Probe Testing Method, Device, Electronic Device, and Storage Medium
By building a test topology for the simulation test environment, using the simulator to generate data packets and control the packet rate and transaction number, the problem of probe performance testing in the prior art is solved by limiting by bypass audit equipment, and a more accurate probe performance evaluation is achieved.
Patent Information
- Application Number
- CN202211718218.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-12-29
- Publication Date
- 2025-08-01
- Estimated Expiration
- 2042-12-29
AI Technical Summary
The existing probe performance testing methods are limited by the performance of bypass audit equipment, resulting in low accuracy of test results and cannot truly reflect the forwarding capability of the probe.
By building a test topology for the simulation test environment, using the simulator to generate data packets and control the packet transmission rate and transaction number, combining the mirror server and the probe server, we judge the reception and forwarding rate of the probe server, and adjust the parameters until the probe server receives packets normally, which is independent of the limitations of the bypass audit equipment.
It improves the accuracy of probe performance testing, can truly reflect the performance of the probe, and provides more reliable test results independently of the reception and audit capabilities of the bypass audit equipment.
Smart Images

Figure CN115883419B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of computers, and more particularly, to a probe test method, apparatus, electronic device, and storage medium. Background Art
[0002] Bypass audit devices have entered major enterprises. Among them, bypass audit devices are used to obtain network traffic in a listening manner without affecting the network environment, and provide the received data for takeover, parsing, display, and retention, providing management convenience for users. However, bypass audit devices also have certain limitations. If they cannot enter the traffic of the monitored data, they cannot obtain it. To obtain data in a non-monitored environment, it is necessary to implement it through a third-party program, that is, through a probe tool (abbreviation: Agent or proxy) to obtain network traffic and forward the traffic to the bypass audit device for the bypass audit device to parse and count.
[0003] Furthermore, when using a probe tool to collect data, it is necessary to test the performance of the probe tool to make the performance of the probe tool meet the corresponding requirements. Currently, the existing probe performance test methods are mainly based on bypass audit devices to check whether the number of packet forwards is consistent with the sent packets to judge the performance of the probe. However, the test results of this method are limited by the performance of the bypass audit device itself, and its accuracy is low. For example, assume that the maximum performance of the bypass audit device can only receive 100 packets forwarded by the probe tool, but the actual forwarding ability of the probe tool is 150. Then, taking the reception of 100 packets as the performance test result of the probe tool is obviously inconsistent with the true performance of the probe. Summary of the Invention
[0004] The purpose of the embodiments of this application is to provide a probe test method, apparatus, electronic device, and storage medium for testing the performance of a probe and improving the accuracy of the probe performance test results.
[0005] In a first aspect, the present invention provides a probe test method. The method is applied to a test topology, and the test topology is a simulation test environment constructed based on the physical environment where the bypass audit device is located. The test topology includes a simulator, a mirror server, and a probe server. The method includes:
[0006] Sending a first configuration instruction to the simulator to enable the simulator to configure an application layer protocol based on the first configuration instruction and use the application layer protocol to generate data packets;
[0007] Send a second configuration instruction to the simulator, so that the simulator sets the packet sending rate, the number of transactions, and the sending time parameter based on the second configuration instruction, and enables the simulator to send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameter, and the mirror server;
[0008] Obtain the number of received packets, the receiving rate, and the forwarding rate of the probe server;
[0009] Judge whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate;
[0010] When the probe server drops packets, send a first modification instruction to the simulator, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0011] The method of the first aspect of this application is based on a test topology structure and can test the real performance of the probe. Among them, by sending a first configuration instruction to the simulator, the simulator can configure the application layer protocol based on the first configuration instruction and use the application layer protocol to generate data packets. By sending a second configuration instruction to the simulator, the simulator can set the packet sending rate, the number of transactions, and the sending time parameter based on the second configuration instruction, and enable the simulator to send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameter, and the mirror server. Furthermore, by obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server, it can be judged whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate. Furthermore, when the probe server drops packets, a first modification instruction is sent to the simulator, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0012] Compared with the prior art, this application controls the packet sending parameters through the simulator, and thus can make the test result of the probe not limited by the receiving ability and auditing ability of the bypass auditing device, thereby improving the accuracy of the test result.
[0013] In an alternative embodiment, the method further includes:
[0014] When the probe server receives packets normally, record the operating parameters of the probe server, where the operating parameters of the probe server include the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameter, and the memory performance parameter.
[0015] In the above optional embodiment, when the probe server receives packets normally, by recording the operating parameters of the probe server, namely the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameters, and the memory performance parameters, it is convenient for users to understand the performance and resource occupancy of the probe during normal operation.
[0016] In an optional embodiment, the method further includes:
[0017] When the probe server does not lose packets, send a second modification instruction to the simulator, so that the simulator adjusts the sending time parameter based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
[0018] In the above optional embodiment, when the probe server does not lose packets, by sending a second modification instruction to the simulator, it is further possible to make the simulator adjust the sending time parameter based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
[0019] In an optional embodiment, the test topology further includes a bypass auditing device, and the method further includes:
[0020] When the receiving rate and the forwarding rate are stable, obtain the number of review events of the bypass auditing device;
[0021] Judge whether the number of review events of the bypass auditing device is consistent with the number of transactions of the simulator. If so, check the bypass auditing device.
[0022] In the above optional embodiment, when the receiving rate and the forwarding rate are stable, by obtaining the number of review events of the bypass auditing device, it is further possible to judge whether the number of review events of the bypass auditing device is consistent with the number of transactions of the simulator, and further, when they are inconsistent, check the bypass auditing device.
[0023] In a second aspect, the present invention provides a probe test device, which is applied to a test topology. The test topology is a simulation test environment constructed based on the physical environment where the bypass auditing device is located. The test topology includes a simulator, a mirror server, and a probe server. The device includes:
[0024] A first sending module, configured to send a first configuration instruction to the simulator, so that the simulator configures the application layer protocol based on the first configuration instruction, and the simulator uses the application layer protocol to generate data packets;
[0025] A second sending module, configured to send a second configuration instruction to the simulator, so that the simulator sets a packet sending rate, a number of transactions, and a sending time parameter based on the second configuration instruction, and causes the simulator to send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameter, and the mirror server;
[0026] A first obtaining module, configured to obtain the number of received packets, the receiving rate, and the forwarding rate of the probe server;
[0027] A first judging module, configured to judge whether the probe server loses packets based on the number of received packets, the receiving rate, and the forwarding rate;
[0028] A third sending module, configured to, when the probe server loses packets, send a first modification instruction to the simulator, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0029] The device according to the second aspect of the present application can test the real performance of the probe based on the test topology structure. Among them, by sending a first configuration instruction to the simulator, the simulator can be made to configure the application layer protocol based on the first configuration instruction, and the simulator can use the application layer protocol to generate data packets. By sending a second configuration instruction to the simulator, the simulator can be made to set a packet sending rate, a number of transactions, and a sending time parameter based on the second configuration instruction, and cause the simulator to send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameter, and the mirror server. Furthermore, by obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server, it can be judged whether the probe server loses packets based on the number of received packets, the receiving rate, and the forwarding rate. Furthermore, when the probe server loses packets, a first modification instruction is sent to the simulator, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0030] Compared with the prior art, the present application controls the packet sending parameters through the simulator, so that the test result of the probe can be not limited by the receiving ability and auditing ability of the bypass auditing device, thereby improving the accuracy of the test result.
[0031] In an optional implementation manner, the device further includes:
[0032] A recording module, configured to record the running parameters of the probe server when the probe server receives packets normally, where the running parameters of the probe server include the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameter, and the memory performance parameter.
[0033] In the above optional embodiment, through the recording module, when the probe server receives packets normally, by recording the operating parameters of the probe server, namely the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameters, and the memory performance parameters, it is convenient for the user to understand the performance and resource occupancy of the probe during normal operation.
[0034] In an optional embodiment, the device further includes:
[0035] A fourth sending module, configured to send a second modification instruction to the simulator when the probe server does not lose packets, so that the simulator adjusts the sending time parameter based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
[0036] In the above optional embodiment, through the fourth sending module, when the probe server does not lose packets, a second modification instruction can be sent to the simulator, and then the simulator can be enabled to adjust the sending time parameter based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
[0037] In an optional embodiment, the test topology further includes a bypass audit device, and the device further includes:
[0038] A second obtaining module, configured to obtain the number of review events of the bypass audit device when the receiving rate and the forwarding rate are stable;
[0039] A second judging module, configured to judge whether the number of review events of the bypass audit device is consistent with the number of transactions of the simulator, and if so, check the bypass audit device.
[0040] In the above optional embodiment, through the second obtaining module and the second judging module, when the receiving rate and the forwarding rate are stable, the number of review events of the bypass audit device can be obtained, and then it can be judged whether the number of review events of the bypass audit device is consistent with the number of transactions of the simulator, and then the bypass audit device can be checked when they are inconsistent.
[0041] In a third aspect, the present invention provides an electronic device, including:
[0042] A processor; and
[0043] A memory, configured to store machine-readable instructions, which when executed by the processor, execute the probe test method according to any one of the foregoing embodiments.
[0044] In the third aspect of the present application, the electronic device can test the true performance of the probe based on the test topology by executing the probe test method. Among them, by sending a first configuration instruction to the simulator, the simulator can be made to configure the application layer protocol based on the first configuration instruction and use the application layer protocol to generate data packets. By sending a second configuration instruction to the simulator, the simulator can be made to set the packet sending rate, the number of transactions, and the sending time parameters based on the second configuration instruction, and make the simulator send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameters, and the mirror server. Furthermore, by obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server, it can be determined whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate. Furthermore, when the probe server drops packets, a first modification instruction is sent to the simulator so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0045] Compared with the prior art, the present application controls the packet sending parameters through the simulator, so that the test result of the probe can be not limited by the receiving ability and auditing ability of the bypass auditing device, thereby improving the accuracy of the test result.
[0046] In the fourth aspect, the present invention provides a storage medium storing a computer program, and the computer program is executed by a processor to perform the probe test method according to any one of the foregoing embodiments.
[0047] In the fourth aspect of the present application, the storage medium can test the true performance of the probe based on the test topology by executing the probe test method. Among them, by sending a first configuration instruction to the simulator, the simulator can be made to configure the application layer protocol based on the first configuration instruction and use the application layer protocol to generate data packets. By sending a second configuration instruction to the simulator, the simulator can be made to set the packet sending rate, the number of transactions, and the sending time parameters based on the second configuration instruction, and make the simulator send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameters, and the mirror server. Furthermore, by obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server, it can be determined whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate. Furthermore, when the probe server drops packets, a first modification instruction is sent to the simulator so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0048] Compared with the prior art, the present application controls the packet sending parameters through the simulator, so that the test result of the probe can be not limited by the receiving ability and auditing ability of the bypass auditing device, thereby improving the accuracy of the test result. Description of the Drawings
[0049] To more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings required to be used in the embodiments of the present application. It should be understood that the following drawings only show some embodiments of the present application, and thus should not be regarded as limiting the scope. For those of ordinary skill in the art, without creative efforts, other related drawings can also be obtained based on these drawings.
[0050] Figure 1 is a schematic diagram of a test topology structure disclosed in an embodiment of the present application;
[0051] Figure 2 is a schematic flowchart of a probe test method disclosed in an embodiment of the present application;
[0052] Figure 3 is a schematic structural diagram of a probe test device disclosed in an embodiment of the present application;
[0053] Figure 4 is a schematic structural diagram of an electronic device disclosed in an embodiment of the present application. Detailed implementation manners
[0054] The following will describe the technical solutions in the embodiments of the present application in combination with the drawings in the embodiments of the present application.
[0055] Embodiment 1
[0056] The embodiment of the present application provides a test topology structure. Among them, the test topology structure is constructed based on the physical environment where the bypass audit device is located, so as to be able to simulate the physical environment where the bypass audit device is located. Further, please refer to Figure 1 , Figure 1 is a schematic diagram of a test topology structure disclosed in an embodiment of the present application. As Figure 1 shown, the test topology structure of the embodiment of the present application includes a simulator, a mirror server, and a probe server. Among them, the probe server is installed with probe tools, and the probe server includes two network cards. One network card is used to receive all data packets sent by the simulator, and the other network card is used to communicate with the bypass audit device and re-encapsulate and forward the data packets sent by the simulator to the bypass audit device.
[0057] Further, the simulator is connected to the mirror server and is used to send data packets to the mirror server. Further, the mirror server is connected to the simulator and the probe server. Among them, the mirror server is used to receive the data packets sent by the simulator and forward the data packets to the probe server.
[0058] Further, the probe server is connected to the bypass audit device and is used to forward the received data packets to the bypass audit device.
[0059] Based on the above test topology, an embodiment of the present application also discloses a probe test method. Please refer to Figure 2 , Figure 2 which is a schematic flowchart of a probe test method disclosed in an embodiment of the present application. As shown in Figure 2 , the method of the embodiment of the present application includes the following steps:
[0060] 101. Send a first configuration instruction to the simulator to enable the simulator to configure the application layer protocol based on the first configuration instruction and enable the simulator to generate data packets using the application layer protocol;
[0061] 102. Send a second configuration instruction to the simulator to enable the simulator to set the packet sending rate, the number of transactions, and the sending time parameter based on the second configuration instruction, and enable the simulator to send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameter, and the mirror server;
[0062] 103. Obtain the number of received packets, the receiving rate, and the forwarding rate of the probe server;
[0063] 104. Determine whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate;
[0064] 105. When the probe server drops packets, send a first modification instruction to the simulator to enable the simulator to adjust the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0065] The method of the embodiment of the present application is based on the test topology and can test the real performance of the probe. Among them, by sending a first configuration instruction to the simulator, the simulator can be enabled to configure the application layer protocol based on the first configuration instruction and generate data packets using the application layer protocol. By sending a second configuration instruction to the simulator, the simulator can be enabled to set the packet sending rate, the number of transactions, and the sending time parameter based on the second configuration instruction, and enable the simulator to send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameter, and the mirror server. Furthermore, by obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server, it can be determined whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate. Furthermore, when the probe server drops packets, a first modification instruction is sent to the simulator to enable the simulator to adjust the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0066] Compared with the prior art, in the embodiment of the present application, the parameters of packet sending are controlled by the simulator, so that the test result of the probe can be not limited by the receiving ability and auditing ability of the bypass auditing device, thereby improving the accuracy of the test result.
[0067] It should be noted that the program for implementing the method of the embodiments of the present application can be deployed in a virtual environment or a cloud environment.
[0068] In the embodiments of the present application, for step 101, the first configuration instruction can be used to configure the application layer protocol. Among them, the application layer protocol can be the Mysql protocol. Correspondingly, the Mysql database generates data packets based on the configured Mysql protocol.
[0069] In the embodiments of the present application, for step 101, the application layer protocol defines the format and parameters of the generated data packets. For example, it defines the maximum data bandwidth.
[0070] In the embodiments of the present application, for step 102, the second configuration instruction is used to configure the parameters used in the single probe performance test. For example, the second configuration instruction is used to configure the packet sending rate, the number of transactions, and the sending time parameter. Among them, the packet sending rate refers to the number of data packets sent by the simulator per second, and the number of transactions refers to the number of transactions processed by the simulator per second. The magnitudes of the packet sending rate and the number of transactions are related. For example, when the number of transactions is 1000 per second, the packet sending rate can be 300 per second. Further, the sending time parameter refers to the duration of the simulator's continuous operation. For example, the sending time parameter can be 100S.
[0071] In the embodiments of the present application, for step 103, a data acquisition request can be sent to the probe server to obtain the number of received packets, the receiving rate, and the forwarding rate of the probe server.
[0072] In the embodiments of the present application, for step 103, the number of received packets refers to the total number of data packets received by the probe server, and the receiving rate refers to the number of data packets received by the probe server per second. The forwarding rate refers to the number of data packets forwarded by the probe server to the bypass audit server per second.
[0073] In the embodiments of the present application, for step 104, a specific method for determining whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate is as follows:
[0074] Compare the receiving rate of the probe server with the sending rate of the simulator. If the receiving rate of the probe server is less than the sending rate of the simulator, it can be determined that the probe server drops packets.
[0075] In the embodiments of the present application, for step 104, a specific method for determining whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate is as follows:
[0076] Calculate the number of packets sent by the simulator based on the sending time parameter and the packet sending rate of the simulator;
[0077] Compare the number of received packets of the probe server with the number of sent packets of the simulator. If the number of received packets of the probe server is less than the number of sent packets of the simulator, it can be determined that the probe server has packet loss.
[0078] In the embodiment of the present application, for step 105, until it is tested that the probe server receives packets normally may mean until it is tested that the number of received packets of the probe server is equal to the number of sent packets of the simulator.
[0079] In the embodiment of the present application, as an optional implementation manner, the method of the embodiment of the present application further includes the following steps:
[0080] When the probe server receives packets normally, record the operating parameters of the probe server, where the operating parameters of the probe server include the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameters, and the memory performance parameters.
[0081] In the embodiment of the present application, as an optional implementation manner, when the probe server receives packets normally, by recording the operating parameters of the probe server, that is, the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameters, and the memory performance parameters, it is convenient for the user to understand the performance and resource occupancy of the probe during normal operation.
[0082] In the above optional implementation manner, specifically, the CPU performance parameters may include the usage rate of the CPU, and the memory performance parameters may include the occupancy rate of the memory.
[0083] In the embodiment of the present application, as an optional implementation manner, the method of the embodiment of the present application further includes the following steps:
[0084] When the probe server does not have packet loss, send a second modification instruction to the simulator, so that the simulator adjusts the sending time parameter based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
[0085] In the above optional implementation manner, when the probe server does not have packet loss, by sending a second modification instruction to the simulator, it is further possible to enable the simulator to adjust the sending time parameter based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
[0086] In the embodiment of the present application, as an optional implementation manner, as Figure 1 shown, the test topology structure of the embodiment of the present application further includes a bypass audit device. Correspondingly, the method of the embodiment of the present application further includes the following steps:
[0087] When the receiving rate and the forwarding rate are stable, obtain the number of review events of the bypass audit device;
[0088] Determine whether the number of review events of the bypass audit device is consistent with the number of transactions of the simulator. If so, troubleshoot the bypass audit device.
[0089] In the above optional implementation, when the receiving speed and forwarding speed are stable, by obtaining the number of review events of the bypass audit device, it is possible to determine whether the number of review events of the bypass audit device is consistent with the number of transactions of the simulator. Furthermore, when they are inconsistent, the bypass audit device can be troubleshot.
[0090] Embodiment 2
[0091] Please refer to Figure 3 , Figure 3 which is a schematic structural diagram of a probe test device disclosed in an embodiment of the present application. Among them, the probe device is applied to the test topology structure of the embodiment of the present application. As Figure 3 shown, the device of the embodiment of the present application includes the following functional modules:
[0092] The first sending module 201 is used to send a first configuration instruction to the simulator, so that the simulator configures the application layer protocol based on the first configuration instruction, and enables the simulator to generate data packets using the application layer protocol;
[0093] The second sending module 202 is used to send a second configuration instruction to the simulator, so that the simulator sets the packet sending rate, the number of transactions, and the sending time parameters based on the second configuration instruction, and enables the simulator to send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameters, and the mirror server;
[0094] The first obtaining module 203 is used to obtain the number of received packets, the receiving rate, and the forwarding rate of the probe server;
[0095] The first judging module 204 is used to judge whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate;
[0096] The third sending module 205 is used to send a first modification instruction to the simulator when the probe server drops packets, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0097] The device according to the embodiment of the present application is based on a test topology structure and can test the true performance of the probe. Among them, by sending a first configuration instruction to the simulator, the simulator can be made to configure the application layer protocol based on the first configuration instruction, and the simulator can use the application layer protocol to generate data packets. By sending a second configuration instruction to the simulator, the simulator can be made to set the packet sending rate, the number of transactions, and the sending time parameters based on the second configuration instruction, and the simulator can send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameters, and the mirror server. Furthermore, by obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server, it is possible to determine whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate. Furthermore, when the probe server drops packets, a first modification instruction is sent to the simulator, so that the simulator can adjust the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0098] Compared with the prior art, the embodiment of the present application controls the packet sending parameters through the simulator, so that the test result of the probe can be not limited by the receiving ability and auditing ability of the bypass auditing device, thereby improving the accuracy of the test result.
[0099] In the embodiment of the present application, as an optional implementation manner, the device according to the embodiment of the present application further includes the following functional modules:
[0100] A recording module, configured to record the operating parameters of the probe server when the probe server receives packets normally, where the operating parameters of the probe server include the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameters, and the memory performance parameters.
[0101] In the above optional implementation manner, through the recording module, when the probe server receives packets normally, by recording the operating parameters of the probe server, that is, the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameters, and the memory performance parameters, it is convenient for the user to understand the performance and resource occupancy of the probe during normal operation.
[0102] In the embodiment of the present application, as an optional implementation manner, the device according to the embodiment of the present application further includes the following functional modules:
[0103] A fourth sending module, configured to send a second modification instruction to the simulator when the probe server does not drop packets, so that the simulator can adjust the sending time parameters based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
[0104] In the above optional implementation manner, through the fourth sending module, when the probe server does not drop packets, a second modification instruction can be sent to the simulator, so that the simulator can adjust the sending time parameters based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
[0105] In an embodiment of the present application, as an alternative implementation, the test topology further includes a bypass audit device. Correspondingly, the device in the embodiment of the present application further includes the following functional modules:
[0106] A second acquisition module, configured to acquire the number of review events of the bypass audit device when the reception rate and the forwarding rate are stable;
[0107] A second judgment module, configured to judge whether the number of review events of the bypass audit device is consistent with the number of transactions of the simulator. If so, the bypass audit device is checked.
[0108] In the above alternative implementation, through the second acquisition module and the second judgment module, when the reception rate and the forwarding rate are stable, the number of review events of the bypass audit device can be acquired, and then it can be judged whether the number of review events of the bypass audit device is consistent with the number of transactions of the simulator. Furthermore, when they are inconsistent, the bypass audit device can be checked.
[0109] It should be noted that for other detailed descriptions of the device in the embodiment of the present application, please refer to the relevant descriptions in Embodiment 1 of the present application, and the embodiment of the present application will not elaborate on this.
[0110] Embodiment 3
[0111] Please refer to Figure 4 , Figure 4 which is a schematic structural diagram of an electronic device disclosed in the embodiment of the present application. As shown in Figure 4 the figure, the electronic device in the embodiment of the present application includes:
[0112] A processor 301; and
[0113] A memory 302, configured to store machine-readable instructions, and when the instructions are executed by the processor 301, execute the probe test method according to any one of the foregoing embodiments.
[0114] By executing the probe test method, the electronic device according to the embodiment of the present application can test the true performance of the probe based on the test topology. Among them, by sending a first configuration instruction to the simulator, the simulator can configure the application layer protocol based on the first configuration instruction, and the simulator can use the application layer protocol to generate data packets. By sending a second configuration instruction to the simulator, the simulator can set the packet sending rate, the number of transactions, and the sending time parameter based on the second configuration instruction, and the simulator can send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameter, and the mirror server. Furthermore, by obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server, it can be determined whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate. Furthermore, when the probe server drops packets, a first modification instruction is sent to the simulator, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0115] Compared with the prior art, the present application controls the packet sending parameters through the simulator, so that the test result of the probe can be not limited by the receiving ability and auditing ability of the bypass auditing device, thereby improving the accuracy of the test result.
[0116] Embodiment 4
[0117] The embodiment of the present application provides a storage medium storing a computer program, and the computer program is executed by a processor to perform the probe test method according to any one of the foregoing embodiments.
[0118] By executing the probe test method, the storage medium according to the embodiment of the present application can test the true performance of the probe based on the test topology. Among them, by sending a first configuration instruction to the simulator, the simulator can configure the application layer protocol based on the first configuration instruction, and the simulator can use the application layer protocol to generate data packets. By sending a second configuration instruction to the simulator, the simulator can set the packet sending rate, the number of transactions, and the sending time parameter based on the second configuration instruction, and the simulator can send data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameter, and the mirror server. Furthermore, by obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server, it can be determined whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate. Furthermore, when the probe server drops packets, a first modification instruction is sent to the simulator, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
[0119] Compared with the prior art, the present application controls the packet sending parameters through the simulator, so that the test result of the probe can be not limited by the receiving ability and auditing ability of the bypass auditing device, thereby improving the accuracy of the test result.
[0120] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are merely illustrative. For example, the division of units is only a logical function division. In actual implementation, there may be other division methods. For another example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed couplings or direct couplings or communication connections between each other can be through some communication interfaces. The indirect couplings or communication connections of devices or units can be electrical, mechanical or other forms.
[0121] In addition, the units described as separate components may or may not be physically separated. The components displayed as units may or may not be physical units, that is, they can be located in one place, or they can be distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.
[0122] Furthermore, in each embodiment of the present application, the various functional modules can be integrated together to form an independent part, or each module can exist alone, or two or more modules can be integrated to form an independent part.
[0123] It should be noted that if the function is implemented in the form of a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art, or a part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods in the various embodiments of the present application. The aforementioned storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memories (ROMs), random access memories (RAMs), magnetic disks, or optical discs that can store program codes.
[0124] In this article, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations.
[0125] The above are only embodiments of the present application and are not intended to limit the protection scope of the present application. For those skilled in the art, various changes and modifications can be made to the present application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included within the protection scope of the present application.
Claims
1. A probe testing method, characterized in that, The method is applied to a test topology, which is a simulation test environment constructed based on the physical environment where the bypass audit device is located. The test topology includes a simulator, a mirror server, and a probe server. The method includes: Sending a first configuration instruction to the simulator, so that the simulator configures the application layer protocol based on the first configuration instruction, and the simulator generates data packets using the application layer protocol; Sending a second configuration instruction to the simulator, so that the simulator sets the packet sending rate, the number of transactions, and the sending time parameters based on the second configuration instruction, and the simulator sends data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameters, and the mirror server; Obtaining the number of received packets, the receiving rate, and the forwarding rate of the probe server; Judging whether the probe server drops packets based on the number of received packets, the receiving rate, and the forwarding rate; When the probe server drops packets, sending a first modification instruction to the simulator, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
2. The method according to claim 1, wherein The method further includes: When the probe server receives packets normally, recording the operating parameters of the probe server, where the operating parameters of the probe server include the number of received packets, the receiving rate, the forwarding rate, the CPU performance parameters, and the memory performance parameters.
3. The method according to claim 2, wherein The method further includes: When the probe server does not drop packets, sending a second modification instruction to the simulator, so that the simulator adjusts the sending time parameters based on the second modification instruction to test the stability of the receiving rate and the forwarding rate.
4. The method according to claim 3, wherein The test topology further includes a bypass audit device. The method further includes: When the receiving rate and the forwarding rate are stable, obtaining the number of review events of the bypass audit device; Judging whether the number of review events of the bypass audit device is consistent with the number of transactions of the simulator. If so, troubleshooting the bypass audit device.
5. A probe test device, characterized in that, The device is applied to a test topology, which is a simulation test environment constructed based on the physical environment where the bypass audit device is located. The test topology includes a simulator, a mirror server, a probe server, and a bypass audit device. The device includes: A first sending module, configured to send a first configuration instruction to the simulator, so that the simulator configures the application layer protocol based on the first configuration instruction, and the simulator generates data packets using the application layer protocol; A second sending module, configured to send a second configuration instruction to the simulator, so that the simulator sets the packet sending rate, the number of transactions, and the sending time parameters based on the second configuration instruction, and the simulator sends data packets to the probe server based on the packet sending rate, the number of transactions, the sending time parameters, and the mirror server; A first obtaining module, configured to obtain the number of received packets, the receiving rate, and the forwarding rate of the probe server; A first judgment module, configured to judge whether the probe server drops packets based on the received packet count, the received rate, and the forwarding rate; A third sending module, configured to, when the probe server drops packets, send a first modification instruction to the simulator, so that the simulator adjusts the packet sending rate and the number of transactions based on the first modification instruction until it is tested that the probe server receives packets normally.
6. The device according to claim 5, wherein The device further includes: A recording module, configured to record the operating parameters of the probe server when the probe server receives packets normally, where the operating parameters of the probe server include the received packet count, the received rate, the forwarding rate, the CPU performance parameter, and the memory performance parameter.
7. The device according to claim 6, characterized in that, The device further includes: A fourth sending module, configured to, when the probe server does not drop packets, send a second modification instruction to the simulator, so that the simulator adjusts the sending time parameter based on the second modification instruction to test the stability of the received rate and the forwarding rate.
8. The device according to claim 7, characterized in that, The test topology further includes a bypass audit device, and the device further includes: A second obtaining module, configured to obtain the number of review events of the bypass audit device when the received rate and the forwarding rate are stable; A second judgment module, configured to judge whether the number of review events of the bypass audit device is consistent with the number of transactions of the simulator, and if so, troubleshoot the bypass audit device.
9. An electronic device, characterized in that, Including: A processor; And A memory, configured to store machine-readable instructions, and the instructions, when executed by the processor, execute the probe test method according to any one of claims 1-4.
10. A storage medium, characterized in that, The storage medium stores a computer program, and the computer program is executed by the processor to perform the probe test method according to any one of claims 1-4.
Citation Information
Patent Citations
Confusion communication method based on protocol, client terminal, server and storage medium
CN112565217A
Threat management and control system and method for bypass setting
CN112769860A