Method and device for distributing multi-channel port mirroring mixed data stream

Abstract

The invention provides a method for distributing a multi-channel port mirroring mixed data stream. The method includes distributing the data stream according to port numbers of a transmission layer of the TCP / IP (transmission control protocol / internet protocol) and an application layer protocol; and then modifying mac (medium access control) addresses according to a result of hash computation for a source IP (internet protocol), a result of hash computation for a target IP or a result of hash computation for the source IP and the target IP. Accordingly, the purpose of distributing the multi-channel port mirroring mixed data stream is achieved, and multi-replication traffic issuing and the purpose of processing the same data stream in multiple modes are supported. The invention further provides a corresponding device for distributing the multi-channel port mirroring mixed data stream. The device supports distribution of the multi-protocol, multi-replication and multi-channel port mirroring mixed data stream, and is flexible in configuration, and the number of devices for processing each protocol can be adjusted according to the protocol and traffic of the data stream. The method and the device have the advantages of capability of effectively utilizing the computing power, high performance, traffic equilibrium and the like.

Description

technical field [0001] The present invention relates to the field of network data transmission and network security, and more specifically, relates to a method and device for shunting multi-channel port mirroring mixed data streams, which can realize shunting massive mirror data on the backbone network to multiple processors for processing According to the port number of the transport layer of the TCP / IP protocol, the data flow can be divided according to the application layer protocol, and multiple copies of the data flow can be distributed, corresponding to a set of multiple processing purposes of the data flow. Background technique [0002] In recent years, with the popularization and development of network technology, network bandwidth and traffic have grown exponentially. According to the "27th Statistical Report on Internet Development in China" released by CNNIC, China's international export bandwidth reached 1,098,956.82Mbps by the end of 2010. The annual growth rate...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the problem that the traditional splitting method is not suitable for multi-channel port mirroring mixed data streams, the present invention proposes a method and device for splitting multi-channel port mirroring mixed data streams, by capturing data packets, according to the TCP / IP protocol The port number of the transport layer, divides the data flow according to the application layer protocol, modifies the destination mac address of the data packet according to the result of the hash operation on the source IP and the destination IP, and directly sets the corresponding link for the data packet of a certain data flow Layer mac address, which is different from the traditional process of looking up the mac address table and forwarding data packets

Images