Network analytical method and system

Abstract

The invention discloses a network analytical method which includes the following steps: a network analytical device detaches tunnel data of a terminal database, an internet protocol (IP) address of the terminal is obtained, and whether the IP address is related to a real user name or not is identified. If the IP address is related to the real user name, network data is analyzed according to the real user name and an analyzed result is saved. The invention also discloses a network analytical system. Due to the fact that the network analytical device detaches the tunnel data of the terminal database, the IP address of the terminal is obtained. When the network analytical system identifies that the IP address is related to the real user name, and the network data is analyzed according to the real user name and the analyzed result is saved. The network analytical method and the network analytical system have the advantages of accurately positioning the real user name to analyze the network data, equipment property loss caused by analyzing signaling data repeatedly is avoided, and at the same time pressure of a server is not added.

Description

technical field [0001] The invention relates to the technical field of computer networks, in particular to a network analysis method and system. Background technique [0002] Generally, network analysis equipment is deployed between WLAN (Wireless Metropolitan Area Networks, wireless local area network) AC (Access Controller, access controller) and AP (Access Point, access point), and the real radius ( Remote Authentication Dial In User Service, remote user dial-in authentication system), portal (entry) authentication request process are all initiated by BRAS (Broadband Remote Access Server, broadband access server), and exchange with radius and portal server; therefore No authentication data passes through the analysis device, and the authentication data initiated by the BRAS cannot be associated with specific analysis devices one by one. In this environment, some network analysis solutions do not associate IP (Internet Protocol, Internet Protocol) with users, but directly...

AI Technical Summary

Problems solved by technology

[0002] Generally, network analysis equipment is deployed between WLAN (Wireless Metropolitan Area Networks, wireless local area network) AC (Access Controller, access controller) and AP (Access Point, access point), and the real radius ( Remote Authentication Dial In User Service, remote user dial-in authentication system), portal (entry) authentication request process are all initiated by BRAS (Broadband Remote Access Server, broadband access server), and exchange with radius and portal server; therefore No authentication data has passed through the analysis equipment, and the authentication data initiated by BRAS cannot be associated with specific analysis equipment one by one

In this environment, some network analysis solutions do not associate IP (Internet Protocol, Internet Protocol) with users, but directly analyze according to IP; this kind of solution cannot analyze the network quality at the user level. The real user name cannot match the IP with the real user, so it is difficult to conduct effective analysis and accurately locate the real user

Some solutions are to directly query or synchronize the online user data of the radius server, and then associate the IP with the real user; this kind of solution has poor real-time performance and additionally increases the pressure on the server

Some solutions directly mirror all the authentication data to the analysis device, and then perform analysis and correlation on the local machine; this solution requires additional additional mirroring devices, which increases costs, and the analysis of multiple analysis devices is the same. The aggregated authentication data causes performance loss of the analysis equipment

Images