CN110708208B - Monitoring data acquisition method and device, storage medium and terminal - Google Patents

Monitoring data acquisition method and device, storage medium and terminal Download PDF

Info

Publication number
CN110708208B
CN110708208B CN201910791216.7A CN201910791216A CN110708208B CN 110708208 B CN110708208 B CN 110708208B CN 201910791216 A CN201910791216 A CN 201910791216A CN 110708208 B CN110708208 B CN 110708208B
Authority
CN
China
Prior art keywords
monitoring
data
oid
address
group character
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201910791216.7A
Other languages
Chinese (zh)
Other versions
CN110708208A (en
Inventor
冯玉鹏
常月
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Qianxin Technology Group Co Ltd
Secworld Information Technology Beijing Co Ltd
Original Assignee
Qianxin Technology Group Co Ltd
Secworld Information Technology Beijing Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qianxin Technology Group Co Ltd, Secworld Information Technology Beijing Co Ltd filed Critical Qianxin Technology Group Co Ltd
Priority to CN201910791216.7A priority Critical patent/CN110708208B/en
Publication of CN110708208A publication Critical patent/CN110708208A/en
Application granted granted Critical
Publication of CN110708208B publication Critical patent/CN110708208B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00Arrangements for monitoring or testing data switching networks
    • H04L43/12Network monitoring probes
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/02Standardisation; Integration
    • H04L41/0213Standardised network management protocols, e.g. simple network management protocol [SNMP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The invention discloses a method and a device for acquiring monitoring data, a storage medium and a terminal, relates to the technical field of network security, and mainly aims to solve the problems that the prior active acquisition of the monitoring data generally requires that a service end is pre-configured with the snmp information of an acquired device, the implementation difficulty is overlarge, and the acquisition efficiency of the monitoring data is reduced. The method comprises the following steps: after determining an IP address of monitoring data to be collected, searching a data monitoring corresponding relation matched with the IP address from a monitoring source configuration file, wherein the monitoring source configuration file stores data monitoring corresponding relations matched with different IP addresses, different monitoring source OIDs and different group character strings; calling a monitoring source OID and a group character string according to the data monitoring corresponding relation; and acquiring monitoring data corresponding to the IP address by using the monitoring source OID and the group character string.

Description

Monitoring data acquisition method and device, storage medium and terminal
Technical Field
The present invention relates to the field of network security technologies, and in particular, to a method and an apparatus for acquiring monitoring data, a storage medium, and a terminal.
Background
In the field of network security, in order to master the operation condition of equipment, the equipment can be monitored in various ways. The acquisition of the monitoring data is mainly realized in two ways of actively acquiring the monitoring data and passively receiving the monitoring data, for example, the detection is performed through a snmp protocol to actively acquire the monitoring data.
At present, the existing active collection of monitoring data usually requires that a server configures the snmp information of all collected devices in advance, when the number of the collected devices is too large, the pressure of the server is too large, and the snmp information of each collected device needs to be configured one by one, which makes implementation difficult too large, and reduces the collection efficiency of the monitoring data.
Disclosure of Invention
In view of the above, the present invention provides a method and an apparatus for acquiring monitoring data, a storage medium, and a terminal, and mainly aims to solve the problems that the existing method for actively acquiring monitoring data generally requires that a service end is pre-configured with snmp information of an acquired device, when the number of devices for acquiring data is too large, the pressure of the service end is too high, and the snmp information of each acquisition device needs to be configured one by one, so that the implementation difficulty is too high, and the acquisition efficiency of monitoring data is reduced.
According to an aspect of the present invention, there is provided a method for collecting monitoring data, including:
after determining an IP address of monitoring data to be collected, searching a data monitoring corresponding relation matched with the IP address from a monitoring source configuration file, wherein the monitoring source configuration file stores data monitoring corresponding relations matched with different IP addresses, different monitoring source OIDs and different group character strings;
calling a monitoring source OID and a group character string according to the data monitoring corresponding relation;
and acquiring monitoring data corresponding to the IP address by using the monitoring source OID and the group character string.
Further, after the IP address of the monitoring data to be collected is determined, before the data monitoring corresponding relationship matching the IP address is searched from the monitoring source configuration file, the method further includes:
and configuring a monitoring source configuration file according to the IP address of the terminal to be monitored, the group character string and the monitoring source OID.
Further, the configuring the monitoring source configuration file according to the IP address of the terminal to be monitored, the group character string, and the monitoring source OID includes:
identifying whether a network management protocol SNMP matched with the IP address of the terminal to be monitored exists or not by utilizing the group character string;
when a matched network management protocol SNMP exists, establishing a first data monitoring corresponding relation between the group character string and the IP address;
searching whether a matched monitoring source OID exists or not according to the root node OID of the IP address from an OID database;
when the matched monitoring source OID is found, establishing a second data monitoring corresponding relation of the IP address and the monitoring source OID;
and integrating the first data monitoring corresponding relation and the second data monitoring corresponding relation, and updating the integrated data monitoring corresponding relation into a monitoring source configuration file.
Further, retrieving the monitoring source OID and the group character string according to the data monitoring correspondence includes:
and calling the group character strings recorded in the monitoring corresponding relation from a preset storage position, and extracting the monitoring source OID recorded in the data monitoring corresponding relation from an OID database, wherein all the group character strings are stored in the preset storage position, and all the monitoring source OIDs are stored in the OID database.
Further, the acquiring, by using the monitoring source OID and the group character string, the monitoring data corresponding to the IP address includes:
and scheduling to the terminal to be monitored corresponding to the monitoring source OID identified by the IP address, and acquiring monitoring data from the terminal to be monitored by using the group character string.
Further, the method further comprises:
and when the data monitoring corresponding relation matched with the IP address is not found, sending an updating instruction, and updating the monitoring source configuration file according to the received monitoring source OID and the group character string, wherein the updating instruction is used for indicating to update the monitoring configuration file.
Further, the method further comprises:
and storing the monitoring data and reporting the monitoring data according to a preset time interval.
According to an aspect of the present invention, there is provided a monitoring data acquisition apparatus, including:
the determining module is used for searching a data monitoring corresponding relation matched with the IP address from a monitoring source configuration file after determining the IP address of the monitoring data to be acquired, wherein the monitoring source configuration file stores data monitoring corresponding relations matched with different IP addresses, different monitoring source OIDs and different group character strings;
the calling module is used for calling the monitoring source OID and the group character string according to the data monitoring corresponding relation;
and the acquisition module is used for acquiring the monitoring data corresponding to the IP address by using the monitoring source OID and the group character string.
Further, the apparatus further comprises:
and the configuration module is used for configuring the monitoring source configuration file according to the IP address of the terminal to be monitored, the group character string and the monitoring source OID.
Further, the configuration module includes:
the identification unit is used for identifying whether a network management protocol (SNMP) matched with the IP address of the terminal to be monitored exists or not by utilizing the community character string;
the first establishing unit is used for establishing a first data monitoring corresponding relation between the group character string and the IP address after a matched network management protocol SNMP exists;
a searching unit, configured to search, from an OID database, whether a matched monitoring source OID exists according to a root node OID of the IP address;
a second establishing unit, configured to establish a second data monitoring correspondence between the IP address and the monitoring source OID when the matching monitoring source OID is found;
and the integration unit is used for integrating the first data monitoring corresponding relation and the second data monitoring corresponding relation and updating the integrated data monitoring corresponding relation into a monitoring source configuration file.
Further, the invoking module is specifically configured to invoke the group character string recorded in the monitoring correspondence from a preset storage location, and extract the monitoring source OID recorded in the data monitoring correspondence from an OID database, where all the group character strings are stored in the preset storage location, and all the monitoring source OIDs are stored in the OID database.
Further, the collection module is specifically configured to schedule the group character string to a terminal to be monitored corresponding to the monitoring source OID identified by the IP address, and acquire monitoring data from the terminal to be monitored by using the group character string.
Further, the apparatus further comprises:
and the sending module is used for sending an updating instruction when the data monitoring corresponding relation matched with the IP address is not found, and updating the monitoring source configuration file according to the received monitoring source OID and the group character string, wherein the updating instruction is used for indicating the updating of the monitoring configuration file.
Further, the apparatus further comprises:
and the reporting module is used for storing the monitoring data and reporting the monitoring data according to a preset time interval.
According to another aspect of the present invention, a storage medium is provided, and the storage medium stores at least one executable instruction, and the executable instruction causes a processor to execute operations corresponding to the above monitoring data acquisition method.
According to still another aspect of the present invention, there is provided a computer apparatus including: the system comprises a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface complete mutual communication through the communication bus;
the memory is used for storing at least one executable instruction, and the executable instruction enables the processor to execute the operation corresponding to the monitoring data acquisition method.
By the technical scheme, the technical scheme provided by the embodiment of the invention at least has the following advantages:
compared with the prior art that the service end is required to pre-configure the snmp information of all the acquired equipment in advance for actively acquiring the monitoring data, the embodiment of the invention searches the matched data monitoring corresponding relation from the monitoring source configuration file according to the IP address, calls the monitoring source OID and the group character string according to the data monitoring corresponding relation, and finally acquires the monitoring data from the equipment corresponding to the monitoring source OID by using the group character string, thereby realizing load balance, reducing the pressure of the service end, reducing the implementation difficulty of information matching of each monitoring equipment through the data source configuration file, and improving the acquisition efficiency of the monitoring data.
The foregoing description is only an overview of the technical solutions of the present invention, and the embodiments of the present invention are described below in order to make the technical means of the present invention more clearly understood and to make the above and other objects, features, and advantages of the present invention more clearly understandable.
Drawings
Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are only for purposes of illustrating the preferred embodiments and are not to be construed as limiting the invention. Also, like reference numerals are used to refer to like parts throughout the drawings. In the drawings:
fig. 1 is a flowchart illustrating a monitoring data collection method according to an embodiment of the present invention;
FIG. 2 is a flow chart of another monitoring data collection method provided by the embodiment of the invention;
fig. 3 shows a block diagram of a monitoring data acquisition apparatus according to an embodiment of the present invention;
fig. 4 shows a block diagram of another monitoring data acquisition apparatus provided in the embodiment of the present invention;
fig. 5 is a schematic diagram illustrating a terminal structure according to an embodiment of the present invention.
Detailed Description
Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
The embodiment of the invention provides a monitoring data acquisition method, as shown in fig. 1, the method comprises the following steps:
101. and after the IP address of the monitoring data to be acquired is determined, searching a data monitoring corresponding relation matched with the IP address from a monitoring source configuration file.
The monitoring source configuration file stores data monitoring corresponding relations of matching of different IP addresses, different monitoring source OIDs and different group strings, and the monitoring data may be a data utilization rate in a secure network device. In the embodiment of the invention, as the monitoring data to be acquired is acquired from the network security equipment, the equipment needs to be scheduled regularly before the monitoring data is acquired, and the IP address of the monitoring data to be acquired is read in, so as to search the data monitoring corresponding relation from the monitoring source configuration file according to the determined IP address of the monitoring data to be acquired.
It should be noted that the monitoring source configuration file is a configuration file pre-configured in the current system, and since data monitoring corresponding relations between different IP addresses and different monitoring source OIDs and different group character strings are stored, that is, one IP address may correspond to 1 data monitoring corresponding relation, and may correspond to multiple data monitoring corresponding relations, the data monitoring corresponding relation matching the IP address may be found from the monitoring source configuration file, so as to determine the monitoring source OIDs and the group character strings.
102. And calling the monitoring source OID and the group character string according to the data monitoring corresponding relation.
The monitoring source OID is an index OID self-defined by different network security devices, and the group character string is a key of a privileged internal account in an SNMP series protocol. In the embodiment of the present invention, since the monitoring source OID is stored in the preset OID database, the monitoring source OID matching the IP address may be called from the preset OID database according to the monitoring correspondence. In addition, because the group character string is automatically generated according to the adaptive algorithm, the storage location of the group character string can be in a monitoring source configuration file or a specific group character string database.
103. And acquiring monitoring data corresponding to the IP address by using the monitoring source OID and the group character string.
According to the embodiment of the invention, the monitoring source OID is used for determining the equipment to be monitored, and the community character string decryption equipment is used for collecting monitoring data from the equipment.
Compared with the prior art that the service end is required to pre-configure the snmp information of all the acquired equipment in advance for actively acquiring the monitoring data, the embodiment of the invention searches the matched data monitoring corresponding relation from the monitoring source configuration file according to the IP address, calls the monitoring source OID and the group character string according to the data monitoring corresponding relation, and finally acquires the monitoring data from the equipment corresponding to the monitoring source OID by using the group character string, thereby realizing load balance, reducing the pressure of the service end, reducing the implementation difficulty of information matching of each monitoring equipment through the data source configuration file, and improving the acquisition efficiency of the monitoring data.
An embodiment of the present invention provides another monitoring data acquisition method, as shown in fig. 3, the method includes:
201. and configuring a monitoring source configuration file according to the IP address of the terminal to be monitored, the group character string and the monitoring source OID.
For the embodiment of the invention, in order to reduce the storage of the snmp information of all the devices and reduce the system pressure of the current service end, a monitoring source configuration file is configured in advance. The monitoring source configuration file stores data monitoring corresponding relations of different IP addresses, different monitoring source OIDs and different group character strings, so that the monitoring source configuration file is configured according to the IP addresses, the group character strings and the monitoring source OIDs.
In the embodiment of the present invention, for further detail and explanation, step 201 may specifically be: identifying whether a network management protocol SNMP matched with the IP address of the terminal to be monitored exists or not by utilizing the group character string; when a matched network management protocol SNMP exists, establishing a first data monitoring corresponding relation between the group character string and the IP address; searching whether a matched monitoring source OID exists or not from an OID database according to the root node OID of the IP address; when the matched monitoring source OID is found, establishing a second data monitoring corresponding relation of the IP address and the monitoring source OID; and integrating the first data monitoring corresponding relation and the second data monitoring corresponding relation, and updating the integrated data monitoring corresponding relation into a monitoring source configuration file.
In the embodiment of the present invention, the first data monitoring correspondence is a correspondence between an IP address and a group character string, and the second data monitoring correspondence is a correspondence between an IP address and a monitoring source OID, so that the data monitoring correspondence between the IP address, the group character string, and the monitoring source OID can be obtained by integrating the first data monitoring correspondence and the second data monitoring correspondence, and updated to the monitoring source configuration file.
It should be noted that, in the embodiment of the present invention, the IP address and the group character string that need to be matched may be written into the monitoring source configuration file in advance, and then the SNMP protocol is detected for each IP address by using the group character string in a traversal manner, that is, a specific method for identifying whether there is a network management protocol SNMP matching the IP address of the terminal to be monitored by using the group character string includes: the SNMP protocol can include SNMPV1, SNMPV2, SNMPV3 and other protocols, namely the SNMP protocol is decoded by using the group character strings, and after the decoding is successful, a return value is sent to confirm that the SNMP protocol can be identified, so that the group character strings are corresponding to the IP addresses. In addition, since all values of the monitoring source OIDs are stored in the OID database, a specific method for searching whether a matching monitoring source OID exists according to the root node OID of the IP address from the OID database is as follows: traversing the root node OID in each IP address, searching the monitoring source OID, and after the monitoring source OID is found, sending a return value for confirming that the matched monitoring source OID exists, so as to indicate that the IP address corresponds to the monitoring source OID. For example, reading an OID root node 1.3.6.88356.1.1 in the OID library, traversing the root node OID, sequentially finding 1.3.6.88356.1.1.1, and when receiving a return value, the OID corresponds to the device, that is, the IP address and the monitoring source OID establish a second data monitoring corresponding relationship.
202. And after the IP address of the monitoring data to be acquired is determined, searching a data monitoring corresponding relation matched with the IP address from a monitoring source configuration file.
This step is the same as step 101 shown in fig. 1, and is not described herein again.
203. And calling the group character string recorded in the monitoring corresponding relation from a preset storage position, and extracting the monitoring source OID recorded in the data monitoring corresponding relation from an OID database.
For the embodiment of the invention, in order to reduce the occupation of system resources, the group character string and the monitoring source OID are respectively extracted according to the data monitoring corresponding relation recorded in the monitoring source configuration file. All the group character strings are stored in the preset storage location, and the preset storage location may be in a monitoring source configuration file or in a specific group character string database. All monitoring source OIDs are stored in the OID database.
204. And scheduling to a terminal to be monitored corresponding to the monitoring source OID identified by the IP address, and acquiring monitoring data from the terminal to be monitored by using the group character string.
For the embodiment of the invention, in order to realize automatic and uniform-load acquisition of monitoring data from the terminal to be monitored, the corresponding terminal to be monitored is scheduled according to the IP address identified by the monitoring source OID, and the monitoring data of the terminal to be monitored is obtained by decoding the group character string. The terminal to be monitored can be determined according to the identified monitoring source OID, so that when the current server side collects monitoring data, the terminal to be monitored needs to be scheduled according to the monitoring source OID identified according to the IP address, then a monitoring data acquisition request is sent to the terminal to be monitored, and the request carries the group character string, so that the terminal to be monitored can report the monitoring data after decoding the group character string.
205. And when the data monitoring corresponding relation matched with the IP address is not found, sending an updating instruction, and updating the monitoring source configuration file according to the received monitoring source OID and the group character string.
For the embodiment of the invention, the monitoring source configuration file is prevented from being updated when the data monitoring corresponding relation cannot be found according to the data monitoring corresponding relation in the monitoring source configuration file. The update instruction is used to instruct to update the monitoring configuration file, and the step 201 is executed again to update the monitoring configuration file in this embodiment of the present invention. In addition, since the group character string is generated according to the adaptive algorithm, and the monitoring source OID is pre-stored in the OID database, the group character string and the monitoring source OID also need to be updated before the monitoring source configuration file is updated, and the group character string and the monitoring source OID may be generated randomly or by receiving user input.
206. And storing the monitoring data and reporting the monitoring data according to a preset time interval.
For the embodiment of the invention, in order to facilitate the analysis, statistics and other processing of the collected monitoring data, the monitoring data is stored after being collected, and is reported through a preset time interval, so as to realize the purpose of periodic reporting.
The embodiment of the invention searches the matched data monitoring corresponding relation from the monitoring source configuration file according to the IP address, calls the monitoring source OID and the group character string according to the data monitoring corresponding relation, and finally collects the monitoring data from the equipment corresponding to the monitoring source OID by using the group character string, thereby realizing load balance, reducing the pressure of a server, reducing the implementation difficulty of information matching of each monitoring equipment through the data source configuration file, and improving the collection efficiency of the monitoring data.
Further, as an implementation of the method shown in fig. 1, an embodiment of the present invention provides a monitoring data acquisition apparatus, as shown in fig. 3, where the apparatus includes: a determining module 31, a calling module 32 and an acquisition module 33.
The determining module 31 is configured to, after determining an IP address of monitoring data to be acquired, search a monitoring source configuration file for a data monitoring correspondence matched with the IP address, where the monitoring source configuration file stores data monitoring correspondences of different IP addresses, different monitoring source OIDs, and different group character strings;
the calling module 32 is configured to call the monitoring source OID and the group character string according to the data monitoring correspondence;
and an acquiring module 33, configured to acquire the monitoring data corresponding to the IP address by using the monitoring source OID and the group character string.
Compared with the prior art that the service end is required to pre-configure the snmp information of all the acquired equipment in advance for actively acquiring the monitoring data, the embodiment of the invention searches the matched data monitoring corresponding relation from the monitoring source configuration file according to the IP address, calls the monitoring source OID and the group character string according to the data monitoring corresponding relation, and finally acquires the monitoring data from the equipment corresponding to the monitoring source OID by using the group character string, thereby realizing load balance, reducing the pressure of the service end, reducing the implementation difficulty of information matching of each monitoring equipment through the data source configuration file, and improving the acquisition efficiency of the monitoring data.
Further, as an implementation of the method shown in fig. 2, an embodiment of the present invention provides another monitoring data acquisition apparatus, as shown in fig. 4, where the apparatus includes: the device comprises a determining module 41, a calling module 42, a collecting module 43, a configuration module 44, a sending module 45 and a reporting module 46.
The determining module 41 is configured to, after determining an IP address of monitoring data to be acquired, search a monitoring source configuration file for a data monitoring correspondence matched with the IP address, where the monitoring source configuration file stores data monitoring correspondences of different IP addresses, different monitoring source OIDs, and different group character strings;
the calling module 42 is configured to call the monitoring source OID and the group character string according to the data monitoring correspondence;
and an acquiring module 43, configured to acquire the monitoring data corresponding to the IP address by using the monitoring source OID and the group character string.
Further, the apparatus further comprises:
and the configuration module 44 is configured to configure the monitoring source configuration file according to the IP address of the terminal to be monitored, the group character string, and the monitoring source OID.
Further, the configuration module 44 includes:
the identifying unit 4401 is configured to identify whether a network management protocol SNMP matching the IP address of the terminal to be monitored exists or not by using the group character string;
a first establishing unit 4402, configured to establish a first data monitoring correspondence between the group string and the IP address after a matching network management protocol SNMP exists;
a searching unit 4403, configured to search, from the OID database, whether there is a matched monitoring source OID according to the root node OID of the IP address;
a second establishing unit 4404, configured to establish a second data monitoring correspondence between the IP address and the monitoring source OID when the matching monitoring source OID is found;
an integrating unit 4405, configured to integrate the first data monitoring correspondence and the second data monitoring correspondence, and update the integrated data monitoring correspondence to the monitoring source configuration file.
Further, the retrieving module 42 is specifically configured to retrieve the group character string recorded in the monitoring correspondence from a preset storage location, and extract the monitoring source OID recorded in the data monitoring correspondence from an OID database, where all the group character strings are stored in the preset storage location, and all the monitoring source OIDs are stored in the OID database.
Further, the acquiring module 43 is specifically configured to schedule the terminal to be monitored corresponding to the monitoring source OID identified by the IP address, and acquire monitoring data from the terminal to be monitored by using the group character string.
Further, the apparatus further comprises:
and a sending module 45, configured to send an update instruction when the data monitoring corresponding relationship matching the IP address is not found, and update the monitoring source configuration file according to the received monitoring source OID and the group character string, where the update instruction is used to instruct to update the monitoring configuration file.
Further, the apparatus further comprises:
and a reporting module 46, configured to store the monitoring data, and report the monitoring data according to a preset time interval.
The invention provides another monitoring data acquisition device, the embodiment of the invention searches the matched data monitoring corresponding relation from the monitoring source configuration file according to the IP address, calls the monitoring source OID and the group character string according to the data monitoring corresponding relation, and finally acquires the monitoring data from the equipment corresponding to the monitoring source OID by using the group character string, thereby realizing load balance, reducing the pressure of a server, reducing the implementation difficulty of information matching of each monitoring equipment through the data source configuration file, and improving the acquisition efficiency of the monitoring data.
According to an embodiment of the present invention, a storage medium is provided, where at least one executable instruction is stored, and the computer executable instruction may execute the method for acquiring monitoring data in any of the above method embodiments.
Fig. 5 is a schematic structural diagram of a computer device according to an embodiment of the present invention, where the embodiment of the present invention does not limit the specific implementation of the computer device.
As shown in fig. 5, the computer apparatus may include: a processor (processor) 502, a Communications Interface 504, a memory 506, and a communication bus 508.
Wherein: the processor 502, communication interface 504, and memory 506 communicate with each other via a communication bus 508.
A communication interface 504 for communicating with network elements of other devices, such as clients or other servers.
The processor 502 is configured to execute the program 510, and may specifically execute relevant steps in the above-described embodiment of the monitoring data collection method.
In particular, program 510 may include program code that includes computer operating instructions.
The processor 502 may be a central processing unit CPU, or an Application Specific Integrated Circuit ASIC (Application Specific Integrated Circuit), or one or more Integrated circuits configured to implement an embodiment of the present invention. The computer device includes one or more processors, which may be the same type of processor, such as one or more CPUs; or may be different types of processors such as one or more CPUs and one or more ASICs.
And a memory 506 for storing a program 510. The memory 506 may comprise high-speed RAM memory, and may also include non-volatile memory (non-volatile memory), such as at least one disk memory.
The program 510 may specifically be used to cause the processor 502 to perform the following operations:
after determining an IP address of monitoring data to be collected, searching a data monitoring corresponding relation matched with the IP address from a monitoring source configuration file, wherein the monitoring source configuration file stores data monitoring corresponding relations matched with different IP addresses, different monitoring source OIDs and different group character strings;
calling a monitoring source OID and a group character string according to the data monitoring corresponding relation;
and acquiring monitoring data corresponding to the IP address by using the monitoring source OID and the group character string.
The algorithms and displays presented herein are not inherently related to any particular computer, virtual machine, or other apparatus. Various general purpose systems may also be used with the teachings herein. The required structure for constructing such a system will be apparent from the description above. Moreover, the present invention is not directed to any particular programming language. It is appreciated that a variety of programming languages may be used to implement the teachings of the present invention as described herein, and any descriptions of specific languages are provided above to disclose the best mode of the invention.
In the description provided herein, numerous specific details are set forth. It is understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.
Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, figure, or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. However, the disclosed method should not be interpreted as reflecting an intention that: that the invention as claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the detailed description are hereby expressly incorporated into this detailed description, with each claim standing on its own as a separate embodiment of this invention.
Those skilled in the art will appreciate that the modules in the device in an embodiment may be adaptively changed and disposed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and furthermore they may be divided into a plurality of sub-modules or sub-units or sub-components. All of the features disclosed in this specification (including any accompanying claims, abstract and drawings), and all of the processes or elements of any method or apparatus so disclosed, may be combined in any combination, except combinations where at least some of such features and/or processes or elements are mutually exclusive. Each feature disclosed in this specification (including any accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.
Furthermore, those skilled in the art will appreciate that while some embodiments described herein include some features included in other embodiments, rather than other features, combinations of features of different embodiments are meant to be within the scope of the invention and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.
Various component embodiments of the invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. It will be appreciated by those skilled in the art that a microprocessor or Digital Signal Processor (DSP) may be used in practice to implement some or all of the functions of some or all of the components of the asset data management method and apparatus according to embodiments of the present invention. The present invention may also be embodied as apparatus or device programs (e.g., computer programs and computer program products) for performing a portion or all of the methods described herein. Such programs implementing the present invention may be stored on a computer readable medium or may be in the form of one or more signals. Such a signal may be downloaded from an internet website or provided on a carrier signal or in any other form.
It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention may be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means may be embodied by one and the same item of hardware. The usage of the words first, second and third, etcetera do not indicate any ordering. These words may be interpreted as names.

Claims (10)

1. A method for collecting monitoring data, comprising:
after an IP address of monitoring data to be collected is determined, searching a data monitoring corresponding relation matched with the IP address from a monitoring source configuration file, wherein the monitoring source configuration file stores data monitoring corresponding relations matched with different IP addresses, different monitoring source OIDs and different group character strings;
calling a monitoring source OID and a group character string according to the data monitoring corresponding relation;
and acquiring monitoring data corresponding to the IP address by using the monitoring source OID and the group character string, determining equipment to be monitored by using the monitoring source OID, and decrypting the equipment to be monitored by using the group character string so as to acquire the monitoring data from the equipment to be monitored.
2. The method according to claim 1, wherein after the IP address of the monitoring data to be collected is determined, before the data monitoring correspondence matching the IP address is searched for from the monitoring source configuration file, the method further comprises:
and configuring a monitoring source configuration file according to the IP address of the terminal to be monitored, the group character string and the monitoring source OID.
3. The method according to claim 2, wherein configuring the monitoring source configuration file according to the IP address of the terminal to be monitored, the community string, and the monitoring source OID comprises:
identifying whether a network management protocol SNMP matched with the IP address of the terminal to be monitored exists or not by utilizing the group character string;
when a matched network management protocol SNMP exists, establishing a first data monitoring corresponding relation between the group character string and the IP address;
searching whether a matched monitoring source OID exists or not from an OID database according to the root node OID of the IP address;
when the matched monitoring source OID is found, establishing a second data monitoring corresponding relation of the IP address and the monitoring source OID;
and integrating the first data monitoring corresponding relation and the second data monitoring corresponding relation, and updating the integrated data monitoring corresponding relation into a monitoring source configuration file.
4. The method according to any one of claims 1 to 3, wherein retrieving the monitoring source OID and the community string according to the data monitoring correspondence comprises:
and calling the group character strings recorded in the monitoring corresponding relation from a preset storage position, and extracting the monitoring source OID recorded in the data monitoring corresponding relation from an OID database, wherein all the group character strings are stored in the preset storage position, and all the monitoring source OIDs are stored in the OID database.
5. The method of claim 4, wherein the collecting the monitoring data corresponding to the IP address by using the monitoring source OID and the community string comprises:
and scheduling to a terminal to be monitored corresponding to the monitoring source OID identified by the IP address, and acquiring monitoring data from the terminal to be monitored by using the group character string.
6. The method of claim 5, further comprising:
and when the data monitoring corresponding relation matched with the IP address is not found, sending an updating instruction, and updating the monitoring source configuration file according to the received monitoring source OID and the group character string, wherein the updating instruction is used for indicating to update the monitoring source configuration file.
7. The method of claim 6, further comprising:
and storing the monitoring data and reporting the monitoring data according to a preset time interval.
8. An apparatus for collecting monitoring data, comprising:
the determining module is used for searching a data monitoring corresponding relation matched with the IP address from a monitoring source configuration file after determining the IP address of the monitoring data to be acquired, wherein the monitoring source configuration file stores data monitoring corresponding relations matched with different IP addresses, different monitoring source OIDs and different group character strings;
the calling module is used for calling the monitoring source OID and the group character string according to the data monitoring corresponding relation;
and the acquisition module is used for acquiring the monitoring data corresponding to the IP address by using the monitoring source OID and the group character string, determining the equipment to be monitored by using the monitoring source OID, and decrypting the equipment to be monitored by using the group character string so as to acquire the monitoring data from the equipment to be monitored.
9. A storage medium having at least one executable instruction stored therein, the executable instruction causing a processor to perform operations corresponding to the method for collecting monitoring data according to any one of claims 1 to 7.
10. A computer device, comprising: the system comprises a processor, a memory, a communication interface and a communication bus, wherein the processor, the memory and the communication interface complete mutual communication through the communication bus;
the memory is used for storing at least one executable instruction, and the executable instruction causes the processor to execute the operation corresponding to the monitoring data acquisition method according to any one of claims 1-7.
CN201910791216.7A 2019-08-26 2019-08-26 Monitoring data acquisition method and device, storage medium and terminal Active CN110708208B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910791216.7A CN110708208B (en) 2019-08-26 2019-08-26 Monitoring data acquisition method and device, storage medium and terminal

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910791216.7A CN110708208B (en) 2019-08-26 2019-08-26 Monitoring data acquisition method and device, storage medium and terminal

Publications (2)

Publication Number Publication Date
CN110708208A CN110708208A (en) 2020-01-17
CN110708208B true CN110708208B (en) 2023-01-06

Family

ID=69193990

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910791216.7A Active CN110708208B (en) 2019-08-26 2019-08-26 Monitoring data acquisition method and device, storage medium and terminal

Country Status (1)

Country Link
CN (1) CN110708208B (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1756190A (en) * 2004-09-30 2006-04-05 北京航空航天大学 Distributed performance data acquisition method
CN101409647A (en) * 2008-04-24 2009-04-15 上海地面通信息网络有限公司 Method for monitoring and analyzing user router flux
CN107885602A (en) * 2017-10-31 2018-04-06 新华三技术有限公司 Data collecting system and method

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8364805B2 (en) * 2011-02-22 2013-01-29 Kaseya International Limited Method and apparatus of matching monitoring sets to network devices

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1756190A (en) * 2004-09-30 2006-04-05 北京航空航天大学 Distributed performance data acquisition method
CN101409647A (en) * 2008-04-24 2009-04-15 上海地面通信息网络有限公司 Method for monitoring and analyzing user router flux
CN107885602A (en) * 2017-10-31 2018-04-06 新华三技术有限公司 Data collecting system and method

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
基于SNMP协议的网络交换机监测***设计与实现;杨明光等;《网络空间安全》;20170310;全文 *

Also Published As

Publication number Publication date
CN110708208A (en) 2020-01-17

Similar Documents

Publication Publication Date Title
RU2419986C2 (en) Combining multiline protocol accesses
CN111752799A (en) Service link tracking method, device, equipment and storage medium
CN112463772B (en) Log processing method and device, log server and storage medium
CN108462598A (en) A kind of daily record generation method, log analysis method and device
CN106713351B (en) Secure communication method and device based on serial server
CN109726091B (en) Log management method and related device
CN113067810B (en) Network packet capturing method, device, equipment and medium
US9641595B2 (en) System management apparatus, system management method, and storage medium
CN105207829B (en) Intrusion detection data processing method, device and system
CN111064729B (en) Message processing method and device, storage medium and electronic device
CN112152824B (en) Performance index data acquisition method and device
CN112688924A (en) Network protocol analysis system
CN110708208B (en) Monitoring data acquisition method and device, storage medium and terminal
CN104702469A (en) Method for monitoring network data, entity machine virtual device and network system
CN110765089A (en) Distributed equipment and log recording method, device and storage medium thereof
CN116760571A (en) Asset identification method, device, electronic equipment and storage medium
CN110572291A (en) System and method for realizing automatic framework identification function for distributed system
CN112491596B (en) Cloud-based fault processing method and device
CN109889619B (en) Abnormal domain name monitoring method and device based on block chain
CN115705259A (en) Fault processing method, related device and storage medium
CN113965629A (en) UDP application layer protocol identification method, device, storage medium and equipment
CN108805741B (en) Fusion method, device and system of power quality data
CN112181929A (en) Cloud management platform log processing method and device, electronic device and storage medium
CN111625412A (en) Flume-based data acquisition method, system, device and storage medium
CN114079623B (en) Method and device for identifying transmission capacity of user side router

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information
CB02 Change of applicant information

Address after: 100032 NO.332, 3rd floor, Building 102, 28 xinjiekouwai street, Xicheng District, Beijing

Applicant after: Qianxin Technology Group Co.,Ltd.

Applicant after: Qianxin Wangshen information technology (Beijing) Co.,Ltd.

Address before: 100032 NO.332, 3rd floor, Building 102, 28 xinjiekouwai street, Xicheng District, Beijing

Applicant before: Qianxin Technology Group Co.,Ltd.

Applicant before: LEGENDSEC INFORMATION TECHNOLOGY (BEIJING) Inc.

GR01 Patent grant
GR01 Patent grant