CN110891002A - Outlet server flow monitoring method and device - Google Patents

Outlet server flow monitoring method and device Download PDF

Info

Publication number
CN110891002A
CN110891002A CN201911148520.6A CN201911148520A CN110891002A CN 110891002 A CN110891002 A CN 110891002A CN 201911148520 A CN201911148520 A CN 201911148520A CN 110891002 A CN110891002 A CN 110891002A
Authority
CN
China
Prior art keywords
data
traffic
server
egress
flow
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201911148520.6A
Other languages
Chinese (zh)
Inventor
钟晓
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Unihub China Information Technology Co Ltd
Zhongying Youchuang Information Technology Co Ltd
Original Assignee
Unihub China Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Unihub China Information Technology Co Ltd filed Critical Unihub China Information Technology Co Ltd
Priority to CN201911148520.6A priority Critical patent/CN110891002A/en
Publication of CN110891002A publication Critical patent/CN110891002A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876Network utilisation, e.g. volume of load or congestion level
    • H04L43/0894Packet rate
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/02Standardisation; Integration
    • H04L41/0213Standardised network management protocols, e.g. simple network management protocol [SNMP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0631Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/16Threshold monitoring
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L47/00Traffic control in data switching networks
    • H04L47/10Flow control; Congestion control
    • H04L47/29Flow control; Congestion control using a combination of thresholds

Abstract

The invention discloses a method and a device for monitoring the flow of an outlet server, wherein the method comprises the following steps: acquiring port traffic data of a plurality of egress servers, wherein the port traffic data comprises traffic flow data and physical topological connection relation data, and the device types of the egress servers comprise: the system comprises optical line terminal equipment, a broadband remote access server and a core router; comparing the port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold; and monitoring the flow of the outlet servers according to the comparison result and the flow direction data and the physical topological connection relation data of the outlet servers. The invention can monitor the flow of the outlet server, find the abnormal flow in time, improve the monitoring efficiency and ensure the normal operation of the service.

Description

Outlet server flow monitoring method and device
Technical Field
The invention relates to the technical field of flow monitoring, in particular to a method and a device for monitoring the flow of an outlet server.
Background
Operators have higher and higher requirements for monitoring abnormal large flow of the export server, once safety problems occur, such as transmission or attack of network viruses or port fault interruption in the export server, port large flow congestion is easy to occur, and if the port large flow congestion is not found and processed in time, broadband of the export server is occupied, the internet speed of users is influenced, the satisfaction degree is seriously influenced, and the user experience is influenced. In the prior art, each export server is generally monitored manually by adopting flow, but the efficiency is low, and the abnormal flow is difficult to find in time, so that the normal operation of the service is influenced.
Disclosure of Invention
The embodiment of the invention provides an export server flow monitoring method, which is used for monitoring the export server flow, finding out abnormal flow in time, improving monitoring efficiency and ensuring normal operation of a service, and comprises the following steps:
acquiring port traffic data of a plurality of egress servers, wherein the port traffic data comprises traffic flow data and physical topological connection relation data, and the device types of the egress servers comprise: the system comprises optical line terminal equipment, a broadband remote access server and a core router;
comparing the port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold;
and monitoring the flow of the outlet servers according to the comparison result and the flow direction data and the physical topological connection relation data of the outlet servers.
The embodiment of the invention provides an export server flow monitoring device, which is used for monitoring the export server flow, finding abnormal flow in time, improving monitoring efficiency and ensuring normal operation of a service, and comprises:
an obtaining module, configured to obtain port traffic data of multiple egress servers, where the port traffic data includes traffic flow data and physical topology connection relationship data, and the device type of the egress server includes: the system comprises optical line terminal equipment, a broadband remote access server and a core router;
the comparison module is used for comparing the port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold;
and the monitoring module is used for monitoring the flow of the outlet servers according to the comparison result, the flow direction data of the outlet servers and the physical topological connection relation data.
The embodiment of the invention also provides computer equipment which comprises a memory, a processor and a computer program which is stored on the memory and can run on the processor, wherein the processor realizes the outlet server flow monitoring method when executing the computer program.
The embodiment of the invention also provides computer equipment which comprises a memory, a processor and a computer program which is stored on the memory and can run on the processor, wherein the processor realizes the outlet server flow monitoring method when executing the computer program.
Compared with the scheme of manually monitoring the flow for each egress server in the prior art, the embodiment of the present invention obtains port flow data, flow direction data and physical topology connection relationship data of a plurality of egress servers, where the device types of the egress servers include: the system comprises optical line terminal equipment, a broadband remote access server and a core router; comparing the port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold; and monitoring the flow of the outlet servers according to the comparison result and the flow direction data and the physical topological connection relation data of the outlet servers. According to the embodiment of the invention, manual flow monitoring is not needed for each outlet server, only the port flow data of each outlet server is compared with the preset flow threshold, and according to the comparison result, the flow direction data and the physical topological connection relation data, the flow monitoring of the outlet servers can be realized, so that the flow abnormity can be found in time, the monitoring efficiency is improved, and the normal operation of the service is ensured.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts. In the drawings:
fig. 1 is a schematic diagram of an egress server traffic monitoring method according to an embodiment of the present invention;
fig. 2 is a structural diagram of an egress server traffic monitoring apparatus according to an embodiment of the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the embodiments of the present invention are further described in detail below with reference to the accompanying drawings. The exemplary embodiments and descriptions of the present invention are provided to explain the present invention, but not to limit the present invention.
In order to monitor the traffic of the egress server, find out traffic abnormality in time, improve monitoring efficiency, and ensure normal operation of a service, an embodiment of the present invention provides a method for monitoring the traffic of the egress server, where as shown in fig. 1, the method may include:
step 101, obtaining port traffic data of a plurality of egress servers, where the traffic flow data and the physical topology connection relationship data, and the device types of the egress servers include: the system comprises optical line terminal equipment, a broadband remote access server and a core router;
102, comparing port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold;
and 103, monitoring the traffic of the egress servers according to the comparison result, the traffic flow direction data and the physical topological connection relation data of the egress servers.
As shown in fig. 1, it can be known that, in the embodiment of the present invention, port traffic data, traffic flow data, and physical topology connection relationship data of a plurality of egress servers are obtained, where the device types of the egress servers include: the system comprises optical line terminal equipment, a broadband remote access server and a core router; comparing the port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold; and monitoring the flow of the outlet servers according to the comparison result and the flow direction data and the physical topological connection relation data of the outlet servers. According to the embodiment of the invention, manual flow monitoring is not needed for each outlet server, only the port flow data of each outlet server is compared with the preset flow threshold, and according to the comparison result, the flow direction data and the physical topological connection relation data, the flow monitoring of the outlet servers can be realized, so that the flow abnormity can be found in time, the monitoring efficiency is improved, and the normal operation of the service is ensured.
In specific implementation, port traffic data of a plurality of egress servers is obtained, the traffic flow data and the physical topology connection relationship data, and the device types of the egress servers include: the system comprises an optical line terminal equipment OLT, a broadband remote access server BRAS and a core router CR.
In the embodiment, the exit server can be logged in through the secure shell protocol SSH, the configuration file can be viewed, and the port detailed information of the exit server can be viewed.
In the embodiment, the port traffic data of the egress server can be acquired through a Simple Network Management Protocol (SNMP).
In an embodiment, the traffic flow data (NetFlow) of each egress server may be obtained from the core router CR, and the traffic flow data is a network monitoring function, and may be applied to the core router by collecting the number and information of IP packets entering and leaving the network interface. By analyzing the information collected by the traffic flow data, the network manager can know the source and destination of the database and the type of network service.
In an embodiment, the physical topology connection relationship data is obtained from a resource tree. Wherein the physical topological connection relation data may include: resource tree information, an export server account number and export server association relation data.
In an embodiment, the port traffic data of the egress servers may be collected at a preset time, for example, every 5 minutes.
In specific implementation, the port traffic data of each of the plurality of egress servers is compared with a preset traffic threshold.
In an embodiment, the traffic threshold is preset according to port traffic bandwidth data. The inventor finds that if the port traffic bandwidth of the egress server is occupied, the internet speed of a user is affected, and the satisfaction and the user experience are seriously affected. For example, the traffic threshold may be set to the egress server's port traffic bandwidth data multiplied by a percentage, such as 90%.
And during specific implementation, according to the comparison result, the flow direction data and the physical topological connection relation data of the plurality of outlet servers are used for monitoring the flow of the outlet servers.
In an embodiment, according to the comparison result, the monitoring of the traffic of the egress servers is performed by using the traffic flow direction data and the physical topology connection relationship data of the multiple egress servers, and includes:
and for each export server, if the port flow data of the export server exceeds a preset flow threshold, monitoring the flow of the export server according to the flow direction data and the physical topological connection relation data of the plurality of export servers.
In this embodiment, for each egress server, if the port flow data of the egress server exceeds the preset flow threshold, an alarm message is sent, where the alarm message may include a short message, an email, and the like, so as to notify the area responsible person of the abnormal flow condition in the first time.
In this embodiment, for each egress server, if port traffic data of the egress server exceeds a preset traffic threshold, performing egress server traffic monitoring according to the traffic flow data of the multiple egress servers and the physical topology connection relationship data, including: and for each export server, if the port traffic data of the export server exceeds a preset traffic threshold, scheduling the port traffic data of the export server according to the traffic flow direction data and the physical topological connection relation data of the plurality of export servers. For example, the egress server port traffic may be distributed to other egress server outlets to alleviate congestion of the egress server port traffic.
In this embodiment, for each egress server, if port traffic data of the egress server exceeds a preset traffic threshold, performing egress server traffic monitoring according to the traffic flow data of the multiple egress servers and the physical topology connection relationship data, including: and for each export server, if the port traffic data of the export server exceeds a preset traffic threshold, performing port plugging on the export server according to the traffic flow direction data and the physical topological connection relation data of the plurality of export servers.
For example, for each egress server, if the port traffic data of the egress server exceeds a preset traffic threshold, the rank of the traffic proportion occupied by the preset number of ports according to the traffic flow direction data of the multiple egress servers can be obtained, and then the port of the transmission control protocol or the port of the user datagram protocol is plugged by combining the physical topological connection relation data, for example, a certain port of a certain segment of IP address is plugged.
For example, for each egress server, if the port traffic data of the egress server exceeds a preset traffic threshold, port blocking may be performed on the broadband remote access server BRAS according to the traffic flow direction data and the physical topological connection relation data of the plurality of egress servers, and the abnormal IP traffic ranked in the top is obtained by analyzing the port traffic data and the traffic flow direction data, and then the port blocking may be performed in a manner of closing the port.
For example, for each egress server, if the port traffic data of the egress server exceeds a preset traffic threshold, the port may be blocked at the optical line terminal OLT based on the traffic flow data of the plurality of egress servers and the physical topology connection relation data, the broadband remote access server BRAS may have an outer layer vlan similar to the optical line terminal OLT, and the outer layer vlan may be blocked by closing the port.
It should be noted that, the monitoring requirement of the operator on the abnormal traffic of the local outlet server is higher and higher, once a security problem occurs, such as the propagation or attack of a network virus or the interruption of a port fault in the outlet server, the large traffic congestion of the port is very likely to occur, and if the port is not found and processed in time, the broadband of the local outlet server is occupied, the internet speed of the user is affected, the satisfaction is seriously affected, and the user experience is affected. When the embodiment of the invention is used for port plugging, only few parameters need to be filled, and the one-key plugging effect can be realized, so that the stable and normal operation of the service is ensured.
Based on the same inventive concept, the embodiment of the present invention further provides an egress server traffic monitoring apparatus, as described in the following embodiments. Because the principles of these solutions are similar to the egress server traffic monitoring method, the implementation of the apparatus can refer to the implementation of the method, and the repeated descriptions are omitted.
Fig. 2 is a structural diagram of an egress server traffic monitoring apparatus according to an embodiment of the present invention, and as shown in fig. 2, the apparatus includes:
an obtaining module 201, configured to obtain port traffic data, traffic flow data, and physical topology connection relationship data of multiple egress servers, where the device types of the egress servers include: the system comprises optical line terminal equipment, a broadband remote access server and a core router;
a comparison module 202, configured to compare port traffic data of each of the plurality of egress servers with a preset traffic threshold;
and the monitoring module 203 is configured to monitor traffic of the egress servers according to the comparison result, the traffic flow direction data of the multiple egress servers and the physical topology connection relationship data.
In one embodiment, the physical topological connectivity relation data is obtained from a resource tree.
In one embodiment, the traffic threshold is preset according to port traffic bandwidth data.
In one embodiment, the monitoring module 203 is further configured to:
and for each export server, if the port flow data of the export server exceeds a preset flow threshold, monitoring the flow of the export server according to the flow direction data and the physical topological connection relation data of the plurality of export servers.
In one embodiment, the monitoring module 203 is further configured to:
and for each export server, if the port traffic data of the export server exceeds a preset traffic threshold, scheduling the port traffic data of the export server according to the traffic flow direction data and the physical topological connection relation data of the plurality of export servers.
In one embodiment, the monitoring module 203 is further configured to:
and for each export server, if the port traffic data of the export server exceeds a preset traffic threshold, performing port plugging on the export server according to the traffic flow direction data and the physical topological connection relation data of the plurality of export servers.
In summary, in the embodiments of the present invention, port traffic data, traffic flow data, and physical topology connection relationship data of a plurality of egress servers are obtained, where the device types of the egress servers include: the system comprises optical line terminal equipment, a broadband remote access server and a core router; comparing the port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold; and monitoring the flow of the outlet servers according to the comparison result and the flow direction data and the physical topological connection relation data of the outlet servers. According to the embodiment of the invention, manual flow monitoring is not needed for each outlet server, only the port flow data of each outlet server is compared with the preset flow threshold, and according to the comparison result, the flow direction data and the physical topological connection relation data, the flow monitoring of the outlet servers can be realized, so that the flow abnormity can be found in time, the monitoring efficiency is improved, and the normal operation of the service is ensured.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
The above-mentioned embodiments are intended to illustrate the objects, technical solutions and advantages of the present invention in further detail, and it should be understood that the above-mentioned embodiments are only exemplary embodiments of the present invention, and are not intended to limit the scope of the present invention, and any modifications, equivalent substitutions, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims (14)

1. An egress server traffic monitoring method, comprising:
acquiring port traffic data of a plurality of egress servers, wherein the port traffic data comprises traffic flow data and physical topological connection relation data, and the device types of the egress servers comprise: the system comprises optical line terminal equipment, a broadband remote access server and a core router;
comparing the port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold;
and monitoring the flow of the outlet servers according to the comparison result and the flow direction data and the physical topological connection relation data of the outlet servers.
2. The egress server traffic monitoring method according to claim 1, wherein said physical topology connection relationship data is obtained from a resource tree.
3. The egress server traffic monitoring method according to claim 1, wherein said traffic threshold is preset based on port traffic bandwidth data.
4. The egress server traffic monitoring method according to claim 1, wherein performing egress server traffic monitoring based on the comparison result and the traffic flow direction data and the physical topology connection relationship data of the plurality of egress servers comprises:
and for each export server, if the port flow data of the export server exceeds a preset flow threshold, monitoring the flow of the export server according to the flow direction data and the physical topological connection relation data of the plurality of export servers.
5. The egress server traffic monitoring method according to claim 4, wherein for each egress server, if port traffic data of the egress server exceeds a preset traffic threshold, performing egress server traffic monitoring according to the traffic flow direction data and the physical topology connection relationship data of the plurality of egress servers, including:
and for each export server, if the port traffic data of the export server exceeds a preset traffic threshold, scheduling the port traffic data of the export server according to the traffic flow direction data and the physical topological connection relation data of the plurality of export servers.
6. The egress server traffic monitoring method according to claim 4, wherein for each egress server, if port traffic data of the egress server exceeds a preset traffic threshold, performing egress server traffic monitoring according to the traffic flow direction data and the physical topology connection relationship data of the plurality of egress servers, including:
and for each export server, if the port traffic data of the export server exceeds a preset traffic threshold, performing port plugging on the export server according to the traffic flow direction data and the physical topological connection relation data of the plurality of export servers.
7. An egress server traffic monitoring apparatus, comprising:
an obtaining module, configured to obtain port traffic data of multiple egress servers, where the port traffic data includes traffic flow data and physical topology connection relationship data, and the device type of the egress server includes: the system comprises optical line terminal equipment, a broadband remote access server and a core router;
the comparison module is used for comparing the port flow data of each outlet server in the plurality of outlet servers with a preset flow threshold;
and the monitoring module is used for monitoring the flow of the outlet servers according to the comparison result, the flow direction data of the outlet servers and the physical topological connection relation data.
8. The egress server traffic monitoring device according to claim 7, wherein said physical topology connection relationship data is obtained from a resource tree.
9. The egress server traffic monitoring device according to claim 7, wherein said traffic threshold is predetermined based on port traffic bandwidth data.
10. The egress server traffic monitoring device according to claim 7, wherein said monitoring module is further configured to:
and for each export server, if the port flow data of the export server exceeds a preset flow threshold, monitoring the flow of the export server according to the flow direction data and the physical topological connection relation data of the plurality of export servers.
11. The egress server traffic monitoring device according to claim 10, wherein said monitoring module is further configured to:
and for each export server, if the port traffic data of the export server exceeds a preset traffic threshold, scheduling the port traffic data of the export server according to the traffic flow direction data and the physical topological connection relation data of the plurality of export servers.
12. The egress server traffic monitoring device according to claim 10, wherein said monitoring module is further configured to:
and for each export server, if the port traffic data of the export server exceeds a preset traffic threshold, performing port plugging on the export server according to the traffic flow direction data and the physical topological connection relation data of the plurality of export servers.
13. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the method of any one of claims 1 to 6 when executing the computer program.
14. A computer-readable storage medium, characterized in that the computer-readable storage medium stores a computer program for executing the method of any one of claims 1 to 6.
CN201911148520.6A 2019-11-21 2019-11-21 Outlet server flow monitoring method and device Pending CN110891002A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201911148520.6A CN110891002A (en) 2019-11-21 2019-11-21 Outlet server flow monitoring method and device

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201911148520.6A CN110891002A (en) 2019-11-21 2019-11-21 Outlet server flow monitoring method and device

Publications (1)

Publication Number Publication Date
CN110891002A true CN110891002A (en) 2020-03-17

Family

ID=69748245

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201911148520.6A Pending CN110891002A (en) 2019-11-21 2019-11-21 Outlet server flow monitoring method and device

Country Status (1)

Country Link
CN (1) CN110891002A (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103152251A (en) * 2013-02-27 2013-06-12 杭州华三通信技术有限公司 Method and device for processing message
CN107135127A (en) * 2017-06-26 2017-09-05 福建中金在线信息科技有限公司 A kind of network flow abnormal detecting method and device
CN109547343A (en) * 2019-01-04 2019-03-29 网宿科技股份有限公司 A kind of traffic scheduling method and system
US20190149359A1 (en) * 2017-11-16 2019-05-16 Fujitsu Limited Relay device and relay method
CN110177054A (en) * 2019-05-22 2019-08-27 新华三技术有限公司 A kind of port queue dispatching method, device, network controller and storage medium

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103152251A (en) * 2013-02-27 2013-06-12 杭州华三通信技术有限公司 Method and device for processing message
CN107135127A (en) * 2017-06-26 2017-09-05 福建中金在线信息科技有限公司 A kind of network flow abnormal detecting method and device
US20190149359A1 (en) * 2017-11-16 2019-05-16 Fujitsu Limited Relay device and relay method
CN109547343A (en) * 2019-01-04 2019-03-29 网宿科技股份有限公司 A kind of traffic scheduling method and system
CN110177054A (en) * 2019-05-22 2019-08-27 新华三技术有限公司 A kind of port queue dispatching method, device, network controller and storage medium

Similar Documents

Publication Publication Date Title
US9967165B2 (en) Methods, systems, and computer readable media for packet monitoring in a virtual environment
CN105634998B (en) Method and system for unified monitoring of physical machine and virtual machine in multi-tenant environment
TWI528761B (en) Network traffic processing system
CN108234404B (en) Defense method, system and related equipment for DDoS attack
US11570107B2 (en) Method and system for triggering augmented data collection on a network device based on traffic patterns
Kumano et al. Towards real-time processing for application identification of encrypted traffic
US11757917B2 (en) Network attack identification, defense, and prevention
KR101615045B1 (en) Intelligent security networking system
US9686140B2 (en) Intelligent network interconnect
US9705921B2 (en) Automated synchronized domain wide transient policy
US9847970B1 (en) Dynamic traffic regulation
WO2020083272A1 (en) Processing strategy generation method and system, and storage medium
CN106302001B (en) Service fault detection method, related device and system in data communication network
US8982711B2 (en) Self-healing communications network
EP3266174B1 (en) Uplink port oversubscription determination
CN110636059B (en) Network attack defense system, method, SDN controller, router, device and medium
US10834110B1 (en) Methods for preventing DDoS attack based on adaptive self learning of session and transport layers and devices thereof
WO2021083324A1 (en) Information reporting method, and data processing method and device
JP2008219149A (en) Traffic control system and traffic control method
CN107395554B (en) Method and device for defending and processing flow attack
CN110891002A (en) Outlet server flow monitoring method and device
CN110868429A (en) BGP routing protocol security protection method and device
CN103248505A (en) View-based network monitoring method and device
CN111431930A (en) Flow cleaning method and related equipment
US11757946B1 (en) Methods for analyzing network traffic and enforcing network policies and devices thereof

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20200317

RJ01 Rejection of invention patent application after publication