CN114584329B - Positioning method and device for reasons of abnormal flow and electronic equipment - Google Patents

Positioning method and device for reasons of abnormal flow and electronic equipment Download PDF

Info

Publication number
CN114584329B
CN114584329B CN202011278057.XA CN202011278057A CN114584329B CN 114584329 B CN114584329 B CN 114584329B CN 202011278057 A CN202011278057 A CN 202011278057A CN 114584329 B CN114584329 B CN 114584329B
Authority
CN
China
Prior art keywords
flow
abnormal
bng
target network
broadband service
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202011278057.XA
Other languages
Chinese (zh)
Other versions
CN114584329A (en
Inventor
黄立伟
班颖
田文庆
赖光昭
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Group Guangdong Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Group Guangdong Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Group Guangdong Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN202011278057.XA priority Critical patent/CN114584329B/en
Publication of CN114584329A publication Critical patent/CN114584329A/en
Application granted granted Critical
Publication of CN114584329B publication Critical patent/CN114584329B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/14Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1408Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
    • H04L63/1425Traffic logging, e.g. anomaly detection
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0677Localisation of faults
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00Reducing energy consumption in communication networks
    • Y02D30/50Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The application discloses a method and a device for positioning a cause of flow abnormality and electronic equipment, which at least solve the problems of low efficiency and low accuracy in the existing network flow abnormality detection technology. The method comprises the following steps: monitoring the user number change condition of a designated broadband service carried by broadband network gateway BNG equipment in a target network and the flow change condition of an uplink port, wherein the designated broadband service carried by BNG equipment comprises broadband internet service and broadband television service; determining whether the BNG equipment is abnormal, the abnormal specified broadband service and the abnormal flow type based on the user number change condition of the specified broadband service carried by the BNG equipment and the flow change condition of an uplink port; and determining the flow abnormality reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the sub-interface matched with the abnormal specified broadband service.

Description

Positioning method and device for reasons of abnormal flow and electronic equipment
Technical Field
The present application relates to the field of network communications technologies, and in particular, to a method and an apparatus for locating a cause of a traffic abnormality, and an electronic device.
Background
In the existing network flow abnormality detection technology, after receiving a flow abnormality alarm of a network, operation and maintenance personnel analyze and check the operation conditions of all network devices in the network one by one to track the cause of the flow abnormality alarm. The process of manually checking the cause of the flow abnormality is relatively time-consuming and low in efficiency, and has higher dependence on the maintenance experience of operation and maintenance personnel, so that the accuracy cannot be ensured.
Disclosure of Invention
The embodiment of the application provides a method and a device for positioning a cause of flow abnormality and electronic equipment, which are used for at least solving the problems of low efficiency and low accuracy in the existing network flow abnormality detection technology.
In order to solve the technical problems, the embodiment of the application adopts the following technical scheme:
in a first aspect, an embodiment of the present application provides a method for locating a cause of a traffic abnormality, including:
monitoring the user number change condition of a designated broadband service carried by broadband network gateway BNG equipment in a target network and the flow change condition of an uplink port, wherein the designated broadband service carried by BNG equipment comprises broadband internet service and broadband television service;
determining whether the BNG equipment is abnormal, the abnormal specified broadband service and the abnormal flow type based on the user number change condition of the specified broadband service carried by the BNG equipment and the flow change condition of an uplink port;
And determining the flow abnormality reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the sub-interface matched with the abnormal specified broadband service.
Optionally, monitoring a user number change condition of a specified broadband service carried by a broadband network gateway BNG device in a target network and a flow change condition of an uplink port includes:
collecting the number of users of the specified broadband service carried by the BNG equipment and the flow of an uplink port according to a set period;
corresponding to each appointed broadband service, determining the user quantity change and the user quantity change trend of the appointed broadband service in adjacent periods based on the user quantity of the appointed broadband service in each period;
and under the condition that the variation of the number of users of any specified broadband service in the adjacent period exceeds a user number threshold, determining the flow variation and the flow variation trend of the uplink port in the adjacent period based on the flow of the uplink port in the adjacent period.
Optionally, determining whether the BNG device is abnormal, the abnormal specified broadband service and the abnormal traffic type based on the user number change condition of the specified broadband service and the traffic change condition of the uplink port carried by the BNG device includes:
For each appointed broadband service carried by the BNG equipment, if the user quantity variation of the appointed broadband service in the adjacent period exceeds the user quantity threshold value, determining that the appointed broadband service is an abnormal appointed broadband service;
determining that the BNG equipment is abnormal when at least one specified broadband service carried by the BNG equipment is an abnormal specified broadband service, the flow variation of an uplink port of the BNG equipment in an adjacent period exceeds a flow threshold, and the user number variation trend of the abnormal specified broadband service is the same as the flow variation trend of the uplink port;
and determining the abnormal flow type of the BNG equipment based on the user number change trend of the abnormal specified broadband service and/or the flow change trend of the uplink port.
Optionally, the flow anomaly type includes a flow sudden anomaly and a flow sudden anomaly;
determining a cause of traffic anomalies in the target network based on the anomaly type of the anomalous BNG device in the target network and the interface state of the sub-interface matched with the anomalous specified broadband service, including:
if all BNG devices in the target network have abnormal flow sudden decrease and all sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the flow abnormality of the target network is caused by the fact that the access layer device is out of the tube;
If all BNG devices in the target network have abnormal flow sudden decrease and partial sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the abnormal flow of the target network is caused by the access side fault of the access layer device;
if the flow sudden increase abnormality occurs in part of BNG equipment in the target network, the flow sudden decrease abnormality occurs in the other part of BNG equipment, and part of sub-interfaces of the BNG equipment matched with own abnormal appointed service, which occur the flow sudden decrease abnormality, are in a closed state, determining that the flow abnormality of the target network is caused by the fault of the sub-interfaces matched with the part;
if all BNG devices in the target network have abnormal flow sudden increase, determining that the abnormal flow of the target network is caused by a security attack event in the target network.
Optionally, in the case that it is determined that the traffic abnormality of the target network is due to the failure of the partially matched subinterface, the method further includes:
selecting a sub-interface in an open state from all sub-interfaces of BNG equipment with abnormal flow sudden decrease and matched with own abnormal appointed service as a target sub-interface;
And controlling the connection between the access layer equipment and the target sub-interface to be in a conducting state.
Optionally, after determining the cause of the traffic abnormality of the target network, the method further includes:
and generating and outputting early warning prompt information based on the flow abnormality reason of the target network.
In a second aspect, an embodiment of the present application provides a flow abnormality cause positioning device, including:
the monitoring unit is used for monitoring the user number change condition of the appointed broadband service carried by the broadband network gateway BNG equipment in the target network and the flow change condition of the uplink port, wherein the appointed broadband service carried by the BNG equipment comprises broadband internet service and broadband television service;
the judging unit is used for determining whether the BNG equipment is abnormal, the abnormal specified broadband service and the abnormal flow type based on the user number change condition of the specified broadband service carried by the BNG equipment and the flow change condition of the uplink port;
and the positioning unit is used for determining the flow abnormality reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the sub-interface matched with the abnormal specified broadband service.
Optionally, the monitoring unit is specifically configured to:
collecting the number of users of the specified broadband service carried by the BNG equipment and the flow of an uplink port according to a set period;
corresponding to each appointed broadband service, determining the user quantity change and the user quantity change trend of the appointed broadband service in adjacent periods based on the user quantity of the appointed broadband service in each period;
and under the condition that the variation of the number of users of any specified broadband service in the adjacent period exceeds a user number threshold, determining the flow variation and the flow variation trend of the uplink port in the adjacent period based on the flow of the uplink port in the adjacent period.
Optionally, the distinguishing unit is specifically configured to:
for each appointed broadband service carried by the BNG equipment, if the user quantity variation of the appointed broadband service in the adjacent period exceeds the user quantity threshold value, determining that the appointed broadband service is an abnormal appointed broadband service;
determining that the BNG equipment is abnormal when at least one specified broadband service carried by the BNG equipment is an abnormal specified broadband service, the flow variation of an uplink port of the BNG equipment in an adjacent period exceeds a flow threshold, and the user number variation trend of the abnormal specified broadband service is the same as the flow variation trend of the uplink port;
And determining the abnormal flow type of the BNG equipment based on the user number change trend of the abnormal specified broadband service and/or the flow change trend of the uplink port.
Optionally, the flow anomaly type includes a flow sudden anomaly and a flow sudden anomaly;
the positioning unit is specifically used for:
if all BNG devices in the target network have abnormal flow sudden decrease and all sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the flow abnormality of the target network is caused by the fact that the access layer device is out of the tube;
if all BNG devices in the target network have abnormal flow sudden decrease and partial sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the abnormal flow of the target network is caused by the access side fault of the access layer device;
if the flow sudden increase abnormality occurs in part of BNG equipment in the target network, the flow sudden decrease abnormality occurs in the other part of BNG equipment, and part of sub-interfaces of the BNG equipment matched with own abnormal appointed service, which occur the flow sudden decrease abnormality, are in a closed state, determining that the flow abnormality of the target network is caused by the fault of the sub-interfaces matched with the part;
If all BNG devices in the target network have abnormal flow sudden increase, determining that the abnormal flow of the target network is caused by a security attack event in the target network.
Optionally, the apparatus further comprises:
a selecting unit, configured to select, when the positioning unit determines that the cause of the traffic abnormality of the target network is the sub-interface fault that is partially matched, a sub-interface that is in an on state from all sub-interfaces of the BNG device that is experiencing the traffic surge abnormality and that is matched with the own abnormality specified service as a target sub-interface;
and the switching unit is used for controlling the connection between the access layer equipment and the target sub-interface to be in a conducting state.
Optionally, the apparatus further comprises:
and the alarm unit is used for generating and outputting early warning prompt information based on the flow abnormality reason of the target network after the positioning unit determines the flow abnormality reason of the target network.
In a third aspect, an embodiment of the present application provides an electronic device, including:
a processor;
a memory for storing the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the method according to the first aspect.
In a fourth aspect, embodiments of the present application provide a computer readable storage medium, which when executed by a processor of an electronic device, enables the electronic device to perform the method of the first aspect.
The above at least one technical scheme adopted by the embodiment of the application can achieve the following beneficial effects:
by monitoring and analyzing the flow change condition of the uplink port of BNG equipment in the target network and the user number change condition of the loaded broadband service, automatically identifying whether the target network is abnormal in flow and positioning the cause of the abnormal flow, the whole process is free of manual participation, the efficiency and the accuracy are higher, operation and maintenance personnel can conveniently and rapidly conduct fault treatment, normal use of the broadband service is guaranteed, and the method has higher practicability.
Drawings
The accompanying drawings, which are included to provide a further understanding of the application and are incorporated in and constitute a part of this specification, illustrate embodiments of the application and together with the description serve to explain the application and do not constitute a limitation on the application. In the drawings:
fig. 1 is a schematic diagram of a networking architecture of a target network according to an embodiment of the present application;
fig. 2 is a flowchart of a flow anomaly cause positioning method according to an embodiment of the present application;
FIG. 3 is a flowchart of another flow anomaly cause positioning method according to an embodiment of the present application;
fig. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present application;
fig. 5 is a schematic structural diagram of a positioning device for flow abnormality reasons according to an embodiment of the present application.
Detailed Description
In order to make the objects, technical solutions and advantages of the present application more apparent, the technical solutions of the present application will be clearly and completely described below with reference to specific embodiments of the present application and corresponding drawings. It will be apparent that the described embodiments are only some, but not all, embodiments of the application. All other embodiments, which can be made by those skilled in the art based on the embodiments of the application without making any inventive effort, are intended to be within the scope of the application.
The following describes in detail the technical solutions provided by the embodiments of the present application with reference to the accompanying drawings.
Before explaining the flow abnormality cause positioning method provided by the embodiment of the present application, first, a description is given of a target network related to the embodiment of the present application. Fig. 1 is a schematic diagram of a networking architecture of a target network according to an embodiment of the present application. As shown in fig. 1, the target network according to the embodiment of the present application includes: the device in the convergence layer comprises a Core Router (CR), the device in the service control layer comprises a broadband network gateway (Broadband Network Gateway, BNG) device, and the device in the access layer comprises an optical line terminal (Optical Line Terminal, OLT). It should be noted that, in the target network according to the embodiment of the present application, the number of OLT, BNG devices and CR may be one or more, and may be specifically determined according to actual needs, and the number of OLT, BNG devices and CR in the embodiment of the present application is not specifically limited. Fig. 1 includes only one OLT, two BNG devices (i.e., BNG1 and BNG 2), and two CRs (i.e., CR1 and CR2 schematic) with the target network.
In the target network, the OLT is connected to the downlink port of the BNG, and the uplink port of the BNG is connected to the CR. Thus, a link is formed between the OLT, the BNG, and the CR, and a broadband network provided by the mobile operator can be accessed through the link, so that corresponding broadband network services, including broadband internet service, broadband television service, and the like, for example, are realized, which is not particularly limited in the embodiment of the present application.
When a traffic abnormality occurs in the target network, for example, the traffic of a certain link is suddenly increased or reduced, the normal operation of the corresponding network equipment in the target network is affected, and further, the broadband network service is affected, so that it is very important to analyze and locate the cause of the traffic abnormality of the target network.
At present, for positioning of the cause of the flow abnormality, the operation and maintenance personnel usually analyze and check each network device in the target network one by one to determine the cause of the flow abnormality, the whole checking process is relatively time-consuming and low in efficiency, and the operation and maintenance personnel have higher dependency on maintenance experience, so that the accuracy cannot be guaranteed.
Aiming at the problems, the embodiment of the application provides a method, a device and an electronic device for positioning the cause of flow abnormality, which are used for automatically identifying whether the target network is abnormal in flow and positioning the cause of the flow abnormality by monitoring and analyzing the flow change condition of an uplink port of BNG equipment in the target network and the user number change condition of a loaded broadband service.
Based on the target network shown in fig. 1, an embodiment of the present application provides a method for locating a cause of a traffic abnormality, which is applied to an electronic device, where the electronic device may be, for example, a server (such as a server of a broadband service provider). Referring to fig. 2, fig. 2 is a flowchart of a flow anomaly cause positioning method according to an embodiment of the present application, as shown in fig. 2, the method includes the following steps:
s202, monitoring the user quantity change condition of the appointed broadband service carried by BNG equipment in the target network and the flow change condition of the uplink port.
The specified broadband service carried by the BNG equipment comprises broadband internet service and broadband television service.
The user number change condition of the specified broadband service may include, but is not limited to, information such as a change amount and a change trend of the user number of the specified broadband service. The flow change condition of the uplink port of the BNG device may specifically include information such as a flow change amount and a change trend of the uplink port of the BNG device.
Optionally, for each BNG device in the target network, the number of users of the specified broadband service carried by the BNG device and the flow of the uplink port of the BNG device may be collected according to a set period, and the change condition of the number of users of the specified broadband service carried by the BNG device and the change condition of the flow of the uplink port of the BNG device may be obtained by comparing the data collected in adjacent periods.
Specifically, for each specified broadband service carried by the BNG device, the user number variation and the user number variation trend of the specified broadband service in adjacent periods can be determined based on the user number of the specified broadband service in each period, so as to obtain the user number variation condition of the specified broadband service carried by the BNG device. For the flow of the uplink port of the BNG device, the flow variation and the flow variation trend of the uplink port of the BNG device in adjacent periods can be determined based on the flow of the uplink port of the BNG device in each period, thereby obtaining the flow variation condition of the uplink port of the BNG device.
In practical application, the determination of the user number change condition of the designated broadband service carried by the BNG device and the determination of the flow change condition of the uplink port of the BNG device may be performed simultaneously or sequentially.
Considering that the user number change trend of the specified broadband service carried by the BNG device is approximately the same as the traffic change trend of the uplink port of the BNG device, in a preferred scheme, the user number change condition of the specified broadband service carried by the BNG device can be monitored first, and the traffic change condition of the uplink port of the BNG device can be monitored again under the condition that the user number of the specified broadband service is suddenly changed.
Specifically, as shown in fig. 3, the step S202 may include:
s221, the number of users of the appointed broadband service and the flow of the uplink port carried by the BNG equipment are collected according to the set period.
S222, for each appointed broadband service carried by BNG equipment, determining the user quantity variation and user quantity variation trend of the appointed broadband service in adjacent periods based on the user quantity of the appointed broadband service in each period.
Specifically, for each specified broadband service carried by the BNG device, the difference between the number of users of the specified broadband service in the current period and the number of users in the previous period may be determined as the user number variation of the specified broadband service carried by the BNG device in the current period, and if the user number variation is greater than a preset value (e.g., 0), it may be determined that the user number variation trend of the specified broadband service carried by the BNG device in the current period is that the number of users increases, otherwise, it may be determined that the user number variation trend of the specified broadband service carried by the BNG device in the current period is that the number of users decreases.
S223, under the condition that the variation of the number of users of any specified broadband service carried by BNG equipment in the adjacent period exceeds a user number threshold, determining the variation of the flow and the variation trend of the flow of the uplink port of the BNG equipment in the adjacent period based on the flow of the uplink port of the BNG equipment in the adjacent period.
And under the condition that the user quantity variation of any appointed broadband service carried by BNG equipment in the current period exceeds a user quantity threshold value, judging that the appointed broadband service carried by BNG equipment has user quantity mutation in the current period, and monitoring the flow quantity variation condition of the BNG equipment in the current period.
Specifically, the difference between the flow of the uplink port of the BNG device in the current period and the flow of the uplink port of the BNG device in the previous period may be determined as the flow variation of the uplink port of the BNG device in the current period, and if the flow variation is greater than a preset value (e.g., 0), it may be determined that the flow variation trend of the uplink port of the BNG device in the current period is that the flow increases, otherwise, it may be determined that the flow variation trend of the uplink port of the BNG device in the current period is that the flow decreases.
It should be noted that, the granularity of the above-mentioned cycle may be set by user-defined according to actual needs, and the embodiment of the present application does not specifically limit the granularity of the above-mentioned cycle.
It can be understood that in the scheme, when the mutation of the number of users of any specified broadband service carried by the BNG device is monitored, the traffic change condition of the uplink port of the BNG device is monitored, so that the workload of the electronic device can be reduced and the occupation of the processing resources of the electronic device can be reduced compared with the condition of monitoring the traffic change condition of the uplink port of the BNG device and the traffic change condition of the uplink port of the BNG device.
S204, determining whether the BNG equipment is abnormal, the abnormal specified broadband service and the abnormal flow type based on the user number change condition of the specified broadband service carried by the BNG equipment and the flow change condition of the uplink port.
In general, the flow change trend of the uplink port of the BNG device is approximately the same as the user number change trend of the designated broadband service carried by the BNG device, that is, the number of users of the designated broadband service increases, and the flow of the uplink port also increases; the number of users specifying broadband services decreases and the traffic on the upstream port decreases. And, under normal conditions, the changes of both tend to be smooth. Based on the above, whether the BNG device generates the flow abnormality and the flow abnormality type can be determined according to the change conditions of the BNG device and the BNG device.
Specifically, for each BNG device, if the number of users of any specified broadband service carried by the BNG device is suddenly changed, the traffic of the uplink port of the BNG device is suddenly changed, and the change trends of the two are the same, determining that the BNG device has traffic abnormality. The abrupt change of the number of users of the designated broadband service means that the change of the number of users of the designated broadband exceeds a user number threshold, and the abrupt change of the flow of the uplink port means that the change of the flow of the uplink port exceeds a flow threshold. It should be noted that, the user number threshold and the traffic threshold may be set by user definition according to actual needs, and the values of the user number threshold and the traffic threshold in the embodiment of the present application are not specifically limited.
Further, the traffic anomaly type of the BNG device may be determined based on a user number variation trend of the specified broadband service and/or a variation trend of the uplink traffic carried by the BNG device, where the traffic anomaly type of the BNG device includes a traffic surge anomaly and a traffic surge anomaly. Specifically, for each BNG device with traffic abnormality, if the change trend of the number of users of the specified broadband with abrupt user change carried by the BNG device is that the number of users is increased, and the change trend of the traffic of the uplink port of the BNG device is that the traffic is increased, determining that the traffic abnormality type of the BNG device is that the traffic is abrupt; if the user number change trend of the broadband service with the user number mutation carried by the BNG equipment is that the user number is reduced, and the flow change trend of the uplink port of the BNG equipment is that the flow is reduced, determining that the flow abnormality type of the BNG equipment is that the flow is suddenly reduced.
S206, determining the flow abnormality reason of the target network based on the abnormality type of the abnormal BNG equipment in the target network and the interface state of the sub-interface matched with the abnormal specified broadband service.
In general, the interface state of the subinterface where the BNG device in the target network matches the carried specified broadband service will affect the number of users of the specified broadband service carried by the BNG device and the traffic of the uplink port of the BNG device, so that the abnormal type of the abnormal BNG device in the target network and the interface state of the subinterface matching the abnormal specified broadband service can be synthesized to analyze and locate the traffic abnormality cause of the target network.
By monitoring and analyzing the flow change condition of the uplink port of BNG equipment in the target network and the user number change condition of the loaded broadband service, the flow abnormality reason positioning method provided by the embodiment of the application automatically identifies whether the target network has flow abnormality and positions the flow abnormality reason, the whole process does not need manual participation, the efficiency and the accuracy are higher, the operation and maintenance personnel can conveniently and rapidly perform fault processing, the normal use of the broadband service is ensured, and the method has higher practicability.
In one embodiment, for the step S206, if the traffic sudden decrease abnormality occurs in all BNG devices in the target network, the cause of the traffic abnormality in the target network may be initially located as the access side problem of the BNG device. Further, the specific traffic abnormality cause of the target network may be determined based on interface states of all sub-interfaces of the abnormal BNG device that match with the own abnormal specified broadband traffic. Specifically, if all sub-interfaces of the abnormal BNG device, which are matched with the self-abnormal specified broadband service, are in a closed state, it can be determined that the flow abnormality of the target network is caused by the fact that the access layer device is out of the tube; if the partial subinterfaces of the abnormal BNG equipment matched with the self abnormal specified broadband service are in a closed state, the flow abnormality of the target network can be determined to be caused by the access side fault of the access layer equipment. The access layer device may include an OLT as shown in fig. 1, and accordingly, the access layer of the access layer device may include, for example, but not limited to, a splitter, and the like.
If a part of BNG devices in the target network have abnormal flow sudden increase and another part of BNG devices have abnormal flow sudden decrease, the cause of the abnormal flow of the target network can be initially positioned as the link fault between the BNG devices with the sudden decrease and the access device. Further, the specific traffic abnormality cause of the target network can be determined based on the interface states of all sub-interfaces where the BNG device with the traffic sudden decrease abnormality matches with the own abnormality specified broadband service. Specifically, if the BNG device with the traffic-sudden-decrease abnormality is in the closed state with the sub-interface of the part matched with the broadband service specified by the abnormal abnormality, it can be determined that the traffic abnormality of the target network is caused by the sub-interface fault of the part in the closed state.
If all BNG devices in the target network have abnormal flow sudden increase, the cause of the abnormal flow of the target network can be determined as a security attack event in the target network.
In particular, as shown in fig. 3, the step S206 may include:
s261, judging whether all BNG devices in the target network have abnormal flow sudden decrease.
If the determination result is yes, it may be determined that a network device connected to the downlink port of the BNG device or a subinterface where the BNG device matches with the own abnormally specified broadband service may have a fault, and the following steps S262 to S265 are further executed; if the determination result is no, the following steps S266 to S269 are performed.
S262, checking interface states of all sub-interfaces of the abnormal BNG device, which are matched with the self-abnormal specified broadband service.
S263, judging whether all sub interfaces of the abnormal BNG equipment matched with the self abnormal specified broadband service are in a closed state or not.
If yes, executing the following step S264; if the determination result is no, the following step S265 is executed.
S264, determining that the traffic abnormality cause of the target network is that the access equipment is out of the pipe.
S265, determining that the traffic abnormality cause of the target network is an access side fault of the access device.
S266, judging whether a part of BNG devices in the target network generate abnormal flow sudden increase, and the other part of BNG devices generate abnormal flow sudden decrease.
If yes, the following steps S267 to S268 are executed; if the determination result is no, the following step S268 is executed.
S267, checking interface states of all sub-interfaces of BNG equipment with abnormal flow sudden decrease and matched with the self abnormal specified broadband service.
And S268, if the partial sub-interfaces matched with the self abnormal designated broadband service are in a closed state, determining that the flow abnormality of the target network is caused by the failure of the partial sub-interfaces.
S269, determining that the traffic abnormality reason of the target network is that a security attack event occurs in the target network.
It can be understood that in the scheme, by analyzing the operation conditions of all BNG devices in the target network and combining the abnormal types of the abnormal BNG devices and the interface states of all sub-interfaces matched with the broadband service specified by the abnormal BNG devices, the flow abnormality reasons of the target network are analyzed and positioned, so that the flow abnormality reasons can be specifically and accurately reached to the access devices, the sub-interfaces of the BNG devices and the external events in the target network, and further, operation and maintenance personnel can perform quick operation and maintenance processing based on the flow abnormality reasons so as to ensure the normal operation of the target network.
Further, in order to ensure normal operation of the specified broadband service carried by the BNG so as to improve user experience, the method for locating the abnormal cause provided by the embodiment of the application may further include: under the condition that the traffic abnormality of the target network is determined to be due to the occurrence of the sub-interface fault of the BNG equipment with abnormal traffic suddenly and matched with the self-abnormality specified broadband service, the sub-interface in the opening state is selected from all sub-interfaces of the BNG equipment matched with the self-abnormality specified broadband service to serve as a target sub-interface, and the connection between the access layer equipment and the target sub-interface is controlled to be in a conducting state so as to ensure that the link between the BNG equipment and the access layer equipment is normal, and further the abnormal specified broadband service can be recovered to be normal.
In another embodiment of the present application, in order to enable an operator to timely acquire a cause of a traffic abnormality of a target network when the traffic abnormality occurs in the target network, so as to quickly perform an operation and maintenance process on the target network, after the step S206, the method for locating an abnormality cause provided by the embodiment of the present application may further include: and generating and outputting early warning prompt information based on the flow abnormality reasons and the flow abnormality types of the target network. The early warning prompt information can be in the form of one or more of voice, text, lamplight and the like.
The foregoing describes specific embodiments of the present disclosure. Other embodiments are within the scope of the following claims. In some cases, the actions or steps recited in the claims can be performed in a different order than in the embodiments and still achieve desirable results. In addition, the processes depicted in the accompanying figures do not necessarily require the particular order shown, or sequential order, to achieve desirable results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
Fig. 4 is a schematic structural view of an electronic device according to an embodiment of the present application. Referring to fig. 4, at the hardware level, the electronic device includes a processor, and optionally an internal bus, a network interface, and a memory. The Memory may include a Memory, such as a Random-Access Memory (RAM), and may further include a non-volatile Memory (non-volatile Memory), such as at least 1 disk Memory. Of course, the electronic device may also include hardware required for other services.
The processor, network interface, and memory may be interconnected by an internal bus, which may be an ISA (Industry Standard Architecture ) bus, a PCI (Peripheral Component Interconnect, peripheral component interconnect standard) bus, or EISA (Extended Industry Standard Architecture ) bus, among others. The buses may be classified as address buses, data buses, control buses, etc. For ease of illustration, only one bi-directional arrow is shown in FIG. 4, but not only one bus or type of bus.
And the memory is used for storing programs. In particular, the program may include program code including computer-operating instructions. The memory may include memory and non-volatile storage and provide instructions and data to the processor.
The processor reads the corresponding computer program from the nonvolatile memory to the memory and then runs the computer program to form the flow abnormality cause positioning device on the logic level. The processor is used for executing the programs stored in the memory and is specifically used for executing the following operations:
monitoring the user number change condition of a designated broadband service carried by broadband network gateway BNG equipment in a target network and the flow change condition of an uplink port, wherein the designated broadband service carried by BNG equipment comprises broadband internet service and broadband television service;
Determining whether the BNG equipment is abnormal, the abnormal specified broadband service and the abnormal flow type based on the user number change condition of the specified broadband service carried by the BNG equipment and the flow change condition of an uplink port;
determining a traffic abnormality cause of the target network based on an abnormality type of the abnormal BNG device in the target network and an interface state of a sub-interface matched with the abnormality specification broadband service
The method executed by the flow abnormality cause positioning device disclosed in the embodiment of fig. 2 of the present application may be applied to a processor or implemented by the processor. The processor may be an integrated circuit chip having signal processing capabilities. In implementation, the steps of the above method may be performed by integrated logic circuits of hardware in a processor or by instructions in the form of software. The processor may be a general-purpose processor, including a central processing unit (Central Processing Unit, CPU), a network processor (Network Processor, NP), etc.; but also digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC), field programmable gate arrays (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. The disclosed methods, steps, and logic blocks in the embodiments of the present application may be implemented or performed. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like. The steps of the method disclosed in connection with the embodiments of the present application may be embodied directly in the execution of a hardware decoding processor, or in the execution of a combination of hardware and software modules in a decoding processor. The software modules may be located in a random access memory, flash memory, read only memory, programmable read only memory, or electrically erasable programmable memory, registers, etc. as well known in the art. The storage medium is located in a memory, and the processor reads the information in the memory and, in combination with its hardware, performs the steps of the above method.
The electronic device may also execute the method of fig. 2 and implement the functions of the flow abnormality cause positioning device in the embodiments shown in fig. 2 to 3, which are not described herein.
Of course, other implementations, such as a logic device or a combination of hardware and software, are not excluded from the electronic device of the present application, that is, the execution subject of the following processing flows is not limited to each logic unit, but may be hardware or a logic device.
The embodiments of the present application also provide a computer-readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by a portable electronic device comprising a plurality of application programs, enable the portable electronic device to perform the method of the embodiment of fig. 2, and in particular to perform the operations of:
monitoring the user number change condition of a designated broadband service carried by broadband network gateway BNG equipment in a target network and the flow change condition of an uplink port, wherein the designated broadband service carried by BNG equipment comprises broadband internet service and broadband television service;
determining whether the BNG equipment is abnormal, the abnormal specified broadband service and the abnormal flow type based on the user number change condition of the specified broadband service carried by the BNG equipment and the flow change condition of an uplink port;
And determining the flow abnormality reason of the target network based on the abnormal type of the abnormal BNG equipment in the target network and the interface state of the sub-interface matched with the abnormal specified broadband service.
Fig. 5 is a schematic structural view of a flow abnormality cause positioning device according to an embodiment of the present application. Referring to fig. 5, in a software embodiment, the flow anomaly cause positioning device 500 may include:
the monitoring unit 510 is configured to monitor a user number change condition of a specified broadband service carried by a broadband network gateway BNG device in a target network and a flow change condition of an uplink port, where the specified broadband service carried by the BNG device includes a broadband internet service and a broadband television service;
a determining unit 520, configured to determine whether the BNG device is abnormal, an abnormal specified broadband service and a traffic abnormality type based on a user number change condition of the specified broadband service carried by the BNG device and a traffic change condition of an uplink port;
and the positioning unit 530 is configured to determine a cause of traffic abnormality of the target network based on an abnormal type of the abnormal BNG device in the target network and an interface state of the subinterface that matches the abnormal specified broadband service.
Optionally, the monitoring unit 510 is specifically configured to:
collecting the number of users of the specified broadband service carried by the BNG equipment and the flow of an uplink port according to a set period;
corresponding to each appointed broadband service, determining the user quantity change and the user quantity change trend of the appointed broadband service in adjacent periods based on the user quantity of the appointed broadband service in each period;
and under the condition that the variation of the number of users of any specified broadband service in the adjacent period exceeds a user number threshold, determining the flow variation and the flow variation trend of the uplink port in the adjacent period based on the flow of the uplink port in the adjacent period.
Optionally, the discriminating unit 520 is specifically configured to:
for each appointed broadband service carried by the BNG equipment, if the user quantity variation of the appointed broadband service in the adjacent period exceeds the user quantity threshold value, determining that the appointed broadband service is an abnormal appointed broadband service;
determining that the BNG equipment is abnormal when at least one specified broadband service carried by the BNG equipment is an abnormal specified broadband service, the flow variation of an uplink port of the BNG equipment in an adjacent period exceeds a flow threshold, and the user number variation trend of the abnormal specified broadband service is the same as the flow variation trend of the uplink port;
And determining the abnormal flow type of the BNG equipment based on the user number change trend of the abnormal specified broadband service and/or the flow change trend of the uplink port.
Optionally, the flow anomaly type includes a flow sudden anomaly and a flow sudden anomaly;
the positioning unit 530 is specifically configured to:
if all BNG devices in the target network have abnormal flow sudden decrease and all sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the flow abnormality of the target network is caused by the fact that the access layer device is out of the tube;
if all BNG devices in the target network have abnormal flow sudden decrease and partial sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the abnormal flow of the target network is caused by the access side fault of the access layer device;
if the flow sudden increase abnormality occurs in part of BNG equipment in the target network, the flow sudden decrease abnormality occurs in the other part of BNG equipment, and part of sub-interfaces of the BNG equipment matched with own abnormal appointed service, which occur the flow sudden decrease abnormality, are in a closed state, determining that the flow abnormality of the target network is caused by the fault of the sub-interfaces matched with the part;
If all BNG devices in the target network have abnormal flow sudden increase, determining that the abnormal flow of the target network is caused by a security attack event in the target network.
Optionally, the apparatus 500 further includes:
a selecting unit, configured to select, when the locating unit 530 determines that the cause of the traffic abnormality of the target network is the sub-interface fault that is partially matched, a sub-interface that is in an on state from all sub-interfaces of the BNG device that is experiencing a traffic spike abnormality and that is matched with the own abnormality specified service as a target sub-interface;
and the switching unit is used for controlling the connection between the access layer equipment and the target sub-interface to be in a conducting state.
Optionally, the apparatus 500 further includes:
and the alarm unit is used for generating and outputting early warning prompt information based on the flow abnormality reason of the target network after the positioning unit determines the flow abnormality reason of the target network.
By monitoring and analyzing the flow change condition of the uplink port of BNG equipment in the target network and the user number change condition of the loaded broadband service, the flow abnormality positioning device provided by the embodiment of the application automatically identifies whether the target network has flow abnormality and positions the cause of the flow abnormality, the whole process does not need manual participation, the efficiency and the accuracy are higher, the operation and maintenance personnel can conveniently and rapidly perform fault treatment, the normal use of the broadband service is ensured, and the device has higher practicability.
In summary, the foregoing description is only of the preferred embodiments of the present application, and is not intended to limit the scope of the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the protection scope of the present application.
The system, apparatus, module or unit set forth in the above embodiments may be implemented in particular by a computer chip or entity, or by a product having a certain function. One typical implementation is a computer. In particular, the computer may be, for example, a personal computer, a laptop computer, a cellular telephone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.
Computer readable media, including both non-transitory and non-transitory, removable and non-removable media, may implement information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of storage media for a computer include, but are not limited to, phase change memory (PRAM), static Random Access Memory (SRAM), dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), read Only Memory (ROM), electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices, or any other non-transmission medium, which can be used to store information that can be accessed by a computing device. Computer-readable media, as defined herein, does not include transitory computer-readable media (transmission media), such as modulated data signals and carrier waves.
It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one … …" does not exclude the presence of other like elements in a process, method, article or apparatus that comprises the element.
In this specification, each embodiment is described in a progressive manner, and identical and similar parts of each embodiment are all referred to each other, and each embodiment mainly describes differences from other embodiments. In particular, for system embodiments, since they are substantially similar to method embodiments, the description is relatively simple, as relevant to see a section of the description of method embodiments.

Claims (9)

1. The method for locating the cause of the flow abnormality is characterized by comprising the following steps:
monitoring the user number change condition of a designated broadband service carried by broadband network gateway BNG equipment in a target network and the flow change condition of an uplink port, wherein the designated broadband service carried by BNG equipment comprises broadband internet service and broadband television service;
Determining whether the BNG equipment is abnormal, the abnormal specified broadband service and the abnormal flow type based on the user number change condition of the specified broadband service carried by the BNG equipment and the flow change condition of an uplink port;
determining a flow abnormality reason of the target network based on an abnormality type of the abnormal BNG equipment in the target network and an interface state of a sub-interface matched with the abnormal specified broadband service;
wherein the flow anomaly types comprise flow sudden increase anomalies and flow sudden decrease anomalies;
if all BNG devices in the target network have abnormal flow sudden decrease and all sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the flow abnormality of the target network is caused by the fact that the access layer device is out of the tube;
if all BNG devices in the target network have abnormal flow sudden decrease and partial sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the abnormal flow of the target network is caused by the access side fault of the access layer device;
if the flow sudden increase abnormality occurs in part of BNG equipment in the target network, the flow sudden decrease abnormality occurs in the other part of BNG equipment, and the partial sub-interfaces of the BNG equipment matched with the self abnormal appointed service, which occur the flow sudden decrease abnormality, are in a closed state, determining that the flow abnormality of the target network is caused by the fault of the matched partial sub-interfaces;
If all BNG devices in the target network have abnormal flow sudden increase, determining that the abnormal flow of the target network is caused by a security attack event in the target network.
2. The method according to claim 1, wherein monitoring the user number change condition of the designated broadband service carried by the broadband network gateway BNG device in the target network and the traffic change condition of the uplink port comprises:
collecting the number of users of the specified broadband service carried by the BNG equipment and the flow of an uplink port according to a set period;
corresponding to each appointed broadband service, determining the user quantity change and the user quantity change trend of the appointed broadband service in adjacent periods based on the user quantity of the appointed broadband service in each period;
and under the condition that the variation of the number of users of any specified broadband service in the adjacent period exceeds a user number threshold, determining the flow variation and the flow variation trend of the uplink port in the adjacent period based on the flow of the uplink port in the adjacent period.
3. The method of claim 2, wherein determining whether the BNG device is abnormal, an abnormal specified broadband service, and a traffic abnormality type based on a user number change condition of the specified broadband service carried by the BNG device and a traffic change condition of an uplink port comprises:
For each appointed broadband service carried by the BNG equipment, if the user quantity variation of the appointed broadband service in the adjacent period exceeds the user quantity threshold value, determining that the appointed broadband service is an abnormal appointed broadband service;
determining that the BNG equipment is abnormal when at least one specified broadband service carried by the BNG equipment is an abnormal specified broadband service, the flow variation of an uplink port of the BNG equipment in an adjacent period exceeds a flow threshold, and the user number variation trend of the abnormal specified broadband service is the same as the flow variation trend of the uplink port;
and determining the abnormal flow type of the BNG equipment based on the user number change trend of the abnormal specified broadband service and/or the flow change trend of the uplink port.
4. The method of claim 1, wherein in the event that it is determined that the traffic anomaly cause of the target network is a failure of the partially matched subinterface, the method further comprises:
selecting a sub-interface in an open state from all sub-interfaces of BNG equipment with abnormal flow sudden decrease and matched with own abnormal appointed service as a target sub-interface;
And controlling the connection between the access layer equipment and the target sub-interface to be in a conducting state.
5. The method of claim 1, wherein after determining the cause of the traffic anomaly of the target network, the method further comprises:
and generating and outputting early warning prompt information based on the flow abnormality reason of the target network.
6. A flow abnormality cause positioning device, comprising:
the monitoring unit is used for monitoring the user number change condition of the appointed broadband service carried by the broadband network gateway BNG equipment in the target network and the flow change condition of the uplink port, wherein the appointed broadband service carried by the BNG equipment comprises broadband internet service and broadband television service;
the judging unit is used for determining whether the BNG equipment is abnormal, the abnormal specified broadband service and the abnormal flow type based on the user number change condition of the specified broadband service carried by the BNG equipment and the flow change condition of the uplink port;
the positioning unit is used for determining the flow abnormality reason of the target network based on the abnormality type of the abnormal BNG equipment in the target network and the interface state of the sub-interface matched with the abnormal specified broadband service;
Wherein the flow anomaly types comprise flow sudden increase anomalies and flow sudden decrease anomalies;
if all BNG devices in the target network have abnormal flow sudden decrease and all sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the flow abnormality of the target network is caused by the fact that the access layer device is out of the tube;
if all BNG devices in the target network have abnormal flow sudden decrease and partial sub-interfaces of the abnormal BNG devices matched with the self abnormal specified broadband service are in a closed state, determining that the abnormal flow of the target network is caused by the access side fault of the access layer device;
if the flow sudden increase abnormality occurs in part of BNG equipment in the target network, the flow sudden decrease abnormality occurs in the other part of BNG equipment, and the partial sub-interfaces of the BNG equipment matched with the self abnormal appointed service, which occur the flow sudden decrease abnormality, are in a closed state, determining that the flow abnormality of the target network is caused by the fault of the matched partial sub-interfaces;
if all BNG devices in the target network have abnormal flow sudden increase, determining that the abnormal flow of the target network is caused by a security attack event in the target network.
7. The apparatus of claim 6, wherein the apparatus further comprises:
and the alarm unit is used for generating and outputting early warning prompt information based on the flow abnormality reason of the target network.
8. An electronic device, comprising:
a processor;
a memory for storing the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the method of any one of claims 1 to 5.
9. A computer readable storage medium, which when executed by a processor of an electronic device, causes the electronic device to perform the method of any of claims 1 to 5.
CN202011278057.XA 2020-11-16 2020-11-16 Positioning method and device for reasons of abnormal flow and electronic equipment Active CN114584329B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202011278057.XA CN114584329B (en) 2020-11-16 2020-11-16 Positioning method and device for reasons of abnormal flow and electronic equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202011278057.XA CN114584329B (en) 2020-11-16 2020-11-16 Positioning method and device for reasons of abnormal flow and electronic equipment

Publications (2)

Publication Number Publication Date
CN114584329A CN114584329A (en) 2022-06-03
CN114584329B true CN114584329B (en) 2023-09-05

Family

ID=81768506

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202011278057.XA Active CN114584329B (en) 2020-11-16 2020-11-16 Positioning method and device for reasons of abnormal flow and electronic equipment

Country Status (1)

Country Link
CN (1) CN114584329B (en)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101312456A (en) * 2007-05-21 2008-11-26 华为技术有限公司 Method and system for survival monitoring session of subscriber
CN108270600A (en) * 2016-12-30 2018-07-10 中国移动通信集团黑龙江有限公司 A kind of processing method and associated server to malicious attack flow
CN109104475A (en) * 2018-07-27 2018-12-28 新华三技术有限公司 Connect restoration methods, apparatus and system
CN109150569A (en) * 2017-06-27 2019-01-04 中国移动通信集团北京有限公司 A kind of network video service fault locating analysis method, apparatus and system
CN111064759A (en) * 2018-10-17 2020-04-24 中兴通讯股份有限公司 User online method, device, broadband remote access server and storage medium

Family Cites Families (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140269724A1 (en) * 2013-03-04 2014-09-18 Telefonaktiebolaget L M Ericsson (Publ) Method and devices for forwarding ip data packets in an access network
US9923794B2 (en) * 2014-04-28 2018-03-20 Huawei Technologies Co., Ltd. Method, apparatus, and system for identifying abnormal IP data stream

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101312456A (en) * 2007-05-21 2008-11-26 华为技术有限公司 Method and system for survival monitoring session of subscriber
CN108270600A (en) * 2016-12-30 2018-07-10 中国移动通信集团黑龙江有限公司 A kind of processing method and associated server to malicious attack flow
CN109150569A (en) * 2017-06-27 2019-01-04 中国移动通信集团北京有限公司 A kind of network video service fault locating analysis method, apparatus and system
CN109104475A (en) * 2018-07-27 2018-12-28 新华三技术有限公司 Connect restoration methods, apparatus and system
CN111064759A (en) * 2018-10-17 2020-04-24 中兴通讯股份有限公司 User online method, device, broadband remote access server and storage medium

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
基于城域网与GPON组网的OLT双上联流量均衡研究与应用;廖伟全;喻林峰;李继龙;江圣;周圆圆;;通信技术(09);全文 *

Also Published As

Publication number Publication date
CN114584329A (en) 2022-06-03

Similar Documents

Publication Publication Date Title
CN112311611B (en) Data anomaly monitoring method and device and electronic equipment
CN109327353B (en) Service flow determination method and device and electronic equipment
CN113259183B (en) Network relay control method and device, electronic equipment and storage medium
CN112350836B (en) Abnormal positioning method and device of Internet of things and electronic equipment
CN111488289B (en) Fault positioning method, device and equipment
CN114095965A (en) Index detection model obtaining and fault positioning method, device, equipment and storage medium
CN117041029A (en) Network equipment fault processing method and device, electronic equipment and storage medium
CN111865665B (en) Network equipment fault self-healing method and device
CN114363151A (en) Fault detection method and device, electronic equipment and storage medium
CN103345439A (en) Method and device for monitoring health states of full links in information system
CN112152833B (en) Network abnormity alarm method and device and electronic equipment
CN115858311A (en) Operation and maintenance monitoring method and device, electronic equipment and readable storage medium
CN114301800A (en) Network equipment quality difference analysis method and device
CN114584329B (en) Positioning method and device for reasons of abnormal flow and electronic equipment
CN113497721B (en) Network fault positioning method and device
CN113347654B (en) Method and device for determining fault type of out-of-service base station
CN109245943B (en) Fault positioning method and device
CN108512698B (en) Network disaster tolerance method and device and electronic equipment
CN114221807B (en) Access request processing method, device, monitoring equipment and storage medium
CN114301815B (en) Method and device for processing broadcast storm
CN114095394B (en) Network node fault detection method and device, electronic equipment and storage medium
CN107370618B (en) Troubleshooting method and device and electronic equipment
CN104881354A (en) Cloud disk monitoring method and device
CN114091773A (en) System life prediction method, device, electronic equipment and storage medium
CN110659178B (en) System running state adjusting method and device, storage medium and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant