Network transmission abnormality processing method, device, electronic device and storage medium

Abstract

The present application provides a method, device, electronic device and storage medium for processing network transmission anomalies. Among them, in the method for processing network transmission anomalies, by monitoring the forwarding status of each network session, once the forwarding status of a session is abnormal, the session information of the abnormal session is obtained, and the server that forwards the abnormal session is quickly located based on the session information, and the data packet corresponding to the session information on the server is automatically captured for fault analysis, and the cause of the forwarding anomaly of the abnormal session is obtained, so as to realize the rapid location and analysis of the fault. It solves the problem in the prior art that when a session fails when forwarding through the gateway cluster, it is impossible to quickly locate which gateway server in the gateway cluster has a problem, and it is necessary to manually execute the corresponding packet capture command to obtain the data packet, and the timeliness of fault handling is low.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a method, device, electronic device and storage medium for processing network transmission anomalies. Background Art

[0002] In a cloud network environment, a significant feature of a virtual gateway server compared to a traditional network is that multiple virtual gateway servers form a cluster and forward related services in units of clusters, that is, forwarding routing rules in a distributed manner.

[0003] However, this approach brings a thorny problem: there are a large number of gateway server clusters. When a session fails while being forwarded through the gateway cluster, it is impossible to locate which gateway server in the gateway cluster has the problem in a short period of time. Moreover, when a specific gateway server is located, it is also necessary to manually execute the corresponding packet capture command to obtain the data packet for fault analysis. The timeliness is very low and cannot meet the needs of rapid location and handling of network failures. Summary of the invention

[0004] In view of this, the present application provides a method, device, electronic device and storage medium for processing network transmission anomalies to solve the problem in the prior art that when a session fails when forwarding through the gateway cluster, it is impossible to quickly locate which gateway server in the gateway cluster has a problem, and it is necessary to manually execute the corresponding packet capture command to obtain the data packet, resulting in low timeliness of fault handling.

[0005] To achieve the above objectives, this application provides the following technical solutions:

[0006] The first aspect of the present application discloses a method for processing network transmission anomalies, comprising:

[0007] Monitor the forwarding status of each session;

[0008] If the forwarding status of a monitored session is abnormal, the session information of the abnormal session is obtained;

[0009] Based on the session information, traverse the session forwarding list of each server to determine the server that forwards the abnormal session;

[0010] Based on the session information, capture the data packet corresponding to the session information on the server;

[0011] Perform fault analysis on the data packet to obtain the abnormal forwarding reason of the abnormal session.

[0012] Optionally, the above method, if the forwarding state of a session is monitored to be abnormal, further includes:

[0013] Generate alarm information of the abnormal session.

[0014] Optionally, the above method, after performing fault analysis on the data packet to obtain the abnormal forwarding cause of the abnormal session, further comprises:

[0015] The forwarding abnormal reason of the abnormal session is sent to the front-end interface for display.

[0016] Optionally, the above method, after performing fault analysis on the data packet to obtain the abnormal forwarding cause of the abnormal session, further comprises:

[0017] Generate a fault handling log for the abnormal session.

[0018] The second aspect of the present application discloses a device for processing network transmission anomalies, comprising:

[0019] A monitoring unit, used to monitor the forwarding status of each session;

[0020] An acquisition unit, configured to acquire session information of an abnormal session if an abnormal forwarding state of a session is detected;

[0021] A determination unit, configured to traverse the session forwarding list of each server based on the session information, and determine the server that forwards the abnormal session;

[0022] A capture unit, configured to capture a data packet corresponding to the session information on the server based on the session information;

[0023] The analyzing unit is used to perform fault analysis on the data packet to obtain the abnormal forwarding reason of the abnormal session.

[0024] Optionally, the above device further includes:

[0025] The information generating unit is used to generate the warning information of the abnormal session.

[0026] Optionally, the above device further includes:

[0027] The sending unit is used to send the forwarding abnormal reason of the abnormal session to the front-end interface for display.

[0028] Optionally, the above device further includes:

[0029] The log generating unit is used to generate a fault handling log of the abnormal session.

[0030] The third aspect of the present application discloses an electronic device, comprising:

[0031] one or more processors;

[0032] a storage device having one or more programs stored thereon;

[0033] When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of the first aspects of the present application.

[0034] A fourth aspect of the present application discloses a computer storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the method described in any one of the first aspects of the present application is implemented.

[0035] It can be seen from the above technical scheme that in a method for processing network transmission anomalies provided by the present application, the forwarding status of each session is monitored. If the forwarding status of a session is monitored to be abnormal, the session information of the abnormal session is obtained. Then, based on the session information, the session forwarding list of each server is traversed to determine the server that forwards the abnormal session. Then, based on the session information, the data packet corresponding to the session information on the server is captured. Finally, the data packet is analyzed for failure to obtain the abnormal forwarding reason of the abnormal session. It can be seen that, by using the method of the present application, by monitoring the forwarding status of each network session, once the forwarding status of a certain session is abnormal, the session information of the abnormal session is obtained, and the server that forwards the abnormal session is quickly located based on the session information, and the data packet corresponding to the session information on the server is automatically captured for fault analysis, and the abnormal forwarding reason of the abnormal session is obtained, so as to realize the rapid location and analysis of the fault. It solves the problem in the prior art that when a certain session fails when forwarding through the gateway cluster, it is impossible to quickly locate which gateway server in the gateway cluster has a problem, and it is necessary to manually execute the corresponding packet capture command to obtain the data packet, and the timeliness of fault processing is low. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying any creative work.

[0037] Figure 1 A flowchart of a method for processing network transmission anomalies disclosed in an embodiment of the present application;

[0038] Figure 2 A schematic diagram of a device for processing network transmission anomalies disclosed in another embodiment of the present application;

[0039] Figure 3A schematic diagram of an electronic device disclosed in another embodiment of the present application. DETAILED DESCRIPTION

[0040] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0041] In this application, the terms "comprises", "comprising" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprising a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element.

[0042] Furthermore, in this document, relational terms such as first and second, etc. are used only to distinguish one entity or operation from another entity or operation, but do not necessarily require or imply any such actual relationship or order between these entities or operations.

[0043] The present application provides a method for processing network transmission anomalies, specifically: Figure 1 As shown, specifically including:

[0044] S101: Monitor the forwarding status of each session.

[0045] It should be noted that when network transmission is performed through the virtual gateway server, the forwarding status of each network session is monitored in real time to quickly capture abnormal situations.

[0046] S102: If it is monitored that the forwarding state of a session is abnormal, obtain session information of the abnormal session.

[0047] It should be noted that if the forwarding state of a session is monitored to be abnormal, for example, a cloud server cannot access a service IP, or an abnormal situation occurs, then the session information of the abnormal session is obtained. The session information includes information such as the abnormal source IP and the target IP.

[0048] Optionally, in another embodiment of the application of this company, after monitoring that the forwarding state of a session is abnormal in step S102, the following may also be included:

[0049] Generates alarm information for abnormal sessions.

[0050] It should be noted that when a network session forwarding is abnormal, an alarm message of the abnormal session is generated to remind the staff that the current network session forwarding is abnormal, so that the staff can intervene to handle the abnormal situation through other means when necessary.

[0051] S103: Based on the session information, traverse the session forwarding list of each server to determine the server that forwards the abnormal session.

[0052] It should be noted that after obtaining the session information of the abnormal session, the session forwarding lists of each virtual gateway server are traversed based on the obtained session information until a hit is found in the forwarding session table of a virtual gateway server, thereby determining the virtual gateway server that forwards the abnormal session.

[0053] S104: Based on the session information, capture the data packet corresponding to the session information on the server.

[0054] It should be noted that after determining the virtual gateway server that forwards the abnormal session, based on the abnormal source IP, target IP and other information in the session information, and according to the preset protocol, packet volume and other parameters, the data packet corresponding to the session information on the virtual gateway server is captured, and the abnormal forwarding message is mirrored.

[0055] S105: Analyze the data packet for faults and obtain the abnormal forwarding reason of the abnormal session.

[0056] It should be noted that after capturing the data packets corresponding to the session information on the virtual gateway server, the data packets are analyzed through the fault analysis tool to obtain the forwarding abnormality cause of the abnormal session. In this way, the operation and maintenance personnel can perform targeted fault repairs and quickly handle the abnormality based on the located forwarding abnormality cause.

[0057] Optionally, in another embodiment of the present application, after executing step S105, the following may also be included:

[0058] The forwarding exception reason of the abnormal session is sent to the front-end interface for display.

[0059] It should be noted that after determining the abnormal forwarding cause of the abnormal session, information about the abnormal forwarding cause of the abnormal session is generated and sent to the front-end interface for display, so that the operation and maintenance personnel can quickly understand the abnormal cause.

[0060] Optionally, in another embodiment of the present application, after executing step S105, the following may also be included:

[0061] Generates troubleshooting logs for abnormal sessions.

[0062] It should be noted that after determining the abnormal forwarding cause of the abnormal session, a fault handling log of the abnormal session is generated to record the detailed record of the abnormal session handling to facilitate subsequent data query.

[0063] In a method for processing network transmission anomalies provided by the present application, the forwarding status of each session is monitored. If the forwarding status of a session is monitored to be abnormal, the session information of the abnormal session is obtained. Then, based on the session information, the session forwarding list of each server is traversed to determine the server that forwards the abnormal session. Then, based on the session information, the data packet corresponding to the session information on the server is captured. Finally, the data packet is analyzed for failure to obtain the abnormal forwarding reason of the abnormal session. It can be seen that, by using the method of the present application, by monitoring the forwarding status of each network session, once the forwarding status of a certain session is abnormal, the session information of the abnormal session is obtained, and the server that forwards the abnormal session is quickly located based on the session information, and the data packet corresponding to the session information on the server is automatically captured for fault analysis, and the abnormal forwarding reason of the abnormal session is obtained, so as to realize the rapid location and analysis of the fault. It solves the problem in the prior art that when a certain session fails when forwarding through the gateway cluster, it is impossible to quickly locate which gateway server in the gateway cluster has a problem, and it is necessary to manually execute the corresponding packet capture command to obtain the data packet, and the timeliness of fault processing is low.

[0064] Another embodiment of the present application further provides a device for processing network transmission anomalies, specifically, Figure 2 As shown, including:

[0065] The monitoring unit 201 is used to monitor the forwarding status of each session.

[0066] The acquisition unit 202 is configured to acquire session information of the abnormal session if it is monitored that the forwarding state of a session is abnormal.

[0067] The determination unit 203 is used to traverse the session forwarding list of each server based on the session information, and determine the server that forwards the abnormal session.

[0068] The capture unit 204 is used to capture data packets corresponding to the session information on the server based on the session information.

[0069] The analyzing unit 205 is used to perform fault analysis on the data packet to obtain the abnormal forwarding reason of the abnormal session.

[0070] In this embodiment, the specific execution process of the monitoring unit 201, the acquisition unit 202, the determination unit 203, the capture unit 204 and the analysis unit 205 can be found in the corresponding Figure 1 The content of the method embodiment will not be repeated here.

[0071] In a network transmission abnormality processing device provided by the present application, the monitoring unit 201 monitors the forwarding status of each session. If the forwarding status of a session is monitored to be abnormal, the acquisition unit 202 acquires the session information of the abnormal session. Then the determination unit 203 traverses the session forwarding list of each server based on the session information to determine the server that forwards the abnormal session. The capture unit 204 captures the data packet corresponding to the session information on the server based on the session information. Finally, the analysis unit 205 performs fault analysis on the data packet to obtain the abnormal forwarding cause of the abnormal session. It can be seen that by using the method of the present application, by monitoring the forwarding status of each network session, once the forwarding status of a certain session is abnormal, the session information of the abnormal session is obtained, and the server that forwards the abnormal session is quickly located based on the session information. At the same time, the data packet corresponding to the session information on the server is automatically captured for fault analysis, and the abnormal forwarding cause of the abnormal session is obtained, so as to realize the rapid location and analysis of the fault. The present invention solves the problem that when a session fails while being forwarded through the gateway cluster, it is impossible to quickly locate which gateway server in the gateway cluster has the problem, and it is necessary to manually execute the corresponding packet capture command to obtain the data packet, resulting in low timeliness of fault handling.

[0072] Optionally, in another embodiment of the present application, the above-mentioned network transmission abnormality processing device may further include:

[0073] The information generating unit is used to generate alarm information of abnormal sessions.

[0074] In this embodiment, the specific execution process of the information generation unit can refer to the corresponding method embodiment content above, which will not be repeated here.

[0075] Optionally, in another embodiment of the present application, the above-mentioned network transmission abnormality processing device may further include:

[0076] The sending unit is used to send the forwarding abnormal reason of the abnormal session to the front-end interface for display.

[0077] In this embodiment, the specific execution process of the sending unit can refer to the corresponding method embodiment content above, which will not be repeated here.

[0078] Optionally, in another embodiment of the present application, the above-mentioned network transmission abnormality processing device may further include:

[0079] The log generation unit is used to generate a fault handling log for abnormal sessions.

[0080] In this embodiment, the specific execution process of the log generation unit can refer to the corresponding method embodiment content above, which will not be repeated here.

[0081] Another embodiment of the present application further provides an electronic device, such as Figure 3 As shown, specifically including:

[0082] One or more processors 301 .

[0083] The storage device 302 stores one or more programs.

[0084] When one or more programs are executed by one or more processors 301 , the one or more processors 301 implement any one of the methods in the above embodiments.

[0085] Another embodiment of the present application further provides a computer storage medium on which a computer program is stored, wherein when the computer program is executed by a processor, any one of the methods in the above embodiments is implemented.

[0086] It should be noted that in the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by an instruction execution system, device or equipment or used in combination with an instruction execution system, device or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0087] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0088] Another embodiment of the present application provides a computer program product. When the computer program product is executed, it is used to perform any of the above-mentioned system performance evaluation methods.

[0089] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program contains a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device, or installed from a ROM. When the computer program is executed by a processing device, the above-mentioned functions defined in the method of the embodiment of the present disclosure are executed.

[0090] Although the subject matter has been described in language specific to structural features and / or methodological logical actions, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or actions described above. On the contrary, the specific features and actions described above are merely example forms of implementing the claims.

[0091] Although several specific implementation details are included in the above discussion, these should not be interpreted as limiting the scope of the present disclosure. Certain features described in the context of a separate embodiment can also be implemented in a single embodiment in combination. On the contrary, the various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination.

[0092] The above description is only a preferred embodiment of the present disclosure and an explanation of the technical principles used. Those skilled in the art should understand that the scope of disclosure involved in the present disclosure is not limited to the technical solutions formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the above disclosed concept. For example, the above features are replaced with the technical features with similar functions disclosed in the present disclosure (but not limited to) by each other to form a technical solution.

[0093] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system or system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. The system and system embodiments described above are merely schematic, in which the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules can be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0094] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0095] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to the embodiments shown herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for processing network transmission anomalies, characterized in that: include: Monitor the forwarding status of each session; If the forwarding state of a session is monitored to be abnormal, the session information of the abnormal session is obtained; the session information at least includes the abnormal source IP and target IP; Based on the session information, traverse the session forwarding list of each virtual gateway server to determine the virtual gateway server that forwards the abnormal session; Based on at least the abnormal source IP and target IP included in the session information, as well as the preset protocol and packet volume, capture the data packet corresponding to the session information from the virtual gateway server that forwards the abnormal session; Perform fault analysis on the data packet to obtain the abnormal forwarding reason of the abnormal session.

2. The method according to claim 1, characterized in that If the forwarding state of a session is monitored to be abnormal, the method further includes: Generate alarm information of the abnormal session.

3. The method according to claim 1, characterized in that After performing fault analysis on the data packet to obtain the abnormal forwarding cause of the abnormal session, the method further includes: The forwarding abnormal reason of the abnormal session is sent to the front-end interface for display.

4. The method according to claim 1, characterized in that: After performing fault analysis on the data packet to obtain the abnormal forwarding cause of the abnormal session, the method further includes: Generate a fault handling log for the abnormal session.

5. A device for processing network transmission anomalies, characterized in that: include: A monitoring unit, used to monitor the forwarding status of each session; An acquisition unit, configured to acquire session information of an abnormal session if an abnormal forwarding state of a session is monitored; the session information at least includes an abnormal source IP and a target IP; A determination unit, configured to traverse the session forwarding list of each virtual gateway server based on the session information, and determine the virtual gateway server that forwards the abnormal session; A capture unit, configured to capture data packets corresponding to the session information from the virtual gateway server that forwards the abnormal session based on at least the abnormal source IP and target IP included in the session information, as well as a preset protocol and packet volume; The analyzing unit is used to perform fault analysis on the data packet to obtain the abnormal forwarding reason of the abnormal session.

6. The device according to claim 5, characterized in that If the forwarding state of a session is monitored to be abnormal, the method further includes: The information generating unit is used to generate the warning information of the abnormal session.

7. The device according to claim 5, characterized in that After performing fault analysis on the data packet to obtain the abnormal forwarding cause of the abnormal session, the method further includes: The sending unit is used to send the forwarding abnormal reason of the abnormal session to the front-end interface for display.

8. The device according to claim 5, characterized in that After performing fault analysis on the data packet to obtain the abnormal forwarding cause of the abnormal session, the method further includes: The log generating unit is used to generate a fault handling log of the abnormal session.

9. An electronic device, characterized in that: include: one or more processors; a storage device having one or more programs stored thereon; When the one or more programs are executed by the one or more processors, the one or more processors are enabled to implement the method according to any one of claims 1 to 4.

10. A computer storage medium, characterized in that: A computer program is stored thereon, wherein when the computer program is executed by a processor, the method according to any one of claims 1 to 4 is implemented.

Images