CN108234498B - Communication call tracing method and system - Google Patents

Communication call tracing method and system Download PDF

Info

Publication number
CN108234498B
CN108234498B CN201810013292.0A CN201810013292A CN108234498B CN 108234498 B CN108234498 B CN 108234498B CN 201810013292 A CN201810013292 A CN 201810013292A CN 108234498 B CN108234498 B CN 108234498B
Authority
CN
China
Prior art keywords
sip signaling
data
server
media gateway
calling
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201810013292.0A
Other languages
Chinese (zh)
Other versions
CN108234498A (en
Inventor
林坚宏
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Guangzhou Sendi Computer System Co ltd
Original Assignee
Guangzhou Sendi Computer System Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Guangzhou Sendi Computer System Co ltd filed Critical Guangzhou Sendi Computer System Co ltd
Priority to CN201810013292.0A priority Critical patent/CN108234498B/en
Publication of CN108234498A publication Critical patent/CN108234498A/en
Application granted granted Critical
Publication of CN108234498B publication Critical patent/CN108234498B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/1066Session management
    • H04L65/1101Session protocols
    • H04L65/1104Session initiation protocol [SIP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/1066Session management
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2101/00Indexing scheme associated with group H04L61/00
    • H04L2101/60Types of network addresses
    • H04L2101/69Types of network addresses using geographic information, e.g. room number

Abstract

The embodiment of the invention provides a communication call tracing method and a system, wherein the method comprises the following steps: the first server acquires SIP signaling data transmitted on a communication link of a media gateway controller; the first server transmits the SIP signaling data to a second server; the second server extracts the calling media gateway IP of the communication calling process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data; and the second server obtains the originating local network information of each communication calling process according to each calling media gateway IP and a pre-configured IP address distribution relation table. The embodiment of the invention simplifies the signaling collection point and the analysis content, and can perform correlation traceability only by extracting the key SDP field information and acquiring the calling media network gateway IP; meanwhile, the communication call tracing expense is reduced, the hardware investment is greatly reduced, the software complexity is reduced, and the accuracy and the reliability are improved.

Description

Communication call tracing method and system
Technical Field
The present invention relates to the field of communications network technologies, and in particular, to a communication call tracing method and system.
Background
The telephone communication network is composed of a local telephone network and a long distance telephone network. The local telephone network is a telephone network composed of several local telephone end offices and local telephone tandem offices, interoffice trunk, long-city trunk, user access equipment and user terminal equipment in a long-distance numbering area, and is mainly used for completing local telephone communication. Long distance telephone networks can be divided into international and domestic long distance telephone networks. The international long distance telephone network consists of international switching centers distributed in different geographic positions around the world and international long distance trunk lines among the international switching centers, covers the world and is responsible for international communication around the world. The domestic long-distance telephone network is composed of long-distance tandem offices and long-distance terminal offices in the geographic range of each country, domestic long-distance trunk lines between the long-distance tandem offices and the long-distance terminal offices, and long-distance trunk lines from the domestic long-distance exchange offices to international long distances, and is mainly responsible for domestic long-distance communication. And the devices among all nodes in the communication network adopt corresponding signaling protocols for interactive realization. After the soft switching network and the IMS network are gradually emerging, the network is IP-based, and the SIP protocol is widely applied.
The signaling monitoring refers to the process of acquiring, analyzing, synthesizing and restoring the calling behavior of the telephone communication signaling network. The analysis of the network signaling provides a powerful aid in routine maintenance to improve user satisfaction. If the problem of single-pass, crosstalk and silence is easily caused by the problem of relay physical connection after the network is changed, the relay in the office direction is generally tested in the conventional maintenance, so that the relay which has the problem is found out, generally, a long time is needed, and meanwhile, the relay needs to be matched with the opposite terminal. But through the statistics of the full-network ultra-frequency ultra-short calls, the ultra-frequency ultra-short calls can be quickly found to be mostly concentrated on the same relays. The same relays are problematic relays, and the processing of the relays can quickly improve the call quality, improve the satisfaction degree of users and reduce the workload of operation and maintenance personnel. For the problem of the charging error of the complaint of the user, whether the calling signaling is abnormal (such as an answer signal and a disconnection signal) is analyzed by tracking the calling process of the user, and the charging caused by the network abnormality or the charging caused by the reason of the user is judged, so that a reasonable answer can be given to the user.
Call tracing refers to positioning the originating place of a call in a communication network by monitoring data through signaling and a reasonable method. According to the handling principles of troubleshooting, communication fraud and the like, the requirement for aligning the fixed bit call origination place is high, and the method is very important for local network companies dividing processing responsibilities.
The traditional call tracing method mainly collects the sectional call signaling from the signaling monitoring system, and carries out signaling full-flow association according to the rules of a time stamp of a calling number and a called number, a source address, a destination address and the like of each sectional signaling device, thereby tracing out a first signaling device node which sends the call.
The prior art has the following disadvantages:
1. because the communication network is divided into local network, inter-provincial long distance network and international long distance network, and the calling initiating process is different according to the network structure, the calling initiating process can be transmitted through a plurality of node levels to the called party for testing. The collection points of each signaling monitoring system are different, the important points are usually to collect signaling of a provincial level network tandem office and provincial long distance network nodes, and the source equipment nodes collected in the signaling system are usually not detailed to a local network.
2. The signaling node part in the communication network is shared by the local networks, so that the signaling call source end sent from the shared equipment node cannot accurately identify the local network when tracing and positioning.
3. In the prior art, a method which is relatively targeted and universal for call tracing is not provided. Most of the interfaces are only related to certain specific interfaces, and the association rule is responsible for the analysis, so that the analysis cost is high; and once the network node is not accessed or the data loss caused by abnormal reasons of acquisition occurs, the call tracing positioning can be seriously influenced.
Disclosure of Invention
The invention aims to provide a communication call tracing method and a communication call tracing system, which can accurately trace and position a call to a local network at minimum cost.
In order to achieve the above object, an aspect of the present invention provides a communication call tracing method, including:
the first server acquires SIP signaling data transmitted on a communication link of a media gateway controller; the SIP signaling data comprises a plurality of pieces of SIP signaling; each SIP signaling corresponds to a communication call procedure;
the first server transmits the SIP signaling data to a second server;
the second server extracts the calling media gateway IP of the communication calling process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data;
the second server obtains originating local network information of each communication calling process according to each calling media gateway IP and a pre-configured IP address distribution relation table; the IP address distribution relation table records the corresponding relation between different calling media gateway IP and the originating local network information.
Preferably, the first server obtains SIP signaling data transmitted on a communication link of the media gateway controller, specifically, the first server splits the communication link of the media gateway controller by using a splitter, and uses the data obtained after splitting as the SIP signaling data.
Preferably, the transmitting the SIP signaling data to the second server by the first server includes:
the first server opens N data cache regions corresponding to the preset N quintuple one by one;
the first server divides SIP signaling belonging to the same quintuple in the SIP signaling data into corresponding data cache regions, and filters out SIP signaling not belonging to any quintuple in the SIP signaling data;
and the first server starts N data transmission threads for the N data buffer areas in a one-to-one correspondence manner, and transmits the SIP signaling in the corresponding data buffer areas to the second server through each data transmission thread.
Preferably, the extracting, by the second server, the calling media gateway IP of the communication call process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data includes:
the second server starts N data receiving main processes which are in one-to-one correspondence with the N data transmission processes, and receives the SIP signaling transmitted by the first server through each data receiving main process;
the second server respectively starts M decoding sub-processes for the N data receiving main processes, and cooperatively analyzes the SIP signaling received by the corresponding data receiving main process through the M decoding sub-processes; the decoding subprocess is used for analyzing SDP media information carried in the SIP signaling and extracting a calling media gateway IP of a communication calling process corresponding to each SIP signaling through the SDP media information.
Preferably, the IP address assignment relationship table is stored in a hash structure in advance; different calling media gateway IPs are stored in the IP address allocation relation table as key values, and the originating local network information corresponding to each calling media gateway IP is stored in the IP address allocation relation table as value values.
Correspondingly, the embodiment of the invention also provides a communication call tracing system, which comprises a first server and a second server;
the first server includes:
a signaling data acquisition module for acquiring SIP signaling data transmitted on a communication link of a media gateway controller; the SIP signaling data comprises a plurality of pieces of SIP signaling; each SIP signaling corresponds to a communication call procedure;
the signaling data transmission module is used for transmitting the SIP signaling data to a second server;
the second server includes:
an IP obtaining module, configured to extract a calling media gateway IP of a communication call process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data;
the local network information acquisition module is used for acquiring originating local network information of each communication calling process according to each calling media gateway IP and a pre-configured IP address distribution relation table; the IP address distribution relation table records the corresponding relation between different calling media gateway IP and the originating local network information.
Preferably, the signaling data obtaining module is specifically configured to split a communication link of the media gateway controller through an optical splitter, and use data obtained after splitting as SIP signaling data.
Preferably, the signaling data transmission module includes:
a buffer opening unit for opening N data buffers corresponding to the preset N quintuple one by one;
the data processing unit is used for dividing the SIP signaling which belongs to the same quintuple in the SIP signaling data into corresponding data cache regions and filtering out the SIP signaling which does not belong to any quintuple in the SIP signaling data;
and the data transmission unit is used for correspondingly starting N data transmission threads for the N data buffer areas one by one, and respectively transmitting the SIP signaling in the corresponding data buffer areas to the second server through each data transmission thread.
Preferably, the IP obtaining module includes:
the data receiving unit is used for starting N data receiving main processes which are in one-to-one correspondence with the N data transmission processes, and respectively receiving the SIP signaling transmitted by the first server through each data receiving main process;
a signaling analysis unit, configured to respectively start M decoding sub-processes for the N data receiving main processes, and cooperatively analyze an SIP signaling received by a corresponding data receiving main process through the M decoding sub-processes; the decoding subprocess is used for analyzing SDP media information carried in the SIP signaling and extracting a calling media gateway IP of a communication calling process corresponding to each SIP signaling through the SDP media information.
Preferably, the IP address assignment relationship table is stored in a hash structure in advance; different calling media gateway IPs are stored in the IP address allocation relation table as key values, and the originating local network information corresponding to each calling media gateway IP is stored in the IP address allocation relation table as value values.
Compared with the prior art, the embodiment of the invention has the beneficial effects that: the embodiment of the invention provides a communication call tracing method and a system, wherein the method comprises the following steps: the first server acquires SIP signaling data transmitted on a communication link of a media gateway controller; the first server transmits the SIP signaling data to a second server; the second server extracts the calling media gateway IP of the communication calling process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data; and the second server obtains the originating local network information of each communication calling process according to each calling media gateway IP and a pre-configured IP address distribution relation table. The embodiment of the invention simplifies the signaling collection point, only needs to select a section of SIP signaling flow in the full-flow nodes to access the collection interface, simplifies the analysis content, does not need to perform signaling synthesis and complex association relation between all the nodes, and can perform association tracing only by extracting the key SDP field information and acquiring the gateway IP of the calling media network; meanwhile, the communication call tracing expense is reduced, the hardware investment is greatly reduced, the software complexity is reduced, and the accuracy and the reliability are improved.
Drawings
Fig. 1 is a schematic diagram of a transmission process of call signaling in the prior art;
fig. 2 is a flowchart illustrating a communication call tracing method according to an embodiment of the present invention;
fig. 3 is a block diagram of a communication call tracing system according to an embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
In explaining the communication call tracing method and system according to the embodiment of the present invention, a transmission process of a call signaling in the prior art is first introduced. As shown in fig. 1, it is a schematic diagram of a transmission process of call signaling in the prior art. Wherein, PSTN (public Switched Telephone network) is a public Switched Telephone network; SG (signaling gateway) is a signaling gateway; mgc (media Gateway controller) is a media Gateway controller; mg (media gateway) is a media gateway.
In fig. 1 is shown the signalling flow when user 1 calls user 2 of local network 2 from local network 1:
1. the signaling would go through PSTN1 devices in province a to SG1 devices in province a, using isup protocol;
2. then through SG1 device of province A to MGC1 device of province A, use isup protocol;
3. then, the SIP protocol is used from MGC1 equipment in province A to MGC2 equipment in province B;
4. then through MGC2 equipment in province B to SG2 equipment in province B, use isup protocol;
5. and then through SG2 devices in province B to PSTN2 devices in province B.
The SIP protocol informs the opposite side of a UDP port number, negotiates the media type, and the media gateway IP address (namely the IP address of MG 1) and the port number of the calling side are carried in an INVITE request sent by the calling side to the called side; the message returned by the called party to the calling party carries the IP address (namely the IP address of MG2) and the port number of the media gateway at the called side; and voice media stream information in the communication process is subjected to butt joint transmission through the two media gateways (namely MG1 and MG2) and the ports, so that the voice call is completed.
The traditional call tracing method mainly collects the sectional call signaling from the signaling monitoring system, and carries out signaling full-flow association according to the rules of a time stamp of a calling number and a called number, a source address, a destination address and the like of each sectional signaling device, thereby tracing out a first signaling device node which sends the call. For example, the source address of the signaling of the PSTN2 device is determined to be SG2 device, and then the source address of the signaling of the SG2 device is determined to be MGC2 device, until the first signaling device node location is found. However, the cost required by this method is relatively high, and when a certain link is wrong, a correct originating local network cannot be found.
The embodiment of the invention extracts the calling media gateway IP (namely the IP address of MGC 1) in the communication calling process through SDP media information in SIP signaling transmitted between MGC1 and MGC2, and obtains the originating local network information in each communication calling process according to each calling media gateway IP and a pre-configured IP address distribution relation table.
Please refer to fig. 2, which is a flowchart illustrating a communication call tracing method according to an embodiment of the present invention. The method comprises the following steps:
s1, the first server obtains the SIP signaling data transmitted on the communication link of the media gateway controller; the SIP signaling data comprises a plurality of pieces of SIP signaling; each SIP signaling corresponds to a communication call procedure;
s2, the first server transmits the SIP signaling data to the second server;
s3, the second server extracts the calling media gateway IP of the communication calling process corresponding to each SIP signaling through the SDP media information carried by each SIP signaling in the SIP signaling data;
s4, the second server obtains the originating local network information of each communication calling process according to each calling media gateway IP and the pre-configured IP address distribution relation table; the IP address distribution relation table records the corresponding relation between different calling media gateway IP and the originating local network information.
It should be noted that although one SIP signaling corresponds to one communication call process, multiple SIP signaling exist in one communication call process, and only one of the multiple SIP signaling contains the SDP media information.
In an optional implementation manner, the first server obtains SIP signaling data transmitted on a communication link of the media gateway controller, specifically, the first server splits the communication link of the media gateway controller through a splitter, and uses data obtained after splitting as the SIP signaling data.
The optical splitter is used for copying optical data for monitoring after the data is transmitted through an optical fiber. The original flow normally passes through, and meanwhile, a part of the flow is divided to be used for analysis of monitoring equipment, and meanwhile, the original data communication is not influenced. For example, by splitting a communication link between MGC devices, 80% of the optical path is sent back to the optical port of the source device through a 2:8 splitter, ensuring that the original optical path remains normal; and (3) accessing 20% of the optical path to the first server, copying and sending the SIP signaling data to the second server for analysis and processing.
In an optional embodiment, the transmitting the SIP signaling data from the first server to the second server comprises:
the first server opens N data cache regions corresponding to the preset N quintuple one by one;
the first server divides SIP signaling belonging to the same quintuple in the SIP signaling data into corresponding data cache regions, and filters out SIP signaling not belonging to any quintuple in the SIP signaling data;
and the first server starts N data transmission threads for the N data buffer areas in a one-to-one correspondence manner, and transmits the SIP signaling in the corresponding data buffer areas to the second server through each data transmission thread.
The quintuple is a set formed by five quantities of a source IP address, a source port, a destination IP address, a destination port and a transport layer protocol, can distinguish different sessions, and the corresponding session is unique. The embodiment of the invention sends all SIP signaling belonging to the same quintuple to the same data transmission thread, and discards the SIP signaling not belonging to any quintuple, thereby filtering useless data flow early and greatly reducing the processing pressure of subsequent modules.
In an optional implementation manner, the extracting, by the second server, the calling media gateway IP of the communication call process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data includes:
the second server starts N data receiving main processes which are in one-to-one correspondence with the N data transmission processes, and receives the SIP signaling transmitted by the first server through each data receiving main process;
the second server respectively starts M decoding sub-processes for the N data receiving main processes, and cooperatively analyzes the SIP signaling received by the corresponding data receiving main process through the M decoding sub-processes; the decoding subprocess is used for analyzing SDP media information carried in the SIP signaling and extracting a calling media gateway IP of a communication calling process corresponding to each SIP signaling through the SDP media information.
Specifically, the M decoding subprocesses perform data reading and analysis in a shared memory queue manner. The shared memory queue means that the M decoding subprocesses can read the memory of the corresponding data receiving main process, each decoding subprocess works simultaneously, each decoding subprocess takes out a data packet (SIP signaling) from the memory of the data receiving main process each time for analysis, and the operation is repeated after the analysis is finished, so that the fact that the data packets of the memory of the data receiving main process are analyzed is known to be finished. The shared memory queue is used for providing the inter-process signaling data circulation speed, the decoding speed is improved in a multi-process rotation mode, the service performance is fully utilized, and the analysis result is output in real time.
In an optional embodiment, the IP address allocation relation table is stored in a hash structure in advance; different calling media gateway IPs are stored in the IP address allocation relation table as key values, and the originating local network information corresponding to each calling media gateway IP is stored in the IP address allocation relation table as value values. Lookups are data structures that are accessed directly from a Key value. That is, it accesses the record by mapping the key value to a location in the table to speed up the lookup.
The creating mode of the IP address allocation relation table is as follows: local network distribution data of the calling media gateway IP address is obtained through an operator resource system, the data can be provided in an ftp transmission or excel import mode, an IP list with the calling media gateway IP address as a main key is created and maintained, and an originating local network name and an area code distributed by the calling media gateway IP address are recorded. As example data:
Figure BDA0001539621810000091
in step S4, the local network tracing analysis of the invention is to obtain the originating local network information of the call by correlating and analyzing the calling media gateway IP in the SIP signaling with the IP address distribution relation table, and to backfill the local network information back into the SIP call ticket for subsequent use. For example, the IP address analysis of the calling media gateway of the current call results in that: 10.245.1.14, the corresponding originating local network is: guangzhou.
All or part of the flow of the method of the embodiments may be implemented by a computer program, which may be stored in a computer readable storage medium and executed by a processor, to instruct related hardware to implement the steps of the embodiments of the methods. Wherein the computer program comprises computer program code, which may be in the form of source code, object code, an executable file or some intermediate form, etc. The computer-readable medium may include: any entity or device capable of carrying the computer program code, recording medium, usb disk, removable hard disk, magnetic disk, optical disk, computer Memory, Read-only Memory (ROM), Random Access Memory (RAM), electrical carrier wave signals, telecommunications signals, software distribution medium, etc. It should be noted that the computer readable medium may contain content that is subject to appropriate increase or decrease as required by legislation and patent practice in jurisdictions, for example, in some jurisdictions, computer readable media does not include electrical carrier signals and telecommunications signals as is required by legislation and patent practice.
Correspondingly, the embodiment of the invention also provides a communication call tracing system. Fig. 3 is a block diagram of a communication call tracing system according to an embodiment of the present invention, which includes a first server 1 and a second server 2;
the first server 1 includes:
a signaling data obtaining module 11, configured to obtain SIP signaling data transmitted on a communication link of a media gateway controller; the SIP signaling data comprises a plurality of pieces of SIP signaling; each SIP signaling corresponds to a communication call procedure;
a signaling data transmission module 12, configured to transmit the SIP signaling data to a second server;
the second server 2 includes:
an IP obtaining module 21, configured to extract, through SDP media information carried in each SIP signaling in the SIP signaling data, a calling media gateway IP in a communication call process corresponding to each SIP signaling;
the local network information acquisition module 22 is configured to obtain originating local network information of each communication call process according to each calling media gateway IP and a preconfigured IP address assignment relationship table; the IP address distribution relation table records the corresponding relation between different calling media gateway IP and the originating local network information.
Preferably, the signaling data obtaining module is specifically configured to split a communication link of the media gateway controller through an optical splitter, and use data obtained after splitting as SIP signaling data.
Preferably, the signaling data transmission module 12 includes:
a buffer opening unit for opening N data buffers corresponding to the preset N quintuple one by one;
the data processing unit is used for dividing the SIP signaling which belongs to the same quintuple in the SIP signaling data into corresponding data cache regions and filtering out the SIP signaling which does not belong to any quintuple in the SIP signaling data;
and the data transmission unit is used for correspondingly starting N data transmission threads for the N data buffer areas one by one, and respectively transmitting the SIP signaling in the corresponding data buffer areas to the second server through each data transmission thread.
Preferably, the IP obtaining module 21 includes:
the data receiving unit is used for starting N data receiving main processes which are in one-to-one correspondence with the N data transmission processes, and respectively receiving the SIP signaling transmitted by the first server through each data receiving main process;
a signaling analysis unit, configured to respectively start M decoding sub-processes for the N data receiving main processes, and cooperatively analyze an SIP signaling received by a corresponding data receiving main process through the M decoding sub-processes; the decoding subprocess is used for analyzing SDP media information carried in the SIP signaling and extracting a calling media gateway IP of a communication calling process corresponding to each SIP signaling through the SDP media information.
Preferably, the IP address assignment relationship table is stored in a hash structure in advance; different calling media gateway IPs are stored in the IP address allocation relation table as key values, and the originating local network information corresponding to each calling media gateway IP is stored in the IP address allocation relation table as value values.
It should be noted that, the communication call tracing system provided in the embodiment of the present invention is configured to execute all the method steps of the communication call tracing method, and the working principles and beneficial effects of the two are in one-to-one correspondence, so that no further description is given.
Compared with the prior art, the embodiment of the invention has the beneficial effects that: the embodiment of the invention provides a communication call tracing method and a system, wherein the method comprises the following steps: the first server acquires SIP signaling data transmitted on a communication link of a media gateway controller; the first server transmits the SIP signaling data to a second server; the second server extracts the calling media gateway IP of the communication calling process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data; and the second server obtains the originating local network information of each communication calling process according to each calling media gateway IP and a pre-configured IP address distribution relation table. The embodiment of the invention simplifies the signaling collection point, only needs to select a section of SIP signaling flow in the full-flow nodes to access the collection interface, simplifies the analysis content, does not need to perform signaling synthesis and complex association relation between all the nodes, and can perform association tracing only by extracting the key SDP field information and acquiring the gateway IP of the calling media network; meanwhile, the communication call tracing expense is reduced, the hardware investment is greatly reduced, the software complexity is reduced, and the accuracy and the reliability are improved.
It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by a computer program, which can be stored in a computer-readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. The storage medium may be a magnetic disk, an optical disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), or the like.
While the foregoing is directed to the preferred embodiment of the present invention, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention.

Claims (8)

1. A communication call tracing method, comprising:
the first server acquires SIP signaling data transmitted on a communication link of a media gateway controller; the SIP signaling data comprises a plurality of pieces of SIP signaling; each SIP signaling corresponds to a communication call procedure;
the first server opens N data cache regions corresponding to the preset N quintuple one by one;
the first server divides SIP signaling belonging to the same quintuple in the SIP signaling data into corresponding data cache regions, and filters out SIP signaling not belonging to any quintuple in the SIP signaling data;
the first server starts N data transmission threads for the N data buffer areas in a one-to-one correspondence mode, and SIP signaling in the corresponding data buffer areas is transmitted to the second server through each data transmission thread; the second server extracts the calling media gateway IP of the communication calling process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data;
the second server obtains originating local network information of each communication calling process according to each calling media gateway IP and a pre-configured IP address distribution relation table; the IP address distribution relation table records the corresponding relation between different calling media gateway IP and the originating local network information.
2. The communication call tracing method according to claim 1, wherein the first server obtains SIP signaling data transmitted on the communication link of the media gateway controller, specifically, the first server splits the communication link of the media gateway controller by the splitter, and uses the split data as the SIP signaling data.
3. The communication call tracing method of claim 2, wherein the second server extracts a calling media gateway IP of the communication call process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data, comprising:
the second server starts N data receiving main processes which are in one-to-one correspondence with the N data transmission processes, and receives the SIP signaling transmitted by the first server through each data receiving main process;
the second server respectively starts M decoding sub-processes for the N data receiving main processes, and cooperatively analyzes the SIP signaling received by the corresponding data receiving main process through the M decoding sub-processes; the decoding subprocess is used for analyzing SDP media information carried in the SIP signaling and extracting a calling media gateway IP of a communication calling process corresponding to each SIP signaling through the SDP media information.
4. The communication call tracing method according to claim 1, wherein said IP address assignment relation table is stored in a hash structure in advance; different calling media gateway IPs are stored in the IP address allocation relation table as key values, and the originating local network information corresponding to each calling media gateway IP is stored in the IP address allocation relation table as value values.
5. A communication call tracing system is characterized by comprising a first server and a second server;
the first server includes:
a signaling data acquisition module for acquiring SIP signaling data transmitted on a communication link of a media gateway controller; the SIP signaling data comprises a plurality of pieces of SIP signaling; each SIP signaling corresponds to a communication call procedure;
the signaling data transmission module is used for transmitting the SIP signaling data to a second server; wherein, the signaling data transmission module comprises: a buffer opening unit for opening N data buffers corresponding to the preset N quintuple one by one; the data processing unit is used for dividing SIP signaling which belongs to the same quintuple in the SIP signaling data into corresponding data cache regions and filtering out SIP signaling which does not belong to any quintuple in the SIP signaling data; the data transmission unit is used for correspondingly starting N data transmission threads for the N data cache regions one by one and respectively transmitting the SIP signaling in the corresponding data cache region to the second server through each data transmission thread;
the second server includes:
an IP obtaining module, configured to extract a calling media gateway IP of a communication call process corresponding to each SIP signaling through SDP media information carried by each SIP signaling in the SIP signaling data;
the local network information acquisition module is used for acquiring originating local network information of each communication calling process according to each calling media gateway IP and a pre-configured IP address distribution relation table; the IP address distribution relation table records the corresponding relation between different calling media gateway IP and the originating local network information.
6. The communication call tracing system of claim 5, wherein said signaling data acquisition module is specifically configured to split a communication link of the media gateway controller by an optical splitter, and use data obtained after the splitting as SIP signaling data.
7. The communication call tracing system of claim 6, wherein said IP acquisition module comprises:
the data receiving unit is used for starting N data receiving main processes which are in one-to-one correspondence with the N data transmission processes, and respectively receiving the SIP signaling transmitted by the first server through each data receiving main process;
a signaling analysis unit, configured to respectively start M decoding sub-processes for the N data receiving main processes, and cooperatively analyze an SIP signaling received by a corresponding data receiving main process through the M decoding sub-processes; the decoding subprocess is used for analyzing SDP media information carried in the SIP signaling and extracting a calling media gateway IP of a communication calling process corresponding to each SIP signaling through the SDP media information.
8. The communication call tracing system of claim 5, wherein said IP address assignment relation table is stored in a hash structure in advance; different calling media gateway IPs are stored in the IP address allocation relation table as key values, and the originating local network information corresponding to each calling media gateway IP is stored in the IP address allocation relation table as value values.
CN201810013292.0A 2018-01-04 2018-01-04 Communication call tracing method and system Active CN108234498B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810013292.0A CN108234498B (en) 2018-01-04 2018-01-04 Communication call tracing method and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810013292.0A CN108234498B (en) 2018-01-04 2018-01-04 Communication call tracing method and system

Publications (2)

Publication Number Publication Date
CN108234498A CN108234498A (en) 2018-06-29
CN108234498B true CN108234498B (en) 2020-09-22

Family

ID=62645366

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810013292.0A Active CN108234498B (en) 2018-01-04 2018-01-04 Communication call tracing method and system

Country Status (1)

Country Link
CN (1) CN108234498B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110798460B (en) * 2019-10-23 2022-02-11 国家计算机网络与信息安全管理中心 Media gateway detection method, device and readable storage medium
CN114384792B (en) * 2021-12-10 2024-01-02 浙江大学 Safe and redundant PLC communication control system

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101018216A (en) * 2007-01-29 2007-08-15 中兴通讯股份有限公司 Voice, Modem and Fax full control method
CN103368899A (en) * 2012-03-26 2013-10-23 中国移动通信集团公司 Method, system and access gateway for determining position of non-IP fixed terminal

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070121798A1 (en) * 2005-10-20 2007-05-31 Jon Croy Public service answering point (PSAP) proxy

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101018216A (en) * 2007-01-29 2007-08-15 中兴通讯股份有限公司 Voice, Modem and Fax full control method
CN103368899A (en) * 2012-03-26 2013-10-23 中国移动通信集团公司 Method, system and access gateway for determining position of non-IP fixed terminal

Also Published As

Publication number Publication date
CN108234498A (en) 2018-06-29

Similar Documents

Publication Publication Date Title
US7076040B2 (en) Generating call detail records
US7570743B2 (en) Method and apparatus for surveillance of voice over internet protocol communications
US8503313B1 (en) Method and apparatus for detecting a network impairment using call detail records
CN101584185A (en) Method and system for identifying and reporting over-utilized, under-utilized, and bad quality trunks and gateways in internet protocol telephony networks
CN1855960B (en) Automatic testing tool and method for MGCP mass traffic analog calling
CN108234498B (en) Communication call tracing method and system
US20230208967A1 (en) Site link tester via unique phone emulation
US10148702B2 (en) Session association method, apparatus, and system
US20110194460A1 (en) Monitoring in an internet protocol (IP) domain
US8064352B2 (en) Method for implementing online maintenance in communication network
US8693376B2 (en) Monitoring in a telecommunication network
CN1838663B (en) Realization process for detecting VoIP application in IP network
US20040160896A1 (en) Method and apparatus for adaptive capture of voice over packet (VoP) data
CN102143147B (en) Multi-control protocol association method and multi-control protocol association device for interworking IMS network and 2G/3G network
US20220103680A1 (en) System and method for classifying and handling voice over ip traffic
Cisco Troubleshooting with Call Flows
CN114157761A (en) System and method for voice test of multi-channel voice gateway equipment based on router
CN110266902B (en) VoIP signaling and media data association system and method
CN111263011A (en) Anti-fraud method based on ISUP signaling collection
WO2008003250A1 (en) A fault positioning method, apparatus and system in the next generation network
Mushtaq et al. Optimization of revenue assurance and fraud management system by designing new kpis: case ptcl
US7215747B2 (en) Method and apparatus for producing information regarding the operation of a networked system
CN101557326A (en) Session initiation protocol call real time identifying and filtering method based on one-way flow
KR20080053662A (en) System for detecting the number of simultaneous calling ports of voip terminal and method therefor
TW201528769A (en) Fraud phone call preventive device

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant