CN115361329B - Method for monitoring network topology change and triggering alarm based on TTL - Google Patents
Method for monitoring network topology change and triggering alarm based on TTL Download PDFInfo
- Publication number
- CN115361329B CN115361329B CN202210717407.0A CN202210717407A CN115361329B CN 115361329 B CN115361329 B CN 115361329B CN 202210717407 A CN202210717407 A CN 202210717407A CN 115361329 B CN115361329 B CN 115361329B
- Authority
- CN
- China
- Prior art keywords
- ttl
- node
- alarm
- node routing
- value
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/02—Topology update or discovery
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/12—Discovery or management of network topologies
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/16—Threshold monitoring
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/12—Shortest path evaluation
- H04L45/123—Evaluation of link metrics
Abstract
The application relates to a method for monitoring network topology change and triggering alarm based on TTL, which sets a node routing link based on an underway network topology structure; monitoring the TTL value of the node routing link in real time, and judging whether the TTL value exceeds a preset TTL threshold value or not; and according to the judging result, calculating the change node in the underway network topology structure at fixed points. The TTL detection is carried out on a plurality of end-to-end node routing links, the change of TTL values is monitored in real time through an alarm engine, and once the change occurs, the alarm is immediately carried out, and the point where the topology change is possible is calculated. When the underway of the SD-WAN changes, the network optimization is discovered as early as possible and is performed in a targeted manner by detecting and triggering the alarm through the multi-angle TTL.
Description
Technical Field
The disclosure relates to the technical field of communication, and in particular relates to a method, a device and a TTL monitoring system for monitoring network topology change and triggering an alarm based on TTL.
Background
In the SD-WAN network, since the underway is mostly based on the Internet available everywhere, the network topology changes to cause the influence of the underway network quality, so as to influence various performance indexes of the Overlay.
Because the Internet is not controlled by anyone, the current mainstream processing mode is to detect the quality of the Overlay network manually, and detect the topology of the Underlay network manually after the quality of the Overlay network is found to be degraded, so as to deal with symptoms.
In view of the above manual detection, it is necessary to passively wait for degradation of quality of the Overlay network and then manually check the Overlay network in the face of the intricacies. And not to mention inefficient, more likely to be a hands-free.
Therefore, there is a need for a means for automatically discovering an Underlay topology change based on a method for monitoring a network topology change and triggering an alarm based on a TTL, so that when the Underlay of the SD-WAN changes, the alarm is detected and triggered through multiple angles, so as to discover as early as possible and perform network optimization with pertinence.
Disclosure of Invention
In order to solve the above problems, the present application proposes a method, an apparatus and a TTL monitoring system for monitoring network topology changes and triggering an alarm based on TTL, so as to monitor the changes of TTL values in real time by performing TTL detection on a plurality of end-to-end node routing links through an alarm engine, immediately alarm and calculate the point where the topology changes are likely to happen once the changes occur. When the underway of the SD-WAN changes, the network optimization is discovered as early as possible and is performed in a targeted manner by detecting and triggering the alarm through the multi-angle TTL.
In one aspect of the present application, a method for monitoring network topology change and triggering an alarm based on TTL is provided, including the following steps:
s100, setting a node routing link based on an underway network topology structure;
s200, monitoring the TTL value of the node routing link in real time, and judging whether the TTL value exceeds a preset TTL threshold value;
and S300, calculating the change node in the underway network topology structure at fixed points according to the judging result.
As an optional embodiment of the present application, optionally, in step S100, the setting a node routing link based on the underway network topology includes:
s101, presetting a link setting rule;
s102, selecting a plurality of nodes meeting the link setting rule in the underway network topological structure according to the link setting rule;
s103, setting a plurality of end-to-end node routing links based on the selected nodes.
As an optional embodiment of the present application, optionally, in step S100, the setting a node routing link based on the underway network topology further includes:
s110, acquiring the node routing links, and calculating and obtaining the number of nodes in the node routing links;
s120, configuring a plurality of TTL thresholds corresponding to the number of the nodes according to the number of the nodes and a preset configuration rule;
s130, configuring the TTL threshold value on each node in the node routing link according to the configuration rule.
As an optional implementation manner of the present application, optionally, at S200, monitoring the TTL value of the node routing link in real time, and determining whether the TTL value exceeds a preset TTL threshold includes:
s201, configuring an alarm system and setting the sampling frequency of the alarm system;
s202, configuring alarm strategies with different sensitivities, and configuring the alarm strategies in the alarm system;
s203, carrying out real-time TTL monitoring on the node routing link through the alarm system to obtain a routing TTL value of the node routing link.
As an optional implementation manner of the present application, optionally, in step S200, monitoring the TTL value of the node routing link in real time, and determining whether the TTL value exceeds a preset TTL threshold, further includes:
s210, carrying out real-time TTL monitoring on a plurality of node routing links through the alarm system, and acquiring a TTL value of each node routing link;
s220, comparing the TTL value of the node routing link with a TTL threshold value of the node routing link, and judging whether the TTL value of the node routing link exceeds the TTL threshold value;
and S230, if the TTL value of the node routing link exceeds the TTL threshold value of the node routing link, judging that the underway network topology structure where the node routing link is positioned is changed, and sending out an alarm through the alarm system.
As an optional embodiment of the present application, optionally, in step S300, according to a determination result, a fixed point calculating a change node in the underway network topology includes:
s301, acquiring the node routing link giving out an alarm;
s302, carrying out real-time TTL monitoring on each node in the node routing link through the alarm system to obtain a TTL value of each node;
s303, comparing the TTL value of each node with the TTL threshold value configured for each node, and calculating and judging whether the TTL value of each node exceeds the TTL threshold value: if the TTL value of one of the nodes exceeds the corresponding TTL threshold, judging that the topology structure of the underway network where the node is located changes, marking the node and sending out an alarm through the alarm system.
In a second aspect of the present application, an apparatus for implementing the method for monitoring network topology change and triggering an alarm based on TTL is provided, where the apparatus includes:
the link setting module is used for setting a node routing link based on an underway network topology structure;
the TTL value judging module is used for monitoring the TTL value of the node routing link in real time and judging whether the TTL value exceeds a preset TTL threshold value or not;
and the fixed point calculation module is used for calculating the change node in the underway network topological structure at fixed points according to the judgment result.
As an optional embodiment of the present application, optionally, the TTL value determining module includes:
the configuration module is used for configuring the alarm system and setting the sampling frequency of the alarm system; configuring alarm strategies with different sensitivities, and configuring the alarm strategies in the alarm system;
the alarm module is used for carrying out real-time TTL monitoring on the node routing link through the alarm system and obtaining a routing TTL value of the node routing link; performing real-time TTL monitoring on a plurality of node routing links, and acquiring a TTL value of each node routing link;
the judging module is used for comparing the TTL value of the node routing link with the TTL threshold value of the node routing link and judging whether the TTL value of the node routing link exceeds the TTL threshold value or not; if the TTL value of the node routing link exceeds the TTL threshold value of the node routing link, judging that the underway network topology structure where the node routing link is located changes, and sending out an alarm through the alarm system.
As an optional embodiment of the present application, optionally, the fixed point calculation module includes:
the acquisition module is used for acquiring the node routing link which gives out the alarm;
the calculation module is used for carrying out real-time TTL monitoring on each node in the node routing link through the alarm system to obtain the TTL value of each node;
the fixed point alarm module is used for comparing the TTL value of each node with the TTL threshold value configured for each node, and calculating and judging whether the TTL value of each node exceeds the TTL threshold value or not: if the TTL value of one of the nodes exceeds the corresponding TTL threshold, judging that the topology structure of the underway network where the node is located changes, marking the node and sending out an alarm through the alarm system.
In a third aspect of the present application, a TTL monitoring system is provided, including:
a processor;
a memory for storing processor-executable instructions;
the processor is configured to implement the method for monitoring network topology change and triggering alarm based on TTL when executing the executable instructions.
The invention has the technical effects that:
according to the method, node routing links are set on the basis of an underway network topological structure; monitoring the TTL value of the node routing link in real time, and judging whether the TTL value exceeds a preset TTL threshold value or not; and according to the judging result, calculating the change node in the underway network topology structure at fixed points. The TTL detection is carried out on a plurality of end-to-end node routing links, the change of TTL values is monitored in real time through an alarm engine, and once the change occurs, the alarm is immediately carried out, and the point where the topology change is possible is calculated. When the underway of the SD-WAN changes, the network optimization is discovered as early as possible and is performed in a targeted manner by detecting and triggering the alarm through the multi-angle TTL.
Other features and aspects of the present disclosure will become apparent from the following detailed description of exemplary embodiments, which proceeds with reference to the accompanying drawings.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate exemplary embodiments, features and aspects of the present disclosure and together with the description, serve to explain the principles of the disclosure.
FIG. 1 is a schematic diagram of an implementation flow of a method for monitoring network topology changes and triggering alarms based on TTL according to the present invention;
FIG. 2 shows a topology of an underway for the SD-WAN of the present invention;
FIG. 3 is a diagram illustrating the topology of an underway of the SD-WAN after node A addition in accordance with the present invention;
fig. 4 shows a topology of an Underlay for the SD-WAN after addition of a node B of the present invention.
Detailed Description
Various exemplary embodiments, features and aspects of the disclosure will be described in detail below with reference to the drawings. In the drawings, like reference numbers indicate identical or functionally similar elements. Although various aspects of the embodiments are illustrated in the accompanying drawings, the drawings are not necessarily drawn to scale unless specifically indicated.
The word "exemplary" is used herein to mean "serving as an example, embodiment, or illustration. Any embodiment described herein as "exemplary" is not necessarily to be construed as preferred or advantageous over other embodiments.
In addition, numerous specific details are set forth in the following detailed description in order to provide a better understanding of the present disclosure. It will be understood by those skilled in the art that the present disclosure may be practiced without some of these specific details. In some instances, methods, means, elements, and circuits well known to those skilled in the art have not been described in detail in order not to obscure the present disclosure.
Example 1
In SD-WAN, the TTL index is a field used to describe the number of hops of the network, and can also indirectly describe the partial topology of the network between end-to-end. In short, if the TTL changes, the network topology must change, the TTL does not change, and the network topology does not necessarily change.
In addition, the change in TTL description is only a one-dimensional network from end to end, and TTL detection is required for a plurality of end to end links at the same time if network change needs to be detected more comprehensively and more sensitively.
In this embodiment, the monitoring of network quality of the network node and the node routing link is implemented by performing TTL value monitoring and threshold judgment on different node routing links in the topology of the SD-WAN. The change of TTL value is monitored in real time through an alarm engine, once the change occurs, the alarm is immediately carried out, the point where the topology change is possible is calculated, and when the underway of the SD-WAN is changed, the alarm is detected and triggered through the multi-angle TTL so as to discover as soon as possible and carry out network optimization in a targeted manner.
The TTL value is used as the monitored unique index and is pushed to a general alarm system, and alarm strategies with different sensitivities are customized to realize the triggering of the alarm. In this embodiment, alarm policies with different sensitivities are configured in the alarm system, and the alarm policies are set according to the topology network configured by the user. When the TTL values of the node routing links and the nodes are monitored and judged, alarm strategies with different calculation modes and different sensitivities can be set, and the embodiment does not limit the design rules of the calculation modes and the alarm strategies.
As shown in fig. 1, in one aspect, a method for monitoring network topology change and triggering an alarm based on TTL is provided, including the following steps:
s100, setting a node routing link based on an underway network topology structure;
s200, monitoring the TTL value of the node routing link in real time, and judging whether the TTL value exceeds a preset TTL threshold value;
and S300, calculating the change node in the underway network topology structure at fixed points according to the judging result.
First, several node routing links need to be set in the topology of the underway of the SD-WAN. Specifically, as an optional embodiment of the present application, optionally, in step S100, the setting a node routing link based on the underway network topology includes:
s101, presetting a link setting rule;
s102, selecting a plurality of nodes meeting the link setting rule in the underway network topological structure according to the link setting rule;
s103, setting a plurality of end-to-end node routing links based on the selected nodes.
In a topology structure, a user needs to identify nodes/links needing network optimization monitoring, and designs a link setting rule, so that routing lines of different nodes, namely node routing links, are set through the link setting rule.
As shown in fig. 2, in the topology of an underway of an SD-WAN, 9 nodes are included, where the routing links reaching node 9 are respectively:
the route from node 1 to node 9 is 1-4-6-9;
the route from node 2 to node 9 is 2-4-7-9;
the route from node 3 to node 9 is 3-5-8-9.
A total of 3 links, i.e. 3 node routing links, are designed in the topology.
Secondly, on the node of each node routing link, an alarm, namely a preset TTL threshold, is set for the TTL values of all routing nodes, and once an alarm system monitors the node routing links and even a certain node in the node routing links to find that the node routing links reach a triggering condition, the alarm system can: once the TTL changes, an alarm is immediately given. In this embodiment, the TTL sampling accuracy is second level.
Once the TTL value changes are found, the nodes with changed TTL values can be obtained through calculation and investigation one by the alarm system, the nodes with changed TTL values are obtained through fixed-point calculation, the nodes are automatically calculated and alerted through fixed-point investigation, and the network optimization strategy efficiency of the Underray topology structure of the SD-WAN is greatly improved.
In this embodiment, through TTL detection on a plurality of end-to-end node routing links, the change of the TTL value is monitored in real time by the alarm engine, and once the change occurs, the alarm is immediately performed and the point where the topology change is likely to occur is calculated.
Therefore, the change node of the topology structure of the underwlay of the SD-WAN can be found, and when the underwlay of the SD-WAN changes, the change node is found as early as possible and network optimization is carried out in a targeted manner by detecting and triggering an alarm through the multi-angle TTL.
As shown in fig. 3, on the basis of the above, when the topology changes as shown in fig. 2, a node a is added between the nodes 6 and 9. At this time, the routing from node 1 to node 9 is changed from 1-4-6-9 to 1-4-6-A-9, the TTL value is less than 1, and the condition for triggering the alarm is reached.
Meanwhile, the TTL of the nodes 2 and 3 are not changed, the route change can be judged to be generated on the path of 1-9, meanwhile, similar TTL changes are found on the node 4 and the node 6, and finally, the problem is quickly locked in the link of 6-9.
As shown in FIG. 4, similarly, if a newly added node B is located between nodes 6, 7, 8 and node 9, all nodes find that their TTL to node 9 is less than 1 for the same example above, so the newly added node's location can be quickly ascertained and an alarm triggered.
The change of the TTL value is monitored in real time through the alarm engine, and once the change occurs, the alarm is immediately carried out, and the point where the topology change is likely to occur is calculated. When the underway of the SD-WAN changes, the network optimization is discovered as early as possible and is performed in a targeted manner by detecting and triggering the alarm through the multi-angle TTL.
Based on the above implementation, the present embodiment will further detail each specific step.
In this embodiment, the TTL value of each node routing link may be monitored and calculated, to determine whether the TTL value of a node routing link exceeds a set threshold; the TTL value of the node in each node routing link can be monitored and calculated, and whether the TTL value of a certain node in the node routing link with alarm exceeds a set threshold value is judged, so that the fixed point monitoring capturing of the changed node is performed. Therefore, aiming at the node routing links and the nodes, alarm strategies with different sensitivities can be configured in the alarm system, and the monitoring object is calculated and judged through the correspondingly configured alarm strategies, so that the monitoring object is set by a user.
As an optional embodiment of the present application, optionally, in step S100, the setting a node routing link based on the underway network topology further includes:
s110, acquiring the node routing links, and calculating and obtaining the number of nodes in the node routing links;
s120, configuring a plurality of TTL thresholds corresponding to the number of the nodes according to the number of the nodes and a preset configuration rule;
s130, configuring the TTL threshold value on each node in the node routing link according to the configuration rule.
The TTL threshold value is configured for the nodes in each node routing link according to the number of the included nodes, so that each node can perform TTL threshold value configuration according to the configuration rule. When the monitoring is convenient, the warning system compares and judges the TTL value of each node. The TTL threshold configuration mode set by the configuration rule is set according to the function of the alarm system.
As an optional implementation manner of the present application, optionally, at S200, monitoring the TTL value of the node routing link in real time, and determining whether the TTL value exceeds a preset TTL threshold includes:
s201, configuring an alarm system and setting the sampling frequency of the alarm system;
s202, configuring alarm strategies with different sensitivities, and configuring the alarm strategies in the alarm system;
s203, carrying out real-time TTL monitoring on the node routing link through the alarm system to obtain a routing TTL value of the node routing link.
In this embodiment, data is collected in seconds as much as possible through the detection of TTL of a plurality of end-to-end links, and the sampling frequency is set through the system. The system type of the alarm system is customized or developed by a user.
Alarm strategies with different sensitivities configured by the alarm system need to be switched according to the monitored objects, so that TTL numerical value monitoring and judgment under different alarm strategies can be conveniently realized. After the alarm strategy is configured, the real-time TTL monitoring can be carried out on a plurality of node routing links which are arranged in the Underray topological structure of the SD-WAN and need to be subjected to network quality monitoring through the alarm system, and the routing TTL value of the node routing links is obtained.
As an optional implementation manner of the present application, optionally, in step S200, monitoring the TTL value of the node routing link in real time, and determining whether the TTL value exceeds a preset TTL threshold, further includes:
s210, carrying out real-time TTL monitoring on a plurality of node routing links through the alarm system, and acquiring a TTL value of each node routing link;
s220, comparing the TTL value of the node routing link with a TTL threshold value of the node routing link, and judging whether the TTL value of the node routing link exceeds the TTL threshold value;
and S230, if the TTL value of the node routing link exceeds the TTL threshold value of the node routing link, judging that the underway network topology structure where the node routing link is positioned is changed, and sending out an alarm through the alarm system.
The monitoring object is the node routing link, the TTL value of each node routing link is obtained and calculated, whether the calculated TTL value of the node routing link exceeds a TTL threshold specified by a strategy is judged, if the TTL value of a certain node routing link exceeds the TTL threshold, the network quality of the node routing link is judged to change, namely, if the node is increased, the node is changed, and an alarm is sent out through the alarm system. While marking may be performed.
The manner of obtaining and calculating the TTL values of the node routing links, for example, obtaining the TTL values by calculating the average value of the TTL values of all the nodes in each node routing link, is not limited in this place, and can be selected by a user.
If the alarm system finds that TTL values of some node routing links change, the alarm system further calculates the TTL values at fixed points, and monitors the node routing links giving out alarms.
As an optional embodiment of the present application, optionally, in step S300, according to a determination result, a fixed point calculating a change node in the underway network topology includes:
s301, acquiring the node routing link giving out an alarm;
s302, carrying out real-time TTL monitoring on each node in the node routing link through the alarm system to obtain a TTL value of each node;
s303, comparing the TTL value of each node with the TTL threshold value configured for each node, and calculating and judging whether the TTL value of each node exceeds the TTL threshold value: if the TTL value of one of the nodes exceeds the corresponding TTL threshold, judging that the topology structure of the underway network where the node is located changes, marking the node and sending out an alarm through the alarm system.
The above manner of monitoring the TTL value of each node and determining whether the TTL value of each node exceeds the corresponding TTL threshold according to the TTL threshold configured for each node is the same as the above manner of determining the node routing link, which is merely different from the policy calculation and the TTL threshold, and will not be described in detail herein.
As shown in fig. 4, when all nodes find that their TTL to node 9 is less than 1, the location of the newly added node can be quickly ascertained and an alarm triggered. Therefore, the change of the TTL value is monitored in real time through the alarm engine, and the alarm is immediately carried out once the change occurs, and the point where the topology change is likely to occur is calculated.
In this embodiment, while detecting TTL, the quality (delay and packet loss rate) of the network may be detected, so as to assist in improving the network quality detection efficiency.
It should be noted that while the design of node routing links from several nodes as described above is described by way of example, those skilled in the art will appreciate that the present disclosure should not be so limited. In fact, the user can set the monitoring range completely according to the number of nodes of the topology result, and the like, so long as the technical function of the application can be realized according to the technical method.
Example 2
Based on the implementation principle of embodiment 1, in a second aspect of the present application, an apparatus for implementing the method for monitoring network topology change and triggering an alarm based on TTL is provided, where the method includes:
the link setting module is used for setting a node routing link based on an underway network topology structure;
the TTL value judging module is used for monitoring the TTL value of the node routing link in real time and judging whether the TTL value exceeds a preset TTL threshold value or not;
and the fixed point calculation module is used for calculating the change node in the underway network topological structure at fixed points according to the judgment result.
As an optional embodiment of the present application, optionally, the TTL value determining module includes:
the configuration module is used for configuring the alarm system and setting the sampling frequency of the alarm system; configuring alarm strategies with different sensitivities, and configuring the alarm strategies in the alarm system;
the alarm module is used for carrying out real-time TTL monitoring on the node routing link through the alarm system and obtaining a routing TTL value of the node routing link; performing real-time TTL monitoring on a plurality of node routing links, and acquiring a TTL value of each node routing link;
the judging module is used for comparing the TTL value of the node routing link with the TTL threshold value of the node routing link and judging whether the TTL value of the node routing link exceeds the TTL threshold value or not; if the TTL value of the node routing link exceeds the TTL threshold value of the node routing link, judging that the underway network topology structure where the node routing link is located changes, and sending out an alarm through the alarm system.
As an optional embodiment of the present application, optionally, the fixed point calculation module includes:
the acquisition module is used for acquiring the node routing link which gives out the alarm;
the calculation module is used for carrying out real-time TTL monitoring on each node in the node routing link through the alarm system to obtain the TTL value of each node;
the fixed point alarm module is used for comparing the TTL value of each node with the TTL threshold value configured for each node, and calculating and judging whether the TTL value of each node exceeds the TTL threshold value or not: if the TTL value of one of the nodes exceeds the corresponding TTL threshold, judging that the topology structure of the underway network where the node is located changes, marking the node and sending out an alarm through the alarm system.
The functions of the above modules and the interaction logic between the modules are described in embodiment 1, and will not be described in detail here. The connection manner between the modules can be wired or wireless, and is not limited in this point.
It should be apparent to those skilled in the art that the implementation of all or part of the above-described embodiments of the method may be implemented by a computer program for instructing relevant hardware, and the program may be stored in a computer readable storage medium, and the program may include the steps of the embodiments of the control methods described above when executed. The modules or steps of the invention described above may be implemented in a general-purpose computing device, they may be centralized in a single computing device, or distributed across a network of computing devices, or they may alternatively be implemented in program code executable by a computing device, such that they may be stored in a memory device and executed by a computing device, or they may be separately fabricated into individual integrated circuit modules, or multiple modules or steps within them may be fabricated into a single integrated circuit module. Thus, the present invention is not limited to any specific combination of hardware and software.
It will be appreciated by those skilled in the art that implementing all or part of the above-described embodiment methods may be implemented by a computer program for instructing relevant hardware, and the program may be stored in a computer readable storage medium, and the program may include the embodiment flow of each control method as described above when executed. The storage medium may be a magnetic disk, an optical disc, a Read-only memory (ROM), a random access memory (RandomAccessMemory, RAM), a flash memory (flash memory), a hard disk (HDD), or a Solid State Drive (SSD); the storage medium may also comprise a combination of memories of the kind described above.
Example 3
Still further, in a third aspect of the present application, a TTL monitoring system is provided, including:
a processor;
a memory for storing processor-executable instructions;
wherein the processor is configured to implement the method of embodiment 1 of monitoring network topology changes and triggering alarms based on TTL when executing the executable instructions.
The TTL monitoring system of embodiments of the present disclosure includes a processor and a memory for storing processor-executable instructions. The processor is configured to implement any one of the methods for monitoring network topology changes and triggering alarms based on TTL described above when executing the executable instructions.
Here, it should be noted that the number of processors may be one or more. Meanwhile, in the TTL monitoring system of the embodiment of the present disclosure, an input device and an output device may be further included. The processor, the memory, the input device, and the output device may be connected by a bus, or may be connected by other means, which is not specifically limited herein.
The memory is used as a computer readable storage medium for monitoring network topology change and triggering alarm based on TTL, and can be used for storing software programs, computer executable programs and various modules, such as: the method for monitoring network topology change and triggering alarm based on TTL is based on a program or a module corresponding to the method for monitoring network topology change and triggering alarm. The processor executes various functional applications and data processing of the TTL monitoring system by running software programs or modules stored in the memory.
The input device may be used to receive an input number or signal. Wherein the signal may be a key signal generated in connection with user settings of the device/terminal/server and function control. The output means may comprise a display device such as a display screen.
The foregoing description of the embodiments of the present disclosure has been presented for purposes of illustration and description, and is not intended to be exhaustive or limited to the embodiments disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the various embodiments described. The terminology used herein was chosen in order to best explain the principles of the embodiments, the practical application, or the technical improvement of the technology in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein.
Claims (7)
1. A method for monitoring network topology change and triggering alarm based on TTL is characterized by comprising the following steps:
s100, setting a node routing link based on an underway network topology structure;
in step S100, setting a node routing link based on the underway network topology structure includes:
s101, presetting a link setting rule;
s102, selecting a plurality of nodes conforming to the link setting rule in the underway network topological structure according to the link setting rule;
s103, setting a plurality of end-to-end node routing links based on the selected nodes;
s110, acquiring the node routing links, and calculating and obtaining the number of nodes in the node routing links;
s120, configuring a plurality of TTL thresholds corresponding to the number of the nodes according to the number of the nodes and a preset configuration rule;
s130, configuring the TTL threshold value on each node in the node routing link according to the configuration rule;
s200, monitoring the TTL value of the node routing link in real time, and judging whether the TTL value exceeds a preset TTL threshold value;
in S200, monitoring the TTL value of the node routing link in real time, and determining whether the TTL value exceeds a preset TTL threshold includes:
s201, configuring an alarm system and setting the sampling frequency of the alarm system;
s202, configuring alarm strategies with different sensitivities, and configuring the alarm strategies in the alarm system;
s203, carrying out real-time TTL monitoring on the node routing link through the alarm system to obtain a routing TTL value of the node routing link;
s300, according to a judging result, calculating a change node in the underway network topological structure at a fixed point; once the TTL value is found to change, the nodes with changing TTL values are obtained through calculation and investigation one by one and fixed-point calculation through an alarm system, and the nodes with changing TTL values are automatically calculated and alarmed.
2. The method for monitoring network topology changes and triggering an alarm according to claim 1, wherein in step S200, the TTL value of the node routing link is monitored in real time, and whether the TTL value exceeds a preset TTL threshold is determined, further comprising:
s210, carrying out real-time TTL monitoring on a plurality of node routing links through the alarm system, and acquiring a TTL value of each node routing link;
s220, comparing the TTL value of the node routing link with a TTL threshold value of the node routing link, and judging whether the TTL value of the node routing link exceeds the TTL threshold value;
and S230, if the TTL value of the node routing link exceeds the TTL threshold value of the node routing link, judging that the underway network topology structure where the node routing link is positioned is changed, and sending out an alarm through the alarm system.
3. The method for monitoring network topology changes and triggering an alarm according to claim 2, wherein in step S300, according to the determination result, the change node in the underway network topology is calculated at fixed point, comprising:
s301, acquiring the node routing link giving out an alarm;
s302, carrying out real-time TTL monitoring on each node in the node routing link through the alarm system to obtain a TTL value of each node;
s303, comparing the TTL value of each node with the TTL threshold value configured for each node, and calculating and judging whether the TTL value of each node exceeds the TTL threshold value: if the TTL value of one of the nodes exceeds the corresponding TTL threshold, judging that the topology structure of the underway network where the node is located changes, marking the node and sending out an alarm through the alarm system.
4. An apparatus for implementing the method for monitoring network topology changes and triggering alarms based on TTL as claimed in any one of claims 1-3, comprising:
the link setting module is used for setting a node routing link based on an underway network topology structure;
the TTL value judging module is used for monitoring the TTL value of the node routing link in real time and judging whether the TTL value exceeds a preset TTL threshold value or not;
and the fixed point calculation module is used for calculating the change node in the underway network topological structure at fixed points according to the judgment result.
5. The apparatus of claim 4, wherein the TTL value determination module comprises:
the configuration module is used for configuring the alarm system and setting the sampling frequency of the alarm system; configuring alarm strategies with different sensitivities, and configuring the alarm strategies in the alarm system;
the alarm module is used for carrying out real-time TTL monitoring on the node routing link through the alarm system and obtaining a routing TTL value of the node routing link; performing real-time TTL monitoring on a plurality of node routing links, and acquiring a TTL value of each node routing link;
the judging module is used for comparing the TTL value of the node routing link with the TTL threshold value of the node routing link and judging whether the TTL value of the node routing link exceeds the TTL threshold value or not; if the TTL value of the node routing link exceeds the TTL threshold value of the node routing link, judging that the underway network topology structure where the node routing link is located changes, and sending out an alarm through the alarm system.
6. The apparatus of claim 5, wherein the fixed point computing module comprises:
the acquisition module is used for acquiring the node routing link which gives out the alarm;
the calculation module is used for carrying out real-time TTL monitoring on each node in the node routing link through the alarm system to obtain the TTL value of each node;
the fixed point alarm module is used for comparing the TTL value of each node with the TTL threshold value configured for each node, and calculating and judging whether the TTL value of each node exceeds the TTL threshold value or not: if the TTL value of one of the nodes exceeds the corresponding TTL threshold, judging that the topology structure of the underway network where the node is located changes, marking the node and sending out an alarm through the alarm system.
7. A TTL monitoring system, comprising:
a processor;
a memory for storing processor-executable instructions;
wherein the processor is configured to implement the method of any one of claims 1 to 3 for monitoring network topology changes and triggering alarms based on TTL when executing the executable instructions.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210717407.0A CN115361329B (en) | 2022-06-23 | 2022-06-23 | Method for monitoring network topology change and triggering alarm based on TTL |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210717407.0A CN115361329B (en) | 2022-06-23 | 2022-06-23 | Method for monitoring network topology change and triggering alarm based on TTL |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN115361329A CN115361329A (en) | 2022-11-18 |
| CN115361329B true CN115361329B (en) | 2023-08-08 |
Family
ID=84029963
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202210717407.0A Active CN115361329B (en) | 2022-06-23 | 2022-06-23 | Method for monitoring network topology change and triggering alarm based on TTL |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115361329B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2011091977A1 (en) * | 2010-01-26 | 2011-08-04 | Astrium Sas | Service admisson path control (sapc) |
| CN104767688A (en) * | 2015-04-15 | 2015-07-08 | 杭州华三通信技术有限公司 | General time-to-live safety mechanism inspection method and device |
| CN105141434A (en) * | 2014-05-26 | 2015-12-09 | 华为技术有限公司 | Fault detection method and device of service chain |
| CN106470083A (en) * | 2015-08-19 | 2017-03-01 | ***通信集团公司 | A kind of synchronizing network detection method and device |
| CN107171883A (en) * | 2016-03-08 | 2017-09-15 | 华为技术有限公司 | Detect method, device and the equipment of forward table |
| CN110392408A (en) * | 2019-07-04 | 2019-10-29 | 东南大学 | Time-varying network topology control method and system based on node role and Parameter adjustable |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US7545755B2 (en) * | 2000-03-03 | 2009-06-09 | Adtran Inc. | Routing switch detecting change in session identifier before reconfiguring routing table |
| US11757759B2 (en) * | 2020-08-31 | 2023-09-12 | Ciena Corporation | Hop limit/TTL propagation mode aware relayed MPLS/SRv6 traceroute |
-
2022
- 2022-06-23 CN CN202210717407.0A patent/CN115361329B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO2011091977A1 (en) * | 2010-01-26 | 2011-08-04 | Astrium Sas | Service admisson path control (sapc) |
| CN105141434A (en) * | 2014-05-26 | 2015-12-09 | 华为技术有限公司 | Fault detection method and device of service chain |
| CN104767688A (en) * | 2015-04-15 | 2015-07-08 | 杭州华三通信技术有限公司 | General time-to-live safety mechanism inspection method and device |
| CN106470083A (en) * | 2015-08-19 | 2017-03-01 | ***通信集团公司 | A kind of synchronizing network detection method and device |
| CN107171883A (en) * | 2016-03-08 | 2017-09-15 | 华为技术有限公司 | Detect method, device and the equipment of forward table |
| CN110392408A (en) * | 2019-07-04 | 2019-10-29 | 东南大学 | Time-varying network topology control method and system based on node role and Parameter adjustable |
Also Published As
| Publication number | Publication date |
|---|---|
| CN115361329A (en) | 2022-11-18 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR101736425B1 (en) | Cloud computing enhanced gateway for communication networks | |
| EP2408154B1 (en) | Optimal route selection apparatus, optimal route selection method, and program | |
| US20190327130A1 (en) | Methods, control node, network element and system for handling network events in a telecomunications network | |
| RU2460221C1 (en) | Measuring method and system | |
| US9178794B2 (en) | Communication quality monitoring system, communication quality monitoring method and recording medium | |
| CN108418710B (en) | Distributed monitoring system, method and device | |
| CN111277561B (en) | Network attack path prediction method and device and security management platform | |
| CN105530138A (en) | Data monitoring method and data monitoring device | |
| CN108964976A (en) | A kind of alarm prompt method and warning instruction device based on optical module | |
| CN112527544B (en) | Server, and method and device for triggering fusing | |
| CN111884869A (en) | Method, device and system for monitoring network quality | |
| CN115038088A (en) | Intelligent network security detection early warning system and method | |
| CN112437037A (en) | Sketch-based DDoS flooding attack detection method and device | |
| CN115361329B (en) | Method for monitoring network topology change and triggering alarm based on TTL | |
| CN113706305A (en) | Initial node judgment method and system for digital currency network transaction based on block chain | |
| CN109361658B (en) | Industrial control industry-based abnormal flow information storage method and device and electronic equipment | |
| CN106686082B (en) | Storage resource adjusting method and management node | |
| CN107708176B (en) | Network connection method, network connection device and mobile terminal | |
| CN108494604B (en) | Network management method and device | |
| CN108141406B (en) | Method, device and equipment for processing service fault | |
| CN109699041A (en) | A kind of RRU channel failure diagnosis processing method and RRU device | |
| US9621401B1 (en) | Performing dynamic data analysis within a dynamic network | |
| CN111935180A (en) | Active defense method, device and system for security equipment | |
| CN114006764A (en) | Deployment method and device of safety network element based on super-fusion system | |
| CN114116128A (en) | Method, device, equipment and storage medium for fault diagnosis of container instance |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: 100083 room B1001, building 8, yard 1, Zhongguancun East Road, Haidian District, Beijing Applicant after: China Broadband Communications Co.,Ltd. Address before: 100083 room B1001, building 8, yard 1, Zhongguancun East Road, Haidian District, Beijing Applicant before: Beijing Tianwei Communication Technology Co.,Ltd. |
|
| CB02 | Change of applicant information | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |