An Efficient Method for Automatic Packet Mirroring Based on General Server

Abstract

The invention discloses an efficient message automatic mirroring method based on a general server, and relates to the technical field of the information. The automatic mirroring method disclosed by the invention is realized through the cooperation of a message preprocessing module, a mirroring engine module, and a rule translation module of the mirroring engine; the message preprocessing module and the mirroring engine module and the rule translation module of the mirroring engine realize the mirroring step; the mirroring step is as follows: the working step of the mirroring engine and the rule translation step of the mirroring engine; the mirroring rule engine is realized, the rule is converted into a state machine unrelated to the equipment, and then a matching engine performs the matching on the data message passing through the engine, and the successfully matched message is sent through a port, so that numerous X86 general server equipment can easily support the complex mirroring function, and supports the description of the mirroring related rule by using regular grammar on the basis of guaranteeing the equipment performance, thereby improving the function processing speed, accuracy, and complexity of the mirroring device; and the mirroring device can use various different scenes.

Description

technical field [0001] The invention relates to the field of information technology, especially the field of communication processing technology in the field of data communication. Background technique [0002] Packet mirroring technology is a basic and important technology in the field of data communication. It is a method of mirroring data from one or more ports of a device to one or more ports. The data mirrored by the device can be all the data passing through this port, or it can be the required data defined according to certain rules. Users can perform network monitoring and troubleshooting through data mirroring. For example, the public security department can analyze the suspect's usual online preference by analyzing the mirrored message, and then strengthen the understanding of the suspect; the national Internet control department can block pornographic, gambling and drug websites by analyzing the abnormality of the mirrored message ; Operators can analyze network...

AI Technical Summary

Problems solved by technology

[0004] However, the problem with this technology is that it relies too much on hardware features and requires certain devices that support corresponding hardware entries to realize the packet mirroring function, which limits the usage scenarios of the packet mirroring function and cannot be integrated in a large number of general server architectures. Or use it on a virtualized cloud platform device

Images