CN113485282B - Message tracking display method, system, equipment and storage medium for distributed control system - Google Patents

Message tracking display method, system, equipment and storage medium for distributed control system Download PDF

Info

Publication number
CN113485282B
CN113485282B CN202111044622.0A CN202111044622A CN113485282B CN 113485282 B CN113485282 B CN 113485282B CN 202111044622 A CN202111044622 A CN 202111044622A CN 113485282 B CN113485282 B CN 113485282B
Authority
CN
China
Prior art keywords
message
upper computer
matching
tracked
control system
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202111044622.0A
Other languages
Chinese (zh)
Other versions
CN113485282A (en
Inventor
杨渊
翟桂锋
刘茜
杨柳
王鑫
陈俊
张斌
李忠柱
唐元霖
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
NR Electric Co Ltd
Xian Thermal Power Research Institute Co Ltd
Original Assignee
NR Electric Co Ltd
Xian Thermal Power Research Institute Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by NR Electric Co Ltd, Xian Thermal Power Research Institute Co Ltd filed Critical NR Electric Co Ltd
Priority to CN202111044622.0A priority Critical patent/CN113485282B/en
Publication of CN113485282A publication Critical patent/CN113485282A/en
Application granted granted Critical
Publication of CN113485282B publication Critical patent/CN113485282B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/418Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM]
    • G05B19/41865Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS] or computer integrated manufacturing [CIM] characterised by job scheduling, process planning, material flow
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22Parsing or analysis of headers
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/26Special purpose or proprietary protocols or architectures
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00Program-control systems
    • G05B2219/30Nc systems
    • G05B2219/33Director till display
    • G05B2219/33273DCS distributed, decentralised controlsystem, multiprocessor
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02PCLIMATE CHANGE MITIGATION TECHNOLOGIES IN THE PRODUCTION OR PROCESSING OF GOODS
    • Y02P90/00Enabling technologies with a potential contribution to greenhouse gas [GHG] emissions mitigation
    • Y02P90/02Total factory control, e.g. smart factories, flexible manufacturing systems [FMS] or integrated manufacturing systems [IMS]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Manufacturing & Machinery (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Debugging And Monitoring (AREA)
  • Computer And Data Communications (AREA)

Abstract

The invention discloses a method, a system, equipment and a storage medium for tracking and displaying messages of a distributed control system, wherein the method comprises the following steps: setting a keyword of a message to be tracked; according to the keywords of the message to be tracked, performing keyword matching from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer to obtain a matching message, and storing the obtained matching message as a local file with a preset format; analyzing the local file with the preset format through a preset protocol to obtain analyzed information; displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message; according to the method, the matched message is obtained and analyzed by using the keyword, the message of the upper computer software application is tracked and displayed, and the specific information of the upper computer software application message interaction is clearly and quickly checked to realize the quick delimitation of the fault existing in the communication process; compared with a log packet capturing and analyzing mode, the fault problem delimiting capability and the problem positioning speed are improved.

Description

Message tracking display method, system, equipment and storage medium for distributed control system
Technical Field
The invention belongs to the technical field of distributed control systems, relates to processing of data transmission of a distributed control system, and particularly relates to a message tracking display method, system, equipment and storage medium of the distributed control system.
Background
A Distributed Control System (DCS) is a novel Control device that uses computer technology to perform centralized monitoring, operation, management, and Distributed Control on an industrial production process, and is widely applied to the field of industrial production such as electric power; as the scale of the power system becomes larger and larger, the structure becomes more and more complex, and the management of the power equipment becomes more and more important.
In a power plant, an upper computer of a distributed control system communicates with a lower computer, a plant-level monitoring information system SIS or other intelligent control systems through various protocols, for example: OPC protocol, IEC61850 protocol, or other proprietary protocols; and the internal software of the upper computer can also communicate through a corresponding private protocol.
At present, when communication faults occur between software applications of an upper computer and a lower computer, a plant-level monitoring information system SIS or other intelligent control systems, or between internal software applications of the upper computer, a log packet capturing and code stream analyzing mode is mostly adopted to obtain specific communication fault information; the existing process of acquiring communication fault information through log capture and analysis is complex, the acquisition efficiency is low, the accuracy is poor, and the existing fault information tracking software can only show whether message interaction exists between software applications and cannot show specific message interaction contents.
Disclosure of Invention
Aiming at the technical problems in the prior art, the invention provides a message tracking display method, a message tracking display system, message tracking display equipment and a storage medium of a distributed control system, and aims to solve the technical problems that the existing process for acquiring communication fault information of an upper computer is complicated, the efficiency is low, the accuracy is poor, and the existing fault information tracking software can only display whether message interaction exists between software applications and cannot display specific message interaction contents.
In order to achieve the purpose, the invention adopts the technical scheme that:
the invention provides a message tracking and displaying method of a distributed control system, which comprises the following steps:
setting a keyword of a message to be tracked;
according to the keywords of the message to be tracked, performing keyword matching from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer to obtain a matching message, and storing the obtained matching message as a local file with a preset format;
analyzing the local file with the preset format through a preset protocol to obtain analyzed information; and displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message.
Furthermore, the keywords of the message to be tracked do not contain wildcards.
Further, the local file with the preset format is a pcap file or a preset private format file; the format of the preset private format file is as follows: message sequence number + data packet header + data message content.
Furthermore, a wireshark tool is adopted to analyze the matching message stored in the pcap file, so as to obtain the analyzed message.
Further, a preset message template is adopted to analyze a preset private format file to obtain an analyzed message; the preset message template comprises a message header and a message content template; the message header comprises a sender, a sending node, a receiver, a receiving node, a message content length and sending time.
Further, the analyzed message comprises a message header and message content; and encrypting a sensitive field in the message content, wherein the sensitive field comprises a user name or a password.
Further, according to the keywords of the message to be tracked, matching the keywords from the message receiving and sending of all software applications of the upper computer and the network card of the upper computer to obtain a matched message, which specifically comprises the following steps:
sending keywords of a message to be tracked to a background communication bus program of an upper computer to trigger the background communication bus program of the upper computer, and performing keyword matching in a message receiving and sending queue of all software applications of the upper computer to obtain a matching message;
if the matching message is not obtained or the obtained matching message is not qualified in the message receiving and sending queues of all software applications of the upper computer, sending the keyword of the message to be tracked to tcpdump software of the upper computer to trigger the tcpdump software of the upper computer, and performing keyword matching at a network card of the upper computer to obtain the matching message.
The invention also provides a message tracking and displaying system of the decentralized control system, which comprises a keyword module, a matching module and an analysis module;
the keyword module is used for setting keywords of the message to be tracked;
the matching module is used for matching keywords from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer according to the keywords of the message to be tracked to obtain a matching message, and storing the obtained matching message as a local file with a preset format;
the analysis module is used for analyzing the local file with the preset format through a preset protocol to obtain analyzed information; and displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message.
The invention also provides a message tracking display device of the decentralized control system, which comprises a memory, a processor and a computer program which is stored in the memory and can run on the processor, wherein the processor realizes the steps of the message tracking display method of the decentralized control system when executing the computer program.
The invention also provides a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to realize the steps of the message tracking display method of the decentralized control system.
Compared with the prior art, the invention has the beneficial effects that:
the invention provides a message tracking and displaying method of a distributed control system, which comprises the steps of matching keywords in the receiving and sending messages of all software applications of an upper computer and a network card of the upper computer by using the keywords of a message to be tracked to obtain a matched message; by analyzing the matched messages, the message tracking and display of the upper computer software applications are realized, the specific information of message interaction between the upper computer software applications or between the upper computer software applications and other systems can be clearly and quickly checked, and the fault problem existing in the communication process can be quickly defined; compared with the traditional mode of analyzing the code stream by capturing the packet by the log, the problem delimiting capability and the problem positioning speed can be greatly improved.
Further, keyword matching is carried out on a message receiving and sending queue of the upper computer software application in a background communication bus program of the upper computer, matching messages are obtained, and message tracking in an application layer is realized; through tcpdump software of the upper computer, keyword matching is carried out at a network card of the upper computer, message tracking at a link layer is realized, and when the condition that a message received by an application layer is inconsistent with a message sent by an opposite terminal or the condition that the application layer does not receive the message sent by the opposite terminal and the like occurs, the message is grabbed at the link layer to check whether the message is modified or discarded by application.
Drawings
FIG. 1 is a flow chart of a message tracking display method of a decentralized control system according to the present invention;
FIG. 2 is a block diagram of a message tracking display system of a decentralized control system according to the present invention;
fig. 3 is a block diagram of a message tracking display device of the distributed control system according to the present invention.
Detailed Description
In order to make the technical problems, technical solutions and advantageous effects of the present invention more apparent, the following embodiments further describe the present invention in detail. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
As shown in fig. 1, the present invention provides a message tracking display method for a decentralized control system, which comprises the following steps;
step 1, setting keywords of a message to be tracked. The keywords of the message to be tracked do not contain wildcards, so that the efficiency and the accuracy of keyword matching at a background bus program and a network card of the upper computer are effectively improved, and the influence of excessive messages on the performance and the network of the upper computer is avoided.
And 2, matching keywords from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer according to the keywords of the message to be tracked to obtain a matching message, and storing the obtained matching message as a local file with a preset format. The local file with the preset format is a pcap file or a preset private-format file, and the format of the preset private-format file is a message sequence number, a data packet header and data message content.
The process of obtaining the matching message by matching the keywords specifically comprises the following steps:
and sending the keywords of the message to be tracked to a background communication bus program of the upper computer to trigger the background communication bus program of the upper computer, and performing keyword matching in a message receiving and sending queue of all software applications of the upper computer to obtain a matching message.
And if the matching message is not acquired or the acquired matching message is not qualified in the message receiving and transmitting queues of all software applications of the upper computer, sending the keyword of the message to be tracked to tcpdump software of the upper computer to trigger the tcpdump software of the upper computer, and performing keyword matching at a network card of the upper computer to obtain the matching message.
And 3, analyzing the matched message, and displaying the analyzed message and the original code stream.
Analyzing the local file with the preset format through a preset protocol to obtain analyzed information; the analyzed message comprises a message header and message content; wherein, sensitive fields in the message content are encrypted; preferably, the sensitive field comprises a user name or password; and displaying the original code stream of the matched message and the analyzed message by using the upper computer, namely finishing the tracking display of the message of the distributed control system.
Analyzing the matching message stored in the pcap file by adopting a wireshark tool; or a preset message template is adopted to analyze a preset private format file to obtain an analyzed message; the preset message template comprises a message header and a message content template; the message header comprises a sender, a sending node, a receiver, a receiving node, a message content length and sending time.
The method comprises the steps of performing keyword matching from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer by using keywords of the message to be tracked to obtain matching messages; by analyzing the matched messages, the message tracking and display of the upper computer software applications are realized, the specific information of message interaction between the upper computer software applications or between the upper computer software applications and other systems can be clearly and quickly checked, and the fault problem existing in the communication process can be quickly defined; compared with the traditional mode of analyzing the code stream by capturing the packet by the log, the problem delimiting capability and the problem positioning speed can be greatly improved.
As shown in fig. 2, the invention also provides a message tracking and displaying system of the decentralized control system, which comprises a keyword module, a matching module and an analysis module.
And the keyword module is used for setting keywords of the message to be tracked.
And the matching module is used for matching keywords from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer according to the keywords of the message to be tracked to obtain a matching message, and storing the obtained matching message as a local file with a preset format.
The analysis module is used for analyzing the local file with the preset format through a preset protocol to obtain analyzed information; and displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message.
As shown in fig. 3, the present invention further provides a message tracing display device for a decentralized control system, which includes a memory, a processor and a computer program stored in the memory and operable on the processor, wherein the processor implements the steps of the message tracing display method for the decentralized control system when executing the computer program; the communication interface shown in fig. 3 is used to access an external device to obtain data.
When the processor executes the computer program, the steps of the above method for tracking and displaying messages of the distributed control system are implemented, for example: setting a keyword of a message to be tracked; according to the keywords of the message to be tracked, performing keyword matching from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer to obtain a matching message, and storing the obtained matching message as a local file with a preset format; analyzing the local file with the preset format through a preset protocol to obtain analyzed information; and displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message.
Alternatively, the processor implements the functions of the modules in the system when executing the computer program, for example: the keyword module is used for setting keywords of the message to be tracked; the matching module is used for matching keywords from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer according to the keywords of the message to be tracked to obtain a matching message, and storing the obtained matching message as a local file with a preset format; the analysis module is used for analyzing the local file with the preset format through a preset protocol to obtain analyzed information; and displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message.
Illustratively, the computer program may be partitioned into one or more modules/units that are stored in the memory and executed by the processor to implement the invention. The one or more modules/units may be a series of computer program instruction segments capable of performing preset functions, the instruction segments describing the execution process of the computer program in the decentralized control system message tracking presentation device. For example, the computer program may be divided into a keyword module, a matching module, and an analysis module, and each module has the following specific functions: the keyword module is used for setting keywords of the message to be tracked; the matching module is used for matching keywords from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer according to the keywords of the message to be tracked to obtain a matching message, and storing the obtained matching message as a local file with a preset format; the analysis module is used for analyzing the local file with the preset format through a preset protocol to obtain analyzed information; and displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message.
The information tracking and displaying device of the distributed control system can be a desktop computer, a notebook computer, a palm computer, a cloud server and other computing devices. The decentralized control system message tracking presentation device may include, but is not limited to, a processor, a memory. Those skilled in the art will appreciate that the schematic diagram of fig. 3 is merely an example of a decentralized control system message tracking and display device, and does not constitute a limitation of a decentralized control system message tracking and display device, and may include more components than those shown, or some components in combination, or different components, for example, the decentralized control system message tracking and display device may further include an input output device, a network access device, a bus, etc.
The processor may be a Central Processing Unit (CPU), other general purpose processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), an off-the-shelf programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, etc. The general purpose processor may be a microprocessor or the processor may be any conventional processor or the like, the processor being the control center of the decentralized control system message tracking and display device, various interfaces and lines connecting the various parts of the overall decentralized control system message tracking and display device.
The memory may be used to store the computer programs and/or modules, and the processor may implement the various functions of the decentralized control system message tracking and presentation device by running or executing the computer programs and/or modules stored in the memory and invoking the data stored in the memory.
The memory may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required by at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may store data (such as audio data, a phonebook, etc.) created according to the use of the cellular phone, and the like. In addition, the memory may include high speed random access memory, and may also include non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) card, a flash memory card (FlashCard), at least one disk storage device, a flash memory device, or other volatile solid state storage device.
The invention also provides a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to realize the steps of the message tracking display method of the decentralized control system.
The decentralized control system message tracking presentation system integrated modules/units, if implemented in the form of software functional units and sold or used as stand-alone products, may be stored in a computer readable storage medium.
Based on such understanding, all or part of the processes in the above message tracing and displaying method for the decentralized control system can be implemented by a computer program, which can be stored in a computer readable storage medium, and the steps of the message tracing and displaying method for the decentralized control system can be implemented when the computer program is executed by a processor. Wherein the computer program comprises computer program code, which may be in source code form, object code form, executable file or preset intermediate form, etc.
The computer-readable storage medium may include: any entity or device capable of carrying the computer program code, recording medium, usb disk, removable hard disk, magnetic disk, optical disk, computer memory, Read-only memory (ROM), Random Access Memory (RAM), electrical carrier wave signals, telecommunications signals, software distribution medium, etc.
It should be noted that the computer readable storage medium may contain content that is subject to appropriate increase or decrease as required by legislation and patent practice in jurisdictions, for example, in some jurisdictions, computer readable storage media that does not include electrical carrier signals and telecommunications signals in accordance with legislation and patent practice.
Examples
The method for tracking and displaying the messages of the software application on the upper computer of the decentralized control system of the power plant comprises the following steps:
step 1, setting keywords of a message to be tracked; wherein, the keywords of the message to be tracked do not contain wildcards; the keywords of the message to be tracked include keyword information and communication protocol information.
Step 2, sending keywords of the message to be tracked to a background communication bus program of the upper computer, and performing keyword matching on the bus program in a message receiving and sending queue of all software applications of the upper computer to obtain a matched message; and realizing the message tracking of the application layer of the upper computer.
When the application layer of the upper computer does not acquire the matching message or the acquired matching message, the message sent by the opposite software application end is inconsistent or the application layer does not receive the message sent by the opposite software application end, the link layer of the upper computer is adopted for carrying out message matching for checking whether the communication information is modified or discarded by the application; the method specifically comprises the following steps:
and sending the keywords of the message to be tracked to tcpdump software of the upper computer to trigger the tcpdump software of the upper computer, and performing keyword matching at a network card of the upper computer to obtain a matching message.
Step 3, analyzing the local file with the preset format through a preset protocol to obtain analyzed information; the analyzed message comprises a message header and message content; wherein, sensitive fields in the message content are encrypted; preferably, the sensitive field includes a username or password, for example, the user name: jiang 'is' user name: j × g "; and displaying the original code stream of the matched message and the analyzed message by using the upper computer, namely finishing the tracking display of the message of the distributed control system.
Analyzing the matching message stored in the pcap file by adopting a wireshark tool; or a preset message template is adopted to analyze a preset private format file to obtain an analyzed message; the preset message template comprises a message header and a message content template; the message header comprises a sender, a sending node, a receiver, a receiving node, a message content length and sending time.
In this embodiment, when the application layer of the upper computer performs message tracking, the message to be tracked includes information such as a protocol, an application, an IP, a PORT, a keyword, and the like; when the upper computer carries out message tracking on the link layer, the message to be tracked comprises information such as a network card, a protocol and an IP.
According to the information tracking and displaying method of the distributed control system, keyword matching is carried out from the receiving and sending messages of all software applications of the upper computer by using the keywords of the messages to be tracked, the communication information of the software applications of the upper computer of the received preset protocol or IP can be tracked and displayed on the appointed application layer, or the communication information of the software applications of the upper computer of the received preset protocol or IP can be tracked and displayed on the appointed link layer, so that the tracking and grabbing of the communication information of the software applications of the upper computer can be realized, and the displaying can be realized; the method does not need to adopt a log packet capturing and analyzing mode, realizes the tracking and displaying of the communication fault information applied by the upper computer software, and has the advantages of simple acquisition process, higher acquisition efficiency and better accuracy.
For a description of a relevant part in the system, the device and the storage medium for tracking and displaying a distributed control system message provided in this embodiment, reference may be made to a detailed description of a corresponding part in the method for tracking and displaying a distributed control system message described in this embodiment, which is not described herein again.
The above-described embodiment is only one of the embodiments that can implement the technical solution of the present invention, and the scope of the present invention is not limited by the embodiment, but includes any variations, substitutions and other embodiments that can be easily conceived by those skilled in the art within the technical scope of the present invention disclosed.

Claims (9)

1. A message tracking display method for a distributed control system is characterized by comprising the following steps:
setting a keyword of a message to be tracked;
according to the keywords of the message to be tracked, performing keyword matching from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer to obtain a matching message, and storing the obtained matching message as a local file with a preset format; according to the keywords of the message to be tracked, performing keyword matching from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer to obtain a matching message, which is as follows:
sending keywords of a message to be tracked to a background communication bus program of an upper computer to trigger the background communication bus program of the upper computer, and performing keyword matching in a message receiving and sending queue of all software applications of the upper computer to obtain a matching message;
if the matching message is not obtained or the obtained matching message is not qualified in the message receiving and sending queues of all software applications of the upper computer, sending the keyword of the message to be tracked to tcpdump software of the upper computer to trigger the tcpdump software of the upper computer, and performing keyword matching at a network card of the upper computer to obtain the matching message;
analyzing the local file with the preset format through a preset protocol to obtain analyzed information; and displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message.
2. The message tracking and displaying method of claim 1, wherein the keywords of the message to be tracked do not include wildcards.
3. The message tracking display method of the decentralized control system according to claim 1, wherein the local file of the preset format is a pcap file or a preset proprietary format file; the format of the preset private format file is as follows: message sequence number + data packet header + data message content.
4. The method for tracking and displaying the messages of the distributed control system according to claim 3, wherein a wireshark tool is used for analyzing the matched messages saved in the pcap file to obtain the analyzed messages.
5. The message tracking display method of the distributed control system according to claim 3, wherein a preset message template is adopted to analyze a preset proprietary format file to obtain an analyzed message; the preset message template comprises a message header and a message content template; the message header comprises a sender, a sending node, a receiver, a receiving node, a message content length and sending time.
6. The method as claimed in claim 1, wherein the parsed message includes a message header and a message content; and encrypting a sensitive field in the message content, wherein the sensitive field comprises a user name or a password.
7. A decentralized control system message tracking display system, comprising:
the keyword module is used for setting keywords of the message to be tracked;
the matching module is used for matching keywords from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer according to the keywords of the message to be tracked to obtain a matching message, and storing the obtained matching message as a local file with a preset format; according to the keywords of the message to be tracked, performing keyword matching from the receiving and sending messages of all software applications of the upper computer and the network card of the upper computer to obtain a matching message, which is as follows:
sending keywords of a message to be tracked to a background communication bus program of an upper computer to trigger the background communication bus program of the upper computer, and performing keyword matching in a message receiving and sending queue of all software applications of the upper computer to obtain a matching message;
if the matching message is not obtained or the obtained matching message is not qualified in the message receiving and sending queues of all software applications of the upper computer, sending the keyword of the message to be tracked to tcpdump software of the upper computer to trigger the tcpdump software of the upper computer, and performing keyword matching at a network card of the upper computer to obtain the matching message;
the analysis module is used for analyzing the local file with the preset format through a preset protocol to obtain analyzed information; and displaying the original code stream of the matched message and the analyzed message, namely completing the tracking display of the distributed control system message.
8. A decentralized control system message tracking presentation device, comprising a memory, a processor and a computer program stored in said memory and executable on said processor, wherein said processor, when executing said computer program, performs the steps of a decentralized control system message tracking presentation method according to any of claims 2 to 6.
9. A computer-readable storage medium, in which a computer program is stored, which, when being executed by a processor, carries out the steps of a decentralized control system message trace presentation method according to any one of claims 1 to 6.
CN202111044622.0A 2021-09-07 2021-09-07 Message tracking display method, system, equipment and storage medium for distributed control system Active CN113485282B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111044622.0A CN113485282B (en) 2021-09-07 2021-09-07 Message tracking display method, system, equipment and storage medium for distributed control system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111044622.0A CN113485282B (en) 2021-09-07 2021-09-07 Message tracking display method, system, equipment and storage medium for distributed control system

Publications (2)

Publication Number Publication Date
CN113485282A CN113485282A (en) 2021-10-08
CN113485282B true CN113485282B (en) 2021-12-07

Family

ID=77947271

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111044622.0A Active CN113485282B (en) 2021-09-07 2021-09-07 Message tracking display method, system, equipment and storage medium for distributed control system

Country Status (1)

Country Link
CN (1) CN113485282B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113747127A (en) * 2021-11-08 2021-12-03 西安热工研究院有限公司 DCS monitoring image measuring point positioning method, system, equipment and storage medium
CN113741379B (en) * 2021-11-08 2022-02-15 西安热工研究院有限公司 DCS monitoring picture fast loading method, system, equipment and storage medium

Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1533093A (en) * 2003-03-19 2004-09-29 华为技术有限公司 Method for analysing signalling
CN101517997A (en) * 2005-07-13 2009-08-26 格莱珀技术集团公司 System and method for providing mobile device services using SMS communications
CN101924666A (en) * 2010-07-22 2010-12-22 中兴通讯股份有限公司 Decoding realization method and system of signaling tracking
CN107087001A (en) * 2017-05-15 2017-08-22 华中科技大学 A kind of important address spatial retrieval system in distributed internet
CN108932294A (en) * 2018-05-31 2018-12-04 平安科技(深圳)有限公司 Resume data processing method, device, equipment and storage medium based on index
EP3425623A1 (en) * 2017-07-04 2019-01-09 Beijing Xiaomi Mobile Software Co., Ltd. Method and device for always on display, and computer-readable storage medium
CN109802880A (en) * 2017-11-17 2019-05-24 中兴通讯股份有限公司 Multimedia Message signaling tracking method, device and equipment, storage medium
CN110661683A (en) * 2019-09-26 2020-01-07 苏州浪潮智能科技有限公司 Method and device for analyzing UDP (user Datagram protocol) protocol by file based on pcap format

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109656700A (en) * 2018-12-17 2019-04-19 广州市玄武无线科技股份有限公司 Distributed link tracking, system, equipment and storage medium under multi-tenant

Patent Citations (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1533093A (en) * 2003-03-19 2004-09-29 华为技术有限公司 Method for analysing signalling
CN101517997A (en) * 2005-07-13 2009-08-26 格莱珀技术集团公司 System and method for providing mobile device services using SMS communications
CN101924666A (en) * 2010-07-22 2010-12-22 中兴通讯股份有限公司 Decoding realization method and system of signaling tracking
CN107087001A (en) * 2017-05-15 2017-08-22 华中科技大学 A kind of important address spatial retrieval system in distributed internet
EP3425623A1 (en) * 2017-07-04 2019-01-09 Beijing Xiaomi Mobile Software Co., Ltd. Method and device for always on display, and computer-readable storage medium
CN109802880A (en) * 2017-11-17 2019-05-24 中兴通讯股份有限公司 Multimedia Message signaling tracking method, device and equipment, storage medium
CN108932294A (en) * 2018-05-31 2018-12-04 平安科技(深圳)有限公司 Resume data processing method, device, equipment and storage medium based on index
CN110661683A (en) * 2019-09-26 2020-01-07 苏州浪潮智能科技有限公司 Method and device for analyzing UDP (user Datagram protocol) protocol by file based on pcap format

Also Published As

Publication number Publication date
CN113485282A (en) 2021-10-08

Similar Documents

Publication Publication Date Title
CN113485282B (en) Message tracking display method, system, equipment and storage medium for distributed control system
CN107634848B (en) System and method for collecting and analyzing network equipment information
CN109800259B (en) Data acquisition method and device and terminal equipment
WO2021189954A1 (en) Log data processing method and apparatus, computer device, and storage medium
CN110287163B (en) Method, device, equipment and medium for collecting and analyzing security log
US11188443B2 (en) Method, apparatus and system for processing log data
CN109474603B (en) Data packet grabbing processing method and terminal equipment
CN114584477B (en) Industrial control asset detection method, device, terminal and storage medium
CN110309065B (en) Concurrent execution method, device and equipment of test tasks and storage medium
CN110806931A (en) Method and device for realizing call link tracking of distributed service and electronic equipment
US11740997B2 (en) Method and apparatus for debugging a device
CN114598512A (en) Honeypot-based network security guarantee method and device and terminal equipment
CN117176802B (en) Full-link monitoring method and device for service request, electronic equipment and medium
CN111800292A (en) Early warning method and device based on historical flow, computer equipment and storage medium
CN114741400A (en) Data synchronization and analysis method, device and terminal equipment
CN106648722A (en) Flume receiving side data processing method and device based on big data
CN110297748A (en) The method, apparatus and computer readable storage medium of error are called in a kind of positioning
CN112688924A (en) Network protocol analysis system
CN111367686A (en) Service interface calling method and device, computer equipment and storage medium
WO2015176516A1 (en) Method and apparatus for tracking service process
CN113032341A (en) Log processing method based on visual configuration
CN114138720A (en) Log processing method, log processing device, electronic device and storage medium
CN110430098B (en) Data processing system
CN117528431B (en) Data monitoring method and device of communication platform and terminal equipment
CN113810250B (en) Message tracking method, system and equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant