CN117978621A - Network line fault positioning method, system and storage medium - Google Patents
Network line fault positioning method, system and storage medium Download PDFInfo
- Publication number
- CN117978621A CN117978621A CN202410384859.0A CN202410384859A CN117978621A CN 117978621 A CN117978621 A CN 117978621A CN 202410384859 A CN202410384859 A CN 202410384859A CN 117978621 A CN117978621 A CN 117978621A
- Authority
- CN
- China
- Prior art keywords
- fault
- network
- network node
- path
- analyzed
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 31
- 238000012544 monitoring process Methods 0.000 claims description 50
- 238000001514 detection method Methods 0.000 claims description 36
- 238000000605 extraction Methods 0.000 claims description 22
- 238000004458 analytical method Methods 0.000 claims description 21
- 230000005540 biological transmission Effects 0.000 claims description 18
- 238000012806 monitoring device Methods 0.000 claims description 18
- 238000004364 calculation method Methods 0.000 claims description 6
- 239000000284 extract Substances 0.000 claims description 6
- 238000004891 communication Methods 0.000 abstract description 4
- 238000010586 diagram Methods 0.000 description 9
- 238000011144 upstream manufacturing Methods 0.000 description 6
- 238000012360 testing method Methods 0.000 description 4
- 230000002159 abnormal effect Effects 0.000 description 3
- 238000012545 processing Methods 0.000 description 3
- 230000008030 elimination Effects 0.000 description 2
- 238000003379 elimination reaction Methods 0.000 description 2
- 230000001360 synchronised effect Effects 0.000 description 2
- 230000005856 abnormality Effects 0.000 description 1
- 238000004590 computer program Methods 0.000 description 1
- 230000008094 contradictory effect Effects 0.000 description 1
- 238000007405 data analysis Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000009434 installation Methods 0.000 description 1
- 238000012423 maintenance Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
- H04L41/065—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis involving logical or physical relationship, e.g. grouping and hierarchies
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0677—Localisation of faults
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
- Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
- Y04S10/00—Systems supporting electrical power generation, transmission or distribution
- Y04S10/50—Systems or methods supporting the power network operation or management, involving a certain degree of interaction with the load-side end user applications
- Y04S10/52—Outage or fault management, e.g. fault detection or location
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention belongs to the technical field of communication, and discloses a network line fault positioning method, a system and a storage medium, wherein the method comprises the following steps: obtaining fault alarm information comprising fault path section path identification information, obtaining node identifications of all network nodes on a fault path section corresponding to any one of the path identification information, generating a fault path section set after traversing all the fault alarm information, setting a fault weight value of each network node in the fault path section set to 0, then obtaining any one of the network nodes, traversing the fault path section set, counting the number of fault path sections passing through any one of the network nodes, setting the number of fault weight values of any one of the network nodes, traversing all the network nodes, taking the network node with the largest fault weight value as a network node to be analyzed, generating network fault information based on the network node to be analyzed, and transmitting the network fault information to a network administrator terminal. The technical scheme of the invention can improve the speed and accuracy of fault location while reducing the network load.
Description
Technical Field
The invention belongs to the technical field of communication, and particularly relates to a network line fault positioning method, a system and a storage medium.
Background
With the rapid development of computers, people increasingly use the internet to transmit, acquire and communicate information. In the data transmission process, various faults cannot occur, and network connection problems such as network disconnection, slow network speed and the like are usually caused by network line faults. Once a failure occurs, the failed entity needs to be located to repair the failure and resume normal use.
In the prior art, for example, chinese patent application CN117135038a discloses a method, an apparatus and an electronic device for monitoring network faults, which acquire a network log to be analyzed, perform topology photographing on the network log to be analyzed to obtain a network topology relation diagram, perform outlier analysis on the network log to be analyzed to obtain abnormal location information, extract key sentences from the network log to be analyzed, generate network fault location information based on the network topology relation diagram, the abnormal location information and the key sentences, and output the network fault location information. The method needs to analyze the weblog to obtain the topological graph, the abnormal positioning information and the key sentences, and then generates fault positioning based on the information, so that the calculated amount is large, and the time is long. For example, chinese patent application CN117081913a discloses a method, an apparatus, a device, and a storage medium for locating a network fault, which receive a request for testing a data transmission path from a first host to a second host, where the request includes an IP address of the first host and an IP address of the second host, and according to the IP address of the first host and the IP address of the second host, obtain a data transmission path from Xi Di to the second host, obtain an IP address of each node on the transmission path, and according to the IP address of the second host, perform a first internet packet explorer test on the transmission path, and if it is determined that a network fault exists on the transmission path according to a test result, perform a second internet packet explorer test on the IP address of each node on the transmission path, so as to locate a node on the transmission path where the network fault exists. After the method detects the path fault, the detection data is sent to each node on the path to locate the fault, and the network burden is large.
Therefore, the method, the system and the storage medium for positioning the network line faults are provided, so that time consumption for positioning the network line faults is shortened, positioning accuracy is improved, network load is reduced, and the method, the system and the storage medium are the problems to be solved urgently.
Disclosure of Invention
Aiming at the technical problems, the invention provides a network line fault positioning method, a system and a storage medium.
In a first aspect, the present invention provides a network line fault locating method, which includes:
Step 1, network monitoring equipment acquires fault alarm information of a network line, wherein the fault alarm information comprises path identification information of a fault path section;
Step 2, based on any path identification information, acquiring node identifications of all network nodes on a fault path segment corresponding to any path identification information;
Step 3, after traversing all fault alarm information, generating a fault path segment set, wherein the fault path segment set comprises path identification information of any fault path segment and node identifications of all network nodes on any fault path segment;
Step 4, setting the fault weight value of each network node in the fault path segment set to be 0, then acquiring any network node, traversing the fault path segment set, counting the number of fault path segments passing through any network node, and setting the number as the fault weight value of any network node;
Step 5, after traversing all network nodes, taking the network node with the largest fault weight value as the network node to be analyzed;
Step 6, generating network fault information based on the network node to be analyzed, and sending the network fault information to a network manager terminal, wherein the network fault information comprises node identification and position information of the network node to be analyzed;
The step 1 is preceded by:
step 11, the path analysis equipment extracts and copies the data packet transmitted on the network line;
step 12, extracting a transmitting end identifier and a receiving end identifier from the data packet, correspondingly storing the transmitting end identifier, the receiving end identifier and the extracting time for extracting the data packet in a monitoring information storage module, and distributing the same path identifier information for the monitoring paths with the same transmitting end identifier and the same receiving end identifier;
step 13, based on the path identification information, periodically obtaining all the extraction time of any monitoring path in a preset period from the monitoring information storage module, and calculating the average value of the time difference values based on all the extraction time, wherein the calculation formula is as follows:
wherein TA is an average value, tn is a value of nth extraction time in a preset period, and N is the number of extracted data packets in the preset period;
And 14, judging whether the average value is positioned in a preset time range corresponding to the path identification information, and if not, sending the fault alarm information to the network monitoring equipment.
Generating a network path topology map based on the set of fault path segments, step 5 comprising:
step 51, defining the network node with the largest fault weight value as a first network node, judging whether the number of the first network nodes is 1, if so, taking the first network node as the network node to be analyzed, then entering step 54, and if not, entering step 52;
Step 52, defining a network branch where the first network node is located as a branch to be analyzed, and defining a first network node, which is located at the uppermost layer in the network path topology diagram, as a second network node for any branch to be analyzed;
Step 53, judging whether all the sub-nodes of the second network node have the maximum fault weight value, if yes, defining the second network node as the network node to be analyzed, then entering step 54, if not, defining the first network node in all the sub-nodes as the second network node, then returning to step 53 until all the first network nodes on any branch to be analyzed are traversed, then entering step 54;
and step 54, after traversing all the branches to be analyzed, acquiring node identifiers and position information of all the network nodes to be analyzed.
Specifically, the network failure information further includes a first failure content, and the step of acquiring the first failure content includes the following steps:
step 61, after obtaining node identification and position information of a network node to be analyzed, generating a first detection data packet, and sending the first detection data packet to the network node to be analyzed, wherein the first detection data packet comprises a terminal identification and a first password of network monitoring equipment;
Step 62, after receiving the first detection data packet, the security gateway on the transmission path obtains a first password in the first detection data packet, judges whether the first storage module stores the first password based on the terminal identification, if yes, opens the access right of the network monitoring equipment, and forwards the first detection data packet to the network node to be analyzed, wherein the transmission path is a network path from the network monitoring equipment to the network node to be analyzed;
Step 63, after receiving feedback information of the network node to be analyzed, the security gateway closes access rights of the network monitoring equipment and sends the feedback information to the network monitoring equipment, wherein the feedback information comprises a detection result;
and step 64, acquiring first fault content of the network node to be analyzed based on the detection result.
Specifically, step 61 is preceded by:
step 611, the network monitoring device sends an authentication request to the first server, wherein the authentication request comprises a terminal identifier;
step 612, after the authentication is passed, the first server sends an encryption key to the network monitoring equipment;
Step 613, the network monitoring device encrypts the terminal identifier and the first password by using the encryption key to generate first encrypted data, and sends the first encrypted data to the first server;
Step 614, the first server decrypts the first encrypted data by using the decryption key, after decrypting, stores the terminal identifier and the first password in the second storage module correspondingly, and sends the terminal identifier and the first password to the security gateway;
Step 615, after receiving the terminal identifier and the first password, the security gateway correspondingly stores the terminal identifier and the first password in the first storage module.
Specifically, the network failure information further includes a second failure node and a second failure content, and step 64 further includes:
step 65, acquiring a first preset range corresponding to the first fault content based on the first fault content;
step 66, collecting operation data in a first preset time from all network devices in a first preset range of the network node to be analyzed;
Step 67, judging whether second fault content meeting preset conditions exists in the operation data, and if so, taking network equipment corresponding to the second fault content as a second fault node;
and step 68, storing the second fault node, the second fault content and the first fault content correspondingly.
Specifically, the network fault information further includes overhaul information, and the step of obtaining the overhaul information includes the following steps:
Step 71, searching a third storage module based on the first fault content, and acquiring first replacement equipment information for removing the fault corresponding to the first fault content;
step 72, based on the first fault content, judging whether second replacement equipment information for removing the fault corresponding to the second network node to be analyzed is required, if so, searching a third storage module based on the position information of the second network node to be analyzed and the first fault content to obtain the second replacement equipment information, and if not, directly entering step 73, wherein the second network node to be analyzed is a last hop network node or a next hop network node of the network node to be analyzed on the fault path section where the second network node to be analyzed is located;
And step 73, generating overhaul information based on the replacement equipment information, wherein the replacement equipment information comprises the first replacement equipment information and/or the second replacement equipment information.
In a second aspect, the present invention also provides a network line fault location system, including: the network monitoring equipment comprises a first acquisition module, a second acquisition module, a set generation module, an analysis module and a result output module;
the first acquisition module is used for acquiring fault alarm information of the network line, wherein the fault alarm information comprises path identification information of a fault path section;
the second acquisition module is used for acquiring node identifiers of all network nodes on the fault path segment corresponding to any path identification information according to any path identification information;
the system comprises a set generation module, a fault detection module and a fault detection module, wherein the set generation module is used for generating a fault path segment set after traversing all fault alarm information, wherein the fault path segment set comprises path identification information of any fault path segment and node identifications of all network nodes on any fault path segment;
The analysis module is used for setting the fault weight value of each network node in the fault path segment set to 0, then acquiring any network node, traversing the fault path segment set, counting the number of fault path segments passing through any network node, and setting the number of fault path segments as the fault weight value of any network node; after traversing all network nodes, taking the network node with the largest fault weight value as the network node to be analyzed;
The result output module is used for generating network fault information according to the network node to be analyzed and sending the network fault information to the network manager terminal, wherein the network fault information comprises node identification and position information of the network node to be analyzed;
The path analysis device is used for judging that the path fails and comprises the following steps:
step 11, the path analysis equipment extracts and copies the data packet transmitted on the network line;
step 12, extracting a transmitting end identifier and a receiving end identifier from the data packet, correspondingly storing the transmitting end identifier, the receiving end identifier and the extracting time for extracting the data packet in a monitoring information storage module, and distributing the same path identifier information for the monitoring paths with the same transmitting end identifier and the same receiving end identifier;
step 13, based on the path identification information, periodically obtaining all the extraction time of any monitoring path in a preset period from the monitoring information storage module, and calculating the average value of the time difference values based on all the extraction time, wherein the calculation formula is as follows:
wherein TA is an average value, tn is a value of nth extraction time in a preset period, and N is the number of extracted data packets in the preset period;
Step 14, judging whether the average value is positioned in a preset time range corresponding to the path identification information, and if not, sending fault alarm information to network monitoring equipment;
The analysis module is further configured to generate a network path topology map based on the fault path segment set, and the method for acquiring the network node to be analyzed includes:
step 51, defining the network node with the largest fault weight value as a first network node, judging whether the number of the first network nodes is 1, if so, taking the first network node as the network node to be analyzed, then entering step 54, and if not, entering step 52;
Step 52, defining a network branch where the first network node is located as a branch to be analyzed, and defining a first network node, which is located at the uppermost layer in the network path topology diagram, as a second network node for any branch to be analyzed;
Step 53, judging whether all the sub-nodes of the second network node have the maximum fault weight value, if yes, defining the second network node as the network node to be analyzed, then entering step 54, if not, defining the first network node in all the sub-nodes as the second network node, then returning to step 53 until all the first network nodes on any branch to be analyzed are traversed, then entering step 54;
and step 54, after traversing all the branches to be analyzed, acquiring node identifiers and position information of all the network nodes to be analyzed.
In a third aspect, the present invention provides a computer storage medium, where program instructions are stored, where the program instructions, when executed, control a device in which the computer storage medium is located to perform the network line fault location method of any one of the above.
The invention discloses a network line fault positioning method, a system and a storage medium, wherein path identifiers of fault path segments are obtained from fault alarm information, node identifiers of all network nodes in the fault path segments are obtained through the path identifiers, a fault path segment set is further generated, then fault weight of each network node in the fault path segment set is calculated, and the network node with the largest fault weight value is used as a network node to be analyzed.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings that are required to be used in the embodiments or the description of the prior art will be briefly described below, and it is obvious that the drawings in the following description are only embodiments of the present invention, and that other drawings can be obtained according to the provided drawings without inventive effort for a person skilled in the art.
FIG. 1 is a flow chart of a network line fault locating method of the present invention;
FIG. 2 is a network path topology diagram illustrating an embodiment of the present invention;
Fig. 3 is a schematic structural diagram of a network line fault location system according to the present invention.
Detailed Description
The present invention will be described in further detail with reference to the drawings and examples, in order to make the objects, technical solutions and advantages of the present invention more apparent. It should be apparent that the particular embodiments described herein are merely illustrative of the present invention and are some, but not all embodiments of the present invention. All other embodiments, which can be made by one of ordinary skill in the art without undue burden on the person of ordinary skill in the art based on embodiments of the present invention, are within the scope of the present invention.
It should be noted that, if there is a description of "first", "second", etc. in the embodiments of the present invention, the description of "first", "second", etc. is only for descriptive purposes, and is not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defining "a first" or "a second" may explicitly or implicitly include at least one such feature. In addition, the technical solutions of the embodiments may be combined with each other, but it is necessary to base that the technical solutions can be realized by those skilled in the art, and when the technical solutions are contradictory or cannot be realized, the combination of the technical solutions should be considered to be absent and not within the scope of protection claimed in the present invention.
Fig. 1 is a flowchart of an embodiment of a network line fault locating method provided by the present invention, where the flowchart specifically includes:
step 1, network monitoring equipment acquires fault alarm information of a network line, wherein the fault alarm information comprises path identification information of a fault path section.
Illustratively, by installing a data analysis device on the network line, the data packets on the network line are periodically duplicated for analysis of the data packets, generating fault alert information. Or the communication terminal of the network path detects the network line according to the received data, and sends out fault alarm information when abnormality occurs.
Illustratively, the fault alert information is network line instability, packet loss, request timeout, etc.
Specifically, step 1 is preceded by:
step 11, the path analysis equipment extracts and copies the data packet transmitted on the network line;
step 12, extracting a transmitting end identifier and a receiving end identifier from the data packet, correspondingly storing the transmitting end identifier, the receiving end identifier and the extracting time for extracting the data packet in a monitoring information storage module, and distributing the same path identifier information for the monitoring paths with the same transmitting end identifier and the same receiving end identifier;
step 13, based on the path identification information, periodically obtaining all the extraction time of any monitoring path in a preset period from the monitoring information storage module, and calculating the average value of the time difference values based on all the extraction time, wherein the calculation formula is as follows:
wherein TA is an average value, tn is a value of nth extraction time in a preset period, and N is the number of extracted data packets in the preset period;
And 14, judging whether the average value is positioned in a preset time range corresponding to the path identification information, and if not, sending the fault alarm information to the network monitoring equipment.
The preset period and the preset range are set according to experience of a person skilled in the art or according to actual application scenes, which is not limited in the embodiment of the present application.
Preferably, the monitoring data packets are periodically sent on the network paths, and the data packets on each monitoring path are extracted and recorded.
And calculating the extraction time interval of the data packet based on the extraction time, and if the average value of the extraction time interval exceeds a preset time range, indicating that the network path communication quality is poor and a fault exists.
In the data packet transmission process, due to the number of data packets on a network path and other reasons, the transmission time can have certain fluctuation, and according to the technical scheme of the invention, the stability of the network path is periodically considered, so that fault misjudgment caused by occasional errors is reduced.
It is also preferable to determine whether the network path has failed by the quality of the duplicated data packets.
And 2, acquiring node identifiers of all network nodes on the fault path segment corresponding to any path identification information based on any path identification information.
The network devices corresponding to all the network nodes on the fault path segment are servers, routers, switches and the like.
And step 3, after traversing all fault alarm information, generating a fault path segment set, wherein the fault path segment set comprises path identification information of any fault path segment and node identifications of all network nodes on any fault path segment.
Preferably, the above-mentioned failure path segment set is a failure path segment table, and the path identification information and the node identifications of all network nodes corresponding to the path identification information are stored in correspondence, as shown in table 1.
Table 1: fault path segment table (example)
Wherein, the path identifier (A1, B1) represents the path segment from the transmitting terminal A1 to the receiving terminal B1, the path identifier (A1, B2) represents the path segment from the transmitting terminal A1 to the receiving terminal B2, and the path identifier (A2, B1) represents the path segment from the transmitting terminal A2 to the receiving terminal B1.
And 4, setting the fault weight value of each network node in the fault path segment set to be 0, then acquiring any network node, traversing the fault path segment set, counting the number of fault path segments passing through any network node, and setting the number as the fault weight value of any network node.
And 5, after traversing all the network nodes, taking the network node with the largest fault weight value as the network node to be analyzed.
Specifically, a network path topology map is generated based on the set of fault path segments, step 5 comprising:
Step 51, defining the network node with the largest fault weight value as the first network node, judging whether the number of the first network nodes is 1, if so, using the first network node as the network node to be analyzed, then entering step 54, if not, entering step 52.
Step 52, defining the network branch where the first network node is located as a branch to be analyzed, and defining the first network node, which is located at the uppermost layer in the network path topology diagram, as a second network node.
Step 53, determining whether all the sub-nodes of the second network node have the maximum fault weight value, if yes, defining the second network node as the network node to be analyzed, then entering step 54, if not, defining the first network node in all the sub-nodes as the second network node, then returning to step 53 until all the first network nodes on any branch to be analyzed are traversed, then entering step 54.
And step 54, after traversing all the branches to be analyzed, acquiring node identifiers and position information of all the network nodes to be analyzed.
The technical scheme of the invention will be described by taking fig. 2 as an example.
For example, after traversing all network nodes in all the failure path segment sets, the maximum value of the failure weight value is 30, where the network nodes with the maximum failure weight values are 8, 10 and 11, the network branches where the network nodes 8, 10 and 11 are located are defined as branches to be analyzed, since the network nodes 10 and 11 are both located at the terminals of the network path topology graph, the network node 8 is defined as a second network node, and since all the sub-nodes (10 and 11) of the network node 8 have the maximum failure weight value, it is indicated that the failure of the network path where the network nodes 10 and 11 are located is caused by the failure of the network node 8, and the network node 8 is taken as the network node to be analyzed.
For another example, after traversing all the network nodes in all the failure path segment sets, the maximum value of the failure weight value is 36, where the network nodes with the maximum failure weight values are 9 and 13, the network branches where the network nodes 9, 12, 13 and 14 are located are defined as branches to be analyzed, since the network node 13 is located at the terminal of the network path topology map, the network node 9 is defined as a second network node, since all the sub-nodes (12 and 13) of the network node 9 do not have the maximum failure weight value (only the network node 13 has the maximum failure weight value), the network node 13 is defined as the second network node again for analysis, and the network node 13 can be regarded as the network node to be analyzed if the failure of the network path where the network nodes 9 and 13 are located is caused by the failure of the network node 13.
One network node in the network path fails and spreads the failure to the downstream network nodes thereof, so that other downstream network nodes also have 'failures', but when the downstream network nodes fail, the normal operation of the upstream network nodes thereof is not affected. Therefore, the network node with the largest failure weight value has the largest probability of failure, and is the network node to be analyzed.
Preferably, after the network node to be analyzed with the maximum fault weight value is obtained, the fault path segment passing through the network node to be analyzed is deleted from the fault path segment set to generate a new fault path segment set, and the steps 4 to 5 are repeated to obtain the network node to be analyzed.
Preferably, according to the positions of the network nodes at two ends of the fault path segment, the fault path segment in a preset range is acquired to generate a fault path segment set.
And 6, generating network fault information based on the network node to be analyzed, and sending the network fault information to a network manager terminal, wherein the network fault information comprises node identification and position information of the network node to be analyzed.
After the network node to be analyzed is obtained, the network node to be analyzed is used as a fault node, and the node identification and the position information of the network node to be analyzed are sent to a network administrator.
The location information is the installation location of the network node to be analyzed.
Specifically, the network failure information further includes a first failure content, and the step of acquiring the first failure content includes the following steps:
step 61, after obtaining the node identifier and the location information of the network node to be analyzed, a first detection data packet is generated, and the first detection data packet is sent to the network node to be analyzed, where the first detection data packet includes the terminal identifier and the first password of the network monitoring device.
Step 62, after receiving the first detection data packet, the security gateway on the transmission path obtains a first password in the first detection data packet, determines whether the first storage module stores the first password based on the terminal identifier, if yes, opens the access right of the network monitoring device, and forwards the first detection data packet to the network node to be analyzed, where the transmission path is a network path from the network monitoring device to the network node to be analyzed.
And 63, after receiving feedback information of the network node to be analyzed, the security gateway closes the access right of the network monitoring equipment and sends the feedback information to the network monitoring equipment, wherein the feedback information comprises a detection result.
And step 64, acquiring first fault content of the network node to be analyzed based on the detection result.
If a security gateway exists on the transmission path, the time for the first detection data packet to pass through the security gateway is required, a first password is set in the first detection data packet, the security gateway acquires the first password from the first detection data packet, further judges whether the first password is stored or not, and if so, the network monitoring equipment for transmitting the first detection data packet is authenticated equipment, the access authority is opened, and the first detection data packet is allowed to pass through.
Preferably, if the security gateway is not present on the transmission path, the first detection packet is not authenticated.
The feedback information is feedback content to be obtained by the first detection data packet, for example, a running log or a result of fault detection of the network node to be analyzed.
And the network monitoring equipment analyzes according to the feedback information, judges whether the network node to be analyzed has a fault, and acquires the fault content of the node to be analyzed.
According to the technical scheme of the invention, when the network path has faults, the detection data packet is only sent to the network node with high fault probability so as to locate the fault node of the network line.
Specifically, step 61 is preceded by:
in step 611, the network monitoring device sends an authentication request to the first server, where the authentication request includes a terminal identifier.
After the authentication is passed, the first server sends the encryption key to the network monitoring device in step 612.
Step 613, the network monitoring device encrypts the terminal identifier and the first password by using the encryption key, generates first encrypted data, and sends the first encrypted data to the first server.
Step 614, the first server decrypts the first encrypted data using the decryption key, and after decrypting, stores the terminal identifier and the first password in the second storage module correspondingly, and sends the terminal identifier and the first password to the security gateway.
Step 615, after receiving the terminal identifier and the first password, the security gateway correspondingly stores the terminal identifier and the first password in the first storage module.
The device administrator of the network monitoring device operates the network monitoring device to authenticate to the first server and send the first password to the security gateway.
Specifically, the network failure information further includes a second failure node and a second failure content, and step 64 further includes:
Step 65, acquiring a first preset range corresponding to the first fault content based on the first fault content.
Step 66, collecting operation data in a first preset time from all network devices in a first preset range of the network node to be analyzed.
And 67, judging whether second fault content meeting the preset conditions exists in the operation data, and if so, taking network equipment corresponding to the second fault content as a second fault node.
And step 68, storing the second fault node, the second fault content and the first fault content correspondingly.
The first preset range, the first preset time and the preset conditions are set according to experience of a person skilled in the art or according to actual application scenes, which is not limited in the embodiment of the present application.
The fault of the network node to be analyzed may be caused by other network devices nearby the network node to be analyzed, so after the fault content of the network node to be analyzed is obtained, whether the network device nearby the network node to be analyzed has the network device fault causing the first fault content is judged, if yes, the fault of the network node to be analyzed is caused by the network device, the network device is a true fault node (namely a second fault node) on a network line, and the second fault content of the second fault node are simultaneously sent to a network administrator terminal, so that the accurate positioning of the network line fault is realized.
For example, if the first fault content of the network node H1 to be analyzed is a memory error (i.e., the first fault content), and the first preset range corresponding to the first fault content is the same cabinet, operation data of other network devices in the same cabinet are obtained, whether the other network devices have network devices with excessively high temperature (i.e., the second fault content) is judged, and if so, the network devices are used as the second fault node.
Specifically, the network fault information further includes overhaul information, and the step of obtaining the overhaul information includes the following steps:
Step 71, searching a third storage module based on the first fault content, and acquiring first replacement equipment information for removing the fault corresponding to the first fault content;
step 72, based on the first fault content, judging whether second replacement equipment information for removing the fault corresponding to the second network node to be analyzed is required, if so, searching a third storage module based on the position information of the second network node to be analyzed and the first fault content to obtain the second replacement equipment information, and if not, directly entering step 73, wherein the second network node to be analyzed is a last hop network node or a next hop network node of the network node to be analyzed on the fault path section where the second network node to be analyzed is located;
And step 73, generating overhaul information based on the replacement equipment information, wherein the replacement equipment information comprises the first replacement equipment information and/or the second replacement equipment information.
In the third storage module, corresponding replacement device information is set for each fault of each network node device, and the third storage module further includes operation information.
Illustratively, the replacement device is the same device as the failed device, the same module as the failed module of the failed device, and so forth. For example, when the power module fails, the replacement device is the power module.
Failure of one network node may cause failure of an upstream network node and/or a downstream network node. Therefore, according to the first fault content, whether the fault of the network node to be analyzed causes the fault of the upstream network node and/or the downstream network node is judged, if the fault of the upstream network node and/or the downstream network node can be caused, the position information based on the upstream network node and/or the downstream network node and the first fault content is obtained, the third storage module is searched for, and the second replacement equipment information is obtained. Based on the method, the fault of the upstream network node and/or the downstream network node can be responded quickly, and the fault can be removed timely.
According to the technical scheme of the invention, when the network node fails, the information of the replacement equipment corresponding to the failure can be rapidly sent to the network manager (and/or maintenance personnel), so that the network manager can grasp the replacement equipment required by the failure removal and timely start the failure removal.
Preferably, the fault influence of the network node to be analyzed is obtained based on the number of fault path segments causing faults of the network node to be analyzed, when the fault influence exceeds a fault threshold, warning information is sent to the network manager terminal, after the fault influence does not exceed the threshold, whether the network node to be analyzed is subjected to fault elimination processing is judged after a second preset time, and if the network node to be analyzed is not subjected to fault elimination processing, the warning information is sent to the network manager terminal.
Preferably, all the network nodes to be analyzed are sequenced according to the fault influence, and the fault removal processing is performed according to the sequence.
Fig. 3 is a schematic structural diagram of an embodiment of a network line fault location system according to the present invention. As shown in fig. 3, the system includes: the network monitoring device 100, the network administrator terminal 200, and the path analysis device 300, the network monitoring device 100 includes a first acquisition module 101, a second acquisition module 102, a set generation module 103, an analysis module 104, and a result output module 105.
The first obtaining module 101 is configured to obtain failure alarm information of a network line, where the failure alarm information includes path identification information of a failure path segment.
The second obtaining module 102 is configured to obtain node identifiers of all network nodes on the fault path segment corresponding to any path identifier information according to any path identifier information.
And the set generating module 103 is configured to generate a fault path segment set after traversing all the fault alarm information, where the fault path segment set includes path identification information of any fault path segment and node identifications of all network nodes on any fault path segment.
An analysis module 104, configured to set a fault weight value of each network node in the fault path segment set to 0, then obtain any network node, traverse the fault path segment set, count the number of fault path segments passing through any network node, and set the number of fault path segments to any network node fault weight value; after traversing all the network nodes, taking the network node with the largest fault weight value as the network node to be analyzed.
And the result output module 105 is configured to generate network failure information according to the network node to be analyzed, and send the network failure information to the network administrator terminal, where the network failure information includes node identification and location information of the network node to be analyzed.
The path analysis device 300 is configured to determine that a path fails, and includes the following steps:
And 11, extracting and copying the data packet transmitted on the network line.
And 12, extracting a transmitting end identifier and a receiving end identifier from the data packet, correspondingly storing the transmitting end identifier, the receiving end identifier and the extraction time for extracting the data packet in a monitoring information storage module, and distributing the same path identifier information for the monitoring paths with the same transmitting end identifier and the same receiving end identifier.
Step 13, based on the path identification information, periodically obtaining all the extraction time of any monitoring path in a preset period from the monitoring information storage module, and calculating the average value of the time difference values based on all the extraction time, wherein the calculation formula is as follows:
wherein TA is an average value, tn is a value of an nth extraction time in a preset period, and N is the number of extracted data packets in the preset period.
And 14, judging whether the average value is positioned in a preset time range corresponding to the path identification information, and if not, sending the fault alarm information to the network monitoring equipment.
The analysis module 104 is further configured to generate a network path topology map based on the set of fault path segments, and the method for obtaining the network node to be analyzed includes:
Step 51, defining the network node with the largest fault weight value as the first network node, judging whether the number of the first network nodes is 1, if so, using the first network node as the network node to be analyzed, then entering step 54, if not, entering step 52.
Step 52, defining the network branch where the first network node is located as a branch to be analyzed, and defining the first network node, which is located at the uppermost layer in the network path topology diagram, as a second network node.
Step 53, determining whether all the sub-nodes of the second network node have the maximum fault weight value, if yes, defining the second network node as the network node to be analyzed, then entering step 54, if not, defining the first network node in all the sub-nodes as the second network node, then returning to step 53 until all the first network nodes on any branch to be analyzed are traversed, then entering step 54.
And step 54, after traversing all the branches to be analyzed, acquiring node identifiers and position information of all the network nodes to be analyzed.
According to another aspect of the embodiment of the present invention, there is provided a computer storage medium, where the computer storage medium stores program instructions, where the program instructions, when executed, control a device in which the computer storage medium is located to perform the network line fault location method of any one of the above.
It should be understood that, although the steps in the flowcharts of the embodiments of the present invention are shown in order as indicated by the arrows, these steps are not necessarily performed in order as indicated by the arrows. The steps are not strictly limited to the order of execution unless explicitly recited herein, and the steps may be executed in other orders. Moreover, at least some of the steps in various embodiments may include multiple sub-steps or stages that are not necessarily performed at the same time, but may be performed at different times, nor do the order in which the sub-steps or stages are performed necessarily performed in sequence, but may be performed alternately or alternately with at least a portion of the sub-steps or stages of other steps or other steps.
Those skilled in the art will appreciate that implementing all or part of the above-described methods may be accomplished by way of computer programs, which may be stored on a non-transitory computer readable storage medium, and which, when executed, may comprise the steps of the embodiments of the methods described above. Any reference to memory, storage, database, or other medium used in embodiments provided herein may include non-volatile and/or volatile memory. The nonvolatile memory can include Read Only Memory (ROM), programmable ROM (PROM), electrically Programmable ROM (EPROM), electrically Erasable Programmable ROM (EEPROM), or flash memory. Volatile memory can include Random Access Memory (RAM) or external cache memory. By way of illustration and not limitation, RAM is available in a variety of forms such as Static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double Data Rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (SYNCHLINK) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), among others.
The foregoing examples have shown only the preferred embodiments of the invention, which are described in more detail and are not to be construed as limiting the scope of the invention. It should be noted that it will be apparent to those skilled in the art that several variations and modifications can be made without departing from the spirit of the invention, which are all within the scope of the invention. Accordingly, the scope of protection of the present invention is to be determined by the appended claims.
Claims (7)
1. The network line fault positioning method is characterized by comprising the following steps:
step 1, network monitoring equipment acquires fault alarm information of a network line, wherein the fault alarm information comprises path identification information of a fault path section;
step 2, based on any path identification information, acquiring node identifications of all network nodes on a fault path segment corresponding to any path identification information;
step 3, after traversing all fault alarm information, generating a fault path segment set, wherein the fault path segment set comprises path identification information of any fault path segment and node identifications of all network nodes on any fault path segment;
step 4, setting the fault weight value of each network node in the fault path segment set to be 0, then acquiring any network node, traversing the fault path segment set, counting the number of fault path segments passing through any network node, and setting the number as any network node fault weight value;
step 5, after traversing all network nodes, taking the network node with the largest fault weight value as the network node to be analyzed;
step 6, generating network fault information based on the network node to be analyzed, and sending the network fault information to a network administrator terminal, wherein the network fault information comprises node identification and position information of the network node to be analyzed;
The step 1 is preceded by the following steps:
step 11, the path analysis equipment extracts and copies the data packet transmitted on the network line;
Step 12, extracting a transmitting end identifier and a receiving end identifier from the data packet, correspondingly storing the transmitting end identifier, the receiving end identifier and the extracting time for extracting the data packet in a monitoring information storage module, and distributing the same path identifier information for the monitoring paths with the same transmitting end identifier and the same receiving end identifier;
Step 13, based on the path identification information, periodically obtaining all extraction time of any monitoring path in a preset period from the monitoring information storage module, and based on all the extraction time, calculating an average value of time difference values, wherein a calculation formula is as follows:
，
Wherein TA is the average value, tn is the value of the nth extraction time in the preset period, and N is the number of extracted data packets in the preset period;
step 14, judging whether the average value is located in a preset time range corresponding to the path identification information, and if not, sending the fault alarm information to the network monitoring equipment;
Generating a network path topology map based on the set of fault path segments, the step 5 comprising:
Step 51, defining the network node with the largest fault weight value as a first network node, judging whether the number of the first network node is 1, if so, taking the first network node as the network node to be analyzed, then entering step 54, and if not, entering step 52;
step 52, defining a network branch where the first network node is located as a branch to be analyzed, and defining the first network node, which is located at the uppermost layer in the network path topological graph, as a second network node;
Step 53, determining whether all the sub-nodes of the second network node have the maximum fault weight value, if yes, defining the second network node as the network node to be analyzed, then entering step 54, if not, defining the first network node in all the sub-nodes as the second network node, then returning to step 53 until all the first network nodes on any of the branches to be analyzed are traversed, then entering step 54;
and step 54, after traversing all the branches to be analyzed, acquiring node identifiers and position information of all the network nodes to be analyzed.
2. The network line fault location method of claim 1, wherein the network fault information further includes a first fault content, and the obtaining the first fault content includes the steps of:
Step 61, after obtaining node identification and position information of the network node to be analyzed, generating a first detection data packet, and sending the first detection data packet to the network node to be analyzed, wherein the first detection data packet comprises a terminal identification and a first password of the network monitoring equipment;
Step 62, after receiving the first detection data packet, the security gateway on the transmission path obtains the first password in the first detection data packet, determines whether a first storage module stores the first password based on the terminal identifier, if so, opens the access right of the network monitoring device, and forwards the first detection data packet to the network node to be analyzed, wherein the transmission path is a network path from the network monitoring device to the network node to be analyzed;
step 63, after receiving feedback information of the network node to be analyzed, the security gateway closes access rights of the network monitoring equipment and sends the feedback information to the network monitoring equipment, wherein the feedback information comprises a detection result;
And step 64, acquiring the first fault content of the network node to be analyzed based on the detection result.
3. The network line fault location method according to claim 2, wherein the step 61 is preceded by:
Step 611, the network monitoring device sends an authentication request to a first server, wherein the authentication request includes the terminal identifier;
step 612, after the authentication is passed, the first server sends an encryption key to the network monitoring device;
step 613, the network monitoring device encrypts the terminal identifier and the first password by using the encryption key to generate first encrypted data, and sends the first encrypted data to the first server;
Step 614, the first server decrypts the first encrypted data by using a decryption key, and after decrypting, stores the terminal identifier and the first password in a second storage module correspondingly, and sends the terminal identifier and the first password to the security gateway;
Step 615, after receiving the terminal identifier and the first password, the security gateway correspondingly stores the terminal identifier and the first password in the first storage module.
4. The network line fault location method of claim 2, wherein the network fault information further includes a second fault node and a second fault content, and the step 64 further includes:
Step 65, acquiring a first preset range corresponding to the first fault content based on the first fault content;
Step 66, collecting operation data within a first preset time from all network devices within the first preset range of the network node to be analyzed;
Step 67, judging whether second fault content meeting preset conditions exists in the operation data, and if so, taking network equipment corresponding to the second fault content as a second fault node;
And step 68, storing the second fault node, the second fault content, the network node to be analyzed and the first fault content correspondingly.
5. The network line fault location method of claim 2, wherein the network fault information further includes overhaul information, and the obtaining the overhaul information includes the steps of:
Step 71, searching a third storage module based on the first fault content, and obtaining first replacement equipment information for eliminating faults corresponding to the first fault content;
Step 72, based on the first fault content, judging whether second replacement equipment information for removing a fault corresponding to a second network node to be analyzed is required, if so, searching a third storage module based on the position information of the second network node to be analyzed and the first fault content to obtain the second replacement equipment information, and if not, directly entering step 73, wherein the second network node to be analyzed is a last hop network node or a next hop network node of the network node to be analyzed on a fault path section where the second network node to be analyzed is located;
step 73, generating the overhaul information based on replacement equipment information, wherein the replacement equipment information comprises the first replacement equipment information and/or the second replacement equipment information.
6. A network line fault locating system for implementing the network line fault locating method according to any one of claims 1 to 5, comprising: the network monitoring device comprises a first acquisition module, a second acquisition module, a set generation module, an analysis module and a result output module;
the first acquisition module is used for acquiring fault alarm information of a network line, wherein the fault alarm information comprises path identification information of a fault path section;
The second acquisition module is used for acquiring node identifiers of all network nodes on a fault path segment corresponding to any path identification information according to any path identification information;
The set generating module is used for generating a fault path segment set after traversing all fault alarm information, wherein the fault path segment set comprises path identification information of any fault path segment and node identifications of all network nodes on any fault path segment;
The analysis module is used for setting the fault weight value of each network node in the fault path segment set to 0, then acquiring any network node, traversing the fault path segment set, counting the number of fault path segments passing through any network node, and setting the number as any network node fault weight value; after traversing all network nodes, taking the network node with the largest fault weight value as the network node to be analyzed;
The result output module is used for generating network fault information according to the network node to be analyzed and sending the network fault information to the network manager terminal, wherein the network fault information comprises node identification and position information of the network node to be analyzed;
the path analysis device is used for judging that a path fails and comprises the following steps:
step 11, the path analysis equipment extracts and copies the data packet transmitted on the network line;
Step 12, extracting a transmitting end identifier and a receiving end identifier from the data packet, correspondingly storing the transmitting end identifier, the receiving end identifier and the extracting time for extracting the data packet in a monitoring information storage module, and distributing the same path identifier information for the monitoring paths with the same transmitting end identifier and the same receiving end identifier;
Step 13, based on the path identification information, periodically obtaining all extraction time of any monitoring path in a preset period from the monitoring information storage module, and based on all the extraction time, calculating an average value of time difference values, wherein a calculation formula is as follows:
，
Wherein TA is the average value, tn is the value of the nth extraction time in the preset period, and N is the number of extracted data packets in the preset period;
step 14, judging whether the average value is located in a preset time range corresponding to the path identification information, and if not, sending the fault alarm information to the network monitoring equipment;
The analysis module is further configured to generate a network path topology map based on the fault path segment set, and the method for obtaining the network node to be analyzed includes:
Step 51, defining the network node with the largest fault weight value as a first network node, judging whether the number of the first network node is 1, if so, taking the first network node as the network node to be analyzed, then entering step 54, and if not, entering step 52;
step 52, defining a network branch where the first network node is located as a branch to be analyzed, and defining the first network node, which is located at the uppermost layer in the network path topological graph, as a second network node;
Step 53, determining whether all the sub-nodes of the second network node have the maximum fault weight value, if yes, defining the second network node as the network node to be analyzed, then entering step 54, if not, defining the first network node in all the sub-nodes as the second network node, then returning to step 53 until all the first network nodes on any of the branches to be analyzed are traversed, then entering step 54;
and step 54, after traversing all the branches to be analyzed, acquiring node identifiers and position information of all the network nodes to be analyzed.
7. A computer storage medium storing program instructions, wherein the program instructions, when executed, control a device in which the computer storage medium is located to perform the network line fault location method of any one of claims 1 to 5.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410384859.0A CN117978621B (en) | 2024-04-01 | 2024-04-01 | Network line fault positioning method, system and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202410384859.0A CN117978621B (en) | 2024-04-01 | 2024-04-01 | Network line fault positioning method, system and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN117978621A true CN117978621A (en) | 2024-05-03 |
| CN117978621B CN117978621B (en) | 2024-06-04 |
Family
ID=90861327
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202410384859.0A Active CN117978621B (en) | 2024-04-01 | 2024-04-01 | Network line fault positioning method, system and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN117978621B (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20130177305A1 (en) * | 2012-01-05 | 2013-07-11 | Ciena Corporation | Optical communication network path restoration |
| WO2014198053A1 (en) * | 2013-06-14 | 2014-12-18 | Microsoft Corporation | Fault tolerant and load balanced routing |
| CN115632937A (en) * | 2022-10-24 | 2023-01-20 | 国网湖北省电力有限公司荆门供电公司 | Intelligent substation communication link fault positioning method based on fault tree weighting |
| CN116973694A (en) * | 2023-09-22 | 2023-10-31 | 国网浙江宁波市鄞州区供电有限公司 | Power distribution network fault diagnosis optimization method and system |
| CN117726191A (en) * | 2023-12-22 | 2024-03-19 | 国网河南省电力公司电力科学研究院 | Method, system and medium for generating multiple fault sets of power grid by considering external disasters |
-
2024
- 2024-04-01 CN CN202410384859.0A patent/CN117978621B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20130177305A1 (en) * | 2012-01-05 | 2013-07-11 | Ciena Corporation | Optical communication network path restoration |
| WO2014198053A1 (en) * | 2013-06-14 | 2014-12-18 | Microsoft Corporation | Fault tolerant and load balanced routing |
| CN115632937A (en) * | 2022-10-24 | 2023-01-20 | 国网湖北省电力有限公司荆门供电公司 | Intelligent substation communication link fault positioning method based on fault tree weighting |
| CN116973694A (en) * | 2023-09-22 | 2023-10-31 | 国网浙江宁波市鄞州区供电有限公司 | Power distribution network fault diagnosis optimization method and system |
| CN117726191A (en) * | 2023-12-22 | 2024-03-19 | 国网河南省电力公司电力科学研究院 | Method, system and medium for generating multiple fault sets of power grid by considering external disasters |
Also Published As
| Publication number | Publication date |
|---|---|
| CN117978621B (en) | 2024-06-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10826684B1 (en) | System and method of validating Internet of Things (IOT) devices | |
| CN110995468B (en) | System fault processing method, device, equipment and storage medium of system to be analyzed | |
| CN110012005B (en) | Method and device for identifying abnormal data, electronic equipment and storage medium | |
| CN108737574B (en) | Node offline judgment method, device, equipment and readable storage medium | |
| KR102177411B1 (en) | Method for managing industrial control systems via physical one-way encryption remote monitoring | |
| CN113259183B (en) | Network relay control method and device, electronic equipment and storage medium | |
| CN113238536B (en) | Industrial control system network vulnerability identification method and device and related equipment thereof | |
| CN110569389A (en) | Environment monitoring method and device, computer equipment and storage medium | |
| CN117319047A (en) | Network path analysis method and system based on network security anomaly detection | |
| CN112583643A (en) | Cross-device alarm correlation method | |
| CN117978621B (en) | Network line fault positioning method, system and storage medium | |
| CN108353005B (en) | Method and device for monitoring a control system | |
| CN113259349A (en) | Monitoring method and device for rail transit control network | |
| CN111210210B (en) | Payment data processing method and device and electronic equipment | |
| CN112671603A (en) | Fault detection method and server | |
| CN112087301A (en) | Gas meter safety certification system based on state cryptographic algorithm | |
| CN115883574A (en) | Access equipment identification method and device in industrial control network | |
| Kolosok et al. | Cyber resilience of SCADA at the level of energy facilities | |
| CN113660223B (en) | Network security data processing method, device and system based on alarm information | |
| CN111385157A (en) | Server abnormity detection method and device | |
| CN113961920A (en) | Suspicious process processing method and device, storage medium and electronic equipment | |
| CN113595958A (en) | Safety detection system and method for Internet of things equipment | |
| CN115174197B (en) | Webshell file detection method, system, electronic equipment and computer storage medium | |
| CN116094841B (en) | Behavior identification method and device in encrypted channel and electronic equipment | |
| CN111917594B (en) | Honey court architecture-based trapping node fault real-time detection method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |