Network data auditing system and method

Abstract

The invention provides a network data auditing system. A plurality of AP equipments perform simple analysis on to-be-analyzed network data and simple analysis data is formed. A MASTER management unit distributes the simple analysis data and deep analysis data to an auditing cluster unit via two different transmission channels. The auditing cluster unit performs deep restoration analysis on the simple analysis data and the deep analysis data and generates auditing log and a log message queue. A storage cluster unit stores the auditing log and a log message queue. A reporting cluster unit monitors the log message queue in the storage cluster unit and reports the auditing log to a data center according to a report format of the data center after acquiring the description information of the to-be-reported auditing log. The invention also provides a corresponding method. The network data auditing system and method provided by the invention are implemented through three layers. Logic and physical separation are achieved among the three layers and the network data auditing system and method have characteristics of good performance and high expandability.

Description

technical field [0001] The invention relates to the technical field of data processing, and more specifically, to a network data auditing system and method. Background technique [0002] WiFi wireless network has become a standard supporting facility in many public places, providing free Internet service for customers in public places. The traditional data mirroring method audit based on a single site cannot solve the relationship between the audit log and the Internet terminal, the cost is high, and the deployment is complicated; in addition, the original data packets based on the audit site are directly forwarded to the audit server, although the front-end can be directly audited Original data, but the original data packet increases the original network bandwidth and affects the normal Internet access. Contents of the invention [0003] The technical problem to be solved by the present invention is to provide a network data auditing system and method for the above-menti...

AI Technical Summary

Problems solved by technology

The traditional data mirroring method audit based on a single site cannot solve the relationship between the audit log and the Internet terminal, the cost is high, and the deployment is complicated; in addition, the original data packet based on the audit site is directly forwarded to the audit server, although the front-end can be directly audited Original data, but the original data packet increases the original network bandwidth and affects the normal Internet access

Images