Universal protocol analysis framework implementation method and device

A technology of protocol analysis and implementation method, applied in the network field, it can solve the problems of poor readability, wireshark cannot recognize the protocol, and the protocol cannot do anything, so as to achieve the effect of improving readability

Active Publication Date: 2019-10-11
HANGZHOU GUYI NETWORK TECH CO LTD
View PDF6 Cites 3 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] 1. For the deployment on the server (UNIX / Linux), it usually relies on other third-party libraries. This feature will bring great troubles to the early deployment work, especially for the internal LAN with high security requirements.
[0005] 2. The display results of some protocols / messages do not conform to the OSI specification, and the readability is poor
[0006] 3. Once the port number of a certain protocol changes, wireshark itself cannot recognize the protocol
[0007] 4. Cannot do anything for protocols with multiple port numbers / multi-links

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Universal protocol analysis framework implementation method and device
  • Universal protocol analysis framework implementation method and device

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0043] In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

[0044] In the following introduction, the terms "first" and "second" are only used for the purpose of description, and should not be understood as implying their relative importance.

[0045]The following description provides multiple embodiments of the present invention, and different embodiments can be replaced or combined in combination, so the present invention can also be considered to include all possible combinations of the same and / or different embodiments described. Thus, if one embodiment contains features A, B, C, and another embodiment contains features B, D, then the invention should a...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a universal protocol analysis framework implementation method and device, and the method comprises the steps: S1, building an association relation among a protocol name, a port number and an analysis function, and storing the association relation in a global hash table; s2, acquiring a protocol data message needing to be analyzed; s3, decomposing the protocol data messageneeding to be analyzed, and extracting one or more port numbers from the protocol data message; s4, carrying out searching in a global hash table according to the extracted one or more port numbers, and if an analytical function associated with the one or more port numbers is found, executing the step S5; and S5, analyzing the protocol data message needing to be analyzed by utilizing the searchedanalysis function to obtain an analysis result. The method has the advantages of cross-platform, wide protocol support, simple message analysis, convenient deployment and the like.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a method and device for realizing a general protocol analysis framework. Background technique [0002] The description of the background technology in the present invention belongs to the related technology of the present invention, and is only used to illustrate and facilitate the understanding of the content of the present invention. prior art as of the filing date. [0003] In network traffic analysis, tcpdump (UNIX) and wireshark (Windows) are usually used to collect and analyze traffic. For tcpdump, it can capture, filter, save, etc. in various ways, but the data it collects is the original network traffic and cannot analyze the traffic packets. As for wireshark, it has powerful functions, which can capture packets and analyze them. But wireshark also has some disadvantages as follows: [0004] 1. For deployment on the server (UNIX / Linux), it usually relies on other thi...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/26
CPCH04L43/18
Inventor 赵春云贺本彪苗维杰
Owner HANGZHOU GUYI NETWORK TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products