CN116489053A - Abnormality determination method and device, electronic equipment and storage medium - Google Patents

Abnormality determination method and device, electronic equipment and storage medium Download PDF

Info

Publication number
CN116489053A
CN116489053A CN202310443650.2A CN202310443650A CN116489053A CN 116489053 A CN116489053 A CN 116489053A CN 202310443650 A CN202310443650 A CN 202310443650A CN 116489053 A CN116489053 A CN 116489053A
Authority
CN
China
Prior art keywords
time interval
receiving end
data packet
identifier
end device
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202310443650.2A
Other languages
Chinese (zh)
Inventor
王笙
秦壮壮
王斌
彭伶珊
商勇前
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN202310443650.2A priority Critical patent/CN116489053A/en
Publication of CN116489053A publication Critical patent/CN116489053A/en
Pending legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0805—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/04—Processing captured monitoring data, e.g. for logfile generation
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/16—Threshold monitoring
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/50—Testing arrangements

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Environmental & Geological Engineering (AREA)
  • Data Mining & Analysis (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

The application provides an anomaly determination method, an anomaly determination device, electronic equipment and a storage medium, relates to the technical field of communication, and solves the problem that in the related art, a server needs to continuously obtain the content of each data packet, so that the effectiveness of anomaly determination is affected. The method comprises the following steps: the method comprises the steps that a receiving end device determines the number of data packets received by the receiving end device in each time interval in a plurality of time intervals, wherein the data packets received by the receiving end device in each time interval are data packets which are sent by a sending end device and correspond to target service; the receiving end equipment determines whether the service quality of each time interval meets a preset condition or not based on the number of data packets received by the receiving end equipment in each time interval and the target number; and under the condition that the service quality of the first time interval does not meet the preset condition, determining that the target service is in an abnormal state, wherein the first time interval is one of the time intervals.

Description

Abnormality determination method and device, electronic equipment and storage medium
Technical Field
The present disclosure relates to the field of communications technologies, and in particular, to an anomaly determination method, an anomaly determination device, an electronic device, and a storage medium.
Background
Currently, after receiving a data packet related to a service, a server may determine whether the service is abnormal based on the content in the data packet.
However, in the above method, the server needs to obtain the content of each data packet continuously, which may affect the effectiveness of anomaly determination.
Disclosure of Invention
The application provides an anomaly determination method, an anomaly determination device, electronic equipment and a storage medium, which solve the technical problem that in the related art, a server needs to continuously obtain the content of each data packet, and the effectiveness of anomaly determination is affected.
In a first aspect, the present application provides an anomaly determination method, including: determining the number of data packets received by the receiving end device in each time interval in a plurality of time intervals, wherein the data packets received by the receiving end device in each time interval are data packets which are sent by the sending end device and correspond to target service; determining whether the service quality of each time interval meets a preset condition or not based on the number of data packets received by the receiving end equipment in each time interval and the target number; and under the condition that the service quality of the first time interval does not meet the preset condition, determining that the target service is in an abnormal state, wherein the first time interval is one of the time intervals.
Optionally, the determining whether the service quality of each time interval meets the preset condition based on the number of the data packets received by the receiving end device in each time interval and the target number specifically includes: determining a ratio between the number of data packets received by the receiving end device in each time interval and the target number; and under the condition that the ratio of the number of the data packets received by the receiving end equipment in each time interval to the target number is larger than or equal to a ratio threshold value, determining that the service quality of each time interval meets the preset condition.
In the application, after the receiving end device determines the ratio of the number of the data packets received by the receiving end device in each time interval to the target number, whether the ratio of the number of the data packets received by the receiving end device in each time interval to the target number is greater than or equal to a ratio threshold value can be determined, and under the condition that the ratio of the number of the data packets received by the receiving end device in each time interval to the target number is greater than or equal to the ratio threshold value, the fact that the number of the data packets received by the receiving end device in each time interval is greater is indicated, particularly that the data packets actually received by the receiving end device in each time interval are larger, at this time, whether the service quality of each time interval meets the preset condition can be accurately and effectively determined, and the accuracy of anomaly determination can be improved.
Optionally, one data packet corresponds to one identifier, and the anomaly determination method further includes: under the condition that the receiving end equipment receives a first identifier and a second identifier in the first time interval, determining whether the receiving end equipment receives a third identifier in the first time interval, wherein the first identifier is an identifier corresponding to a first data packet, the second identifier is an identifier corresponding to a second data packet, the third identifier is an identifier corresponding to a third data packet, and the third data packet is a data packet adjacent to the first data packet and the second data packet; and under the condition that the receiving end equipment does not receive the third identifier in the first time interval, determining the third data packet as an abnormal data packet.
In this application, since the third data packet, the first data packet and the second data packet are adjacent data packets, when the receiving end device does not receive the third identifier in the first time interval, it is indicated that the receiving end device does not receive the third data packet in the first time interval, and at this time, the receiving end device can accurately and effectively determine that the third data packet is an abnormal data packet.
Optionally, the anomaly determination method further includes: under the condition that the receiving end equipment receives the third identifier in the first time interval, determining a difference value between a first moment and a second moment, wherein the first moment is the moment when the receiving end equipment receives the third identifier, and the second moment is the moment when the transmitting end equipment transmits the third identifier; and determining the third data packet as an abnormal data packet under the condition that the difference value between the first time and the second time is larger than or equal to a difference value threshold value.
In this application, when the difference between the first time and the second time is greater than or equal to the difference threshold, it is indicated that the transmission duration of the third data packet is longer, specifically, after the sending end device sends the third data packet, the receiving end device may receive the third data packet after a long period of time, which may also be understood as that the third data packet is received overtime, and at this time, the receiving end device may determine that the third data packet is an abnormal data packet more accurately and effectively.
Optionally, the anomaly determination method further includes: analyzing a target data packet to obtain preset configuration information, wherein the preset configuration information comprises preset time intervals and the target number, and the target data packet is the first data packet received by the receiving end equipment in the time intervals; dividing the target duration based on the preset time interval to obtain the time intervals.
In the application, after receiving a target data packet (i.e., a first data packet received by a receiving end device in a plurality of time intervals), the receiving end device may analyze the target data packet to obtain preset configuration information, and divide a target duration based on a preset time interval included in the preset configuration information, so that the plurality of time intervals may be conveniently and quickly obtained, and further the receiving end device may quickly and effectively determine the number of data packets received by the receiving end device in each time interval in the plurality of time intervals.
In a second aspect, the present application provides an abnormality determination apparatus including: a determining module;
the determining module is used for determining the number of data packets received by the receiving end equipment in each time interval in a plurality of time intervals, wherein the data packets received by the receiving end equipment in each time interval are data packets which are sent by the sending end equipment and correspond to the target service; the determining module is further configured to determine whether the quality of service of each time interval meets a preset condition based on the number of data packets received by the receiving end device in each time interval and the target number; the determining module is further configured to determine that the target service is in an abnormal state if the quality of service in a first time interval does not meet the preset condition, where the first time interval is one of the multiple time intervals.
Optionally, the determining module is specifically configured to determine a ratio between the number of data packets received by the receiving end device in each time interval and the target number; the determining module is further specifically configured to determine that the quality of service in each time interval satisfies the preset condition when a ratio between the number of data packets received by the receiving end device in each time interval and the target number is greater than or equal to a ratio threshold.
Optionally, one data packet corresponds to one identifier; the determining module is further configured to determine, when the receiving end device receives the first identifier and the second identifier in the first time interval, whether the receiving end device receives the third identifier in the first time interval, where the first identifier is an identifier corresponding to a first data packet, the second identifier is an identifier corresponding to a second data packet, the third identifier is an identifier corresponding to a third data packet, and the third data packet is a data packet adjacent to the first data packet and the second data packet; the determining module is further configured to determine that the third data packet is an abnormal data packet if the receiving end device does not receive the third identifier in the first time interval.
Optionally, the determining module is further configured to determine, when the receiving end device receives the third identifier in the first time interval, a difference between a first time and a second time, where the first time is a time when the receiving end device receives the third identifier. The second moment is the moment when the sending end equipment sends the third mark; the determining module is further configured to determine that the third data packet is an abnormal data packet when a difference between the first time and the second time is greater than or equal to a difference threshold.
Optionally, the anomaly determination device further comprises a processing module; the processing module is used for analyzing and processing a target data packet to obtain preset configuration information, wherein the preset configuration information comprises preset time intervals and the target number, and the target data packet is the first data packet received by the receiving end equipment in a plurality of time intervals; the processing module is further configured to divide the target duration based on the preset time interval, so as to obtain the multiple time intervals.
In a third aspect, the present application provides an electronic device, comprising: a processor and a memory configured to store processor-executable instructions; wherein the processor is configured to execute the instructions to implement any of the above-described optional anomaly determination methods of the first aspect.
In a fourth aspect, the present application provides a computer readable storage medium having instructions stored thereon which, when executed by an electronic device, enable the electronic device to perform any one of the above-described optional anomaly determination methods of the first aspect.
According to the anomaly determination method, the anomaly determination device, the electronic equipment and the storage medium, the receiving end equipment can determine the number of data packets received by the receiving end equipment in each time interval in a plurality of time intervals, and whether the service quality of each time interval meets the preset condition or not is determined based on the number of the data packets received by the receiving end equipment in each time interval and the target number. In the case that the service quality in the first time interval (i.e. one of the time intervals) does not meet the preset condition, it is indicated that the service quality in the first time interval is poor, specifically, the receiving end device does not receive enough data packets in the first time interval (or the receiving end device may lose a large number of data packets in the first time interval), where the receiving end device may determine that the target service is in an abnormal state. In the application, the receiving end device may determine whether the service quality of each time interval meets a preset condition based on the number of data packets received by the receiving end device in each time interval; then, whether the target service is in an abnormal state or not can be accurately and effectively determined, and the effectiveness of abnormality determination is improved.
Drawings
In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below.
Fig. 1 is a schematic diagram of a network architecture of an anomaly determination system provided in an embodiment of the present application;
fig. 2 is a schematic flow chart of an anomaly determination method according to an embodiment of the present application;
FIG. 3 is a flowchart illustrating another anomaly determination method according to an embodiment of the present application;
FIG. 4 is a flowchart of another anomaly determination method according to an embodiment of the present application;
fig. 5 is a data transmission diagram of an anomaly determination method according to an embodiment of the present application;
FIG. 6 is a flowchart of another anomaly determination method according to an embodiment of the present application;
FIG. 7 is a flowchart of another anomaly determination method according to an embodiment of the present application;
fig. 8 is a preset configuration information diagram of an anomaly determination method according to an embodiment of the present application;
fig. 9 is a time interval division diagram of an anomaly determination method according to an embodiment of the present application;
fig. 10 is a schematic structural diagram of an abnormality determining apparatus according to an embodiment of the present application;
fig. 11 is a schematic structural diagram of another abnormality determining apparatus provided in the embodiment of the present application.
Detailed Description
The abnormality determination method, apparatus, electronic device and storage medium provided in the embodiments of the present application will be described in detail below with reference to the accompanying drawings.
The terms "first" and "second" and the like in the description and in the drawings are used for distinguishing between different objects and not for describing a particular sequence of objects, e.g. the first and second identifiers and the like are used for distinguishing between different identifiers and not for describing a particular sequence of identifiers.
Furthermore, references to the terms "comprising" and "having" and any variations thereof in the description of the present application are intended to cover a non-exclusive inclusion. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not limited to only those listed but may optionally include other steps or elements not listed or inherent to such process, method, article, or apparatus.
It should be noted that, in the embodiments of the present application, words such as "exemplary" or "such as" are used to mean serving as an example, instance, or illustration. Any embodiment or design described herein as "exemplary" or "for example" should not be construed as preferred or advantageous over other embodiments or designs. Rather, the use of words such as "exemplary" or "such as" is intended to present related concepts in a concrete fashion.
In the description of the present application, unless otherwise indicated, the meaning of "a plurality" means two or more.
Based on the description in the background art, since the server needs to continuously obtain the content of each data packet in the related art to determine whether the service is abnormal, the effectiveness of the abnormality determination may be affected. Based on this, the embodiment of the application provides an anomaly determination method, an anomaly determination device, an electronic device and a storage medium, where in the embodiment of the application, a receiving end device may determine, based on the number of data packets received by the receiving end device in each time interval, whether the service quality of each time interval meets a preset condition; then, whether the target service is in an abnormal state or not can be accurately and effectively determined, and the effectiveness of abnormality determination is improved.
The abnormality determination method, apparatus, electronic device, and storage medium provided in the embodiments of the present application may be applied to an abnormality determination system, as shown in fig. 1, where the abnormality determination system may include a transmitting end device 101 and a receiving end device 102. In general, in practical application, the connection between the above devices may be a wireless connection, and for convenience and intuitionistic representation of the connection relationship between the devices, a solid line is used in fig. 1 to illustrate.
Wherein the transmitting device 101 is configured to transmit a data packet to the receiving device 102.
The receiving end device 102 is configured to receive a data packet sent by the sending end device 101. In this embodiment of the present application, the receiving end device 102 may determine whether the quality of service in each time interval satisfies a preset condition based on the number of data packets received by the receiving end device in each time interval and the target number.
In the embodiment of the present application, the transmitting end device 101 and the receiving end device 102 may be electronic devices.
By way of example, the electronic device may be a cell phone, tablet, desktop, laptop, handheld computer, notebook, ultra-mobile personal computer, UMPC, netbook, and cellular phone, personal digital assistant (personal digital assistant, PDA), augmented reality (augmented reality, AR) \virtual reality (VR) device, and the specific form of the electronic device is not particularly limited in embodiments of the present application. The system can perform man-machine interaction with a user through one or more modes of a keyboard, a touch pad, a touch screen, a remote controller, voice interaction or handwriting equipment and the like.
Optionally, the electronic device may be an independent physical server, a server cluster or a distributed system formed by a plurality of physical servers, and may also be a cloud server that provides cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communication, middleware services, domain name services, security services, network acceleration services (content delivery network, CDN), basic cloud computing services such as big data and artificial intelligence platforms, and the like.
As shown in fig. 2, the anomaly determination method provided in the embodiment of the present application may include S101-S103.
S101, the receiving end device determines the number of data packets received by the receiving end device in each time interval in a plurality of time intervals.
The data packets received by the receiving end device in each time interval are data packets corresponding to the target service and sent by the sending end device.
It should be understood that the transmitting end device may send the data packet corresponding to the target service to the receiving end device, and further, the receiving end device may receive the data packet corresponding to the target service.
S102, the receiving end device determines whether the service quality of each time interval meets a preset condition based on the number of data packets received by the receiving end device in each time interval and the target number.
In this embodiment of the present application, the target number may be understood as the number of data packets that the receiving device should receive in each time interval. The target number may be the number of data packets corresponding to the target service sent by the sending end device to the receiving end device in a time interval, or may be a certain preset value stored in the receiving end device.
Referring to fig. 2, as shown in fig. 3, in an implementation manner of the embodiment of the present application, the determining, by the receiving end device, whether the service quality of each time interval meets a preset condition based on the number of data packets received by the receiving end device in each time interval and the target number may specifically include S1021-S1022.
S1021, the receiving end device determines the ratio between the number of data packets received by the receiving end device in each time interval and the target number.
In this embodiment of the present application, the ratio between the number of data packets received by the receiving end device in each time interval and the target number may be understood as the actual duty cycle of the data packets received by the receiving end device in each time interval.
S1022, when the ratio of the number of the data packets received by the receiving end device in each time interval to the target number is greater than or equal to the ratio threshold, the receiving end device determines that the service quality of each time interval meets the preset condition.
It should be appreciated that after the receiving end device determines the ratio of the number of data packets received by the receiving end device in each time interval to the target number, it may be determined whether the ratio between the number of data packets received by the receiving end device in each time interval and the target number is greater than or equal to a ratio threshold. When the ratio between the number of the data packets received by the receiving end device in each time interval and the target number is greater than or equal to the ratio threshold, it is indicated that the number of the data packets received by the receiving end device in each time interval is greater, specifically, the actual received data packets of the receiving end device in each time interval are greater, and at this time, the receiving end device can determine that the service quality of the receiving end device in each time interval meets the preset condition.
Optionally, when the ratio between the number of data packets received by the receiving end device in each time interval and the target number is smaller than the ratio threshold, it is indicated that the number of data packets received by the receiving end device in each time interval is smaller, specifically, the actual received data packets of the receiving end device in each time interval occupy a smaller area, and at this time, the receiving end device may determine that the service quality of the receiving end device in each time interval does not meet the preset condition.
In an alternative implementation manner, the receiving end device may further determine a difference between the number of data packets received by the receiving end device in each time interval and the target number, and determine whether the difference between the number of data packets received by the receiving end device in each time interval and the target number is less than or equal to a number threshold. When the difference between the number of data packets received by the receiving end device in each time interval and the target number is less than or equal to the number threshold, it is indicated that the number of data packets received by the receiving end device in each time interval is greater, specifically, the difference between the number of data packets received by the receiving end device in each time interval and the number of data packets that should be received by the receiving end device in each time interval is smaller, and at this time, the receiving end device may determine that the service quality of the receiving end device in each time interval satisfies a preset condition.
Optionally, in the case that the difference between the number of data packets received by the receiving end device in each time interval and the target number is greater than the number threshold, the receiving end device may determine that the quality of service of the receiving end device in each time interval does not meet a preset condition.
In another alternative implementation, for a certain time interval, after determining a difference (hereinafter referred to as a first difference) between the number of data packets received by the receiving device during the time interval and the target number, the receiving device may determine a ratio between the first difference and the target number. And under the condition that the ratio between the first difference value and the target number is greater than or equal to a certain threshold value, the difference corresponding to the time interval is larger, specifically, the packet loss rate corresponding to the time interval is higher, and at the moment, the receiving end equipment can determine that the service quality of the receiving end equipment in the time interval does not meet the preset condition.
Optionally, when the ratio between the first difference value and the target number is smaller than the threshold, it is indicated that the difference corresponding to the time interval is smaller, specifically, the packet loss rate corresponding to the time interval is lower, and at this time, the receiving end device may determine that the service quality of the receiving end device in the time interval meets a preset condition.
In this embodiment of the present application, after the receiving end device determines the ratio of the number of data packets received by the receiving end device in each time interval to the target number, it may be determined whether the ratio between the number of data packets received by the receiving end device in each time interval and the target number is greater than or equal to a ratio threshold, and if the ratio between the number of data packets received by the receiving end device in each time interval and the target number is greater than or equal to the ratio threshold, it is indicated that the number of data packets received by the receiving end device in each time interval is greater, specifically, the actual received data packets of the receiving end device in each time interval occupy a relatively greater area, so that at this time, it can be accurately and effectively determined whether the service quality of each time interval meets a preset condition, and further, the accuracy of anomaly determination may be improved.
S103, under the condition that the service quality in the first time interval does not meet the preset condition, the receiving end equipment determines that the target service is in an abnormal state.
Wherein the first time interval is one of the time intervals.
It should be understood that, in the case where the quality of service in the first time interval does not meet the preset condition, it is indicated that the quality of service in the first time interval is poor, specifically, the receiving end device does not receive enough data packets in the first time interval (or the receiving end device may lose a large number of data packets in the first time interval), where the receiving end device may determine that the target service is in an abnormal state.
Optionally, in the case that the service quality in the first time interval meets the preset condition, the receiving end device may determine that the target service is in a normal state.
The technical scheme provided by the embodiment at least has the following beneficial effects: as known from S101 to S103, the receiving end device may determine the number of data packets received by the receiving end device in each of a plurality of time intervals, and determine whether the quality of service in each time interval satisfies a preset condition based on the number of data packets received by the receiving end device in each time interval and the target number. In the case that the service quality in the first time interval (i.e. one of the time intervals) does not meet the preset condition, it is indicated that the service quality in the first time interval is poor, specifically, the receiving end device does not receive enough data packets in the first time interval (or the receiving end device may lose a large number of data packets in the first time interval), where the receiving end device may determine that the target service is in an abnormal state. In this embodiment of the present application, the receiving end device may determine, based on the number of data packets received by the receiving end device in each time interval, whether the service quality in each time interval meets a preset condition; then, whether the target service is in an abnormal state or not can be accurately and effectively determined, and the effectiveness of abnormality determination is improved.
In one implementation of the embodiment of the present application, one data packet corresponds to one identifier. Referring to fig. 2, as shown in fig. 4, the anomaly determination method provided in the embodiment of the application further includes S104-S105.
And S104, under the condition that the receiving end device receives the first identifier and the second identifier in the first time interval, the receiving end device determines whether the receiving end device receives the third identifier in the first time interval.
The first identifier is an identifier corresponding to a first data packet, the second identifier is an identifier corresponding to a second data packet, the third identifier is an identifier corresponding to a third data packet, and the third data packet is a data packet adjacent to the first data packet and the second data packet.
It should be understood that, after receiving the certain data packet (e.g., the first data packet or the second data packet), the receiving end device may parse the data packet to obtain the identifier corresponding to the data packet (i.e., the first identifier or the second identifier).
It can be understood that, because the identifier corresponding to one data packet is the identifier included in the data packet, if the receiving end device receives the first identifier and the second identifier in the first time interval, it is indicated that the receiving end device receives the first data packet and the second data packet in the first time interval.
Optionally, the identifier corresponding to the data packet may be a serial number corresponding to the data packet.
The following describes, as an example, a case where a receiving end device receives a data packet in a time interval in the embodiment of the present application.
For example, as shown in fig. 5, the transmitting device may send the data packet 1 to the receiving device during the time interval, the receiving device may receive the data packet 1 sent by the transmitting device during the time interval, the transmitting device may send the data packet 2 to the receiving device during the time interval, and the receiving device may receive the data packet 2 sent by the transmitting device during the time interval.
S105, under the condition that the receiving end device does not receive the third identification in the first time interval, the receiving end device determines that the third data packet is an abnormal data packet.
It should be understood that, in the case that the receiving end device does not receive the third identifier in the first time interval, it is explained that the receiving end device does not receive the third data packet in the first time interval. Because the third data packet is adjacent to the first data packet and the second data packet, that is, the receiving end device does not receive the continuous data packet in the first time interval, the receiving end device may determine that the third data packet is an abnormal data packet, that is, the third data packet is a data packet lost in a transmission process between the sending end device and the receiving end device.
In this embodiment of the present application, since the third data packet, the first data packet, and the second data packet are adjacent data packets, when the receiving end device does not receive the third identifier in the first time interval, it is indicated that the receiving end device does not receive the third data packet in the first time interval, and at this time, the receiving end device can accurately and effectively determine that the third data packet is an abnormal data packet.
Referring to fig. 4, as shown in fig. 6, the anomaly determination method provided in the embodiment of the present application may further include S106 to S107.
And S106, under the condition that the receiving end equipment receives the third identification in the first time interval, the receiving end equipment determines a difference value between the first moment and the second moment.
The first time is the time when the receiving end device receives the third identifier, and the second time is the time when the transmitting end device transmits the third identifier.
In connection with the above embodiments, it should be understood that, since the third identifier is an identifier corresponding to (or including) the third data packet, the first time may also be understood as a time when the receiving end device receives the third data packet, and the second time may also be understood as a time when the transmitting end device transmits the third data packet. And under the condition that the receiving end equipment receives the third identifier in the first time interval, the receiving end equipment is indicated to receive the third data packet in the first time interval, and the receiving end equipment can determine the difference between the first time and the second time, namely the difference between the time when the receiving end equipment receives the third data packet and the time when the sending end equipment sends the third data packet.
And S107, when the difference value between the first time and the second time is greater than or equal to a difference value threshold value, the receiving end equipment determines that the third data packet is an abnormal data packet.
It should be understood that, in the case where the difference between the first time and the second time is greater than or equal to the difference threshold, this indicates that the transmission duration of the third data packet is longer, specifically, the receiving end device may receive the third data packet after the sending end device sends the third data packet for a long period of time, which may also be understood as that the third data packet is received overtime, where the receiving end device may determine that the third data packet is an abnormal data packet.
Optionally, when the difference between the first time and the second time is smaller than the difference threshold, it indicates that the transmission duration of the third data packet is shorter, that is, the receiving end device receives the third data packet within the normal duration range, and at this time, the receiving end device may determine that the third data packet is a normal data packet.
In this embodiment of the present application, when the difference between the first time and the second time is greater than or equal to the difference threshold, it is indicated that the transmission duration of the third data packet is longer, specifically, after the sending end device sends the third data packet, the receiving end device may receive the third data packet after a long period of time, which may also be understood as that the third data packet is received overtime, and at this time, the receiving end device may accurately and effectively determine that the third data packet is an abnormal data packet.
Referring to fig. 2, as shown in fig. 7, the anomaly determination method provided in the embodiment of the present application may further include S108 to S109.
S108, the receiving end device analyzes the target data packet to obtain preset configuration information.
The preset configuration information includes a preset time interval and the target number, where the target data packet is a first data packet received by the receiving end device in the multiple time intervals.
In an alternative implementation, the preset configuration information may also include the difference threshold. That is, after obtaining the preset configuration information, the receiving end device may determine whether the third data packet is an abnormal data packet based on a difference threshold included in the preset configuration information.
In another optional implementation manner, the preset configuration information may further include an identifier of the target data packet, an identifier of the target service, and a test identifier. Specifically, the test identifier is used to restart the anomaly determination task.
Exemplary, as shown in fig. 8, an example of preset configuration information provided in the embodiment of the present application is shown.
The preset configuration information comprises a calculation period, a timeout time, a message serial number, a test serial number, a statistical mode and a descriptor.
Specifically, the calculation period is used for representing the preset time interval, the timeout time is used for representing the difference threshold, the message sequence number is used for representing the identifier of the target data packet, the test sequence number is used for representing the test identifier, the statistical mode is used for indicating the receiving end device to sample according to the duration represented by the calculation period, and the descriptor is used for explaining the target service (specifically may include the service identifier of the target service).
S109, the receiving end equipment divides the target duration based on a preset time interval to obtain a plurality of time intervals.
It should be understood that the duration of each of the plurality of time intervals is the same, i.e., the duration corresponding to the preset time interval.
It should be noted that the target duration may be 1 second, 1 minute, or 1 hour, and the duration represented by the preset time interval may be 1 ms, 1 second, or 1 minute, which is not specifically limited in the embodiment of the present application.
In addition, the target duration should be greater than the duration characterized by the preset time interval. For example, when the target duration is 1 minute, the duration of the predetermined time interval characterization may be 1 second.
The following illustrates a plurality of time intervals obtained by the receiving end device in the embodiment of the present application.
Specifically, as shown in fig. 9, the multiple time intervals obtained by the receiving end device include a time interval 1, a time interval 2, a time interval 3, and a time interval 4, where the duration represented by the 4 time intervals (i.e., the duration represented by the preset time interval) is 10 seconds.
In this embodiment of the present application, after receiving a target data packet (i.e., a first data packet received by a receiving end device in a plurality of time intervals), the receiving end device may parse the target data packet to obtain preset configuration information, and divide a target duration based on a preset time interval included in the preset configuration information, so that the plurality of time intervals may be obtained conveniently and quickly, and further the receiving end device may determine, quickly and effectively, the number of data packets received by the receiving end device in each time interval in the plurality of time intervals.
The embodiment of the present application may divide the functional modules of the receiving end device and the like according to the above method example, for example, each functional module may be divided corresponding to each function, or two or more functions may be integrated into one processing module. The integrated modules may be implemented in hardware or in software functional modules. It should be noted that, in the embodiment of the present application, the division of the modules is schematic, which is merely a logic function division, and other division manners may be implemented in actual implementation.
In the case of dividing each functional module with corresponding each function, fig. 10 shows a schematic diagram of one possible configuration of the abnormality determining apparatus involved in the above-described embodiment, as shown in fig. 10, the abnormality determining apparatus 20 may include: a determination module 201.
A determining module 201, configured to determine the number of data packets received by a receiving end device in each of multiple time intervals, where the data packets received by the receiving end device in each time interval are data packets sent by a sending end device and corresponding to a target service;
the determining module 201 is further configured to determine whether the quality of service of each time interval meets a preset condition based on the number of data packets received by the receiving end device in each time interval and the target number;
the determining module 201 is further configured to determine that the target service is in an abnormal state if the quality of service in a first time interval does not meet the preset condition, where the first time interval is one of the multiple time intervals.
Optionally, the determining module 201 is specifically configured to determine a ratio between the number of data packets received by the receiving end device in each time interval and the target number;
The determining module 201 is further specifically configured to determine that the quality of service in each time interval satisfies the preset condition when a ratio between the number of data packets received by the receiving end device in each time interval and the target number is greater than or equal to a ratio threshold.
Optionally, one data packet corresponds to one identifier;
the determining module 201 is further configured to determine, if the receiving end device receives a first identifier and a second identifier in the first time interval, whether the receiving end device receives a third identifier in the first time interval, where the first identifier is an identifier corresponding to a first data packet, the second identifier is an identifier corresponding to a second data packet, the third identifier is an identifier corresponding to a third data packet, and the third data packet is a data packet adjacent to the first data packet and the second data packet;
the determining module 201 is further configured to determine that the third data packet is an abnormal data packet if the receiving end device does not receive the third identifier in the first time interval.
Optionally, the determining module 201 is further configured to determine, if the receiving end device receives the third identifier in the first time interval, a difference between a first time and a second time, where the first time is a time when the receiving end device receives the third identifier. The second moment is the moment when the sending end equipment sends the third mark;
The determining module 201 is further configured to determine that the third data packet is an abnormal data packet if the difference between the first time and the second time is greater than or equal to a difference threshold.
Optionally, the anomaly determination device 20 further includes a processing module 202;
the processing module 202 is configured to parse a target data packet to obtain preset configuration information, where the preset configuration information includes a preset time interval and the target number, and the target data packet is a first data packet received by the receiving end device in multiple time intervals;
the processing module 202 is further configured to divide the target duration based on the preset time interval, so as to obtain the multiple time intervals.
In the case of employing an integrated unit, fig. 11 shows a schematic diagram of one possible configuration of the abnormality determining apparatus involved in the above-described embodiment. As shown in fig. 11, the abnormality determining apparatus 30 may include: a processing module 301 and a communication module 302. The processing module 301 may be used to control and manage the operation of the abnormality determination device 30. The communication module 302 may be used to support communication of the anomaly determination device 30 with other entities. Alternatively, as shown in fig. 10, the abnormality determining apparatus 30 may further include a storage module 303 for storing program codes and data of the abnormality determining apparatus 30.
Wherein the processing module 301 may be a processor or a controller. The communication module 302 may be a transceiver, a transceiver circuit, a communication interface, or the like. The storage module 303 may be a memory.
When the processing module 301 is a processor, the communication module 302 is a transceiver, and the storage module 303 is a memory, the processor, the transceiver, and the memory may be connected through a bus. The bus may be a peripheral component interconnect standard (peripheral component interconnect, PCI) bus or an extended industry standard architecture (extended industry standard architecture, EISA) bus, or the like. The buses may be divided into address buses, data buses, control buses, etc.
It should be understood that, in various embodiments of the present application, the sequence numbers of the foregoing processes do not mean the order of execution, and the order of execution of the processes should be determined by the functions and internal logic thereof, and should not constitute any limitation on the implementation process of the embodiments of the present application.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware, or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
It will be clear to those skilled in the art that, for convenience and brevity of description, specific working procedures of the above-described systems, apparatuses and units may refer to corresponding procedures in the foregoing method embodiments, and are not repeated herein.
The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.
In the above embodiments, it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using a software program, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions described in accordance with embodiments of the present application are produced in whole or in part. The computer may be a general purpose computer, a special purpose computer, a computer network, or other programmable apparatus. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from one website, computer, server, or data center to another website, computer, server, or data center by a wired (e.g., coaxial cable, fiber optic, digital subscriber terminal line (Digital Subscriber Line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer readable storage medium may be any available medium that can be accessed by a computer or a data storage device including one or more servers, data centers, etc. that can be integrated with the medium. The usable medium may be a magnetic medium (e.g., a floppy Disk, a hard Disk, a magnetic tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a Solid State Disk (SSD)), or the like.
The foregoing is merely specific embodiments of the present application, but the scope of the present application is not limited thereto, and any person skilled in the art can easily think about changes or substitutions within the technical scope of the present application, and the changes and substitutions are intended to be covered by the scope of the present application. Therefore, the protection scope of the present application shall be subject to the protection scope of the claims.

Claims (12)

1. An anomaly determination method, applied to a receiving device, the method comprising:
determining the number of data packets received by the receiving end equipment in each time interval in a plurality of time intervals, wherein the data packets received by the receiving end equipment in each time interval are data packets which are sent by the sending end equipment and correspond to target service;
determining whether the service quality of each time interval meets a preset condition or not based on the number of data packets received by the receiving end equipment in each time interval and the target number;
and under the condition that the service quality of a first time interval does not meet the preset condition, determining that the target service is in an abnormal state, wherein the first time interval is one of the time intervals.
2. The anomaly determination method according to claim 1, wherein the determining whether the quality of service of each time interval satisfies a preset condition based on the number of data packets received by the receiving end device in each time interval and a target number includes:
determining a ratio between the number of data packets received by the receiving end device in each time interval and the target number;
and under the condition that the ratio of the number of the data packets received by the receiving end equipment in each time interval to the target number is larger than or equal to a ratio threshold value, determining that the service quality of each time interval meets the preset condition.
3. The anomaly determination method of claim 1, wherein one data packet corresponds to one identifier, the method further comprising:
under the condition that the receiving end equipment receives a first identifier and a second identifier in the first time interval, determining whether the receiving end equipment receives a third identifier in the first time interval, wherein the first identifier is an identifier corresponding to a first data packet, the second identifier is an identifier corresponding to a second data packet, the third identifier is an identifier corresponding to a third data packet, and the third data packet is a data packet adjacent to the first data packet and the second data packet;
And under the condition that the receiving end equipment does not receive the third identifier in the first time interval, determining the third data packet as an abnormal data packet.
4. The abnormality determination method according to claim 3, characterized in that the method further comprises:
under the condition that the receiving end equipment receives the third identifier in the first time interval, determining a difference value between a first moment and a second moment, wherein the first moment is the moment when the receiving end equipment receives the third identifier, and the second moment is the moment when the transmitting end equipment transmits the third identifier;
and determining the third data packet as an abnormal data packet under the condition that the difference value between the first time and the second time is larger than or equal to a difference value threshold value.
5. The abnormality determination method according to any one of claims 1-4, characterized in that the method further includes:
analyzing a target data packet to obtain preset configuration information, wherein the preset configuration information comprises preset time intervals and the target number, and the target data packet is the first data packet received by the receiving end equipment in a plurality of time intervals;
Dividing the target duration based on the preset time interval to obtain the time intervals.
6. An abnormality determination apparatus, characterized by comprising: a determining module;
the determining module is configured to determine the number of data packets received by the receiving end device in each of multiple time intervals, where the data packets received by the receiving end device in each time interval are data packets sent by the sending end device and corresponding to a target service;
the determining module is further configured to determine, based on the number of data packets received by the receiving end device in each time interval and the target number, whether the quality of service in each time interval meets a preset condition;
the determining module is further configured to determine that the target service is in an abnormal state when the quality of service in a first time interval does not meet the preset condition, where the first time interval is one of the multiple time intervals.
7. The abnormality determining apparatus according to claim 6, wherein,
the determining module is specifically configured to determine a ratio between the number of data packets received by the receiving end device in each time interval and the target number;
The determining module is further specifically configured to determine that, when a ratio between the number of data packets received by the receiving end device in each time interval and the target number is greater than or equal to a ratio threshold, the service quality in each time interval meets the preset condition.
8. The anomaly determination device of claim 6, wherein a packet corresponds to an identifier;
the determining module is further configured to determine, when the receiving end device receives a first identifier and a second identifier in the first time interval, whether the receiving end device receives a third identifier in the first time interval, where the first identifier is an identifier corresponding to a first data packet, the second identifier is an identifier corresponding to a second data packet, the third identifier is an identifier corresponding to a third data packet, and the third data packet is a data packet adjacent to the first data packet and the second data packet;
the determining module is further configured to determine that the third data packet is an abnormal data packet if the receiving end device does not receive the third identifier in the first time interval.
9. The abnormality determining apparatus according to claim 8, wherein,
the determining module is further configured to determine, when the receiving end device receives the third identifier in the first time interval, a difference between a first time and a second time, where the first time is a time when the receiving end device receives the third identifier, and the second time is a time when the transmitting end device transmits the third identifier;
the determining module is further configured to determine that the third data packet is an abnormal data packet when a difference between the first time and the second time is greater than or equal to a difference threshold.
10. The abnormality determination device according to any of claims 6-9, characterized in that it further comprises a processing module;
the processing module is configured to parse a target data packet to obtain preset configuration information, where the preset configuration information includes a preset time interval and the target number, and the target data packet is a first data packet received by the receiving end device in the multiple time intervals;
the processing module is further configured to divide a target duration based on the preset time interval, so as to obtain the multiple time intervals.
11. An electronic device, the electronic device comprising:
a processor;
a memory configured to store the processor-executable instructions;
wherein the processor is configured to execute the instructions to implement the anomaly determination method of any one of claims 1-5.
12. A computer readable storage medium having instructions stored thereon, which, when executed by an electronic device, cause the electronic device to perform the anomaly determination method of any one of claims 1-5.
CN202310443650.2A 2023-04-23 2023-04-23 Abnormality determination method and device, electronic equipment and storage medium Pending CN116489053A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202310443650.2A CN116489053A (en) 2023-04-23 2023-04-23 Abnormality determination method and device, electronic equipment and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202310443650.2A CN116489053A (en) 2023-04-23 2023-04-23 Abnormality determination method and device, electronic equipment and storage medium

Publications (1)

Publication Number Publication Date
CN116489053A true CN116489053A (en) 2023-07-25

Family

ID=87218964

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202310443650.2A Pending CN116489053A (en) 2023-04-23 2023-04-23 Abnormality determination method and device, electronic equipment and storage medium

Country Status (1)

Country Link
CN (1) CN116489053A (en)

Similar Documents

Publication Publication Date Title
CN110611723B (en) Scheduling method and device of service resources
CN108810116B (en) Message processing method and related product
US9882852B2 (en) Techniques for escalating temporary messaging bans
CN114040467B (en) Transmission path determining method, device, server and storage medium
CN114024876B (en) Network dial testing method, device, equipment and storage medium
CN107333260A (en) A kind of method and device for the real MAC address for obtaining terminal
CN110650042A (en) Electric power communication network health degree evaluation method and terminal equipment
CN107395451B (en) Processing method, device and equipment for internet traffic abnormity and storage medium
CN111741512A (en) Private network access method and device
CN107819761B (en) Data processing method and device and readable storage medium
CN116489053A (en) Abnormality determination method and device, electronic equipment and storage medium
CN116318911A (en) Domain name access method and device, electronic equipment and storage medium
CN113727386B (en) Communication method and device
CN105163335B (en) A kind of network access management method, server, mobile terminal and system
CN113365272B (en) Method and system for preventing network from being rubbed
CN116233909A (en) Abnormal base station determining method and device, electronic equipment and storage medium
CN116208872A (en) Abnormality determination method and device, electronic equipment and storage medium
CN111127706A (en) Intelligent lock control method, intelligent lock, cloud server and computing equipment
CN117119228A (en) Code rate determining method and device, electronic equipment and storage medium
CN116801348A (en) Service data acquisition method and device, gateway equipment and storage medium
CN116614178A (en) Method and device for determining cutting-over state, electronic equipment and storage medium
CN117439872A (en) Abnormality determination method and device, electronic equipment and storage medium
CN117354133A (en) Abnormality determination method and device, electronic equipment and storage medium
CN116567628A (en) Communication method, device, electronic equipment and storage medium
CN116708010A (en) Service data acquisition method and device, gateway equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination