KR100920304B1 - Object creating method and device in packet data communication - Google Patents

Abstract

The present invention allows the local IP / local port and the remote IP / remote port to classify packet data among the same packet data to generate an object, and use the object to analyze the load or quality of service of the communication network. A method and apparatus for generating an object in packet data communication,

An object generation method in packet data communication according to the present invention comprises the steps of: (a) extracting packet information from packet data; (b) constructing an object list based on the packet information; (c) checking an object end time based on the object list; And (d) generating an object based on the end time of the object.

Packet data, object, local, remote, IP, port, communication network, load, quality of service

Description

Object creating method and device in packet data communication

The present invention relates to a method and apparatus for generating an object in a packet data communication using the Internet Protocol (IP). More particularly, the present invention relates to a method of extracting packet information from a packet data to a local IP / local port and a remote IP / remote. Packet data that allows the ports to classify the same packet data, examine the end time of the classified packet data, create an object based on this, and use the object to analyze the load or quality of service of the communication network. A method and apparatus for generating an object in communication.

In general, when a user uses a packet data service such as the Internet through a terminal such as a computer, an object such as a picture file, text, a large FTP file, VOD streaming, and chat is provided from a server.

When the above-mentioned objects are provided to the client terminal from the server, when the capacity is large, it may affect the network load or the quality of service.

Therefore, in the case of a service provider, when providing a packet data service, a service provider manages parameters such as a connection rate, a transmission rate, an error rate, a network bandwidth, and a delay time to provide a good service.

This quality of service management has a special meaning when it is necessary to continuously transmit high-bandwidth video and multimedia information through the web or IP network. As a server, accurate information about the client's connection and the transmission status of the server is recognized in real time. By doing so, appropriate measures can be taken and service quality can be improved.

Typically, servers are installed by installing special dedicated equipment at the gateway of the network or installed at the front of the server to collect quality of service information and client usage information, so that the average delay at the gateway, average amount of delay change in a certain regional group, and schedule The service quality is measured by measuring information such as local loss and transmission error rate.

However, since the collection of such information is performed in the network rather than through a remote client, it is difficult to accurately collect information, and there are many problems in practical use because the price of dedicated equipment is expensive.

According to the present invention for solving the above-described problems, packet data of the same local IP / local port and remote IP / remote port are classified among packet data to generate an object, and the load or quality of service of the communication network is generated through the object. An object of the present invention is to provide a method and apparatus for generating an object in packet data communication.

An object generation method in packet data communication according to the present invention for achieving the above object comprises the steps of: (a) extracting packet information from packet data; (b) constructing an object list based on the packet information; (c) checking an object end time based on the object list; And (d) generating an object based on the end time of the object.

In the step (a), the packet header is extracted from the packet data to extract the packet information.

Also, in the step (a), an IP header is analyzed from the packet data to extract a source IP and a destination IP.

In the step (a), a source port and a destination port are extracted by analyzing a TCP header from the packet data.

In the step (a), the link direction of the packet and the object ID are determined based on the extracted packet information.

Also, in the step (b), packet data having the same object identifier (ID) is collected to form the object list.

In addition, step (b) adds to the object list when the packet data does not have the same object identifier (ID).

In the step (c), when the packet data has passed the object end time, the packet data is stored as log data and deleted from the object list. Will create another object with the same object identifier.

In the step (d), a packet object is generated when the packet data has not passed the object end time, and a control object is generated when the packet end time has elapsed.

On the other hand, the object generation method in the packet data communication according to the present invention for achieving the above object, (a) extracting packet information from the packet data; (b) generating an object based on the packet information; And (c) storing the generated object or transmitting the generated object to a monitoring server.

In addition, step (b) comprises the steps of constructing an object list based on the packet information; Checking an object end time based on the object list; And generating the object based on the end time of the object.

The packet information may include a source IP, a destination IP, a source port, and a destination port.

Also, in the step (a), an IP header is analyzed from the packet data to extract a source IP and a destination IP.

In the step (a), a source port and a destination port are extracted by analyzing a TCP header from the packet data.

In the step (a), the link direction of the packet and the object ID are determined based on the extracted packet information.

In the step (b), a packet object is generated when the packet data has not passed an object end time, and a control object is generated when the packet end time has elapsed.

Also, in the step (b), packet data having the same object identifier (ID) is collected to form the object list.

In addition, step (b) adds to the object list when the packet data does not have the same object identifier (ID).

In the step (b), when the packet data has passed the object end time, the packet data is stored as log data and deleted from the object list, and another object having the same object identifier for the packet data is deleted. Will be created.

On the other hand, the object generating apparatus according to the present invention for achieving the above object, a communication unit for transmitting or receiving packet data; A packet analyzer configured to analyze the packet data and extract packet information from the packet data; An object generation unit generating an object based on the packet information; A log management module for storing and managing the generated objects as log data; And a controller configured to control transmission and reception of the packet data and generation of the packet data into the object based on the packet information.

The controller extracts a source IP and a destination IP by analyzing an IP header from the packet data through the packet analyzer.

The controller may extract a source port and a destination port by analyzing a TCP header from the packet data through the packet analyzer.

The controller may determine a link direction and an object ID of a packet based on the packet information extracted through the packet analyzer.

The packet information may include a source IP, a destination IP, a source port, and a destination port.

The controller may generate a packet object through the object generator when the packet data has not passed an object end time, and a control object through the object generator when the packet end time has elapsed. Will generate

When the packet data has passed the object end time, the controller stores the data as log data and deletes the data from the object list, and generates another object having the same object identifier for the packet data.

On the other hand, the object management system according to the present invention for achieving the above object, an object generating apparatus for extracting packet information from the packet data, and generates an object based on the extracted packet information; And a monitoring server configured to receive, store, or manage the object from the object generating apparatus through a communication network.

In addition, when traffic is generated in the communication network, the monitoring server performs filtering through the object generating device on all packet data transmitted and received through the communication network, and performs logging for each TCP protocol. Will be performed.

The monitoring server may group and manage protocols related to HTTP, FTP, HTTPS, POP3, SMTP, SNMP, NETBIOS, DNS, ICMP, IMAP, SSH, and TELNET, and manage the protocol from the object generating device. An object for each packet data to be used is received.

The monitoring server may further include a web site URL, a start time, an end time, and an uplink packet size that are analyzed in detail with respect to the HTTP protocol from the object generator. Size) and downlink packet size information is collected.

On the other hand, the object generating apparatus according to the present invention for achieving the above object, the packet analysis unit for analyzing the packet data to extract the packet information from the packet data; An object generation unit generating an object based on the packet information; A log management module for storing and managing the generated objects as log data; And a configuration module configured to classify the packet data through the object generation unit to generate the object.

The configuration module manages a version of the object generation unit or manages a variable factor.

The object includes a packet object and a control object, and the configuration module sets the generation criteria of the packet object or the control object.

According to the present invention, when a user uses a packet data service such as the Internet, a packet size, a packet transmission time, a packet number, and a packet arrive at each other through the object generating apparatus according to the present invention. Inter-arrival Time, Throughput, etc. can be calculated.

In addition, it is possible to generate the basic data necessary to calculate the traffic modeling of the packet data service.

In addition, it is possible to predict the degree of network load by classifying traffic types according to contents and protocols according to packet data services.

In addition, basic data satisfying different quality indicators and target values can be obtained according to the type of service.

In addition, without using expensive dedicated equipment, it is possible to collect information that can analyze the quality of service based on the information of the received packet data.

The local IP / local port and the remote IP / remote port classify the same packet data to generate an object, and use this object to analyze the load or quality of service of the communication network.

Details of the object and technical configuration of the present invention and the resulting effects thereof will be more clearly understood by the following detailed description based on the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

First, the concept of "Object" used in the embodiment of the present invention will be described.

The "object" according to the present invention may be defined as a minimum unit in which collected packet data is stored in the concept of a session layer of TCP / IP. When the wired or wireless modem is connected to the network, the values of the local IP / local port and the remote IP / remote port are the same for the session for transmitting and receiving data corresponding to the payload. One having a session is defined as an "object" that is classified as a session.

That is, one object is generated by combining packet data having the same value as a local IP / local port and a remote IP / remote port among a plurality of packet data.

1 is a configuration diagram schematically showing a configuration of an object management system to which an object generation method in packet data communication according to an embodiment of the present invention is applied.

Referring to FIG. 1, an object management system includes an object generating apparatus 110, a communication network 120, and a monitoring server 130.

The object generating apparatus 110 extracts packet information from packet data and generates an object based on the extracted packet information.

In addition, the object generating apparatus 110 extracts packet information by analyzing a packet header from the packet data.

In addition, the object generating apparatus 110 extracts a source IP and a destination IP by analyzing the IP header from the packet data.

The object generating apparatus 110 extracts a source port and a destination port by analyzing a TCP header from the packet data.

The communication network 120 includes a wired or wireless communication network, an internet protocol (IP) network in the case of a wired communication network, and a mobile communication network in the case of a wireless communication network.

The monitoring server 130 receives the object from the object generating apparatus 110 through the communication network 120 and stores or manages the object.

In addition, when traffic is generated in the communication network 120, the monitoring server 130 performs filtering through the object generating apparatus 110 on all packet data transmitted and received through the communication network to log by TCP protocol. Perform Logging.

In addition, the monitoring server 130 groups and manages protocols related to HTTP, FTP, HTTPS, POP3, SMTP, SNMP, NETBIOS, DNS, ICMP, IMAP, SSH, and TELNET, and the object generating apparatus 110. Receive an object for each packet data using the protocol from the network.

The monitoring server 130 further analyzes the website protocol (Web site URL), start time, end time, and uplink packet size of the HTTP protocol from the object generating apparatus 110 in detail. Information about the uplink packet size and the downlink packet size.

2 is a configuration diagram schematically showing an internal configuration of an object generating device.

2, the object generating apparatus 110 may include a communication unit 210, a packet analyzer 220, an object generator 230, a log management module 240, and a controller 250.

The communication unit 210 transmits packet data to the communication network 120 or receives packet data from the communication network 120.

The packet analyzer 220 analyzes packet data and extracts packet information from the packet data.

Here, the packet information includes a source IP, a destination IP, a source port, a destination port, and the like.

The object generator 230 generates an object based on packet information, and may be implemented as a packet sensor module. In addition, the object generator 230 may perform a packet filtering library function. Here, the packet filtering library may be configured separately from the object generator 230.

The log management module 240 stores and manages the generated object as log data.

The controller 250 not only controls transmission and reception of packet data, but also controls packet data to be generated as an object based on packet information. In addition, the controller 250 performs a configuration module function to manage a version of the object generator 230 or to manage a variable factor. In addition, the controller 250 may set generation criteria of a packet object or a control object.

3 is a flowchart illustrating an object generation method in packet data communication according to an exemplary embodiment of the present invention.

Referring to FIG. 3, when receiving the packet data from the communication network 120, the object generating apparatus 110 extracts packet information from the received packet data through the packet analyzer 220 (S310).

For example, the controller 250 extracts packet information by analyzing a packet header from the packet data through the packet analyzer 220 or extracts a source IP and a destination IP by analyzing the IP header from the packet data. do.

In addition, the controller 250 extracts a source port and a destination port by analyzing a TCP header from the packet data through the packet analyzer 220.

The controller 250 further analyzes the packet data through the packet analyzer 220 to determine a link direction and an object ID of the packet based on the extracted packet information.

Subsequently, the controller 250 constructs an object list based on the packet information extracted through the packet analyzer 220 (S320).

In addition, as illustrated in FIG. 4, the controller 250 collects packet data having the same object identifier ID to form an object list.

In addition, when the same object identifier ID does not exist in the packet data, the controller 250 adds the object identifier of the packet data to the object list.

A process of constructing the object list will be described with reference to FIG. 5.

On the other hand, the controller 250 checks the object end time for each packet data based on the object list (S330).

A process of checking the end time of the object will be described with reference to FIG. 6.

The controller 250 generates an object based on the object end time (S340).

That is, when the packet data has passed the object end time, the controller 250 stores the log data in the log management module 240 as log data, deletes it from the object list, and has another object identifier with the same packet data. Create an object.

In addition, the controller 250 generates a packet object when the packet data has not passed the object end time, and generates a control object when the object end time has elapsed.

4 is a diagram illustrating an object generated by classifying packet data according to packet information according to an exemplary embodiment of the present invention.

Referring to FIG. 4, in the object generating apparatus 110, the control unit 250 may transmit a source IP, a destination IP, and a source port for each packet data through the packet analyzer 220. Packet information including a port, a destination port, and the like is extracted, and packet data is classified as shown in FIG. 4 based on the extracted packet information.

That is, the controller 250 collects packet data having the same local IP / remote port and remote IP / remote port with respect to each packet data through the object generator 230 based on the packet information. 1) or create a second object (Object 2).

Accordingly, in FIG. 4, the first packet Pkt 1, the second packet Pkt 2, the fourth packet Pkt 4, the fifth packet Pkt 5, and the seventh packet constituting the first object Object 1 are illustrated in FIG. 4. Pkt 7) and the tenth packet Pkt 10 have the same packet object identifier (Object ID), and have the same local IP / local port and remote IP / remote port.

In FIG. 4, the third packet Pkt 3, the sixth packet Pkt 6, the eighth packet Pkt 8, and the ninth packet Pkt 9 constituting the second object Object 2 are identical packet object identifiers. It also has the same local IP / local port and remote IP / remote port.

5 is a flowchart illustrating a process of constructing an object list in an embodiment of the present invention.

Referring to FIG. 5, in the object generating apparatus 110, the controller 250 checks whether there is an object identifier ID that is the same as the packet object identifier Object ID in the object list (S502).

When the same object identifier as the packet object identifier exists in the object list (S504-YES), the controller 250 performs an object end time check on the same object (S506).

For example, the controller 250 may include the first packet Pkt 1, the second packet Pkt 2, the fourth packet Pkt 4, the fifth packet Pkt 5, and the seventh object constituting the first object Object 1. The end check time of each object is checked for the packet Pkt 7 and the tenth packet Pkt 10.

At this time, if the object end time of the arbitrary packet, for example, the second packet Pkt 2 has elapsed (S508-YES), the control unit 250 stores the object data as log data in the log management module 240 ( S510).

In this case, when the end time of the object has elapsed, a predetermined time of general packet data has elapsed, and it may be, for example, control data.

Accordingly, the first packet Pkt 1, the second packet Pkt 2, the fourth packet Pkt 4, the fifth packet Pkt 5, and the seventh packet Pkt 7 constituting the first object Object 1. The remaining packets except for the second packet among the tenth packet Pkt 10 are packets having data, and the second packet Pkt 2 is a control packet having a control command.

In this case, the second packet Pkt 2 is a control packet and has a different object end time from other packet data.

Subsequently, the controller 250 deletes the corresponding object from the object list (S512).

That is, the first object Object 1 is a packet object, and since the second packet Pkt 2 is a control object different from the packet object, the first object Object 1 deletes the second packet Pkt 2 from the first object Object 1.

The controller 250 creates a new object and adds it to the object list (S514). That is, the controller 250 makes the deleted second packet Pkt 2 as a new control object and adds it to the object list as the control object.

In step S508, when the object end time is checked and the corresponding packet data does not pass the object end time (S508-NO), the controller 250 updates the end time of the object (S516). That is, the controller 250 updates the object end time (End Check Time) to the packet generation time (Pkt Time).

Meanwhile, in step S504, if the same object identifier as the packet object identifier does not exist in the object list (S504-NO), the controller 250 performs a process of creating a new object for the packet object identifier and adding it to the object list ( S514).

6 is a flowchart illustrating a process of checking an object end time in an embodiment of the present invention.

Referring to FIG. 6, in the object generating apparatus 110, the controller 250 obtains values of a current time and an end check time for each packet data corresponding to an object list (S602). ).

Subsequently, the controller 250 searches for the first object in the object list to check how long the object end time of the object has passed compared to the current time for all objects (S604). ).

If the first object exists in the object list (S606-YES), the controller 250 calculates an elapsed time of the object (S608).

Here, the pass time of the object may be obtained as in Equation 1 below.

When the elapsed time of the object is calculated and the elapsed time of the last packet generation of the object exceeds the end determination time (Obj.EndTime) (S610-YES), the control unit 250 determines that the object is finished and determines the object. The log data is stored in the log management module 240 (S612).

The controller 250 deletes the object from the object list (S614).

Subsequently, the controller 250 searches for the next object in the object list (S616), and returns to step S606 of determining whether an object exists in the object list to repeat the object end time checking process.

If the object does not exist in the object list in step S606 (S606-NO), the controller 250 ends the process of checking the object end time.

If the object exists in the object list, the controller 250 calculates the elapsed time of the object, and if the object end time has not elapsed (S610), the controller 250 searches for the next object in the object list. In operation S616, the end time checking process for the next object is repeated.

The controller 250 may obtain a speed close to the haptic when measuring the speed through the packet object by calculating an appropriate EndCheckTime value.

As described in the above-described embodiment, the end time of the object is inspected and generated as a control object when it is a predetermined time, for example, 5 seconds or more, and as a packet object when it is less than that. can do. In this case, a predetermined time may be arbitrarily set by the user or the administrator in the object generating apparatus 110. To this end, the object generating apparatus 110 may include an input unit including a plurality of key buttons for setting an object end time. In addition, the object generating apparatus 110 may include a display unit that allows a user or an administrator to check an operation state on a screen.

In addition, in the embodiment of the present invention, the object generating apparatus 110 may be implemented in hardware or software in a computer terminal. Here, when the object generating apparatus 110 is softly implemented in the terminal, the object generating unit 230 of FIG. 2 may be installed in the terminal in the form of a program.

The object generating apparatus 110 according to the present invention includes the collection time, the number of sessions per panel, the number of pages per session, the packet size per page, and the reading time per page, with respect to the traffic generating factor per subscriber for each service. Basic data, such as immersive throughput.

In addition, when a user uses a packet data service such as the Internet, the packet size and packet delivery time for each content (search, VOD streaming, FTP download, VoIP, Nate-On, etc.) are transmitted through the object generating apparatus 110 according to the present invention. , Number of packets, mutual arrival time between packets, haptic throughput, and the like can be calculated.

As those skilled in the art to which the present invention pertains may implement the present invention in other specific forms without changing the technical spirit or essential features, the embodiments described above should be understood as illustrative and not restrictive in all aspects. Should be. The scope of the present invention is shown by the following claims rather than the detailed description, and all changes or modifications derived from the meaning and scope of the claims and their equivalents should be construed as being included in the scope of the present invention. do.

The present invention can be applied to a terminal such as a computer that receives a packet data service such as the Internet.

In addition, it can be applied to all terminals that can use the packet data service through the Internet Protocol (IP).

1 is a configuration diagram schematically showing a configuration of an object management system to which an object generation method in packet data communication according to an embodiment of the present invention is applied;

2 is a configuration diagram schematically showing an internal configuration of an object generating device;

3 is a flowchart illustrating an object generation method in packet data communication according to an embodiment of the present invention;

4 is a diagram illustrating object generation by classifying packet data according to packet information according to an embodiment of the present invention;

5 is a flowchart illustrating a process of constructing an object list in an embodiment of the present invention; and

6 is a flowchart illustrating a process of checking an object end time in an embodiment of the present invention.

<Description of Symbols for Main Parts of Drawings>

110: object generation device 120: communication network

130: monitoring server 210: communication unit

220: packet analysis unit 230: object generation unit

240: log management module 250: control unit

Claims (33)

(a) extracting packet information from packet data; (b) constructing an object list based on the packet information; (c) checking an object end time based on the object list; And (d) generating an object based on the object end time; Object generation method in packet data communication comprising a. The method of claim 1, In the step (a), the packet generating method extracts the packet information by analyzing a packet header from the packet data. The method of claim 1, In the step (a), an IP header is analyzed from the packet data to extract a source IP and a destination IP. The method of claim 1, In the step (a), the source port and the destination port are extracted by analyzing a TCP header from the packet data. The method of claim 1, In the step (a), the link direction of the packet and the object identifier (Object ID) are determined based on the extracted packet information. The method of claim 1, In the step (b), packet data having the same object identifier (ID) is collected to form the object list. The method of claim 1, In the step (b), when the packet data does not have the same object identifier (ID), the method for generating an object in packet data communication, characterized in that the addition. The method of claim 1, In the step (c), when the packet data has passed the object end time, it is stored as log data (Log data) and deleted from the object list, In the step (d), the object generation method for packet data communication, characterized in that for generating another object having the same object identifier for the packet data. The method of claim 1, In the step (d), a packet object is generated when the packet data has not passed the object end time, and a control object is generated when the packet end time has elapsed. Object creation method in data communication. (a) extracting packet information from packet data; (b) generating an object based on the packet information; And (c) storing or transmitting the generated object to a monitoring server; Object generation method in packet data communication comprising a. The method of claim 10, In step (b), Constructing an object list based on the packet information; Checking an object end time based on the object list; And Generating the object based on the object end time; Object generation method for packet data communication comprising a. The method of claim 11, The packet information includes a source IP, a destination IP, a source port, and a destination port. The method of claim 10, In the step (a), an IP header is analyzed from the packet data to extract a source IP and a destination IP. The method of claim 10, In the step (a), the source port and the destination port are extracted by analyzing a TCP header from the packet data. The method of claim 10, In the step (a), the link direction of the packet and the object identifier (Object ID) are determined based on the extracted packet information. The method of claim 10, In the step (b), the packet data is generated when the packet data has not passed the object end time, and a control object is generated when the packet end time has elapsed. How to create an object in communication. The method of claim 11, In the step (b), packet data having the same object identifier (ID) is collected to form the object list. The method of claim 11, In the step (b), when the packet data does not have the same object identifier (ID), the method for generating an object in packet data communication, characterized in that the addition. The method of claim 11, In the step (b), when the packet data has passed the object end time, the packet data is stored as log data and deleted from the object list, and another object having the same object identifier is generated for the packet data. An object generating method in packet data communication, characterized by the above-mentioned. A communication unit for transmitting or receiving packet data; A packet analyzer configured to analyze the packet data and extract packet information from the packet data; An object generation unit generating an object based on the packet information; A log management module for storing and managing the generated objects as log data; And A control unit for controlling transmission and reception of the packet data and generation of the packet data based on the packet information; Object generating apparatus comprising a. The method of claim 20, The controller generates an object IP and a destination IP by analyzing an IP header from the packet data through the packet analyzer. The method of claim 20, The controller may be configured to extract a source port and a destination port by analyzing a TCP header from the packet data through the packet analyzer. The method of claim 20, The controller may determine a link direction of a packet and an object ID based on the packet information extracted through the packet analyzer. The method of claim 20, The packet information may include a source IP, a destination IP, a source port, and a destination port. The method of claim 20, The controller generates a packet object through the object generator when the packet data has not passed an object end time, and generates a control object through the object generator when the packet end time has elapsed. An object generating apparatus, characterized in that. The method of claim 20, When the packet data has passed the object end time, the controller stores the data as log data and deletes them from the object list, and generates another object having the same object identifier for the packet data. Generating device. An object generating device for extracting packet information from packet data and generating an object based on the extracted packet information; And A monitoring server for receiving and storing or managing the object from the object generating apparatus through a communication network; Object management system comprising a. The method of claim 27, When the traffic occurs in the communication network, the monitoring server performs filtering through the object generating apparatus on all packet data transmitted and received through the communication network to perform logging for each TCP protocol. Object management system, characterized in that. The method of claim 27, The monitoring server groups and manages protocols related to HTTP, FTP, HTTPS, POP3, SMTP, SNMP, NETBIOS, DNS, ICMP, IMAP, SSH, and TELNET, and uses the protocol from the object generating device. An object management system characterized by receiving an object for each packet data. The method of claim 27, The monitoring server may further include a web site URL, a start time, an end time, an uplink packet size, an uplink packet size, Collecting information about the downlink packet size (Object Management System) characterized in that for collecting. A packet analyzer for analyzing packet data and extracting packet information from the packet data; An object generation unit generating an object based on the packet information; A log management module for storing and managing the generated objects as log data; And A configuration module for classifying the packet data through the object generator to generate the object; Object generating apparatus comprising a. The method of claim 31, wherein The configuration module may be configured to manage a version of the object generator or a variable factor. The method of claim 31, wherein The object includes a packet object and a control object, And the configuration module sets the generation criteria of the packet object or the control object.

Images