CN105978706A - Network traffic linkage auditing equipment and method - Google Patents
Network traffic linkage auditing equipment and method Download PDFInfo
- Publication number
- CN105978706A CN105978706A CN201610236604.5A CN201610236604A CN105978706A CN 105978706 A CN105978706 A CN 105978706A CN 201610236604 A CN201610236604 A CN 201610236604A CN 105978706 A CN105978706 A CN 105978706A
- Authority
- CN
- China
- Prior art keywords
- module
- audit
- network
- traffic information
- memory space
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0896—Bandwidth or capacity management, i.e. automatically increasing or decreasing capacities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/14—Network analysis or design
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Environmental & Geological Engineering (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses network traffic linkage auditing equipment, which comprises a determination module, a judgment module, an auditing module and a storage module, and is characterized in that the auditing module comprises a content analysis module, a traffic statistics module, a message classification module and a message statistics module, an output of the message classification module is respectively connected with an input end of the content analysis module and an input end of the message statistics module, an output end of the message statistics module is connected to an input end of the traffic statistics module through a statistical register module, and the traffic statistics module is connected with the content analysis module. According to the invention, a complete, fine-grained auditing and controlling whole-network auditing scheme is formed, the performance of the traffic auditing equipment can be improved, and judgment is carried out according to free storage space conditions in the storage space on whether enough storage space is available or not at present to store network traffic information acquired by auditing before network traffic auditing is performed, thereby being capable of avoiding loss of network auditing traffic information in the prior art.
Description
Technical field
The present invention relates to network data processing technique, the linkage audit equipment of a kind of network traffics and method.
Background technology
Along with the high speed development of network, network size is the most increasing, and in network, the application of carrying also gets more and more with business
Sample.In the face of day by day complicated network, attendant it is generally desirable to business and the stream of each business of carrying in awareness network
Amount situation, and Intranet user and traffic conditions thereof, and the ruuning situation of awareness network accordingly, to judge that the network bandwidth is
No abundance, the network bandwidth distribution the most reasonable.When Network Abnormal occurs, it is possible to provide foot for location, the problem that solves
Enough foundations.Because network traffics audit has become as one indispensable function of the network equipment.
Network traffics audit can be generally divided into the network traffics of real-time network traffics audit and history and audits two kinds.Wherein
Representated by real-time network traffics audit is the current traffic conditions of network, and attendant can judge current net accordingly
Network ruuning situation and carry out the track and localization of network failure；And be one section in the past representated by the network traffics audit of history
The network traffic conditions of time and network traffics tendency, be generally used for the network failure analysis of causes afterwards.Two kinds of network flows
Amount audit has different application scenarios, is responsible for different responsibilities, the most all in network operation situation and fault location
It is necessary to the network equipment.
Network auditing system equipment refers to the equipment that network traffics and content are audited by IDS etc., and this kind equipment needs network
Various types of message characteristics in flow, and the content of network transmission is identified, statistics and analysis.General express network
Audit device includes two parts function, and a part is basic traffic statistics, such as the flow of certain port, ip, agreement
Counting, another part is the analysis to network data content.Wherein, the former processing procedure is the most fixing, but needs place
Manage all of data, the latter's complex disposal process but need data to be processed less.In the applied environment of express network,
Equipment performance is required the highest by network audit.
Prior art generally carries out web-based history network auditing system by two kinds of methods.
First the length in one sampling period of setting, such as 10 minutes, then sample devices forwarding within each cycle
The data traffic size that the various audit targets (such as each business, each user, user's group etc.) produce, and tie up for these
Degree generates network auditing system record, preserves in write into Databasce.Assume that we need the historical traffic letter of the audit each user of Intranet
Breath, then the information record of periodic sampling includes user's uplink traffic respectively within two sampling periods and downlink traffic.
In reality is implemented, attendant can need the field information of audit, such as uplink packet according to practical situation additions and deletions
Number, downstream packets number etc..According to the audit information got, attendant just knows each user mean flow in each cycle
Amount speed, it is also possible to know the integrated flow situation in the range of each user is at the appointed time.But in the method, due to
Sampling period is fixing, and under normal circumstances, number of users in network and the business number of the network carrying all such as
The change of network and change, if the quantity of information that the same cycle needs record of the audit is too many, cause exceeding equipment Internal Audit Section
During rationality energy, it is possible to occur network traffics audit information to lose, the information finally making network traffics audit provide becomes
Unreliable, the audit of final network traffics the most just loses the meaning of reality.
2. on the basis of above-mentioned first method, automatically adjust the sampling period according to the performance of the network equipment, adjust mode
For this process time was contrasted with the sampling period preset, if this time that processes is more than the sampling week preset
Phase, then tune up the sampling period, otherwise turn down the sampling period, so that the network equipment can be with the data traffic phase with reality
The sampling period answered audits, with the problem avoiding the audit information of network traffics to lose.But, the method according to
The handling duration in a upper sampling period adjusts the duration in the sampling period of next cycle, belongs to and adjusts afterwards, has
Certain hysteresis quality, in the loss being the most still likely to result in network auditing system information.
Visible, prior art lacks the technical scheme that can effectively solve the problem that network traffics audit information loses problem.
Summary of the invention
It is an object of the invention to provide linkage audit equipment and the side of the network traffics that a kind of motility is good, disposal ability is strong
Method, with the problem solving to propose in above-mentioned background technology.
For achieving the above object, the present invention provides following technical scheme:
A kind of linkage audit equipment of network traffics, including determining module, judge module, Audit Module and memory module,
Described determine that module, judge module, Audit Module and memory module are sequentially connected, described determine that module is for predefining
Store the size of memory space needed for the network traffic information of each audit target, be specially and obtain in advance for each audit
Storage size information needed for the network traffic information that the storage of object distribution is once added up；Or, determine respectively
In several audit cycles before the current audit cycle, the storage shared by the network traffic information of each audit target is empty
Between and value average；According to described, described judge module, in the most predetermined audit cycle, determines that module determines
The network traffic information storing each audit target needed for the size of memory space, it is judged that whether idle memory space
More than or equal to the memory space sum needed for the described network traffic information determining each audit target that module determines；Institute
State Audit Module and include content analysis module, traffic statistics module, message classification module and counting messages module, described report
The outfan of literary composition sort module connects input and the input of counting messages module of content analysis module, described report respectively
The outfan of the literary composition statistical module input by statistic registers module connection traffic statistical module, described traffic statistics mould
Block is connected with content analysis module；Described message classification module is uploaded to network audit by needing the flow carrying out content analysis
Content analysis module in software module, the data that described statistic registers module is uploaded for stored messages statistical module are also
Passing to traffic statistics module, described counting messages module carries out adding up and update network audit software module according to message characteristic
In the statistic registers module that can read, described message classification module is according to network interface card ip, port, agreement, length characteristic handle
Message classification processes；The network traffic information that described memory module obtains for storing described Audit Module to add up.
As the further scheme of the present invention: the memory space of described free time is memory space idle in caching.
As the further scheme of the present invention: described memory module specifically for: raw according to audit cycle and predetermined form
The corresponding relation in one-tenth cycle, network traffic information statistics obtained stores the report generation corresponding with the current audit cycle
In the audit statement in cycle.
The linkage audit method of described network traffics, specifically comprises the following steps that
(1) network audit equipment carries out data analysis, finds that the protocol port data of destination host transmitting-receiving occur that situation is abnormal
Time, send linkage request via control centre to the auditing system of destination host；Described data analysis is specially network audit
Equipment carries out protocal analysis by packet capturing mode or/and traffic monitor；
(2) in the most predetermined audit cycle, according to the network traffic information of predetermined each audit target of storage
The size of required memory space, it is judged that idle memory space whether be more than or equal to determined by each audit target
Memory space sum needed for network traffic information；
(3) be more than or equal at the memory space judging to obtain the free time determined by the network traffic information of each audit target
In the case of required memory space sum, add up the network that each audit target produces in a upper audit cycle successively
Flow information, and store the network traffic information that statistics obtains；
(4) judge obtain free time memory space be less than determined by each audit target network traffic information needed for
In the case of memory space sum, wait scheduled latent period, waiting that this predetermined latent period is then rear and empty
Not busy memory space be more than or equal to determined by each audit target network traffic information needed for memory space sum
Situation, adds up the network traffic information that each audit target produces in a upper audit cycle and in latent period successively,
And store the network traffic information that statistics obtains；
(5) network traffic information that the auditing system of destination host obtains according to statistics carries out corresponding linkage process, and warp
By control centre to network audit equipment feedback linkage result；
(6) destination host is controlled by network audit equipment according to described linkage result.
As the present invention further scheme: the predetermined network flow storing each audit target in described step (2)
The size of the memory space needed for amount information, specifically includes: obtains the storage distributed for each audit target in advance and once unites
Storage size information needed for the network traffic information of meter；Or, if determining respectively before the current audit cycle
In dry audit cycle, the average with value of the memory space shared by the network traffic information of each audit target.
Compared with prior art, the invention has the beneficial effects as follows:
Present invention achieves network audit equipment and the communication of main frame auditing system and linkage audit, constitute a set of comprehensive, thin
Granularity audit and the whole network audit program controlled, can promote the performance of network auditing system equipment, it is possible to carrying out network traffics
Before audit, just judge the most whether have enough storages empty according to the situation of idle storage space in memory space
Between with the storage network traffic information that obtains of audit such that it is able to avoid the loss of network audit flow information in prior art.
Accompanying drawing explanation
Fig. 1 is the structural representation of the linkage audit equipment of network traffics in the present invention.
Detailed description of the invention
Below in conjunction with detailed description of the invention, the technical scheme of this patent is described in more detail.
Refer to Fig. 1, the linkage audit equipment of a kind of network traffics, including determine module, judge module, Audit Module and
Memory module, described determines that module, judge module, Audit Module and memory module are sequentially connected, and described determines that module is used
The size of the memory space needed for the network traffic information of predetermined each audit target of storage, is specially and obtains in advance
Storage size information needed for the network traffic information that the storage distributed for each audit target is once added up；Or,
In determining several audit cycles before the current audit cycle respectively, shared by the network traffic information of each audit target
Memory space and value average；Described judge module in the most predetermined audit cycle, according to described really
The size of the memory space needed for the network traffic information storing each audit target that cover half block determines, it is judged that idle deposits
Whether storage space is empty more than or equal to the storage needed for the described network traffic information determining each audit target that module determines
Between sum；Described Audit Module includes content analysis module, traffic statistics module, message classification module and counting messages mould
Block, the outfan of described message classification module connects input and the input of counting messages module of content analysis module respectively
End, the outfan of the described counting messages module input by statistic registers module connection traffic statistical module, described
Traffic statistics module is connected with content analysis module；Described message classification module is uploaded needing the flow carrying out content analysis
To the content analysis module in network audit software module, described statistic registers module is used for stored messages statistical module
The data that pass also pass to traffic statistics module, and described counting messages module carries out adding up and update network according to message characteristic and examines
The statistic registers module that can read in meter software module, described message classification module according to network interface card ip, port, agreement,
Length characteristic processes message classification；The network traffics letter that described memory module obtains for storing described Audit Module statistics
Breath.
The memory space of described free time is memory space idle in caching；Described memory module specifically for: according to audit
Cycle and the corresponding relation in predetermined report generation cycle, network traffic information statistics obtained stores and current audit
In the audit statement in the report generation cycle that the cycle is corresponding.
The linkage audit method of described network traffics, specifically comprises the following steps that
(1) network audit equipment carries out data analysis, finds that the protocol port data of destination host transmitting-receiving occur that situation is abnormal
Time, send linkage request via control centre to the auditing system of destination host；Described data analysis is specially network audit
Equipment carries out protocal analysis by packet capturing mode or/and traffic monitor；
(2) in the most predetermined audit cycle, according to the network traffic information of predetermined each audit target of storage
The size of required memory space, it is judged that idle memory space whether be more than or equal to determined by each audit target
Memory space sum needed for network traffic information；The network traffic information institute of described predetermined each audit target of storage
The size of the memory space needed, specifically includes: obtain the network once added up in advance for the storage of each audit target distribution
Storage size information needed for flow information；Or, determine several audits before the current audit cycle respectively
In cycle, the average with value of the memory space shared by the network traffic information of each audit target；
(3) be more than or equal at the memory space judging to obtain the free time determined by the network traffic information of each audit target
In the case of required memory space sum, add up the network that each audit target produces in a upper audit cycle successively
Flow information, and store the network traffic information that statistics obtains；
(4) judge obtain free time memory space be less than determined by each audit target network traffic information needed for
In the case of memory space sum, wait scheduled latent period, waiting that this predetermined latent period is then rear and empty
Not busy memory space be more than or equal to determined by each audit target network traffic information needed for memory space sum
Situation, adds up the network traffic information that each audit target produces in a upper audit cycle and in latent period successively,
And store the network traffic information that statistics obtains；
(5) network traffic information that the auditing system of destination host obtains according to statistics carries out corresponding linkage process, and warp
By control centre to network audit equipment feedback linkage result；
(6) destination host is controlled by network audit equipment according to described linkage result.
Between communication mode and control centre and main frame auditing system between described control centre and network audit equipment
Communication mode, uses TCP but is not limited to TCP, and control centre is as monitoring end, and network audit equipment is as originating end, logical
As a example by letter Packet type includes request bag and respond packet, the method flow in the more specific detail embodiment of the present invention.
The main flow of the inventive method can be decomposed into network audit equipment control flow, control centre's control flow, with
And there is interaction relation between proxy control flow three part, and this three parts flow process, describe three in detail individually below
Split flow and interaction relation therebetween:
In network audit equipment control flow, network audit equipment gathers packet, the network audit equipment data to gathering
Bag buffers, and the packet that network audit equipment analysis collects carries out protocal analysis and stream especially by packet capturing mode
Amount monitors, network audit equipment judges whether the transceiving data situation of destination host has exception, if having, and network audit equipment
Send linkage request to the auditing system of destination host, can be specifically to send inquiry or control request bag, such as: find
The data of certain protocol port that certain main frame sends or receives are abnormal, 80 port HTTP, 20 and 21 FTP etc. of port,
It is probably main frame and has been mounted this horse program, utilize certain well known port firewall-penetrating forward outer net to send data；Or
Person finds that flow has exception；Network audit equipment receives the linkage result of feedback, and network audit equipment processes linkage result,
This linkage result carries out log recording or warning etc. process, such as: notify that destination host is controlled by manager, no
Then carry out the audit diary record of routine.
In proxy control flow, main frame auditing system starts main frame auditing service, and main frame auditing system connects in control
The heart, the event to be controlled such as main frame auditing system, i.e. wait linkage request, after main frame auditing system receives linkage request, enter
Row linkage processes；Such as: have exception if COM1, then the progress information with this port association is inquired about；If
Traffic Anomaly, the then information of front several processes that statistic flow is maximum；Main frame auditing system is by the result after inquiry, statistics
As linkage result feedback.
In control centre's control flow, control centre starts mainframe network and monitors, and control centre starts linkage network monitoring,
Control centre waits linkage request, after control centre receives linkage request, processes linkage event, obtains host computer control event,
Control centre waits that host computer control event analysis process completes, and control centre sends host computer control event, and i.e. sending linkage please
Asking, control centre receives and controls event result, i.e. result after the inquiry of Receiving Host auditing system feedback, statistics, control
Control event result is integrated into linkage result by center processed, and control centre is to network audit equipment feedback linkage result.
Present invention achieves network audit equipment and the communication of main frame auditing system and linkage audit, constitute a set of comprehensive, thin
Granularity audit and the whole network audit program controlled, can promote the performance of network auditing system equipment, it is possible to carrying out network traffics
Before audit, just judge the most whether have enough storages empty according to the situation of idle storage space in memory space
Between with the storage network traffic information that obtains of audit such that it is able to avoid the loss of network audit flow information in prior art.
Above the better embodiment of this patent is explained in detail, but this patent is not limited to above-mentioned embodiment,
In the ken that one skilled in the relevant art is possessed, it is also possible to make on the premise of without departing from this patent objective
Go out various change.
Claims (5)
1. the linkage audit equipment of network traffics, it is characterised in that include determining module, judge module, audit mould
Block and memory module, described determine that module, judge module, Audit Module and memory module are sequentially connected, and described determines mould
The size of block memory space needed for the predetermined network traffic information storing each audit target, is specially and obtains
Storage size information needed for the network traffic information that the storage distributed for each audit target in advance is once added up；Or
Person, in determining several audit cycles before the current audit cycle respectively, the network traffic information of each audit target
The average with value of shared memory space；Described judge module is in the most predetermined audit cycle, according to institute
State the size determining the memory space needed for the network traffic information storing each audit target that module determines, it is judged that idle
Memory space whether more than or equal to depositing needed for the described network traffic information determining each audit target that module determines
Storage space sum；Described Audit Module includes content analysis module, traffic statistics module, message classification module and message system
Meter module, the outfan of described message classification module connects the input of content analysis module and counting messages module respectively
Input, the outfan of the described counting messages module input by statistic registers module connection traffic statistical module,
Described traffic statistics module is connected with content analysis module；Described message classification module will need to carry out the flow of content analysis
Being uploaded to the content analysis module in network audit software module, described statistic registers module adds up mould for stored messages
Data that block is uploaded also pass to traffic statistics module, and described counting messages module carries out adding up and updating net according to message characteristic
The statistic registers module that can read in network audit software module, described message classification module is according to network interface card ip, port, association
View, length characteristic process message classification；The network flow that described memory module obtains for storing described Audit Module to add up
Amount information.
The linkage audit equipment of network traffics the most according to claim 1, it is characterised in that the storage of described free time
Space is memory space idle in caching.
The linkage audit equipment of network traffics the most according to claim 1, it is characterised in that described memory module has
Body is used for: according to the corresponding relation of audit cycle Yu predetermined report generation cycle, network traffic information statistics obtained
Store in the audit statement in the report generation cycle corresponding with the current audit cycle.
4. using the linkage audit equipment of the network traffics as described in claim 1-3 is arbitrary to carry out the method audited, it is special
Levy and be, specifically comprise the following steps that
(1) network audit equipment carries out data analysis, finds that the protocol port data of destination host transmitting-receiving occur that situation is abnormal
Time, send linkage request via control centre to the auditing system of destination host；Described data analysis is specially network audit
Equipment carries out protocal analysis by packet capturing mode or/and traffic monitor；
(2) in the most predetermined audit cycle, according to the network traffic information of predetermined each audit target of storage
The size of required memory space, it is judged that idle memory space whether be more than or equal to determined by each audit target
Memory space sum needed for network traffic information；
(3) be more than or equal at the memory space judging to obtain the free time determined by the network traffic information of each audit target
In the case of required memory space sum, add up the network that each audit target produces in a upper audit cycle successively
Flow information, and store the network traffic information that statistics obtains；
(4) judge obtain free time memory space be less than determined by each audit target network traffic information needed for
In the case of memory space sum, wait scheduled latent period, waiting that this predetermined latent period is then rear and empty
Not busy memory space be more than or equal to determined by each audit target network traffic information needed for memory space sum
Situation, adds up the network traffic information that each audit target produces in a upper audit cycle and in latent period successively,
And store the network traffic information that statistics obtains；
(5) network traffic information that the auditing system of destination host obtains according to statistics carries out corresponding linkage process, and warp
By control centre to network audit equipment feedback linkage result；
(6) destination host is controlled by network audit equipment according to described linkage result.
The method that the linkage audit equipment of network traffics the most according to claim 4 carries out auditing, it is characterised in that described
In step (2), the size of memory space needed for the predetermined network traffic information storing each audit target, specifically wraps
Include: obtain the storage size needed for the network traffic information once added up in advance for the storage of each audit target distribution
Information；Or, in determining several audit cycles before the current audit cycle respectively, the network of each audit target
The average with value of the memory space shared by flow information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610236604.5A CN105978706A (en) | 2016-04-14 | 2016-04-14 | Network traffic linkage auditing equipment and method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610236604.5A CN105978706A (en) | 2016-04-14 | 2016-04-14 | Network traffic linkage auditing equipment and method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN105978706A true CN105978706A (en) | 2016-09-28 |
Family
ID=56989340
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610236604.5A Pending CN105978706A (en) | 2016-04-14 | 2016-04-14 | Network traffic linkage auditing equipment and method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105978706A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112232785A (en) * | 2020-10-29 | 2021-01-15 | 哈尔滨学院 | Intelligent operation audit robot system based on big data |
| CN112804225A (en) * | 2021-01-07 | 2021-05-14 | 北京码牛科技有限公司 | User security audit method and system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101826992A (en) * | 2010-02-04 | 2010-09-08 | 蓝盾信息安全技术股份有限公司 | Method of linkage audit and system thereof |
| CN102497385A (en) * | 2011-12-31 | 2012-06-13 | 曙光信息产业股份有限公司 | Network traffic auditing method and auditing system |
| CN102497298A (en) * | 2011-12-19 | 2012-06-13 | 曙光信息产业(北京)有限公司 | Network audit equipment and method based on flow statistic network card |
| US20130046583A1 (en) * | 2011-08-18 | 2013-02-21 | Sandhya Kanhed | Method and system for enterprise audit |
| CN103078766A (en) * | 2012-12-31 | 2013-05-01 | 北京星网锐捷网络技术有限公司 | Network flow rate audit method, device and network equipment |
-
2016
- 2016-04-14 CN CN201610236604.5A patent/CN105978706A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101826992A (en) * | 2010-02-04 | 2010-09-08 | 蓝盾信息安全技术股份有限公司 | Method of linkage audit and system thereof |
| US20130046583A1 (en) * | 2011-08-18 | 2013-02-21 | Sandhya Kanhed | Method and system for enterprise audit |
| CN102497298A (en) * | 2011-12-19 | 2012-06-13 | 曙光信息产业(北京)有限公司 | Network audit equipment and method based on flow statistic network card |
| CN102497385A (en) * | 2011-12-31 | 2012-06-13 | 曙光信息产业股份有限公司 | Network traffic auditing method and auditing system |
| CN103078766A (en) * | 2012-12-31 | 2013-05-01 | 北京星网锐捷网络技术有限公司 | Network flow rate audit method, device and network equipment |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112232785A (en) * | 2020-10-29 | 2021-01-15 | 哈尔滨学院 | Intelligent operation audit robot system based on big data |
| CN112804225A (en) * | 2021-01-07 | 2021-05-14 | 北京码牛科技有限公司 | User security audit method and system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9531620B2 (en) | Control plane packet traffic statistics | |
| US7277938B2 (en) | Method and system for managing performance of data transfers for a data access system | |
| US7184945B1 (en) | Service distribution device | |
| US20060294148A1 (en) | Network usage management system and method | |
| EP1701506B1 (en) | Method and system for transmission control protocol (TCP) traffic smoothing | |
| Chen et al. | Comprehensive understanding of TCP Incast problem | |
| CN1801774A (en) | Application session management for flow-based statistics | |
| CN112954300B (en) | Performance testing device and method for video monitoring platform | |
| EP1384153A2 (en) | Server-site response time computation for arbitrary applications | |
| CN108718347A (en) | A kind of domain name analytic method, system, device and storage medium | |
| CN101741608B (en) | Traffic characteristic-based P2P application identification system and method | |
| US20190260651A1 (en) | Methods, systems and computer readable media for triggering on-demand dynamic activation of cloud-based network visibility tools | |
| CN106656629A (en) | Prediction method for stream media playing quality | |
| CN106101264A (en) | Content distributing network daily record method for pushing, device and system | |
| CN106789394A (en) | A kind of connection server keep Alive Packet control method long and system | |
| CN110149239A (en) | A kind of network flow monitoring method based on sFlow | |
| CN105978706A (en) | Network traffic linkage auditing equipment and method | |
| CN116633798A (en) | Internet of things card data flow monitoring and early warning system based on data analysis | |
| CN114945032A (en) | Electric power internet of things terminal data access system, method, device, equipment and medium | |
| Miravalls-Sierra et al. | Online detection of pathological TCP flows with retransmissions in high-speed networks | |
| CN1860734A (en) | Method and apparatus for network throughput measurement | |
| CN109656784A (en) | A kind of log processing method and device | |
| Wei et al. | A realistic simulation of internet-scale events | |
| US8655969B2 (en) | Statistics reporting in a network test system | |
| WO1999063439A1 (en) | Apparatus and method for testing network applications |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20160928 |
|
| RJ01 | Rejection of invention patent application after publication |