CN113518270A

CN113518270A - Heterogeneous data acquisition device and method for mobile network

Info

Publication number: CN113518270A
Application number: CN202110566769.XA
Authority: CN
Inventors: 周晓光
Original assignee: Beijing University of Posts and Telecommunications
Current assignee: Beijing University of Posts and Telecommunications
Priority date: 2021-05-24
Filing date: 2021-05-24
Publication date: 2021-10-19

Abstract

The invention provides a heterogeneous data acquisition device and method for a mobile network. The device comprises a signaling access module, a data packet acquisition module and a data packet transmission module, wherein the signaling access module is used for acquiring the data packet; the signaling decoding module is used for decoding the data packets layer by layer from bottom to top, wherein each layer is decoded according to a corresponding protocol in a plurality of communication protocols, and a protocol of a higher layer is determined according to a decoding rule of each layer of protocol; and the signaling output module is used for outputting the decoded data packet. The signaling acquisition scheme can be greatly simplified, the equipment utilization rate is increased, the networking is more flexible, and the universality of the data acquisition equipment is improved.

Description

Heterogeneous data acquisition device and method for mobile network

Technical Field

The application relates to the field of mobile communication and the field of data acquisition, in particular to a heterogeneous data acquisition device and method for a mobile network.

Background

Through the development of 2G, 3G and 4G, the mobile communication network is more and more complex, the number of network elements is more and more, and the service types are more and more diversified. With the advent of the age of 5G, this phenomenon became more pronounced. In order to ensure the communication quality, operators need to monitor and examine the indexes of telephone, short message and internet service on the mobile network, and need to provide comprehensive analysis capabilities including network performance analysis, service performance analysis, database analysis and the like in combination with big data means. The current practice in the industry is to acquire data on a key node link in a mobile network through data acquisition, store the data into a special analysis system after decoding, filtering and backfilling, and provide the comprehensive analysis capability by the analysis system. In addition, services such as location-based services or missed call reminding can be provided through a signaling collection mode, the real-time requirement of the services is lower than that of calling services, and the signaling collection mode is a good choice from the aspects of economy and complexity.

Due to the complexity and business diversity of mobile networks, data acquisition points are multi-source and data structures are heterogeneous. Wherein, the data acquisition point of the CS (Circuit Switched) domain network includes: mc interface, a interface, Abis interface, LSTP (Low Signal Transfer Point, Low level signaling Transfer Point), HSTP (High Signal Transfer Point, High level signaling Transfer Point), HLR (Home Location Register), gateway office, and other network elements and interfaces; a data acquisition point of an IMS (IP Multimedia Subsystem) network includes: an interface between an I/S-CSCF (Inquiry Call Session Control Function) and a P-CSCF (Proxy Call Session Control Function), an interface between an I/S-CSCF and an MGCF (Media Gateway Control Function), an interface between an I/S-CSCF and an HSS (Home Subscriber Server), and an interface between an SBC (Session Border Controller) and an IMS CE router. The data structure is mainly signaling, and includes various protocols such as SIP (Session Initiation Protocol), CAP (CAMEL Application Part, CAMEL Application Part Protocol), MAP (Mobile Application Part Protocol), DIAMETER (AAA working group of IETF as AAA Protocol standard of the next generation), HTTP (HyperText Transfer Protocol), ENUM (e.g., URI Mapping, telephone number Mapping)/DNS (domain Name System), and the like.

For data acquisition of a mobile network, which includes two parts, namely signaling access and signaling analysis, the current signaling analysis technology mainly has the following implementation modes: one is a method implementation based on dedicated hardware. The special hardware realizes the signaling collection by a board card mode, and the program of the signaling decoding and output is arranged in the firmware. The input port of the device may be an E1 port, an ethernet port, or a mixture of the two, since the ports for signaling access are different. The output ports of the devices are all ethernet ports. The special hardware is a black box, so that the installation and deployment are simple, and the decoding efficiency is high. The method is realized based on software. The software acquisition mode is that a monitoring program is installed on the acquired equipment, and the acquired signaling is forwarded to the signaling acquisition equipment by the monitoring program, and belongs to a client/server mode. This approach is somewhat invasive to the device being harvested.

However, the above methods for signaling analysis all have some drawbacks, which are as follows:

(1) the decoding protocol built in the special hardware has stronger pertinence, for example, the seven-signal acquisition equipment only supports the seven-signal, the IMS-signal acquisition equipment only supports the SIP, and the utilization rate of the original equipment is gradually reduced along with the network evolution.

(2) The signaling filtering flexibility is poor, and the requirement of filtering the specific operation of the signaling cannot be met, which is urgently needed by some service platforms.

(3) When the signaling acquisition equipment outputs the signaling to the cloud resource pool, a good load balancing mechanism is not provided. This is a problem because the specification of the virtual machine provided by the cloud resource pool is not a particularly high configuration, and many virtual machines are required for signaling analysis processing.

(4) The output of some signaling collection devices is based on two-layer forwarding, and the IP and port of the upstream device cannot be specified, which requires the device or platform to which the signaling collection device outputs to start processing the packet from the link layer, thereby increasing complexity.

Disclosure of Invention

Aiming at the problems in the related art, the application aims to provide a heterogeneous data acquisition device and method for a mobile network, which can greatly simplify a signaling acquisition scheme, increase the utilization rate of equipment, enable networking to be more flexible, further reduce the cost of the data acquisition scheme in the mobile network and improve the universality of data acquisition equipment.

The technical scheme of the invention is realized as follows:

according to an aspect of the present invention, there is provided a heterogeneous data collection apparatus for a mobile network, including: the signaling access module is used for acquiring a data packet; the signaling decoding module is used for decoding the data packets layer by layer from bottom to top, wherein each layer is decoded according to a corresponding protocol in a plurality of communication protocols, and a protocol of a higher layer is determined according to a decoding rule of each layer of protocol; and the signaling output module is used for outputting the decoded data packet.

According to the embodiment of the invention, the heterogeneous data acquisition device further comprises: a signaling filtering module configured to: receiving the decoding result of each layer input by the signaling decoding module; reading fields from the decoding result and matching the fields with conditions corresponding to the signaling filtering rules; and if the matching is successful, returning the action corresponding to the filtering rule to the signaling decoding module, and decoding the higher layer by the signaling decoding module after executing the action.

According to the embodiment of the invention, the actions of the heterogeneous data acquisition device comprise accepting and discarding, wherein accepting represents that a higher-layer protocol is continuously processed, and discarding represents that a data packet is directly discarded; the condition consists of a parameter name, a logical operation and a value, and the parameter name and the value come from a signaling decoding module.

According to the embodiment of the invention, the signaling access module of the heterogeneous data acquisition device comprises a DPDK component.

According to the embodiment of the invention, the heterogeneous data acquisition device is characterized in that the DPDK component comprises: the input is not locked the annular queue, is used for the data packet that the buffer memory device receives, the data packet is read from the network card by DPDK assembly and is written into directly, and read out by the decoding module of the signalling; and the output lock-free ring queue is used for caching the data packets needing to be output, and the data packets are written in by the signaling filtering module and read out by the signaling output module.

According to the embodiment of the invention, the signaling output module of the heterogeneous data acquisition device supports and is connected with a plurality of signaling processing devices, and the signaling output module encodes the decoded data packet according to a signaling output format and outputs the encoded data packet to the corresponding signaling processing device in the plurality of signaling processing devices.

According to the embodiment of the invention, the heterogeneous data acquisition device distributes the signaling to the multiple signaling processing devices by adopting a load balancing algorithm, wherein the load balancing algorithm comprises one or more of polling, weighted polling and Hash.

According to an embodiment of the present invention, the heterogeneous data acquisition apparatus, the plurality of communication protocols include: IP, TCP/UDP/SCTP, MTP3, SCCP, TCAP, BICC, SIP, DIAMETER.

According to another aspect of the present invention, a method for acquiring heterogeneous data for a mobile network is provided, which includes: the method comprises the following steps: acquiring a data packet; step two: decoding the data packets layer by layer from bottom to top, wherein each layer is decoded according to a corresponding one of a plurality of communication protocols, and a higher layer protocol is determined according to a decoding rule of each layer protocol; step three: and outputting the decoded data packet.

According to the embodiment of the invention, in the heterogeneous data acquisition method, the second step further comprises: accepting a decoding result of each layer; reading fields from the decoding result and matching the fields with conditions corresponding to the signaling filtering rules; and if the matching is successful, returning the action corresponding to the filtering rule, and performing higher-layer decoding after the action is executed.

Drawings

In order to more clearly illustrate the embodiments of the present application or technical solutions in the prior art, the drawings required to be used in the embodiments will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings without creative efforts.

Fig. 1 is a heterogeneous data acquisition device facing a mobile network according to an embodiment of the present invention.

Fig. 2 is a heterogeneous data acquisition system oriented to a mobile network according to an embodiment of the present invention.

Fig. 3 is a schematic diagram of a mobile network-oriented heterogeneous data collection process according to an embodiment.

Fig. 4 is a schematic diagram of a mobile network-oriented heterogeneous data collection process according to an embodiment.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments that can be derived by one of ordinary skill in the art from the embodiments given herein are intended to be within the scope of the present invention.

As shown in fig. 1, the present invention provides a mobile network-oriented heterogeneous data acquisition apparatus a, including: a signaling access module A1, configured to obtain a data packet; a signaling decoding module a2, configured to perform bottom-up layer-by-layer decoding on a data packet, where each layer is decoded according to a corresponding one of multiple communication protocols, and a decoding rule of each layer determines a protocol of a higher layer; and the signaling output module A3 is used for outputting the decoded data packet.

The communication protocol includes various protocols covering a CS domain network and an IMS network. The decoding rules of the above protocol include, but are not limited to, ports, pointers, and the like.

According to the technical scheme, the data are decoded from bottom to top through the built-in comprehensive mobile network communication protocol, the data packets are unpacked layer by layer, and the higher-layer protocol is determined according to the decoding rule of each layer of protocol, so that the data acquisition device has good universality. And when changes occur in the service, the service signaling type processed by the port can be adjusted.

As shown in fig. 2, the present invention provides a mobile network-oriented heterogeneous data acquisition system, which includes: the heterogeneous data acquisition B, CS domain network signaling access device C1 for the mobile network, the IMS network signaling access device C2, and the signaling processing device D, the heterogeneous data acquisition B for the mobile network includes: a DPDK component B1, a signaling decoding module B2, a signaling filtering module B3 and a signaling output module B4.

According to the embodiment of the present invention, as shown in fig. 2, the heterogeneous data collection apparatus for a mobile network further includes a signaling filtering module B3, configured to: receiving the decoding result of each layer input by the signaling decoding module; reading fields from the decoding result and matching the fields with conditions corresponding to the signaling filtering rules; and if the matching is successful, returning the action corresponding to the filtering rule to the signaling decoding module, and decoding the higher layer by the signaling decoding module after executing the action.

The signaling filtering rule includes two parts of 'condition' and 'action'. The action includes two modes of 'accepting' and 'dropping', the accepting means to continue processing the next layer protocol, and the dropping means to drop the data packet directly. The 'condition' is composed of a parameter name, a logic operation and a value, and the parameter name and the value come from a signaling decoding module. Logical operations include, but are not limited to, "equal to," "not equal to," "greater than," "less than," "greater than or equal to," "less than or equal to," "regular match," and the like.

The parameter names of the filtering rules are classified according to the protocol as follows:

the signaling filtering module provides interface service for signaling filtering according to the filtering rule, receives the decoding result input by the signaling decoding module, reads the field concerned by the filtering rule from the decoding result and matches the condition corresponding to the filtering rule, if the rule is successfully matched, the action corresponding to the rule is returned, otherwise, the receiving is returned.

The technical scheme of the invention adds the signaling filtering module in the data acquisition device, wherein the filtering rule is similar to the decoding rule and also follows a bottom-up method. When the signaling decoding module unpacks the data packets layer by layer, each layer of data packet is unpacked, the interface of the signaling filtering module is called, and the result, namely the action, is returned according to the interface so as to carry out the next processing. If the returned result is discarding, the data packet is discarded, otherwise, the decoding of higher layer is continued. Therefore, the signaling is filtered while decoding is carried out, and the complexity and the resource requirement of the service processing equipment can be reduced. And through multi-layer signaling filtering, in the process of decoding layer by layer from bottom to top, a signaling filtering interface is called to filter layer by layer at the same time, the performance is not influenced, and the discarded signaling is not analyzed additionally. Therefore, the purpose of saving the CPU time as much as possible is achieved, and the problem of signaling filtering flexibility is solved. The data acquisition device is added with the function of signaling filtering, and is particularly beneficial to a service platform which only needs specific signaling.

According to an embodiment of the present invention, as shown in fig. 2, the signaling access module of the present invention includes a DPDK component B1.

The DPDK (Data Plane Development Kit) component is a Data Plane Development Kit developed by companies such as 6WIND, Intel, and the like, is open-source, mainly operates on a linux system, provides a series of network card drivers and a Data packet processing library, and can greatly provide Data packet processing performance and network throughput. The performance of DPDK is so high mainly for two reasons: 1. the fast data channel is used to make the data packet arrive at the user space quickly. Doing so abandons the typical data channel: network card driver- > TCP/IP protocol stack- > socket interface- > application, and a faster channel is used: DPDK network card driver- > DPDK frame- > application program. 2. The technology of improving the performance such as CPU affinity, lock-free queues, zero copy and the like is applied.

The technical scheme of the invention is based on DPDK to rapidly process the data packet, has the characteristics of high performance and high throughput, and can greatly reduce the cost when operating on an X86 universal server. According to the embodiment, the data acquisition device is realized based on the server with the X86 architecture and the DPDK suite, and as the DPDK has rich technologies such as network card drive, CPU affinity, lock-free queue and zero copy, the data acquisition device has the advantages of performance of DPDK processing on the data plane, network throughput can be close to the linear speed of the network card, and the problem of high data acquisition throughput can be solved.

According to an embodiment of the present invention, the DPDK element includes two lockless ring queues (ringbuffers): an input ring buffer (input ring buffer) is input and used for buffering a data packet received by the device, and the data packet can be directly written in after being read from a network card by the DPDK component and is read out by a signaling decoding module; and outputting an output lock-free ring queue (output ring buffer) for buffering a data packet to be output, wherein the data packet can be written in by the signaling filtering module and read out by the signaling output module.

According to the technical scheme, the double-queue mode is adopted, so that data access conflict can be avoided. And a zero copy technology is applied from the input queue to the output queue, and only the analyzed parameter values are copied, so that the performance can be maximally improved.

According to the embodiment of the invention, the signaling output module supports connection with a plurality of signaling processing devices, and the signaling output module encodes the decoded data packet according to a signaling output format and outputs the encoded data packet to a corresponding signaling processing device in the plurality of signaling processing devices.

Wherein, the signaling output format comprises: CDR, text divided by fixed separators, a line of record is a signaling, and the separators and each field are configurable; and the original code stream is an undecoded byte stream and supports an intercepting specified protocol.

The technical scheme of the invention can support a plurality of signaling processing devices by configuring the output signaling format, thereby having a flexible signaling output strategy.

According to an embodiment of the present invention, signaling is shunted to multiple signaling handling devices using load balancing algorithms including, but not limited to, round robin, weighted round robin, hash, and the like.

Wherein the polling may output a plurality of data packets to the plurality of signaling handling devices in turn in a specific order. Weighted polling can be based on a polling algorithm, a weight value is set for each output link, and the higher the weight value is, the more data packets are distributed. The hash algorithm can ensure that data packets of the same session are all sent to the same signaling processing device, and because the signaling of the mobile network has the concept of session (or similar to session), the signaling has a parameter for identifying the session, and the parameter needs to be set as an input parameter of the hash algorithm.

The technical scheme of the invention has a load sharing algorithm and can provide a flexible networking scheme. The output format of the data acquisition device can be defined through configuration, and the data acquisition device can support load balanced output to a plurality of servers, so that the networking problem of distributed deployment of a signaling processing layer or a service platform can be solved.

According to an embodiment of the present invention, the communication protocol includes, but is not limited to: IP (Internet Protocol), TCP (Transmission Control Protocol), UDP (User Datagram Protocol), SCTP (Stream Control Transmission Protocol), MTP3(Message Transfer Part level 3), SCCP (Signaling Connection Control Part), TCAP (Transaction Capabilities Application Part), BICC (bearer Independent Call Control Protocol), SIP, meter, and the like.

The present invention further provides a heterogeneous data acquisition method for a mobile network, and fig. 3 is a schematic diagram of a mobile network-oriented heterogeneous data acquisition process according to an embodiment, and the diagram shows a signaling decoding module 1, a signaling filtering module 2, a signaling output module 3, an input lock-free ring queue (input ring buffer)4, an output lock-free ring queue (output ring buffer)5, a filtering rule 6, and an output policy 7. Fig. 4 is a schematic diagram of a mobile network-oriented heterogeneous data collection process according to an embodiment, which includes processes a, b, c, d, e, and f.

As shown in fig. 3, the method is a method for integrating signaling decoding, filtering and outputting flows on the basis of the framework of DPDK and having flexible filtering rules and output policies, and includes:

step one S1: and acquiring the data packet. The data packet can be read from the network card through the DPDK device, written into an input lockless ring queue (input ring buffer), and read out from the input lockless ring queue during decoding. As shown in fig. 4, the process a may be executed at this step to obtain the data packet, and the data packet may be obtained by means of active polling.

Step two S2: the data packet is decoded layer by layer from bottom to top, wherein each layer is decoded according to a corresponding one of a plurality of communication protocols, and a higher layer protocol is determined according to a decoding rule of each layer protocol, as shown in fig. 3, the data packet may be decoded by the signaling decoding module 1.

In one embodiment, as shown in fig. 4, bottom-up layer-by-layer decoding of a data packet comprises: the flow b analyzes the next layer of packet headers, wherein one layer of packet headers is analyzed, and the currently analyzed protocol name and the pointer offset of the data packet are recorded; and c, extracting key parameters, wherein the key parameters of the current protocol are read and stored in an internal data structure.

According to the embodiment of the present invention, step two S2 further includes: accepting a decoding result of each layer; reading fields from the decoding result and matching the fields with conditions corresponding to the signaling filtering rules; and if the matching is successful, returning the action corresponding to the filtering rule, and performing higher-layer decoding after the action is executed. In an embodiment, as shown in fig. 4, the flow d may be executed at this step to obtain a filtering result and make a determination, where as shown in fig. 3, an interface of the signaling filtering module 2 may be called, and the input parameter is an internal data structure of the data packet; the signaling filtering module 2 reads the filtering rule and the parameter of the last layer protocol for matching according to the locally configured filtering rule 6; if the matching result is 'discard', returning to the flow a, and acquiring the next data packet; if the matching result is "accept", executing the process e to determine whether the analysis is completed.

Step three S3: and outputting the decoded data packet. As shown in fig. 3, the data packet may be output through the signaling output module 3. According to an embodiment of the present invention, step three S3 further includes: the packet to be output is written into the output lock-free ring queue (output ring buffer)5, and the packet is read out from the output lock-free ring queue at the time of output. In an embodiment, as shown in fig. 4, if it is determined that the received data packet has been analyzed, executing signaling output in a process f, where the analyzed data packet may be transmitted to a signaling output module through a non-locked loop queue, and after output, returning to the process a to obtain a next data packet; if the received data packet is not analyzed, returning to the process b to analyze the next layer protocol.

According to an embodiment of the present invention, step three S3 includes: and encoding the decoded data packet according to a signaling output format and outputting the encoded data packet to a corresponding signaling processing device in the multiple signaling processing devices.

According to the embodiment of the present invention, as shown in fig. 3, the signaling output module 3 may output the decoded data packet according to the corresponding output policy 7. For example, the signaling is split to multiple signaling processing devices using load balancing algorithms, which may include, but are not limited to, polling, weighted polling, hashing, and the like.

According to embodiments of the present invention, the various communication protocols include, but are not limited to: IP, TCP/UDP/SCTP, MTP3, SCCP, TCAP, BICC, SIP, DIAMETER, etc.

According to the embodiment of the invention, the software supports IP and port for configuring the output address, and because the application software uses IP communication and does not pay attention to the two layers (data link layers), the development complexity of the application software for receiving signaling is increased by using the two layers for forwarding, and the development complexity of the application software is simplified by using IP addressing, so the complexity of the equipment can be reduced.

The invention provides a mobile network-oriented heterogeneous data acquisition device implementation method based on a DPDK technology, which realizes high concurrency processing based on an X86 framework through the DPDK technology, flexibly realizes the functions of decoding, filtering and outputting signaling through configuration rules, and is a universal signaling acquisition scheme. In addition, the services such as location-based services, missed call reminding or flash messaging can be realized by introducing a signaling filtering and signaling output load sharing algorithm and integrating with a service system. In the prior art, a service system must perform full signaling analysis and filtering, and the scheme provided by the invention greatly simplifies the complexity of the service system.

In addition, for the signaling access part, the present invention can reuse the existing signaling access technology, for example, the signaling access method based on E1 port is implemented, including: in the high-resistance bridging mode, a high-resistance isolating device is bridged on an E1 relay port of a DDF frame at the exchange side to acquire signaling data; switch internal convergence access mode: the 64K signaling links distributed in multiple E1 are converged by the switch into a dedicated E1 that carries only signaling links. Similar to port mirror image, the disadvantage is occupying switch resources; the optical splitter mode is used for monitoring a link taking an optical fiber as a carrier. And an access implementation, e.g., based on IP port signaling, comprising: the TAP mode is similar to the high-impedance bridging mode of an E1 port, port data is copied into two paths through TAP equipment, one path is forwarded according to the original route, and the other path is used for acquisition; a mirror image mode: the mirror image mode is to adopt the port mirror image mode of the exchanger to collect data; a light splitting mode: the light splitting mode is to split the light of the optical fiber by adopting a light splitter, wherein one path is connected to the original port, and the other path is used for collection.

The above is only a preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes will occur to those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A heterogeneous data acquisition device facing a mobile network is characterized by comprising:

the signaling access module is used for acquiring a data packet;

a signaling decoding module, configured to perform bottom-up layer-by-layer decoding on the data packet, where each layer is decoded according to a corresponding one of multiple communication protocols, and a higher layer protocol is determined according to a decoding rule of each layer protocol;

and the signaling output module is used for outputting the decoded data packet.

2. The heterogeneous data collection device of claim 1, further comprising:

a signaling filtering module configured to:

receiving the decoding result of each layer input by the signaling decoding module;

reading a field from the decoding result and matching the field with a condition corresponding to a signaling filtering rule;

and if the matching is successful, returning the action corresponding to the filtering rule to the signaling decoding module, and after the action is executed, the signaling decoding module performs higher-layer decoding.

3. The heterogeneous data collection apparatus of claim 2, wherein the action comprises an acceptance indicating to continue processing higher layer protocols and a discard indicating to directly discard the data packet; the condition consists of a parameter name, a logical operation and a value, and the parameter name and the value come from the signaling decoding module.

4. The heterogeneous data collection device of claim 2, wherein the signaling access module comprises a DPDK component.

5. The heterogeneous data collection device of claim 4, wherein the DPDK component comprises:

the input is not locked the annular queue, is used for buffering the data packet that the said apparatus receives, the said data packet is read from the network card by the said DPDK assembly and then write into directly, and read out by the said signalling decoding module;

and the output lock-free annular queue is used for caching data packets needing to be output, and the data packets are written in by the signaling filtering module and read out by the signaling output module.

6. The heterogeneous data acquisition device according to claim 1, wherein the signaling output module supports connection with a plurality of signaling processing devices, and the signaling output module encodes the decoded data packet according to a signaling output format and outputs the encoded data packet to a corresponding signaling processing device of the plurality of signaling processing devices.

7. The heterogeneous data collection device of claim 6, wherein signaling is split to the plurality of signaling processing devices using a load balancing algorithm, the load balancing algorithm comprising one or more of polling, weighted polling, hashing.

8. The heterogeneous data collection apparatus of claim 1, wherein the plurality of communication protocols comprises: IP, TCP/UDP/SCTP, MTP3, SCCP, TCAP, BICC, SIP, DIAMETER.

9. A heterogeneous data acquisition method oriented to a mobile network is characterized by comprising the following steps:

the method comprises the following steps: acquiring a data packet;

step two: decoding the data packets layer by layer from bottom to top, wherein each layer is decoded according to a corresponding one of a plurality of communication protocols, and a protocol of a higher layer is determined according to a decoding rule of each layer;

step three: and outputting the decoded data packet.

10. The heterogeneous data collection method of claim 9, wherein the second step further comprises:

accepting a decoding result of each layer;

and if the matching is successful, returning the action corresponding to the filtering rule, and performing higher-layer decoding after the action is executed.