CN112565024A - More accurate network data packet loss warning method - Google Patents
More accurate network data packet loss warning method Download PDFInfo
- Publication number
- CN112565024A CN112565024A CN202110012486.0A CN202110012486A CN112565024A CN 112565024 A CN112565024 A CN 112565024A CN 202110012486 A CN202110012486 A CN 202110012486A CN 112565024 A CN112565024 A CN 112565024A
- Authority
- CN
- China
- Prior art keywords
- packet loss
- payload
- packet
- data packet
- timer
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0823—Errors, e.g. transmission errors
- H04L43/0829—Packet loss
Landscapes
- Engineering & Computer Science (AREA)
- Environmental & Geological Engineering (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a processing method for eliminating the influence of message retransmission such as SYN and the like on packet loss alarm, the packet loss is accumulated and the alarm is reported only when the payload is not 0, and a timer is set for the packet with the payload of 0 such as SYN and the like, and the packet is reported only when the time is out, otherwise the packet is discarded. Through the processing, the alarm for the packet loss is more practical and has reference value, and meanwhile, the retransmission of the SYN and other packets is also summarized, so that the practicability and the accuracy of monitoring and detecting are improved.
Description
Technical Field
The invention belongs to the field of network performance monitoring analysis and management, and particularly relates to a method for calculating network packet loss alarm.
Background
In the operation and maintenance management work of daily networks and application systems, network packet loss or packet loss rate is an important evaluation index.
When network packet loss is calculated, the packet loss rate is usually expressed by dividing the number of lost packets in a period of time by the total number of packets, so as to calculate the packet loss percentage.
In the actual monitoring alarm, it is found that the first SYN message established by the TCP connection is often transmitted multiple times, which is related to multiple links such as a browser, a network transmission device, and a server load.
Packet loss such as SYN is calculated into packet loss alarm, sometimes the quantity and frequency of the packet loss alarm can be greatly caused, and the practicability and the accuracy of the packet loss alarm are reduced. If the packet loss statistics of SYN packets are simply discarded, the SYN alarm is missed.
Disclosure of Invention
In view of this, the problem to be solved by the present invention is to eliminate the influence of the retransmission of the messages such as SYN on the packet loss alarm, to improve the practicability and accuracy of the packet loss alarm, and to perform extra processing on the packets such as SYN.
In order to solve the problems, the solution method comprises the following steps: for TCP messages, a message consists of three parts, i.e., an IP header, a TCP header, and a payload. The payload of the TCP message such as SYN, ACK, RST, FIN, PSH, URG and the like is 0; when the retransmission of the data packet is monitored and analyzed, the size of the payload of the data packet is calculated at the same time, and the packet loss is calculated only when the payload in the data is not 0 and the retransmitted data is retransmitted.
And setting a timer for packet loss of SYN and the like, ignoring the packet loss of SYN and the like as long as there is payload in the TCP connection within a timing range, and reporting the message statistics of SYN and the like with the payload of 0 as link monitoring reference if the connection payload still does not exist after the timing is exceeded.
The timeout setting of the timer is configurable according to the link conditions.
Description of the drawings I
Fig. 1 is a flow chart of a network packet loss alarm statistical processing method according to the present invention.
Detailed Description
The technical solution of the present invention will be described in detail with reference to the attached drawings of the process of the present invention
S1 is to detect the data packet on the link.
S2, whether the data packet on the link has packet loss is judged, if yes, the step is entered into S3, and if no, the step is entered into S5.
For the detected retransmission packet or packet loss, S3 determines whether the payload is 0, if so, it indicates that the packet is a SYN, ACK, or other type packet, and then S7 is entered. If payload is not 0, S5 is entered.
S4, the lost packet number of the link is accumulated, and alarm is given when the lost packet number reaches a certain set value.
S5: it is determined whether the timeout timer is set for this link, which is set by S8.
S6: if the overtime timer is set, the setting of the overtime timer is cancelled no matter the retransmission packet or the normal packet as long as the packet with the payload not being 0 exists on the link, and if the retransmission count of the message with the payload being 0 already exists at the moment, the message is discarded at the same time.
S7: if the link first payload is 0 and packet is lost for the first time, the process goes to S8 to set a timeout timer, and the timeout timer is started to work.
S9: and if the payload is not 0, performing packet loss accumulation.
S10: if the timeout timer is out of time, the process goes to S11, and the packet losses with the current payload of 0 are reported in a summary manner, and the setting of the timer is cancelled.
Through the processing, the alarm for the packet loss is more practical and has reference value, and meanwhile, the retransmission of the SYN and other packets is also summarized, so that the practicability and the accuracy of monitoring and detecting are improved.
Claims (3)
1. A method for more accurately alarming network data packet loss is characterized by comprising the following steps:
the network packet loss does not count packets with payload 0, and only counts packets with payload not 0; when the first packet loss of the network payload of 0 is detected, an overtime timer is set, and the time value of the overtime timer is set according to the network condition.
2. When a data packet with payload not 0 on the link is received, the setting of the timeout timer is cancelled no matter the data packet is retransmitted or a new data packet is received.
3. When the overtime timer is overtime, reporting the packet loss statistical number of the payload being 0, and simultaneously canceling the setting of the timer.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110012486.0A CN112565024B (en) | 2021-01-06 | 2021-01-06 | Method for alarming network data packet loss |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110012486.0A CN112565024B (en) | 2021-01-06 | 2021-01-06 | Method for alarming network data packet loss |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN112565024A true CN112565024A (en) | 2021-03-26 |
| CN112565024B CN112565024B (en) | 2023-04-07 |
Family
ID=75035249
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110012486.0A Active CN112565024B (en) | 2021-01-06 | 2021-01-06 | Method for alarming network data packet loss |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112565024B (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060191003A1 (en) * | 2005-02-18 | 2006-08-24 | Sae-Woong Bahk | Method of improving security performance in stateful inspection of TCP connections |
| CN102761403A (en) * | 2012-06-28 | 2012-10-31 | 深信服网络科技（深圳）有限公司 | Method and device for detecting TCP (transmission control protocol) packet loss and TCP stack |
| CN106341289A (en) * | 2016-08-30 | 2017-01-18 | 北京奇艺世纪科技有限公司 | Method and device for estimating packet loss ratio of network packets in packet capturing process |
| CN107395441A (en) * | 2017-08-31 | 2017-11-24 | 江苏省公用信息有限公司 | A kind of method for detecting Network Packet Loss situation |
| CN110401574A (en) * | 2018-04-24 | 2019-11-01 | 德科仕通信(上海)有限公司 | A kind of TCP retransmission rate calculation method, the method for improving TCP KPI accuracy in computation |
-
2021
- 2021-01-06 CN CN202110012486.0A patent/CN112565024B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20060191003A1 (en) * | 2005-02-18 | 2006-08-24 | Sae-Woong Bahk | Method of improving security performance in stateful inspection of TCP connections |
| CN102761403A (en) * | 2012-06-28 | 2012-10-31 | 深信服网络科技（深圳）有限公司 | Method and device for detecting TCP (transmission control protocol) packet loss and TCP stack |
| CN106341289A (en) * | 2016-08-30 | 2017-01-18 | 北京奇艺世纪科技有限公司 | Method and device for estimating packet loss ratio of network packets in packet capturing process |
| CN107395441A (en) * | 2017-08-31 | 2017-11-24 | 江苏省公用信息有限公司 | A kind of method for detecting Network Packet Loss situation |
| CN110401574A (en) * | 2018-04-24 | 2019-11-01 | 德科仕通信(上海)有限公司 | A kind of TCP retransmission rate calculation method, the method for improving TCP KPI accuracy in computation |
Also Published As
| Publication number | Publication date |
|---|---|
| CN112565024B (en) | 2023-04-07 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US8489755B2 (en) | Technique of detecting denial of service attacks | |
| Karn et al. | Improving round-trip time estimates in reliable transport protocols | |
| CN101483547B (en) | Evaluation method and system for network burst affair | |
| JP4578515B2 (en) | Automatic detection of limiting factors in TCP connections | |
| CN105591843B (en) | Network performance detection method and system in TCP transmission stream based on receiving end | |
| JP4512196B2 (en) | Abnormal traffic detection method and packet relay apparatus | |
| CN109617743B (en) | Network performance monitoring and service testing system and testing method | |
| US20070283436A1 (en) | Method and apparatus for large-scale automated distributed denial of service attack detection | |
| WO2017133014A1 (en) | Method and system for network performance detection based on receiving end in tcp transmission stream | |
| US20080144523A1 (en) | Traffic Monitoring Apparatus, Entry Managing Apparatus, and Network System | |
| US20020089930A1 (en) | Method for improving TCP performance over wireless links | |
| US20070070916A1 (en) | Real time monitoring of TCP flows | |
| CN111869163A (en) | Fault detection method, device and system | |
| JP2004528648A5 (en) | ||
| CN110535888B (en) | Port scanning attack detection method and related device | |
| JP2006013737A (en) | Device for eliminating abnormal traffic | |
| JP2008131198A (en) | Detecting method, detecting device, reference value calculating device, and computer program | |
| CN109167734B (en) | Method and device for identifying transmission control protocol state | |
| CN103378981B (en) | The processing method and processing device of oscillating alarm in network management system | |
| KR100651746B1 (en) | Apparatus for visualizing network state by using traffic flow-radar and method thereof | |
| CN112565024A (en) | More accurate network data packet loss warning method | |
| JP4169725B2 (en) | Packet discard location search method and apparatus | |
| JP5180247B2 (en) | Packet sampling apparatus and method and program | |
| JP2000041039A (en) | Device and method for monitoring network | |
| JP2002164890A (en) | Diagnostic apparatus for network |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |