CN105281933A - Network message learning method and device - Google Patents
Network message learning method and device Download PDFInfo
- Publication number
- CN105281933A CN105281933A CN201410289788.2A CN201410289788A CN105281933A CN 105281933 A CN105281933 A CN 105281933A CN 201410289788 A CN201410289788 A CN 201410289788A CN 105281933 A CN105281933 A CN 105281933A
- Authority
- CN
- China
- Prior art keywords
- keyword
- message
- network message
- network
- store list
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Landscapes
- Remote Monitoring And Control Of Power-Distribution Networks (AREA)
Abstract
The invention is suitable for the technical filed of a smart power grid and provides a network message learning method and device. The method comprises the following steps: according to a received message, extracting a keyword of a network message in the message, wherein the network message comprises a GOOSE message and an SV message, and the keyword is the unique identification of the network message; comparing the keyword with identification keywords in a storage list one by one, judging whether the storage list has an identification keyword same with the keyword; if so, continuously learning a keyword of the next network message; and if not, decoding the keyword, and storing the keyword decoded successfully to the storage list. The network message learning method and device can efficiently monitor intelligent substation process level network running state in real time without depending on labors, thereby reducing maintenance and operation cost of an intelligent substation and time cost.
Description
Technical field
The invention belongs to intelligent power grid technology field, particularly relate to a kind of network message learning method and device.
Background technology
Based on the theoretical foundation of IEC61850 standard, the construction of intelligent grid enters the stage comprehensively accelerated development in China.Intelligent substation playing a part in whole intelligent grid construction is very important, and the performance of process-level network determines again intelligent substation quality.At present, the core network device being responsible for exchanges data in the transformer station process layer network used is the network message learning method used based on MAC address learning, None-identified transformer station process layer network message in data exchange process, as GOOSE message, SV message, traffic statistics cannot be carried out within network nodes to transformer station process layer network message, cannot follow the trail of and locate chain rupture node when chain rupture appears in transformer station process layer message in a network, monitoring intelligent Substation process-level network operation situation efficiency is low.
Summary of the invention
Embodiments provide a kind of network message learning method and device, be intended to solve existing network message learning method and cannot carry out Real-Time Monitoring and traffic statistics within network nodes for transformer station process layer network message, the inefficient problem of monitoring intelligent Substation process-level network operation situation.
On the one hand, provide a kind of network message learning method, described method comprises:
According to the message received, extract the keyword of network message in described message, described network message comprises GOOSE message, SV message, and described keyword is the unique identification of described network message;
Identification key in more described keyword and store list, judges whether there is the identification key identical with described keyword in described store list one by one, if so, the keyword of continue studying network message described in next;
If there is not the identification key identical with described keyword in described store list, described keyword of decoding, is stored into the described keyword of successfully decoded in described store list.
On the other hand, provide a kind of network message learning device, described device comprises:
Extraction unit, for the message that basis receives, extract the keyword of network message in described message, described network message comprises GOOSE message, SV message, and described keyword is the unique identification of described network message;
Judging unit, for identification key in more described keyword one by one and store list, judges whether there is the identification key identical with described keyword in described store list, if so, the keyword of continue studying network message described in next;
Memory cell, if for there is not the identification key identical with described keyword in described store list, described keyword of decoding, is stored into the described keyword of successfully decoded in described store list.
In the embodiment of the present invention, according to the message received, extract the keyword of network message in described message, described network message comprises GOOSE message, SV message, and described keyword is the unique identification of described network message; Identification key in more described keyword and store list, judges whether there is the identification key identical with described keyword in described store list one by one, if so, the keyword of continue studying network message described in next; If not, described keyword of decoding, is stored in described store list by the described keyword of successfully decoded, the present invention, can the monitoring intelligent Substation process-level network operation situation of real-time high-efficiency, do not rely on artificial, decrease maintenance operation cost and the time cost of intelligent substation.
Accompanying drawing explanation
Fig. 1 is the realization flow figure of the network message learning method that the embodiment of the present invention one provides;
Fig. 2 is the concrete structure block diagram of the network message learning device that the embodiment of the present invention two provides.
Embodiment
In order to make object of the present invention, technical scheme and advantage clearly understand, below in conjunction with drawings and Examples, the present invention is further elaborated.Should be appreciated that specific embodiment described herein only in order to explain the present invention, be not intended to limit the present invention.
In embodiments of the present invention, according to the message received, extract the keyword of network message in described message, described network message comprises GOOSE message, SV message, and described keyword is the unique identification of described network message; Identification key in more described keyword and store list, judges whether there is the identification key identical with described keyword in described store list one by one, if so, the keyword of continue studying network message described in next; If not, described keyword of decoding, is stored into the described keyword of successfully decoded in described store list.
Below in conjunction with specific embodiment, realization of the present invention is described in detail:
Embodiment one
Fig. 1 shows the realization flow of the network message learning method that the embodiment of the present invention one provides, and details are as follows:
In step S101, according to the message received, extract the keyword of network message in described message, described network message comprises GOOSE message, SV message, and described keyword is the unique identification of described network message.
In the present embodiment, described network message comprises GOOSE message, SV message, after intelligent terminal for reception to message, the network message of process layer is gone out according to ethernet type keyword recognition, as GOOSE message, SV message, ethernet type keyword comprises 0x88B8 and 0x88BA, extracts the keyword of network message in described message, and described keyword comprises networking type, SMAC, application identities.Concrete, according to the message received, from ethernet header, extracted the keyword of network message in described message by hardware-accelerated lookup algorithm.
In step s 102, identification key in more described keyword and store list, judges whether there is the identification key identical with described keyword in described store list one by one, if so, the keyword of continue studying network message described in next.
In the present embodiment, described identification key is the keyword that system had learnt, and it comprises networking type, SMAC, application identities.The unique identification keyword of network message extracted compares one by one with the message unique identification keyword in store list, judges comparative result, if having occurrence in store list, represent to exist into message, study completes, and enters step S103; Otherwise the keyword of continue studying network message described in next.
In step s 103, if there is not the identification key identical with described keyword in described store list, described keyword of decoding, is stored into the described keyword of successfully decoded in described store list.
In the present embodiment, the identification key identical with described keyword is there is not in described store list, decoding GOOSE message or SV message analyzing, judge the integrality of GOOSE message and SV message, export analysis result, if successfully decoded, confirm that network message is complete, the described keyword of successfully decoded is stored in described store list; If decode unsuccessfully, stop the study to this network message, carry out the study of next network message.Concrete, be stored in described store list by the described keyword of quick insertion algorithm by successfully decoded.
As a preferred version, also comprise the flow obtaining network message corresponding to the described keyword of successfully decoded according to type respectively.
Concrete, intelligent terminal carries out inlet flow rate statistics to the Substation process-level network message successfully learnt is sub-category, obtain the flow of the described keyword map network message of successfully decoded, achieve and carry out inlet flow rate statistics respectively according to two kinds of process-level network GOOSE message and SV message.Concrete, by Large Copacity internal memory and to message classification staining technique, sorting flow statistics is carried out to network message
The present embodiment, can reach according to ethernet type keyword recognition process-level network, decode procedure layer network message extracts identification key, the integrality of checking network message, and then carry out inlet flow rate statistics respectively according to two kinds of process-level network message, can the monitoring intelligent Substation process-level network operation situation of real-time high-efficiency, so that can efficient track and localization malfunctioning node in time when transformer station process layer network breaks down, do not rely on artificial, decrease maintenance operation cost and the time cost of intelligent substation.
Embodiment two
Fig. 2 shows the concrete structure block diagram of the network message learning device that the embodiment of the present invention two provides, and for convenience of explanation, illustrate only the part relevant to the embodiment of the present invention.In the present embodiment, this network message learning device comprises: extraction unit 21, judging unit 22, memory cell 23 and statistic unit 24.
Wherein, extraction unit 21, for the message that basis receives, extract the keyword of network message in described message, described network message comprises GOOSE message, SV message, and described keyword is the unique identification of described network message;
Judging unit 22, for identification key in more described keyword one by one and store list, judges whether there is the identification key identical with described keyword in described store list, if so, the keyword of continue studying network message described in next;
Memory cell 23, if for there is not the identification key identical with described keyword in described store list, described keyword of decoding, is stored into the described keyword of successfully decoded in described store list.
The present embodiment, can reach according to ethernet type keyword recognition process-level network, decode procedure layer network message extracts identification key, the integrality of checking network message, can the monitoring intelligent Substation process-level network operation situation of real-time high-efficiency, so that can efficient track and localization malfunctioning node in time when transformer station process layer network breaks down, do not rely on artificial, decrease maintenance operation cost and the time cost of intelligent substation.
Further, described device also comprises:
Statistic unit 24, the flow of the network message that the described keyword for obtaining successfully decoded respectively according to type is corresponding.
Further, described extraction unit, specifically for according to the message received, extracts the keyword of network message in described message from ethernet header by hardware-accelerated lookup algorithm.
Further, described memory cell is specifically for being stored in described store list by the described keyword of quick insertion algorithm by successfully decoded.
Further, described keyword comprises networking type, SMAC, application identities.
The network message learning device that the embodiment of the present invention provides can be applied in the embodiment of the method one of aforementioned correspondence, and details, see the description of above-described embodiment one, do not repeat them here.
It should be noted that in said system embodiment, included unit is carry out dividing according to function logic, but is not limited to above-mentioned division, as long as can realize corresponding function; In addition, the concrete title of each functional unit, also just for the ease of mutual differentiation, is not limited to protection scope of the present invention.
In addition, one of ordinary skill in the art will appreciate that all or part of step realized in the various embodiments described above method is that the hardware that can carry out instruction relevant by program has come, corresponding program can be stored in a computer read/write memory medium, described storage medium, as ROM/RAM, disk or CD etc.
The foregoing is only preferred embodiment of the present invention, not in order to limit the present invention, all any amendments done within the spirit and principles in the present invention, equivalent replacement and improvement etc., all should be included within protection scope of the present invention.
Claims (10)
1. a network message learning method, is characterized in that, described method comprises:
According to the message received, extract the keyword of network message in described message, described network message comprises GOOSE message, SV message, and described keyword is the unique identification of described network message;
Identification key in more described keyword and store list, judges whether there is the identification key identical with described keyword in described store list one by one, if so, the keyword of continue studying network message described in next;
If there is not the identification key identical with described keyword in described store list, described keyword of decoding, is stored into the described keyword of successfully decoded in described store list.
2. the method for claim 1, is characterized in that, described method also comprises:
The flow of network message corresponding to the described keyword of successfully decoded is obtained respectively according to type.
3. method as claimed in claim 1 or 2, it is characterized in that, the message that described basis receives, the keyword extracting network message in described message is specially:
According to the message received, from ethernet header, extracted the keyword of network message in described message by hardware-accelerated lookup algorithm.
4. method as claimed in claim 1 or 2, it is characterized in that, the described described keyword by successfully decoded is stored in described store list and is specially:
Be stored in described store list by the described keyword of quick insertion algorithm by successfully decoded.
5. the method for claim 1, is characterized in that, described keyword comprises networking type, SMAC, application identities.
6. a network message learning device, is characterized in that, described device comprises:
Extraction unit, for the message that basis receives, extract the keyword of network message in described message, described network message comprises GOOSE message, SV message, and described keyword is the unique identification of described network message;
Judging unit, for identification key in more described keyword one by one and store list, judges whether there is the identification key identical with described keyword in described store list, if so, the keyword of continue studying network message described in next;
Memory cell, if for there is not the identification key identical with described keyword in described store list, described keyword of decoding, is stored into the described keyword of successfully decoded in described store list.
7. device as claimed in claim 6, it is characterized in that, described device also comprises:
Statistic unit, the flow of the network message that the described keyword for obtaining successfully decoded respectively according to type is corresponding.
8. device as claimed in claims 6 or 7, is characterized in that, described extraction unit, specifically for according to the message received, extracts the keyword of network message in described message from ethernet header by hardware-accelerated lookup algorithm.
9. device as claimed in claims 6 or 7, it is characterized in that, described memory cell is specifically for being stored in described store list by the described keyword of quick insertion algorithm by successfully decoded.
10. device as claimed in claim 6, it is characterized in that, described keyword comprises networking type, SMAC, application identities.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410289788.2A CN105281933A (en) | 2014-06-24 | 2014-06-24 | Network message learning method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410289788.2A CN105281933A (en) | 2014-06-24 | 2014-06-24 | Network message learning method and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105281933A true CN105281933A (en) | 2016-01-27 |
Family
ID=55150313
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410289788.2A Pending CN105281933A (en) | 2014-06-24 | 2014-06-24 | Network message learning method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105281933A (en) |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102624943A (en) * | 2012-04-12 | 2012-08-01 | 广东省电力调度中心 | Method and system for ensuring switch to carry out automatic learning on intelligent electronic equipment ports |
| CN103378654A (en) * | 2012-04-27 | 2013-10-30 | 南京南瑞继保电气有限公司 | Method for filtering network messages of process level of intelligent substation |
| CN103647717A (en) * | 2013-11-26 | 2014-03-19 | 华南理工大学 | Message accurate recognition-based substation communication network deterministic path switching method |
-
2014
- 2014-06-24 CN CN201410289788.2A patent/CN105281933A/en active Pending
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102624943A (en) * | 2012-04-12 | 2012-08-01 | 广东省电力调度中心 | Method and system for ensuring switch to carry out automatic learning on intelligent electronic equipment ports |
| CN103378654A (en) * | 2012-04-27 | 2013-10-30 | 南京南瑞继保电气有限公司 | Method for filtering network messages of process level of intelligent substation |
| CN103647717A (en) * | 2013-11-26 | 2014-03-19 | 华南理工大学 | Message accurate recognition-based substation communication network deterministic path switching method |
Non-Patent Citations (2)
| Title |
|---|
| 张帆，竹之涵等: "面向通用对象的变电站事件（GOOSE）实时解析和预警***", 《电力***保护与控制》 * |
| 胡春潮: "提供数字化变电站关键报文传输可靠性方法研究", 《电力***保护与控制》 * |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107895176B (en) | Fog calculation system and method for wide-area monitoring and diagnosis of hydroelectric machine group | |
| CN103856372B (en) | A kind of monitoring method and monitoring device of digital transformer substation GOOSE message | |
| CN107623754B (en) | WiFi acquisition system and method based on authenticity MAC identification | |
| CN112510841B (en) | Topology identification method and device for power distribution automation | |
| CN102754394B (en) | Method for hash table storage, method for hash table lookup, and devices thereof | |
| CN104616092A (en) | Distributed log analysis based distributed mode handling method | |
| CN110460454B (en) | Intelligent network equipment port fault prediction method based on deep learning | |
| CN104217566A (en) | Intelligent meter searching method and system for type II collector | |
| CN101340567B (en) | Reliability guarantee method of network video monitoring frontend | |
| CN103430482A (en) | Network switching device for quantifying available service-level capacity of a network for projected network traffic | |
| CN109451486A (en) | WiFi acquisition system and WiFi terminal detection method based on probe request | |
| CN101916259B (en) | Space compression method of state transition table of deterministic automaton | |
| CN102638408A (en) | Method for sending topology change (TC) message and method and device for refreshing forwarding table | |
| CN102467670A (en) | Immunity-based anomaly detection method | |
| CN105281933A (en) | Network message learning method and device | |
| CN103297298A (en) | Network storm real-time rapid detecting method used for intelligent substation | |
| CN112187582A (en) | Intelligent substation process layer switch port flow monitoring pre-warning system and method | |
| Wang et al. | A data mining approach to discover critical events for event-driven optimization in building air conditioning systems | |
| CN104461385A (en) | Multi-hard disk balanced storage method with self-adaptive port traffic | |
| CN104007345B (en) | The network access testing method of a kind of power station smart machine and test device thereof | |
| CN102654531A (en) | Remedying method and remedying device of lacked electric energy qualitative data | |
| CN106201361B (en) | A kind of electric power big data storage method having reply N-5 storaging medium failure | |
| CN117007912B (en) | Distribution network line power failure analysis method, device, equipment and storage medium | |
| CN202068232U (en) | Intelligent network recording and analyzing device | |
| CN206060795U (en) | A kind of switch performance monitoring system across security partitioning |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| AD01 | Patent right deemed abandoned | ||
| AD01 | Patent right deemed abandoned |
Effective date of abandoning: 20190809 |