WO2016202025A1

WO2016202025A1 - Trap message processing method and apparatus

Info

Publication number: WO2016202025A1
Application number: PCT/CN2016/076645
Authority: WO
Inventors: 李伟东
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-06-16
Filing date: 2016-03-17
Publication date: 2016-12-22
Also published as: CN106330478A

Abstract

The present invention provides a Trap message processing method and apparatus. The method comprises: receiving a Trap message for identifying device alarm information; matching the Trap message with a discarding rule for discarding a Trap message; and processing the Trap message according to the matching result. The present invention resolves the problem of high false discarding rate of a Trap message due to the fact that a useful Trap message is drowned in useless Trap messages and discarded in the related art, thereby achieving the effect of reducing the false discarding rate of the Trap message.

Description

Trap packet processing method and device

Technical field

The present invention relates to the field of communications, and in particular, to a trap Trap message processing method and apparatus.

Background technique

In the network communication environment, the network management system is mainly responsible for network alarm management, security management, configuration management, etc. Among them, alarm management plays a very important role in the normal operation of network maintenance.

In the current network communication device field, when the network element is abnormal due to environmental impact or hardware failure, it needs to be reported to the network management system by means of an alarm. In view of the simplicity and maturity of the Simple Network Management System (SNMP) protocol, it is widely used by major equipment providers. The alarm information of the device is sent to the NMS through the SNMP trap trap. The NMS analyzes the Trap packets as alarm data.

As the size of the network device increases, the network management system receives a large number of Trap packets from the network. The Trap packets that have little or no impact on the service are received and parsed by the NMS. The computing resources, and too many unnecessary Trap packets will fill the alarm service processing buffer pool, resulting in the loss of important alarms. Therefore, the discarding of unnecessary Trap packets is an indispensable part.

Currently, the alarm discarding processing technology in the related art mainly uses the Trap packet to be reported to the network management system after being parsed by the protocol stack, and then mapped to the service alarm information in the system, and then discarded according to the service filtering rule, and the protocol stack is notified to the SNMP Trap. Although the User Datagram Protocol (UDP) packet parsing is fast, the process of the service mapping and other processes in the subsequent process wastes system resources, and the amount of wasted is proportional to the number of useless Trap packets. In addition, the alarm discarding rule configured by the user through the network management system can only be accurate to the alarm code. If the Trap packet with special attribute value is not discarded for the network management system, it is discarded. Traps with special attribute values are not discarded when they are sent to an alarm code, and others are discarded. Therefore, in the related art, there is a problem that a useful Trap packet is discarded and a Trap packet has a high discard rate.

An effective solution has been proposed for the problem that the Trap packets are discarded due to the use of the Trap packets and the Trap packets are discarded.

Summary of the invention

The present invention provides a method and a device for processing trap traps, so as to at least solve the problem that the traps of the traps are discarded due to the use of the traps of the traps in the related art. High problem.

According to an aspect of the present invention, a trap Trap packet processing method is provided, including: receiving a Trap message for identifying device alarm information; and matching the Trap message with a discarding rule for discarding Trap messages. The Trap message is processed according to the matching result.

Optionally, the discarding rule includes at least one of the following: discarding the Trap message identified by the pre-configured Trap object identifier OID; discarding the pre-configured Trap object identifier OID, and the packet attribute is the first predetermined attribute. The value of the Trap packet is discarded. The Trap packet whose identifier is not the second predetermined attribute value is discarded.

Optionally, before receiving the Trap message for identifying the device alarm information, the method further includes: parsing the discarding rule; and generating a discarding rule with a predetermined memory structure according to the parsed discarding rule.

Optionally, the matching the Trap packet with the discarding rule for discarding the Trap packet includes: parsing the original protocol layer structure of the Trap packet; and parsing the parsed Trap packet with the predetermined The discard rules of the memory structure are matched.

Optionally, the processing of the Trap packet according to the matching result includes: discarding the Trap packet when the Trap packet matches the discarding rule; and/or, when the Trap packet is If the discarding rule does not match, the Trap packet is mapped to the alarm information; and the alarm information is sent to an upper layer module for processing the alarm information.

According to another aspect of the present invention, a trap trap message processing apparatus is provided, including: a receiving module, configured to receive a Trap message for identifying device alarm information; and a matching module configured to set the Trap message with The discarding rule for discarding the Trap packet is matched. The processing module is configured to process the Trap packet according to the matching result.

Optionally, the apparatus further includes: a parsing module configured to parse the discarding rule; and a generating module configured to generate a discarding rule having a predetermined memory structure according to the parsed discarding rule.

Optionally, the matching module includes: a parsing unit configured to perform original protocol layer structure parsing on the Trap packet; and a matching unit configured to parse the parsed Trap message and the discard with a predetermined memory structure The rules are matched.

Optionally, the processing module includes: a discarding unit, configured to discard the Trap packet when the Trap packet matches the discarding rule; and/or, the mapping unit is set to be the Trap The packet is mapped to the alarm information when the packet does not match the discarding rule. The sending unit is configured to send the alarm information to an upper module for processing the alarm information.

According to the present invention, the Trap message is used to identify the alarm information of the device, and the Trap message is matched with the discarding rule for discarding the Trap message. The Trap message is processed according to the matching result. The useful Trap packets in the related art are discarded by the use of the traps. The trap rate of the Trap packets is high.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

FIG. 1 is a flowchart of a method for processing a trap trap message according to an embodiment of the present invention;

2 is a structural block diagram of a trap trap message processing apparatus according to an embodiment of the present invention;

FIG. 3 is a block diagram showing a preferred structure of a trap trap message processing apparatus according to an embodiment of the present invention; FIG.

4 is a structural block diagram of a matching module 24 in a trap Trap message processing apparatus according to an embodiment of the present invention;

FIG. 5 is a structural block diagram of a processing module 26 in a trap Trap message processing apparatus according to an embodiment of the present invention;

FIG. 6 is a structural block diagram of a Trap packet discarding process according to an embodiment of the present invention;

FIG. 7 is a flowchart of determining, by using a Trap OID and an attribute, to discard a specific Trap message according to an embodiment of the present invention;

FIG. 8 is a flowchart of determining, by using a Trap OID and an attribute exception, to discard a specific Trap message according to an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

A method for processing a trap Trap message is provided in this embodiment. FIG. 1 is a flowchart of a method for processing a trap Trap message according to an embodiment of the present invention. As shown in FIG. 1 , the process includes the following steps:

Step S102: Receive a Trap message for identifying device alarm information.

Step S104: Match the Trap message with the discarding rule for discarding the Trap message.

Step S106: The Trap message is processed according to the matching result.

In the foregoing, the Trap packet is matched with the discarding rule when the Trap packet is discarded. The alarm code corresponding to the Trap packet is matched with the discarding rule in the related art. The matching is more detailed. You can determine whether to discard the traps based on the characteristics of the Trap text. Therefore, the problem that the useful Trap packets in the related art are flooded by the useless Trap packets is discarded, and the error rate of the Trap packets is high, thereby reducing the false discard rate of the Trap packets. Effect.

In an optional embodiment, the discarding rule includes at least one of the following: discarding the Trap message identified by the pre-configured Trap object identifier OID; discarding the pre-configured Trap object identifier OID, and the packet attribute is The Trap message of the first predetermined attribute value is discarded; the Trap message whose identifier is not the second predetermined attribute value is discarded by the pre-configured Trap object identifier OID. As shown in the above discarding rules, the latter two discarding rules not only consider the Trap OID of the Trap packet, but also consider the attribute value of the Trap packet, which further improves the accuracy of discarding the Trap packet. The above-mentioned discarding rules are exemplified by the following rules. For example, you can discard the traps of a Trap OID. Other Trap messages other than the text. Compared with the discarding mode in the related art, the discarding rule has a finer granularity, which solves the problem that the discarding granularity of the Trap packet is high due to the excessive discarding granularity in the related art, and effectively reduces the Trap packet. False discard rate.

In an optional embodiment, before receiving the Trap message for identifying the device alarm information, the method further includes: parsing the discarding rule; and generating a discarding rule with a predetermined memory structure according to the parsed discarding rule. The discarding rule is processed into a discarding rule with a predetermined memory structure, which can be more easily matched with the Trap packet.

In an optional embodiment, the matching of the Trap message with the discarding rule for discarding the Trap message includes: parsing the original protocol layer structure of the Trap message; and parsing the Trap message and having the predetermined memory. The structure's drop rules are matched.

In an optional embodiment, the processing of the Trap packet according to the matching result includes: discarding the Trap packet when the Trap packet matches the discarding rule; and/or, when the Trap packet and the discarding rule If the packet is not matched, the trap message is mapped to the alarm information; the alarm information is sent to the upper layer module for processing the alarm information. That is, when the Trap OID of the Trap packet or the Trap OID of the Trap packet and the attribute value are the same as those specified in the discarding rule, the Trap packet should be discarded, and the discarding process is performed on the trap packet. Otherwise, the Trap packet has a certain meaning to the network management system and should not be discarded. The alarm information mapped from the Trap packet is sent to the upper module for processing.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

In this embodiment, a trap trap message processing device is also provided, which is used to implement the foregoing embodiments and preferred embodiments, and details are not described herein. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

2 is a structural block diagram of a trap trap message processing apparatus according to an embodiment of the present invention. As shown in FIG. 2, the apparatus includes a receiving module 22, a matching module 24, and a processing module 26. The apparatus will be described below.

The receiving module 22 is configured to receive a Trap message for identifying the device alarm information, and the matching module 24 is connected to the receiving module 22, and is configured to match the Trap message with the discarding rule for discarding the Trap message; 26, connected to the matching module 24, configured to process the Trap message according to the matching result.

Optionally, the discarding rule includes at least one of the following: discarding the Trap message identified by the pre-configured Trap object identifier OID; discarding the pre-configured Trap object identifier OID, and the packet attribute is the first predetermined attribute value. The Trap packet is discarded. The Trap packet whose identifier is not the second predetermined attribute value is discarded.

FIG. 3 is a block diagram of a preferred structure of a trap trap message processing apparatus according to an embodiment of the present invention. As shown in FIG. 3, the apparatus includes a parsing module 32 and a generating module 34, in addition to all the modules shown in FIG. The device will be described.

The parsing module 32 is configured to parse the discarding rule; the generating module 34 is connected to the parsing module 32 and the receiving module 22, and is configured to generate a discarding rule having a predetermined memory structure according to the parsed discarding rule.

4 is a structural block diagram of a matching module 24 in a trap Trap message processing apparatus according to an embodiment of the present invention. As shown in FIG. 4, the matching module 24 includes a parsing unit 42 and a matching unit 44, and the matching module 24 is performed below. Description.

The parsing unit 42 is configured to perform original protocol layer structure parsing on the Trap packet, and the matching unit 44 is connected to the parsing unit 42 and configured to match the parsed Trap message with a discarding rule having a predetermined memory structure.

FIG. 5 is a structural block diagram of a processing module 26 in a trap Trap message processing apparatus according to an embodiment of the present invention. As shown in FIG. 5, the processing module 26 includes a discarding unit 52, and/or a mapping unit 54, a transmitting unit 56, and The processing module 26 will be described.

The discarding unit 52 is configured to: when the trap packet matches the discarding rule, discard the trap packet; and/or, the mapping unit 54 is configured to map the trap packet when the trap packet does not match the discarding rule. The sending unit 56 is connected to the mapping unit 54 and configured to send the alarm information to an upper module for processing the alarm information.

It is to be noted that, in the embodiment of the present invention, a method for discarding based on SNMP Trap packets is provided, so that the discarding behavior occurs before entering the service layer processing, and does not distinguish the device, and is effective for the entire network. Based on the Trap OID discarding rule, you can further configure the discarding method for traps with specific attributes and attribute values. Therefore, the problem that the alarming efficiency of the existing network management system is low and the granularity cannot be accurate to the Trap attribute is overcome. It is of great significance to the opening of equipment services based on the Trap method.

FIG. 6 is a block diagram of a Trap packet discarding process according to an embodiment of the present invention. As shown in FIG. 6, the discarding rule parser 62 (the receiving module 22 and the parsing unit 42 described above) and the Trap packet parsing processor 64 are included. The above-described parsing module 32 and generating module 34), discarding processor 66 (same as discarding unit 52 described above), and reporting transmitter 68 (same as mapping unit 54 and transmitting unit 56 described above) will be described below.

The discard rule parser 62: parses the preset alarm discarding rule (same as the discarding rule described above) into a data structure in the system memory.

The Trap packet parsing processor 64: receives a trap packet from the Trap receiving port of the network management system, and parses the packet data structure according to the protocol format.

The discarding processor 66: quickly matches the features in the Trap message according to the discarding rule. Discards the packets that match the successful traps.

The report transmitter 68: converts the Trap packet that has not been discarded into the alarm information of the network management system by mapping and the like, and pushes it to the upper layer processing module of the network management system.

The Trap message parsing processor 64, the discarding rule parser 62, and the discarding processor 66 can be directly located in the SNMP. In the protocol stack, this is the most efficient.

In the embodiment of the present invention, a method for discarding a Trap packet is provided, including the following steps:

Step A: parsing the preset alarm discarding rule into a data structure in the system memory;

Step B: Receive a Trap packet from the Trap receiving port of the NMS, and parse the packet data structure according to the protocol format.

Step C: Quickly match the features in the Trap packet according to the discarding rule, and discard the successfully matched Trap packet.

Step D: The Trap message that has not been discarded is converted into the alarm information in the network management system by the mapping process, and is sent to the upper layer processing module of the network management system.

The method for customizing the alarm discarding rule in the embodiment of the present invention is to configure the alarm discarding rule of the network management system based on the Trap packet structure, and the alarm is discarded according to the protocol packet field before the alarm enters the service layer processing, and the service discarding rule is not required. Can take the following form:

The value of the Trap OID that discards the Trap packets is discarded.

For example, the Trap OID of the Trap packet is configured, and the attribute OID of the specified location in the attribute area structure or the regular expression of the importance value is configured (the packet attribute is the first predetermined attribute value). All traps that match the Trap OID and have the attribute OID or match the regular expression value are discarded.

For example, the Trap OID of the Trap packet is configured, and the Trap packet with the Trap OID is not the same as the Trap message. The exception is specified by the matching configuration regular expression of the attribute OID and value of the specified location in the Trap. In this mode, the Trap OID of the Trap packet is the same as the Trap packet exception. The Trap packet is discarded. Otherwise, the Trap packet is discarded.

The invention is exemplified below in conjunction with specific discarding rules.

Embodiment 1

The process of discarding traps is as follows:

Step 1. After the system is started, the discard rule parser 62 parses the predefined alarm discarding rule, and generates a memory structure in the memory that facilitates the discarding of the processor 66 for fast reading. The configured discard rule adopts the above 1 method, such as:

/trap/1/exclude/oid=.1.3.6.1.2.1.11.2

The Trap packets whose Trap OID is in the range of 1.1.3.6.1.2.1.11.2 are discarded. The other Trap packets are reported to the upper-layer service module.

Step 2: The network management system receives the trap packet on the alarm receiving port, and the trap parsing processor 64 parses the original protocol layer structure of the trap packet.

Step 3. The parsed Trap structure enters the drop processor 66, where the Trap OID and attribute fields and pre-configuration are completed. The rule comparison discards the alarm according to the comparison structure or sends it to the reporting transmitter 68.

Step 4. The reporting transmitter 68 sends the alarms to the upper modules that need to receive alarms for service processing.

Embodiment 2

Use the Trap OID and attributes to specify the process of discarding specific Trap packets:

Step 1. After the system is started, the discard rule parser 62 parses the predefined alarm discarding rule, and generates a memory structure in the memory that facilitates the discarding of the processor 66 for fast reading. For example, the configured discard rule adopts the method in the above second form, such as:

/trap/1/exclude/oid=.1.3.6.1.2.1.11.2

/trap/1/exclude/value=2_.1.3.6.1.2.1.2.2.1.1_^[0-9]*$

In this embodiment, the first alarm discarding rule is configured, indicating that the Trap OID is 1.1.3.6.1.2.1.11.2, and the key of the second attribute in the attribute area is .1.3.6.1.2.1.2.2.1.1. And the trap whose value matches the regular expression ^[0-9]*$ will be discarded.

Step 2. After the network management system receives the trap on the alarm receiving port, the trap parsing processor 64 performs the original protocol layer structure parsing on the trap.

Step 3: The parsed Trap structure enters the discarding processor 66, where the TrapOID and the attribute field are compared with the pre-configured rules, and the alarm is discarded according to the comparison structure, or sent to the reporting transmitter 68.

The detailed judgment process is as shown in FIG. 7. FIG. 7 is a flow chart of determining the discarding of a specific Trap message by using the Trap OID and the attribute. FIG. 7 includes the following steps: S1 parses the Trap OID in the packet, and determines in D1 that if the corresponding Trap OID rule is not found in the rule, the process proceeds to S4 through S4. If the Trap OID rule is configured, the attribute field in the S2 parsing message extracts the attribute OID and value, and judges in D2. If the matching rule excludes S3, it does not send to step 4, otherwise S4 sends it to step 4.

Step 4. The reporting transmitter 68 sends the alarm information to each upper module that needs to receive an alarm for service processing.

Embodiment 3

Use the Trap OID and attribute exception to specify the process of discarding specific Trap packets:

Step 1. After the system is started, the discarding rule parser parses the predefined alarm discarding rule, and generates a memory structure in the memory that facilitates discarding the processor 66 for fast reading. For example, the configured discard rule adopts the above form three, such as:

/trap/1/exclude/oid=.1.3.6.1.2.1.11.2

/trap/1/exception/value=2_.1.3.6.1.2.1.2.2.1.1_^[0-9]*$

The first alarm discarding rule is configured in the third embodiment to indicate that the Trap OID is 1.1.3.6.1.2.1.11.2. Will be discarded, but with one exception, if the key of the second attribute in the attribute area is .1.3.6.1.2.1.2.2.1.1, and the value matches the regular expression ^[0-9]*$, the Trap will not Affected by this rule, continue to report to the upper layer business module.

The detailed judgment process is as shown in FIG. 8. FIG. 8 is a flowchart of determining the discarding of a specific Trap message by using the Trap OID and the attribute exception. The process includes the following steps: S1 parses the TrapOID in the Trap message, and determines in D1 that if the corresponding TrapOID rule is not found in the discarding rule, the process proceeds to S4 through S4. If the TrapID rule is configured, the attribute field in the S2 parsing message extracts the attribute OID and value, and judges in D2 that if there is no matching rule exception, S3 is discarded, and step 4 is not sent, otherwise S4 is sent to step 4.

The alarm discarding or filtering method in the related art is based on a specific alarm generating source, or the trap is compared and discarded by the user after the service is parsed and mapped. Compared with the solution in the related art, the solution in the embodiment of the present invention is based on the data of the Trap packet, and does not enter the discarding before the service processing layer, and does not distinguish the source of the alarm, and the alarm sent by the device on the entire network takes effect. High efficiency and low system overhead. Based on the discarding rule configured by the Trap OID, the action taken by the attribute in the Trap packet is further specified to implement fine-grained alarm discarding rule configuration. The Trap-based device service automatic opening network management system is usually only concerned with a small number of Trap types. The solution in the embodiment of the present invention is of great significance for such a system.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the modules are located in multiple In the processor.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

S1, receiving a trap message for identifying device alarm information;

S2, the Trap packet is matched with the discarding rule for discarding the Trap packet.

S3: The Trap message is processed according to the matching result.

Optionally, in this embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM). A variety of media that can store program code, such as a hard disk, a disk, or an optical disk.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, the method and the device for processing a trap Trap packet provided by the embodiment of the present invention have the following beneficial effects: the problem that the useful Trap packet is discarded by the useless Trap packet in the related art is solved. As a result, the problem of high discard rate of Trap packets is high, and the effect of reducing the discard rate of Trap packets is achieved.

Claims

A trap Trap packet processing method includes:

Receiving a trap message for identifying device alarm information;

Match the Trap packet with the discard rule for discarding the Trap packet.

The Trap packet is processed according to the matching result.
The method of claim 1, wherein the discarding rule comprises at least one of the following:

Discard the trap message of the pre-configured Trap object identifier OID.

And discarding the trap message whose identifier is the first predetermined attribute value, and the packet attribute is the first predetermined attribute value.

A Trap packet whose pre-configured Trap object identifier OID is identified and whose packet attribute is not the second predetermined attribute value is discarded.
The method according to claim 1, wherein before receiving the Trap message for identifying device alarm information, the method further includes:

Parsing the discarding rule;

A discard rule having a predetermined memory structure is generated according to the parsed discard rule.
The method of claim 3, wherein matching the Trap message with a discarding rule for discarding a Trap message includes:

Performing original protocol layer structure parsing on the Trap packet;

Matching the parsed Trap message with the discarding rule with a predetermined memory structure.
The method according to any one of claims 1 to 4, wherein processing the Trap message according to the matching result comprises:

When the Trap packet matches the discarding rule, the Trap packet is discarded; and/or,

When the Trap packet does not match the discarding rule, the Trap packet is mapped to the alarm information, and the alarm information is sent to an upper layer module for processing the alarm information.
A trap trap processing device includes:

a receiving module, configured to receive a trap message for identifying device alarm information;

The matching module is configured to match the Trap packet with a discarding rule for discarding Trap packets.

The processing module is configured to process the Trap message according to the matching result.
The apparatus of claim 6, wherein the discarding rule comprises at least one of the following:

Discard the trap message of the pre-configured Trap object identifier OID.

And discarding the trap message whose identifier is the first predetermined attribute value, and the packet attribute is the first predetermined attribute value.

A Trap packet whose pre-configured Trap object identifier OID is identified and whose packet attribute is not the second predetermined attribute value is discarded.
The apparatus of claim 6 further comprising:

a parsing module configured to parse the discarding rule;

The generating module is configured to generate a discarding rule with a predetermined memory structure according to the parsed discarding rule.
The apparatus of claim 8 wherein said matching module comprises:

The parsing unit is configured to perform original protocol layer structure parsing on the Trap packet;

The matching unit is configured to match the parsed Trap message with the discarding rule with a predetermined memory structure.
The apparatus according to any one of claims 6 to 9, wherein the processing module comprises:

The discarding unit is configured to discard the Trap packet when the Trap packet matches the discarding rule; and/or,

The mapping unit is configured to: when the Trap packet does not match the discarding rule, the Trap packet is mapped to the alarm information; and the sending unit is configured to send the alarm information to the alarm information. The upper module for processing.