JP2967892B2 - Communication protocol information matching device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a device for matching communication protocol information, and more particularly to monitoring communication protocol information between digital terminals connected to a packet communication network and collecting information for detecting an abnormality. It is related to a system that does.

[0002]

2. Description of the Related Art In general, when a digital terminal connected to a packet communication network does not operate normally, the communication protocol information is monitored to determine whether or not the protocol is normal and to determine an abnormality. Monitor and collect data by setting a monitor device such as a protocol analyzer at both ends of the section to be measured, print out the collected data with a printer device, etc., and then manually input the two data with the time and data contents. A process has been performed in which a position to be compared is searched for, then matched, and an abnormal part is searched for.

[0003]

However, in the above-described conventional matching processing, it is extremely difficult to accurately match the protocol analyzer time set between two points to be measured, and furthermore, the delay time in the digital network is reduced. Therefore, searching for incoming data corresponding to outgoing data took an enormous amount of time.

Accordingly, the present invention has been made in view of the above points, and has been made in view of the above points. Communication protocol information which enables a message transmitted between two points to be matched accurately and in a short time. It is an object of the present invention to provide a matching device.

[0005]

According to the present invention, there is provided a packet data storing means for storing packet data between two monitoring points, and one round trip which matches an expected data pattern for each logical channel number / logical channel group number. Matching pattern candidate extracting means for searching the packet data of the above, network delay time calculating means for calculating the network delay time from the searched one round trip packet data, and two points from the one round trip packet data and the network delay time Correction means for correcting the time between them, matching pattern selection means for extracting packet data corresponding to each logical channel number / logical channel group number, and packet data communicated between two points from the extracted matching pattern. Sequence extraction means for selecting the delay time in the network and the selected communication sequence Providing a sequence output display means for displaying for the Sequence.

[0006]

According to the present invention, by extracting the message and the intra-network delay by means configured as described above, the message transmitted between two points can be accurately matched.

[0007]

BRIEF DESCRIPTION OF THE DRAWINGS FIG.
An algorithm for matching a communication protocol between two points will be described in detail with reference to the drawings showing the embodiment.

FIG. 1 is a block diagram showing the above algorithm, and FIG. 2 is a hardware configuration diagram according to the embodiment.

In FIG. 2, a data transfer device 10 monitors a communication message between terminals by a line access device 11 so as to give a time at the time of passing a message and use a public network N to match a communication protocol information. 100.

The communication protocol information matching device 1
Reference numeral 00 denotes an apparatus for realizing the present invention.

In FIG. 2, reference numeral 12 denotes a terminal, and 13 denotes an exchange.

In FIG. 1, packet data between two points tanked by one package data storage means is extracted by LCGN · L by three matching pattern candidate extraction means.
One round trip packet data matching the two packet patterns is searched for each CN, and the network delay time calculation means of 4 calculates the network delay time from the searched one round trip packet data.

[0013] Next, the time between two points is recovered from the packet data of one round trip and the delay time in the network by the correction means 5;
LCGN L
For each CN, the corresponding packet data from outgoing to incoming is extracted.

Further, the sequence extracting means of (7)
The packet data communicated between the two points and the delay time in the network are selected from the matching pattern extracted in 6 and the sequence diagram is displayed using the sequence output display means 8.

Next, a specific example of the communication protocol matching process in the above configuration will be described.

(First Embodiment) An actual example of a communication protocol information matching process in a packet communication network will be described.

FIG. 3 summarizes information necessary for matching processing for collected data between two points (A side and B side).
Create index information as shown in FIG.

[0018] With reference to the index information A side, the message in one round trip which seems to have the input and output of the B side coincide with each other is prioritized in the order of accuracy when matching according to the protocol rules of the X-25 network layer. LCN from the input / output round-trip table of the message shown in FIG.
・ Extract by LCGN (LCN in communication between two points
(LCGNs are fixed to each other), so that it is possible to extract outgoing messages → incoming calls → outgoing → incoming messages for each LCN / LCGN based on the A side (3).

FIG. 6 shows an example of extracting a communication message in a round trip.

(Note) LCN: X. Logical channel number defined by 25Call LCGN: X. Logical Channel Group Number Defined by 25 Call FIG. 7 is a diagram showing the relationship between the time information given to the one-way input / output data string obtained by the above extraction.

T1 to T8 are the start time and end time of the data output from the terminal.

By subtracting the elapsed time from T4 to T5 from the elapsed time from T1 to T8, the sum of the round-trip delay times in the network can be obtained. By proportionally dividing the sum by the transfer data length, the calculation of the one-way network delay time is required (4).

However, since the clock of the monitored device is not always in sync, it is possible to obtain the logical time difference between the two monitor devices by executing the correction according to the following equation. (5).

FIG. 8 shows a delay relationship between the terminal A and the terminal B.

Correction value of terminal B with respect to terminal A = A1 + A
2 + travel-B1 (Note) In FIG. 8, DCE: a line terminating device determined based on CCITT recommendation, etc. Next, based on the collected data on the A side, the time difference of the collected data on the B side is all restored with a correction value. L of the extracted terminal A / terminal B
From the CN / LCGN and the message input / output table of FIG. 5 (a), a message group of outgoing → incoming / incoming → outgoing messages on the A and B sides is extracted (6).

Therefore, by utilizing the fact that the maximum delay time of data transfer = 5 seconds from the NTT technical reference material and extracting the data in the following range, the search speed and precision can be improved.

FIG. 9 shows a delay relationship diagram from the calling terminal side to the called terminal side based on the A side.

FIG. 10 shows a delay relation diagram from the destination terminal side to the calling terminal side with reference to the A side.

Here, the maximum delay range from the originating terminal side to the destination terminal side is 0 <correction value + B1- (A1 + A2)... However, the second is satisfied. <A3− (correction value + B3 + B4) —however, 5 seconds must be satisfied. Until now, processing was performed with reference to the A side. Next, similar processing is performed with reference to the B side.

Thus, the LCN / LCG on the A side and the B side
For each N, some correction values and input / output message candidates are extracted, but only one LCN / LCGN is used until the communication is actually connected and disconnected. , There is almost no error in the correction value.

Therefore, the input / output message and the delay in the network are selected from the candidates based on the error of the correction value and the traffic of the input / output message (7).

As described above, it is possible to accurately match messages transmitted between two points.

(Embodiment 2) An actual example of a circuit switching matching process in an ISDN communication network will be described.

First, index information as shown in FIG. 3B, which summarizes information necessary for the present processing for the collected data between two points (A side and B side), is created.

A communication message in one round trip in which the input and the output of the B side are considered to be the same based on the index A side of the index information is obtained from the communication message input / output round trip table of FIG.
By extracting an API whose API is 0 (call control procedure) for each TEI (the TEI is assigned to each terminal in the communication between two points), the TEI based on the A side is used.
It is possible to extract the communication message of each outgoing → incoming → outgoing → incoming (3).

(Note) SAPI: service access point identifier (identifies the difference in information transfer service provided by layer 2 to the upper layer) TEI: terminal termination point identifier (for a plurality of terminals accommodated in the same user / network interface) T4 to T5 from the elapsed time from T1 to T8 in FIG.
The sum of the round-trip delays in the network is obtained by subtracting the elapsed time until the delay.

By dividing the sum according to the transfer data length, a one-way network delay time can be calculated (4).

However, since the time stamp between the two points does not always exist, the logical time difference between the time stamps between the two points can be obtained by executing the correction using the following equation. (5).

Correction value of terminal B with respect to terminal A = A1 + A
2 + travel-B1 (however, refer to FIG. 8) Next, based on the collected data on the A side, the time difference between the collected data on the B side is all repaired with the correction value, so that the extracted terminal A
From the TEI of the terminal B and the input / output table of the communication message of FIG. 5B, the communication message group of the outgoing → incoming / incoming → outgoing of the A and B sides is extracted (6).

Therefore, by utilizing the fact that the maximum delay time of data transfer = 5 seconds and performing extraction, it is possible to improve search speed and precision.

Until now, the processing has been performed on the basis of the A side. Next, the same processing is performed on the basis of the B side.

As a result, for each of the A-side and B-side TEIs, some correction value and input / output communication message candidates are extracted, but they are used until communication is actually connected and disconnected. Only one TEI is used, and there is almost no error in the correction value.

Therefore, an input / output communication message is selected from the candidates according to the error of the correction value (7).

As described above, it is possible to accurately match communication messages communicated between two points.

(Embodiment 3) An example of setting the priority of the round-trip data pattern storage means in a packet communication service using ISDN will be described.

(Preconditions) The transfer rate at which monitor data is transferred from the data transfer device with a time stamp for the ISDN network is 48 Kb / s, and all monitor information (basic interface, 64 Kb / s: 2 lines, 16 Kb / s:
Is impossible physically.

Therefore, when transferring monitor data in real time, only the first 10 bytes are transferred.

2. Match messages transmitted between two points in real time.

(Events to be considered) ・ CR → SETUP → CA → CC The data transmitted in real time from the data transfer device with the time stamp for the ISDN network is only up to 10 BYTE.

For this reason, information for comparing telegrams cannot be obtained, and it is difficult to specify a round-trip data pattern.

In the Bch packet communication procedure, only SETUP is another channel, and the corresponding S
Identifying the ETUP becomes more difficult.

CR → CN → CA → CC The data transmitted in real time from the data transfer device with the time stamp for the ISDN network is only up to 10 BYTE.

For this reason, information for comparing telegrams cannot be obtained, and it is difficult to specify a round-trip data pattern.

In the case of a multipoint terminal configuration, D
A channel selection procedure between the destination terminal and the network is performed on the channel.

Therefore, it takes time between CR and CN for this procedure, and the error in the network delay time to be corrected increases.

DT → DT → DT → DT Data transmitted in real time from a data transfer device with a time stamp for an ISDN network is only up to 10 BYTE.

Therefore, when there are a plurality of DT packets having the same contents in the range of 10 BYTE, the DT cannot be identified, and it is difficult to specify the round-trip data pattern.

Therefore, under the preconditions described above, FIG.
The priority shown in FIG.

[0059]

As shown in the above embodiments, according to the present invention, it is possible to accurately match incoming data with outgoing data, and it becomes easy to monitor a communication protocol in a packet communication network. .

[Brief description of the drawings]

FIG. 1 is a diagram showing an algorithm of the present invention.

FIG. 2 is a configuration diagram showing hardware of the present invention.

FIG. 3 is a diagram showing index information of the present invention.

FIG. 4 is a diagram showing index information according to the present invention.

FIG. 5 is a diagram showing an input / output table of a message according to the present invention.

FIG. 6 is a diagram showing an example of extracting a round-trip communication sentence according to the present invention.

FIG. 7 is a diagram illustrating a relationship between time information added to one round trip input / output data sequence according to the present invention;

FIG. 8 is a delay relation diagram between terminals A and B according to the present invention.

FIG. 9 is a diagram showing a delay relationship from the calling terminal side to the called terminal side based on the A side according to the present invention.

FIG. 10 is a delay relationship diagram from the destination terminal side to the calling terminal side based on the A side according to the present invention.

FIG. 11 is a diagram showing a priority setting example of a round-trip data pattern storage unit according to the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Protocol data storage means, 2 ... Data pattern storage means, 3 ... Matching pattern candidate extraction means, 4 ... Network delay time calculation means, 5 ... Correction means, 6 ... Matching pattern selection means, 7 ... Sequence extraction means, 8 ... Sequence output display means.

──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Takanari Hirano 1-1-6 Uchisaiwaicho, Chiyoda-ku, Tokyo Nippon Telegraph and Telephone Corporation (72) Katsuhisa Miura 1-1-6 Uchisaiwaicho, Chiyoda-ku, Tokyo Japan Inside Telegraph and Telephone Corporation (72) Inventor Tsukasa Kondo 1-1-6 Uchisaiwaicho, Chiyoda-ku, Tokyo Nippon Telegraph and Telephone Corporation Examiner Takayuki Yoshida (56) References JP-A-5-268263 (JP, A) JP-A-63-263950 (JP, A) JP-A-59-191958 (JP, A) JP-A-59-43654 (JP, A) JP-A-58-1111459 (JP, A) JP-A-58-40948 (JP JP, A) JP-A-58-34648 (JP, A) NTT Technical Journal Vol. 3 No. 3 p65-67 NTT Technical Journal Vol. 3 No. 7 p56-57 NTT Technical Journal Vol. 4 No. 8 p22-23 (58) Field surveyed (Int. Cl. ⁶ , DB name) H04L 12/56 H04L 12/26 H04L 12/28 H04M 3/00 H04M 3/22 H04L 29/06

Claims (1)

(57) [Claims] A line access device interposed in each line between two points connected by a digital communication network; a data transfer device with a time stamp connected to the line access device; A protocol data storage means connected to a public network or a dedicated line network for storing data at two points monitored by the data transfer device; and a data pattern for storing a preset one-way data pattern. Storage means, and the data pattern for one round trip is used as a first search key,
CCITT Recommendation X. Logical channel number LCN and logical channel group number LC defined in 25Ca11
A matching pattern candidate extracting means for extracting one round-trip message using the terminal endpoint identifier TEI and the service access point identifier SAPI defined by GN or JT-Q921 as a second search key; An in-network delay time calculating means for obtaining a delay time in the network from the communication message; and a relative time shift between two points based on the one round trip communication message and the in-network delay based on the accumulated monitor time. Correction means for correcting and matching the data, the data pattern of the one round trip between digital terminal devices as a first search key from the data at the same time, and the LCN and LCGN or T as the second search key
A matching pattern selecting unit for extracting a data pattern of a communication message between the digital terminal devices connected to each other by the EI and the SAPI; a sequence extracting unit for extracting a sequence of a communication message between the digital terminal devices connected to each other; And a sequence output display means for outputting and displaying the extracted sequence.