A detection system, method, device, and medium for detecting packet capture indicators without omission

Abstract

An embodiment of the present invention discloses a detection system, method, device, and medium for a packet capture indicator without omission. The system includes: a flow probe, a 10 Gigabit Ethernet tester, and a frequency counter, wherein: the test data packet output port of the 10 Gigabit Ethernet tester is connected to the input port of a high-precision data acquisition card of the flow probe; the packet capture counting signal output end of the high-precision data acquisition card of the flow probe is connected to channel A of the frequency counter, and the frequency counter is used to count and record according to the output level of the high-precision data acquisition card of the flow probe.

Description

Technical Field

[0001] The present invention relates to the fields of network operation and maintenance and traffic control, and in particular to a detection system, method, device and medium for detecting packet capture indicators without omission. Background Art

[0002] With the convergence of service diversification, service convergence, network openness, and intelligent terminals, network coverage has expanded dramatically, new applications have emerged in large numbers, and network traffic has surged. Network transmission bandwidth has expanded from hundreds / gigabits to 10 Gigabits. However, current network traffic monitoring capabilities are limited to sub-gigabits, and traffic monitoring for high-bandwidth transmission links is still lacking. Furthermore, existing technologies lack the granularity to capture diverse applications and critical services. Furthermore, current traffic monitoring and detection equipment deployed in networks can only monitor single nodes and local information, and the information obtained from the network is relatively isolated. Correlation analysis and comprehensive presentation of information from multiple points along the link are still lacking, making it impossible to achieve full, global traffic monitoring. This inability to provide a comprehensive, real-time data foundation for rapidly locating network faults and comprehensively assessing network operational status is also lacking. Furthermore, there is no unified, application-specific standard for traffic monitoring tailored to the specific needs of aerospace business networks. Various network monitoring methods are developed independently and lack synergy. Therefore, research on high-bandwidth, global traffic perception and monitoring technologies and the development of network traffic monitoring standards are urgent.

[0003] Internationally, the IETF's IP Performance Metrics Working Group (IPPMWG) has proposed principles and an overall framework for defining performance metrics. It has also defined indicators for evaluating the quality, performance, and reliability of IP network data transmission services, such as connectivity, one-way packet loss, one-way latency, and round-trip latency. Other indicators are also in the process of being standardized, but their specific implementation methods and applications are beyond the scope of the IPPMWG's definition.

[0004] ITU-T Study Group 13 (SG13) also proposed Recommendation Y.1540 (formerly L380), which defines four parameters for measuring IP packet transmission performance over IP networks: speed, accuracy, reliability, and availability. It also proposed Recommendation Y.1541 (formerly L381), which specifies IP performance and availability indicators and allocations, and categorizes IP services into six QoS categories.

[0005] At the same time, other international organizations have also proposed various testing infrastructures. For example, Surveyor is a network testing infrastructure based on IPPMWG standards, proposed by Advanced Network & Services and other organizations. It can measure the performance of Internet paths between participating organizations and also proposes methods and tools for analyzing performance data. MMI, a project initiated by the NSF and funded by DARPA, proposes a distributed, scalable, and dynamic network testing infrastructure based on probes. Other projects, such as Ripe, AMP, and PingER, are also related to network testing. Summary of the Invention

[0006] The technical problem to be solved by the present invention is to determine the accuracy and precision level of time in a high-precision data acquisition card. High-precision time is the basis for flow probes to monitor flow. Whether it is timestamps or flow monitoring indicator calculations, high-precision clocks are indispensable. Therefore, the present invention proposes a detection system, method, equipment, and medium for packet capture indicators without omission.

[0007] According to one aspect of the present invention, a detection system for packet capture indicators without omission is proposed, comprising: a flow probe, a 10 Gigabit Ethernet tester, and a frequency counter, wherein:

[0008] The test data packet output port of the 10 Gigabit Ethernet tester is connected to the input port of the flow probe high-precision data acquisition card;

[0009] The packet capture counting signal output terminal of the flow probe high-precision data acquisition card is connected to channel A of the frequency counter, and the frequency counter is used to count and record according to the output level of the flow probe high-precision data acquisition card.

[0010] The frequency counter is used to count the received packet capture counting signals.

[0011] According to another aspect of the present invention, a method for detecting a packet capture indicator without omission is provided, comprising:

[0012] Step S101: Connect the test data packet output port of the 10 Gigabit Ethernet tester to the input port of the high-precision data acquisition card of the flow probe; connect the packet count signal output end of the high-precision data acquisition card of the flow probe to channel A of the frequency counter;

[0013] Step S102, setting initial test parameters of the 10 Gigabit Ethernet tester, wherein the initial test parameters include one or more of the following parameters: packet length, packet frequency, and number of packets sent; setting the frequency of outputting the number of data packets collected by the flow probe high-precision data acquisition card for the packet counting signal; and setting the output level of the flow probe high-precision data acquisition card after outputting a packet counting signal to be opposite to the previous level;

[0014] Step S103, causing the 10 Gigabit Ethernet tester to start sending data packets, the flow probe high-precision data acquisition card to collect data packets, and outputting a packet capture counting signal to a frequency counter according to the setting of step S102, so that the frequency counter counts and records according to the output level of the flow probe high-precision data acquisition card;

[0015] Step S104, after the actual number of packets sent reaches the preset number of packets sent, read and record the count value, frequency value and data recording trend chart on the frequency counter, and then reset the frequency counter;

[0016] Step S105, gradually increasing the packet frequency value of the 10 Gigabit Ethernet tester without changing the packet length and the number of packets sent, and returning to step S103 until the data packets sent by the 10 Gigabit Ethernet tester occupy the entire network bandwidth;

[0017] Step S106, restoring the initial test parameters of the 10 Gigabit Ethernet tester, gradually decreasing the packet length value of the 10 Gigabit Ethernet tester until it reaches a preset packet length value, wherein, each time the packet length value is decreased to a certain value, the packet frequency value is gradually increased based on the packet frequency set in step S2 in the initial test parameters without changing the packet length or the number of packets sent, and steps S103 and S104 are repeated until the sent data packets occupy the entire network bandwidth;

[0018] Step S107 , analyzing the count value set obtained by the frequency counter to obtain a complete packet capture indicator detection result.

[0019] In one embodiment of the present invention, in step S103, the frequency counter increases the count value by one each time it detects a rising edge from a low level to a high level.

[0020] In one embodiment of the present invention, step S107 includes:

[0021] The count value set obtained by the frequency counter during a complete detection period is analyzed to obtain a complete packet capture indicator detection result.

[0022] In one embodiment of the present invention, analyzing the set of count values ​​obtained by the frequency counter during a complete detection period to obtain a complete packet capture indicator detection result includes:

[0023] If the number of values ​​in the count value set obtained by the frequency counter is less than a preset threshold, it indicates that data packets are lost and the requirement of full packet capture is not met;

[0024] If the number of values ​​in the count value set obtained by the frequency counter is greater than the preset threshold, it indicates that the detection process is abnormal, non-test data packets are collected, and re-detection is required.

[0025] In one embodiment of the present invention, the preset threshold value may be set to the number of packets sent by the 10 Gigabit Ethernet tester / 2*the output frequency of the packet capture counting signal of the high-precision data acquisition card.

[0026] According to another aspect of the present invention, an electronic device is provided, comprising a memory and a processor; the memory is used to store one or more computer instructions, wherein the one or more computer instructions are executed by the processor to implement the above method steps.

[0027] According to another aspect of the present invention, a computer-readable storage medium is provided, on which computer instructions are stored, wherein the computer instructions implement the above method steps when executed by a processor.

[0028] According to another aspect of the present invention, a computer program product is provided, comprising a computer program / instruction, wherein the computer program / instruction implements the above method steps when executed by a processor.

[0029] The advantages and innovations of the present invention over the prior art are as follows:

[0030] 1. Using a third-party 10 Gigabit Ethernet tester to send data packets ensures the signal source is reliable. Using a frequency counter to count data can ensure the counting is reliable. These two dimensions ensure that the data packets obtained from the test are complete and reliable.

[0031] 2. The upper limit of the data packet capture capability of the high-precision data acquisition card is a prerequisite for verifying the complete packet capture indicator. The solution of the present invention is based on the direct connection between the 10 Gigabit Ethernet tester and the high-precision data acquisition card, which can ensure the accuracy of the verification environment, guarantee the integrity and accuracy of the traffic perception monitoring information, and provide data support for the precise regulation of resources.

[0032] 3. The larger the packet frequency value, the more difficult it is to process data and the higher the packet loss rate. Therefore, it is important to explore the upper limit of the packet frequency at which the traffic probe does not experience packet loss in different scenarios. In addition, since the accuracy and precision of the measurement are determined by third-party equipment, the fairness, impartiality and testability of the detection method can be guaranteed.

[0033] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the embodiments of the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Other features, purposes and advantages of the embodiments of the present invention will become more apparent through the following detailed description of non-limiting embodiments in conjunction with the accompanying drawings. In the accompanying drawings:

[0035] Figure 1 A schematic structural diagram of a detection system for detecting packet capture indicators without omission according to an embodiment of the present invention is shown;

[0036] Figure 2 A signal connection diagram showing a method for detecting a complete packet capture indicator according to an embodiment of the present invention;

[0037] Figure 3 A flow chart of a method for detecting a complete packet capture indicator according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0038] Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily implement them. In addition, for the sake of clarity, parts not related to the description of the exemplary embodiments are omitted in the accompanying drawings.

[0039] In the embodiments of the present invention, it should be understood that terms such as "including" or "having" are intended to indicate the existence of features, numbers, steps, behaviors, components, parts or their combinations disclosed in this specification, and are not intended to exclude the possibility of one or more other features, numbers, steps, behaviors, components, parts or their combinations existing or being added.

[0040] It should also be noted that, in the absence of conflict, the embodiments and features of the embodiments of the present invention may be combined with each other. The embodiments of the present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0041] Figure 1 A schematic diagram of the structure of a detection system for detecting packet capture indicators without omission according to an embodiment of the present invention is shown. Figure 1 As shown, the detection system for the complete packet capture indicator includes: a flow probe, a 10 Gigabit Ethernet tester and a frequency counter, wherein:

[0042] The test data packet output port of the 10 Gigabit Ethernet tester is connected to the input port of the flow probe high-precision data acquisition card;

[0043] The packet capture counting signal output terminal of the flow probe high-precision data acquisition card is connected to channel A of the frequency counter, and the frequency counter is used to count and record according to the output level of the flow probe high-precision data acquisition card.

[0044] Figure 2 A signal connection diagram showing a method for detecting a packet capture indicator without omission according to an embodiment of the present invention is shown. Figure 3 A flow chart of a method for detecting a packet capture indicator without omission according to an embodiment of the present invention is shown. Figure 2 and Figure 3 As shown, the method for detecting the complete packet capture indicator includes the following steps S101-S107:

[0045] In step S101: connect the test data packet output port of the 10 Gigabit Ethernet tester to the input port of the flow probe high-precision data acquisition card; connect the packet count signal output end of the flow probe high-precision data acquisition card to channel A of the frequency counter;

[0046] In step S102: initial test parameters of the 10 Gigabit Ethernet tester are set, wherein the initial test parameters include one or more of the following parameters: packet length, packet frequency, and number of packets sent; the output frequency of the packet capture counting signal of the flow probe high-precision data acquisition card is set; and the output level of the flow probe high-precision data acquisition card after outputting a packet capture counting signal is set to be opposite to the previous level;

[0047] Among them, the packet length, also known as the frame length, refers to the length of the data packet, with a minimum of 64 bytes and a maximum of 1518 bytes; the packet frequency refers to the number of data packets sent per second, also known as the number of frames, ranging from a minimum of 1 packet / second to several million packets / second; the number of packets sent refers to the number of data packets that need to be sent in each detection cycle, and it can also be considered that each time a specified number of data packets are sent, it means that a detection is completed. The number of packets sent can be, for example, 200,000 packets, 1,000,000 packets, 2,000,000 packets, and so on.

[0048] In one embodiment of the present invention, the test parameters of the 10 Gigabit Ethernet tester can be set to: packet length of 1500 bytes, packet frequency of 1000 packets / second, and number of packets sent of 200,000 packets; the output frequency of the packet capture counting signal of the traffic probe high-precision data acquisition card can be set to output a packet capture counting signal for every 100 data packets collected.

[0049] In step S103: the 10 Gigabit Ethernet tester starts sending data packets, the flow probe high-precision data acquisition card collects data packets, and outputs a packet capture counting signal to the frequency counter according to the setting of step S102, so that the frequency counter counts and records according to the output level of the flow probe high-precision data acquisition card;

[0050] The frequency counter counts and records according to the output level of the flow probe high-precision data acquisition card. Each time the frequency counter detects a rising edge from a low level to a high level, the count value of the frequency counter increases by one. That is, each time a predetermined number of data packets are sent, the count value of the frequency counter increases by one. Conversely, the count value of the frequency counter increases by one, indicating that the sending of a predetermined number of data packets has been monitored. For example, if the flow probe high-precision data acquisition card captures and counts a packet every time it collects 100 data packets, and the output level after outputting a packet count signal is opposite to the previous one, that is, after the flow probe high-precision data acquisition card captures and outputs the packet count signal twice, the frequency counter will detect a rising edge from a low level to a high level, and the count value will increase by one. At this time, the number of data packets collected by the flow probe high-precision data acquisition card packet count signal is 200.

[0051] In step S104: after the actual number of packets sent reaches the preset number of packets sent, the count value, frequency value and data recording trend chart on the frequency counter are read and recorded, and then the frequency counter is cleared;

[0052] In step S105: without changing the packet length and the number of packets sent, gradually increase the packet frequency value of the 10 Gigabit Ethernet tester, and return to step S103 until the data packets sent by the 10 Gigabit Ethernet tester occupy the entire network bandwidth;

[0053] Network bandwidth can be understood as the maximum data transmission capacity of a data transmission channel. For example, a 10G network can transmit a maximum of 10,000 megabits per second (10Gbps). Dividing this by 8 converts it to bytes, resulting in a maximum of 1,250 megabytes. If each packet is 1024 bytes long, this translates to a maximum of 1,197,318 packets that can be transmitted. Transmitting 1024-byte packets at this rate would fully utilize the network bandwidth.

[0054] The packet rate increment step size of the 10 Gigabit Ethernet tester can be set based on actual application needs. As mentioned above, packet rate represents the number of data packets sent per second. A higher packet rate requires the network to transmit more content per second, placing greater demands on network resources. Selecting the packet rate is a crucial aspect of testing. Combined with the packet length, a test table can be generated. The following table lists the parameters for a 10 Gigabit network:

[0055] Test serial number Packet length (bytes) Maximum packet rate (packets / second) 1 64 14,880,952 2 128 8,445,945 3 256 4,528,985 4 512 2,349,624 5 1024 1,197,318 6 1280 961,538 7 1518 812,743

[0056] In actual applications, users can increase the packet rate value according to the packet rate increment sequence shown in the table above. For example, if the initial packet rate is 812743 packets / second, the current packet rate can be increased to 961538 packets / second, and the next packet rate can be increased to 1197318 packets / second.

[0057] In step S106: the initial test parameters of the 10 Gigabit Ethernet tester are restored, and the packet length value of the 10 Gigabit Ethernet tester is gradually reduced to a preset packet length value, such as 64. Each time the packet length value is reduced to a certain value, the packet frequency value is gradually increased based on the packet frequency in the initial test parameters without changing the packet length or the number of packets sent. Steps S103 and S104 are repeated until the sent data packets occupy the entire network bandwidth.

[0058] Among them, the decrement step of the packet length value of the 10 Gigabit Ethernet tester can be set according to the needs of actual application. Similar to the increase of the packet frequency value, the user can also realize the decrement of the packet length value according to the packet length decrement sequence shown in the above table. For example, if the initial packet length is 1518 bytes, the current packet length can be reduced to 1280 bytes, and the next packet length can be further reduced to 1024 bytes.

[0059] In step S107: the count value set obtained by the frequency counter is analyzed to obtain a complete packet capture indicator detection result.

[0060] Among them, according to the output level of the high-precision data acquisition card of the traffic probe, a complete detection period is observed, that is, each time after the preset number of packets are sent, the count value set obtained by the frequency counter, if the number of values ​​in the count value set obtained by the frequency counter is less than the preset threshold, such as the number of packets sent by the 10 Gigabit Ethernet tester / 2*the output frequency of the packet capture counting signal of the high-precision data acquisition card, it means that the data packet has been lost and does not meet the requirement of the no-missing packet capture indicator; if the number of values ​​in the count value set obtained by the frequency counter is greater than the preset threshold, that is, the number of packets sent by the 10 Gigabit Ethernet tester / 2*the output frequency of the packet capture counting signal of the high-precision data acquisition card, it means that the detection process is abnormal, non-test data packets have been collected, and re-detection is required.

[0061] For example, if the output frequency of the packet counting signal of the flow probe high-precision data acquisition card is to output a packet counting signal for every 100 data packets collected, that is, the flow probe high-precision data acquisition card outputs a level signal for every 100 data packets collected, and the polarity is opposite to the level signal output last time, that is, the flow probe high-precision data acquisition card can observe a complete square wave signal every time it collects 200 data packets, indicating that the flow probe high-precision data acquisition card has collected 200 data packets. Then, if 200,000 data packets are sent, the count value that should theoretically be recorded is 1000. If the number of count values ​​in the count value set is less than 1000, it means that the data packet has been lost and the requirement of the no-missing packet capture indicator is not met. If the number of count values ​​in the count value set is greater than 1000, it means that the detection process is abnormal, and non-test data packets have been collected. The detection should be performed again and the count value should be re-recorded.

[0062] At this point, the detection of all packet capture indicators can be completed.

[0063] An embodiment of the present invention further discloses an electronic device, which includes a memory and a processor; wherein:

[0064] The memory is used to store one or more computer instructions, wherein the one or more computer instructions are executed by the processor to implement any of the above method steps.

[0065] An embodiment of the present invention further discloses a computer-readable storage medium, on which computer instructions are stored. When the computer instructions are executed by a processor, any of the above method steps is implemented.

[0066] An embodiment of the present invention further discloses a computer program product, including a computer program / instruction, wherein the computer program / instruction implements the above method steps when executed by a processor.

[0067] The above description is merely an illustration of the preferred embodiments of the present invention and the technical principles employed. Those skilled in the art should understand that the scope of the invention involved in the embodiments of the present invention is not limited to the technical solutions formed by the specific combination of the above-mentioned technical features, but should also encompass other technical solutions formed by any combination of the above-mentioned technical features or their equivalents without departing from the inventive concept. For example, a technical solution formed by replacing the above-mentioned features with (but not limited to) technical features with similar functions disclosed in the embodiments of the present invention.

Claims

1. A method for detecting packet capture indicators without omission, comprising: Step S101, connecting the test data packet output port of the 10 Gigabit Ethernet tester to the input port of the high-precision data acquisition card of the traffic probe; Connect the packet counting signal output terminal of the flow probe high-precision data acquisition card to channel A of the frequency counter; Step S102, setting initial test parameters of the 10 Gigabit Ethernet tester, wherein the initial test parameters include one or more of the following parameters: packet length, packet frequency, and number of packets sent; setting the frequency of outputting the number of data packets collected by the flow probe high-precision data acquisition card for the packet counting signal; and setting the output level of the flow probe high-precision data acquisition card after outputting a packet counting signal to be opposite to the previous level; Step S103, causing the 10 Gigabit Ethernet tester to start sending data packets, the flow probe high-precision data acquisition card to collect data packets, and outputting a packet capture counting signal to a frequency counter according to the setting of step S102, so that the frequency counter counts and records according to the output level of the flow probe high-precision data acquisition card; Step S104, after the actual number of packets sent reaches the preset number of packets sent, read and record the count value, frequency value and data recording trend chart on the frequency counter, and then reset the frequency counter; Step S105, gradually increasing the packet frequency value of the 10 Gigabit Ethernet tester without changing the packet length and the number of packets sent, and returning to step S103 until the data packets sent by the 10 Gigabit Ethernet tester occupy the entire network bandwidth; Step S106, restoring the initial test parameters of the 10 Gigabit Ethernet tester, gradually decreasing the packet length value of the 10 Gigabit Ethernet tester until it reaches a preset packet length value, wherein, each time the packet length value is decreased to a certain value, the packet frequency value is gradually increased based on the packet frequency set in step S2 in the initial test parameters without changing the packet length or the number of packets sent, and steps S103 and S104 are repeated until the sent data packets occupy the entire network bandwidth; Step S107 , analyzing the count value set obtained by the frequency counter to obtain a complete packet capture indicator detection result. 2 . The method according to claim 1 , wherein in step S103 , the frequency counter increases the count value by one each time it detects a rising edge from a low level to a high level.

3. The method according to claim 1 or 2, wherein step S107 comprises: The count value set obtained by the frequency counter during a complete detection period is analyzed to obtain a complete packet capture indicator detection result.

4. The method according to claim 3, wherein analyzing the set of count values ​​obtained by the frequency counter during a complete detection period to obtain a complete packet capture indicator detection result comprises: If the number of values ​​in the count value set obtained by the frequency counter is less than a preset threshold, it indicates that data packets are lost and the requirement of full packet capture is not met; If the number of values ​​in the count value set obtained by the frequency counter is greater than the preset threshold, it indicates that the detection process is abnormal, non-test data packets are collected, and re-detection is required.

5. The method according to claim 4, wherein The preset threshold is the number of packets sent by the 10 Gigabit Ethernet tester / 2*the output frequency of the packet capture counting signal of the high-precision data acquisition card.

6. A detection system for a complete packet capture indicator, for executing the method according to any one of claims 1 to 5, the system comprising: Traffic probe, 10 Gigabit Ethernet tester, and frequency counter, including: The test data packet output port of the 10 Gigabit Ethernet tester is connected to the input port of the flow probe high-precision data acquisition card; The packet capture counting signal output terminal of the flow probe high-precision data acquisition card is connected to channel A of the frequency counter, and the frequency counter is used to count and record according to the output level of the flow probe high-precision data acquisition card.

7. An electronic device comprising a memory and a processor; wherein: The memory is configured to store one or more computer instructions, wherein the one or more computer instructions are executed by the processor to implement the method steps according to any one of claims 1 to 5.

8. A computer-readable storage medium having computer instructions stored thereon, wherein: When the computer instructions are executed by a processor, the method steps described in any one of claims 1 to 5 are implemented.

9. A computer program product comprising a computer program / instructions, wherein: When the computer program / instructions are executed by a processor, the method steps according to any one of claims 1 to 5 are implemented.

Images