CN110086691A - Data package processing method and device - Google Patents

Abstract

The embodiment of the invention discloses data package processing methods and device.The embodiment of this method includes: the load resolve packet plug-in unit in network package analysis tool；The view networking protocol data packet of designated port is captured by the network package analysis tool；It is parsed to what is captured depending on networking protocol data packet by the resolve packet plug-in unit, generates parsing data；The parsing data are obtained from the resolve packet plug-in unit by the network package analysis tool, and the parsing data are presented in the network package analysis tool.This embodiment improves to view networking protocol data packet treatment effeciency.

Description

Data package processing method and device

Technical field

The present embodiments relate to view networking technology fields, and in particular to data package processing method and device.

Background technique

Network package analysis tool (such as Wireshark) is a kind of tool for capturing network package.The tool can be simultaneously Network package data the most detailed is shown as far as possible.It obtains in general, can use the tool and parses the data in network Packet.

However, current network package analysis tool does not have also to the view networking protocol data packet under view networked environment Parse function, it usually needs when capturing view networking protocol data packet, which is analyzed by worker, It can determine that the content in the view networking protocol data packet.It is lower so as to cause the treatment effeciency to view networking protocol data packet.

Summary of the invention

The embodiment of the present invention proposes data package processing method and device, to solve in the prior art to view networking protocol number According to the lower technical problem of the treatment effeciency of packet.

In a first aspect, this method is applied in view networking the embodiment of the invention provides a kind of data package processing method Server, server are equipped with network package analysis tool, this method comprises: loading data packet in network package analysis tool Parse plug-in unit, wherein resolve packet plug-in unit regards networking protocol data packet for parsing view networking protocol data packet, parsing as base In the data packet of view networking protocol；The view networking protocol data packet of designated port is captured by network package analysis tool；Pass through Resolve packet plug-in unit is parsed to what is captured depending on networking protocol data packet, generates parsing data；Pass through network package point Analysis tool obtains parsing data from resolve packet plug-in unit, and parsing number is presented in the display interface of network package analysis tool According to.

It in some embodiments, include packet header and load data depending on networking protocol data packet；And pass through resolve packet Plug-in unit is parsed to what is captured depending on networking protocol data packet, generates parsing data, comprising: hold by resolve packet plug-in unit Row following steps: the type of captured view networking protocol data packet is read from packet header, wherein the view networking protocol captured The type of data packet includes connection packet, multicast packet, unicast packet；Based on read type, determination is captured View networking protocol data packet type of service and the corresponding parameter of type of service；Load data is parsed, it is corresponding to obtain parameter Parameter value；Type, type of service, parameter value are summarized, parsing data are generated.

In some embodiments, resolve packet plug-in unit is loaded in network package analysis tool, comprising: by data packet solution Analysis plug-in unit is added in the specified directory of network package analysis tool, so that operation data packet when network package analysis tool starts Parse plug-in unit；Start network package analysis tool.

In some embodiments, this method further include: obtain the capture time of captured view networking protocol data packet；It builds Vertical acquisition time and the mapping for parsing data, and storage mapping.

In some embodiments, parsing data are presented in the display interface of network package analysis tool, comprising: preparatory Addition parsing data in the chart of building, and the corresponding capture time of record parsing data in the graph, wherein chart is presented on In the display interface of network package analysis tool.

Second aspect, the embodiment of the invention provides a kind of data packet processing, which is applied in view networking Server, server are equipped with network package analysis tool, and device includes: loading unit, are configured to analyze in network package Resolve packet plug-in unit is loaded in tool, wherein resolve packet plug-in unit is for parsing view networking protocol data packet, parsing view connection FidonetFido data packet is the data packet based on view networking protocol；Capturing unit is configured to catch by network package analysis tool Obtain the view networking protocol data packet of designated port；Resolution unit is configured to through resolve packet plug-in unit to the view captured Networking protocol data packet is parsed, and parsing data are generated；Display unit is configured to through network package analysis tool from number Parsing data are obtained according to Packet analyzing plug-in unit, and parsing data are presented in the display interface of network package analysis tool.

It in some embodiments, include packet header and load data depending on networking protocol data packet；And resolution unit, further It is configured to: following steps being executed by resolve packet plug-in unit: reading captured view networking protocol data packet from packet header Type, wherein the type depending on networking protocol data packet captured includes connection packet, multicast packet, unicast data Packet；Based on read type, the type of service and the corresponding ginseng of type of service of captured view networking protocol data packet are determined Number；Load data is parsed, the corresponding parameter value of parameter is obtained；Type, type of service, parameter value are summarized, parsing is generated Data.

In some embodiments, loading unit, comprising: adding module is configured to for resolve packet plug-in unit being added to In the specified directory of network package analysis tool, so that operation data Packet analyzing plug-in unit when network package analysis tool starts；It opens Dynamic model block is configured to start network package analysis tool.

In some embodiments, device further include: acquiring unit is configured to obtain captured view networking protocol number According to the capture time of packet；Unit is established, be configured to establish acquisition time and parses the mapping of data, and storage mapping.

In some embodiments, display unit is further configured to: the addition parsing data in the chart constructed in advance, And record parses the corresponding capture time of data in the graph, wherein chart is presented on display circle of network package analysis tool In face.

Data package processing method and device provided in an embodiment of the present invention are sealed in network first using the characteristic of view networking Resolve packet plug-in unit is loaded in packet analysis tool, is then networked and is assisted by the view that network package analysis tool captures designated port Data packet is discussed, is parsed later to what is captured depending on networking protocol data packet by resolve packet plug-in unit, parsing number is generated According to finally by network package analysis tool from resolve packet plug-in unit acquisition parsing data, and in network package analysis tool Middle presentation parses data, automatically parses function to depending on networking protocol data packet so as to have network package analysis tool Can, improve the treatment effeciency to view networking protocol data packet.

Detailed description of the invention

By reading a detailed description of non-restrictive embodiments in the light of the attached drawings below, of the invention other Feature, objects and advantages will become more apparent upon:

Fig. 1 is a kind of networking schematic diagram of view networking of the invention；

Fig. 2 is a kind of hardware structural diagram of node server of the invention；

Fig. 3 is a kind of hardware structural diagram of access switch of the invention；

Fig. 4 is the hardware structural diagram that a kind of Ethernet association of the invention turns gateway；

Fig. 5 is the flow chart of data package processing method one embodiment of the invention；

Fig. 6 is the structural schematic diagram of one embodiment of data packet processing of the invention.

Specific embodiment

In order to make the foregoing objectives, features and advantages of the present invention clearer and more comprehensible, with reference to the accompanying drawing and specific real Applying mode, the present invention is described in further detail.

It is the important milestone of network Development depending on networking, is a real-time network, can be realized HD video real-time Transmission, Push numerous Internet applications to HD video, high definition is face-to-face.

Real-time high-definition video switching technology is used depending on networking, it can be such as high in a network platform by required service Clear video conference, Intellectualized monitoring analysis, emergency command, digital broadcast television, delay TV, the Web-based instruction, shows video monitoring Field live streaming, VOD program request, TV Mail, individual character records (PVR), Intranet (manages) channel by oneself, intelligent video Broadcast Control, information publication All be incorporated into a system platform etc. services such as tens of kinds of videos, voice, picture, text, communication, data, by TV or Computer realizes that high-definition quality video plays.

Embodiment in order to enable those skilled in the art to better understand the present invention is introduced to depending on networking below:

Depending on networking, applied portion of techniques is as described below:

Network technology (Network Technology)

Traditional ethernet (Ethernet) is improved depending on the network technology innovation networked, with potential huge on network First video flow.It is exchanged different from simple network packet packet switch (Packet Switching) or lattice network (Circuit Switching) meets Streaming demand using Packet Switching depending on networking technology.Depending on skill of networking Art has flexible, the simple and low price of packet switch, is provided simultaneously with the quality and safety assurance of circuit switching, realizes the whole network friendship Change the seamless connection of formula virtual circuit and data format.

Switching technology (Switching Technology)

Two advantages of asynchronous and packet switch that Ethernet is used depending on networking eliminate Ethernet under the premise of complete compatible and lack It falls into, has the end-to-end seamless connection of the whole network, direct user terminal, directly carrying IP data packet.User data is in network-wide basis It is not required to any format conversion.It is the more advanced form of Ethernet depending on networking, is a real-time exchange platform, can be realized at present mutually The whole network large-scale high-definition realtime video transmission that networking cannot achieve pushes numerous network video applications to high Qinghua, unitizes.

Server technology (Server Technology)

It is different from traditional server, its Streaming Media depending on the server technology in networking and unified video platform Transmission be built upon it is connection-oriented on the basis of, data-handling capacity is unrelated with flow, communication time, single network layer energy Enough transmitted comprising signaling and data.For voice and video business, handled depending on networking and unified video platform Streaming Media Complexity many simpler than data processing, efficiency substantially increase hundred times or more than traditional server.

Reservoir technology (Storage Technology)

The ultrahigh speed reservoir technology of unified video platform in order to adapt to the media content of vast capacity and super-flow and Using state-of-the-art real time operating system, the programme information in server instruction is mapped to specific hard drive space, media Content is no longer pass through server, and moment is directly delivered to user terminal, and user waits typical time less than 0.2 second.It optimizes Sector distribution greatly reduces the mechanical movement of hard disc magnetic head tracking, and resource consumption only accounts for the 20% of the internet ad eundem IP, but The concurrent flow greater than 3 times of traditional disk array is generated, overall efficiency promotes 10 times or more.

Network security technology (Network Security Technology)

Depending on the structural design networked by servicing independent licence system, equipment and the modes such as user data is completely isolated every time The network security problem that puzzlement internet has thoroughly been eradicated from structure, does not need antivirus applet, firewall generally, has prevented black The attack of visitor and virus, structural carefree secure network is provided for user.

It services innovative technology (Service Innovation Technology)

Business and transmission are fused together by unified video platform, whether single user, private user or a net The sum total of network is all only primary automatic connection.User terminal, set-top box or PC are attached directly to unified video platform, obtain rich The multimedia video service of rich colorful various forms.Unified video platform is traditional to substitute with table schema using " menu type " Complicated applications programming, considerably less code, which can be used, can be realized complicated application, realize the new business innovation of " endless ".

Networking depending on networking is as described below:

It is a kind of central controlled network structure depending on networking, which can be Tree Network, Star network, ring network etc. class Type, but centralized control node is needed to control whole network in network on this basis.

As shown in Figure 1, being divided into access net and Metropolitan Area Network (MAN) two parts depending on networking.

The equipment of access mesh portions can be mainly divided into 3 classes: node server, access switch, terminal (including various machines Top box, encoding board, memory etc.).Node server is connected with access switch, and access switch can be with multiple terminal phases Even, and it can connect Ethernet.

Wherein, node server is the node that centralized control functions are played in access net, can control access switch and terminal. Node server can directly be connected with access switch, can also directly be connected with terminal.

Similar, the equipment of metropolitan area mesh portions can also be divided into 3 classes: metropolitan area server, node switch, node serve Device.Metropolitan area server is connected with node switch, and node switch can be connected with multiple node servers.

Wherein, node server is the node server for accessing mesh portions, i.e. node server had both belonged to access wet end Point, and belong to metropolitan area mesh portions.

Metropolitan area server is the node that centralized control functions are played in Metropolitan Area Network (MAN), can control node switch and node serve Device.Metropolitan area server can be directly connected to node switch, can also be directly connected to node server.

It can be seen that be entirely a kind of central controlled network structure of layering depending on networking network, and node server and metropolitan area The network controlled under server can be the various structures such as tree-shaped, star-like, cyclic annular.

Visually claim, access mesh portions can form unified video platform (part in virtual coil), and multiple unified videos are flat Platform can form view networking；Each unified video platform can be interconnected by metropolitan area and wide area depending on networking.

Classify depending on networked devices

1.1 embodiment of the present invention can be mainly divided into 3 classes: server depending on the equipment in networking, interchanger (including ether Net association turns gateway), terminal (including various set-top boxes, encoding board, memory etc.).Metropolitan Area Network (MAN) can be divided on the whole depending on networking (or national net, World Wide Web etc.) and access net.

1.2 equipment for wherein accessing mesh portions can be mainly divided into 3 classes: node server, access switch (including ether Net association turns gateway), terminal (including various set-top boxes, encoding board, memory etc.).

The specific hardware structure of each access network equipment are as follows:

Node server:

As shown in Fig. 2, mainly including Network Interface Module 201, switching engine module 202, CPU module 203, disk array Module 204；

Wherein, Network Interface Module 201, the Bao Jun that CPU module 203, disk array module 204 are come in enter switching engine Module 202；Switching engine module 202 look into the operation of address table 205 to the packet come in, to obtain the navigation information of packet； And the packet is stored according to the navigation information of packet the queue of corresponding pack buffer 206；If the queue of pack buffer 206 is close It is full, then it abandons；All pack buffer queues of 202 poll of switching engine module, are forwarded: 1) end if meeting the following conditions It is less than that mouth sends caching；2) the queue package counting facility is greater than zero.Disk array module 204 mainly realizes the control to hard disk, packet Include the operation such as initialization, read-write to hard disk；CPU module 203 be mainly responsible for access switch, terminal (not shown) it Between protocol processes, to address table 205 (including downlink data packet address table, uplink connection packet address table, data packet Address table) configuration, and, the configuration to disk array module 204.

Access switch:

As shown in figure 3, mainly including Network Interface Module (downstream network interface module 301, uplink network interface module 302), switching engine module 303 and CPU module 304；

Wherein, the packet (upstream data) that downstream network interface module 301 is come in enters packet detection module 305；Packet detection mould Whether mesh way address (DA), source address (SA), type of data packet and the packet length of the detection packet of block 305 meet the requirements, if met, It then distributes corresponding flow identifier (stream-id), and enters switching engine module 303, otherwise abandon；Uplink network interface mould The packet (downlink data) that block 302 is come in enters switching engine module 303；The data packet that CPU module 304 is come in enters switching engine Module 303；Switching engine module 303 look into the operation of address table 306 to the packet come in, to obtain the navigation information of packet； If the packet into switching engine module 303 is that downstream network interface is gone toward uplink network interface, in conjunction with flow identifier (stream-id) packet is stored in the queue of corresponding pack buffer 307；If the queue of the pack buffer 307 is close full, It abandons；If the packet into switching engine module 303 is not that downstream network interface is gone toward uplink network interface, according to packet Navigation information is stored in the data packet queue of corresponding pack buffer 307；If the queue of the pack buffer 307 is close full, Then abandon.

All pack buffer queues of 303 poll of switching engine module, may include two kinds of situations:

If the queue is that downstream network interface is gone toward uplink network interface, meets the following conditions and be forwarded: 1) It is less than that the port sends caching；2) the queue package counting facility is greater than zero；3) token that rate control module generates is obtained；

If the queue is not that downstream network interface is gone toward uplink network interface, meets the following conditions and is forwarded: 1) it is less than to send caching for the port；2) the queue package counting facility is greater than zero.

Rate control module 308 is configured by CPU module 304, to all downlink networks in programmable interval Interface generates token toward the pack buffer queue that uplink network interface is gone, to control the code rate of forwarded upstream.

CPU module 304 is mainly responsible for the protocol processes between node server, the configuration to address table 306, and, Configuration to rate control module 308.

Ethernet association turns gateway:

As shown in figure 4, mainly including Network Interface Module (downstream network interface module 401, uplink network interface module 402), switching engine module 403, CPU module 404, packet detection module 405, rate control module 408, address table 406, Bao Huan Storage 407 and MAC adding module 409, MAC removing module 410.

Wherein, the data packet that downstream network interface module 401 is come in enters packet detection module 405；Packet detection module 405 is examined Ethernet mac DA, ethernet mac SA, Ethernet length or frame type, the view networking mesh way address of measured data packet DA, whether meet the requirements depending on networking source address SA, depending on networking data Packet type and packet length, corresponding stream is distributed if meeting Identifier (stream-id)；Then, MAC DA, MAC SA, length or frame type are subtracted by MAC removing module 410 (2byte), and enter corresponding receive and cache, otherwise abandon；

Downstream network interface module 401 detects the transmission caching of the port, according to the view of packet networking mesh if there is Bao Ze Address D A knows the ethernet mac DA of corresponding terminal, adds the ethernet mac DA of terminal, Ethernet assists the MAC for turning gateway SA, Ethernet length or frame type, and send.

The function that Ethernet association turns other modules in gateway is similar with access switch.

Terminal:

It mainly include Network Interface Module, Service Processing Module and CPU module；For example, set-top box mainly connects including network Mouth mold block, video/audio encoding and decoding engine modules, CPU module；Encoding board mainly includes Network Interface Module, video encoding engine Module, CPU module；Memory mainly includes Network Interface Module, CPU module and disk array module.

The equipment of 1.3 metropolitan area mesh portions can be mainly divided into 2 classes: node server, node switch, metropolitan area server. Wherein, node switch mainly includes Network Interface Module, switching engine module and CPU module；Metropolitan area server mainly includes Network Interface Module, switching engine module and CPU module are constituted.

2, networking data package definition is regarded

2.1 access network data package definitions

Access net data packet mainly include following sections: destination address (DA), source address (SA), reserve bytes, payload(PDU)、CRC。

As shown in the table, the data packet for accessing net mainly includes following sections:

Wherein:

Destination address (DA) is made of 8 bytes (byte), and first character section indicates type (such as the various companies of data packet Connect data packet, multicast packet, unicast packet etc.), be up to 256 kinds of possibility, the second byte to the 6th byte is Metropolitan Area Network (MAN) Address, the seven, the 8th bytes are access net address；

Source address (SA) is also to be made of 8 bytes (byte), is defined identical as destination address (DA)；

Reserve bytes are made of 2 bytes；

The part payload has different length according to the type of different data packets, if it is various connection packets Words are 64 bytes, are 32+1024=1056 bytes if it is single group unicast packets words, are not restricted to above 2 certainly Kind；

CRC is made of 4 bytes, and calculation method follows the Ethernet CRC algorithm of standard.

2.2 Metropolitan Area Network (MAN) packet definitions

The topology of Metropolitan Area Network (MAN) is pattern, may there is 2 kinds, connection even of more than two kinds, i.e. node switching between two equipment It can all can exceed that 2 kinds between machine and node server, node switch and node switch, node switch and node server Connection.But the metropolitan area net address of metropolitan area network equipment is uniquely, to close to accurately describe the connection between metropolitan area network equipment System, introduces parameter in embodiments of the present invention: label, uniquely to describe a metropolitan area network equipment.

(Multi-Protocol Label Switch, multiprotocol label are handed over by the definition of label and MPLS in this specification Change) label definition it is similar, it is assumed that between equipment A and equipment B there are two connection, then data packet from equipment A to equipment B just There are 2 labels, data packet also there are 2 labels from equipment B to equipment A.Label is divided into label, outgoing label, it is assumed that data packet enters The label (entering label) of equipment A is 0x0000, and the label (outgoing label) when this data packet leaves equipment A may reform into 0x0001.The networking process of Metropolitan Area Network (MAN) is to enter network process under centralized control, also means that address distribution, the label of Metropolitan Area Network (MAN) Distribution be all to be dominated by metropolitan area server, node switch, node server be all passively execute, this point with The label distribution of MPLS is different, and the distribution of the label of MPLS is the result that interchanger, server are negotiated mutually.

As shown in the table, the data packet of Metropolitan Area Network (MAN) mainly includes following sections:

That is destination address (DA), source address (SA), reserve bytes (Reserved), label, payload (PDU), CRC.Its In, the format of label, which can refer to, such as gives a definition: label is 32bit, wherein high 16bit retains, only with low 16bit, its position Set is between the reserve bytes and payload of data packet.

Based on the above-mentioned characteristic of view networking, one of the core concepts of the embodiments of the present invention is proposed, it then follows regard the association of networking View loads resolve packet plug-in unit first in above-mentioned network package analysis tool, then analyzes work by above-mentioned network package The view networking protocol data packet of tool capture designated port, later by above-mentioned resolve packet plug-in unit to the view networking association captured View data packet is parsed, and parsing data are generated, and is inserted finally by above-mentioned network package analysis tool from above-mentioned resolve packet Part obtains above-mentioned parsing data, and above-mentioned parsing data are presented in above-mentioned network package analysis tool.

With continued reference to Fig. 5, it illustrates the processes 500 of one embodiment of data package processing method according to the present invention. This method can be applied to view networking in server, above-mentioned server be equipped with network package analysis tool (such as Wireshark)。

In practice, network package analysis tool is a kind of tool for capturing network package.The tool can and be shown as far as possible Network package data the most detailed is shown.

Herein, above-mentioned server can be the server that operation has linux system.View can also have been run in the server Networking program etc., to carry out sending and receiving depending on networking protocol data packet.

This method can specifically include following steps:

Step 501, resolve packet plug-in unit is loaded in network package analysis tool.

In the present embodiment, the executing subject (such as depending on above-mentioned server in networking) of data package processing method can be Resolve packet plug-in unit is loaded in network package analysis tool.Wherein, resolve packet plug-in unit can be used for parsing view networking association Discuss data packet.Above-mentioned parsing regards networking protocol data packet as the data packet based on view networking protocol (such as V2V agreement).

In practice, what above-mentioned resolve packet plug-in unit can be developed in advance with technical staff can be for view networking protocol data Wrap the program parsed.Herein, resolve packet plug-in unit is loaded in network package analysis tool, can be in above-mentioned network The resolve packet plug-in unit is installed, in order to which in the starting of above-mentioned network package analysis tool, operation should in package analysis tool Resolve packet plug-in unit.

In some optional implementations of the present embodiment, above-mentioned executing subject can be sealed in network as follows Resolve packet plug-in unit is loaded in packet analysis tool: above-mentioned resolve packet plug-in unit is added to above-mentioned network package by the first step In the specified directory (such as catalogue that each plug-in unit for being run is located at when starting) of analysis tool, so that above-mentioned network package point Above-mentioned resolve packet plug-in unit is run when analysing instrument start-up.Second step starts above-mentioned network package analysis tool.

Step 502, the view networking protocol data packet of designated port is captured by network package analysis tool.

In the present embodiment, since above-mentioned network package analysis tool (such as Wireshark) can capture network package, Therefore, it is possible to capture the data packet of designated port by the network package analysis tool.It is understood that above-mentioned designated port It can be the corresponding port of service for view networking protocol, thus, the data packet of the port can be view networking protocol data Packet.

It should be noted that above-mentioned depending on may include the information such as source address, destination address in networking protocol data packet.Its In, above-mentioned source address can be the address for being used to indicate and uniquely determining the equipment for sending above-mentioned view networking protocol data packet, mark Know, number etc..Above-mentioned purpose address can be the equipment for being used to indicate and uniquely determining and receive above-mentioned view networking protocol data packet Address, mark, number etc..

It should be pointed out that above-mentioned depending on that can also include other information, such as reserve bytes, mark in networking protocol data packet Knowledge, payload (PDU), CRC (Cyclic Redundancy Check, cyclic redundancy check) etc..

Step 503, it is parsed to what is captured depending on networking protocol data packet by resolve packet plug-in unit, generates parsing Data.

In the present embodiment, since network package analysis tool has loaded resolve packet plug-in unit, it can be by upper It states resolve packet plug-in unit to parse to what is captured depending on networking protocol data packet, generates parsing data.Herein, to being captured Parsed depending on networking protocol data packet, can be and extract important information (such as source from the view networking protocol data packet Location, destination address, the type etc. for regarding networking protocol data packet) process.

In practice, there is specific pack arrangement and Bao Yuansu depending on networking protocol data packet, therefore, it is possible to for view networking association The pack arrangement and Bao Yuansu for discussing data, from this depending on extracting important information in networking protocol data packet.As an example, view networking protocol It may include the information such as destination address and source address in data packet.In general, destination address is made of 8 bytes, first character section Indicate the type (such as various connection packets, multicast packet, unicast packet etc.) of view networking protocol data packet, as a result, If desired determine view networking protocol data packet type, can by above-mentioned resolve packet plug-in unit identifying purpose address first, The first character section in destination address is then read, so that it is determined that view networking protocol data packet indicated by first character section out Type.

It may include packet header and load number depending on networking protocol data packet in some optional implementations of the present embodiment According to.Above-mentioned executing subject can execute following steps by above-mentioned resolve packet plug-in unit:

The first step reads the type of captured view networking protocol data packet from above-mentioned packet header.Wherein, the view captured The type of networking protocol data packet can include but is not limited to connection packet, multicast packet, unicast packet.

Second step is based on read type, determine captured view networking protocol data packet type of service (such as with Family logs in) and the corresponding parameter of above-mentioned type of service (such as username and password).Herein, the view networking protocol of different types Data packet can be corresponding with different types of service, each type of service can be corresponding with one or more parameters.

Third step parses above-mentioned load data, obtains the corresponding parameter value of above-mentioned parameter.

4th step summarizes the above-mentioned type, above-mentioned type of service, above-mentioned parameter value, generates parsing data.

Step 504, parsing data are obtained from resolve packet plug-in unit by network package analysis tool, and in network package Parsing data are presented in the display interface of analysis tool.

In the present embodiment, above-mentioned executing subject can be by above-mentioned network package analysis tool from above-mentioned resolve packet Parsing data are obtained at plug-in unit, and parsing data are presented in the display interface of network package analysis tool.

In some optional implementations of the present embodiment, above-mentioned executing subject can also obtain captured view networking The capture time (such as in capture depending on being recorded in advance to capture time when networking protocol data packet) of protocol data packet；And Afterwards, establish the mapping of above-mentioned acquisition time Yu above-mentioned parsing data, and store above-mentioned mapping, in order to according to capture time by elder generation Sequence after carries out the presentation of parsing data.

It can be in some optional implementations of the present embodiment, in the display interface of above-mentioned network package analysis tool Present the chart constructed in advance.Above-mentioned executing subject can add above-mentioned parsing data in the chart, and in above-mentioned chart In record the corresponding capture time of above-mentioned parsing data, thus realize above-mentioned parsing is presented in above-mentioned network package analysis tool Data.

In embodiments of the present invention, by loading resolve packet plug-in unit in above-mentioned network package analysis tool, then The view networking protocol data packet that designated port is captured by above-mentioned network package analysis tool, passes through above-mentioned resolve packet later Plug-in unit is parsed to what is captured depending on networking protocol data packet, is generated parsing data, is analyzed finally by above-mentioned network package Tool obtains above-mentioned parsing data from above-mentioned resolve packet plug-in unit, and above-mentioned solution is presented in above-mentioned network package analysis tool Analysis data do not need so as to make network package analysis tool have the function of to automatically parse to depending on networking protocol data packet Other equipment are transmitted to depending on networking protocol data packet parse, also do not need what is captured manually to be parsed, improve To the treatment effeciency of view networking protocol data packet.

It should be noted that for simple description, therefore, it is stated as a series of action groups for embodiment of the method It closes, but those skilled in the art should understand that, embodiment of that present invention are not limited by the describe sequence of actions, because according to According to the embodiment of the present invention, some steps may be performed in other sequences or simultaneously.Secondly, those skilled in the art also should Know, the embodiments described in the specification are all preferred embodiments, and the related movement not necessarily present invention is implemented Necessary to example.

With further reference to Fig. 6, the structural schematic diagram of one embodiment of the data packet processing of Ben Fanming is shown, it should Device can be applied in view networking.

As shown in fig. 6, data packet processing 600 described in the present embodiment includes: loading unit 601, it is configured to Resolve packet plug-in unit is loaded in above-mentioned network package analysis tool, wherein above-mentioned resolve packet plug-in unit is for parsing view connection FidonetFido data packet, above-mentioned parsing regard networking protocol data packet as the data packet based on view networking protocol；Capturing unit 602, quilt It is configured to capture the view networking protocol data packet of designated port by above-mentioned network package analysis tool；Resolution unit 603 is matched It is set to and is parsed to what is captured depending on networking protocol data packet by above-mentioned resolve packet plug-in unit, generate parsing data；It is in Existing unit 604 is configured to obtain above-mentioned parsing number from above-mentioned resolve packet plug-in unit by above-mentioned network package analysis tool According to, and above-mentioned parsing data are presented in the display interface of above-mentioned network package analysis tool.

It include packet header and load data depending on networking protocol data packet in some optional implementations of the present embodiment； And above-mentioned resolution unit 603 can be further configured to: being passed through above-mentioned resolve packet plug-in unit and executed following steps: from upper State the type that captured view networking protocol data packet is read in packet header, wherein the class of the view networking protocol data packet captured Type includes connection packet, multicast packet, unicast packet；Based on read type, determines that captured view is networked and assist Discuss the type of service and the corresponding parameter of above-mentioned type of service of data packet；Above-mentioned load data is parsed, it is corresponding to obtain above-mentioned parameter Parameter value；The above-mentioned type, above-mentioned type of service, above-mentioned parameter value are summarized, parsing data are generated.

In some optional implementations of the present embodiment, above-mentioned loading unit 601 may include: adding module, quilt It is configured in the specified directory that above-mentioned resolve packet plug-in unit is added to above-mentioned network package analysis tool, so that above-mentioned network Package analysis tool runs above-mentioned resolve packet plug-in unit when starting；Starting module is configured to start above-mentioned network package point Analysis tool.

In some optional implementations of the present embodiment, which can also include: acquiring unit, be configured to obtain Take the capture time of captured view networking protocol data packet；Establish unit, be configured to establish above-mentioned acquisition time with it is above-mentioned The mapping of data is parsed, and stores above-mentioned mapping.

In some optional implementations of the present embodiment, above-mentioned display unit 604 can be further configured to: When adding above-mentioned parsing data in the chart constructed in advance, and recording in above-mentioned chart the corresponding capture of above-mentioned parsing data Between, wherein above-mentioned chart is presented in the display interface of above-mentioned network package analysis tool.

For device embodiment, since it is basically similar to the method embodiment, related so being described relatively simple Place illustrates referring to the part of embodiment of the method.

All the embodiments in this specification are described in a progressive manner, the highlights of each of the examples are with The difference of other embodiments, the same or similar parts between the embodiments can be referred to each other.

It should be understood by those skilled in the art that, the embodiment of the embodiment of the present invention can provide as method, apparatus or calculate Machine program product.Therefore, the embodiment of the present invention can be used complete hardware embodiment, complete software embodiment or combine software and The form of the embodiment of hardware aspect.Moreover, the embodiment of the present invention can be used one or more wherein include computer can With in the computer-usable storage medium (including but not limited to magnetic disk storage, CD-ROM, optical memory etc.) of program code The form of the computer program product of implementation.

The embodiment of the present invention be referring to according to the method for the embodiment of the present invention, terminal device (system) and computer program The flowchart and/or the block diagram of product describes.It should be understood that flowchart and/or the block diagram can be realized by computer program instructions In each flow and/or block and flowchart and/or the block diagram in process and/or box combination.It can provide these Computer program instructions are set to general purpose computer, special purpose computer, Embedded Processor or other programmable data processing terminals Standby processor is to generate a machine, so that being held by the processor of computer or other programmable data processing terminal devices Capable instruction generates for realizing in one or more flows of the flowchart and/or one or more blocks of the block diagram The device of specified function.

These computer program instructions, which may also be stored in, is able to guide computer or other programmable data processing terminal devices In computer-readable memory operate in a specific manner, so that instruction stored in the computer readable memory generates packet The manufacture of command device is included, which realizes in one side of one or more flows of the flowchart and/or block diagram The function of being specified in frame or multiple boxes.

These computer program instructions can also be loaded into computer or other programmable data processing terminal devices, so that Series of operation steps are executed on computer or other programmable terminal equipments to generate computer implemented processing, thus The instruction executed on computer or other programmable terminal equipments is provided for realizing in one or more flows of the flowchart And/or in one or more blocks of the block diagram specify function the step of.

Although the preferred embodiment of the embodiment of the present invention has been described, once a person skilled in the art knows bases This creative concept, then additional changes and modifications can be made to these embodiments.So the following claims are intended to be interpreted as Including preferred embodiment and fall into all change and modification of range of embodiment of the invention.

Finally, it is to be noted that, herein, relational terms such as first and second and the like be used merely to by One entity or operation are distinguished with another entity or operation, without necessarily requiring or implying these entities or operation Between there are any actual relationship or orders.Moreover, the terms "include", "comprise" or its any other variant meaning Covering non-exclusive inclusion, so that process, method, article or terminal device including a series of elements not only wrap Those elements are included, but also including other elements that are not explicitly listed, or further includes for this process, method, article Or the element that terminal device is intrinsic.In the absence of more restrictions, being wanted by what sentence "including a ..." limited Element, it is not excluded that there is also other identical elements in process, method, article or the terminal device for including the element.

Above to a kind of data package processing method provided by the present invention and a kind of data packet processing, carry out in detail It introduces, used herein a specific example illustrates the principle and implementation of the invention, the explanation of above embodiments It is merely used to help understand method and its core concept of the invention；At the same time, for those skilled in the art, according to this The thought of invention, there will be changes in the specific implementation manner and application range, in conclusion the content of the present specification is not answered It is interpreted as limitation of the present invention.

Claims (10)

1. a kind of data package processing method, which is characterized in that the method is applied to the server in view networking, the server Network package analysis tool is installed, which comprises

Resolve packet plug-in unit is loaded in the network package analysis tool, wherein the resolve packet plug-in unit is for solving Analysis view networking protocol data packet, the parsing regard networking protocol data packet as the data packet based on view networking protocol；

The view networking protocol data packet of designated port is captured by the network package analysis tool；

It is parsed to what is captured depending on networking protocol data packet by the resolve packet plug-in unit, generates parsing data；

The parsing data are obtained from the resolve packet plug-in unit by the network package analysis tool, and in the network The parsing data are presented in the display interface of package analysis tool.

2. data package processing method according to claim 1, which is characterized in that depending on networking protocol data packet include packet header and Load data；And

It is described to be parsed to what is captured depending on networking protocol data packet by the resolve packet plug-in unit, generate parsing number According to, comprising:

Following steps are executed by the resolve packet plug-in unit:

The type of captured view networking protocol data packet is read from the packet header, wherein the class of view networking protocol data packet Type includes connection packet, multicast packet, unicast packet；

Based on read type, determine that the type of service of captured view networking protocol data packet and the type of service are corresponding Parameter；

The load data is parsed, the corresponding parameter value of the parameter is obtained；

The type, the type of service, the parameter value are summarized, parsing data are generated.

3. data package processing method according to claim 1, which is characterized in that described in the network package analysis tool Middle load resolve packet plug-in unit, comprising:

The resolve packet plug-in unit is added in the specified directory of the network package analysis tool, so that the network seals Packet analysis tool runs the resolve packet plug-in unit when starting；

Start the network package analysis tool.

4. data package processing method according to claim 1, which is characterized in that the method also includes:

Obtain the capture time of captured view networking protocol data packet；

The mapping of the acquisition time and the parsing data is established, and stores the mapping.

5. data package processing method according to claim 4, which is characterized in that described in the network package analysis tool Display interface in the parsing data are presented, comprising:

The parsing data are added in the chart constructed in advance, and record in the chart that the parsing data are corresponding to catch Obtain the time, wherein the chart is presented in the display interface of the network package analysis tool.

6. a kind of data packet processing, which is characterized in that described device is applied to the server in view networking, the server Network package analysis tool is installed, described device includes:

Loading unit is configured to load resolve packet plug-in unit in the network package analysis tool, wherein the data Packet analyzing plug-in unit regards networking protocol data packet for parsing view networking protocol data packet, the parsing as based on view networking protocol Data packet；

Capturing unit is configured to capture the view networking protocol data packet of designated port by the network package analysis tool；

Resolution unit is configured to solve to what is captured depending on networking protocol data packet by the resolve packet plug-in unit Analysis generates parsing data；

Display unit is configured to obtain the parsing from the resolve packet plug-in unit by the network package analysis tool Data, and the parsing data are presented in the display interface of the network package analysis tool.

7. data packet processing according to claim 6, which is characterized in that depending on networking protocol data packet include packet header and Load data；And

The resolution unit, is further configured to:

Following steps are executed by the resolve packet plug-in unit:

The type of captured view networking protocol data packet is read from the packet header, wherein the view networking protocol number captured Type according to packet includes connection packet, multicast packet, unicast packet；

Based on read type, determine that the type of service of captured view networking protocol data packet and the type of service are corresponding Parameter；

The load data is parsed, the corresponding parameter value of the parameter is obtained；

The type, the type of service, the parameter value are summarized, parsing data are generated.

8. data packet processing according to claim 6, which is characterized in that the loading unit, comprising:

Adding module is configured to for the resolve packet plug-in unit being added to the specified directory of the network package analysis tool In, so that the network package analysis tool runs the resolve packet plug-in unit when starting；

Starting module is configured to start the network package analysis tool.

9. data packet processing according to claim 6, which is characterized in that described device further include:

Acquiring unit is configured to obtain the capture time of captured view networking protocol data packet；

Unit is established, is configured to establish the mapping of the acquisition time and the parsing data, and stores the mapping.

10. data packet processing according to claim 9, which is characterized in that the display unit is further configured At:

The parsing data are added in the chart constructed in advance, and record in the chart that the parsing data are corresponding to catch Obtain the time, wherein the chart is presented in the display interface of the network package analysis tool.