CN114466398A - Method and device for analyzing 5G terminal user behaviors through netflow data - Google Patents
Method and device for analyzing 5G terminal user behaviors through netflow data Download PDFInfo
- Publication number
- CN114466398A CN114466398A CN202111563892.2A CN202111563892A CN114466398A CN 114466398 A CN114466398 A CN 114466398A CN 202111563892 A CN202111563892 A CN 202111563892A CN 114466398 A CN114466398 A CN 114466398A
- Authority
- CN
- China
- Prior art keywords
- user
- information
- netflow
- address
- analyzing
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W24/00—Supervisory, monitoring or testing arrangements
- H04W24/08—Testing, supervising or monitoring using real traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/74—Address processing for routing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W28/00—Network traffic management; Network resource management
- H04W28/02—Traffic management, e.g. flow control or congestion control
- H04W28/06—Optimizing the usage of the radio link, e.g. header compression, information sizing, discarding information
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a method and a device for analyzing 5G terminal user behaviors through netflow data, wherein the method comprises the following steps: the Netflow analysis system collects all routing information in a broadcasting range in a network, and simultaneously performs Netflow data acquisition according to the flow flowing direction; configuring a Netflow V9 protocol to acquire configuration information; IPv6 address information and Pv6 custom header information corresponding to the user IP are obtained through analysis, and correlation analysis is carried out by taking the IP address as a matching item; comprehensively analyzing the IP address of the user, the target access address and the website information corresponding to the DNS client log through a Netflow V9 data packet, IPv6 address information and DNS log information to obtain a user information point; and obtaining a user portrait through the user information points, and generating flow information summary analysis for the number of users. The method and the device are combined with the editable relation between the IPv6 address and the Netflow V9 protocol, the 5G terminal user is subjected to related analysis on the flow, the habit and the behavior of the user are controlled, comprehensive data analysis is carried out, and the later-stage service expansion is guided.
Description
Technical Field
The invention relates to the field of information communication, in particular to a method and a device for analyzing 5G terminal user behaviors through netflow data.
Background
The 5G business is developed rapidly, and the main object is to face industrial users, so that the traditional business mode of one-for-one thousand people is changed. However, the individual end user is an important development discovery of the 5G service, and the 5G individual service is different from the traditional end user important identification, namely, an address mode which refers to the IPv6, and the mode enables each end user to have a specific identification. The user behavior can be deeply analyzed by utilizing the technology of combining the identification with the Netflow data, and the specification of important labels such as user habits, preferences and the like can be realized by combining the analysis result. In a new model market environment where services are first, the tag becomes an important service guide.
The address length of the IPv6 is 128 bits, and the number of addresses is greatly increased compared with the prior IPv 4. Meanwhile, the overall structure of the IPv6 message is divided into an IPv6 header, an extension header and an upper layer protocol data 3 part. Part of the function of the custom address can be realized in the extension header. All 5G users use the address format of IPv6, so each user can have independent address expression mode to represent unique characteristics. According to the specific mode represented by the IPv6 address of the 5G user, the traffic related information of the user can be acquired by the traffic analysis mode of NetfowV9, and the traffic flow direction, the favorite behavior and other behaviors of the 5G user can be comprehensively analyzed by analyzing the extension bit and analyzing the address and log data.
After the 5G network, the subsequent UE user directly allocates an IPv6 address, and the IPv6 protocol realizes various rich functions through an extension header; the upper layer protocol data is the upper layer data carried by the IPv6 message, and may be an ICMPv6 message, a TCP message, a UDP message, or other possible messages. The address may implement the functionality of the option by means of a "next header" field in cooperation with an IPv6 extension header. While the Netflow V9 protocol supports protocol extensions and provides the versatility needed to support new fields and record types.
The Netflow v9 version consists of two messages, a template message and a data message (not including an IPv6 message). The message format is as follows:
Frame 104:170 bytes on wire(1360bits),170bytes captured(1360bits)
Ethernet II,Src:80:38:bc:1c:cb:14(80:38:bc:1c:cb:14),Dst:00:16:31:f9:38:17(00:16:31:f9:38:17)
Internet Protocol Version 4,Src:8.8.8.7(8.8.8.7),Dst:8.8.8.8(8.8.8.8)
User Datagram Protocol,src Port:40000(40000),Dst Port:9996(9996)
Cisco NetF1ow/IPFIX
Version:9
Count:1
sysuptime:-3370651.897417360 seconds
Timestamp:Jan 19,202714:10:33.000000000000000
Flowsequence:315
Sourceid:0
Flowset 1
Flowset Id:Data Template(V9)(0)
FlowSet Length:108
disclosure of Invention
In order to solve the problems existing in manual network fault positioning, the invention provides a method and a device for analyzing 5G terminal user behaviors through Netflow data, and the method and the device are used for analyzing the 5G terminal user behaviors through flow correlation analysis by combining editable relations of an IPv6 address and a Netflow V9 protocol, so that user habits, behaviors and the like are controlled, comprehensive data analysis is carried out, and later-stage service expansion is guided.
In order to achieve the purpose, the invention adopts the following technical scheme:
in an embodiment of the present invention, a method for analyzing 5G terminal user behavior through netflow data is provided, where the method includes:
s01, the Netflow analysis system is deployed at the IP reachable position of the data carrying network, collects all routing information in the broadcast range in the network, and simultaneously performs Netflow data acquisition according to the flow flowing direction;
s02, configuring a Netflow V9 protocol to acquire configuration information;
s03, analyzing to obtain IPv6 address information and Pv6 self-defined header information of the corresponding user IP, and performing correlation analysis by taking the IP address as a matching item;
s04, comprehensively analyzing the IP address of the user, the target access address and the website information corresponding to the DNS client log through the Netflow V9 data packet, the IPv6 address information and the DNS log information to obtain a user information point;
and S05, obtaining a user portrait through the user information points, and generating flow information summary analysis for the number of users.
Further, in S01, the flow direction of the flow is one direction, including an inflow direction or an outflow direction.
Further, the configuration information collected in S02 includes: IPv6 address flow information, collection granularity, compression ratio and self-defined template message content.
Further, the user information point in S04 includes: user IP, target IP, user traffic, DNS address, user resident address and user behavior identification.
In an embodiment of the present invention, a device for analyzing 5G terminal user behavior through netflow data is further provided, where the device includes:
the data acquisition module and the Netflow analysis system are deployed at the IP reachable position of the data carrying network, the Netflow analysis system collects all routing information in a broadcasting range in the network, and meanwhile Netflow data acquisition is carried out according to the flow flowing direction;
the configuration module and the configuration Netflow V9 protocol acquire configuration information;
the correlation analysis module analyzes the IPv6 address information and the Pv6 custom header information of the corresponding user IP and performs correlation analysis by taking the IP address as a matching item;
the user information point analysis module comprehensively analyzes the IP address of the user, the target access address and the website information corresponding to the DNS client log through the Netflow V9 data packet, the IPv6 address information and the DNS log information to obtain a user information point;
the information summarizing module obtains the user portrait through the user information points and generates flow information summarizing analysis for the number of users.
Furthermore, the flow direction in the data acquisition module is unidirectional, including the inflow direction or the outflow direction.
Further, the configuration information collected in the configuration module includes: IPv6 address flow information, collection granularity, compression ratio and self-defined template message content.
Further, the user information point in the user information point analysis module includes: user IP, target IP, user traffic, DNS address, user resident address and user behavior identification.
In an embodiment of the present invention, a computer device is further provided, which includes a memory, a processor, and a computer program stored on the memory and executable on the processor, and when the computer program is executed by the processor, the processor implements the method for analyzing 5G end user behavior through netflow data.
In an embodiment of the present invention, a computer-readable storage medium is also presented, which stores a computer program for executing the method for analyzing 5G end-user behavior through netflow data.
Has the advantages that:
through Netflow analysis, the performance-price ratio is higher, the analysis is accurate, the system resource requirement is less, the hardware requirement is less, and the software and hardware can be separated; the 5G to c service is one of the main development directions of the 5G service in the future, the habit flow trend of a 5G user can be mastered in detail through the invention, and the invention can play an accurate guiding role in the development of the 5G to c market; the system is simple to deploy, and the accumulation of network conditions is not high; the invention has long-term data accumulation and plays a guiding role in discriminating the path of the subsequent service.
Drawings
FIG. 1 is a schematic flow chart of the method for analyzing 5G terminal user behavior through netflow data according to the present invention;
FIG. 2 is an architecture diagram of netflow data analysis 5G end user behavior in accordance with the present invention;
FIG. 3 is a schematic representation of the method S01 of the present invention;
fig. 4 is a schematic structural diagram of an apparatus for analyzing 5G end user behavior through netflow data according to an embodiment of the present invention;
fig. 5 is a schematic structural diagram of a computer device according to an embodiment of the present invention.
Detailed Description
The principles and spirit of the present invention will be described below with reference to several exemplary embodiments, which should be understood to be presented only to enable those skilled in the art to better understand and implement the present invention, and not to limit the scope of the present invention in any way. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
As will be appreciated by one skilled in the art, embodiments of the present invention may be embodied as a system, apparatus, device, method, or computer program product. Accordingly, the present disclosure may be embodied in the form of: entirely hardware, entirely software (including firmware, resident software, micro-code, etc.), or a combination of hardware and software.
According to the embodiment of the invention, the method and the device for analyzing the 5G terminal user behaviors through the Netflow data are provided, and the method and the device for analyzing the 5G terminal user behaviors through the Netflow data are combined with the editable relation of the IPv6 address and the Netflow V9 to perform related analysis on the flow of the 5G terminal user, perform comprehensive data analysis on the habits, behaviors and the like of the user, and guide later-stage service expansion.
The principles and spirit of the present invention are explained in detail below with reference to several representative embodiments of the invention.
Fig. 1 is a flowchart illustrating a method for analyzing 5G terminal user behavior through netflow data according to an embodiment of the present invention. As shown in fig. 1, the method includes:
s01, the Netflow analysis system is deployed at the IP reachable position of the data carrying network, collects all routing information in the broadcast range in the network, and simultaneously performs Netflow data acquisition according to the flow flowing direction;
s02, configuring a Netflow V9 protocol to acquire configuration information;
s03, analyzing to obtain IPv6 address information and Pv6 self-defined header information of the corresponding user IP, and performing correlation analysis by taking the IP address as a matching item;
s04, comprehensively analyzing the IP address of the user, the target access address and the website information corresponding to the DNS client log through the Netflow V9 data packet, the IPv6 address information and the DNS log information to obtain a user information point;
and S05, obtaining a user portrait through the user information points, and generating flow information summary analysis for the number of users.
In S01, the flow direction of the flow is one direction, including the inflow direction or the outflow direction.
The configuration information collected in S02 includes: IPv6 address flow information, collection granularity, compression ratio and self-defined template message content.
The user information point in S04 includes: user IP, target IP, user traffic, DNS address, user resident address and user behavior identification.
As shown in fig. 2, in the hardware logic level, the UE device data traffic is transmitted to the data carrying network by the 5G base station → the data carrying network has the traffic flowing in and out, the Netflow data in the IP reachable position building analysis system acquisition network → the Netflow analysis system analyzes and compares the traffic data in the data network, and the self-defined template messages in the home IP, the opposite IP, the home port, the opposite port and the V9 version are acquired and analyzed → the DNS log system data, the correspondence between the IP address and the website, the time of the access times, and the like are simultaneously combined to perform comprehensive analysis to obtain the behavior portrait of the user.
It should be noted that although the operations of the method of the present invention have been described in the above embodiments and the accompanying drawings in a particular order, this does not require or imply that these operations must be performed in this particular order, or that all of the operations shown must be performed, to achieve the desired results. Additionally or alternatively, certain steps may be omitted, multiple steps combined into one step execution, and/or one step broken down into multiple step executions.
For a clearer explanation of the above method for analyzing 5G end user behavior through netflow data, a specific embodiment is described below, however, it should be noted that the embodiment is only for better illustration of the present invention and should not be construed as an undue limitation on the present invention.
Example (b):
s01, as shown in fig. 3, the Netflow analysis system is deployed at an IP reachable location of the data carrying network, and the device and other devices in the network are in an online neighbor relationship, so that all routing information broadcasted in the network can be collected, and Netflow data collection is performed according to the flow outflow direction.
The outflow direction must be unidirectional, but may also be inflow.
S02, configuring Netflow V9 protocol acquisition configuration information: whether to collect IPv6 address flow information, collection granularity, compression ratio, self-defined template message content and the like.
/*！40101 SET NAMES utf8*/；
/*！40101 SET SQL_MODE＝'IPv6'*/；
/*！40014 SET@OLD_UNIQUE_CHECKS＝@@UNIQUE_CHECKS,UNIQUE_CHECKS＝0*/；
/*！40014 SET@OLD_FOREIGN_KEY_CHECKS＝@@FOREIGN_KEY_CHECKS,FOREIGN_KEY_CHECKS＝0*/；
/*！40101 SET@OLD_SQL_MODE＝@@SQL_MODE,SQL_MODE＝'NO_AUTO_VALUE_ON_ZERO'*/；
/*！40111 SET@OLD_SQL_NOTES＝@@SQL_NOTES,SQL_NOTES＝0*/；
CREATE DATABASE/*！32312IF NOT EXISTS*/`sdn`/*！40100DEFAULT CHARACTER SET utf8*/；
USE`sdn`；
/*Table structure for table`netflowanalyze_30`*/
DROP TABLE IF EXISTS`netflowanalyze_30`；
CREATE TABLE`netflowanalyze_30`(
`deviceid`char(8)DEFAULT NULL,
`starttime`bigint(14)DEFAULT NULL,
`SRC_NETID`decimal(9,0)DEFAULT NULL,
`DST_SERVID`decimal(9,0)DEFAULT NULL,
`flowspeed`decimal(15,0)DEFAULT NULL,
`packetspeed`decimal(15,0)DEFAULT NULL,
`bytespeed`decimal(15,0)DEFAULT NULL,
KEY`ind_NETFLOWANALYZE_30`(`starttime`,`deviceid`)
)ENGINE＝InnoDB DEFAULT CHARSET＝utf8
/*！50100PARTITION BY RANGE(starttime)
And S03, analyzing to obtain IPv6 address information, Pv6 self-defined header information and the like of the corresponding user IP, and performing correlation analysis by taking the IP address as a matching item.
The template message of Netflow v9 is as follows, wherein, the IP information, the flow information, the self-defining information and the like are all embodied, and can be analyzed in parallel.
nternet Protocol Version 4,Src:8.8.8.7(8.8.8.7),Dst:8.8.88(8.8.8.8)
User Datagram Protocol,Src Port:40000(40000),Dst Port:(9996(9996)
Cisco NetFlow/IPFIX
Version:9
Count:1
SysUptime:1758522.1881260936 seconds
Timestamp:Feb 27.2029 11:41:13.000000000
FlowSequence:305
SourceId:0
8 FlowSet 1
FlowSet Id:Data Template(V9)(0)
FlowSet Length:108
Template(Id＝1315,Count＝25)
Template Id:1315
Field Count:25
Field(1/25)：IP_SRC_ADDR
Field(2/25):IP_DST_ADDR
Field(3/25)：IP_NEXT_HOP
Field(4/25)：PKTS
Field(5/25):BYTES
Field(6/25):FIRST_SWITCHED
Field(7/25):LAST_SWITCHED
Field(8/25)：BGP_NEXT_HOP
Field(9/25)：INPUT_SNMP
Field(10/25):OUTPUT_SNMP
Field(11/25)：L4_SRC_PORT
Field(12/25)：L4_DST_PORT
Field(13/25)：SRC_AS
Field(14/25)：DST_AS
Field(15/25)：SRC_VLAN
Field(16/25):DST_VLAN
S04, comprehensively analyzing the IP address of the user, the target access address and the website information corresponding to the DNS client log through a Netflow V9 data packet, IPv6 address information, DNS log information and the like, and obtaining the following important information points as shown in the following table 1:
TABLE 1
And S05, generating key information such as flow and the like for the number of users through the user images, summarizing and analyzing the key information, and guiding the main direction of the market in the next step.
Based on the same inventive concept, the invention also provides a device for analyzing the 5G terminal user behavior through netflow data. The implementation of the device can be referred to the implementation of the method, and repeated details are not repeated. The term "module," as used below, may be a combination of software and/or hardware that implements a predetermined function. Although the means described in the embodiments below are preferably implemented in software, an implementation in hardware, or a combination of software and hardware is also possible and contemplated.
Fig. 4 is a schematic structural diagram of an apparatus for analyzing 5G end user behavior through netflow data according to an embodiment of the present invention. As shown in fig. 4, the apparatus includes:
the data acquisition module 101 and the Netflow analysis system are deployed at the IP reachable position of the data carrying network, the Netflow analysis system collects all routing information in a broadcast range in the network, and meanwhile Netflow data acquisition is carried out according to the flow flowing direction;
the configuration module 102, the configuration Netflow V9 protocol collects configuration information;
the correlation analysis module 103 analyzes the IPv6 address information and the Pv6 custom header information of the corresponding user IP and performs correlation analysis by taking the IP address as a matching item;
the user information point analysis module 104 comprehensively analyzes the IP address of the user, the target access address and the website information corresponding to the DNS client log through the Netflow V9 data packet, the IPv6 address information and the DNS log information to obtain a user information point;
and the information summarizing module 105 obtains the user portrait through the user information points and generates flow information summarizing analysis for the number of users.
The flow direction in the data acquisition module 101 is a single direction, including an inflow direction or an outflow direction.
The configuration information collected in the configuration module 102 includes: IPv6 address flow information, collection granularity, compression ratio and self-defined template message content.
The user information points in the user information point analysis module 104 include: user IP, target IP, user traffic, DNS address, user resident address and user behavior identification.
It should be noted that although in the above detailed description several modules of the apparatus for analyzing 5G end user behavior by netflow data are mentioned, this division is merely exemplary and not mandatory. Indeed, the features and functionality of two or more of the modules described above may be embodied in one module according to embodiments of the invention. Conversely, the features and functions of one module described above may be further divided into embodiments by a plurality of modules.
Based on the aforementioned inventive concept, as shown in fig. 5, the present invention further provides a computer device 200, which includes a memory 210, a processor 220 and a computer program 230 stored in the memory 210 and running on the processor 220, wherein when the processor 220 executes the computer program 230, the aforementioned method for analyzing 5G end user behavior through netflow data is implemented.
Based on the above inventive concept, the present invention further proposes a computer-readable storage medium storing a computer program for executing the above method for analyzing 5G terminal user behavior through netflow data.
According to the method and the device for analyzing the 5G terminal user behaviors through Netflow data, through Netflow analysis, the performance-price ratio is high, the analysis is accurate, the system resource requirement is low, the hardware requirement is low, and software and hardware can be separated; the 5G to c service is one of the main development directions of the 5G service in the future, the habit flow trend of a 5G user can be mastered in detail through the invention, and the invention can play an accurate guiding role in the development of the 5G to c market; the system is simple to deploy, and the accumulation of network conditions is not high; the invention has long-term data accumulation and plays a guiding role in discriminating the path of the subsequent service.
While the spirit and principles of the invention have been described with reference to several particular embodiments, it is to be understood that the invention is not limited to the disclosed embodiments, nor is the division of aspects, which is for convenience only as the features in such aspects may not be combined to benefit. The invention is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.
The limitation of the protection scope of the present invention is understood by those skilled in the art, and various modifications or changes which can be made by those skilled in the art without inventive efforts based on the technical solution of the present invention are still within the protection scope of the present invention.
Claims (10)
1. A method for analyzing 5G end-user behavior through netflow data, the method comprising:
s01, the Netflow analysis system is deployed at the IP reachable position of the data carrying network, collects all routing information in the broadcast range in the network, and simultaneously performs Netflow data acquisition according to the flow flowing direction;
s02, configuring a Netflow V9 protocol to acquire configuration information;
s03, analyzing to obtain IPv6 address information and Pv6 self-defined header information of the corresponding user IP, and performing correlation analysis by taking the IP address as a matching item;
s04, comprehensively analyzing the IP address of the user, the target access address and the website information corresponding to the DNS client log through the Netflow V9 data packet, the IPv6 address information and the DNS log information to obtain a user information point;
and S05, obtaining user images through the user information points, and generating flow information summary analysis for the number of users.
2. The method for analyzing 5G end-user behavior through netflow data as recited in claim 1, wherein the flow direction in S01 is unidirectional, including an inflow direction or an outflow direction.
3. The method for analyzing 5G end-user behavior via netflow data as recited in claim 1, wherein the configuration information collected in S02 includes: IPv6 address flow information, collection granularity, compression ratio and self-defined template message content.
4. The method for analyzing 5G end-user behavior through netflow data as claimed in claim 1, wherein the user information points in S04 comprise: user IP, target IP, user traffic, DNS address, user resident address and user behavior identification.
5. An apparatus for analyzing 5G end-user behavior via netflow data, the apparatus comprising:
the data acquisition module and the Netflow analysis system are deployed at the IP reachable position of the data carrying network, the Netflow analysis system collects all routing information in a broadcasting range in the network, and meanwhile Netflow data acquisition is carried out according to the flow flowing direction;
the configuration module and the configuration Netflow V9 protocol acquire configuration information;
the correlation analysis module analyzes to obtain IPv6 address information and Pv6 self-defined header information of a corresponding user IP, and performs correlation analysis by taking the IP address as a matching item;
the user information point analysis module comprehensively analyzes the IP address of the user, the target access address and the website information corresponding to the DNS owner log through a Netflow V9 data packet, IPv6 address information and DNS log information to obtain a user information point;
the information summarizing module obtains the user portrait through the user information points and generates flow information summarizing analysis for the number of users.
6. The device for analyzing 5G end-user behaviors through netflow data of claim 5, wherein the flow direction in the data collection module is unidirectional, including inflow direction or outflow direction.
7. The apparatus for analyzing 5G end-user behavior via netflow data as recited in claim 5, wherein the configuration information collected in the configuration module comprises: IPv6 address flow information, collection granularity, compression ratio and self-defined template message content.
8. The apparatus for analyzing 5G end-user behavior via netflow data as claimed in claim 5, wherein the user information points in the user information points analyzing module comprises: user IP, target IP, user traffic, DNS address, user resident address and user behavior identification.
9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the method of claims 1-4 when executing the computer program.
10. A computer-readable storage medium, characterized in that the computer-readable storage medium stores a computer program for executing the method of claims 1-4.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111563892.2A CN114466398A (en) | 2021-12-20 | 2021-12-20 | Method and device for analyzing 5G terminal user behaviors through netflow data |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111563892.2A CN114466398A (en) | 2021-12-20 | 2021-12-20 | Method and device for analyzing 5G terminal user behaviors through netflow data |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN114466398A true CN114466398A (en) | 2022-05-10 |
Family
ID=81405522
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111563892.2A Pending CN114466398A (en) | 2021-12-20 | 2021-12-20 | Method and device for analyzing 5G terminal user behaviors through netflow data |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114466398A (en) |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101562534A (en) * | 2009-05-26 | 2009-10-21 | 中山大学 | Network behavior analytic system |
| CN101990003A (en) * | 2010-10-22 | 2011-03-23 | 西安交通大学 | User action monitoring system and method based on IP address attribute |
| WO2013027920A1 (en) * | 2011-08-24 | 2013-02-28 | (주)케이티 | Distribution system for analyzing high-capacity traffic in real time, and method for analyzing traffic in real time in distribution system |
| CN103166807A (en) * | 2011-12-15 | 2013-06-19 | 中国电信股份有限公司 | Analyzing and processing method and analyzing and processing system of traffic flow direction based on application |
| CN103618677A (en) * | 2013-12-11 | 2014-03-05 | 王逊 | Network flow regulation method and system |
| US20140157405A1 (en) * | 2012-12-04 | 2014-06-05 | Bill Joll | Cyber Behavior Analysis and Detection Method, System and Architecture |
| CN106657001A (en) * | 2016-11-10 | 2017-05-10 | 广州赛讯信息技术有限公司 | Botnet detection method based on Netflow and DNS blog |
| CN109327356A (en) * | 2018-11-20 | 2019-02-12 | 中国联合网络通信集团有限公司 | A kind of generation method and device of user's portrait |
| CN110324327A (en) * | 2019-06-20 | 2019-10-11 | 国家计算机网络与信息安全管理中心 | User and server ip address caliberating device and method based on specific enterprise domain name data |
| CN113746654A (en) * | 2020-05-29 | 2021-12-03 | 中国移动通信集团河北有限公司 | IPv6 address management and flow analysis method and device |
-
2021
- 2021-12-20 CN CN202111563892.2A patent/CN114466398A/en active Pending
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101562534A (en) * | 2009-05-26 | 2009-10-21 | 中山大学 | Network behavior analytic system |
| CN101990003A (en) * | 2010-10-22 | 2011-03-23 | 西安交通大学 | User action monitoring system and method based on IP address attribute |
| WO2013027920A1 (en) * | 2011-08-24 | 2013-02-28 | (주)케이티 | Distribution system for analyzing high-capacity traffic in real time, and method for analyzing traffic in real time in distribution system |
| CN103166807A (en) * | 2011-12-15 | 2013-06-19 | 中国电信股份有限公司 | Analyzing and processing method and analyzing and processing system of traffic flow direction based on application |
| US20140157405A1 (en) * | 2012-12-04 | 2014-06-05 | Bill Joll | Cyber Behavior Analysis and Detection Method, System and Architecture |
| CN103618677A (en) * | 2013-12-11 | 2014-03-05 | 王逊 | Network flow regulation method and system |
| CN106657001A (en) * | 2016-11-10 | 2017-05-10 | 广州赛讯信息技术有限公司 | Botnet detection method based on Netflow and DNS blog |
| CN109327356A (en) * | 2018-11-20 | 2019-02-12 | 中国联合网络通信集团有限公司 | A kind of generation method and device of user's portrait |
| CN110324327A (en) * | 2019-06-20 | 2019-10-11 | 国家计算机网络与信息安全管理中心 | User and server ip address caliberating device and method based on specific enterprise domain name data |
| CN113746654A (en) * | 2020-05-29 | 2021-12-03 | 中国移动通信集团河北有限公司 | IPv6 address management and flow analysis method and device |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| USRE49126E1 (en) | Real-time adaptive processing of network data packets for analysis | |
| US6665725B1 (en) | Processing protocol specific information in packets specified by a protocol description language | |
| EP2240854B1 (en) | Method of resolving network address to host names in network flows for network device | |
| CN110635965B (en) | IPv6 network quality monitoring method, equipment and storage medium | |
| US10523536B2 (en) | Length control for packet header sampling | |
| CN111953552B (en) | Data flow classification method and message forwarding equipment | |
| CN109743745B (en) | Mobile network access type identification method and device, electronic equipment and storage medium | |
| CN111224894A (en) | Traffic collection marking method and system for iOS device | |
| US20050283639A1 (en) | Path analysis tool and method in a data transmission network including several internet autonomous systems | |
| CN113746654B (en) | IPv6 address management and flow analysis method and device | |
| CN110691007A (en) | Method for accurately measuring QUIC connection packet loss rate | |
| CN105515995A (en) | Message processing method and apparatus, and flow table generation method and apparatus | |
| CN114466398A (en) | Method and device for analyzing 5G terminal user behaviors through netflow data | |
| JP4917620B2 (en) | Traffic information collecting method, traffic information collecting apparatus, and program in backbone network | |
| Ptácek | Analysis and detection of Skype network traffic | |
| WO2022132208A1 (en) | Performance measurement in a segment routing network | |
| Zou et al. | An enhanced Netflow data collection system | |
| CN111787435A (en) | Network acceleration system based on GPON router | |
| WO2022262574A1 (en) | Method and apparatus for determining slice information, and storage medium and electronic apparatus | |
| CN117914974A (en) | Network data packet analysis method and device and electronic equipment | |
| CN115589362B (en) | Method for generating and identifying device type fingerprint, device and medium | |
| CN115665096A (en) | Method and device for data drainage of Linux network bridge | |
| CN104917658B (en) | A kind of information acquisition method, equipment and system | |
| Lutui | Performance analysis of IPv4 vs. IPv6 on various operating systems using jumbo frames | |
| Bartlett | Representing BGP and routing flows in XML |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |