Network oscillation monitoring and early warning method and device and medium

Abstract

The invention provides a network oscillation monitoring and early warning method and device, and a medium. The method comprises the steps: carrying out the identity recognition and authentication of an operation system of equipment connected to a network through an identity recognition library; capturing a message entering the equipment; and splitting and analyzing the captured message according to the IP address and / or the MAC address so as to count the packet sending frequency and the packet sending number of each device in the network in unit time, and drawing a data image according to a statistical result so as to compare the data image with a reference flow model; and when the data image continuously exceeds the preset range of the reference flow model for a preset time, judging thata network oscillation event occurs. Therefore, the network security can be improved, and real-time monitoring, identification and traceability can be performed on loops and ARP spoofing attacks in thenetwork.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a method, device and medium for monitoring and early warning of network shocks. Background technique [0002] Ethernet is widely used in Internet communication, which greatly facilitates people's work and life. However, due to the limitation of Ethernet's own technical characteristics (CSMA / CD carrier sense multiple access with collision detection), it is vulnerable to network loopholes. road and malicious attacks, causing network anomalies and making users unable to use the network normally. [0003] If a device on the network accidentally connects into a loop, it will be disastrous to the entire network. It will generate a large number of packets in a short time and occupy the entire network bandwidth, causing all computers to be unable to use the network normally, resulting in The network is paralyzed and affects work. The industry vividly calls it a "broadcast storm", whi...

AI Technical Summary

Problems solved by technology

However, if the user changes the device, or the IP address of the device is changed and the network cannot be used normally, it must be manually changed synchronously, resulting in limited use, especially in large networks, this static binding technical solution is not feasible and extremely inefficient

Moreover, the existing technology usually cannot evaluate the communication quality of the network, it does not have an automatic monitoring mechanism, and cannot perform an objective and intuitive evaluation of the network quality (such as bandwidth, delay, etc.), and cannot quickly obtain real-time information on network problems. Occurrence and its causes, slow feedback, time-consuming and low-efficiency troubleshooting

Images