KR100730876B1 - High speed network traffic management device and method thereof - Google Patents

Abstract

The present invention relates to an apparatus and method for managing high-speed network traffic, and more particularly, to an apparatus and method for managing high-speed network traffic, The data management can be performed without leakage of information corresponding to confidential company secrets, the advantage that traffic management including maintenance can be performed quickly and safely, and the entire network management for a high-speed Internet dedicated line is easy By storing all the data in the database management system, it can analyze not only the whole traffic but also various types of data requested by the user, so that traffic data such as equipment unit, region unit, line type, Can be output through There are advantages that can prevent a system overload of the benefits and the number of simultaneous connections the user's Web browser.

Description

Technical Field [0001] The present invention relates to a high speed network traffic management apparatus and method,

BRIEF DESCRIPTION OF THE DRAWINGS Fig. 1 is a schematic diagram showing internal and external connection relationships to a system provided by the present invention; Fig.

BACKGROUND OF THE INVENTION Field of the Invention [0001]

3 is a flowchart showing a process of collecting traffic data of a collection process according to the present invention.

Description of the Related Art

100: simple network management protocol management information base object

110: Simple Network Management Protocol Collection Module 120: Database Management System

140: Database connection device 150: Java Servlet

160: Web server 170: User web browser

The present invention relates to an apparatus and method for managing high-speed network traffic, and more specifically, by integrating and operating traffic measurement and analysis, which is separated and operated for high-speed Internet backbone and dedicated subscriber, And more particularly, to a device and method for managing high-speed network traffic that overcomes the limitations of measurement performance of a public tool.

Generally, the traffic management apparatus includes a collection module of a simple network management protocol for collecting traffic data of an interface registered in a table in a collection target equipment connected to a network, and a simple network management protocol And a statistics / output module for outputting network traffic data to manage traffic data.

At this time, a Multi Router Traffic Grapher (MRTG), which is a traffic management system in the above-mentioned apparatus, is written in Perl script language. In a first search execution for traffic data collection And a GET Package Data Unit (GET PDU) method for reading only the data for the first line is used. The method of storing traffic data collected in the conventional method is a simple file storage method, which is a method of deleting time-lapse data in an existing file and copying only valid data to add new collected data.

The GET PDU scheme as described above has a problem in that the traffic load graph for each line is repeatedly generated as an image file on the server every time the traffic data is collected, thereby increasing the load on the system and the load on the file system input / output.

In addition, the conventional traffic management system, Multi-Router Traffic Grapher (MRTG), is written in Perl language. Traffic data collection for a large-scale high-speed Internet leased line of 114 Mbps or more is the most significant digit Since it is impossible to implement SNMPv2C, which is a Simple Network Management Protocol (hereinafter referred to as SNMP) version, because it requires the maximum number of significant digits of the exceeding 20 digits, it is impossible to collect traffic data on a high-speed line .

In addition, if the traffic management system is open-use, security against corporate confidentiality is poor, traffic data of the entire network for a dedicated line is not provided, and therefore, There is a problem that a considerable time is required for system management such as repairing and it is impossible to trace back with hacking attempts.

SUMMARY OF THE INVENTION The present invention has been proposed in view of the above-described conventional requirements, and it is an object of the present invention to provide a network system in which all interfaces (for example, an Internet backbone line, Line, etc.), and based on this analysis, not only the overall traffic analysis for the high-speed network, but also various various aspects such as equipment unit, area unit, line type, And to provide high-speed network traffic management apparatus and method capable of providing traffic data.

According to another aspect of the present invention, there is provided an apparatus for managing high-speed network traffic,

A collection (FETCHMIB) process of collecting traffic data of a target equipment connected to a network;

An alarming process for executing an alarm message for an alarm that executes the alarm message when the traffic load ratio of the line collected through the collecting unit surpasses the registered threshold value;

A monitor process for generating the collection (FETCHMIB) process and the alert process;

A port collecting (FETCHPORT) process for automatically managing interface information of the target equipment;

And a database management system (hereinafter referred to as DBMS) for managing all the collected data.

According to another aspect of the present invention, there is provided a method for managing high-

A first step of inputting detailed information (for example, an internet protocol address, a simple network management protocol communication, a simple network management protocol version, and the like) of the collected equipment in a database table in a target equipment to collect traffic data for a high speed network;

A second step of collecting traffic data for the corresponding network equipment through the process of executing the traffic data collection function when the information of the target equipment is inputted;

Storing the related information in an error log table including an error code when the collection is unsuccessful, and storing the traffic data in the database when the collection is successful;                     

And a fourth step of connecting the user with the registered account of the traffic measurement device so that the user web browser can acquire data corresponding to the form requested by the user searching for the stored traffic data.

The foregoing objects, features and advantages will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

FIG. 1 is a diagram schematically showing the internal and external connection relationships of the system provided by the present invention. FIG. 1 is a schematic diagram illustrating a simple network management protocol management information base object (SNMP MIB Object ) 100;

The SNMPv1 or SNMPv2c protocol is used according to the Simple Network Management Protocol (SNMP) version of the Simple Network Management Protocol Agent (SNMP Agent) when retrieving data of a management information base (hereinafter referred to as MIB) A simple network management protocol management unit (SNMP manager) 110 for driving a collection process of the traffic management apparatus;

A database management system (DBMS) 120 for storing the collected traffic data;

A JAVA servlet (JServlet) 150 included in the web server 160 which enables various output of the result report according to a user's request;

And a user web browser 170 as an output unit.

The Simple Network Management Protocol Management Information Base Object (SNMP MIB Object) 100 includes a management information base (MIB) composed of traffic data managed in a network communication device, and has six Object IDs (IfOperStatus, ifDescr, ifInOctets, ifOutOctets, ifHCInOctets, ifHCOutOctets). The management information base (MIB) includes an MIB-II standard MIB.

The Simple Network Management Protocol Management Unit (SNMP Manager) 110 manages the Simple Network Management Protocol (SNMP) version SNMPv1 that can be implemented in the Multi-Router Traffic Grapher (MRTG), which is a conventional traffic management system, By using the Simple Network Management Protocol (SNMP) version SNMPv2c protocol that can be implemented in the present invention, the collection process of the entire network network traffic management device is executed.

The database management system (DBMS) 120 stores the collected traffic data in a period of 10 minutes in the collection process, performs basic statistical processing, and stores the collected traffic data in a plurality of related tables. The traffic utilization rate And transmits the corresponding message to the traffic management apparatus using the system operation log (Syslog). Also, the process includes a function of performing at least 10 to a maximum of 50 concurrently and being easily controlled according to an operator's command.

The Java Servlet 150 outputs traffic data stored in the DBMS 120 in a variety of formats requested through the user web browser 170 connected to the system. The Java Servlet is preferably implemented in the Java language. As described above, the Multi-Router Traffic Grapher (MRTG), which is a conventional traffic management scheme, is written in the Perl language Therefore, traffic data collection for a large-scale high-speed Internet leased line more than 114Mbps requires the maximum effective digit of 20 digits exceeding 15 digits, which is the maximum number of significant digits supported by the Perl language, so that SNMPv2C, which is a simple network management protocol It is impossible to collect traffic data for high-speed lines.

When a request such as a report output is generated from the user web browser 170, the generated thread of the process generated in advance by the Java servlet 150 is copied to a database connection device (DBC) 140, And the traffic data on the collection result is also transmitted to the user web browser 170 through the database connection device 140 and output.

FIG. 2 is a diagram showing inter-process interactions of the traffic management apparatus according to the present invention. FIG. 2 is a flowchart illustrating a process of collecting (FETCHMIB) 210 traffic data of target equipment connected to a network;

An alarming process (220) for executing an alarm message for an alarm that executes the alarm message when the traffic load rate of the line collected through the collecting unit surpasses the registered threshold value;

A monitor process 200 for generating the collection (FETCHMIB) process 210 and the alert process 220;

A port collecting (FETCHPORT) process 250 for automatically managing interface information of the target equipment;                     

And a database management system (DBMS) 120 for managing all collected data.

The monitoring process 200 is executed by the PROCM, a process control command developed as traffic management device application software that connects internal processes, and manages the operations of the collecting (FETCHMIB) process 210 and the alert process 220.

The collecting (FETCHMIB) process 210 includes a shared memory 230 which is generated up to 50 and stores all the status information generated during the collection, and the status is managed in the other processes including the monitor process .

The alert process 220 executes the alert message through the message queue 240 if the traffic utilization of the collection line has skyrocketed or crashed above a previously registered threshold. Here, the message queue 240 includes a function of an alert message delivery path as a sequential data processing structure. The alert message information transmitted through the message queue 240 is re-processed in the alert process 220 and transmitted to another system using a system operation log (Syslog). The system operation log (Syslog) includes the function of transferring messages in a number of ways depending on the registration of the relevant environment configuration file.

The FETCHPORT process 250 includes collecting and storing information in a database whenever an operator requests it.

The database management system (DBMS) 120 prevents a system overload due to the simultaneous connection of the multi-user web browser 170 with the web browser, which is a client program of the user, through the middleware 260, To be transmitted and transmitted. The middleware 260 is for enhancing system performance. The middleware 260 includes a database connection device (DBC) 140 for connection between a user web browser and an operator server, a service for responding to a request for report output from the user web browser A Java servlet 150 for supporting a high-speed line of 114 Mbps or higher, and a network-based server such as Apache. The web server 160 is distributed according to a license and can be used freely.

The process of driving the collection process in the high-speed network traffic data management apparatus will be described in detail with reference to FIG.

FIG. 3 is a flowchart illustrating a collection process for driving a collection process of a traffic device according to the present invention. The collection process (FETCHMIB) according to a preferred embodiment of the present invention is executed as follows. The collecting (FETCHMIB) process 210 generated by the monitoring process 200 checks the parameter values (S110) and accesses the database connection device 140 (S120).

Since the collecting process is performed only for the network devices belonging to the group, the collection process 210 collects a maximum of 128 network devices, The number is 1000. In addition, the interface that can be managed by the traffic management apparatus of the present invention is capable of up to 50,000 lines.

Therefore, when the collection process 210 collects the traffic data of the management subject device, compared with the maximum value 128 of the number of network devices to be managed and the number of network devices that can be managed by the present invention, (No in S130), the system is stopped in the sleep mode (S140). However, if the number of network devices capable of being collected does not exceed the maximum value (Yes in S130), traffic data is collected using Simple Network Management Protocol (SNMP) (S150).

If the collected interface does not exceed the maximum value (Yes in S160), the interface analyzed in the collected data is compared with the maximum value of the interface manageable in the traffic management apparatus of the present invention. (S170), and receives the graph type traffic data configured as a day / week / month and the like (S180).

Here, if the traffic utilization rate of the collection line has skyrocketed or collapsed above the registered threshold value (Yes in S190), the alert message is transmitted to the alert process (S200). However, if the overload does not occur due to the usage rate not exceeding the designated value (No in S190), table type traffic data configured as time / week / month is inputted (S210).

By using Simple Network Management Protocol (SNMP) GETNEXT PDU method in the process of collecting traffic data for all interfaces belonging to the network equipment to be managed, traffic data is managed by simple network management And is stored in the database management system 120 after being separately searched and disassembled again between the protocol manager (SNMP manager) and the simple network protocol agent (SNMP agent) of the network management object device.

Since the collection process collects traffic data every 10 minutes, when 10 minutes have elapsed since the execution of the collection process started (Yes in S220), the process returns to the data collection process (S150). Execution is complete. If the elapsed time does not exceed 10 minutes (No at S220), the system is stopped in the sleep mode for the remaining time (S230) and returns to the data collection step (S150). If the execution of the acquisition process is completed at a time exceeding 10 minutes, the time is taken as the start time of the 10 minute cycle starting the next data collection step (S150).

As described above, the present invention solves the problem that overall traffic management for a network used for a large-scale high-speed Internet leased line of 114 Mbps or more can not be performed and the security for traffic data management is poor. Management can be performed safely without leak of information corresponding to confidentiality of company, the advantage that whole network management for high-speed Internet leased line can be easily performed, and all data can be stored in a database management system, The advantage of being able to output traffic data such as equipment unit, region unit, line type, and interval according to the form requested by the user through the user's web browser and the system overload due to the simultaneous connection of the user's web browser To prevent It has the advantage.

It will be apparent to those skilled in the art that various modifications, additions and substitutions are possible, without departing from the scope and spirit of the invention as disclosed in the accompanying claims. You should see.

Claims (9)

A network traffic data management device comprising: A collection unit for collecting traffic data of a target device connected to a network; An alarm unit for executing an alarm message for an alarm that executes the alarm message when the traffic load rate of the line collected through the collecting unit surpasses the registered threshold value; A monitor unit for generating the collecting unit and the alarm unit; A port collector for automatically managing interface information of the target equipment; A database management system having middleware having a Java servlet implemented in a Java language, and a database management system having a middleware having a Java servlet implemented in a Java language, wherein the database management system manages all collected data and transmits collection information about the traffic data to the web browser, Wherein the high speed network traffic management apparatus comprises: The method according to claim 1, Wherein the collecting unit comprises a shared memory unit for storing state information generated during collection. The method according to claim 1, Wherein the alert unit comprises a message queue configured with a sequential data processing structure. The method according to claim 1, Wherein the interface information collected by the port collecting unit includes information on a network element using a high-speed Internet backbone line or a dedicated subscriber line. The method according to claim 1, Wherein the database management system manages data using a simple network management protocol get-next-package data unit scheme. delete delete A method for managing network traffic data, 1. A method for collecting traffic data for a high-speed network, the method comprising: inputting detailed information of a collection device to a database table in a target device to collect traffic data; A second step of collecting traffic data for the corresponding network equipment through the process of executing the traffic data collection function when the information of the target equipment is inputted; Storing the related information in the error log table including the error code when the collection is failed, and storing the traffic data in the database when the collection is successful; A middleware including a Java servlet implemented in a Java language so that a user web browser can acquire data corresponding to a form requested by a user searching for the stored traffic data, And a fourth step of connecting to the user. 9. The method of claim 8, The second step of executing the traffic data collection function comprises: A first step of collecting status information of a system stored in a shared memory; A second step of generating an alert message on the traffic utilization overload of the collected line; And a third step of managing the collected traffic data in a requested form.

Images