Method and system for monitoring packet loss rate of network

Abstract

The invention discloses a method and a system for monitoring the packet loss rate of a network. The method comprises the following steps of: capturing data packets at a message sink end; storing the header information of the data packets; continuously storing each data packet in a protocol information table by using the header information, wherein the data packets from different message source ends are stored in different protocol information tables, and the storing process is carried out based on the ascending order of the values of identified bits of the read data packets in the protocol information table; calculating the number of the complete data messages sent by the message source end and the number of the complete data messages received by the message sink end at the message sink end; and calculating based on the complete data messages sent by the message source end and the number of the complete data messages received by the message sink end to obtain the packet loss rate of the data messages from the message source end in the network. The method does not increase additional loads on the network, does not need to change the structure or the content of a data frame, can monitor the packet loss rate in real time, and is low in cost.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a method and system for monitoring network packet loss rate. Background technique [0002] In the Internet, the IP packet itself does not have any security features, and it is easy to be counterfeited, modified, replayed and intercepted to view the contents of the packet. And IPSec (IP Security Protocol) provides a standard, robust and inclusive mechanism to provide security guarantees for IP and upper layer protocols. IPSec can protect the source IP address and destination IP address of communication, provide data integrity verification, ensure data confidentiality, and provide anti-replay function. [0003] IPSec VPN is a VPN (Virtual Private Network, virtual private network) tunnel established using the IPSec security protocol, which can establish a secure virtual channel on the public network for remote access. Although IPSec VPN can guarantee the security of data packets ...

AI Technical Summary

Problems solved by technology

For active detection itself, when there is a lot of traffic in the network, it will increase the network load

At the same time, because the frame needs to carry information such as the number of packets, it is necessary to change the information of the original frame. For this patent, the changed information can be placed in the reserved label of MPLS, but for other networks, the bytes of the frame need to be increased. , change the frame structure or use a new frame to specifically transmit the number of packets, which will increase the frame analysis function at the source and destination of the data packet, and if this function is added in a large range, it will cause cost increase

In addition, the frames transmitted in this scheme may also be lost, and such lost frames are not counted in the number of sent packets, which also leads to inaccurate calculation of the packet loss rate and cannot truly reflect the status of the network

[0010] The defect of the above-mentioned technical solution 2 is: this solution uses the network management equipment to count the number of data packets sent by the source end and the number of data packets received by the sink end. Since the network management itself can realize this statistical function, there is no need to add new equipment and resources , but the network management statistics are characterized by a relatively long cycle, which requires a long period of statistical calculation and reporting, so that it is impossible to monitor the packet loss rate in the network in real time, and the real-time performance is relatively poor

[0011] The defect of the above-mentioned technical solution 3 is: this solution is mainly used to infer the packet loss rate of each node inside the network, the tree topology structure of the network is known in advance, and then monitors are placed inside the network. This packet loss rate algorithm requires Known, but cannot be used for networks whose internal topology is unknown and where detectors cannot be installed inside the network due to human factors

[0012] In other existing solutions, different packet loss rate calculation methods are generally used for different networks. At present, there is no end-to-end packet loss rate method for IPSec VPN networks

Moreover, most of the existing solutions count the number of data packets sent and received from both ends of the network, and in some networks, there are generally multiple terminal devices communicating with a centralized device controller. It is obviously unreasonable to place statistical tools and will increase costs

Images