Network equipment access history information determination method, equipment and switch

Abstract

The invention discloses a network equipment access history information determination method, equipment, a switch and a display device. The method comprises the steps of acquiring first data packets through a connection establishment mirror image port, wherein the first data packets are data packets which are sent by the network equipment and copied by the switch provided with the mirror image port; screening the first data packets to acquire one or more second data packets, wherein the second data packets are used for indicating data packets which are generated by the network equipment when accessing to the network; analyzing each second data packets, determining address information, which corresponds to each second data packet, of the network equipment, and determining access history information corresponding to each second data packet so as to determine access history information of the network equipment. According to the invention, the switch is provided with the mirror image port, the data packets of the network equipment are copied by the switch and sent to the equipment, the equipment analyzes the copied data packets, and access history information of the network equipment is determined, thereby not requiring to deploy any system on the network equipment, and not requiring to occupy storage space of the network equipment.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for determining access history information of network equipment, a device, a switch and a display device. Background technique [0002] With the rapid development of the Internet, each network device will generate a data packet when accessing the network, and the data packet records information about the network device's access to the network. For information security, it is necessary to manage network devices and determine the access history of network devices. Common methods in the prior art are as follows: [0003] 1. An access audit application system is deployed on each network device, and the access audit application system is used to record the data packets sent by the network device. The network administrator can obtain the records of the access audit application system to determine the access history of the network equipment. [0004] 2. Capture a...

AI Technical Summary

Problems solved by technology

First of all, each network device is of a different type. The type can be a mobile phone, a router, or a tablet computer. Therefore, it is necessary to develop different access audit application systems for different types of network devices, and the research and development workload is heavy. Therefore, the deployment High difficulty

Secondly, the storage capacity of each network device is different. For example, the storage capacity of mobile phones is small, and some portable computers do not have storage functions. Therefore, the access audit application system can only be deployed on network devices with large storage capacity

[0008] Capturing data packets of network devices through hardware gateways will have a great impact on the network

First of all, the hardware gateway is connected to the main network in series. The data packets sent by each network de

Images