JPH04239847A - Protocol data analysis system - Google Patents

Abstract

PURPOSE:To store the result of decoding even from a large protocol data by dividing and decoding the protocol data for each element and storing the divided decode unit to plural files. CONSTITUTION:A decode processing control means 3 acquires an original protocol data inputted via a communication equipment 2 by using a decode information offer means 4 and uses a decode means 5 to store the result to a decode result storage means 6. Then a slave part or a brother part not decoded is processed similarly. The storage means 6 converts the input decode information into a decode result table resulting from adding a master slave pointer and a brother pointer to the input decode information and stores the table to a code result storage file 7. When a master or brother decode result table is in existence in the file 7, a head address of the decode result table to be stored newly is set to the master slave pointer or the brother pointer of the table.

Description

[Detailed description of the invention]

0001

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to analysis of protocol data in information systems.

0002

2. Description of the Related Art Conventionally, protocol data has been decoded once and all the decoded results have been stored in one file.

Referring to FIG. 6, in a conventional protocol data analysis system 1, a communication device 2 that receives protocol data and a protocol data input 101 from the communication device 2 acquire protocol data and control decoding processing. a decoding processing control means 3 for performing decoding processing; a decoding information providing means 4 for holding decoding information necessary to decode all of the protocol data and providing decoding information 102 to the decoding processing control means 3; a decoding means 5 that performs decoding in response to a decoding request 103 from the means 3 and outputs the decoding results to the decoding processing control; and a decoding result storage file in which the decoding results are stored by storing the decoding results from the decoding processing control means. It consists of 7.

FIG. 7 is a flowchart showing the processing flow of a decoding processing control means in the prior art. When protocol data is acquired from the communication device 2 in step 301, decoding information necessary to decode all protocol data is acquired from the decoding information providing means in step 302, and the protocol data and decoding information are input to the decoding means in step 303. By doing so, the decoding result of the protocol data is obtained, and if the decoding result obtained in step 304 is of a size that can be stored in the decoding result storage file, it is stored in the decoding result storage file in step 305,
In step 304, if the decoded result exceeds the size that can be stored in the decoded result storage file, it is determined that the process cannot be continued and error processing is performed.

[0005]

[Problems to be Solved by the Invention] In the conventional technology described above, when a large amount of protocol data is decoded, the decoded result becomes large and exceeds the size of the decoded result storage file, and the decoded result is There was a drawback that there were many cases where it could not be stored.

[0006]

[Means for Solving the Problems] The protocol data analysis method of the present invention includes a communication device that receives protocol data, and a decoder that acquires the protocol data by inputting the protocol data from the communication device and controls decoding processing. a processing control means; a decoding information providing means for holding a set of decoding information necessary for decoding each portion of protocol data and providing the decoding information to the decoding processing control means; a decoding means for decoding a part to be decoded in response to a decoding request from the processing control means and outputting the decoding result to the decoding processing control; and a storing process for the decoding result in response to a decoding result storage request from the decoding processing control means. and a decoding result storage file in which the decoding results converted into a table format having sibling pointers and parent-child pointers are stored by storing the decoding results from the decoding result storage means. Ru.

[0007]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, the present invention will be described in detail with reference to the drawings.

Referring to FIG. 1, one embodiment of the present invention includes:
The protocol data analysis system 1 includes a communication device 2 that receives protocol data, a decoding processing control means 3 that acquires the protocol data by inputting 101 of protocol data from the communication device 2, and controls decoding processing, and a decoding processing control means 3 that controls the decoding processing. Holds a set of decoding information necessary for decoding the decomposed partial units, and provides decoding information to the decoding processing control means 3 102
a decoding information providing means 4 that performs decoding, a decoding means 5 that decodes a portion to be decoded in response to a decoding request 103 from the decoding processing control means 3, and outputs a decoding result to the decoding processing control means 3; The decoding result storage means 6 stores the decoding result in response to the decoding result storage request 105 from the means 3, and the decoding result storage 106 from the decoding result storage means 6 converts the data into a table having sibling pointers and parent and child pointers. and a decoding result storage file 7 in which the converted decoding results are stored.

In this configuration, when protocol data is received from another system via a communication line, the communication device 2 passes the received protocol data to the decoding processing control means 3, and the decoding processing control means 3 The decoding information of the original parent part of the data is obtained using the decoding information providing means 4, the decoding result of the protocol data and the decoding information is obtained using the decoding means 5, and the decoding result is input to the decoding result storage means 6. , the undecoded child or younger brother portion of the protocol data is decoded again until the protocol data is completely decoded.

The decoding result storage means 6 converts the received decoding information into a decoding result table with parent-child pointers and sibling pointers added, and if there is no space to store the decoding results in the decoding result storage file 7, a new decoding result is stored. After creating the storage file, store the decode result table in the decode result storage file 7, and if the parent decode result table already exists in the decode result storage file 7, use the parent-child pointer of the parent decode result table. Set the start address of the newly stored decode result table, and if the older brother's decode result table already exists in the decode result storage file 7, set the start address of the new decode result table to be stored in the sibling pointer of the older brother's decode result table. Set address.

FIG. 2 is a flowchart showing the processing flow of the decoding processing control means 3. Step 10
When the protocol data is acquired from the communication device 2 in step 1, the decoding information necessary to decode the parent part of the protocol data is acquired from the decoding information providing means in step 102, and the protocol data and decoding information are sent to the decoding means in step 103. By inputting the data, the decoding result of the parent part of the protocol data is obtained, and in step 104, the obtained decoding result is input to the decoding result storage means 6, and in step 105, if there is any remaining protocol data that has not been decoded, the child Or step 1 as the younger brother's protocol data
Repeat the process from step 02, and if there is no remaining protocol data that has not been decoded in step 105,
Finish the process.

FIG. 3 is a flowchart showing the processing flow of the decoding result storage means 6. In step 201, parent-child pointers and sibling pointers are added to the input decoding result to convert the decoding result into a decoding result table, and in step 202, the decoding result table is too large to be stored in the free space of the decoding result storage file 7. If not, a new decoding result file is created in step 203, and the process is performed in step 204.
In step 205, if a decode result table corresponding to the parent already exists in the decode result storage file, in step 206, the parent-child pointer of the parent decode result table is set to the decode result table. The address is set, and in step 207, the address of the decoding result table is set in the sibling pointer of the sibling decoding result table, and the process ends.

Referring to FIG. 4, the protocol data taken as an example includes data E having the relationship between parent data B and older brother data D, data D having the relationship between parent data B, and parent data A.
This shows that the structure is made up of data C which has a relationship with older brother data B, data B which has a relationship with parent data A, and former parent data A.

Referring to FIG. 5, the protocol data shown in FIG. 4 is stored in the form of a decoding result table using the protocol data analysis method.

[0015]

[Effects of the Invention] As explained above, the present invention divides protocol data into its elements, decodes them, stores the divided decoding results in units of multiple files, and decodes even large protocol data. This has the effect of allowing the decoding results to be stored in a file.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing an embodiment of the present invention.

FIG. 2 is a diagram showing an example of the structure of protocol data.

FIG. 3 is a diagram showing the result of processing the protocol data shown in FIG. 2 according to the present invention.

FIG. 4 is a diagram showing a flowchart of the processing flow of a decoding processing control means.

FIG. 5 is a diagram showing a processing flow of a decoding result storage means.

FIG. 6 is a block diagram of a conventional protocol data analysis system.

FIG. 7 is a diagram showing a flowchart of the processing flow of a conventional decoding processing control means.

[Explanation of symbols]

1 Protocol data analysis system 2 Communication device 3 Decoding processing control means 4 Decoding information providing means 5 Decoding means 6 Decoding result storage means 7 Decoding result storage file 101 Protocol data input 102 Decoding information provision 103 Decoding request 104 Decoding result output 105 Decoding Result storage request 106 Storage of decoding results

Claims (1)

[Claims] 1. In protocol data analysis in an information processing system, a communication device that receives protocol data, and a decoding process control means that acquires the protocol data by inputting protocol data from the communication device and controls decoding processing. , a decoding information providing means for holding a set of decoding information necessary for decoding the decomposed portions of the protocol data, and providing the decoding information to the decoding processing control means; and from the decoding processing control means. By the decoding request of
decoding means for decoding a portion to be decoded and outputting the decoding result to the decoding processing control; decoding result storage means for storing the decoding result in response to a decoding result storage request from the decoding processing control means; decoding the protocol data in divided manner using a decoding result storage file in which decoding results converted into a table format having sibling pointers and parent-child pointers by storing the decoding results from the decoding result storage means; Protocol data analysis method.