CN116781545A - Flow processing method, system, electronic device and storage medium - Google Patents

Flow processing method, system, electronic device and storage medium Download PDF

Info

Publication number
CN116781545A
CN116781545A CN202310876663.9A CN202310876663A CN116781545A CN 116781545 A CN116781545 A CN 116781545A CN 202310876663 A CN202310876663 A CN 202310876663A CN 116781545 A CN116781545 A CN 116781545A
Authority
CN
China
Prior art keywords
processing
target
flow
target message
determining
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202310876663.9A
Other languages
Chinese (zh)
Inventor
刘辉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Byzoro Networks Ltd
Original Assignee
Byzoro Networks Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Byzoro Networks Ltd filed Critical Byzoro Networks Ltd
Priority to CN202310876663.9A priority Critical patent/CN116781545A/en
Publication of CN116781545A publication Critical patent/CN116781545A/en
Pending legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/02—Capturing of monitoring data
    • H04L43/028—Capturing of monitoring data by filtering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14—Network analysis or design
    • H04L41/142—Network analysis or design using statistical or mathematical methods
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/06—Protocols specially adapted for file transfer, e.g. file transfer protocol [FTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22—Parsing or analysis of headers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/30—Definitions, standards or architectural aspects of layered protocol stacks
    • H04L69/32—Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
    • H04L69/322—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions
    • H04L69/329—Intralayer communication protocols among peer entities or protocol data unit [PDU] definitions in the application layer [OSI layer 7]

Abstract

The disclosure relates to a flow processing method, a flow processing system, electronic equipment and a storage medium, and relates to the field of flow control. The method comprises the following steps: responding to the first processing module of the flow processing system to receive the target message, analyzing the target message, and determining quintuple information and an application layer protocol; determining a processing strategy of the target message according to the quintuple information and the application layer protocol; processing the target message according to the processing strategy; and the second processing module of the flow processing system performs flow processing according to the processing result. The flow processing and statistics can be processed by different processing modules by applying the flow processing and statistics control method, so that the different processing modules can be conveniently expanded under the condition of controlling the cost, and the flow processing efficiency is improved to a certain extent.

Description

Flow processing method, system, electronic device and storage medium
Technical Field
The present application relates to the field of computer technologies, and in particular, to the field of flow control, and in particular, to a flow processing method, a system, an electronic device, and a storage medium.
Background
The DPI (Deep Packet Inspection ) device can perform filtering control on the inspected flow according to a predefined strategy by inspecting and analyzing the flow and the message content at the network key points, and can complete various functions of service fine identification, service flow direction analysis, service flow ratio statistics, service ratio shaping and the like of the link where the DPI device is located.
Various application systems related to flow management in a network, such as application systems of inter-network flow control, internet log retention and the like, mainly comprise unified DPI equipment and an application server. The unified DPI equipment is responsible for data acquisition, flow analysis statistics and log synthesis, and sends flow or analysis statistics data meeting the requirements of the application server to the application server. The application server mainly completes further analysis processing of the data, reasonably organizes and stores the data and presents the data. Unifying the performance of DPI devices can affect the performance of the application system. The unified DPI device may need to be extended while improving the performance of the application system. Existing DPI equipment has the problems of high cost or great development difficulty in expansion.
Disclosure of Invention
Embodiments of the present disclosure provide a flow processing method, system, electronic device, and storage medium.
In a first aspect, an embodiment of the present disclosure provides a flow processing method, including: responding to the first processing module of the flow processing system to receive the target message, analyzing the target message, and determining quintuple information and an application layer protocol; determining a processing strategy of the target message according to the quintuple information and the application layer protocol; processing the target message according to the processing strategy; and the second processing module of the flow processing system performs flow processing according to the processing result.
In a second aspect, embodiments of the present disclosure provide a flow processing system comprising: the first processing module is configured to respond to the received target message, analyze the target message and determine quintuple information; the application layer protocol determines a processing strategy of the target message according to the quintuple information and the application layer protocol; processing the target message according to the processing strategy; and the second processing module is configured to perform flow processing according to the processing result.
In a third aspect, embodiments of the present disclosure provide an electronic device comprising a memory, a processor, a bus and a computer program stored on the memory and executable on the processor, the processor implementing the flow processing method as described in the first aspect when executing the computer program.
In a fourth aspect, embodiments of the present disclosure provide a non-transitory computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements a flow processing method as described in the first aspect.
It should be understood that the description in this section is not intended to identify key or critical features of the embodiments of the disclosure, nor is it intended to be used to limit the scope of the disclosure. Other features of the present disclosure will become apparent from the following specification.
Drawings
The drawings are for a better understanding of the present solution and are not to be construed as limiting the present disclosure. Wherein:
FIG. 1 is an exemplary system architecture diagram to which one embodiment of the flow processing method of the present disclosure may be applied;
FIG. 2 is a flow diagram of one embodiment of a flow processing method of the present disclosure;
FIG. 3 is a schematic diagram of an application scenario of the flow processing method of the present disclosure;
FIG. 4 is a flow diagram of another embodiment of a flow processing method of the present disclosure;
FIG. 5 is a schematic diagram of the architecture of one embodiment of a flow processing system of the present disclosure;
fig. 6 is a schematic structural diagram of one embodiment of an electronic device of the present disclosure.
Detailed Description
It should be noted that the following detailed description is exemplary and is intended to provide further explanation of the present disclosure. Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs.
It is noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of exemplary embodiments in accordance with the present disclosure. As used herein, the singular is also intended to include the plural unless the context clearly indicates otherwise, and furthermore, it is to be understood that the terms "comprises" and/or "comprising" when used in this specification are taken to specify the presence of stated features, steps, operations, devices, components, and/or combinations thereof.
Embodiments of the present disclosure and features of embodiments may be combined with each other without conflict.
In order to make the technical scheme and advantages of the present disclosure more apparent, the present disclosure will be further described in detail below with reference to the accompanying drawings and specific embodiments.
Fig. 1 illustrates an exemplary system architecture 100 in which embodiments of the flow processing methods or flow processing systems of the present disclosure may be applied.
As shown in fig. 1, system architecture 100 may include a terminal device 101, a network 102, a dpi device 103, and servers 104, 105. The network 104 is used as a medium to provide communication links between the terminal devices 101, 102, 103 and the server 105. The network 104 may include various connection types, such as wired, wireless communication links, or fiber optic cables, among others.
The user may send data packets over the network 102 using the terminal device 101. The data packet may be a data packet containing various requests of the user. The data packets are sent to the DPI device 103 in the form of packets, and the DPI device 103 may receive the data packets, analyze the data packets, and send the data packets to the servers 104, 105. The servers 104, 105, upon receiving the messages sent by the DPI device 103, may perform further processing to effect traffic handling.
The terminal device 101 may be hardware or software. When the terminal device 101 is hardware, it may be a variety of electronic devices including, but not limited to, smartphones, tablets, car-mounted computers, laptop and desktop computers, and the like. When the terminal apparatus 101 is software, it can be installed in the above-listed electronic apparatus. Which may be implemented as multiple software or software modules (e.g., to provide distributed services), or as a single software or software module. The present application is not particularly limited herein.
The DPI device 103 may be hardware of an X86 architecture, or may be hardware of an FPGA architecture or an NPS network processor architecture, or may be a combination of the X86 architecture and the FPGA architecture or the NPS network processor architecture.
The servers 104, 105 may be servers providing various services, such as a background server processing packets sent by the terminal device 101. The background server may receive data packets from DPI device 103 and process the data packets accordingly. And may upload the processing results or further generate logs, etc.
The servers 104 and 105 may be hardware or software. When the servers 104 and 105 are hardware, they may be implemented as a distributed server cluster formed by a plurality of servers, or as a single server. When the servers 104, 105 are software, they may be implemented as multiple software or software modules (e.g., to provide distributed services), or as a single software or software module. The present application is not particularly limited herein.
It should be noted that the flow processing method provided by the embodiments of the present disclosure is generally performed by the DPI device 103. Accordingly, the flow treatment system is typically provided in the DPI device 103.
It should be understood that the number of end devices, networks, DPI devices and servers in fig. 1 is merely illustrative. There may be any number of end devices, networks, DPI devices and servers, as desired for implementation.
Fig. 2 illustrates a flow 200 of one embodiment of a flow processing method of the present disclosure. As shown in fig. 2, the flow processing method of the present embodiment may include the following steps:
in step 201, in response to the first processing module of the flow processing system receiving the target message, the target message is parsed to determine quintuple information and an application layer protocol.
In this embodiment, the flow processing method may be performed by a flow processing system (e.g., the DPI device 103 shown in fig. 1), which may include a first processing module and a second processing module. Wherein the processing performance of the first processing module is higher than the processing performance of the second processing module, and the cost of the first processing module is higher than the cost of the second processing module. Specifically, the first processing module may include an FPGA device or an NPS device, and the second processing module may include an X86 device.
The first processing module is configured to receive a message sent by the terminal, which may be referred to herein as a target message. The execution body can analyze the target message to determine quintuple information. Here, the quintuple information may include a source MAC address, a destination MAC address, a source IP address, a destination IP address, and a transport layer communication protocol. Here, the transport layer protocol may include a TCP protocol, a UDP protocol, and the like. In addition to the five-tuple information, the message may also include an application layer protocol describing parsing the message. The application layer protocol may include HTTP protocol, HTML protocol, and the like, and the execution body may extract information at a preset position in the target packet, respectively, as each item of information in the quintuple, respectively.
Step 202, determining a processing strategy of the target message according to the quintuple information and the application layer protocol.
After the execution body analyzes the quintuple information and the application layer protocol, the processing strategy of the target message can be determined according to the quintuple information and the application layer protocol. Specifically, the execution body may compare the quintuple information and the application layer protocol with a preset processing policy list, and use the hit processing policy as the processing policy of the target message. Here, the processing policy may refer to a specific processing method of the target message, and may include, for example, processing of modifying, counting, deleting, etc. information of a specific location of the target message.
And 203, processing the target message according to the processing strategy.
After determining the processing strategy, the target message can be processed according to the processing strategy. Specifically, the execution body may modify, count, delete, etc. the information of the specific location in the target packet according to the specific content in the processing policy.
And 204, performing flow processing by a second processing module of the flow processing system according to the processing result.
The second processing module of the flow processing system can receive the processing result of the first processing module on the target message, and then further perform flow processing on the target message. Processing here may include statistics of traffic, journaling, reporting, etc.
With continued reference to fig. 3, a schematic diagram of one application scenario of the traffic handling method according to the present disclosure is shown. In the application scenario of fig. 3, a message sent by the terminal 301 is accessed to the first processing module 302, and the first processing module 302 processes the message and sends a processing result to the second processing module 303.
The second processing module 303 may perform flow statistics according to the processing result, and then output the statistics file.
According to the flow processing method provided by the embodiment of the disclosure, the processing and statistics of the flow can be processed by different processing modules, so that the different processing modules can be conveniently expanded under the condition of controlling the cost, and the flow processing efficiency is improved to a certain extent.
Referring to fig. 4, a flow 400 of another embodiment of a flow processing method according to the present disclosure is shown. As shown in fig. 4, the method in this embodiment may include the steps of:
in step 401, in response to the first processing module of the flow processing system receiving the target message, the target message is parsed to determine quintuple information and an application layer protocol.
Step 402, determining a target flow table according to the quintuple information.
In this embodiment, the execution body may determine the target flow table according to the information in the five-tuple. The destination flow table is determined, for example, from the source MAC address and the destination MAC address, or from the source IP address and the destination IP address. Upon determining the target flow table, if the flow table does not exist, the target flow table is created. The executing body may determine the communication protocol directly from the protocol information in the quintuple information. The communication protocol may include HTTP protocol, TCP protocol, and the like.
Step 403, determining the processing strategy of the target message according to the target flow table and the application layer protocol.
The execution body can determine the processing strategy of the target message according to the target flow table and the application layer protocol. Specifically, the execution body may first determine a processing policy set according to an application layer protocol, and then determine, according to a target flow table, a processing policy of the target packet from the processing policy set.
In some optional implementations of the present embodiment, the execution body may determine the processing policy of the target message by: responding to the determination that the target message is a first type message and the determination that the target message carries load content, and determining the message which carries the same load content as the target message according to the target flow table; and modifying the target message according to the determined message.
In this implementation, the executing body may determine the type of the target packet according to the communication protocol. Specifically, if the application layer protocol is the first protocol, the target message may be considered as the first type message. On the basis of determining that the target message is the first type message, whether the target message carries the load content or not can be further confirmed. Here, the first protocol may be an HTTP protocol, and the execution body may determine whether to carry the payload content by looking at the information bit. If the target message carries the load content, the message which carries the same load content as the target message can be determined. The execution body may add traffic statistics information of a previous message to each message, and modify a checksum of a header of the message, and the like. By the implementation mode, traffic statistics of the same HTTP transaction can be achieved.
In some optional implementations of the present embodiment, the execution body may determine the processing policy of the target message by: determining aging information of the target flow table in response to determining that the target message is a second type message and determining that the target message is a link-down message; and generating session information according to the aging information and the attribute information of the session to which the target message belongs, and forwarding the session information to the second processing module.
In this implementation, if the communication protocol of the target packet is the second protocol, the target packet may be determined to be the second type packet. If the execution body further determines that the target message is a de-link message, the current session is about to end. At this time, the aging information of the target flow table may be determined. Here, the second protocol may be a TCP protocol. The execution body may determine aging information of the target flow table. Specifically, the execution body may set the aging time for the target flow table. Here, the aging time may be set according to past experience or may be set according to a specific application scenario. The execution body may further generate a session message according to the aging information and attribute information of the session to which the target message belongs, and send the session message to the second processing module. Here, the attribute message may include the number of messages in the session, the number of bytes, a time stamp, service information, and the like. By the implementation mode, traffic statistics of the same session of TCP communication can be achieved.
In some optional implementations of the present embodiment, the execution body may determine the processing policy of the target message by: determining a service code corresponding to a target message according to the target flow table, the communication protocol and a preset service code list; and determining the processing strategy of the target message according to the service code and a preset processing strategy list.
In this implementation manner, the executing body may query a preset service code list according to the target flow table and the communication protocol, so as to determine the service code corresponding to the target packet. Here, the preset service code list may include a plurality of service codes, and different service codes correspond to different communication protocols and flow tables. After determining the service code corresponding to the target message, the executing body can query a preset processing strategy list to further determine the processing strategy of the target message.
And step 404, marking the target message in response to determining that the target message carries flow statistical information.
In this embodiment, if the target packet carries the flow statistics information, the target packet may be marked. Specifically, the execution body may identify the type of the target message by modifying the MAC field of the target message or adding specific information. The types of the target message may include general messages, session aging messages, and structured messages.
Step 405, the second processing module generates a log file according to the target flow table and the flow statistics information; and uploading the log file.
In this embodiment, the second processing module may generate the log file according to the target flow table and the flow statistics information. Specifically, the second processing module may fill the flow statistics information into a template of the log file to obtain the log file. The second processing module can also upload log files for technicians to control flow according to the log files. Specifically, the second processing module may upload the log file according to a preset uploading policy, and may also upload a traffic statistics file.
In some optional implementations of this embodiment, if the first processing module does not receive the message for a long time, it may determine whether to timeout. If a session timeout message is received, this indicates that the timeout has occurred. Here, the timeout time may be custom set. If it is determined that the time-out has been exceeded, a corresponding flow table may be found according to the time-out message. And then extracting the flow information of the whole session, generating a session flow aging message and sending the session flow aging message to the second processing module. The message may carry a session packet number, a byte number, a time stamp, service information, etc.
According to the flow processing method provided by the embodiment of the disclosure, session-level flow statistics or HTTP transaction-level flow statistics can be realized by determining five-tuple information of the message. And can summarize and generate log files and upload the log files. Meanwhile, when traffic statistics is carried out, only the first N messages used for service identification and the link establishment messages and the link detachment messages of the session and the traffic statistics messages are sent to the second processing module, so that the second processing module only needs to process a small part of the original traffic, the processing performance is improved, and the deployment of equipment is reduced.
With further reference to fig. 5, as an implementation of the method illustrated in the above figures, the present disclosure provides an embodiment of a flow processing system, which corresponds to the method embodiment illustrated in fig. 2, and which is particularly applicable to various electronic devices.
As shown in fig. 5, the flow processing system 500 of the present embodiment includes: a first processing module 501 and a second processing module 502.
A first processing module 501 configured to parse the target message in response to receiving the target message, and determine quintuple information and an application layer protocol; determining a processing strategy of the target message according to the quintuple information and the application layer protocol; and processing the target message according to the processing strategy.
The second processing module 502 is configured to perform flow processing according to the processing result.
In addition, in the technical scheme of the application, the application also provides electronic equipment.
Fig. 6 shows a schematic structural diagram of an electronic device according to an embodiment of the disclosure.
As shown in fig. 6, the electronic device may include a processor 601, a memory 602, a bus 603, and a computer program stored on the memory 602 and executable on the processor 601, wherein the processor 601 and the memory 602 perform communication with each other through the bus 603. Wherein the steps of the above method are implemented when the processor 601 executes a computer program, for example, including: responding to the first processing module of the flow processing system to receive the target message, analyzing the target message, and determining quintuple information and an application layer protocol; determining a processing strategy of the target message according to the quintuple information and the application layer protocol; processing the target message according to the processing strategy; and the second processing module of the flow processing system performs flow processing according to the processing result.
In addition, in one embodiment of the present disclosure, there is also provided a non-transitory computer readable storage medium having stored thereon a computer program which, when executed by a processor, performs the steps of the above method, for example, including: responding to the first processing module of the flow processing system to receive the target message, analyzing the target message, and determining quintuple information and an application layer protocol; determining a processing strategy of the target message according to the quintuple information and the application layer protocol; processing the target message according to the processing strategy; and the second processing module of the flow processing system performs flow processing according to the processing result.
In summary, in the technical scheme of the disclosure, the processing and statistics of the flow can be processed by different processing modules, so that the different processing modules can be conveniently expanded under the condition of controlling the cost, and the flow processing efficiency is improved to a certain extent.
The foregoing description of the preferred embodiments of the present disclosure is not intended to limit the disclosure, but rather to cover all modifications, equivalents, improvements and alternatives falling within the spirit and principles of the present disclosure.

Claims (10)

1. A method of traffic handling, comprising:
responding to a first processing module of a flow processing system to receive a target message, analyzing the target message, and determining quintuple information and an application layer protocol;
determining a processing strategy of the target message according to the quintuple information and the application layer protocol;
processing the target message according to the processing strategy;
and the second processing module of the flow processing system performs flow processing according to the processing result.
2. The method of claim 1, wherein the determining the processing policy of the target message according to the five-tuple information and the application layer protocol comprises:
determining a target flow table according to the quintuple information;
and determining the processing strategy of the target message according to the target flow table and the application layer protocol.
3. The method of claim 2, wherein the determining the processing policy of the target packet according to the target flow table and the application layer protocol comprises:
responding to the determination that the target message is a first type message and the target message carries load content, and determining the message carrying the same load content as the target message according to the target flow table;
and modifying the target message according to the determined message.
4. The method of claim 2, wherein the determining the processing policy of the target packet according to the target flow table and the application layer protocol comprises:
determining aging information of the target flow table in response to determining that the target message is a second type message and determining that the target message is a de-link message;
and generating a session message according to the aging information and the attribute information of the session to which the target message belongs, and forwarding the session message to the second processing module.
5. The method of claim 2, wherein the determining the processing policy of the target packet according to the target flow table and the application layer protocol comprises:
determining a service code corresponding to the target message according to the target flow table, the application layer protocol and a preset service code list;
and determining the processing strategy of the target message according to the service code and a preset processing strategy list.
6. The method of claim 1, wherein the processing the target message according to the processing policy comprises:
and marking the target message in response to determining that the target message carries flow statistical information.
7. The method of claim 1, wherein the method further comprises:
the second processing module generates a log file according to the target flow table and the flow statistical information;
uploading the log file.
8. A flow processing system, comprising:
the first processing module is configured to respond to receiving a target message, analyze the target message and determine quintuple information and an application layer protocol; determining a processing strategy of the target message according to the quintuple information and the application layer protocol; processing the target message according to the processing strategy;
and the second processing module is configured to perform flow processing according to the processing result.
9. An electronic device comprising a memory, a processor, a bus and a computer program stored on the memory and executable on the processor, wherein the processor implements the flow processing method of any of claims 1 to 7 when the computer program is executed by the processor.
10. A non-transitory computer readable storage medium, on which a computer program is stored, characterized in that the computer program, when executed by a processor, implements the flow processing method according to any one of claims 1 to 7.
CN202310876663.9A 2023-07-17 2023-07-17 Flow processing method, system, electronic device and storage medium Pending CN116781545A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202310876663.9A CN116781545A (en) 2023-07-17 2023-07-17 Flow processing method, system, electronic device and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202310876663.9A CN116781545A (en) 2023-07-17 2023-07-17 Flow processing method, system, electronic device and storage medium

Publications (1)

Publication Number Publication Date
CN116781545A true CN116781545A (en) 2023-09-19

Family

ID=88006458

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202310876663.9A Pending CN116781545A (en) 2023-07-17 2023-07-17 Flow processing method, system, electronic device and storage medium

Country Status (1)

Country Link
CN (1) CN116781545A (en)

Similar Documents

Publication Publication Date Title
CN106815112B (en) Massive data monitoring system and method based on deep packet inspection
US8009672B2 (en) Apparatus and method of splitting a data stream over multiple transport control protocol/internet protocol (TCP/IP) connections
CN114124929B (en) Cross-network data processing method and device
EP3832452A1 (en) Log printing method and system, server
CN114285781B (en) SRV6 service flow statistics method, device, electronic equipment and medium
CN109525495B (en) Data processing device and method and FPGA board card
CN108429739A (en) A kind of method, system and the terminal device of identification honey jar
US8572245B1 (en) Using the TCP window size for identifying packets and debugging
US10123190B2 (en) System and method for testing a CoAP server
CN103873443A (en) Information processing method, local proxy server and network proxy server
CN108259576B (en) Software and hardware real-time information transmission system and method
CN113746851B (en) Proxy system and method supporting real-time analysis of GRPC request
CN116781545A (en) Flow processing method, system, electronic device and storage medium
US20030204586A1 (en) Intelligent data replicator
CN108259528B (en) Resource caching method and device
CN115801927A (en) Message parsing method and device
CN110868318B (en) Method and device for generating network access relation, electronic equipment and storage medium
CN112769741B (en) Message communication method and electronic equipment
CN112335203B (en) Processing local area network diagnostic data
JP2018137687A (en) Packet analyzing program, packet analyzer, and packet analyzing method
CN111865884A (en) Message processing method, device and equipment
CN115250254B (en) Netflow message distribution processing method and device
CN113163025B (en) Data transmission method, device, equipment and storage medium
CN116088853A (en) Data processing method and device, electronic equipment and storage medium
CN115037793B (en) User datagram protocol data processing method and device and electronic equipment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination