CN109257297B

CN109257297B - Method for monitoring data directional flow

Info

Publication number: CN109257297B
Application number: CN201811377464.9A
Authority: CN
Inventors: 梁煜锋; 徐冉; 刘健文; 周伟; 廖飏
Original assignee: GUANGZHOU ZHUJIANG DIGITAL MEDIA GROUP CO Ltd
Current assignee: GUANGZHOU ZHUJIANG DIGITAL MEDIA GROUP CO Ltd
Priority date: 2018-11-19
Filing date: 2018-11-19
Publication date: 2021-11-05
Anticipated expiration: 2038-11-19
Also published as: CN109257297A

Abstract

The invention provides a data directional flow monitoring method, which comprises connecting BOSS system of broadcast and television broadband operator with public security network monitoring system, setting specific user package in BOSS system according to specific user list of public security network monitoring, allocating specific IP address to specific user in specific user list through DHCP system, and forwards the data flow of these specific IP addresses to the public security network monitoring system through policy routing at the broadband egress, thereby realizing real-time monitoring of network data of specific users, greatly reducing investment of flow monitoring equipment for the public security network monitoring system, realizing intelligentization of data extraction and greatly reducing monitored data flow, the monitoring effect is guaranteed, meanwhile, the monitoring efficiency is greatly improved, and the equipment cost investment can be greatly reduced.

Description

Method for monitoring data directional flow

Technical Field

The invention relates to a method for identifying a sender of network data and monitoring the flow.

Background

As shown in fig. 1, in the prior art, broadcast and television broadband operators all forward all traffic to a policeman system network supervision center by splitting at an egress router physical layer, and do not perform any screening. However, with the explosive growth of internet information in recent years, broadband traffic also grows in a geometric progression, the traffic monitoring, analyzing and extracting of single or partial users from such huge data traffic is basically impossible, and the cost of manpower and material resources for realizing the monitoring and the analyzing is very large.

In addition, such huge data traffic is extracted manually at present, when the public security needs the data of a certain user, the equivalent IP address, the internet surfing time and the website access address are sent to the broadcasting and television broadband operator, and the broadcasting and television broadband operator manually checks the relevant system and then sends the system to the public security, so that the analysis of suspicious data by the public security system is not timely enough.

Disclosure of Invention

The invention aims to provide a data quantitative flow monitoring method which can automatically classify suspicious data and uniformly forward the suspicious data to a public security network monitoring system.

A method for monitoring data directional flow comprises the following steps:

the public security network monitoring system establishes a specific user list, is connected with the BOSS system and sends the specific user list to the BOSS system;

the BOSS system establishes a specific package for the users in the specific user list and sends the user information of the specific package to the DHCP system;

after receiving the information of a specific user of a specific package, the DHCP system establishes a client class (CLIENTCLASS) for the specific user and allocates a specific IP address section to the client class; after the terminal of a specific user is restarted, the terminal can reallocate the IP address in the specific IP address field to the specific user to replace the original IP address;

and setting a policy router to distinguish the data flow of a source IP address belonging to a specific user in the specific IP address field, and forwarding the data flow to a public security network monitoring system.

The data directional flow monitoring method comprises the steps of butt-jointing a BOSS system of a radio and television broadband operator with a public security network monitoring system, setting a specific user package in the BOSS system by the BOSS system according to a specific user list of the public security network monitoring, distributing specific IP addresses to specific users in the specific user list by a DHCP system, and forwarding data streams of the specific IP addresses to the public security network monitoring system by a policy route at a broadband outlet, wherein the operator only needs to transmit directional flow at present, the data processing amount is reduced to one dozen ten-thousandth of the original data processing amount, so that the real-time monitoring of network data of the specific users is realized, the public security network monitoring system can greatly reduce the investment of flow monitoring equipment, the equipment and the cost are also greatly reduced, the public security network monitoring system only extracts the network data of the specific users for monitoring, the extraction of the data is intelligentized, and the monitored data flow is greatly reduced, the monitoring effect is guaranteed, meanwhile, the monitoring efficiency is greatly improved, and the equipment cost investment can be greatly reduced.

Drawings

Fig. 1 is a schematic diagram of a raw data directional flow monitoring method.

Fig. 2 is a schematic diagram of a data directional traffic monitoring method according to the present invention.

Detailed Description

As shown in fig. 2, the directional traffic monitoring method is implemented by a directional traffic monitoring system, which includes a public security network monitoring system and a BOSS system communicated with the public security network monitoring system, one end of a policy router is connected to an HFC network, the other end of the policy router is connected to a broadband outlet, the public security network monitoring system and the policy router are interconnected through three layers, and a DHCP system is connected to the HFC network.

The public security network monitoring system establishes a specific user list by monitoring and recording the IP address of the sensitive content browsed in the network and the time period of continuously browsing the sensitive content.

The public security network monitoring system is in butt joint with the BOSS system, namely the BOSS system is authorized by a public security network monitoring team, the three layers of optical fibers are used for directly connecting network equipment of the public security network monitoring system, and a specific user name list is sent to the BOSS system; the BOSS system searches for a corresponding client in the BOSS system according to the IP address of a specific time period in a specific user list, and establishes a specific package for the client, wherein the package is that a set of services and products ordered by the client in the BOSS system is displayed to distinguish user identifications of the services and the products ordered by different users, and the user information of the client is sent to a DHCP system as specific user information; after receiving the information of a specific user, the DHCP system establishes a client class (CLIENTCLASS) for the specific user and allocates a specific IP address section to the client class; after the terminal of a specific user is restarted, the terminal can reallocate the IP address in the specific IP address field to the specific user to replace the original IP address; and setting a policy router to distinguish the data flow of a source IP address belonging to a specific user in the specific IP address field, and forwarding the data flow belonging to the specific user to the public security network monitoring system.

The data directional flow monitoring method comprises the steps of butt-jointing a BOSS system of a broadcasting and television broadband operator with a public security network monitoring system, setting a specific user package in the BOSS system according to a specific user list of the public security network monitoring system by the BOSS system, distributing a specific IP address to a specific user in the specific user list through a DHCP system, and forwards the data flow of these specific IP addresses to the public security network monitoring system through policy routing at the broadband egress, thereby realizing real-time monitoring of network data of specific users, greatly reducing investment of flow monitoring equipment for the public security network monitoring system, realizing intelligentization of data extraction and greatly reducing monitored data flow, the monitoring effect is guaranteed, meanwhile, the monitoring efficiency is greatly improved, and the equipment cost investment can be greatly reduced.

Claims

1. A method for monitoring data directional flow comprises the following steps:

after receiving the information of a specific user of a specific package, a DHCP system creates a client class for the specific user and allocates a specific IP address section to the client class; after the terminal of a specific user is restarted, the terminal can reallocate the IP address in the specific IP address field to the specific user to replace the original IP address;

setting a policy router to distinguish data streams of a source IP address belonging to a specific user in the specific IP address field, and forwarding the data streams to a public security network monitoring system;

the BOSS system establishes the specific package and sets a specific user identifier for the specific user in the specific user list.

2. The method for monitoring data directed traffic of claim 1, wherein: and establishing the specific user list according to the IP address of the sensitive content browsed in a specific time period.