Network traffic capturing, recovering and replaying method

Abstract

The invention discloses a network traffic capturing, recovering and replaying method, which is used for processing a plurality of network packets of a plurality of pieces of network connection. The network traffic capturing, recovering and replaying method may comprise a capturing process, a recovering process or a selective replaying process. The capturing process comprises the following steps of: receiving capturing parameters (N, M, P); finishing capturing headers and payloads of each network packet, and accumulating total payload values of each piece of network connection; when one of the total payload values exceeds N, capturing the headers of each of continuous P network packets of the network connection corresponding to the total payload value and the first M bytes of corresponding payloads; and when one of the total payload values exceeds N and the continuous P network packets of the network connection corresponding to the total payload value are captured, capturing heads of each network packet of the network connection corresponding to the total payload value.

Description

technical field [0001] The present invention relates to a method for recording, restoring and replaying network traffic, in particular to a method that may include a recording procedure, a restoring procedure or a selective replaying procedure. Background technique [0002] With regard to the technology of recording traffic, existing methods include a recording system that is implemented with a special hardware design and various software packages to minimize capture loss. The focus of this technique is often to discuss issues such as the number of preprocessors, operating system, buffer size, and so on. In addition to the technology to improve the performance of software and hardware systems, there is also a technology similar to Time Machine (Time Machine), which saves storage space by analyzing network traffic behavior. This technology uses a cutoff mechanism of 10,000 to 20,000 bytes to record each network connection. Since it found that large traffic usually comes fro...

AI Technical Summary

Problems solved by technology

[0006] However, like the technology for recording traffic, the current technologies for replaying traffic have not been completely designed and implemented from the test purpose of triggering / reproducing network events, so these current replay technologies and methods are not very suitable for use as For testing

Existing replay technologies and tools cannot accurately replay network connections that comply with network protocols based on incomplete network packets

Existing technologies cannot efficiently reproduce events (reproduce events), and it is difficult to know the reasons for network events

Images