WO2007147339A1

WO2007147339A1 - Method and device for identifying terminal command line

Info

Publication number: WO2007147339A1
Application number: PCT/CN2007/001872
Authority: WO
Inventors: Guilin Shi
Original assignee: Hangzhou Tipsec Inc Co., Ltd.
Priority date: 2006-06-14
Filing date: 2007-06-14
Publication date: 2007-12-27
Also published as: CN1889442A; CN100452706C; HK1098612A1

Abstract

A method for identifying a terminal command line is disclosed. The method comprises: acquiring input data and output data between a terminal and a host; emulating the output data with an emulation terminal to obtain output content; and identifying a terminal command line of the output content based on the input data. Upon the method described above, a device for identifying a terminal command line is provided. Therefore, the invention can identify a terminal command line with low cost and high applicability, and can ensure the reliability of recognition.

Description

Method and device for identifying terminal command line

The present application claims priority to Chinese Patent Application No. 200610087243.9, entitled "A Method and Apparatus for Identifying Terminal Command Lines", filed on June 14, 2006, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to a method and apparatus for identifying a command line, and more particularly to a method and apparatus for identifying a command line of a terminal.

Background technique

The terminal has a wide range of applications in various Unix hosts and communication systems. The operation and management through the terminal are direct, safe, reliable, resource-intensive, and efficient. The terminal is mainly composed of a keyboard for input and a display for output. The display is in a character mode, and has a certain number of rows and columns. It usually has no processing capability, and is a text mode input/output medium. The terminal can be a hardware device connected to the host system through a communication line; or it can be a virtual terminal of the software, such as terminal software running on a personal computer, and can log in to one or more hosts through the network.

Terminals are often connected to large host systems or core communication devices, which imposes high requirements on the stability and security of their operations. Therefore, users should be audited for terminal operations and restrictions on the execution of high-risk operations. The operation of the terminal is mainly divided into two methods: command line and real-time interaction. The methods for auditing these two methods are different: the real-time interaction mode can be played back in the terminal output of the terminal; Record each command executed by the user and the corresponding execution result. To audit and limit the command line mode, you must first implement the recognition command line.

There are two types of existing methods for identifying command lines:

The first method is to install a shell for the operating system in the operating system of the host. Since the program is run as part of the operating system, the user's operation must first be identified and judged by the system. The operating system converts the user input into its own executable operation command, and the production system first writes the command line to the log file through the shell before performing the above command for further auditing and control. The disadvantages of this type of method are: The operating system of the host needs to be modified, and the contents of different operating system modifications are very different, so the workload is large, the maintenance is complicated, the risk is high, and the implementation is very difficult; when multiple operations are involved The versatility of the shell is low when the system is in use. The second method is to simulate and convert the output data of the terminal to obtain the final line of text, and then connect the displayed text to a large text file, and find the command prompt of the host on each line. When you have a prompt, you think that the line is a command, and then record the contents of the prompt as a command. Such methods rely on a specific command prompt, but because the prompt can be changed by the operating system's settings, or sometimes the command prompt may only appear as text, the reliability of such methods is poor.

In the above method, there are the following disadvantages and problems: the reliability of recognition is poor, or the implementation is complicated, the cost is high, and the versatility is poor. Reliability, low cost, and high versatility are difficult to achieve at the same time.

Summary of the invention

The technical problem to be solved by the present invention is to provide a method and a device for identifying a command line of a terminal, so as to solve the disadvantages and problems of poor reliability, high complexity, and low versatility of the identification in the prior art. It meets the requirements of low cost and high versatility while improving the reliability of identification.

The method for identifying a command line of a terminal provided by the present invention includes the following steps:

Obtaining input data and output data between the terminal and the host;

The output data is simulated by the analog terminal to obtain the output content of the terminal;

The terminal command line in the output content is identified based on the input data.

Optionally, the obtaining input data and output data between the terminal and the host includes: acquiring input data and output data between the terminal and the host through network listening, communication line interception, or proxy forwarding.

Optionally, the identifying, according to the input data, the terminal command line in the output content includes: when the output content appears at the command line prompt, recording the output content as a command line until the input data is a command confirmation key, a command execution key, or a command cancellation. The command line ends when the key is pressed.

Preferably, the output content includes display content and terminal status;

The recording output content as the command line further includes: matching the first field of the display content after the command prompt with the command in the command library; if there is a command that can be matched, recording the field and the output content of the command as the command The command line ends when the input data is a command confirmation key, a command execution key, or a command cancel key; the command library includes all commands of the host operating system.

Preferably, the identifying, according to the input data, the terminal command line in the output content comprises: determining, by the terminal input data and the output sequence in the output content, the current command recognition status, and identifying the status according to the command The state recognizes the terminal command line.

Preferably, the identifying, according to the input data, the terminal command line in the output content comprises: determining a current command recognition state according to the input data; the command recognition state includes a command input state and a program output state;

In the command input state, the output content is recorded as a command line until the command line ends when the command input state transitions to the program output state.

Optionally, the determining, according to the input data, the current command recognition state includes: transferring the command input state when there is input data in the program output state; inputting the data as a command confirmation character, a command execution character, or a command cancellation character in the command input state When it is transferred to the program output state.

Preferably, the command recognition status further includes a command prompt state;

The determining the current command recognition state according to the input data further includes: when the input data is a help character in the command input state, the command prompt state is entered; when the input data is a non-help character in the command prompt state, the command input state is transferred.

Preferably, the command recognition status further includes a command waiting state;

The method further includes: when the input data is a command confirmation character in the command input state, transferring to the command waiting state; when the output data is a newline character in the command waiting state, transferring to the program output state; The terminal command line includes: when the command wait state is transferred to the program output state, the output content in the terminal emulation buffer is the terminal command line.

Preferably, the command recognition status further includes an interactive application status;

The method further includes: when the output data is a feature sequence entering the interaction state in the program output state, transferring to the interactive application state; when the output data is the feature sequence of the exit interaction state in the interactive application state, the program is transferred to the program Output status.

Optionally, the help character is a TAB key or a "?," key.

Optionally, the sequence of features entering the interaction state is: setting mode 47 of VT102 and compatible terminal, and/or setting mode 1047 of VT102 and compatible terminal, and/or setting mode 1049 of VT102 and compatible terminal, And / or VT100 and compatible terminal setting mode No. 1;

The sequence of characteristics of the exiting interaction state is: VT102 and compatible terminal clear mode No. 47, and/or VT102 and compatible terminal clear mode 1047, and/or VT102 and compatible terminal clear mode 1049, and/or VT100 And the clear mode of the compatible terminal No. 1. The present invention also discloses an apparatus for identifying a terminal command line based on the above method, the apparatus comprising:

The terminal data capture module is configured to acquire input data and output data between the terminal and the host; the terminal simulation module is configured to simulate output data through the analog terminal to obtain output content; and the command recognition module is configured to output according to the input data. The terminal command line is identified in the content.

Optionally, the command recognition module includes:

The output content discriminating sub-module is configured to prompt the input of the discriminating sub-module when the output content of the analog terminal appears, and the output content recorded before the notification of the input discriminating sub-module is received as the terminal after the command prompt appears. Command Line;

The input discriminating sub-module is configured to view the input data after receiving the prompt of the output content discriminating sub-module, and when the input data appears the command confirm key, the command execution key or the command cancel key, notify the output content that the sub-module ends a command line.

Preferably, the output content includes display content and terminal status;

The command recognition module further includes: a command library submodule, configured to store all commands of the host operating system;

The output content discriminating sub-module matches the first field of the content displayed after the command prompt with the command in the command library sub-module when the output content appears at the command prompt, and if yes, prompts to input the discriminating sub-module, and After the command prompt appears, the output of the record recorded before the notification of the input discrimination sub-module is received is used as the terminal command line.

Preferably, the command recognition module includes:

The input discriminating sub-module is configured to prompt the command to identify the status determining sub-module when the terminal has input data;

The command recognition state determining submodule is configured to determine a current command recognition state after receiving the prompt of the input discriminating submodule, and the command recognizing state includes a command input state and a program output state, and is transferred to the command input by the program output state. When prompted, the command line submodule is obtained, and when the command input state is transferred to the program output state, the command line submodule is notified to end a command line;

Obtain a command line sub-module for determining the prompt of the sub-module according to the command recognition state, and recording the output content as a command line in the command input state.

Optionally, the program output state indicates that the terminal is generating a result output of the program; The command input state indicates that the output data of the terminal is a command; when the input data is input in the program output state, the command input state is entered, and when the command input state is the command confirmation character, the command execution character, or the command cancel character, the command input state Enter the program output status.

Preferably, the command recognition status further includes: a command prompt state, indicating an auxiliary command input state in the command completion; when the input data is a help character in the command input state, the command prompt state is entered; and the command prompt state is input When the data is a non-help character, it is transferred to the command input state.

Preferably, the command recognition state further includes a command waiting state; when the input data is a command confirmation character in the command input state, the command wait state is transferred; when the output data is a newline character in the command waiting state, the program output state is transferred to the program. ;

The command recognition state determining sub-module prompts the acquisition command line sub-module to use the output content in the terminal emulation buffer as a command line when transitioning from the command waiting state to the program output state.

Preferably, the command recognition state further includes: an interactive application state indicating that the state of the interactive program is running; and when the output data is a feature sequence entering the interactive state in the program output state, transitioning to the interactive application state; When the output data in the application state is the feature sequence of the exit interactive state, it is transferred to the program output state.

Compared with the prior art, the invention has the advantages of simple implementation, low cost, excellent versatility and high reliability, and the reliability of the identification is improved while satisfying the requirements of low cost and high versatility, as follows:

1. Realize the single order and low cost;

Since the above method and device first acquire input data and output data between the terminal and the host, then the analog output data acquires the output content, and then the input content is combined with the input data to identify the output content, and the terminal command is obtained. The above-mentioned use and installation are independent of the host's operating system, without the need to modify the software on each computer, the complexity and risk are relatively low, so the implementation of the single, low cost;

1. Excellent versatility;

Since the data foundation of the above method and device operation is the original data of the input and output of the terminal and the host, and does not involve the data format of the operating system or the application software, it can be conveniently applied to various operating systems and application software environments. , with excellent versatility;

3, high reliability;

Since the above methods and devices are not only for identifying input data or output data, but After obtaining the input data and the output data between the terminal and the host, the output data is simulated and displayed, the output content is obtained, and then the output content is recognized by the input data, and a plurality of methods for combining and identifying are disclosed, so that the identification is realized. High reliability.

DRAWINGS

1 is a flow chart showing the basic steps of a method for identifying a command line according to the present invention;

2 is a flow chart showing the steps of the method for identifying a command line according to the present invention in Embodiment 1; FIG. 3 is a block diagram showing the structure of an apparatus for identifying a command line according to the present invention in Embodiment 2;

4 is a flow chart showing the steps of the method for identifying a command line according to the present invention in Embodiment 3; FIG. 5 is a block diagram showing the structure of the device for identifying a command line according to the present invention in Embodiment 4;

6 is a flow chart showing the steps of the method for identifying a command line according to the present invention in Embodiment 5; FIG. 7 is a block diagram showing the structure of the device for identifying a command line according to the present invention in Embodiment 6;

8 is a flow chart of a method for determining a current command recognition state in Embodiment 5; FIG. 9 is a second step flow chart of a method for determining a current command recognition state in Embodiment 5; FIG. 10 is a process for determining a current command recognition state in Embodiment 5. Method three-step flow chart; FIG. 11 is a four-step flow chart of the method for determining the current command recognition state in the fifth embodiment.

detailed description

The present invention will be further described in detail with reference to the accompanying drawings and specific embodiments.

The present invention discloses a method of identifying a command line of a terminal, the method being implemented based on the following steps:

Refer to Figure 1.

Step S110: Acquire input data and output data between the terminal and the host. The communication data between the end user and the host can be intercepted or intercepted to obtain the input and output data streams of the terminal. Depending on the terminal type and deployment environment, it can be implemented through network listening, communication line monitoring, or proxy forwarding.

Step S120: Simulate the output data by using an analog terminal to obtain an output content. The analog terminal is a converter that converts the output data into output content. Common analog terminals are: VT102 and the terminal, VT100 and compatible analog terminal. One mode of operation of the analog terminal includes: simulating the main maintenance terminal status and output buffer inside the terminal: The terminal status is determined by the size of the current terminal and the cursor The position, current screen, etc.; the output buffer holds the current cursor line until the line break. The simulated main loop of the process is performed around each terminal output character, and the normal exit condition of the main loop is that the terminal is turned off. For each output character read out, the analog terminal judges its type, which can belong to three cases: general characters, simple control characters, and terminal control sequences. The general characters mainly include letters, numbers and various symbols and spaces; simple control characters are defined in standard ASCII code, and control characters that implement simple terminal control functions, such as backspace, carriage return, line feed, tab, etc.; The terminal control sequence is defined in the VT102 terminal protocol and consists of a series of characters for performing complex state and function control on the terminal, such as setting the cursor position and state, setting the character and background color, scrolling, and writing the entire line of text. Delete, screen change, etc. Various output characters and sequences affect the state of the terminal and the output buffer, such as screen switching, cursor position change, and content modification. These effects usually occur at the same time. For example, if you output an "a" character, the character at the current cursor position of the terminal will be changed to "a", and then the cursor will be moved forward by one position; if the cursor has reached the last column of the terminal before, then The cursor will travel to the next column of the next line; at the same time, if the cursor has reached the last line of the terminal, a single line scrolling action will be generated, and after clearing a new line, the cursor will be set to the next column of the new line. According to these rules, the analog terminal updates the state of the terminal and the output buffer according to each character read, and finally obtains the output content. The output includes display content and terminal status.

Step S130, identifying the output content in combination with the input data. The output content obtained by analog conversion of the output data is identified in combination with the input data. This method of combined recognition can achieve low cost, high efficiency, and good versatility.

Step S140, obtaining a terminal command line. The identified command line can be stored, or it can be provided to other systems for further processing, such as command auditing, blocking of dangerous commands, and so on.

The following embodiments are based on the above steps or principles, and disclose several combinations of inputs: specific solutions for identifying output content.

Example 1

Referring to FIG. 2, this embodiment discloses a specific scheme of a method for identifying a command line of a terminal. step

S210. Acquire input data and output data between the terminal and the host. Step S220: Simulate the output data through the analog terminal to obtain output content, where the output content includes display content and terminal status. The specific method for identifying the output content in combination with the input data is as follows: Step S230: When the output content is displayed, and the output content of the analog terminal appears at the command prompt, step S240 is performed to check whether the terminal is If there is no input data, go to step S230 and continue to check the output content; if the terminal has input, the display content of the output content after the prompt is regarded as the command line, and step S250 is performed, and the analog terminal after the prompt is recorded. Displaying the content while viewing the input data; in step S260 and step S270, when the input data appears command confirmation key, command execution key or command cancel key, it is considered that a command line ends, and the display content after the recorded prompt is the terminal Command Line. Through the above steps, the terminal command line is identified.

Example 2

Referring to Fig. 3, this is an apparatus for identifying a terminal command line based on the embodiment 1 scheme. The apparatus includes a terminal data capture module 31, a terminal emulation module 32, and a command recognition module 33, wherein the command recognition module 33 includes an output content discriminating sub-module 34 and an input discriminating sub-module 35.

The terminal data capture module 31 is responsible for acquiring input and output data 101 between the terminal and the host, and dividing the acquired input and output data 101 into output data 102 and input data 103; the terminal simulation module 32 simulates the output data 102 to obtain the terminal. Output content 104, the output content includes display content and terminal status; the command recognition module 33 performs command line identification in combination with the output content 104 and the input data 103, wherein the output content discriminating sub-module 34 views the output content 104, when the analog terminal When the output content 104 appears at the command prompt, the prompt input sub-module 35 is prompted to check whether there is input data 103; if there is no input data 103, it continues to wait; if the terminal has input, the output content of the analog terminal after the prompt is considered The display content of 104 is the command line; the output content 104 of the analog terminal after the prompt is recorded; the input discrimination sub-module 35 checks whether the input data 103 has a command confirmation key, a command execution key or a command according to the prompt of the output content discrimination sub-module 34. Cancel button, when the command confirmation button appears, life Execution key or cancel key command, informing output content judging sub-module 34- a command line ends. Through the above steps, the terminal command line 105 is identified.

Example 3

Referring to FIG. 4, this embodiment discloses another specific scheme of a method for identifying a command line of a terminal. Step S410: Acquire input data and output data between the terminal and the host. Step S420: Simulate the output data through the analog terminal to obtain output content, where the output content includes display content and terminal status. The specific method for identifying the output content in combination with the input data is: Step S430, establishing a command library, the command library includes all the commands of the operating system; Step S440, viewing the output content of the analog terminal; when the output content appears at the command prompt, the step is S450, check whether the terminal has input; If there is no input data, go to step S440 to continue to view the output content; if the terminal has input, execute step S460 to match the first field displayed by the analog terminal after the command prompt with the command in the command library; The command goes to step S440 to continue to view the output content; if there is a command that can be matched, it is considered that the display content of the output content after the prompt is the command line, and step S470 is executed, the display content after the prompt is recorded, and the input data is viewed at the same time; Step S460 and step S470, when the input data appears command confirmation key, command execution key or command cancel key, it is considered that one command line ends, and the display content after the recorded prompt is the command line of the terminal. Through the above steps, the terminal command line is identified.

Example 4

Referring to Fig. 5, this is an apparatus for identifying a terminal command line based on the embodiment 3 scheme. The apparatus includes a terminal data capture module 51, a terminal emulation module 52, and a command recognition module 53, wherein the command recognition module 53 includes an output content discriminating sub-module 54, an input discriminating sub-module 55, and a command library sub-module 56.

The terminal data capture module 51 is responsible for acquiring input and output data 101 between the terminal and the host, and dividing the acquired input and output data 101 into output data 102 and input data 103; the terminal simulation module 52 simulates the output data 102, and acquires the terminal. Outputting content 104, the output content includes display content and terminal status; command recognition module 53 performs command line identification in combination with output content 104 and input data 103, wherein output content discriminating sub-module 54, viewing output content 104, and simulating output content of the terminal 104 When the command prompt appears, check if there is input ^: according to 103; if there is no input data 103, continue to wait, if the terminal has input, record the output content of the analog terminal, and display the first display of the analog terminal after the command prompt. The fields are matched with the commands in the command library sub-module 56; if there is no matching command, the output content 104 is continuously viewed and the record of the first field is cleared; if there is a command that can be matched, the simulated terminal after the prompt is considered The output content of the output content 104 is the command line; continue to record The display content of the analog terminal after the symbol is simultaneously prompted to input the discrimination sub-module 55; the input discrimination sub-module 55 views the input data 103, and when the input data 103 appears a command confirmation key, a command execution key or a command cancel key, the output content discriminator is notified. Module 54 - a command line ends. Through the above steps, the terminal command line is recognized.

Example 5

Referring to Figures 6, 8, 9, and 10, this embodiment discloses a specific method for identifying a command line of a terminal. Program. Step S610, acquiring input data and output data between the terminal and the host. Step S620: Simulate the output data through the analog terminal to obtain output content, where the output content includes display content and terminal status.

Waiting for the input data or outputting the content; when there is an input, executing step S630, determining the state of the current command identification according to the input data, the output data, or the input data and the output data; Step S640, when the current command recognition state is the command input state, It is considered that the display content of the analog terminal is the command line and is recorded; in step S650, when the input data appears command confirmation key, the command execution key or the command cancel key, it is considered that one command line ends and the recording is suspended; step S660, according to The recorded content is obtained from the terminal user's command line. The method for determining the state of the current command identification in step S630 includes the following three methods, which are applicable to different specific application environments:

Method 1, with reference to Figure 8, the default state is the program output state; when any input data 802 is received, the state is changed to the command input state until the received input data includes the input data or the subsequent input data. When the command confirmation character, the command execution character, or the command cancel character 203, the state is changed to the program output state. In the first method, the state of the current command identification is determined based on the input data.

To facilitate the understanding of the first method in this embodiment, the following operation is taken as an example: When the user at the command prompt "[user@host dir]$,, enter the command "Is-1" and press Enter to execute; The computer executes the Is program, displays the output, and then displays the command prompt "[user@host dir]$".

For the above command input, the status of the command recognition changes from the program output state to the command input state from the user's button. At this time, the terminal emulation program displays "[user@host dir]$" and the record prompt length is 17 (including the trailing spaces). When the user presses the Enter key, the display content of the terminal emulation program has become "[user@host dir]$ ls -l,,, then the display content after the 17th character in the buffer is the user input. The command is also recorded; then the status of the command recognition is changed to the program output state, and the output of the terminal displayed from the execution of the command until the next prompt appears as the output of the program is directly recorded, but the next prompt Since the line has not been terminated by the newline character, it will not be output immediately. After the recognized command line is recorded, the status of the command recognition returns to the program output state, waiting for the next input command line to be recognized.

If the input process of the above example is, first enter "1 -Γ, then press CTRL-A to move the cursor to the beginning of the line and then use the right arrow key or CTRL-F key combination to move the cursor to the second grid and press ""s" then hit enter to run. Although it will produce a more complex terminal control sequence, but finally by the terminal simulation The benefits are the same, and the command line can still be recognized correctly.

Method 2: Referring to FIG. 9, the default state is the program output state; when the input data 802 is received, the state is changed to the command input state until the input data or the subsequent input data is a command confirmation character, a command execution character or a command. When the character 203 is canceled, the state is changed to the program output state; when the input data is the help character 204, the state is changed to the command prompt state until the input data is the helpless character 902, and the state is changed to the command input state. The terminal output captured in the command prompt state is not used as the command line until the command input state is entered again. In method two, the status of the current command identification is determined based on the input data.

In order to facilitate the understanding of the second method in this embodiment, the following operations are taken as an example: After the user inputs "Is -1 R", the user presses the Tab key, and the Tab key is defined as a help key by the operating system, and the operating system automatically Completing the "EADME," five characters, and then the user directly presses Enter to execute the command.

The specific recognition process is that the state of the command recognition enters the command input state when the user starts inputting, and the "EADME" displayed by the terminal after the user presses the TAB automatically enters the buffer of the terminal simulation program, and the display content is correct. Command "Is -1 README".

In the above example, if the file starting with R in the current directory has two "README" and "RELEASES", the user presses the TAB key after inputting "Is -1 R", the operating system automatically replenishes the E character first, and then wraps the line. Display the "README" and "RELEASES" file names, then re-wrap the command prompt and the completed part of the command "Is -1 RE". After the user sees the prompt, enter the A character and press the TAB key. The operating system automatically Completing the "DME" character to form the complete command "Is -1 README"

The specific identification process is: when the system receives the TAB character input by the user, the status of the command recognition enters the command prompt state, and then the operating system displays a line feed, an optional file name prompt, and re-wraps the uncompleted command line, and the terminal at this time The output will be logged to the output process file but will not be considered a command for recording. Until the user presses the A key and the last enter key, the status of the command recognition re-enters the command input state, so the complete command "Is -1 README" can be recorded.

Method 3: Referring to FIG. 10, the default state is the program output state; when the output data is the feature sequence 206 entering the interactive state, the state transitions to the interactive application state until the output data is the feature sequence 207 exiting the interactive state. The state is changed to the program output state; when the input data 802 is received, the state is changed to the command input state until the data or the subsequent input data is the command confirmation character, the command execution character or the command cancel character 203, and the state is changed to the program. Output status; when entering data for help At the time of character 204, the state transitions to the command prompt state until the input data is the helpless character 902, and the state transitions to the command input state. In method three, the state of the current command identification is determined based on the input data and the output data.

To facilitate the understanding of the third method in this embodiment, the following operation is taken as an example: the user runs the vi program using the command "vi README" to edit a file named EADME. He needs to add a line with the content "[user@host dir]$ hello" at the end of the file, so he first presses the G key to move the cursor to the end of the file, then presses the 0 key to create a new line, and enters the line verbatim. Press Enter after the content, then press ESC, ZZ to save the file and exit.

The specific recognition process is that under the VT102 terminal, vi enters the interactive editing mode by displaying the sequence of the state "ESC[?1049h,, switching to the alternate screen, after the sequence is detected, the command is recognized. The state is switched to the interactive application state, and the next operation will not be recorded until the user exits vi. The terminal outputs a sequence of display states "ESC[?10491" to switch back to the original screen. After detecting the sequence, the command recognizes The status changes to the program output status. Wait for the next step of the end user.

The above help character 204 is a Tab key or a "?" key. The above ordinary characters are input characters other than the help character or the command confirmation character or the command execution character. The feature sequence 206 entering the interactive state is: setting mode 47 of VT102 and compatible terminal, and/or setting mode 1047 of VT102 and compatible terminal, and/or setting mode 1049 of VT102 and compatible terminal, and/or VT100. And the setting mode of the compatible terminal No. 1. The feature sequence 207 of the above-mentioned exit interaction state is: VT102 and compatible terminal clear mode No. 47, and/or VT102 and compatible terminal clear mode 1047, and/or VT102 and compatible terminal clear mode 1049, and/or VT100. And the clear mode of the compatible terminal No. 1.

Method 4: Referring to Figure 11, the default state is the program output state; when the input data 802 is received, the state is changed to the command input state until the input data or the subsequent input data is the command cancel character 203, the state is turned In the command input state, when the input data is the command confirmation character 208, the state is changed to the command waiting state; when the output data is the newline character 209 in the command waiting state, the content in the terminal simulation buffer is the The recognized command, while the status changes to the program output state; the terminal output captured in the command wait state still belongs to the command line until the wait state is exited. In method four, the status of the current command identification is determined based on the input data and the output data. When the current command recognition status is the command input state, the display content of the analog terminal is regarded as the command line, and the output content is recorded; when the command data confirms the key, the command execution key or the command cancel key, the command line ends. Through the above steps, the terminal command line can be easily and accurately identified.

Example 6

Referring to Figures 7, 8, 9, and 10, this is an apparatus for identifying a terminal command line based on the scheme of Embodiment 5. The apparatus includes a terminal data capture module 71, a terminal simulation module 72, and a command recognition module 73, wherein the command recognition module 73 includes an acquisition command line sub-module 74, an input discrimination sub-module 75, and a command recognition status determination sub-module 76.

The terminal data capture module 71 is responsible for acquiring input and output data 101 between the terminal and the host, and dividing the acquired input and output data 101 into output data 102 and input data 103. The terminal emulation module 72 simulates the output data 102 to obtain the output content 104 of the terminal, the output content including the display content and the terminal status. The command recognition module 73 performs command line identification in combination with the output content 104 and the input data 103. The specific process is as follows. The input discrimination sub-module 75 checks whether the terminal has an input. When there is an input, the input determination sub-module 75 prompts the command recognition status determination sub-module. The command recognition state determining sub-module 76 may determine the state of the current command identification based on the input data 103 or the input data 103 and the output data 102 according to the input data 103. The process of determining the state of the current command identification may be based on the embodiment. The four state determination methods of the current command are performed, the current command is the command line, the command recognition state determination sub-module 76 prompts to acquire the command line sub-module 74; the acquisition command line sub-module 74 records the output content 104; when the input data appears When the command confirmation key, the command execution key or the command cancel key is issued, the command recognition state determination sub-module 76 transfers the current command recognition state from the command input state to the program output state, and notifies the acquisition command line sub-module 74 that the command line ends. Through the above steps, the terminal command line 105 is identified.

The method and device for identifying a terminal command line provided by the present invention are described in detail above, and the description is only for helping to understand the method and core idea of the present invention. Meanwhile, for those skilled in the art, according to the present invention, The present invention is not limited by the scope of the present invention.

Claims

Rights request

A method for identifying a command line of a terminal, comprising:

Obtaining input data and output data between the terminal and the host;

The method for identifying a command line of a terminal according to claim 1, wherein the obtaining input data and output data between the terminal and the host comprises: acquiring by network interception, communication line interception or proxy forwarding Input data and output data between the terminal and the host.

The method for identifying a terminal command line according to claim 1, wherein the identifying the terminal command line in the output content according to the input data comprises: when the output content appears at the command line prompt, recording the output content as The command line ends when the input data is the command confirmation key, the command execution key, or the command cancel key.

The method for identifying a command line of a terminal according to claim 3, wherein the output content comprises display content and terminal status;

The recording output content as a command line further includes: matching a field of the content displayed after the command prompt with a command in the command library; if there is a command that can be matched, recording the field and the output content thereof as a command line The command line ends when the input number is the command confirmation key, the command execution key, or the command cancel key; the command library contains all the commands of the host operating system.

The method for identifying a command line of a terminal according to claim 1, wherein the determining, according to the input: the terminal command line in the output content comprises: determining the current command by using the terminal input data and the output sequence in the output content. Identify the status and identify the terminal command line by command status.

The method for identifying a command line of a terminal according to claim 5, wherein the identifying, according to the input data, the terminal command line in the output content comprises:

Determining a current command identification status based on the input data; the command identification status includes a command input status and a program output status;

The method for identifying a command line of a terminal according to claim 6, wherein the determining the current command recognition state according to the input data comprises: transferring when there is input data in a program output state Command input status; when the input data is command confirmation character, command execution character or command cancel character in the command input state, it is transferred to the program output state.

8. The method for identifying a command line of a terminal according to claim </ RTI>, wherein the command recognition state further comprises a command prompt state;

The method for identifying a command line of a terminal according to claim 7 or 8, wherein the command recognition state further comprises a command waiting state;

The method for identifying a command line of a terminal according to claim 7 or 8, wherein the command recognition status further comprises an interactive application state;

The method further includes: when the output data is a feature sequence entering the interactive state in the program output state, transferring to the interactive application state; when the output data is the feature sequence of the exiting interaction state in the interactive application state, the program is transferred to the program Output status.

The method of identifying a command line of a terminal according to claim 8, wherein the help character is a TAB key or a "?" key.

12. The method for identifying a command line of a terminal according to claim 10, wherein the sequence of characteristics entering the interactive state is: VT102 and a setting mode of the compatible terminal No. 47, and/or VT102 and a compatible terminal. Set mode No. 1047, and/or VT102 and compatible terminal setting mode No. 1049, and/or VT100 and compatible terminal setting mode No. 1;

The sequence of characteristics of the exiting interaction state is: VT102 and compatible terminal clear mode No. 47, and/or VT102 and compatible terminal clear mode 1047, and/or VT102 and compatible terminal clear mode 1049, and/or VT100 And the clear mode of the compatible terminal No. 1.

13. A device for identifying a command line of a terminal, comprising:

a terminal data capture module, configured to acquire input data and output data between the terminal and the host; The terminal simulation module is configured to simulate output data through the analog terminal to obtain output content, and the command recognition module is configured to identify the terminal command line in the output content according to the input data.

The device for identifying a command line of a terminal according to claim 13, wherein the command recognition module comprises:

The device for identifying a command line of a terminal according to claim 14, wherein the output content comprises display content and terminal status;

The command recognition state determining submodule is configured to determine a current command recognition state after receiving the prompt of the input discriminating submodule, wherein the command recognizing state includes a command input state and a program output state, and is transferred to the command input by the program output state. When prompted, the command line submodule is obtained, and when the command input state is transferred to the program output state, the command line submodule is notified to end a command line;

The command line sub-module is configured to determine the sub-module prompt according to the received command recognition status, and record the output content in the command input state as a command line.

17. The apparatus for identifying a command line of a terminal according to claim 16, wherein: The program output status indicates that the terminal is generating the result output of the program;

The command input state indicates that the output data of the terminal is a command; when the input data is input in the program output state, the command input state is entered, and when the command input state is the command confirmation character, the command execution character, or the command cancel character, the command input state Enter the program output status.

18. The apparatus for identifying a command line of a terminal according to claim 17, wherein the command recognition state further comprises a command prompt state, indicating an auxiliary command input state in which the command is completed; and inputting data in the command input state. When the help character is entered, the command prompt state is entered; when the input data is a non-help character in the command prompt state, the command input state is entered.

19. The apparatus for identifying a command line of a terminal according to claim 17 or 18, wherein the command recognition state further comprises a command waiting state; and when the input data is a command confirmation character in the command input state, the command is transferred. Wait state; when the output data is a newline character in the command wait state, it is transferred to the program output state;

The device for identifying a command line of a terminal according to claim 17 or 18, wherein the command recognition state further comprises: an interactive application state indicating a state in which the interactive program is running; and outputting in a program output state. When the data enters the feature sequence of the interactive state, it enters the interactive application state; when the output data is the feature sequence of the exit interactive state in the interactive application state, the data is transferred to the program output state.