KR100917130B1 - Packet reception of entire channels with wireless lan environment using by multi RF Grabber, Wireless Lan Card, or Unit, and Effective transmitting method thereof - Google Patents

Abstract

The present invention is a flexible wireless LAN environment, a wireless LAN analyzer or a method for operating a multiple RF grabber or wireless card or device for the system and the wireless LAN using the multiple RF grabber or wireless card or device The present invention relates to a method for and collection of all efficient and lossless packets of wireless LAN, remote network management (NMS) and device management, and efficient delivery of wireless LAN packets, including at least one RF grabber or wireless card or device. The present invention relates to a method and apparatus for efficiently collecting and delivering a packet that is being communicated in all or some channels without loss.

*Definition of Terms :

1.Wireless LAN all channels are 35 ~ 165 channels in 5.170 ~ 5.825GHz frequency band for 802.11a and 1 ~ 14 channels in 2.412 ~ 2.484GHz frequency band for 802.11 b / g. That is, all communication channels provided by the WLAN communication environment.

2. RF Grabber means a device that collects all radio signals, various control and status signals and data necessary for wireless LAN or wireless communication service. RF grabber is also used as a collector.

To this end, the present invention is a method of configuring and operating a packet collector using a plurality or one or several RF grabber or a wireless LAN card or device, each channel of the wireless LAN for a predetermined time using one RF grabber or wireless LAN card or device. Receiving and recording wireless LAN packet to storage device by changing the area, calculating packet quantity by calculating packet receiving rate and packet collection time, and then receiving time for channel with more communication activity than other channel. Give more weight.

Therefore, when N pieces of RF grabber or WLAN card or device are installed, the channels are arranged in order of receiving packets of each channel, and each channel is dedicated to N-1 pieces of RF grabber or WLAN card or device. It is configured to receive and collect WLAN packets while traversing the remaining channels that are not allocated to the remaining RF grabber or WLAN card or device.

In addition, by repeating the above process at regular intervals, the WLAN packet can be efficiently collected in response to a flexible WLAN environment in which the main communication channel changes frequently, and the packet collected using the double buffer structure and the multiple input / output method built in the collector are collected. The present invention relates to a method and a device for efficiently delivering a lossless WLAN analyzer.

Wlan, IEEE 802.11x, wlan packet collection, wlan analysis, channel analysis

Description

Packet reception of entire channels with wireless lan environment using by multi RF Grabber, Wireless Lan Card, or Unit, and Effective transmitting method

1 is a block diagram showing an RF grabber or wireless LAN card or device and a wireless LAN packet collection and transmission apparatus according to an embodiment of the present invention.

2A and 2B are flowcharts illustrating a process of setting an optimal channel and a collection time corresponding to an RF grabber or a WLAN card or a device according to the amount of packets generated during communication when collecting WLAN packets.

3 is a flowchart illustrating a process of transmitting a WLAN packet by a request of a WLAN analyzer;

Figure 4 is a block diagram showing the structure of the RF grabber according to the present invention.

5 is a view showing the setting of the local adapter (Local Adapter) in the RF grabber setting process according to the present invention.

6 is a view showing the setting of the remote adapter (Remote Adapter) in the RF grabber setting process according to the present invention.

7 is a diagram illustrating an input of an IP address of an RF grabber in the process of setting an RF grabber according to the present invention.

8 is a view showing a login in the RF grabber setting process according to the present invention.

9 is a view illustrating a status connection in the RF grabber setting process according to the present invention.

10 is a diagram illustrating a setup connection in the RF grabber setting process according to the present invention.

11 illustrates a password connection in the RF grabber setting process according to the present invention.

12 is a view showing a security (Security) connection in the RF grabber setting process according to the present invention.

13 is a view showing a patch (Patch) connection in the RF grabber setting process according to the present invention.

14 is a view showing a backup (Backup) screen in the RF grabber setting process according to the present invention.

The present invention relates to a method for collecting and delivering an efficient WLAN packet in a WLAN environment based on one or more RF grabbers or WLAN cards or devices.

WLAN analyzers typically provide 35 to 165 channels in the 5.170 to 5.825 GHz frequency band for 802.11 a and 1 to 14 channels in the 2.412 to 2.484 GHz frequency band for 802.11 b / g based on one WLAN card. do. When collecting packets in the conventional manner, it is possible to collect only packets of one channel designated by the user. In Korea, for example, 802.11b / g is commonly used in Korea, so a packet can be collected only when a user specifies only one channel out of a total of 14 channels.

       When collecting packets using a conventional foreign or third-party wireless LAN analyzer, it is impossible to analyze the wireless LAN packets transmitted and received on other channels at the same time in addition to the designated channel. In particular, the channel fixed method has a limitation in that it does not adequately cope with a flexible wireless LAN environment in which main communication channels change frequently, and thus the amount of packet transmission and reception of all channels occurring at a given node cannot be known at a glance.

Even if the existing product has a function of collecting data by circulating each channel for a certain time, this is a method of collecting data according to a uniform time division without considering the amount of transmission / reception of the WLAN packet actually occurring in each channel. . As a result, even if a channel with more active communication occurs, the RF grabber or WLAN card or device assigned to the channel cannot be switched to a channel with active communication. This results in the loss of all packets originating from the active channel. Due to the above problems of the basic product, it remains a problem that cannot be solved until now in collecting packets essential for analysis of the WLAN environment, NMS, security, optimization, and the like.

In order to solve the above problems, the present invention provides a more efficient and fluid response to the entire WLAN channel within a limited resource and collects packets in various ways, and supports analysis and NMS (NMS) supported by WLAN analysis systems. The purpose is to completely collect and provide real packets and signals that are essential for security, optimization, and optimization.

In addition, the present invention searches for the channels used in the wireless LAN at regular intervals and arranges the communication activity in the most active order, allocates N RF grabber or wireless LAN card or devices in the order of high communication, and transmits the wireless LAN packet. Collects WLAN packets using an optimization technique that can be efficiently collected without loss rate, and stores the packets collected in a large amount by the above method in the storage device of the collector, and when requested by the collector or analyzer The purpose of the present invention is to implement a method for delivering stored packets to a single or multiple WLAN analyzers without loss using a double buffer structure and multiple input / output structures.

In order to achieve the above object, the present invention, in setting up and collecting a channel of a WLAN collector for collecting a WLAN packet, first of all, an RF grabber or a WLAN card or device for analyzing a channel in which WLAN communication is most active. Measure the amount of WLAN packets sent and received while traversing each channel for a certain period of time, sort the channels according to the order of the amount of WLAN packets sent and received, and N-1 collectors if there are N collectors Are arranged in order of channels with a high amount of packets. In other words, one channel packet is collected for each collector.

Finally, using the remaining RF grabber or wireless LAN card or device, it measures the amount of wireless LAN packets transmitted and received while traversing each channel for a certain time for the remaining channels that have not been assigned a dedicated collector. Arrange the channels and spend more packet collection time on channels with a high volume of packets. In this way, the WLAN packet collection time of each channel is changed to innovate the problem of allocating more time to a channel with a small amount of WLAN packet transmission / reception in a uniform time distribution. Loss of WLAN packets can be minimized.

In addition, the above process is repeated at regular intervals in order to appropriately cope with a flexible WLAN environment in which additional channels are frequently changed.

The WLAN packet collected by the above process is first stored in a management area of the WLAN packet collector, that is, a storage device or a memory, before being delivered to the WLAN analyzer, which is a packet request time of the WLAN analyzer and a packet reception time of the packet collector. It is a buffer structure to prevent the loss of packets caused by gaps or loads in real time transmission and reception.

In particular, in the method of transmitting the packet to the N WLAN analyzers by using the N I / O method based on asynchronous input and output methods, the collector prior to or without the request of the WLAN analyzer is requested. Collect and store packets. Furthermore, when the collector collects the number of WLAN packets set by the user or at the request of the analyzer or the system, the collector sequentially executes commands to send the packets to the analyzer so that the WLAN packet collector and the WLAN analyzer It is an innovative method and device that can collect and transmit large packets collected in multiple WLAN channels without loss due to the reduction of packet loss that can occur in the process of intercommunication gaps and commands.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an exemplary diagram of an overall configuration for receiving and transmitting a WLAN packet in a flexible WLAN environment.

As shown in FIG. 1, a storage area for storing packets received from an RF grabber or a wireless LAN card or a device, and a queue for recording multiple input / output requests of the wireless LAN analysis device.

2A and 2B are flowcharts illustrating a process of allocating an optimized collector, a collection time, and the like according to the amount of communication packets occurring in all channels provided by an RF grabber or a WLAN card or a device when collecting a WLAN packet; .

FIG. 2A is a flow chart of using an RF grabber or WLAN card or device with a quantity smaller than one or a number of communication channels. As shown in FIG. 2A, the RF grabber or WLAN card or device may be configured for the entire WLAN channel. The number of channels and the number of channels used are determined (S100), and all channels of 802.11x are scanned (S110). The scanning method includes one of a user-specified manual method and an auto-scan method by automatic method. You can choose.

The amount of wireless LAN packets transmitted and received for each scanned channel is recorded and analyzed (S120). The amount of wireless LAN packets is calculated for each channel based on the amount of wireless LAN packets recorded and analyzed (S130). According to the packet amount, one dedicated channel is set and arranged in each of the N-1 RF grabbers or the wireless LAN card or the device (S140).

Here, when the number of WLAN packet collectors or WLAN cards or devices is compared with the number of communication channels (S150), if the number of WLAN packet collectors is equal to or greater than the number of channels used, the procedure is terminated in the above process. If the number of packet collectors is less than the number of channels being communicated with, it allocates packets to many channels and collects the packet volume by circulating the remaining channels that are not allocated to one RF grabber or one wireless LAN card or device at regular intervals. By calculating (S160), arranging the packets in the order of the channels with the largest amount of packets, and assigning the collection time to the channel with active communication (S170), the loss rate even when collecting packets for the remaining channels using one packet collector. To minimize this.

In addition, the process is repeated at a predetermined time interval and the packet loss rate of the collector can be minimized or eliminated by repeatedly performing the process regardless of steps S100 to S160 after step S170.

Also, FIG. 2B is a flow chart when the RF grabber or wireless LAN card or device is as many, more or less than the number of channels used.

As shown in FIG. 2B, the number of the RF grabber or the WLAN card or the device mounted or connected to the WLAN analyzer is determined (S200), and the communication is performed at the node where the packet collector is installed (802.11 a). / b / g / e / n / x, etc.) are identified (S210), the channel (S220) where communication is being made, and the amount of packets generated for each channel is analyzed and identified (S230).

In addition, when the number of channels used by the packet collector is greater than or equal to the number of channels used by the packet collector and the number of channels used by the RF grabber or wireless LAN card or device (S240), the amount of packets and the communication method (802.11 a / b / g / e / n / x, etc.) to allocate the optimal device, and the remaining collector is made to wait (S270).

It stores, manages, filters, and decodes the packets collected in each channel from the collection device allocated to each channel to transmit the packets to a destination designated by the user (S280). When there is a request such as a setup (Setup), the packet collector interprets and executes the command (S290).

If the number of packet collectors is less than the number of channels used, the N-1 collectors are allocated in the order of the channels with the greatest amount of packets and the remaining one collector calculates the amount of packets generated in the remaining channels (S250). Allocating more collection time to many channels (S260), and assigns the optimum device for each channel (S270) according to the packet amount and communication method (802.11 a / b / g / e / n / x, etc.). It stores, manages, filters, and decodes the packets collected in each channel from the device allocated to each channel to execute packet transmission to a destination designated by the user (S280), and executes the command or setup of the WLAN analyzer or the user. When there is a request such as (Setup), the packet collector interprets and executes the command (S290).

In addition, the process may be repeated at regular intervals to minimize or eliminate the packet loss rate of the packet collector.

3 is a flowchart illustrating delivery of a WLAN packet.

As shown in FIG. 3, a WLAN packet collector or a WLAN card or device is set up according to a user's setting request (S300), and the WLAN packet is collected from the collector or WLAN card or device (S300). S310), 32 MB or more of Flash, 128 MB or more of SDRAM, or a storage area such as a memory card or a device (S320).

The packet collector or the wireless LAN analyzer or server connected to the wireless LAN card or the device requests the transmission of the wireless LAN packet (S330), and the collector interprets the command for the transmission request in the storage area of the collector. The WLAN packet is transmitted to the analyzer or the server (S340).

Finally, the WLAN analyzer or server confirms receipt of the WLAN packet transmitted from the storage area (S350).

More specifically, the RF grabber or the wireless LAN card or device collects the wireless LAN packets, and the collected wireless LAN packets are stored in the storage area (storage device) of the collector. The WLAN packet transmission command received from the N WLAN packet analyzers is described in the I / O queue of the double buffer built in the collector.

In addition, when the WLAN packet is transmitted from the WLAN packet collector to the WLAN analyzer when the amount of packets stored in the buffer reaches a predetermined ratio determined by the user and the WLAN packet collector determines that the network load If there is no or less, and the request of the WLAN analyzer transmits the packet.

Hereinafter, the RF grabber which is a WLAN packet collector will be described in more detail.

As shown in FIG. 4, the system interface structure of the RF grabber includes at least one processor, at least 128 MB of SDRAM, at least 32 MB of flash memory, and an Ethernet 10 / 100Mb 4 port. Or more (WAN) 10 / 100Mb 1 port or more, Router (IPv4, IPv6), RS-232C 2 or more ports, USB 2 or more ports, Console 1 port, PCMCI (PCMCI) 1) One or more slots, consisting of 802.11x (802.11a / b / g / e / n / etc) Wireless Module.

And the hardware specification of the RF grabber is described in Table 1 below.

Hardware Specifications Chipset Atheros 802.11x AR5212 and Related Chipsets  Standard * IEEE 802.11a * IEEE 802.11b * IEEE 802.11g * IEEE 802.3   Channels * 802.11 a 5.170 to 5.825 GHz (35 to 165) * 802.11 b / g 2.412 to 2.48 4 GHz (1 to 14) * 802.11 e * 802.11 h * 802.11 x Signal Rates (Mbps) * 802.11 a / g: 54, 48, 35, 24, 12, 9, 6 * 802.11 b: 11, 5.5, 2, 1 Device management Web-Based-internet Explorer v6 or later; Netscape Navigater v7 or later; other Java-enabled browsers. * AP Manager Security * 64bit, 128bit WEP Unit weight 700 g Ethernet Interfaces 10 / 100M and Power over Ethernet, 4 Port Signal range * Indoors: Up to 328 feet (100meter) * Outdoors: Up to 1312 feet (400meter)

In case of using RF grabber as a collector, it is regarded as one network adapter in wireless LAN communication environment. Wherever a wireless network is configured, an RF grabber can be installed anywhere, anytime to collect and utilize 802.11x packets remotely or locally. Both Ethernet and IP must be available in order to send the packet to the WLAN analyzer remotely, so it must always be connected to the Ethernet network.

Therefore, the feature of the RF grabber is a hardware-based remote WLAN capture terminal, which captures 802.11x packets, encapsulates them, and transmits them in real time to the WLAN analyzer in the form of a stream such as UDP or TCP and various protocols.

One RF grabber can be connected to up to N WLAN analyzers in a 1: N fashion and can be further expanded as needed. Therefore, the client can access the above equipment and collect packets not only in the company but also in the whole country or anywhere in the world, which can save a lot of cost by executing the wireless network analysis, management, and optimization of the desired area in real time. .

It can also receive any 802.11x signal using the Atheros AR5212 and various related chipsets, and changes the AP mode to standard 802.11x 54 Mbps, 2x (108Mbps) or 3x (164Mbps) wireless. It can also be used as a LAN router (AP), and a web management system (Web Management System) is built-in, so you can easily set capture related options locally or remotely.

5 to 14 are views showing a process of setting the RF grabber locally or remotely.

     In the RF grabber setting method, as shown in FIG. 5, the packet capture mode is set in the driver mode change, and the number of channels to be captured is set.

6, after selecting the RF grabber module and clicking the Add IP button in the RF grabber setting, the IP address is set as shown in FIG. 7 and connected to the IP address. Then, a login window for setting an RF grabber as shown in FIG. 8 is displayed, and in this window, an ID (ID) of the corresponding collector and a patch ID (Patch ID) for upgrading can be set.

In order to set IP, password, WEP, etc. in the login step, after logging in with the set ID and selecting Setup, a status screen appears as shown in FIG. 9. Set the current IP, NETMASK and AP on the status screen. If you go to the Setup page, the screen shown in FIG. 10 is displayed, and the detailed contents are set as follows for the IP, the netmask, and the AP.

Selecting api in the setup window displays all available wireless LAN modes such as 802.11a, b / g, d, e, f, h, i, n, and selects the desired mode and channel. Set Identifier) to set.

After setting up, go to the password page and a screen as shown in FIG. 11 is displayed. In the password item, a password for accessing a web page is input.

After setting the password, when accessing the Security page, the screen shown in FIG. 12 is displayed. In this screen, security is set for accessing the AP when setting the Api, and 128-bit, 64-bit ASCII and HEX Provides a mode.

If you log in with the patch ID for the upgrade in the login step, go to the Patch (Patch) page and the screen shown in Figure 13 appears, the patch page to perform the upgrade of the RF grabber system, and a bug or patch situation occurs later Run the page above.

If the system is damaged due to any problem during patching or during the upgrade phase, it provides a backup function and reinstalls the initially provided version and reboots at the same time. As shown in FIG. You can enter it only by entering an absolute address, such as "http://192.168.0.192/Backup.html". If you press the Apply (Apply) in the screen as described above will be reinstalled to the version provided initially and reboot at the same time.

As described above, some exemplary embodiments of the many functions and features related to the present invention have been described, but the present invention is not limited to the above-described embodiments, and any person skilled in the art to which the present invention pertains can make various changes. As it can be implemented, it can be said that the patent right is applied to the field to which the logic, technology, method, etc. proposed in the present invention are applied or applied. In other words, in case of establishing mobile network, wireless communication, wired communication, private network, control network, USN, etc., various packets are collected, stored, managed, transmitted, network optimization and security, etc. In order to process a task, a packet must be collected, and in order to collect the packet efficiently, the method or technology proposed by the present invention must be applied. In other words, from the viewpoint of the invention of efficient packet collection and delivery method and apparatus, the present invention can have a great effect in terms of technical originality, innovation, progress, creativity, and application.
Ultimately, anyone who has ordinary knowledge of the logic, technology, method, and apparatus proposed by the present invention can implement various modifications, and thus, in addition to the fields mentioned in the claims, various application of element technologies or methods proposed by the present invention can be made. You will have to write. Therefore, if the present invention is applied or applied, even if it is not included in the claims of the present invention it can be said that this patent is applied.

As described in detail above, the present invention provides a method and apparatus for efficient packet collection, storage, management, and delivery of all channels of a wireless LAN by intelligently responding to a flexible wireless LAN environment. A series of processes related to analysis and configuration can be performed locally and remotely, both automatically and automatically, minimizing packet loss during packet collection, storage, management, and transmission. can do. The present invention will have a great ripple effect in various fields by inventing and inventing original and innovative ideas and techniques in the packet collection, storage, management and transmission method for analysis.

Claims (14)

In a method of collecting packets of all channels through which the RF grabber or WLAN card or device for collecting the WLAN packets, A first step of receiving and recording a wireless LAN packet by automatically and manually changing each channel of the wireless LAN for a predetermined time using one RF grabber or a wireless LAN card or device; A second step of measuring the received WLAN packet amount and sorting the WLAN packets in the order of the channels having the largest amount of transmission and reception of the WLAN packets; A third step of allocating a dedicated channel to N-1 RF grabbers or WLAN cards or devices according to the sorted order to receive a WLAN packet; Except for the N-1 RF grabber or wireless LAN card or device, one remaining RF grabber or wireless LAN card or device is a wireless LAN packet than a channel having a smaller amount of transmission / reception packets on a channel having a larger amount of transmission / reception packets among the remaining channels. Dedicating a lot of collection time and dedicating a packet collection time to a channel having a small amount of transmission and reception packets;       Packet collection method for all channels collected in a wireless LAN environment using multiple RF grabber or wireless card or device. The method of claim 1, Receiving the wireless LAN packet of the first step using a multiple RF grabber or a wireless LAN card or device, characterized in that for repeating the channel distribution process for collecting the wireless LAN packet at regular intervals to correspond to a flexible wireless LAN environment Packet collection method for all channels collected in WLAN environment. The method of claim 1, A method of collecting packets of all channels collected in a wireless LAN environment using a multiple RF grabber or a wireless LAN card or a device, characterized in that two or more wireless LAN packet collectors are allocated and used for each channel. What is claimed is: 1. A method of transmitting a WLAN packet from a WLAN packet collector to a WLAN analyzer, The WLAN packet collector preemptively collects the packets and stores them in the storage or management area of the collector until the WLAN packets are delivered to the WLAN analyzers. After transmitting the packet to N analyzers by asynchronously executing the transmission command that is intelligently stored according to the network traffic condition, the load of the collector, and the remaining capacity of the storage device, the WLAN packets are delivered to the WLAN analyzers. A double buffer structure and an asynchronous method for preventing the loss of a WLAN packet occurring in the gap between the request time and the WLAN packet reception time of the WLAN packet collector and preventing the loss of the packet in the process of delivering the packet. Forwards packets to one or N WLAN analyzers without loss. Multiple RF grabber or by using a wireless LAN card or device, all packet forwarding method of a channel acquisition in a wireless local area network, characterized in that to use the double buffer in order. The method of claim 4, wherein When the WLAN packet collector inputs and outputs the WLAN analyzer regardless of whether the operation is completed or not, the WLAN packet collector performs a preliminary execution and waits, and the packet collector intelligently collects and stores the WLAN packet during packet collection. A method of delivering packets of all channels collected in a wireless LAN environment using a multiple RF grabber or a wireless LAN card or a device which uses multiple input / output methods when transmitting a packet. The method according to claim 4 or 5, When the WLAN packet collector transmits the WLAN packet to the WLAN analyzer, 1) when the amount of packets stored in the buffer reaches a predetermined ratio determined by the user, and 2) the WLAN packet collector determines that 3) Packet transmission method for all channels collected in a wireless environment using a multi-RF grabber or a wireless LAN card or a device that transmits packets only when there is no load and at the request of a WLAN analyzer. In the method of setting an RF grabber or WLAN card or device for WLAN packet collection, Setting a drive mode selection to a packet capture mode and setting a number of channels to be captured (collected); Setting a RF grabber IP address; A third step of setting the IP address and logging in to access a patch for setting up and upgrading an RF grabber after connection; A fourth step of setting the IP, NETMASK, and AP by accessing the setup of the RF grabber by logging in; A fifth step of setting a password for accessing a web page after the setup setting; Setting a password to access the security page after setting the password and setting access security to the AP when setting an AP;       A seventh step of upgrading an RF grabber system by accessing a patch page by logging in with the patch for upgrading; An eighth step in which the system is damaged due to a patch or a problem during the upgrade step, and provides a backup function and reinstalls the version previously provided and reboots at the same time; Method of setting a device or device used in a wireless LAN environment using a multi-RF grabber or a wireless LAN card or device consisting of. delete delete delete delete delete delete delete

Images