CN111404765B - Message processing method, device, equipment and computer readable storage medium - Google Patents

Message processing method, device, equipment and computer readable storage medium Download PDF

Info

Publication number
CN111404765B
CN111404765B CN201910001009.7A CN201910001009A CN111404765B CN 111404765 B CN111404765 B CN 111404765B CN 201910001009 A CN201910001009 A CN 201910001009A CN 111404765 B CN111404765 B CN 111404765B
Authority
CN
China
Prior art keywords
mirror image
message
network transmission
transmission quality
indication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910001009.7A
Other languages
Chinese (zh)
Other versions
CN111404765A (en
Inventor
孔庆慧
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Communications Ltd Research Institute
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Communications Ltd Research Institute
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Communications Ltd Research Institute filed Critical China Mobile Communications Group Co Ltd
Priority to CN201910001009.7A priority Critical patent/CN111404765B/en
Publication of CN111404765A publication Critical patent/CN111404765A/en
Application granted granted Critical
Publication of CN111404765B publication Critical patent/CN111404765B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/12Network monitoring probes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/02Capturing of monitoring data
    • H04L43/026Capturing of monitoring data using flow identification

Abstract

The embodiment of the invention discloses a message processing method, a message processing device, message processing equipment and a computer readable storage medium, relates to the technical field of communication, and aims to improve the real-time monitoring efficiency of messages. The message processing method of the invention comprises the following steps: sending a message mirror image indication to a second device, wherein the message mirror image indication comprises an IP five-tuple and first information; receiving a mirror image message sent by the second device according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP message header; acquiring network transmission quality statistical data according to the mirror image message; wherein the first information is used for indicating that the second device only mirrors a message header. The embodiment of the invention can improve the real-time monitoring efficiency of the message.

Description

Message processing method, device, equipment and computer readable storage medium
Technical Field
The present invention relates to the field of communications technologies, and in particular, to a method, an apparatus, a device, and a computer-readable storage medium for processing a packet.
Background
In a scenario requiring message monitoring, a currently common method is to filter and forward a message through IP (Internet Protocol) quintuple (source domain name or address, destination address, source port, destination port, and Protocol number) by using tools such as libpcap and tcpdump. After receiving the original IP message, the receiving end stores the original IP message as a file or performs real-time message analysis.
The existing message mirror image technology continues to use the traditional off-line message analysis method. With the continuous improvement of network flow, when the traditional message mirror image is used in a real-time network quality monitoring system, a large amount of messages cannot be analyzed and processed for a long time due to the performance limitation of the intelligent gateway, so that the real-time monitoring efficiency of the intelligent gateway on the messages is reduced.
Disclosure of Invention
In view of this, embodiments of the present invention provide a method, an apparatus, a device, and a computer-readable storage medium for processing a message, so as to improve the real-time monitoring efficiency of the message.
To solve the foregoing technical problem, in a first aspect, an embodiment of the present invention provides a message processing method applied to a first device, including:
sending a message mirror image indication to a second device, wherein the message mirror image indication comprises an IP five-tuple and first information;
receiving a mirror image message sent by the second device according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP (Transmission Control Protocol) message header;
acquiring network transmission quality statistical data according to the mirror image message;
wherein the first information is used for indicating that the second device only mirrors a message header.
Wherein, the mirror image message also comprises a mirror image rule number; the method further comprises the following steps:
determining a domain name according to the mirror image rule number;
the acquiring network transmission quality statistical data according to the mirror image message comprises the following steps:
and acquiring network transmission quality statistical data of the domain name according to the mirror image message.
Wherein, the determining the domain name according to the mirror rule number comprises:
converting the mirror image rule number into a mirror image task number;
and determining the domain name according to the corresponding relation between the mirror image task number and the domain name.
Before sending the message mirror image indication to the second device, the method further includes:
receiving a monitoring instruction of a third device, wherein the monitoring instruction is used for indicating to acquire network transmission quality statistical data;
after the network transmission quality statistical data is obtained according to the mirror image message, the method further comprises:
and sending the network transmission quality statistical data to the third equipment.
The first information is further used for indicating a message with a complete mirror image of the second device.
In a second aspect, an embodiment of the present invention provides a message processing method, applied to a second device, including:
receiving a message mirror image indication of first equipment, wherein the message mirror image indication comprises an IP five-tuple and first information;
acquiring a mirror image message according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP message header;
sending the mirror image message to the first device;
wherein the first information is used for indicating that the second device only mirrors a message header.
Wherein, the obtaining the mirror image message according to the message mirror image indication includes:
acquiring a mirror image message to be processed by using the IP quintuple;
and acquiring a TCP message header in the mirror image message to be processed to acquire the mirror image message.
Wherein the method further comprises:
generating a mirror image task number;
converting the mirror image task number into a mirror image rule number;
and adding the mirror image rule number into the mirror image message.
The first information is further used for indicating a message with a complete mirror image of the second device.
In a third aspect, an embodiment of the present invention provides a packet processing method, applied to a third device, including:
sending a monitoring instruction to first equipment, and receiving network transmission quality statistical data sent by the first equipment; the monitoring indication is used for indicating to obtain network transmission quality statistical data so that the first equipment obtains a mirror image message from the second equipment and obtains the network transmission quality statistical data according to the mirror image message, wherein the mirror image message comprises an IP message header and a TCP message header;
and receiving the network transmission quality statistical data sent by the first equipment.
In a fourth aspect, an embodiment of the present invention provides a packet processing apparatus, which is applied to a first device, and includes: a processor and a transceiver;
the transceiver is used for sending a message mirror image indication to the second equipment, wherein the message mirror image indication comprises an IP quintuple and first information; receiving a mirror image message sent by the second equipment according to the message mirror image indication, wherein the mirror image message comprises an Internet Protocol (IP) message header and a Transmission Control Protocol (TCP) message header;
the processor is used for acquiring network transmission quality statistical data according to the mirror image message;
wherein the first information is used for indicating that the second device only mirrors a message header.
Wherein, the mirror image message also comprises a mirror image rule number;
the processor is further configured to determine a domain name according to the mirroring rule number; and acquiring network transmission quality statistical data of the domain name according to the mirror image message.
The processor is further used for converting the mirror image rule number into a mirror image task number; and determining the domain name according to the corresponding relation between the mirror image task number and the domain name.
The transceiver is further configured to receive a monitoring indication of a third device, where the monitoring indication is used to indicate that network transmission quality statistics are acquired; and sending the network transmission quality statistical data to the third equipment.
The first information is further used for indicating a message with a complete mirror image of the second device.
In a fifth aspect, an embodiment of the present invention provides a packet processing apparatus, which is applied to a second device, and includes: a processor and a transceiver;
the transceiver is used for receiving a message mirror image indication of first equipment, wherein the message mirror image indication comprises an IP quintuple and first information;
the processor is used for acquiring a mirror image message according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP message header;
the transceiver is further configured to send the mirror image packet to the first device;
wherein the first information is used for indicating that the second device only mirrors a message header.
The processor is further used for acquiring a mirror image message to be processed by using the IP quintuple; and acquiring a TCP message header in the mirror image message to be processed to acquire the mirror image message.
Wherein the processor is further configured to generate a mirror task number; converting the mirror image task number into a mirror image rule number; and adding the mirror image rule number into the mirror image message.
The first information is further used for indicating a message with a complete mirror image of the second device.
In a sixth aspect, an embodiment of the present invention provides a packet processing apparatus, which is applied to a third device, and includes: a processor and a transceiver;
the transceiver is used for sending a monitoring instruction to first equipment and receiving network transmission quality statistical data sent by the first equipment; the monitoring indication is used for indicating to obtain network transmission quality statistical data so that the first equipment obtains a mirror image message from the second equipment and obtains the network transmission quality statistical data according to the mirror image message, wherein the mirror image message comprises an IP message header and a TCP message header; and receiving the network transmission quality statistical data sent by the first equipment.
In a seventh aspect, an embodiment of the present invention provides a communication device, including: a transceiver, a memory, a processor, and a computer program stored on the memory and executable on the processor; the processor configured to read a program in the memory to implement the steps in the method according to the first aspect; or implementing a step in a method according to the second aspect; or implementing steps in a method as described in the third aspect.
In an eighth aspect, an embodiment of the present invention provides a computer-readable storage medium for storing a computer program, where the computer program is used to implement, when executed by a processor, the steps in the method according to the first aspect; or implementing a step in a method according to the second aspect; or implementing steps in a method as described in the third aspect.
The technical scheme of the embodiment of the invention has the following beneficial effects:
in the embodiment of the invention, the first device sends the message mirroring indication to the second device to indicate that the second device only mirrors the message header. Then, the mirror image message sent by the second device includes an IP message header and a TCP message header. Therefore, the first device only needs to process the message header, and the data volume needing to be processed is reduced, so that the real-time monitoring efficiency of the message is improved.
Drawings
Fig. 1 is a schematic diagram of a message processing system according to an embodiment of the present invention;
fig. 2 is a flowchart of a message processing method according to an embodiment of the present invention;
fig. 3 is a flowchart of a message processing method according to an embodiment of the present invention;
fig. 4 is a flowchart of a message processing method according to an embodiment of the present invention;
fig. 5 is a schematic diagram of an IPv4 message header structure in the prior art;
fig. 6 is a schematic diagram of a structure of an IPv6 message header in the prior art;
FIG. 7 is a diagram illustrating a TCP message header structure in the prior art;
fig. 8 is a schematic diagram of a message processing apparatus according to an embodiment of the present invention;
fig. 9 is a schematic diagram of a message processing apparatus according to an embodiment of the present invention;
fig. 10 is a schematic diagram of a message processing apparatus according to an embodiment of the present invention;
fig. 11 is a schematic diagram of a communication device of an embodiment of the present invention;
fig. 12 is a schematic diagram of a communication device of an embodiment of the present invention;
fig. 13 is a schematic diagram of a communication device according to an embodiment of the present invention.
Detailed Description
The following detailed description of embodiments of the present invention will be made with reference to the accompanying drawings and examples. The following examples are intended to illustrate the invention but are not intended to limit the scope of the invention.
With the development of website technology and the continuous improvement of network flow, the traditional message mirroring technology is difficult to be applied to a real-time network quality monitoring system. Through analysis, the conventional message mirroring technology mainly faces two problems:
(1) even if filtering is performed, the amount of message data is still too large. Due to performance limitation, the intelligent gateway cannot analyze and process a large number of messages for a long time. Moreover, the data volume of application layer information such as HTTP (Hyper Text Transfer Protocol) in the message is large, and not much valuable network quality data is provided.
(2) The Domain names with high access amount all adopt dynamic Domain Name System (DNS) service, and the DNS resolution result changes frequently, so that it is difficult to determine the Domain Name corresponding to the IP packet.
On the current mainstream gateways of 2000DMIPS and 800MHz, when the network flow reaches 2Mbps, the message is analyzed in real time by using the traditional message mirroring method, the utilization rate of a Central Processing Unit (CPU) of the intelligent gateway can be increased by 20% within 10 seconds, and reaches 50% after 13 seconds; the traditional method cannot analyze each domain name in real time, and the accuracy of monitoring data is greatly influenced.
Therefore, embodiments of the present invention provide a message processing method to effectively solve the above problems.
Fig. 1 is a schematic diagram of a message processing system according to an embodiment of the present invention. With reference to fig. 1, the system comprises: the system comprises an application data collection and control platform 11, an intelligent gateway application 12 and an intelligent gateway driver 13. The functions of each part are as follows:
(1) the application data collection and control platform comprises:
the platform is mainly responsible for issuing domain name monitoring tasks to appointed intelligent gateway applications and collecting and analyzing data of the intelligent gateway applications. When analyzing the network transmission quality, only the intelligent gateway application is needed to analyze the header information of the message; when monitoring network transmission content, an intelligent gateway application is required to acquire messages with complete mirror images, such as video content, game content and the like. Therefore, the platform needs to specify whether to collect network transmission quality statistics only when setting up a monitoring task. For example, the platform may set a parameter indicating whether to simply collect network transmission quality statistics.
(2) The intelligent gateway application:
the intelligent gateway application comprises three parts, namely a mirroring task configuration 121, a message domain name analysis module 122 and a network quality analysis module 123. The functions of the modules are as follows:
(21) a mirror task configuration module:
the module is mainly responsible for issuing a mirroring task, and configuration parameters comprise a traditional IP five-tuple and a control switch for judging whether to mirror a TCP message header only. Meanwhile, the module supports the collection of complete TCP message information and keeps the HTTP message analysis capability. After the configuration is completed, the intelligent gateway drives to return the mirror image task ID or failure information, and the mirror image task configuration module is responsible for recording the ID.
(22) A message domain name analysis module:
the domain name analysis module is responsible for extracting an integer of 16bits (namely a mirror image rule number) behind each row of messages and converting the integer into a mirror image task number. And then, calculating the domain name of the row of messages according to the corresponding relation between the mirror image task number and the domain name of the mirror image task configuration module.
(23) A network quality analysis module:
the network quality analysis module is responsible for analyzing the network transmission quality of the domain name, and according to the IP message header, the TCP message header information and the timestamp, the connection quality of the access network (such as the interaction time from the gateway to the server), the transmission quality of the home local area network (such as the interaction time from the PC to the gateway), the retransmission rate, the packet loss rate and other information can be obtained.
(3) And (3) driving of the intelligent gateway:
the intelligent gateway driver comprises a message mirroring module 131, an application layer filtering module 132 and a mirroring task supplementing module 133. The functions of the modules are as follows:
(31) a message mirror module:
the message mirror image module is similar to the message mirror image module in the traditional scheme and is responsible for creating a mirror image task and generating a mirror image task number, starting the mirror image task after the creation is successful, and performing message mirror image processing through an IP five-tuple.
The traditional message mirroring technology is to filter and mirror messages through an iptables module of a Linux kernel, and tools for packaging the function mainly comprise tcpdump and the like. In the embodiment of the invention, the message mirroring process is completed in the CPU, the TCP message header mirroring can be supported only by software modification, and the mirroring rule number is added at the tail part of the message.
(32) An application layer filtering module:
the application layer filtering module is responsible for filtering the message data of the TCP according to the TCP message header information, and only obtains the data of the TCP message header so as to reduce the data volume. If the mirror task needs to mirror the complete TCP message, the module will not execute the corresponding function.
(33) A mirror image task supplement module:
and matching the mirror image task number from the message mirror image module according to the far-end IP address of the mirror image message, and converting the mirror image task number into 16bits of data (mirror image rule number) and adding the data to the tail part of the mirror image message. The module is also responsible for forwarding the mirror message to the intelligent gateway application.
The following describes the implementation of the above scheme in detail with reference to specific embodiments.
As shown in fig. 2, a message processing method according to an embodiment of the present invention is applied to a first device, and includes:
step 201, sending a message mirror image indication to a second device, where the message mirror image indication includes an IP quintuple and first information. Wherein the first information is used for indicating that the second device only mirrors a message header.
In the embodiment of the present invention, the first device corresponds to the smart gateway application in fig. 1, and the second device corresponds to the smart gateway driver in fig. 1. The third device below corresponds to the application data collection and control platform in fig. 1.
In addition, if a complete message needs to be acquired, the first information may also be used to indicate that the second device mirrors the complete message.
Step 202, receiving a mirror image message sent by the second device according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP message header.
Step 203, obtaining network transmission quality statistical data according to the mirror image message.
Specifically, in this step, network transmission quality statistical data is obtained according to the mirror image packet.
In the embodiment of the invention, the first device sends the message mirroring indication to the second device to indicate that the second device only mirrors the message header. Then, the mirror image message sent by the second device includes an IP message header and a TCP message header. Therefore, the first device only needs to process the message header, and the data volume needing to be processed is reduced, so that the real-time monitoring efficiency of the message is improved.
In addition, in order to improve the domain name matching efficiency, on the basis of the above embodiment, a mirror rule number is further included in the mirror message. The method further comprises the following steps: and determining the domain name according to the mirror image rule number. Then, step 203 specifically includes: and acquiring network transmission quality statistical data of the domain name according to the mirror image message.
When the domain name is determined, the first device converts the mirror image rule number into a mirror image task number, and then determines the domain name according to the corresponding relation between the mirror image task number and the domain name. Wherein the correspondence may be stored in the first device in advance. The specific method for converting the mirror image rule number into the mirror image task number can be preset.
In addition, on the basis of the foregoing embodiment, in order to improve the accuracy of performing the network transmission quality monitoring, before step 201, the method may further include: and receiving a monitoring indication of the third equipment, wherein the monitoring indication is used for indicating to acquire network transmission quality statistical data. Then, according to the monitoring indication, the first device obtains a mirror image message from the second device, wherein the mirror image message comprises an IP message header and a TCP message header, and obtains network transmission quality statistical data according to the mirror image message. After step 203, the method further comprises: and sending the network transmission quality statistical data to the third equipment.
As shown in fig. 3, the message processing method according to the embodiment of the present invention is applied to a second device, and includes:
step 301, receiving a message mirror image indication of a first device, where the message mirror image indication includes an IP quintuple and first information. Wherein the first information is used for indicating that the second device only mirrors a message header.
Step 302, obtaining a mirror image message according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP message header.
In the step, a mirror image task is created, and the IP quintuple is used for acquiring a mirror image message to be processed. And then filtering the obtained message to obtain a TCP message header in the mirror image message to be processed, and further obtaining the mirror image message.
In the process, in order to improve the domain name matching efficiency, a mirror image task number can be generated when a mirror image task is created. Then, the mirror image task number is converted into a mirror image rule number, and the mirror image rule number is added into the mirror image message.
The mirror image rule number is an integer of 16bits and can be added at the tail of the message.
Step 303, sending the mirror image packet to the first device.
In addition, the first information is also used for indicating a message with a complete mirror image of the second device.
In the embodiment of the invention, the first device sends the message mirroring indication to the second device to indicate that the second device only mirrors the message header. Then, the mirror image message sent by the second device includes an IP message header and a TCP message header. Therefore, the first device only needs to process the message header, and the data volume needing to be processed is reduced, so that the real-time monitoring efficiency of the message is improved.
As shown in fig. 4, the message processing method according to the embodiment of the present invention is applied to a third device, and includes:
step 401, sending a monitoring instruction to a first device, where the monitoring instruction is used to indicate that network transmission quality statistical data is obtained, so that the first device obtains a mirror image packet from a second device, and obtains the network transmission quality statistical data according to the mirror image packet, where the mirror image packet includes an IP packet header and a TCP packet header.
When the complete message needs to be acquired, the monitoring indication can also be used for indicating to acquire the complete message.
Step 402, receiving the network transmission quality statistical data sent by the first device.
In the embodiment of the invention, the first device sends the message mirroring indication to the second device to indicate that the second device only mirrors the message header. Then, the mirror image message sent by the second device includes an IP message header and a TCP message header. Therefore, the first device only needs to process the message header, and the data volume needing to be processed is reduced, so that the real-time monitoring efficiency of the message is improved.
As shown in fig. 5-7, the header structures of the IPv4, IPv6, and TCP message header in the prior art are respectively. According to the specification of the TCP and the IP message, all interactive messages in the session can be positioned by the information of an IP quintuple, a TCP Sequence number (serial number), a TCP acknowledgement number (acknowledgement number), a TCP flags (label) and the like. Based on the information, the soft probe can analyze the TCP handshake message, the data transmission message and the time point of each message, and further calculate the information of the transmission time, retransmission rate and the like of the messages. The source address, the destination address and the transmission protocol information in the information are positioned at the IP message head; the source port, the destination port, the TCP Sequence number, the TCP acknowledgement number, and the TCP flags are located in the TCP header. Therefore, in the embodiment of the present invention, the TCP header mirroring method only needs to mirror out the IP header and the TCP header (the first 16 bytes of the TCP packet) to perform the network transmission quality monitoring.
With reference to the system shown in fig. 1, the message mirroring process includes:
(1) and the application data collection and control platform issues a monitoring task of the transmission quality of the specified domain name to the intelligent gateway application.
(2) And the intelligent gateway application issues a TCP message header mirroring task to the intelligent gateway driver.
(3) The intelligent gateway driver uses a traditional mirroring method (iptables, tcpdump) to filter out the messages meeting the conditions.
(4) The intelligent gateway driver determines the length of an IP message header according to IPv4 and IPv6 message specifications: internet Header Length.
(5) The intelligent gateway driver only mirrors out the Internet Header Length +16 bytes of each message, namely the complete IP message Header +16 bytes of the TCP message Header (TCP message Header).
(6) The intelligent gateway drive adds mirror image rule number at the tail of each message.
(7) The intelligent gateway driver forwards the mirrored message to the intelligent gateway application, wherein the mirrored message comprises an IP message header, a TCP message header and a mirroring rule number.
(8) The intelligent gateway application collects TCP message header information in real time, analyzes and reports the network transmission quality data of the domain name to the application data collection and control platform.
Through tests, the embodiment of the invention can reduce the data volume of the mirror image message, improve the real-time monitoring efficiency of the intelligent gateway and has important significance for intelligent equipment with weaker performance, such as the intelligent gateway and the like. If only TCP header information in a network transmission message is collected, the embodiment of the invention reduces mirror image data by 90%, so that the real-time transmission of the data of the quality monitoring system by the intelligent gateway is more accurate. The domain name of the TCP message in the embodiment of the invention is directly provided by the intelligent gateway drive, thereby avoiding the situation that the application needs to be matched with the domain name again according to the remote IP in the traditional mode and improving the domain name matching efficiency. Moreover, the embodiment of the invention avoids the problem that the DNS message and the TCP message cannot be matched because of asynchronism.
As shown in fig. 8, a message processing apparatus according to an embodiment of the present invention is applied to a first device, and includes: a processor 801 and a transceiver 802.
The transceiver 802 is configured to send a message mirror image indication to a second device, where the message mirror image indication includes an IP quintuple and first information; receiving a mirror image message sent by the second equipment according to the message mirror image indication, wherein the mirror image message comprises an Internet Protocol (IP) message header and a Transmission Control Protocol (TCP) message header;
the processor 801 is configured to obtain network transmission quality statistical data according to the mirror image packet;
wherein the first information is used for indicating that the second device only mirrors a message header.
Wherein, the mirror image message also comprises a mirror image rule number; the processor 801 is further configured to determine a domain name according to the mirroring rule number; and acquiring network transmission quality statistical data of the domain name according to the mirror image message.
The processor 801 is further configured to convert the mirroring rule number into a mirroring task number; and determining the domain name according to the corresponding relation between the mirror image task number and the domain name.
Wherein the transceiver 802 is further configured to receive a monitoring indication of a third device, where the monitoring indication is used to indicate that network transmission quality statistics are obtained; and sending the network transmission quality statistical data to the third equipment.
The first information is further used for indicating a message with a complete mirror image of the second device.
The working principle of the device according to the invention can be referred to the description of the method embodiment described above.
In the embodiment of the invention, the first device sends the message mirroring indication to the second device to indicate that the second device only mirrors the message header. Then, the mirror image message sent by the second device includes an IP message header and a TCP message header. Therefore, the first device only needs to process the message header, and the data volume needing to be processed is reduced, so that the real-time monitoring efficiency of the message is improved.
As shown in fig. 9, the message processing apparatus according to the embodiment of the present invention is applied to a second device, and includes: a processor 901 and a transceiver 902.
The transceiver 902 is configured to receive a message mirror indication of a first device, where the message mirror indication includes an IP quintuple and first information;
the processor 901 is configured to obtain a mirror image packet according to the packet mirror image indication, where the mirror image packet includes an IP packet header and a TCP packet header;
the transceiver 902 is further configured to send the mirror packet to the first device;
wherein the first information is used for indicating that the second device only mirrors a message header.
The processor 901 is further configured to obtain a mirror message to be processed by using the IP quintuple; and acquiring a TCP message header in the mirror image message to be processed to acquire the mirror image message.
The processor 901 is further configured to generate a mirror task number; converting the mirror image task number into a mirror image rule number; and adding the mirror image rule number into the mirror image message.
The first information is further used for indicating a message with a complete mirror image of the second device.
The working principle of the device according to the invention can be referred to the description of the method embodiment described above.
In the embodiment of the invention, the first device sends the message mirroring indication to the second device to indicate that the second device only mirrors the message header. Then, the mirror image message sent by the second device includes an IP message header and a TCP message header. Therefore, the first device only needs to process the message header, and the data volume needing to be processed is reduced, so that the real-time monitoring efficiency of the message is improved.
As shown in fig. 10, the message processing apparatus according to the embodiment of the present invention is applied to a third device, and includes: a processor 1001 and a transceiver 1002.
The transceiver 1002 is configured to send a monitoring indication to a first device, and receive network transmission quality statistics data sent by the first device. The monitoring indication is used for indicating to obtain network transmission quality statistical data so that the first equipment obtains a mirror image message from the second equipment and obtains the network transmission quality statistical data according to the mirror image message, wherein the mirror image message comprises an IP message header and a TCP message header.
The working principle of the device according to the invention can be referred to the description of the method embodiment described above.
In the embodiment of the invention, the first device sends the message mirroring indication to the second device to indicate that the second device only mirrors the message header. Then, the mirror image message sent by the second device includes an IP message header and a TCP message header. Therefore, the first device only needs to process the message header, and the data volume needing to be processed is reduced, so that the real-time monitoring efficiency of the message is improved.
As shown in fig. 11, the communication device of the embodiment of the present invention includes:
the processor 1100, which reads the program in the memory 1120, performs the following processes: sending a message mirror indication to a second device through a transceiver 1110, wherein the message mirror indication comprises an Internet Protocol (IP) quintuple and first information; receiving a mirror image message sent by the second device according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a Transmission Control Protocol (TCP) message header; acquiring network transmission quality statistical data according to the mirror image message; wherein the first information is used for indicating that the second device only mirrors a message header.
A transceiver 1110 for receiving and transmitting data under the control of the processor 1100.
Where in fig. 11, the bus architecture may include any number of interconnected buses and bridges, with one or more processors, represented by processor 1100, and various circuits, represented by memory 1120, being linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. The bus interface provides an interface. The transceiver 1110 may be a number of elements including a transmitter and a transceiver providing a means for communicating with various other apparatus over a transmission medium. The processor 1100 is responsible for managing the bus architecture and general processing, and the memory 1120 may store data used by the processor 1100 in performing operations.
The processor 1100 is responsible for managing the bus architecture and general processing, and the memory 1120 may store data used by the processor 1100 in performing operations.
The processor 1100 is also adapted to read the computer program and perform the following steps:
determining a domain name according to the mirror image rule number; and acquiring network transmission quality statistical data of the domain name according to the mirror image message.
The processor 1100 is also adapted to read the computer program and perform the following steps:
converting the mirror image rule number into a mirror image task number; and determining the domain name according to the corresponding relation between the mirror image task number and the domain name.
The processor 1100 is also adapted to read the computer program and perform the following steps:
receiving a monitoring instruction of a third device, wherein the monitoring instruction is used for indicating to acquire network transmission quality statistical data; and sending the network transmission quality statistical data to the third equipment.
The first information is further used for indicating a message with a complete mirror image of the second device.
As shown in fig. 12, the communication device of the embodiment of the present invention includes:
a processor 1200 for reading the program in the memory 1220 and executing the following processes: receiving, by a transceiver 1210, a message mirror indication of a first device, where the message mirror indication includes an IP quintuple and first information; acquiring a mirror image message according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP message header; sending the mirror image message to the first device; wherein the first information is used for indicating that the second device only mirrors a message header.
A transceiver 1210 for receiving and transmitting data under the control of the processor 1200.
Where in fig. 12, the bus architecture may include any number of interconnected buses and bridges, with various circuits of one or more processors represented by processor 1200 and memory represented by memory 1220 being linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. The bus interface provides an interface. The transceiver 1210 may be a number of elements, including a transmitter and a transceiver, providing a means for communicating with various other apparatus over a transmission medium. The processor 1200 is responsible for managing the bus architecture and general processing, and the memory 1220 may store data used by the processor 1200 in performing operations.
The processor 1200 is responsible for managing the bus architecture and general processing, and the memory 1220 may store data used by the processor 1200 in performing operations.
The processor 1200 is further configured to read the computer program and execute the following steps:
acquiring a mirror image message to be processed by using the IP quintuple; and acquiring a TCP message header in the mirror image message to be processed to acquire the mirror image message.
The processor 1200 is further configured to read the computer program and execute the following steps:
generating a mirror image task number; converting the mirror image task number into a mirror image rule number; and adding the mirror image rule number into the mirror image message.
The first information is further used for indicating a message with a complete mirror image of the second device.
As shown in fig. 13, the communication device of the embodiment of the present invention includes:
a processor 1300, for reading the program in the memory 1320, for executing the following processes: sending a monitoring instruction to a first device through a transceiver 1310, where the monitoring instruction is used to indicate that network transmission quality statistical data is obtained, so that the first device obtains a mirror image packet from a second device, and obtains the network transmission quality statistical data according to the mirror image packet, where the mirror image packet includes an IP packet header and a TCP packet header; and receiving the network transmission quality statistical data sent by the first equipment.
A transceiver 1310 for receiving and transmitting data under the control of the processor 1300.
In fig. 13, among other things, the bus architecture may include any number of interconnected buses and bridges with various circuits being linked together, particularly one or more processors represented by processor 1300 and memory represented by memory 1320. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. The bus interface provides an interface. The transceiver 1310 can be a number of elements including a transmitter and a transceiver that provide a means for communicating with various other apparatus over a transmission medium. The processor 1300 is responsible for managing the bus architecture and general processing, and the memory 1320 may store data used by the processor 1300 in performing operations.
The processor 1300 is responsible for managing the bus architecture and general processing, and the memory 1320 may store data used by the processor 1300 in performing operations.
The processor 1300 is further configured to read the computer program and execute the following steps:
acquiring a mirror image message to be processed by using the IP quintuple; and acquiring a TCP message header in the mirror image message to be processed to acquire the mirror image message.
Furthermore, a computer-readable storage medium of an embodiment of the present invention stores a computer program executable by a processor to implement:
sending a message mirror image indication to a second device, wherein the message mirror image indication comprises an Internet Protocol (IP) quintuple and first information;
receiving a mirror image message sent by the second device according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a Transmission Control Protocol (TCP) message header;
acquiring network transmission quality statistical data according to the mirror image message;
wherein the first information is used for indicating that the second device only mirrors a message header.
Wherein, the mirror image message also comprises a mirror image rule number; the method further comprises the following steps:
determining a domain name according to the mirror image rule number;
the acquiring network transmission quality statistical data according to the mirror image message comprises the following steps:
and acquiring network transmission quality statistical data of the domain name according to the mirror image message.
Wherein, the determining the domain name according to the mirror rule number comprises:
converting the mirror image rule number into a mirror image task number;
and determining the domain name according to the corresponding relation between the mirror image task number and the domain name.
Before sending the message mirror image indication to the second device, the method further includes:
receiving a monitoring instruction of a third device, wherein the monitoring instruction is used for indicating to acquire network transmission quality statistical data;
after the network transmission quality statistical data is obtained according to the mirror image message, the method further comprises:
and sending the network transmission quality statistical data to the third equipment.
The first information is further used for indicating a message with a complete mirror image of the second device.
Furthermore, a computer-readable storage medium of an embodiment of the present invention stores a computer program executable by a processor to implement:
receiving a message mirror image indication of first equipment, wherein the message mirror image indication comprises an IP five-tuple and first information;
acquiring a mirror image message according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP message header;
sending the mirror image message to the first device;
wherein the first information is used for indicating that the second device only mirrors a message header.
Wherein, the obtaining the mirror image message according to the message mirror image indication includes:
acquiring a mirror image message to be processed by using the IP quintuple;
and acquiring a TCP message header in the mirror image message to be processed to acquire the mirror image message.
Wherein the method further comprises:
generating a mirror image task number;
converting the mirror image task number into a mirror image rule number;
and adding the mirror image rule number into the mirror image message.
The first information is further used for indicating a message with a complete mirror image of the second device.
Furthermore, a computer-readable storage medium of an embodiment of the present invention stores a computer program executable by a processor to implement:
sending a monitoring instruction to a first device, wherein the monitoring instruction is used for indicating to obtain network transmission quality statistical data so that the first device obtains a mirror image message from a second device and obtains the network transmission quality statistical data according to the mirror image message, and the mirror image message comprises an IP message header and a TCP message header;
and receiving the network transmission quality statistical data sent by the first equipment.
In the several embodiments provided in the present application, it should be understood that the disclosed method and apparatus may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be physically included alone, or two or more units may be integrated into one unit. The integrated unit can be realized in a form of hardware, or in a form of hardware plus a software functional unit.
The integrated unit implemented in the form of a software functional unit may be stored in a computer readable storage medium. The software functional unit is stored in a storage medium and includes several instructions to enable a computer device (which may be a personal computer, a server, or a network device) to execute some steps of the transceiving method according to various embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.
While the foregoing is directed to the preferred embodiment of the present invention, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention as defined in the appended claims.

Claims (18)

1. A message processing method is applied to a first device, and is characterized by comprising the following steps:
sending a message mirror image indication to a second device, wherein the message mirror image indication comprises an Internet Protocol (IP) quintuple and first information;
receiving a mirror image message sent by the second device according to the message mirror image indication, wherein the mirror image message comprises an IP message header, a Transmission Control Protocol (TCP) message header and a mirror image rule number, and the mirror image rule number is an integer of 16bits and is added at the tail of the mirror image message;
acquiring network transmission quality statistical data according to the mirror image message, wherein the first equipment converts the mirror image rule number into a mirror image task number, then determines the domain name according to the corresponding relation between the mirror image task number and the domain name, the corresponding relation is stored in the first equipment in advance, and a conversion method for converting the mirror image rule number into the mirror image task number is preset;
wherein the first information is used for indicating that the second device only mirrors a message header.
2. The method of claim 1, wherein the obtaining network transmission quality statistics based on the mirror packet comprises:
and acquiring network transmission quality statistical data of the domain name according to the mirror image message.
3. The method of claim 1, wherein prior to sending the message mirroring indication to the second device, the method further comprises:
receiving a monitoring instruction of a third device, wherein the monitoring instruction is used for indicating to acquire network transmission quality statistical data;
after the network transmission quality statistical data is obtained according to the mirror image message, the method further comprises:
and sending the network transmission quality statistical data to the third equipment.
4. The method of claim 1,
the first information is also used for indicating a message with complete mirror image of the second device.
5. A message processing method is applied to a second device, and is characterized by comprising the following steps:
receiving a message mirror image indication of first equipment, wherein the message mirror image indication comprises an IP five-tuple and first information;
obtaining a mirror image message according to the message mirror image indication, comprising: generating a mirror image task number; converting the mirror image task number into a mirror image rule number; adding the mirror image rule number into the mirror image message; the mirror image message comprises an IP message header and a TCP message header, and the mirror image rule number is an integer of 16bits and is added at the tail part of the mirror image message;
sending the mirror image message to the first device;
wherein the first information is used for indicating that the second device only mirrors a message header.
6. The method of claim 5, wherein obtaining a mirrored message according to the message mirroring indication comprises:
acquiring a mirror image message to be processed by using the IP quintuple;
and acquiring a TCP message header in the mirror image message to be processed to acquire the mirror image message.
7. The method of claim 5, wherein the first information is further used to indicate that the second device mirrors a complete packet.
8. A message processing method is applied to a third device, and is characterized by comprising the following steps:
sending a monitoring instruction to a first device, wherein the monitoring instruction is used for indicating to acquire network transmission quality statistical data, issuing a domain name monitoring task to the first device, the mirror image message also comprises a mirror image rule number, determining a domain name according to the mirror image rule number, acquiring the network transmission quality statistical data of the domain name according to the mirror image message so that the first device acquires the mirror image message from a second device and acquires the network transmission quality statistical data according to the mirror image message, wherein the first device converts the mirror image rule number into the mirror image task number, then determines the domain name according to the corresponding relation between the mirror image task number and the domain name, the corresponding relation is stored in the first device in advance, the conversion method for converting the mirror image rule number into the mirror image task number is preset, and the mirror image message comprises an IP message header and a TCP message header, the mirror image rule number is an integer of 16bits and is added at the tail part of the mirror image message;
and receiving the network transmission quality statistical data sent by the first equipment.
9. A message processing apparatus applied to a first device, comprising: a processor and a transceiver;
the transceiver is used for sending a message mirror image indication to the second equipment, wherein the message mirror image indication comprises an IP quintuple and first information; receiving a mirror image message sent by the second device according to the message mirror image indication, wherein the mirror image message comprises an Internet Protocol (IP) message header, a Transmission Control Protocol (TCP) message header and a mirror image rule number, and the mirror image rule number is an integer of 16bits and is added at the tail part of the mirror image message;
the processor is used for acquiring network transmission quality statistical data according to the mirror image message, wherein the first equipment converts the mirror image rule number into a mirror image task number, then determines the domain name according to the corresponding relation between the mirror image task number and the domain name, the corresponding relation is stored in the first equipment in advance, and a conversion method for converting the mirror image rule number into the mirror image task number is preset;
wherein the first information is used for indicating that the second device only mirrors a message header.
10. The apparatus of claim 9, wherein the processor is further configured to obtain network transmission quality statistics of the domain name according to the mirror packet.
11. The apparatus of claim 9,
the transceiver is further configured to receive a monitoring indication of a third device, where the monitoring indication is used to indicate that network transmission quality statistics are obtained; and sending the network transmission quality statistical data to the third equipment.
12. The apparatus of claim 9, wherein the first information is further configured to indicate that the second device mirrors a complete packet.
13. A message processing apparatus applied to a second device, comprising: a processor and a transceiver;
the transceiver is used for receiving a message mirror image indication of first equipment, wherein the message mirror image indication comprises an IP quintuple and first information;
the processor is used for acquiring a mirror image message according to the message mirror image indication, wherein the mirror image message comprises an IP message header and a TCP message header;
the transceiver is further configured to send the mirror image packet to the first device;
wherein the first information is used for indicating that the second device only mirrors a message header;
the processor is also used for generating a mirror image task number; converting the mirror image task number into a mirror image rule number; and adding the mirror image rule number into the mirror image message, wherein the mirror image rule number is an integer of 16bits and is added at the tail part of the mirror image message.
14. The apparatus of claim 13,
the processor is also used for acquiring a mirror image message to be processed by utilizing the IP quintuple; and acquiring a TCP message header in the mirror image message to be processed to acquire the mirror image message.
15. The apparatus of claim 13, wherein the first information is further configured to indicate that the second device mirrors a complete packet.
16. A message processing apparatus applied to a third device, comprising: a processor and a transceiver;
the transceiver is used for sending a monitoring instruction to first equipment and receiving network transmission quality statistical data sent by the first equipment, wherein a domain name monitoring task is issued to a first platform, a mirror image rule number is also included in a mirror image message, a domain name is determined according to the mirror image rule number, and the network transmission quality statistical data of the domain name are obtained according to the mirror image message;
the monitoring indication is used for indicating to obtain network transmission quality statistical data, so that the first equipment obtains a mirror image message from the second equipment, and obtains the network transmission quality statistical data according to the mirror image message, wherein the first equipment converts the mirror image rule number into a mirror image task number, then determines the domain name according to the corresponding relation between the mirror image task number and the domain name, the corresponding relation is stored in the first equipment in advance, the mirror image rule number is converted into a mirror image task number conversion method which is preset, the mirror image message comprises an IP message header and a TCP message header, and the mirror image rule number is an integer of 16bits and is added at the tail part of the mirror image message.
17. A communication device, comprising: a transceiver, a memory, a processor, and a computer program stored on the memory and executable on the processor; it is characterized in that the preparation method is characterized in that,
the processor, configured to read a program in the memory to implement the steps in the method according to any one of claims 1 to 4; or implementing a step in a method as claimed in any one of claims 5 to 7; or to implement a step in a method as claimed in claim 8.
18. A computer-readable storage medium for storing a computer program, wherein the computer program, when executed by a processor, implements the steps in the method according to any one of claims 1 to 4; or implementing a step in a method as claimed in any one of claims 5 to 7; or to implement a step in a method as claimed in claim 8.
CN201910001009.7A 2019-01-02 2019-01-02 Message processing method, device, equipment and computer readable storage medium Active CN111404765B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910001009.7A CN111404765B (en) 2019-01-02 2019-01-02 Message processing method, device, equipment and computer readable storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910001009.7A CN111404765B (en) 2019-01-02 2019-01-02 Message processing method, device, equipment and computer readable storage medium

Publications (2)

Publication Number Publication Date
CN111404765A CN111404765A (en) 2020-07-10
CN111404765B true CN111404765B (en) 2021-10-26

Family

ID=71432065

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910001009.7A Active CN111404765B (en) 2019-01-02 2019-01-02 Message processing method, device, equipment and computer readable storage medium

Country Status (1)

Country Link
CN (1) CN111404765B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112968844B (en) * 2021-02-05 2022-05-31 武汉绿色网络信息服务有限责任公司 Method and device for sending fragment message
CN112953949B (en) * 2021-03-01 2023-01-06 恒安嘉新(北京)科技股份公司 Message header processing method, device, equipment and storage medium of network message
CN115348334B (en) * 2021-05-13 2023-10-27 中移(上海)信息通信科技有限公司 Data analysis method and device and related equipment

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030149581A1 (en) * 2002-08-28 2003-08-07 Imran Chaudhri Method and system for providing intelligent network content delivery
CN100456690C (en) * 2003-10-14 2009-01-28 北京邮电大学 Whole load equalizing method based on global network positioning
AU2005269254B2 (en) * 2004-08-03 2009-06-18 Silverbrook Research Pty Ltd Electronic stylus
US20080263180A1 (en) * 2007-04-19 2008-10-23 Hurst Mark B Apparatus, system, and method for resilient content acquisition
US8055626B1 (en) * 2005-08-09 2011-11-08 Google Inc. Detecting mirrors on the web
CN100338915C (en) * 2005-08-19 2007-09-19 杭州华三通信技术有限公司 Message mirroring method and network equipment with message mirroring function
CN101159591B (en) * 2007-08-06 2010-09-29 中兴通讯股份有限公司 Method and system of implementing different type port image
US9674258B2 (en) * 2012-02-23 2017-06-06 Yottaa Inc. System and method for context specific website optimization
US9106695B2 (en) * 2012-03-14 2015-08-11 Daniel Kaminsky Method and system for user authentication using DNSSEC
CN102710513A (en) * 2012-05-24 2012-10-03 华为技术有限公司 Message mirror image method and equipment
CN102761449B (en) * 2012-08-07 2014-08-13 北京鼎震科技有限责任公司 Method and device for web service performance analysis
CN103532957B (en) * 2013-10-18 2017-09-15 电子科技大学 A kind of long-range shell behavioral values device and method of wooden horse
CN104301180B (en) * 2014-10-16 2018-05-15 新华三技术有限公司 A kind of service message processing method and equipment
CN107547308B (en) * 2017-07-28 2020-04-28 新华三技术有限公司 Message mirroring method and device, and controller in Software Defined Network (SDN)
CN109039775A (en) * 2018-09-12 2018-12-18 网宿科技股份有限公司 Quality of service monitoring method, apparatus and system

Also Published As

Publication number Publication date
CN111404765A (en) 2020-07-10

Similar Documents

Publication Publication Date Title
CN111404765B (en) Message processing method, device, equipment and computer readable storage medium
US6973490B1 (en) Method and system for object-level web performance and analysis
CN110430219B (en) Method and system for self-adapting of multi-protocol Internet of things equipment
Klivansky et al. On long-range dependence in NSFNET tra c
US8965968B2 (en) Computer-readable medium storing system visualization processing program, method and device
CN110908363A (en) Data acquisition method and device for vehicle-mounted terminal
CN110704265A (en) Early warning information active reporting method and system based on Modbus protocol
US20220066812A1 (en) Method for remotely accessing data of a usb device by a virtual machine
CN105450479A (en) Method and apparatus for monitoring module
CN114221995B (en) Service calling method and device and electronic equipment
CN111122934A (en) Oscilloscope system based on internet of things technology
WO2015196636A1 (en) Packet collection method and system, network device and network management centre
CN117176802B (en) Full-link monitoring method and device for service request, electronic equipment and medium
CN115514682B (en) Data transmission method, device, equipment and storage medium
US20160292245A1 (en) Method and Device for Implementing Matching Between Acquisition System and Analysis System
CN109218435B (en) Data uploading method and system
CN116634042A (en) Big data message analysis method, device and storage medium
CN105700894A (en) Method and device for modifying HTTP response data
CN105306278B (en) The system and method for PING network diagnosises is realized based on embedded Web webmaster
CN113535436A (en) Data processing method, device and storage medium
CN114201537A (en) Method, system, equipment and storage medium for collecting and storing energy storage data
CN114390033A (en) Loop state patrol instrument acquisition system and method based on extensible communication protocol
CN102684924A (en) Network management workstation and debugging method of network management software
CN114765633A (en) Network message analysis method and device based on train real-time Ethernet protocol
CN113285904A (en) RDP-based method for analyzing disk mapping file information

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant