CN115567366A - Method and device for analyzing network fault influence, storage medium and electronic equipment - Google Patents

Method and device for analyzing network fault influence, storage medium and electronic equipment Download PDF

Info

Publication number
CN115567366A
CN115567366A CN202211147678.3A CN202211147678A CN115567366A CN 115567366 A CN115567366 A CN 115567366A CN 202211147678 A CN202211147678 A CN 202211147678A CN 115567366 A CN115567366 A CN 115567366A
Authority
CN
China
Prior art keywords
target
network
data
network segment
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202211147678.3A
Other languages
Chinese (zh)
Inventor
霍江游
张勇
陈鹏
李骢
满欣
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Industrial and Commercial Bank of China Ltd ICBC
Original Assignee
Industrial and Commercial Bank of China Ltd ICBC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Industrial and Commercial Bank of China Ltd ICBC filed Critical Industrial and Commercial Bank of China Ltd ICBC
Priority to CN202211147678.3A priority Critical patent/CN115567366A/en
Publication of CN115567366A publication Critical patent/CN115567366A/en
Pending legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0631Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The application discloses a method and a device for analyzing network fault influence, a storage medium and electronic equipment, and relates to the field of network data analysis. The method comprises the following steps: acquiring target data, wherein the target data at least comprises: data of a network buried point and data of a target data center; under the condition that the equipment alarm instruction is triggered is detected, analyzing the target data to obtain an analysis result, wherein the analysis result at least comprises the following steps: a service network segment set influenced by a network fault and a session network segment set influenced by the network fault; determining target network segment information influenced by the network fault according to the analysis result; and analyzing whether the influence of the network fault on the target standby server exists or not according to the target network segment information. By the method and the device, the problem that operation and maintenance personnel are low in working efficiency due to relative shortage of analysis methods for the network fault influence range in the related technology is solved.

Description

Method and device for analyzing network fault influence, storage medium and electronic equipment
Technical Field
The present application relates to the field of network data analysis, and in particular, to a method and an apparatus for analyzing network fault influence, a storage medium, and an electronic device.
Background
The main responsibility of the bank data center is to support business electronic handling and ensure that the IT system stably provides service for customers. When the basic environment breaks down, operation and maintenance technicians need to restore production at the first time, troubleshooting and service influence range assessment are carried out in time, time is short, difficulty is high, and therefore effective intelligent tools are needed to help operation and maintenance faults to be emergent. In the field of troubleshooting, a great number of innovative means are available at present to automatically and intelligently analyze and locate the fault problem, and the problem of low working efficiency of operation and maintenance personnel is caused by relative shortage of a network fault influence range analysis and evaluation method in the prior art.
Aiming at the problem that the operation and maintenance personnel have low working efficiency due to relative shortage of analysis methods for the network fault influence range in the related technology, an effective solution is not provided at present.
Disclosure of Invention
The present application mainly aims to provide a method, an apparatus, a storage medium, and an electronic device for analyzing a network fault influence, so as to solve a problem that an operation and maintenance worker has low work efficiency due to a relative shortage of an analysis method for a network fault influence range in a related art.
In order to achieve the above object, according to one aspect of the present application, there is provided a method for analyzing an influence of a network failure. The method comprises the following steps: acquiring target data, wherein the target data at least comprises: data of a network buried point and data of a target data center; under the condition that the equipment alarm instruction is triggered, analyzing the target data to obtain an analysis result, wherein the analysis result at least comprises the following steps: a service network segment set influenced by network faults and a session network segment set influenced by the network faults; determining target network segment information influenced by the network fault according to the analysis result; and analyzing whether the influence of the network fault on the target standby server exists or not according to the target network segment information.
Further, before analyzing the target data and obtaining an analysis result, the method further includes: acquiring routing table information corresponding to target data; and matching the values of the corresponding target fields of the alarm source port and the route output port through the routing table information.
Further, under the condition that the device alarm instruction is triggered is detected, analyzing the target data, and obtaining an analysis result, wherein the analysis result comprises: determining a service network segment set influenced by network faults according to the value of the target field; acquiring service network segment information in a service network segment set; acquiring network buried point data in target data within a preset time stamp according to the service network segment information to obtain the target buried point data; and determining a session network segment set influenced by the network fault according to the target buried point data.
Further, determining the target network segment information affected by the network fault according to the analysis result includes: calculating intersection information between the service network segment set and the session network segment set; and determining the target network segment information influenced by the network fault according to the intersection information.
Further, analyzing whether the target standby server is influenced by the network fault according to the target network segment information comprises the following steps: inquiring application configuration data according to the target network segment information to obtain a server cluster corresponding to the target network segment information; acquiring state information of a target standby server from a server cluster; and analyzing whether the influence of the network fault on the target standby server exists or not according to the state information.
Further, analyzing whether the network fault affects the target standby server according to the state information comprises: if the state information indicates that the target standby server is started, judging whether the network flow passing through a target port of the target standby server is larger than a preset flow upper limit value or not; if the network flow passing through the target port of the target standby server is larger than the preset flow upper limit value, the influence of the network fault on the target standby server is indicated; if the network traffic is not greater than the preset traffic upper limit value, it indicates that the network fault has no influence on the target standby server; if the status information indicates that the target standby server is not enabled, it indicates that the network failure has an impact on the target standby server.
In order to achieve the above object, according to another aspect of the present application, there is provided an apparatus for analyzing influence of a network fault. The device includes: a first obtaining unit configured to obtain target data, wherein the target data at least includes: data of a network buried point and data of a target data center; the first analysis unit is used for analyzing the target data to obtain an analysis result under the condition that the equipment alarm instruction is triggered, wherein the analysis result at least comprises the following steps: a service network segment set influenced by network faults and a session network segment set influenced by the network faults; the determining unit is used for determining the target network segment information influenced by the network fault according to the analysis result; and the second analysis unit is used for analyzing whether the influence of the network fault on the target standby server exists or not according to the target network segment information.
Further, the apparatus further comprises: the second acquisition unit is used for analyzing the target data and acquiring the routing table information corresponding to the target data before the analysis result is obtained; and the matching unit is used for matching the values of the corresponding target fields of the alarm source port and the route output port through the routing table information.
Further, the first analysis unit includes: the first determining module is used for determining a service network segment set influenced by the network fault according to the value of the target field; the first acquisition module is used for acquiring the service network segment information in the service network segment set; the second acquisition module is used for acquiring the network buried point data in the target data within the preset time stamp according to the service network segment information to obtain the target buried point data; and the second determining module is used for determining the session segment set influenced by the network fault according to the target buried point data.
Further, the determination unit includes: the computing module is used for computing intersection information between the service network segment set and the session network segment set; and the third determining module is used for determining the target network segment information influenced by the network fault according to the intersection information.
Further, the second analysis unit includes: the query module is used for querying the application configuration data according to the target network segment information to obtain a server cluster corresponding to the target network segment information; the third acquisition module is used for acquiring the state information of the target standby server from the server cluster; and the analysis module is used for analyzing whether the influence of the network fault on the target standby server exists or not according to the state information.
Further, the analysis module includes: the first judgment submodule is used for judging whether the network flow passing through the target port of the target standby server is greater than a preset flow upper limit value or not if the state information indicates that the target standby server is started; the second judgment sub-module is used for indicating that the network fault has influence on the target standby server if the network flow passing through the target port of the target standby server is greater than the preset flow upper limit value; the third judgment submodule is used for indicating that the network fault has no influence on the target standby server if the network traffic is not greater than the preset traffic upper limit value; and the fourth judgment submodule is used for indicating that the network fault has influence on the target standby server if the state information indicates that the target standby server is not started.
According to another aspect of embodiments of the present application, there is also provided an electronic device, including one or more processors and a memory, the computer program/instructions, when executed by the processors, performing the method of any one of the above.
According to another aspect of embodiments of the present application, there is also provided a computer-readable storage medium having stored thereon a computer program/instructions which, when executed by a processor, perform the method of any one of the above.
Through the application, the following steps are adopted: acquiring target data, wherein the target data at least comprises: data of a network buried point and data of a target data center; under the condition that the equipment alarm instruction is triggered, analyzing the target data to obtain an analysis result, wherein the analysis result at least comprises the following steps: a service network segment set influenced by network faults and a session network segment set influenced by the network faults; determining target network segment information influenced by the network fault according to the analysis result; and analyzing whether the influence of the network fault on the target standby server exists or not according to the target network segment information. The problem that operation and maintenance personnel work efficiency is low due to the fact that an analysis method for the network fault influence range is relatively short in the related technology is solved, whether the network fault influences a target standby server or not is analyzed through analyzing target data and determining the obtained target network segment information according to the analysis result, and therefore the effect of improving the work efficiency of the operation and maintenance personnel is achieved.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this application, illustrate embodiments of the application and, together with the description, serve to explain the application and are not intended to limit the application. In the drawings:
fig. 1 is a flowchart of a method for analyzing network fault influence according to an embodiment of the present application;
fig. 2 is a schematic network diagram for collecting buried point data according to an analysis method for network fault influence provided in an embodiment of the present application;
fig. 3 is a system operation diagram of a method for analyzing network fault influence according to an embodiment of the present application;
fig. 4 is a schematic diagram of an apparatus for analyzing the effect of a network fault according to an embodiment of the present application;
fig. 5 is a schematic diagram of an electronic device network architecture for analyzing the effects of a network fault according to an embodiment of the present application.
Detailed Description
It should be noted that, in the present application, the embodiments and features of the embodiments may be combined with each other without conflict. The present application will be described in detail below with reference to the embodiments with reference to the attached drawings.
In order to make the technical solutions better understood by those skilled in the art, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only partial embodiments of the present application, but not all embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
It should be noted that the terms "first," "second," and the like in the description and claims of this application and in the drawings described above are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It should be understood that the data so used may be interchanged under appropriate circumstances such that embodiments of the application described herein may be used. Moreover, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed, but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.
It should be noted that, the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for presentation, analyzed data, etc.) referred to in the present disclosure are information and data authorized by the user or sufficiently authorized by each party.
According to an embodiment of the application, a method for analyzing network fault influence is provided.
Fig. 1 is a flowchart of a method for analyzing network failure influence according to an embodiment of the present application. As shown in fig. 1, the method comprises the steps of:
step S101, obtaining target data, wherein the target data at least comprises: data of a network buried point and data of a target data center.
Specifically, the target data center acquires the original data to obtain the target data, and the standard original data mainly comes from other operation and maintenance systems or network equipment, including a configuration management system, a centralized monitoring system and switch equipment. As shown in table 1 below:
TABLE 1
Figure BDA0003852928960000051
As shown in fig. 2, the data to be specially buried is mainly network stream data (corresponding to the network buried point data in the present application), and includes fields such as quintuple information and traffic, for example, { time: "2021/9/28/14 00", quintuple: "10.1.1.1.10.2.2.2 t 4395 t 8080 tcp", traffic: "1024B" }, where the buried point location is selected on the core device side of each network region, so as to collect the network stream conditions in the north-south direction in real time, and clearly determine which sessions enter the network region from the upper end; and the network card side of each server collects the network flow condition sent by the server in real time, and determines which sessions enter the network area from the lower end.
Step S102, under the condition that the device alarm instruction is triggered, analyzing the target data to obtain an analysis result, wherein the analysis result at least comprises: the service network segment set influenced by the network fault and the session network segment set influenced by the network fault.
Specifically, the analysis of the influence on the network fault is automatically triggered through alarm information, and an alarm carries a corresponding timestamp Time and an alarm Type (including a device, a board card and a port, wherein the device is composed of the board card, and the board card is composed of the port, so the port is the minimum composition unit), and an alarm source Original.
Optionally, in the method for analyzing an influence of a network fault provided in the embodiment of the present application, before analyzing target data and obtaining an analysis result, the method further includes: acquiring routing table information corresponding to target data; and matching the values of the corresponding target fields of the alarm source port and the route output port through the routing table information.
Specifically, the device routing table is checked, and backup/active resources corresponding to origin and a service network segment set influenced by a network fault are calculated by matching values of a port related to the origin and a 'forwarding port' field of a routing table entry, wherein the service network segment set is a maximum influence range deduced through static data, so that the working efficiency of operation and maintenance personnel is further improved.
Optionally, in the method for analyzing influence of a network fault provided in the embodiment of the present application, when it is detected that an equipment alarm instruction is triggered, analyzing target data, and obtaining an analysis result includes: determining a service network segment set influenced by network faults according to the value of the target field; acquiring service network segment information in a service network segment set; acquiring network buried point data in target data within a preset time stamp according to the service network segment information to obtain the target buried point data; and determining a session network segment set influenced by the network fault according to the target buried point data.
For example, network flow data acquired by a buried point probe is queried according to the acquired service network segment information, and target buried point data of the network region is entered within a certain Time range (for example, 5 minutes) of the Time, and a session network segment set of the target buried point data is determined, wherein the service network segment set is an influence range deduced through dynamic data, so that the working efficiency of operation and maintenance personnel is further improved later.
And step S103, determining the target network segment information influenced by the network fault according to the analysis result.
Specifically, as shown in fig. 3, the network segment that is actually affected by the network device is obtained according to the network segment set included in the maximum affected range and the session network segment set forwarded through the network at the failure time.
Optionally, in the method for analyzing network failure influence provided in the embodiment of the present application, determining, according to an analysis result, target network segment information affected by a network failure includes: calculating intersection information between the service network segment set and the session network segment set; and determining the target network segment information influenced by the network fault according to the intersection information.
For example, the service network segment set A is the maximum influence range deduced through static data, the intersection set with the session network segment set B can calculate the real influenced network segment set C, the network segment set C comprises the target network segment information influenced by the network fault, and the influence range of the network fault can be accurately analyzed by taking the intersection set between the two network segments.
And step S104, analyzing whether the influence of the network fault on the target standby server exists or not according to the target network segment information.
Specifically, as shown in fig. 3, after the target network segment information is obtained, the server cluster configured by the query application is associated to obtain the directly affected service information.
Optionally, in the method for analyzing an impact of a network fault provided in the embodiment of the present application, analyzing whether an impact of the network fault on the target backup server exists according to the target network segment information includes: inquiring application configuration data according to the target network segment information to obtain a server cluster corresponding to the target network segment information; acquiring state information of a target standby server from a server cluster; and analyzing whether the influence of the network fault on the target standby server exists or not according to the state information.
Specifically, the application configuration data is inquired by using the target network segment information, the application and the service cluster to which the target network segment information belongs can be reversely deduced, the state information of the target standby server is obtained from the server cluster, and the direct influence range of the fault is analyzed, wherein the direct influence is usually shown in the period from the time when the fault occurs to the time when the master standby switching is completed, the influence range of the network fault is further analyzed by checking the state information of the target standby server, and the working efficiency of operation and maintenance personnel is improved.
Optionally, in the method for analyzing an impact of a network fault provided in the embodiment of the present application, analyzing whether the impact of the network fault on the target backup server exists according to the state information includes: if the state information indicates that the target standby server is started, judging whether the network flow passing through a target port of the target standby server is larger than a preset flow upper limit value or not; if the network flow passing through the target port of the target standby server is larger than the preset flow upper limit value, indicating that the network fault has influence on the target standby server; if the network traffic is not greater than the preset traffic upper limit value, indicating that the network fault has no influence on the target standby server; if the status information indicates that the target standby server is not enabled, it indicates that the network failure has an impact on the target standby server.
Specifically, judge whether backup device has also received the warning, divide into following several kinds of condition, if backup device has not successfully started, it has direct influence to target standby server to show that the network trouble exists, and direct influence still takes place continuously, if backup device has started but some port flow surpass the upper limit, it has indirect influence to target standby server to show that the network trouble exists, then need further analysis bandwidth indirect influence that brings inadequately, if backup device operates normally, then direct influence is restoreed, the business recovers normally, this application is when the network breaks down, can automatic analysis influence scope, liberation fortune dimension personnel emergency pressure, very big promotion work efficiency.
To sum up, the method for analyzing network fault influence provided by the embodiment of the present application obtains target data, where the target data at least includes: data of a network buried point and data of a target data center; under the condition that the equipment alarm instruction is triggered, analyzing the target data to obtain an analysis result, wherein the analysis result at least comprises the following steps: a service network segment set influenced by a network fault and a session network segment set influenced by the network fault; determining target network segment information influenced by the network fault according to the analysis result; and analyzing whether the influence of the network fault on the target standby server exists or not according to the target network segment information. The problem that operation and maintenance personnel work efficiency is low due to the fact that an analysis method for the network fault influence range is relatively short in the related technology is solved, whether the network fault influences a target standby server or not is analyzed through analyzing target data and determining the obtained target network segment information according to the analysis result, and therefore the effect of improving the work efficiency of the operation and maintenance personnel is achieved.
It should be noted that the steps illustrated in the flowcharts of the figures may be performed in a computer system such as a set of computer-executable instructions and that, although a logical order is illustrated in the flowcharts, in some cases, the steps illustrated or described may be performed in an order different than presented herein.
The embodiment of the present application further provides an analysis apparatus for network fault influence, and it should be noted that the analysis apparatus for network fault influence according to the embodiment of the present application may be used to execute the analysis method for network fault influence according to the embodiment of the present application. The following describes an analysis apparatus for analyzing the influence of a network fault according to an embodiment of the present application.
Fig. 4 is a schematic diagram of an analysis apparatus for analyzing the influence of a network fault according to an embodiment of the present application. As shown in fig. 4, the apparatus includes: a first acquisition unit 401, a first analysis unit 402, a determination unit 403, and a second analysis unit 404.
Specifically, the first obtaining unit 401 is configured to obtain target data, where the target data at least includes: data of a network buried point and data of a target data center;
a first analysis unit 402, configured to, when it is detected that the device alarm instruction is triggered, analyze the target data to obtain an analysis result, where the analysis result at least includes: a service network segment set influenced by a network fault and a session network segment set influenced by the network fault;
a determining unit 403, configured to determine, according to the analysis result, target network segment information affected by the network fault;
and a second analyzing unit 404, configured to analyze whether the network failure has an influence on the target backup server according to the target network segment information.
To sum up, the analysis apparatus for network fault influence provided in the embodiment of the present application obtains target data through the first obtaining unit 401, where the target data at least includes: data of a network buried point and data of a target data center; the first analysis unit 402 analyzes the target data to obtain an analysis result when detecting that the device alarm instruction is triggered, where the analysis result at least includes: a service network segment set influenced by network faults and a session network segment set influenced by the network faults; determining unit 403 determines the target network segment information affected by the network fault according to the analysis result; the second analysis unit 404 analyzes whether the network fault affects the target standby server according to the target network segment information, so as to solve the problem that the operation and maintenance staff have low working efficiency due to relative shortage of the analysis method for the network fault influence range in the related technology.
Optionally, in the apparatus for analyzing influence of a network fault provided in the embodiment of the present application, the apparatus further includes: the second acquisition unit is used for analyzing the target data and acquiring the routing table information corresponding to the target data before the analysis result is obtained; and the matching unit is used for matching the values of the corresponding target fields of the alarm source port and the route output port through the routing table information.
Optionally, in the apparatus for analyzing an influence of a network fault provided in the embodiment of the present application, the first analyzing unit 402 includes: the first determining module is used for determining a service network segment set influenced by network faults according to the value of the target field; the first acquisition module is used for acquiring the service network segment information in the service network segment set; the second acquisition module is used for acquiring the network buried point data in the target data within the preset time stamp according to the service network segment information to obtain the target buried point data; and the second determining module is used for determining the session segment set influenced by the network fault according to the target buried point data.
Optionally, in the apparatus for analyzing network failure influence provided in the embodiment of the present application, the determining unit 403 includes: the computing module is used for computing intersection information between the service network segment set and the session network segment set; and the third determining module is used for determining the target network segment information influenced by the network fault according to the intersection information.
Optionally, in the apparatus for analyzing influence of a network fault provided in this embodiment of the present application, the second analysis unit 404 includes: the query module is used for querying the application configuration data according to the target network segment information to obtain a server cluster corresponding to the target network segment information; the third acquisition module is used for acquiring the state information of the target standby server from the server cluster; and the analysis module is used for analyzing whether the influence of the network fault on the target standby server exists or not according to the state information.
Optionally, in the apparatus for analyzing an influence of a network fault provided in the embodiment of the present application, the analysis module includes: the first judgment sub-module is used for judging whether the network flow passing through a target port of the target standby server is larger than a preset flow upper limit value or not if the state information indicates that the target standby server is started; the second judgment submodule is used for indicating that the network fault has influence on the target standby server if the network flow passing through the target port of the target standby server is greater than the preset flow upper limit value; the third judgment submodule is used for indicating that the network fault has no influence on the target standby server if the network traffic is not greater than the preset traffic upper limit value; and the fourth judgment submodule is used for indicating that the network fault has influence on the target standby server if the state information indicates that the target standby server is not started.
The analysis device for the network fault influence comprises a processor and a memory, and the first obtaining unit 401, the first analysis unit 402, the determining unit 403, and the second analysis unit 404 are described above. Etc. are stored in a memory as program elements which are executed by a processor to perform the respective functions.
The processor comprises a kernel, and the kernel calls the corresponding program unit from the memory. The kernel can be set to be one or more, and the analysis of the network fault influence is carried out by adjusting the kernel parameters.
The memory may include volatile memory in a computer readable medium, random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM), including at least one memory chip.
An embodiment of the present invention provides a storage medium having a program stored thereon, where the program, when executed by a processor, implements a method for analyzing network failure impact.
The embodiment of the invention provides a processor, which is used for running a program, wherein an analysis method for analyzing the influence of network faults is executed when the program runs.
As shown in fig. 5, an embodiment of the present invention provides an electronic device, where the device includes a processor, a memory, and a program stored in the memory and executable on the processor, and the processor executes the program to implement the following steps: acquiring target data, wherein the target data at least comprises: data of a network buried point and data of a target data center; under the condition that the equipment alarm instruction is triggered, analyzing the target data to obtain an analysis result, wherein the analysis result at least comprises the following steps: a service network segment set influenced by a network fault and a session network segment set influenced by the network fault; determining target network segment information influenced by the network fault according to the analysis result; and analyzing whether the influence of the network fault on the target standby server exists or not according to the target network segment information.
The processor executes the program and further realizes the following steps: analyzing the target data, and acquiring routing table information corresponding to the target data before obtaining an analysis result; and matching the values of the corresponding target fields of the alarm source port and the route output port through the routing table information.
The processor executes the program and further realizes the following steps: determining a service network segment set influenced by the network fault according to the value of the target field; acquiring service network segment information in a service network segment set; acquiring network buried point data in target data in a preset time stamp according to the service network segment information to obtain the target buried point data; and determining a session network segment set influenced by the network fault according to the target buried point data.
The processor executes the program and further realizes the following steps: calculating intersection information between the service network segment set and the session network segment set; and determining the target network segment information influenced by the network fault according to the intersection information.
The processor executes the program and further realizes the following steps: inquiring application configuration data according to the target network segment information to obtain a server cluster corresponding to the target network segment information; acquiring state information of a target standby server from a server cluster; and analyzing whether the influence of the network fault on the target standby server exists or not according to the state information.
The processor executes the program and further realizes the following steps: if the state information indicates that the target standby server is started, judging whether the network flow passing through a target port of the target standby server is larger than a preset flow upper limit value or not; if the network flow passing through the target port of the target standby server is larger than the preset flow upper limit value, the influence of the network fault on the target standby server is indicated; if the network traffic is not greater than the preset traffic upper limit value, it indicates that the network fault has no influence on the target standby server; if the status information indicates that the target standby server is not enabled, it indicates that the network failure has an impact on the target standby server.
The device herein may be a server, a PC, a PAD, a mobile phone, etc.
The present application also provides a computer program product adapted to perform a program for initializing the following method steps when executed on a data processing device: acquiring target data, wherein the target data at least comprises: data of a network buried point and data of a target data center; under the condition that the equipment alarm instruction is triggered, analyzing the target data to obtain an analysis result, wherein the analysis result at least comprises the following steps: a service network segment set influenced by a network fault and a session network segment set influenced by the network fault; determining target network segment information influenced by the network fault according to the analysis result; and analyzing whether the influence of the network fault on the target standby server exists or not according to the target network segment information.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: analyzing the target data, and acquiring routing table information corresponding to the target data before obtaining an analysis result; and matching the values of the corresponding target fields of the alarm source port and the route output port through the routing table information.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: determining a service network segment set influenced by the network fault according to the value of the target field; acquiring service network segment information in a service network segment set; acquiring network buried point data in target data in a preset time stamp according to the service network segment information to obtain the target buried point data; and determining a session network segment set influenced by the network fault according to the target buried point data.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: calculating intersection information between the service network segment set and the session network segment set; and determining the target network segment information influenced by the network fault according to the intersection information.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: inquiring application configuration data according to the target network segment information to obtain a server cluster corresponding to the target network segment information; acquiring state information of a target standby server from a server cluster; and analyzing whether the influence of the network fault on the target standby server exists or not according to the state information.
When executed on a data processing device, is further adapted to perform a procedure for initializing the following method steps: if the state information indicates that the target standby server is started, judging whether the network flow passing through a target port of the target standby server is larger than a preset flow upper limit value or not; if the network flow passing through the target port of the target standby server is larger than the preset flow upper limit value, the influence of the network fault on the target standby server is indicated; if the network traffic is not greater than the preset traffic upper limit value, indicating that the network fault has no influence on the target standby server; if the status information indicates that the target standby server is not enabled, it indicates that the network failure has an impact on the target standby server.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.
The memory may include forms of volatile memory in a computer readable medium, random Access Memory (RAM) and/or non-volatile memory, such as Read Only Memory (ROM) or flash memory (flash RAM). The memory is an example of a computer-readable medium.
Computer-readable media, including both permanent and non-permanent, removable and non-removable media, may implement the information storage by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static Random Access Memory (SRAM), dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), read Only Memory (ROM), electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technology, compact disc read only memory (CD-ROM), digital Versatile Discs (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, a computer readable medium does not include a transitory computer readable medium such as a modulated data signal and a carrier wave.
It should also be noted that the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrases "comprising a," "8230," "8230," or "comprising" does not exclude the presence of additional identical elements in the process, method, article, or apparatus comprising the element.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The above are merely examples of the present application and are not intended to limit the present application. Various modifications and changes may occur to those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims (10)

1. A method for analyzing the influence of network faults is characterized by comprising the following steps:
acquiring target data, wherein the target data at least comprises: data of a network buried point and data of a target data center;
under the condition that an equipment alarm instruction is triggered, analyzing the target data to obtain an analysis result, wherein the analysis result at least comprises: the method comprises the steps of collecting service network segments influenced by network faults and collecting session network segments influenced by the network faults;
determining target network segment information influenced by the network fault according to the analysis result;
and analyzing whether the network fault influences a target standby server or not according to the target network segment information.
2. The method of claim 1, wherein prior to analyzing the target data to obtain an analysis result, the method further comprises:
obtaining routing table information corresponding to the target data;
and matching the values of the corresponding target fields of the alarm source port and the route output port through the routing table information.
3. The method of claim 2, wherein in the case that it is detected that the device alarm instruction is triggered, analyzing the target data to obtain an analysis result comprises:
determining the service network segment set influenced by the network fault according to the value of the target field;
acquiring service network segment information in the service network segment set;
acquiring the network buried point data in the target data within a preset time stamp according to the service network segment information to obtain target buried point data;
and determining the session network segment set influenced by the network fault according to the target buried point data.
4. The method of claim 1, wherein determining target segment information affected by the network failure based on the analysis comprises:
calculating intersection information between the service network segment set and the session network segment set;
and determining the target network segment information influenced by the network fault according to the intersection information.
5. The method of claim 1, wherein analyzing whether the network failure has an impact on a target backup server based on the target network segment information comprises:
inquiring application configuration data according to the target network segment information to obtain a server cluster corresponding to the target network segment information;
acquiring the state information of the target standby server from the server cluster;
and analyzing whether the influence of the network fault on the target standby server exists or not according to the state information.
6. The method of claim 5, wherein analyzing whether the network failure has an impact on a target standby server based on the status information comprises:
if the state information indicates that the target standby server is started, judging whether the network flow passing through a target port of the target standby server is larger than a preset flow upper limit value or not;
if the network flow passing through the target port of the target standby server is larger than the preset flow upper limit value, indicating that the network fault has influence on the target standby server;
if the network flow is not greater than the preset flow upper limit value, the network fault is not influenced on the target standby server;
if the status information indicates that the target standby server is not enabled, it indicates that the network failure has an impact on the target standby server.
7. An apparatus for analyzing the effects of a network fault, comprising:
a first obtaining unit configured to obtain target data, wherein the target data at least includes: data of a network buried point and data of a target data center;
a first analysis unit, configured to, when it is detected that an apparatus alarm instruction is triggered, analyze the target data to obtain an analysis result, where the analysis result at least includes: the method comprises the steps of collecting service network segments influenced by network faults and collecting session network segments influenced by the network faults;
the determining unit is used for determining the target network segment information influenced by the network fault according to the analysis result;
and the second analysis unit is used for analyzing whether the network fault affects the target standby server or not according to the target network segment information.
8. The apparatus of claim 7, further comprising:
the second obtaining unit is used for analyzing the target data and obtaining the routing table information corresponding to the target data before obtaining the analysis result;
and the matching unit is used for matching the values of the corresponding target fields of the alarm source port and the route output port through the routing table information.
9. A computer-readable storage medium, characterized in that the storage medium comprises a stored program, wherein the program performs the method of any one of claims 1 to 6.
10. An electronic device, comprising: comprising one or more processors and memory for storing one or more programs, wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to implement the method of any of claims 1-6.
CN202211147678.3A 2022-09-19 2022-09-19 Method and device for analyzing network fault influence, storage medium and electronic equipment Pending CN115567366A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202211147678.3A CN115567366A (en) 2022-09-19 2022-09-19 Method and device for analyzing network fault influence, storage medium and electronic equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202211147678.3A CN115567366A (en) 2022-09-19 2022-09-19 Method and device for analyzing network fault influence, storage medium and electronic equipment

Publications (1)

Publication Number Publication Date
CN115567366A true CN115567366A (en) 2023-01-03

Family

ID=84741710

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202211147678.3A Pending CN115567366A (en) 2022-09-19 2022-09-19 Method and device for analyzing network fault influence, storage medium and electronic equipment

Country Status (1)

Country Link
CN (1) CN115567366A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117459419A (en) * 2023-12-22 2024-01-26 石家庄学院 Network segment visualization method and system with self-adaptive regeneration capability

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117459419A (en) * 2023-12-22 2024-01-26 石家庄学院 Network segment visualization method and system with self-adaptive regeneration capability
CN117459419B (en) * 2023-12-22 2024-03-12 石家庄学院 Network segment visualization method and system with self-adaptive regeneration capability

Similar Documents

Publication Publication Date Title
CN110661659B (en) Alarm method, device and system and electronic equipment
EP3425524A1 (en) Cloud platform-based client application data calculation method and device
CN109034423B (en) Fault early warning judgment method, device, equipment and storage medium
CN108599977B (en) System and method for monitoring system availability based on statistical method
CN108259241A (en) A kind of abnormal localization method and device of cloud platform monitoring system
CN110224874A (en) A kind of processing method and processing device of equipment fault
CN113190423A (en) Service data monitoring method, device and system
CN115567366A (en) Method and device for analyzing network fault influence, storage medium and electronic equipment
CN111314137A (en) Information communication network automation operation and maintenance method, device, storage medium and processor
CN112699007A (en) Method, system, network device and storage medium for monitoring machine performance
CN112583944B (en) Processing method and device for updating domain name certificate
CN109951326B (en) Data processing method, device, storage medium and processor
CN112363860A (en) Batch processing operation abnormal interruption detection method and device
CN111324583B (en) Service log classification method and device
CN112068979A (en) Service fault determination method and device
CN111143151B (en) Service monitoring method and device and electronic equipment
CN115658441A (en) Method, equipment and medium for monitoring abnormality of household service system based on log
CN113222223B (en) Wind control linkage early warning method, system, equipment and storage medium for real-time warehouse
KR101288535B1 (en) Method for monitoring communication system and apparatus therefor
CN112596974A (en) Full link monitoring method, device, equipment and storage medium
CN114157035A (en) Power distribution automation management and control method and system
CN112256543A (en) Server abnormal behavior analysis and alarm method based on traffic data perception
CN110768847B (en) Power data processing method and device
CN115426247B (en) Fault node processing method and device, storage medium and electronic equipment
CN116881089B (en) Buried point and buried point management method for calling chain state feedback state

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination