WO2015046697A1 - Appareil de détection d'accroissement anormal de paquets de commande, procédé à cet effet et support d'enregistrement - Google Patents

Appareil de détection d'accroissement anormal de paquets de commande, procédé à cet effet et support d'enregistrement Download PDF

Info

Publication number
WO2015046697A1
WO2015046697A1 PCT/KR2014/003397 KR2014003397W WO2015046697A1 WO 2015046697 A1 WO2015046697 A1 WO 2015046697A1 KR 2014003397 W KR2014003397 W KR 2014003397W WO 2015046697 A1 WO2015046697 A1 WO 2015046697A1
Authority
WO
WIPO (PCT)
Prior art keywords
abnormal increase
control packet
time
value
unit
Prior art date
Application number
PCT/KR2014/003397
Other languages
English (en)
Korean (ko)
Inventor
차양명
Original Assignee
주식회사 아이디어웨어
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from KR20130113408A external-priority patent/KR20150033816A/ko
Priority claimed from KR20130113418A external-priority patent/KR20150033820A/ko
Priority claimed from KR1020130158936A external-priority patent/KR20150072472A/ko
Application filed by 주식회사 아이디어웨어 filed Critical 주식회사 아이디어웨어
Publication of WO2015046697A1 publication Critical patent/WO2015046697A1/fr

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876—Network utilisation, e.g. volume of load or congestion level
    • H04L43/0894—Packet rate

Definitions

  • the present invention is to detect an abnormal increase phenomenon of the control packet which is the main cause of the wireless network load.
  • mobile traffic is expected to increase by about 26 times over the next 10 to 15 years, and the amount of mobile data used by individuals in 2010 was 15MB, but in 2020 It can reach 1GB.
  • the main factor of mobile network congestion is the generation of traffic channels with the server on the communication network through various applications installed in the wireless terminal device.
  • control packets may increase exponentially in this situation.
  • the wireless network may be overloaded to deliver these control packets to the wireless terminal device. Can occur.
  • An object of the present invention for solving the above problems is, after classifying a plurality of packets transmitted and received between a plurality of wireless terminal devices and a plurality of servers through a communication network by server identification information (IP, etc.), the control generated for each identification information
  • IP server identification information
  • the present invention provides an apparatus, a method, and a recording medium for monitoring an abnormal increase in a control packet, which is one of the causes of overload of a mobile network, by detecting an abnormal increase in packets.
  • An apparatus for detecting an abnormal increase in a control packet includes: a collecting unit configured to collect or capture a plurality of packets transmitted and received between a plurality of wireless terminal devices and a plurality of servers through a communication network; A measuring unit for classifying packets collected or captured by the collection unit by server identification information, and measuring a generation amount of a control packet generated for each identification information during a recent n unit time for each flag; A recording unit for recording the number of control packet flags that occurred during the last predetermined time based on the current time according to the unit time, and calculating an average or maximum generation amount using information on the number of flags recorded during the predetermined time; And a determination unit that detects an abnormal increase in the control packet by using the average value or the maximum value of the generation amount per unit time of the control flags measured by the measurement unit and the unit flow amount per unit time calculated by the recording unit.
  • control packet traffic increase detection method comprises the steps of: collecting or capturing a plurality of packets transmitted and received between a plurality of wireless terminal devices and a plurality of servers through a communication network; Classifying packets collected or captured by the collector by server identification information; Measuring a generation amount of a control packet generated for each identification information for a recent n unit time for each flag; Recording the number of control packet flags that occurred during the last predetermined time based on the current time according to the unit time, and calculating an average or maximum generation amount using information on the number of flags recorded during the predetermined time; And detecting an abnormal increase in the control packet by using the average value or the maximum value of the generation amount per unit time of the control flags measured by the measurement unit and the unit flow amount per unit time calculated by the recording unit.
  • control packet abnormal increase detection device may further include a communication unit for notifying an increase in control packet abnormality to one or more terminals or servers when an abnormal increase in the control packet is detected as a result of detection of the determination unit.
  • control packet abnormality increase detection apparatus a collection unit for collecting or capturing a plurality of packets transmitted and received between a plurality of wireless terminal devices and a plurality of servers through a communication network, and the server to identify the packets collected or captured by the collection unit After classifying by information, the control unit measures the amount of control packets generated for each identification information for the last n seconds for each flag, and the number of control packet flags that occurred during the last predetermined time based on the current time.
  • a recording unit which records for a predetermined time in units of time and calculates an average or maximum generation amount using information on the number of flags recorded in units of seconds for a predetermined time, and the generation amount per second of the control flags measured by the measuring unit and the calculation unit Error of control packet by using average value or maximum value of inflow per second for each flag
  • the alarm recorder when detecting the abnormal increase in the determination unit, based on the current time to record the past n seconds and the time up to the next m seconds, and outputs the alarm information or Alternatively, the alarm information may be transmitted to one or more terminals or servers.
  • the recording unit measures the number of flags flowing in every second, compares this value with an existing peak value, and sets the current peak value to the number of new flags, It is possible to decide whether to set the peak value to the number of flags or to set the number of flags to a value that has decreased the previous peak value, and to calculate the average of each calculated peak flag number, and if the new flag number is greater than the previous peak value. If the number of new flags is set to the peak value and the number of new flags is less than the previous peak value, and the number of new flags subtracted from the previous peak value exceeds a certain value for a certain time, the new peak value is replaced with the previous peak value.
  • the determination unit may determine that an abnormal increase in the control packet when the amount of generation per second of the specific flag exceeds a predetermined upper limit, or the generation amount per second is earlier than the average value of inflows per second per flag. If it becomes larger than one or more times and exceeds a predetermined lower limit, it can be determined that the control packet is abnormally increased.
  • the determination unit, the identification information information of the server in which the abnormal increase occurs, the abnormal increase occurrence time information, and the information about the control packets from the predetermined schedule time until the later time of the abnormal increase occurrence time An abnormality can be detected, and the recording unit can control how much time is recorded when the number of control packet flags that have occurred in the last predetermined time on the basis of the current time for a predetermined time in seconds.
  • Another effect according to an aspect of the present invention it is possible to control the connection with a specific server that leads to excessive control packet increase phenomenon, it can bring the optimization of network use, through which the network for the expansion of mobile operators Can be minimized.
  • Another effect according to an aspect of the present invention by minimizing the dissatisfaction of the user of the wireless terminal device due to data communication delay, etc. through the optimization of the network use can significantly reduce the battery consumption of the wireless terminal device.
  • FIG. 1 is a diagram illustrating a mobile (wireless) data traffic indicator.
  • FIG. 2 is a diagram illustrating one of the main factors of the conventional mobile network congestion.
  • FIG. 3 is a view showing the main components of the control packet abnormality increase detection apparatus according to the embodiment of the present invention.
  • FIG. 4 is a diagram illustrating an example of a packet including a general control packet.
  • 5 is a diagram illustrating an example of a measured control packet.
  • 6 is another exemplary diagram illustrating the measured control packet.
  • FIG. 7 is a diagram illustrating an example of measuring an amount of generation of control flags per second according to an embodiment of the present invention.
  • 8 to 10 are exemplary embodiments illustrating a process for calculating an average value of a control flag according to an embodiment of the present invention.
  • 11 to 13 are exemplary embodiments illustrating a process for calculating a peak average value of a control flag according to an embodiment of the present invention.
  • FIG. 14 is a diagram illustrating a process of detecting an abnormal increase phenomenon of a control packet according to an exemplary embodiment of the present invention.
  • FIG. 3 is a view showing the main components of the control packet abnormal increase detection apparatus 100 according to the embodiment of the present invention.
  • control packet abnormality increase detection device 100 is connected to a communication network or a network in which a plurality of wireless terminal devices 200 and a plurality of servers 300 transmit and receive packets, and thus the packet (the packet is data).
  • the packet and data are interpreted in the same sense.) After collecting or capturing, an abnormal increase in the control packet is detected.
  • FIG. 3 is merely a configuration for describing an embodiment of the present invention, and the present invention is not limited to the technical features only by the implementation method shown in FIG. 3.
  • the control packet abnormality increase detection apparatus 100 collects or captures a plurality of packets transmitted and received between a plurality of wireless terminal device 200 and a plurality of servers 300 through a communication network, and the collection Alternatively, the packets to be captured are classified by server identification information, and a control packet generated for each identification information is measured for the latest n unit time (for example, n seconds) for each flag, and based on the current time.
  • n unit time for example, n seconds
  • the number of control packet flags that occurred in the last predetermined time is recorded for a predetermined time in seconds, and after calculating the average or maximum generation amount using the information on the number of flags recorded in the second for a predetermined time, the measured control An abnormal increase in the control packet is obtained by using the average value or the maximum value of the flags generated per second and the calculated inflows per second per flag. Shipping plays a role.
  • control packet abnormal increase detection apparatus 100 records alarm information required for informing the user of an abnormal increase alarm, notifies one or more terminals or servers, or outputs the alarm. It plays a role.
  • control packet the server 300 is connected to the wireless terminal device 200 because the server 300 is normally shut down or the server 300 is down due to one or more causes due to one or more causes.
  • the packet is set to restart the session (RST) or the end of the session (FIN) or the session connection (SYN) of the control plug-in of TCP transmitted to the wireless terminal device 200 connected to the server 300
  • the control packet flag may include one or more session restart (RST), session termination (FIN), and session connection (SYN).
  • the alarm information may include an abnormal increase detection time, identification information on the packet-switching server, DNS information, TCP flag, flow rate per second, the number of clients connected, and one or more detection logs of the corresponding time interval.
  • the abnormal increase means that the generation amount per second of the control packet exceeds a predetermined threshold, and n seconds may be 1 second.
  • the control packet abnormality increase detection apparatus 100 includes a collecting unit 10, a measuring unit 20, a recording unit 30, a determining unit 40, , An alarm recording unit 50, an output unit 55, and a communication unit 60 are configured.
  • control packet abnormal increase detection device 100 is shown as a single device in the drawings for the purpose of embodiment, each of the components may be configured to be separated into one or more devices or servers, respectively.
  • the collection unit 10 collects or captures a plurality of packets transmitted and received between the plurality of wireless terminal devices 200 and the plurality of servers 300 through a communication network.
  • the packet generated by the wireless terminal device 200 is basically GGSN. (Gateway GPRS Support Node) is converted to the TCP / IP protocol and transmitted to the corresponding server 300, the packets are transmitted without causing problems in the communication between the wireless terminal device 200 and the server 300.
  • GGSN Gateway GPRS Support Node
  • the collection unit 10 replicates the packet and then transfers the duplicated packet to the measurement unit 20 and the recording unit 30.
  • the server 300 and the wireless terminal device 200 use the TCP protocol to perform a session connection (SYN), data transmission, termination of a session (FIN), session restart (RST), and the like. While establishing a specific field value on the TCP header to send and receive packets, a connection is made through the control packet, data is transmitted or terminated, and the header information is shown in FIG.
  • Figure 4 shows an embodiment showing the information of the header of the packet transmitted and received between the wireless terminal device 200 and the server 300 in general.
  • the present invention detects an abnormal increase in the amount of such control flags, such as a case where a control packet with a large amount of FIN or RST is set in a short time from the server 300 to the wireless terminal device 200, thereby detecting a network. To monitor the cause of the overload.
  • the measurement unit 20 classifies the packets collected or captured by the collection unit 10 by the server 300 identification information, and then flags the control packets generated for each identification information. For the role of measuring the amount of occurrence in the last n seconds.
  • the y-axis is the number of control packets per second sent from the server 300 to the wireless terminal device 200
  • the -y axis is the number of control packets per second sent from the wireless terminal device 200 to the server 300.
  • FIG. 6 is a diagram illustrating a graph for detecting abnormal increase-related information on the basis of the time when an abnormal increase in the control packet identified through FIG. 5 occurs.
  • the control packet abnormal increase detection apparatus 100 checks an abnormal increase phenomenon of the control packet through FIGS. 5 and 6, and identifies identification information of the server 300 in which the abnormal increase has occurred, At least one abnormality increase occurrence time information and information on control packets from a predetermined time to a predetermined time after the occurrence time are detected.
  • FIG. 7 classifies packets currently flowing through the measurement unit 20 by identification information of the server 300, and then indicates a control packet generated for each identification information for each flag (SYN, FIN, RST, etc.). An example of measuring the amount of occurrence over a second is shown.
  • TX means a packet sent from the server 300 to the wireless terminal device 200
  • RX means a packet sent from the wireless terminal device 200 to the server 300.
  • the packet captured from the collecting unit 10 is recorded in milliseconds (1/1000 second) as the packet capture time, and continuously enters the packet. 20) calculates the inflows per second by summing flags for each of the packets in the last 1 second of these packets.
  • the recording unit 30 records the number of control packet flags that occurred during the last predetermined time based on the current time for a predetermined time in seconds, and the flag recorded in the second for a predetermined time. It calculates the average or maximum generation amount using the number information of these.
  • the calculation unit when calculating the average generation amount (average value), measures the number of flags flowing in every second, compare this value with the existing peak value, and then set this peak value to the number of new flags It is possible to determine whether to set the previous peak value to the number of flags, or to set the number of flags to a value obtained by decreasing the previous peak value, and calculate the average of each calculated peak flag number.
  • the output unit 55 performs a role of outputting an alarm when an abnormal increase in the control packet is detected as a result of the detection by the determination unit 40.
  • the output unit 55 may output an alarm on the monitoring screen or output an alarm through a speaker.
  • Communication unit 60 if the detection result of the determination unit 40, an abnormal increase in the control packet, the role of notifying the control packet abnormal increase to one or more terminals or server 300; Do this.
  • the communication unit 60 may notify an increase in a control packet error to a wired and / or wireless terminal of one or more preset managers.
  • FIGS. 8 to 10 are diagrams illustrating an example of a process for calculating an average value of a control flag in the recording unit according to an exemplary embodiment of the present invention.
  • the average value of the abnormal increase may be appropriately the average value of the red lines (peak average), and the average value of the red lines will be about 50.
  • Determination unit 40 by using the average value or the maximum value of the flow rate per second of the control flags measured by the measurement unit 20 and the calculated flow rate per flag calculated by the recording unit 30 It detects abnormal increase of control packet.
  • the denominator is divided by the number of times that the number of generations per second satisfies> 0 and> 30 (actually in a section where a value exists). Is greater than or equal to 17, and if it is> 0, it has a value of 17 for> 0 and 46 for> 30, and similar to the target value for> 30. It is sometimes not used because sometimes it shows proper value or not.
  • the peak average is a value obtained by calculating a virtual peak value (the horizontal red line) while maintaining, increasing, or decreasing the value using the previous peak value and the new peak value. It can be seen that it has a value and derives a value similar to the target value. Using this, the average value can be calculated and it can be determined as an abnormal increase when the value is * n times.
  • the figure shows whether the current peak value is set to new value, the previous peak value (preserves the existing value), or the previous peak value is reduced. It is determined by an algorithm and calculates an average of each calculated peak value.
  • a drop condition exceeds a certain value during a drop time, for example, when a difference between two values is greater than half of an existing value every second, it is found that a specific time ( Drop time) is 5, and a specific value (Drop condition) is (previous peak value / 2).
  • drop value peak value / 3 of drop value to a specific value may be included, and the previous value may be decreased by some amount. It can be arbitrarily specified as to whether or not to reduce the gap when the gap is over a certain value. The average value can be different depending on how to set this value.
  • 12 is a diagram illustrating an example of calculating a peak average value, assuming that the RST flag enters 10, 5, 3, 20, 5, 5, 5, 5, 5, 15 every second, and the drop time is 3 ( More than 3 times when the difference with the existing value is large), the drop condition is the existing value / 2 (if the difference with the existing value is larger than this value), and the drop value is the existing value / 3 (1/3 of the existing value) Assuming a new value) shows the change in peak mean value.
  • the recording unit according to the present invention is only one embodiment, and a method for calculating an average value (average generation amount) may be variously performed according to the intention of those skilled in the art.
  • the determination unit 40 determines that an abnormal increase in the control packet occurs when the generation amount of the specific flag exceeds a predetermined upper limit, or the average value of the inflow amount per flag per second is generated. If it is more than the preset multiple and more than the predetermined lower limit, it can be determined that the abnormal increase of the control packet.
  • the determination unit 40 may include identification information of the server 300 in which an abnormal increase occurs, abnormal increase occurrence time information, and information on control packets from a predetermined schedule time until a later constant time of the abnormal increase occurrence time. At least one can be detected, and the recording unit 30 controls the number of control packet flags that occurred during the last predetermined time on the basis of the current time for a predetermined time in seconds, and for how long to record. You can play more roles.
  • Alarm recording unit 50 when the detection result of the determination unit 40, the abnormal increase in the control packet is detected, the role of recording the alarm information required to inform the alarm to the user Do this.
  • the alarm recording unit 50 when the alarm recording unit 50 detects an abnormal increase, the alarm recording unit 50 records up to n seconds in the past and time up to m seconds thereafter, based on the current time, and outputs alarm information.
  • the alarm information may be transmitted to one or more terminals or servers.
  • the alarm information may include an abnormal increase detection time, a packet switching server, DNS information, a TCP flag, an amount of inflows per second, the number of connected clients, and one or more detection logs of a corresponding time interval.
  • each component of the control packet abnormal increase detection apparatus 100 may be implemented in the form of a program or a program set, and may be divided into two or more devices.
  • FIG. 14 is a diagram illustrating a process of detecting an abnormal increase phenomenon of a control packet according to an exemplary embodiment of the present invention.
  • control packet abnormal increase detection apparatus 100 collects or captures a plurality of packets transmitted and received between the plurality of wireless terminal devices 200 and the plurality of servers 300 through the collection unit 10 (S1410).
  • control packet abnormal increase detection apparatus 100 classifies the packets collected or captured by the collection unit 10 through the measurement unit 20 by the server 300 identification information (S1420).
  • the measuring unit 20 of the control packet abnormality increase detection apparatus 100 measures the generation amount of the control packet generated for each identification information for each flag for the last n seconds (S1430).
  • the packet abnormal increase detection apparatus 100 records the number of control packet flags that occurred during the last predetermined time on the basis of the current time through the recording unit 30 for a predetermined time (S1440).
  • the apparatus 100 for detecting an abnormality of the packet calculates an average or maximum generation amount using the information on the number of flags recorded in units of seconds for a predetermined time through the recording unit 30 (S1450).
  • steps S1420 and S1430 may be replaced with the steps S1440 and S1450, and the steps S1420 and S1430, S1440, and S1450 may be changed. May be performed simultaneously.
  • the packet abnormality increase detection apparatus 100 checks through the determination unit 40 whether the amount of generation of the specific flag per second exceeds a predetermined upper limit (S1460).
  • the determination unit 40 of the packet abnormality increase detection apparatus 100 determines that the control packet is abnormal. It is determined that the increase (S1475).
  • the packet abnormality increase detection apparatus 100 is determined per flag per second through the determination unit 40. It is checked whether the amount of generation is larger than a predetermined multiple by a predetermined value more than the average value of inflows per second per flag and exceeds a predetermined lower limit (S1485).
  • the packet abnormality increase detection apparatus 100 determines that the abnormal increase in the control packet (S1475).
  • the control packet abnormality increase detecting apparatus 100 repeats the process (S1410) (S1495).
  • processes (S1460) and (S1485) are sequentially processed to explain one embodiment of the present invention. However, processes (S1460) and (S1485) may be reversed, and may be processed simultaneously. It's okay.
  • control packet abnormal increase detecting apparatus 100 if an abnormal increase in the control packet is detected through the process (S1475), the control packet abnormal increase detecting apparatus 100 then outputs an alarm on the monitoring screen or the speaker through the output unit 55. Or, and / or notify the control packet abnormal increase to one or more terminals or servers 300 through the communication unit 60.

Landscapes

  • Engineering & Computer Science (AREA)
  • Environmental & Geological Engineering (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

La présente invention concerne un appareil destiné à détecter un accroissement anormal de paquets de commande. L'appareil selon la présente invention comporte: une unité de collecte servant à collecter ou à capturer une pluralité de paquets mutuellement émis et reçus entre une pluralité de dispositifs de terminaux sans fil et une pluralité de serveurs via un réseau de communications; une unité de mesures servant à classifier les paquets collectés ou capturés par l'unité de collecte en fonction de chaque information d'identification de serveur, et à mesurer la quantité de paquets de commande générée pour chaque information d'identification par rapport à chaque fanion pendant les n unités de temps les plus récentes; une unité d'enregistrement servant à enregistrer le nombre de paquets de commande, pour chaque fanion, généré pendant la dernière période prédéterminée sur la base d'une date actuelle, en fonction de l'unité de temps et à calculer une quantité moyenne ou maximale des paquets de commande générés en utilisant des informations sur le nombre de fanions enregistrés pendant la période prédéterminée; et une unité de détermination servant à détecter un accroissement anormal des paquets de commande en utilisant la quantité de fanions de commande générée par unité de temps mesurée par l'unité de mesures, et une valeur moyenne ou une valeur maximale d'une quantité d'entrée des paquets de commande par unité de temps pour chaque fanion calculée par l'unité d'enregistrement.
PCT/KR2014/003397 2013-09-24 2014-04-18 Appareil de détection d'accroissement anormal de paquets de commande, procédé à cet effet et support d'enregistrement WO2015046697A1 (fr)

Applications Claiming Priority (6)

Application Number Priority Date Filing Date Title
KR20130113408A KR20150033816A (ko) 2013-09-24 2013-09-24 제어패킷 이상 증가 검출장치
KR10-2013-0113408 2013-09-24
KR10-2013-0113418 2013-09-24
KR20130113418A KR20150033820A (ko) 2013-09-24 2013-09-24 제어패킷 트래픽 증가 검출방법과 기록매체
KR10-2013-0158936 2013-12-19
KR1020130158936A KR20150072472A (ko) 2013-12-19 2013-12-19 제어패킷 이상 증가 검출장치

Publications (1)

Publication Number Publication Date
WO2015046697A1 true WO2015046697A1 (fr) 2015-04-02

Family

ID=52743792

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/KR2014/003397 WO2015046697A1 (fr) 2013-09-24 2014-04-18 Appareil de détection d'accroissement anormal de paquets de commande, procédé à cet effet et support d'enregistrement

Country Status (1)

Country Link
WO (1) WO2015046697A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110108705A (zh) * 2019-05-17 2019-08-09 深圳市东盈讯达电子有限公司 一种数据测量方法和相关装置
CN112788075A (zh) * 2019-11-07 2021-05-11 北京京东尚科信息技术有限公司 一种业务服务的监控方法和装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020105911A1 (en) * 1998-11-24 2002-08-08 Parag Pruthi Apparatus and method for collecting and analyzing communications data
KR20040099050A (ko) * 2003-05-17 2004-11-26 에스케이 텔레콤주식회사 무선 패킷 데이터호의 실시간 감시 방법 및 시스템
JP2005026838A (ja) * 2003-06-30 2005-01-27 Ntt Docomo Inc パケット交換サーバ装置、付加サービスサーバ装置、パケット通信システム、パケット通信方法
US20080209273A1 (en) * 2007-02-28 2008-08-28 Microsoft Corporation Detect User-Perceived Faults Using Packet Traces in Enterprise Networks
US20120281590A1 (en) * 2011-05-02 2012-11-08 Telefonaktiebolaget Lm Ericsson (Publ) Creating and using multiple packet traffic profiling models to profile packet flows

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020105911A1 (en) * 1998-11-24 2002-08-08 Parag Pruthi Apparatus and method for collecting and analyzing communications data
KR20040099050A (ko) * 2003-05-17 2004-11-26 에스케이 텔레콤주식회사 무선 패킷 데이터호의 실시간 감시 방법 및 시스템
JP2005026838A (ja) * 2003-06-30 2005-01-27 Ntt Docomo Inc パケット交換サーバ装置、付加サービスサーバ装置、パケット通信システム、パケット通信方法
US20080209273A1 (en) * 2007-02-28 2008-08-28 Microsoft Corporation Detect User-Perceived Faults Using Packet Traces in Enterprise Networks
US20120281590A1 (en) * 2011-05-02 2012-11-08 Telefonaktiebolaget Lm Ericsson (Publ) Creating and using multiple packet traffic profiling models to profile packet flows

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110108705A (zh) * 2019-05-17 2019-08-09 深圳市东盈讯达电子有限公司 一种数据测量方法和相关装置
CN112788075A (zh) * 2019-11-07 2021-05-11 北京京东尚科信息技术有限公司 一种业务服务的监控方法和装置
CN112788075B (zh) * 2019-11-07 2024-04-09 北京京东尚科信息技术有限公司 一种业务服务的监控方法和装置

Similar Documents

Publication Publication Date Title
WO2020048047A1 (fr) Procédé d'avertissement de défaut de système, appareil, et dispositif, et support d'informations
WO2010074506A2 (fr) Appareil de surveillance de service en temps réel et procédé utilisant une estampille temporelle
WO2016056708A1 (fr) Système et procédé de détection et de prédiction d'anomalie par analyse de données chronologiques
WO2012165893A2 (fr) Procédé de service de transmission de données simultanée et dispositif utilisé associé
WO2014119912A1 (fr) Procédé et dispositif de regroupement de serveurs, et support d'enregistrement
WO2015174628A1 (fr) Système de mesure de qualité de service volte et procédé de mesure de qualité de service volte utilisant un agent de terminal
WO2016023148A1 (fr) Procédé de régulation de paquets, commutateur et contrôleur
WO2012046973A2 (fr) Procédé de communication d'une macro station de base, d'un macro terminal, d'une micro station de base et d'un micro terminal permettant un contrôle des interférences dans un réseau cellulaire hiérarchique
WO2013048218A1 (fr) Appareil et procédé pour effectuer un processus de test d'état de déploiement de réseau radio dans un système de communication mobile
WO2014171728A1 (fr) Procédé et appareil destinés à établir/libérer une connexion de commande de ressource radio entre un nœud b évolué et un équipement d'utilisateur dans un système de communication
WO2017206883A1 (fr) Procédé et appareil de traitement d'applications, support de stockage, et dispositif électronique
WO2013073784A1 (fr) Appareil et procédé de prise en charge de service pour la transmission simultanée de données sur la base de multiples réseaux
WO2020015060A1 (fr) Procédé et appareil d'estimation d'anomalie de consommation d'énergie, et support d'enregistrement informatique
WO2021085984A1 (fr) Procédé par lequel un nœud upf comprenant une pluralité d'instances upf exécute une surveillance de qos, et nœud upf exécutant ce procédé
WO2021201369A1 (fr) Système de prédiction d'apparition d'incendie et procédé associé
WO2021141291A1 (fr) Procédé et appareil de collecte de trafic réseau dans un système de communication sans fil
WO2015046697A1 (fr) Appareil de détection d'accroissement anormal de paquets de commande, procédé à cet effet et support d'enregistrement
WO2013129804A1 (fr) Procédé, système, et support d'enregistrement pour analyser l'ensemble de règles de réduction de charge d'un réseau radio
WO2015041468A1 (fr) Procédé et appareil de gestion de la qualité d'un trafic
WO2013122362A1 (fr) Procédé, système et support d'enregistrement permettant d'appliquer une politique de réduction de charge dans un réseau sans fil
WO2012165805A2 (fr) Dispositif et procédé destinés à un service de transmission de données simultanée en utilisant deux réseaux ou plus
WO2021012490A1 (fr) Procédé et appareil de commutation de relais de service, dispositif terminal, et support d'informations
WO2019139189A1 (fr) Dispositif et procédé d'analyse d'une action anormale d'un système de traitement de données en continu
WO2013100594A1 (fr) Procédé, serveur et support d'enregistrement pour assurer un service de prévention des abus d'occurrences de retard à l'aide d'un serveur relais
WO2020036431A1 (fr) Procédé de détection de défaillance de voie ferrée, système associé et système de commande de réseau

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14848455

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC ( EPO FORM 1205A DATED 08/07/2016 )

122 Ep: pct application non-entry in european phase

Ref document number: 14848455

Country of ref document: EP

Kind code of ref document: A1