sFlow flow sampling method, device and system

Abstract

The invention provides an sFlow flow sampling method, an sFlow flow sampling device and an sFlow flow sampling system, relating to the field of network communications. According to the sFlow flow sampling method, an adopted sFlow service board card has the same hardware structure as other service board cards of integrated distributed equipment. The sFlow flow sampling method mainly comprises the following steps of: sending pre-configured sampling parameters (a destination IP address and a port number of a collector, an output interface of an sFlow service board card and a destination MAC address) of the collector to each sFlow service board card based on a main control board card; creating an sFlow service board card CPU aggregation group, wherein members of the sFlow service board card CPU aggregation group are CPU ports of the sFlow service board cards; sampling an original message to generate a sampled message by a forwarding board card, and sharing and sending the sampled message to the sFlow service board cards based on the sFlow service board card CPU aggregation group; and constructing an constructs an sFlow sampling message based on the sampled message and the sampling parameters by the sFlow service board cards, and sending the sFlow sampling message to the collector. According to the sFlow flow sampling method, the sFlow flow sampling rate can be effectively improvedon the premise that the hardware cost and the development cost are not greatly improved.

Description

technical field [0001] The invention relates to the field of network communication, in particular to an sFlow flow sampling method, device and system. Background technique [0002] sFlow is a network monitoring technology jointly developed by InMon, HP and FoundryNetworks in 2001. It adopts data flow random sampling technology, which can adapt to the traffic analysis in the environment of super large network traffic (such as greater than 10Gbit / s), allowing users to detail, Analyze network traffic performance, trends, and problems in real time. [0003] At present, according to the sFlow protocol, the method of implementing sFlow flow sampling through network devices is usually to assemble the sampling information of multiple sampled messages in one sFlow sampled message until the data area of ​​the sFlow sampled message is filled ( Usually, the data area of ​​a sFlow sampling message is about 1400 bytes, and the sampling information of a sampled message is more than 200 by...

AI Technical Summary

Problems solved by technology

[0004] However, this solution is suitable for situations where the rate of the sampled packets is not very high. Due to the limitation of the CPU performance and memory size of the network device, the sampling rate has a lower upper limit.

When the traffic is very large, such as above 1Tbps, according to the sampling ratio of 1 / 1000, the rate of sampling packets will also reach above 1Gbps. The rate of sampling packets is very high, which is difficult for existing network equipment, unless the Developing new network equipment, using CPU and memory far higher than the current specifications will inevitably lead to a sharp increase in hardware costs and development costs, and the performance may not meet the requirements

Images