CN108365981B - Method for realizing tracking of abnormal number or abnormal protocol of multiple signaling protocols - Google Patents

Method for realizing tracking of abnormal number or abnormal protocol of multiple signaling protocols Download PDF

Info

Publication number
CN108365981B
CN108365981B CN201810111161.6A CN201810111161A CN108365981B CN 108365981 B CN108365981 B CN 108365981B CN 201810111161 A CN201810111161 A CN 201810111161A CN 108365981 B CN108365981 B CN 108365981B
Authority
CN
China
Prior art keywords
tracking
signaling
protocol
abnormal
alarm
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201810111161.6A
Other languages
Chinese (zh)
Other versions
CN108365981A (en
Inventor
罗贵勇
陈风波
韦海亮
首安科
黄双
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Rongda Qianli Technology Co ltd
Guangzhou Landmark Information Technology Co ltd
Liuzhou Dadi Communication Technology Co ltd
Original Assignee
Beijing Rongda Qianli Technology Co ltd
Guangzhou Landmark Information Technology Co ltd
Liuzhou Dadi Communication Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Rongda Qianli Technology Co ltd, Guangzhou Landmark Information Technology Co ltd, Liuzhou Dadi Communication Technology Co ltd filed Critical Beijing Rongda Qianli Technology Co ltd
Priority to CN201810111161.6A priority Critical patent/CN108365981B/en
Publication of CN108365981A publication Critical patent/CN108365981A/en
Application granted granted Critical
Publication of CN108365981B publication Critical patent/CN108365981B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0686Additional information in the notification, e.g. enhancement of specific meta-data
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0681Configuration of triggering conditions

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Communication Control (AREA)
  • Maintenance And Management Of Digital Transmission (AREA)

Abstract

The invention discloses a method for tracking an abnormal number or an abnormal protocol of a multi-signaling protocol, and relates to the technical field of signaling multi-protocol analysis. The method for tracking the abnormal number or the abnormal protocol of the multi-signaling protocol sets tracking conditions (tracking signaling protocols and values of tracking items corresponding to different tracking signaling protocols), then receives, processes and judges the link type of the tracking signaling protocol by the FPGA so as to judge whether the tracked number or protocol is abnormal or not, displays the tracked number or protocol on an industrial personal computer or a computer, and realizes quick and real-time tracking after tracking analysis and result display within 2 seconds from the time of receiving data.

Description

Method for realizing tracking of abnormal number or abnormal protocol of multiple signaling protocols
Technical Field
The invention belongs to the technical field of signaling multi-protocol analysis, and particularly relates to a method for tracking an abnormal number or an abnormal protocol of a multi-signaling protocol.
Background
After the traditional signaling protocol analysis software collects the information on the signaling link in real time, a great deal of practical data and analysis results are provided for maintenance personnel after analysis and processing, and the method is an ideal choice for engineering opening and acceptance test, fault positioning, daily maintenance, network optimization and performance analysis. Many processes of traditional signaling protocol analysis software are based on database processes, the query and filtering functions of the database are very strong, simple SQL sentences can realize flexible and rich query and statistics functions, but the processing efficiency based on the database is very low, many statistics functions cannot be performed during real-time test and analysis, various rich query and statistics functions based on the database can be started after the real-time analysis is finished, and when the test data volume is very large, results can be obtained even after tens of minutes of waiting. If the results are not screened until after the test is completed, the abnormal signaling protocol or number cannot be discovered and processed as quickly as possible.
Disclosure of Invention
Aiming at the defects of the prior art, the invention provides a method for tracking the abnormal number or abnormal protocol of the multi-signaling protocol.
The invention solves the technical problems through the following technical scheme: a method for realizing the tracing of the abnormal number or abnormal protocol of the multi-signaling protocol comprises the following steps:
(1) setting tracking conditions, selecting a tracking signaling protocol, and correspondingly setting the value of a tracking item of the tracking signaling protocol according to different tracking signaling protocols;
(2) the FPGA receives and processes the tracking signaling protocol selected in the step (1), and judges the link type of the tracking signaling protocol;
(3) selecting a specific number or a specific message type to be tracked according to the protocol rule of the tracking signaling protocol link type judged in the step (2);
(4) if the tracked number belongs to the value of the tracking item set in the step (1), or the tracked number dials too frequently (exceeds a threshold value), an alarm is given;
(5) and transmitting the tracked number or protocol information data related to the message to an industrial personal computer or a computer in real time for display processing.
Further, when the tracking signaling protocol is selected in the step (1), a plurality of types can be selected simultaneously.
Further, the value of the tracking item in the step (1) is a set abnormal number segment or a number range, and the abnormal number segment includes a wildcard character.
Further, the link types of the tracking signaling protocol in the step (2) include signaling No. 1 (CAS 1), signaling No. 7 (SS 7), signaling DSS1 (digital subscriber signaling system one), and signaling V5 (applied to the signaling protocol between LE and OLT).
Further, the alarm sent in the step (4) comprises a network transmission alarm of TCP/IP, an automatic mail sending alarm, a hardware horn alarm or a short message reminding alarm.
Compared with the prior art, the tracking method for realizing the abnormal number or the abnormal protocol of the multi-signaling protocol sets the tracking conditions (tracking signaling protocol and values of tracking items corresponding to different tracking signaling protocols), receives and processes and judges the link type of the tracking signaling protocol by the FPGA so as to judge whether the tracked number or protocol is abnormal or not, realizes display on an industrial personal computer or a computer, and realizes quick and real-time tracking after tracking analysis and result display from the time of receiving data, wherein the time taken by the tracking analysis is less than 2 seconds; in the signaling test of the multiprotocol, we generally do not need to analyze and process all protocols, often only analyze and process a certain specific protocol or a certain specific telephone number, adopt the tracking method of the invention to trace, analyze and process the specific protocol or a certain specific telephone number, have greatly saved the working time of the circuit maintainer; if the abnormal telephone number is found, an alarm can be sent at any time, the abnormality is found in time, and the condition that link congestion is caused and illegal persons attack citizens through links is avoided.
Detailed Description
The technical solutions in the present invention are clearly and completely described below, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The invention provides a method for realizing tracking of a multi-signaling protocol abnormal number or an abnormal protocol, which comprises the following steps:
(1) setting tracking conditions, selecting a tracking signaling protocol, and correspondingly setting the value of a tracking item of the tracking signaling protocol according to different tracking signaling protocols.
When the tracking signaling protocol is selected, multiple protocols or multiple numbers can be selected at the same time, and the length of the number can be set; the tracking signaling protocol tracking item has a value of a set abnormal number segment or number range, the abnormal number segment comprises a wildcard character, the wildcard character can only be placed at the top or the bottom of the abnormal number segment, for example, 12345 indicates all numbers with the end being 12345, 12345 indicates all numbers with the beginning of 12345, 12345 indicates all numbers containing 12345, and 12345 indicates numbers only equal to 12345.
(2) And (3) receiving and processing the tracking signaling protocol selected in the step (1) by the FPGA, and judging the link type of the tracking signaling protocol.
The link classes of the trace signaling protocol include signaling No. 1 (CAS 1), signaling No. 7 (SS 7), DSS1 (digital subscriber signaling system one), and V5 (applied to the signaling protocol between LE and OLT). The contents of the trace signaling protocol include: MTP, TUP, ISUP, SCCP, TCAP, INAP, GSM MAP, GSM CAP, CDMA MAP, CDMA-A interface, WIN, Abis, PRI DSS1, etc.
(3) And (3) selecting a specific number or a specific message type to be tracked according to the protocol rule of the tracking signaling protocol link type judged in the step (2).
If the link is a signaling link No. 1, selecting a specific number to be tracked according to a signaling protocol rule No. 1;
if the link is a signaling link No. 7, selecting a specific number or a specific message type to be tracked according to a signaling protocol rule No. 7;
if the link is a DSS1 signaling link, selecting a specific number or a specific message type to be tracked according to the DSS1 signaling protocol rule;
if it is a V5 signaling link, then the specific number or specific message type to be tracked is selected according to the V5 signaling protocol rules.
(4) And (3) if the tracked number belongs to the value (internal setting) of the tracking item set in the step (1) or the tracked number dials too frequently (exceeds a threshold value), giving an alarm.
The alarm sent out comprises network transmission alarm of TCP/IP, automatic mail sending alarm, hardware horn alarm or short message reminding alarm, and the alarm sent out is one or more than one of the alarm modes.
(5) And transmitting the tracked number or protocol information data related to the message to an industrial personal computer or a computer in real time for display processing.
The above disclosure is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive of changes or modifications within the technical scope of the present invention, and shall be covered by the scope of the present invention.

Claims (2)

1. A method for realizing the tracing of the abnormal number or abnormal protocol of multiple signaling protocols is characterized by comprising the following steps:
(1) setting tracking conditions, selecting a tracking signaling protocol, and correspondingly setting the value of a tracking item of the tracking signaling protocol according to different tracking signaling protocols; the value of the tracking item is a set abnormal number segment or a set number range, and the abnormal number segment comprises a wildcard character; when the tracking signaling protocol is selected, a plurality of types can be selected simultaneously;
(2) the FPGA receives and processes the tracking signaling protocol selected in the step (1), and judges the link type of the tracking signaling protocol; the link types of the tracking signaling protocol comprise signaling No. 1, signaling No. 7, DSS1 signaling and V5 signaling;
(3) selecting a specific number or a specific message type to be tracked according to the protocol rule of the tracking signaling protocol link type judged in the step (2);
(4) if the tracked number belongs to the value of the tracking item set in the step (1) or the tracked number is dialed too frequently, an alarm is sent;
(5) and transmitting the tracked number or protocol information data related to the message to an industrial personal computer or a computer in real time for display processing.
2. The method for tracking abnormal numbers or abnormal protocols according to multi-signaling protocols, as claimed in claim 1, wherein said alarm issued in step (4) includes TCP/IP network transmission alarm, automatic mail sending alarm, hardware horn alarm or short message reminding alarm.
CN201810111161.6A 2018-02-05 2018-02-05 Method for realizing tracking of abnormal number or abnormal protocol of multiple signaling protocols Active CN108365981B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810111161.6A CN108365981B (en) 2018-02-05 2018-02-05 Method for realizing tracking of abnormal number or abnormal protocol of multiple signaling protocols

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810111161.6A CN108365981B (en) 2018-02-05 2018-02-05 Method for realizing tracking of abnormal number or abnormal protocol of multiple signaling protocols

Publications (2)

Publication Number Publication Date
CN108365981A CN108365981A (en) 2018-08-03
CN108365981B true CN108365981B (en) 2020-12-01

Family

ID=63004509

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810111161.6A Active CN108365981B (en) 2018-02-05 2018-02-05 Method for realizing tracking of abnormal number or abnormal protocol of multiple signaling protocols

Country Status (1)

Country Link
CN (1) CN108365981B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111541809B (en) * 2020-05-16 2021-06-22 北京联众智芯科技有限公司 Double 4G module dialing method of industrial personal computer

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101667928A (en) * 2009-09-25 2010-03-10 中兴通讯股份有限公司 Client, signaling tracking server, protocol module and signaling tracking method
EP3264722A1 (en) * 2014-12-26 2018-01-03 System73, Inc. Method and system for adaptive virtual broadcasting of digital content

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100370865C (en) * 2004-10-22 2008-02-20 华为技术有限公司 Signaling tagging method

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101667928A (en) * 2009-09-25 2010-03-10 中兴通讯股份有限公司 Client, signaling tracking server, protocol module and signaling tracking method
EP3264722A1 (en) * 2014-12-26 2018-01-03 System73, Inc. Method and system for adaptive virtual broadcasting of digital content

Also Published As

Publication number Publication date
CN108365981A (en) 2018-08-03

Similar Documents

Publication Publication Date Title
EP3324607B1 (en) Fraud detection on a communication network
US6327352B1 (en) System and method for real-time fraud detection within a telecommunications system
US20050281399A1 (en) Methods, systems, and computer program products for selecting or generating a single call detail record (CDR) from a plurality of CDRs associated with a call having a plurality of legs
CN111756582B (en) Service chain monitoring method based on NFV log alarm
US6353902B1 (en) Network fault prediction and proactive maintenance system
US6731730B1 (en) Method and system for creating combined call detail records databases (CDR) in management systems of communication networks
CN106937007A (en) System, method and device that a kind of harassing call is reminded
DE69937874T2 (en) Method and device for searching for a call in a telecommunications network
CN108365981B (en) Method for realizing tracking of abnormal number or abnormal protocol of multiple signaling protocols
US7277532B2 (en) Call monitoring apparatus and method therefor
CN102378151B (en) Information sharing platform and method thereof
EP2127453A1 (en) Method for fraud recognition in the case of roaming connections in mobile communication networks
US20070217391A1 (en) Methods, systems, and computer program products for setting congestion levels for a plurality of routes to a common destination
US6970542B2 (en) Methods and systems for identifying calls connected without answer supervision and for automatically generating billing information for the calls
CN109474755B (en) Abnormal telephone active prediction method, system and computer readable storage medium based on sequencing learning and ensemble learning
US7301910B2 (en) Methods and systems for automated analysis of signaling link utilization
CN101527760B (en) Alarm information access method and system
CN101610168A (en) The inhibition method and apparatus of alarm windstorm in the network management system
KR100835647B1 (en) Statistical data managing system and methods of mirrored packets for realtime monitoring and performance trend analysis by separating realtime statistical data and transition analysis data
EP0939559B1 (en) Methods of monitoring multiple transactions
CN113783710B (en) Process layer network fault positioning method and device based on self-learning criteria
US7801124B2 (en) Methods, systems, and computer program products for determining the application-level protocol of a signaling message
CN114095344B (en) Fault positioning method, equipment and computer storage medium for batch network complaints
CN116599782B (en) Multi-dimensional voice call ticket data filtering system based on data analysis
CN114025041B (en) System and method for rapidly identifying nuisance calls based on non-frequency characteristics of signaling

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant