A method and device for collecting active IP data in a computer room

Abstract

The invention discloses a method and device for collecting active IP data in a computer room. The method comprises the following steps: collecting to-be-detected active IPs and corresponding IP data from original flow data; judging whether the to-be-detected active IPs belongs to the IPs in the computer room by using a preset traceroute dial test technology in combination with a corresponding machine learning algorithm; eliminating the IPs beyond the computer room in the to-be-detected active IPs, and collecting the IP data corresponding to the active IPs in the computer room. By adoption of the method for collecting the active IP data in the computer room, the active IPs beyond the computer room can be effectively eliminated, so that the accuracy and the validity of the collected active IPs in the computer room are greatly improved, and a good data foundation is provided for subsequent data analysis.

Description

technical field [0001] The invention relates to the technical field of IP data collection, in particular to a method and device for collecting active IP data in a computer room. Background technique [0002] With the development of technology, it has been possible to form active data by collecting traffic data, and effectively collect Internet Protocol ("IP" for short) data interconnected between networks. [0003] In the prior art, the IP activity data collected and reported by the traffic collection equipment (eg, EU collection equipment of the information security management system) in the computer room usually includes "noise" of the IP data outside the computer room, which seriously affects the data quality. Traffic collection devices can usually collect attributes such as IP addresses, IP traffic, and access ports of active IP data. However, since a large number of collection devices cannot distinguish the upstream and downstream data flows, there is a large amount of ...

AI Technical Summary

Problems solved by technology

[0003] In the existing technology, the IP active data collected and reported by the traffic collection equipment in the computer room (for example, the EU collection equipment of the information security management system) usually includes the "noise" of the IP data outside the computer room, which seriously affects the data quality

Traffic collection devices can usually collect the attributes of active IP data, such as IP address, IP visits, and access ports. However, since a large number of collection devices cannot clearly distinguish the upstream and downstream data flows, there are a large number of IP data outside the computer room in the active IP data. , a large amount of "noise" data makes the collected active data lose the meaning of the original data, and cannot be effectively analyzed through the collected IP data

Images