CN106656647A - Real-time flow monitoring method and real-time flow monitoring device - Google Patents
Real-time flow monitoring method and real-time flow monitoring device Download PDFInfo
- Publication number
- CN106656647A CN106656647A CN201510729750.7A CN201510729750A CN106656647A CN 106656647 A CN106656647 A CN 106656647A CN 201510729750 A CN201510729750 A CN 201510729750A CN 106656647 A CN106656647 A CN 106656647A
- Authority
- CN
- China
- Prior art keywords
- flow
- network card
- card equipment
- unit
- value
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
- H04L43/0888—Throughput
Landscapes
- Engineering & Computer Science (AREA)
- Environmental & Geological Engineering (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a real-time flow monitoring method and a real-time flow monitoring device, and relates to the network communication field. The real-time flow monitoring method comprises steps that a current flow value of every network card device connected with a host is counted in unit time; the bandwidth of the host is calculated according to the current flow value of every network card device and the unit time spent counting the current flow value; the flow reference value of every network card device matched with the bandwidth is determined according to the bandwidth; and the flow monitoring of every network card device is carried out according to the flow reference value of every network card device. The real-time flow monitoring method is advantageous in that the flow of any network card is monitored accurately in a real-time manner, and therefore determining of a port having a large flow proportion is facilitated, and a malicious IP is identified.
Description
Technical field
The present invention relates to network communication field, more particularly to a kind of real-time traffic monitoring method and device.
Background technology
In network communication field, the jumbo growth in the face of network traffics is a common technique difficult problem.
One or more network card equipments can be connected with one main frame, each network card equipment is carried out with the external world
Data interaction, all brings a certain degree of burden to host data flow.Thus to the number of network card equipment
It is more general need in the industry to be monitored according to flow.
In prior art, current network packet can be made by third-party traffic monitoring figure
Output number.And another way is monitored by kernel order, can export in a period of time
Bandwidth.
Because above two mode is unable to accurate and reflects the current stream of mainframe network in real time
Amount, can not judge to be produced by that port, can not provide effectively for user discovers and seizes malice IP
Help.
The content of the invention
In view of the above problems, it is proposed that the present invention overcomes the problems referred to above or at least portion to provide one kind
The real-time traffic monitoring method for solving the above problems with dividing and device.
On the one hand, the present invention provides a kind of real-time traffic monitoring method, and the method includes：
The present flow rate value of each network card equipment being connected with main frame in unit interval statistics；
According to the present flow rate value of each network card equipment and when counting the unit of the present flow rate value
Between, calculate the flow bandwidth of the main frame；
According to the flow bandwidth, it is determined that the flow reference of each network card equipment matched with flow bandwidth
Value；
Flow prison is carried out to described each network card equipment according to the flow reference value of each network card equipment
Control.
On the other hand, the present invention also provides a kind of real-time traffic supervising device, including：
Statistic unit, the current stream of each network card equipment for being connected with main frame in unit interval statistics
Value；
Computing unit, the present flow rate value of each network card equipment for being counted according to the statistic unit
And the unit interval of the statistics present flow rate value, calculate the flow bandwidth of the main frame；
Determining unit, for according to the calculated flow bandwidth of the computing unit, it is determined that and flow
The flow reference value of each network card equipment of bandwidth match；
Monitoring unit, the flow reference value of each network card equipment for being determined according to the determining unit
Traffic monitoring is carried out to described each network card equipment.
Real-time traffic monitoring method and device that the present invention is provided, by unit interval statistics and main frame
The present flow rate value of each network card equipment of connection, the flow bandwidth of calculating main frame；It is determined that with flow band
The flow reference value of each network card equipment of width matching, and joined according to the flow of each network card equipment
To examine value carry out traffic monitoring to described each network card equipment, can accurate any network interface card of defeated monitor in real time
Flow, and the statistics to each network interface card can realize monitoring in real time at any time.In this base
On plinth, the big port of flow accounting can also be determined whether, and identify malice IP.
Described above is only the general introduction of technical solution of the present invention, in order to better understand the present invention's
Technological means, and being practiced according to the content of description, and in order to allow the above-mentioned of the present invention and
Other objects, features and advantages can become apparent, below especially exemplified by the specific embodiment of the present invention.
Description of the drawings
By the detailed description for reading hereafter preferred implementation, various other advantage and benefit for
Those of ordinary skill in the art will be clear from understanding.Accompanying drawing is only used for illustrating the mesh of preferred implementation
, and it is not considered as limitation of the present invention.And in whole accompanying drawing, with identical with reference to symbol
Number represent identical part.In the accompanying drawings：
Fig. 1 shows a kind of real-time traffic monitoring method flow chart of present invention offer；
Fig. 2 shows another kind of real-time traffic monitoring method flow chart of present invention offer；
Fig. 3 shows a kind of real-time traffic supervising device schematic diagram of present invention offer.
Specific embodiment
The exemplary embodiment of the disclosure is more fully described below with reference to accompanying drawings.Although showing in accompanying drawing
The exemplary embodiment of the disclosure is shown, it being understood, however, that may be realized in various forms the disclosure
And should not be limited by embodiments set forth here.On the contrary, there is provided these embodiments are able to more
Thoroughly understand the disclosure, and can be by the complete technology for conveying to this area of the scope of the present disclosure
Personnel.
As shown in figure 1, in one embodiment of the present of invention, there is provided a kind of real-time traffic monitoring method,
The method may comprise steps of：
101st, the present flow rate value of each network card equipment being connected with main frame in unit interval statistics.
102nd, according to the present flow rate value and the list of the statistics present flow rate value of each network card equipment
The position time, calculate the flow bandwidth of the main frame.
What deserves to be explained is, when host operating system is run, the operating system of main frame itself will not be remembered
The ruuning situation of each process is recorded, and whether is normally run.But operate in the process on main frame
Normal activity also likely to be present hidden danger, the real-time traffic monitoring method of the present embodiment can assist main frame
Operating system carries out process monitoring, the real-time traffic monitoring method not only can analysis process in real time stream
Amount occupancy situation, additionally it is possible to point out the possibility for exception occur a large amount of automatically according to self-defining monitoring strategies
Take the process of flow.Wherein, the unit interval may refer to the unit interval of bandwidth, i.e. bit per second.
103rd, according to the flow bandwidth, it is determined that the flow of each network card equipment matched with flow bandwidth
Reference value.
In the present embodiment, main frame obtains first the current hosts operating system network interface card to be read letter
Breath, according to network interface card information, by the data traffic of host operating system row format conversion is entered；Then prison is worked as
When having controlled flow and exporting, according to the flow value of network card equipment output, the bandwidth of present flow rate is determined；
Finally, according to the bandwidth of present flow rate, setting judges the parameter value of port flow.According to set
Parameter value, judges whether port flow is normal；If analysis port flow is normal, can also be in Preset Time
It is interior to judge whether bandwidth shared by the corresponding IP of each network card equipment is maximum, so as to find malice IP.
104th, described each network card equipment is flowed according to the flow reference value of each network card equipment
Amount monitoring.
Wherein, described each network card equipment is carried out according to the flow reference value of each network card equipment
The idiographic flow of traffic monitoring can be, but not limited to include：According to the flow reference value, successively and follow
Judge whether the follow-up flow value of each network interface card is normal ring；If the follow-up flow value of the first network card equipment
It is consistent with the flow reference value, then judges first network card equipment for normal condition；If the second net
The follow-up flow value of card apparatus exceeds the flow reference value, then judge second network card equipment is
Abnormality.
In the real-time traffic monitoring method that the present embodiment is provided, by unit interval statistics and main frame
The present flow rate value of each network card equipment of connection, the flow bandwidth of calculating main frame；It is determined that with flow band
The flow reference value of each network card equipment of width matching, and joined according to the flow of each network card equipment
To examine value carry out traffic monitoring to described each network card equipment, can accurate any network interface card of defeated monitor in real time
Flow, and the statistics to each network interface card can realize monitoring in real time at any time.In this base
On plinth, the big port of flow accounting can also be determined whether, and identify malice IP.
In an alternative embodiment of the invention, there is provided a kind of real-time traffic monitoring method, as shown in Fig. 2
The method may comprise steps of：
201st, the facility information of the network card equipment is obtained；Wherein described network card equipment is connected on main frame,
For the transaction data between the network outside transmitting the main frame and the main frame.
Wherein, the data traffic situation of each network interface card for being connected for monitoring analysis current host system,
The facility information of each network interface card can first be obtained.And it is possible to the stream that facility information and statistics are obtained
Amount situation presents in real time user, to provide intuitively monitoring data.
202nd, the present flow rate value of each network card equipment being connected with main frame in unit interval statistics.
Wherein, main frame can connect one or more network card equipments, and each network card equipment may be used to
Main frame comes and goes with the network communication data outside main frame.Main frame can read the number that each network interface card passes through
According to bag quantity and data package size.
The 203rd, the present flow rate value of each network card equipment is converted into the conventional unit lattice of man-machine interaction
Formula.
Wherein, the bandwidth unit that main frame reads is machine-readable conventional unit, such as export in units of bit
Flow value, this is not the unit of user's readability.Therefore, in the present embodiment can be the stream for reading
Value is converted to the unit that user is easier to read.For example, by the data value of bit units be converted into
Mb, Kb or b are the data value of unit.
204th, by conversion after the present flow rate value accordingly show with the facility information.
Wherein, the network interface card in current system is shown, current hosts is first listed in monitoring analysis flow
Network card equipment implementor name information.
205th, according to the present flow rate value and the list of the statistics present flow rate value of each network card equipment
The position time, calculate the flow bandwidth of the main frame.
In this step, network interface card flow interior at any time can be monitored, and the third party of prior art
Monitoring figure is merely able to make the output number of current network bag can not judge flow bandwidth, also existing
The employing kernel order method that carries out traffic monitoring, be also to be merely able to export the bandwidth in a period of time,
Real-time judge can not be done.And the real-time traffic analysis in the present embodiment, according to network card equipment output
Value poll starts to make a decision, that is to say, that each network interface card to monitoring carries out in turn sentencing for data flow value
It is disconnected.Also, the bandwidth of present flow rate can be calculated with reference to bandwidth Conversion of measurement unit, such that it is able to standard
Really export the current flow bandwidth of main frame.
206th, according to the flow bandwidth, it is determined that the flow of each network card equipment matched with flow bandwidth
Reference value.
Wherein, each average discharge of network card equipment port within a period of time is counted.With client and
Serve port power, based on client and service end port statistics, can be identified by statistical data
Account for the larger port of flow-rate ratio.For example：Web server to then 80 ports, it can be determined that current
Whether flow bandwidth meets the conventional value of 80 port flows.Further, using linux kernel tcpdump
Packet catcher can count port transmission flow bag quantity.Finally, with reference to working as that statistics is obtained
Connection number shared by front flow value and the network card equipment, can calculate current network card equipment port
Flow meansigma methodss, the meansigma methodss can be used as the flow reference value of the network card equipment.
207th, according to the flow reference value, the follow-up flow value of each network interface card is judged successively and cyclically
It is whether normal.
If the 208, the follow-up flow value of the first network card equipment is consistent with the flow reference value in step 207,
Then judge first network card equipment for normal condition.
209th, after step 208, judge that the corresponding IP of first network interface card is accounted in Preset Time
Whether it is maximum in monitored multiple network interface cards one with bandwidth.
In this step, list can be identified by the way that the data flow value of each network interface card is compared
The maximum IP of occupied bandwidth in the time of position, be whether such that it is able to analyze the maximum IP of the occupied bandwidth
The IP that malice takes.
If the 210, the follow-up flow value of the second network card equipment exceeds the flow reference value in step 207,
Then judge second network card equipment for abnormality.
In this step, a poll can be done to each network card equipment to judge.If in a period of time
The bandwidth value that interior certain IP takes is larger always, to assist user to investigate and prosecute malice IP.
211st, after step 210, abnormality alarm is sent for second network interface card.
In this step, determine there is the doubtful evil for taking massive band width by the judgement in previous step
During meaning IP, alarm can be sent to remind user to be checked, so that user judges long-term a large amount of occupancy
Whether the IP of bandwidth belongs to malice IP.
Using the processing procedure of above-mentioned steps 207 to step 211, can be by real-time traffic monitoring point
Analysis main frame connected network, and make rationally judgement, so as to pass through the comprehensive of network monitoring and local process
Monitoring is closed, realizes that the various application processes to running on main frame are monitored in real time.
The real-time traffic monitoring method for providing in the present embodiment, is connected in unit interval statistics with main frame
Each network card equipment present flow rate value, the flow bandwidth of calculating main frame；It is determined that with flow bandwidth
The flow reference value of each network card equipment matched somebody with somebody, and according to the flow reference value of each network card equipment
Traffic monitoring is carried out to described each network card equipment, can accurate any network interface card of defeated monitor in real time flow,
And at any time monitoring in real time can be realized to the statistics of each network interface card.On this basis,
The big port of flow accounting can also be determined whether, and identifies malice IP.
Another embodiment of the present invention provides a kind of real-time traffic supervising device, as shown in figure 3, the dress
Put including：Statistic unit 31, computing unit 32, determining unit 33 and monitoring unit 34.
Statistic unit 31, for counting the current of each network card equipment being connected with main frame in the unit interval
Flow value；
Computing unit 32, for the current of each network card equipment for being counted according to the statistic unit 31
The unit interval of flow value and the statistics present flow rate value, calculate the flow bandwidth of the main frame；
Determining unit 33, for according to the calculated flow bandwidth of the computing unit 32, it is determined that
The flow reference value of each network card equipment matched with flow bandwidth；
Monitoring unit 34, the flow of each network card equipment for being determined according to the determining unit 33
Reference value carries out traffic monitoring to described each network card equipment.
Further alternative, in the real-time traffic supervising device, the monitoring unit 34 is additionally operable to：
According to the flow reference value that the determining unit 33 determines, each network interface card is judged successively and cyclically
Follow-up flow value it is whether normal；
If the follow-up flow value of the first network card equipment is consistent with the flow reference value, described is judged
One network card equipment is normal condition；
If the follow-up flow value of the second network card equipment exceeds the flow reference value, described second is judged
Network card equipment for abnormality.
Further alternative, the real-time traffic supervising device also includes：Judging unit 35.
Judging unit 35, for judging that first network card equipment is normal when the monitoring unit 34
During state, judge whether the corresponding IP occupied bandwidths of first network interface card are monitored in Preset Time
Multiple network interface cards in maximum one.
Further alternative, the real-time traffic supervising device also includes：Alarm unit 36.
Alarm unit 36, for judging second network card equipment for abnormal when the monitoring unit 34
During state, for second network interface card abnormality alarm is sent.
Further alternative, the real-time traffic supervising device also includes：Acquiring unit 37, conversion are single
Unit 38 and display unit 39.
Acquiring unit 37, for obtaining the facility information of the network card equipment；Wherein described network card equipment
It is connected on main frame, for the transaction data between the network outside transmitting the main frame and the main frame；
Converting unit 38, the current stream of each network card equipment for the statistic unit 31 to be counted
Value is converted into the conventional unit form of man-machine interaction；
Display unit 39, for the present flow rate value after the converting unit 38 is changed with it is described
The facility information that acquiring unit 37 gets accordingly shows.
What deserves to be explained is, the present embodiment provide real-time traffic supervising device in each unit it is concrete
Implementation method, may be referred to corresponding content in said method embodiment, and the present embodiment is no longer weighed here
Repeat again.
The real-time traffic supervising device for providing in the present embodiment, can accurate any net of defeated monitor in real time
The flow of card, and the statistics to each network interface card can realize monitoring in real time at any time.
On the basis of this, the big port of flow accounting can also be determined whether, and identify malice IP.
The real-time traffic supervising device includes processor and memorizer, and above-mentioned statistic unit, calculating are single
Unit, determining unit, monitoring unit judging unit, alarm unit, acquiring unit, converting unit and aobvious
Show that unit etc. is stored in memory as program unit, stored in memory by computing device
Said procedure unit realizing corresponding function.
Kernel is included in processor, is gone in memorizer to transfer corresponding program unit by kernel.Kernel can
To arrange one or more, by adjusting kernel parameter real-time traffic monitoring is carried out.
Memorizer potentially includes the volatile memory in computer-readable medium, random access memory
The form such as device (RAM) and/or Nonvolatile memory, such as read only memory (ROM) or flash memory (flash
RAM), memorizer includes at least one storage chip.
Present invention also provides a kind of computer program, when performing in data handling equipment,
It is adapted for carrying out initializing the program code of there are as below methods step：It is connected with main frame in unit interval statistics
Each network card equipment present flow rate value；According to the present flow rate value and system of each network card equipment
Count the unit interval of the present flow rate value, calculate the flow bandwidth of the main frame；According to the flow
Bandwidth, it is determined that the flow reference value of each network card equipment matched with flow bandwidth；According to it is described each
The flow reference value of network card equipment carries out traffic monitoring to described each network card equipment.
Those skilled in the art it should be appreciated that embodiments herein can be provided as method, system,
Or computer program.Therefore, the application can be implemented using complete hardware embodiment, complete software
Example or with reference to the form of the embodiment in terms of software and hardware.And, the application can be adopted at one
Or it is multiple wherein include computer usable program code computer-usable storage medium (including but not
Be limited to disk memory, CD-ROM, optical memory etc.) on the computer program implemented
Form.
The application is with reference to the method according to the embodiment of the present application, equipment (system) and computer program
The flow chart and/or block diagram of product is describing.It should be understood that can be realized flowing by computer program instructions
In each flow process and/or square frame and flow chart and/or block diagram in journey figure and/or block diagram
Flow process and/or square frame combination.Can provide these computer program instructions to general purpose computer, specially
With the processor of computer, Embedded Processor or other programmable data processing devices producing one
Machine so that produced by the instruction of computer or the computing device of other programmable data processing devices
It is raw to be used to realize in one flow process of flow chart or one square frame of multiple flow processs and/or block diagram or multiple sides
The device of the function of specifying in frame.
These computer program instructions may be alternatively stored in can guide computer or other programmable datas to process
In the computer-readable memory that equipment works in a specific way so that be stored in the computer-readable and deposit
Instruction in reservoir is produced and includes the manufacture of command device, and command device realization is in flow chart one
The function of specifying in flow process or one square frame of multiple flow processs and/or block diagram or multiple square frames.
These computer program instructions can also be loaded into computer or other programmable data processing devices
On so that series of operation steps is performed on computer or other programmable devices to produce computer
The process of realization, so as to the instruction performed on computer or other programmable devices is provided for realizing
Specify in one flow process of flow chart or one square frame of multiple flow processs and/or block diagram or multiple square frames
The step of function.
In a typical configuration, computing device include one or more processors (CPU), input/
Output interface, network interface and internal memory.
Memorizer potentially includes the volatile memory in computer-readable medium, random access memory
The form such as device (RAM) and/or Nonvolatile memory, such as read only memory (ROM) or flash memory (flash
RAM).Memorizer is the example of computer-readable medium.
Computer-readable medium includes that permanent and non-permanent, removable and non-removable media can be with
Information Store is realized by any method or technique.Information can be computer-readable instruction, data knot
Structure, the module of program or other data.The example of the storage medium of computer includes, but are not limited to phase
Become internal memory (PRAM), static RAM (SRAM), dynamic random access memory
(DRAM), other kinds of random access memory (RAM), read only memory (ROM), electricity can
Erasable programmable read-only memory (EPROM) (EEPROM), fast flash memory bank or other memory techniques, read-only light
Disk read only memory (CD-ROM), digital versatile disc (DVD) or other optical storages, magnetic
Cassette tape, the storage of tape magnetic rigid disk or other magnetic storage apparatus or any other non-transmission medium,
Can be used to store the information that can be accessed by a computing device.Define according to herein, computer-readable
Medium does not include temporary computer readable media (transitory media), the such as data signal and load of modulation
Ripple.
Embodiments herein is these are only, the application is not limited to.For this area skill
For art personnel, the application can have various modifications and variations.It is all spirit herein and principle it
Interior made any modification, equivalent substitution and improvements etc., should be included in claims hereof model
Within enclosing.
Claims (10)
1. a kind of real-time traffic monitoring method, it is characterised in that include：
The present flow rate value of each network card equipment being connected with main frame in unit interval statistics；
According to the present flow rate value of each network card equipment and when counting the unit of the present flow rate value
Between, calculate the flow bandwidth of the main frame；
According to the flow bandwidth, it is determined that the flow reference of each network card equipment matched with flow bandwidth
Value；
Flow prison is carried out to described each network card equipment according to the flow reference value of each network card equipment
Control.
2. method according to claim 1, it is characterised in that each network interface card described in the basis
The flow reference value of equipment carries out traffic monitoring to described each network card equipment, including：
According to the flow reference value, whether the follow-up flow value of each network interface card is judged successively and cyclically
Normally；
If the follow-up flow value of the first network card equipment is consistent with the flow reference value, described is judged
One network card equipment is normal condition；
If the follow-up flow value of the second network card equipment exceeds the flow reference value, described second is judged
Network card equipment for abnormality.
3. method according to claim 2, it is characterised in that when first network card equipment is
During normal condition, methods described also includes：
Judge whether the corresponding IP occupied bandwidths of first network interface card are monitored in Preset Time
Maximum one in multiple network interface cards.
4. method according to claim 2, it is characterised in that when second network card equipment is
During abnormality, also include：
Abnormality alarm is sent for second network interface card.
5. the method according to any one of claim 1-4, it is characterised in that also include：
Obtain the facility information of the network card equipment；Wherein described network card equipment is connected on main frame, is used
The transaction data between network outside the transmission main frame and the main frame；
The present flow rate value of each network card equipment is converted into into the conventional unit form of man-machine interaction；
The present flow rate value after by conversion accordingly shows with the facility information.
6. a kind of real-time traffic supervising device, it is characterised in that include：
Statistic unit, the current stream of each network card equipment for being connected with main frame in unit interval statistics
Value；
Computing unit, the present flow rate value of each network card equipment for being counted according to the statistic unit
And the unit interval of the statistics present flow rate value, calculate the flow bandwidth of the main frame；
Determining unit, for according to the calculated flow bandwidth of the computing unit, it is determined that and flow
The flow reference value of each network card equipment of bandwidth match；
Monitoring unit, the flow reference value of each network card equipment for being determined according to the determining unit
Traffic monitoring is carried out to described each network card equipment.
7. device according to claim 6, it is characterised in that the monitoring unit is used for：
According to the flow reference value that the determining unit determines, each network interface card is judged successively and cyclically
Whether follow-up flow value is normal；
If the follow-up flow value of the first network card equipment is consistent with the flow reference value, described is judged
One network card equipment is normal condition；
If the follow-up flow value of the second network card equipment exceeds the flow reference value, described second is judged
Network card equipment for abnormality.
8. device according to claim 7, it is characterised in that also include：
Judging unit, for when the monitoring unit judges first network card equipment for normal condition,
Judge whether the corresponding IP occupied bandwidths of first network interface card are monitored multiple nets in Preset Time
Maximum one in card.
9. device according to claim 7, it is characterised in that also include：
Alarm unit, for when the monitoring unit judges second network card equipment for abnormality,
Abnormality alarm is sent for second network interface card.
10. the device according to any one of claim 6-9, it is characterised in that also include：
Acquiring unit, for obtaining the facility information of the network card equipment；Wherein described network card equipment connects
It is connected on main frame, for the transaction data between the network outside transmitting the main frame and the main frame；
Converting unit, the present flow rate value of each network card equipment for the statistic unit to be counted turns
Change the conventional unit form of man-machine interaction into；
Display unit, for the present flow rate value after the converting unit is changed and the acquisition
The facility information that unit gets accordingly shows.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510729750.7A CN106656647A (en) | 2015-10-30 | 2015-10-30 | Real-time flow monitoring method and real-time flow monitoring device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510729750.7A CN106656647A (en) | 2015-10-30 | 2015-10-30 | Real-time flow monitoring method and real-time flow monitoring device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106656647A true CN106656647A (en) | 2017-05-10 |
Family
ID=58810625
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510729750.7A Pending CN106656647A (en) | 2015-10-30 | 2015-10-30 | Real-time flow monitoring method and real-time flow monitoring device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106656647A (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107426210A (en) * | 2017-07-25 | 2017-12-01 | 合肥红铭网络科技有限公司 | A kind of real-time traffic detection information storage method |
| CN111083012A (en) * | 2019-12-18 | 2020-04-28 | 苏州浪潮智能科技有限公司 | Data center switch flow statistical method and equipment |
| CN115208786A (en) * | 2022-06-21 | 2022-10-18 | 中汽创智科技有限公司 | Method for monitoring bandwidth performance of vehicle-mounted Ethernet protocol stack and storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101458556A (en) * | 2007-12-14 | 2009-06-17 | 联想(北京)有限公司 | Dynamic control method and device for network card power consumption and connection mode |
| US20120033680A1 (en) * | 2009-06-22 | 2012-02-09 | Sandhya Gopinath | Systems and methods for receive and transmission queue processing in a multi-core architecture |
| CN102497298A (en) * | 2011-12-19 | 2012-06-13 | 曙光信息产业(北京)有限公司 | Network audit equipment and method based on flow statistic network card |
| CN103944771A (en) * | 2013-01-19 | 2014-07-23 | 鸿富锦精密工业（深圳）有限公司 | Method and system for testing network data traffic |
| CN104811828A (en) * | 2015-04-27 | 2015-07-29 | 无锡天脉聚源传媒科技有限公司 | Data processing method and device |
-
2015
- 2015-10-30 CN CN201510729750.7A patent/CN106656647A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101458556A (en) * | 2007-12-14 | 2009-06-17 | 联想(北京)有限公司 | Dynamic control method and device for network card power consumption and connection mode |
| US20120033680A1 (en) * | 2009-06-22 | 2012-02-09 | Sandhya Gopinath | Systems and methods for receive and transmission queue processing in a multi-core architecture |
| CN102497298A (en) * | 2011-12-19 | 2012-06-13 | 曙光信息产业(北京)有限公司 | Network audit equipment and method based on flow statistic network card |
| CN103944771A (en) * | 2013-01-19 | 2014-07-23 | 鸿富锦精密工业（深圳）有限公司 | Method and system for testing network data traffic |
| CN104811828A (en) * | 2015-04-27 | 2015-07-29 | 无锡天脉聚源传媒科技有限公司 | Data processing method and device |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107426210A (en) * | 2017-07-25 | 2017-12-01 | 合肥红铭网络科技有限公司 | A kind of real-time traffic detection information storage method |
| CN111083012A (en) * | 2019-12-18 | 2020-04-28 | 苏州浪潮智能科技有限公司 | Data center switch flow statistical method and equipment |
| CN115208786A (en) * | 2022-06-21 | 2022-10-18 | 中汽创智科技有限公司 | Method for monitoring bandwidth performance of vehicle-mounted Ethernet protocol stack and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN103532940B (en) | network security detection method and device | |
| CN103532776B (en) | Service traffics detection method and system | |
| CN105429977B (en) | Deep packet inspection device abnormal flow monitoring method based on comentropy measurement | |
| CN111262722B (en) | Safety monitoring method for industrial control system network | |
| CN106878064A (en) | Data monitoring method and device | |
| CN104160659B (en) | For the method and apparatus of management and the operation of communication network | |
| CN109194539A (en) | Data management-control method, device, computer equipment and storage medium | |
| CN106656627A (en) | Performance monitoring and fault positioning method based on service | |
| CN106131083A (en) | A kind of attack message detection and take precautions against method and switch | |
| EP2983327B1 (en) | Counting control method for counter, and network chip | |
| CN106656647A (en) | Real-time flow monitoring method and real-time flow monitoring device | |
| CN108896804A (en) | Stealing detection method, device and electronic equipment | |
| CN110149653A (en) | A kind of cloud fault of mobile phone monitoring method and system | |
| CN112506097A (en) | Jig frame remote monitoring system and method based on industrial internet | |
| CN107528852B (en) | Big data implementation system and method based on network security | |
| CN107094086A (en) | A kind of information acquisition method and device | |
| CN115038088B (en) | Intelligent network security detection early warning system and method | |
| CN106789158A (en) | Damage identification method and system are insured in a kind of cloud service | |
| CN103078760A (en) | Online diagnosis method for abnormal network flow | |
| CN108072858A (en) | Electric energy meter method for quality control, system and terminal device | |
| CN107317708A (en) | The monitoring method and device of a kind of Court business application system | |
| CN105677534B (en) | A kind of substation's station level equipment state assessment method based on service bus | |
| US11736504B2 (en) | Method and system to detect abnormal message transactions on a network | |
| CN110427297A (en) | Diagnostic message acquisition methods, system and gateway and computer-readable medium | |
| CN107357740A (en) | One kind serializing device method of automatic configuration, device and distributed cache system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: 100083 No. 401, 4th Floor, Haitai Building, 229 North Fourth Ring Road, Haidian District, Beijing Applicant after: Beijing Guoshuang Technology Co.,Ltd. Address before: 100086 Cuigong Hotel, 76 Zhichun Road, Shuangyushu District, Haidian District, Beijing Applicant before: Beijing Guoshuang Technology Co.,Ltd. |
|
| CB02 | Change of applicant information | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170510 |
|
| RJ01 | Rejection of invention patent application after publication |