Unlock instant, AI-driven research and patent intelligence for your innovation.

A dns log analysis method and device

A technology of an analysis device and an analysis method, applied in the Internet field, can solve problems such as the inability to determine the K value, and achieve the effects of improving clustering effect, good clustering effect, and simple and effective operation.

Active Publication Date: 2018-09-21
CHINA UNITED NETWORK COMM GRP CO LTD
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide a DNS log analysis method and device to at least solve the problem in the prior art that a reasonable K value cannot be determined simply and effectively during the DNS log analysis process

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • A dns log analysis method and device
  • A dns log analysis method and device
  • A dns log analysis method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0028] Embodiments of the present invention provide a DNS log analysis method, such as figure 1 As shown, including steps S101-S104:

[0029] S101. The DNS log analysis device acquires a DNS log and preprocesses the DNS log to obtain preprocessed log text.

[0030] Wherein, the preprocessed log text includes at least one piece of text information, and each piece of text information includes the first information corresponding to the text information.

[0031] S102. The DNS log analysis device extracts first information contained in each piece of text information from the preprocessed log text, and constructs a feature vector matrix of the first information.

[0032] S103. The DNS log analysis device determines the K value corresponding to K-means clustering of the first information included in each piece of text information according to the eigenvector matrix of the first information.

[0033] S104. The DNS log analysis device performs K-means clustering on the first informa...

Embodiment 2

[0106] An embodiment of the present invention provides a DNS log analysis device 50 for performing the above figure 1 , figure 2 or Figure 4 Steps performed by the DNS log analysis device 50 in the DNS log analysis method shown. The DNS log analysis device 50 may include units corresponding to the corresponding steps, for example, such as Figure 5 As shown, it may include: an acquisition unit 501 , a construction unit 502 , a determination unit 503 and a clustering unit 504 .

[0107] The obtaining unit 501 is configured to obtain DNS logs and preprocess the DNS logs to obtain preprocessed log texts, the preprocessed log texts include at least one piece of text information, and each piece of text information includes the The first information corresponding to the text information.

[0108] The construction unit 502 is configured to extract the first information included in each piece of text information from the preprocessed log text, and construct a feature vector matr...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

Examples of the present invention provide a DNS log analysis method and device, so as to solve the problem of simply and effectively determining reasonable K values in the existing technology in the process of DNS log analysis.Methods include: obtain the DNS log and prepare the DNS log, obtain the pre -processing log text, which contains at least one text information in the pre -processing log text.One information; extract the first information contained in each text information from the pre -processing log text, and build the feature vector matrix of the first information described;Determine the K value corresponding to the first information contained in each text information for the K‑Means clustering class; according to the K value, the first information contained in each text information is performed.Classification, get cluster results.The invention is suitable for Internet technology.

Description

technical field [0001] The present invention relates to the technical field of the Internet, in particular to a domain name system (English: domain namesystem, DNS for short) log analysis method and device. Background technique [0002] As the first entrance of the Internet, DNS assigns domain name addresses and network protocol (English: internet protocol, IP for short) addresses to hosts on the Internet. The Internet of any architecture cannot do without DNS. Therefore, DNS-based related research has been paid more and more attention. Internet companies and operators have carried out in-depth research on DNS. At present, DNS analysis based on big data platforms has become a key direction of research. [0003] Among them, DNS access logs containing rich information have high mining value. The traditional DNS log analysis process is as follows: first, obtain and save DNS access logs through log tools, then process the log files to extract useful data, and finally target the...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): G06K9/62G06F17/30
CPCG06F16/355G06F18/23213
Inventor 刘千仞周光涛孙莉
Owner CHINA UNITED NETWORK COMM GRP CO LTD