CN111385163A - Flow analysis and detection method and device - Google Patents

Flow analysis and detection method and device Download PDF

Info

Publication number
CN111385163A
CN111385163A CN201811643664.4A CN201811643664A CN111385163A CN 111385163 A CN111385163 A CN 111385163A CN 201811643664 A CN201811643664 A CN 201811643664A CN 111385163 A CN111385163 A CN 111385163A
Authority
CN
China
Prior art keywords
detection
message
sending
packet
network
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201811643664.4A
Other languages
Chinese (zh)
Inventor
徐春松
钟炜
沈益明
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ZTE Corp
Original Assignee
ZTE Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ZTE Corp filed Critical ZTE Corp
Priority to CN201811643664.4A priority Critical patent/CN111385163A/en
Priority to PCT/CN2019/127979 priority patent/WO2020135429A1/en
Publication of CN111385163A publication Critical patent/CN111385163A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0823Errors, e.g. transmission errors
    • H04L43/0829Packet loss
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0852Delays
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0852Delays
    • H04L43/087Jitter
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/08Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876Network utilisation, e.g. volume of load or congestion level
    • H04L43/0888Throughput
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/50Testing arrangements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40Network security protocols

Abstract

The invention provides a method and a device for analyzing and detecting flow. Specifically, the flow rate analysis method includes: the method comprises the steps that a sending terminal device generates a detection message of service flow and sends the detection message to a reflecting terminal device through a network; and the sending end receives a response message returned by the reflection end equipment and analyzes the forwarding performance of the service flow in the network. The invention solves the problem that the forwarding of real messages cannot be reflected due to the inconsistency of the test path and the actual service path in the related technology, provides more powerful and practical functions of routing inspection and monitoring, improves the customer experience, and meets the requirements of service development such as large video and the like.

Description

Flow analysis and detection method and device
Technical Field
The invention relates to the field of communication, in particular to a method and a device for analyzing and detecting flow.
Background
In the existing network, if the performance of various service flows forwarded in the network can be tested, the real-time measurement and monitoring capabilities of network equipment are perfected and enriched, more real, effective and practical data are provided for an operator, the operator is helped to learn network conditions finely, customer experience is improved, and in addition, the function is necessary to be provided along with the development of large videos. At present, the performance test is usually based on RFC2544/Y.1564, the standard defines the message based on the UDP protocol, and the destination port number of the UDP message is 7 and the source port number is 0xC020 under the default condition. However, the performance parameters obtained by the method can only reflect the forwarding performance of the network for the specific message, that is, the test message is different from the actual message in the network (because the message is based on the UDP protocol, the protocol number in the IP header is fixed, and the UDP port number is also specific), the traffic in the actual network is very rich and different, the Qos and forwarding processing of different streams are different, and the existing network is actually a large number of ecmp and ucmp environments, which has the problem that the test path is not consistent with the actual service path, and the forwarding condition of the actual message cannot be reflected, so that the forwarding performance data of the normal existing network traffic cannot be provided.
Disclosure of Invention
The embodiment of the invention provides a method and a device for analyzing and detecting flow, which are used for at least solving the problem that the forwarding condition of a real message cannot be reflected due to the inconsistency of a test path and an actual service path in the related art.
According to an embodiment of the present invention, there is provided a traffic analysis method including: the method comprises the steps that a sending terminal device generates a detection message of service flow and sends the detection message to a reflecting terminal device through a network; and the sending end receives a response message returned by the reflection end equipment and analyzes the forwarding performance of the service flow in the network.
Optionally, the sending end device generating the detection packet of the service traffic includes one of: the sending end equipment generates the detection message according to the template of the service flow; the sending terminal equipment captures the message of the service flow and carries out corresponding processing to generate the detection message
Optionally, the generating, by the sending end device, the detection packet includes: the sending end device writes sending information of the sending end device into the detection message, wherein the sending information at least comprises one of the following information: the type of the detection message, the field information in the detection message, the sending time of the detection message, the identification information of the detection message, and the verification code information of the detection message.
Optionally, the detecting the type of the packet at least includes: throughput rate detection messages, packet loss rate detection messages, delay detection messages, and jitter detection messages.
Optionally, when the detection packet includes a throughput rate detection packet, analyzing the traffic detection result carried in the response packet, including: the sending end equipment counts the number of the messages carried in the response message; and the sending end equipment determines the data packet PPS data according to the sending time of the detection message and the number of the messages carried in the response message.
Optionally, when the detection packet includes a packet loss rate detection packet, analyzing forwarding performance of the service traffic in the network, including: the sending end equipment counts the number of the response messages; and the sending end equipment determines the difference value between the number of the detection messages and the number of the response messages, and determines the packet loss rate corresponding to the flow according to the difference value.
Optionally, when the detection packet includes a delay detection packet, analyzing forwarding performance of the service traffic in the network includes: and the sending end equipment acquires the receiving and sending time information carried by the response message and determines the bidirectional delay data corresponding to the flow.
Optionally, when the detection packet includes a jitter detection packet, analyzing forwarding performance of the service traffic in the network includes: and the sending end equipment determines a jitter result corresponding to the flow according to the time delay data.
Optionally, the determining, by the sending end device, the jitter result according to the delay data includes: the sending terminal equipment calculates the time delay data difference value between the time delay data in the response message; and the sending end equipment summarizes the time delay data difference values to generate a time delay data difference value set used for reflecting the jitter result.
Optionally, after analyzing the forwarding performance, the method further includes: and sending the analysis result to a display device for displaying the flow detection result for display.
According to an embodiment of the present invention, there is provided a method for detecting traffic, including: the method comprises the steps that a reflection end device receives a detection message of service flow generated and sent by a sending end device; the reflection end equipment identifies the detection message and carries out corresponding detection; and the reflection end equipment writes the forwarding performance related data of the service flow in the network into a response message and returns the response message to the sending end equipment through the network.
Optionally, the identifying, by the reflection end device, the detection packet includes: the reflection end device identifies the sending information of the sending end device in the detection message, wherein the sending information at least comprises one of the following information: the type of the detection message, the field information in the detection message, the sending time of the detection message, the identification information of the detection message, and the verification code information of the detection message.
Optionally, the identifying, by the reflection-end device, the detection packet further includes: and the reflection end equipment carries out verification according to the verification code information of the detection message and carries out identification according to the identification information of the detection message.
Optionally, the detecting the type of the packet at least includes: throughput rate detection messages, packet loss rate detection messages, delay detection messages, and jitter detection messages.
Optionally, when the detection packet includes the delay detection packet and/or the jitter detection packet, the reflection end device writes forwarding performance of the service traffic in a network into a response packet, including: and the reflection end equipment writes the receiving time of the delay detection message and/or the jitter detection message into a timestamp field in the response message.
According to an embodiment of the present invention, there is provided a traffic analysis apparatus, located in a sending-end device, including: the sending module is used for generating a detection message of the service flow and sending the detection message to the reflection terminal equipment through a network; and the analysis module is used for receiving the response message returned by the reflection end equipment and analyzing the forwarding performance related data of the service flow in the network.
According to an embodiment of the present invention, there is provided a device for detecting a flow rate, located in a reflection-end device, including: the receiving module is used for receiving a detection message of the service flow generated and sent by the sending end equipment; the detection module is used for identifying the detection message and carrying out corresponding detection; and the feedback module is used for writing the forwarding performance related data of the service flow in the network into a response message and returning the response message to the sending terminal equipment through the network.
According to a further embodiment of the present invention, there is also provided a storage medium having a computer program stored therein, wherein the computer program is arranged to perform the steps of any of the above method embodiments when executed.
According to yet another embodiment of the present invention, there is also provided an electronic device, including a memory in which a computer program is stored and a processor configured to execute the computer program to perform the steps in any of the above method embodiments.
According to the invention, the sending terminal equipment is used for generating the message with the requirement for detecting the service flow in the network, meanwhile, the sending terminal equipment carries out detection according to the message, and the sending terminal equipment carries out flow analysis according to the result, so that the problem that the forwarding of the real message cannot be reflected due to the fact that the test path is inconsistent with the actual service path in the related technology can be solved, stronger and practical functions of routing inspection and monitoring are provided, the customer experience is improved, and the requirement for developing the large video service is met.
Drawings
The accompanying drawings, which are included to provide a further understanding of the invention and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the invention and together with the description serve to explain the invention without limiting the invention. In the drawings:
FIG. 1 is a flow chart of an analysis of traffic according to an embodiment of the present invention;
fig. 2 is a message format diagram of a throughput rate detection message or a packet loss rate detection message according to an embodiment of the present invention;
fig. 3 is a message format diagram of a delay detection message or a jitter detection message according to an embodiment of the present invention;
FIG. 4 is a flow chart of an analysis of traffic according to an embodiment of the present invention;
fig. 5 is a schematic diagram of loopback transmission of a message according to an embodiment of the present invention;
fig. 6 is a block diagram of a flow rate analyzing apparatus according to an embodiment of the present invention;
fig. 7 is a block diagram of a flow rate detection device according to an embodiment of the present invention.
Detailed Description
The invention will be described in detail hereinafter with reference to the accompanying drawings in conjunction with embodiments. It should be noted that the embodiments and features of the embodiments in the present application may be combined with each other without conflict.
It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order.
Example 1
In the present embodiment, a method for analyzing a flow rate is provided, and fig. 1 is a flowchart for analyzing a flow rate according to an embodiment of the present invention, as shown in fig. 1, the flowchart includes the following steps:
step S102, a sending terminal device generates a detection message of service flow and sends the detection message to a reflecting terminal device through a network;
step S104, the sending end receives the response message returned by the reflection end equipment and analyzes the forwarding performance of the service flow in the network.
Optionally, the sending end device generates the detection packet of the service traffic, where the detection packet includes one of: the sending end equipment generates the detection message according to the template of the service flow; and the sending end equipment captures the message of the service flow and carries out corresponding processing to generate the detection message.
Specifically, the corresponding processing includes: and copying the captured message of the service flow.
Optionally, the generating, by the sending end device, the detection packet includes: the sending end device writes sending information of the sending end device into the detection message, wherein the sending information at least comprises one of the following information: the type of the detection message, the field information in the detection message, the sending time of the detection message, the identification information of the detection message, and the verification code information of the detection message.
Optionally, the detecting the type of the packet at least includes: throughput rate detection messages, packet loss rate detection messages, delay detection messages, and jitter detection messages.
Specifically, fig. 2 is a message format diagram of a throughput rate detection message or a packet loss rate detection message according to an embodiment of the present invention. As shown in fig. 2, fig. 2 is a throughput rate detection packet or a packet loss rate detection packet determined according to a PDU data format. Type in fig. 2 represents the type of the detection packet. The flow _ id represents the session number of the test session and is used for counting the number of sent and received packets and the number of bytes. Sequence represents the packet loss judgment for continuous packet transmission or the reservation of other extended functions. feature code represents a feature code for distinguishing the flow test message from the normal service message, and may also be an identification code specific to the flow test message. feature code length represents the field length of the feature code. Padding represents Padding filled according to the length of the message. The verify code represents a verification code, which is information calculated from PDU data other than the verify code, and is used to verify the detection packet. Specifically, fig. 3 is a message format diagram of a delay detection message or a jitter detection message according to an embodiment of the present invention. As shown in fig. 3, fig. 3 is a delay detection packet or jitter detection packet determined according to the PDU data format. The description is not repeated. Wherein, the timestamp represents the sending time for recording the sending message and/or the receiving time for receiving the message.
In addition, it should be noted that the traffic verification message of PDU data is only an example, and for example, adding the above-mentioned fields in the message format defined in RFC2544 is also within the message scope of this embodiment.
Optionally, when the detection packet includes a throughput rate detection packet, analyzing forwarding performance of the service traffic in the network includes: the sending end equipment counts the number of the messages carried in the response message; and the sending end equipment determines the data packet PPS data according to the sending time of the detection message and the number of the messages carried in the response message.
Throughput is the ability of testing network forwarding packets, and refers to the limit of forwarding packets per second without packet loss. Generally, a dichotomy is used to find a limit point, that is, a test is started from the line speed to find the maximum transmission bandwidth of the network under the condition of no packet loss. The test time should generally not be less than 1 minute.
For example, the throughput may be performed as follows:
1. the transmitter firstly tests the lower limit 10% according to the fixed frame length, and transmits 60s (the upper layer can be configured according to the transmission time length) Ethernet frames according to the 10% flow. If some Ethernet frames are lost (judged by the sending frame number, the received sequence number and the received frame number), the device cannot pass the flow, and then the step 6 is carried out; if the flow can be completely received, the flow test is passed, and the step 2 is switched;
2. testing the upper limit of 100%, if the upper limit can be passed, indicating that the throughput is 100%, and turning to step 6; if not, turning to the step 3;
3. the emitter was tested at 50% flow. If the test fails, the test is performed by setting the test to 25 percent; if yes, turning to step 4;
4. the emitter was tested at (100% + 50%)/2 ═ 75% flow, if it could pass, at (100% + 75%)/2 ═ 87.5%; if not, as (50% + 75%)/2 ═ 62.5%;
5. in this way, until the accuracy is 1% (the accuracy can be configured), a certain set value of the flow rate is passed, and the flow rate is the throughput of the tested network in the frame length;
6. and judging whether all the frame lengths (64, 128, 256, 512, 1024, 1280 and 1518) are tested, if so, turning to the step 7, and if not, turning to the step 1, and replacing the length of another message.
7. And generating a test result report.
Optionally, when the detection packet includes a packet loss rate detection packet, analyzing forwarding performance of the service traffic in the network, including: the sending end equipment counts the number of the response messages; and the sending end equipment determines the difference value between the number of the detection messages and the number of the response messages, and determines the packet loss rate corresponding to the flow according to the difference value.
Optionally, when the detection packet includes a delay detection packet, analyzing forwarding performance of the service traffic in the network includes: and the sending end equipment acquires the receiving and sending time information carried by the response message and determines the bidirectional delay data corresponding to the flow.
Specifically, the delay data may be determined according to a comparison between the receiving time of the current response packet and a preset receiving time. Of course, other ways of calculating the delay data are within the scope of the present embodiment.
Optionally, when the detection packet includes a jitter detection packet, analyzing forwarding performance of the service traffic in the network includes: and the sending end equipment determines a jitter result corresponding to the flow according to the time delay data.
Optionally, the determining, by the sending end device, the jitter result according to the delay data includes: the sending terminal equipment calculates the time delay data difference value between the time delay data in the response message; and the sending end equipment summarizes the time delay data difference values to generate a time delay data difference value set used for reflecting the jitter result.
Specifically, considering that the number of the detection messages sent by the sending end device may be multiple, after determining the delay data of each detection message, the delay data of the detection messages are sequentially compared according to the receiving sequence, and the difference between the delay data of the detection messages corresponding to adjacent receiving times is obtained. Therefore, the variation of the delay data, i.e., the jitter result, can be acquired.
Optionally, after analyzing the forwarding performance, the method further includes: and sending the analysis result to a display device for displaying the flow detection result for display.
Through the above description of the embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but the former is a better implementation mode in many cases. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (e.g., ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal device (e.g., a mobile phone, a computer, a server, or a network device) to execute the method according to the embodiments of the present invention.
Example 2
In this embodiment, a method for detecting traffic is provided, which has already been described and will not be described again. Fig. 4 is a flow chart of an analysis of a flow rate according to an embodiment of the present invention, as shown in fig. 4, the flow chart includes the following steps:
step S402, the reflection end equipment receives the detection message of the service flow generated and sent by the sending end equipment;
and S404, the reflection end equipment identifies the detection message and carries out corresponding detection.
Step S406, the reflection end device writes the forwarding performance related data of the service traffic in the network into a response message, and returns the response message to the sending end device through the network.
Optionally, the identifying, by the reflection end device, the detection packet includes: the reflection end device identifies the sending information of the sending end device in the detection message, wherein the sending information at least comprises one of the following information: the type of the detection message, the field information in the detection message, the sending time of the detection message, the identification information of the detection message, and the verification code information of the detection message.
Optionally, the identifying, by the reflection-end device, the detection packet further includes: and the reflection end equipment carries out verification according to the verification code information of the detection message and carries out identification according to the identification information of the detection message.
Specifically, according to the formats of the detection packets described in embodiment 1 and illustrated in fig. 2 and 3, by performing access control table ACL matching, the reflection-side device verifies the verify code in the detection packet when performing verification, and identifies the feature code when performing identification. By authentication and identification, the reflection end equipment can distinguish the common service message from the flow detection service message, does not affect normal service, and can ensure the safety of current flow detection through verification. In addition, the detection message is updated in real time according to the service requirement. Therefore, the use of the detection message of the old version can be avoided through verification, and resources are saved.
Optionally, the detecting the type of the packet at least includes: throughput rate detection messages, packet loss rate detection messages, delay detection messages, and jitter detection messages.
Optionally, when the detection packet includes the delay detection packet and/or the jitter detection packet, the reflection end device writes data related to forwarding performance of the service traffic in the network into a response packet, including: and the reflection end equipment writes the receiving time of the delay detection message and/or the jitter detection message into a timestamp field in the response message.
In addition, it should be noted that the reflection-end device may send the message back by exchanging the message information such as IP and Mac in the received detection message. Fig. 5 is a schematic diagram of loopback transmission of a message according to an embodiment of the present invention. As shown in fig. 5. A is a sending terminal device, and B is a reflecting terminal device. The MAC B and IP B as the target in the receiving frame of the message are detected, and the MAC A and IP A are exchanged in the response message. Similarly, MAC a, IP a, which is the source, is exchanged as MACB, IP B. Of course, it is also within the scope of the message of the present embodiment to exchange only MAC, or only IP. And will not be described herein in more detail. Therefore, by the method, the flow detection can be completed under the condition of not adding extra message resources, so that the resources can be saved.
In addition, in order to better understand the technical solutions described in the above embodiments, the following scenarios are also provided for reference:
scene 1:
step 1: in the engineering implementation phase, the flow needs to be constructed as required, and an L3 message is constructed at the transmitting end through a template, wherein the message comprises a PDU part. Particularly, for the time delay and jitter test messages, the first timestamp field is filled with the sent timestamp, and in addition, all the test messages can calculate the correct verify code value according to the algorithm, and the messages are supplemented, and the like.
Step 2: and the reflecting end receives the message and identifies and reflects the message. The reflection end identifies the test flow and mainly realizes the verification of PDU verify code and the field comparison of PDU by ACL matching. And according to the related configuration modification message, such as the exchange IP and the mac, sending the message in a loopback mode. As shown in the following figures. If the test message is the time delay and jitter test message, the receiving time is counted on the second time frame and the third time frame.
And step 3: the transmitting end receives the message which is transmitted by the network and reflected by the reflecting end, and the message is identified and processed. And the throughput rate is calculated according to the sending time and the received message. The packet loss rate can be obtained by calculating the difference between the number of the sent and received messages. The time delay data can be obtained by calculation according to the time stamp carried in the message, and the jitter can be obtained by the time delay data. After the data are obtained, the data can be uploaded to a control platform, and the data are displayed through an interface.
Scene 2:
step 1: the existing network flow test can adopt the method that a corresponding message is constructed at a transmitting end or a tested message is captured and copied according to the configuration, for the copied message, if the message is a TCP message or a UDP message, correct PDU data content is added behind the header of the TCP message or the UDP message, and other messages add the PDU to a part l 4. Particularly, for the delay and jitter test messages, the first timestamp field is filled with the sent timestamp, and in addition, all the test messages can calculate the correct verifycode value according to the algorithm, and the messages are supplemented.
Step 2: and the reflecting end receives the message and identifies and reflects the message. The reflection end identifies the test flow and mainly realizes the verification of PDU verify code and the field comparison of PDU by ACL matching. And according to the related configuration modification message, such as the exchange IP and the mac, sending the message in a loopback mode. As shown in the following figures. If the test message is the time delay and jitter test message, the receiving time is counted on the second time frame and the third time frame.
And step 3: the transmitting end receives the message which is transmitted by the network and reflected by the reflecting end, and the message is identified and processed. And the throughput rate is calculated according to the sending time and the received message. The packet loss rate can be obtained by calculating the difference between the number of the sent and received messages. The time delay data can be obtained by calculation according to the time stamp carried in the message, and the jitter can be obtained by the time delay data. After the data are obtained, the data can be uploaded to a control platform, and the data are displayed through an interface.
Scene 3:
step 1: the PTP protocol is used for time synchronization in the whole network.
Step 2: other processing is the same as the implementation steps, and due to the adoption of PTP time synchronization, unidirectional delay and jitter can be calculated through the time stamps received by the reflecting end and sent by the transmitting end.
Example 3
In this embodiment, a flow analysis device is further provided, and the device is used to implement the foregoing embodiments and preferred embodiments, and details of which have been already described are omitted. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the means described in the embodiments below are preferably implemented in software, an implementation in hardware, or a combination of software and hardware is also possible and contemplated.
Fig. 6 is a block diagram of a structure of an apparatus for analyzing traffic according to an embodiment of the present invention, as shown in fig. 6, located in a sending-end device, where the apparatus includes: a sending module 62 and an analyzing module 64.
A sending module 62, configured to generate a detection packet of service traffic, and send the detection packet to a reflection-end device through a network;
and the analysis module 64 is configured to receive a response packet returned by the reflection-end device, and analyze forwarding performance of the service traffic in the network.
It should be noted that, the above modules may be implemented by software or hardware, and for the latter, the following may be implemented, but not limited to: the modules are all positioned in the same processor; alternatively, the modules are respectively located in different processors in any combination.
Example 3
In this embodiment, a flow analysis device is further provided, and the device is used to implement the foregoing embodiments and preferred embodiments, and details of which have been already described are omitted. As used below, the term "module" may be a combination of software and/or hardware that implements a predetermined function. Although the means described in the embodiments below are preferably implemented in software, an implementation in hardware, or a combination of software and hardware is also possible and contemplated.
Fig. 7 is a block diagram of a flow rate detecting apparatus according to an embodiment of the present invention, which is located in a reflection-end device as shown in fig. 7, and includes: a receiving module 72, a detection module 74, and a feedback module 76.
A receiving module 72, configured to receive a detection packet of a service flow generated and sent by a sending-end device;
the detection module 74 is configured to identify the detection packet and perform corresponding detection;
and a feedback module 76, configured to write the data related to the forwarding performance of the service traffic in the network into a response message, and return the response message to the sender device through the network.
It should be noted that, the above modules may be implemented by software or hardware, and for the latter, the following may be implemented, but not limited to: the modules are all positioned in the same processor; alternatively, the modules are respectively located in different processors in any combination.
Example 5
Embodiments of the present invention also provide a storage medium having a computer program stored therein, wherein the computer program is arranged to perform the steps of any of the above method embodiments when executed.
Alternatively, in the present embodiment, the storage medium may be configured to store a computer program for executing the steps of:
s1, the sending terminal equipment generates a detection message of the service flow and sends the detection message to the reflecting terminal equipment through the network;
and S2, the sending end receives the response message returned by the reflection end equipment and analyzes the forwarding performance of the service flow in the network.
Or the like, or, alternatively,
s1, the reflection end equipment receives the detection message of the service flow generated and sent by the sending end equipment;
s2, the reflection terminal equipment identifies the detection message and carries out corresponding detection;
s3, the reflection end device writes the forwarding performance related data of the service traffic in the network into a response message, and returns the response message to the sending end device through the network.
Optionally, in this embodiment, the storage medium may include, but is not limited to: various media capable of storing computer programs, such as a usb disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic disk, or an optical disk.
Embodiments of the present invention also provide an electronic device comprising a memory having a computer program stored therein and a processor arranged to run the computer program to perform the steps of any of the above method embodiments.
Optionally, the electronic apparatus may further include a transmission device and an input/output device, wherein the transmission device is connected to the processor, and the input/output device is connected to the processor.
Optionally, in this embodiment, the processor may be configured to execute the following steps by a computer program:
s1, the sending terminal equipment generates a detection message of the service flow and sends the detection message to the reflecting terminal equipment through the network;
and S2, the sending end receives the response message returned by the reflection end equipment and analyzes the forwarding performance of the service flow in the network.
Or the like, or, alternatively,
s1, the reflection end equipment receives the detection message of the service flow generated and sent by the sending end equipment;
s2, the reflection terminal equipment identifies the detection message and carries out corresponding detection;
s3, the reflection end device writes the forwarding performance related data of the service traffic in the network into a response message, and returns the response message to the sending end device through the network.
Optionally, the specific examples in this embodiment may refer to the examples described in the above embodiments and optional implementation manners, and this embodiment is not described herein again.
It will be apparent to those skilled in the art that the modules or steps of the present invention described above may be implemented by a general purpose computing device, they may be centralized on a single computing device or distributed across a network of multiple computing devices, and alternatively, they may be implemented by program code executable by a computing device, such that they may be stored in a storage device and executed by a computing device, and in some cases, the steps shown or described may be performed in an order different than that described herein, or they may be separately fabricated into individual integrated circuit modules, or multiple ones of them may be fabricated into a single integrated circuit module. Thus, the present invention is not limited to any specific combination of hardware and software.
The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the principle of the present invention should be included in the protection scope of the present invention.

Claims (19)

1. A method for analyzing a flow rate, comprising:
the method comprises the steps that a sending terminal device generates a detection message of service flow and sends the detection message to a reflecting terminal device through a network;
and the sending end receives a response message returned by the reflection end equipment and analyzes the forwarding performance of the service flow in the network.
2. The method according to claim 1, wherein the sending end device generating the detection message of the traffic flow comprises one of the following: the sending end equipment generates the detection message according to the template of the service flow; and the sending end equipment captures the message of the service flow and carries out corresponding processing to generate the detection message.
3. The method of claim 2, wherein the generating of the detection packet by the sending end device includes:
the sending end device writes sending information of the sending end device into the detection message, wherein the sending information at least comprises one of the following information: the type of the detection message, the field information in the detection message, the sending time of the detection message, the identification information of the detection message, and the verification code information of the detection message.
4. The method of claim 2, wherein the detecting the type of the packet at least comprises:
throughput rate detection messages, packet loss rate detection messages, delay detection messages, and jitter detection messages.
5. The method of claim 4, wherein when the detection packet comprises a throughput detection packet, analyzing forwarding performance of the traffic flow in the network comprises:
the sending end equipment counts the number of the messages carried in the response message;
and the sending end equipment determines the data packet PPS data according to the sending time of the detection message and the number of the messages carried in the response message.
6. The method according to claim 4, wherein when the detection packet includes a packet loss rate detection packet, analyzing forwarding performance of the service traffic in the network includes:
the sending end equipment counts the number of the response messages;
and the sending end equipment determines the difference value between the number of the detection messages and the number of the response messages, and determines the packet loss rate corresponding to the flow according to the difference value.
7. The method of claim 4, wherein when the detection packet comprises a delay detection packet, analyzing forwarding performance of the traffic flow in the network comprises:
and the sending end equipment acquires the receiving and sending time information carried by the response message and determines the bidirectional delay data corresponding to the flow.
8. The method of claim 7, wherein when the detection message comprises a jitter detection message, analyzing forwarding performance of the traffic flow in the network comprises:
and the sending end equipment determines a jitter result corresponding to the flow according to the time delay data.
9. The method of claim 8, wherein the determining, by the sending end device, the jitter result according to the delay data comprises:
the sending terminal equipment calculates the time delay data difference value between the time delay data in the response message;
and the sending end equipment summarizes the time delay data difference values to generate a time delay data difference value set used for reflecting the jitter result.
10. The method according to any of claims 1-9, wherein after analyzing the forwarding performance, the method further comprises:
and sending the analysis result to a display device for displaying the flow detection result for display.
11. A method for detecting traffic, comprising:
the method comprises the steps that a reflection end device receives a detection message of service flow generated and sent by a sending end device;
the reflection end equipment identifies the detection message and carries out corresponding detection;
and the reflection end equipment writes the forwarding performance related data of the service flow in the network into a response message and returns the response message to the sending end equipment through the network.
12. The method according to claim 11, wherein the identifying, by the reflector device, the detection packet includes:
the reflection end device identifies the sending information of the sending end device in the detection message, wherein the sending information at least comprises one of the following information: the type of the detection message, the field information in the detection message, the sending time of the detection message, the identification information of the detection message, and the verification code information of the detection message.
13. The method according to claim 12, wherein the reflection end device identifies the detection packet, and further comprising:
and the reflection end equipment carries out verification according to the verification code information of the detection message and carries out identification according to the identification information of the detection message.
14. The method according to claim 12, wherein the detecting the type of the packet at least comprises:
throughput rate detection messages, packet loss rate detection messages, delay detection messages, and jitter detection messages.
15. The method according to claim 13, wherein when the detection packet includes the delay detection packet and/or the jitter detection packet, the reflector device writes data related to forwarding performance of the service traffic in a network into a response packet, including:
and the reflection end equipment writes the receiving time of the delay detection message and/or the jitter detection message into a timestamp field in the response message.
16. An apparatus for analyzing traffic, located in a sending-end device, includes:
the sending module is used for generating a detection message of the service flow and sending the detection message to the reflection terminal equipment through a network;
and the analysis module is used for receiving the response message returned by the reflection end equipment and analyzing the forwarding performance of the service flow in the network.
17. A device for detecting a flow rate, which is provided in a reflection-end apparatus, comprising:
the receiving module is used for receiving a detection message of the service flow generated and sent by the sending end equipment;
the detection module is used for identifying the detection message and carrying out corresponding detection;
and the feedback module is used for writing the forwarding performance related data of the service flow in the network into a response message and returning the response message to the sending terminal equipment through the network.
18. A storage medium having a computer program stored thereon, wherein the computer program is arranged to perform the method of any of claims 1 to 10,11 to 15 when executed.
19. An electronic device comprising a memory and a processor, wherein the memory has stored therein a computer program, and the processor is configured to execute the computer program to perform the method of any one of claims 1 to 10 and 11 to 15.
CN201811643664.4A 2018-12-29 2018-12-29 Flow analysis and detection method and device Pending CN111385163A (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201811643664.4A CN111385163A (en) 2018-12-29 2018-12-29 Flow analysis and detection method and device
PCT/CN2019/127979 WO2020135429A1 (en) 2018-12-29 2019-12-24 Traffic analysis method and apparatus, and traffic detection method and apparatus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201811643664.4A CN111385163A (en) 2018-12-29 2018-12-29 Flow analysis and detection method and device

Publications (1)

Publication Number Publication Date
CN111385163A true CN111385163A (en) 2020-07-07

Family

ID=71127643

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201811643664.4A Pending CN111385163A (en) 2018-12-29 2018-12-29 Flow analysis and detection method and device

Country Status (2)

Country Link
CN (1) CN111385163A (en)
WO (1) WO2020135429A1 (en)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113542066A (en) * 2021-07-13 2021-10-22 杭州安恒信息技术股份有限公司 Equipment performance testing method and device and related equipment
CN114039880A (en) * 2021-11-08 2022-02-11 北京天融信网络安全技术有限公司 Performance test method, device and system for connectionless service

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116781499A (en) * 2022-03-11 2023-09-19 华为技术有限公司 Network performance measurement method, system and device
CN115277504B (en) * 2022-07-11 2024-04-05 京东科技信息技术有限公司 Network traffic monitoring method, device and system

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102273136A (en) * 2009-09-01 2011-12-07 华为技术有限公司 Method and apparatus for detecting multi-service performance in tunnel
CN108075941A (en) * 2016-11-17 2018-05-25 华为技术有限公司 Detect method, sending device and the system of service traffics performance

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103326901B (en) * 2013-06-26 2016-07-06 国家电网公司 A kind of power system broadband network performance test methods and system
US9823988B2 (en) * 2014-09-16 2017-11-21 Spirent Communications, Inc. System and method of test iteration via property chaining
CN105337810B (en) * 2015-12-01 2018-09-28 上海斐讯数据通信技术有限公司 A kind of device under test carries out the method, system and device of network test
CN107231266A (en) * 2016-03-24 2017-10-03 中兴通讯股份有限公司 The detection method and device of message passage
CN108259264A (en) * 2017-12-01 2018-07-06 国网北京市电力公司 Test method, the device and system of the network equipment

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102273136A (en) * 2009-09-01 2011-12-07 华为技术有限公司 Method and apparatus for detecting multi-service performance in tunnel
CN108075941A (en) * 2016-11-17 2018-05-25 华为技术有限公司 Detect method, sending device and the system of service traffics performance

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113542066A (en) * 2021-07-13 2021-10-22 杭州安恒信息技术股份有限公司 Equipment performance testing method and device and related equipment
CN113542066B (en) * 2021-07-13 2022-06-07 杭州安恒信息技术股份有限公司 Equipment performance testing method and device and related equipment
CN114039880A (en) * 2021-11-08 2022-02-11 北京天融信网络安全技术有限公司 Performance test method, device and system for connectionless service
CN114039880B (en) * 2021-11-08 2023-09-05 上海天融信网络安全技术有限公司 Performance test method, device and system for connectionless service

Also Published As

Publication number Publication date
WO2020135429A1 (en) 2020-07-02

Similar Documents

Publication Publication Date Title
CN111385163A (en) Flow analysis and detection method and device
US11502932B2 (en) Indirect testing using impairment rules
US8638778B2 (en) Performance measurement in a network supporting multiprotocol label switching (MPLS)
CN109194551B (en) Method, device and system for testing performance of real-time Ethernet equipment
US11902115B2 (en) Estimating quality metric for latency sensitive traffic flows in communication networks
WO2016045098A1 (en) Switch, controller, system and link quality detection method
CN109656574B (en) Transaction time delay measurement method and device, computer equipment and storage medium
JP2006270953A (en) Available bandwidth estimation
CN103299583A (en) Systems and methods for measuring available capacity and tight link capacity of IP paths from a single endpoint
EP3295612B1 (en) Uplink performance management
CN111327471B (en) Network quality analysis method, device, computer equipment and storage medium
US11336545B2 (en) Network device measurements employing white boxes
CN111327478A (en) Network measurement method and device, equipment and storage medium
EP3474499A1 (en) Network performance detection method and apparatus
KR20200116504A (en) Data processing methods, servers and data collection devices
CN115426284A (en) Network quality detection method, device, terminal equipment and storage medium
JP2009118272A (en) Program for network band estimation, apparatus for network band estimation, method for network band estimation, and measuring apparatus
CN108111365B (en) Time delay measurement processing method and system
CN110838949A (en) Network flow log recording method and device
CN110784375B (en) Network data monitoring method and device, electronic equipment and storage medium
CN111490907B (en) Method and device for determining VXLAN network performance parameters
CN109995603B (en) Method and device for measuring packet loss under Tag model and electronic equipment
US20070133432A1 (en) Methods and system for measuring the round trip time in packet switching telecommunication networks
CN107995053B (en) Method and device for detecting network packet loss based on software defined network
US20220345396A1 (en) Information processing apparatus, packet generation method, system, and program

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20200707