Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Detection method of broadcast storm and device thereof

A technology of broadcast storm and detection method, applied in digital transmission system, electrical components, error prevention and other directions, can solve the problem of inability to detect broadcast storm, improve classification efficiency, optimize classification effect, and avoid misjudgment of hash collision. Effect

Active Publication Date: 2010-11-24
GUANGDONG POWER GRID POWER DISPATCHING CONTROL CENT
View PDF2 Cites 28 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0009]This invention proposes a broadcast storm detection method and device to solve the problem that the prior art cannot detect broadcast storms

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Detection method of broadcast storm and device thereof
  • Detection method of broadcast storm and device thereof
  • Detection method of broadcast storm and device thereof

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0074] The detection method of broadcast storm of the present invention comprises the steps:

[0075] Listen to multicast messages;

[0076] Classify the monitored multicast packets according to the contents of the packets;

[0077] Calculate the number of each type of multicast packets monitored per unit time. When the threshold is exceeded, it is determined that a broadcast storm has occurred.

specific Embodiment approach

[0078] Messages can be divided into unicast messages and multicast messages according to the number of sending objects. The characteristic of multicast messages is that the highest byte and the lowest bit of the destination MAC address are one. Therefore, a specific implementation method for monitoring multicast messages is :

[0079] Listen to the message, and judge whether the highest byte and the lowest bit of the destination MAC address of the message are one, if so, determine that it is a multicast message,

[0080] Then analyze the contents of the messages judged as multicast messages, classify those with the same content into one category, and calculate the number of multicast messages of each type monitored per unit time. If it exceeds the threshold, it is determined that a broadcast storm has occurred. If the highest byte and lowest bit of the destination MAC address of the message are not one, it can be judged as a non-broadcast storm message. The unit time and thre...

Embodiment 2

[0083] When classifying multicast messages, if the method of sequentially analyzing the message content of each multicast message is adopted, the efficiency is very low. Therefore, in order to improve efficiency, this embodiment adopts hash algorithm to classify multicast messages .

[0084] Firstly, a certain hash algorithm is used to hash the content of the multicast message, and the multicast message is put into the corresponding hash bucket according to the hash value. The hash value is evenly distributed, so the messages will be evenly placed in the hash bucket, and there will be no situation where the number of messages accumulated in a certain hash bucket exceeds the threshold per unit time. If a certain hash bucket within a unit time If the number of packets accumulated in the bucket exceeds the threshold, it can be determined that it is caused by a broadcast storm, that is, a broadcast storm has occurred. Therefore, choosing an appropriate hash algorithm becomes the k...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses a detection method of broadcast storm, comprising the following steps: carrying out classification statistics on multicast messages; detecting the broadcast storm based on whether the number of each monitored multicast message exceeds a threshold value within unit time, and meanwhile detecting relevant information such as broadcast storm messages, duration time and strength and the like of the broadcast storm to facilitate working personnel to understand the broadcast storm; and classifying the multicast messages by adopting a cyclic redundancy check algorithm to improve classification efficiency and optimize classification effect. The invention further discloses a detection device of the broadcast storm, which comprises a monitoring module, a classifying module and a judging module, wherein, the classifying module classifies the multicast messages monitored by the monitoring module and then sends the multicast messages to the judging module; and the judging module detects the broadcast storm based on whether the number of each monitored multicast message exceeds a threshold value within unit time. In the invention, the detection method is matched with the detection device to complete detection of the broadcast storm.

Description

technical field [0001] The invention relates to the technical field of network anomaly detection, in particular to a broadcast storm detection method and device. Background technique [0002] Broadcast storm is the most common and extremely harmful network anomaly. The main causes of broadcast storm are network loops and device abnormalities. When a broadcast storm occurs, a large number of repeated multicast packets survive in the network, causing The network bandwidth is completely occupied, resulting in network congestion, causing normal communication packets to be discarded by the switch. Therefore, real-time monitoring of packets, rapid detection and alarm of broadcast storms are particularly important. [0003] The existing solutions are to put the target on the switch and rely on the switch to suppress the broadcast storm. There are mainly the following two measures: [0004] Start the spanning tree protocol of the switch, and automatically untie the ring when the ne...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L12/26H04L12/56H04L1/00H04L45/18
Inventor 张帆张弛李一泉王峰刘之尧陈志光竹之涵张宣成黄毅马文霜
Owner GUANGDONG POWER GRID POWER DISPATCHING CONTROL CENT
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com