Data processing method for traffic mirroring and system thereof

A data processing system and traffic data technology, applied in the data processing method and system field of traffic mirroring, can solve problems such as speeding up processing speed, difficulty in processing traffic data, shortening processing time, etc.

Inactive Publication Date: 2021-11-16
上海电信科技发展有限公司
View PDF4 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to overcome the defects of the prior art, provide a traffic mirroring data processing method and its system, solve the difficult problem of traditional network traffic data processing, and reduce the difficulty of subsequent analysis by optimizing the data processing method. Shorten processing time, speed up processing, and improve processing efficiency

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Data processing method for traffic mirroring and system thereof

Examples

Experimental program
Comparison scheme
Effect test

specific Embodiment approach

[0050] Obtain traffic data, track the TCP connection status of the client and server in the network layer, obtain the corresponding TCP message, and determine the TCP connection progress according to the flags in the TCP encirclement. When it is in the second handshake or the first TCP connection When waving or waving for the third time, reset the first buffer area and the second buffer area;

[0051] According to actual needs, the traffic data can be converted into little-endian mode to adapt to the X86 architecture;

[0052] The header of some traffic data defines the packet length or the boundary of some traffic data is marked by characters, divides the traffic data according to the packet length or character mark and forms several data packets, and sends the data packets to the application layer;

[0053] During the process of obtaining traffic data, monitor the serial number in the TCP message. If the serial number is repeated or skipped, the packet may be retransmitted, ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a data processing method for traffic mirroring. The method comprises the following steps: acquiring traffic data by using a mirroring port; identifying boundaries of the traffic data to segment the traffic data into a plurality of data packets; and sending the data packet to an application layer. According to the invention, the problem that the traditional network flow data is difficult to process is effectively solved, and the subsequent analysis difficulty is reduced, the processing time is shortened, the processing speed is accelerated and the processing efficiency is improved by optimizing the data processing mode.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a data processing method and system for traffic mirroring. Background technique [0002] The traditional data acquisition method is to turn on the port mirroring function of the network device, and store all the network traffic in the analysis software for subsequent processing and analysis. However, because the network traffic introduced into the software is not screened, there are many repeated traffic, which increases the difficulty of analysis and reduces the The speed of subsequent data processing is reduced, and the efficiency is low. Contents of the invention [0003] The purpose of the present invention is to overcome the defects of the prior art, provide a traffic mirroring data processing method and its system, solve the difficult problem of traditional network traffic data processing, and reduce the difficulty of subsequent analysis by optimizing the data processin...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): H04L12/931H04L12/951H04L12/953H04L29/08H04L47/43
CPCH04L49/208H04L49/9057H04L67/568
Inventor 沈渊曹辉滕建斌
Owner 上海电信科技发展有限公司
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap