CN106789443A

CN106789443A - The method and apparatus of network access request analysis result is presented

Info

Publication number: CN106789443A
Application number: CN201710026134.4A
Authority: CN
Inventors: 陈都; 刘林
Original assignee: Beijing Baidu Netcom Science and Technology Co Ltd
Current assignee: Beijing Baidu Netcom Science and Technology Co Ltd
Priority date: 2017-01-13
Filing date: 2017-01-13
Publication date: 2017-05-31

Abstract

It is an object of the invention to provide the method and apparatus that network access request analysis result is presented.Wherein, the first application is controlled treatment to one or more network interfaces of operating system；Then, operating system returns to network access request relevant information after one or more network interface is by network access application call to the first application, and correspondingly, the first application obtains operating system response control and processes returned network access request relevant information；Then, the first application carries out statistical analysis treatment to network access request relevant information, obtains and present network access request analysis result.

Description

The method and apparatus of network access request analysis result is presented

Technical field

The present invention relates to Internet technical field, more particularly to a kind of technology that network access request analysis result is presented.

Background technology

Carried out with service end by the application (Application, abbreviation APP) installed in smart mobile phone is often relied on Communication, communication data traffic and the very difficult monitoring of flow direction.Also, user often feeds back substantial amounts of using indescribable consumption Flow, and have no ability to be investigated using itself, it is highly detrimental to the experience of user.

The content of the invention

It is an object of the invention to provide the method and apparatus that network access request analysis result is presented.

According to an aspect of the invention, there is provided a kind of be presented network access request analysis result in the first application Method, wherein, the method includes：

- treatment is controlled to one or more network interfaces of operating system, so that the operating system is in one Or multiple network interfaces return to network access request relevant information by backward first application of network access application call；

- obtain the network access request relevant information that the operating system response control process are returned；

- statistical analysis treatment is carried out to the network access request relevant information, obtain network access request analysis result；

- the network access request analysis result is presented.

According to a further aspect of the invention, additionally provide a kind of application of auxiliary first in an operating system and network visit is presented The method for asking requirement analysis result, wherein, the method includes：

- in response to the control process of the described first application, when one or more network interfaces of the operating system are by net Network accesses backward first application of application call and returns to network access request relevant information.

According to another aspect of the present invention, a kind of presentation network access request analysis knot in the first application is additionally provided The method of fruit, wherein, the method includes：

- treatment is controlled to one or more network interfaces of operating system, so that the operating system is in one Or multiple network interfaces pass back through letter related to network access request by backward first application of network access application call Breath carries out the network access request analysis result that statistical analysis treatment is obtained；

- obtain the network access request analysis result that the operating system response control process are returned；

- the network access request analysis result is presented.

- in response to the control process of the described first application, when one or more network interfaces of the operating system are by net After network accesses application call, statistical analysis treatment is carried out to the network access request relevant information, obtain network access request Analysis result；

- return to the network access request analysis result to the described first application.

According to another aspect of the present invention, a kind of presentation network access request analysis knot in the first application is additionally provided The device of fruit, wherein, the device includes：

- treatment is controlled for one or more network interfaces to operating system, so that the operating system is at it One or more network interfaces return to network access request relevant information by backward first application of network access application call Device；

- be used to obtain the dress that the operating system responds the network access request relevant information that the control process are returned Put；

- for carrying out statistical analysis treatment to the network access request relevant information, obtain network access request analysis The device of result；

- for the device of the network access request analysis result to be presented.

According to a further aspect of the invention, additionally provide a kind of application of auxiliary first in an operating system and network visit is presented The device of requirement analysis result is asked, wherein, the device includes：

- for the control process in response to the described first application, when one or more network interfaces of the operating system The device of network access request relevant information is returned by backward first application of network access application call.

- treatment is controlled for one or more network interfaces to operating system, so that the operating system is at it One or more network interfaces are passed back through to network access request phase by backward first application of network access application call Pass information carries out the device of the network access request analysis result that statistical analysis treatment is obtained；

- be used to obtain the dress that the operating system responds the network access request analysis result that the control process are returned Put；

- for the device of the network access request analysis result to be presented.

- for the control process in response to the described first application, when one or more network interfaces of the operating system After by network access application call, statistical analysis treatment is carried out to the network access request relevant information, obtain network access The device of requirement analysis result；

- for the device to the described first application return network access request analysis result.

The present invention is engaged to realize that network access request analysis result is presented by the first application and operating system.

According to one embodiment of present invention, the first application is controlled to one or more network interfaces of operating system Treatment；Then, operating system returns to net after one or more network interface is by network access application call to the first application Network access request relevant information, correspondingly, the first application obtains the returned network access of operating system response control treatment please Seek relevant information；Then, the first application carries out statistical analysis treatment to network access request relevant information, obtains and present network Access request analysis result.

According to another embodiment of the invention, the first application is controlled to one or more network interfaces of operating system System treatment；Then, operating system is returned after one or more network interface is by network access application call to the first application The network access request analysis result that statistical analysis treatment is obtained is carried out by network access request relevant information, accordingly Ground, the first application obtains operating system response control and processes returned network access request analysis result；Then, the first application Network access request analysis result is presented.

In correlation technique, using the communication process for being generally only capable of monitoring itself and the webserver.And the plug-in unit in applying It is usually unable to be employed to be monitored with the communication process of the webserver.And the present invention passes through the first application to operating system Network interface treatment is controlled to realize, it is each in can monitoring to all applications in operating system and each application Kind of plug-in unit respectively with the communication process of corresponding network server.It is proposed by the invention accordingly, with respect to existing monitoring scheme Scheme can get the more fully communication information, reach more excellent technique effect.

Brief description of the drawings

By the detailed description made to non-limiting example made with reference to the following drawings of reading, it is of the invention other Feature, objects and advantages will become more apparent upon：

Fig. 1 shows that one kind according to an embodiment of the invention is engaged come in existing network by the first application and operating system The method flow diagram of network access request analysis result；

Fig. 2 shows that one kind in accordance with another embodiment of the present invention is engaged to present by the first application and operating system The method flow diagram of network access request analysis result；

Fig. 3 shows to be engaged in user equipment according to an embodiment of the invention that network access request analysis knot is presented First application of fruit and the schematic device of operating system；

Fig. 4 shows to be engaged in user equipment in accordance with another embodiment of the present invention that network access request analysis is presented First application of result and the schematic device of operating system.

Same or analogous reference represents same or analogous part in accompanying drawing.

Specific embodiment

It should be mentioned that some exemplary embodiments are described as before exemplary embodiment is discussed in greater detail The treatment described as flow chart or method.Although operations to be described as flow chart the treatment of order, therein to be permitted Multioperation can be implemented concurrently, concomitantly or simultaneously.Additionally, the order of operations can be rearranged.When it The treatment can be terminated when operation is completed, it is also possible to have the additional step being not included in accompanying drawing.The treatment Can correspond to method, function, code, subroutine, subprogram etc..

Alleged within a context " computer equipment ", also referred to as " computer ", referring to can be by running preset program or referring to Make performing the intelligent electronic device of the predetermined process process such as numerical computations and/or logical calculated, its can include processor with Memory, the programmed instruction prestored in memory by computing device performs predetermined process process, or by ASIC, The hardware such as FPGA, DSP perform predetermined process process, or are combined by said two devices and to realize.Computer equipment includes but does not limit In server, PC, notebook computer, panel computer, smart mobile phone etc..

The computer equipment for example includes user equipment and the network equipment.Wherein, the user equipment includes but does not limit In smart mobile phone, PDA, PC, notebook computer etc.；The network equipment includes but is not limited to single network server, multiple nets Network server group into server group or based on cloud computing (Cloud Computing) by a large amount of computers or the webserver The cloud of composition, wherein, cloud computing is one kind of Distributed Calculation, and be made up of the computer collection of a group loose couplings is super Virtual machine.Wherein, the computer equipment can isolated operation realize the present invention, also can access network and by with network In the interactive operation of other computer equipments realize the present invention.Wherein, the network residing for the computer equipment include but It is not limited to internet, wide area network, Metropolitan Area Network (MAN), LAN, VPN etc..

It should be noted that the user equipment, the network equipment and network etc. are only for example, other are existing or from now on may be used The computer equipment or network that can occur such as are applicable to the present invention, should also be included within the scope of the present invention, and to draw It is incorporated herein with mode.

The method (some of them are illustrated by flow) for being discussed herein below can by hardware, software, firmware, in Between part, microcode, hardware description language or its any combination implement.When with software, firmware, middleware or microcode come real Shi Shi, the program code or code segment for being used to implement necessary task can be stored in machine or computer-readable medium (such as Storage medium) in.(one or more) processor can implement necessary task.

Concrete structure disclosed herein and function detail are only representational, and are for describing of the invention showing The purpose of example property embodiment.But the present invention can be implemented by many alternative forms, and be not interpreted as It is limited only by the embodiments set forth herein.

Although it should be appreciated that may have been used term " first ", " second " etc. herein to describe unit, But these units should not be limited by these terms.It is used for the purpose of a unit and another unit using these terms Make a distinction.For example, in the case of the scope without departing substantially from exemplary embodiment, it is single that first module can be referred to as second Unit, and similarly second unit can be referred to as first module.Term "and/or" used herein above include one of them or Any and all combination of more listed associated items.

Term used herein above is not intended to limit exemplary embodiment just for the sake of description specific embodiment.Unless Context clearly refers else, and singulative " one " otherwise used herein above, " one " also attempt to include plural number.Should also When understanding, term used herein above " including " and/or "comprising" specify stated feature, integer, step, operation, The presence of unit and/or component, and do not preclude the presence or addition of one or more other features, integer, step, operation, unit, Component and/or its combination.

It should further be mentioned that in some replaces realization modes, the function/action being previously mentioned can be according to different from attached The order indicated in figure occurs.For example, depending on involved function/action, the two width figures for showing in succession actually may be used Substantially simultaneously to perform or can perform in a reverse order sometimes.

The present invention is described in further detail below in conjunction with the accompanying drawings.

The present invention can be engaged to realize by the first application in user equipment with the operating system in user equipment.

Fig. 1 shows method flow diagram according to an embodiment of the invention, and it specifically illustrates a kind of first application and operation System is engaged that the process of network access request analysis result is presented.

As shown in figure 1, in step S101, the first application is controlled to one or more network interfaces of operating system Treatment, so that the operating system is returned after one or more network interface is by network access application call to first application Network access request relevant information；In step s 102, in response to the control process of the first application, when one of operating system or After multiple network interfaces are by network access application call, operating system returns to the related letter of network access request to first application Breath, correspondingly, the first application obtains the operating system response control and processes returned network access request relevant information；In step In rapid S103, the first application carries out statistical analysis treatment to network access request relevant information, obtains network access request analysis As a result；In step S104, the first application is presented network access request analysis result.

Specifically, in step S101, the first application is controlled place to one or more network interfaces of operating system Reason, so that the operating system returns to net after one or more network interface is by network access application call to first application Network access request relevant information.

Here, first application can be arbitrary application, such as mobile phone Baidu APP, Baidu's video, Baidu music.

Operating system includes but is not limited to the system that various devices are used in a user device and user interacts, and such as pacifies Zhuo, IOS etc..

Network interface for example various application programming interface (Application Programming Interface, letter Referred to as API).

First application and first application in plug-in unit can be realized by the network interface of call operation system with The corresponding webserver is communicated.In correlation technique, using the communication for being generally only capable of monitoring itself and the webserver Journey.And the plug-in unit in applying is usually unable to be employed to be monitored with the communication process of the webserver.And the present invention passes through First application is controlled treatment to realize to the network interface of operating system, and can monitor should to all in operating system With and each application in various plug-in units respectively with the communication process of corresponding network server.Accordingly, with respect to existing monitoring Scheme, scheme proposed by the invention can get the more fully communication information, reach more excellent technique effect.

The control process that first application is carried out to the network interface of operating system such as pitching pile treatment, hook treatment (hook) etc..Treatment is controlled by the network interface to operating system, the operating system can be made in the operating system One or more network interfaces return to network access request relevant information by backward first application of network access application call.

Wherein, network access application includes but is not limited to the various network interfaces by call operation system to realize network The application of access function.

Preferably, network access application includes but is not limited to following at least any one：

I) the first application.That is, working as first applies itself.

Ii) the plug-in unit in first application.

Iii) the other application in operating system.

Iv) the plug-in unit in the other application in operating system.

In step s 102, in response to the control process of the first application, when one or more network interfaces of operating system After network access application call, operating system returns to network access request relevant information, correspondingly, first to first application Returned network access request relevant information is processed using the operating system response control is obtained.

Wherein, the network access request relevant information includes but is not limited to be visited with the network that network access application is carried out Ask request related various information.

Preferably, the network access request relevant information includes but is not limited to following at least any one：

I) destination address.

Destination address means the address information of network access request targeted sites or interface.Destination address such as unified resource Finger URL (Uniform Resoure Locator, referred to as URL).

Ii) packet related transmitting information.

Packet related transmitting information includes but is not limited to related to the packet for being transmitted during network access request Various information.

It is highly preferred that packet related transmitting information includes but is not limited to following at least any one：

A) data package size.That is, the size of packet.

B) packet transmission time.For example, time when packet starts to transmit.

C) packet transmission direction.Packet transmission direction means uplink (by user device transmissions to network service The direction of device) and downlink transfer (by the direction of the webserver to user equipment).

It is its in other application or the operating system in the operating system preferably for network access application The situation of the plug-in unit in its application, the first application can also obtain operating system grade control authority.In step S101, first should Operating system is supplied to the operating system grade control authority that will can also be obtained, so that operating system is system-level according to this Control authority determines that trusting first applies, and operating system one or more network interfaces by after network access application call Network access request relevant information is returned to the first application.In step s 102, operating system can be provided the first application System-level control authority verified, for example, operating system can by first application provide system-level control authority and The system-level control authority preserved in system compares, to determine whether the system-level control authority is trusty.Only when When the first system-level control authority that is provided of application is trusty, operating system one or more network interfaces by net After network accesses application call, operating system just returns to network access request relevant information to first application

Wherein, system-level control authority includes but is not limited to various belong to that operating system grade is other to be can be used to carry out various controls Make the authority of operation.For example, for Android operation system, system-level control authority is root authority.

In step s 103, the first application carries out statistical analysis treatment to network access request relevant information, obtains network Access request analysis result.

Wherein, the network access request analysis result means various to be united by network access request relevant information Information obtained by meter analysis.For example, network access request analysis result includes but is not limited to following at least any one：

I) procotol corresponding to access target.

Here, the title (such as Sohu, Sina) of access target such as website, and for example access interface.

First application can be by according to destination address, inquiring about the corresponding relation of address and access target, to obtain target Access target corresponding to address.

First applies procotol that can be in destination address, determines the procotol corresponding to access target.Institute State procotol including but not limited to http, https etc..

Preferably, the first application can also be by the net corresponding to each network access application and its access target for being accessed Network agreement is corresponding.

For example, which the access target that Baidu's video carries out network access has, and what these access targets are respectively adopted Plant procotol.

Ii) the packet statistics information corresponding to access target.

First application can apply the packet transmitted in access target to transmit related letter according to network access Breath determines the packet statistics information corresponding to access target, such as packet transmission time corresponding to access target, on The information such as row packet total amount, downlink data packet total amount.

Here, the first application can also determine the packet statistics letter corresponding to the access target under https procotols Breath.This is that other technological means to be accomplished.

Preferably, the first application can also be by the number corresponding to each network access application and its access target for being accessed It is corresponding according to bag statistical information.

For example, which the access target that Baidu's video carries out network access has, and these access targets difference is corresponding Packet transmission time be what, upstream data bag total amount be respectively how many, downlink data packet total amount be respectively how many.

Iii the access target of packet total amount sequence) is pressed.

First application can apply the packet transmitted in access target to transmit related letter according to network access Cease to be ranked up the packet total amount corresponding to access target.For example, the first application can be according to uplink and downlink data Bag total amount and be ranked up, such as from high to low or from low to high sort.And for example, first application can also according to it is up or under Row packet total amount is ranked up, and such as from high to low or from low to high sorts.

Preferably, the packet of the access target that the first application can also respectively be accessed according to each network access application Total amount is ranked up.

For example, which the access target that Baidu's video carries out network access has, and according to packet total amount from high to low Or come to be ranked up these access targets from low to high.

Iv) the function call stack information of network interface.

The function call stack information local variable for example therein of network interface, function parameter, current state, function call Information etc..Function call stack information can be used for the operation such as the positioning of problem and investigation obstacle.

In step S104, the first application is presented network access request analysis result.

Here, various network access request analysis results can be presented to user and application development by the first application Personnel, the network access situation of application is understood so as to them, such as the packet total amount corresponding to which access target is excessive, is visited Ask that what etc. be interface procotol corresponding respectively be.

Fig. 2 shows method flow diagram in accordance with another embodiment of the present invention, and it specifically illustrates a kind of first application and behaviour It is engaged that the process of network access request analysis result is presented as system.

As shown in Fig. 2 in step s 201, the first application is controlled to one or more network interfaces of operating system Treatment, so that the operating system is returned after one or more network interface is by network access application call to first application By carrying out the network access request analysis result that statistical analysis is obtained to network access request relevant information；In step S202 In, in response to the control process of the first application, when one or more network interfaces of operating system are by network access application call Afterwards, operating system carries out statistical analysis treatment to network access request relevant information, obtains network access request analysis result； In step S203, operating system returns to network access request analysis result to first application, and correspondingly, the first application is somebody's turn to do The returned network access request analysis result of operating system response control treatment；In step S204, the first application is in existing network Network access request analysis result.

Specifically, in step s 201, the first application is controlled place to one or more network interfaces of operating system Reason, so as to the operating system is returned after one or more network interface is by network access application call to first application lead to Crossing carries out the network access request analysis result that statistical analysis is obtained to network access request relevant information.

The control process that first application is carried out to the network interface of operating system such as pitching pile treatment, hook treatment (hook) etc..Treatment is controlled by the network interface to operating system, the operating system can be made in the operating system One or more network interfaces are carried out statistical analysis after network access application call to network access request relevant information, are obtained And return to network access request analysis result to first application.

I) the first application.That is, working as first applies itself.

Ii) the plug-in unit in first application.

Iii) the other application in operating system.

Iv) the plug-in unit in the other application in operating system.

In step S202, in response to the control process of the first application, when one or more network interfaces of operating system After network access application call, operating system carries out statistical analysis treatment to network access request relevant information, obtains network Access request analysis result.

I) destination address.

Ii) packet related transmitting information.

A) data package size.That is, the size of packet.

B) packet transmission time.For example, time when packet starts to transmit.

I) procotol corresponding to access target.

Operating system can be by according to destination address, inquiring about the corresponding relation of address and access target, to obtain target Access target corresponding to address.

Operating system can be in destination address procotol, determine the procotol corresponding to access target.Institute State procotol including but not limited to http, https etc..

Preferably, operating system can also be by the net corresponding to each network access application and its access target for being accessed Network agreement is corresponding.

Ii) the packet statistics information corresponding to access target.

Operating system can apply the packet transmitted in access target to transmit related letter according to network access Breath determines the packet statistics information corresponding to access target, such as packet transmission time corresponding to access target, on The information such as row packet total amount, downlink data packet total amount.

Here, operating system can also determine the packet statistics letter corresponding to the access target under https procotols Breath.This is that other technological means to be accomplished.

Preferably, operating system can also be by the number corresponding to each network access application and its access target for being accessed It is corresponding according to bag statistical information.

Iii the access target of packet total amount sequence) is pressed.

Operating system can apply the packet transmitted in access target to transmit related letter according to network access Cease to be ranked up the packet total amount corresponding to access target.For example, operating system can be according to uplink and downlink data Bag total amount and be ranked up, such as from high to low or from low to high sort.And for example, operating system can also according to it is up or under Row packet total amount is ranked up, and such as from high to low or from low to high sorts.

Preferably, the packet of the access target that operating system can also respectively be accessed according to each network access application Total amount is ranked up.

Iv) the function call stack information of network interface.

It is its in other application or the operating system in the operating system preferably for network access application The situation of the plug-in unit in its application, the first application can also obtain operating system grade control authority.In step s 201, first answer Operating system is supplied to the operating system grade control authority that will can also be obtained, so that operating system is system-level according to this Control authority determines that trusting first applies, and operating system one or more network interfaces by after network access application call Statistical analysis acquisition is carried out to network access request relevant information and network access request analysis result is returned to the first application. In step S202, operating system can be verified to the system-level control authority that the first application is provided, for example, operating system First application can be provided the system-level control authority that is preserved in system of system-level control authority compares, with true Whether the fixed system-level control authority is trusty.Only when the system-level control authority that the first application is provided is trusty When, after one or more network interfaces of operating system are by network access application call, operating system just please to network access Seeking relevant information carries out statistical analysis treatment, obtains network access request analysis result.

In step S203, operating system returns to network access request analysis result, correspondingly, first to first application Returned network access request analysis result is processed using the operating system response control is obtained.

In step S204, the first application is presented network access request analysis result.

Fig. 3 shows an apparatus in accordance with one embodiment of the invention schematic diagram, and it is engaged in specifically illustrating user equipment The first application of network access request analysis result and the schematic device of operating system is presented.Wherein, the first application is included in The device of network access request analysis result is presented in first application, namely device 310 is presented.Further, device 310 is presented Including device 311-314.Operating system includes that the application of auxiliary first is presented network access request analysis result in an operating system Device, namely servicing unit 320.Further, servicing unit 320 includes device 322.

As shown in figure 3, the device 311 in the first application is controlled place to one or more network interfaces of operating system Reason, so that the operating system returns to net after one or more network interface is by network access application call to first application Device 311 (for ease of distinguishing, is referred to as first control device 311) by network access request relevant information below；Then, in response to The control process of one application, after one or more network interfaces of operating system are by network access application call, operating system In device 322 return to network access request relevant information to first application and (for ease of distinguishing, be below referred to as device 322 First return mechanism 322), correspondingly, the device 312 in the first application obtains what operating system response control treatment was returned Device 312 (for ease of distinguishing, is referred to as first and obtains device 312) by network access request relevant information below；Then, first answer Device 313 in carries out statistical analysis treatment to network access request relevant information, obtains network access request analysis result (for ease of distinguishing, device 313 being referred to as the first analytical equipment 313 below)；Then, the device 314 in the first application is in existing network Device 314 (for ease of distinguishing, is referred to as first and device 314 is presented) by network access request analysis result below.

Specifically, the first control device 311 of the first application is controlled to one or more network interfaces of operating system System treatment, so that the operating system is returned after one or more network interface is by network access application call to first application Return network access request relevant information.

First application and first application in plug-in unit can be realized by the network interface of call operation system with The corresponding webserver is communicated.In correlation technique, using the communication for being generally only capable of monitoring itself and the webserver Journey.And the plug-in unit in applying is usually unable to be employed to be monitored with the communication process of the webserver.And the present invention passes through The first control device 311 of the first application is controlled treatment to realize to the network interface of operating system, and it is right to monitor All applications in operating system and the various plug-in units in each application respectively with the communication process of corresponding network server.Cause This, relative to existing monitoring scheme, scheme proposed by the invention can get the more fully communication information, reach more excellent Technique effect.

The control process such as pitching pile that the first control device 311 of the first application is carried out to the network interface of operating system Treatment, hook treatment (hook) etc..Treatment is controlled by the network interface to operating system, the operating system can be made to exist One or more network interfaces of the operating system return to network access by backward first application of network access application call please Seek relevant information.

I) the first application.That is, working as first applies itself.

Ii) the plug-in unit in first application.

Iii) the other application in operating system.

Iv) the plug-in unit in the other application in operating system.

Then, in response to the control process of the first application, when one or more network interfaces of operating system are visited by network After asking application call, the first return mechanism 322 of operating system returns to network access request relevant information, phase to first application Ying Di, the first acquisition device 312 of the first application obtains the operating system response control and processes returned network access request Relevant information.

I) destination address.

Ii) packet related transmitting information.

A) data package size.That is, the size of packet.

B) packet transmission time.For example, time when packet starts to transmit.

Preferably, the first application can also include that the first authority obtains device (not shown in Fig. 3).Should for network access With the situation for the plug-in unit in the other application in the other application in the operating system or the operating system, the first authority Obtaining device can obtain operating system grade control authority.The first control device 311 of the first application will can also be obtained Operating system grade control authority is supplied to operating system, so that operating system is determining to trust the according to the system-level control authority One application, and one or more network interfaces of operating system are returned to network after network access application call to the first application Access request relevant information.Then, operating system can also apply the system-level control authority for being provided verify to first, For example, the system-level control that operating system can provide the first application to be preserved in system-level control authority and system Limit compares, to determine whether the system-level control authority is trusty.Only when the system-level control that the first application is provided When authority is trusty, after one or more network interfaces of operating system are by network access application call, operating system The ability of the first return mechanism 322 to this first application return network access request relevant information

Then, the first analytical equipment 313 of the first application carries out statistical analysis treatment to network access request relevant information, Obtain network access request analysis result.

I) procotol corresponding to access target.

First analytical equipment 313 can be by according to destination address, inquiring about the corresponding relation of address and access target, to obtain Obtain the access target corresponding to destination address.

First analytical equipment 313 can be in destination address procotol, determine the network corresponding to access target Agreement.The procotol includes but is not limited to http, https etc..

Preferably, the first analytical equipment 313 can also be by each network access application and its access target institute for being accessed Corresponding procotol is corresponding.

Ii) the packet statistics information corresponding to access target.

First analytical equipment 313 can apply the packet transmitted in access target to transmit according to network access Relevant information determines the packet statistics information corresponding to access target, such as when the packet corresponding to access target is transmitted Between, the information such as upstream data bag total amount, downlink data packet total amount.

Here, the first analytical equipment 313 can also determine the packet corresponding to the access target under https procotols Statistical information.This is that other technological means to be accomplished.

Preferably, the first analytical equipment 313 can also be by each network access application and its access target institute for being accessed Corresponding packet statistics information is corresponding.

Iii the access target of packet total amount sequence) is pressed.

First analytical equipment 313 can apply the packet transmitted in access target to transmit according to network access Relevant information is ranked up to the packet total amount corresponding to access target.For example, the first analytical equipment 313 can be according to upper Row and downlink data packet total amount and be ranked up, such as from high to low or from low to high sort.And for example, the first analytical equipment 313 can also be ranked up according to upstream or downstream packet total amount, such as sort from high to low or from low to high.

Preferably, the access target that the first analytical equipment 313 can also respectively be accessed according to each network access application Packet total amount be ranked up.

Iv) the function call stack information of network interface.

Then, the first presentation device 314 of the first application is presented network access request analysis result.

Here, various network access request analysis results can be presented to user and application by the first presentation device 314 Application developer, the network access situation of application is understood so as to them, and such as packet corresponding to which access target is total Amount is excessive, and what etc. be access interface procotol corresponding respectively be.

Fig. 4 shows schematic device in accordance with another embodiment of the present invention, and it specifically illustrates and matches in a user device Close that network access request analysis result is presented first is using the schematic device with operating system.Wherein, the first application bag The device that network access request analysis result is presented in being applied first is included, namely device 410 is presented.Further, dress is presented Putting 410 includes device 411,412,414.Operating system includes that the application of auxiliary first is presented network access request in an operating system The device of analysis result, namely servicing unit 420.Further, servicing unit 420 includes device 421 and 422.

As shown in figure 4, the device 411 of the first application is controlled place to one or more network interfaces of operating system Reason, so as to the operating system is returned after one or more network interface is by network access application call to first application lead to Cross statistical analysis is carried out to network access request relevant information and is obtained network access request analysis result (for ease of distinguish, Device 411 is referred to as second control device 411 below)；Then, in response to the control process of the first application, when operating system After one or more network interfaces are by network access application call, the device 421 of operating system is related to network access request to be believed Breath carries out statistical analysis treatment, obtains network access request analysis result and (for ease of distinguishing, device 421 is referred to as into second below Analytical equipment 421)；Then, the device 422 of operating system returns to network access request analysis result (for just to first application In differentiation, device 422 is referred to as the second return mechanism 422 below), correspondingly, the device 412 of the first application obtains the operation system System response control processes returned network access request analysis result and (for ease of distinguishing, device 412 is referred to as into second below and is obtained Obtain device 412)；Then, the device 414 of the first application is presented network access request analysis result and (for ease of distinguishing, will fill below Put 414 and be referred to as the second presentation device 414).

Specifically, the second control device 411 of the first application is controlled to one or more network interfaces of operating system System treatment, so that the operating system is returned after one or more network interface is by network access application call to first application Back through carrying out the network access request analysis result that statistical analysis is obtained to network access request relevant information.

First application and first application in plug-in unit can be realized by the network interface of call operation system with The corresponding webserver is communicated.In correlation technique, using the communication for being generally only capable of monitoring itself and the webserver Journey.And the plug-in unit in applying is usually unable to be employed to be monitored with the communication process of the webserver.And the present invention passes through The second control device 411 of the first application is controlled treatment to realize to the network interface of operating system, and it is right to monitor All applications in operating system and the various plug-in units in each application respectively with the communication process of corresponding network server.Cause This, relative to existing monitoring scheme, scheme proposed by the invention can get the more fully communication information, reach more excellent Technique effect.

The control process such as pitching pile that the second control device 411 of the first application is carried out to the network interface of operating system Treatment, hook treatment (hook) etc..Treatment is controlled by the network interface to operating system, the operating system can be made to exist One or more network interfaces of the operating system are carried out after network access application call to network access request relevant information Statistical analysis, acquisition simultaneously return to network access request analysis result to first application.

I) the first application.That is, working as first applies itself.

Ii) the plug-in unit in first application.

Iii) the other application in operating system.

Iv) the plug-in unit in the other application in operating system.

Then, in response to the control process of the first application, when one or more network interfaces of operating system are visited by network After asking application call, the second analytical equipment 421 of operating system carries out statistical analysis treatment to network access request relevant information, Obtain network access request analysis result.

I) destination address.

Ii) packet related transmitting information.

A) data package size.That is, the size of packet.

B) packet transmission time.For example, time when packet starts to transmit.

I) procotol corresponding to access target.

Second analytical equipment 421 of operating system can be by the way that according to destination address, inquiry address be right with access target Should be related to, to obtain the access target corresponding to destination address.

Second analytical equipment 421 of operating system can be in destination address procotol, determine access target institute Corresponding procotol.The procotol includes but is not limited to http, https etc..

Preferably, the second analytical equipment 421 of operating system can also by each network access application and its accessed Procotol corresponding to access target is corresponding.

Ii) the packet statistics information corresponding to access target.

Second analytical equipment 421 of operating system can apply what is transmitted in access target according to network access Packet related transmitting information determines the packet statistics information corresponding to access target, such as number corresponding to access target According to information such as packet transmission time, upstream data bag total amount, downlink data packet total amounts.

Here, the second analytical equipment 421 of operating system can also determine that the access target institute under https procotols is right The packet statistics information answered.This is that other technological means to be accomplished.

Preferably, the second analytical equipment 421 of operating system can also by each network access application and its accessed Packet statistics information corresponding to access target is corresponding.

Iii the access target of packet total amount sequence) is pressed.

Second analytical equipment 421 of operating system can apply what is transmitted in access target according to network access Packet related transmitting information is ranked up to the packet total amount corresponding to access target.For example, the second of operating system Analytical equipment 421 can according to uplink and downlink packet total amounts and be ranked up, such as arrange from high to low or from low to high Sequence.And for example, the second analytical equipment 421 of operating system can also be ranked up according to upstream or downstream packet total amount, such as Sort from high to low or from low to high.

Preferably, the second analytical equipment 421 of operating system can also respectively be accessed according to each network access application The packet total amount of access target be ranked up.

Iv) the function call stack information of network interface.

Preferably, the first application can also include that the second authority obtains device (not shown in Fig. 4).Should for network access With the situation for the plug-in unit in the other application in the other application in the operating system or the operating system, the second authority Obtaining device can obtain operating system grade control authority.The second control device 411 of the first application will can also be obtained Operating system grade control authority is supplied to operating system, so that operating system is determining to trust the according to the system-level control authority One application, and operating system one or more network interfaces by related to network access request after network access application call Information carries out statistical analysis acquisition and returns to network access request analysis result to the first application.Operating system can also be to first Verified using the system-level control authority for being provided, for example, the first application can be provided system-level by operating system Control authority compared with the system-level control authority preserved in system, to determine whether the system-level control authority is credible Appoint.Only when the system-level control authority that the first application is provided is trusty, in one or more nets of operating system After network interface is by network access application call, the ability of the second analytical equipment 421 of operating system is to network access request relevant information Statistical analysis treatment is carried out, network access request analysis result is obtained.

Then, the second return mechanism 422 of operating system returns to network access request analysis result, phase to first application Ying Di, the second acquisition device 412 of the first application obtains the operating system response control and processes returned network access request Analysis result.Then, the second presentation device 414 of the first application is presented network access request analysis result.

Here, various network access request analysis results can be presented to use by the second presentation device 414 of the first application Family and Application developer, understand the network access situation of application so as to them, such as corresponding to which access target Packet total amount it is excessive, what etc. be access interface procotol corresponding respectively be.

It should be noted that the present invention can be carried out in the assembly of software and/or software with hardware, for example, this hair Each bright device can be realized using application specific integrated circuit (ASIC) or any other similar hardware device.In one embodiment In, software program of the invention can be by computing device realizing steps described above or function.Similarly, it is of the invention Software program (including related data structure) can be stored in computer readable recording medium storing program for performing, for example, RAM memory, Magnetically or optically driver or floppy disc and similar devices.In addition, some steps of the invention or function can employ hardware to realize, example Such as, coordinate so as to perform the circuit of each step or function as with processor.

It is obvious to a person skilled in the art that the invention is not restricted to the details of above-mentioned one exemplary embodiment, Er Qie In the case of without departing substantially from spirit or essential attributes of the invention, the present invention can be in other specific forms realized.Therefore, no matter From the point of view of which point, embodiment all should be regarded as exemplary, and be nonrestrictive, the scope of the present invention is by appended power Profit requires to be limited rather than described above, it is intended that all in the implication and scope of the equivalency of claim by falling Change is included in the present invention.Any reference in claim should not be considered as the claim involved by limitation.This Outward, it is clear that " including " word is not excluded for other units or step, odd number is not excluded for plural number.The multiple stated in system claims Unit or device can also be realized by a unit or device by software or hardware.The first, the second grade word is used for table Show title, and be not offered as any specific order.

Although above specifically shown and describe exemplary embodiment, it will be understood to those of skill in the art that It is that in the case of the spirit and scope without departing substantially from claims, can be varied from terms of its form and details.Here Sought protection is illustrated in the dependent claims.These of each embodiment are defined in following numbering clause With other aspects：

1st, a kind of method that network access request analysis result is presented in the first application, wherein, the method includes：

- the network access request analysis result is presented.

2nd, the method according to clause 1, wherein, the network access application includes but is not limited to following at least any ：

- first application；

Plug-in unit in-first application；

Other application in the-operating system；

The plug-in unit in other application in the-operating system.

3rd, the method according to clause 2, wherein, the network access application should including other in the operating system With or the operating system in other application in plug-in unit, methods described also includes：

- obtain operating system grade control authority；

The step of described one or more network interfaces in operating system are controlled treatment also includes：

- the operating system grade control authority is supplied to the operating system, so that the operating system is according to institute State system-level control authority and determine to trust first application, and the operating system one or more network interfaces by net Network accesses backward first application of application call and returns to network access request relevant information.

4th, the method according to any one of clause 1 to 3, wherein, the network access request relevant information include but It is not limited to following at least any one:

- destination address；

- packet related transmitting information.

5th, the method according to clause 4, wherein, the packet related transmitting information include but is not limited to it is following at least Any one：

- data package size；

- packet transmission time；

- packet transmission direction.

6th, the method according to any one of clause 1 to 5, wherein, the network access request analysis result include but It is not limited to following at least any one：

Procotol corresponding to-access target；

Packet statistics information corresponding to-access target；

- press the access target that packet total amount sorts；

The function call stack information of-network interface.

7th, the method that a kind of application of auxiliary first in an operating system is presented network access request analysis result, wherein, should Method includes：

- in response to the control process of the described first application, when one or more network interfaces of the operating system are by net After network accesses application call, network access request relevant information is returned to the described first application.

8th, a kind of method that network access request analysis result is presented in the first application, wherein, the method includes：

- the network access request analysis result is presented.

9th, the method that a kind of application of auxiliary first in an operating system is presented network access request analysis result, wherein, should Method includes：

10th, a kind of device that network access request analysis result is presented in the first application, wherein, the device includes：

- for the device of the network access request analysis result to be presented.

11st, the device according to clause 10, wherein, the network access application includes but is not limited to following at least any ：

- first application；

Plug-in unit in-first application；

Other application in the-operating system；

The plug-in unit in other application in the-operating system.

12nd, the device according to clause 11, wherein, the network access application includes other in the operating system Using or the operating system in other application in plug-in unit, described device also includes：

- for obtaining the device of operating system grade control authority；

The device that described one or more network interfaces in operating system are controlled treatment is additionally operable to：

13rd, the device according to any one of clause 10 to 12, wherein, the network access request relevant information includes But it is not limited to following at least any one:

- destination address；

- packet related transmitting information.

14th, the device according to clause 13, wherein, the packet related transmitting information include but is not limited to it is following extremely Few any one：

- data package size；

- packet transmission time；

- packet transmission direction.

15th, the device according to any one of clause 10 to 14, wherein, the network access request analysis result includes But it is not limited to following at least any one：

Procotol corresponding to-access target；

Packet statistics information corresponding to-access target；

- press the access target that packet total amount sorts；

The function call stack information of-network interface.

16th, a kind of auxiliary first in an operating system application is presented the device of network access request analysis result, wherein, should Device includes：

- for the control process in response to the described first application, when one or more network interfaces of the operating system After by network access application call, the device of network access request relevant information is returned to the described first application.

17th, a kind of device that network access request analysis result is presented in the first application, wherein, the device includes：

- for the device of the network access request analysis result to be presented.

18th, a kind of auxiliary first in an operating system application is presented the device of network access request analysis result, wherein, should Device includes：

- for the control process in response to the described first application, when one or more network interfaces of the operating system After by network access application call, statistical analysis treatment is carried out to the network access request relevant information, obtain network access The device of requirement analysis result

Claims

1. it is a kind of first apply in present network access request analysis result method, wherein, the method includes：

- treatment is controlled to one or more network interfaces of operating system, so that the operating system is in one or many Individual network interface returns to network access request relevant information by backward first application of network access application call；

- the network access request analysis result is presented.

2. method according to claim 1, wherein, the network access application includes but is not limited to following at least any ：

- first application；

Plug-in unit in-first application；

Other application in the-operating system；

The plug-in unit in other application in the-operating system.

3. method according to claim 2, wherein, the network access application include in the operating system other should With or the operating system in other application in plug-in unit, methods described also includes：

- obtain operating system grade control authority；

- the operating system grade control authority is supplied to the operating system, so that the operating system is according to the system Irrespective of size control authority determines to trust first application, and one or more network interfaces of the operating system are visited by network Ask that backward first application of application call returns to network access request relevant information.

4. according to the method in any one of claims 1 to 3, wherein, the network access request relevant information include but It is not limited to following at least any one:

- destination address；

- packet related transmitting information.

5. method according to claim 4, wherein, the packet related transmitting information include but is not limited to it is following at least Any one：

- data package size；

- packet transmission time；

- packet transmission direction.

6. method according to any one of claim 1 to 5, wherein, the network access request analysis result include but It is not limited to following at least any one：

Procotol corresponding to-access target；

Packet statistics information corresponding to-access target；

- press the access target that packet total amount sorts；

The function call stack information of-network interface.

7. the method that a kind of application of auxiliary first in an operating system is presented network access request analysis result, wherein, the method Including：

- in response to the control process of the described first application, when one or more network interfaces of the operating system are visited by network After asking application call, network access request relevant information is returned to the described first application.

8. it is a kind of first apply in present network access request analysis result method, wherein, the method includes：

- treatment is controlled to one or more network interfaces of operating system, so that the operating system is in one or many Individual network interface passes back through to enter network access request relevant information by backward first application of network access application call Row statistical analysis processes obtained network access request analysis result；

- the network access request analysis result is presented.

9. the method that a kind of application of auxiliary first in an operating system is presented network access request analysis result, wherein, the method Including：

- in response to the control process of the described first application, when one or more network interfaces of the operating system are visited by network After asking application call, statistical analysis treatment is carried out to the network access request relevant information, obtain network access request analysis As a result；

10. it is a kind of first apply in present network access request analysis result device, wherein, the device includes：

- treatment is controlled for one or more network interfaces to operating system, so that the operating system is in one Or multiple network interfaces are returned to the dress of network access request relevant information by backward first application of network access application call Put；

- be used to obtain the device that the operating system responds the network access request relevant information that the control process are returned；

- for carrying out statistical analysis treatment to the network access request relevant information, obtain network access request analysis result Device；

- for the device of the network access request analysis result to be presented.

11. devices according to claim 10, wherein, the network access application includes but is not limited to following at least any ：

- first application；

Plug-in unit in-first application；

Other application in the-operating system；

The plug-in unit in other application in the-operating system.

12. devices according to claim 11, wherein, the network access application includes other in the operating system Using or the operating system in other application in plug-in unit, described device also includes：

- for obtaining the device of operating system grade control authority；

13. device according to any one of claim 10 to 12, wherein, the network access request relevant information includes But it is not limited to following at least any one:

- destination address；

- packet related transmitting information.

14. devices according to claim 13, wherein, the packet related transmitting information include but is not limited to it is following extremely Few any one：

- data package size；

- packet transmission time；

- packet transmission direction.

15. device according to any one of claim 10 to 14, wherein, the network access request analysis result includes But it is not limited to following at least any one：

Procotol corresponding to-access target；

Packet statistics information corresponding to-access target；

- press the access target that packet total amount sorts；

The function call stack information of-network interface.

A kind of 16. auxiliary first in an operating system applications are presented the device of network access request analysis result, wherein, the device Including：

- for the control process in response to the described first application, when one or more network interfaces of the operating system are by net After network accesses application call, the device of network access request relevant information is returned to the described first application.

A kind of 17. devices that network access request analysis result is presented in the first application, wherein, the device includes：

- treatment is controlled for one or more network interfaces to operating system, so that the operating system is in one Or multiple network interfaces pass back through letter related to network access request by backward first application of network access application call Breath carries out the device of the network access request analysis result that statistical analysis treatment is obtained；

- be used to obtain the device that the operating system responds the network access request analysis result that the control process are returned；

- for the device of the network access request analysis result to be presented.

A kind of 18. auxiliary first in an operating system applications are presented the device of network access request analysis result, wherein, the device Including：

- for the control process in response to the described first application, when one or more network interfaces of the operating system are by net After network accesses application call, statistical analysis treatment is carried out to the network access request relevant information, obtain network access request The device of analysis result