Early warning analysis method and device for switch port traffic mutation

Abstract

The present invention provides a method and device for early warning analysis of switch port traffic mutation. The method acquires the switch port whose sudden change traffic is predicted, and obtains the dynamic threshold value of the switch port; collects the real-time flow data of the switch port at intervals, based on The real-time traffic growth percentage is obtained by using the wave ratio method for real-time traffic data. Secondly, the real-time traffic deviation percentage is obtained by using the average method based on the real-time traffic data. If both the real-time traffic growth percentage and the real-time traffic deviation percentage exceed the dynamic threshold, it is determined that the switch port has The sudden change of traffic greatly improves the accuracy of port traffic sudden change warning, reduces the false alarm rate of traffic sudden change warning, and helps network information management personnel to find abnormal traffic sudden change problems early and accurately, and improve their work efficiency.

Description

technical field [0001] The invention relates to the field of network flow monitoring, in particular to an early warning analysis method and device for sudden change of flow at a switch port. Background technique [0002] Network management software is a network management system that can assist network information management personnel in network management. It can assist network information management personnel in monitoring the network traffic of each port of the switch. When the monitoring finds a sudden change in the traffic of a certain port, the system will Early warning judgments are made for sudden changes, and network information management personnel are notified in various ways to deal with abnormal situations. [0003] However, the current way for network management software to monitor port traffic mutations is relatively simple. It judges whether the traffic is abnormal by judging the relationship between port traffic and the set threshold. There are single early ...

AI Technical Summary

Problems solved by technology

[0003] However, the current way for network management software to monitor port traffic mutations is relatively simple. It judges whether the traffic is abnormal by judging the relationship between port traffic and the set threshold. There are single early warning algorithms, lack of effective data analysis process, and false alarm rate Advanced issues, thus increasing the difficulty of monitoring for network information managers

Images