CN114584329A - Method and device for positioning reasons of abnormal flow and electronic equipment - Google Patents
Method and device for positioning reasons of abnormal flow and electronic equipment Download PDFInfo
- Publication number
- CN114584329A CN114584329A CN202011278057.XA CN202011278057A CN114584329A CN 114584329 A CN114584329 A CN 114584329A CN 202011278057 A CN202011278057 A CN 202011278057A CN 114584329 A CN114584329 A CN 114584329A
- Authority
- CN
- China
- Prior art keywords
- abnormal
- bng
- traffic
- target network
- broadband service
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
- H04L63/1425—Traffic logging, e.g. anomaly detection
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0677—Localisation of faults
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D30/00—Reducing energy consumption in communication networks
- Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate
Abstract
The application discloses a method and a device for positioning reasons of abnormal traffic and electronic equipment, which are used for at least solving the problems of low efficiency and low accuracy in the existing network traffic abnormality detection technology. The method comprises the following steps: monitoring the user number change condition of a specified broadband service borne by Broadband Network Gateway (BNG) equipment in a target network and the flow change condition of an uplink port, wherein the specified broadband service borne by the BNG equipment comprises a broadband internet access service and a broadband television service; determining whether the BNG equipment is abnormal, and the abnormal specified broadband service and the abnormal type of the flow are determined based on the user number change condition of the specified broadband service borne by the BNG equipment and the flow change condition of the uplink port; and determining the abnormal flow reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the subinterface matched with the abnormal specified broadband service.
Description
Technical Field
The present application relates to the field of network communication technologies, and in particular, to a method and an apparatus for locating a cause of a traffic anomaly, and an electronic device.
Background
In the existing network traffic anomaly detection technology, after receiving a traffic anomaly alarm generated in a network, an operation and maintenance person analyzes and inspects the operation conditions of each network device in the network one by one to track the reason of the traffic anomaly alarm. The process of manually checking the reasons of the abnormal flow is relatively time-consuming, low in efficiency and highly dependent on the maintenance experience of operation and maintenance personnel, so that the accuracy cannot be guaranteed.
Disclosure of Invention
The embodiment of the application provides a method and a device for positioning a reason of abnormal traffic and electronic equipment, so as to at least solve the problems of low efficiency and low accuracy in the existing network traffic abnormality detection technology.
In order to solve the technical problem, the embodiment of the application adopts the following technical scheme:
in a first aspect, an embodiment of the present application provides a method for positioning a cause of a traffic anomaly, including:
monitoring the user number change condition of a specified broadband service borne by Broadband Network Gateway (BNG) equipment in a target network and the flow change condition of an uplink port, wherein the specified broadband service borne by the BNG equipment comprises a broadband internet access service and a broadband television service;
determining whether the BNG equipment is abnormal, and the abnormal specified broadband service and the abnormal type of the flow are determined based on the user number change condition of the specified broadband service borne by the BNG equipment and the flow change condition of the uplink port;
and determining the abnormal flow reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the subinterface matched with the abnormal specified broadband service.
Optionally, the monitoring a change of a user number of a specified broadband service carried by a broadband network gateway BNG device in the target network and a change of a traffic of the uplink port includes:
acquiring the number of users of the specified broadband service borne by the BNG equipment and the flow of an uplink port according to a set period;
corresponding to each appointed broadband service, determining the user number variation and the user number variation trend of the appointed broadband service in the adjacent period based on the user number of the appointed broadband service in each period;
and under the condition that the variable quantity of the number of users of any specified broadband service in an adjacent period exceeds a user number threshold value, determining the flow variable quantity and the flow variation trend of the uplink port in the adjacent period based on the flow of the uplink port in the adjacent period.
Optionally, determining whether the BNG device is abnormal, and the abnormal specified broadband service and the abnormal traffic type are determined based on a change of a user number of the specified broadband service carried by the BNG device and a change of a traffic of an uplink port, includes:
for each appointed broadband service carried by the BNG equipment, if the user number variation of the appointed broadband service in an adjacent period exceeds the user number threshold, determining that the appointed broadband service is an abnormal appointed broadband service;
determining that the BNG device is abnormal when at least one specified broadband service borne by the BNG device is an abnormal specified broadband service, the traffic variation of an uplink port of the BNG device in an adjacent period exceeds a traffic threshold, and the user number variation trend of the abnormal specified broadband service is the same as the traffic variation trend of the uplink port;
and determining the abnormal traffic type of the BNG equipment based on the user number variation trend of the abnormally-specified broadband service and/or the traffic variation trend of the uplink port.
Optionally, the traffic anomaly types include a traffic sudden-increase anomaly and a traffic sudden-decrease anomaly;
determining the reason of the abnormal traffic of the target network based on the abnormal type of the abnormal BNG device in the target network and the interface state of the subinterface matched with the abnormal specified broadband service, including:
if all BNG equipment in the target network has abnormal traffic sudden reduction and all sub-interfaces of the abnormal BNG equipment, which are matched with the abnormal specified broadband service of the abnormal BNG equipment, are in a closed state, determining that the reason of the abnormal traffic of the target network is that the access layer equipment is disconnected;
if all BNG devices in the target network have abnormal traffic sudden reduction and part of subinterfaces of the abnormal BNG devices, which are matched with the abnormal specified broadband service of the abnormal BNG devices, are in a closed state, determining that the reason of the abnormal traffic of the target network is the fault of the access side of the access layer device;
if some BNG devices in the target network have abnormal traffic sudden increase, another BNG devices have abnormal traffic sudden decrease, and some subinterfaces of the BNG devices with abnormal traffic sudden decrease, which are matched with the abnormal designated service of the BNG devices, are in a closed state, determining that the reason for the abnormal traffic of the target network is the failure of the partially matched subinterfaces;
and if all BNG devices in the target network have abnormal sudden flow increase, determining that the reason of the abnormal flow of the target network is a security attack event in the target network.
Optionally, in a case that it is determined that the cause of the traffic anomaly of the target network is the partial matching sub-interface failure, the method further includes:
selecting a subinterface in an open state as a target subinterface from all subinterfaces of BNG equipment with abnormal traffic reduction abnormality, which are matched with the abnormal specified service of the BNG equipment;
and controlling the connection between the access layer equipment and the target subinterface to be in a conducting state.
Optionally, after determining the cause of the traffic anomaly of the target network, the method further includes:
and generating and outputting early warning prompt information based on the reason of the abnormal flow of the target network.
In a second aspect, an embodiment of the present application provides a device for locating a cause of a flow anomaly, including:
the system comprises a monitoring unit, a service management unit and a service management unit, wherein the monitoring unit is used for monitoring the change condition of the user number of the specified broadband service borne by the broadband network gateway BNG equipment in a target network and the change condition of the flow of an uplink port, and the specified broadband service borne by the BNG equipment comprises a broadband internet access service and a broadband television service;
a determining unit, configured to determine whether the BNG device is abnormal, the abnormal specified broadband service, and the traffic abnormal type based on a change of a user number of the specified broadband service carried by the BNG device and a change of traffic of an uplink port;
and the positioning unit is used for determining the reason of the abnormal flow of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the subinterface matched with the abnormal specified broadband service.
Optionally, the monitoring unit is specifically configured to:
acquiring the number of users of the specified broadband service borne by the BNG equipment and the flow of an uplink port according to a set period;
corresponding to each appointed broadband service, determining the user number variation and the user number variation trend of the appointed broadband service in the adjacent period based on the user number of the appointed broadband service in each period;
and under the condition that the variable quantity of the number of users of any specified broadband service in an adjacent period exceeds a user number threshold value, determining the flow variable quantity and the flow variation trend of the uplink port in the adjacent period based on the flow of the uplink port in the adjacent period.
Optionally, the determining unit is specifically configured to:
for each appointed broadband service carried by the BNG equipment, if the user number variation of the appointed broadband service in an adjacent period exceeds the user number threshold, determining that the appointed broadband service is an abnormal appointed broadband service;
determining that the BNG device is abnormal when at least one specified broadband service borne by the BNG device is an abnormal specified broadband service, the traffic variation of an uplink port of the BNG device in an adjacent period exceeds a traffic threshold, and the user number variation trend of the abnormal specified broadband service is the same as the traffic variation trend of the uplink port;
and determining the abnormal traffic type of the BNG equipment based on the user number variation trend of the abnormally-specified broadband service and/or the traffic variation trend of the uplink port.
Optionally, the traffic anomaly types include a traffic sudden-increase anomaly and a traffic sudden-decrease anomaly;
the positioning unit is specifically configured to:
if all BNG equipment in the target network has abnormal traffic sudden reduction and all sub-interfaces of the abnormal BNG equipment, which are matched with the abnormal specified broadband service of the abnormal BNG equipment, are in a closed state, determining that the reason of the abnormal traffic of the target network is that the access layer equipment is disconnected;
if all BNG devices in the target network have abnormal traffic sudden reduction and part of subinterfaces of the abnormal BNG devices, which are matched with the abnormal specified broadband services of the abnormal BNG devices, are in a closed state, determining that the reason of the abnormal traffic of the target network is the fault of the access side of the access layer device;
if some BNG devices in the target network have abnormal traffic sudden increase, another BNG devices have abnormal traffic sudden decrease, and some subinterfaces of the BNG devices with abnormal traffic sudden decrease, which are matched with the abnormal designated service of the BNG devices, are in a closed state, determining that the reason for the abnormal traffic of the target network is the failure of the partially matched subinterfaces;
and if all BNG devices in the target network have abnormal sudden flow increase, determining that the reason of the abnormal flow of the target network is a security attack event in the target network.
Optionally, the apparatus further comprises:
a selecting unit, configured to select, when the positioning unit determines that the cause of the traffic anomaly of the target network is the partial matched sub-interface failure, a sub-interface in an open state as a target sub-interface from all sub-interfaces of the BNG device having the traffic sudden decrease anomaly that are matched with the abnormal specified service of the BNG device;
and the switching unit is used for controlling the connection between the access layer equipment and the target subinterface to be in a conducting state.
Optionally, the apparatus further comprises:
and the warning unit is used for generating and outputting early warning prompt information based on the reason of the abnormal flow of the target network after the positioning unit determines the reason of the abnormal flow of the target network.
In a third aspect, an embodiment of the present application provides an electronic device, including:
a processor;
a memory for storing the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the method of the first aspect.
In a fourth aspect, embodiments of the present application provide a computer-readable storage medium, where instructions, when executed by a processor of an electronic device, enable the electronic device to perform the method according to the first aspect.
The embodiment of the application adopts at least one technical scheme which can achieve the following beneficial effects:
monitoring and analyzing the flow change condition of the uplink port of the BNG equipment in the target network and the user number change condition of the borne broadband service, automatically identifying whether the flow abnormity occurs in the target network and positioning the reason of the flow abnormity, wherein the whole process does not need manual participation, the efficiency and the accuracy are higher, operation and maintenance personnel can rapidly carry out fault treatment, the normal use of the broadband service is ensured, and the high practicability is achieved.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this application, illustrate embodiment(s) of the application and together with the description serve to explain the application and not to limit the application. In the drawings:
fig. 1 is a schematic diagram of a networking architecture of a target network according to an embodiment of the present disclosure;
fig. 2 is a flowchart of a method for positioning a cause of a traffic anomaly according to an embodiment of the present disclosure;
fig. 3 is a flowchart of another method for locating a cause of a traffic anomaly according to an embodiment of the present disclosure;
fig. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present disclosure;
fig. 5 is a schematic structural diagram of a positioning device for a reason of flow anomaly according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the technical solutions of the present application will be described in detail and completely with reference to the following specific embodiments of the present application and the accompanying drawings. It should be apparent that the described embodiments are only some of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
The technical solutions provided by the embodiments of the present application are described in detail below with reference to the accompanying drawings.
Before explaining the method for positioning the cause of the traffic abnormality provided in the embodiment of the present application, a target network related to the embodiment of the present application is first explained. Fig. 1 is a schematic diagram of a networking architecture of a target network according to an embodiment of the present application. As shown in fig. 1, a target network according to an embodiment of the present application includes: the Optical Network system comprises a convergence layer, a service control layer and an access layer, wherein devices in the convergence layer comprise Core Routers (CR), devices in the service control layer comprise Broadband Network Gateway (BNG) devices, and devices in the access layer comprise Optical Line Terminals (OLT). It should be noted that, in the target network related to the embodiment of the present application, the number of the OLT, the BNG device, and the CR may be one or more, and may be determined according to actual needs. Figure 1 is only illustrated with the target network including one OLT, two BNG devices (i.e., BNG1 and BNG2), and two CRs (i.e., CR1 and CR 2).
In the target network, the OLT is connected to the downstream port of the BNG, and the upstream port of the BNG is connected to the CR. Therefore, a link is formed among the OLT, the BNG, and the CR, and the broadband network provided by the mobile operator can be accessed through the link, so that corresponding broadband network services, for example, including a broadband internet service, a broadband television service, and the like, can be implemented.
When the traffic abnormality occurs in the target network, for example, the traffic of a certain link suddenly increases or decreases, the normal operation of the corresponding network device in the target network is affected, and the broadband network service is further affected, so that it is very important to analyze and locate the cause of the traffic abnormality of the target network.
At present, for positioning the causes of abnormal traffic, the causes of abnormal traffic are usually determined by analyzing and troubleshooting each network device in a target network one by operation and maintenance personnel, the whole troubleshooting process is relatively time-consuming and low in efficiency, and the maintenance experience of the operation and maintenance personnel is highly dependent, so that the accuracy cannot be guaranteed.
In order to solve the above problems, embodiments of the present application provide a method and an apparatus for locating a cause of a traffic anomaly, and an electronic device, where a traffic variation situation of an uplink port of a BNG device in a target network and a user quantity variation situation of a broadband service are monitored and analyzed, so as to automatically identify whether a traffic anomaly occurs in the target network and locate a cause of the traffic anomaly, and the whole process does not need manual participation, and is higher in efficiency and accuracy, so that operation and maintenance personnel can quickly perform fault processing, and normal use of the broadband service is ensured, and the method and the apparatus have higher practicability.
Based on the target network shown in fig. 1, the embodiment of the present application provides a method for locating a cause of a traffic anomaly, which is applied to an electronic device, where the electronic device may be, for example, a server (e.g., a server of a broadband service provider). Referring to fig. 2, fig. 2 is a flowchart of a method for locating a cause of a traffic anomaly according to an embodiment of the present application, as shown in fig. 2, the method includes the following steps:
s202, the user number change situation of the specified broadband service loaded by the BNG equipment in the target network and the flow change situation of the uplink port are monitored.
The designated broadband service carried by the BNG equipment comprises a broadband internet access service and a broadband television service.
The change of the number of users of the specified broadband service may specifically include, but is not limited to, information such as a change amount and a change trend of the number of users of the specified broadband service. The traffic change condition of the uplink port of the BNG device may specifically include information such as a traffic change amount and a change trend of the uplink port of the BNG device.
Optionally, for each BNG device in the target network, the number of users of the specified broadband service carried by the BNG device and the traffic of the uplink port of the BNG device may be collected according to a set period, and a change situation of the number of users of the specified broadband service carried by the BNG device and a change situation of the traffic of the uplink port of the BNG device are obtained by comparing data collected in adjacent periods.
Specifically, for each specified broadband service carried by the BNG device, the user number variation and the user number variation trend of the specified broadband service in the adjacent period can be determined based on the user number of the specified broadband service in each period, so as to obtain the user number variation of the specified broadband service carried by the BNG device. For the traffic of the upstream port of the BNG device, the traffic variation and the traffic variation trend of the upstream port of the BNG device in the adjacent cycles can be determined based on the traffic of the upstream port of the BNG device in each cycle, so as to obtain the traffic variation of the upstream port of the BNG device.
In practical applications, the determination of the change condition of the number of users of the specified broadband service carried by the BNG device and the determination of the change condition of the traffic of the uplink port of the BNG device may be performed simultaneously or sequentially.
Considering that the trend of the change of the number of users of the specified broadband service carried by the BNG device is approximately the same as the trend of the change of the traffic of the uplink port of the BNG device, in a preferred embodiment, the change of the number of users of the specified broadband service carried by the BNG device may be monitored first, and the change of the traffic of the uplink port of the BNG device may be monitored when the number of users of the specified broadband service changes suddenly.
Specifically, as shown in fig. 3, the step S202 may include:
s221, acquiring the number of users of the specified broadband service loaded by the BNG equipment and the flow of the uplink port according to a set period.
S222, for each designated broadband service loaded by the BNG device, determining a user quantity variation and a user quantity variation trend of the designated broadband service in adjacent periods based on the user quantity of the designated broadband service in each period.
Specifically, for each specified broadband service carried by the BNG device, the difference between the number of users of the specified broadband service in the current period and the number of users in the previous period may be determined as the user number variation of the specified broadband service carried by the BNG device in the current period, and if the user number variation is greater than a preset value (e.g., 0), it may be determined that the trend of the change of the number of users of the specified broadband service carried by the BNG device in the current period is that the number of users is increased, otherwise, it may be determined that the trend of the change of the number of users of the specified broadband service carried by the BNG device in the current period is that the number of users is decreased.
S223, determining a traffic variation and a traffic variation trend of the uplink port of the BNG device in the adjacent period based on the traffic of the uplink port of the BNG device in the adjacent period when the variation of the number of users of any specified broadband service carried by the BNG device in the adjacent period exceeds the user number threshold.
In this case, the traffic change condition of the BNG device in the current period may be monitored.
Specifically, the difference between the flow of the upstream port of the BNG device in the current cycle and the flow of the previous cycle may be determined as the flow variation of the upstream port of the BNG device in the current cycle, and if the flow variation is greater than a preset value (e.g., 0), the flow variation trend of the upstream port of the BNG device in the current cycle may be determined as the flow increase, otherwise, the flow variation trend of the upstream port of the BNG device in the current cycle may be determined as the flow decrease.
It should be noted that the granularity of the period may be set in a user-defined manner according to actual needs, and the granularity of the period is not specifically limited in the embodiment of the present application.
It can be understood that, in the present solution, when the number of users of any specified broadband service borne by the BNG device is monitored to be suddenly changed, the traffic change condition of the uplink port of the BNG device is monitored, and compared with monitoring the change conditions of the uplink port and the BNG device at the same time, the workload of the electronic device can be reduced, and the occupation of processing resources of the electronic device is reduced.
S204, determining whether the BNG equipment is abnormal, and determining the abnormal specified broadband service and the abnormal type of the flow based on the user quantity change condition of the specified broadband service borne by the BNG equipment and the flow change condition of the uplink port.
In general, a traffic variation trend of an uplink port of the BNG device is substantially the same as a user number variation trend of a specified broadband service carried by the BNG device, that is, the number of users of the specified broadband service is increased, and the traffic of the uplink port is also increased; the number of users of the specified broadband service is reduced, and the flow of the uplink port is also reduced. And, normally, the changes of both tend to be smooth. Based on the above, whether the BNG device has the traffic abnormality or not and the type of the traffic abnormality can be determined according to the variation of the BNG device and the traffic abnormality.
Specifically, for each BNG device, if the number of users of any specified broadband service carried by the BNG device changes abruptly, the traffic of the uplink port of the BNG device also changes abruptly, and the change trends of the two are the same, it is determined that the BNG device has a traffic abnormality. The sudden change of the user number of the designated broadband service means that the user number variation of the designated broadband exceeds a user number threshold, and the sudden change of the flow of the uplink port means that the flow variation of the uplink port exceeds a flow threshold. It should be noted that the user number threshold and the flow threshold may be set by user-defining according to actual needs, and values of the user number threshold and the flow threshold are not specifically limited in the embodiment of the present application.
Further, the traffic anomaly type of the BNG device may be determined based on a variation trend of the number of users of the specified broadband service carried by the BNG device and/or a variation trend of uplink port traffic, where the traffic anomaly type of the BNG device includes a traffic sudden increase anomaly and a traffic sudden decrease anomaly. Specifically, for each BNG device with traffic abnormality, if the variation trend of the number of users of the specified broadband, which are borne by the BNG device and have sudden change in the number of users, is a user number increase and the traffic variation trend of the uplink port of the BNG device is a traffic increase, determining that the traffic abnormality type of the BNG device is a traffic sudden increase abnormality; if the trend of the change of the number of users of the broadband service with the sudden change of the number of users borne by the BNG device is a decrease of the number of users and the trend of the change of the traffic of the uplink port of the BNG device is a decrease of the traffic, it is determined that the type of the traffic abnormality of the BNG device is a traffic sudden decrease abnormality.
S206, determining the reason of the abnormal flow of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the subinterface matched with the abnormal specified broadband service.
In general, the interface state of the sub-interface matching the BNG device in the target network and the specific broadband service carried by the BNG device affects the number of users of the specific broadband service carried by the BNG device and the traffic of the uplink port of the BNG device, so that the abnormal type of the abnormal BNG device in the target network and the interface state of the sub-interface matching the abnormal specific broadband service can be integrated to analyze and locate the cause of the abnormal traffic of the target network.
According to the method for positioning the abnormal flow reason, the flow change situation of the uplink port of the BNG equipment in the target network and the user number change situation of the borne broadband service are monitored and analyzed, whether the abnormal flow occurs in the target network or not is automatically identified, the abnormal flow reason is positioned, the whole process does not need manual participation, the efficiency and the accuracy are higher, operation and maintenance personnel can rapidly perform fault treatment conveniently, the normal use of the broadband service is guaranteed, and the method has higher practicability.
In one embodiment, for the step S206, if all the BNG devices in the target network have traffic sudden-decrease abnormality, the cause of the traffic abnormality of the target network can be preliminarily located as the problem on the access side of the BNG device. Further, the specific traffic anomaly reason of the target network can be determined based on the interface states of all the subinterfaces of the anomalous BNG device, which are matched with the self-anomalous specified broadband service. Specifically, if all the subinterfaces of the abnormal BNG device, which are matched with the abnormal broadband service of the abnormal BNG device, are in a closed state, it may be determined that the source of the abnormal traffic of the target network is disconnected from the access layer device; if the part of the subinterfaces of the abnormal BNG equipment, which are matched with the abnormal specified broadband service of the abnormal BNG equipment, are in a closed state, the reason that the flow abnormality of the target network is caused by the fault of the access side of the access layer equipment can be determined. Wherein the access layer device may include an OLT as shown in fig. 1, and accordingly, the access layer of the access layer device may include, for example, but is not limited to, an optical splitter, etc.
If some BNG devices in the target network have traffic burst abnormality and another BNG device has traffic burst abnormality, the cause of the traffic abnormality in the target network can be preliminarily located as a link failure between the BNG device having traffic burst abnormality and the access device. Further, the specific traffic anomaly reason of the target network can be determined based on the interface states of all the subinterfaces of the BNG device with the traffic sudden reduction anomaly matched with the abnormal broadband service of the BNG device. Specifically, if a part of subinterfaces, which are matched with the abnormal specified broadband service of the BNG device with abnormal traffic reduction, are in a closed state, it may be determined that the cause of the abnormal traffic of the target network is the failure of the subinterfaces in the closed state.
If all BNG devices in the target network have traffic sudden increase abnormity, the reason of the traffic abnormity of the target network can be determined to be a security attack event in the target network.
In a specific implementation, as shown in fig. 3, the step S206 may include:
s261, judging whether all BNG devices in the target network have abnormal traffic sudden reduction.
If the determination result is yes, it may be determined that the network device connected to the downlink port of the BNG device or the sub-interface where the BNG device is matched with the abnormal specified broadband service of the BNG device may have a fault, and the following steps S262 to S265 are further performed; if the determination result is no, the following steps S266 to S269 are performed.
S262, checking the interface states of all the sub-interfaces of the abnormal BNG device matched with the abnormal specified broadband service.
And S263, judging whether all the subinterfaces of the abnormal BNG equipment, which are matched with the abnormal specified broadband service of the abnormal BNG equipment, are in a closed state.
If yes, go to step S264; if the determination result is no, the following step S265 is executed.
And S264, determining the reason of the abnormal flow of the target network as the disconnection of the access equipment.
And S265, determining that the reason of the abnormal flow of the target network is the access side fault of the access equipment.
S266, judge whether some BNG devices in the target network have traffic burst abnormality, and the other BNG devices have traffic burst abnormality.
If yes, executing the following steps S267 to S268; if the determination result is no, the following step S268 is performed.
S267, checking the interface states of all the subinterfaces, matched with the abnormal specified broadband service, of the BNG equipment with the abnormal traffic sudden reduction.
And S268, if the partial subinterfaces matched with the abnormal specified broadband service are in a closed state, determining that the flow abnormality reason of the target network is the failure of the partial subinterfaces.
S269, determine the reason for the abnormal traffic in the target network is the occurrence of a security attack event in the target network.
It can be understood that, in the present solution, by analyzing the operating conditions of all BNG devices in the target network, and combining the abnormal type of the abnormal BNG device and the interface states of all sub-interfaces matched with the abnormal broadband service of the BNG device, the traffic abnormal cause of the target network is analyzed and located, so that the traffic abnormal cause can be specifically and accurately determined to the access device, the sub-interface of the BNG device, and the external event in the target network, and further, the operation and maintenance personnel can perform rapid operation and maintenance processing based on the traffic abnormal cause to ensure the normal operation of the target network.
Further, in order to ensure normal operation of the specified broadband service carried by the BNG, so as to improve user experience, the method for locating the abnormal cause provided in the embodiment of the present application may further include: when the reason of the abnormal traffic of the target network is determined to be the sub-interface fault matched with the abnormal specified broadband service of the BNG device with abnormal traffic sudden decrease, the sub-interface in the open state can be selected from all the sub-interfaces matched with the abnormal specified broadband service of the BNG device as the target sub-interface, and the connection between the access layer device and the target sub-interface is controlled to be in the conducting state, so that the link between the BNG device and the access layer device is ensured to be normal, and the abnormal specified broadband service can be recovered to be normal.
In another embodiment of the present application, in order to enable an operation and maintenance worker to timely know a reason for the abnormal traffic of the target network when the abnormal traffic occurs in the target network, so as to quickly perform operation and maintenance processing on the target network, after step S206, the method for locating the abnormal reason provided in the embodiment of the present application may further include: and generating and outputting early warning prompt information based on the reason and the type of the abnormal flow of the target network. The form of the early warning prompt message can be one or a combination of a plurality of forms such as voice, text, light and the like.
The foregoing description has been directed to specific embodiments of this disclosure. Other embodiments are within the scope of the following claims. In some cases, the actions or steps recited in the claims may be performed in a different order than in the embodiments and still achieve desirable results. In addition, the processes depicted in the accompanying figures do not necessarily require the particular order shown, or sequential order, to achieve desirable results. In some embodiments, multitasking and parallel processing may also be possible or may be advantageous.
Fig. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present application. Referring to fig. 4, at a hardware level, the electronic device includes a processor, and optionally further includes an internal bus, a network interface, and a memory. The Memory may include a Memory, such as a Random-Access Memory (RAM), and may further include a non-volatile Memory, such as at least 1 disk Memory. Of course, the electronic device may also include hardware required for other services.
The processor, the network interface, and the memory may be connected to each other via an internal bus, which may be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus, an EISA (Extended Industry Standard Architecture) bus, or the like. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one double-headed arrow is shown in FIG. 4, but this does not indicate only one bus or one type of bus.
And the memory is used for storing programs. In particular, the program may include program code comprising computer operating instructions. The memory may include both memory and non-volatile storage and provides instructions and data to the processor.
The processor reads the corresponding computer program from the nonvolatile memory to the memory and then runs the computer program to form the positioning device of the abnormal flow reason on the logic level. The processor is used for executing the program stored in the memory and is specifically used for executing the following operations:
monitoring the user number change condition of a specified broadband service borne by Broadband Network Gateway (BNG) equipment in a target network and the flow change condition of an uplink port, wherein the specified broadband service borne by the BNG equipment comprises a broadband internet access service and a broadband television service;
determining whether the BNG equipment is abnormal, and the abnormal specified broadband service and the abnormal type of the flow are determined based on the user number change condition of the specified broadband service borne by the BNG equipment and the flow change condition of the uplink port;
determining the abnormal flow reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the subinterface matched with the abnormal specified broadband service
The method executed by the device for locating the cause of the abnormal traffic as disclosed in the embodiment of fig. 2 of the present application may be applied to or implemented by a processor. The processor may be an integrated circuit chip having signal processing capabilities. In implementation, the steps of the above method may be performed by integrated logic circuits of hardware in a processor or by instructions in the form of software. The Processor may be a general-purpose Processor, including a Central Processing Unit (CPU), a Network Processor (NP), and the like; but also Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), Field Programmable Gate Arrays (FPGAs) or other Programmable logic devices, discrete Gate or transistor logic devices, discrete hardware components. The various methods, steps, and logic blocks disclosed in the embodiments of the present application may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in connection with the embodiments of the present application may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module may be located in ram, flash memory, rom, prom, or eprom, registers, etc. storage media as is well known in the art. The storage medium is located in a memory, and a processor reads information in the memory and completes the steps of the method in combination with hardware of the processor.
The electronic device may also execute the method in fig. 2, and implement the functions of the embodiment of the positioning device for the reason of the abnormal traffic as shown in fig. 2 to fig. 3, which are not described herein again in this embodiment of the present application.
Of course, besides the software implementation, the electronic device of the present application does not exclude other implementations, such as logic devices or a combination of software and hardware, and the like, that is, the execution subject of the following processing flow is not limited to each logic unit, and may also be hardware or logic devices.
Embodiments of the present application also provide a computer-readable storage medium storing one or more programs, where the one or more programs include instructions, which when executed by a portable electronic device including a plurality of application programs, enable the portable electronic device to perform the method of the embodiment shown in fig. 2, and are specifically configured to:
monitoring the user number change condition of a specified broadband service borne by Broadband Network Gateway (BNG) equipment in a target network and the flow change condition of an uplink port, wherein the specified broadband service borne by the BNG equipment comprises a broadband internet access service and a broadband television service;
determining whether the BNG equipment is abnormal, and the abnormal specified broadband service and the abnormal type of the flow are determined based on the user number change condition of the specified broadband service borne by the BNG equipment and the flow change condition of the uplink port;
and determining the abnormal flow reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the subinterface matched with the abnormal specified broadband service.
Fig. 5 is a schematic structural diagram of a positioning device for a cause of flow abnormality according to an embodiment of the present application. Referring to fig. 5, in a software implementation, the device 500 for locating the cause of the abnormal flow may include:
a monitoring unit 510, configured to monitor a change situation of a user number of an assigned broadband service borne by a broadband network gateway BNG device in a target network and a change situation of a traffic of an uplink port, where the assigned broadband service borne by the BNG device includes a broadband internet service and a broadband television service;
a determining unit 520, configured to determine whether the BNG device is abnormal, the abnormal specified broadband service, and the traffic abnormal type based on a change of a user number of the specified broadband service carried by the BNG device and a change of traffic of the uplink port;
a positioning unit 530, configured to determine a cause of traffic anomaly of the target network based on the anomaly type of the anomalous BNG device in the target network and the interface state of the sub-interface matched with the anomalous specified broadband service.
Optionally, the monitoring unit 510 is specifically configured to:
acquiring the number of users of the specified broadband service borne by the BNG equipment and the flow of an uplink port according to a set period;
corresponding to each appointed broadband service, determining the user number variation and the user number variation trend of the appointed broadband service in the adjacent period based on the user number of the appointed broadband service in each period;
and under the condition that the variable quantity of the number of users of any specified broadband service in an adjacent period exceeds a user number threshold value, determining the flow variable quantity and the flow variation trend of the uplink port in the adjacent period based on the flow of the uplink port in the adjacent period.
Optionally, the determining unit 520 is specifically configured to:
for each appointed broadband service carried by the BNG equipment, if the user number variation of the appointed broadband service in an adjacent period exceeds the user number threshold, determining that the appointed broadband service is an abnormal appointed broadband service;
determining that the BNG device is abnormal when at least one specified broadband service borne by the BNG device is an abnormal specified broadband service, the traffic variation of an uplink port of the BNG device in an adjacent period exceeds a traffic threshold, and the user number variation trend of the abnormal specified broadband service is the same as the traffic variation trend of the uplink port;
and determining the abnormal traffic type of the BNG equipment based on the user number variation trend of the abnormally-specified broadband service and/or the traffic variation trend of the uplink port.
Optionally, the traffic anomaly types include a traffic sudden-increase anomaly and a traffic sudden-decrease anomaly;
the positioning unit 530 is specifically configured to:
if all BNG devices in the target network have abnormal traffic sudden reduction and all sub-interfaces of the abnormal BNG devices matched with the abnormal specified broadband service of the abnormal BNG devices are in a closed state, determining that the reason of the abnormal traffic of the target network is that the access layer device is disconnected;
if all BNG devices in the target network have abnormal traffic sudden reduction and part of subinterfaces of the abnormal BNG devices, which are matched with the abnormal specified broadband services of the abnormal BNG devices, are in a closed state, determining that the reason of the abnormal traffic of the target network is the fault of the access side of the access layer device;
if some BNG devices in the target network have abnormal traffic sudden increase, another BNG devices have abnormal traffic sudden decrease, and some subinterfaces of the BNG devices with abnormal traffic sudden decrease, which are matched with the abnormal designated service of the BNG devices, are in a closed state, determining that the reason for the abnormal traffic of the target network is the failure of the partially matched subinterfaces;
and if all BNG devices in the target network have abnormal sudden flow increase, determining that the reason of the abnormal flow of the target network is a security attack event in the target network.
Optionally, the apparatus 500 further comprises:
a selecting unit, configured to select, when the positioning unit 530 determines that the cause of the traffic anomaly of the target network is the partial matching sub-interface failure, a sub-interface in an open state as a target sub-interface from all sub-interfaces of the BNG device having the traffic sudden decrease anomaly that match the abnormal specified service of the sub-interface;
and the switching unit is used for controlling the connection between the access layer equipment and the target sub-interface to be in a conducting state.
Optionally, the apparatus 500 further comprises:
and the warning unit is used for generating and outputting early warning prompt information based on the reason of the abnormal flow of the target network after the positioning unit determines the reason of the abnormal flow of the target network.
Through the abnormal positioner of flow that this application embodiment provided, through the user number situation of change of the flow change of the upper reaches port of BNG equipment in the target network and the broadband business that bears the weight of monitoring and analysis, whether automatic discernment target network takes place the flow anomaly and fixes a position the unusual reason of flow, whole process need not artifical the participation, efficiency and rate of accuracy are higher, be convenient for fortune dimension personnel carry out fault handling fast, guarantee the normal use of broadband business, possess higher practicality.
In short, the above description is only a preferred embodiment of the present application, and is not intended to limit the scope of the present application. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present application shall be included in the protection scope of the present application.
The systems, devices, modules or units illustrated in the above embodiments may be implemented by a computer chip or an entity, or by a product with certain functions. One typical implementation device is a computer. In particular, the computer may be, for example, a personal computer, a laptop computer, a cellular telephone, a camera phone, a smartphone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.
Computer-readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), Static Random Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), Digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.
It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element.
The embodiments in the present specification are described in a progressive manner, and the same and similar parts among the embodiments are referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, for the system embodiment, since it is substantially similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment.
Claims (10)
1. A method for positioning a flow abnormity reason is characterized by comprising the following steps:
monitoring the user number change condition of a specified broadband service borne by Broadband Network Gateway (BNG) equipment in a target network and the flow change condition of an uplink port, wherein the specified broadband service borne by the BNG equipment comprises a broadband internet access service and a broadband television service;
determining whether the BNG equipment is abnormal, and the abnormal specified broadband service and the abnormal type of the flow are determined based on the user number change condition of the specified broadband service borne by the BNG equipment and the flow change condition of the uplink port;
and determining the abnormal flow reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the subinterface matched with the abnormal specified broadband service.
2. The method according to claim 1, wherein monitoring a change of a subscriber amount of a specific broadband service and a change of a traffic amount of an uplink port carried by a Broadband Network Gateway (BNG) device in a target network comprises:
acquiring the number of users of the specified broadband service borne by the BNG equipment and the flow of an uplink port according to a set period;
corresponding to each appointed broadband service, determining the user quantity variation and the user quantity variation trend of the appointed broadband service in adjacent periods based on the user quantity of the appointed broadband service in each period;
and under the condition that the variable quantity of the number of users of any specified broadband service in an adjacent period exceeds a user number threshold value, determining the flow variable quantity and the flow variation trend of the uplink port in the adjacent period based on the flow of the uplink port in the adjacent period.
3. The method according to claim 2, wherein determining whether said BNG device is abnormal, abnormally designated broadband service and abnormal type of traffic based on a change in a number of users of the designated broadband service carried by said BNG device and a change in traffic of an uplink port comprises:
for each appointed broadband service carried by the BNG equipment, if the user number variation of the appointed broadband service in an adjacent period exceeds the user number threshold, determining that the appointed broadband service is an abnormal appointed broadband service;
determining that the BNG device is abnormal when at least one specified broadband service borne by the BNG device is an abnormal specified broadband service, the traffic variation of an uplink port of the BNG device in an adjacent period exceeds a traffic threshold, and the user number variation trend of the abnormal specified broadband service is the same as the traffic variation trend of the uplink port;
and determining the abnormal traffic type of the BNG equipment based on the user number variation trend of the abnormally-specified broadband service and/or the traffic variation trend of the uplink port.
4. The method of claim 1, wherein the traffic anomaly types include a traffic bump anomaly and a traffic bump anomaly;
determining the reason of the abnormal traffic of the target network based on the abnormal type of the abnormal BNG device in the target network and the interface state of the subinterface matched with the abnormal specified broadband service, including:
if all BNG devices in the target network have abnormal traffic sudden reduction and all sub-interfaces of the abnormal BNG devices matched with the abnormal specified broadband service of the abnormal BNG devices are in a closed state, determining that the reason of the abnormal traffic of the target network is that the access layer device is disconnected;
if all BNG devices in the target network have abnormal traffic sudden reduction and part of subinterfaces of the abnormal BNG devices, which are matched with the abnormal specified broadband service of the abnormal BNG devices, are in a closed state, determining that the reason of the abnormal traffic of the target network is the fault of the access side of the access layer device;
if the traffic sudden increase abnormality occurs to part of the BNG devices in the target network, the traffic sudden decrease abnormality occurs to the other part of the BNG devices, and the part of subinterfaces, matched with the abnormal specified services of the BNG devices in which the traffic sudden decrease abnormality occurs, of the BNG devices in the target network is in a closed state, determining that the cause of the traffic abnormality of the target network is the sub-interface failure in partial matching;
and if all BNG devices in the target network have abnormal sudden flow increase, determining that the reason of the abnormal flow of the target network is a security attack event in the target network.
5. The method of claim 4, wherein in the case that it is determined that the cause of the traffic anomaly of the target network is the failure of the partially matched subinterface, the method further comprises:
selecting a subinterface in an open state as a target subinterface from all subinterfaces of BNG equipment with abnormal traffic reduction abnormality, which are matched with the abnormal specified service of the BNG equipment;
and controlling the connection between the access layer equipment and the target subinterface to be in a conducting state.
6. The method of claim 1, wherein after determining the cause of the traffic anomaly for the target network, the method further comprises:
and generating and outputting early warning prompt information based on the reason of the abnormal flow of the target network.
7. A flow anomaly cause positioning device is characterized by comprising:
the system comprises a monitoring unit, a service management unit and a service management unit, wherein the monitoring unit is used for monitoring the change condition of the user number of the specified broadband service borne by the broadband network gateway BNG equipment in a target network and the change condition of the flow of an uplink port, and the specified broadband service borne by the BNG equipment comprises a broadband internet access service and a broadband television service;
a determining unit, configured to determine whether the BNG device is abnormal, the abnormal specified broadband service, and the traffic abnormal type based on a change of a user number of the specified broadband service carried by the BNG device and a change of traffic of an uplink port;
and the positioning unit is used for determining the reason of the abnormal flow of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the subinterface matched with the abnormal specified broadband service.
8. The apparatus of claim 7, further comprising:
and the warning unit is used for generating and outputting early warning prompt information based on the reason of the abnormal flow of the target network.
9. An electronic device, comprising:
a processor;
a memory for storing the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the method of any one of claims 1 to 6.
10. A computer-readable storage medium in which instructions, when executed by a processor of an electronic device, enable the electronic device to perform the method of any of claims 1-6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011278057.XA CN114584329B (en) | 2020-11-16 | 2020-11-16 | Positioning method and device for reasons of abnormal flow and electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202011278057.XA CN114584329B (en) | 2020-11-16 | 2020-11-16 | Positioning method and device for reasons of abnormal flow and electronic equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN114584329A true CN114584329A (en) | 2022-06-03 |
| CN114584329B CN114584329B (en) | 2023-09-05 |
Family
ID=81768506
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202011278057.XA Active CN114584329B (en) | 2020-11-16 | 2020-11-16 | Positioning method and device for reasons of abnormal flow and electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN114584329B (en) |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101312456A (en) * | 2007-05-21 | 2008-11-26 | 华为技术有限公司 | Method and system for survival monitoring session of subscriber |
| US20140269724A1 (en) * | 2013-03-04 | 2014-09-18 | Telefonaktiebolaget L M Ericsson (Publ) | Method and devices for forwarding ip data packets in an access network |
| US20150319069A1 (en) * | 2014-04-28 | 2015-11-05 | Huawei Technologies Co., Ltd. | Method, Apparatus, and System for Identifying Abnormal IP Data Stream |
| CN108270600A (en) * | 2016-12-30 | 2018-07-10 | 中国移动通信集团黑龙江有限公司 | A kind of processing method and associated server to malicious attack flow |
| CN109104475A (en) * | 2018-07-27 | 2018-12-28 | 新华三技术有限公司 | Connect restoration methods, apparatus and system |
| CN109150569A (en) * | 2017-06-27 | 2019-01-04 | 中国移动通信集团北京有限公司 | A kind of network video service fault locating analysis method, apparatus and system |
| CN111064759A (en) * | 2018-10-17 | 2020-04-24 | 中兴通讯股份有限公司 | User online method, device, broadband remote access server and storage medium |
-
2020
- 2020-11-16 CN CN202011278057.XA patent/CN114584329B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101312456A (en) * | 2007-05-21 | 2008-11-26 | 华为技术有限公司 | Method and system for survival monitoring session of subscriber |
| US20140269724A1 (en) * | 2013-03-04 | 2014-09-18 | Telefonaktiebolaget L M Ericsson (Publ) | Method and devices for forwarding ip data packets in an access network |
| US20150319069A1 (en) * | 2014-04-28 | 2015-11-05 | Huawei Technologies Co., Ltd. | Method, Apparatus, and System for Identifying Abnormal IP Data Stream |
| CN108270600A (en) * | 2016-12-30 | 2018-07-10 | 中国移动通信集团黑龙江有限公司 | A kind of processing method and associated server to malicious attack flow |
| CN109150569A (en) * | 2017-06-27 | 2019-01-04 | 中国移动通信集团北京有限公司 | A kind of network video service fault locating analysis method, apparatus and system |
| CN109104475A (en) * | 2018-07-27 | 2018-12-28 | 新华三技术有限公司 | Connect restoration methods, apparatus and system |
| CN111064759A (en) * | 2018-10-17 | 2020-04-24 | 中兴通讯股份有限公司 | User online method, device, broadband remote access server and storage medium |
Non-Patent Citations (1)
| Title |
|---|
| 廖伟全;喻林峰;李继龙;江圣;周圆圆;: "基于城域网与GPON组网的OLT双上联流量均衡研究与应用", 通信技术, no. 09 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN114584329B (en) | 2023-09-05 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108322351B (en) | Method and device for generating topological graph and method and device for determining faults | |
| CN110650036A (en) | Alarm processing method and device and electronic equipment | |
| CN109327353B (en) | Service flow determination method and device and electronic equipment | |
| CN111488289B (en) | Fault positioning method, device and equipment | |
| CN112350836B (en) | Abnormal positioning method and device of Internet of things and electronic equipment | |
| CN112311611A (en) | Data anomaly monitoring method and device and electronic equipment | |
| CN111865665B (en) | Network equipment fault self-healing method and device | |
| CN104901833B (en) | A kind of method and device for the equipment that notes abnormalities | |
| CN111192130A (en) | Method, system, device and storage medium for determining fault source in transaction monitoring | |
| CN114844768A (en) | Information analysis method and device and electronic equipment | |
| CN112152833B (en) | Network abnormity alarm method and device and electronic equipment | |
| CN115858311A (en) | Operation and maintenance monitoring method and device, electronic equipment and readable storage medium | |
| CN109710474B (en) | Hard disk fault detection method and device, terminal and readable storage medium | |
| CN114301800A (en) | Network equipment quality difference analysis method and device | |
| CN113347654B (en) | Method and device for determining fault type of out-of-service base station | |
| CN111949421B (en) | SDK calling method, device, electronic equipment and computer readable storage medium | |
| CN114584329A (en) | Method and device for positioning reasons of abnormal flow and electronic equipment | |
| CN112686542A (en) | Service processing method and device, electronic equipment and storage medium | |
| CN111143151B (en) | Service monitoring method and device and electronic equipment | |
| CN108880930B (en) | Network loop detection method and equipment | |
| CN105610800A (en) | Abnormal data processing method and abnormal data processing apparatus | |
| US20230111216A1 (en) | System and Method for Identifying and Handling Data Quality Anomalies | |
| CN115033927A (en) | Method, device, equipment and medium for detecting data integrity | |
| CN110659178B (en) | System running state adjusting method and device, storage medium and electronic equipment | |
| CN114037539A (en) | Method and device for detecting single-link failure of insurance |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |