WO2022057265A1 - 模拟客户串联部署环境的测试方法和装置 - Google Patents

模拟客户串联部署环境的测试方法和装置 Download PDF

Info

Publication number
WO2022057265A1
WO2022057265A1 PCT/CN2021/090407 CN2021090407W WO2022057265A1 WO 2022057265 A1 WO2022057265 A1 WO 2022057265A1 CN 2021090407 W CN2021090407 W CN 2021090407W WO 2022057265 A1 WO2022057265 A1 WO 2022057265A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
session
application layer
protected host
test
Prior art date
Application number
PCT/CN2021/090407
Other languages
English (en)
French (fr)
Inventor
邵宛岩
范渊
刘博�
Original Assignee
杭州安恒信息技术股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 杭州安恒信息技术股份有限公司 filed Critical 杭州安恒信息技术股份有限公司
Priority to US18/025,874 priority Critical patent/US11956128B2/en
Publication of WO2022057265A1 publication Critical patent/WO2022057265A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0876—Network utilisation, e.g. volume of load or congestion level
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/14—Network analysis or design
    • H04L41/145—Network analysis or design involving simulating, designing, planning or modelling of a network
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/50—Testing arrangements
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1095—Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/22—Parsing or analysis of headers

Definitions

  • the present application relates to the field of Internet technologies, and in particular, to a test method, device, electronic device and storage medium for simulating a customer serial deployment environment.
  • Network security testing has always been the focus of information security concerns. Establishing a sound network security test includes a complete set of processes for the development, development, testing and deployment of security functions.
  • bypass mode generally refers to monitoring through the "port mirroring" function of network devices such as switches. In this mode, the monitoring device only needs to be connected to the designated mirroring port of the switch, so it is vividly called “bypass monitoring”;
  • the in-line mode is generally monitored through a gateway or a bridge mode. Since the monitoring device acts as a gateway or a bridge in series in the network, it is called “in-line monitoring mode".
  • series mode due to the various on-site environments of customers, it is difficult to completely simulate the same test environment. Therefore, during the on-site testing of customers, if the test is incomplete, the product environment is not suitable for use, which will lead to poor equipment operation stability.
  • Embodiments of the present application provide a test method, device, electronic device, and storage medium for simulating a customer serial deployment environment, so as to at least solve the problem of poor applicability of the test environment in the related art.
  • an embodiment of the present application provides a test method for simulating a customer serial deployment environment, including: acquiring traffic data of an on-site protected host; acquiring a session between the on-site protected host and a server based on the traffic data data, and extract the application layer data in the session data; send and receive the application layer data in the local test environment to perform a simulated test.
  • the acquiring the traffic data of the on-site protected host includes: configuring the IP address and port of the protected host, and acquiring the traffic data of the protected host by mirroring.
  • the step of acquiring the session data between the on-site protected host and the server based on the traffic data, and extracting the application layer data in the session data includes: analyzing the traffic data Perform screening to obtain the session data packet between the on-site protected host and the server; determine at least one complete TCP session from the session data packet; extract the application layer data in the TCP session.
  • a complete TCP session has a three-way handshake at the beginning of the session and a four-way handshake at the end of the session.
  • the step of filtering the traffic data to obtain the session data packets between the on-site protected host and the server includes: filtering the traffic data by rules using wireshark to obtain the data packets. Describe the session packets between the on-site protected host and the server.
  • the step of extracting the application layer data in the TCP session includes: searching for the application layer data at the network layer according to the communication protocol format between the on-site protected host and the server Data sender IP, data sender port, data receiver IP and data receiver port; obtain the TCP according to the found data sender IP, data sender port, data receiver IP and data receiver port The data content of the session at the application layer; the distribution order of the data content of the TCP session at the application layer is marked to obtain the application layer data.
  • the step of performing a simulated test by sending and receiving data in the local test environment includes: according to the distribution order, sequentially distributing the application layer data to clients in the local test environment terminal and server; when the data sender port in the local test environment is consistent with the port of the protected host, distribute the application layer data to the server for simulation; in the local test environment When the port of the data receiver is consistent with the port of the protected host, the application layer data is distributed to the client for simulation.
  • an embodiment of the present application provides a test device for simulating a customer serial deployment environment, including: an acquisition module, a data extraction module, and a simulated test module; the acquisition module is used to acquire traffic data of on-site protected hosts; The data extraction module is used for acquiring session data between the on-site protected host and the server based on the traffic data, and extracting application layer data in the session data; the simulation test module is used for local The application layer data is sent and received in the test environment, and a simulation test is performed.
  • an embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable on the processor, when the processor executes the computer program
  • a test method for simulating a customer serial deployment environment as described in the first aspect above is implemented.
  • an embodiment of the present application provides a storage medium on which a computer program is stored, and when the program is executed by a processor, implements a test method for simulating a customer serial deployment environment as described in the first aspect above.
  • a test method device, electronic device, and storage medium for simulating a customer serial deployment environment obtain the traffic data of the on-site protected host; and obtain the on-site protected host based on the traffic data.
  • the session data between the server and the server is extracted, and the application layer data in the session data is extracted, and the application layer data is sent and received in the local test environment to perform a simulation test.
  • the problem of poor applicability of the network test environment is solved, and the effect of rapid deployment of the network environment is achieved.
  • FIG. 1 is a block diagram of a hardware structure of an application terminal for simulating a test method of a customer serial deployment environment according to an embodiment of the present application.
  • FIG. 2 is a flowchart of a testing method for simulating a customer serial deployment environment according to an embodiment of the present application.
  • FIG. 3 is a flowchart of a simulation test in a test method for simulating a customer serial deployment environment according to an embodiment of the present application.
  • FIG. 4 is a structural block diagram of a test apparatus for simulating a customer serial deployment environment according to an embodiment of the present application.
  • FIG. 5 is a structural block diagram of a computer-readable storage medium according to an embodiment of the present application.
  • Words like "connected,” “connected,” “coupled,” and the like referred to in this application are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect.
  • the “plurality” referred to in this application means greater than or equal to two.
  • “And/or” describes the association relationship between associated objects, indicating that there can be three kinds of relationships. For example, “A and/or B” can mean that A exists alone, A and B exist at the same time, and B exists alone.
  • the terms “first”, “second”, “third”, etc. involved in this application are only to distinguish similar objects, and do not represent a specific order for the objects.
  • FIG. 1 is a hardware structural block diagram of an application terminal for simulating a test method of a customer serial deployment environment according to an embodiment of the present application.
  • the terminal 10 may include one or more (only one is shown in FIG. 1 ) processors 102 (the processors 102 may include but are not limited to processing devices such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data, optionally, the above-mentioned terminal 10 may further include a transmission device 106 and an input/output device 108 for communication functions.
  • FIG. 1 is only for illustration, and does not limit the structure of the above-mentioned terminal 10 .
  • the terminal 10 may also include more or fewer components than those shown in FIG. 1 , or have a different configuration than that shown in FIG. 1 .
  • the memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as a computer program corresponding to a test method for simulating a customer serial deployment environment in the embodiment of the present application, and the processor 102 stores it in the memory 104 by running
  • the computer program is used to execute various functional applications and data processing, that is, to realize the above-mentioned method.
  • Memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, memory 104 may further include memory located remotely from processor 102, which may be connected to terminal 10 through a network. Examples of such networks include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
  • Transmission device 106 is used to receive or transmit data via a network.
  • the specific example of the above-mentioned network may include a wireless network provided by the communication provider of the terminal 10 .
  • the transmission device 106 includes a network adapter (Network Interface Controller, NIC for short), which can be connected to other network devices through a base station so as to communicate with the Internet.
  • the transmission device 106 may be a radio frequency (Radio Frequency, RF for short) module, which is used to communicate with the Internet in a wireless manner.
  • RF Radio Frequency
  • FIG. 2 is a flowchart of a testing method for simulating a customer serial deployment environment according to an embodiment of the present application. As shown in FIG. 2 , the process includes the following steps:
  • Step S201 obtain the traffic data of the on-site protected host
  • the above-mentioned traffic data refers to several data packets transmitted by the protected host on site to the server, mainly including two parts: message and data.
  • the local server receives several data packets of the on-site protected host in a mirroring manner.
  • Step S202 Acquire session data between the on-site protected host and the server based on the traffic data, and extract application layer data in the session data;
  • the session data refers to the TCP session data, and a complete TCP session data includes the three-way handshake at the beginning of the session and the four-way handshake at the end of the session.
  • the data packets are parsed to obtain the complete TCP session data once, and then the data of the application layer in each session is parsed by parsing again.
  • Step S203 Send and receive the application layer data in the local test environment, and perform a simulation test.
  • the application layer data includes the IP of the data sender, the port of the data sender, the IP of the data receiver, the port of the data receiver, the data content, and the like.
  • establishing a local test environment based on the extracted application layer data is obtained by obtaining a complete TCP session, and through the source IP address, source port, destination IP address and destination port parsed by the TCP session, it is known that the sending According to these configurations, a local test environment can be established, the client and server can be simulated locally, and the simulation test can be performed by sending the request data from the client to the server; The client sends it to the client for simulation testing.
  • the traffic data is actually sent from the database server to the client.
  • the port of the database server is used as the source port.
  • the traffic data is actually sent from the client to the database server.
  • the client's port is used as the source port.
  • the protective equipment in the environment of the client site, is mainly divided into two deployment modes: bypass mode and series mode.
  • bypass mode due to the complex environment of the protected site, it is very difficult to simulate the test environment of the client site on the server side. Therefore, when testing the client site, if the test is incomplete, the test will fail.
  • the environment of the customer site can be quickly simulated on the server side, and a local test can be established on the server side, which solves the problem of poor applicability of the network test environment and realizes the effect of rapidly deploying the network environment.
  • acquiring the traffic data of the on-site protected host includes: configuring the IP address and port of the protected host, and acquiring the traffic data of the protected host by mirroring.
  • the traffic data obtained by the mirroring method can directly obtain the traffic data without adding other network devices, which is very convenient and fast. At the same time, when there is a problem with the client that obtains the data, it will not affect the server.
  • the step of acquiring the session data between the on-site protected host and the server based on the traffic data, and extracting the application layer data in the session data includes: filtering the traffic data to obtain the A session data packet between the on-site protected host and the server; at least one complete TCP session is determined from the session data packet; the application layer data in the TCP session is extracted.
  • the flow data grab a data packet, determine a complete TCP session from the data packet, extract the application layer data from the TCP session, and the application layer data includes the source IP address, source port, Destination IP address and destination port, etc.
  • the TCP session is at the transport layer, which is a reliable, connection-oriented sending service, and data is transmitted in segments.
  • Connection orientation means that a session is established before the host exchanges data.
  • a complete TCP session has a three-way handshake at the beginning of the session and a four-way wave at the end of the session.
  • a complete TCP session can be used as a customer site environment, and the local test environment can be deployed more efficiently.
  • the step of screening the traffic data to obtain the session data packet between the on-site protected host and the server includes:
  • the traffic data is filtered by rules using wireshark to obtain the session data packets between the protected host and the server on the site.
  • the wireshark packet capture tool is used to capture data packets, which can be filtered by MAC address, IP address, source IP address, destination IP address, port filtering, and protocol filtering.
  • the required session data packets can be quickly obtained by filtering, and the deployment environment can be determined through the session data packets.
  • the step of extracting the application layer data in the TCP session includes: searching for the data sender IP of the application layer at the network layer according to the communication protocol format between the on-site protected host and the server , data sender port, data receiver IP and data receiver port; according to the found data sender IP, data sender port, data receiver IP and data receiver port, obtain the data of the TCP session at the application layer Content; mark the distribution order of the data content of the TCP session in the application layer, and obtain the application layer data.
  • marking the distribution order of the data content of the TCP session at the application layer is to record the receiving order and sending order of the session data, which can simulate the receiving order and sending order of the client site more accurately, and achieve the rapid deployment of the network environment. Effect.
  • This embodiment also provides a simulation test in a test method for simulating a customer serial deployment environment.
  • 3 is a flowchart of a simulated test in a test method for simulating a customer serial deployment environment according to an embodiment of the present application. As shown in FIG. 3 , in the local test environment, data is sent and received, and the steps of performing the simulated test include:
  • Step S301 according to the distribution order, sequentially distribute the application layer data to the client and the server in the local test environment;
  • Step S302 When the data sender port in the local test environment is consistent with the port of the protected host, distribute the application layer data to the server for simulation; the data receiver port in the local test environment is the same as the data receiver port in the local test environment. When the ports of the protected host are consistent, the application layer data is distributed to the client for simulation.
  • the request data must be sent from the client to the server, and the returned data must be sent from the server to the client.
  • the simulation test it should be clearly distinguished whether the data should be sent on the client side or the server side.
  • the protective equipment in the environment of the client site, is mainly divided into two deployment modes: bypass mode and series mode.
  • bypass mode due to the complex environment of the protected site, it is very difficult to simulate the test environment of the client site on the server side. Therefore, when testing the client site, if the test is incomplete, the test will fail.
  • FIG. 4 is a structural block diagram of a test device for simulating a customer serial deployment environment according to an embodiment of the present application, and the device is used to implement the above embodiment and optional Embodiments, which have already been described, will not be repeated.
  • the terms “module,” “unit,” “subunit,” etc. may be a combination of software and/or hardware that implements a predetermined function.
  • the apparatus described in the following embodiments is preferably implemented in software, implementations in hardware, or a combination of software and hardware, are also possible and contemplated.
  • the test device for simulating the serial deployment environment of customers includes: an acquisition module 40, a data extraction module 42 and a simulated test module 44;
  • the acquisition module 40 is used to acquire the traffic data of the on-site protected host
  • the above-mentioned traffic data refers to several data packets transmitted by the protected host on site to the server, mainly including two parts: message and data.
  • the local server receives several data packets of the on-site protected host in a mirroring manner.
  • the data extraction module 42 obtains session data between the on-site protected host and the server based on the traffic data, and extracts application layer data in the session data;
  • the session data refers to the TCP session data, and a complete TCP session data includes the three-way handshake at the beginning of the session and the four-way handshake at the end of the session.
  • the data packets are parsed to obtain the complete TCP session data once, and then the data of the application layer in each session is parsed by parsing again.
  • the simulation test module 44 is used to send and receive the application layer data in the local test environment to perform a simulation test.
  • the application layer data includes a source IP address, a source port, a destination IP address, a destination port, and data content.
  • establishing a local test environment based on the extracted application layer data is obtained by obtaining a complete TCP session, and through the source IP address, source port, destination IP address and destination port parsed by the TCP session, it is known that the sending According to these configurations, a local test environment can be established, the client and server can be simulated locally, and the simulation test can be performed by sending the request data from the client to the server; The client sends it to the client for simulation testing.
  • the traffic data is actually sent from the database server to the client.
  • the port of the database server is used as the source port.
  • the traffic data is actually sent from the client to the database server.
  • the client's port is used as the source port.
  • each of the above modules may be functional modules or program modules, and may be implemented by software or hardware.
  • the above-mentioned modules may be located in the same processor; or the above-mentioned modules may also be located in different processors in any combination.
  • This embodiment also provides an electronic device, including a memory and a processor, where a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any of the above method embodiments.
  • a test system for simulating a customer serial deployment environment including: terminal equipment, transmission equipment and server equipment; wherein, the terminal equipment is connected to the server equipment through the transmission equipment; the terminal equipment is used to obtain the traffic data of the on-site protected host; the The server device is configured to obtain the session data between the on-site protected host and the server based on the traffic data, and extract the application layer data in the session data; establish a local test environment based on the extracted application layer data; Send and receive data in the test environment and conduct simulated tests.
  • the above-mentioned electronic device may further include a transmission device and an input-output device, wherein the transmission device is connected to the above-mentioned processor, and the input-output device is connected to the above-mentioned processor.
  • the above-mentioned processor may be configured to execute the following steps through a computer program:
  • Step S1 obtain the traffic data of the on-site protected host
  • Step S2 obtaining session data between the on-site protected host and the server based on the traffic data, and extracting application layer data in the session data;
  • Step S3 Send and receive the application layer data in the local test environment to perform a simulation test.
  • the embodiment of the present application may provide a storage medium for implementation.
  • a computer program is stored on the storage medium, and when the computer program is executed by the processor, any one of the above-mentioned testing methods for simulating a customer serial deployment environment is implemented.
  • FIG. 5 is only a block diagram of a partial structure related to the solution of the present application, and does not constitute a limitation on the computer equipment to which the solution of the present application is applied. Include more or fewer components than shown in the figures, or combine certain components, or have a different arrangement of components.
  • a computer-readable storage medium is provided, and a computer program is stored thereon.
  • the computer program is executed by a processor, the steps in the test method for simulating a customer serial deployment environment provided by the above-mentioned embodiments are implemented. .
  • Nonvolatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory.
  • Volatile memory may include random access memory (RAM) or external cache memory.
  • RAM is available in various forms such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Road (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM) and memory bus dynamic RAM (RDRAM) and so on.
  • SRAM static RAM
  • DRAM dynamic RAM
  • SDRAM synchronous DRAM
  • DDRSDRAM double data rate SDRAM
  • ESDRAM enhanced SDRAM
  • SLDRAM synchronous chain Road (Synchlink) DRAM
  • SLDRAM synchronous chain Road (Synchlink) DRAM
  • Rambus direct RAM
  • DRAM direct memory bus dynamic RAM
  • RDRAM memory bus dynamic RAM

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Environmental & Geological Engineering (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

模拟客户串联部署环境的测试方法、装置、电子装置和存储介质，其中，该模拟客户串联部署环境的测试方法包括: 获取现场受保护主机的流量数据; 基于该流量数据获取该现场受保护主机与服务器之间的会话数据，并提取该会话数据中的应用层数据; 本地测试环境中收发该应用层数据，进行模拟测试。

Description

模拟客户串联部署环境的测试方法和装置
相关申请
本申请要求2020年9月16日申请的，申请号为202010972362.2，发明名称为“一种模拟客户串联部署环境的测试方法和装置”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及互联网技术领域，特别是涉及模拟客户串联部署环境的测试方法、装置、电子装置和存储介质。
背景技术
网络安全测试一直是信息安全关注的焦点。建立完善的网络安全测试包括对安全功能的研制、开发、测试和部署一整套流程。
在用户的使用环境中，安全防护设备的部署主要分为旁路和串联两种部署模式。旁路模式一般是指通过交换机等网络设备的“端口镜像”功能来实现监控，在此模式下，监控设备只需要连接到交换机的指定镜像端口，所以形象地称之为“旁路监控”；而串联模式一般是通过网关或者网桥的模式来进行监控，由于监控设备作为网关或者网桥串联在网络中，所以称之为“串联监控模式”。在串联模式中，由于客户现场环境各式各样，很难完全模拟出相同的测试环境，因此在对客户现场测试时，如果测试不完整，产品环境适用性差，会导致设备运行稳定性差。
目前针对相关技术中，网络测试环境适用性差的问题，尚未提出有效的解决方案。
发明内容
本申请实施例提供了一种模拟客户串联部署环境的测试方法、装置、电子装置和存储介质，以至少解决相关技术中测试环境适用性差的问题。
第一方面，本申请实施例提供了一种模拟客户串联部署环境的测试方法，包括：获取现场受保护主机的流量数据；基于所述流量数据获取所述现场受保护主机与服务器之间的会话数据，并提取所述会话数据中的应用层数据；在本地测试环境中收发所述应用层数据，进行模拟测试。
在其中一些实施例中，所述获取现场受保护主机的流量数据包括：配置所述受保护主机的IP地址和端口，通过镜像方式获取所述受保护主机的所述流量数据。
在其中一些实施例中，所述基于所述流量数据获取所述现场受保护主机与服务器之间的会话数据，并提取所述会话数据中的应用层数据的步骤，包括：对所述流量数据进行筛选，得到所述现场受保护主机与服务器之间的会话数据包；从所述会话数据包中确定至少一个完整的TCP会话；提取所述TCP会话中的所述应用层数据。
在其中一些实施例中，一个完整的所述TCP会话具备会话开始的三次握手和会话结束的四次挥手。
在其中一些实施例中，所述对所述流量数据进行筛选，得到所述现场受保护主机与服务器之间的会话数据包的步骤，包括：对所述流量数据采用wireshark进行规则过滤，得到所述现场受保护主机与服务器之间的会话数据包。
在其中一些实施例中，在所述提取所述TCP会话中的所述应用层数据的步骤，包括：根据所述现场受保护主机与服务器之间的通信协议格式，在网络层查找应用层的数据发送方IP、数据发送方端口、数据接收方IP以及数据接收方端口；根据查找到的所述数据发送方IP、数据发送方端口、数据接收方IP以及数据接收方端口，获取所述TCP会话在应用层的数据内容；标注所述TCP会话在应用层的数据内容的分发秩序，得到所述应用层数据。
在其中一些实施例中，所述在所述本地测试环境中收发数据，进行模拟测试的步骤，包括：根据所述分发秩序，将所述应用层数据依次分发给所述本地测试环境中的客户端和服务端；在所述本地测试环境中的数据发送方端口与所述受保护主机的端口一致时，将所述应用层数据分发至所述服务端进行模拟；在所述本地测试环境中的数据接收方端口与所述受保护主机的端口一致时，将所述应用层数据分发至所述客户端进行模拟。
第二方面，本申请实施例提供了一种模拟客户串联部署环境的测试装置，包括：获取模块、提取数据模块以及模拟测试模块；所述获取模块，用于获取现场受保护主机的流量数据；所述提取数据模块，用于基于所述流量数据获取所述现场受保护主机与服务器之间的会话数据，并提取所述会话数据中的应用层数据；所述模拟测试模块，用于在本地测试环境中收发所述应用层数据，进行模拟测试。
第三方面，本申请实施例提供了一种电子装置，包括存储器、处理器以及存储在所述存储器上并可在所述处理器上运行的计算机程序，所述处理器执行所述计算机程序时实现如上述第一方面所述的一种模拟客户串联部署环境的测试方法。
第四方面，本申请实施例提供了一种存储介质，其上存储有计算机程序，该程序被处 理器执行时实现如上述第一方面所述的一种模拟客户串联部署环境的测试方法。
相比于相关技术，本申请实施例提供的一种模拟客户串联部署环境的测试方法装置、电子装置和存储介质，通过获取现场受保护主机的流量数据；基于该流量数据获取该现场受保护主机与服务器之间的会话数据，并提取该会话数据中的应用层数据在本地测试环境中收发该应用层数据，进行模拟测试。解决了网络测试环境适用性差的问题，实现了快速部署网络环境的效果。
本申请的一个或多个实施例的细节在以下附图和描述中提出，以使本申请的其他特征、目的和优点更加简明易懂。
附图说明
此处所说明的附图用来提供对本申请的进一步理解，构成本申请的一部分，本申请的示意性实施例及其说明用于解释本申请，并不构成对本申请的不当限定。在附图中：
图1是本申请实施例的一种模拟客户串联部署环境的测试方法的应用终端的硬件结构框图。
图2是本申请实施例的一种模拟客户串联部署环境的测试方法的流程图。
图3是本申请实施例的一种模拟客户串联部署环境的测试方法中的模拟测试的流程图。
图4是本申请实施例的一种模拟客户串联部署环境的测试装置的结构框图。
图5是本申请实施例的一种计算机可读存储介质的结构框图。
具体实施方式
为了使本申请的目的、技术方案及优点更加清楚明白，以下结合附图及实施例，对本申请进行描述和说明。应当理解，此处所描述的具体实施例仅仅用以解释本申请，并不用于限定本申请。基于本申请提供的实施例，本领域普通技术人员在没有作出创造性劳动的前提下所获得的所有其他实施例，都属于本申请保护的范围。此外，还可以理解的是，虽然这种开发过程中所作出的努力可能是复杂并且冗长的，然而对于与本申请公开的内容相关的本领域的普通技术人员而言，在本申请揭露的技术内容的基础上进行的一些设计，制造或者生产等变更只是常规的技术手段，不应当理解为本申请公开的内容不充分。
在本申请中提及“实施例”意味着，结合实施例描述的特定特征、结构或特性可以包含在本申请的至少一个实施例中。在说明书中的各个位置出现该短语并不一定均是指相同的实施例，也不是与其它实施例互斥的独立的或备选的实施例。本领域普通技术人员显式地和隐式地理解的是，本申请所描述的实施例在不冲突的情况下，可以与其它实施例相结 合。
除非另作定义，本申请所涉及的技术术语或者科学术语应当为本申请所属技术领域内具有一般技能的人士所理解的通常意义。本申请所涉及的“一”、“一个”、“一种”、“该”等类似词语并不表示数量限制，可表示单数或复数。本申请所涉及的术语“包括”、“包含”、“具有”以及它们任何变形，意图在于覆盖不排他的包含；例如包含了一系列步骤或模块(单元)的过程、方法、系统、产品或设备没有限定于已列出的步骤或单元，而是可以还包括没有列出的步骤或单元，或可以还包括对于这些过程、方法、产品或设备固有的其它步骤或单元。本申请所涉及的“连接”、“相连”、“耦接”等类似的词语并非限定于物理的或者机械的连接，而是可以包括电气的连接，不管是直接的还是间接的。本申请所涉及的“多个”是指大于或者等于两个。“和/或”描述关联对象的关联关系，表示可以存在三种关系，例如，“A和/或B”可以表示：单独存在A，同时存在A和B，单独存在B这三种情况。本申请所涉及的术语“第一”、“第二”、“第三”等仅仅是区别类似的对象，不代表针对对象的特定排序。
本实施例提供的方法实施例可以在终端、计算机或者类似的运算装置中执行。以运行在终端上为例，图1是本申请实施例的一种模拟客户串联部署环境的测试方法的应用终端的硬件结构框图。如图1所示，终端10可以包括一个或多个(图1中仅示出一个)处理器102(处理器102可以包括但不限于微处理器MCU或可编程逻辑器件FPGA等的处理装置)和用于存储数据的存储器104，可选地，上述终端10还可以包括用于通信功能的传输设备106以及输入输出设备108。本领域普通技术人员可以理解，图1所示的结构仅为示意，其并不对上述终端10的结构造成限定。例如，终端10还可包括比图1中所示更多或者更少的组件，或者具有与图1所示不同的配置。
存储器104可用于存储计算机程序，例如，应用软件的软件程序以及模块，如本申请实施例中的一种模拟客户串联部署环境的测试方法对应的计算机程序，处理器102通过运行存储在存储器104内的计算机程序，从而执行各种功能应用以及数据处理，即实现上述的方法。存储器104可包括高速随机存储器，还可包括非易失性存储器，如一个或者多个磁性存储装置、闪存、或者其他非易失性固态存储器。在一些实例中，存储器104可进一步包括相对于处理器102远程设置的存储器，这些远程存储器可以通过网络连接至终端10。上述网络的实例包括但不限于互联网、企业内部网、局域网、移动通信网及其组合。
传输设备106用于经由一个网络接收或者发送数据。上述的网络具体实例可包括终端10的通信供应商提供的无线网络。在一个实例中，传输设备106包括一个网络适配器(Network Interface Controller，简称为NIC)，其可通过基站与其他网络设备相连从而可与 互联网进行通讯。在一个实例中，传输设备106可以为射频(Radio Frequency，简称为RF)模块，其用于通过无线方式与互联网进行通讯。
本实施例提供了一种模拟客户串联部署环境的测试方法，图2是本申请实施例的一种模拟客户串联部署环境的测试方法的流程图，如图2所示，该流程包括如下步骤：
步骤S201：获取现场受保护主机的流量数据；
其中，上述的流量数据是指在现场受保护主机向服务器传输的若干个数据包，主要包含报文和数据两个部分。
具体地，本地服务器通过与现场受保护主机建立连接，通过镜像的方式接收到现场受保护主机的若干个数据包。
步骤S202：基于该流量数据获取该现场受保护主机与服务器之间的会话数据，并提取该会话数据中的应用层数据；
其中，会话数据是指TCP会话数据，一个完整的TCP会话数据包含会话开始的三次握手和会话结束的四次挥手。
具体地，通过镜像方式得到数据包之后，对数据包进行解析，解析出一次完整的TCP会话数据，再进行一次解析，解析出每一次会话中的应用层数据。
步骤S203：在本地测试环境中收发该应用层数据，进行模拟测试。
其中，应用层数据包含数据发送方IP、数据发送方端口、数据接收方IP以及数据接收方端口以及数据内容等。
具体地，基于提取到的应用层数据，建立本地测试环境，是通过获取到一次完整的TCP会话，通过该TCP会话解析到的源IP地址、源端口、目的IP地址和目的端口，得知发送方和接收方的配置，根据这些配置，就可以建立本地的测试环境，在本地模拟出客户端和服务端，通过将请求数据从客户端发送至服务端，进行模拟测试；将返回数据从服务端发送至客户端，进行模拟测试。
需要更进一步说明的是：如果是返回数据的话，流量数据实际是从数据库服务器发送给客户端的。此时，数据库服务器的端口是作为源端口。
如果是请求数据的话，流量数据实际是从客户端发送给数据库服务器的。此时，客户端的端口是作为源端口。
在相关技术中，在客户端现场的环境中，防护设备主要分为旁路模式与串联模式两种部署模式。在串联模式中，由于受保护现场的环境较为复杂，所以要在服务器端模拟出客户端现场的测试环境十分困难，因此在对客户现场测试时，如果测试不完整，会导致测试失败。
通过上述步骤S201至S203，可以快速地在服务器端模拟出客户现场的环境，在服务器端建立本地测试，解决了网络测试环境适用性差的问题，实现了快速部署网络环境的效果。
在其中一些实施例中，获取现场受保护主机的流量数据包括：配置该受保护主机的IP地址和端口，通过镜像方式获取该受保护主机的该流量数据。
其中，通过镜像的方法获取流量数据能够直接获取到流量数据，不需要添加其他网络设备，十分便捷和快速。同时，当获取数据的客户端出现问题时，对服务器端也不会造成影响。
在其中一些实施例中，该基于该流量数据获取该现场受保护主机与服务器之间的会话数据，并提取该会话数据中的应用层数据的步骤，包括：对该流量数据进行筛选，得到该现场受保护主机与服务器之间的会话数据包；从该会话数据包中确定至少一个完整的TCP会话；提取该TCP会话中的该应用层数据。
具体地，在该流量数据中，抓取一个数据包，从该数据包中确定一个完整的TCP会话，在该TCP会话中提取该应用层数据，该应用层数据包括源IP地址、源端口、目的IP地址和目的端口等。
其中，在开放式系统互联通信参考模型中，TCP会话在传输层，是一个可靠的，连接定向的发送服务，数据分段传送。连接定向意味着在主机交换数据之前建立会话，通过将TCP会话进行解析，可以得到应用层数据，通过应用层数据的内容可以得知客户端具体的配置。从而增加模拟客户端现场环境的准确度。
在其中一些实施例中，一个完整的该TCP会话具备会话开始的三次握手和会话结束的四次挥手。
其中，通过一个完整的TCP会话可以作为一种客户现场的环境，能够更加高效的部署本地测试的环境。
在其中一些实施例中，该对该流量数据进行筛选，得到该现场受保护主机与服务器之间的会话数据包的步骤，包括：
对该流量数据采用wireshark进行规则过滤，得到该现场受保护主机与服务器之间的会话数据包。
其中，采用wireshark抓包工具抓取数据包，可以根据MAC地址筛选、IP地址筛选、源IP地址筛选、目的IP地址筛选、端口过滤以及协议筛选等。通过筛选能够快速得到所需的会话数据包，通过会话数据包，确定部署的环境。
其中，只抓取符合条件的包，在Wireshark通过winpacp抓包时可以过滤掉不符合条 件的包，提高我们的模拟部署环境的效率。
在其中一些实施例中，在该提取该TCP会话中的该应用层数据的步骤，包括：根据该现场受保护主机与服务器之间的通信协议格式，在网络层查找应用层的数据发送方IP、数据发送方端口、数据接收方IP以及数据接收方端口；根据查找到的该数据发送方IP、数据发送方端口、数据接收方IP以及数据接收方端口，获取该TCP会话在应用层的数据内容；标注该TCP会话在应用层的数据内容的分发秩序，得到该应用层数据。
其中，标注该TCP会话在应用层数据内容的分发秩序，是通过记录会话数据的收取顺序和发送顺序，可以实现更加准确的模拟出客户端现场的收取顺序和发送顺序，达到快速部署出网络环境的效果。
本实施例还提供了一种模拟客户串联部署环境的测试方法中的模拟测试。图3是本申请实施例的一种模拟客户串联部署环境的测试方法中的模拟测试的流程图，如图3所示，在该本地测试环境中收发数据，进行模拟测试的步骤包括：
步骤S301：根据该分发秩序，将该应用层数据依次分发给该本地测试环境中的客户端和服务端；
步骤S302：在该本地测试环境中的数据发送方端口与该受保护主机的端口一致时，将该应用层数据分发至该服务端进行模拟；在该本地测试环境中的数据接收方端口与该受保护主机的端口一致时，将该应用层数据分发至该客户端进行模拟。
需要说明的是，需要确定该应用层数据的类型，属于请求数据还是返回数据，请求数据一定是从客户端发送至服务端，返回数据一定是从服务端发送至客户端。在模拟测试中，应该区分清楚，数据应该放在客户端还是服务端进行发送。通过上述步骤，能够更加准确地在本地模拟出现场的测试环境，提升模拟串联部署环境的准确性。
在相关技术中，在客户端现场的环境中，防护设备主要分为旁路模式与串联模式两种部署模式。在串联模式中，由于受保护现场的环境较为复杂，所以要在服务器端模拟出客户端现场的测试环境十分困难，因此在对客户现场测试时，如果测试不完整，会导致测试失败。
本实施例还提供了一种模拟客户串联部署环境的测试装置，图4是本申请实施例的一种模拟客户串联部署环境的测试装置的结构框图，该装置用于实现上述实施例及可选实施方式，已经进行过说明的不再赘述。如以下所使用的，术语“模块”、“单元”、“子单元”等可以实现预定功能的软件和/或硬件的组合。尽管以下实施例所描述的装置较佳地以软件来实现，但是硬件，或者软件和硬件的组合的实现也是可能并被构想的。
该模拟客户串联部署环境的测试装置包括：获取模块40、提取数据模块42以及模拟 测试模块44；
该获取模块40，用于获取现场受保护主机的流量数据；
其中，上述的流量数据是指在现场受保护主机向服务器传输的若干个数据包，主要包含报文和数据两个部分。
具体地，本地服务器通过与现场受保护主机建立连接，通过镜像的方式接收到现场受保护主机的若干个数据包。
该提取数据模块42，基于该流量数据获取该现场受保护主机与服务器之间的会话数据，并提取该会话数据中的应用层数据；
其中，会话数据是指TCP会话数据，一个完整的TCP会话数据包含会话开始的三次握手和会话结束的四次挥手。
具体地，通过镜像方式得到数据包之后，对数据包进行解析，解析出一次完整的TCP会话数据，再进行一次解析，解析出每一次会话中的应用层数据。
该模拟测试模块44，用于在本地测试环境中收发该应用层数据，进行模拟测试。
其中，应用层数据包含源IP地址、源端口、目的IP地址、目的端口以及数据内容等。
具体地，基于提取到的应用层数据，建立本地测试环境，是通过获取到一次完整的TCP会话，通过该TCP会话解析到的源IP地址、源端口、目的IP地址和目的端口，得知发送方和接收方的配置，根据这些配置，就可以建立本地的测试环境，在本地模拟出客户端和服务端，通过将请求数据从客户端发送至服务端，进行模拟测试；将返回数据从服务端发送至客户端，进行模拟测试。
需要更进一步说明的是：如果是返回数据的话，流量数据实际是从数据库服务器发送给客户端的。此时，数据库服务器的端口是作为源端口。
如果是请求数据的话，流量数据实际是从客户端发送给数据库服务器的。此时，客户端的端口是作为源端口。
通过上述模块的功能，解决了网络测试环境适用性差的问题，实现了快速部署网络环境的效果。
需要说明的是，上述各个模块可以是功能模块也可以是程序模块，既可以通过软件来实现，也可以通过硬件来实现。对于通过硬件来实现的模块而言，上述各个模块可以位于同一处理器中；或者上述各个模块还可以按照任意组合的形式分别位于不同的处理器中。
本实施例还提供了一种电子装置，包括存储器和处理器，该存储器中存储有计算机程序，该处理器被设置为运行计算机程序以执行上述任一项方法实施例中的步骤。一种模拟客户串联部署环境的测试系统，包括：终端设备、传输设备以及服务器设备；其中，该终 端设备通过传输设备连接服务器设备；该终端设备，用于获取现场受保护主机的流量数据；该服务器设备，用于基于该流量数据获取该现场受保护主机与服务器之间的会话数据，并提取该会话数据中的应用层数据；基于提取的该应用层数据，建立本地测试环境；在该本地测试环境中收发数据，进行模拟测试。
可选地，上述电子装置还可以包括传输设备以及输入输出设备，其中，该传输设备和上述处理器连接，该输入输出设备和上述处理器连接。
可选地，在本实施例中，上述处理器可以被设置为通过计算机程序执行以下步骤：
步骤S1：获取现场受保护主机的流量数据；
步骤S2：基于该流量数据获取该现场受保护主机与服务器之间的会话数据，并提取该会话数据中的应用层数据；
步骤S3：在本地测试环境中收发该应用层数据，进行模拟测试。
需要说明的是，本实施例中的具体示例可以参考上述实施例及可选实施方式中所描述的示例，本实施例在此不再赘述。
另外，结合上述实施例中的一种模拟客户串联部署环境的测试方法，本申请实施例可提供一种存储介质来实现。该存储介质上存储有计算机程序，该计算机程序被处理器执行时实现上述实施例中的任意一种模拟客户串联部署环境的测试方法。
本领域技术人员可以理解，图5中示出的结构，仅是与本申请方案相关的部分结构的框图，并不构成对本申请方案所应用于其上的计算机设备的限定，具体的计算机设备可以包括比图中所示更多或更少的部件，或者组合某些部件，或者具有不同的部件布置。
在一个实施例中，提供了一种计算机可读存储介质，其上存储有计算机程序，计算机程序被处理器执行时实现上述各实施例提供的一种模拟客户串联部署环境的测试方法中的步骤。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程，是可以通过计算机程序来指令相关的硬件来完成，该的计算机程序可存储于一非易失性计算机可读取存储介质中，该计算机程序在执行时，可包括如上述各方法的实施例的流程。其中，本申请所提供的各实施例中所使用的对存储器、存储、数据库或其它介质的任何引用，均可包括非易失性和/或易失性存储器。非易失性存储器可包括只读存储器(ROM)、可编程ROM(PROM)、电可编程ROM(EPROM)、电可擦除可编程ROM(EEPROM)或闪存。易失性存储器可包括随机存取存储器(RAM)或者外部高速缓冲存储器。作为说明而非局限，RAM以多种形式可得，诸如静态RAM(SRAM)、动态RAM(DRAM)、同步DRAM(SDRAM)、双数据率SDRAM(DDRSDRAM)、增强型SDRAM(ESDRAM)、同步链 路(Synchlink)DRAM(SLDRAM)、存储器总线(Rambus)直接RAM(RDRAM)、直接存储器总线动态RAM(DRDRAM)以及存储器总线动态RAM(RDRAM)等。
本领域的技术人员应该明白，以上所述实施例的各技术特征可以进行任意的组合，为使描述简洁，未对上述实施例中的各个技术特征所有可能的组合都进行描述，然而，只要这些技术特征的组合不存在矛盾，都应当认为是本说明书记载的范围。
以上所述实施例仅表达了本申请的几种实施方式，其描述较为具体和详细，但并不能因此而理解为对申请专利范围的限制。应当指出的是，对于本领域的普通技术人员来说，在不脱离本申请构思的前提下，还可以做出若干变形和改进，这些都属于本申请的保护范围。因此，本申请专利的保护范围应以所附权利要求为准。

Claims (10)

  1. 一种模拟客户串联部署环境的测试方法，其特征在于，所述方法包括：
    获取现场受保护主机的流量数据；
    基于所述流量数据获取所述现场受保护主机与服务器之间的会话数据，并提取所述会话数据中的应用层数据；
    在本地测试环境中收发所述应用层数据，进行模拟测试。
  2. 根据权利要求1所述的方法，其中，所述获取现场受保护主机的流量数据包括：
    配置所述受保护主机的IP地址和端口，通过镜像方式获取所述受保护主机的所述流量数据。
  3. 根据权利要求1或2所述的方法，其中，所述基于所述流量数据获取所述现场受保护主机与服务器之间的会话数据，并提取所述会话数据中的应用层数据的步骤，包括：
    对所述流量数据进行筛选，得到所述现场受保护主机与服务器之间的会话数据包；
    从所述会话数据包中确定至少一个完整的TCP会话；
    提取所述TCP会话中的所述应用层数据。
  4. 根据权利要求3所述的方法，其中，一个完整的所述TCP会话具备会话开始的三次握手和会话结束的四次挥手。
  5. 根据权利要求3所述的方法，其中，所述对所述流量数据进行筛选，得到所述现场受保护主机与服务器之间的会话数据包的步骤，包括：
    对所述流量数据采用wireshark进行规则过滤，得到所述现场受保护主机与服务器之间的会话数据包。
  6. 根据权利要求3所述的方法，其中，在所述提取所述TCP会话中的所述应用层数据的步骤，包括：
    根据所述现场受保护主机与服务器之间的通信协议格式，在网络层查找应用层的数据发送方IP、数据发送方端口、数据接收方IP以及数据接收方端口；
    根据查找到的所述数据发送方IP、数据发送方端口、数据接收方IP以及数据接收方端口，获取所述TCP会话在应用层的数据内容；
    标注所述TCP会话在应用层的数据内容的分发秩序，得到所述应用层数据。
  7. 根据权利要求6所述的方法，其中，所述在所述本地测试环境中收发数据，进行模拟测试的步骤，包括：
    根据所述分发秩序，将所述应用层数据依次分发给所述本地测试环境中的客户端和服务端；
    在所述本地测试环境中的数据发送方端口与所述受保护主机的端口一致时，将所述应用层数据分发至所述服务端进行模拟；
    在所述本地测试环境中的数据接收方端口与所述受保护主机的端口一致时，将所述应用层数据分发至所述客户端进行模拟。
  8. 一种模拟客户串联部署环境的测试装置，其特征在于，包括：获取模块、提取数据模块以及模拟测试模块；
    所述获取模块，用于获取现场受保护主机的流量数据；
    所述提取数据模块，用于基于所述流量数据获取所述现场受保护主机与服务器之间的会话数据，并提取所述会话数据中的应用层数据；
    所述模拟测试模块，用于在本地测试环境中收发所述应用层数据，进行模拟测试。
  9. 一种电子装置，包括存储器和处理器，其特征在于，所述存储器中存储有计算机程序，所述处理器被设置为运行所述计算机程序以执行权利要求1至7中任一项所述的模拟客户串联部署环境的测试方法。
  10. 一种存储介质，其特征在于，所述存储介质中存储有计算机程序，其中，所述计算机程序被设置为运行时执行权利要求1至7中任一项所述的模拟客户串联部署环境的测试方法。
PCT/CN2021/090407 2020-09-16 2021-04-28 模拟客户串联部署环境的测试方法和装置 WO2022057265A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US18/025,874 US11956128B2 (en) 2020-09-16 2021-04-28 Test method and device for simulating customer series deployment environment

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202010972362.2 2020-09-16
CN202010972362.2A CN112165408B (zh) 2020-09-16 2020-09-16 一种模拟客户串联部署环境的测试方法和装置

Publications (1)

Publication Number Publication Date
WO2022057265A1 true WO2022057265A1 (zh) 2022-03-24

Family

ID=73858871

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/090407 WO2022057265A1 (zh) 2020-09-16 2021-04-28 模拟客户串联部署环境的测试方法和装置

Country Status (3)

Country Link
US (1) US11956128B2 (zh)
CN (1) CN112165408B (zh)
WO (1) WO2022057265A1 (zh)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112165408B (zh) 2020-09-16 2022-07-22 杭州安恒信息技术股份有限公司 一种模拟客户串联部署环境的测试方法和装置
CN113641576B (zh) * 2021-08-09 2024-06-04 北京金山云网络技术有限公司 数据库的测试方法、装置及终端设备
CN116233905A (zh) * 2021-12-03 2023-06-06 腾讯科技（深圳）有限公司 无线局域网设备的测试方法、装置、介质及电子设备

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050286439A1 (en) * 2004-06-08 2005-12-29 Marc Capelle Method of testing a router, and a test system
CN101001183A (zh) * 2007-01-10 2007-07-18 网之易信息技术（北京）有限公司 一种网络应用软件的测试方法和系统
US20130064125A1 (en) * 2010-08-27 2013-03-14 Noah Gintis Flow statistics aggregation
CN106470136A (zh) * 2015-08-21 2017-03-01 腾讯科技（北京）有限公司 平台测试方法以及平台测试系统
CN107896160A (zh) * 2017-10-27 2018-04-10 中国科学技术大学 一种基于分布式系统的数据中心网络流量建模方法
CN112165408A (zh) * 2020-09-16 2021-01-01 杭州安恒信息技术股份有限公司 一种模拟客户串联部署环境的测试方法和装置

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10855701B2 (en) * 2017-11-03 2020-12-01 F5 Networks, Inc. Methods and devices for automatically detecting attack signatures and generating attack signature identifications
US10678676B2 (en) * 2018-08-08 2020-06-09 Servicenow, Inc. Playback of captured network transactions in a simulation environment
CN109274669B (zh) * 2018-09-18 2021-04-27 四川长虹电器股份有限公司 一种基于在线流量镜像旁路waf反向代理方法
CN109040141B (zh) * 2018-10-17 2019-11-12 腾讯科技（深圳）有限公司 异常流量的检测方法、装置、计算机设备和存储介质
CN109560990A (zh) * 2018-12-17 2019-04-02 同盾控股有限公司 一种互联网应用测试方法及装置
CN109861875A (zh) * 2018-12-29 2019-06-07 顺丰科技有限公司 应用程序的测试方法及装置

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050286439A1 (en) * 2004-06-08 2005-12-29 Marc Capelle Method of testing a router, and a test system
CN101001183A (zh) * 2007-01-10 2007-07-18 网之易信息技术（北京）有限公司 一种网络应用软件的测试方法和系统
US20130064125A1 (en) * 2010-08-27 2013-03-14 Noah Gintis Flow statistics aggregation
CN106470136A (zh) * 2015-08-21 2017-03-01 腾讯科技（北京）有限公司 平台测试方法以及平台测试系统
CN107896160A (zh) * 2017-10-27 2018-04-10 中国科学技术大学 一种基于分布式系统的数据中心网络流量建模方法
CN112165408A (zh) * 2020-09-16 2021-01-01 杭州安恒信息技术股份有限公司 一种模拟客户串联部署环境的测试方法和装置

Also Published As

Publication number Publication date
US11956128B2 (en) 2024-04-09
CN112165408B (zh) 2022-07-22
US20230353459A1 (en) 2023-11-02
CN112165408A (zh) 2021-01-01

Similar Documents

Publication Publication Date Title
WO2022057265A1 (zh) 模拟客户串联部署环境的测试方法和装置
CN111431758B (zh) 云网络设备的测试方法、装置、存储介质和计算机设备
WO2017211169A1 (zh) 链路测试方法和装置及系统
EP3331205B1 (en) Data packet transmission method utilized in ipv6 network and device utilizing same
US9407522B2 (en) Initiating data collection based on WiFi network connectivity metrics
CN110635965B (zh) 一种IPv6网络质量监测方法、设备及存储介质
Naing et al. Evaluation of tcp and udp traffic over software-defined networking
CN104079571A (zh) 一种识别Android模拟器的方法及装置
WO2015081693A1 (zh) 一种网络共享用户识别方法及装置
CN109479014A (zh) 使用虚拟局域网(vlan)扫描进行网络测试配置的方法、系统和计算机可读介质
CN104539483A (zh) 网络测试系统
US10320881B2 (en) Operating system fingerprint detection
CN109729059A (zh) 数据处理方法、装置及计算机
CN105991353A (zh) 故障定位的方法和装置
WO2024103783A1 (zh) 动态主机配置协议测试方法、电子设备、计算机存储介质
CN110351159B (zh) 一种跨内网的网络性能测试方法及装置
CN112491655B (zh) 一种tcp传输异常类型的确定方法、装置、电子设备及存储介质
US11018969B2 (en) UDPING-continuous one-way monitoring of multiple network links
CN107579862B (zh) 一种测量设备网络通信能力的方法
JP2013243534A (ja) 遅延時間評価装置および遅延時間評価方法
CN104703198A (zh) 一种端到端网络服务时延的确定方法及装置
US20080198762A1 (en) Cross-subnet-nodes subnet node device detection method
Novanana et al. 5G Lab as a Service (Laas) Simulator Deployment: Study Case Scenarios in Indonesian Higher Education
CN113676369B (zh) 一种网络质量分析方法、数据接收服务器及存储介质
CN105429802A (zh) 质量数据的确定方法、装置及服务器

Legal Events

Date Code Title Description
NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 21868103

Country of ref document: EP

Kind code of ref document: A1