Interactive network packet protocol visualization and topological analysis device

TWM688719UActive Publication Date: 2026-10-21NATIONAL KAOHSIUNG UNIVERSITY OF SCIENCE & TECHNOLOGY
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
TW115203367
Authority / Receiving Office
TW · TW
Patent Type
Utility models
Current Assignee / Owner
Filing Date
2026-04-17
Publication Date
2026-10-21
Estimated Expiration
2036-04-16

Smart Images

  • Figure TWG2TB001917617_003
    Figure TWG2TB001917617_003
  • Figure TWG2TB001917672_001
    Figure TWG2TB001917672_001
  • Figure TWG2TB001917672_002
    Figure TWG2TB001917672_002
Patent Text Reader

Abstract

A network packet protocol visualization topology analysis device includes a data source layer, a data processing layer, an animation engine layer, and a user interface layer. At least one predetermined packet file is transmitted to the data source layer, and the packet file is parsed at the data processing layer to obtain at least one packet parsing data. The animation engine layer drives several animation protocol types corresponding to the packet parsing data to obtain several packet parsing sequence animation data. The packet parsing animation sequence data is then transmitted to the user interface layer to generate at least one visualized packet parsing animation data.
Need to check novelty before this filing date? Find Prior Art

Claims

1. An interactive network packet protocol visualization topology analysis device, comprising: a plurality of packets for transmission in a network system; a computer unit connected to the network system, the computer unit comprising: a data source layer for receiving and transmitting at least one predetermined packet file; a data processing layer connected to the data source layer, wherein the data processing layer parses the packet file to obtain at least one packet parsing data; an animation engine layer connected to the data processing layer, wherein the animation engine layer has a plurality of animation protocol types; and a user interface layer connected to the animation engine layer; wherein the plurality of animation protocol types are driven according to the packet parsing data to obtain a plurality of packet parsing animation sequence data, and the packet parsing animation sequence data is transmitted to the user interface layer to generate at least one visualized packet parsing animation data.

2. The apparatus according to claim 1, wherein the predetermined packet file is selected from a network packet capture file.

3. The apparatus according to claim 1, wherein the data processing layer includes a protocol timeline engine and an attack classification engine.

4. The apparatus according to claim 1, wherein the animation engine layer has a plurality of protocol animation controllers and a multi-controller synchronization framework.

5. The apparatus according to claim 1, wherein a particle index is used as an identifier between the data processing layer and the animation engine layer.

6. The device according to claim 1, wherein the user interface layer comprises a far-view layer, a mid-view layer and a near-view layer.

7. The apparatus according to claim 6, wherein the far view layer of the user interface layer is used to display a network topology diagram and an animated particle system, the mid view layer of the user interface layer is used to display an attack timeline and a packet list, and the close view layer of the user interface layer is used to display a packet transmission status, and the packet transmission status is connected and transmitted between the two endpoints.

8. The device according to claim 1, wherein the user interface layer further includes an interactive learning module.

9. The apparatus according to claim 1, wherein the computer unit employs a grid exponential diffusion layout algorithm.

10. The apparatus according to claim 9, wherein the grid index diffusion layout algorithm includes a first calculation stage, a second calculation stage and a third calculation stage.

11. The apparatus according to claim 10, wherein the first calculation stage is a grid initialization stage, the second calculation stage is an exponential distance diffusion stage, and the third calculation stage is a simulation optimization stage.

12. The apparatus according to claim 1, wherein the data processing layer includes a first attack classification stage, a second attack classification stage and a third attack classification stage.

13. The apparatus according to claim 12, wherein the first attack classification stage is a flag statistics stage, the second attack classification stage is an attack determination stage, and the third attack classification stage is a score calculation stage.