Traffic based method and device implementing ipfix detection

A traffic monitoring and traffic technology, applied in the field of ipfix detection, can solve problems such as huge memory consumption

Active Publication Date: 2018-01-09
SUZHOU CENTEC COMM CO LTD
View PDF7 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

With the rapid increase of traffic types, the memory occ

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Traffic based method and device implementing ipfix detection
  • Traffic based method and device implementing ipfix detection
  • Traffic based method and device implementing ipfix detection

Examples

Experimental program
Comparison scheme
Effect test

Example Embodiment

[0027] The technical solutions of the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings of the present invention.

[0028] The method and device for realizing Ipfix detection based on flow rate disclosed in the present invention adopts a level flow table to realize Ipfix.

[0029] Specifically, such as figure 1 As shown, the method for implementing Ipfix detection based on traffic disclosed in the embodiment of the present invention includes:

[0030] S1, according to the packet header field in the flow to match the first-level flow table in the chip, identify the flow to be detected.

[0031] Specifically, take the switch chip to monitor IP traffic as an example. The switch chip includes an ACL engine and an Ipfix engine. The access control list (ACL) in the ACL engine is used as the first-level flow table, and the first-level flow table is configured to identify IP traffic. One keyword, the first keyword...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a traffic based method and device implementing ipfix detection. The method includes identifying to-be-detected traffic according to a first level flow table in a message head field matching chip in traffic; sending identified traffic into a second level flow table in the chip for matching and number statistics and learning matched new traffic into memory of the chip. According to the invention, ipfix is implemented by adopting the method of two level flow meters, so that ipfix has the capability of acting as a detection point based on traffic, the identification degreeof to-be-monitored traffic can be improved and thus excessive consumption of ipfix memory due to non-related traffic is reduced.

Description

technical field [0001] The invention relates to an ipfix detection technology, in particular to a method and device for realizing ipfix detection based on traffic. Background technique [0002] The basic principle of the switch chip to realize IPFIX (IP Flow Information Export, IP data flow information output) is: through the ipfix engine (ipfix engine) to realize the statistics and monitoring of various aspects of the IP data flow, wherein the ipfixengine mainly includes key (hash search to identify flow) and record (to perform relevant statistics on the flow, such as statistics on the number of packets). Every time a new data stream reaches the Ipfix engine, it will be learned into the chip memory, thus occupying a certain memory capacity. [0003] According to the RFC, the current monitoring point of Ipfix is ​​implemented based on the port, such as the statistics of the number of packets for the traffic of a certain port. With the rapid increase of the types of traffic...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L12/26H04L12/933H04L12/935H04L49/111
Inventor 刘庆海李晨龚海东
Owner SUZHOU CENTEC COMM CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products