Flow monitoring method and system

A flow monitoring and flow technology, applied in the direction of transmission system, digital transmission system, program control design, etc., can solve the problems of difficult flow monitoring of container/virtual machine without independent network card, low system overhead, etc., to reduce the risk of data tampering and improve The effect of high safety and monitoring accuracy

Active Publication Date: 2019-09-03
TENCENT TECH (BEIJING) CO LTD
View PDF6 Cites 2 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0008] The present invention proposes a method and system for traffic monitoring, which realizes marking, collection, statistics and monitoring of the traffic of each container / virtual machine from the kernel level, and solves the problem of difficult traffic monitoring of containers / virtual machines without an independent network card. Accurate monitoring of traffic can be achieved, greatly reducing system overhead, meeting the critical traffic monitoring needs of online businesses, ensuring the delivery quality of online services, facilitating quick discovery and location of problems, and improving the security of containers / virtual machines

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Flow monitoring method and system
  • Flow monitoring method and system
  • Flow monitoring method and system

Examples

Experimental program
Comparison scheme
Effect test

specific Embodiment approach

[0096] Please refer to image 3 , which is the second flow chart of the method for monitoring traffic of a virtual machine provided by an embodiment of the present invention, the virtual machine is not assigned an independent IP, and this method is the same as figure 1 Compared with the method of , the specific implementation of filtering according to the label is added, the method includes:

[0097] Step S200, pre-allocating unique labels for each virtual machine.

[0098] In this step, each virtual machine is configured with its own unique label. By pre-allocating a unique label for each virtual machine, data packets entering and leaving each virtual machine can be uniquely determined.

[0099] The tags in this step include normal tags and suspected malicious tags, which can be specifically ID numbers, for example, ID tags are: 1, 2, 3 . . . . In addition, a suspected malicious label can be set for the packets that are suspected to be malicious in and out of the virtual ma...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a flow monitoring method and system. The method comprises the following steps: binding a flow label to a container / virtual machine in advance; classifying and filtering according to the labels of the data messages of the container / virtual machine; carrying out clustering analysis on the data messages with the same labels to obtain a flow data statistical result; further, obtaining the flow monitoring information of each container / virtual machine; and finally, according to the flow monitoring information, monitoring the flow of each container / virtual machine. The problem that flow monitoring of a container / virtual machine without an independent network card is difficult is solved, and meanwhile the technical effects of being high in monitoring accuracy, zero in system overhead, capable of meeting the important flow monitoring requirement of online services, guaranteeing the delivery quality of online services and facilitating rapid discovery and positioning of the problems are achieved.

Description

technical field [0001] The invention relates to the technical field of flow monitoring, in particular to a method and system for monitoring flow of a virtual machine or a container. Background technique [0002] With the popularity of cloud computing, more and more customers choose to deploy their applications on the virtual machines of the cloud platform, which puts forward higher requirements for the security performance of the cloud platform. In order to ensure the information security of the virtual machine, the cloud platform needs to monitor the network traffic of the virtual machine. The current commonly used monitoring method is to monitor the overall traffic of the virtual machine network card. This monitoring method is relatively simple to implement, but when the number of virtual machines is too large to allocate IP addresses, the existing traffic through the virtual machine network card The monitoring method will not be able to solve the problem of monitoring th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26H04L29/06G06F9/455
CPCH04L47/2441H04L47/31H04L63/1408H04L43/0888G06F9/45558H04L63/0227G06F2009/4557G06F2009/45587
Inventor 吴君波曾锦辉严枭
Owner TENCENT TECH (BEIJING) CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products