NAT association detection method based on multi-path message detection analysis

A technology of packet detection and detection method, applied in the computer field, can solve the problem of not being able to quickly find out the NAT associated flow, etc., and achieve the effect of troubleshooting network failures

Active Publication Date: 2020-08-21
成都数维通信技术有限公司
View PDF8 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] Aiming at the above-mentioned deficiencies in the prior art, a NAT association detection method based on multipath packet detection and analysis provided by the present invention solves the problem that the NAT association flow cannot be quickly found

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0029] The following describes the specific embodiments of the present invention to facilitate those skilled in the art to understand the present invention, but it should be clear that the present invention is not limited to the scope of the specific embodiments, for those of ordinary skill in the art, as long as various changes These changes are obvious within the spirit and scope of the present invention defined and determined by the appended claims, and all inventions and creations that utilize the concept of the present invention are protected.

[0030] The NAT association detection method based on multipath packet detection and analysis includes the following steps:

[0031] S1. Analyze the network message file in pcap format to obtain the protocol fields of Layer 2 to Layer 4, including source MAC address, destination MAC address, Ethernet type, quintuple, TTL, TCP sequence number, TCP ack sequence number, TCP Flag, Payload data length, and timestamp when the message was capt...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses an NAT association detection method based on multi-path message detection analysis, and the main method is to find out an NAT associated flow by analyzing protocol fields and Payload payload data of each layer of a large number of messages, a timestamp, an accumulated byte number and other statistical information; and the forwarding paths of the associated streams, namely the network equipment through which the message passes, can be determined by analyzing the source MAC addresses and the destination MAC addresses of the associated streams. According to the method, multiple pairs of NAT associated streams can be rapidly extracted from a large number of messages, operation and maintenance personnel can be helped to know network operation conditions, and the operation and maintenance personnel can be helped to locate problems when faults occur.

Description

Technical field [0001] The invention relates to the field of computers, in particular to a NAT correlation detection method based on multipath message detection and analysis. Background technique [0002] NAT (Network Address Translator) is a technology that translates an internal private network IP address into a public network IP address. With the increasing lack of IPv4 addresses, the main purpose of NAT is to enable addresses to be reused. NAT solves the problem of address shortage, hides and protects the computers inside the network, but also makes the network more complicated. When network services fail, it becomes more difficult to locate the problem. [0003] Since the NAT technology converts the IP address and transport layer port, a stream sent from a terminal device (such as a server, a personal computer) will become another new stream after being converted by the NAT device, and the old and new streams will remove the payload data payload. In addition to the same, the ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L29/06G06F16/2455
CPCG06F16/24568H04L69/163H04L69/164H04L69/22
Inventor 李家驹段永康李利杨帆
Owner 成都数维通信技术有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap