CN115904388A - Application program protocol analysis method, device, equipment and storage medium - Google Patents

Application program protocol analysis method, device, equipment and storage medium Download PDF

Info

Publication number
CN115904388A
CN115904388A CN202211510744.9A CN202211510744A CN115904388A CN 115904388 A CN115904388 A CN 115904388A CN 202211510744 A CN202211510744 A CN 202211510744A CN 115904388 A CN115904388 A CN 115904388A
Authority
CN
China
Prior art keywords
application program
message
target application
target
analyzed
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202211510744.9A
Other languages
Chinese (zh)
Inventor
杨延平
谢永恒
万月亮
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Ruian Technology Co Ltd
Original Assignee
Beijing Ruian Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Ruian Technology Co Ltd filed Critical Beijing Ruian Technology Co Ltd
Priority to CN202211510744.9A priority Critical patent/CN115904388A/en
Publication of CN115904388A publication Critical patent/CN115904388A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02DCLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D10/00Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

The invention discloses an application program protocol analysis method, a device, equipment and a storage medium, wherein the method comprises the following steps: determining an installation market to which the target application program belongs, and acquiring the target application program from the installation market; installing and operating a target application program based on a pre-established simulation operation environment; carrying out automatic message collection in the running process of a target application program to obtain a message to be analyzed; and analyzing the message to be analyzed to obtain an analysis message result corresponding to the target application program and displaying the analysis message result. According to the technical scheme of the embodiment of the invention, the automatic analysis and result display of the application program protocol are realized by adopting the automatic script or program, so that the research and development efficiency is effectively improved.

Description

Application program protocol analysis method, device, equipment and storage medium
Technical Field
The present invention relates to the field of computer technologies, and in particular, to a method, an apparatus, a device, and a storage medium for analyzing an application protocol.
Background
With the rapid development of computer technology, a large number of application programs are produced, and the analysis and identification requirements of the application programs are more and more.
In the traditional application program analysis process, the application program is generally downloaded, installed, clicked for testing, data is collected and an analysis report is issued manually, or automatic processing is realized in a certain link.
According to the scheme, the application program is analyzed manually or automatically in a certain link, the number of the analyzed application programs is limited, the cost is high, and the efficiency is low.
Disclosure of Invention
The invention provides an application program protocol analysis method, device, equipment and storage medium, which are used for realizing the automation of the whole process of mass application program protocol analysis, saving manpower and improving the efficiency of application program protocol analysis.
In a first aspect, an embodiment of the present invention provides an application protocol parsing method, where the method includes:
determining an installation market to which the target application program belongs, and acquiring the target application program from the installation market;
installing and operating a target application program based on a pre-established simulation operation environment;
carrying out automatic message collection in the running process of a target application program to obtain a message to be analyzed;
and analyzing the message to be analyzed to obtain and display the message analyzing result corresponding to the target application program.
In a second aspect, an embodiment of the present invention further provides an apparatus for resolving an application protocol, where the apparatus includes:
the target application program acquisition module is used for determining the installation market to which the target application program belongs and acquiring the target application program from the installation market;
the program installation and operation module is used for installing and operating the target application program based on a pre-established simulation operation environment;
the automatic message acquisition module is used for carrying out automatic message acquisition in the running process of the target application program to obtain a message to be analyzed;
and the message analysis and display module is used for analyzing and processing the message to be analyzed so as to obtain and display the message analysis result corresponding to the target application program.
In a third aspect, an embodiment of the present invention further provides an electronic device, where the electronic device includes:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,
the memory stores a computer program executable by the at least one processor, the computer program being executable by the at least one processor to enable the at least one processor to perform the application protocol parsing method of any of the embodiments of the invention.
According to another aspect of the present invention, there is provided a computer-readable storage medium storing computer instructions for causing a processor to implement the application protocol parsing method of any one of the embodiments of the present invention when executed.
According to the technical scheme of the embodiment of the invention, the target application program is obtained from the installation market by determining the installation market to which the target application program belongs; installing and operating a target application program based on a pre-established simulation operation environment; carrying out automatic message collection in the running process of a target application program to obtain a message to be analyzed; the message to be analyzed is analyzed to obtain the message analysis result corresponding to the target application program and is displayed, the problems of information errors, omission, limited number of application programs to be processed, high cost and low efficiency in manual analysis are solved, the automation of the whole process of analyzing massive application program protocols is realized, the labor cost is saved, and the efficiency of analyzing the application program protocols is improved.
It should be understood that the statements in this section do not necessarily identify key or critical features of the embodiments of the present invention, nor do they necessarily limit the scope of the invention. Other features of the present invention will become apparent from the following description.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without creative efforts.
Fig. 1 is a flowchart of an application protocol parsing method according to an embodiment of the present invention;
fig. 2 is a flowchart of an application protocol parsing method according to a second embodiment of the present invention;
fig. 3 is a flowchart of an application protocol parsing method according to a third embodiment of the present invention;
fig. 4 is a schematic structural diagram of an application protocol parsing apparatus according to a fourth embodiment of the present invention;
fig. 5 is a schematic structural diagram of an electronic device implementing the application protocol parsing method according to the embodiment of the present invention.
Detailed Description
In order to make the technical solutions of the present invention better understood, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
It should be noted that the terms "first," "second," and the like in the description and claims of the present invention and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used is interchangeable under appropriate circumstances such that the embodiments of the invention described herein are capable of operation in sequences other than those illustrated or described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
Example one
Fig. 1 is a flowchart of an application protocol parsing method according to an embodiment of the present invention, where the method is applicable to the case of identifying and parsing an application, and the method may be executed by an application protocol parsing apparatus, where the application protocol parsing apparatus may be implemented in a form of hardware and/or software, and the application protocol parsing apparatus may be configured in a computer.
As shown in fig. 1, the method includes:
and S110, determining an installation market to which the target application program belongs, and acquiring the target application program from the installation market.
The target application is an application that needs to be analyzed. The installation market refers to a program storing a plurality of application installation links.
Specifically, the target application program is downloaded from an installation market in which the target application program download link is stored.
And S120, installing and operating the target application program based on the pre-established simulation operation environment.
The simulation operation environment refers to an environment which is set up on a target machine and can simulate operations such as installation and operation of a target application program in reality.
Specifically, the simulation operation environment is started, and the target application installation program is operated to install and operate the target application program.
Optionally, traversing target information based on a pre-established simulation operating environment; installing a corresponding target application program based on the target information, and executing an automatic test program to obtain running data of the target application program during running; the running data comprises a running time stamp and an ending time stamp corresponding to the target application program.
The target information refers to a download request link of each installation market, and further, the download request link of each installation market is collected by a technician in advance. Further, the running data includes a start time and an end time for running the target application.
Specifically, a simulation running environment is prepared in advance in a computer, and downloading request links of each installation market are sequentially accessed until a target application program is downloaded; and starting an automatic test program in the simulated operation environment, carrying out installation, operation and other operations on the target application program, and simultaneously recording the starting time and the ending time of the operation of the target application program.
And S130, carrying out automatic message collection in the running process of the target application program to obtain a message to be analyzed.
The message refers to a data unit exchanged and transmitted in a network, the message includes complete data information to be transmitted, such as data information of a source IP address, a user protocol, a user request, server response information, a destination IP address and the like generated in the running process of a target application program, and the message to be analyzed refers to a message from which the target data information is not extracted.
Specifically, the messages generated in each test operation during the running period of the target application program are automatically collected, and the messages to be analyzed are obtained.
Illustratively, a "next page" is clicked in a simulated manner during the running of the target application program, a request for browsing the next page is sent to the server, and a message generated by this operation is collected at this time and used as a message to be analyzed.
Optionally, in the running process of the target application program, performing data acquisition on the bound acquisition network card based on the automatic message acquisition script; and outputting the acquired message data according to a preset format, and recording an acquisition timestamp and an end timestamp of the message data to obtain a message to be analyzed.
The automatic acquisition script is a set of built-in programs and can execute the task of acquiring data. The acquisition network card is an interface for acquiring interactive data generated between the user terminal and the server terminal during the running period of the target application program. The preset format is a message format which can be processed by a preset analysis tool. Further, in this embodiment, the preset format is set as a PCAP format, which is a common data packet storage format and has a certain universality.
Specifically, when the target application program is operated in the simulated operation environment, the acquisition network card is used for acquiring message data generated in the operation period and outputting the message data according to the PCAP format, the initial message acquisition time and the message acquisition ending time which cannot be acquired are recorded, furthermore, the message acquisition work can be automatically ended one minute after the message acquisition is not completed, and the message acquisition ending time is recorded as the message ending time. The method has the advantages that the method can correspond to the starting time and the ending time of running the target application program, and the corresponding relation between the target application program and the message to be processed is convenient to determine.
And S140, analyzing the message to be analyzed to obtain and display the message analyzing result corresponding to the target application program.
The analysis processing refers to splicing a plurality of messages generated by the same operation and extracting partial data information from the messages. The message analysis result refers to extracted relevant data information.
Specifically, a plurality of messages corresponding to each operation during the running period of the target application program are spliced, and relevant data information is extracted according to actual requirements, so that a message analysis result corresponding to the target application program is obtained and displayed on a relevant interface.
Optionally, information and content of a network layer, a transmission layer and an application layer in the message to be analyzed are obtained; and analyzing the information and the content based on a target tool in the data transmission protocol, and outputting according to a first format.
Wherein the network layer defines node addresses, such as network addresses and host addresses, for all data transfers. The transport layer defines the interface ports of the session layer. The application layer is a structure for implementing information exchange between application processes (such as user programs, terminal operators, and the like), and further, there are various application layer protocols, such as: HTTP, HTTPs, DNS, etc. Data transmission protocol refers to a way of storing and forwarding data. The target tool is a data transmission protocol analysis engine and is used for realizing analysis processing of the message to be analyzed. The first format is a format supported by the presentation front-end tool, and this embodiment is not limited herein.
Specifically, a data transmission protocol analysis engine is loaded, and a user IP address and a server IP address of a network layer are used; port information in the transport layer, and related contents of various protocol types in the application layer are extracted and output in a first format.
Optionally, the target message output in the first format is checked based on the WEB page.
Specifically, the user can view the message result obtained by analysis on the WEB page.
According to the technical scheme of the embodiment of the invention, the target application program is obtained from the installation market by determining the installation market to which the target application program belongs; installing and operating a target application program based on a pre-established simulation operation environment; carrying out automatic message collection in the running process of a target application program to obtain a message to be analyzed; the message to be analyzed is analyzed to obtain the message analysis result corresponding to the target application program and is displayed, the problems of information errors, omission, limited number of application programs to be processed, high cost and low efficiency in manual analysis are solved, the automation of the whole process of analyzing massive application program protocols is realized, the labor cost is saved, and the efficiency of analyzing the application program protocols is improved.
Example two
Fig. 2 is a flowchart of an application protocol parsing method according to a second embodiment of the present invention, and based on the foregoing embodiment, an installation market to which a target application belongs may be determined, and the target application is obtained from the installation market and refined.
As shown in fig. 2, the method includes:
s210, reading each application program to be analyzed in the application program list to be obtained, and determining target information of each application program to be analyzed. Wherein, the target information comprises an application name or an installation package name.
The application list to be acquired refers to an application list in which application names and application installation package names of all target application programs are stored. The application program to be analyzed refers to an application program which needs to analyze a message generated by running the application program. The target information refers to an application name and an installation package name corresponding to the application program to be analyzed.
Specifically, since the processing manner of each application to be analyzed is the same, the processing of one application to be analyzed will now be described: and acquiring the application program name and the installation package name of the current application program to be analyzed.
It should be noted that, in the technical solution of the embodiment of the present invention, batch application programs can be sequentially analyzed, so that the number of the application programs to be analyzed may be one and/or multiple.
S220, for each application program to be analyzed, determining at least one installation market corresponding to the current application program, and determining a corresponding request link.
Here, the request link refers to a request link constructed by a technician to access each installation market. Furthermore, one application program to be analyzed may correspond to a plurality of installation markets, so at least one request link corresponding to the application program to be analyzed is determined, and downloading to the application program to be analyzed is guaranteed.
Specifically, for the current application program, at least one installation market corresponding to the current application program is determined, and a request link of the installation market constructed in advance is called.
And S230, downloading the target application program corresponding to the current application program from the corresponding installation market based on the request link.
Specifically, at least one installation market request link corresponding to the current application program is sequentially accessed until the target application program is downloaded. Further, the application program which is not downloaded successfully is written into the failure list, and then can be analyzed manually.
And S240, installing and operating the target application program based on the pre-established simulation operation environment.
And S250, carrying out automatic message collection in the running process of the target application program to obtain a message to be analyzed.
And S260, analyzing the message to be analyzed to obtain and display the message analyzing result corresponding to the target application program.
According to the technical scheme of the embodiment of the invention, each application program to be analyzed in the list of the application programs to be acquired is read, and the target information of each application program to be analyzed is determined; for each application program to be analyzed, determining at least one installation market corresponding to the current application program, and determining a corresponding request link; downloading a target application program corresponding to the current application program from a corresponding installation market based on the request link; installing and operating a target application program based on a pre-established simulation operation environment; carrying out automatic message collection in the running process of a target application program to obtain a message to be analyzed; the message to be analyzed is analyzed to obtain an analysis message result corresponding to the target application program and is displayed, the application program to be analyzed in the application program to be obtained is downloaded from the corresponding application market, so that subsequent tasks such as application program downloading, installation, testing, message acquisition, message analysis and analysis result display can be continuously executed, and the method is a precondition for automatically analyzing the application program.
EXAMPLE III
Fig. 3 is a flowchart of an application protocol parsing method according to a third embodiment of the present invention, which may be further refined on the basis of the foregoing embodiment, and specific implementation manners thereof may refer to detailed descriptions of the embodiment of the present invention, where technical terms the same as or corresponding to the foregoing embodiment are not repeated herein.
As shown in fig. 3, the method includes:
s310, reading the list of the application program to be obtained, obtaining the application name and the installation package name, and downloading the target application program from the application market list supported by the current tool.
Illustratively, the name of a target application program and the name of an installation package in an application program list are obtained, an application market downloading interface constructed in advance is sequentially accessed until the target application program is downloaded and an APK file of the installation package of the target application program is stored, and the APK file is written into a failure table for the target application program which is not successfully downloaded.
And S320, installing, running and uninstalling the target application program based on the pre-established simulation running environment.
Exemplarily, finding an installation package corresponding to a target program according to a download path of the target application program, automatically installing the target application program, automatically testing and clicking, and automatically unloading; and recording the starting time and the ending time of the running of the target application program.
And S330, carrying out automatic message collection and storage in the running process of the target application program to obtain a message to be analyzed.
Illustratively, binding a corresponding acquisition network card by an automatic message acquisition script, and starting operation; when the message arrives, outputting the collected message according to a PCAP format; and recording the start time and the end time of message acquisition.
S340, analyzing the message to be analyzed to obtain the message analyzing result corresponding to the target application program.
Illustratively, a protocol parsing engine is loaded to parse the message content: respectively acquiring information and contents of a network layer, a transmission layer and an application layer; analyzing the host name, the user agent name, the user information and other contents in the HTTP; resolving an SNI address in an HTTPS protocol; resolving an IP address and a CNAME field in a DNS protocol; and outputting the contents according to the agreed format.
And S350, displaying the message analysis result through a WEB page.
Illustratively, for the IP address in the network layer, the port information in the transport layer; application layer protocol type: URL, HTML original page in HTTP protocol; and displaying the contents of the starting time, the ending time and the like of the message interception.
According to the technical scheme of the embodiment of the invention, the application name and the installation package name are obtained by reading the application program list to be obtained, and the target application program is downloaded from the application market list supported by the current tool; installing, operating and uninstalling a target application program based on a pre-established simulation operating environment; automatically collecting and storing messages in the running process of a target application program to obtain messages to be analyzed; analyzing the message to be analyzed to obtain an analysis message result corresponding to the target application program; the message analysis result is displayed through the WEB page, the problems of limited information error, omission and application program processing quantity, high cost and low efficiency which possibly exist in manual analysis are solved, the full process automation of massive application program protocol analysis is realized, the labor cost is saved, and the efficiency of application program protocol analysis is improved.
Example four
Fig. 4 is a schematic structural diagram of an application protocol parsing apparatus according to a fourth embodiment of the present invention.
As shown in fig. 4, the apparatus includes:
a target application acquisition module 410, configured to determine an installation market to which the target application belongs, and acquire the target application from the installation market; a program installation and operation module 420, configured to install and operate a target application program based on a pre-established simulation operation environment; the automatic message acquisition module 430 is configured to perform automatic message acquisition in the running process of the target application program to obtain a message to be analyzed; the message parsing and displaying module 440 is configured to parse the message to be parsed to obtain a message parsing result corresponding to the target application program and display the message parsing result.
On the basis of the technical proposal, the target application program acquisition module comprises,
the target information determining unit is used for reading each application program to be analyzed in the application program list to be obtained and determining target information of each application program to be analyzed; the target information comprises an application name or an installation package name; the request link determining unit is used for determining at least one installation market corresponding to the current application program for each application program to be analyzed and determining a corresponding request link; and the target application program installation unit downloads the target application program corresponding to the current application program from the corresponding installation market based on the request link.
On the basis of the technical proposal, the program installation and operation module comprises,
the target information traversing unit is used for traversing target information based on a pre-established simulation operating environment; the running data acquisition unit is used for installing a corresponding target application program based on the target information and executing the automatic test program so as to acquire running data when the target application program runs; the running data comprises a running time stamp and an ending time stamp corresponding to the target application program.
On the basis of the technical schemes, the automatic message acquisition module comprises,
the data acquisition unit acquires data of the bound acquisition network card based on the automatic message acquisition script in the running process of the target application program; and the message to be analyzed acquiring unit is used for outputting the acquired message data according to a preset format and recording an acquisition timestamp and a technical timestamp of the message data to obtain the message to be analyzed.
On the basis of the technical proposal, the message analysis and display module comprises,
the data acquisition unit is used for acquiring information and contents of a network layer, a transmission layer and an application layer in the message to be analyzed; and the data analysis unit is used for analyzing the information and the content based on a target tool in the data transmission protocol and outputting the information and the content according to a first format.
On the basis of the above technical solutions, the application protocol analyzing device further comprises,
and the target message checking unit is used for checking the target message output in the first format based on the WEB page.
According to the technical scheme of the embodiment of the invention, the target application program is obtained from the installation market by determining the installation market to which the target application program belongs; installing and operating a target application program based on a pre-established simulation operating environment; carrying out automatic message collection in the running process of a target application program to obtain a message to be analyzed; the message to be analyzed is analyzed to obtain an analysis message result corresponding to the target application program, the problems of information errors and omission possibly existing in manual analysis, limited number of application programs to be processed, high cost and low efficiency are solved, full process automation of massive application program protocol analysis is achieved, labor cost is saved, and efficiency of application program protocol analysis is improved.
The application program protocol analysis device provided by the embodiment of the invention can execute the application program protocol analysis method provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of the execution method.
Example 5
FIG. 5 illustrates a schematic diagram of an electronic device 10 that may be used to implement an embodiment of the invention. Electronic devices are intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device may also represent various forms of mobile devices, such as personal digital assistants, cellular phones, smart phones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be exemplary only, and are not meant to limit implementations of the inventions described and/or claimed herein.
As shown in fig. 5, the electronic device 10 includes at least one processor 11, and a memory communicatively connected to the at least one processor 11, such as a Read Only Memory (ROM) 12, a Random Access Memory (RAM) 13, and the like, wherein the memory stores a computer program executable by the at least one processor, and the processor 11 can perform various suitable actions and processes according to the computer program stored in the Read Only Memory (ROM) 12 or the computer program loaded from a storage unit 18 into the Random Access Memory (RAM) 13. In the RAM 13, various programs and data necessary for the operation of the electronic apparatus 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other via a bus 14. An input/output (I/O) interface 15 is also connected to the bus 14.
A number of components in the electronic device 10 are connected to the I/O interface 15, including: an input unit 16 such as a keyboard, a mouse, or the like; an output unit 17 such as various types of displays, speakers, and the like; a storage unit 18 such as a magnetic disk, an optical disk, or the like; and a communication unit 19 such as a network card, modem, wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information/data with other devices via a computer network such as the internet and/or various telecommunication networks.
The processor 11 may be a variety of general and/or special purpose processing components having processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), various specialized Artificial Intelligence (AI) computing chips, various processors running machine learning model algorithms, a Digital Signal Processor (DSP), and any suitable processor, controller, microcontroller, or the like. The processor 11 performs the various methods and processes described above, such as the application protocol parsing method.
In some embodiments, the application protocol parsing method may be implemented as a computer program tangibly embodied on a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and/or installed onto the electronic device 10 via the ROM 12 and/or the communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the application protocol parsing method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to perform the application protocol parsing method by any other suitable means (e.g., by means of firmware).
Various implementations of the systems and techniques described here above may be implemented in digital electronic circuitry, integrated circuitry, field Programmable Gate Arrays (FPGAs), application Specific Integrated Circuits (ASICs), application Specific Standard Products (ASSPs), system on a chip (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs that are executable and/or interpretable on a programmable system including at least one programmable processor, which may be special or general purpose, receiving data and instructions from, and transmitting data and instructions to, a storage system, at least one input device, and at least one output device.
A computer program for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the computer programs, when executed by the processor, cause the functions/acts specified in the flowchart and/or block diagram block or blocks to be performed. A computer program can execute entirely on a machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine or entirely on the remote machine or server.
In the context of the present invention, a computer-readable storage medium may be a tangible medium that can contain, or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. A computer readable storage medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. Alternatively, the computer readable storage medium may be a machine readable signal medium. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
To provide for interaction with a user, the systems and techniques described here can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which a user can provide input to the electronic device. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic, speech, or tactile input.
The systems and techniques described here can be implemented in a computing system that includes a back-end component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such back-end, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), wide Area Networks (WANs), blockchain networks, and the internet.
The computing system may include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, also called a cloud computing server or a cloud host, and is a host product in a cloud computing service system, so that the defects of high management difficulty and weak service expansibility in the traditional physical host and VPS service are overcome.
It should be understood that various forms of the flows shown above may be used, with steps reordered, added, or deleted. For example, the steps described in the present invention may be executed in parallel, sequentially, or in different orders, and are not limited herein as long as the desired result of the technical solution of the present invention can be achieved.
The above-described embodiments should not be construed as limiting the scope of the invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may be made in accordance with design requirements and other factors. Any modification, equivalent replacement, and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims (10)

1. An application protocol parsing method, comprising:
determining an installation market to which a target application program belongs, and acquiring the target application program from the installation market;
installing and operating the target application program based on a pre-established simulation operating environment;
carrying out automatic message collection in the running process of the target application program to obtain a message to be analyzed;
and analyzing the message to be analyzed to obtain and display an analysis message result corresponding to the target application program.
2. The method of claim 1, wherein determining the installation market for the target application and obtaining the target application from the installation market comprises:
reading each application program to be analyzed in the application program list to be obtained, and determining target information of each application program to be analyzed; wherein, the target information comprises an application name or an installation package name;
for each application program to be analyzed, determining at least one installation market corresponding to the current application program, and determining a corresponding request link;
and downloading the target application program corresponding to the current application program from the corresponding installation market based on the request link.
3. The method according to claim 1, wherein the installing and running the target application based on the pre-built simulated running environment comprises:
traversing target information based on a pre-established simulation operation environment;
installing a corresponding target application program based on the target information, and executing an automatic test program to acquire running data of the target application program during running;
wherein the running data includes a running time stamp and an ending time stamp corresponding to the target application program.
4. The method according to claim 1, wherein the performing automatic message collection during the running process of the target application to obtain the message to be analyzed comprises:
in the running process of the target application program, acquiring data of the bound acquisition network card based on an automatic message acquisition script;
and outputting the acquired message data according to a preset format, and recording an acquisition timestamp and a technical timestamp of the message data to obtain the message to be analyzed.
5. The method according to claim 1, wherein the parsing the packet to be parsed includes:
acquiring information and content of a network layer, a transmission layer and an application layer in the message to be analyzed;
and analyzing the information and the content based on a target tool in a data transmission protocol, and outputting according to a first format.
6. The method of claim 1, further comprising:
and checking the target message output in the first format based on the WEB page.
7. An application protocol parsing apparatus, comprising:
the target application program acquisition module is used for determining an installation market to which the target application program belongs and acquiring the target application program from the installation market;
the program installation and operation module is used for installing and operating the target application program based on a pre-established simulation operation environment;
the automatic message acquisition module is used for carrying out automatic message acquisition in the running process of the target application program to obtain a message to be analyzed;
and the message analysis and display module is used for analyzing and processing the message to be analyzed to obtain and display the message analysis result corresponding to the target application program.
8. The apparatus of claim 7, wherein the target application acquisition module comprises:
the target information determining unit is used for reading each application program to be analyzed in the application program list to be obtained and determining target information of each application program to be analyzed; wherein, the target information comprises an application name or an installation package name;
the request link determining unit is used for determining at least one installation market corresponding to the current application program for each application program to be analyzed and determining a corresponding request link;
and the target application program installation unit downloads the target application program corresponding to the current application program from the corresponding installation market based on the request link.
9. An electronic device, characterized in that the electronic device comprises:
at least one processor; and
a memory communicatively coupled to the at least one processor; wherein the content of the first and second substances,
the memory stores a computer program executable by the at least one processor, the computer program being executable by the at least one processor to enable the at least one processor to perform the application protocol parsing method of any of claims 1-6.
10. A computer-readable storage medium storing computer instructions for causing a processor to implement the application protocol parsing method of any one of claims 1-6 when executed.
CN202211510744.9A 2022-11-29 2022-11-29 Application program protocol analysis method, device, equipment and storage medium Pending CN115904388A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202211510744.9A CN115904388A (en) 2022-11-29 2022-11-29 Application program protocol analysis method, device, equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202211510744.9A CN115904388A (en) 2022-11-29 2022-11-29 Application program protocol analysis method, device, equipment and storage medium

Publications (1)

Publication Number Publication Date
CN115904388A true CN115904388A (en) 2023-04-04

Family

ID=86480376

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202211510744.9A Pending CN115904388A (en) 2022-11-29 2022-11-29 Application program protocol analysis method, device, equipment and storage medium

Country Status (1)

Country Link
CN (1) CN115904388A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117459613A (en) * 2023-12-22 2024-01-26 浙江国利信安科技有限公司 Method for playing back data, electronic device and storage medium

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117459613A (en) * 2023-12-22 2024-01-26 浙江国利信安科技有限公司 Method for playing back data, electronic device and storage medium
CN117459613B (en) * 2023-12-22 2024-03-19 浙江国利信安科技有限公司 Method for playing back data, electronic device and storage medium

Similar Documents

Publication Publication Date Title
CN113987074A (en) Distributed service full-link monitoring method and device, electronic equipment and storage medium
CN107957940B (en) Test log processing method, system and terminal
CN107302476B (en) Automatic testing method and system for testing asynchronous interactive system
CN107766509B (en) Method and device for static backup of webpage
CN115904388A (en) Application program protocol analysis method, device, equipment and storage medium
CN112583663B (en) Automatic network performance testing method based on domestic operating system
CN117176802B (en) Full-link monitoring method and device for service request, electronic equipment and medium
CN112084102A (en) Interface pressure testing method and device
CN116719750B (en) Software testing method and device, server equipment and storage medium
CN113032281A (en) Method and device for acquiring code coverage rate in real time
CN113138927A (en) Software function testing method and device
CN116647490A (en) Aviation AFDX network data detection system
CN115604343A (en) Data transmission method, system, electronic equipment and storage medium
CN114416597A (en) Test case record generation method and device
CN111488268A (en) Dispatching method and dispatching device for automatic test
CN115576831A (en) Test case recommendation method, device, equipment and storage medium
CN115248735A (en) Log data output control method, device, equipment and storage medium
CN115017047A (en) Test method, system, equipment and medium based on B/S architecture
CN114285774A (en) Flow recording method and device, electronic equipment and storage medium
CN112988560A (en) Method and device for testing system robustness
CN114500348A (en) CDN gateway test method and system
CN112948195A (en) Interface testing method and device, electronic equipment and storage medium
CN109271310B (en) Development testing method and device for network function of mobile application program
CN112433938A (en) Method and device for testing application of mobile terminal
CN115269055A (en) Nginx request data acquisition method, device, equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination