WO2023093024A1 - 一种网络抖动分析及可视化方法及系统 - Google Patents

一种网络抖动分析及可视化方法及系统 Download PDF

Info

Publication number
WO2023093024A1
WO2023093024A1 PCT/CN2022/100755 CN2022100755W WO2023093024A1 WO 2023093024 A1 WO2023093024 A1 WO 2023093024A1 CN 2022100755 W CN2022100755 W CN 2022100755W WO 2023093024 A1 WO2023093024 A1 WO 2023093024A1
Authority
WO
WIPO (PCT)
Prior art keywords
network
network jitter
cpe
acs
analysis
Prior art date
Application number
PCT/CN2022/100755
Other languages
English (en)
French (fr)
Inventor
王玉梁
薛希俊
朱文进
陈小龙
刘少卿
房杰
Original Assignee
中电信数智科技有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中电信数智科技有限公司 filed Critical 中电信数智科技有限公司
Publication of WO2023093024A1 publication Critical patent/WO2023093024A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0852—Delays
    • H04L43/087—Jitter
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0654—Management of faults, events, alarms or notifications using network fault recovery
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/069—Management of faults, events, alarms or notifications using logs of notifications; Post-processing of notifications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H04L41/0695—Management of faults, events, alarms or notifications the faulty arrangement being the maintenance, administration or management system

Definitions

  • the invention belongs to the technical field of network security, and in particular relates to a network jitter analysis and visualization method and system.
  • the technical problem to be solved by the present invention is to provide a network jitter analysis and visualization method and system for the above-mentioned deficiencies in the prior art, and introduce intelligent and efficient network second-level monitoring and network jitter analysis methods to improve the management of network equipment.
  • the operation and maintenance guarantee capability can improve the accuracy of second-level network monitoring and early warning, reduce false positives and false negatives of network alarms, realize second-level monitoring and data analysis of network jitter during monitoring, and support second-level visualization at the same time.
  • a network jitter analysis and visualization method comprising:
  • Step 1 based on the Netconf management protocol, set the alarm threshold of network jitter, and update it to the ColumnCondition field of the CPE subscription monitoring event to complete the notification setting;
  • Step 2 After the CPE triggers the network jitter fault message of the monitoring event, it actively reports it to the NETCONF client, and at the same time reports the RPC message of the network traffic value when the event occurs to the network management server ACS defined by the TR069 protocol in the RPC message format of the TR069 protocol;
  • Step 3 the ACS and the CPE interoperate through the RPC method of the TR069 protocol, and collect the network traffic information within n seconds after the network jitter of the CPE occurs;
  • Step 4 the NETCONF client analyzes the subscription monitoring event message of the CPE and extracts the IP of the network jitter in the message, finds the corresponding RRD database, and retrieves the traffic data n seconds before the network jitter fault occurs;
  • Step 5 ACS sorts the data of n seconds before and after the occurrence of CPE network jitter according to the occurrence time, and compares each second with the previous second to obtain the flow increase and decrease value;
  • Step 6 drawing and displaying the network jitter comparison and analysis results.
  • the above-mentioned RRD database is used to temporarily store four index data of network jitter IP, traffic per second, traffic increase and decrease, and time through the RRDtool command.
  • the NETCONF client subscribes to the monitoring event in the CPE.
  • the monitoring time is 1 second, and the parameter name is interval, so as to realize the second-level monitoring of the network device CPE;
  • step 1 above the event notification carrying the alarm threshold of network jitter is converted into a format recognizable by the NETCONF client and sent to the NETCONF client.
  • Step 3 above includes:
  • the CPE first sends an RPC format configuration file request to the ACS to report the connection information to the ACS;
  • the CPE sends a configuration file request to the ACS again.
  • the ACS collects the configuration file request sent by the CPE, it extracts the IP address and network traffic information indicators within n seconds after the network jitter occurs from the request message.
  • step 6 use the graph command of RRDtool to draw and display it visually on the Web side.
  • n 5.
  • a network jitter analysis and visualization system comprising:
  • the parameter setting module is used to set the alarm threshold of network jitter based on the Netconf management protocol, and update it to the CPE subscription monitoring event ColumnCondition field to complete the notification setting;
  • the message reporting module is used for the CPE to actively report the network jitter fault message triggered by the monitoring event to the NETCONF client, and at the same time report the RPC message of the network traffic value when the event occurs to the network management server defined by the TR069 protocol in the RPC message format of the TR069 protocol ACS;
  • the acquisition module is used for interoperability between the ACS and the CPE through the RPC method of the TR069 protocol, and collects network traffic information within n seconds after the network jitter of the CPE occurs;
  • the calling module is used for the NETCONF client to analyze the subscription monitoring event message of the CPE and extract the IP of the network jitter in the message, find the corresponding RRD database, and call the traffic data of n seconds before the network jitter fault occurs;
  • the analysis module is used for the ACS to sort the data of n seconds before and after the occurrence of CPE network jitter according to the occurrence time, and compare each second with the previous second to obtain the flow increase and decrease value;
  • the visualization module is used to graphically display the results of network jitter comparison analysis.
  • the method of the present invention creatively combines the TR069 protocol with the NETCONF protocol, on the basis of completing the second-level monitoring of the network, for the collection and analysis of n-second data before and after the occurrence of network jitter, combined with the rrd database to store the network jitter analysis data and perform visual display.
  • the present invention retrieves historical data before a fault occurs through rrd, which greatly reduces the huge pressure of second-level detection data stored in the database, reduces the load pressure of second-level monitoring and real-time analysis, database storage pressure, and the efficiency of hard disk space utilization. And it consumes very little system resources.
  • Fig. 1 is a flow chart of the method in the present invention.
  • a network jitter analysis and visualization method which uses the Netconf management protocol to manage the NETCONF server CPE to complete second-level monitoring; the CPE also supports the TR069 protocol.
  • TR069 the full name of "Technical Report 069" is established by DSL Forum (a non-profit global industry alliance dedicated to the development of broadband network standards, its members include leading manufacturers in communications, equipment, computers, networks and service providers, and now This specification is a management protocol at the application layer, named "CPE WAN Management Protocol (CPE WAN Management Protocol)".
  • CPE WAN Management Protocol CPE WAN Management Protocol
  • the network management server is called ACS (Auto Configuration Server) with a dedicated IP address and URL;
  • the managed device obtains the URL of the ACS through the DHCP server. After the managed device obtains the network management IP, it starts to establish an HTTP session based on the URL of the ACS.
  • the network management server can obtain various monitoring information from the CPE.
  • TR069 collects information quickly is that it adopts HTTP protocol, which can transmit structured data information itself. Therefore, all the required information is collected at one time, and all are returned at one time, while SNMP itself cannot transmit messages, which are collected one by one and returned one by one.
  • the present invention specifically includes:
  • Step 1 Based on the Netconf management protocol, set the alarm threshold for network jitter, and update it to the [ColumnCondition] field of the CPE subscription monitoring event to complete the notification setting;
  • the Netconf management protocol can also be called a network configuration protocol. It provides a mechanism for managing network devices. Users can use this mechanism to add, modify, and delete network device configurations, and obtain network device configuration and status information.
  • network devices can provide standardized application programming interface APIs, and applications can directly use these APIs to send and obtain configurations to network devices.
  • Subscription monitoring event After the user subscribes to the event to the device, when the event subscribed by the user occurs on the device, the device will automatically send the relevant information of the event to the subscribed client.
  • the Syslog event is subscribed by default.
  • interval indicates the monitoring interval, the value ranges from 1 to 4294967, the default value is 300, and the unit is second, that is, information that meets the subscription conditions is obtained every 300 seconds.
  • Step 2 After the CPE triggers the network jitter fault message of the monitoring event, it actively reports it to the NETCONF client, and at the same time, through the program, the RPC message of the network traffic value when the event occurs is reported to the network management server ACS defined by the TR069 protocol in the RPC message format of the TR069 protocol (Auto Configuration Server automatic configuration server), referred to as: ACS;
  • Step 3 the ACS and the CPE interoperate through the unique RPC method of the TR069 protocol, and collect the network traffic information within n seconds after the network jitter of the CPE occurs;
  • Step 4 The NETCONF client analyzes the subscription monitoring event message of the CPE and extracts the network jitter IP in the message, finds the corresponding RRD database, and retrieves the traffic data n seconds before the network jitter fault occurs; usually the second-level network jitter analysis generally takes Values are more valuable for analysis within 5 seconds.
  • Step 5 ACS sorts the data of n seconds before and after the occurrence of CPE network jitter according to the time of occurrence, and compares each second with the previous second to obtain the traffic increase and decrease value;
  • Step 6 drawing and displaying the network jitter comparison and analysis results.
  • the RRD database is used to temporarily store network jitter IP, traffic per second, traffic increase and decrease, and time four index data through the RRDtool command.
  • the RRD database is a circular database, which can be understood as a table. There is a pointer in the center. As time changes, the pointer is also changing. When the pointer points to 12 o'clock, that is, the record will be erased when overriding, so it is a fixed size.
  • the NETCONF client subscribes to the monitoring event monitoring time value of 1 second in the CPE, and the parameter name: interval, so as to realize the second-level monitoring of the network equipment CPE;
  • the step 1 further converts the event notification carrying the alarm threshold of network jitter into a format recognizable by the NETCONF client and sends it to the NETCONF client.
  • the step 3 includes:
  • the CPE first sends an RPC format configuration file request to the ACS to report the connection information to the ACS;
  • the CPE sends a configuration file request to the ACS again.
  • the ACS collects the configuration file request sent by the CPE, it extracts the IP address and network traffic information indicators within n seconds after the network jitter occurs from the request message.
  • the step 6 uses the graph command of RRDtool to draw and display it visually on the Web side.
  • RRDtool is a ring database tool, which stores and reads a ring database and is represented as a binary file with the suffix .rrd.
  • a ring database you can think of it as a circular clock. As time goes by, data is continuously written into it, and at the same time, there is a mark pointing to the latest position of the current data record, just like the pointer on the clock indicates the current time. . And because it is circular and has no beginning and no end, data can be written in it all the time, but the historical data will be overwritten, so it is sometimes called a time-series structure database.
  • a network jitter analysis and visualization system of the present invention includes:
  • the parameter setting module is used to set the alarm threshold of network jitter based on the Netconf management protocol, and update it to the CPE subscription monitoring event ColumnCondition field to complete the notification setting;
  • the message reporting module is used for the CPE to actively report the network jitter fault message triggered by the monitoring event to the NETCONF client, and at the same time report the RPC message of the network traffic value when the event occurs to the network management server defined by the TR069 protocol in the RPC message format of the TR069 protocol ACS;
  • the acquisition module is used for interoperability between the ACS and the CPE through the RPC method of the TR069 protocol, and collects network traffic information within n seconds after the network jitter of the CPE occurs;
  • the calling module is used for the NETCONF client to analyze the subscription monitoring event message of the CPE and extract the IP of the network jitter in the message, find the corresponding RRD database, and call the traffic data of n seconds before the network jitter fault occurs;
  • the analysis module is used for the ACS to sort the data of n seconds before and after the occurrence of CPE network jitter according to the occurrence time, and compare each second with the previous second to obtain the flow increase and decrease value;
  • the visualization module is used to graphically display the results of network jitter comparison analysis.
  • the method of the present invention creatively combines the TR069 protocol with the NETCONF protocol, on the basis of second-level monitoring of the network, collects and analyzes n-second data before and after the occurrence of network jitter, and combines the rrd database to store network jitter analysis data and perform visual display.
  • the present invention retrieves historical data before a fault occurs through rrd, which greatly reduces the huge pressure of second-level detection data stored in the database, reduces the load pressure of second-level monitoring and real-time analysis, database storage pressure, and the efficiency of hard disk space utilization. And it consumes very little system resources.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Environmental & Geological Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本发明公开了一种网络抖动分析及可视化方法及系统，方法包括设置网络抖动的告警阈值；将事件发生时的网络流量数值的RPC消息上报给TR069协议定义的网管服务器ACS；ACS与CPE之间通过TR069协议的RPC方法进行互操作，采集CPE的网络抖动发生之后n秒内的网络流量信息；调取该网络抖动故障发生前n秒的流量数据；ACS将CPE网络抖动发生前后各n秒的数据按发生时间排序，每一秒与前一秒比较得出流量增减值；绘图显示网络抖动比较分析结果。本发明实现了秒级监控，及监控过程中网络抖动的数据分析，同时支持秒级可视化。

Description

一种网络抖动分析及可视化方法及系统 技术领域
本发明属于网络安全技术领域，具体涉及一种网络抖动分析及可视化方法及系统。
背景技术
随着数字化发展的逐渐深入，各单位的在运设备逐渐增加，相较于十年前设备增长了10～100倍，即便运维已经在从手工运维向工具运维和平台运维发展，但仍然无法满足当前大型组网对运维的要求。同时海量IPv6地址监控也给当下机房运维环境增加了更多的运维压力和技术问题。
大规模业务组网背景下，应用关系复杂，依赖层次多，排查问题困难，同时针对海量IPv6地址监测资源消耗巨大。靠人工经验、自动化运维去监测网络设备的监控时长就成为了制约运维工作的技术瓶颈。现有技术很难达到监测时效性要求，仍然靠人工经验，所以引入了更智能化、高效的网络秒级监控及网络抖动的分析的方法来提高管理网络设备的运维保障能力。发明内容
本发明所要解决的技术问题是针对上述现有技术的不足，提供一种网络抖动分析及可视化方法及系统，引入智能化、高效的网络秒级监控及网络抖动分析的方法来提高管理网络设备的运维保障能力，可提高秒级网络监控预警的准确性，减少网络告警的误报和漏报，实现了秒级监控，及监控过程中网络抖动的数据分析，同时支持秒级可视化。
为实现上述技术目的，本发明采取的技术方案为：
一种网络抖动分析及可视化方法，包括：
步骤1，基于Netconf管理协议，设置网络抖动的告警阈值，并将其更新到CPE订阅监控事件ColumnCondition字段中完成通知设置；
步骤2，CPE触发监控事件的网络抖动故障消息后主动上报给NETCONF客户端，同时将事件发生时的网络流量数值的RPC消息以TR069协议的RPC消息格式上报给TR069协议定义的网管服务器ACS；
步骤3，ACS与CPE之间通过TR069协议的RPC方法进行互操作，采集CPE的网络抖动发生之后n秒内的网络流量信息；
步骤4，NETCONF客户端分析CPE的订阅监控事件消息后提取消息中网络抖动的IP，找到对应的RRD数据库，调取该网络抖动故障发生前n秒的流量数据；
步骤5，ACS将CPE网络抖动发生前后各n秒的数据按发生时间排序，每一秒与前一秒 比较得出流量增减值；
步骤6，绘图显示网络抖动比较分析结果。
为优化上述技术方案，采取的具体措施还包括：
上述的RRD数据库，用于通过RRDtool命令临时存储网络抖动的IP、每一秒的流量、流量增减值、时间四个指标数据。
上述的步骤1中，NETCONF客户端在CPE中订阅监控事件监测时间取值为1秒，参数名称：interval，以实现对网络设备CPE的秒级监控；
上述的步骤1还将携带网络抖动的告警阈值的所述事件通知转换为NETCONF客户端能够识别的格式后发送至NETCONF客户端。
上述的步骤3包括：
CPE首先对ACS发出一个RPC格式配置文件请求来向ACS汇报本次连接的信息；
ACS返回一个RPC格式配置文件作为确认连接，完成通讯验证；
CPE再次向ACS发生配置文件请求，ACS收集到CPE发送的配置文件请求后，从请求报文中提取IP、网络抖动发生之后n秒内的网络流量信息指标。
上述的步骤6通过RRDtool的graph命令进行绘图并在Web端进行可视化展示。
上述的n取5。
一种网络抖动分析及可视化系统，包括：
参数设置模块，用于基于Netconf管理协议，设置网络抖动的告警阈值，并将其更新到CPE订阅监控事件ColumnCondition字段中完成通知设置；
消息上报模块，用于CPE触发监控事件的网络抖动故障消息后主动上报给NETCONF客户端，同时将事件发生时的网络流量数值的RPC消息以TR069协议的RPC消息格式上报给TR069协议定义的网管服务器ACS；
采集模块，用于ACS与CPE之间通过TR069协议的RPC方法进行互操作，采集CPE的网络抖动发生之后n秒内的网络流量信息；
调取模块，用于NETCONF客户端分析CPE的订阅监控事件消息后提取消息中网络抖动的IP，找到对应的RRD数据库，调取该网络抖动故障发生前n秒的流量数据；
分析模块，用于ACS将CPE网络抖动发生前后各n秒的数据按发生时间排序，每一秒与前一秒比较得出流量增减值；
可视化模块，用于绘图显示网络抖动比较分析结果。
本发明具有以下有益效果：
本发明方法创造性的通过TR069协议结合NETCONF协议，在完成网络秒级监控的基础上，针对网络抖动发生前后n秒数据的采集及分析结合rrd数据库存储网络抖动分析数据并进行可视化展示。
本发明通过rrd调取故障发生前的历史数据，大幅度减少了秒级检测数据存储在数据库的巨大压力，减少了秒级监控实时分析的负载压力，数据库存储压力，对硬盘空间利用的效率，且对系统资源消耗很少。
附图说明
图1为本发明中方法流程图。
具体实施方式
以下结合附图对本发明的实施例作进一步详细描述。
一种网络抖动分析及可视化方法，采用Netconf管理协议来管理NETCONF服务器CPE完成秒级监控；CPE同时支持TR069协议。
TR069，全称“Technical Report 069”是由DSL Forum(一个非盈利性的全球行业联盟，致力于发展宽带网络范，其成员包括通讯、设备、计算机、网络和服务提供商等行业的领先厂商，现已更名为“Broadband Forum”)修订的一份技术规范，该规范是应用层的管理协议，命名为“CPE广域网管理协议(CPE WAN Management Protocol)”。TR069定义了一套全新的网管体系结构，包括管理模型，交互接口及基本的管理参数，能够有效地实施对家庭网络设备的管理。
TR-069中，网管服务器被称为ACS(Auto Configuration Server自动配置服务器)有专门的IP地址和URL；
被管理设备通过DHCP服务器获取ACS的URL，被管理设备获得网管IP后，就开始根据ACS的URL建立HTTP会话。
建立会话后需要进行初始化，其目的是进行身份验证，ACS要确保被管理设备的合法性。初始化完成后，网管服务器就可以向CPE获取各种监控信息。
优点一：在被管理设备上不需要配置SNMP功能，被管理设备如果超过3000台或者更多，将节省大量被监测设备的配置时间。
优点二：TR069采集信息之所以快，是因为采用HTTP协议，本身可以传递结构化的数据信息。因此，一次采集所有所需信息，一次全部返回，而SNMP本身不能传递消息是逐条 采集，逐一返回。
参见图1，本发明具体包括：
步骤1，基于Netconf管理协议，设置网络抖动的告警阈值，并将其更新到CPE订阅监控事件【ColumnCondition】字段中完成通知设置；
Netconf管理协议也可以叫做网络配置协议，它提供了一套管理网络设备的机制，用户可以使用这套机制增加、修改、删除网络设备的配置，获取网络设备的配置和状态信息。通过Netconf协议，网络设备可以提供规范的应用程序编程接口API，应用程序可以直接使用这些API，向网络设备发送和获取配置。
订阅监控事件：用户向设备订阅事件后，设备上发生用户订阅的事件时，设备会自动向订阅的客户端发送事件的相关信息。
订阅只对当前连接生效。
如果连接断开，订阅会自动取消。
如果不配置订阅的事件流<stream></stream>，则缺省订阅Syslog事件。interval表示监控的时间间隔，取值范围为1～4294967，缺省值为300，单位为秒，即每隔300秒获取一次符合订阅条件的信息。
例如：设置网络流量不小于1MB触发订阅监控通知格式：
<ColumnCondition>
<ColumnName>网络流量</ColumnName>
<ColumnValue>1048576单位Byte(字节)</ColumnValue>
<ColumnCondition>notLess(不小于)</ColumnCondition>
</ColumnCondition>
参数说明：
<ColumnValue>单位Byte(字节)
<ColumnName>监控项名称
<ColumnCondition>条件表达式
流量转换公式：MB＝Byte(字节)X1024X1024
步骤2，CPE触发监控事件的网络抖动故障消息后主动上报给NETCONF客户端，同时通过程序将事件发生时的网络流量数值的RPC消息以TR069协议的RPC消息格式上报给TR069协议定义的网管服务器ACS(Auto Configuration Server自动配置服务器)，简称：ACS；
步骤3，ACS与CPE之间通过TR069协议特有的RPC方法进行互操作，采集CPE的网 络抖动发生之后n秒内的网络流量信息；
步骤4，NETCONF客户端分析CPE的订阅监控事件消息后提取消息中网络抖动的IP，找到对应的RRD数据库，调取该网络抖动故障发生前n秒的流量数据；通常秒级网络抖动分析一般取值在5秒内进行分析较有价值。
步骤5，ACS将CPE网络抖动发生前后各n秒的数据按发生时间排序，每一秒与前一秒比较得出流量增减值；
步骤6，绘图显示网络抖动比较分析结果。
实施例中，所述RRD数据库，用于通过RRDtool命令临时存储网络抖动的IP、每一秒的流量、流量增减值、时间四个指标数据。
所述RRD数据库为一个环形的数据库，可以将其理解为表，中心处有一个指针，随着时间的变化，指针也在变，当指针指到12点处，也就是这个记录要被擦除覆盖的时候，所以它是大小固定的。
特点：它一方面可以把数据存储起来，扮演数据库的角色；另一方面又能根据存储的数据绘图，而且图形表达能力很强，如线状图、饼状图、柱状图、区域面积图等；支持高性能的数据存储、绘图，很方便集成在各种脚本中。
实施例中，所述步骤1中，NETCONF客户端在CPE中订阅监控事件监测时间取值为1秒，参数名称：interval，以实现对网络设备CPE的秒级监控；
实施例中，所述步骤1还将携带网络抖动的告警阈值的所述事件通知转换为NETCONF客户端能够识别的格式后发送至NETCONF客户端。
实施例中，所述步骤3包括：
CPE首先对ACS发出一个RPC格式配置文件请求来向ACS汇报本次连接的信息；
ACS返回一个RPC格式配置文件作为确认连接，完成通讯验证；
CPE再次向ACS发生配置文件请求，ACS收集到CPE发送的配置文件请求后，从请求报文中提取IP、网络抖动发生之后n秒内的网络流量信息指标。
实施例中，所述步骤6通过RRDtool的graph命令进行绘图并在Web端进行可视化展示。
RRDtool是环形数据库工具，存储和读取的是环形数据库，表现是后缀为.rrd的二进制文件。要理解什么是环形数据库，可以把它想象成圆形的时钟，随着时间推移，不断往里写数据，同时有个标记指向当前数据记录的最新位置，就像时钟上的指针指示当前时间一样。又因为它是圆形的，无始无终，可以一直往里写数据，只是历史数据会被覆盖掉，所以，有时它又被叫做时序结构数据库。
本发明的一种网络抖动分析及可视化系统，包括：
参数设置模块，用于基于Netconf管理协议，设置网络抖动的告警阈值，并将其更新到CPE订阅监控事件ColumnCondition字段中完成通知设置；
消息上报模块，用于CPE触发监控事件的网络抖动故障消息后主动上报给NETCONF客户端，同时将事件发生时的网络流量数值的RPC消息以TR069协议的RPC消息格式上报给TR069协议定义的网管服务器ACS；
采集模块，用于ACS与CPE之间通过TR069协议的RPC方法进行互操作，采集CPE的网络抖动发生之后n秒内的网络流量信息；
调取模块，用于NETCONF客户端分析CPE的订阅监控事件消息后提取消息中网络抖动的IP，找到对应的RRD数据库，调取该网络抖动故障发生前n秒的流量数据；
分析模块，用于ACS将CPE网络抖动发生前后各n秒的数据按发生时间排序，每一秒与前一秒比较得出流量增减值；
可视化模块，用于绘图显示网络抖动比较分析结果。
本发明方法创造性地通过TR069协议结合NETCONF协议，在完成网络秒级监控的基础上，针对网络抖动发生前后n秒数据的采集及分析结合rrd数据库存储网络抖动分析数据并进行可视化展示。
本发明通过rrd调取故障发生前的历史数据，大幅度减少了秒级检测数据存储在数据库的巨大压力，减少了秒级监控实时分析的负载压力，数据库存储压力，对硬盘空间利用的效率，且对系统资源消耗很少。
以上仅是本发明的优选实施方式，本发明的保护范围并不仅局限于上述实施例，凡属于本发明思路下的技术方案均属于本发明的保护范围。应当指出，对于本技术领域的普通技术人员来说，在不脱离本发明原理前提下的若干改进和润饰，应视为本发明的保护范围。

Claims (8)

  1. 一种网络抖动分析及可视化方法，其特征在于，包括：
    步骤1，基于Netconf管理协议，设置网络抖动的告警阈值，并将其更新到CPE订阅监控事件ColumnCondition字段中完成通知设置；
    步骤2，CPE触发监控事件的网络抖动故障消息后主动上报给NETCONF客户端，同时将事件发生时的网络流量数值的RPC消息以TR069协议的RPC消息格式上报给TR069协议定义的网管服务器ACS；
    步骤3，ACS与CPE之间通过TR069协议的RPC方法进行互操作，采集CPE的网络抖动发生之后n秒内的网络流量信息；
    步骤4，NETCONF客户端分析CPE的订阅监控事件消息后提取消息中网络抖动的IP，找到对应的RRD数据库，调取该网络抖动故障发生前n秒的流量数据；
    步骤5，ACS将CPE网络抖动发生前后各n秒的数据按发生时间排序，每一秒与前一秒比较得出流量增减值；
    步骤6，绘图显示网络抖动比较分析结果。
  2. 根据权利要求1所述的一种网络抖动分析及可视化方法，其特征在于，所述RRD数据库，用于通过RRDtool命令临时存储网络抖动的IP、每一秒的流量、流量增减值、时间四个指标数据。
  3. 根据权利要求1所述的一种网络抖动分析及可视化方法，其特征在于，所述步骤1中，NETCONF客户端在CPE中订阅监控事件监测时间取值为1秒，参数名称：interval，以实现对网络设备CPE的秒级监控；
  4. 根据权利要求1所述的一种网络抖动分析及可视化方法，其特征在于，所述步骤1还将携带网络抖动的告警阈值的所述事件通知转换为NETCONF客户端能够识别的格式后发送至NETCONF客户端。
  5. 根据权利要求1所述的一种网络抖动分析及可视化方法，其特征在于，所述步骤3包括：
    CPE首先对ACS发出一个RPC格式配置文件请求来向ACS汇报本次连接的信息；
    ACS返回一个RPC格式配置文件作为确认连接，完成通讯验证；
    CPE再次向ACS发生配置文件请求，ACS收集到CPE发送的配置文件请求后，从请求报文中提取IP、网络抖动发生之后n秒内的网络流量信息指标。
  6. 根据权利要求1所述的一种网络抖动分析及可视化方法，其特征在于，所述步骤6通过RRDtool的graph命令进行绘图并在Web端进行可视化展示。
  7. 根据权利要求1所述的一种网络抖动分析及可视化方法，其特征在于，所述n取5。
  8. 一种网络抖动分析及可视化系统，其特征在于，包括：
    参数设置模块，用于基于Netconf管理协议，设置网络抖动的告警阈值，并将其更新到CPE订阅监控事件ColumnCondition字段中完成通知设置；
    消息上报模块，用于CPE触发监控事件的网络抖动故障消息后主动上报给NETCONF客户端，同时将事件发生时的网络流量数值的RPC消息以TR069协议的RPC消息格式上报给TR069协议定义的网管服务器ACS；
    采集模块，用于ACS与CPE之间通过TR069协议的RPC方法进行互操作，采集CPE的网络抖动发生之后n秒内的网络流量信息；
    调取模块，用于NETCONF客户端分析CPE的订阅监控事件消息后提取消息中网络抖动的IP，找到对应的RRD数据库，调取该网络抖动故障发生前n秒的流量数据；
    分析模块，用于ACS将CPE网络抖动发生前后各n秒的数据按发生时间排序，每一秒与前一秒比较得出流量增减值；
    可视化模块，用于绘图显示网络抖动比较分析结果。
PCT/CN2022/100755 2021-11-26 2022-06-23 一种网络抖动分析及可视化方法及系统 WO2023093024A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202111418712.1A CN114039892B (zh) 2021-11-26 2021-11-26 一种网络抖动分析及可视化方法及系统
CN202111418712.1 2021-11-26

Publications (1)

Publication Number Publication Date
WO2023093024A1 true WO2023093024A1 (zh) 2023-06-01

Family

ID=80145606

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2022/100755 WO2023093024A1 (zh) 2021-11-26 2022-06-23 一种网络抖动分析及可视化方法及系统

Country Status (2)

Country Link
CN (1) CN114039892B (zh)
WO (1) WO2023093024A1 (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114039892B (zh) * 2021-11-26 2022-11-29 中电信数智科技有限公司 一种网络抖动分析及可视化方法及系统
CN114900440A (zh) * 2022-05-25 2022-08-12 中电信数智科技有限公司 一种马尔科夫链结合贝叶斯网络预警方法和系统

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101110822A (zh) * 2007-07-06 2008-01-23 华为技术有限公司 基于网络配置协议的事件通知发送方法、系统及设备
CN112152868A (zh) * 2019-06-28 2020-12-29 北京金山云网络技术有限公司 网络故障检测方法、装置、电子设备及存储介质
CN112564976A (zh) * 2020-12-11 2021-03-26 江苏亿通高科技股份有限公司 一种基于tr069协议的性能参数监控方法
US20210297508A1 (en) * 2020-03-20 2021-09-23 Commscope Technologies Llc Adapter for converting between the network configuration protocol (netconf) and the technical report 069 (tr-069) protocol
CN114039892A (zh) * 2021-11-26 2022-02-11 中国电信集团系统集成有限责任公司 一种网络抖动分析及可视化方法及系统

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104954187B (zh) * 2015-06-30 2018-11-27 新华三技术有限公司 一种确定用户侧设备状态的方法和装置
CN107071524A (zh) * 2016-12-29 2017-08-18 江苏省广电有线信息网络股份有限公司 智能终端管理方法
CN108092855B (zh) * 2017-12-29 2020-06-12 中国联合网络通信有限公司广东省分公司 一种基于sdn技术的utn流量监测系统及方法
CN109039701B (zh) * 2018-06-25 2021-08-24 烽火通信科技股份有限公司 基于mib数据库的网络设备多种管理方式的方法及系统
CN111010305A (zh) * 2019-12-23 2020-04-14 烽火通信科技股份有限公司 一种基于netconf协议的配置管理系统及方法
CN112333202B (zh) * 2020-11-25 2021-10-26 国网山东省电力公司信息通信公司 基于tr069协议的ims接入网设备远程集中监控方法及系统

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101110822A (zh) * 2007-07-06 2008-01-23 华为技术有限公司 基于网络配置协议的事件通知发送方法、系统及设备
CN112152868A (zh) * 2019-06-28 2020-12-29 北京金山云网络技术有限公司 网络故障检测方法、装置、电子设备及存储介质
US20210297508A1 (en) * 2020-03-20 2021-09-23 Commscope Technologies Llc Adapter for converting between the network configuration protocol (netconf) and the technical report 069 (tr-069) protocol
CN112564976A (zh) * 2020-12-11 2021-03-26 江苏亿通高科技股份有限公司 一种基于tr069协议的性能参数监控方法
CN114039892A (zh) * 2021-11-26 2022-02-11 中国电信集团系统集成有限责任公司 一种网络抖动分析及可视化方法及系统

Also Published As

Publication number Publication date
CN114039892B (zh) 2022-11-29
CN114039892A (zh) 2022-02-11

Similar Documents

Publication Publication Date Title
WO2023093024A1 (zh) 一种网络抖动分析及可视化方法及系统
CN105282772B (zh) 无线网数通设备监控系统及设备监控方法
US9917763B2 (en) Method and apparatus for analyzing a service in a service session
US8528039B2 (en) System for and method of set-top box memory monitoring
CN110493348A (zh) 一种基于物联网的智能监控报警系统
CN107294764A (zh) 智能监管方法和智能监管系统
CN103746849A (zh) 一种基于移动智能终端的it运维管理系统
US8667113B2 (en) Bitmap network management object change detection approach
WO2015131463A1 (zh) 基于mac地址匹配的智能变电站网络设备拓扑动态识别方法
CN112688819A (zh) 一种用于网络运维综合管理系统
CN112333020B (zh) 一种基于五元组的网络安全监测及数据报文解析系统
CN103973484B (zh) 一种基于网络拓扑结构的运维管理系统
CN114363222A (zh) 一种基于Netconf协议的网络设备巡检方法和系统
CN114244676A (zh) 一种智能it综合网关系统
CN102547804B (zh) 一种用于对无线接入网络进行网络管理的运行维护系统
CN102123043A (zh) 一种实现厂站端二次安全防护监管的系统
US10986213B2 (en) Method and system for streaming management information base data using simple network management protocol
KR101842996B1 (ko) 스카다 시스템의 데이터 처리 장치
WO2012051852A1 (zh) 一种基于分组指标体系的服务质量监控方法和系统
CN104486137A (zh) 应用于网络监控的数据采集方法
JP6542538B2 (ja) ネットワーク監視システム、監視装置および監視方法
CN102170371B (zh) 一种基于集中式管理的收集网络设备重要信息的方法
CN116151787A (zh) 一种it运维管理系统
CN113765717A (zh) 一种基于涉密专用计算平台的运维管理系统
CN114417796A (zh) 一种基于设备采点的动态报表统计方法及系统

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22897120

Country of ref document: EP

Kind code of ref document: A1