Looking for breakthrough ideas for innovation challenges? Try Patsnap Eureka!

Active detection-based host IP flow estimation method

A technology that actively detects and outputs traffic. It is applied in digital transmission systems, electrical components, transmission systems, etc. It can solve problems such as inability to access and control network equipment, install software, and inability to host, and meet the stringent requirements of eliminating the environment and access rights , saving detection resources, and accurate calculation results

Inactive Publication Date: 2011-05-25
UNIV OF ELECTRONIC SCI & TECH OF CHINA
View PDF8 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, for an uncontrollable IP host in an uncontrollable network, none of the above methods will work
For example, for any remote target host on the Internet, the above method cannot install software on the host, and cannot access and control the network device where the host is located, and of course cannot obtain the IP traffic statistics of the host

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Active detection-based host IP flow estimation method
  • Active detection-based host IP flow estimation method
  • Active detection-based host IP flow estimation method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0036] The main technical basis of the present invention is: in the communication process using IP as the protocol, each IP packet (regardless of sending and receiving) has an IP header. There is an IP_ID field in the IP header, which is a digital type and identifies the ID number of each data packet; the IP protocol stipulates that each time the host sends a data packet, the IP_ID field is increased by 1, that is, the step size is incremented sequentially. For example, during the IP communication process of a certain host, the IP_ID field value of the IP packet sent by it at a certain moment is 20, then no matter who the target IP address of the IP packet sent next is, its IP_ID field value must be 21.

[0037] Therefore, the present invention detects the IP outgoing traffic of any target host based on the change law of the IP_ID field. The present invention adopts the idea of ​​active detection, initiates IP communication (such as sending ICMP detection, actively requesting ...

Embodiment 2

[0039] As the best implementation mode of the present invention, the goal of this program is to estimate the IP outflow of the remote host, and the method is as follows:

[0040] (1) Suppose the target host is H, and an arbitrary host M is used as the measurement host, and H and M are required to communicate with each other through the IP protocol;

[0041] (2) Initiate IP communication to host H through M. The communication methods include but not limited to: ICMP (ping), establish TCP connection, and establish UDP session. During the communication process, observe the IP packets sent by H on M. like figure 1 shown.

[0042] (3) Starting from the moment when M receives an IP packet from a certain H, record the current time as T start , and record that the IP_ID field value of the IP packet is IP_IDstart , and set a counter COUNT, set the COUNT value to 0. The starting point can be chosen arbitrarily during the communication process.

[0043] (4) Continue to maintain the ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention discloses an active detection-based host internet protocol (IP) flow estimation method and relates to the technical field of host IP flow statistics. The method comprises the following steps of: initiating IP communication to a target host on an optional host; calculating an added value INC of the target host returned to IP-ID fields of an IP packet of the optional host in a time interval T on the optional host; and dividing the added value INC by T to obtain the IP flow of the target host. The method can instantly obtain IP flow statistical information of an optional remote target host on an internet, and tough requirements of a traditional method on environment and access authority are removed during measurement; therefore, massive detection resources are saved.

Description

[0001] technical field [0002] The invention relates to the technical field of host IP traffic statistics, and in particular relates to a method for estimating host IP outgoing traffic based on active detection. Background technique [0003] How to know the IP traffic of an IP host is of great significance to network management. It can help network administrators understand the network busyness of the host, grasp the network load of the host, and the consumption of network bandwidth resources by the host. The total IP traffic of the host can be further used to infer the abnormal behavior of the host, resource redundancy and service availability, which is of great value in security management, performance management, availability management, etc. [0004] The IP traffic of the host refers to the sum of the network inbound and outbound traffic of the host that communicates with the IP protocol within a period of time. IP traffic includes two parts: outbound traffic and inbo...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): H04L12/56H04L12/26H04L12/801
Inventor 刘杰黄鹂声汪文勇
Owner UNIV OF ELECTRONIC SCI & TECH OF CHINA
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Patsnap Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Patsnap Eureka Blog
Learn More
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com