CN115348334A - Data analysis method and device and related equipment - Google Patents
Data analysis method and device and related equipment Download PDFInfo
- Publication number
- CN115348334A CN115348334A CN202110521813.5A CN202110521813A CN115348334A CN 115348334 A CN115348334 A CN 115348334A CN 202110521813 A CN202110521813 A CN 202110521813A CN 115348334 A CN115348334 A CN 115348334A
- Authority
- CN
- China
- Prior art keywords
- data
- packet
- target
- extracting
- protocol
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 33
- 238000007405 data analysis Methods 0.000 title abstract description 7
- 238000004891 communication Methods 0.000 claims abstract description 64
- 238000004458 analytical method Methods 0.000 claims description 19
- 238000000605 extraction Methods 0.000 claims description 12
- 238000012545 processing Methods 0.000 claims description 7
- 238000003860 storage Methods 0.000 claims description 6
- 238000004590 computer program Methods 0.000 claims description 5
- 230000005540 biological transmission Effects 0.000 claims description 4
- 238000006243 chemical reaction Methods 0.000 claims description 2
- 238000010586 diagram Methods 0.000 description 3
- 230000000694 effects Effects 0.000 description 2
- 239000000284 extract Substances 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 101100513046 Neurospora crassa (strain ATCC 24698 / 74-OR23-1A / CBS 708.71 / DSM 1257 / FGSC 987) eth-1 gene Proteins 0.000 description 1
- 230000006978 adaptation Effects 0.000 description 1
- 238000013480 data collection Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 238000009776 industrial production Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/22—Parsing or analysis of headers
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L49/00—Packet switching elements
- H04L49/20—Support for services
- H04L49/208—Port mirroring
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1095—Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/08—Protocols for interworking; Protocol conversion
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2212/00—Encapsulation of packets
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention provides a data analysis method, a data analysis device and related equipment, and relates to the field of computers, wherein the method comprises the following steps: acquiring first communication flow data, wherein the first communication flow data and second communication flow data of first equipment are mirror image data; extracting a target message in the first communication flow data; and extracting a data packet in the target message, and analyzing the data packet in a dynamic plug-in mode. Through the method and the device, the problem that in the prior art, industrial data acquisition can be implemented only when the acquisition equipment is connected into the industrial equipment network or the acquisition equipment can communicate through redundant network ports in the industrial equipment is solved.
Description
Technical Field
The present invention relates to the field of computer technologies, and in particular, to a method, an apparatus, and a related device for analyzing data.
Background
The existing industrial data acquisition adopts the mode that acquisition equipment is directly connected with industrial equipment or the acquisition equipment is connected into a network where the industrial equipment is located, the acquisition equipment is communicated with the industrial equipment through a protocol adaptation program, and real-time data information in the industrial equipment is acquired.
The existing industrial data acquisition mode has certain limitation on the acquisition conditions, and as shown in fig. 1, the acquisition mode can be implemented only when the acquisition device can be accessed into an industrial equipment network or can communicate through redundant network ports in the industrial equipment. However, there are many special circumstances in an actual industrial production environment where existing methods cannot be used, such as the following:
1) Programmable Logic Controller (PLC) communication ports are occupied and only single connections are supported.
2) And the PLC expansion port is used up, and a communication module cannot be newly added.
3) The current model of PLC is off-line, no expansion modules can be purchased, or expansion modules are particularly expensive.
4) The PLC is encrypted and cannot modify communication parameters.
Disclosure of Invention
The invention provides a data analysis method, a data analysis device and related equipment, and aims to solve the problem that industrial data acquisition can only be implemented when acquisition equipment is connected into an industrial equipment network or the acquisition equipment can communicate through redundant network ports in the industrial equipment in the prior art.
In a first aspect, a method for parsing data is provided, including: acquiring first communication flow data, wherein the first communication flow data and second communication flow data of first equipment are mirror image data; extracting a target message in the first communication flow data; and extracting a data packet in the target message, and analyzing the data packet in a dynamic plug-in mode.
In a second aspect, an apparatus for parsing data is provided, including: the acquisition module is used for acquiring first communication traffic data, wherein the first communication traffic data and second communication traffic data of the first equipment are mirror image data; the extraction module is used for extracting the target message in the first communication flow data; and the processing module is used for extracting the data packet in the target message and analyzing the data packet in a dynamic plug-in mode.
In the invention, mirror image data of second communication flow data of first equipment and messages in first communication flow data are extracted, and data packets in the messages are analyzed. Because the data acquisition and analysis are carried out on the mirror image data of the second communication flow data based on the first equipment, even if the acquisition equipment is not accessed into the industrial equipment network or no redundant network port is available in the industrial equipment for communication, the acquisition and analysis of the industrial data can be realized, thereby solving the problem that the industrial data acquisition can only be implemented when the acquisition equipment is accessed into the industrial equipment network or the acquisition equipment can communicate through the redundant network port in the industrial equipment in the prior art.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings needed to be used in the description of the embodiments of the present invention will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art that other drawings can be obtained according to these drawings without inventive exercise.
FIG. 1 is a schematic diagram of a prior art architecture for collecting industrial data;
FIG. 2 is a flow chart of a method for parsing data according to an embodiment of the present invention;
FIG. 3 is a schematic diagram of a structure for collecting industrial data according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of an apparatus for parsing data according to an embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Referring to fig. 2, fig. 2 is a flowchart of a data parsing method provided in an embodiment of the present invention, for a gateway device, and as shown in fig. 2, the method includes the following steps:
and step 206, extracting the data packet in the target message, and analyzing the data packet in a dynamic plug-in mode.
Through steps 202 to 206, the mirror image data of the second communication traffic data of the first device and the message in the first communication traffic data are extracted, and the data packet in the message is analyzed. Because the data acquisition and analysis are carried out on the mirror image data of the second communication flow data based on the first equipment, even if the acquisition equipment is not accessed into the industrial equipment network or no redundant network port is available in the industrial equipment for communication, the acquisition and analysis of the industrial data can be realized, thereby solving the problem that the industrial data acquisition can be implemented only when the acquisition equipment is accessed into the industrial equipment network or the acquisition equipment can communicate through the redundant network port in the industrial equipment in the prior art.
That is, in the present application, since data collection and analysis are performed based on the mirror image data of the second communication flow rate data of the first device, even when the PLC communication port is already occupied and only one-way connection is supported, industrial data can be analyzed. Of course, in a scenario where other acquisition devices do not access the industrial device network or no redundant network port in the industrial device can perform communication, for example: the PLC expansion port is used up, and a communication module cannot be newly added; the current model of the PLC is stopped, so that an expansion module cannot be purchased, or the expansion module is particularly expensive; the PLC is encrypted and cannot modify communication parameters.
It should be noted that the gateway device in the embodiment of the present application may be a gateway that listens to a message in a specific application scenario. In addition, in the present application, the communication traffic data of the first device may be mirrored to the interception packet gateway through the mirror switch. Optionally, the first device in the embodiment of the present application may be an industrial device, or other terminal devices. This is not a limitation in the present application.
Taking the first device as an engineering mechanical device as an example, the above steps 202 to 206 are exemplified, and with reference to fig. 3, first, the PLC model and the PLC routing of the engineering mechanical device are combed, and in a specific environment, the combing can be performed in cooperation with a finder. Furthermore, the direct connection network cable of the PLC to the upper computer is bridged to the mirror image switch, if the other side is the direct connection of the serial port, the device can be connected to the serial port-to-network port first, and then the device is bridged to the mirror image switch. The mirror image switch mirrors the industrial data of the engineering mechanical equipment to the gateway for intercepting the message, and the mirror image switch is the mirror image data, namely the data mirrored to the gateway for intercepting the message is equivalent to a copy of the industrial data of the engineering mechanical equipment, and the data mirrored to the gateway for intercepting the message are the same as the copy of the industrial data of the engineering mechanical equipment. And finding out the IP address and the port of the PLC from the target message in the mirror image data so as to configure the IP address and the port into specific equipment of the acquisition platform. In the specific analysis process, relevant measuring points of the acquisition platform can be configured according to a field wiring drawing or a PLC program; if no PLC program exists, the data address and the data value in the data packet need to be analyzed, and the data type needs to be adjusted until the correct value can be successfully obtained. Therefore, even if the acquisition equipment is not accessed into the industrial equipment network or no redundant network port is arranged in the industrial equipment for communication, the subsequent extraction and analysis can be carried out based on the mirror image data.
In an optional implementation manner of the embodiment of the present application, the manner of extracting the target packet in the first communication traffic data, which is referred to in step 204 of the present application, may further include:
step 204-11, determining a target network card to be intercepted;
the model of the target network card, for example, eth0, eth1.
And step 204-12, extracting the target message in the target network card based on the target filter.
The message that needs to be extracted can be represented by a specific code, for example, "port 6000and tcp" represents that only tcp messages on 6000 ports are captured. The above is merely an example, and corresponding setting may be performed according to actual situations to extract a currently required message.
In an optional implementation manner of the embodiment of the present application, the manner of extracting the data packet in the target packet, which is referred to in step 206 of the present application, may further include:
step 206-11, extracting a first data packet of a network interface layer in the target message;
the code corresponding to the first data packet may be, in a specific application scenario: var packet = packetdottnet.
Step 206-12, extracting a second data packet of the network interconnection layer in the target message;
the code corresponding to the second data packet may be, in a specific application scenario: var ethernet packet = (packet dotnet. Ethernet packet) packet.
And step 206-13, extracting a third data packet of the transmission layer in the target message.
The code corresponding to the third data packet may be, in a specific application scenario: tcpPacket jtcp = (TcpPacket) packet.
IPv4Packet jtcpv4＝(IPv4Packet)packet.Extract(typeof(IPv4Packet))。
It should be noted that the extraction of the first two layers of packets (the first packet and the second packet) is used as a basis for how to extract the transport layer packet, for example, whether the network interface layer is a serial port or a network port, and whether the network interconnection layer uses TCP or UDP, which all determine how the transport layer parses. That is, the above steps 206-11 to 206-13 are used to extract the transport layer packet layer by layer. Further, the third data packet of the transport layer may include at least one of: packet length, source ip address, source port, destination ip address, destination port, application layer packet.
In an optional implementation manner of the embodiment of the present application, the parsing the data packet in the dynamic plug-in manner in step 208 further includes:
208-11, analyzing the data packet to obtain target data information, wherein the target data information comprises basic attribute data and protocol data;
208-12, determining a corresponding communication protocol type according to the basic attribute data;
208-13, determining a corresponding protocol analysis template based on the communication protocol type;
208-14, converting the protocol data through a protocol analysis template;
step 208-15, the converted protocol data is combined with the underlying attribute data.
Wherein the base attribute data comprises at least one of: frame header, network serial number, programmable Logic Controller (PLC) serial number, input/output (IO) serial number and network station number. The protocol data includes at least one of: data length, numerical value.
It should be noted that different communication protocol types correspond to different protocol parsing templates.
It can be seen that, in the embodiment of the present application, data acquisition is achieved based on an interception mode, a mirror image switch and an interception message gateway are added in an original communication link of a device, a communication flow of the device is mirrored into the interception message gateway, the interception message gateway intercepts a data packet and then extracts data in the data packet, then a communication protocol is analyzed in a dynamic plug-in mode, relevant parameter attribute data of the protocol are extracted, and finally, the acquired data is packaged and output in a uniform architecture, so as to facilitate real-time debugging, analysis and monitoring.
As shown in fig. 4, an embodiment of the present application further provides an apparatus for parsing data, where the apparatus includes:
the obtaining module 42 is configured to obtain first communication traffic data, where the first communication traffic data and second communication traffic data of the first device are mirror image data;
an extracting module 44, configured to extract a target packet in the first communication traffic data;
and the processing module 46 is configured to extract the data packet in the target message, and analyze the data packet in a dynamic plug-in manner.
By the device, mirror image data of second communication flow data of the first equipment and messages in the first communication flow data are extracted, and data packets in the messages are analyzed. Because the data acquisition and analysis are carried out on the mirror image data of the second communication flow data based on the first equipment, even if the acquisition equipment is not accessed into the industrial equipment network or no redundant network port is available in the industrial equipment for communication, the acquisition and analysis of the industrial data can be realized, thereby solving the problem that the industrial data acquisition can only be implemented when the acquisition equipment is accessed into the industrial equipment network or the acquisition equipment can communicate through the redundant network port in the industrial equipment in the prior art.
Optionally, the extraction module 44 in this embodiment of the present application further may include: the determining unit is used for determining a target network card to be intercepted; and the first extraction unit is used for extracting the target message in the target network card based on the target filter.
Optionally, the processing module 46 in this embodiment may further include: the second extraction unit is used for extracting a first data packet of a network interface layer in the target message; a third extracting unit, configured to extract a second data packet of the network interconnection layer in the target packet; and the fourth extraction unit is used for extracting the third data packet of the transmission layer in the target message.
Optionally, the third data packet in this embodiment of the present application includes at least one of the following: packet length, source ip address, source port, destination ip address, destination port, application layer packet.
Optionally, the processing module 46 in this embodiment may further include: the analysis unit is used for analyzing the data packet to obtain target data information, wherein the target data information comprises basic attribute data and protocol data; the first determining unit is used for determining the corresponding communication protocol type according to the basic attribute data; the second determining unit is used for determining a corresponding protocol analysis template based on the communication protocol type; the conversion unit is used for converting the protocol data through the protocol analysis template; and the combination unit is used for combining the converted protocol data with the basic attribute data.
Optionally, the base attribute data comprises at least one of: frame header, network number, PLC number, input/output IO number and network station number; the protocol data includes at least one of: data length, numerical value.
An embodiment of the present invention further provides an electronic device, including: the processor, the memory and the program stored in the memory and capable of running on the processor, wherein the program, when executed by the processor, implements the processes of the above-mentioned indication method embodiment, and can achieve the same technical effects, and are not described herein again to avoid repetition.
The embodiment of the present invention further provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the computer program implements each process of the above-mentioned indication method embodiment, and can achieve the same technical effect, and in order to avoid repetition, details are not repeated here. The computer-readable storage medium may be a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk.
It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrases "comprising a component of' 8230; \8230;" does not exclude the presence of another like element in a process, method, article, or apparatus that comprises the element.
Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solutions of the present invention may be embodied in the form of a software product, which is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal (such as a mobile phone, a computer, a server, an air conditioner, or a network device) to execute the method according to the embodiments of the present invention.
While the present invention has been described with reference to the embodiments shown in the drawings, the present invention is not limited to the embodiments, which are illustrative and not restrictive, and it will be apparent to those skilled in the art that various changes and modifications can be made therein without departing from the spirit and scope of the invention as defined in the appended claims.
Claims (14)
1. A method for parsing data, comprising:
acquiring first communication flow data, wherein the first communication flow data and second communication flow data of first equipment are mirror image data;
extracting a target message in the first communication flow data;
and extracting a data packet in the target message, and analyzing the data packet in a dynamic plug-in mode.
2. The method according to claim 1, wherein the extracting the target packet in the first communication traffic data includes:
determining a target network card to be intercepted;
and extracting the target message in the target network card based on a target filter.
3. The method of claim 1, wherein the extracting the data packet in the target message comprises:
extracting a first data packet of a network interface layer in the target message;
extracting a second data packet of a network interconnection layer in the target message;
and extracting a third data packet of a transmission layer in the target message.
4. The method of claim 3, wherein the third data packet comprises at least one of: packet length, source ip address, source port, destination ip address, destination port, application layer packet.
5. The method according to claim 1 or 4, wherein the parsing the data packet by using a dynamic plug-in includes:
analyzing the data packet to obtain target data information, wherein the target data information comprises basic attribute data and protocol data;
determining a corresponding communication protocol type according to the basic attribute data;
determining a corresponding protocol analysis template based on the communication protocol type;
converting the protocol data through the protocol analysis template;
and combining the converted protocol data with the basic attribute data.
6. The method of claim 5,
the base attribute data includes at least one of: frame header, network serial number, programmable Logic Controller (PLC) serial number, input/output (IO) serial number and network station number;
the protocol data includes at least one of: data length, numerical value.
7. An apparatus for parsing data, comprising:
the acquisition module is used for acquiring first communication flow data, wherein the first communication flow data and second communication flow data of the first equipment are mirror image data;
the extraction module is used for extracting the target message in the first communication flow data;
and the processing module is used for extracting the data packet in the target message and analyzing the data packet in a dynamic plug-in mode.
8. The apparatus of claim 7, wherein the extraction module comprises:
the determining unit is used for determining a target network card to be monitored;
and the first extraction unit is used for extracting the target message in the target network card based on a target filter.
9. The apparatus of claim 7, wherein the processing module comprises:
a second extraction unit, configured to extract a first data packet of a network interface layer in the target packet;
a third extracting unit, configured to extract a second data packet of a network interconnection layer in the target packet;
and the fourth extraction unit is used for extracting a third data packet of the transmission layer in the target message.
10. The apparatus of claim 9, wherein the third packet comprises at least one of: packet length, source ip address, source port, destination ip address, destination port, application layer packet.
11. The apparatus of claim 7 or 10, wherein the processing module comprises:
the analysis unit is used for analyzing the data packet to obtain target data information, wherein the target data information comprises basic attribute data and protocol data;
a first determining unit, configured to determine a corresponding communication protocol type according to the basic attribute data;
the second determining unit is used for determining a corresponding protocol analysis template based on the communication protocol type;
the conversion unit is used for converting the protocol data through the protocol analysis template;
and the combination unit is used for combining the converted protocol data with the basic attribute data.
12. The apparatus of claim 11,
the base attribute data includes at least one of: frame header, network serial number, programmable Logic Controller (PLC) serial number, input/output (IO) serial number and network station number;
the protocol data includes at least one of: data length, numerical value.
13. An electronic device, comprising: processor, memory and program stored on the memory and executable on the processor, which program, when executed by the processor, carries out the method steps of any one of claims 1 to 6.
14. A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, which computer program, when being executed by a processor, carries out the method steps of any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110521813.5A CN115348334B (en) | 2021-05-13 | 2021-05-13 | Data analysis method and device and related equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110521813.5A CN115348334B (en) | 2021-05-13 | 2021-05-13 | Data analysis method and device and related equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN115348334A true CN115348334A (en) | 2022-11-15 |
| CN115348334B CN115348334B (en) | 2023-10-27 |
Family
ID=83947288
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110521813.5A Active CN115348334B (en) | 2021-05-13 | 2021-05-13 | Data analysis method and device and related equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115348334B (en) |
Citations (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20130054737A1 (en) * | 2011-08-29 | 2013-02-28 | Carlos Miranda | System and Method for Data Acquisition in an Internet Protocol Network |
| CN103281213A (en) * | 2013-04-18 | 2013-09-04 | 西安交通大学 | Method for extracting, analyzing and searching network flow and content |
| CN103595576A (en) * | 2013-10-31 | 2014-02-19 | 赛尔网络有限公司 | Interconnection port ICP flow statistical system and method based on content provider identifications |
| CN106254381A (en) * | 2016-09-12 | 2016-12-21 | 全球能源互联网研究院 | Protocol analysis method, device and comprise the Layer2 switching system of protocol analysis device |
| CN107404421A (en) * | 2017-09-18 | 2017-11-28 | 赛尔网络有限公司 | Flow monitoring, monitoring and managing method and system |
| CN108259509A (en) * | 2018-02-27 | 2018-07-06 | 世纪龙信息网络有限责任公司 | Network access verifying method, system, computer equipment and storage medium |
| CN110535855A (en) * | 2019-08-28 | 2019-12-03 | 北京安御道合科技有限公司 | A kind of network event method for monitoring and analyzing and system, information data processing terminal |
| CN111049762A (en) * | 2019-12-23 | 2020-04-21 | 上海金仕达软件科技有限公司 | Data acquisition method and device, storage medium and switch |
| CN111404765A (en) * | 2019-01-02 | 2020-07-10 | 中国移动通信有限公司研究院 | Message processing method, device, equipment and computer readable storage medium |
| CN111585815A (en) * | 2020-05-09 | 2020-08-25 | 浙江大华技术股份有限公司 | Port data acquisition method and device |
| CN111683020A (en) * | 2020-06-05 | 2020-09-18 | 中国人民解放军63920部队 | Method and device for controlling mixed flow of multiple link layer protocols |
| CN111901255A (en) * | 2020-06-10 | 2020-11-06 | 中国电信股份有限公司重庆分公司 | Method and device for fast packet mirror forwarding of network equipment |
| US20210120393A1 (en) * | 2019-10-16 | 2021-04-22 | RapidDeploy, Inc. | Data relay for multi-tenant emergency call system |
-
2021
- 2021-05-13 CN CN202110521813.5A patent/CN115348334B/en active Active
Patent Citations (13)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20130054737A1 (en) * | 2011-08-29 | 2013-02-28 | Carlos Miranda | System and Method for Data Acquisition in an Internet Protocol Network |
| CN103281213A (en) * | 2013-04-18 | 2013-09-04 | 西安交通大学 | Method for extracting, analyzing and searching network flow and content |
| CN103595576A (en) * | 2013-10-31 | 2014-02-19 | 赛尔网络有限公司 | Interconnection port ICP flow statistical system and method based on content provider identifications |
| CN106254381A (en) * | 2016-09-12 | 2016-12-21 | 全球能源互联网研究院 | Protocol analysis method, device and comprise the Layer2 switching system of protocol analysis device |
| CN107404421A (en) * | 2017-09-18 | 2017-11-28 | 赛尔网络有限公司 | Flow monitoring, monitoring and managing method and system |
| CN108259509A (en) * | 2018-02-27 | 2018-07-06 | 世纪龙信息网络有限责任公司 | Network access verifying method, system, computer equipment and storage medium |
| CN111404765A (en) * | 2019-01-02 | 2020-07-10 | 中国移动通信有限公司研究院 | Message processing method, device, equipment and computer readable storage medium |
| CN110535855A (en) * | 2019-08-28 | 2019-12-03 | 北京安御道合科技有限公司 | A kind of network event method for monitoring and analyzing and system, information data processing terminal |
| US20210120393A1 (en) * | 2019-10-16 | 2021-04-22 | RapidDeploy, Inc. | Data relay for multi-tenant emergency call system |
| CN111049762A (en) * | 2019-12-23 | 2020-04-21 | 上海金仕达软件科技有限公司 | Data acquisition method and device, storage medium and switch |
| CN111585815A (en) * | 2020-05-09 | 2020-08-25 | 浙江大华技术股份有限公司 | Port data acquisition method and device |
| CN111683020A (en) * | 2020-06-05 | 2020-09-18 | 中国人民解放军63920部队 | Method and device for controlling mixed flow of multiple link layer protocols |
| CN111901255A (en) * | 2020-06-10 | 2020-11-06 | 中国电信股份有限公司重庆分公司 | Method and device for fast packet mirror forwarding of network equipment |
Non-Patent Citations (4)
| Title |
|---|
| MARY K. PRATT: "IIoT platforms optimize analysis of industrial data", 《PART OF: INDUSTRIAL IOT USE CASES AND HOW TO BUILD THEM：HTTPS://WWW.TECHTARGET.COM/IOTAGENDA/TIP/IIOT-PLATFORMS-OPTIMIZE-ANALYSIS-OF-INDUSTRIAL-DATA》 * |
| SAMIR GUPTA ET.AL: "Modern Industrial IoT Analytics on Azure - Part 1", 《DATABRICKS》 * |
| 王迎迎;陈凯;吴春年;沈备军;: "基于104协议与PI实时数据库的电力远动监控平台建设", 浙江电力, no. 03 * |
| 高巍伟: "基于深度协议解析的工控信息安全监测系统设计及实现", 《中国优秀硕士学位论文全文数据库（电子期刊）》, no. 03 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN115348334B (en) | 2023-10-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN111431758B (en) | Cloud network equipment testing method and device, storage medium and computer equipment | |
| EP3549310B1 (en) | System and method for configuring ied process bus network switches from substation topology specification | |
| CN111294235B (en) | Data processing method, device, gateway and readable storage medium | |
| US20080039070A1 (en) | Remote mobile testing probe | |
| CN109167762B (en) | IEC104 message checking method and device | |
| CN103248512A (en) | Method and system for generating topological structure of application layer in communication network | |
| CN111988170B (en) | Terminal fault positioning method and device | |
| CN115150377B (en) | Simulation interface calling and processing method and device | |
| CN111723019A (en) | Interface debugging method and system | |
| CN117319529B (en) | Message analysis method and device applied to vehicle end, electronic equipment and storage medium | |
| CN117130318B (en) | Industrial data acquisition method, device, system and readable storage medium | |
| CN105991353A (en) | Fault location method and device | |
| CN110768870B (en) | Quality monitoring method and device for intelligent special line | |
| CN110708209B (en) | Virtual machine flow acquisition method and device, electronic equipment and storage medium | |
| CN115348334A (en) | Data analysis method and device and related equipment | |
| CN113031569B (en) | Monitoring method, system, terminal and medium of nuclear fusion control system | |
| CN104601358A (en) | Acquisition system and analysis system matching method and acquisition system and analysis system matching device | |
| CN112910706B (en) | Automatic configuration method, system, device and readable storage medium | |
| CN115174245A (en) | Test method and system based on DoIP protocol detection | |
| CN110620682B (en) | Resource information acquisition method and device, storage medium and terminal | |
| CN114765633A (en) | Network message analysis method and device based on train real-time Ethernet protocol | |
| CN105516017A (en) | Directed acceleration method and device, and terminal equipment | |
| CN114513386B (en) | MODBUS equipment networking method and device, computer equipment and medium | |
| CN115442284B (en) | System and method for testing equipment | |
| CN115037664B (en) | Network connection testing method and device, repeater and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |