JPH08237334A - Equipment and method for retrieving protocol error - Google Patents

Abstract

PURPOSE: To retrieve a sequential error characteristic to protocol from data and transmission control information taken from a digital communication line. CONSTITUTION: Line data and transmission control information stored in a storage medium 1 are fetched time sequentially by a data fetching part 2 and temporarily stored in a memory for analysis 3. A data analytic means 4 analyzes line data and transmission control information and a state managing means 5 stores a state characteristic to protocol in a state managing memory 7. When the data analytic means 2 detects line data or transmission control information supposed to be abnormal, a fault judging means 6 refers to the state characteristic to protocol from the state managing memory 7 to discriminate whether it is the sequential error characteristic to protocol or not.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a protocol error search device and a search method.

[0002]

2. Description of the Related Art A protocol error search device for analyzing a failure in a communication line is called a protocol analyzer. This device is used by being connected to a communication line, and stores data taken in from a digital communication line in a storage medium such as a hard disk. In this case, the accumulated digital data is recorded in time series, including the information regarding the transmission control.

Then, in the case of analyzing a failure of a communication line in the above protocol error search device, FIG.
As shown by, the information accumulated in the storage medium 11 is displayed on the display device 15 of the protocol error search device, and the user analyzes the cause. At that time, as an aid to such an analysis, the line data on the storage medium 11 and the information on the transmission control are temporarily stored in the analysis memory 13 by the data capturing means 12, and the data analyzing means 14 is also used.
A predetermined data pattern or transmission control information is searched from the data on the storage medium 11, and the searched position is specified and displayed on the display device 15. If the data pattern to be searched does not exist, the fact that the data pattern does not exist is displayed on the display device 15 and the user is notified.

[0004]

However, in the above-mentioned conventional retrieval method, when retrieving frame data or transmission control information, frame data or transmission control information of a predetermined pattern is retrieved. For this reason, when searching for a combination of sequential data such as an error peculiar to a protocol, it cannot be applied as it is. For example, as shown in the flowchart of FIG. There was a problem that it was very troublesome because the pattern search had to be repeated.

Further, in the failure analysis of the communication line, even when a data pattern regarded as abnormal is retrieved,
Due to the protocol-specific, sequential interaction with the pre-retrieval data, the retrieved results may or may not be considered to be a line failure point. Therefore, there is a problem that a sequential error unique to the protocol cannot be accurately analyzed only by searching for a certain data pattern or transmission control information.

[0006] It is an object of the present invention to provide a protocol error search device and method capable of searching a sequential error peculiar to a protocol from data taken in from a digital communication line or transmission control information.

[0007]

In a protocol error search device of the present invention, a storage medium for storing data taken in from a digital communication line and a memory for analysis by taking in the data stored in the storage medium in time series. Data capturing means to be stored on the above, data analysis means for analyzing the data stored on the analysis memory according to a protocol-specific data format and analyzing protocol-specific transmission control information, State management means for storing the state peculiar to the protocol in a state management memory;
For data or information determined to be abnormal in the data analysis unit, reference is made to a protocol-specific state stored in the state management memory, and a failure determination unit for determining whether or not a protocol-specific sequential error is provided. It was configured.

Further, the protocol error search method of the present invention stores the data taken in from the digital communication line, and in the protocol error search method for searching for a protocol error in the stored data, The data is serially captured and analyzed according to the protocol-specific data format and the protocol-specific transmission control information is analyzed, and for the data and information judged to be abnormal by the analysis, the protocol-specific state is referred to It is configured to determine whether or not the sequential error of.

[0009]

According to the present invention, the data taken in from the digital communication line is analyzed in accordance with the protocol-specific data format and the information of the protocol-specific transmission control is analyzed. In this case, the data or transmission control information accumulated in the storage medium is taken out in time series, and if the taken out is line data, it is analyzed according to the protocol-specific data format. In this case, the status unique to the protocol is stored in the status management information section. If the retrieved data is transmission control information,
Analyze protocol-specific transmission control displacements. And
When abnormal data or transmission control information is detected by analysis, these are referred to the protocol-specific state to determine whether it is a protocol-specific sequential error.

[0010]

DESCRIPTION OF THE PREFERRED EMBODIMENTS First, a protocol on a digital communication line in an embodiment of the present invention will be described with reference to FIGS. That is, the ISDN is used for the digital communication line.
There is a line and a packet communication line, the ISDN line communicates according to the ISDN protocol on the D channel and the B channel, and the packet communication line
X. They are communicating according to the 25 packet protocol.
In the case of diagnosing a digital communication line, the line failure is searched for, but the ISDN protocol or X. In the 25th protocol, a line failure is regarded as a sequential error unique to the protocol.

Here, the ISDN in the digital communication line
Protocol and X. With reference to the OSI hierarchical model, the 25 protocol standardizes communication protocols of layer 1 (L1), layer 2 (L2), and layer 3 (L3), as shown in FIG. Layer 1 (L1) is called electrophysical condition, and is used to form the wiring configuration when transmitting actual information as an electrical signal, and the channel that carries the waveform of transmission / reception pulses, line data, maintenance information, etc. Stipulates the frame structure, etc. Layer 2 (L2) is called a data link layer and defines management of information transfer between terminals and networks. Furthermore, layer 3
(L3) defines the contents of the information format and the control procedure of the circuit switched call and the packet call.

A typical example of a line failure due to a sequential error in the above protocol will be described with reference to FIG. That is, in layer 1, it is regarded as a typical line failure that layer 1 is out of synchronization (L11) when the data link in layer 2 is set (L21). Further, in layer 2, it is considered that a typical line failure is that the layer 2 data link is released (L22) when a layer 3 circuit switched call or packet call is originated (L31). . In Figure 1,
The basic configuration of the protocol error search device according to the embodiment of the present invention is shown. This protocol error search device captures data stored in a storage medium 1 such as a hard disk or a magnetic disk that stores data captured from a digital communication line, and the data accumulated in the storage medium 1 in time series and stores them in an analysis memory 3. Data acquisition means 2, analysis memory 3
Data analysis means 4 for analyzing the data stored above according to a protocol-specific data format and for analyzing protocol-specific transmission control information; state management for storing a protocol-specific state in a state management memory 7. With respect to the data and information judged to be abnormal by the means 5 and the data analysis means 4, the failure judgment means for judging whether the error is a sequential error peculiar to the protocol by referring to the status peculiar to the protocol stored in the status management memory 7. It consists of 6.

Further, FIG. 2 shows a protocol error search device 20 of a more specific embodiment. The protocol error search device 20 has the above-described configuration and has a CPU (central processing unit) 30 for various controls and a communication controller 4 for monitoring communication with the digital communication line DL.
0, a data input means 50 such as a keyboard, and the like are added. In FIG. 2, the terminal TE1 is connected to the network NT1 by the digital communication line DL,
A terminal TE2, which is a communication partner of the terminal TE1, is connected to the network NT1.
TE3 is connected.

Next, a specific configuration of the protocol error search device 20 will be described. The CPU 30 constantly monitors the line data and transmission control information of the digital communication line DL via the communication controller 40. Also, CP
The U30 constantly polls the transmission control status of the digital communication line DL from the communication controller 40, attaches the displacement flag D11 and the data length D12 to the transmission control information, and transmits the transmission control information D10 as shown in FIG. Are stored in the storage medium 1 in time series.

In the case of monitoring the D channel of the ISDN line, the code pattern monitored from the digital communication line DL is I.T. The code pattern of the signal type defined by the 430 layer 1 protocol is detected, and the displacement information of the signal type is stored in the storage medium 1 in time series.

Further, when the digital communication line is synchronized, the line data is added in 1-byte units to the data, and additional information such as a start flag D21 and an end flag D22 is attached to the data to form the frame data D20. It is stored in the storage medium 1 in time series with the control information. Also,
Taking the D channel of the ISDN line as an example, signals are transmitted in a synchronized state, that is, when the signal type INFO3 is established on the data line from the terminal TE1 to the network NT1 and on the data line from the network NT1 to the terminal TE1. Type IN
When the FO4 is established, the data of the D channel is added to the data of the D channel in 1-byte units with additional information, and is stored in the storage medium 1 in time series as frame data D20.

Then, the CPU 30 reads the information stored in the storage medium 1, creates display information, stores it in the display memory 9, and displays it on the display device 8. The data input unit 50 is used by the user to display the data stored in the storage medium 1 on the display device 8 via the display device 8 and also for the user to set the search for the line fault. The items to be set are a protocol-specific sequential error type, a search start point on the storage medium 1 for starting the search, and a search start instruction. In the display device 8,
A display memory 9 is connected.

Further, the CPU 30 takes in the line data stored in the storage medium 1 and uses the analysis memory 3 and the state management memory 4 as working memories to retrieve the line data. A program for realizing the functions of the plug-in means 2, the data analysis means 4, the state management means 5, the failure determination means 6 and the like is provided.

Next, a procedure for searching for a sequential error in the digital communication line DL by the protocol error searching device 20 will be described. FIG. 3 shows the operation in this procedure. First, at the start of the search, the data capturing means 2 in FIG. 3 sequentially reads the data in time series from the data on the storage medium 1 corresponding to the search start point set by the user. The data is accompanied by additional information as shown in FIG. 4, and this additional information is the frame data D20.
When the data which is the start flag D21 of
At the beginning of the frame data D20, the additional information is temporarily and sequentially stored in the frame information section 3B of the analysis memory until the data having the end flag D22 of the frame data D20 is detected. When the end flag D22 of the frame data D20 is detected, it is considered that one unit of frame has been created.

If the additional information detects the displacement flag D11 of the transmission control information D10 as shown in FIG.
The transmission control information D10 is treated as the beginning, and the data of the subsequent data length D12 is temporarily stored in the transmission control information section 3A on the analysis memory 3. Then, the transmission control information D
When 10 is extracted for the data length D12, it is considered that the creation of one unit of transmission control information is completed.

Next, when the creation of a frame of one unit is completed in the frame information part 3B on the analysis memory 3, as shown in FIG.
Content is analyzed as layer 2 frame data according to a data format specified uniquely to the protocol. At this time, as shown in FIG. 5, the frame type is detected in the layer 2 information analysis 4A from the frame type field D30 in the frame information section 3B. In addition, ISDN
In the example of the D channel of the line, Q. 92
The frame type is detected according to the data format standardized by the LAPD protocol of No. 1.

When the frame type detection 4A is performed by the data analysis means 4 and the frame type is a control frame of layer 2, as shown in FIG. 3, the state management means 5
In the program (2), the layer 2 state management 5A causes the state of the data link in the layer 2 specific to the protocol to be transited to the layer 2 control frame and stored in the layer 2 state management unit 7A of the data link. In the layer 2 state management 5A, the layer 2 state management section 7A manages the state transition for the layer 2 address as shown in FIG.

The state transition of the data link in the layer 2 state management section 7A is as shown in FIG. That is, the initial state of the data link at the time of starting the search is set to the "link non-setting" state (S10), and when the frame type E10 of the data link setting request is detected, it is set to the "link setting request" state (S11). . Further, when the frame type of the response to the frame type of the link setting request is detected, the “link setting” state is set (S12). Then, in the case of the “link setting” state (S12), FIG.
The data link is being set (L21). Also,
When the frame type E12 of the data link disconnection is detected in the "link setting" state (S12), the "link release request" state (S13) is set. Furthermore, when the frame type E11 of the response to the frame type E12 for the data link disconnection is detected, it is set to the "link non-setting" state (S10).

Here, in the example of the D channel of the ISDN line, the frame type E10 of the data link setting request is S
It is assumed to be an ABME (asynchronous balanced mode setting) frame E10. Further, the frame E11, which is a response to the frame type of the data link setting request, is UA (unnumbered confirmation). Furthermore, the frame type E12 for disconnecting the data link is set to
DISC (disconnect) frame. Further, the response to the frame type E12 of the data link disconnection is a UA frame.

In the detection of the above frame type in the data analysis means 4, as shown in FIG.
When the frame type including the information is detected, the layer 3 information is analyzed by the layer 3 information analysis 4B. Layer 3
In the information analysis 4B, it is assumed that the information field D40 of the layer 3 exists in the frame data D20 of the frame information section 3B as shown in FIG. 5, and the layer 3 is analyzed. In the analysis 4B of the layer 3 information, this information field D40
With reference to, the control number of the layer 3 call and the type of the message are detected by the data format specified in the layer 3 peculiar to the protocol. Taking the case of the D channel of the ISDN line as an example, ITU-T Recommendation Q. 931
In the analysis 3B of the layer 3 information, the "call number" and the "message type" are detected as the layer 3 information in accordance with the standard.

When the analysis 4B of the layer 3 information is performed,
As shown in FIG. 3, in the program of the state management means 5, the layer 3 state management 5B stores the state of the layer 3 call in the layer 3 peculiar to the protocol in the layer 3 state management part 7B which is the call state management part. As shown in FIG. 5, the layer 3 state management unit 7B manages the state transition for the management number of the layer 3 call.

The state transition of the layer 3 call of the call state management section 7B will be described with reference to FIG. 7. The initial state at the start of the search is set to the idle state (S20), and the layer 3 call setting message E20 is set.
Is detected, the occurrence of the layer 3 call is started, and the state transitions to the occurrence state (S21), indicating that the call is occurring. Further, in this state, by detecting the message E21 for releasing the layer 3 call, the existing call is released and the state returns to the idle state (S20). In the example of the D channel of the ISDN line, the layer 3 call setup message is a "call setup" (SETUP) message and the layer 3 call release message is "release completion" (RErelease).
_COMPLETE) message.

Next, the data analysis means 4 and the state management means 5
The operation of the failure determination means 6 will be described on the assumption that the layer 2 state management unit 7A and the layer 3 state management unit 7B store the state of each layer. As shown in FIG. 9, in the failure determination means 6, when the layer 1 data link is in the link setting (L21) state and the layer 1 is out of synchronization (L11), the layer 1 is in line failure. It is determined that Therefore, as shown in FIG. 3, the failure determination means 7 determines the layer 1 in the transmission control information analysis 4C.
When out-of-synchronization transmission control information is detected, the layer 2 state management section 7A, which is the data link state management section, is referred to and the state of the data link is the "link setting" state (S1).
If the address 2) is present, it is determined as a layer 1 line fault.

In the example of the D channel of the ISDN line, I.T. 430 signal type INFO3 or INFO4 defined by Layer 1 protocol
If the non-established transmission control information is detected, the failure determination unit 6 refers to the layer 2 state management unit 7A, which is the data link state management unit, and the data link state is the "link setting" state (S12). ), The line fault of layer 1 is determined.

Further, as shown in FIG.
If there is a layer 3 call that is occurring (L31)
The layer 2 data link is being set (L22)
When the data link is released (L21), the layer 2 is determined to have a line failure. Therefore, as shown in FIG. 3, the failure judgment means 6 manages the call state when the state of the layer 2 data link transits from the "link setting" state (S12) to the "link release request" state (S13). Part 7B
If there is an active layer 3 call in the "active" state (S21), it is determined to be a layer 2 line fault.

In the example of the D channel of the ISDN line, the DISC frame E22 is detected, and the layer 2 state management 5A changes the state of the layer 2 data link from the "link setting" state (S12) to the "link release request". State (S
In the case of transition to 13), if there is a call number under occurrence in the “active” status (S21) in the call status management unit 7B of layer 3, it is determined as a line fault in layer 2.

When the fault judging means 6 judges that there is a line fault, the line data or the transmission control information that caused the line fault is specified and stored in the display memory 60 shown in FIG. 8 displayed on top. As a result, the user is notified of the search result of the line failure.

[0033]

According to the present invention, the data taken in from the digital communication line is analyzed according to the data format specific to the protocol, and the transmission control information specific to the protocol is analyzed. With regard to data and information, the protocol-specific state is referenced to determine whether the error is sequential or protocol-specific. In this way, when abnormal data or transmission control information is detected, an error is searched for by referring to the state peculiar to the protocol. It is possible to easily search for a line failure for a line failure such as a 25-protocol such as a sequential error unique to the protocol.

[Brief description of drawings]

FIG. 1 is an explanatory diagram showing a basic configuration of a protocol error search device according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram of a more specific embodiment of the protocol error search device of the present invention and a system constituted by devices related to the device.

FIG. 3 is a flowchart showing a procedure of a sequential error search in the embodiment of FIG.

FIG. 4 is an explanatory diagram showing a configuration of information stored in a storage medium or an analysis memory in the embodiment of FIG.

5 is an explanatory diagram of a data analysis unit, a state management unit, and the like in the embodiment of FIG.

6 is a state transition diagram of a data link state in a data link state management unit of the state management memory in the embodiment of FIG.

7 is a state transition diagram of the state of the layer 3 call in the layer 3 state management unit of the state management memory in the embodiment of FIG.

FIG. 8 is an explanatory diagram showing a layer structure of a protocol used in an embodiment of the present invention.

FIG. 9 is an explanatory diagram showing layers related to a line failure in the protocol in the embodiment of the present invention.

FIG. 10 is an explanatory diagram showing a configuration of a protocol error search device according to a conventional technique.

FIG. 11 is a flow chart showing a sequential error search procedure in the prior art.

[Explanation of symbols]

 1 Storage Medium 2 Data Capture Means 3 Analysis Memory 4 Data Analysis Means 5 State Management Means 6 Fault Judgment Means 7 State Management Memories 8 Display Device

Claims (2)

[Claims] 1. A storage medium (1) for storing data taken in from a digital communication line, and data stored in the storage medium (1) is taken in time series and stored in an analysis memory (3). Data acquisition method
(2) and a data analysis means (4) for analyzing the data stored on the analysis memory (3) according to a protocol-specific data format and analyzing protocol-specific transmission control information. The state management means (5) for storing the state peculiar to the protocol in the state management memory (7), and the data and information determined to be abnormal in the data analysis means (4) are stored in the state management memory (7). A protocol error search device comprising: a failure determination means (6) for determining whether or not a protocol-specific sequential error is stored by referring to the stored protocol-specific state. 2. A protocol error search method for accumulating data acquired from a digital communication line and searching for a protocol error in the accumulated data, wherein the accumulated data is acquired in time series, and protocol-specific data is acquired. Analyzes according to the format and the information of protocol-specific transmission control, and with respect to the data and information judged as abnormal by the analysis, refers to the protocol-specific state to determine whether it is a protocol-specific sequential error. A protocol error search method characterized by the following.