Network audit data collection method, corresponding device and equipment, and storage medium

Abstract

The invention discloses a network audit data collection method, a corresponding device and equipment and a storage medium. The device comprises a data capture unit, which is used for starting a data forwarding process, creating a plurality of virtual network interfaces through the data forwarding process, capturing an original data message from a physical network card and sending the original datamessage to each virtual network interface; and a data collection unit, which is used for starting a plurality of network auditing processes, and obtaining corresponding original data message from thecorresponding virtual network interface through each network auditing process. The network audit data collection method, the corresponding device and equipment and the storage medium in the inventioneffectively improve the auditing performance of network flow, increase the fault tolerance of the network auditing system, and reduce the probability of network auditing time audit missing.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a method for collecting network audit data, corresponding devices, equipment and storage media. Background technique [0002] The network audit system is deployed at the network egress, captures network data packets, parses the packets and extracts the transmission content to realize the network audit function. The network audit system is deployed in enterprises or government agencies to provide effective means to improve work efficiency, deter violations, obtain evidence and determine responsibility, and trace the source. [0003] With the rapid development of the network, the bandwidth of the network egress is also continuously expanding. 100M and 1000M networks are common, and the scale of 10G network egress is also gradually formed. Large traffic is an important feature of the current network. On the other hand, network application software is diversified, and different ap...

AI Technical Summary

Problems solved by technology

Although there are corresponding solutions in the existing network audit system, the implementation of the existing network audit system is complicated, and there is a bottleneck in the overall performance, which will not increase linearly with the system hardware configuration; and the fault tolerance is poor. Once the program crashes abnormally, Then its auditing function may be used, which will cause a large number of unaudited network events

Images