CN111211979A - Traffic management method, device, equipment and medium - Google Patents

Traffic management method, device, equipment and medium Download PDF

Info

Publication number
CN111211979A
CN111211979A CN201811402021.0A CN201811402021A CN111211979A CN 111211979 A CN111211979 A CN 111211979A CN 201811402021 A CN201811402021 A CN 201811402021A CN 111211979 A CN111211979 A CN 111211979A
Authority
CN
China
Prior art keywords
information
port
routing
content provider
address
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201811402021.0A
Other languages
Chinese (zh)
Other versions
CN111211979B (en
Inventor
李绍庆
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Group Hebei Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Group Hebei Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Group Hebei Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN201811402021.0A priority Critical patent/CN111211979B/en
Publication of CN111211979A publication Critical patent/CN111211979A/en
Application granted granted Critical
Publication of CN111211979B publication Critical patent/CN111211979B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/02Topology update or discovery
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/38Flow based routing
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00Routing or path finding of packets in data switching networks
    • H04L45/74Address processing for routing
    • H04L45/745Address table lookup; Address filtering

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The embodiment of the invention provides a traffic management method, a traffic management device, traffic management equipment and traffic management media. The method comprises the following steps: acquiring routing information of a plurality of routing devices in a target network in real time; establishing a topological network among a plurality of routing devices according to the routing information, and updating the established topological network in real time; marking a content provider of the routing information to generate an information base of the content provider; and clustering the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and obtaining the operating conditions of links and nodes of the traffic data in the topological network. And dynamically associating the traffic data provided by each content provider with the topological network, and ensuring that the flow paths provided by the content providers can be dynamically analyzed so as to obtain the operating conditions of links and nodes of the traffic data provided by each content provider in the topological network.

Description

Traffic management method, device, equipment and medium
Technical Field
The present invention relates to the field of computer communications technologies, and in particular, to a method, an apparatus, a device, and a medium for traffic management.
Background
The three-layer topological structure information of the IP bearing network comprises equipment information and connection link information between equipment, and the accurate topological structure is very important for the work of network operation and maintenance, network planning, service opening and the like. The existing three-layer topology maintenance method mainly comprises three modes of pure manual maintenance, port address mask matching based and port description matching based. The pure manual maintenance mode is used for maintaining equipment and link information in a mode of manually inputting an Excel form or a system after related personnel operate on the current network; the method based on port address mask matching needs to manually input the equipment into the system, then the system regularly acquires the address and mask information of each port of the equipment through an SNMP protocol, and then matches the ports of the addresses in the same network segment according to the address and the mask and forms link information. The method based on port description matching also needs to manually input the equipment into the system, then regularly acquires the description information of each port of the equipment through an SNMP protocol, and then forms link information according to the matching of the description information of the ports.
In summary, the pure manual maintenance, the matching based on the port address mask and the matching based on the port description all require manual maintenance of the device information, which also brings the accuracy problem of manual maintenance when the manual maintenance is needed, and the accuracy of the topology data in the actual work is low due to the reasons of incorrect SNMP password, delay in timing discovery and the like.
Disclosure of Invention
Embodiments of the present invention provide a method, an apparatus, a device, and a medium for traffic management, which dynamically associate traffic data provided by each content provider with a topology network, and ensure that a flow path provided by the content provider can be dynamically analyzed, so as to obtain operating conditions of links and nodes of the traffic data provided by each content provider in the topology network, thereby implementing an end-to-end path oriented to content traffic. Meanwhile, the collected routing information and the content flow information facing to the content provider are available, real-time, effective and dynamically and automatically updated, so that the labor cost is saved, and reliable guarantee can be provided.
In a first aspect, an embodiment of the present invention provides a traffic management method, where the method includes: acquiring routing information of a plurality of routing devices in a target network in real time; establishing a topological network among a plurality of routing devices according to the routing information, and updating the established topological network in real time; marking a content provider of the routing information to generate an information base of the content provider; and clustering the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and obtaining the operating conditions of links and nodes of the traffic data in the topological network.
In a second aspect, an embodiment of the present invention provides a traffic management device, where the device includes: the routing acquisition unit is used for acquiring routing information of a plurality of routing devices in a target network in real time; the topology simulation unit is used for establishing a topology network among the plurality of routing devices according to the routing information and updating the established topology network in real time; a first analysis unit for marking a content provider of the routing information to generate an information base of the content provider; and the second analysis unit is used for clustering the traffic data in the target network according to the content providers to acquire the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and acquiring the running conditions of links and nodes of the traffic data in the topological network.
An embodiment of the present invention provides a traffic management device, including: at least one processor, at least one memory, and computer program instructions stored in the memory, which when executed by the processor, implement the method of the first aspect of the embodiments described above.
In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, on which computer program instructions are stored, which, when executed by a processor, implement the method of the first aspect in the foregoing embodiments.
According to the traffic management method, the traffic management device, the traffic management equipment and the traffic management medium, the routing information of a plurality of routing devices in a target network is acquired in real time; according to the routing information acquired in real time, a topological network among a plurality of routing devices is established, and the routing information acquired in real time can update the established topological network in real time as the routing information is acquired in real time; labeling the routing information according to a content provider (ICP), namely searching the content provider corresponding to the address in each routing information, and classifying and collecting the used address of each content provider to generate an information base of the content provider; and clustering the traffic data in the target network according to the content providers, namely acquiring the traffic data corresponding to each content provider from the traffic data, and dynamically associating the traffic data provided by each content provider with the topological network, so as to ensure that the dynamic analysis can be performed on the flow path provided by the content provider, thereby acquiring the operating conditions of the link and the node of the traffic data provided by each content provider in the topological network, and further realizing an end-to-end path facing the content traffic. Meanwhile, the collected routing information and the content flow information facing to the content provider are available, real-time, effective and dynamically and automatically updated, so that the labor cost is saved, and the reliability guarantee can be provided.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required to be used in the embodiments of the present invention will be briefly described below, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.
FIG. 1 illustrates a flow diagram of a traffic management method provided in accordance with some embodiments of the invention;
FIG. 2 illustrates yet another flow diagram showing a traffic management method provided in accordance with some embodiments of the invention;
FIG. 3 illustrates yet another flow diagram showing a traffic management method provided in accordance with some embodiments of the invention;
FIG. 4 illustrates yet another flow diagram showing a traffic management method provided in accordance with some embodiments of the invention;
FIG. 5 illustrates yet another flow diagram showing a traffic management method provided in accordance with some embodiments of the invention;
FIG. 6 illustrates yet another flow diagram showing a traffic management method provided in accordance with some embodiments of the invention;
FIG. 7 illustrates a block diagram of a traffic management device provided in accordance with some embodiments of the present invention;
FIG. 8 illustrates yet another block diagram of a traffic management device provided in accordance with some embodiments of the present invention;
FIG. 9 illustrates yet another block diagram of a traffic management device provided in accordance with some embodiments of the present invention;
FIG. 10 illustrates yet another block diagram of a traffic management device provided in accordance with some embodiments of the present invention;
FIG. 11 illustrates yet another block diagram of a traffic management device provided in accordance with some embodiments of the invention;
FIG. 12 illustrates yet another block diagram of a traffic management device provided in accordance with some embodiments of the invention;
FIG. 13 is a schematic diagram illustrating an application of a traffic management method according to some embodiments of the invention;
fig. 14 is a schematic diagram illustrating an application of a route collection unit in a traffic management device according to some embodiments of the present invention;
FIG. 15 is a partial step diagram of a traffic management method provided in accordance with some embodiments of the invention;
fig. 16 is a schematic diagram illustrating a hardware structure of a traffic management device according to an embodiment of the present invention.
Detailed Description
Features and exemplary embodiments of various aspects of the present invention will be described in detail below, and in order to make objects, technical solutions and advantages of the present invention more apparent, the present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not to be construed as limiting the invention. It will be apparent to one skilled in the art that the present invention may be practiced without some of these specific details. The following description of the embodiments is merely intended to provide a better understanding of the present invention by illustrating examples of the present invention.
It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
In order to solve the problems in the prior art, embodiments of the present invention provide a traffic management method, a traffic management apparatus, a traffic management device, and a computer storage medium. The following first describes the traffic management provided by the embodiment of the present invention.
Fig. 1 is a flowchart illustrating a traffic management method according to an embodiment of the present invention. As shown in fig. 1, a traffic management method provided in this embodiment includes:
s102, acquiring routing information of a plurality of routing devices in a target network in real time;
s104, establishing a topological network among a plurality of routing devices according to the routing information, and updating the established topological network in real time;
s106, marking the content provider of the routing information to generate an information base of the content provider;
and S108, clustering the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and obtaining the operating conditions of links and nodes of the traffic data in the topological network.
The traffic management method provided by the invention comprises the steps of firstly, acquiring the routing information of a plurality of routing devices in a target network in real time, preferably, operating an IGP routing protocol (ISIS or OSPF) in the network to carry out the link routing load in the network; then, according to the routing information acquired in real time, a topological network among the plurality of routing devices is established, preferably, the topological network is of a three-layer topological structure, and the routing information acquired in real time can update the established topological network in real time as the routing information is acquired in real time; then labeling the routing information according to content providers, namely searching the content providers corresponding to the addresses in each routing information, and classifying and collecting the used addresses of each content provider to generate an information base of the content provider; and clustering the traffic data in the target network according to the content providers, namely acquiring the traffic data corresponding to each content provider from the traffic data, and dynamically associating the traffic data provided by each content provider with the topological network, so as to ensure that the dynamic analysis can be performed on the flow path provided by the content provider, thereby acquiring the operating conditions of the link and the node of the traffic data provided by each content provider in the topological network, and further realizing an end-to-end path facing the content traffic. Meanwhile, the collected routing information and the content flow information facing to the content provider are available, real-time, effective and dynamically and automatically updated, so that the labor cost is saved, and the reliability guarantee can be provided.
The three-layer topological network of the IP bearing network can realize automatic real-time maintenance, further realize real-time automatic maintenance of topological data, does not need manual participation, and can greatly improve the real-time performance (reaching second-level delay) of the three-layer topological data of the IP bearing network, thereby overcoming the problems of large maintenance workload and low accuracy rate of the topological data of the prior method. The system can reduce the overall topology maintenance workload by 90% while improving the topology data accuracy to nearly 100% (99% -100%) even considering a small amount of system maintenance work. The scheme provides a content provider identification method based on route analysis, realizes the corresponding relation between a content provider and a route through a dynamic method, realizes the dynamic analysis of traffic data of the content provider introduced into a network, and can realize the automatic association of a service traffic path and topology of the content provider. The information of the content provider accessed in the operator network can be realized, and the information can be obviously sensed when the flow and the port are changed.
When the content providers are marked, the key content providers can be selected for marking, and only the key content providers are faced with the information base of the content providers.
Fig. 2 is a flowchart illustrating a traffic management method according to an embodiment of the present invention. As shown in fig. 2, a traffic management method provided in this embodiment includes:
s202, establishing connection with a first routing device in a target network;
s204, acquiring routing information of a plurality of routing devices in the target network in real time through the first routing device, wherein the routing information comprises an IGP protocol message;
s206, establishing a topological network among a plurality of routing devices according to the routing information, and updating the established topological network in real time;
s208, marking the content provider of the routing information to generate an information base of the content provider;
s210, clustering the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and obtaining the operating conditions of links and nodes of the traffic data in the topological network.
In this embodiment, when acquiring routing information in real time, the acquiring method may be to establish a connection with a first routing device in a target network, where the target network is a target network for topology maintenance, and first establish a connection with the first routing device in the target network, and as an IGP routing protocol (ISIS or OSPF) is operated between each routing device in the target network, the routing information of multiple routing devices in the target network may be acquired in real time through the first routing device, where the routing information includes all IGP protocol packets; by being connected with the first routing equipment, the first routing equipment is not required to be directly connected with each routing equipment, and the connection mode is simplified.
Fig. 3 is a flowchart illustrating a traffic management method according to an embodiment of the present invention. As shown in fig. 3, a traffic management method provided in this embodiment includes:
s302, establishing a neighbor relation connection of an IGP routing protocol and/or a BGP routing protocol with a first routing device;
s304, acquiring routing information of a plurality of routing devices in a target network in real time through a first routing device, wherein the routing information comprises an IGP protocol message;
s306, establishing a topological network among a plurality of routing devices according to the routing information, and updating the established topological network in real time;
s308, marking the content provider of the routing information to generate an information base of the content provider;
s310, clustering the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and obtaining the operating conditions of links and nodes of the traffic data in the topological network.
In this embodiment, the specific scheme when establishing connection with the first routing device is to establish a neighbor relation connection of an IGP routing protocol and/or a BGP routing protocol with the first routing device, that is, to implement a subsequent scheme for acquiring IGP and/or BGP protocol message information, so as to implement a real-time monitoring technique based on an IGP protocol, enter a real-time acquisition of IGP link state update (including IGP devices and IGP neighbors) information in an IP bearer network, and perform automatic real-time maintenance of a three-layer topology network according to the information.
Fig. 4 is a flowchart illustrating a traffic management method according to an embodiment of the present invention. As shown in fig. 4, a traffic management method provided in this embodiment includes:
s402, acquiring routing information of a plurality of routing devices in a target network in real time;
s404, analyzing the routing information to obtain a second routing device and a third routing device which belong to the same network segment in the plurality of routing devices;
s406, acquiring an IP address of a second port of the second routing device, and acquiring an IP address of a third port of the third routing device;
s408, when the IP address of the second port and the IP address of the third port accord with a preset rule, associating the second port with the third port, and traversing the routing equipment to establish a topological network;
s410, updating the established topological network in real time;
s412, marking the content provider of the routing information to generate an information base of the content provider;
and S414, clustering the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and obtaining the operating conditions of links and nodes of the traffic data in the topological network.
In this embodiment, a specific real-time scheme for establishing a topological network is provided. The method comprises the steps of firstly obtaining a second routing device and a third routing device which belong to the same network segment in a plurality of routing devices through routing information, then determining ports connected in the second routing device and the third routing device, namely needing to obtain an IP address of a second port of the second routing device, obtaining an IP address of a third port of the third routing device, only when the IP address of the second port and the IP address of the third port accord with a preset rule, associating the second port with the third port, namely completing the establishment of a link in a topological network, and traversing the routing devices to complete the establishment of the topological network.
For example, when the IP address of the second port is 1.1.1.1/30 and the IP address of the third port is 1.1.1.2/30, the two addresses are considered to meet the preset rule, i.e., the two ports can be connected.
Specifically, it can be determined whether the routing devices belong to the same network through IGP adjacency information in the routing information, and obtain the adjacent IP addresses, adjacent a devices, and adjacent B devices in the IGP adjacency information, and when the adjacent a devices and the adjacent B devices in the IGP adjacency information belong to the same network segment, they can be considered as belonging to the same network segment.
In an embodiment of the present invention, preferably, the step of obtaining an IP address of the second port of the second routing device includes: acquiring a port IP address information table and a port basic information table from the routing information, and associating the port IP address information table and the port basic information table belonging to a second port through a port index number of the port IP address information table and a port index number in the port basic information table to obtain comprehensive information of the second port, wherein the comprehensive information of the second port comprises an IP address, a port index number, a port name and a port width of the second port; and/or acquiring an IP address of a third port of the third routing device, including: and acquiring a port IP address information table and a port basic information table from the routing information, and associating the port IP address information table and the port basic information table belonging to the third port through a port index number of the port IP address information table and a port index number in the port basic information table to obtain comprehensive information of the third port, wherein the comprehensive information of the third port comprises an IP address, a port index number, a port name and a port width of the third port.
In this embodiment, a specific scheme for acquiring the IP address of the second port of the second routing device and acquiring the IP address of the third port of the third routing device is provided. Firstly, acquiring a port IP address information table and a port basic information table in routing information, wherein the port IP address information table and the port basic information table are acquired respectively in a routing acquisition mode and an SNMP acquisition mode, a port index number exists in the port IP address information table, a port index number also exists in the port basic information table, the port index number in the port IP address information table and the port index number in the port basic information table are associated with the port IP address information table and the port basic information table which belong to a second port to obtain comprehensive information of the second port, and the comprehensive information of the second port comprises an IP address, the port index number, a port name and a port width of the second port; similarly, the IP address of the third port can be acquired in the above manner.
As shown in fig. 15, when a topology network is established in the traffic management method, the method first acquires a port IP address information table and a port basic information table from routing information, associates the port IP address information table and the port basic information table through a port index number to obtain port comprehensive information of each port, and establishes three-layer topology information through the port comprehensive information and IGP adjacency information, where the three-layer topology information includes information of two-phase connected devices, as shown in fig. 15, after an a-side device and a B-side device are connected in the topology network, the three-layer topology information includes: an a port IP address and corresponding B port IP address, an a port name and corresponding B port name, an a port metric and corresponding B port metric, an a port bandwidth and corresponding B port bandwidth.
Fig. 5 is a flowchart illustrating a traffic management method according to an embodiment of the present invention. As shown in fig. 5, a traffic management method provided in this embodiment includes:
s502, acquiring routing information of a plurality of routing devices in a target network in real time;
s504, establishing a topological network among a plurality of routing devices according to the routing information, and updating the established topological network in real time;
s506, acquiring address information of the routing information, and marking a content provider of the address information to generate an information base of the content provider;
and S508, clustering the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and obtaining the operating conditions of links and nodes of the traffic data in the topological network.
In this embodiment, when generating the information base of the content provider, the specific manner is to take the address information in the routing information, and sequentially and correspondingly mark each address information as a different content provider, so that the address information marked by each content provider can be obtained in the information base of the content provider, so as to subsequently divide the traffic data into different content providers according to addresses.
In one embodiment of the present invention, preferably, the step of obtaining address information of the routing information and marking a content provider of the address information includes: and comparing the AS number information in the routing information with the information in the AS information base so AS to carry out association marking on the address information in the routing information and the content provider.
In this embodiment, a specific scheme is provided for obtaining address information of routing information and marking a content provider of the address information, where the specific scheme is to first identify AS (autonomous system) number information in the routing information, compare the AS number information in the routing information with information in an AS information base, obtain what content provider the AS number information belongs to through the information in the AS information base, and then perform association marking on the address information corresponding to the AS number information in the routing information and the content provider to achieve association between the content provider and the address information.
In one embodiment of the present invention, preferably, the step of obtaining address information of the routing information and marking a content provider of the address information includes: and analyzing the address information of the clustered content providers of the routing information through a DNS log, and marking the content providers of the address information.
In this embodiment, a specific scheme of a content provider that obtains address information of routing information and labels the address information is provided, and when a corresponding content provider cannot be obtained through AS number information, clustered address information may be analyzed through a DNS log, so AS to search and label address information of each content provider.
Fig. 6 is a flowchart illustrating a traffic management method according to an embodiment of the present invention. As shown in fig. 6, a traffic management method provided in this embodiment includes:
s602, acquiring routing information of a plurality of routing devices in a target network in real time;
s604, establishing a topological network among a plurality of routing devices according to the routing information, and updating the established topological network in real time;
s606, marking the content provider of the routing information to generate an information base of the content provider;
s608, clustering the flow data in the target network according to the content providers to obtain the flow data provided by each content provider;
s610, iterating the flow data provided by each content provider to each link of the topology network;
and S612, acquiring the traffic ratio of each content provider in each area in a flow analysis mode, establishing a traffic analysis model of the content provider according to the traffic ratio, and acquiring the operation conditions of links and nodes of traffic data in the topological network in the traffic analysis model.
In this embodiment, when associating the traffic data of each content provider with the topology network, the traffic data provided by each content provider may be iterated to each link of the topology network, then a traffic proportion of each content provider in each region is obtained in a flow analysis manner, a traffic analysis model of the content provider is established according to the traffic proportion, that is, a traffic analysis model facing the content provider is implemented in combination with flow analysis, dynamic traffic management of the content provider is implemented, and operating conditions of links and nodes of the traffic data in the topology network are obtained in the traffic analysis model, thereby overcoming the disadvantage of managing the traffic of the content network by a manual manner, and dynamically associating the traffic of the content provider with the topology network, and implementing end-to-end management facing the content traffic.
In an embodiment of the present invention, preferably, AS number information in the routing information is analyzed, and an AS information base is established in a crawler manner.
In this embodiment, the AS information base may be configured to analyze the AS number information in the routing information, and analyze the content provider corresponding to the AS number information in a crawler manner to establish the AS information base, where the AS information base may know a corresponding relationship between the content provider and the AS number information, so that the corresponding content provider may be directly found in the AS information base through the AS number information in the routing information in the following.
Fig. 7 shows a block diagram of a traffic management device 700 according to an embodiment of the present invention. As shown in fig. 7, the traffic management device 700 according to this embodiment includes:
a route acquisition unit 702, configured to acquire, in real time, route information of multiple routing devices in a target network;
a topology simulation unit 704, configured to establish a topology network among the multiple routing devices according to the routing information, and update the established topology network in real time;
a first analyzing unit 706, configured to mark a content provider of the routing information to generate an information base of the content provider;
a second analysis unit 708, configured to cluster the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associate the traffic data provided by each content provider with the topological network, and obtain the operating conditions of links and nodes of the traffic data in the topological network.
The traffic management device provided by the invention firstly obtains the routing information of a plurality of routing devices in a target network in real time, and preferably, an IGP routing protocol (ISIS or OSPF) is operated in the network to carry out the link routing load in the network; then, according to the routing information acquired in real time, a topological network among the plurality of routing devices is established, preferably, the topological network is of a three-layer topological structure, and the routing information acquired in real time can update the established topological network in real time as the routing information is acquired in real time; then labeling the routing information according to a content provider (ICP), namely searching the content provider corresponding to the address in each routing information, and classifying and collecting the used address of each content provider to generate an information base of the content provider; and clustering the traffic data in the target network according to the content providers, namely acquiring the traffic data corresponding to each content provider from the traffic data, and dynamically associating the traffic data provided by each content provider with the topological network, so as to ensure that the dynamic analysis can be performed on the flow path provided by the content provider, thereby acquiring the operating conditions of the link and the node of the traffic data provided by each content provider in the topological network, and further realizing an end-to-end path facing the content traffic. Meanwhile, the collected routing information and the content flow information facing to the content provider are available, real-time, effective and dynamically and automatically updated, so that the labor cost is saved, and the reliability guarantee can be provided.
The three-layer topological network of the IP bearing network can realize automatic real-time maintenance, further realize real-time automatic maintenance of topological data, does not need manual participation, and can greatly improve the real-time performance (reaching second-level delay) of the three-layer topological data of the IP bearing network, thereby overcoming the problems of large maintenance workload and low accuracy rate of the topological data of the existing device. The system can reduce the overall topology maintenance workload by 90% while improving the topology data accuracy to nearly 100% (99% -100%) even considering a small amount of system maintenance work. The scheme provides a content provider identification device based on route analysis, realizes the corresponding relation between a content provider and a route through a dynamic device, realizes the dynamic analysis of traffic data of the content provider introduced into a network, and can realize the automatic association of a service traffic path and topology of the content provider.
When the content providers are marked, the key content providers can be selected for marking, and only the key content providers are faced with the information base of the content providers.
Conceivably, the first analysis unit 706 and the second analysis unit 708 may jointly form an analysis module, and the analysis module may establish an address information base facing the content provider by establishing an AS information base and an IP address information base, and implement a flow management function facing the content provider by combining flow information; the analysis module can specifically realize the following steps: establishing an AS information base by analyzing AS number information in the route; associating key content providers with AS information, and dynamically establishing an information base facing the content providers through the routing information marked with the AS information; a flow analysis model facing the content provider is realized by combining flow analysis, and dynamic management of the content provider flow is realized; and combining the content provider traffic information and the topology information to realize an end-to-end path facing the content traffic.
Fig. 8 is a schematic diagram illustrating a framework of a traffic management device according to an embodiment of the present invention. As shown in fig. 8, the traffic management device provided in this embodiment includes:
a first route acquisition subunit 802, configured to establish a connection with a first routing device in a target network;
a second route acquisition subunit 804, configured to acquire, in real time, routing information of multiple routing devices in a target network through a first routing device, where the routing information includes an IGP protocol packet;
a topology simulation unit 806, configured to establish a topology network among the multiple routing devices according to the routing information, and update the established topology network in real time;
a first analyzing unit 808, configured to mark a content provider of the routing information to generate an information base of the content provider;
the second analysis unit 810 is configured to cluster the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associate the traffic data provided by each content provider with the topology network, and obtain the operating conditions of links and nodes of the traffic data in the topology network.
In this embodiment, when acquiring routing information in real time, the acquiring method may be to establish a connection with a first routing device in a target network, where the target network is a target network for topology maintenance, and first establish a connection with the first routing device in the target network, and as an IGP routing protocol (ISIS or OSPF) is operated between each routing device in the target network, the routing information of multiple routing devices in the target network may be acquired in real time through the first routing device, where the routing information includes all IGP protocol packets; by being connected with the first routing equipment, the first routing equipment is not required to be directly connected with each routing equipment, and the connection mode is simplified.
Fig. 9 is a block diagram illustrating a traffic management device 900 according to an embodiment of the present invention. As shown in fig. 9, the traffic management device provided in this embodiment includes:
a first route acquisition subunit 902, configured to establish a neighbor relation connection of an IGP routing protocol and/or a BGP routing protocol with a first routing device;
a second route acquisition subunit 904, configured to obtain, in real time, routing information of multiple routing devices in the target network through the first routing device, where the routing information includes an IGP protocol packet;
a topology simulation unit 906, configured to establish a topology network among the plurality of routing devices according to the routing information, and update the established topology network in real time;
a first analyzing unit 908 for marking a content provider of the routing information to generate an information base of the content provider;
the second analysis unit 910 is configured to cluster the traffic data in the target network according to content providers to obtain the traffic data provided by each content provider, dynamically associate the traffic data provided by each content provider with the topology network, and obtain the operating conditions of links and nodes of the traffic data in the topology network.
In this embodiment, the specific scheme when establishing connection with the first routing device is to establish a neighbor relation connection of an IGP routing protocol and/or a BGP routing protocol with the first routing device, that is, to implement a subsequent scheme for acquiring IGP and/or BGP protocol message information, so as to implement a real-time monitoring technique based on an IGP protocol, enter a real-time acquisition of IGP link state update (including IGP devices and IGP neighbors) information in an IP bearer network, and perform automatic real-time maintenance of a three-layer topology network according to the information.
Fig. 10 is a schematic diagram illustrating a framework of a traffic management device 1000 according to an embodiment of the present invention. As shown in fig. 10, the flow management device 1000 according to the present embodiment includes:
a route acquisition unit 1002, configured to acquire, in real time, route information of multiple routing devices in a target network;
a first topology simulation subunit 1004, configured to analyze the routing information to obtain a second routing device and a third routing device, which belong to the same network segment, in the multiple routing devices;
a second topology simulation subunit 1006, configured to obtain an IP address of a second port of the second routing device, and obtain an IP address of a third port of the third routing device;
a third topology simulation subunit 1008, configured to associate the second port with the third port when the IP address of the second port and the IP address of the third port conform to a preset rule, and traverse the routing device to establish a topology network;
a fourth topology simulation subunit 1010, configured to update the established topology network in real time;
a first analysis unit 1012 for marking a content provider of the routing information to generate an information base of the content provider;
the second analysis unit 1014 is configured to cluster the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associate the traffic data provided by each content provider with the topological network, and obtain the operating conditions of links and nodes of the traffic data in the topological network.
In this embodiment, a specific real-time scheme for establishing a topological network is provided. The method comprises the steps of firstly obtaining a second routing device and a third routing device which belong to the same network segment in a plurality of routing devices through routing information, then determining ports connected in the second routing device and the third routing device, namely needing to obtain an IP address of a second port of the second routing device, obtaining an IP address of a third port of the third routing device, only when the IP address of the second port and the IP address of the third port accord with a preset rule, associating the second port with the third port, namely completing the establishment of a link in a topological network, and traversing the routing devices to complete the establishment of the topological network.
For example, when the IP address of the second port is 1.1.1.1/30 and the IP address of the third port is 1.1.1.2/30, the two addresses are considered to meet the preset rule, i.e., the two ports can be connected.
Specifically, it can be determined whether the routing devices belong to the same network through IGP adjacency information in the routing information, and obtain the adjacent IP addresses, adjacent a devices, and adjacent B devices in the IGP adjacency information, and when the adjacent a devices and the adjacent B devices in the IGP adjacency information belong to the same network segment, they can be considered as belonging to the same network segment.
In an embodiment of the present invention, preferably, the step of obtaining an IP address of the second port of the second routing device includes: acquiring a port IP address information table and a port basic information table from the routing information, and associating the port IP address information table and the port basic information table belonging to a second port through a port index number of the port IP address information table and a port index number in the port basic information table to obtain comprehensive information of the second port, wherein the comprehensive information of the second port comprises an IP address, a port index number, a port name and a port width of the second port; and/or acquiring an IP address of a third port of the third routing device, including: and acquiring a port IP address information table and a port basic information table from the routing information, and associating the port IP address information table and the port basic information table belonging to the third port through a port index number of the port IP address information table and a port index number in the port basic information table to obtain comprehensive information of the third port, wherein the comprehensive information of the third port comprises an IP address, a port index number, a port name and a port width of the third port.
In this embodiment, a specific scheme for acquiring the IP address of the second port of the second routing device and acquiring the IP address of the third port of the third routing device is provided. Firstly, acquiring a port IP address information table and a port basic information table in routing information, wherein the port IP address information table and the port basic information table are acquired respectively in a routing acquisition mode and an SNMP acquisition mode, a port index number exists in the port IP address information table, a port index number also exists in the port basic information table, the port index number in the port IP address information table and the port index number in the port basic information table are associated with the port IP address information table and the port basic information table which belong to a second port to obtain comprehensive information of the second port, and the comprehensive information of the second port comprises an IP address, the port index number, a port name and a port width of the second port; similarly, the IP address of the third port can be acquired in the above manner.
Fig. 11 is a block diagram illustrating a traffic management device 1100 according to an embodiment of the present invention. As shown in fig. 11, the traffic management device 1100 according to the present embodiment includes:
a route acquisition unit 1102, configured to acquire, in real time, route information of multiple routing devices in a target network;
the topology simulation unit 1104 is configured to establish a topology network among the plurality of routing devices according to the routing information, and update the established topology network in real time;
a first analyzing unit 1106, configured to obtain address information of the routing information, and mark a content provider of the address information to generate an information base of the content provider;
the second analysis unit 1108 is configured to cluster the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associate the traffic data provided by each content provider with the topology network, and obtain the operating conditions of links and nodes of the traffic data in the topology network.
In this embodiment, when generating the information base of the content provider, the specific manner is to take the address information in the routing information, and sequentially and correspondingly mark each address information as a different content provider, so that the address information marked by each content provider can be obtained in the information base of the content provider, so as to subsequently divide the traffic data into different content providers according to addresses.
In one embodiment of the present invention, preferably, the first analysis unit includes: and comparing the AS number information in the routing information with the information in the AS information base so AS to carry out association marking on the address information in the routing information and the content provider.
In this embodiment, a specific scheme is provided for obtaining address information of routing information and marking a content provider of the address information, where the specific scheme is to first identify AS (autonomous system) number information in the routing information, compare the AS number information in the routing information with information in an AS information base, obtain what content provider the AS number information belongs to through the information in the AS information base, and then perform association marking on the address information corresponding to the AS number information in the routing information and the content provider to achieve association between the content provider and the address information.
In one embodiment of the present invention, preferably, the first analysis unit includes: and analyzing the address information of the clustered content providers of the routing information through a DNS log, and marking the content providers of the address information.
In this embodiment, a specific scheme of a content provider that obtains address information of routing information and labels the address information is provided, and when a corresponding content provider cannot be obtained through AS number information, clustered address information may be analyzed through a DNS log, so AS to search and label address information of each content provider.
Fig. 12 is a schematic diagram illustrating a framework of the traffic management device 12 according to an embodiment of the present invention. As shown in fig. 12, the flow management device 12 according to the present embodiment includes:
a route acquisition unit 1202, configured to acquire, in real time, route information of multiple routing devices in a target network;
a topology simulation unit 1204, configured to establish a topology network among the plurality of routing devices according to the routing information, and update the established topology network in real time;
a first analyzing unit 1206 for marking a content provider of the routing information to generate an information base of the content provider;
a third analyzing subunit 1208, configured to cluster the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider;
a fourth analyzing subunit 1210, configured to iterate traffic data provided by each content provider onto each link of the topology network;
the fifth analyzing subunit 1212 is configured to obtain a traffic ratio of each content provider in each area through a flow analysis manner, establish a traffic analysis model of the content provider according to the traffic ratio, and obtain an operating condition of a link and a node of traffic data in the topology network in the traffic analysis model.
In this embodiment, when associating the traffic data of each content provider with the topology network, the traffic data provided by each content provider may be iterated to each link of the topology network, then a traffic proportion of each content provider in each region is obtained in a flow analysis manner, a traffic analysis model of the content provider is established according to the traffic proportion, that is, a traffic analysis model facing the content provider is implemented in combination with flow analysis, dynamic traffic management of the content provider is implemented, and operating conditions of links and nodes of the traffic data in the topology network are obtained in the traffic analysis model, thereby overcoming the disadvantage of managing the traffic of the content network by a manual manner, and dynamically associating the traffic of the content provider with the topology network, and implementing end-to-end management facing the content traffic.
In an embodiment of the present invention, preferably, AS number information in the routing information is analyzed, and an AS information base is established in a crawler manner.
In this embodiment, the AS information base may be configured to analyze the AS number information in the routing information, and analyze the content provider corresponding to the AS number information in a crawler manner to establish the AS information base, where the AS information base may know a corresponding relationship between the content provider and the AS number information, so that the corresponding content provider may be directly found in the AS information base through the AS number information in the routing information in the following.
In an embodiment of the present invention, preferably, as shown in fig. 13, the traffic management apparatus provided by the present invention may be provided in a computer device, or a topology maintenance software is provided, in which the traffic management method provided by the present invention is applied. In fig. 13, the network with AS1 is a target network for topology maintenance, an IGP routing protocol (ISIS or OSPF) is operated in the network to carry out intra-network link routing, a topology maintenance software code is embedded to implement the ISIS/OSPF protocol, and an IGP neighbor relationship is established with a device in the AS1 domain, so that all IGP protocol messages can be obtained in real time, IGP link state update information is obtained in real time through parsing the messages, and automatic real-time maintenance is performed on a three-layer topology structure of the network according to the device and neighbor information therein.
In an embodiment of the present invention, preferably, as shown in fig. 14, the route collecting unit provided by the present invention may be integrated into a route information collecting module in the figure, and the route information collecting module is used to realize interaction with the routing device.
In another aspect, an embodiment of the present invention provides a traffic management device, where the traffic management device includes: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the traffic management method provided by any one of the above technical solutions is realized. Therefore, the traffic management device provided by the embodiment of the present invention has all the advantages of the traffic management method provided by any of the foregoing embodiments, which are not listed here.
In addition, the traffic management method according to the embodiment of the present invention described with reference to fig. 1 to 6 may be implemented by a traffic management device. Fig. 16 is a schematic diagram illustrating a hardware structure of a traffic management device according to an embodiment of the present invention.
The flow management device may include a processor 401 and a memory 402 storing computer program instructions.
Specifically, the processor 401 may include a Central Processing Unit (CPU), or an Application Specific Integrated Circuit (ASIC), or may be configured as one or more Integrated circuits implementing embodiments of the present invention.
Memory 402 may include mass storage for data or instructions. By way of example, and not limitation, memory 402 may include a Hard Disk Drive (HDD), floppy Disk Drive, flash memory, optical Disk, magneto-optical Disk, tape, or Universal Serial Bus (USB) Drive or a combination of two or more of these. Memory 402 may include removable or non-removable (or fixed) media, where appropriate. The memory 402 may be internal or external to the data processing apparatus, where appropriate. In a particular embodiment, the memory 402 is a non-volatile solid-state memory. In a particular embodiment, the memory 402 includes Read Only Memory (ROM). Where appropriate, the ROM may be mask-programmed ROM, Programmable ROM (PROM), Erasable PROM (EPROM), Electrically Erasable PROM (EEPROM), electrically rewritable ROM (EAROM), or flash memory or a combination of two or more of these.
The processor 401 may implement any of the traffic management methods in the above embodiments by reading and executing computer program instructions stored in the memory 402.
In one example, the traffic management device may also include a communication interface 403 and a bus 410. As shown in fig. 16, the processor 401, the memory 402, and the communication interface 403 are connected by a bus 410 to complete communication therebetween.
The communication interface 403 is mainly used for implementing communication between modules, apparatuses, units and/or devices in the embodiments of the present invention.
The bus 410 includes hardware, software, or both to couple the components of the traffic management device to each other. By way of example, and not limitation, a bus may include an Accelerated Graphics Port (AGP) or other graphics bus, an Enhanced Industry Standard Architecture (EISA) bus, a Front Side Bus (FSB), a Hypertransport (HT) interconnect, an Industry Standard Architecture (ISA) bus, an infiniband interconnect, a Low Pin Count (LPC) bus, a memory bus, a Micro Channel Architecture (MCA) bus, a Peripheral Component Interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a Serial Advanced Technology Attachment (SATA) bus, a video electronics standards association local (VLB) bus, or other suitable bus or a combination of two or more of these. Bus 410 may include one or more buses, where appropriate. Although specific buses have been described and shown in the embodiments of the invention, any suitable buses or interconnects are contemplated by the invention.
In addition, in combination with the traffic management method in the foregoing embodiment, the embodiment of the present invention may be implemented by providing a computer-readable storage medium. The computer readable storage medium having stored thereon computer program instructions; the computer program instructions, when executed by a processor, implement any of the traffic management methods in the above embodiments.
It is to be understood that the invention is not limited to the specific arrangements and instrumentality described above and shown in the drawings. A detailed description of known methods is omitted herein for the sake of brevity. In the above embodiments, several specific steps are described and shown as examples. However, the method processes of the present invention are not limited to the specific steps described and illustrated, and those skilled in the art can make various changes, modifications and additions or change the order between the steps after comprehending the spirit of the present invention.
The functional blocks shown in the above-described structural block diagrams may be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, it may be, for example, an electronic circuit, an Application Specific Integrated Circuit (ASIC), suitable firmware, plug-in, function card, or the like. When implemented in software, the elements of the invention are the programs or code segments used to perform the required tasks. The program or code segments may be stored in a machine-readable medium or transmitted by a data signal carried in a carrier wave over a transmission medium or a communication link. A "machine-readable medium" may include any medium that can store or transfer information. Examples of a machine-readable medium include electronic circuits, semiconductor memory devices, ROM, flash memory, Erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, fiber optic media, Radio Frequency (RF) links, and so forth. The code segments may be downloaded via computer networks such as the internet, intranet, etc.
It should also be noted that the exemplary embodiments mentioned in this patent describe some methods or systems based on a series of steps or devices. However, the present invention is not limited to the order of the above-described steps, that is, the steps may be performed in the order mentioned in the embodiments, may be performed in an order different from the order in the embodiments, or may be performed simultaneously.
As described above, only the specific embodiments of the present invention are provided, and it can be clearly understood by those skilled in the art that, for convenience and brevity of description, the specific working processes of the system, the module and the unit described above may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again. It should be understood that the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive various equivalent modifications or substitutions within the technical scope of the present invention, and these modifications or substitutions should be covered within the scope of the present invention.

Claims (13)

1. A method of traffic management, the method comprising:
acquiring routing information of a plurality of routing devices in a target network in real time;
establishing a topological network among the plurality of routing devices according to the routing information, and updating the established topological network in real time;
marking a content provider of the routing information to generate an information base of the content provider;
and clustering the traffic data in the target network according to the content providers to obtain the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and obtaining the operating conditions of links and nodes of the traffic data in the topological network.
2. The traffic management method of claim 1, further comprising:
establishing a connection with a first routing device in the target network;
the step of obtaining the routing information of a plurality of routing devices in the target network in real time includes:
and acquiring the routing information of the plurality of routing devices in the target network in real time through the first routing device, wherein the routing information comprises an IGP protocol message.
3. The traffic management method according to claim 1, wherein the step of establishing a connection with a first routing device in the target network comprises:
and establishing a neighbor relation connection of an IGP routing protocol and/or a BGP routing protocol with the first routing equipment.
4. The traffic management method according to claim 1, wherein the step of establishing the topological network among the plurality of routing devices according to the routing information comprises:
analyzing the routing information to obtain a second routing device and a third routing device which belong to the same network segment in the plurality of routing devices;
acquiring an IP address of a second port of the second routing equipment, and acquiring an IP address of a third port of the third routing equipment;
and when the IP address of the second port and the IP address of the third port accord with a preset rule, associating the second port with the third port, and traversing the routing equipment to establish the topological network.
5. The traffic management method according to claim 1, wherein the step of obtaining the IP address of the second port of the second routing device comprises:
acquiring a port IP address information table and a port basic information table from the routing information, and associating the port IP address information table and the port basic information table belonging to the second port through a port index number of the port IP address information table and a port index number in the port basic information table to obtain comprehensive information of the second port, wherein the comprehensive information of the second port comprises an IP address, a port index number, a port name and a port width of the second port; and/or
The step of obtaining the IP address of the third port of the third routing device includes:
acquiring a port IP address information table and a port basic information table from the routing information, and associating the port IP address information table and the port basic information table belonging to the third port through a port index number of the port IP address information table and a port index number in the port basic information table to obtain comprehensive information of the third port, wherein the comprehensive information of the third port comprises an IP address, a port index number, a port name and a port width of the third port.
6. The traffic management method according to any one of claims 1 to 5, wherein the step of marking a content provider of the routing information to generate an information base of the content provider comprises:
and acquiring address information of the routing information, and marking a content provider of the address information to generate an information base of the content provider.
7. The content traffic management method according to claim 6, wherein the step of obtaining the address information of the routing information and marking the content provider of the address information comprises:
and comparing AS number information in the routing information with information in an AS information base so AS to carry out association marking on the address information in the routing information and the content provider.
8. The traffic management method according to claim 6, wherein the step of obtaining the address information of the routing information and marking a content provider of the address information comprises:
clustering address information of the content providers of the routing information through DNS log analysis, and marking the content providers of the address information.
9. The traffic management method according to any one of claims 1 to 5, wherein the step of dynamically associating the traffic data provided by each content provider with the topological network to obtain the operating conditions of links and nodes of the traffic data in the topological network comprises:
iterating said traffic data provided by each of said content providers onto each link of said topological network;
and acquiring the traffic ratio of each content provider in each region in a flow analysis mode, establishing a traffic analysis model of the content provider according to the traffic ratio, and acquiring the operating conditions of links and nodes of the traffic data in the topological network in the traffic analysis model.
10. The traffic management method according to any one of claims 1 to 5,
and analyzing AS number information in the routing information, and establishing an AS information base in a crawler mode.
11. A traffic management device, the device comprising:
the routing acquisition unit is used for acquiring routing information of a plurality of routing devices in a target network in real time;
the topology simulation unit is used for establishing a topology network among the plurality of routing devices according to the routing information and updating the established topology network in real time;
a first analysis unit, configured to mark a content provider of the routing information to generate an information base of the content provider;
and the second analysis unit is used for clustering the traffic data in the target network according to the content providers to acquire the traffic data provided by each content provider, dynamically associating the traffic data provided by each content provider with the topological network, and acquiring the operating conditions of links and nodes of the traffic data in the topological network.
12. A traffic management device, comprising: at least one processor, at least one memory, and computer program instructions stored in the memory that, when executed by the processor, implement the method of any of claims 1-10.
13. A computer-readable storage medium having computer program instructions stored thereon, which when executed by a processor implement the method of any one of claims 1-10.
CN201811402021.0A 2018-11-22 2018-11-22 Traffic management method, device, equipment and medium Active CN111211979B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201811402021.0A CN111211979B (en) 2018-11-22 2018-11-22 Traffic management method, device, equipment and medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201811402021.0A CN111211979B (en) 2018-11-22 2018-11-22 Traffic management method, device, equipment and medium

Publications (2)

Publication Number Publication Date
CN111211979A true CN111211979A (en) 2020-05-29
CN111211979B CN111211979B (en) 2022-04-01

Family

ID=70785778

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201811402021.0A Active CN111211979B (en) 2018-11-22 2018-11-22 Traffic management method, device, equipment and medium

Country Status (1)

Country Link
CN (1) CN111211979B (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116192677A (en) * 2022-12-21 2023-05-30 北京安天网络安全技术有限公司 Network flow data differentiated storage method and electronic equipment

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101043453A (en) * 2007-03-19 2007-09-26 华为技术有限公司 Method and apparatus for gathering and analyzing flux
CN105391638A (en) * 2015-10-14 2016-03-09 中国科学院计算技术研究所 OSPF and ISIS routing traffic data fusion method and system
CN105871602A (en) * 2016-03-29 2016-08-17 华为技术有限公司 Control method, device and system for counting traffic

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101043453A (en) * 2007-03-19 2007-09-26 华为技术有限公司 Method and apparatus for gathering and analyzing flux
CN105391638A (en) * 2015-10-14 2016-03-09 中国科学院计算技术研究所 OSPF and ISIS routing traffic data fusion method and system
CN105871602A (en) * 2016-03-29 2016-08-17 华为技术有限公司 Control method, device and system for counting traffic

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
焦丁华等: "基于路由的网络流量监测系统设计与实现", 《计算机与网络》 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116192677A (en) * 2022-12-21 2023-05-30 北京安天网络安全技术有限公司 Network flow data differentiated storage method and electronic equipment
CN116192677B (en) * 2022-12-21 2024-04-30 北京安天网络安全技术有限公司 Network flow data differentiated storage method and electronic equipment

Also Published As

Publication number Publication date
CN111211979B (en) 2022-04-01

Similar Documents

Publication Publication Date Title
CN110266594B (en) Cross-network-slice segmented routing forwarding method and device
JP4244940B2 (en) Network quality degradation location estimation apparatus, quality degradation location estimation method, and quality degradation location estimation program
CN1677940B (en) High-speed traffic measurement and analysis methodologies and protocols
US20020055999A1 (en) System and method for measuring quality of service
EP2050237B1 (en) Mapping off-network traffic to an administered network
CN105745870A (en) Removing lead filter from serial multiple-stage filter used to detect large flows in order to purge flows for prolonged operation
US8830850B2 (en) Network monitoring device, network monitoring method, and network monitoring program
EP2146477B1 (en) A method, system and device for sampling message
EP3293917B1 (en) Path probing using an edge completion ratio
CN109672562B (en) Data processing method and device, electronic equipment and storage medium
US20140369238A1 (en) System and method for identifying an ingress router of a flow when no ip address is associated with the interface from which the flow was received
US20130042020A1 (en) Quick Network Path Discovery
CN113949650A (en) Stream following detection method and related equipment
CN101056219B (en) A method and system for realizing the network performance measurement
CN112543473A (en) Test method, device and equipment based on network element simulation and computer storage medium
CN111211979B (en) Traffic management method, device, equipment and medium
EP3751791A1 (en) Identification of traceroute nodes and associated devices
CN113746654A (en) IPv6 address management and flow analysis method and device
CN109962801B (en) Communication quality abnormity positioning method, device, equipment and medium
US20130235764A1 (en) Validating reachability of nodes of a network of an industrial automation and control system
CN112671654A (en) Routing information updating method, device, equipment, medium and OSPF network
US20150288766A1 (en) Establishing neighbor connection
CN111010362B (en) Monitoring method and device for abnormal host
CN113810274A (en) Route processing method and related equipment
CN105187276A (en) Link connection/disconnection detection method and system under OSPFv3 protocol in IPV6 network environment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant