flow obtaining mode, and specifies the application for needing to capture；
S505, according to the setting of user, adaptation starts cross-platform Support Library；
Can S507, judgement read the flow port information that client terminal system is provided；If can, according to port and application
Unique identifiers (unique identifier, UID) match cognization data traffic；If it is not, DPI identifications are carried out to data traffic；
S509, is write the data traffic acquired as data traffic file, and stores；
S511, judges whether to need to upload the data traffic file to high in the clouds, if so, uploading the data traffic file extremely
High in the clouds display systems；If it is not, terminate.
The data traffic acquired is for general user, not intuitively, difficult without corresponding network specialty knowledge
To understand, it is inefficient that corresponding business diagnosis is carried out according to data traffic.
Based on this, the high in the clouds shows subsystem 105, receives the data traffic/data traffic file, and with visualization
Data traffic file described in diagrammatic representation.So as to display data flow/data traffic file directly perceived by way of chart, with suitable
The level of staff is answered, the not high personnel of auxiliary horizontal network carry out corresponding network analysis, improve analysis efficiency.
Specifically, the relevant information of multiple data packets, such as each data are included in data flow or data streaming file
The port numbers of bag, sequence number, receiving time etc., by these relevant informations with certain rule (for example, will be per number by sequence number
It is arranged in order and is inserted in form according to the relevant information of bag), by the form of form or figure, intuitively show.So that stream
Amount data are easier to be understood, and are conducive to improve the development efficiency of follow-up business.For example, network-troubleshooting is carried out according to data traffic
When, shown by Visual Chart, the not high staff of horizontal network can be aided in carry out network-troubleshooting, improve specialty
The debugging efficiency of network personnel..
Under a kind of embodiment, the high in the clouds shows subsystem 105, parses the data flow received or number
According to stream file, obtain it and include TCP linkage records；The TCP linkage records are shown with Visual Chart.
APP during TCP communication is carried out, by data be segmented and compile and edit sequence number be transmitted with realize in order pass
It is defeated；By confirming that response (Acknowledgement, ACK) signal ensures reliability (ack signal generally also has sequence number).It is based on
This, can be by analyzing shaking hands with ACK sequence numbers and other TCP phases inside the Pass for TCP connections in data traffic/data traffic file
Hold, establish form to carry out misarrangement.For example, being parsed to pcap files, the relevant TCP connections number of each data packet is obtained
According to establishing corresponding form, specific analysis mode is very ripe currently, and details are not described herein again.
Under another embodiment, the high in the clouds shows subsystem 105, obtains data traffic/data traffic text
The relevant information of each data packet in part；With the relevant information of Visual Chart displaying each data packet, the data packet
The timestamp of relevant information including data packet, destination address, source address, port numbers, one in sequence number or data length
It is or multiple.
For example, using the time of data packet as abscissa, with the serial number ordinate of data packet, two-dimensional plane coordinate is established
System, obtains (time, sequence number) curve map of data packet, the transmission situation of display data bag directly perceived, to carry out follow-up business (example
Such as, network-troubleshooting).
Further, when the high in the clouds shows subsystem 105, carries out network-troubleshooting, to mitigate the work of misarrangement personnel
Amount, realizes intelligent misarrangement, can also preset certain rule, and high in the clouds shows Visual Chart described in subsystem analysis,
When in chart when partially or wholly meeting default rule, according to the default rule, judging the type that malfunctions.
For example, in the form established according to data flow, when continuously there are multiple identical data packet sequence numbers, judge
Occur retransmitting.
In another example be the time in abscissa, ordinate is formed when continuous two points or multiple points in the figure of sequence number
When straight slope is equal to 0, be judged as retransmitting, (i.e. reaction maintains an equal level for a curve in figure), alternatively, when between two points away from
During from more than certain value, being judged as being delayed excessive (be reflected as the slope of curve in figure and be no more than preset value, preset value can be according to not
Same APP people is given).
Further, the high in the clouds displaying subsystem, is additionally operable to, displaying and the network error class in visualization interface
The relevant prompt message of type, as shown in fig. 6, Fig. 6 is that high in the clouds shows subsystem displaying error type phase in this specification embodiment
The schematic diagram of the prompt message of pass.
As a kind of exemplary embodiment, in practical application scene, in terms of the subsystem of high in the clouds, which obtains
Take and can perform the steps with high in the clouds display systems, as shown in fig. 7, Fig. 7 is the high in the clouds subsystem that this specification embodiment provides
In terms of system, flow obtains and high in the clouds display systems perform the flow diagram of step, including：
S701, receives data traffic file；
S703, parses data traffic file, obtains the linkage record of data packet；
S705, is analyzed, recorded and is stored for the linkage record of each data packet；
S707, WEB visual presentations are carried out according to specified rule to data traffic；
S709, the point of the possible network error of intelligent decision simultaneously provide corresponding prompt message.
It should be noted that in practical application scene, corresponding specialty is needed to know due to carrying out analysis to data traffic
Knowing, ordinary user typically has no ability to be analyzed according to the data traffic or data traffic file that acquire, because
This visualization to data traffic is usually all to carry out beyond the clouds.But carrying out visualizing in user local terminal is also
Feasible.
Based on this, this specification embodiment also provides a kind of display systems, is used for：Receive data traffic or data traffic
File, the data traffic file is shown with Visual Chart.
By the type for user terminal operations system, the packet capturing mode adaptation of different rights is accessed so that this
Scheme can support a variety of different operating systems (such as iOS either android system) or different user authority (such as Root
Authority and non-Root authority) user terminal, accommodation is wider；Gained traffic visualization displaying will be obtained, contributes to logarithm
Carry out more directly perceived and deep analysis according to flow, be conducive to the business such as follow-up network-troubleshooting.Further, it is also possible to according to user's
Instruction, acquisition and the relevant flows of specified APP, improve the purity level of flow, are provided for follow-up business (such as network-troubleshooting)
More accurately foundation.
Based on same thinking, the present invention also provides a kind of acquisition of flow and high in the clouds methods of exhibiting, as shown in figure 8, Fig. 8 is
The flow that this specification embodiment provides obtains and the method flow schematic diagram of high in the clouds displaying, including：
S801,, will be corresponding according to user in the authority of the user terminal for the user terminal of different operating system
Flow obtaining mode is adapted to the user terminal；
S803, obtains data traffic, to send the data traffic to cloud by the corresponding flow obtaining mode
End displaying subsystem；Wherein, the authority is Root authority or non-Root authority.
Further, in step S801, default flow obtaining mode, including at least it is following any one：
Root patterns, when user is when the authority of the user terminal is Root authority, obtain number from kernel protocol stack
According to flow；Alternatively, non-Root patterns, when user is when the authority of the user terminal is non-Root authority, virtual private is established
Network VPN, obtains data traffic, the VPN is used to act on behalf of the flow between local terminal and the external world by the port of the VPN
Interaction.
Further, the Root patterns, including：When user is when the authority of the user terminal is Root authority,
In a manner of concatenating or bypass, data traffic is obtained from the kernel protocol stack.
The non-Root patterns, including：When user is when the authority of the user terminal is non-Root authority, according to user
The type of terminal operating system, adaptation establish VPN；The data flow that each APP is external on user terminal is obtained by the VPN ports
Amount, and write-back gives each APP；User terminal is established to extraneous connection, parses the external data flows of received each APP
Amount, is sent to the external world by the VPN ports.
Further, the method further includes：S805, according to the configuration information of user terminal, acquisition belongs to specified APP's
Data traffic, wherein, the configuration information of the user terminal includes the information of the specified APP.
Further, foregoing S805, according to the configuration information of user terminal, obtains the data traffic for belonging to specified APP,
Including：The data packet for including port numbers is obtained by default flow obtaining mode；By the port numbers and the user terminal
Operating system provide flow port information matched, obtain corresponding to the port numbers APP mark, wherein, it is described
The correspondence that flow port information includes port numbers and APP is identified；According to including corresponding end is identified with the specified APP
The data packet of slogan, determines the data traffic for belonging to specified APP.
Further, foregoing S805, according to the configuration information of user terminal, obtains the data traffic for belonging to specified APP,
Including：Data traffic is obtained by default flow obtaining mode；The content of the data traffic is identified, described in acquisition
Belong to the data traffic of specified APP；The transport protocol of the content of the data traffic including data traffic, port numbers, IP address,
One or more in unique address identifiers URL or payload user data.
Further, the method further includes：S807, corresponding data traffic text is generated according to the data traffic of acquisition
Part, and store, show subsystem to send the data traffic file to high in the clouds.
Based on same thinking, this specification embodiment also provides another flow and obtains and high in the clouds methods of exhibiting, such as Fig. 9
Shown, Fig. 9 is the acquisition of another flow and the flow diagram of high in the clouds methods of exhibiting, the side that this specification embodiment provides
Method includes：
S901, receives data traffic/data traffic file；
S903, the data traffic/data traffic file is shown with Visual Chart.
Further, in the S901, the data traffic/data traffic file includes belonging to the data flow of specified APP
Amount/data traffic file, wherein, the specified APP is determined by the configuration information of user terminal, the setting letter of the user terminal
Breath includes the information of the specified APP.
Further, for S903, the data traffic/data traffic file is shown with Visual Chart., including：Solution
The data flow received or data streaming file are analysed, obtains APP and extraneous TCP linkage records that it is included；With visual
Change TCP linkage records described in diagrammatic representation.
Further, for S903, the data traffic/data traffic file is shown with Visual Chart, including：Obtain
The relevant information of each data packet in data flow or data streaming file；With the phase of Visual Chart displaying each data packet
Close information, the relevant information of the data packet include the timestamp of data packet, destination address, source address, port numbers, sequence number or
One or more in person's data length.
Further, the method, further includes S905：The Visual Chart is analyzed, when the portion of the Visual Chart
When dividing or integrally meeting default rule, according to the default rule, network error type is judged.
Further, the method, further includes S907：Shown in visualization interface related to the network error type
Prompt message.
Meanwhile this specification embodiment also provides a kind of data traffic methods of exhibiting, including：Receive data flow or data
Stream file, the data traffic/data traffic file is shown with Visual Chart.
Based on same thinking, this specification embodiment also provides a kind of flow acquisition device, as shown in Figure 10, Tu10Wei
The structure diagram for the flow acquisition device that this specification embodiment provides, described device include：
Adaptation module 1001, for the user terminal of different operating system, according to user the user terminal authority,
Corresponding flow obtaining mode is adapted to the user terminal, wherein, the authority is Root authority or non-Root authority；
Flow acquisition module 1003, data traffic is obtained by the corresponding flow obtaining mode；
Uploading module 1005, sends the data traffic to high in the clouds and shows subsystem.
Further, described device further includes traffic identification module 1007, for the instruction according to user, obtains and belongs to
Specify the data traffic of APP.
Further, described device further includes memory module 1009, and corresponding data are generated according to the data traffic of acquisition
Flow file, and store；The uploading module 1005 is additionally operable to, and is sent the data traffic file to high in the clouds and is shown subsystem.
Further, the flow acquisition module 1003, including Root flow acquisition modules, when user is for Root authority
When, obtain data traffic from the kernel protocol stack；And/or
Non- Root flows acquisition module, when user is when the authority of the user terminal is non-Root authority, foundation is virtual
Dedicated network VPN, obtains data traffic, the VPN is used to act on behalf of between local terminal and the external world by the port of the VPN
Flow interacts.
Further, the Root flows acquisition module, as shown in figure 11, Figure 11 are what this specification embodiment provided
The structure diagram of Root flow acquisition modules, including：Concatenate flow acquisition submodule 1101 or bypass flow obtains submodule
Block 1103.
Further, the non-Root flows acquisition module, as shown in figure 12, Figure 12 provides for this specification embodiment
Non- Root flows acquisition module structure diagram, including：
System interface module 1201, according to user terminal operations system type, adaptation access, establishes VPN；
Flow acquisition module 1203, the data traffic that each APP is external on user terminal is obtained by the VPN ports；
Write-back module 1205, the extraneous data returned of write-back give each APP；
Connection management module 1207, establishes user terminal and acts on behalf of passage to extraneous connection, formation, send data to outer
Boundary, calling write-back module 1205 when receiving the data of extraneous return；
External transceiving data module 1209, receives the extraneous data returned and sends data to the external world.
Based on same thinking, this specification embodiment also provides a kind of flow displaying device, as shown in figure 13, Tu13Wei
The structure diagram for the flow displaying device that this specification embodiment provides, described device include：
Receiving module 1301, receives data traffic/data traffic file；
Display module 1303, the data traffic/data traffic file is shown with Visual Chart.
Further, described device further includes parsing module 1305, parses the data flow or the data flow text received
Part, obtains APP and extraneous TCP linkage records that it is included；The display module 1303, shown with Visual Chart described in
TCP linkage records.Alternatively, the parsing module 1305, the correlation of each data packet in data flow or data streaming file is obtained
Information；The display module 1303, with the relevant information of Visual Chart displaying each data packet, the phase of the data packet
Close one in timestamp, destination address, source address, port numbers, sequence number or the data length of information including data packet or
Person is multiple.
Further, described device further includes, and judgment module 1307, analyzes the Visual Chart, when described visual
Change when partially or wholly meeting default rule of chart, according to the default rule, judge network error type.
Further, the display module 1303, shows related to the network error type in visualization interface
Prompt message.
Corresponding, this specification embodiment also provides a kind of flow and obtains equipment, including：
Memory, storage data traffic obtain program；
Processor, calls the data traffic in memory to obtain program, and performs：
For the user terminal of different operating system, according to user the user terminal authority, by corresponding flow
Obtaining mode is adapted to the user terminal；
Data traffic is obtained by the corresponding flow obtaining mode, is shown to send the data traffic to high in the clouds
Subsystem；
Wherein, the authority is Root authority or non-Root authority.
Corresponding, this specification embodiment also provides a kind of flow presentation device, including：
Memory, stores data traffic presentation program；
Processor, calls the data traffic presentation program in memory, and performs
Receive data traffic/data traffic file；
Data traffic/data traffic the file is shown with Visual Chart.
Corresponding, the embodiment of this specification also provides a kind of nonvolatile computer storage media, is stored with computer
Executable instruction, the computer executable instructions are arranged to：
For the user terminal of different operating system, according to user the user terminal authority, by corresponding flow
Obtaining mode is adapted to the user terminal；
Data traffic is obtained by the corresponding flow obtaining mode, is shown to send the data traffic to high in the clouds
Subsystem；
Wherein, the authority is Root authority or non-Root authority.
Corresponding, the embodiment of this specification also provides another nonvolatile computer storage media, is stored with calculating
Machine executable instruction, the computer executable instructions are arranged to：
Receive data traffic/data traffic file；
Data traffic/data traffic the file is shown with Visual Chart.
Each embodiment in this specification is described by the way of progressive, identical similar portion between each embodiment
Divide mutually referring to what each embodiment stressed is the difference with other embodiment.Especially for method,
For device, equipment and medium class embodiment, since it is substantially similar to system embodiment, so fairly simple, the phase of description
Close part referring to the part of system embodiment to illustrate, just no longer repeat one by one here.
It is above-mentioned that this specification specific embodiment is described.Other embodiments are in the scope of the appended claims
It is interior.In some cases, the action recorded in detail in the claims or step or module can be according to different from embodiments
Order performs and still can realize desired result.In addition, the process described in the accompanying drawings not necessarily requires what is shown
Particular order or consecutive order could realize desired result.In some embodiments, multitasking and parallel processing
It is also possible or it may be advantageous.
In the 1990s, the improvement for a technology can clearly distinguish be on hardware improvement (for example,
Improvement to circuit structures such as diode, transistor, switches) or software on improvement (improvement for method flow).So
And as the development of technology, the improvement of current many method flows can be considered as directly improving for hardware circuit.
Designer nearly all obtains corresponding hardware circuit by the way that improved method flow is programmed into hardware circuit.Cause
This, it cannot be said that the improvement of a method flow cannot be realized with hardware entities module.For example, programmable logic device
(Programmable Logic Device, PLD) (such as field programmable gate array (Field Programmable Gate
Array, FPGA)) it is exactly such a integrated circuit, its logic function determines device programming by user.By designer
Voluntarily programming comes a digital display circuit " integrated " on a piece of PLD, without asking chip maker to design and make
Dedicated IC chip.Moreover, nowadays, substitution manually makes IC chip, this programming is also used instead mostly " patrols
Volume compiler (logic compiler) " software realizes that software compiler used is similar when it writes with program development,
And the source code before compiling also write by handy specific programming language, this is referred to as hardware description language
(Hardware Description Language, HDL), and HDL is also not only a kind of, but have many kinds, such as ABEL
(Advanced Boolean Expression Language)、AHDL(Altera Hardware Description
Language)、Confluence、CUPL(Cornell University Programming Language)、HDCal、JHDL
(Java Hardware Description Language)、Lava、Lola、MyHDL、PALASM、RHDL(Ruby
Hardware Description Language) etc., VHDL (Very-High-Speed are most generally used at present
Integrated Circuit Hardware Description Language) and Verilog.Those skilled in the art also should
This understands, it is only necessary to method flow slightly programming in logic and is programmed into integrated circuit with above-mentioned several hardware description languages,
The hardware circuit for realizing the logical method flow can be readily available.
Controller can be implemented in any suitable manner, for example, controller can take such as microprocessor or processing
The computer for the computer readable program code (such as software or firmware) that device and storage can be performed by (micro-) processor can
Read medium, logic gate, switch, application-specific integrated circuit (Application Specific Integrated Circuit,
ASIC), the form of programmable logic controller (PLC) and embedded microcontroller, the example of controller include but not limited to following microcontroller
Device：ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicone Labs C8051F320, are deposited
Memory controller is also implemented as a part for the control logic of memory.It is also known in the art that except with
Pure computer readable program code mode is realized beyond controller, can be made completely by the way that method and step is carried out programming in logic
Controller is obtained in the form of logic gate, switch, application-specific integrated circuit, programmable logic controller (PLC) and embedded microcontroller etc. to come in fact
Existing identical function.Therefore this controller is considered a kind of hardware component, and various to being used for realization for including in it
The device of function can also be considered as the structure in hardware component.Or even, the device for being used for realization various functions can be regarded
For either the software module of implementation method can be the structure in hardware component again.
System, device, module or the unit that above-described embodiment illustrates, can specifically be realized by computer chip or entity,
Or realized by having the function of certain product.One kind typically realizes that equipment is computer.Specifically, computer for example may be used
Think personal computer, laptop computer, cell phone, camera phone, smart phone, personal digital assistant, media play
It is any in device, navigation equipment, electronic mail equipment, game console, tablet PC, wearable device or these equipment
The combination of equipment.
For convenience of description, it is divided into various units during description apparatus above with function to describe respectively.Certainly, this is being implemented
The function of each unit can be realized in same or multiple softwares and/or hardware during the embodiment of specification.
It should be understood by those skilled in the art that, the embodiment of the present invention can be provided as method, system or computer program
Product.Therefore, the present invention can use the reality in terms of complete hardware embodiment, complete software embodiment or combination software and hardware
Apply the form of example.Moreover, the present invention can use the computer for wherein including computer usable program code in one or more
The computer program production that usable storage medium is implemented on (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.)
The form of product.
The present invention be with reference to according to the method for the embodiment of the present invention, the flow of equipment (system) and computer program product
Figure and/or block diagram describe.It should be understood that it can be realized by computer program instructions every first-class in flowchart and/or the block diagram
The combination of flow and/or square frame in journey and/or square frame and flowchart and/or the block diagram.These computer programs can be provided
The processors of all-purpose computer, special purpose computer, Embedded Processor or other programmable data processing devices is instructed to produce
A raw machine so that the instruction performed by computer or the processor of other programmable data processing devices, which produces, to be used in fact
The device for the function of being specified in present one flow of flow chart or one square frame of multiple flows and/or block diagram or multiple square frames.
These computer program instructions, which may also be stored in, can guide computer or other programmable data processing devices with spy
Determine in the computer-readable memory that mode works so that the instruction being stored in the computer-readable memory, which produces, to be included referring to
Make the manufacture of device, the command device realize in one flow of flow chart or multiple flows and/or one square frame of block diagram or
The function of being specified in multiple square frames.
These computer program instructions can be also loaded into computer or other programmable data processing devices so that counted
Series of operation steps is performed on calculation machine or other programmable devices to produce computer implemented processing, thus in computer or
The instruction performed on other programmable devices is provided and is used for realization in one flow of flow chart or multiple flows and/or block diagram one
The step of function of being specified in a square frame or multiple square frames.
In a typical configuration, computing device includes one or more processors (CPU), input/output interface, net
Network interface and memory.
Memory may include computer-readable medium in volatile memory, random access memory (RAM) and/or
The forms such as Nonvolatile memory, such as read-only storage (ROM) or flash memory (flash RAM).Memory is computer-readable medium
Example.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method
Or technology come realize information store.Information can be computer-readable instruction, data structure, the module of program or other data.
The example of the storage medium of computer includes, but are not limited to phase transition internal memory (PRAM), static RAM (SRAM), moves
State random access memory (DRAM), other kinds of random access memory (RAM), read-only storage (ROM), electric erasable
Programmable read only memory (EEPROM), fast flash memory bank or other memory techniques, read-only optical disc read-only storage (CD-ROM),
Digital versatile disc (DVD) or other optical storages, magnetic cassette tape, the storage of tape magnetic rigid disk or other magnetic storage apparatus
Or any other non-transmission medium, the information that can be accessed by a computing device available for storage.Define, calculate according to herein
Machine computer-readable recording medium does not include temporary computer readable media (transitory media), the data letter numbering and carrier wave of such as modulation.
It should also be noted that, term " comprising ", "comprising" or its any other variant are intended to nonexcludability
Comprising so that process, method, commodity or equipment including a series of elements not only include those key elements, but also wrapping
Include other elements that are not explicitly listed, or further include for this process, method, commodity or equipment it is intrinsic will
Element.In the absence of more restrictions, the key element limited by sentence "including a ...", it is not excluded that wanted including described
Also there are other identical element in the process of element, method, commodity or equipment.
It will be understood by those skilled in the art that embodiment one or more in this specification can be provided as method, system or
Computer program product.Therefore, the embodiment of this specification can use complete hardware embodiment, complete software embodiment or combination
Form in terms of software and hardware.Moreover, the embodiment of this specification can be used wherein includes computer in one or more
The computer-usable storage medium (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.) of usable program code
The form of the computer program product of upper implementation.
The embodiment of this specification can retouch in the general context of computer executable instructions
State, such as program module.Usually, program module include perform particular transaction or realize particular abstract data type routine,
Program, object, component, data structure etc..The embodiment of this specification can also be put into practice in a distributed computing environment, at this
In a little distributed computing environment, by performing affairs by communication network and connected remote processing devices.Counted in distribution
Calculate in environment, program module can be located in the local and remote computer-readable storage medium including storage device.
Each embodiment in this specification is described by the way of progressive, identical similar portion between each embodiment
Divide mutually referring to what each embodiment stressed is the difference with other embodiment.It is real especially for system
For applying example, since it is substantially similar to embodiment of the method, so description is fairly simple, related part is referring to embodiment of the method
Part explanation.
The foregoing is merely the embodiment of this specification, the application is not limited to.For people in the art
For member, the embodiment of this specification can have various modifications and variations.The spirit and principle of all embodiments in this specification
Within any modification, equivalent replacement, improvement and so on, should be included among the interest field of the application.
Claims (30)
1. a kind of flow obtains and high in the clouds display systems, including：Cross-platform Support Library, uploading module and high in the clouds displaying subsystem；
The cross-platform Support Library, for the user terminal of different operating system, according to user the user terminal authority,
Corresponding flow obtaining mode is adapted to the user terminal, the number of the user terminal is obtained by the flow obtaining mode
According to flow, the authority is Root authority or non-Root authority；
The uploading module, data traffic to the high in the clouds for sending the acquisition show subsystem；
The high in the clouds shows subsystem, and the data traffic is shown for receiving the data traffic, and with Visual Chart.
2. the system as claimed in claim 1, the cross-platform Support Library,
When user is when the authority of the user terminal is Root authority, data traffic is obtained from kernel protocol stack；Alternatively,
When user is when the authority of the user terminal is non-Root authority, Virtual Private Network VPN is established, passes through the VPN
Port obtain data traffic, the VPN is used for flow between proxy user terminal and the external world and interacts.
3. system as claimed in claim 2, the cross-platform Support Library, when user in the authority of the user terminal is Root
During authority, in a manner of concatenating or bypass, data traffic is obtained from the kernel protocol stack.
4. system as claimed in claim 2, the cross-platform Support Library, when user in the authority of the user terminal is non-
During Root authority, according to the type of user terminal operations system, adaptation establishes VPN, obtains application APP pair on user terminal
Outer data traffic, and write-back gives each APP；User terminal is established to extraneous connection, parses received each APP pairs
Outer data traffic, sends to the external world.
5. the system as claimed in claim 1, the cross-platform Support Library, according to the configuration information of user terminal, acquisition belongs to
The data traffic of specified application APP, wherein, the configuration information of the user terminal includes the information of the specified APP.
6. system as claimed in claim 5, the cross-platform Support Library,
The data packet for including port numbers is obtained by default flow obtaining mode；
The flow port information that the operating system of the port numbers and the user terminal provides is matched, obtains the end
APP marks corresponding to slogan, wherein, the correspondence that the flow port information includes port numbers and APP is identified；
According to the data packet for including the port numbers corresponding with the specified sequence APP mark, determine described to belong to specified sequence APP's
Data traffic.
7. system as claimed in claim 5, the cross-platform Support Library,
Data traffic is obtained by default flow obtaining mode；
The content of the data traffic is identified, the data traffic of specified APP is belonged to described in acquisition；
The content of the data traffic includes transport protocol, port numbers, IP address, the unique address identifiers URL of data traffic
Or one or more in payload user data.
8. the system as claimed in claim 1, the cross-platform Support Library,
Corresponding data traffic file is generated according to the data traffic of acquisition, and is stored；
The uploading module is additionally operable to, and is sent the data traffic file to high in the clouds and is shown subsystem；
The high in the clouds displaying subsystem is additionally operable to, and receives the data traffic file, and show the data with Visual Chart
Flow file.
9. system as claimed in claim 8, the high in the clouds shows subsystem,
The data flow received or data streaming file are parsed, obtains its TCP linkage record included；
The TCP linkage records are shown with Visual Chart.
10. system as claimed in claim 8, the high in the clouds shows subsystem,
Obtain the relevant information of each data packet in data traffic/data traffic file；
With the relevant information of Visual Chart displaying each data packet, the relevant information of the data packet includes data packet
One or more in timestamp, destination address, source address, port numbers, sequence number or data length.
11. the system as described in claim 9 or 10, the high in the clouds shows subsystem, the Visual Chart is analyzed, when described
When partially or wholly meeting default rule of Visual Chart, according to the default rule, judges network error type.
12. system as claimed in claim 11, the high in the clouds shows subsystem, displaying and the network in visualization interface
Malfunction the relevant prompt message of type.
13. a kind of flow obtains and high in the clouds methods of exhibiting, the described method includes：
For the user terminal of different operating system, according to user in the authority of the user terminal, corresponding flow is obtained
User terminal described in mode adaptation；
Data traffic is obtained by the corresponding flow obtaining mode, subsystem is shown to send the data traffic to high in the clouds
System；
Wherein, the authority is Root authority or non-Root authority.
14. method as claimed in claim 13, the default flow obtaining mode, including at least it is following any one：
Root patterns, when user is when the authority of the user terminal is Root authority, obtain data flow from kernel protocol stack
Amount；Alternatively,
Non- Root patterns, when user is when the authority of the user terminal is non-Root authority, establish Virtual Private Network VPN,
Data traffic is obtained by the port of the VPN, the flow that the VPN is used to act on behalf of between local terminal and the external world interacts.
15. method as claimed in claim 14, the Root patterns, including：
When user is when the authority of the user terminal is Root authority, in a manner of concatenating or bypass, assisted from the kernel
Data traffic is obtained in view stack.
16. method as claimed in claim 14, the non-Root patterns, including：
When user is when the authority of the user terminal is non-Root authority, according to the type of user terminal operations system, adaptation
Establish VPN；
The data traffic that application APP is external on user terminal is obtained by the VPN ports, and write-back gives each APP；
User terminal is established to extraneous connection, the external data traffics of received APP is parsed, passes through the VPN ports
Send to the external world.
17. method as claimed in claim 13, further includes：
According to the configuration information of user terminal, the data traffic for belonging to specified application APP is obtained, wherein, the user is whole
The configuration information at end includes the information of the specified APP.
18. method as claimed in claim 17, according to the configuration information of user terminal, obtains the data traffic for belonging to specified APP,
Including：
The data packet for including port numbers is obtained by default flow obtaining mode；
The flow port information that the operating system of the port numbers and the user terminal provides is matched, obtains the end
APP marks corresponding to slogan, wherein, the correspondence that the flow port information includes port numbers and APP is identified；
According to the data packet for including the port numbers corresponding with the specified APP marks, the data for belonging to specified APP are determined
Flow.
19. method as claimed in claim 17, according to the configuration information of user terminal, obtains the data traffic for belonging to specified APP,
Including：
Data traffic is obtained by default flow obtaining mode；
The content of the data traffic is identified, the data traffic of specified APP is belonged to described in acquisition；
The content of the data traffic includes transport protocol, port numbers, IP address, the unique address identifiers URL of data traffic
Or one or more in payload user data.
20. method as claimed in claim 14, further includes：
Corresponding data traffic file is generated according to the data traffic of acquisition, and is stored, to send the data traffic file
Subsystem is shown to high in the clouds.
21. a kind of flow obtains and high in the clouds methods of exhibiting, the described method includes：
Receive data traffic/data traffic file；
Data traffic/data traffic the file is shown with Visual Chart.
22. method as claimed in claim 21, the data traffic/data traffic file includes belonging to specified application APP
Data traffic/data traffic file, wherein, the specified APP is determined by the configuration information of user terminal, the user terminal
Configuration information include the information of the specified APP.
23. method as claimed in claim 21, the data traffic/data traffic file is shown with Visual Chart, including：
The data traffic/data traffic the file received is parsed, its APP included is obtained and is connected note with extraneous TCP
Record；
The TCP linkage records are shown with Visual Chart.
24. method as claimed in claim 21, the data traffic/data traffic file is shown with Visual Chart, including：
Obtain the relevant information of each data packet in data traffic/data streaming file；
With the relevant information of Visual Chart displaying each data packet, the relevant information of the data packet includes data packet
One or more in timestamp, destination address, source address, port numbers, sequence number or data length.
25. the method as described in claim 23 or 24, further includes：
The Visual Chart is analyzed, when the Visual Chart is when partially or wholly meeting default rule, according to institute
Default rule is stated, judges network error type.
26. method as claimed in claim 25, further includes：
Displaying and the relevant prompt message of network error type in visualization interface.
27. a kind of flow acquisition device, including：
Adaptation module,, will be corresponding according to user in the authority of the user terminal for the user terminal of different operating system
Flow obtaining mode is adapted to the user terminal, wherein, the authority is Root authority or non-Root authority；
Flow acquisition module, data traffic is obtained by the corresponding flow obtaining mode；
Uploading module, sends the data traffic to display systems.
28. a kind of flow shows device, including：
Receiving module, receives data traffic/data traffic file,
Display module, the data traffic/data traffic file is shown with Visual Chart.
29. a kind of flow obtains equipment, including：
Memory, storage data traffic obtain program；
Processor, calls the data traffic in memory to obtain program, and performs：
For the user terminal of different operating system, according to user in the authority of the user terminal, corresponding flow is obtained
User terminal described in mode adaptation；
Data traffic is obtained by the corresponding flow obtaining mode, subsystem is shown to send the data traffic to high in the clouds
System；
Wherein, the authority is Root authority or non-Root authority.
30. a kind of flow presentation device, including：
Memory, stores data traffic presentation program；
Processor, calls the data traffic presentation program in memory, and performs：
Receive data traffic/data traffic file；
Data traffic/data traffic the file is shown with Visual Chart.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711041361.0A CN107979506B (en) | 2017-10-30 | 2017-10-30 | Flow acquisition and cloud display system, method, device and equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711041361.0A CN107979506B (en) | 2017-10-30 | 2017-10-30 | Flow acquisition and cloud display system, method, device and equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107979506A true CN107979506A (en) | 2018-05-01 |
| CN107979506B CN107979506B (en) | 2020-12-08 |
Family
ID=62012895
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711041361.0A Active CN107979506B (en) | 2017-10-30 | 2017-10-30 | Flow acquisition and cloud display system, method, device and equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107979506B (en) |
Cited By (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108011835A (en) * | 2017-10-30 | 2018-05-08 | 阿里巴巴集团控股有限公司 | Flow control system, method, apparatus and equipment |
| CN109309591A (en) * | 2018-10-31 | 2019-02-05 | 掌阅科技股份有限公司 | Data on flows statistical method, electronic equipment and storage medium |
| CN109450656A (en) * | 2018-12-30 | 2019-03-08 | 北京世纪互联宽带数据中心有限公司 | A kind of charging flow drawing generating method and device |
| CN110380914A (en) * | 2019-08-22 | 2019-10-25 | 北京世纪互联宽带数据中心有限公司 | A kind of flux monitoring method and system |
| CN111988239A (en) * | 2020-08-21 | 2020-11-24 | 哈尔滨工业大学 | Method for acquiring pure software flow for Android application |
| CN112532734A (en) * | 2020-12-02 | 2021-03-19 | 建信金融科技有限责任公司 | Message sensitive information detection method and device |
Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7203173B2 (en) * | 2002-01-25 | 2007-04-10 | Architecture Technology Corp. | Distributed packet capture and aggregation |
| WO2012125137A1 (en) * | 2011-03-11 | 2012-09-20 | Hewlett-Packard Development Company, L.P. | Sampling network traffic |
| CN104077053A (en) * | 2014-06-30 | 2014-10-01 | 珠海市君天电子科技有限公司 | Terminal information operating method and device and mobile terminal |
| CN104092691A (en) * | 2014-07-15 | 2014-10-08 | 北京奇虎科技有限公司 | Implementation method for implementing root-authority-free networking firewall and client-side |
| CN104468269A (en) * | 2014-12-01 | 2015-03-25 | 郭丹 | Directional traffic monitoring method based on Android terminal device |
| US20150256545A1 (en) * | 2014-03-07 | 2015-09-10 | Verite Group, Inc. | Cloud-based network security and access control |
| CN105119764A (en) * | 2015-09-29 | 2015-12-02 | 百度在线网络技术（北京）有限公司 | Method and device for monitoring flow |
| US9231850B2 (en) * | 2012-02-21 | 2016-01-05 | Cisco Technology, Inc. | Keepalive mechanism to maintain links in a lossy environment |
| CN106453299A (en) * | 2016-09-30 | 2017-02-22 | 北京奇虎科技有限公司 | Network security monitoring method and device, and cloud WEB application firewall |
| CN106528416A (en) * | 2016-11-03 | 2017-03-22 | 上海斐讯数据通信技术有限公司 | android platform-based automation testing method and system |
| CN106961357A (en) * | 2017-04-28 | 2017-07-18 | 西安海润通信技术有限公司 | A kind of Internet service packet capturing and Fault Locating Method based on non-root android terminals |
-
2017
- 2017-10-30 CN CN201711041361.0A patent/CN107979506B/en active Active
Patent Citations (11)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7203173B2 (en) * | 2002-01-25 | 2007-04-10 | Architecture Technology Corp. | Distributed packet capture and aggregation |
| WO2012125137A1 (en) * | 2011-03-11 | 2012-09-20 | Hewlett-Packard Development Company, L.P. | Sampling network traffic |
| US9231850B2 (en) * | 2012-02-21 | 2016-01-05 | Cisco Technology, Inc. | Keepalive mechanism to maintain links in a lossy environment |
| US20150256545A1 (en) * | 2014-03-07 | 2015-09-10 | Verite Group, Inc. | Cloud-based network security and access control |
| CN104077053A (en) * | 2014-06-30 | 2014-10-01 | 珠海市君天电子科技有限公司 | Terminal information operating method and device and mobile terminal |
| CN104092691A (en) * | 2014-07-15 | 2014-10-08 | 北京奇虎科技有限公司 | Implementation method for implementing root-authority-free networking firewall and client-side |
| CN104468269A (en) * | 2014-12-01 | 2015-03-25 | 郭丹 | Directional traffic monitoring method based on Android terminal device |
| CN105119764A (en) * | 2015-09-29 | 2015-12-02 | 百度在线网络技术（北京）有限公司 | Method and device for monitoring flow |
| CN106453299A (en) * | 2016-09-30 | 2017-02-22 | 北京奇虎科技有限公司 | Network security monitoring method and device, and cloud WEB application firewall |
| CN106528416A (en) * | 2016-11-03 | 2017-03-22 | 上海斐讯数据通信技术有限公司 | android platform-based automation testing method and system |
| CN106961357A (en) * | 2017-04-28 | 2017-07-18 | 西安海润通信技术有限公司 | A kind of Internet service packet capturing and Fault Locating Method based on non-root android terminals |
Non-Patent Citations (1)
| Title |
|---|
| 郭闽年，陶智勇: ""非Root权限下ITV Traceroute 和抓包功能研究"", 《计算机与现代化》 * |
Cited By (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108011835A (en) * | 2017-10-30 | 2018-05-08 | 阿里巴巴集团控股有限公司 | Flow control system, method, apparatus and equipment |
| CN109309591A (en) * | 2018-10-31 | 2019-02-05 | 掌阅科技股份有限公司 | Data on flows statistical method, electronic equipment and storage medium |
| CN109309591B (en) * | 2018-10-31 | 2021-10-22 | 掌阅科技股份有限公司 | Traffic data statistical method, electronic device and storage medium |
| CN109450656A (en) * | 2018-12-30 | 2019-03-08 | 北京世纪互联宽带数据中心有限公司 | A kind of charging flow drawing generating method and device |
| CN110380914A (en) * | 2019-08-22 | 2019-10-25 | 北京世纪互联宽带数据中心有限公司 | A kind of flux monitoring method and system |
| CN111988239A (en) * | 2020-08-21 | 2020-11-24 | 哈尔滨工业大学 | Method for acquiring pure software flow for Android application |
| CN112532734A (en) * | 2020-12-02 | 2021-03-19 | 建信金融科技有限责任公司 | Message sensitive information detection method and device |
| CN112532734B (en) * | 2020-12-02 | 2023-11-21 | 建信金融科技有限责任公司 | Method and device for detecting message sensitive information |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107979506B (en) | 2020-12-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107979506A (en) | Flow obtains and high in the clouds display systems, method, apparatus and equipment | |
| Braun et al. | Software-defined networking using OpenFlow: Protocols, applications and architectural design choices | |
| US9455888B2 (en) | Application topology based on network traffic | |
| CN113987074A (en) | Distributed service full-link monitoring method and device, electronic equipment and storage medium | |
| CN106161178B (en) | A kind of method and apparatus accessing instant messaging network | |
| CN107534690A (en) | Gather domain name system flow | |
| CN109075997A (en) | The delay of jump formula and the stateless deduction of the distribution of two-way time of Internet protocol flow | |
| EP3364601B1 (en) | Testing method, device and system | |
| CN107710684A (en) | Build ultra-large monitoring of structures | |
| CN107968791A (en) | A kind of detection method and device of attack message | |
| CN107390994A (en) | Interface presentation and device | |
| CN109936474B (en) | Method and equipment for generating network topological graph | |
| CN109639809A (en) | A kind of method and device of service data request link monitoring | |
| CN110048908A (en) | Instruction Network Test System Platform, network test method and device | |
| CN110191000A (en) | A kind of data processing method, message tracing monitoring method and distributed system | |
| WO2022035454A1 (en) | Opentelemetry security extensions | |
| CN107766509A (en) | A kind of method and apparatus of webpage static backup | |
| Loreti et al. | SRv6-PM: A cloud-native architecture for performance monitoring of SRv6 networks | |
| CN104023039B (en) | Data pack transmission method and device | |
| CN110912731B (en) | NFV-based system and method for realizing service identification and topology analysis by adopting DPI technology | |
| CN109547257A (en) | Method for controlling network flow, device, equipment, system and storage medium | |
| CN107360062B (en) | DPI equipment identification result verification method and system and DPI equipment | |
| CN108989311A (en) | Generate the method and apparatus of input parameter | |
| CN107086960A (en) | A kind of message transmitting method and device | |
| CN114785718B (en) | Network target range flow acquisition and analysis system and method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| REG | Reference to a national code |
Ref country code: HK Ref legal event code: DE Ref document number: 1253993 Country of ref document: HK |
|
| TA01 | Transfer of patent application right | ||
| TA01 | Transfer of patent application right |
Effective date of registration: 20200924 Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands Applicant after: Innovative advanced technology Co.,Ltd. Address before: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands Applicant before: Advanced innovation technology Co.,Ltd. Effective date of registration: 20200924 Address after: Cayman Enterprise Centre, 27 Hospital Road, George Town, Grand Cayman Islands Applicant after: Advanced innovation technology Co.,Ltd. Address before: A four-storey 847 mailbox in Grand Cayman Capital Building, British Cayman Islands Applicant before: Alibaba Group Holding Ltd. |
|
| GR01 | Patent grant | ||
| GR01 | Patent grant |