CN113747470A - Interface flow analysis method, routing equipment and storage medium - Google Patents
Interface flow analysis method, routing equipment and storage medium Download PDFInfo
- Publication number
- CN113747470A CN113747470A CN202110910400.6A CN202110910400A CN113747470A CN 113747470 A CN113747470 A CN 113747470A CN 202110910400 A CN202110910400 A CN 202110910400A CN 113747470 A CN113747470 A CN 113747470A
- Authority
- CN
- China
- Prior art keywords
- interface
- data
- traffic
- push
- pop
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 29
- 238000005206 flow analysis Methods 0.000 title claims description 9
- 238000004458 analytical method Methods 0.000 claims abstract description 56
- 238000012546 transfer Methods 0.000 claims description 27
- 230000005540 biological transmission Effects 0.000 claims description 17
- 238000012216 screening Methods 0.000 claims description 8
- 238000001914 filtration Methods 0.000 claims description 2
- 230000000694 effects Effects 0.000 abstract description 4
- 238000004891 communication Methods 0.000 description 5
- 241000721662 Juniperus Species 0.000 description 4
- 238000010586 diagram Methods 0.000 description 4
- 230000006870 function Effects 0.000 description 4
- 230000008569 process Effects 0.000 description 4
- 238000000926 separation method Methods 0.000 description 4
- 238000007405 data analysis Methods 0.000 description 2
- 230000007547 defect Effects 0.000 description 2
- 238000001514 detection method Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000013519 translation Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W24/00—Supervisory, monitoring or testing arrangements
- H04W24/02—Arrangements for optimising operational condition
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W24/00—Supervisory, monitoring or testing arrangements
- H04W24/08—Testing, supervising or monitoring using real traffic
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses an analysis method of interface flow, a routing device and a computer readable storage medium, wherein the method comprises the following steps: when a data packet is received by a data push routing interface, determining version information corresponding to the data; determining label information corresponding to the data packet according to the version information, wherein the label information comprises an IPV4 label and an IPV6 label; upon popping the packet, popping the packet associated with the IPV4 tag off the first pop interface and popping the packet associated with the IPV6 tag off the second pop interface; and determining an analysis result of the interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface. The invention aims to achieve the effect of reducing the cost of analyzing the interface flow.
Description
Technical Field
The present invention relates to the field of communications technologies, and in particular, to an interface traffic analysis method, a routing device, and a computer-readable storage medium.
Background
With the rapid development of mobile Internet, to solve the defects that an IPV4(Internet Protocol version 4) address has a limited address space and low security at a network layer, an IPV6(Internet Protocol version 6) address has been widely used. This results in the current stage of traffic data being based on both IPV4 addresses and IPV6 addresses.
However, in some existing router devices (such as juniper MX960), since the router device interfaces cannot directly separate the service data corresponding to the IPV4 address and the IPV6 address, the operator cannot perform traffic analysis based on the data address. Therefore, the network operator can only realize the purpose of implementing the interface traffic analysis by replacing the router device with the address separation function. Resulting in higher cost for interface traffic analysis.
The above is only for the purpose of assisting understanding of the technical aspects of the present invention, and does not represent an admission that the above is prior art.
Disclosure of Invention
The present invention mainly aims to provide an interface traffic analysis method, a routing device and a computer readable storage medium, which aim to achieve the effect of reducing the cost of interface traffic analysis.
In order to achieve the above object, the present invention provides an interface traffic analysis method, which is applied to a routing device, and comprises the following steps:
when a data packet is received by a data push routing interface, determining version information corresponding to the data;
determining label information corresponding to the data packet according to the version information, wherein the label information comprises an IPV4 label and an IPV6 label;
controlling the data packet to be popped, wherein when the data packet is popped, the data packet associated with the IPV4 label is popped from a first popping interface, and the data packet associated with the IPV6 label is popped from a second popping interface;
and determining an analysis result of the interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface.
Optionally, the analysis result of the interface traffic includes an IPV4 traffic fraction and/or an IPV6 traffic fraction, and before the step of determining the analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface, and/or the second push interface, the method further includes:
when a flow analysis instruction is received, determining a target time period corresponding to the flow analysis instruction;
acquiring a first data flow corresponding to the data push routing interface in a target time period;
acquiring second data traffic corresponding to the first pop interface and/or third data traffic corresponding to the second pop interface in a target period;
the step of determining an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface and/or the second push interface includes:
determining the IPV4 flow ratio according to the first data flow and the second data flow; and/or
And determining the IPV6 flow ratio according to the first data flow and the third data flow.
Optionally, before the step of determining an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface, and/or the second push interface, the method further includes:
according to a preset port filtering and screening mode, data traffic corresponding to different types of data packets within a preset time length is counted, wherein the types of the data packets corresponding to different ports are different;
the step of determining an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface and/or the second push interface includes:
and determining an analysis result of the interface flow according to the statistical result and the data flow corresponding to the first pop interface and/or the second pop interface.
Optionally, the statistical result includes a first text transmission data traffic corresponding to a first pop interface and/or a first hypertext transfer protocol service traffic corresponding to the first pop interface, and the step of determining an analysis result of the interface traffic according to the statistical result, the data traffic corresponding to the first pop interface and/or the second pop interface includes:
determining the IPV4 http service duty ratio according to the first http service traffic and the data traffic corresponding to the first pop interface, and/or determining the IPV4 text transfer service duty ratio according to the first text transfer data traffic and the data traffic corresponding to the first pop interface, wherein an analysis result of the interface traffic includes the IPV4 http service duty ratio, the IPV4 text transfer service duty ratio, the IPV6 text transfer service duty ratio, and/or the IPV6 http service duty ratio.
Optionally, the statistical result includes a second text transmission data traffic corresponding to the second pop interface and/or a second hypertext transfer protocol service traffic corresponding to the second pop interface, and the step of determining an analysis result of the interface traffic according to the statistical result and the data traffic corresponding to the first pop interface and/or the second pop interface includes:
determining the IPV6 HTTP service ratio according to the second HTTP service traffic and the data traffic corresponding to the second pop interface, and/or determining the IPV6 text transmission service ratio according to the second text transmission data traffic and the data traffic corresponding to the second pop interface.
Optionally, the IPV6 text transmission service duty ratio is a ratio of the second text transmission traffic to data traffic corresponding to the second pop interface; the IPV6 http service duty ratio is a ratio between the second http service data traffic and the data traffic corresponding to the second pop interface.
Optionally, the step of determining the label information corresponding to the data packet according to the version information includes:
if the version information meets a first regular expression, the flag information corresponding to the data packet is marked by the IPV4, otherwise, the flag information corresponding to the data packet is marked by the IPV 6; or
If the version information meets a second regular expression, the flag information corresponding to the data packet is marked by the IPV6, otherwise, the flag information corresponding to the data packet is marked by the IPV 4.
In addition, in order to achieve the above object, the present invention further provides a routing device, where the routing device includes a memory, a processor, and an interface traffic analysis program stored in the memory and executable on the processor, and the interface traffic analysis program, when executed by the processor, implements the steps of the interface traffic analysis method described above.
In addition, to achieve the above object, the present invention further provides a routing device, including:
the push module is used for determining the version information corresponding to the data when the data push routing interface receives the data packet;
the marking module is used for determining marking information corresponding to the data packet according to the version information, wherein the marking information comprises an IPV4 mark and an IPV6 mark;
a pop module, configured to control popping of the packet, where when the packet is popped, the packet associated with the IPV4 flag is popped from a first pop interface, and the packet associated with the IPV6 flag is popped from a second pop interface;
and the analysis module is used for determining an analysis result of the interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface.
In addition, to achieve the above object, the present invention further provides a computer readable storage medium, on which an analysis program of interface traffic is stored, and when the analysis program of interface traffic is executed by a processor, the method of analyzing interface traffic as described above is implemented.
The method for analyzing interface traffic, the routing device, and the computer-readable storage medium according to embodiments of the present invention determine version information corresponding to data when a data packet is received by a data push routing interface, determine flag information corresponding to the data packet according to the version information, where the flag information includes an IPV4 flag and an IPV6 flag, then control popping of the data packet, and when the data packet is popped, pop the data packet associated with the IPV4 flag from a first pop interface, pop the data packet associated with the IPV6 flag from a second pop interface, and determine an analysis result of interface traffic according to the data traffic corresponding to the data push routing interface, the first pop interface, and/or the second pop interface. Because the analysis of the interface flow can be realized on the basis of not replacing the routing equipment, the effect of saving the cost of the interface flow analysis is achieved.
Drawings
Fig. 1 is a schematic terminal structure diagram of a hardware operating environment according to an embodiment of the present invention;
FIG. 2 is a flowchart illustrating an embodiment of a method for analyzing interface traffic according to the present invention;
fig. 3 is a schematic interface layout diagram of a routing device according to an embodiment of the present invention;
fig. 4 is a schematic block diagram of a routing device according to an embodiment of the present invention.
The implementation, functional features and advantages of the objects of the present invention will be further explained with reference to the accompanying drawings.
Detailed Description
It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
As shown in fig. 1, fig. 1 is a schematic terminal structure diagram of a hardware operating environment according to an embodiment of the present invention.
The terminal of the embodiment of the invention can be a routing device.
As shown in fig. 1, the terminal may include: a processor 1001, such as a CPU, a network interface 1004, a user interface 1003, a memory 1005, a communication bus 1002. Wherein a communication bus 1002 is used to enable connective communication between these components. The user interface 1003 may include a standard wired interface, a wireless interface. The network interface 1004 may optionally include a standard wired interface, a wireless interface (e.g., WI-FI interface). The memory 1005 may be a high-speed RAM memory or a non-volatile memory (e.g., a magnetic disk memory). The memory 1005 may alternatively be a storage device separate from the processor 1001.
Those skilled in the art will appreciate that the terminal structure shown in fig. 1 is not intended to be limiting and may include more or fewer components than those shown, or some components may be combined, or a different arrangement of components.
As shown in fig. 1, a memory 1005, which is a kind of computer storage medium, may include therein an operating system, a network communication module, a user interface module, and an analysis program of interface traffic.
In the terminal shown in fig. 1, the processor 1001 may be configured to call an analysis program of the interface traffic stored in the memory 1005, and perform the following operations:
when a data packet is received by a data push routing interface, determining version information corresponding to the data;
determining label information corresponding to the data packet according to the version information, wherein the label information comprises an IPV4 label and an IPV6 label;
controlling the data packet to be popped, wherein when the data packet is popped, the data packet associated with the IPV4 label is popped from a first popping interface, and the data packet associated with the IPV6 label is popped from a second popping interface;
and determining an analysis result of the interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface.
In order to solve the defects that an IPV4 Address has Address space limitation, low security at a Network layer, an Internet (Internet) end-to-end mode destroyed by NAT (Network Address Translation), an IPV4 packet header is too complex, and the like, the IPV6 Address has been widely used. This results in the current stage of traffic data being based on both IPV4 addresses and IPV6 addresses.
However, in some existing router devices (such as juniper MX960), since the router device interfaces cannot directly separate the service data corresponding to the IPV4 address and the IPV6 address, the operator cannot perform traffic analysis based on the data address. Therefore, the network operator can only realize the purpose of implementing the interface traffic analysis by replacing the router device with the address separation function. Resulting in higher cost for interface traffic analysis. In order to achieve the purpose of analyzing the interface traffic and reducing the cost of analyzing the interface traffic on the premise of not replacing equipment, an embodiment of the invention provides an interface traffic analysis method. The following explains an analysis method of interface traffic according to an embodiment of the present invention by using a specific example.
Referring to fig. 2, in an embodiment of the method for analyzing interface traffic of the present invention, the method for analyzing interface traffic includes the following steps:
step S10, when the data push routing interface receives the data packet, determining the version information corresponding to the data;
step S20, determining the label information corresponding to the data packet according to the version information, wherein the label information includes an IPV4 label and an IPV6 label;
step S30, when the packet is popped, popping the packet associated with the IPV4 flag from the first pop interface, and popping the packet associated with the IPV6 flag from the second pop interface;
step S40, determining an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface, and/or the second push interface.
In this embodiment, the routing device may include at least 3 physical interfaces. Referring to fig. 3, taking juniper MX960 router as an example, physical interface a of the router may be configured as a data push routing interface. And configuring the interface B as a first pop interface and configuring the interface C as a second pop interface.
Further, when the data packet is received by the data push routing interface, the version information corresponding to the data packet may be determined first by the push data packet detection mechanism. It will be appreciated that packets based on the IPV4 address will have V4 version information and packets based on the IPV6 address will have V6 version information. Therefore, it can be determined whether the packet is a packet based on the IPV4 address or a packet based on the IPV6 address based on the version information. The version information may be stored in a message header.
For example, a regular expression may be preset, so that if the version information satisfies a first regular expression, the flag information corresponding to the data packet is marked by the IPV4, otherwise, the flag information corresponding to the data packet is marked by the IPV 6; or the version information meets a second regular expression, the flag information corresponding to the data packet is marked by the IPV6, otherwise the flag information corresponding to the data packet is marked by the IPV 4.
For example, because the corresponding version numbers of the IPC4 message and the IPV6 message are different, the regular expression may be set based on the version number corresponding to the IPV4 or the IPV 6. To achieve data separation. Or because the IPV6 message does not include a header length field. The regular expression described above can be set based on the presence or absence of the header length field, thereby achieving data separation.
After determining the version information of the data packet, they may be marked according to their version information. Namely, the corresponding marking information of the data packet is determined according to the version information. It is understood that when the packet is based on the IPV4 address, an IPV4 tag is added; similarly, when the packet is based on the IPV6 address, an IPV6 tag is added.
Further, the marked packets may be forwarded to other interfaces of the router. The data packet with the IPV4 label is forwarded to the first pop interface, and the data packet with the IPV6 label is forwarded to the second data interface. Such that when the packet is popped, the packet associated with the IPV4 tag is popped from a first pop interface and the packet associated with the IPV6 tag is popped from a second pop interface.
Further, when a traffic analysis instruction is received, a target time period corresponding to the traffic analysis instruction may be determined. And then acquiring a first data flow corresponding to the data push routing interface in the target time period. Wherein the first data traffic represents a total amount of data passing through the data push routing interface within the target time period.
Further, the content to be analyzed can be determined according to the flow analysis instruction. When the content to be analyzed is an IPV4 traffic proportion, a second data traffic corresponding to the first pop interface in the target time period may also be obtained. And further taking the direct ratio of the second data flow to the first data flow as the ratio of the IPV4 flow.
Optionally, when the content to be analyzed is IPV6 traffic proportion, a third data traffic corresponding to the second pop interface in the target time period may also be obtained. And taking the direct ratio of the third data flow to the first data flow as the ratio of the IPV6 flow.
Optionally, when the content to be analyzed is an IPV6 traffic proportion and an IPV4 traffic proportion, a second data traffic and a third data traffic corresponding to the first pop interface and the second pop interface in the target time period may also be obtained. And further taking the direct ratio of the second data traffic to the first data traffic as the IPV4 traffic ratio, and taking the direct ratio of the third data traffic to the first data traffic as the IPV6 traffic ratio.
Optionally, when the data corresponding to the data push routing interface includes a data packet based on two address modes of IPV4 and IPV6, after the first data traffic is acquired, only at least one of the second data traffic and the third data traffic needs to be acquired, and then the IPV6 traffic ratio and the IPV4 traffic ratio can be determined. For example, after the second data traffic is obtained, the IPV4 traffic ratio may be determined according to the second data traffic and the first data traffic. Further, the IPV6 traffic ratio may be determined according to the following formula:
P6＝1-P4
wherein P6 is the ratio of IPV6 flow, and P4 is the ratio of IPV4 flow.
Optionally, as an optional embodiment, the analysis result of the interface traffic may further include IPV4 http service duty, and/or IPV6 http service duty.
For example, a first text transmission data traffic corresponding to the first pop interface within a preset duration and/or a first hypertext transfer protocol service traffic corresponding to the first pop interface may be obtained first, and then the IPV4 hypertext transfer protocol service duty ratio may be determined according to the first hypertext transfer protocol service traffic and/or the IPV4 text transmission service duty ratio may be determined according to the first text transmission data traffic.
Optionally, a second text transmission data traffic corresponding to the second pop interface within a preset duration and/or a second hypertext transfer protocol service traffic corresponding to the second pop interface may also be obtained, and then the IPV6 hypertext transfer protocol service duty ratio is determined according to the second hypertext transfer protocol service traffic and/or the IPV6 text transmission service duty ratio is determined according to the second text transmission data traffic.
For example, taking the example of implementation in a juniper MX960 router, the first pop interface may be provided with a screening module. The first pop interface can be determined by the screening module, and in a data packet passing through the first pop interface within a preset time (a value of the preset time can be set in a user-defined manner, for example, set to 1s to 10s, optionally, the preset time is set to 1s), the number of the data packets including the port 20 and the port 21 is included, that is, the first text Transfer Protocol (FTP) data traffic. And/or screening out the data volume including the port 80 and the port 8080, namely the first hypertext transfer protocol service flow, in the data packet corresponding to the first pop interface within a preset time length. And then, the total data traffic (i.e., the second data traffic) corresponding to the first pop interface is obtained. Then, the ratio of the first hypertext transfer protocol service traffic to the second data traffic is used as an IPV4 hypertext transfer protocol service duty ratio, and the ratio of the first text data traffic to the second data traffic is used as an IPV4 text transfer service duty ratio.
The second pop interface may be provided with a screening module. The second pop interface can be determined by the screening module, and in a data packet passing through itself within a preset time (a value of the preset time may be set in a user-defined manner, for example, to 1s to 10s, optionally, the preset time is set to 1s), the number of the data packets including the port 20 and the port 21 is included, that is, the second text transmission data traffic. And/or screening out the data volume including the port 80 and the port 8080, namely the second hypertext transfer protocol service flow, in the data packet corresponding to the second pop interface within the preset time length. And then, the total data traffic (i.e., the third data traffic) corresponding to the second pop interface is obtained. Then, the ratio of the second hypertext transfer protocol service traffic to the third data traffic is used as the IPV6 hypertext transfer protocol service duty ratio, and the ratio of the second text data traffic to the third data traffic is used as the IPV6 text transfer service duty ratio.
It will be appreciated that in some variant embodiments, the data analysis function may be provided in a device separate from the routing device. The routing device only executes the data forwarding task, so that the device with the data analysis function reads the traffic data of each interface of the routing device, and analyzes the interface traffic. This is also within the scope of the invention.
Optionally, after the routing device determines the analysis result of the interface traffic, the analysis result of the interface traffic may be output through a preset user interface.
In the technical solution disclosed in this embodiment, when a data packet is received by a data push routing interface, version information corresponding to the data packet is determined, and tag information corresponding to the data packet is determined according to the version information, where the tag information includes an IPV4 tag and an IPV6 tag, when the data packet is popped, the data packet associated with the IPV4 tag is popped from a first pop interface, the data packet associated with the IPV6 tag is popped from a second pop interface, and an analysis result of interface traffic is determined according to data traffic corresponding to the data push routing interface, the first pop interface, and/or the second pop interface. Because the analysis of the interface flow can be realized on the basis of not replacing the routing equipment, the effect of saving the cost of the interface flow analysis is achieved.
In addition, an embodiment of the present invention further provides a routing device, where the routing device includes a memory, a processor, and an interface traffic analysis program that is stored in the memory and is executable on the processor, and when the interface traffic analysis program is executed by the processor, the steps of the interface traffic analysis method according to the above embodiments are implemented.
In addition, referring to fig. 4, an embodiment of the present invention further provides a routing device 100, where the routing device 100 includes:
the push module 101 is configured to determine version information corresponding to the data when a data packet is received by a data push routing interface;
a marking module 102, configured to determine, according to the version information, marking information corresponding to the data packet, where the marking information includes an IPV4 mark and an IPV6 mark;
a pop module 103, configured to control popping of the packet, where when the packet is popped, the packet associated with the IPV4 flag is popped from a first pop interface, and the packet associated with the IPV6 flag is popped from a second pop interface;
and the analysis module 104 is configured to determine an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface, and/or the second push interface.
Furthermore, an embodiment of the present invention further provides a computer-readable storage medium, where an analysis program of interface traffic is stored on the computer-readable storage medium, and when the analysis program of interface traffic is executed by a processor, the steps of the method for analyzing interface traffic according to the above embodiments are implemented.
It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or system that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or system. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or system that comprises the element.
The above-mentioned serial numbers of the embodiments of the present invention are merely for description and do not represent the merits of the embodiments.
Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium (e.g. ROM/RAM, magnetic disk, optical disk) as described above and includes instructions for causing a routing device to execute the method according to the embodiments of the present invention.
The above description is only a preferred embodiment of the present invention, and not intended to limit the scope of the present invention, and all modifications of equivalent structures and equivalent processes, which are made by using the contents of the present specification and the accompanying drawings, or directly or indirectly applied to other related technical fields, are included in the scope of the present invention.
Claims (10)
1. An interface traffic analysis method is applied to a routing device, and the interface traffic analysis method includes:
when a data packet is received by a data push routing interface, determining version information corresponding to the data;
determining label information corresponding to the data packet according to the version information, wherein the label information comprises an IPV4 label and an IPV6 label;
controlling the data packet to be popped, wherein when the data packet is popped, the data packet associated with the IPV4 label is popped from a first popping interface, and the data packet associated with the IPV6 label is popped from a second popping interface;
and determining an analysis result of the interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface.
2. The method for analyzing interface traffic according to claim 1, wherein the analysis result of the interface traffic includes an IPV4 traffic fraction and/or an IPV6 traffic fraction, and before the step of determining the analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface, and/or the second push interface, the method further includes:
when a flow analysis instruction is received, determining a target time period corresponding to the flow analysis instruction;
acquiring a first data flow corresponding to the data push routing interface in a target time period;
acquiring second data traffic corresponding to the first pop interface and/or third data traffic corresponding to the second pop interface in a target period;
the step of determining an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface and/or the second push interface includes:
determining the IPV4 flow ratio according to the first data flow and the second data flow; and/or
And determining the IPV6 flow ratio according to the first data flow and the third data flow.
3. The method for analyzing interface traffic according to claim 1, wherein before the step of determining the analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface, and/or the second push interface, the method further includes:
according to a preset port filtering and screening mode, data traffic corresponding to different types of data packets within a preset time length is counted, wherein the types of the data packets corresponding to different ports are different;
the step of determining an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first push interface and/or the second push interface includes:
and determining an analysis result of the interface flow according to the statistical result and the data flow corresponding to the first pop interface and/or the second pop interface.
4. The method for analyzing interface traffic according to claim 3, wherein the statistical result includes a first text transmission data traffic corresponding to a first pop interface and/or a first hypertext transfer protocol service traffic corresponding to the first pop interface, and the step of determining the analysis result of the interface traffic according to the statistical result and the data traffic corresponding to the first pop interface and/or the second pop interface includes:
determining the IPV4 http service duty ratio according to the first http service traffic and the data traffic corresponding to the first pop interface, and/or determining the IPV4 text transfer service duty ratio according to the first text transfer data traffic and the data traffic corresponding to the first pop interface, wherein an analysis result of the interface traffic includes the IPV4 http service duty ratio, the IPV4 text transfer service duty ratio, the IPV6 text transfer service duty ratio, and/or the IPV6 http service duty ratio.
5. The method for analyzing interface traffic according to claim 3, wherein the statistical result includes a second text transmission data traffic corresponding to the second pop interface and/or a second hypertext transfer protocol service traffic corresponding to the second pop interface, and the step of determining the analysis result of the interface traffic according to the statistical result and the data traffic corresponding to the first pop interface and/or the second pop interface includes:
determining the IPV6 HTTP service ratio according to the second HTTP service traffic and the data traffic corresponding to the second pop interface, and/or determining the IPV6 text transmission service ratio according to the second text transmission data traffic and the data traffic corresponding to the second pop interface.
6. The method for analyzing interface traffic according to claim 5, wherein the IPV6 text transport service ratio is a ratio of the second text transport traffic and data traffic corresponding to the second pop interface; the IPV6 http service duty ratio is a ratio between the second http service data traffic and the data traffic corresponding to the second pop interface.
7. The method for analyzing interface traffic according to claim 1, wherein the step of determining the label information corresponding to the data packet according to the version information includes:
if the version information meets a first regular expression, the flag information corresponding to the data packet is marked by the IPV4, otherwise, the flag information corresponding to the data packet is marked by the IPV 6; or
If the version information meets a second regular expression, the flag information corresponding to the data packet is marked by the IPV6, otherwise, the flag information corresponding to the data packet is marked by the IPV 4.
8. A routing device, characterized in that the routing device comprises: memory, processor and program for analyzing interface traffic stored on the memory and executable on the processor, the program for analyzing interface traffic implementing the steps of the method for analyzing interface traffic according to any one of claims 1 to 7 when executed by the processor.
9. A routing device, characterized in that the routing device comprises:
the push module is used for determining the version information corresponding to the data when the data push routing interface receives the data packet;
the marking module is used for determining marking information corresponding to the data packet according to the version information, wherein the marking information comprises an IPV4 mark and an IPV6 mark;
a pop module, configured to control popping of the packet, where when the packet is popped, the packet associated with the IPV4 flag is popped from a first pop interface, and the packet associated with the IPV6 flag is popped from a second pop interface;
and the analysis module is used for determining an analysis result of the interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface.
10. A computer-readable storage medium, characterized in that the computer-readable storage medium has stored thereon an analysis program of interface traffic, which when executed by a processor implements the steps of the analysis method of interface traffic according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110910400.6A CN113747470B (en) | 2021-08-09 | 2021-08-09 | Interface traffic analysis method, routing device and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110910400.6A CN113747470B (en) | 2021-08-09 | 2021-08-09 | Interface traffic analysis method, routing device and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113747470A true CN113747470A (en) | 2021-12-03 |
| CN113747470B CN113747470B (en) | 2024-05-24 |
Family
ID=78730436
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110910400.6A Active CN113747470B (en) | 2021-08-09 | 2021-08-09 | Interface traffic analysis method, routing device and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113747470B (en) |
Citations (18)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120207168A1 (en) * | 2009-10-30 | 2012-08-16 | France Telecom | METHODS AND DEVICES FOR ROUTING DATA PACKETS BETWEEN IPv4 AND IPv6 NETWORKS |
| CN103889019A (en) * | 2012-12-20 | 2014-06-25 | 联想(北京)有限公司 | Method and device for sending data |
| US20150296055A1 (en) * | 2012-11-02 | 2015-10-15 | Zte Corporation | Wireless data terminal and IPv4/IPv6 dual stack support method therefor |
| WO2017021081A1 (en) * | 2015-07-31 | 2017-02-09 | Telefonaktiebolaget Lm Ericsson (Publ) | System and method for enabling ipv6 networks |
| CN106656838A (en) * | 2016-10-19 | 2017-05-10 | 赛尔网络有限公司 | Data flow analyzing method and system |
| US20190068498A1 (en) * | 2017-08-31 | 2019-02-28 | Konica Minolta Laboratory U.S.A., Inc. | Method and system having an application for ipv6 extension headers and destination options |
| US20190230198A1 (en) * | 2016-10-06 | 2019-07-25 | Nippon Telegraph And Telephone Corporation | Flow information analysis apparatus, flow information analysis method, and flow information analysis program |
| CN110086707A (en) * | 2019-03-18 | 2019-08-02 | 普联技术有限公司 | A kind of gateway system based on dual stack |
| CN110086689A (en) * | 2019-04-22 | 2019-08-02 | 杭州迪普科技股份有限公司 | A kind of double stack BFD detection methods and system |
| CN110519262A (en) * | 2019-08-26 | 2019-11-29 | 赛尔网络有限公司 | A kind of traffic statistics analysis system and method based on BGP Route Distinguisher |
| CN110618940A (en) * | 2019-09-19 | 2019-12-27 | 腾讯科技（深圳）有限公司 | Stack information tracking method and device, computer readable medium and computing device |
| CN110703817A (en) * | 2016-03-29 | 2020-01-17 | 华为技术有限公司 | Control method, device and system for statistical flow |
| CN110838986A (en) * | 2019-07-29 | 2020-02-25 | 迈普通信技术股份有限公司 | Method, equipment and system for balancing LACP load |
| CN111224854A (en) * | 2018-11-27 | 2020-06-02 | 北京华为数字技术有限公司 | Working mode selection method, client front-end equipment and storage medium |
| CN112039904A (en) * | 2020-09-03 | 2020-12-04 | 福州林科斯拉信息技术有限公司 | Network traffic analysis and file extraction system and method |
| CN112333169A (en) * | 2020-10-28 | 2021-02-05 | 锐捷网络股份有限公司 | Message processing method and device, electronic equipment and computer readable medium |
| CN112565018A (en) * | 2020-12-04 | 2021-03-26 | 北京天融信网络安全技术有限公司 | Flow statistical method, device, gateway equipment and storage medium |
| CN112910725A (en) * | 2021-01-18 | 2021-06-04 | 卓望数码技术（深圳）有限公司 | Network flow detection method and device and computer readable storage medium |
-
2021
- 2021-08-09 CN CN202110910400.6A patent/CN113747470B/en active Active
Patent Citations (18)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120207168A1 (en) * | 2009-10-30 | 2012-08-16 | France Telecom | METHODS AND DEVICES FOR ROUTING DATA PACKETS BETWEEN IPv4 AND IPv6 NETWORKS |
| US20150296055A1 (en) * | 2012-11-02 | 2015-10-15 | Zte Corporation | Wireless data terminal and IPv4/IPv6 dual stack support method therefor |
| CN103889019A (en) * | 2012-12-20 | 2014-06-25 | 联想(北京)有限公司 | Method and device for sending data |
| WO2017021081A1 (en) * | 2015-07-31 | 2017-02-09 | Telefonaktiebolaget Lm Ericsson (Publ) | System and method for enabling ipv6 networks |
| CN110703817A (en) * | 2016-03-29 | 2020-01-17 | 华为技术有限公司 | Control method, device and system for statistical flow |
| US20190230198A1 (en) * | 2016-10-06 | 2019-07-25 | Nippon Telegraph And Telephone Corporation | Flow information analysis apparatus, flow information analysis method, and flow information analysis program |
| CN106656838A (en) * | 2016-10-19 | 2017-05-10 | 赛尔网络有限公司 | Data flow analyzing method and system |
| US20190068498A1 (en) * | 2017-08-31 | 2019-02-28 | Konica Minolta Laboratory U.S.A., Inc. | Method and system having an application for ipv6 extension headers and destination options |
| CN111224854A (en) * | 2018-11-27 | 2020-06-02 | 北京华为数字技术有限公司 | Working mode selection method, client front-end equipment and storage medium |
| CN110086707A (en) * | 2019-03-18 | 2019-08-02 | 普联技术有限公司 | A kind of gateway system based on dual stack |
| CN110086689A (en) * | 2019-04-22 | 2019-08-02 | 杭州迪普科技股份有限公司 | A kind of double stack BFD detection methods and system |
| CN110838986A (en) * | 2019-07-29 | 2020-02-25 | 迈普通信技术股份有限公司 | Method, equipment and system for balancing LACP load |
| CN110519262A (en) * | 2019-08-26 | 2019-11-29 | 赛尔网络有限公司 | A kind of traffic statistics analysis system and method based on BGP Route Distinguisher |
| CN110618940A (en) * | 2019-09-19 | 2019-12-27 | 腾讯科技（深圳）有限公司 | Stack information tracking method and device, computer readable medium and computing device |
| CN112039904A (en) * | 2020-09-03 | 2020-12-04 | 福州林科斯拉信息技术有限公司 | Network traffic analysis and file extraction system and method |
| CN112333169A (en) * | 2020-10-28 | 2021-02-05 | 锐捷网络股份有限公司 | Message processing method and device, electronic equipment and computer readable medium |
| CN112565018A (en) * | 2020-12-04 | 2021-03-26 | 北京天融信网络安全技术有限公司 | Flow statistical method, device, gateway equipment and storage medium |
| CN112910725A (en) * | 2021-01-18 | 2021-06-04 | 卓望数码技术（深圳）有限公司 | Network flow detection method and device and computer readable storage medium |
Non-Patent Citations (3)
| Title |
|---|
| SOMNATH DASGUPTA等: "Application of IPv4, IPv6 and Dual Stack Interface over 802.11ac, 802.11n and 802.11g Wireless Standards", 2020 THIRD INTERNATIONAL CONFERENCE ON ADVANCES IN ELECTRONICS, COMPUTERS AND COMMUNICATIONS (ICAECC), 5 February 2021 (2021-02-05) * |
| 张建波;: "一种新的二叉树后序遍历的非递归算法", 电脑与信息技术, no. 05, 15 October 2020 (2020-10-15) * |
| 车银超;余华;郑光;孙昌霞;: "基于IPv6/IPv4双协议栈模式的网络设计与实现", 农业工程技术, no. 30, 25 October 2015 (2015-10-25) * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113747470B (en) | 2024-05-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR102620026B1 (en) | Message processing method, relevant equipment and computer storage medium | |
| US10158568B2 (en) | Method and apparatus for service function forwarding in a service domain | |
| EP3076612B1 (en) | Packet processing methods and nodes | |
| US7447215B2 (en) | Methods, systems, and computer program products for classifying a packet based on a destination address | |
| US10257091B2 (en) | Pipeline table identification | |
| CN107317751A (en) | Use the reciprocity engineering in the outlet of the IPv4 IPv6 addresses mapped | |
| CN112087386A (en) | Method, equipment and system for processing message | |
| CN105591989B (en) | Chip implementation method for uploading protocol message to CPU | |
| CN110932934A (en) | Network packet loss detection method and device | |
| CN113747470A (en) | Interface flow analysis method, routing equipment and storage medium | |
| CN111953619B (en) | Method, system, equipment and medium for shunting message based on DSCP | |
| CN107547381B (en) | Method and device for processing outgoing direction route filtering ORF (open reading frame) | |
| CN111010346B (en) | Message processing method, device, storage medium and device based on dynamic routing | |
| US20230188449A1 (en) | Load balancing and oam in service function chaining using multiprotocol label switching | |
| US20100238930A1 (en) | Router and method of forwarding ipv6 packets | |
| CN111147379A (en) | Data transmission method, system and related equipment | |
| US20170064046A1 (en) | Communication device, communication method, and computer program product | |
| CN109257372B (en) | Message forwarding method, device, storage medium and apparatus based on network convergence | |
| US9282061B1 (en) | Systems and methods for handling ARP messages in modular network devices | |
| Morton et al. | IPv4, IPv6, and IPv4-IPv6 Coexistence: Updates for the IP Performance Metrics (IPPM) Framework | |
| CN114915492B (en) | Traffic forwarding method, device, equipment and medium | |
| CN115086056B (en) | Method, device and equipment for classifying and counting vehicle-mounted Ethernet firewall | |
| CN109474527B (en) | Message forwarding method and device | |
| Tadjiev et al. | Network traffic analysis and ip packet processing monitoring in Linux OS | |
| US20240114000A1 (en) | Optimizing policy tree searches with hybrid ranges of policy sets while examining network traffic |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |