An adaptive network bypass path network flow direction estimation method and system

Abstract

Embodiments of the present invention provide an adaptive network bypass path network flow direction estimation method and system. The method includes: obtaining a network packet, a list of network flows, and a server score table; assigning a value to a service port through a label feature to obtain a value assigned to a service port; querying the quintuple of the network packet in the list of network flows, if the If the quintuple of the network packet is equal to the quintuple corresponding to any element in the network flow list, it is determined that the network packet matches the any element; according to the service port assignment, combined with the service Obtain the service port type corresponding to the network packet from the terminal score table. The embodiment of the present invention matches the network packet and the network flow in the network, establishes the server score table, assigns the service port score, and judges the type of the service port by scoring in combination with the service port score table. delay and packet loss, without using the list of common service port numbers, and without manually specifying the list of server IP-port numbers.

Description

technical field [0001] The invention relates to the technical field of network performance monitoring, in particular to an adaptive network bypass path network flow direction estimation method and system. Background technique [0002] In network operation, a large number of traffic collection and analysis tools are used. The goal of traffic collection and analysis is to monitor the operation status of the network and applications. The precise positioning of the network flow direction (client, server) is the prerequisite for accurate traffic analysis. However, due to link load balancing, mirroring link delay, mirroring port queue buffering, and mirroring path packet loss on the mirroring path, the direction of the network flow cannot be simply determined. [0003] Existing network flow direction estimation methods are usually divided into three categories: 1. According to the time when the network packet is received by the collection device, the source IP of the first packet ...

AI Technical Summary

Problems solved by technology

[0005] Embodiments of the present invention provide an adaptive network bypass path network flow direction estimation method and system to solve the problem that the prior art is only suitable for packet monitoring of serial devices to determine the direction of network flow, and is not suitable for bypass Defects in Determining the Net Flow Direction of Parallel Devices

Images