CN101286895A - Dynamic configurable data monitoring system and method for distributed network - Google Patents
Dynamic configurable data monitoring system and method for distributed network Download PDFInfo
- Publication number
- CN101286895A CN101286895A CNA200810037826XA CN200810037826A CN101286895A CN 101286895 A CN101286895 A CN 101286895A CN A200810037826X A CNA200810037826X A CN A200810037826XA CN 200810037826 A CN200810037826 A CN 200810037826A CN 101286895 A CN101286895 A CN 101286895A
- Authority
- CN
- China
- Prior art keywords
- data
- module
- file
- collection agent
- data collection
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Landscapes
- Computer And Data Communications (AREA)
Abstract
The invention relates to a system and a method for monitoring distributed network data with dynamic configuration in the technical field of computer network. In the invention, an agent module of data acquisition collects the data of an affiliated network data platform according to the configuration files set by users and carries out preprocessing of the collected data; the preprocessing comprises operations of data packet filtration and data packet disassembly, wherein, the data packet filtration refers to protocol filtration operation, namely, the invalid data pocket is discarded according to the filtration mechanism defined by the users; the data packet disassembly operation refers to that useful information in the data packets is extracted according to presented content by the users and the data required by the users is reported to a data center module in the form of XML document; the data center module is responsible for processing the data files reported by the agent module of data acquisition and in the form of XML, and carries out dynamic management on the agent module of data acquisition by inquiring, configuring and updating the XML documents. The system and the method of the invention simplify the design of the system, and improve the ability of the system to process data as well as usability and robustness of the system.
Description
Technical field
The present invention relates to a kind of data monitoring system and method for technical field of the computer network, but specifically be a kind of distributed network data supervisory control system and method for dynamic-configuration.
Background technology
Along with the continuous development of Internet, carried increasing important application on the current Internet, network configuration is also complicated day by day.Measurement to network performance is whole network behavior characteristic to be understood, analyzed in depth the important means of finding the network performance bottleneck, optimizing Internet resources configuration and the management of reinforcing mat network.Meanwhile, instant messaging has become one of principal mode based on the human modern AC activity of Internet.But because opening and the confidentiality of Internet itself, the content of people's communication is not vulnerable to monitoring, the unavoidable speech that has some malice, for example speech of harm country, fraudulent speech etc. are so be quite necessary for the contents supervision of instant messaging.
Can see network traffic condition in the network monitoring system of the prior art, the exchanges data between client and server and client and the client.Network monitoring system can be seen the data of transmitting and set up trace in network.A kind of the most frequently used network monitoring system is the network packet analysis tool Wireshark that increases income.For instance, networkmonitor can be used for finding and repair network and application performance fault, the situation that monitoring network is on probation, and the monitoring network physical fault, and can the Network Search potential safety hazard, and the collection network flow is analyzed.
Find through literature search prior art, Chinese patent application number: 200510101365.4, publication number is: CN1852297, patent name is: " network data flow recognizing system and method ", the data flow identification module is according to the specific data flow of network data flow feature identification in the data flow feature library in this patent.Its concrete method is by decomposing by the data flow in light splitting machine or the network mirror image server, comes to compare and obtain required data with the content in the data flow feature library according to decomposing the gained data content.Its deficiency is, this system is more valuable aspect the record network activity, but its a little less than function aspect the phase-split network activity is extremely thin because the agreement that it can not the recognition data transmission, for instance, this supervisory control system can not be discerned HTML, XML and other agreements.
In addition, no matter be said system or in Wireshark software, be provided with various rules for the packet of needs analysis, these rules are programmed in advance, and the user does not adjust these regular flexibilities.Simultaneously analyzer moves under stand-alone environment, though can be more convenient to the monitoring of local network, run into when need monitor and just seem powerless a plurality of networks.
Summary of the invention
The present invention is directed to above-mentioned the deficiencies in the prior art, but a kind of distributed network data supervisory control system and method for dynamic-configuration be provided, make its according to the user dispose come for the data in a plurality of networks are gathered, filtration and analyzing and processing.
The present invention is achieved through the following technical solutions:
But the present invention relates to a kind of distributed network data supervisory control system of dynamic-configuration, comprising: data collection agent module, data center's module, wherein:
The data collection agent module is gathered the data of belonging network data platform according to the configuration file that the user sets, and the data of adopting are carried out preliminary treatment, preliminary treatment comprises the operation of unpacking of Packet Filtering and packet, Packet Filtering is meant the protocol filtering operation, abandon invalid data packets according to user-defined protocol filtering mechanism, therefore effectively the protocol filtering setting can greatly reduce the data volume that needs processing, improves system effectiveness; The packet operation of unpacking is according to the useful information in user's the displaying contents extraction packet, and data that the user is required are offered data center's module with XML file (XML is the simple version of SGML (standard generalized markup language)) in form;
Data center's module is responsible for the data file that deal with data is gathered the XML form that proxy module reports, and by Query XML file and config update XML file data is gathered proxy module and carry out dynamic management.
The data that described user is required comprise: heartbeat message that the object information that the network data that the data collection agent module collects, data center's module are inquired about, data collection agent module produce and data collection agent module are with the synchronizing information between data center's module etc.
Described data collection agent module comprises: data acquisition module, background processing module, communication module, order line module, main control module, wherein:
Data acquisition module is responsible for the data transfer activities that monitored data is gathered the residing network data platform of proxy module, sends to background processing module for the network data that captures by message queue;
Background processing module receives the network data that is passed over by data acquisition module by message queue, and these data are unpacked and caching, and data in buffer write the XML file that is used for reported data, filename is sent to communication module with the form of message by message queue;
The data collection agent start stop signal that communication module sends according to main control module, realization is connected and disconnection with data center's module link, when connection status, the XML file that will comprise user requested data sends in data center's module, to be saved in the temporary file from the data that data center's module receives simultaneously, and the name of temporary file is sent in the main control module by message queue; When off-state, communication module sends signal to main control module, and the notice main control module has stopped and the communicating by letter of data center's module;
The order line module according to the start stop signal of main control module be responsible for to user input commands read, explain and transmit operation, the user command after the order line module will be resolved sends to main control module by message queue;
Main control module is responsible for the control data acquisition module, background processing module, communication module, the start and stop of order line module, the instruction of the capable module forwards of processing command, the temporary file that processing is forwarded by communication module, temporary file is divided into the some XML subfiles that meet the XML standard, and deletion invalid data, the modification that the XML subfile is resolved and execution is relevant with the XML subfile is disposed or is revised operations such as protocol filtering rule, when comprising the query requests of data center's module in the XML subfile, preparation configuration file or protocol filtering rule file are transferred to communication module and are sent to data center's module.
Described data center module comprises: data transmission central, data processing centre, central database, wherein:
Data transmission central is responsible for safeguarding and the linking of a plurality of data collection agents, and is responsible for carrying out transfer of data between data center's module and data collection agent module;
Data processing centre is responsible for using filtration, and the generation by real time data and report data is showed to the user, simultaneously, data processing centre is responsible for self behavior record in journal file, when needs are controlled data collection agent, data processing centre will produce the relevant XML file of and instruction, this XML file is transmitted to the data collection agent module by data transmission central, and the content of this XML file will be received by the data collection agent module and store with the form of temporary file;
Central database is responsible for carrying out storage, needed data when providing data processing centre to produce form and real time data.
Described data collection agent module, it supports Long-distance Control to restart, and operation conditions carried out daily record work, journal file can provide the support to remote inquiry, make things convenient for data center's module that the operation conditions of remote data acquisition proxy module is analyzed, and find out the hidden danger that exists in the running.
But the invention still further relates to a kind of distributed network data method for supervising of dynamic-configuration, comprise the steps:
Step 1, log-on data center module and data collection agent module respectively;
Step 2, the communication module in the data collection agent module is set up with the data transmission central's module in data center's module and is kept link, and swap data between data collection agent module and data center's module is finished initial configuration synchronization operation;
Step 3, data acquisition module BOB(beginning of block) in the data collection agent module to data collection act on behalf of network data platform of living in and carry out data acquisition, data acquisition module carries out preliminary treatment to the network data that collects, give background processing module with the data passes after handling, background processing module will deposit buffering area in from the data that data acquisition module passes, full or when receiving the signal that self timer sends when buffering area, data in the buffering area are write in the reported data XML file, and this document is uploaded to data processing centre by communication module, data processing centre deposits the data that receive in central database, and according to using filtering rule valid data is showed;
Step 4, the user sends the instruction of editing application filtering rule to data processing centre's module, read application filtering rule file on the local disk by data processing centre's module, editing application filtering rule file, and restart data processing centre's module and data transmission central's module comes into force new filtering rule;
Step 5, the user sends editing data to data processing centre's module and gathers proxy configurations instruction (or protocol filtering regular instructions), by the configuration file (or the protocol filtering rule file on the data collection agent) in data processing centre's module reading of data collection proxy module, editing data is gathered agent configuration file (or protocol filtering rule file), and restarts each submodule in the data collection agent module;
Step 6, generate the inquiry file of XML form by data center's module, and this document passed to the data collection agent module, through after the main control module analysis in the data collection agent module, handling, the content of the required inquiry of inquiry file is transferred to communication module send to data center's module.
In the step 1, in the data center module starts, read from local disk by data processing centre and to use the filtering rule file, and finish startup data transmission central by data processing centre; In the startup of data collection agent module,, and start background processing module, communication module and order line module by the configuration file and the protocol filtering rule file of main control module reading of data collection proxy module.
Described application filtering rule file in order to the support to the application strobe utility that filters according to packet content to be provided, makes things convenient for the user that the bag that comprises certain content is extracted and analyzes.
Described data collection agent configuration file comprises: the sign of data collection agent, collection port, heart time and sampling keep contents such as window, wherein:
The sign of data collection agent is discerned each data collection agent in order to data center's module, particularly can launch a offensive to the center in order to the data collection agent that limits camouflage, improves security performance; Gather the network port that port has specified data collection agent to monitor;
Heart time is in order to connect between maintenance data collection agent module and the data center's module;
Sampling keeps window in order to set the buffer time of one group of data in data collection agent, with the data that prevent repetition reported data center module at short notice, cause data center's module pressure excessive, influence the performance of system, also frequently refreshing of data center's modules exhibit be can effectively reduce, thereby user's observation and analysis influenced.
Described protocol filtering rule file comprises the characteristic quantity of network packet, as source or purpose IP, and source or destination interface etc., the user can remove invalid data packets according to the protocol filtering rule of setting, and improves system works efficient.
In the step 2, described maintenance connects, and is specially: in the process of communication module operation, according to content setting self timer of heart time in the data collection agent configuration file, regularly send heartbeat signal to self by timer; After communication module is received heartbeat signal, heartbeat XML file content will be sent to data transmission central's module, wait for data transmission central's module feedback data simultaneously; If receive the feedback data of not receiving data transmission central's module between the next heartbeat signal in communication module, then communication module will be initiated and the linking of data transmission central module again, otherwise communication module resets timer; Data transmission central's module will directly return to communication module to heartbeat XML file after receiving heartbeat XML file, finish the maintenance of link.
In the step 2, described between data collection agent module and data center's module swap data, finish initial configuration synchronization operation, be specially: send synchronous XML file to data center's module by the data collection agent module, whether the data processing centre's module in data center's module will lose efficacy according to the configuration file and the protocol filtering rule file of file content judgment data collection proxy module, if configuration file or protocol filtering rule file lost efficacy, then default configuration file on data center's module or protocol filtering rule file are handed down to the data collection agent module; If configuration file did not lose efficacy, then data center's module synchronous XML file that will receive returns to the data collection agent module, the file that the data collection agent module receives is all transferred to main control module analysis, is handled, if what main control module received is synchronous XML file, then main control module will notify background processing module to begin data acquisition; If what main control module received is new configuration file or protocol filtering rule file, then the main control module file that will newly receive replaces original file, and restarts.
In the step 6, described inquiry file, comprise configuration querying file and protocol filtering rule file, these two files have been represented two operations respectively: the configuration of data being gathered proxy module is inquired about and the protocol filtering rule of data collection proxy module is inquired about, in concrete the enforcement, these two query manipulations may be incorporated in the file explains.
Separate between the step 4, five, six, and can carry out in any time after the execution of step one.
Communication between data center's module described in above steps and the related description and data collection agent module, be by realizing communication between data transmission central's module and the communication module, in addition, there is not other communication link between data center's module and the data collection agent module.
The present invention has adopted the file of XML form as the bridge of communicating by letter between data collection agent module and the data center's module, effectively simplified the design of system, improved the ability of system handles data, and uploading and issuing for configuration and filtering rule file, the system that makes has possessed the dynamic adjustment capability of function, has improved the ease for use and the robustness of system.
Compared with prior art, the present invention has following beneficial effect:
1, the supervisory control system of prior art is an integrated system, and the monitoring to single node can only be provided, and the invention provides a kind of distributed system, can be effectively the data traffic of a plurality of networks is write down and analyzes;
2, prior art has stronger dependence for data flow feature library, configuration in the time of can't accomplishing to move, the present invention passes through the decomposition between the different strobe utilities, different filtering rules is positioned over the different phase of data acquisition and analysis, form with configuration file provides to the user, has realized the dynamic-configuration of user to filtering rule.
Description of drawings
Fig. 1 is a system construction drawing of the present invention;
Fig. 2 is the structured flowchart of the data collection agent module among the present invention;
Fig. 3 is the data center's modular structure block diagram among the present invention.
Embodiment
Below in conjunction with accompanying drawing embodiments of the invention are elaborated: present embodiment is being to implement under the prerequisite with the technical solution of the present invention, provided detailed execution mode and concrete operating process, but protection scope of the present invention is not limited to following embodiment.
As shown in Figure 1, but present embodiment relates to a kind of distributed network data supervisory control system of dynamic-configuration, comprising: data collection agent module, data center's module, wherein:
The data collection agent module is gathered the data of belonging network data platform according to the configuration file that the user sets, and the data of adopting are carried out preliminary treatment, preliminary treatment comprises the operation of unpacking of Packet Filtering and packet, Packet Filtering is meant the protocol filtering operation, abandon invalid data packets according to user-defined protocol filtering mechanism, therefore effectively the protocol filtering setting can greatly reduce the data volume that needs processing, improves system effectiveness; Packet is unpacked and operated is according to the useful information in user's the displaying contents extraction packet; And the data that the user is required, offer data center's module with the XML file in form;
Data center's module is responsible for the data file that deal with data is gathered the XML form that proxy module reports, and by Query XML file and config update XML file data is gathered proxy module and carry out dynamic management.
Data collection agent module in the present embodiment adopts common computer or special-purpose embedded system, in the data collection agent module, adopt two network interface card configurations, network interface card connects the switch mirror port and is used for data acquisition, and another network interface card is used for and the communicating by letter of data center's module.On data collection agent, need to install (SuSE) Linux OS, and libxml and libpcap software kit, system adopts the C language to develop, and wherein the libxml software kit is used for the analyzing XML file, and the libpcap software kit is used for data are gathered.
As shown in Figure 2, described data collection agent module comprises: data acquisition module, background processing module, communication module, main control module and order line module, wherein:
Data acquisition module uses the libpcap software kit to come network data is gathered.In the process of gathering, can come the packet of gathering is filtered according to the protocol filtering rule that the user sets.After obtaining packet, just pass to background processing module.
Background processing module is responsible for packet is split, and the data after will splitting are carried out buffer memory.Arrive when the time that buffering area has been filled or the user sets, background processing module will send to communication module with the data in the buffering area.The packet process of unpacking is embedded in the middle of the required packet_handle function that calls of pcap_loop function of libpcap software kit.
Communication module is the functional module that communicates, exchanges information with the data center module.This module will be initiated and the linking of data center module, and keep the validity of this link by user-defined heart time.Carry out concrete data transfer operations for the pass-along message instruction of sending by background processing module and main control module.And the data of sending by data center's module, communication module will receive and be transmitted to main control module and handle.
The effect of main control module mainly is the start and stop of being responsible for the whole data collection agency, the instruction that the capable module of processing command is sent, the XML file that processing is forwarded by communication module, operation associated with the file is resolved and carried out to the XML file (as revising configuration, revise protocol filtering rule etc.), according to the requirement of data center's module, main control module also needs to prepare associated documents (as configuration file, protocol filtering rule file etc.) and transfers to communication module to data center's module transmission.
The order line module mainly is responsible for reading of order, explains and transmit operation.So that acting on behalf of the attendant, the response data collection on the agency, carries out simple control operation.
Each module of data collection agent mainly connects by message queue in the present embodiment, and for the ease of control, needs to increase system message between main control module and the background processing module and handle the start and stop request.
Adopt socket to connect in the present embodiment between data collection agent and the data center's module.In practical operation, can revise connected mode as required, to strengthen robustness and the fail safe that connects.
As shown in Figure 3, described data center module comprises: data transmission central, data processing centre and central database, whole data center module section adopt the Java language exploitation, wherein:
Data transmission central is responsible for safeguarding the link of a plurality of data collection agents, and is responsible for carrying out transfer of data between data center's module and data collection agent module.
Data processing centre is responsible for using filtration, and shows to the user by the generation of real time data and report data.In addition, data processing centre also will be responsible for the log record to self behavior.When needs are controlled data collection agent, data processing centre will produce the relevant XML file of and instruction, the XML file of this generation can be transmitted to data collection agent by data transmission central, and the form of file being resolved by data collection agent realizes again.
Central database is responsible for carrying out storage, needed data when providing data processing centre to produce form and real time data.
But present embodiment relates to a kind of distributed network data method for supervising of dynamic-configuration, comprises the steps:
Step 1, the log-on data processing center is read by data processing centre and to use the filtering rule file, and finishes startup to data transmission central by data processing centre;
Described application filtering rule file is specific as follows:
<？xml?version＝″1.0″encoding＝″UTF-8″？>
<agent?ip＝″192.168.47.200″id＝″kevin″name＝″agent-test″
description＝″agent?config?xml″xmltype＝″agent-rule″>
<agent-rule>
<update-time>2007-12-20?16:37:05</update-time>
<contents>
<content>test</content>
</contents>
</agent-rule>
</agent>
Step 2, log-on data is gathered the main control module in the proxy module, and main control module reading of data collection agency's configuration file and protocol filtering rule file start background processing module, communication module and order line module;
The configuration file of described data collection agent is specially:
<？xml?version＝″1.0″encoding＝″UTF-8″？>
<agent?ip＝″192.168.47.200″id＝″kevin″name＝″agent-test″
xmltype＝″agent-config″>
<agent-config>
<update-time>2007-12-20?03:40:30</update-time>
<servers>
<server?name＝″www.bss.org″ip＝″192.168.47.22″port＝″1070″
default＝″yes″status＝″1″/>
<server?name＝″www.infosec″ip＝″192.168.47.22″port＝″1070″
default＝″no″status＝″0″/>
</servers>
<client?name＝″agent-test″ip＝″192.168.47.200″id＝″kevin″port＝″1071″>
<interface>eth1</interface>
</client>
<global-sets>
<time-interval>
<heartbeat>30</heartbeat>
<sample>2</sample>
</time-interval>
</global-sets>
</agent-config>
</agent>
Described protocol filtering rule file is specially:
<？xml?version＝″1.0″encoding＝″UTF-8″？>
<agent?ip＝″192.168.47.200″id＝″kevin″name＝″agent-test″
description＝″agent?config?xml″xmltype＝″agent-rule″>
<agent-rule>
<update-time>2007-12-20?16:37:05</update-time>
<localfilters>
<localfilter>(udp?and?port?500)or(tcp?and?port?443)</localfilter>
</localfilters>
</agent-rule>
</agent>
Step 3, communication module is set up link with data transmission central, and send synchronous XML file to data transmission central, by data transmission central synchronous XML file is transmitted to data processing centre, whether data processing centre lost efficacy according to file content judgment data collection agency's configuration file and protocol filtering rule file, if configuration file or protocol filtering rule file lost efficacy, then default configuration file on data center's module or protocol filtering rule file are handed down to communication module by data transmission central, if configuration file did not lose efficacy, then data processing centre will the notification data transmission center, the synchronous XML file return data collection agency's that will receive by data transmission central communication module, communication module will receive data forwarding and give main control module, if what main control module received is synchronous XML file, then main control module will notify background processing module can begin data acquisition, promptly enter step 4; If what main control module received is new configuration file or protocol filtering rule file, then the main control module file that will newly receive replaces original file, and restarts; In the process of communication module operation,, regularly send heartbeat signal to self by timer according to content setting self timer of heart time in the data collection agent configuration file; After communication module is received heartbeat signal, heartbeat XML file content will be sent to data transmission central's module, wait for data transmission central's module feedback data simultaneously; If receive the feedback data of not receiving data transmission central's module between the next heartbeat signal in communication module, then communication module will be initiated and the linking of data transmission central module again, otherwise communication module resets timer; Data transmission central's module will directly return to communication module to heartbeat XML file after receiving heartbeat XML file, finish the maintenance of link;
Described synchronous XML file is specially:
<？xml?version＝″1.0″encoding＝″UTF-8″？>
<agent?ip＝″192.168.47.200″id＝″kevin″name＝″agent-test″
description＝″agent?config?xml″xmltype＝″agent-synch″>
<agent-synch>
<config-file>
<update-time>2007-12-20?03:40:30</update-time>
</config-file>
<rule-file>
<update-time>2007-12-20?16:23:40</update-time>
</rule-file>
</agent-synch>
</agent>
Described heartbeat XML file is specially:
<？xml?version＝″1.0″encoding＝″UTF-8″？>
<agent?ip＝″″id＝″″name＝″″description＝″agent?xml″
xmltype＝″agent-heartbeat″>
<agent-reports>
<agent-report?type＝″agent-heartbeat″
description＝″report?agent-heartbeat″>
<system>
<setup-time>2007-05-10?12:28:30</setup-time>
<runtime>360000</runtime>
</system>
</agent-report>
</agent-reports>
</agent>
Step 4, background processing module log-on data acquisition module, the data acquisition module BOB(beginning of block) to data collection act on behalf of network data platform of living in and carry out data acquisition, data acquisition module carries out preliminary treatment to the network data that collects, give background processing module with the data passes after handling, background processing module will deposit buffering area in from the data that data acquisition module passes, full or when receiving the signal that self timer sends when buffering area, data in the buffering area are write in the reported data XML file, and this document is uploaded to data processing centre by communication module, data processing centre deposits the data that receive in central database, and according to using filtering rule valid data is showed;
Described reported data XML file is specially:
<？xml?version＝″1.0″encoding＝″UTF-8″？>
<agent?ip＝″129.168.101.1″id＝″kevin″name＝″harper″description＝″agent
xml″xmltype＝″alert-report″>
<agent-reports>
<agent-report?type＝″alert-report″description＝″report?commu-alert″>
<vpn>
<detecting-time>2007-05-08?12:20:10</detecting-time>
<end-time>2007-05-10?13:20:10</end-time>
<protocol>IPSec</protocol>
<content></content>
<status/>
<summary/>
</vpn>
</agent-report>
</agent-reports>
</agent>
Step 5, the user sends the instruction of editing application filtering rule to data processing centre, read application filtering rule file on the local disk by data processing centre, editing application filtering rule file, and restart data processing centre and new filtering rule is come into force in data transmission central;
Step 6, the user sends editing data to data processing centre and gathers proxy configurations instruction (or protocol filtering regular instructions), by the configuration file (or the protocol filtering rule file on the data collection agent) in data processing centre's reading of data collection proxy module, editing data is gathered agent configuration file (or protocol filtering rule file), and restarts each module in the data collection agent;
Step 7, generate the inquiry file of XML form by data processing centre, and notification data transmission center communication module that the inquiry file of XML form is sent to, by communication module the file transfers that receives is analyzed to main control module again, main control module is transferred to communication module according to the content of the required inquiry of inquiry file and is sent to data transmission central behind the inquiry file of having resolved the XML form, feed back to data processing centre again.
Described Query XML file is specially:
<？xml?version＝″1.0″encoding＝″UTF-8″？>
<agent?ip＝″″id＝″″name＝″″description＝″agent?xml″xmltype＝″agent-query″>
<agent-reports>
<agent-report?type＝″agent-query″description＝″server?query″>
<config>
<param>config</param>
<summary></summary>
</config>
</agent-report>
</agent-reports>
</agent>
Present embodiment has adopted the file of XML form as the bridge of communicating by letter between data collection agent module and the data center's module, effectively simplified the design of system, improved the ability of system handles data, and uploading and issuing for configuration and filtering rule file, the system that makes has possessed the dynamic adjustment capability of function, has improved the ease for use and the robustness of system.
Claims (10)
1, but a kind of distributed network data supervisory control system of dynamic-configuration is characterized in that, comprising: data collection agent module, data center's module, wherein:
The data collection agent module is gathered the data of belonging network data platform according to the configuration file that the user sets, and the data of adopting are carried out preliminary treatment, preliminary treatment comprises the operation of unpacking of Packet Filtering and packet, Packet Filtering is meant the protocol filtering operation, abandons invalid data packets according to user-defined protocol filtering mechanism; Packet is unpacked and operated is according to the useful information in user's the displaying contents extraction packet; And the data that the user is required, offer data center's module with the XML file in form;
Data center's module is responsible for the data file that deal with data is gathered the XML form that proxy module reports, and by Query XML file and config update XML file data is gathered proxy module and carry out dynamic management.
2, but the distributed network data supervisory control system of dynamic-configuration according to claim 1 is characterized in that, described data collection agent module comprises: data acquisition module, background processing module, communication module, order line module, main control module, wherein:
Data acquisition module is responsible for the data transfer activities that monitored data is gathered the residing network data platform of proxy module, sends to background processing module for the network data that captures by message queue;
Background processing module receives the network data that is passed over by data acquisition module by message queue, and these data are unpacked and caching, and data in buffer write the XML file that is used for reported data, filename is sent to communication module with the form of message by message queue;
The data collection agent start stop signal that communication module sends according to main control module, realization is connected and disconnection with data center's module link, when connection status, the XML file that will comprise user requested data sends in data center's module, to be saved in the temporary file from the data that data center's module receives simultaneously, and the name of temporary file is sent in the main control module by message queue; When off-state, communication module sends signal to main control module, and the notice main control module has stopped and the communicating by letter of data center's module;
The order line module according to the start stop signal of main control module be responsible for to user input commands read, explain and transmit operation, the user command after the order line module will be resolved sends to main control module by message queue;
Main control module is responsible for the control data acquisition module, background processing module, communication module, the start and stop of order line module, the instruction of the capable module forwards of processing command, the temporary file that processing is forwarded by communication module, temporary file is divided into the some XML subfiles that meet the XML standard, and deletion invalid data, to modification configuration or the modification protocol filtering regular operation that the XML subfile is resolved and execution is relevant with the XML subfile, when comprising the query requests of data center's module in the XML subfile, preparation configuration file or protocol filtering rule file are transferred to communication module and are sent to data center's module.
3, but the distributed network data supervisory control system of dynamic-configuration according to claim 1 is characterized in that, described data center module comprises: data transmission central, data processing centre, central database, wherein:
Data transmission central is responsible for safeguarding and the linking of a plurality of data collection agents, and is responsible for carrying out transfer of data between data center's module and data collection agent module;
Data processing centre is responsible for using filtration, and the generation by real time data and report data is showed to the user, simultaneously, data processing centre is responsible for self behavior record in journal file, when needs are controlled data collection agent, data processing centre will produce the relevant XML file of and instruction, this XML file is transmitted to the data collection agent module by data transmission central, and the content of this XML file will be received by the data collection agent module and store with the form of temporary file;
Central database is responsible for carrying out storage, needed data when providing data processing centre to produce form and real time data.
But 4, the distributed network data supervisory control system of dynamic-configuration according to claim 1 and 2, it is characterized in that, described data collection agent module, it supports Long-distance Control to restart, and operation conditions carried out daily record work, journal file provides the support to remote inquiry, makes things convenient for data center's module that the operation conditions of remote data acquisition proxy module is analyzed, and finds out the hidden danger that exists in the running.
5, but a kind of distributed network data method for supervising of dynamic-configuration is characterized in that, comprises following steps:
Step 1, log-on data center module and data collection agent module respectively;
Step 2, the communication module in the data collection agent module is set up link with the data transmission central's module in data center's module, and swap data between data collection agent module and data center's module is finished initial configuration synchronization operation;
Step 3, data acquisition module BOB(beginning of block) in the data collection agent module to data collection act on behalf of network data platform of living in and carry out data acquisition, data acquisition module carries out preliminary treatment to the network data that collects, give background processing module with the data passes after handling, background processing module will deposit buffering area in from the data that data acquisition module passes, full or when receiving the signal that self timer sends when buffering area, data in the buffering area are write in the reported data XML file, and this document is uploaded to data processing centre by communication module, data processing centre deposits the data that receive in central database, and according to using filtering rule valid data is showed;
Step 4, the user sends the instruction of editing application filtering rule to data processing centre's module, read application filtering rule file on the local disk by data processing centre's module, editing application filtering rule file, and restart data processing centre's module and data transmission central's module comes into force new filtering rule;
Step 5, the user sends editing data to data processing centre's module and gathers proxy configurations instruction or protocol filtering regular instructions, by configuration file in data processing centre's module reading of data collection proxy module or the protocol filtering rule file on the data collection agent, editing data is gathered agent configuration file or protocol filtering rule file, and restarts each submodule in the data collection agent module;
Step 6, generate the inquiry file of XML form by data center's module, and this document passed to the data collection agent module, through after the main control module analysis in the data collection agent module, handling, the content of the required inquiry of inquiry file is transferred to communication module send to data center's module.
But 6, the distributed network data method for supervising of dynamic-configuration according to claim 5, it is characterized in that, in the step 1, in data center's module starts, read from local disk by data processing centre and to use the filtering rule file, and finish startup data transmission central by data processing centre; In the startup of data collection agent module,, and start background processing module, communication module and order line module by the configuration file and the protocol filtering rule file of main control module reading of data collection proxy module.
But 7, the distributed network data method for supervising of dynamic-configuration according to claim 5, it is characterized in that, in the step 2, described maintenance connects, be specially: in the process of communication module operation, according to content setting self timer of heart time in the data collection agent configuration file, regularly send heartbeat signal to self by timer; After communication module is received heartbeat signal, heartbeat XML file content will be sent to data transmission central's module, wait for data transmission central's module feedback data simultaneously; If receive the feedback data of not receiving data transmission central's module between the next heartbeat signal in communication module, then communication module will be initiated and the linking of data transmission central module again, otherwise communication module resets timer; Data transmission central's module will directly return to communication module to heartbeat XML file after receiving heartbeat XML file, finish the maintenance of link.
8, but the distributed network data method for supervising of dynamic-configuration according to claim 5, it is characterized in that, in the step 2, described between data collection agent module and data center's module swap data, finish initial configuration synchronization operation, be specially: send synchronous XML file to data center's module by the data collection agent module, whether the data processing centre's module in data center's module will lose efficacy according to file content judgment data collection agency's configuration file and protocol filtering rule file, if configuration file or protocol filtering rule file lost efficacy, then default configuration file on data center's module or protocol filtering rule file are handed down to the data collection agent module; If configuration file did not lose efficacy, then data center's module synchronous XML file that will receive returns to the data collection agent module, the file that the data collection agent module receives is all transferred to main control module analysis, is handled, if what main control module received is synchronous XML file, then main control module will notify background processing module to begin data acquisition; If what main control module received is new configuration file or protocol filtering rule file, then the main control module file that will newly receive replaces original file, and restarts.
But 9, according to the distributed network data method for supervising of claim 5 or 6 described dynamic-configuration, it is characterized in that, described application filtering rule file, in order to the support to the application strobe utility that filters according to packet content to be provided, make things convenient for the user that the bag that comprises certain content is extracted and analyzes.
But 10, according to the distributed network data method for supervising of claim 5 or 8 described dynamic-configuration, it is characterized in that, the configuration file of described data collection agent comprises: the sign of data collection agent, collection port, heart time and sampling keep window, wherein:
The sign of data collection agent is discerned each data collection agent in order to data center's module, particularly in order to the data collection agent that limits camouflage is launched a offensive in the center, improves security performance;
Gather the network port that port has specified data collection agent to monitor;
Heart time is in order to connect between maintenance data collection agent module and the data center's module;
Sampling keeps window in order to setting the buffer time of one group of data in data collection agent, with the data that prevent repetition reported data center module at short notice, causes data center's module pressure excessive.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810037826XA CN101286895B (en) | 2008-05-22 | 2008-05-22 | Dynamic configurable data monitoring system and method for distributed network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810037826XA CN101286895B (en) | 2008-05-22 | 2008-05-22 | Dynamic configurable data monitoring system and method for distributed network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101286895A true CN101286895A (en) | 2008-10-15 |
| CN101286895B CN101286895B (en) | 2010-08-18 |
Family
ID=40058876
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN200810037826XA Active CN101286895B (en) | 2008-05-22 | 2008-05-22 | Dynamic configurable data monitoring system and method for distributed network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101286895B (en) |
Cited By (36)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101567813A (en) * | 2009-05-22 | 2009-10-28 | 北京学之途网络科技有限公司 | Distributed network data acquisition method and system based on sniffing |
| CN101917467A (en) * | 2010-07-27 | 2010-12-15 | 中国科学院等离子体物理研究所 | Distributed computer monitoring system and monitoring method thereof |
| CN101552693B (en) * | 2009-05-13 | 2011-01-05 | 山东中创软件商用中间件股份有限公司 | Remote configuration technology |
| CN101989928A (en) * | 2010-11-05 | 2011-03-23 | 中兴通讯股份有限公司 | Network equipment information acquisition method and system, management system and network equipment |
| CN102130950A (en) * | 2011-03-14 | 2011-07-20 | 中国科学技术大学苏州研究院 | Distributed monitoring system based on Hadoop cluster and monitoring method thereof |
| CN102497427A (en) * | 2011-12-13 | 2012-06-13 | 山东省建筑科学研究院 | Method and device for realizing data acquisition services of renewable energy source monitoring system |
| CN102664769A (en) * | 2012-04-19 | 2012-09-12 | 清华大学 | Acquisition and analysis system for network packets and realization method thereof |
| CN103152229A (en) * | 2013-04-03 | 2013-06-12 | 北京合力思腾科技股份有限公司 | Dynamic configuration method for monitoring index item |
| CN103778041A (en) * | 2012-10-18 | 2014-05-07 | 腾讯科技（北京）有限公司 | Data monitoring method and device for internet |
| CN104125100A (en) * | 2014-08-11 | 2014-10-29 | 浪潮通信信息***有限公司 | Method for monitoring dashboard in real time in communication network management |
| CN104135399A (en) * | 2014-07-09 | 2014-11-05 | 国家电网公司 | Flow monitoring method based on wireless public network communication way for power distribution terminal |
| CN104363276A (en) * | 2014-11-07 | 2015-02-18 | 哈尔滨工程大学 | Subdomain-based third-party cloud monitoring method |
| CN104461929A (en) * | 2013-09-23 | 2015-03-25 | ***股份有限公司 | Distributed type data caching method based on interceptor |
| CN104520829A (en) * | 2012-06-15 | 2015-04-15 | 奥林奇公司 | Device and method for extracting data from a communication bus of a motor vehicle |
| CN104954280A (en) * | 2015-04-23 | 2015-09-30 | 华为技术有限公司 | Data message processing method and device |
| CN105591833A (en) * | 2014-11-26 | 2016-05-18 | ***股份有限公司 | Flow-acquiring method based on rule engine |
| CN103701783B (en) * | 2013-12-17 | 2017-01-11 | 沈阳觉醒软件有限公司 | Preprocessing unit, data processing system consisting of same, and processing method |
| CN106534184A (en) * | 2016-12-12 | 2017-03-22 | 南京富岛信息工程有限公司 | Control system information security gateway based on depth data filtering |
| CN106648912A (en) * | 2015-10-30 | 2017-05-10 | 北京国双科技有限公司 | Modular method and apparatus for data processing in data acquisition platform |
| CN106712880A (en) * | 2015-11-12 | 2017-05-24 | 上海远景数字信息技术有限公司 | Communication management system |
| CN106707935A (en) * | 2016-12-30 | 2017-05-24 | 武汉钢铁工程技术集团自动化有限责任公司 | Data exchange monitoring device and data exchange monitoring method based on host platform |
| CN107360051A (en) * | 2016-09-30 | 2017-11-17 | 成都科来软件有限公司 | A kind of method and device for controlling a variety of different network protocol analysis switches |
| CN107483249A (en) * | 2017-08-21 | 2017-12-15 | 叶军 | A kind of distributed mobile agent NMS and method |
| CN107835080A (en) * | 2017-11-09 | 2018-03-23 | 成都国盛天丰网络科技有限公司 | A kind of distributed system method of data capture and data signature generation method |
| CN107846460A (en) * | 2017-10-30 | 2018-03-27 | 中国人民解放军战略支援部队航天工程大学 | A kind of recurrence system and method for Military Information System information flow |
| CN107948280A (en) * | 2017-11-24 | 2018-04-20 | 无锡南理工新能源电动车科技发展有限公司 | The monitoring system of point and mirror image spectral fluxes is visited in a kind of combination |
| CN108259211A (en) * | 2017-05-11 | 2018-07-06 | 紫光华山信息技术有限公司 | A kind of device management method and device |
| CN108429755A (en) * | 2018-03-21 | 2018-08-21 | 深圳天源迪科信息技术股份有限公司 | Basic network security information dynamic management platform and method |
| CN108833199A (en) * | 2018-04-26 | 2018-11-16 | 广州视源电子科技股份有限公司 | Method, apparatus, equipment and the storage medium that data report |
| CN110187661A (en) * | 2019-06-27 | 2019-08-30 | 山东和信智能科技有限公司 | Serial data isolation protecting device is used safely in a kind of industry control |
| CN110380866A (en) * | 2019-07-17 | 2019-10-25 | 中科恒运股份有限公司 | One kind is about data safety level of protection management method |
| CN111917580A (en) * | 2020-07-28 | 2020-11-10 | 平安普惠企业管理有限公司 | Packet capture processing method, device, equipment and computer readable storage medium |
| CN111931066A (en) * | 2020-09-11 | 2020-11-13 | 四川新网银行股份有限公司 | Real-time recommendation system design method |
| CN112953792A (en) * | 2021-02-05 | 2021-06-11 | 中国工商银行股份有限公司 | Network traffic monitoring method and device |
| CN113259566A (en) * | 2021-05-19 | 2021-08-13 | 山东起跑线母婴健康管理有限公司 | System convenient for family members and doctors to acquire childbirth information in real time |
| CN115022402A (en) * | 2022-07-01 | 2022-09-06 | 杭州乘云数字技术有限公司 | Agent acquisition method and system based on one-stack integration technology |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US9203711B2 (en) * | 2013-09-24 | 2015-12-01 | International Business Machines Corporation | Port mirroring for sampling measurement of network flows |
Family Cites Families (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| AU707905B2 (en) * | 1996-04-24 | 1999-07-22 | Nortel Networks Corporation | Internet protocol filter |
| CN1447267A (en) * | 2002-03-22 | 2003-10-08 | 上海网上乐园信息技术有限公司 | Monitor system for structure of isomery in same network and implement method |
| CN101136026A (en) * | 2007-05-15 | 2008-03-05 | 北京聚生科技有限公司 | Web page content capturing method based on XMLHTTP component technology |
| CN101122853A (en) * | 2007-09-12 | 2008-02-13 | ***通信集团福建有限公司 | Configurable data gathering method |
-
2008
- 2008-05-22 CN CN200810037826XA patent/CN101286895B/en active Active
Cited By (54)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101552693B (en) * | 2009-05-13 | 2011-01-05 | 山东中创软件商用中间件股份有限公司 | Remote configuration technology |
| CN101567813B (en) * | 2009-05-22 | 2013-01-23 | 北京学之途网络科技有限公司 | Distributed network data acquisition method and system based on sniffing |
| CN101567813A (en) * | 2009-05-22 | 2009-10-28 | 北京学之途网络科技有限公司 | Distributed network data acquisition method and system based on sniffing |
| CN101917467A (en) * | 2010-07-27 | 2010-12-15 | 中国科学院等离子体物理研究所 | Distributed computer monitoring system and monitoring method thereof |
| CN101917467B (en) * | 2010-07-27 | 2013-02-20 | 中国科学院等离子体物理研究所 | Distributed computer monitoring system and monitoring method thereof |
| CN101989928A (en) * | 2010-11-05 | 2011-03-23 | 中兴通讯股份有限公司 | Network equipment information acquisition method and system, management system and network equipment |
| CN102130950A (en) * | 2011-03-14 | 2011-07-20 | 中国科学技术大学苏州研究院 | Distributed monitoring system based on Hadoop cluster and monitoring method thereof |
| CN102130950B (en) * | 2011-03-14 | 2013-10-23 | 中国科学技术大学苏州研究院 | Distributed monitoring method based on Hadoop cluster |
| CN102497427A (en) * | 2011-12-13 | 2012-06-13 | 山东省建筑科学研究院 | Method and device for realizing data acquisition services of renewable energy source monitoring system |
| CN102497427B (en) * | 2011-12-13 | 2014-02-05 | 山东省建筑科学研究院 | Method and device for realizing data acquisition services of renewable energy source monitoring system |
| CN102664769A (en) * | 2012-04-19 | 2012-09-12 | 清华大学 | Acquisition and analysis system for network packets and realization method thereof |
| CN104520829B (en) * | 2012-06-15 | 2018-07-20 | 奥林奇公司 | Device and method for extracting data from the communication bus of motor vehicle |
| CN104520829A (en) * | 2012-06-15 | 2015-04-15 | 奥林奇公司 | Device and method for extracting data from a communication bus of a motor vehicle |
| CN103778041A (en) * | 2012-10-18 | 2014-05-07 | 腾讯科技（北京）有限公司 | Data monitoring method and device for internet |
| CN103778041B (en) * | 2012-10-18 | 2019-03-26 | 腾讯科技（北京）有限公司 | Data monitoring method and device for internet |
| CN103152229A (en) * | 2013-04-03 | 2013-06-12 | 北京合力思腾科技股份有限公司 | Dynamic configuration method for monitoring index item |
| CN103152229B (en) * | 2013-04-03 | 2015-10-21 | 北京合力思腾科技股份有限公司 | Monitor control index item Dynamic Configuration |
| CN104461929A (en) * | 2013-09-23 | 2015-03-25 | ***股份有限公司 | Distributed type data caching method based on interceptor |
| CN104461929B (en) * | 2013-09-23 | 2018-03-23 | ***股份有限公司 | Distributed data cache method based on blocker |
| CN103701783B (en) * | 2013-12-17 | 2017-01-11 | 沈阳觉醒软件有限公司 | Preprocessing unit, data processing system consisting of same, and processing method |
| CN104135399A (en) * | 2014-07-09 | 2014-11-05 | 国家电网公司 | Flow monitoring method based on wireless public network communication way for power distribution terminal |
| CN104125100A (en) * | 2014-08-11 | 2014-10-29 | 浪潮通信信息***有限公司 | Method for monitoring dashboard in real time in communication network management |
| CN104363276A (en) * | 2014-11-07 | 2015-02-18 | 哈尔滨工程大学 | Subdomain-based third-party cloud monitoring method |
| CN104363276B (en) * | 2014-11-07 | 2017-07-11 | 哈尔滨工程大学 | Third party cloud monitoring method based on point domain |
| CN105591833A (en) * | 2014-11-26 | 2016-05-18 | ***股份有限公司 | Flow-acquiring method based on rule engine |
| CN104954280A (en) * | 2015-04-23 | 2015-09-30 | 华为技术有限公司 | Data message processing method and device |
| CN104954280B (en) * | 2015-04-23 | 2018-10-09 | 华为技术有限公司 | A kind of data message processing method and device |
| CN106648912B (en) * | 2015-10-30 | 2020-11-03 | 北京国双科技有限公司 | Modularization method and device for data processing in data acquisition platform |
| CN106648912A (en) * | 2015-10-30 | 2017-05-10 | 北京国双科技有限公司 | Modular method and apparatus for data processing in data acquisition platform |
| CN106712880B (en) * | 2015-11-12 | 2019-06-04 | 上海东土远景工业科技有限公司 | A kind of communication management system |
| CN106712880A (en) * | 2015-11-12 | 2017-05-24 | 上海远景数字信息技术有限公司 | Communication management system |
| CN107360051A (en) * | 2016-09-30 | 2017-11-17 | 成都科来软件有限公司 | A kind of method and device for controlling a variety of different network protocol analysis switches |
| CN107360051B (en) * | 2016-09-30 | 2021-06-15 | 成都科来软件有限公司 | Method and device for controlling analysis switch of multiple different network protocols |
| CN106534184A (en) * | 2016-12-12 | 2017-03-22 | 南京富岛信息工程有限公司 | Control system information security gateway based on depth data filtering |
| CN106534184B (en) * | 2016-12-12 | 2019-08-06 | 南京富岛信息工程有限公司 | A kind of control system information security gateway based on depth data filtering |
| CN106707935B (en) * | 2016-12-30 | 2019-03-29 | 武汉钢铁工程技术集团有限责任公司 | The data exchange monitoring device and data exchange monitoring method of Intrusion Detection based on host platform |
| CN106707935A (en) * | 2016-12-30 | 2017-05-24 | 武汉钢铁工程技术集团自动化有限责任公司 | Data exchange monitoring device and data exchange monitoring method based on host platform |
| CN108259211B (en) * | 2017-05-11 | 2021-08-24 | 新华三信息技术有限公司 | Equipment management method and device |
| CN108259211A (en) * | 2017-05-11 | 2018-07-06 | 紫光华山信息技术有限公司 | A kind of device management method and device |
| CN107483249A (en) * | 2017-08-21 | 2017-12-15 | 叶军 | A kind of distributed mobile agent NMS and method |
| CN107846460B (en) * | 2017-10-30 | 2020-09-25 | 中国人民解放军战略支援部队航天工程大学 | System and method for reproducing information flow of military information system |
| CN107846460A (en) * | 2017-10-30 | 2018-03-27 | 中国人民解放军战略支援部队航天工程大学 | A kind of recurrence system and method for Military Information System information flow |
| CN107835080A (en) * | 2017-11-09 | 2018-03-23 | 成都国盛天丰网络科技有限公司 | A kind of distributed system method of data capture and data signature generation method |
| CN107948280A (en) * | 2017-11-24 | 2018-04-20 | 无锡南理工新能源电动车科技发展有限公司 | The monitoring system of point and mirror image spectral fluxes is visited in a kind of combination |
| CN108429755B (en) * | 2018-03-21 | 2021-02-05 | 深圳天源迪科信息技术股份有限公司 | Dynamic management platform and method for network security basic information |
| CN108429755A (en) * | 2018-03-21 | 2018-08-21 | 深圳天源迪科信息技术股份有限公司 | Basic network security information dynamic management platform and method |
| CN108833199A (en) * | 2018-04-26 | 2018-11-16 | 广州视源电子科技股份有限公司 | Method, apparatus, equipment and the storage medium that data report |
| CN110187661A (en) * | 2019-06-27 | 2019-08-30 | 山东和信智能科技有限公司 | Serial data isolation protecting device is used safely in a kind of industry control |
| CN110380866A (en) * | 2019-07-17 | 2019-10-25 | 中科恒运股份有限公司 | One kind is about data safety level of protection management method |
| CN111917580A (en) * | 2020-07-28 | 2020-11-10 | 平安普惠企业管理有限公司 | Packet capture processing method, device, equipment and computer readable storage medium |
| CN111931066A (en) * | 2020-09-11 | 2020-11-13 | 四川新网银行股份有限公司 | Real-time recommendation system design method |
| CN112953792A (en) * | 2021-02-05 | 2021-06-11 | 中国工商银行股份有限公司 | Network traffic monitoring method and device |
| CN113259566A (en) * | 2021-05-19 | 2021-08-13 | 山东起跑线母婴健康管理有限公司 | System convenient for family members and doctors to acquire childbirth information in real time |
| CN115022402A (en) * | 2022-07-01 | 2022-09-06 | 杭州乘云数字技术有限公司 | Agent acquisition method and system based on one-stack integration technology |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101286895B (en) | 2010-08-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101286895B (en) | Dynamic configurable data monitoring system and method for distributed network | |
| CN103546343B (en) | The network traffics methods of exhibiting of network traffic analysis system and system | |
| CN101605074B (en) | Method and system for monitoring Trojan Horse based on network communication behavior characteristic | |
| CN104219327B (en) | Distributed cache system | |
| CN109831318A (en) | A kind of system, method and server obtaining network topology | |
| CN109194543A (en) | Collecting method and device | |
| CN101493779A (en) | Remote terminal control method | |
| CN103064731A (en) | Device and method for improving message queue system performance | |
| CN101371245A (en) | Distributed capture and aggregation of dynamic application usage information | |
| CN103701783B (en) | Preprocessing unit, data processing system consisting of same, and processing method | |
| CA2515052A1 (en) | Relational model for management information in network devices | |
| CN103618652A (en) | Audit and depth analysis system and audit and depth analysis method of business data | |
| CN102238023A (en) | Method and device for generating warning data of network management system | |
| CN103124226A (en) | Household broadband net-system play monitoring system and method | |
| CN106453541A (en) | Data synchronization method, server and data synchronization system | |
| CN110493140A (en) | The cognitive method and its operating system of link event in information network system | |
| CN106559498A (en) | Air control data collection platform and its collection method | |
| CN109831316A (en) | Massive logs real-time analyzer, real-time analysis method and readable storage medium storing program for executing | |
| CN103116580A (en) | Providing method, system and device of website content information | |
| CN109495501A (en) | Network security Dynamic Asset management system | |
| Chesson | The network UNIX system | |
| CN100413248C (en) | Improved method and system for carrying out charging based on flow | |
| WO2016091141A1 (en) | Method and apparatus for information collection | |
| CN109120647A (en) | A kind of security exchange system | |
| CN116346680A (en) | Inter-process network flow tracking control method and system based on topology sniffing |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |