JPH07271696A - Analytic display method for protocol data - Google Patents

Abstract

PURPOSE:To easily confirm and meaning of protocol data which are transmitted and received between computers by analyzing the contents of respective parameter elements of the protocol data according to the description method of a specific encoding rule. CONSTITUTION:Plural opposite party processing systems 309 are connected to an information processing system 300 through a communication line 308, and the system 300 sends and received data to and from those opposite party processing systems 309. After the structure of the protocol data are analyzed according to the specific encoding rule, the contents of a 'tag' and a 'value' as parameter elements of the analyzed protocol data are compared with the contents of the 'tag' and 'value' of a table wherein the structure, contents, and meaning of the protocol data are previously defined, and when the contents are the same, the meanings of the 'tag' and 'value' are displayed together with the analytic result. Thus, the analytic result and the meanings of the data contents are displayed, so the meanings of the data contents and data structure of even nesting structure can visually and easily be confirmed.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an analysis and display method for protocol data, and more particularly to an analysis and display method for displaying the contents of parameter elements of protocol data in a format that is easy to recognize.

[0002]

2. Description of the Related Art Conventionally, as a method of displaying protocol data, an OS, which is an international standard network architecture proposed by ISO (International Organization for Standardization) to enable communication between different models in a computer network
There is a method in I (Open Systems Interconnection).

In OSI, data transmitted and received when data communication is performed between computers or between a computer and a terminal device is called protocol data, and one of the coding rules for this protocol data is ASN. There is 1 (abstract syntax description method).

The protocol data is a bit string of "0" and "1" when transmitting and receiving between partner computers or terminal devices. Therefore, ASN. It is necessary to convert the data described in No. 1 into protocol data, and therefore AS
N. The basic coding rule of 1 applies.

Further, in an information processing system under the OSI environment, it is necessary to display protocol data transmitted / received during execution of information processing in order to confirm data contents. However, when the protocol data is output as it is, the hexadecimal values are displayed in a list, and the contents of the protocol data are very difficult to understand.

FIG. 7 shows the structure of protocol data.

The protocol data 1 is composed of one or more parameters. Furthermore, each parameter is a "tag" 1
3, "length" 14, "value" 15 is composed of three parameter elements.

The "tag" 13 is information for identifying the parameter, the "length" 14 indicates the length of the "value" 15, and
The "value" 15 is the content of the parameter itself.

There are two types of this parameter, "value"
The one in which the content of the parameter directly enters 15 is called a "primitive type parameter" 11, and the one in which the parameter is further nested in the "value" 15 is called a "constructor type parameter" 12.

Next, the ASN. OS described in 1.
An example of the abstract syntax 80 of the ITP protocol and a transfer syntax 81 converted by the basic coding rule thereof is shown.

The transfer syntax 81 includes "tag", "length",
If it is a constructor type, it is composed of a sequence of three items of "value", and this value is further constructed in the form of one or more nested structures according to the sequence of the above three items.

The protocol data to be transmitted and received is a bit string of "0" and "1", which is a collection of transfer syntaxes 81. In order to know the contents of this protocol data, it is necessary to convert the abstract syntax 80 according to the basic encoding rule, and compare and judge the converted "tag" and "value" for each parameter.

Conventionally, as a method of analyzing the structure of such protocol data, as described in Japanese Patent Laid-Open No. 2-79146, the nest structure of the parameters of the protocol data is analyzed and the upper and lower parameters of each parameter are analyzed. ,
Identify peer parameters. Then, it is expressed in a tree structure and stored in the reception data tree structure table, and the “value” of the primitive type parameter is stored in the reception primitive pool. Furthermore, the address (the null value in the case of a constructor type parameter) of the receive primitive pool in which the "tag", "length", and "value" of each parameter are stored in the receive primitive index table is stored. There is a method for separately analyzing the data structure and the data content.

[0014]

However, in the above-mentioned prior art, if the protocol data is output as it is, the content becomes complicated especially when the protocol data has a nested structure. There is a problem that the contents cannot be understood with protocol data represented by a decimal value.

Further, when the system designer develops the information processing system or for maintenance of the information processing system, the analysis of the protocol data and the kind of the protocol data are the expected kinds, or the contents of the data. When it is necessary to verify whether or not is correct, conventionally, since the analysis of the protocol data and the comparison and judgment of the contents of the protocol data are manually performed, there has been a problem that a considerable work man-hour is required.

Further, in the method described in Japanese Patent Laid-Open No. 2-79146, the structure and the contents are stored in another table and analyzed, so that the processing becomes complicated, and the contents of the parameters forming the protocol data are complicated. Since the meaning of is not displayed, there was a problem that the person in charge of development or the person in charge of maintenance had to decode the meaning.

An object of the present invention is to provide a method of analyzing and displaying protocol data which makes it possible to easily confirm the meaning of protocol data transmitted and received between computers or between a computer and a terminal device.

[0018]

In order to achieve the above-mentioned object, the present invention is transmitted / received when data communication is performed between computers or between a computer and a terminal device, and "tag", "length", " In the method of analyzing and displaying protocol data consisting of parameter elements of "value", after analyzing the structure of the protocol data according to a predetermined encoding rule, the contents of "tag" and "value" which are the parameter elements of the analyzed protocol data, Compare the contents of the "tag" and "value" in the table that defines the structure, contents and meaning of the protocol data in advance, and if the contents are the same, analyze the contents of the "tag" and "value" together with the analysis result. The meaning is displayed.

Here, the term “analysis” means “tag”, “length”, in accordance with a predetermined format according to the type of data (hexadecimal value enumerated data) according to the description method of a predetermined encoding rule.
This is the process of clarifying the data structure in the order of "value" parameter elements.

[0020]

According to the present invention, the data structure can be clarified by analyzing the content of each parameter element of the protocol data according to the description method of a predetermined encoding rule.

Further, by comparing the content of the analyzed protocol data with the content of the data defined in advance in the table, it is verified whether the type of the protocol data is the expected type or the content of the data is correct. be able to.

Further, when the comparison contents are the same, the meaning of the analysis result is displayed on the display or the like, so that the system designer can easily visually confirm the meaning of the data contents.

[0023]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a system configuration diagram of an information processing system showing an embodiment of the present invention.

In FIG. 1, the information processing system 300 includes a plurality of partner processing systems 30 via a communication line 308.
9 is connected, and protocol data as shown in FIG. 7 is transmitted / received to / from these partner processing systems 309.

The information processing system 300 includes a display device 3
10 and the printer 312 are connected.

The information processing system 300 is roughly composed of a protocol data analysis display section 301 and a communication control section 311.

The protocol data display analysis unit 301 analyzes and controls each parameter element of protocol data, and includes an analysis processing unit 302 and an editing result display processing unit 3.
03, comparison editing processing unit 304, output data buffer 30
5, a transmission / reception data buffer 306, and a comparison / reference data storage table 307.

Of these, the analysis processing unit 302 analyzes what the contents of each parameter element of the protocol data mean, for example. The editing result display processing unit 303 displays the items extracted by the comparison editing processing unit 304 on the display device 310. The comparison / edit processing unit 304 displays the contents of the parameter elements “tag” and “value” and the contents of “tag” and “value” in the comparison reference data storage table 307 in the protocol data analyzed by the analysis processing unit 302, for example. If they are the same, the meanings of the data contents of "tag" and "value" are extracted together with the analysis result.

Further, the output data buffer 305 is for accumulating the "output contents" 44 extracted by the comparison / edit processing unit 304. The transmission / reception data buffer 306 is
The protocol data transmitted to the partner processing system 309 and the protocol data received from the partner processing system 309 are accumulated. The communication control unit 311 controls transmission / reception of protocol data with the partner processing system 309.

FIG. 2 shows a comparison reference data storage table 307.
It is a figure which shows the comparative reference data defined in advance. The comparison reference data is “tag” 41, “value” 42, “nesting number”
43, an array having one field of "output content" 44 indicating the meaning of "tag" content and "value" content.

The "tag" 41 is the ASN. The hexadecimal parameter identifier converted by the basic encoding rule of 1 is shown.

The "value" 42 is the ASN. The content value of the parameter converted by the basic encoding rule of 1 is shown. "Value" 4
When 2 is a fixed value, describe a hexadecimal value. When it takes an arbitrary value, "CHAR" is used for a character string,
A reserved word of "HEX" is described for a hexadecimal value, and a "NOT" reserved word for a constructor type tag.

The "nest number" 43 indicates how many layers the tag is, and is used for comparison with the nest in the protocol data. This nesting number limits comparison from tags outside the range.

The "output content" 44 describes the meaning of the content indicated by the "tag" 41 and the "value" 42, and the "tag" 13 and "value" 15 of the protocol data shown in FIG. 7 and the comparison reference data. When the “tag” 41 and the “value” 42 are the same, they are displayed on the display device 310.

Next, the processing of displaying the analysis result of the protocol data and the meaning of the data content of this embodiment will be described with reference to FIG.
4 and the flowchart of FIG.

When the protocol data received from the partner processing system 309 is accumulated in the transmission / reception data buffer 306 under the control of the communication control unit 311, the editing result display processing unit 303 causes the edit result display processing unit 303 to execute a "tag", which is a parameter element of the protocol data, A location for displaying the contents of "length", "value" and "tag contents" showing the meaning of the contents and "value contents" is positioned in the output data buffer 305 (step 501).

The comparison / editing processing unit 304 sets "initial value 0" in the "nesting" variable indicating the nesting depth, and also indicates the number of the field in the comparison / reference data storage table 307. "Initial value 1" for the field variable
Is set (step 502).

The analysis processing unit 302 positions the input pointer at the head of the protocol data in the transmission / reception data buffer 306 (step 503).

Next, a line feed is performed (step 504), the "nesting" variable is incremented by "1", and the content indicated by the "field" variable is stored in the "parent field" variable (step 50).
5).

Next, the type of the parameter is determined and stored as a "parameter type" variable (step 506).
The determination method is performed by checking the third bit of the first byte of the “tag” which is the parameter element of the protocol data accumulated in the transmission / reception data buffer 306.
ASN. According to the notation 1, if the bit is "0", it is a primitive, and if it is "1", it is a constructor.

Since the input pointer of the transmission / reception data buffer 306 is currently indicating the first byte of the "tag", this 1 byte is read and the above determination is performed.

Next, the "tag" of the protocol data accumulated in the transmission / reception data buffer 306 is taken out and the value of the "tag" is set to the tag output position of the output data buffer 305 (step 507).

The comparison / editing processing unit 304 determines whether the nest of the previously obtained "tag" and the nest number indicated by the "field" are the same (step 508), and when the nest numbers are not the same, the "field" variable is set. Is incremented by "1" (step 509). When the nest numbers are the same,
The “tag” obtained above is used as the reference data storage table 307.
It is judged whether or not it is the same as the "tag" indicated by the "field" (step 510).

When the "tags" are not the same, "1" is added to the "field" variable (step 511). When the corresponding "tag" is found, the "output content" 44 indicated by the "field" of the reference data storage table 307 is set to the tag content output position of the output data buffer 305 (step 512).

Next, the analysis processing unit 302 calculates the "length".

The analysis processing unit 302 adds "1" to the input pointer currently positioned at the beginning of the protocol data of the transmission / reception data buffer 306, and reads the first byte of "length" which is the parameter element of the protocol data. , "Length" format is determined.

If the first bit of the first byte of "length" is "0", it is in short format, and if it is "1", it is in long format. In the short format, the numerical value of the lower 7 bits is “length”. In the long format, the lower 7 bits of the first byte of "length" is the number of subsequent bytes that indicate "length", so the input pointer is incremented by 1 and the protocol data for the number of subsequent bytes from the next byte is added. Is read from the transmission / reception data buffer 306 and the “length” is calculated (step 513).
Next, the calculated “length” is output to the output data buffer 30.
The output position is set to 5 (step 514).

Furthermore, the input pointer of the transmission / reception data buffer 306 is incremented by "1" and the transmission / reception data buffer 306 is added.
If the parameter type stored in step 506 is a primitive (step 515), the “length” obtained in step 514 is set so that the first byte of the “value” that is the parameter element of the protocol data stored in step 506 is indicated. Is read from the transmission / reception data buffer 306 (step 519), and the value of the “field” of the comparison reference data storage table 307 is the reserved word (CHAR,
If it is HEX (step 520), the edit result display processing unit 303 sets the content of the "value" to the value content output position of the output data buffer 305 in order to output it as a character string or hexadecimal value. (Step 52
1).

If the word is not a reserved word, "1" is added to the "field" variable (step 522), and the numerical value indicated by the "value" fetched by the comparison and edit processing unit 304 and the "field" variable are indicated. Compare with the numerical value (Step 5
23) Repeat until the same numerical value is determined, and if the numerical values are the same, set the "output content" indicated by the "field" variable to the value content output position of the output data buffer 305 (step 524).

After that, the editing result display processing unit 303
The contents of the output data buffer 305 in which "tag", "length", "value", "tag content", and "value content" are set are displayed on the display device 310 (step 525).

If the parameter of step 515 is the constructor, the analysis processing unit 302 continues until the processing for the "length" obtained in step 514 is completed (step 518).
Output data buffer 30 in which “tag”, “length”, and “tag content” are set by the edit result display processing unit 303
5 is displayed on the display device 310 (step 51
6), the portion A in the figure is recursively called (step 51).
7).

When the processing for "length" is completed, the analysis processing unit 302 subtracts "1" from the "nesting" variable and returns the contents of the "parent field" variable to the "field" variable (step 526). ).

Since the first parameter of the protocol data follows all the subsequent parameters in the lower order, when the processing for the “length” of the first parameter is completed, the protocol data 1
This means that the analysis processing for the unit has been completed.

FIG. 5 is a diagram showing an example of original data output of the protocol data 1a. This is the send / receive data buffer 3
In this example, the 06 protocol data is output as it is.
From this, since it is a list of hexadecimal values, the contents of the protocol data transmitted / received to / from the partner processing system 309 cannot be grasped.

FIG. 6 is a diagram showing an output example 1b when the protocol data 1a shown in FIG. 5 is analyzed and output as described above on the display device 310 or the printer 312 for display output or print output. Here, each line corresponds to a parameter, and the two-digit number output at the beginning of each line is the "tag", the next two-digit number is the "length", and the next is output. The number is the "value". After that, the meaning of the content indicated by the "tag" is output, and finally the meaning of the content indicated by the "value" or an arbitrary value is output.

Since the "value" exists only in the primitive type parameter, there is a line without the "value".

By performing such processing, the meaning of the contents indicated by the "tag" and the "value" becomes clear for each "tag", and the meaning of the contents of the transmitted and received protocol data can be easily confirmed.

[0059]

As described above, according to the data display method of the present invention, by displaying the analysis result of the protocol data and the meaning of the data content, the meaning of the data content and the data are displayed even in the nested structure. The structure can be easily confirmed visually.

Further, it is possible to easily verify whether the type of protocol data is the expected type or the content of the data is correct, so that the work can be carried out efficiently during the development and maintenance work of the system handling the protocol data. You can

[Brief description of drawings]

FIG. 1 is a system configuration diagram of an information processing system showing an embodiment of the present invention.

FIG. 2 is a diagram showing an example of comparison reference data in a comparison reference data storage table.

FIG. 3 is a flowchart showing a process of displaying the analysis result of protocol data and the meaning of data content.

FIG. 4 is a flowchart showing a continuation of FIG.

FIG. 5 is a diagram showing an example of original data output of protocol data.

FIG. 6 is a diagram showing an output example when the present invention is implemented.

FIG. 7 is a diagram showing a structure of protocol data.

FIG. 8 is a diagram showing an example of an abstract syntax and a transfer syntax in OSI TP.

[Explanation of symbols]

1 ... Protocol data, 11 ... Primitive type parameter, 12 ... Constructor type parameter, 13, 41 ... Tag, 14 ... Length, 15, 42 ... Value, 43 ... Nest number, 4
4 ... Output content, 300 ... Information processing system, 301 ... Protocol data analysis display unit, 302 ... Analysis processing unit, 30
3 ... Editing result display processing unit, 304 ... Comparison editing processing unit, 3
05 ... Output data buffer, 306 ... Transmission / reception data buffer, 307 ... Comparison reference data storage table, 308 ...
Communication line 309 ... Partner processing system 310 ... Display device 311 ... Communication control unit 312 ... Printer.

Claims (1)

[Claims] 1. A method for analyzing and displaying protocol data, which is transmitted and received when data is communicated between computers or between a computer and a terminal device, and which comprises parameter elements of "tag", "length" and "value", After analyzing the structure of the data according to a predetermined encoding rule, the contents of the "tag" and "value" which are the parameter elements of the analyzed protocol data, and the "of the table" in which the structure, contents and meaning of the protocol data are defined in advance. A method for analyzing and displaying protocol data, characterized in that the contents of "tag" and "value" are compared, and if the contents are the same, the meaning of the contents of "tag" and "value" is displayed together with the analysis result.