CN112152826B - Asset management method, device, system and medium - Google Patents

Asset management method, device, system and medium Download PDF

Info

Publication number
CN112152826B
CN112152826B CN201910568596.8A CN201910568596A CN112152826B CN 112152826 B CN112152826 B CN 112152826B CN 201910568596 A CN201910568596 A CN 201910568596A CN 112152826 B CN112152826 B CN 112152826B
Authority
CN
China
Prior art keywords
address
determining
addresses
use state
device associated
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910568596.8A
Other languages
Chinese (zh)
Other versions
CN112152826A (en
Inventor
胡志磊
丛磊
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Shuan Xinyun Information Technology Co ltd
Original Assignee
Beijing Shuan Xinyun Information Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Shuan Xinyun Information Technology Co ltd filed Critical Beijing Shuan Xinyun Information Technology Co ltd
Priority to CN201910568596.8A priority Critical patent/CN112152826B/en
Publication of CN112152826A publication Critical patent/CN112152826A/en
Application granted granted Critical
Publication of CN112152826B publication Critical patent/CN112152826B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/04Network management architectures or arrangements
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/10Active monitoring, e.g. heartbeat, ping or trace-route
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00Network arrangements, protocols or services for addressing or naming
    • H04L61/09Mapping addresses
    • H04L61/10Mapping addresses of different types
    • H04L61/103Mapping addresses of different types across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]

Abstract

The present disclosure relates to a method of asset management, the method comprising determining a usage status of each IP address in a set of set IP addresses; based on the usage status of the IP address, a usage status of a device associated with the IP address is determined. The method uses the IP address as dimension to count and manage the assets in the set network segment, especially the IT assets, such as network equipment, so as to know the stability and change condition of the IT assets in the given network segment in real time.

Description

Asset management method, device, system and medium
Technical Field
The present disclosure relates to the field of network management technologies, and in particular, to a method, an apparatus, a system, and a medium for asset management.
Background
With the rapid development of computer technology in recent years, assets, particularly IT assets, are becoming important tools and supports for running and managing enterprises and organizations, various business support platforms and management systems are increasing, web servers, storage devices, network devices and security devices are complex, asset management work for administrators is difficult, a large number of non-master assets and zombie assets are accumulated in the long term, and the assets are not maintained for a long time, so that a large number of loopholes and configuration violations exist, great hidden hazards are brought to the safety of the enterprises and the organizations, and more serious, the management of the IT assets by the administrators is often undetectable and cannot be effectively protected.
Disclosure of Invention
To overcome the problems in the related art, provided herein are a method, apparatus, computer-readable storage medium, and computer device for asset management.
According to a first aspect herein, there is provided a method of asset management comprising determining a usage status for each IP address in a set of set IP addresses; based on the usage status of the IP address, a usage status of a device associated with the IP address is determined.
Wherein the determining, based on the usage status of the IP address, the usage status of the device associated with the IP address includes:
if the use state of the IP address is in use, determining that equipment associated with the IP address is in use; ports used by devices associated with the IP address are determined, as well as operational information.
Wherein the determining the port used by the device associated with the IP address and the operation information includes:
transmitting port detection information to a port designated by the device associated with the IP address or all ports, and if a response message is received, determining that the port transmitting the response message is a port used by the device associated with the IP address; and determining the operation information of the equipment associated with the IP address based on the response message.
Wherein said determining, based on said response message, operational information of a device associated with said IP address comprises:
and based on the response message, matching the response message by using an operation information database, and determining the operation information of the equipment associated with the IP address.
The determining and setting the use state of each IP address in the IP address set is realized by any one of the following modes:
mode one:
determining an IP address subset in the set IP address set, grouping the IP addresses in the IP address subset, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address in the same group based on whether feedback information is received or not;
mode two: and grouping the IP addresses in the set IP address set, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address based on whether feedback information is received or not.
Wherein, determining the usage state of each IP address in the set of IP addresses includes:
and sending detection information to each IP address in the set of IP addresses by using Ping, UDP Ping and ARP commands in the sequence, and if a feedback message is received, the corresponding IP address is in use.
The asset management method provided by the application is executed for S times, whether the activity degree of each IP address in the set IP address set is lower than a preset threshold value is judged, and if so, abnormality is prompted; the liveness is the number of times in use in the total number of times of use state confirmation of each IP address divided by the total number of times of use state confirmation, wherein S is a positive integer greater than or equal to 1.
According to another aspect herein, there is provided an apparatus for asset management, comprising a first determining module for determining a usage status of each IP address in a set of set IP addresses;
and the second determining module is used for determining the using state of the equipment associated with the IP address based on the using state of the IP address.
Wherein the second determining module is configured to:
if the use state of the IP address is in use, determining that equipment associated with the IP address is in use; ports used by devices associated with the IP address are determined, as well as operational information.
Wherein the determining the port used by the device associated with the IP address and the operation information includes:
transmitting port detection information to a port designated by the device associated with the IP address or all ports, and if a response message is received, determining that the port transmitting the response message is a port used by the device associated with the IP address; and determining the operation information of the equipment associated with the IP address based on the response message.
Wherein said determining, based on said response message, operational information of a device associated with said IP address comprises:
and based on the response message, matching the response message by using an operation information database, and determining the operation information of the equipment associated with the IP address.
The determining and setting the use state of each IP address in the IP address set is realized by any one of the following modes:
mode one:
determining an IP address subset in the set IP address set, grouping the IP addresses in the IP address subset, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address in the same group based on whether feedback information is received or not;
mode two: and grouping the IP addresses in the set IP address set, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address based on whether feedback information is received or not.
Wherein, the first determining module is used for:
and sending detection information to each IP address in the set of IP addresses by using Ping, UDP Ping and ARP commands in the sequence, and if a feedback message is received, the corresponding IP address is in use.
Wherein the asset management device further comprises:
the judging module is used for judging whether the activity degree of each IP address in the set IP address set is lower than a preset threshold value after executing the asset management method provided by the application for S times, and prompting abnormality if the activity degree of each IP address in the set IP address set is lower than the preset threshold value; the liveness is the number of times in use in the total number of times of use state confirmation of each IP address divided by the total number of times of use state confirmation, wherein S is a positive integer greater than or equal to 1.
According to another aspect herein, there is provided a computer readable storage medium having stored thereon a computer program which when executed performs the steps of the method of asset management provided by the present application.
According to another aspect herein, there is provided a computer device comprising a processor, a memory and a computer program stored on the memory, the processor implementing the steps of the method of asset management as provided by the application when the computer program is executed.
The method uses IP as dimension to manage the assets in the appointed network segment, in particular IT assets including web servers, storage devices, network devices, cameras, network printers and security devices, so as to solve the problems of long manual period and inaccurate port detection results. The stability and the change condition of the asset can be known in real time through the comparison and the arrangement of the detection results for a plurality of times at regular intervals.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the application as claimed.
Drawings
The accompanying drawings, which are included to provide a further understanding of the disclosure, illustrate and explain the disclosure, and do not constitute a limitation on the disclosure. In the drawings:
FIG. 1 is a flow chart illustrating a method of asset management according to an exemplary embodiment.
FIG. 2 is a block diagram illustrating an apparatus for asset management according to an example embodiment.
FIG. 3 is a block diagram of a computer device, according to an example embodiment.
Detailed Description
For the purposes of making the objects, technical solutions and advantages of the embodiments herein more apparent, the technical solutions in the embodiments herein will be clearly and completely described below with reference to the accompanying drawings in the embodiments herein, and it is apparent that the described embodiments are some, but not all, embodiments herein. All other embodiments, based on the embodiments herein, which a person of ordinary skill in the art would obtain without undue burden, are within the scope of protection herein. It should be noted that, without conflict, the embodiments and features of the embodiments herein may be arbitrarily combined with each other.
The usage status of the device associated with the set of IP addresses is determined herein by determining the usage status of each IP address in the set of IP addresses. The IP address is used as dimension to count and manage the assets in the set network segment, especially the IT assets, such as network equipment, so as to know the stability and change condition of the IT assets in the given network segment in real time.
FIG. 1 schematically illustrates a flow chart of a method of asset management according to the present disclosure. As shown in the solid line box of fig. 1, the asset management method includes:
step 101) determining the use state of each IP address in the set of IP addresses;
step 102) determining a usage status of a device associated with the IP address based on the usage status of the IP address.
If the use state of the IP address is in use, determining that equipment associated with the IP address is in use; the port used by the device associated with the IP address is determined along with the operational information. In the set IP address set, if the use state of a certain IP address is in use, it may be determined that the device associated with the IP address is in use. If it is determined that the device associated with the IP address is in use, then the port used by the device associated with the IP address and the operational information may be further determined.
In determining the port used by the device associated with the IP address and the running information, port detection information may be sent to the port designated by the device associated with the IP address or all ports, and if a response message is received, the port sending the response message is determined to be the port used by the device associated with the IP address. After determining the port used by the device associated with the IP address, a run message associated with the IP address may be determined based on the response message.
When determining the operation message associated with the IP address based on the response message, the operation information database is used for matching the response message, and the operation information of the equipment associated with the IP address is determined. A field associated with the operation information in the response message may be extracted, and the operation information database may be used to match the field to determine the operation information of the device associated with the IP address. The running information may include an operating system, version number, services run by a port used by the device associated with the IP address, etc. of the device associated with the IP address.
In step 102), if the IP address is in a non-use state, it is determined that the device associated with the IP address is in a non-use state.
In step 101), determining the usage status of each IP address in the set of IP addresses is achieved by any one of the following means:
mode one:
determining an IP address subset in the set IP address subset, grouping the IP addresses in the IP address subset, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address in the same group based on whether feedback information is received or not;
mode two: and setting IP address groups in the IP address set, simultaneously sending detection messages to all IP addresses in the same group, and determining the use state of all IP addresses based on whether feedback messages are received or not.
The above-mentioned confirmation method of the use state of the IP address is performed in a distributed scanning manner, for example, a plurality of use state confirmation servers may be used, and a plurality of use state confirmation programs are run on each server to confirm the use states of different IP addresses and the use states of the devices associated with the IP addresses, so that flexible capacity expansion and operation across the local area network may be realized. The use state confirmation process can be dispersed on different servers to operate in the mode, and the operation speed and stability of the system are guaranteed.
In step 101), determining the usage status of each IP address in the set of IP addresses may further include:
using Ping, UDP Ping, ARP commands, and in this order, probe information is sent to each IP address in the set of set IP addresses, if a feedback message is received, the corresponding IP address is in use. If Ping, UDP Ping and ARP commands are used in sequence to send probe information to a certain IP address, no feedback message is received, the IP address is in a non-use state.
As shown in the dashed box of FIG. 1, the asset management method may further comprise
Step 103) records the use state of each IP address in the set of set IP addresses, and the use state of the device associated with the IP address determined based on the use state of the IP address.
The port used by the device associated with the IP address may also be recorded, as well as the operational information.
As shown in the dashed box of fig. 1, the asset management method herein further includes:
step 104) to further understand the stability and variation of the asset, the above step S may be performed, to determine whether the activity level of each IP address in the set of IP addresses is lower than a predetermined threshold, if yes, step 105) is performed to prompt an exception, and record what number of confirmation the usage status of the IP address is, the confirmation result, and the activity level of the IP address. If not, step 106) is performed to record the number of times the use status of the IP address is confirmed, the result of the confirmation, and the liveness of the IP address. The activity is the number of times in use in the total number of times of use state confirmation of each IP address divided by the total number of times of use state confirmation, wherein S is a positive integer greater than or equal to 1.
In addition, the total number of times of confirmation of the use state of each IP address in the set of IP addresses, the confirmation result of each time, and the liveness of each IP address are also recorded.
For setting the usage state of each IP address in the IP address set, and the usage state of the device associated with the IP address determined based on the usage state of the IP address, and the port and operation information used by the device associated with the IP address accordingly, setting the total number of times of confirmation of the usage state of each IP address in the IP address set, the confirmation result of each time, and the information of the activity of each IP address, etc., may be stored in a unified manner, and a search index may be set, for example, IP address+nth time, the usage state result of the nth time of the IP address, and the usage state related information of the device associated with the IP address may be set.
In one embodiment provided by the application, the set of IP addresses is set to 192.168.1.101-192.168.1.250, and 150 IP addresses are used. The determination of the usage status of the 150 IP addresses may be implemented as follows:
mode one: determining IP address subsets in the IP address set, for example, one subset can be 192.168.1.101-192.168.1.131, and 30 addresses are all; grouping the IP addresses in the subset of IP addresses, for example, grouping every 5 addresses, simultaneously transmitting probe information to the 5 addresses, and if a feedback message transmitted by one of the IP addresses is received, determining the IP address as being in use. After the detection of the IP addresses in a certain group is finished, the detection of the IP addresses in the subsequent group is continued. The set of IP addresses may also be divided into 5 subsets, each of which may include 30 addresses. The 5 subsets may do the above simultaneously.
In this way, the selection of the subset may be selected according to the need, for example, according to the region and the operator, for example, there are 10 IP addresses using chinese telecommunications in beijing region and 15 IP addresses using mobile communications in guangdong region. The 10 IP addresses of the chinese telecommunications in beijing area can be divided into two groups, and two different service status confirmation servers are used to perform service status confirmation, on which 5 service status confirmation programs are respectively run, and at the same time, service status confirmation is performed for each group of IP addresses. The IP addresses of mobile communication in Guangdong area are divided into three groups, three different service state confirmation servers are used for carrying out service state confirmation, 5 service state confirmation programs are respectively operated on the three service state confirmation servers, and simultaneously, each group of IP addresses is respectively used for carrying out service state confirmation.
And uniformly storing, managing and inquiring the confirmation results.
Mode two: the 150 IP addresses are grouped, for example, into 30 groups, each group has 5 addresses, and a probe message is sent to each IP address in the same group, if a feedback message sent by one of the IP addresses is received, the IP address is determined to be in use. After the detection of the IP addresses in a certain group is finished, the detection of the IP addresses in the subsequent group is continued.
In this manner, all the sets of IP addresses may be grouped and use is made of different use servers, for example, if there are 6 use confirmation servers and 5 use confirmation programs are running on each server, the first 6 sets of use can be simultaneously confirmed and each IP address in each of the first 6 sets can be simultaneously confirmed.
And uniformly storing, managing and inquiring the confirmation results.
In the above manner, after each IP address in the same group determines the usage status, the subsequent group may confirm the IP address, or any IP address in the same group may confirm the usage status, and immediately confirm the corresponding IP address in the next group. The set of IP addresses is arranged in a queue, for example, in the form of MySQL queues.
In order to ensure the accuracy of the probing of the IP addresses, in the above steps, ping, UDP Ping, ARP commands are used for each IP address, and in this order probing information is sent to each IP address, which is in use if a feedback message for a certain IP address is received. If Ping, UDP (User Datagram Protocol) Ping, ARP (Address Resolution Protocol) are used in sequence to send probe information to an IP address, no feedback message is received, the IP address is in a non-use state.
If a certain IP address is in use, it is determined that the device associated with the IP address is in use. The port used by the device associated with the IP address is further determined along with the operating information. For example, the 192.168.1.101 address is in use, a detection message is sent to the designated port or all ports of the device associated with the 192.168.1.101 address, such as receiving a response message, e.g., if a response message sent by 80 ports is received, it is determined that the port used by the device associated with the 192.168.1.101 address is 80 ports. The operation information of the device associated with the 192.168.1.101 address is determined from the field associated with the operation message database, e.g., the canner field, in the response message using the operation message database to match the associated field in the response message. The run message may include the operating system of the device associated with the 192.168.1.101 address, a version number, a service run by the port used by the device associated with the 192.168.1.101 address, etc. The running message database may be an open source service fingerprint database of Nmap.
If the 192.168.1.101 address is in the non-use state, the device associated with the 192.168.1.101 address is in the non-use state.
And recording the use state of each IP address in the IP address set, the use state of the equipment associated with the IP address determined based on the use state of the IP address, and the corresponding port and running information used by the equipment associated with the IP address.
To further understand the stability and variability of the asset, the above-described step S may be performed a given time, e.g., 10 times. Judging whether the activity of each IP in the designated network segment is lower than a preset threshold value, if so, prompting abnormality, and recording the confirmation of the use state of the IP address, the confirmation result and the activity of the IP address, and if not, recording the confirmation of the use state of the IP address, the confirmation result and the activity of the IP address. The liveness is the number of times in use divided by S times, i.e., the ratio of the number of times survivors to the total number of times of use status confirmation for each IP, among the S times, where S is a positive integer greater than or equal to 1. The manner of prompting for the abnormality may be any manner in which abnormality prompting can be performed, for example, an IP address of an abnormal state is displayed on a screen. Or in a conspicuous color while displaying the IP address of the abnormal state on the screen.
And recording the total number of times of confirmation of the use state of each IP address in the IP address set, the confirmation result of each time and the activity of each IP address.
For the usage state of each IP address in the above IP address set, and the usage state of the device associated with the IP address determined based on the usage state of the IP address, and the port and operation information used by the device associated with the IP address accordingly, information such as the total number of times of confirmation of the usage state of each IP address in the IP address set, the confirmation result of each time, and the liveness of each IP address are set may be stored in a unified manner, and a search index may be set, for example, an IP address+nth time may be set, the usage state result of the nth time of the IP address and the usage state related information of the device associated with the IP address may be searched.
The IP is used as a dimension, and the IT assets are managed by judging whether the IP address is in a use state or not, particularly, network equipment with relatively fixed IP addresses, such as a Web server, a network printer, security equipment, storage equipment, a camera and the like, can be effectively managed. By confirming the use state of each IP address in the set IP address set in a given time, the asset state and the asset change condition can be known in time. Through the judgment of the liveness, the running state of the target asset can be clearly displayed. In addition, the use state of each IP address in the set IP address set is confirmed in the mode, namely, IT assets are managed in a distributed message queue mode, particularly, assets are managed for network segments with more IT assets, and the problems of long manual period and inaccurate port detection are solved. And the stability and the fluctuation condition of the asset are known in real time by carrying out multiple confirmations in a given time of the use state of each IP address in the set IP address set and sorting and comparing the results of the multiple confirmations.
Also disclosed herein is an asset management device, fig. 2 illustratively shows a block diagram of an asset management device according to the teachings herein. As shown in fig. 2, a solid line box, the asset management apparatus includes:
the first determining module is used for determining the use state of each IP address in the set IP address set;
and the second determining module is used for determining the using state of the equipment associated with the IP address based on the using state of the IP address.
If the first determining module determines that the use state of the IP address is in use, determining that the equipment associated with the IP address is in use; the second determination module further determines the port used by the device associated with the IP address and the operational information. In the set IP address set, if the use state of a certain IP address is in use, it may be determined that the device associated with the IP address is in use. If it is determined that the device associated with the IP address is in use, then the port used by the device associated with the IP address and the operational information may be further determined.
In determining the port used by the device associated with the IP address and the running information, the second determining module may send port detection information to the port designated by the device associated with the IP address or to all ports, and if a response message is received, determine that the port sending the response message is the port used by the device associated with the IP address. After determining the port used by the device associated with the IP address, a run message associated with the IP address may be determined based on the response message.
And the second determining module uses the operation information database to match the response message when determining the operation message associated with the IP address based on the response message, and determines the operation information of the equipment associated with the IP address. A field associated with the operation information in the response message may be extracted, and the operation information database may be used to match the field to determine the operation information of the device associated with the IP address. The running information may include an operating system, version number, services run by a port used by the device associated with the IP address, etc. of the device associated with the IP address.
If the IP address is in the non-use state, the device associated with the IP address is determined to be in the non-use state.
The first determining module may be implemented by any one of the following modes when determining the use state of each IP address in the set of IP addresses:
mode one:
determining an IP address subset in the set IP address subset, grouping the IP addresses in the IP address subset, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address in the same group based on whether feedback information is received or not;
mode two: and setting IP address groups in the IP address set, simultaneously sending detection messages to all IP addresses in the same group, and determining the use state of all IP addresses based on whether feedback messages are received or not.
The above-mentioned confirmation method of the use state of the IP address is performed in a distributed scanning manner, for example, a plurality of use state confirmation servers may be used, and a plurality of use state confirmation programs are run on each server to confirm the use states of different IP addresses and the use states of the devices associated with the IP addresses, so that flexible capacity expansion and operation across the local area network may be realized. The use state confirmation process can be dispersed on different servers to operate in the mode, and the operation speed and stability of the system are guaranteed.
The first determining module may further determine a usage status of each IP address in the set of IP addresses by:
using Ping, UDP Ping, ARP commands, and in this order, probe information is sent to each IP address in the set of set IP addresses, if a feedback message is received, the corresponding IP address is in use. If Ping, UDP Ping and ARP commands are used in sequence to send probe information to a certain IP address, no feedback message is received, the IP address is in a non-use state.
As shown in the dashed box of FIG. 2, the asset management device may further comprise
And the recording module is used for recording the use state of each IP address in the set IP address and the use state of the equipment which is determined based on the use state of the IP address and is associated with the IP address.
The recording module may also record the port used by the device associated with the IP address as well as the operational information.
As shown in the dashed box of fig. 2, the apparatus for asset management herein further comprises:
the judging module is used for judging whether the activity of each IP address in the set of IP addresses is lower than a preset threshold value or not after executing the step S times in order to further know the stability and the variation condition of the asset, if so, prompting abnormality, and recording the confirmation of the use state of the IP address, the confirmation result and the activity of the IP address by the recording module. If not, the recording module records the confirmation of the use state of the IP address and the confirmation result and the liveness of the IP address. The activity is the number of times in use in the total number of times of use state confirmation of each IP address divided by the total number of times of use state confirmation, wherein S is a positive integer greater than or equal to 1.
In addition, the recording module also records the total number of times of confirmation of the use state of each IP address in the set of IP addresses, the confirmation result of each time and the liveness of each IP address.
For setting the usage state of each IP address in the IP address set, and the usage state of the device associated with the IP address determined based on the usage state of the IP address, and the port and operation information used by the device associated with the IP address accordingly, setting the total number of times of confirmation of the usage state of each IP address in the IP address set, the confirmation result of each time, and the information of the activity of each IP address, etc., may be stored in a unified manner, and a search index may be set, for example, IP address+nth time, the usage state result of the nth time of the IP address, and the usage state related information of the device associated with the IP address may be set.
Also provided herein is a computer readable storage medium having stored thereon a computer program that is executed by the above method.
FIG. 3 is a block diagram illustrating a computer device 300 for asset management according to an example embodiment. For example, the computer device 300 may be provided as a server. Referring to fig. 3, a computer device 300 includes a processor 301, the number of which may be set to one or more as desired. The computer device 300 further comprises a memory 302 for storing instructions, such as application programs, executable by the processor 301. The number of the memories can be set to one or more according to the requirement. Which may store one or more applications. The processor 301 is configured to execute instructions to perform the above-described method.
It will be apparent to one of ordinary skill in the art that embodiments herein may be provided as a method, apparatus (device), or computer program product. Accordingly, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present disclosure may take the form of a computer program product embodied on one or more computer-usable storage media having computer-usable program code embodied therein. Computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data, including, but not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital Versatile Disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by a computer. Furthermore, as is well known to those of ordinary skill in the art, communication interfaces typically comprise computer readable instructions, data structures, program modules, or other data structures, such as a carrier wave or other transport
Other data in the modulated data signal, such as a mechanism, and may include any information delivery medium.
The description herein is with reference to flowchart illustrations and/or block diagrams of methods, apparatus (devices) and computer program products according to embodiments herein. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instructions which implement the function specified in the computer-readable memory.
An article of manufacture comprising instruction means that implement the function specified in the flowchart flow or flows and/or block diagram block or blocks
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
In this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that an article or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such article or apparatus. Without further limitation, an element defined by the phrase "comprising … …" does not exclude the presence of additional identical elements in an article or apparatus that comprises the element.
While preferred embodiments herein have been described, additional variations and modifications in those embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. It is therefore intended that the following claims be interpreted as including the preferred embodiments and all alterations and modifications as fall within the scope herein.
It will be apparent to those skilled in the art that various modifications and variations can be made herein without departing from the spirit and scope of the disclosure. Thus, given that such modifications and variations herein fall within the scope of the claims herein and their equivalents, such modifications and variations are intended to be included herein.

Claims (10)

1. A method of asset management, characterized in that,
determining the use state of each IP address in the set IP address set;
determining a usage status of a device associated with the IP address based on the usage status of the IP address;
if the use state of the IP address is in use, determining that equipment associated with the IP address is in use; determining a port used by a device associated with the IP address and operating information; the operation information comprises an operating system, a version number and a service operated by a port used by the equipment associated with the IP address;
and executing the steps for a plurality of times within a given time, and sorting and comparing the results of the plurality of times of confirmation to know the stability and the variation of the asset in real time.
The determining the port used by the device associated with the IP address and the operation information includes:
transmitting port detection information to a port designated by the device associated with the IP address or all ports, and if a response message is received, determining that the port transmitting the response message is a port used by the device associated with the IP address; extracting a field related to the operation information in the response message, matching the field by using an operation information database, and determining the operation information of the equipment related to the IP address.
2. The method of asset management of claim 1, wherein the determining the usage status of each IP address in the set of set IP addresses is accomplished by any one of:
mode one:
determining an IP address subset in the set IP address set, grouping the IP addresses in the IP address subset, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address in the same group based on whether feedback information is received or not;
mode two: and grouping the IP addresses in the set IP address set, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address based on whether feedback information is received or not.
3. The asset management method of claim 1, wherein determining a usage status of each IP address in the set of set IP addresses comprises:
and sending detection information to each IP address in the set of IP addresses by using Ping, UDP Ping and ARP commands in the sequence, and if a feedback message is received, the corresponding IP address is in use.
4. A method of asset management as claimed in any one of claims 1 to 3, wherein said asset management method is performed S times, determining if the liveness of each IP address in said set of set IP addresses is below a predetermined threshold, and if so, prompting an anomaly; the liveness is the number of times in use in the total number of times of use state confirmation of each IP address divided by the total number of times of use state confirmation, wherein S is a positive integer greater than or equal to 1.
5. An asset management device, characterized in that,
the first determining module is used for determining the use state of each IP address in the set IP address set;
a second determining module, configured to determine a usage state of a device associated with the IP address based on the usage state of the IP address;
the second determining module is configured to:
if the use state of the IP address is in use, determining that equipment associated with the IP address is in use; determining a port used by a device associated with the IP address and operating information; the operation information comprises an operating system, a version number and a service operated by a port used by the equipment associated with the IP address;
and executing the steps for a plurality of times within a given time, and sorting and comparing the results of the plurality of times of confirmation to know the stability and the variation of the asset in real time.
The determining the port used by the device associated with the IP address and the operation information includes:
transmitting port detection information to a port designated by the device associated with the IP address or all ports, and if a response message is received, determining that the port transmitting the response message is a port used by the device associated with the IP address; extracting a field related to the operation information in the response message, matching the field by using an operation information database, and determining the operation information of the equipment related to the IP address.
6. The asset management device of claim 5, wherein said determining a usage status of each IP address in the set of set IP addresses is accomplished by any one of:
mode one:
determining an IP address subset in the set IP address set, grouping the IP addresses in the IP address subset, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address in the same group based on whether feedback information is received or not;
mode two: and grouping the IP addresses in the set IP address set, simultaneously sending detection information to each IP address in the same group, and determining the use state of each IP address based on whether feedback information is received or not.
7. The asset management device of claim 5, wherein the first determination module is to:
and sending detection information to each IP address in the set of IP addresses by using Ping, UDP Ping and ARP commands in the sequence, and if a feedback message is received, the corresponding IP address is in use.
8. The asset management device of claim 5, further comprising:
a judging module, configured to judge whether the activity level of each IP address in the set IP address set is lower than a predetermined threshold after executing the asset management method of any one of claims 1 to 3S times, and if so, prompt for abnormality; the liveness is the number of times in use in the total number of times of use state confirmation of each IP address divided by the total number of times of use state confirmation, wherein S is a positive integer greater than or equal to 1.
9. A computer readable storage medium, on which a computer program is stored, characterized in that the computer program, when executed, implements the steps of the method according to any one of claims 1-4.
10. A computer device comprising a processor, a memory and a computer program stored on the memory, characterized in that the processor implements the steps of the method according to any of claims 1-4 when the computer program is executed.
CN201910568596.8A 2019-06-27 2019-06-27 Asset management method, device, system and medium Active CN112152826B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910568596.8A CN112152826B (en) 2019-06-27 2019-06-27 Asset management method, device, system and medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910568596.8A CN112152826B (en) 2019-06-27 2019-06-27 Asset management method, device, system and medium

Publications (2)

Publication Number Publication Date
CN112152826A CN112152826A (en) 2020-12-29
CN112152826B true CN112152826B (en) 2023-11-14

Family

ID=73869276

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910568596.8A Active CN112152826B (en) 2019-06-27 2019-06-27 Asset management method, device, system and medium

Country Status (1)

Country Link
CN (1) CN112152826B (en)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112732724A (en) * 2021-01-21 2021-04-30 杭州迪普科技股份有限公司 Asset information management method and device
CN113162830B (en) * 2021-06-15 2022-04-26 杭州海康威视数字技术股份有限公司 Internet of things intelligent terminal equipment discovery method and device and electronic equipment
CN113839833B (en) * 2021-09-24 2023-12-05 北京天融信网络安全技术有限公司 Identification method and device of silent equipment, computer equipment and storage medium
CN114422387A (en) * 2022-01-19 2022-04-29 北京华云安信息技术有限公司 Network asset detection method and device, electronic equipment and storage medium
CN115277482B (en) * 2022-06-10 2023-08-22 浙江清捷智能科技有限公司 On-line detection method for industrial edge equipment

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107896232A (en) * 2017-12-27 2018-04-10 北京奇艺世纪科技有限公司 A kind of IP address appraisal procedure and device
CN108040136A (en) * 2017-12-18 2018-05-15 北京搜狐新媒体信息技术有限公司 A kind of IP method for managing resource and system
CN109660389A (en) * 2018-12-07 2019-04-19 泰康保险集团股份有限公司 A kind of IT assets management method and device

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108040136A (en) * 2017-12-18 2018-05-15 北京搜狐新媒体信息技术有限公司 A kind of IP method for managing resource and system
CN107896232A (en) * 2017-12-27 2018-04-10 北京奇艺世纪科技有限公司 A kind of IP address appraisal procedure and device
CN109660389A (en) * 2018-12-07 2019-04-19 泰康保险集团股份有限公司 A kind of IT assets management method and device

Also Published As

Publication number Publication date
CN112152826A (en) 2020-12-29

Similar Documents

Publication Publication Date Title
CN112152826B (en) Asset management method, device, system and medium
CN110635971A (en) Industrial control asset detection and management method and device and electronic equipment
CN108696544A (en) Security breaches detection method based on industrial control system and device
EP3169018B1 (en) Method and device for establishing performance measurement task and processing performance measurement result
CN111311777A (en) Dynamic inspection method, server, terminal, storage medium and equipment
CN109714239B (en) Management message issuing method, VNFM (virtual network management frequency) equipment and server
US20170207990A1 (en) Reducing an amount of captured network traffic data to analyze
CN113034025B (en) Remote sensing image labeling system and method
JP2021528906A (en) Control methods and equipment based on Industrial Ethernet
CN105989457A (en) Information query method and apparatus thereof
CN102571416A (en) Positioning method and device for virtual machine
CN113098852B (en) Log processing method and device
CN104333614B (en) The method, apparatus and system of terminal recognition
CN110691012B (en) Message processing method and tester
CN104038491A (en) Information interception method, device and system
CN108259214B (en) Configuration command management method, device and machine-readable storage medium
CN107547382B (en) Neighbor relation discovery method and device
CN106469166A (en) A kind of information processing method and device
CN113301003B (en) Information and data link detection method, device and storage medium
CN106254375B (en) A kind of recognition methods of hotspot equipment and device
US11288162B2 (en) Optimizing interaction flows
CN106559439B (en) A kind of method for processing business and equipment
CN109560964B (en) Equipment compliance checking method and device
CN108768987B (en) Data interaction method, device and system
CN102541662A (en) Software processing control method and mobile terminal

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant