CN115174357B

CN115174357B - Network fault positioning method and system

Info

Publication number: CN115174357B
Application number: CN202211087051.3A
Authority: CN
Inventors: 秦京志; 亢雪峰; 王浩
Original assignee: Inspur Communication Information System Co Ltd
Current assignee: Inspur Communication Information System Co Ltd
Priority date: 2022-09-07
Filing date: 2022-09-07
Publication date: 2022-12-13
Anticipated expiration: 2042-09-07
Also published as: CN115174357A

Abstract

The invention provides a network fault positioning method and a system, which relate to the technical field of computers, and the method comprises the following steps: detecting and acquiring xDR data of a target dimension based on a depth data packet; based on the xDR data, obtaining an evaluation index value of each network element device in a target range; determining quality difference network element equipment in each network element equipment based on the evaluation index value of each network element equipment; the evaluation index comprises a service index or a service index and a performance index. The network fault positioning method and the system can acquire the operation load and the equipment performance of the network element equipment more accurately and efficiently, can provide data support for network fault positioning, can improve the accuracy and the efficiency of network fault positioning, can effectively support the timely maintenance, maintenance and optimization work of the network element equipment, can macroscopically master the network fault condition, the quality difference condition, the service development and the service perception condition, and can repair the problems before influencing the normal use of users.

Description

Network fault positioning method and system

Technical Field

The invention relates to the technical field of computers, in particular to a network fault positioning method and system.

Background

In recent years, with the rapid development of information technology and the internet, the number of network users has increased explosively, and the requirements of network users on network quality have increased.

With the rapid increase of the number of network users, the number of network element devices in a network is getting huge, the network topology structure is more complex, and the network operation load is higher and higher, so that the network element devices with faults in the network are difficult to be accurately and efficiently positioned based on the existing network fault positioning method, and the normal operation of the network is seriously influenced. Therefore, how to more accurately and efficiently perform network fault location is a technical problem to be solved in the field.

Disclosure of Invention

The invention provides a network fault positioning method and a network fault positioning system, which are used for solving the defect that network element equipment with faults in a network is difficult to accurately and efficiently position in the prior art and realizing more accurate and efficient network fault positioning.

The invention provides a network fault positioning method, which comprises the following steps:

detecting and acquiring xDR data of a target dimension based on a depth data packet;

based on the xDR data, obtaining an evaluation index value of each network element device in a target range;

determining quality difference network element equipment in each network element equipment based on the evaluation index value of each network element equipment;

the evaluation index comprises a service index or a service index and a performance index.

According to a network fault location method provided by the present invention, after detecting and acquiring xDR data of a target dimension based on a deep data packet, the method further comprises:

and under the condition of acquiring fault complaint information of a user, responding to the fault complaint information, and determining fault network element equipment in each network element equipment corresponding to the user based on the xDR data, and/or determining a fault reason corresponding to the fault complaint information.

According to a network fault location method provided by the present invention, the determining a quality difference network element device in each network element device based on an evaluation index value of each network element device includes:

acquiring a quality difference judgment condition corresponding to each network element device based on the device type of each network element device;

judging whether the evaluation index value of each network element device meets the quality difference judgment condition corresponding to each network element device;

and determining each network element device as the quality difference network element device under the condition that the evaluation index value of each network element device meets the quality difference judgment condition corresponding to each network element device.

According to a network fault location method provided by the present invention, the determining, in response to the fault complaint information and based on the xDR data, a faulty network element device in each network element device corresponding to the user, and/or determining a fault cause corresponding to the fault complaint information includes:

extracting the characteristics of the fault complaint information;

under the condition that characteristic information is extracted from the fault complaint information, acquiring a fault troubleshooting sequence corresponding to the fault complaint information based on the characteristic information;

and based on the xDR data, troubleshooting is performed on each network element device corresponding to the user according to the troubleshooting sequence, so that the faulty network element device is determined in each network element device corresponding to the user, and/or a fault reason corresponding to the fault complaint information is determined.

According to the network fault locating method provided by the present invention, after the feature extraction is performed on the fault complaint information, the method further includes:

and under the condition that the characteristic information is not extracted from the fault complaint information, troubleshooting is carried out on each network element device corresponding to the user according to a preset troubleshooting sequence, and then the fault network element device is determined in each network element device corresponding to the user, and/or a fault reason corresponding to the fault complaint information is determined.

According to the network fault locating method provided by the invention, after the detecting and collecting the xDR data of the target dimension based on the depth data packet, the method further comprises the following steps:

based on the xDR data, obtaining a user dimension index value of each user in a target range;

and determining the users with poor quality in the users based on the user dimension index value of each user.

The invention also provides a network fault positioning system, comprising:

the data acquisition module is used for detecting and acquiring the xDR data of the target dimension based on the depth data packet;

the data evaluation module is used for acquiring an evaluation index value of each network element device in a target range based on the xDR data;

a fault positioning module, configured to determine, in each network element device, a quality-difference network element device based on the evaluation index value of each network element device;

The network fault positioning system provided by the invention further comprises: a user interaction interface;

the user interaction interface is used for displaying at least one of the xDR data, the evaluation index value of each network element device and the device information of the poor quality network element device.

The invention also provides an electronic device, which comprises a memory, a processor and a computer program stored on the memory and capable of running on the processor, wherein the processor executes the program to realize the network fault positioning method.

The present invention also provides a non-transitory computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements a network fault localization method as described in any of the above.

The present invention also provides a computer program product comprising a computer program which, when executed by a processor, implements a method for locating a network fault as described in any one of the above.

The network fault positioning method and the system provided by the invention take DPI as a key breakthrough point, acquire multi-dimensional xDR data based on the DPI, and acquire the evaluation index value of each network element device in a target range by decomposing and analyzing the xDR data, thereby being capable of acquiring the operation load and the device performance of each network element device more accurately and efficiently, providing data support for network fault positioning, improving the accuracy and the efficiency of network fault positioning, effectively supporting the timely maintenance, maintenance and optimization work of the network element devices, realizing the analysis of short boards in each area based on the xDR data, performing transverse comparison between cities and counties, macroscopically grasping the fault condition, the quality difference condition, the service development condition and the service perception condition of the whole area network, finding problem points more timely, repairing problems before influencing the normal use of a user, and keeping the normal use of the user network.

Drawings

In order to more clearly illustrate the technical solutions of the present invention or the prior art, the drawings needed for the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and those skilled in the art can also obtain other drawings according to the drawings without creative efforts.

FIG. 1 is a schematic flow chart of a network fault location method provided by the present invention;

fig. 2 is a schematic flow chart of a first example of a network fault location method provided by the present invention;

fig. 3 is a second schematic flow chart of a first example of the network fault location method provided by the present invention;

fig. 4 is a schematic flow chart of a second example of the network fault location method provided in the present invention;

fig. 5 is a second schematic flow chart of a second example of the network fault location method provided in the present invention;

fig. 6 is a schematic flow chart of an example three of the network fault location method provided by the present invention;

fig. 7 is a second schematic flow chart of a third example of the network fault location method provided by the present invention;

fig. 8 is a schematic flow chart of an example four in the network fault location method provided in the present invention;

fig. 9 is a second schematic flow chart of a fourth example of the network fault location method provided in the present invention;

FIG. 10 is a schematic diagram of a network fault location system provided by the present invention;

fig. 11 is a schematic structural diagram of an electronic device provided in the present invention.

Detailed Description

In order to make the objects, technical solutions and advantages of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings, and it is obvious that the described embodiments are some, but not all embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

In the description of the invention, it is to be noted that, unless otherwise explicitly specified or limited, the terms "mounted," "connected," and "connected" are to be construed broadly, e.g., as meaning either a fixed connection, a removable connection, or an integral connection; can be mechanically or electrically connected; they may be connected directly or indirectly through intervening media, or they may be interconnected between two elements. The specific meanings of the above terms in the present invention can be understood by those skilled in the art according to specific situations.

Fig. 1 is a schematic flow diagram of a network fault location method provided in the present invention. The network fault location method of the present invention is described below in conjunction with fig. 1. As shown in fig. 1, the method includes: step 101, detecting and acquiring xDR data of a target dimension based on a depth data packet.

It should be noted that the execution subject of the embodiment of the present invention is a network fault location system.

Specifically, deep Packet Inspection (DPI) is a Packet-based Deep Inspection technology, and can perform functions such as fine traffic identification, traffic flow direction analysis, traffic flow ratio statistics, traffic ratio shaping, application layer denial of service attack, filtering of viruses and trojans, and control of misuse of P2P of a link where a Packet is located by performing Inspection analysis on traffic and Packet contents at key points of a network and performing filter control on Inspection traffic according to a predefined strategy.

xDR (Extended Detection and Response), is an extension and enhancement of traditional EDR (Endpoint Detection and Response). xDR is a method of collecting and automatically correlating information across multiple security layers to enable rapid threat detection, combining Security Information and Event Management (SIEM), security Orchestration Automation and Response (SOAR), endpoint Detection and Response (EDR), and Network Traffic Analysis (NTA), centralizing security data and event responses.

Based on DPI, xDR data of a target dimension in a preset range can be collected.

Wherein the preset range is related to a setting node of the DPI, for example: the predetermined range may be within a provincial range, a city range or each district range.

The target dimensions may be determined from actual conditions and/or a priori knowledge predictions. The target dimension is not particularly limited in the embodiments of the present invention.

Optionally, the target dimension may include at least one of a preset time granularity, a preset time period, a preset region, a preset bandwidth, and a preset service type. The service types may include, but are not limited to, page browsing, video, game, HTTP, and the like.

102, obtaining an evaluation index value of each network element device in the target range based on the xDR data.

The evaluation index comprises a service index or the service index and a performance index.

Specifically, after the xDR data of the target dimension is acquired based on the DPI, the xDR data may be decomposed and analyzed based on the xDR data in various manners such as numerical calculation and mathematical statistics, so as to obtain a service index value or a service index and a performance index value of each network element device within the target range, and use the service index value or the service index and the performance index value as an evaluation index value of each network element device.

Wherein the target range is a range determined within the preset range according to actual conditions and/or a priori knowledge. The target range is not particularly limited in the embodiments of the present invention.

For any network element device, based on the evaluation index value of the network element device, the operation load and the device performance of the network element device can be judged. The service indicator value of the network element device may include Quality of Experience (QOE) of the user of the network element device, and is used to describe subjective feelings of the user on the Quality and performance of the network element device.

It should be noted that, in the embodiment of the present invention, each Network element device is connected in a topological structure, and a device type of any Network element device may be any one of an Optical Network Unit (ONU), a Passive Optical Splitter (POS), a Passive Optical Network (PON) interface, an Optical Line Terminal (OLT), a switch (switch, SW), a Broadband Remote Access Server (BRAS), and a content source. The content source may include a web page, a game, a video, and the like.

It should be noted that, for any network element device, whether the evaluation index of the network element device includes the performance index and the specific performance index is related to the device type of the network element device.

Optionally, when the device type of any network element device is an ONU, the performance index of the network element device includes traffic, received optical power, and/or lower bandwidth.

Under the condition that the equipment type of any network element equipment is a PON interface, the performance index of the network element equipment comprises at least one of the utilization rate of interface sending bandwidth, the utilization rate of interface receiving bandwidth, the excess amount of interface receiving optical power and the excess amount of interface sending optical power.

And under the condition that the equipment type of any network element equipment is OLT, the performance index of the network element equipment comprises CPU utilization rate and/or memory utilization rate.

Under the condition that the equipment type of any network element equipment is BRAS, the performance indexes of the network element equipment comprise CPU utilization rate, memory utilization rate, port sending broadband utilization rate, port receiving broadband utilization rate, port sending optical power excess and port receiving optical power excess.

And under the condition that the equipment type of any network element equipment is a content source, the performance index of the network element equipment comprises the access times of the corresponding service subclass.

And 103, determining the poor quality network element equipment in each network element equipment based on the evaluation index value of each network element equipment.

Specifically, after obtaining the evaluation index value of each network element device within the target range, it may be determined whether each network element device is a poor quality network element device having a fault risk based on the evaluation index value of each network element device through a condition judgment, a numerical calculation, a mathematical statistic, or the like, so that the poor quality network element device having the fault risk may be determined in each network element device.

Based on the content of the foregoing embodiments, determining, in each network element device, a quality-poor network element device based on the evaluation index value of each network element device includes: and acquiring a quality difference judgment condition corresponding to each network element device based on the device type of each network element device.

Optionally, after obtaining the evaluation index value of each network element device in the target range, the quality difference determination condition corresponding to each network element device may be determined based on the device type of each network element device.

It should be noted that the quality difference determination conditions corresponding to different device types may be predetermined according to actual conditions and/or a priori knowledge. In the embodiment of the present invention, the quality difference determination condition is not particularly limited.

Optionally, when the device type of any network element device is an ONU, the quality difference determining condition corresponding to the network element device may include: the traffic of the network element device is greater than a first preset value, the service index value of the network element device is less than a first target value, the service index value of the network element device is less than a second target value, and the number of users whose optical power received by the network element device is greater than the second preset value or whose lower bandwidth is not less than a third preset value is greater than a fourth preset value.

Wherein, the value range of the first preset value is between 150M and 250M; the first target value can be determined based on the average value of the service index values of each network element device of which the device type is the ONU in the target range; the second target value may be determined based on a service index value of an associated network element device corresponding to the network element device, where the associated network element device corresponding to the network element device is a network element device that is connected to the network element device, has a topology structure located at an upper level of the network element device, and has a PON interface as a device type. The value range of the second preset value can be between-25 dbm and-29 dbm; the value range of the third preset value can be between 80M and 120M; the value of the fourth preset value can range from 1 to 3 people.

Preferably, when the device type of any network element device is an ONU, the quality difference determining condition corresponding to the network element device may include: the traffic of the network element device is greater than 100M, the service index value of the network element device is less than 70% of the average value of the service index values of the network element devices of which the device types are ONUs in the target range, the service index value of the network element device is also less than 70% of the service index value of the associated network element device corresponding to the network element device, and the optical power received by the network element device is greater than-27 dbm or the number of users whose lower bandwidth is not less than 100M of the network element device is greater than 1 person.

Optionally, when the device type of any network element device is a POS, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element equipment is smaller than the third target value and the service index value of the network element equipment is smaller than the fourth target value.

The third target value may be determined based on an average value of service index values of network element devices of which the device types are POS within the target range; the second target value may be determined based on a service index value of an associated network element device corresponding to the network element device, where the associated network element device corresponding to the network element device is a network element device that is connected to the network element device, has a topology structure located at a higher level than the network element device, and has a PON interface.

Preferably, when the device type of any network element device is a POS, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element device is less than 70% of the average value of the service index values of the network element devices with the POS device types in the target range, and the service index value of the network element device is less than 80% of the service index value of the associated network element device corresponding to the network element device.

Optionally, when the device type of any network element device is a PON interface, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element device is smaller than a fifth target value and the service index value of the network element device is smaller than a sixth target value, the bandwidth utilization rate of the network element device is not smaller than a fifth preset value, the interface receiving bandwidth utilization rate of the network element device is not smaller than a sixth preset value, the excess of the receiving optical power of the network element device interface is within a first preset interval, and the excess of the sending optical power of the network element device interface is within a second preset interval.

The fifth target value may be determined based on an average value of service index values of network element devices of which the device types in the target range are PON interfaces; the sixth target value may be determined based on a service index value of an associated network element device corresponding to the network element device, where the associated network element device corresponding to the network element device is a network element device whose device type is OLT and to which the network element device belongs. The value range of the fifth preset value can be 75% to 85%; the value range of the sixth preset value can be 75% to 85%; the first predetermined interval may be (-8 dbm, -27 dbm); the second predetermined interval may be (-8 dbm, -27 dbm).

Preferably, when the device type of any network element device is a PON interface, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element equipment is less than 80% of the average value of the service index values of the network element equipment of which the equipment type is a PON interface in a target range, the service index value of the network element equipment is less than 80% of the service index value of the associated network element equipment corresponding to the network element equipment, the bandwidth utilization rate of the network element equipment is not less than 80%, the interface receiving bandwidth utilization rate of the network element equipment is not less than 80%, the excess of the receiving light power of the network element equipment interface is within (-8 dbm, -27 dbm), and the sending light power of the network element equipment interface reaches at least one of the excess of the receiving light power of the network element equipment interface is within (-8 dbm, -27 dbm).

Optionally, when the device type of any network element device is the OLT, the quality difference determining condition corresponding to the network element device may include: the operation index value of the network element device is smaller than the seventh target value, the operation index value of the network element device is smaller than the eighth target value, and the CPU utilization rate of the network element device is not smaller than the seventh preset value or the memory utilization rate of the network element device is not smaller than the eighth preset value.

The seventh target value may be determined based on an average value of service index values of each network element device whose device type is the OLT in the target range; the eighth target value may be determined based on a service index value of an associated network element device corresponding to the network element device, where the associated network element device corresponding to the network element device is a network element device that is connected to the network element device, has a topology structure located at a higher level than the network element device, and has a device type of BRAS. The value range of the seventh preset value is between 60% and 80%; the value range of the eighth preset value is between 60% and 80%.

Preferably, when the device type of any network element device is the OLT, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element device is less than 80% of the average value of the service index values of the network element devices of which the device types are the OLT in the target range, the service index value of the network element device is less than 80% of the service index value of the associated network element device corresponding to the network element device, and the CPU utilization rate of the network element device is not less than 70% or the memory utilization rate of the network element device is not less than 70%.

Optionally, when the device type of any network element device is SW, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element equipment is smaller than the ninth target value and the service index value of the network element equipment is smaller than the tenth target value.

The ninth target value may be determined based on an average value of service index values of each network element device of which the device type is SW in the target range; the tenth target value may be determined based on a service index value of an associated network element device corresponding to the network element device, where the associated network element device corresponding to the network element device is a network element device that is connected to the network element device, has a topology structure located at a higher level than the network element device, and has a device type of BRAS.

Preferably, in the case that the device type of any network element device is SW, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element device is less than 80% of the average value of the service index values of the network element devices of which the device types are the OLT in the target range, and the service index value of the network element device is less than 80% of the service index value of the associated network element device corresponding to the network element device.

Optionally, when the device type of any network element device is a BRAS, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element device is smaller than an eleventh target value and the service index value of the network element device is smaller than a twelfth target value, and the CPU utilization rate of the network element device is not smaller than a ninth preset value, the memory utilization rate of the network element device is not smaller than a tenth preset value, the port transmission bandwidth utilization rate of the network element device is not smaller than an eleventh preset value, the port reception bandwidth utilization rate of the network element device is not smaller than a twelfth preset value, the port transmission optical power excess amount of the network element device is in at least one of a third preset interval and the port reception optical power excess amount of the network element device is in a fourth preset interval.

The eleventh target value may be determined based on an average value of service index values of network element devices of which the device types in the target range are BRAS; the twelfth target value may be determined based on an average value of service index values of each network element device whose home city device type is BRAS; the value range of the ninth preset value is between 60% and 80%; the value range of the tenth preset value is between 60% and 80%; the value range of the eleventh preset value is between 70% and 90%; the value range of the twelfth preset value is between 70% and 90%; the third predetermined interval may be (-8 dbm, -27 dbm); the fourth predetermined interval may be (-8 dbm, -27 dbm).

Preferably, in the case that the device type of any network element device is a BRAS, the quality difference determination condition corresponding to the network element device may include: the service index value of the network element equipment is less than 90% of the average value of the service index values of the network element equipment with the equipment type of BRAS in a target range, the service index value of the network element equipment is less than 90% of the average value of the service index values of the network element equipment with the equipment type of BRAS in a local city to which the network element equipment belongs, the CPU utilization rate of the network element equipment is not less than 70%, the memory utilization rate of the network element equipment is not less than 70%, the port sending bandwidth utilization rate of the network element equipment is not less than 80%, the port receiving bandwidth utilization rate of the network element equipment is not less than 80%, the port sending optical power excess amount of the network element equipment is within (-8 dbm, -27 dbm) and the port receiving optical power excess amount of the network element equipment is within (-8 dbm, -27 dbm).

Optionally, when the device type of any network element device is a content source, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element equipment is smaller than a thirteenth target value, and the access frequency of the service subclass corresponding to the network element equipment is not smaller than a thirteenth preset value.

The thirteenth target value may be determined based on an average value of the service index values of the network element devices whose device types in the target range are service categories corresponding to the network element devices; the value of the thirteenth preset value ranges from 8000 to 12000.

Preferably, when the device type of any network element device is a content source, the quality difference determining condition corresponding to the network element device may include: the service index value of the network element equipment is less than 70% of the average value of the service index values of the network element equipment of which the equipment type is the service major class corresponding to the network element equipment in the target range, and the access frequency of the service minor class corresponding to the network element equipment is not less than 10000.

And judging whether the evaluation index value of each network element device meets the quality difference judgment condition corresponding to each network element device.

Specifically, after the quality difference determination condition corresponding to each network element device is obtained, the evaluation index value of each network element device may be subjected to condition determination based on the quality difference determination condition corresponding to each network element device, so as to determine whether the evaluation index value of each network element device satisfies the quality difference determination condition corresponding to each network element device.

And under the condition that the evaluation index value of each network element device meets the quality difference judgment condition corresponding to each network element device, determining each network element device as the quality difference network element device.

The embodiment of the invention takes the DPI as a key breakthrough point, acquires multidimensional xDR data based on the DPI, and obtains the evaluation index value of each network element device in a target range by decomposing and analyzing the xDR data, thereby being capable of more accurately and efficiently acquiring the operation load and the device performance of each network element device, providing data support for network fault location, improving the accuracy and the efficiency of network fault location, effectively supporting the timely maintenance, maintenance and optimization work of the network element devices, realizing the analysis of short boards in each area based on the xDR data, performing transverse comparison between cities and counties, macroscopically grasping the fault condition, the quality difference condition, the service development condition and the service perception condition of a whole area network, more timely finding problem points, performing problem repair before influencing the normal use of a user, and maintaining the normal use of the user network.

Based on the content of the foregoing embodiments, after detecting and acquiring xDR data of a target dimension based on a depth data packet, the method further includes: and under the condition of acquiring the fault complaint information of the user, responding to the fault complaint information, and determining fault network element equipment in each network element equipment corresponding to the user and/or determining a fault reason corresponding to the fault complaint information based on the xDR data.

Specifically, after obtaining the xDR data of the target dimension based on the DPI, if obtaining the fault information of the user, the basic user information such as the identity of the user may be obtained based on the fault complaint information in response to the fault complaint information.

Based on the identity of the user, each network element device corresponding to the user can be determined.

Based on the xDR data, it may be determined whether each network element device corresponding to the user is a faulty network element device having a fault through a condition determination, a numerical calculation, a mathematical statistic, or the like, so that the faulty network element device having a fault may be determined in each network element device.

Optionally, in the embodiment of the present invention, the fault complaint information of the user may be obtained in multiple ways, for example: fault complaint information of the user can be acquired through the received user input; or fault complaint information of the user sent by other electronic equipment can be received.

The embodiment of the invention provides data support for the fault location of the user side network element equipment in the network through the multi-dimensional xDR data acquired based on the DPI, can improve the accuracy and efficiency of the fault location of the user side network element equipment in the network, can reduce the fault location period, can improve the success rate of complaint solution of users and the response timeliness rate, and can effectively improve the satisfaction degree and the stickiness of the users.

Based on the content of the foregoing embodiments, in response to the fault complaint information, based on the xDR data, determining a faulty network element device in each network element device corresponding to the user, and/or determining a fault reason corresponding to the fault complaint information, includes: and extracting the characteristics of the fault complaint information.

Specifically, when the fault complaint information of the user is acquired, the feature extraction may be performed on the fault complaint information in various ways, such as semantic analysis, keyword extraction, or a machine learning model.

And under the condition that the characteristic information is extracted from the fault complaint information, acquiring a fault troubleshooting sequence corresponding to the fault complaint information based on the characteristic information.

Specifically, if feature information is extracted from the trouble complaint information of the user, a troubleshooting order corresponding to the trouble complaint information may be acquired based on the feature information.

It should be noted that the troubleshooting sequence can be predetermined according to a priori knowledge and/or actual conditions.

In order to facilitate understanding of the troubleshooting sequence in the embodiment of the present invention, the troubleshooting sequence described above is explained below by four examples.

In a first example, when the fault complaint information of the user includes information that "the line is broken in the last few days, the line is broken at night, and when 20: and the ONT corresponding to the user and the offline record corresponding to the user, the ONU corresponding to the user, the PON port corresponding to the user, the OLT corresponding to the user, the BRAS corresponding to the user and the equipment performance investigation used by the user.

In a second example, when the fault complaint information of the user includes "the internet speed is low, even if the computer uses the LAN line directly connected ONT only with 88Mbps, but with Wifi more only with 19Mbps, and the basic troubleshooting plug-pull restart cannot be solved", the feature information extracted from the fault complaint information includes "the internet speed is low" and "the Wifi signal is weak", based on the feature information, it can be determined that the troubleshooting sequence of the fault complaint information sequentially is: the speed measurement of the user terminal, the ONT corresponding to the user and the offline record corresponding to the user, the ONU corresponding to the user, the PON port corresponding to the user, the OLT corresponding to the user, the BRAS corresponding to the user and the equipment performance investigation used by the user.

In a third example, when the fault complaint information of the user includes "the computer directly connected ONT is disconnected when playing a game on a certain game platform, and the basic troubleshooting plug-in restart cannot be solved", the feature information extracted from the fault complaint information includes "a service problem" and "disconnection", and based on the feature information, it may be determined that the fault troubleshooting sequence of the fault complaint information sequentially is: the method comprises the steps of enabling an ONT corresponding to a user and an offline record corresponding to the user, enabling an ONU corresponding to the user, a PON port corresponding to the user, an OLT corresponding to the user, a BRAS corresponding to the user, index data corresponding to a service used by the user, a service IP analysis server PING and DNS analysis.

In a fourth example, when the fault complaint information of the user includes that "the target service cannot be accessed through a certain service, and the phenomenon is that the target service will not rotate around, and basic troubleshooting plug-in restart cannot solve that" the feature information extracted from the fault complaint information includes a "service problem" and "cannot be parallel", based on the feature information, it may be determined that the fault troubleshooting sequence of the fault complaint information sequentially is: whether the user terminal can open another terminal, the ONT corresponding to the user and the offline record corresponding to the user, the ONU corresponding to the user, the PON port corresponding to the user, the OLT corresponding to the user, the BRAS corresponding to the user, the server PING for analyzing the target service by the service IP and the DNS analysis can be judged through the browser.

And based on the xDR data, performing troubleshooting on each network element device corresponding to the user according to a troubleshooting sequence, and further determining a faulty network element device in each network element device corresponding to the user and/or determining a fault reason corresponding to the fault complaint information.

Based on the content of each embodiment, after determining the faulty network element device in each network element device corresponding to the user and/or determining the fault reason corresponding to the fault complaint information based on the xDR data, the method further includes: and determining a processing proposal corresponding to the fault complaint information based on the fault network element equipment and/or the fault reason.

Fig. 2 is a schematic flow chart of an example one of the network fault location methods provided in the present invention. Fig. 3 is a second schematic flow chart of the first embodiment of the network fault location method provided in the present invention. In an example one, based on xDR data, a flow of troubleshooting on each network element device corresponding to the user according to a troubleshooting order corresponding to the complaint failure information is shown in fig. 2 and fig. 3.

First, it may be determined whether a poor ONT device exists in each network element device corresponding to the user based on the xDR data.

It should be noted that the specific process of determining whether the poor ONT device exists in each network element device corresponding to the user based on the xDR data may join the contents of the above embodiments, and details are not described in this embodiment of the present invention.

Meanwhile, AAA offline records corresponding to the user can be collected based on the DPI, and whether frequent offline or abnormal offline exists at 20-21 points is confirmed. As shown in fig. 2, when both of the above two conditions are satisfied, the ONT corresponding to the user is considered as a faulty network element device, and processing the suggestion may include checking the ONT, replacing the ONT, and the like.

The AAA system can manage the user, including the information of the user authority, the opened service and the like, provides the authentication and authorization of the user identity and the service qualification, the service such as charging and the like, and can analyze the on-line and off-line behaviors of the client by collecting the AAA log record through the RADIUS.

Next, as shown in fig. 2 and fig. 3, when the two conditions are not met, the end-to-end network element device corresponding to the user needs to be continuously checked, which is sequentially an ONU (ONT), a PON port, an OLT, and a BRAS, for example, whether the ONT or the PON port has an abnormal received optical power is checked, and if the ONT or the PON port has an abnormal received optical power, the processing suggestion includes checking whether the optical fiber link corresponding to the user has a bend or a damage.

Finally, as shown in fig. 2 and fig. 3, if there is no abnormality in the end-to-end network element devices corresponding to the user, further checking whether there is an abnormality in the performance index in the devices on the topo route of the user. If the equipment on the user topo route has equipment performance index abnormity, the processing suggestion comprises checking whether the OLT/BRA corresponding to the user has performance bottleneck and needs capacity expansion or optimization during the personnel peak period.

It should be noted that the quantitative rule of the performance index abnormality may be referred to in the above embodiments.

It should be noted that the corresponding optical power is different for different devices and/or different wavelengths of light. According to conventional experience, the range can be generally considered as follows, and the secondary configuration can be specifically carried out according to the project situation: the transmitting optical power of OLT [2dBm, 7dBm ], the receiving optical power [ -27dBm, -6dBm ]; the transmitting optical power of ONT is [ -1dBm, 4dBm ], and the receiving optical power is [ -24dBm, -8dBm ].

Fig. 4 is a schematic flow diagram of an example two of the network fault location method provided by the present invention. Fig. 5 is a second flowchart of a second example of the network fault location method provided by the present invention. In example two, based on xDR data, a flow of troubleshooting on each network element device corresponding to the user according to a troubleshooting order corresponding to the complaint failure information is shown in fig. 4 and 5.

First, the actual network speed of the user terminal can be tested.

When the actual network speed of the user terminal is less than the network speed threshold, the ONT corresponding to the user and the offline record corresponding to the user, the ONU corresponding to the user, the PON port corresponding to the user, the OLT corresponding to the user, the BRAS corresponding to the user, and the performance of the device used by the user may be further checked. The troubleshooting process described above may refer to the troubleshooting process in example one, and details are not described here.

It should be noted that, because the characteristic information further includes "weak Wifi signals", when the optical power abnormality of the optical modem or the PON port is detected, in addition to the situations of whether the optical fiber link is bent or damaged, the Wifi signals received by the user terminal need to be detected, and if the Wifi signals are weak at the user terminal, the processing suggestion includes whether there is a phenomenon of poor Wifi signals caused by wall penetration or too far distance in communication with the client.

Fig. 6 is a schematic flow diagram of an example three of the network fault location method provided by the present invention. Fig. 7 is a second schematic flow chart of a third example of the network fault location method provided by the present invention. In example three, based on the xDR data, a flow of troubleshooting on each network element device corresponding to the user according to the troubleshooting order corresponding to the complaint failure information is shown in fig. 6 and 7.

It should be noted that, for the troubleshooting of the ONT corresponding to the user and the offline record corresponding to the user, the ONU corresponding to the user, the PON port corresponding to the user, the OLT corresponding to the user, and the BRAS corresponding to the user, reference may be made to the troubleshooting process in example one, which is not described herein again.

In the case that none of the above checks is abnormal, the index data corresponding to the service used by the user may be checked, for example: the user plays games at 18-19 points, and from the two indexes of login success rate and login time delay, the user has lower login success rate and higher login time delay compared with other users at the same POS port. Compared with other users under the same PON port, the same OLT and the same BRAS, the phenomenon of poor indexes is more obvious.

Under the condition that index data corresponding to a service used by the user is abnormal, the index data can be further drilled, the index condition of a specific server providing the service is checked, and under the condition that indexes such as TCP (transmission control protocol) one-time and two-time handshake success rate of the user are low and analyzed according to the dimension of each server, the user average index corresponding to the server accessed by the current user is poor, and the user average indexes corresponding to other servers are good, the fact that the game accessed by the user is broken due to the performance of the server and the like can be confirmed.

The TCP once-twice handshake means that the server receives the SYN packet after the client sends the SYN, and the client receives the SYN + ACK packet after the server sends the SYN + ACK reply packet.

Fig. 8 is a schematic flow chart of an example four of the network fault location method provided by the present invention. Fig. 9 is a second schematic flow chart of an example four of the network fault location method provided by the present invention. In example four, based on the xDR data, a flow of troubleshooting on each network element device corresponding to the user according to the troubleshooting order corresponding to the complaint failure information is shown in fig. 8 and 9.

First, since the client feeds back that the target service cannot be accessed through a certain service, the target service needs to be accessed through a browser. If the target service can be accessed through the browser, the failure reason corresponding to the failure complaint information can be determined as the limit of the client of the certain service, and the client of the certain service is reset. If the target service cannot be accessed through the browser, the troubleshooting needs to be continued according to a troubleshooting sequence corresponding to the failure complaint information.

It should be noted that, for the troubleshooting of the ONT corresponding to the user and the offline record corresponding to the user, the ONU corresponding to the user, the PON port corresponding to the user, the OLT corresponding to the user, the BRAS corresponding to the user, and the server PING where the service IP analyzes the target service, reference may be made to the troubleshooting process in example three, and details are not described here.

Under the condition that the primary and secondary success rate of the TCP is 0, it can be shown that the user terminal does not establish a successful connection with the service server, and the DNS index condition is further checked through DNS analysis.

Analyzing the DNS situation, the following scenarios are generally considered: first, DNS resolution is normal. It may be that the server is inaccessible or that the server ip is incorrect.

Second, DNS resolution fails. The possible reason is that the DNS address configuration of the ONT is changed incorrectly, so that the DPI can acquire the sent DNS request but does not acquire the information fed back by the DNS, which shows a phenomenon of failed resolution.

Third, there are no DNS records. The possible reason is that the user terminal has the DNS cache record of the target service, so that no DNS request is issued, and a DNS record-free condition is presented. And if the user terminal cannot access the target service, it indicates that the DNS content in the cache is wrong, and the user terminal cannot normally access the target service.

The embodiment of the invention responds to the fault complaint information of the user, provides different fault positioning and processing flows in a targeted manner based on the multi-dimensional xDR data acquired by the DPI and the characteristic information extracted from the fault complaint information, and can further improve the efficiency of fault positioning and fault reason analysis of the user side network element equipment in the network.

Based on the content of each embodiment, after the feature extraction is performed on the fault complaint information, the method further includes: and under the condition that the characteristic information is not extracted from the fault complaint information, troubleshooting is carried out on each network element device corresponding to the user according to a preset troubleshooting sequence, and then the fault network element device is determined in each network element device corresponding to the user, and/or the fault reason corresponding to the fault complaint information is determined.

Specifically, in the case where the amount of information in the failure complaint information of the user is small or all of the failure complaint information are invalid information, for example, the failure complaint information of the user includes only "the network is failed", and it is difficult to extract the feature information from the failure complaint information of the user.

Under the condition that the feature information is not extracted from the fault complaint information of the user, fault troubleshooting can be performed on each network element device corresponding to the user based on a preset fault troubleshooting sequence, so that a fault network element device can be determined in each network element device corresponding to the user, and/or a fault reason corresponding to the fault complaint information can be determined.

It should be noted that the preset troubleshooting sequence can be predetermined according to a priori knowledge and/or actual conditions. For example, the preset troubleshooting sequence may include a performance troubleshooting of the ONU corresponding to the user, the PON port corresponding to the user, the OLT corresponding to the user, the BRAS corresponding to the user, and the device used by the user.

The embodiment of the invention responds to the fault complaint information of the user, provides a uniform fault positioning and processing flow under the condition that the fault complaint information does not comprise characteristic information, and can further improve the efficiency of fault positioning and fault reason analysis of the user side network element equipment in the network.

Based on the content of the foregoing embodiments, after detecting and acquiring xDR data of a target dimension based on a depth data packet, the method further includes: and acquiring a user dimension index value of each user terminal in the target range based on the xDR data.

Specifically, after obtaining the xDR data of the target dimension based on the DPI, the user dimension index value of each user terminal in the target range may also be obtained through numerical calculation, mathematical statistics, and other manners.

Optionally, the user dimension index in the embodiment of the present invention includes a current day accumulated traffic of the user terminal, an HTTP average download rate of the user terminal, and an optical power received by an ONU corresponding to the user.

And determining the poor quality user terminal in each user terminal based on the user dimension index value of each user terminal.

Specifically, after the user dimension index value of each user terminal in the target range is obtained, it may be determined whether the user dimension index value of each user terminal meets a preset condition, and it may be determined whether each user terminal is a poor user terminal with a fault risk based on a determination result, so that the poor user terminal may be determined in each user terminal.

Optionally, the preset condition may include: the current day accumulated flow of the user terminal is greater than a fourteenth preset value, the HTTP average download rate of the user terminal is less than a fifteenth target value, and the optical power received by the ONU corresponding to the user terminal is less than a fifteenth preset value.

Wherein, the value range of the fourteenth preset value is between 80M and 120M; the fifteenth target value is determined based on the HTTP average download rate of the OLT corresponding to the user terminal; the value of the fifteenth preset value ranges from-25 dbm to-29 dbm.

Preferably, after the user dimension index value of each user terminal in the target range is obtained, if the daily accumulated flow of any user terminal is greater than 100M, the HTTP average download rate of the user terminal is less than 50% of the HTTP average download rate of the OLT corresponding to the user terminal, and the optical power received by the ONU corresponding to the user is less than-27 dbm, the user terminal may be determined to be a poor-quality user terminal with a fault risk.

The embodiment of the invention takes the DPI as a key breakthrough point, acquires the multi-dimensional xDR data based on the DPI, and obtains the user dimension index value of each user terminal in the target range by decomposing and analyzing the xDR data, thereby more accurately and efficiently acquiring the operation load and equipment performance of each user terminal, more accurately and efficiently determining whether the user terminal has fault risk, and improving the user perception.

Fig. 10 is a schematic structural diagram of a network fault location system provided by the present invention. The network fault location system provided by the present invention is described below with reference to fig. 10, and the network fault location system described below and the network fault location method provided by the present invention described above may be referred to correspondingly. As shown in fig. 10, the apparatus includes: a data acquisition module 1001, a data evaluation module 1002 and a fault location module 1003.

A data acquisition module 1001, configured to detect and acquire xDR data of a target dimension based on a depth data packet.

The data evaluation module 1002 is configured to obtain an evaluation index value of each network element device in the target range based on the xDR data.

A fault location module 1003, configured to determine, based on the evaluation index value of each network element device, a poor quality network element device in each network element device;

Specifically, the data acquisition module 1001, the data evaluation module 1002 and the fault location module 1003 are electrically connected.

Optionally, the fault location module 1003 is further configured to, in a case that the fault complaint information of the user is obtained, determine, based on the xDR data, a faulty network element device among the network element devices corresponding to the user and/or determine a fault reason corresponding to the fault complaint information, in response to the fault complaint information.

Optionally, the fault location module 1003 is specifically configured to obtain a quality difference determination condition corresponding to each network element device based on the device type of each network element device; judging whether the evaluation index value of each network element device meets the quality difference judgment condition corresponding to each network element device; and under the condition that the evaluation index value of each network element device meets the quality difference judgment condition corresponding to each network element device, determining each network element device as the quality difference network element device.

The fault location module 1003 is further specifically configured to perform feature extraction on the fault complaint information; under the condition that the feature information is extracted from the fault complaint information, acquiring a fault troubleshooting sequence corresponding to the fault complaint information based on the feature information; and based on the xDR data, performing troubleshooting on each network element device corresponding to the user according to a troubleshooting sequence, and further determining a faulty network element device in each network element device corresponding to the user and/or determining a fault reason corresponding to the fault complaint information.

The fault locating module 1003 is further specifically configured to, when the feature information is not extracted from the complaint fault information, perform fault troubleshooting on each network element device corresponding to the user according to a preset fault troubleshooting sequence, and further determine a faulty network element device in each network element device corresponding to the user, and/or determine a fault reason corresponding to the complaint fault information.

The fault location module 1003 is further specifically configured to obtain a user dimension index value of each user in the target range based on the xDR data; and determining poor quality users among the users based on the user dimension index value of each user.

The network fault positioning system in the embodiment of the invention takes DPI as a key breakthrough point, acquires multidimensional xDR data based on the DPI, and obtains the evaluation index value of each network element device in a target range by decomposing and analyzing the xDR data, thereby being capable of more accurately and efficiently acquiring the operation load and the device performance of each network element device, providing data support for network fault positioning, improving the accuracy and the efficiency of network fault positioning, effectively supporting the timely maintenance, maintenance and optimization of the network element devices, realizing the analysis of short boards in each area based on the xDR data, performing the transverse comparison between cities and counties, macroscopically grasping the fault condition, the quality difference condition, the service development condition and the service perception condition of a whole area network, more timely finding problem points, repairing problems before influencing the normal use of a user, and maintaining the normal use of the user network.

Based on the content of the foregoing embodiments, the network fault location system further includes: a user interaction interface;

the user interactive interface is used for displaying at least one of the xDR data, the evaluation index value of each network element device and the device information of the poor quality network element device.

Alternatively, the user interaction interface may be implemented in a variety of ways, such as: and tables, graphs, characters and the like for displaying at least one of the xDR data, the evaluation index value of each network element device and the device information of the poor quality network element device.

The network fault positioning system in the embodiment of the invention also comprises a user interaction interface, so that data display can be carried out on operation and maintenance personnel more intuitively and conveniently, the operation and maintenance personnel can conveniently carry out data check and data analysis, and the working efficiency of the operation and maintenance personnel can be improved.

Fig. 11 illustrates a physical structure diagram of an electronic device, and as shown in fig. 11, the electronic device may include: a processor (processor) 1110, a communication Interface (Communications Interface) 1120, a memory (memory) 1130, and a communication bus 1140, wherein the processor 1110, the communication Interface 1120, and the memory 1130 communicate with each other via the communication bus 1140. Processor 1110 may invoke logic instructions in memory 1130 to perform a network fault location method comprising: detecting and acquiring xDR data of a target dimension based on a depth data packet; based on the xDR data, obtaining an evaluation index value of each network element device in a target range; determining quality difference network element equipment in each network element equipment based on the evaluation index value of each network element equipment; the evaluation index comprises a service index or the service index and a performance index.

In addition, the logic instructions in the memory 1130 may be implemented in software functional units and stored in a computer readable storage medium when sold or used as a stand-alone product. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes.

In another aspect, the present invention also provides a computer program product, where the computer program product includes a computer program, the computer program can be stored on a non-transitory computer readable storage medium, and when the computer program is executed by a processor, a computer can execute the network fault location method provided by the above methods, where the method includes: detecting and acquiring xDR data of a target dimension based on a depth data packet; based on the xDR data, obtaining an evaluation index value of each network element device in a target range; determining quality difference network element equipment in each network element equipment based on the evaluation index value of each network element equipment; the evaluation index comprises a service index or the service index and a performance index.

In yet another aspect, the present invention also provides a non-transitory computer readable storage medium, on which a computer program is stored, the computer program, when being executed by a processor, is implemented to perform the network fault location method provided by the above methods, the method including: detecting and acquiring xDR data of a target dimension based on a depth data packet; based on the xDR data, obtaining an evaluation index value of each network element device in a target range; determining quality difference network element equipment in each network element equipment based on the evaluation index value of each network element equipment; the evaluation index comprises a service index or the service index and a performance index.

The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one position, or may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of the present embodiment. One of ordinary skill in the art can understand and implement it without inventive effort.

Through the above description of the embodiments, those skilled in the art will clearly understand that each embodiment may be implemented by software plus a necessary general hardware platform, and may also be implemented by hardware. With this understanding in mind, the above-described technical solutions may be embodied in the form of a software product, which can be stored in a computer-readable storage medium such as ROM/RAM, magnetic disk, optical disk, etc., and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in the embodiments or some parts of the embodiments.

Finally, it should be noted that: the above examples are only intended to illustrate the technical solution of the present invention, but not to limit it; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; and such modifications or substitutions do not depart from the spirit and scope of the corresponding technical solutions of the embodiments of the present invention.

Claims

1. A network fault location method is characterized by comprising the following steps:

the evaluation index comprises a service index or a service index and a performance index; the target dimension comprises at least one of a preset time granularity, a preset time period, a preset area, a preset bandwidth and a preset service type; the evaluation index of the network element equipment is related to the equipment type of the network element equipment;

the determining, in each of the network element devices, a quality difference network element device based on the evaluation index value of each of the network element devices includes:

2. The method of claim 1, wherein after the collecting xDR data of the target dimension based on the deep packet inspection, further comprising:

3. The method according to claim 2, wherein the determining, in response to the fault complaint information and based on the xDR data, a faulty network element device among the network element devices corresponding to the subscriber and/or a fault cause corresponding to the fault complaint information includes:

extracting the characteristics of the fault complaint information;

4. The method according to claim 3, wherein after the extracting the features of the fault complaint information, the method further comprises:

5. The method according to any one of claims 1 to 4, wherein after the acquiring xDR data of the target dimension based on the deep packet inspection, the method further comprises:

6. A network fault location system is characterized in that,

7. The network fault location system of claim 6, further comprising: a user interaction interface;

8. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor when executing the program implements the network fault localization method according to any of claims 1 to 5.

9. A non-transitory computer readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the network fault location method of any of claims 1 to 5.