CN110380914A - A kind of flux monitoring method and system - Google Patents
A kind of flux monitoring method and system Download PDFInfo
- Publication number
- CN110380914A CN110380914A CN201910778233.7A CN201910778233A CN110380914A CN 110380914 A CN110380914 A CN 110380914A CN 201910778233 A CN201910778233 A CN 201910778233A CN 110380914 A CN110380914 A CN 110380914A
- Authority
- CN
- China
- Prior art keywords
- data
- network equipment
- port
- flows
- record file
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/02—Standardisation; Integration
- H04L41/0213—Standardised network management protocols, e.g. simple network management protocol [SNMP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/04—Processing captured monitoring data, e.g. for logfile generation
- H04L43/045—Processing captured monitoring data, e.g. for logfile generation for graphical visualisation of monitoring data
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
- H04L43/0894—Packet rate
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Mining & Analysis (AREA)
- Environmental & Geological Engineering (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
Abstract
The embodiment of the present invention provides a kind of flux monitoring method and system, comprising: each network equipment for needing to monitor of S1. poll acquires the data on flows of the designated port of each network equipment；S2. the data on flows of collected each designated port is stored into corresponding discharge record file.The present invention can record the traffic timing for needing the port of the network equipment monitored, the flow mib information unification of different vendor's equipment is stored as discharge record file, and each port and each discharge record file are corresponded, both the initial data of the port had been remained, the derivation program of rear end can be allowed to export data on flows with unified standard again, more adaptation IPv6 network；Meanwhile data derived from the program of rear end are the data of the discharge record file recorded, no longer need to be read out port data, when the network equipment of monitoring is more, can fast and easily read required data, improve the maintenance efficiency of monitoring system.
Description
Technical field
The present invention relates to Internet technical field more particularly to a kind of flux monitoring method and systems.
Background technique
Internet data center (Internet Data Center) abbreviation IDC is exactly telecommunication department using existing
Internet communication route, bandwidth resources, establish standardized telecommunication field grade building environment, provide server for enterprise, government
The all-around service of trustship, rental and related increment etc..In the service of offer, need to flow used in client into
Row real time monitoring.
IPv6 network formally starts within 2012, to substitute original IPv4 network, to solve the address money of IPv4 network
The limited problem in source.But IPv6 is as the network service disposed in recent years, also in the network rebuilding stage, relative to using the time
Longer, standard relative maturity IPv4 network, there is also very big difference, each device manufacturer's specifications for the address structure of IPv6 agreement
With the disunity of standard, the flow mib information of each vendor equipment is caused to be different.Current monitoring system is based on IPv4's
Mib infologic carries out the monitoring of the network equipment, cannot well adapt to IPv6 network.For example, due to the address size of IPv6
Increase, the open ended IP address quantity of subnet section increases, and when carrying out traffic monitoring, to consider multiaddress data and asks a question
Topic.Simultaneously as monitoring device increases, the address of maintenance is increased, when carrying out the traffic monitoring of equipment, if still using
If the monitoring method of IPv4 network, the problems such as maintenance efficiency is low will lead to.
In view of the above-mentioned problems, currently no effective solution has been proposed.
Summary of the invention
The embodiment of the present invention provides a kind of flux monitoring method and system, to realize efficiently to each end of the network equipment
The flow of mouth is monitored.
On the one hand, the embodiment of the invention provides a kind of flux monitoring methods, comprising:
S1. each network equipment for needing to monitor of poll, acquires the data on flows of the designated port of each network equipment；
S2. the data on flows of collected each designated port is stored into corresponding discharge record file.
Further, before step S1 further include:
S0. the address ip of the network equipment is inputted, and opens the snmp permission of the network equipment.
Further, after step S0 further include:
S01. all of the port of the network equipment is scanned, adds the designated port.
Further, the data traffic of each designated port of acquisition described in the step S1, comprising:
It is acquired using the data on flows of the double frequency acquisition mode to the designated port.
Further, after the step S2 further include:
S3. the discharge record file is exported, and flow is drawn according to the data on flows in the discharge record file
Figure.
On the other hand, the embodiment of the invention provides a kind of flux monitoring systems, comprising:
Acquisition module for each network equipment for needing to monitor of poll, and acquires the designated port of each network equipment
Data on flows；
Memory module, for the data on flows of collected each designated port to be stored into corresponding discharge record file
In.
Further, further includes:
Equipment adding module inputs the address ip of the network equipment, and open for adding the network equipment for needing to monitor
Lead to the snmp permission of the network equipment.
Further, the equipment adding module includes:
Port adding unit is scanned for all of the port to the network equipment, adds the designated port.
Further, when the acquisition module acquires the data on flows of each designated port, using double frequency acquisition side
Formula is acquired the data on flows of the designated port.
Further, further includes:
Export module, for exporting the discharge record file, and according to the data on flows in the discharge record file
Draw flow diagram.
Above-mentioned technical proposal has the following beneficial effects:
A kind of flux monitoring method provided in an embodiment of the present invention and system, can be by the port for the network equipment for needing to monitor
Traffic timing is recorded, and the flow mib information unification of different vendor's equipment is stored as discharge record file, and by each end
It mouthful is corresponded with each discharge record file, had not only remained the initial data of the port, but also can allow the export journey of rear end
Sequence is exported data on flows with unified standard, avoids rear end journey caused by the disunity because of each device manufacturer's codes and standards
The data of sequence export many and diverse process, more adaptation IPv6 network；Meanwhile data derived from the program of rear end be recorded it is described
The data of discharge record file no longer need to be read out port data, in IPv6 network, when the network equipment that need to be monitored compared with
When more, required data can be fast and easily read, the maintenance efficiency of monitoring system is improved.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below
There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is only this
Some embodiments of invention for those of ordinary skill in the art without creative efforts, can be with
It obtains other drawings based on these drawings.
Fig. 1 is a kind of flow chart of flux monitoring method according to embodiments of the present invention；
Fig. 2 is each flow chart needed before the network equipment that monitors of step S1 poll according to embodiments of the present invention；
Fig. 3 is a kind of structural block diagram of flux monitoring system according to embodiments of the present invention；
Fig. 4 be according to embodiments of the present invention described in equipment adding module structural block diagram.
Specific embodiment
Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete
Site preparation description, it is clear that described embodiments are only a part of the embodiments of the present invention, instead of all the embodiments.It is based on
Embodiment in the present invention, it is obtained by those of ordinary skill in the art without making creative efforts every other
Embodiment shall fall within the protection scope of the present invention.
Firstly, the part noun or term that occur during the embodiment of the present application is described are suitable for following solution
It releases:
Rrdtool: for handling rrd database, storage can be carried out to rrd database and extracts the operation such as data.
Rrd:rrd database is an annular database, and file size is fixed.
Snmp: the network management standard based on TCP/IP protocol suite, full name are Simple Network Management Protocol, by one group of network
The standard of management forms, and can support network comprising an application layer protocol, database model and one group of resource object, the agreement
Whether management system has monitoring the equipment being connected on network and any causes the case where managing upper concern.
A kind of tool of snmpwalk:snmp agreement can check the information for supporting the equipment of snmp protocol.
Embodiment 1:
A kind of flux monitoring method as shown in Figure 1 and Figure 2, comprising:
S1. each network equipment for needing to monitor of poll, acquires the data on flows of the designated port of each network equipment；
Training in rotation is carried out to each network equipment for needing to monitor using training in rotation detection script, and is acquired in each network equipment
The data on flows of specified port writes training in rotation detection script using python, and combine in a kind of wherein embodiment
Udp6 parameter obtains the data on flows of the network equipment using IPv6 network in snmpwalk tool.
S2. the data on flows of collected each designated port is stored into corresponding discharge record file.
After training in rotation detection script collects the data on flows of each designated port, by data on flows storage to
In the corresponding discharge record file of the designated port, in a kind of wherein embodiment, the discharge record file is rrd text
Part, training in rotation detect script by rrdtool tool, the data on flows are deposited into the corresponding rrd file in the port.
Before step S1 further include:
S0. the address ip of the network equipment is inputted, and opens the snmp permission of the network equipment.
In the present embodiment, the address ip of the newly-increased network equipment is inputted, the network equipment is added to monitoring column
In table, and the information of the network equipment is stored in the database in the form of list, meanwhile, open the network equipment
Snmp permission, to guarantee that training in rotation detection script can collect the data on flows of the designated port of the network equipment,
In one of embodiment, when increasing the network equipment newly, training in rotation detects script and sends test data by snmp agreement
Packet judges whether the network equipment opens the reading permission of snmp agreement by the return value of the detection network equipment,
If return value is No Response, then it is assumed that need to open reading permission.If having opened reading permission, continue open-minded
SnmpCommunity, to use the IPv6 mode in snmpwalk tool.
After step S0 further include:
S01. all of the port of the network equipment is scanned, adds the designated port.
In the present embodiment, training in rotation detection script is scanned all of the port of the newly-increased network equipment, need to
The port to be monitored is added in watch-list, meanwhile, training in rotation detects script and newly-increased needs to monitor to each using rrdtool
Port create in corresponding discharge record file (i.e. rrd file), and save the relationship of discharge record file and port, make
Rrd file and the port correspond.
The data traffic of each designated port of acquisition described in the step S1, comprising:
It is acquired using the data on flows of the double frequency acquisition mode to the designated port.
In a kind of wherein embodiment, training in rotation detects script and carries out double frequency to the data on flows of the designated port
Acquisition, in the present embodiment, the frequency of double frequency acquisition are 1min and 5min, by acquiring the data on flows of two different frequencies,
The data on flows of double frequency can voluntarily judge whether the data read are wrong, can increase the accuracy of data.
After the step S2 further include:
S3. the discharge record file is exported, and flow is drawn according to the data on flows in the discharge record file
Figure.
In the present embodiment, the data in the discharge record file are written to database, and draw required time section
Interior flow diagram can be transferred directly from database when needing the data on flows of some port of some network equipment.
A kind of flux monitoring method provided in this embodiment can determine the flow for needing the port of the network equipment monitored
The flow mib information unification of different vendor's equipment is stored as discharge record file by Shi Jinhang record, and by each port and often
A discharge record file corresponds, and has not only remained the initial data of the port, but also the derivation program of rear end can be allowed to unite
One standard exports data on flows, avoids the number of rear end program caused by the disunity because of each device manufacturer's codes and standards
According to many and diverse process is exported, IPv6 network is more adapted to；Meanwhile data derived from the program of rear end are the flow note recorded
The data for recording file, no longer need to be read out port data, in IPv6 network, when the network equipment that need to be monitored is more,
Required data can be fast and easily read, the maintenance efficiency of monitoring system is improved.
Embodiment 2:
A kind of flux monitoring system as shown in Figure 3, Figure 4, comprising:
Acquisition module 1 for each network equipment for needing to monitor of poll, and acquires the described specified of each network equipment
The data on flows of port；
The acquisition module 1 carries out training in rotation to each network equipment for needing to monitor, and acquires each network equipment middle finger
The data on flows of fixed port, in a kind of wherein embodiment, the acquisition module 1 writes training in rotation detection foot using python
This, and the data on flows for using the network equipment of IPv6 network is obtained in conjunction with udp6 parameter in snmpwalk tool.
Memory module 2 is remembered for the data on flows of collected each designated port to be stored into corresponding flow
It records in file.
The memory module 2, will be described after the data on flows that the acquisition module 1 collects each designated port
Data on flows is stored into discharge record file corresponding with the designated port, in a kind of wherein embodiment, the stream
Amount record file is rrd file, and the data on flows is deposited into the port by rrdtool tool by the acquisition module 1
In corresponding rrd file.
Further include:
Equipment adding module 3, the network equipment monitored for adding needs, inputs the address ip of the network equipment, and
Open the snmp permission of the network equipment.
In the present embodiment, the address ip of the newly-increased network equipment is input in the equipment adding module 3, it is described
The network equipment is added in watch-list by equipment adding module 3, and by the information of the network equipment with the shape of list
Formula stores in the database, meanwhile, the equipment adding module 3 opens the snmp permission of the network equipment, described in guaranteeing
Acquisition module 1 can collect the data on flows of the designated port of the network equipment, in a kind of wherein embodiment,
When increasing the network equipment newly, the equipment adding module 3 sends test data packet by snmp agreement, by described in detection
The return value of the network equipment, judges whether the network equipment opens the reading permission of snmp agreement, if return value is No
Response, then it is assumed that need to open reading permission.If having opened reading permission, continue to open snmpCommunity, thus
Use the IPv6 mode in snmpwalk tool.
The equipment adding module includes:
Port adding unit 31 is scanned for all of the port to the network equipment, adds the designated port.
In the present embodiment, the port adding unit 31 sweeps all of the port of the newly-increased network equipment
It retouches, the port monitored will be needed to be added in watch-list, meanwhile, the port adding unit 31 is using rrdtool to each
Port that newly-increased needs monitor creates in corresponding discharge record file (i.e. rrd file), and save discharge record file with
The relationship of port corresponds rrd file and the port.
When the acquisition module 1 acquires the data on flows of each designated port, using double frequency acquisition mode to described
The data on flows of designated port is acquired.
In a kind of wherein embodiment, the acquisition module 1 carries out the data on flows of the designated port double
Frequency acquires, and in the present embodiment, the frequency of double frequency acquisition is 1min and 5min, acquires two differences by the acquisition module 1
The data on flows of frequency, the data on flows of double frequency can voluntarily judge whether the data read are wrong, can increase data
Accuracy.
Further include:
Export module 4, for exporting the discharge record file, and according to the data on flows in the discharge record file
Draw flow diagram
In the present embodiment, the data in the discharge record file are written to database by the export module 4, and draw institute
The flow diagram to take time in section can be directly from database when needing the data on flows of some port of some network equipment
It transfers.
A kind of flux monitoring system provided in this embodiment can determine the flow for needing the port of the network equipment monitored
The flow mib information unification of different vendor's equipment is stored as discharge record file by Shi Jinhang record, and by each port and often
A discharge record file corresponds, and has not only remained the initial data of the port, but also the derivation program of rear end can be allowed to unite
One standard exports data on flows, avoids the number of rear end program caused by the disunity because of each device manufacturer's codes and standards
According to many and diverse process is exported, IPv6 network is more adapted to；Meanwhile data derived from the program of rear end are the flow note recorded
The data for recording file, no longer need to be read out port data, in IPv6 network, when the network equipment that need to be monitored is more,
Required data can be fast and easily read, the maintenance efficiency of monitoring system is improved.
Above-described specific embodiment has carried out further the purpose of the present invention, technical scheme and beneficial effects
It is described in detail, it should be understood that being not intended to limit the present invention the foregoing is merely a specific embodiment of the invention
Protection scope, all within the spirits and principles of the present invention, any modification, equivalent substitution, improvement and etc. done should all include
Within protection scope of the present invention.
Claims (10)
1. a kind of flux monitoring method characterized by comprising
S1. each network equipment for needing to monitor of poll, acquires the data on flows of the designated port of each network equipment；
S2. the data on flows of collected each designated port is stored into corresponding discharge record file.
2. a kind of flux monitoring method as described in claim 1, which is characterized in that before step S1 further include:
S0. the address ip of the network equipment is inputted, and opens the snmp permission of the network equipment.
3. a kind of flux monitoring method as claimed in claim 2, which is characterized in that after step S0 further include:
S01. all of the port of the network equipment is scanned, adds the designated port.
4. a kind of flux monitoring method as described in claim 1, which is characterized in that each institute of acquisition described in the step S1
State the data traffic of designated port, comprising:
It is acquired using the data on flows of the double frequency acquisition mode to the designated port.
5. a kind of flux monitoring method as described in claim 1, which is characterized in that after the step S2 further include:
S3. the discharge record file is exported, and flow is drawn according to the data on flows in the discharge record file
Figure.
6. a kind of flux monitoring system characterized by comprising
Acquisition module, each network equipment for needing to monitor of poll, and acquire the stream of the designated port of each network equipment
Measure data；
Memory module, for the data on flows of collected each designated port to be stored into corresponding discharge record file
In.
7. a kind of flux monitoring system as claimed in claim 6, which is characterized in that further include:
Equipment adding module inputs the address ip of the network equipment, and open for adding the network equipment for needing to monitor
Lead to the snmp permission of the network equipment.
8. a kind of flux monitoring system as claimed in claim 7, which is characterized in that the equipment adding module includes:
Port adding unit is scanned for all of the port to the network equipment, adds the designated port.
9. a kind of flux monitoring system as claimed in claim 6, which is characterized in that the acquisition module acquires each finger
When the data on flows of fixed end mouthful, it is acquired using the data on flows of the double frequency acquisition mode to the designated port.
10. a kind of flux monitoring system as claimed in claim 6, which is characterized in that further include:
Export module, for exporting the discharge record file, and according to the data on flows in the discharge record file
Draw flow diagram.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910778233.7A CN110380914A (en) | 2019-08-22 | 2019-08-22 | A kind of flux monitoring method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201910778233.7A CN110380914A (en) | 2019-08-22 | 2019-08-22 | A kind of flux monitoring method and system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110380914A true CN110380914A (en) | 2019-10-25 |
Family
ID=68260440
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201910778233.7A Pending CN110380914A (en) | 2019-08-22 | 2019-08-22 | A kind of flux monitoring method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110380914A (en) |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050108377A1 (en) * | 2003-11-18 | 2005-05-19 | Lee Soo-Hyung | Method for detecting abnormal traffic at network level using statistical analysis |
| CN107979506A (en) * | 2017-10-30 | 2018-05-01 | 阿里巴巴集团控股有限公司 | Flow obtains and high in the clouds display systems, method, apparatus and equipment |
| CN108259492A (en) * | 2018-01-15 | 2018-07-06 | 北京天融信网络安全技术有限公司 | A kind of storing method of data on flows, equipment and computer readable storage medium |
-
2019
- 2019-08-22 CN CN201910778233.7A patent/CN110380914A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20050108377A1 (en) * | 2003-11-18 | 2005-05-19 | Lee Soo-Hyung | Method for detecting abnormal traffic at network level using statistical analysis |
| CN107979506A (en) * | 2017-10-30 | 2018-05-01 | 阿里巴巴集团控股有限公司 | Flow obtains and high in the clouds display systems, method, apparatus and equipment |
| CN108259492A (en) * | 2018-01-15 | 2018-07-06 | 北京天融信网络安全技术有限公司 | A kind of storing method of data on flows, equipment and computer readable storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8713133B2 (en) | Methods, systems and computer program products for importing data from an edge router to a network management system | |
| EP0996254B1 (en) | A method for quantifying communication performance | |
| US6483812B1 (en) | Token ring network topology discovery and display | |
| KR100716167B1 (en) | Network management system and method | |
| US20060294148A1 (en) | Network usage management system and method | |
| US20020032769A1 (en) | Network management method and system | |
| US20010056486A1 (en) | Network monitoring system and network monitoring method | |
| CN107800565A (en) | Method for inspecting, device, system, computer equipment and storage medium | |
| US20030140279A1 (en) | Method for remotely diagnosing devices | |
| MX2010006844A (en) | Method of resolving network address to host names in network flows for network device. | |
| CN105868040A (en) | Log collection method and collection terminal | |
| CN111400127B (en) | Service log monitoring method and device, storage medium and computer equipment | |
| US20030115316A1 (en) | System and method for network usage metering | |
| CN102271052A (en) | Network system, network management device and gateway device | |
| CN107635003A (en) | The management method of system journal, apparatus and system | |
| US8700632B2 (en) | Managing heterogeneous data | |
| CN107979489A (en) | Integrated access equipment configuration monitoring method | |
| Enger et al. | FYI on a network management tool catalog: Tools for monitoring and debugging TCP/IP Internets and interconnected devices | |
| CN110380914A (en) | A kind of flux monitoring method and system | |
| CN104253718A (en) | Network test method and device | |
| CN114765633B (en) | Network message analysis method and device based on real-time Ethernet protocol of train | |
| Bagnulo et al. | Building a standard measurement platform | |
| CN105743675A (en) | Method and device for acquiring information | |
| CN101316195A (en) | Method and system for implementing configuration consistency of monitoring system | |
| KR100358156B1 (en) | Converting Method of Managing Operation from service management system to Switching Command in a Integrated Network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| WD01 | Invention patent application deemed withdrawn after publication | ||
| WD01 | Invention patent application deemed withdrawn after publication |
Application publication date: 20191025 |