Traffic data monitoring method, device and equipment and computer storage medium

Abstract

The invention provides a traffic data monitoring method, device and equipment and a computer storage medium. The method comprises the following steps: after neighbor information is discovered and cleaned, acquiring a topological direct connection relationship information table of a functional partition; obtaining data of a flow monitoring item of each key device in the function partition; collecting to obtain port total incoming and outgoing flow data of the key device, and calculating to obtain a ratio of the port total incoming flow data to the port total outgoing flow data of the key device; collecting to obtain east-west or north-south in-out flow data of each functional partition; obtaining an abnormal point in the data of the flow monitoring item, an abnormal point in the total inletand outlet flow data of each key device port, an abnormal point in the ratio of the total inlet flow data of the port to the total outlet flow data of the port, and an abnormal point in the east-westdirection or south-north direction inlet and outlet flow data of each functional partition; and generating a topological graph of the association relationship between the key devices in each functional partition by utilizing the topological direct connection relationship information table of the functional partition.

Description

technical field [0001] The present application relates to the field of computer technology, in particular to a flow data monitoring method, device, equipment and computer storage medium. Background technique [0002] At present, large-scale data centers usually use equal-cost multi-path routing for critical path design. When the device supports equal-cost routing, the Layer 3 forwarding traffic sent to the destination address or destination network segment can be shared through different paths. Realize load balancing of network links, and realize fast switching when a link fails. [0003] However, when a key device at a certain layer fails at the hardware layer or software layer, it will cause link interruption or network shock. If the fault is not actively reported as a monitoring point, then during the fault period, the existing monitoring system cannot confirm the abnormal point, so the alarm cannot be generated. Contents of the invention [0004] In view of this, thi...

AI Technical Summary

Problems solved by technology

[0003] However, when a key device at a certain layer fails at the hardware layer or software layer, it will cause link interruption or network shock

If the fault is not actively reported as a monitoring point, then during the fault period, the existing monitoring system cannot confirm the abnormal point, so the alarm cannot be generated

Images