CN117896295A - Fault visualization method and system for process layer switch fault diagnosis service - Google Patents
Fault visualization method and system for process layer switch fault diagnosis service Download PDFInfo
- Publication number
- CN117896295A CN117896295A CN202311821658.4A CN202311821658A CN117896295A CN 117896295 A CN117896295 A CN 117896295A CN 202311821658 A CN202311821658 A CN 202311821658A CN 117896295 A CN117896295 A CN 117896295A
- Authority
- CN
- China
- Prior art keywords
- fault
- process layer
- layer switch
- message
- flow
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 183
- 230000008569 process Effects 0.000 title claims abstract description 132
- 238000003745 diagnosis Methods 0.000 title claims abstract description 91
- 238000007794 visualization technique Methods 0.000 title claims description 18
- 238000012544 monitoring process Methods 0.000 claims abstract description 21
- 230000000007 visual effect Effects 0.000 claims abstract description 19
- 230000009471 action Effects 0.000 claims abstract description 17
- 230000006854 communication Effects 0.000 claims description 31
- 238000004891 communication Methods 0.000 claims description 30
- 241000272814 Anser sp. Species 0.000 claims description 14
- 238000012800 visualization Methods 0.000 claims description 9
- 230000004044 response Effects 0.000 claims description 5
- 230000007246 mechanism Effects 0.000 claims description 4
- 238000004590 computer program Methods 0.000 claims description 3
- 238000000605 extraction Methods 0.000 claims description 3
- 230000000875 corresponding effect Effects 0.000 description 10
- 238000004458 analytical method Methods 0.000 description 8
- 230000005540 biological transmission Effects 0.000 description 6
- 238000010586 diagram Methods 0.000 description 6
- 238000012545 processing Methods 0.000 description 5
- 230000001276 controlling effect Effects 0.000 description 4
- 230000008030 elimination Effects 0.000 description 3
- 238000003379 elimination reaction Methods 0.000 description 3
- 239000000284 extract Substances 0.000 description 3
- 230000006855 networking Effects 0.000 description 3
- 230000002159 abnormal effect Effects 0.000 description 2
- 230000007547 defect Effects 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 238000004519 manufacturing process Methods 0.000 description 2
- 230000026676 system process Effects 0.000 description 2
- 230000009286 beneficial effect Effects 0.000 description 1
- 125000004122 cyclic group Chemical group 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 230000003993 interaction Effects 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 239000013307 optical fiber Substances 0.000 description 1
- 230000010076 replication Effects 0.000 description 1
- 125000006850 spacer group Chemical group 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
A method for visualizing faults in a process layer switch fault diagnosis service, the method comprising the steps of: step 1, a business flow classification rule is issued to the process layer switch in advance, and the process layer switch is controlled to realize permission forwarding configuration, flow control action configuration and statistics counting configuration for the message multicast flow; step 2, based on the configuration in the step 1, monitoring the message multicast flow of the process layer switch, and extracting fault information in a fault message when the process layer switch is analyzed to have the over-speed flow or packet loss; and 3, analyzing the typical field to acquire the fault diagnosis data, and uploading the fault diagnosis data through SNMP or MMS and outputting a visual fault table.
Description
Technical Field
The present invention relates to the field of power system process layer network communication technology, and more particularly, to a fault visualization method, system, device and computer readable storage medium for a process layer switch fault diagnosis service.
Background
The IEC61850 series standard divides the digital substation communication network into a station control layer, a spacer layer and a process layer, and adopts a switch network to realize communication.
In the point-to-point transmission networking mode of the intelligent substation, the process of transmitting information such as protection voltage and current, tripping and closing commands or primary equipment states and the like realized by the optical fiber direct connection mode to corresponding intelligent equipment is a network transmission process of a station control layer. The specially arranged process layer exchanger is communicated with the devices at intervals, and the process of pushing GOOSE/SV messages is a process layer function. The rationality of the process layer network design determines the reliability of the operation of the transformer substation to a great extent, and the networking scheme directly influences the realization of functions such as protection and control and the efficiency and safety of data transmission.
The current process layer network equipment adopted by the transformer substation is a common industrial grade Ethernet switch, the EMC (Electromagnetic Compatibility ) performance and other performances of the switch are superior to those of a commercial switch, and the fault monitoring can only be accurate to ports: such as port CRC (Cyclic Redundancy Check ) errors, port traffic statistics anomalies, and the like. The currently used process layer switch has service faults, cannot be directly positioned, and can only reverse fault sources through the fault results of the intelligent recorder, so that the process needs to spend a great deal of energy, usually needs to be pulled through by a plurality of different departments, even among companies, and cannot meet the fault analysis requirements of a process layer network of a transformer substation. The patent is a method for rapidly and visually solving the faults in the process layer network. For example: positioning a GOOSE and SV message overspeed; locating an illegal GOOSE, SV message characteristics, an access port and packet loss information of the switch; finding the ports of non-GOOSE and SV messages existing in the switch; positioning GOOSE and SV packet loss caused by configuration errors; and displaying the message characteristics of the service flow with faults in the switch in real time.
In order to solve the problem of lack of positioning means for traffic faults, the problem of fault message positioning and fault message characteristic acquisition is required to be solved.
Disclosure of Invention
In order to solve the defects in the prior art, the invention provides a fault visualization method and a system for a process layer switch fault diagnosis service, which are used for controlling a forwarding mode of a message multicast flow by issuing a service flow classification rule to the process layer switch in advance, and monitoring the message multicast flow so as to extract fault diagnosis data and realize the visualized fault diagnosis service.
The invention adopts the following technical scheme.
The first aspect of the present invention relates to a fault visualization method for a process layer switch fault diagnosis service, the method comprising the steps of: step 1, a business flow classification rule is issued to the process layer switch in advance, and the process layer switch is controlled to realize permission forwarding configuration, flow control action configuration and statistics counting configuration for the message multicast flow; step 2, based on the configuration in the step 1, monitoring the message multicast flow of the process layer switch, and extracting fault information in a fault message when the process layer switch is analyzed to have the over-speed flow or packet loss; and 3, analyzing the typical field to acquire the fault diagnosis data, and uploading the fault diagnosis data through SNMP or MMS and outputting a visual fault table.
Preferably, the traffic classification rule includes a white list rule, a gray list rule and a black list rule; the service flow classification rule indicates the process layer switch to receive and forward the message multicast flow of the communication equipment in the white list rule, indicates the process layer switch to discard the message multicast flow of the communication equipment in the black list rule, and simultaneously indicates the process layer switch to select and configure the operation mode of the message multicast flow of the communication equipment in the gray list rule based on the gray list rule; the operation mode of selecting and configuring the message multicast flow of the communication equipment in the gray list rule is as follows: and receiving and forwarding, discarding or selectively receiving and forwarding the message multicast traffic of the communication equipment in the gray list rule.
Preferably, the permission forwarding configuration configures receiving and forwarding, discarding or selectively receiving of the communication device based on the white list rule, the gray list rule and the black list rule, respectively; the flow control action is configured to configure the flow control actions of the process layer switch and each port thereof; the statistical counting configuration is used for metering the message receiving and transmitting quantity of each port of the process layer switch.
Preferably, in step 2, the monitoring of the packet multicast traffic of the process layer switch further includes: respectively measuring the white list flow, the gray list flow and the black list flow of each port on the process layer switch; when the white list flow exceeds a white list flow threshold value of a corresponding port, judging that a fault message exists in the port; judging that a fault message exists in the port when the gray list flow exceeds a gray list flow threshold value in the current operation mode; and when the blacklist flow is not zero, judging that the port has a fault message.
Preferably, white list traffic packet loss and gray list traffic packet loss of each port in the process layer switch are monitored, if packet loss occurs, a fault message is judged to occur, and a fault diagnosis module is informed to analyze the cause of the fault; the reasons include: VLAN configuration errors, multicast duplicate packet loss, traffic storms caused by configuration errors.
Preferably, the extracting the fault information in the fault message further includes: the extraction is based on typical field implementation in a pre-configured visualization template; the typical fields are part or all of a source MAC address, a destination MAC address, a source IP, a destination IP, an EtherType, a protocol type, a message input port, a message output port, the number of lost packets, the reason of lost packets, a first packet timestamp and a latest packet timestamp.
Preferably, analyzing the typical field to obtain the fault diagnosis data further includes: defining typical fields included in fault diagnosis data in the fault diagnosis data according to message types in message multicast flow received and forwarded by the process layer switch; the field information in different message types corresponds to the typical fields one by one.
Preferably, the message type at least includes GOOSE and SV.
Preferably, analyzing the typical field to obtain the fault diagnosis data further includes: initializing a fault item contained in the fault diagnosis data of the current time; and if the fault item contained in the fault diagnosis data of the current time cannot obtain the response of the latest hardware configuration state of the process layer switch, deleting the fault item from the fault diagnosis data.
Preferably, step 3 is started according to a polling mechanism or a query mode, and the obtained fault diagnosis data is assembled and uploaded through an SNMP or MMS protocol; after the upper-layer equipment receives the fault diagnosis data, a visual fault table is generated according to typical fields in the fault diagnosis data; the visual fault table realizes combination of a plurality of fault items according to the content of part of typical fields, wherein the combination at least comprises the combination of port numbers in the same VLAN into the same port.
The second aspect of the invention relates to a fault visualization system for a process layer switch fault diagnosis service by using the method in the first aspect of the invention, wherein the system comprises a configuration module, a monitoring module and an output module; the configuration module is used for issuing a service flow classification rule to the process layer switch in advance and controlling the process layer switch to realize permission forwarding configuration, flow control action configuration and statistics counting configuration for the message multicast flow; the monitoring module is used for monitoring the message multicast flow of the process layer switch based on the configuration of the configuration module, and extracting fault information in the fault message when the process layer switch is analyzed to have the over-speed flow or packet loss; and the output module is used for analyzing the typical fields to acquire the fault diagnosis data, and uploading the fault diagnosis data through SNMP or MMS and outputting a visual fault table.
A third aspect of the present invention relates to a terminal, comprising a processor and a storage medium; the storage medium is used for storing instructions; the processor is operative to perform the steps of the method of the first aspect of the invention in accordance with the instructions.
The fourth aspect of the present invention relates to a computer readable storage medium having stored thereon a computer program, characterized in that the program when executed by a processor implements the steps of the method of the first aspect of the present invention.
Compared with the prior art, the method and the system for visualizing the faults of the fault diagnosis service of the process layer switch have the advantages that the service flow classification rule is issued to the process layer switch in advance to control the forwarding mode of the message multicast flow, and the message multicast flow is monitored to extract the fault diagnosis data and realize the visualized fault diagnosis service. According to the characteristics of the data interaction service of the process layer in the power system, the invention realizes accurate fault message characteristic acquisition and fault message positioning, and provides a basis for fault analysis and fault elimination.
The beneficial effects of the invention also include:
1. the invention provides a fault diagnosis message for the service flow of the process layer exchanger of the power system and supports the visual fault information display realized by using the message. The method supports the accurate analysis of the transmission state of the data flow transmitted in the process layer and having strict data structure, form and data quantity, ensures that defects and faults hidden in a message or on a communication port and a data link are discovered at the first time, ensures the safety of the communication of the process layer, improves the fault elimination efficiency and reduces the fault elimination cost.
2. The invention can track whether each piece of data entering the switch loses the packet in real time and record key information. For each piece of fault data entering the switch, the key information of the messages such as the port, mac, vlan information, ethernet type, protocol type and the like of the data can be captured and recorded in real time; meanwhile, the forwarding trace of the stream in the exchanger can be grasped: such as packet loss count, packet loss byte count, time stamps of the most recent and latest ingress ports, etc. Through the visual tracking to the inside trouble of process layer switch, can real-time location switch inside business flow trouble, through analyzing real-time flow trouble information, in time discover the packet loss position of switch data to provide powerful data support for solving these trouble.
3. The method is suitable for upgrading and realizing the functions on the current running power switch, and has strong popularization. The method can record characteristic information in sufficient detail based on data when the data in the process layer network fails so as to locate the data failure of the switch.
Drawings
FIG. 1 is a schematic diagram of steps of a process layer switch failure visualization method for failure diagnosis service of the present invention;
FIG. 2 is a schematic diagram of a visual fault table in a fault visualization method for process layer switch fault diagnosis service according to the present invention;
fig. 3 is a schematic block diagram of a failure visualization system for a process layer switch failure diagnosis service according to the present invention.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention clearer, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. The described embodiments of the invention are only some, but not all, embodiments of the invention. All other embodiments of the invention not described herein, which are obtained from the embodiments described herein, should be within the scope of the invention by those of ordinary skill in the art without undue effort based on the spirit of the present invention.
Fig. 1 is a schematic diagram of steps of a failure visualization method for a process layer switch failure diagnosis service according to the present invention. As shown in fig. 1, the first aspect of the present invention relates to a fault visualization method for a process layer switch fault diagnosis service, and the method includes steps 1 to 3.
And step 1, issuing a service flow classification rule to a process layer switch in advance, and controlling the process layer switch to realize permission forwarding configuration, flow control action configuration and statistical counting configuration of the message multicast flow.
In order to obtain fault diagnosis data of the switch, the method needs to configure the service flow classification rule in the switch in advance. The traffic classification rule can process traffic from different communication devices in different manners according to classification manners of the white list, the black list and the gray list. For example, if a certain communication device is a whitelisted device, the method will utilize the process layer switch to receive traffic from that device and forward it to the corresponding other switch or destination device. And if it is a blacklisted device, the method instructs the process layer switch to reject the traffic.
According to different deployment purposes and networking modes of the process layer switches in the power system, the service flow classification rules issued to each process layer switch by the upper service management platform are also different. In one embodiment of the invention, the upper layer service management platform is also supported to issue uniform service flow classification rules, and each process layer switch can generate the white list, the black list and the gray list rules belonging to the process layer switch according to the network connection mode of the process layer switch.
Preferably, the traffic classification rule includes a white list rule, a gray list rule and a black list rule; the service flow classification rule indicates the process layer switch to receive and forward the message multicast flow of the communication equipment in the white list rule, indicates the process layer switch to discard the message multicast flow of the communication equipment in the black list rule, and indicates the process layer switch to select and configure the operation mode of the message multicast flow of the communication equipment in the gray list rule based on the gray list rule; the operation mode for selecting and configuring the message multicast flow of the communication equipment in the gray list rule is as follows: and receiving and forwarding, discarding or selectively receiving and forwarding the message multicast traffic of the communication equipment in the gray list rule.
In the invention, the process of formulating the white list rule, the black list rule and the gray list rule is realized based on the business flow classification rule. And the processing process of the service flow of different communication equipment is realized according to the white list rule, the black list rule and the gray list rule, which is similar to the prior art. Each process layer switch may automatically receive traffic from communication devices identified as whitelisted and automatically discard traffic from blacklisted devices. Whereas for gray list devices, the process layer switch may customize the determination of the receipt or discard of its traffic. Depending on the configuration of the switch administrator, such as the business operations and maintenance personnel in the grid, the method can receive, selectively partially receive, or entirely discard traffic from the gray list devices.
White list rules: the user needs to make GOOSE and SV messages of the flow control, and the matching rule is Mac and message type of the message. The corresponding actions are flow control and statistical counting. The flow control is used for limiting speed, and the statistics counting is used for counting the white list message forwarding and discarding the message statistics counting.
Gray list rules: and respectively issuing rules of matching message types GOOSE and SV, wherein the default action is forwarding and can be configured to be discarded. Such messages are typically discarded directly in a process layer network. Such messages are typically GOOSE, SV, which are erroneously configured, device abnormal, etc. to cause errors into the process layer switch.
Blacklist rules: such messages are typically illegal messages in the process layer network and typically need to be discarded directly. And removing all messages outside the white list and the gray list, wherein the issuing rule is to match all messages, and the action is to discard.
The rule priorities of the three types of messages must satisfy: the white list rule > the gray list rule > the black list rule, so that the characteristics of first matching and first effective of hardware rules can be utilized to ensure the correct classification of each message. In other words, if a certain traffic is identified as a white list message, it is executed according to the white list rule; only when a certain traffic is not considered as a white list message or as a gray list message, it can be executed according to the black list rule.
As described above, each traffic entering the switch is classified into three types of messages according to the classification rule that is actually matched: white list message, gray list message and black list message. Each piece of data can only be one of the three messages, and no other exceptional situation exists.
Besides realizing the classification processing of the message according to the service flow classification rule, the method controls the configuration of basic functions such as message flow permission forwarding, flow control action, statistics counting and the like on a process layer switch in the step 1 so as to realize the actual monitoring of the fault message in the step 2.
Preferably, the permission forwarding configuration configures receiving and forwarding, discarding or selectively receiving of the communication device based on a white list rule, a gray list rule and a black list rule, respectively; the flow control action is configured to configure flow control actions of the process layer switch and each port thereof; the statistical counting configuration is used for metering the message receiving and transmitting quantity of each port of the process layer switch.
The flow control action configuration can obtain each port parameter of the switch, and evaluate the data receiving and transmitting capacity of the port and the data processing capacity of the switch, so that when the flow of each port exceeds the data processing speed or the port bearing capacity of the switch, a certain receiving port or a certain sending port is temporarily controlled to prevent the operation fault of the large-scale switch. In addition, the statistical technology function can count the message transceiving of a certain port, so that the total message amount of normal transceiving in the running process of the port can be obtained, and the number of messages discarded when the port is abnormal or blocked can be obtained.
Through the functions, the method can continuously monitor the message receiving and transmitting conditions of all ports of the switch, so that the fault problem is counted.
And 2, monitoring the message multicast flow of the process layer switch based on the configuration in the step 1, and extracting fault information in the fault message when the process layer switch is analyzed to have the flow overspeed or packet loss.
Preferably, in step 2, the monitoring of the packet multicast traffic of the process layer switch further includes: respectively measuring the white list flow, the gray list flow and the black list flow of each port on the process layer switch; when the white list flow exceeds the white list flow threshold value of the corresponding port, judging that a fault message exists in the port; judging that a fault message exists in the port when the gray list flow exceeds a gray list flow threshold value in the current operation mode; and when the blacklist flow is not zero, judging that the port has a fault message.
In the invention, the multicast flow of the message is monitored according to different types of the message by the classification rule in the step 1. If a message is a message from the white list equipment, the method monitors the flow of the message in real time, and judges a fault message when the flow of the message exceeds the limit.
The flow monitoring method combined with the classification rule is very suitable for being applied to power system process layer communication with fixed data transmission flow. Considering that the messages received by the process layer switch are usually traffic with very fixed data volume and data format in a certain time interval, such as GOOSE and SV messages, the method can very accurately define the traffic threshold of the whitelist message, the traffic threshold of the blacklist and the traffic threshold of the gray list according to the configuration rule of the switch. It is easy to think that even if the current message flow exceeds a few bytes, the method can judge that the fault flow exists in the communication process on the premise of not analyzing a certain message, so that the fault of certain or a certain message is positioned and analyzed.
Through the flow threshold value, the method can analyze the condition that different types of flows have flow overspeed, and the flow overspeed is usually caused by errors in the transmission process or errors in message generation.
In addition, in step 2 of the present invention, the method further judges whether the fault flow exists in various messages according to the packet loss state based on various service flows in the switch.
Preferably, white list flow packet loss and gray list flow packet loss of each port in the process layer switch are monitored, if packet loss occurs, a fault message is judged to occur, and a fault diagnosis module is informed to analyze the fault reason; reasons include: VLAN configuration errors, multicast duplicate packet loss, traffic storms caused by configuration errors.
In practice, there may be various situations of packet loss in the process layer switch, but the present invention only focuses on tracing the source VLAN configuration error and the packet loss problem occurring during multicast replication through the monitored packet loss. The method can monitor the packet loss according to the common mode in the prior art, and simultaneously searches VLAN configuration problems and the like according to the packet loss through a ping command and the like.
Once the method confirms the reasons of packet loss of the white list traffic and the gray list traffic which should be forwarded as VLAN configuration errors or multicast duplication packet loss, the method can identify that corresponding fault messages exist.
After the fault message is determined to exist on the equipment through the situation, the method can extract relevant information of all the fault messages, so that the method is used in the analysis and diagnosis process of the step 3.
Preferably, the extracting the fault information in the fault message further includes: extracting typical field implementations in a pre-configured visualization template; typical fields are some or all of source MAC address, destination MAC address, source IP, destination IP, etherType, protocol type, packet ingress port, packet egress port, number of dropped packets, reason for dropped packets, first packet timestamp, last packet timestamp.
Preferably, analyzing the typical field to obtain the fault diagnosis data further includes: defining typical fields included in fault diagnosis data in the fault diagnosis data according to message types in message multicast flow received and forwarded by a process layer switch; the field information in different message types corresponds to the typical fields one by one.
Specifically, the visualization module in the invention is allocated to the process layer switch in advance by the upper layer service management platform.
A visualization template, the elements of which include any one or more of the following fields: typical field assignment information of the header includes source Mac address, destination Mac, source IP, destination IP, ethernet type, protocol type, message ingress port information, etc. The service message entering the switch automatically extracts the element value corresponding to the visual template from the message in real time, namely the typical field mentioned above.
Preferably, the message type at least includes GOOSE and SV.
In the embodiment of the present invention, if the message types are GOOSE and SV, typical fields that may be included are source Mac address, destination Mac address, etherType, etc. according to the formats of GOOSE and SV messages, and since the header does not include source IP and destination IP, the above fields are not included in the fault analysis process of such message traffic.
The method sends the acquired fault message and the information extracted from the message to a corresponding data processing unit of the switch for analysis, thereby executing the step 3.
And 3, analyzing the typical fields to acquire fault diagnosis data, and uploading the fault diagnosis data through SNMP or MMS and outputting a visual fault table.
According to the content of the step 3, the method not only can obtain fault diagnosis data in a message form, but also can output a fault flow visualization table item through uploading analysis of the fault diagnosis data. In particular, in addition to the typical fields recorded in the message, the process layer switch may record information about the fault determination process, such as the statistics count of the fault message, the cause of the fault, the forwarding port, and the time stamp of the earliest and latest message into the switch, which are recorded by the fault traffic analysis function of the switch.
Preferably, analyzing the representative field to obtain fault diagnosis data further includes: initializing fault items contained in the fault diagnosis data of the current time; if the fault item contained in the current fault diagnosis data cannot obtain the response of the latest hardware configuration state of the process layer switch, deleting the fault item from the fault diagnosis data.
In the invention, the fault diagnosis data can also be updated by polling or the like to prevent the information in the fault diagnosis data from being wrong or not updated. For example, data communication configuration information such as port configuration of a process layer switch may be changed as needed during operation. When the information is changed, the essential content and meaning of the typical field from which the fault diagnosis data is extracted and the fault entry corresponding to the typical field are changed. At this time, if the table entry content is not deleted in time, there will be erroneous content in the fault diagnosis data.
To this end, the method may activate this data update process based on the switch's own mechanism or polling of the fault service related software. In the updating process, the method firstly initializes the fault item in the data, namely, the extraction of the data in the fault message is realized according to the step 2. Then, the method requests the status response of the related hardware by using the existing table entry, if the correct response can be obtained, the fault information recorded in the table entry can be judged to be up to date, otherwise, the fault entry is deleted from the data.
The hardware can be a communication element on a process layer switch such as a port, and the configuration of the hardware such as the number of the port number, the MAC address and the like can be changed along with manual configuration, so that the method can reversely verify the timeliness and the accuracy of the table entry to the hardware so as to prevent the old table entry from affecting the accuracy of the data.
Specifically, if the table item is judged to exist, the latest hardware state information of the fault flow is read out, and the software record is updated; if the list item does not exist, the data fault disappears, and the corresponding software list item is deleted.
Preferably, step 3 is started according to a polling mechanism or a query mode, and the obtained fault diagnosis data is assembled and uploaded through an SNMP (Simple Network Management Protocol ) or MMS (Manufacturing Message Specification, manufacturing message specification) protocol; after the upper-layer equipment receives the fault diagnosis data, a visual fault table is generated according to typical fields in the fault diagnosis data; the visual fault table implements a combination of a plurality of fault items according to the contents of a part of typical fields, wherein the combination at least comprises combining port numbers in the same VLAN (Virtual LAN) into the same port.
In the invention, after reverse verification and updating to the hardware, accurate table item information can be obtained, thereby obtaining accurate fault diagnosis data. Because the data contains the typical fields, the method can define the data to be assembled into a message format according to the typical fields and the content in the data, and assemble the data into the message content meeting the requirements of SNMP or MMS protocols, and realize the uploading of the data by a software request or polling mode. Meanwhile, the method can record the fault content in the switch through a log.
Fig. 2 is a schematic diagram of a visual fault table in the method for obtaining fault diagnosis data of a process layer switch according to the present invention. As shown in fig. 2, the fault diagnosis data in the present invention is not the original data content extracted in step 2. In order to assemble into a message form and provide a fault message of the most compact data size, the method requires combining a plurality of different faults. In general, when the same receiving port or transmitting port fails, multiple failure messages are continuously generated, and the method can combine the failure messages, and in addition, although one device or even multiple switch devices may include multiple ports, the ports belong to one VLAN, the method can combine failure information according to the number of the VLAN. In this case, only the multicast failure in the same VLAN is considered, and the specific port problem in the VLAN is not considered.
In summary, the method obtains the content of the fault diagnosis data, and after the fault diagnosis data is sent in a message form, the service management platform at the upper layer can also extract the data and restore the data into a visual fault table.
Fig. 3 is a schematic block diagram of a process layer switch failure diagnosis data acquisition system according to the present invention. As shown in fig. 3, in a second aspect of the present invention, a system for obtaining fault diagnosis data of a process layer switch by using the method in the first aspect of the present invention includes a configuration module, a monitoring module, and an output module; the configuration module is used for issuing a service flow classification rule to the process layer switch in advance and controlling the process layer switch to realize permission forwarding configuration, flow control action configuration and statistics counting configuration for the message multicast flow; the monitoring module is used for monitoring the message multicast flow of the process layer switch based on the configuration of the configuration module, and extracting fault information in the fault message when the process layer switch is analyzed to have the flow overspeed or packet loss; and the output module is used for analyzing the typical fields to acquire fault diagnosis data, and uploading the fault diagnosis data through SNMP or MMS and outputting a visual fault table.
A third aspect of the present invention relates to a terminal, comprising a processor and a storage medium; the storage medium is used for storing instructions; the processor is operative to perform the steps of the method of the first aspect of the invention in accordance with the instructions.
The fourth aspect of the present invention relates to a computer readable storage medium having stored thereon a computer program which when executed by a processor performs the steps of the method of the first aspect of the present invention.
Finally, it should be noted that the above embodiments are only for illustrating the technical solution of the present invention and not for limiting the same, and although the present invention has been described in detail with reference to the above embodiments, it should be understood by those skilled in the art that: modifications and equivalents may be made to the specific embodiments of the invention without departing from the spirit and scope of the invention, which is intended to be covered by the claims.
Claims (13)
1. A method for visualizing faults in a process layer switch fault diagnosis service, the method comprising the steps of:
step 1, a business flow classification rule is issued to the process layer switch in advance, and the process layer switch is controlled to realize permission forwarding configuration, flow control action configuration and statistics counting configuration for the message multicast flow;
step 2, based on the configuration in the step 1, monitoring the message multicast flow of the process layer switch, and extracting fault information in a fault message when the process layer switch is analyzed to have the over-speed flow or packet loss;
and 3, analyzing the typical fields to acquire fault diagnosis data, and uploading the fault diagnosis data through SNMP or MMS and outputting a visual fault table.
2. The process layer switch failure diagnosis service failure visualization method of claim 1, wherein:
the business flow classification rules comprise a white list rule, a gray list rule and a black list rule;
the service flow classification rule indicates the process layer switch to receive and forward the message multicast flow of the communication equipment in the white list rule, indicates the process layer switch to discard the message multicast flow of the communication equipment in the black list rule, and simultaneously indicates the process layer switch to select and configure the operation mode of the message multicast flow of the communication equipment in the gray list rule based on the gray list rule;
the operation mode of selecting and configuring the message multicast flow of the communication equipment in the gray list rule is as follows:
and receiving and forwarding, discarding or selectively receiving and forwarding the message multicast traffic of the communication equipment in the gray list rule.
3. The process layer switch failure diagnosis service failure visualization method according to claim 2, wherein:
the permission forwarding configuration configures receiving and forwarding, discarding or selectively receiving of the communication equipment based on the white list rule, the gray list rule and the black list rule respectively;
the flow control action is configured to configure the flow control actions of the process layer switch and each port thereof;
the statistics counting configuration is used for metering the message receiving and transmitting quantity of each port of the process layer switch.
4. A process layer switch failure visualization method of failure diagnosis traffic according to claim 3, characterized by:
in the step 2, monitoring the packet multicast traffic of the process layer switch, further includes:
respectively measuring the white list flow, the gray list flow and the black list flow of each port on the process layer switch;
when the white list flow exceeds a white list flow threshold value of a corresponding port, judging that a fault message exists in the port;
judging that a fault message exists in the port when the gray list flow exceeds a gray list flow threshold value in the current operation mode;
and when the blacklist flow is not zero, judging that the port has a fault message.
5. The process layer switch failure diagnosis service failure visualization method of claim 4, wherein:
monitoring white list flow packet loss and gray list flow packet loss of each port in the process layer switch, judging that a fault message occurs if packet loss occurs, and informing a fault diagnosis module to analyze fault reasons;
the reasons include: VLAN configuration errors, multicast duplicate packet loss, traffic storms caused by configuration errors.
6. The process layer switch failure diagnosis service failure visualization method according to claim 5, wherein:
the extracting the fault information in the fault message further includes:
the extraction is based on typical field implementation in a pre-configured visualization template;
the typical fields are part or all of a source MAC address, a destination MAC address, a source IP, a destination IP, an EtherType, a protocol type, a message input port, a message output port, the number of lost packets, the reason of lost packets, a first packet timestamp and a latest packet timestamp.
7. The process layer switch failure diagnosis service failure visualization method of claim 6, wherein:
the analyzing the representative field to obtain the fault diagnosis data further includes:
defining typical fields included in fault diagnosis data in the fault diagnosis data according to message types in message multicast flow received and forwarded by the process layer switch;
the field information in different message types corresponds to the typical fields one by one.
8. The process layer switch failure diagnosis service failure visualization method of claim 7, wherein:
the message type at least comprises GOOSE and SV.
9. The process layer switch failure diagnosis service failure visualization method of claim 1, wherein:
the analyzing the representative field to obtain the fault diagnosis data further includes:
initializing a fault item contained in the fault diagnosis data of the current time;
and if the fault item contained in the fault diagnosis data of the current time cannot obtain the response of the latest hardware configuration state of the process layer switch, deleting the fault item from the fault diagnosis data.
10. The process layer switch failure diagnosis service failure visualization method of claim 1, wherein:
step 3, starting according to a polling mechanism or a query mode, and assembling and uploading the obtained fault diagnosis data through an SNMP or MMS protocol;
after the upper-layer equipment receives the fault diagnosis data, a visual fault table is generated according to typical fields in the fault diagnosis data;
the visual fault table realizes combination of a plurality of fault items according to the content of part of typical fields, wherein the combination at least comprises the combination of port numbers in the same VLAN into the same port.
11. A process layer switch failure diagnosis service failure visualization system utilizing the method of any of claims 1-8, characterized by:
the system comprises a configuration module, a monitoring module and an output module; wherein,
the configuration module is used for issuing a service flow classification rule to the process layer switch in advance and controlling the process layer switch to realize permission forwarding configuration, flow control action configuration and statistics counting configuration for the message multicast flow;
the monitoring module is used for monitoring the message multicast flow of the process layer switch based on the configuration of the configuration module, and extracting fault information in the fault message when the process layer switch is analyzed to have the over-speed flow or packet loss;
the output module is used for analyzing the typical fields to acquire the fault diagnosis data, and uploading the fault diagnosis data through SNMP or MMS and outputting a visual fault table.
12. A terminal comprising a processor and a storage medium; the method is characterized in that:
the storage medium is used for storing instructions;
the processor being operative according to the instructions to perform the steps of the method according to any one of claims 1-10.
13. Computer readable storage medium, on which a computer program is stored, characterized in that the program, when being executed by a processor, implements the steps of the method according to any of claims 1-10.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311821658.4A CN117896295A (en) | 2023-12-27 | 2023-12-27 | Fault visualization method and system for process layer switch fault diagnosis service |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202311821658.4A CN117896295A (en) | 2023-12-27 | 2023-12-27 | Fault visualization method and system for process layer switch fault diagnosis service |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN117896295A true CN117896295A (en) | 2024-04-16 |
Family
ID=90640620
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202311821658.4A Pending CN117896295A (en) | 2023-12-27 | 2023-12-27 | Fault visualization method and system for process layer switch fault diagnosis service |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117896295A (en) |
-
2023
- 2023-12-27 CN CN202311821658.4A patent/CN117896295A/en active Pending
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| Handigol et al. | I know what your packet did last hop: Using packet histories to troubleshoot networks | |
| CN103457791B (en) | A kind of intelligent substation network samples and the self-diagnosing method of control link | |
| CN103296755B (en) | Network online monitoring system for transformer substation | |
| EP3082293B1 (en) | Switching device and packet loss method therefor | |
| CN110417612B (en) | Network flow monitoring system and method based on network elements | |
| CN101399711B (en) | Network monitoring system and network monitoring method | |
| WO2015131463A1 (en) | Dynamic recognition method for network device topology of intelligent transformer substation network device based on mac address matching | |
| CN113708995B (en) | Network fault diagnosis method, system, electronic equipment and storage medium | |
| CN110620693A (en) | Railway station route remote restart control system and method based on Internet of things | |
| CN112073326B (en) | Intelligent substation process layer network data flow control method | |
| CN110838949A (en) | Network flow log recording method and device | |
| CN115766471B (en) | Network service quality analysis method based on multicast flow | |
| US10338544B2 (en) | Communication configuration analysis in process control systems | |
| KR100964392B1 (en) | System and method for managing network failure | |
| CN117896295A (en) | Fault visualization method and system for process layer switch fault diagnosis service | |
| WO2022270767A1 (en) | Device for generating and managing information bundle for intelligent network management system, and method of same | |
| CN114553678B (en) | Cloud network soft SLB flow problem diagnosis method | |
| WO2022270766A1 (en) | Device and method for automatic packet analysis-based intelligent network management | |
| CN116319468B (en) | Network telemetry method, device, switch, network, electronic equipment and medium | |
| US6977936B1 (en) | Service detail records for layered communications protocols | |
| CN115474215B (en) | Router-based networking method and system | |
| TWI581590B (en) | Real - time traffic collection and analysis system and method | |
| CN113783710B (en) | Process layer network fault positioning method and device based on self-learning criteria | |
| CN109088769B (en) | Device for diagnosing MPLS-VPN data message | |
| CN117768421A (en) | Method and system for realizing service flow path visualization based on power switch |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |