Quintuple-based network security monitoring and data message analysis system

Abstract

The invention discloses a quintuple-based network security monitoring and data message parsing system, which comprises a probe module and a relational data storage unit for managing and scheduling network nodes accessed to the system, a node management scheduling module used for receiving the network node data packet from the probe module and providing a visual interface of the network node data packet from the probe module; a memory database module and a data preprocessing module; a relational data storage unit; and a non-relational storage unit, wherein the probe module is used for analyzingand decoding a data packet from a network node, transmitting an analysis and decoding result to the memory database module and the node scheduling management module, carrying out network security monitoring and data message analysis on quintuple data in a network, ensuring the service quality in the network, improving the network operation and maintenance efficiency. Meanwhile, the method has strong practical functions in the aspects of network planning, bandwidth planning, network fault rapid positioning analysis and the like, and provides efficient, controllable and reliable technical support for data communication.

Description

technical field [0001] The invention relates to the technical field of data networks, in particular to a system for network security monitoring and data message analysis based on quintuples. Background technique [0002] With the continuous growth of network traffic, the composition of network traffic is becoming more and more complex, and various services are constantly impacting on network quality. Management and control bring new and bigger challenges. Traditional network management systems and means are difficult to trace and eliminate network anomalies and performance failures, especially network "soft failures" in a timely manner, and it is difficult to fully control network traffic behavior, and it is difficult to understand the operation of core business systems and user experience. . [0003] With the construction of intelligent data network, communication network and bearer business system have developed rapidly, and the construction of data communication network...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to provide a quintuple-based network security monitoring and data message analysis system to solve the problem that existing simple network management protocols in the prior art cannot quickly locate network application layer traffic abnormalities, network element configuration abnormalities, five Tuple traffic information, unable to identify technical problems of network business layer congestion, flooding and the resulting risk of network paralysis

Images