Web server discovery method and device and electronic equipment
A discovery method, server technology, applied in the field of device and electronic equipment, web server discovery method, capable of solving problems affecting the normal operation of the scanned web server, etc.
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0028] Embodiments of the present invention provide a web server discovery method, such as figure 1 As shown, the method specifically includes the following steps:
[0029] Step S11, obtaining the full flow data of the enterprise to be monitored.
[0030]In the embodiment of the present invention, if the user wants to discover the web server of the enterprise to be monitored, and does not use active scanning, it first needs to obtain the full flow data of the enterprise to be monitored, wherein the full flow data includes at least one flow data, and the full flow data includes at least one piece of flow data. The flow data may be obtained specifically by deploying a flow probe on the core switch to obtain DPI (Deep Packet Inspection, deep packet inspection technology) flow logs. The deployment location of the traffic probe is deployed according to the actual needs of the user, and the embodiment of the present invention does not specifically limit the deployment location. Th...
Embodiment 2
[0072] The embodiment of the present invention also provides a web server discovery device. The web server discovery device is mainly used to implement the web server discovery method provided in the first embodiment above. The web server discovery device provided by the embodiment of the present invention will be described in detail below.
[0073] Figure 5 is a functional block diagram of a web server discovery device provided by an embodiment of the present invention, such as Figure 5 As shown, the device mainly includes: an acquisition module 100, an analysis module 200, and a determination module 300, wherein:
[0074] The acquiring module 100 is configured to acquire full flow data of the enterprise to be monitored, wherein the full flow data includes at least one piece of flow data.
[0075] The parsing module 200 is configured to parse the full flow data to obtain key information of each piece of flow data in the full flow data, wherein the key information includes:...
Embodiment 3
[0097] see Figure 6 , the embodiment of the present invention provides an electronic device, the electronic device includes: a processor 60, a memory 61, a bus 62 and a communication interface 63, the processor 60, the communication interface 63 and the memory 61 are connected through the bus 62; the processor 60 is used to execute executable modules, such as computer programs, stored in memory 61 .
[0098] Wherein, the memory 61 may include a high-speed random access memory (RAM, RandomAccessMemory), and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 63 (which may be wired or wireless), and the Internet, wide area network, local network, metropolitan area network, etc. can be used.
[0099] The bus 62 can be an ISA bus, a PCI bus or an EISA bus, etc. The bus can be d...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More