An automated abnormal inspection system

Abstract

The invention relates to the technical field of computer operation and maintenance, in particular to an automatic abnormal inspection system; a data acquisition unit, used for acquiring the response time of a target host and acquiring a data packet of a target IP address received by an instruction receiving unit; an instruction sending unit, used for sending a data packet to the target host; an instruction receiving unit, used for receiving a data packet returned by the target host; a data storage unit, used for storing fault information of each target host; a parameter analysis unit, used for determining the size of the received data packet, and determining the abnormal index of the target host according to the fault information stored in the data storage unit; a central control unit, used for determining whether the installation or operation of the local TCP / IP is normal, whether the received target host is correct, and determining the inspection frequency of the target host; a fault warning unit, used for issuing warning information, and timely informing staff to repair the vulnerability, thereby further improving the operation and maintenance efficiency of the network.

Description

Technical Field

[0001] The invention belongs to the technical field of computer operation and maintenance, and in particular to an automatic abnormal inspection system. Background Art

[0002] With the rapid development of communication technology, information technology has made great progress, and computer network technology has been widely used in many fields. The effective application of computer network technology can make the transmission, storage and processing of data information simpler and faster, bringing a lot of convenience to people's lives and work. However, if a computer network fails, it will seriously affect people's various operations on data information, such as data transmission failure, poor server resource utilization, Trojan virus invasion, memory usage reaching a critical point, slow network transmission rate, data storage failure, etc., which not only affects the user experience, but also causes the loss of the operating interface, and the data has not been stored in time, causing significant losses.

[0003] At present, most of the processing of this kind of fault is done by operation and maintenance personnel conducting regular inspections, and they are unable to handle the fault in the first time and cannot prevent the fault at the source, which is inefficient and very inconvenient.

[0004] With the rapid development of intelligence and the continuous innovation of information and communication technology, the requirements for enterprise information operation and maintenance are becoming higher and higher. Therefore, fault inspection and maintenance of computer networks are necessary. Summary of the invention

[0005] The purpose of the present invention is to overcome the deficiencies of the prior art and provide an automated abnormality inspection system that can effectively improve network operation and maintenance efficiency.

[0006] The present invention solves the technical problem by adopting the following technical solutions:

[0007] An automated abnormal inspection system, comprising:

[0008] A data acquisition unit, used to acquire the response time of the target host and the data packet of the target IP address received by the instruction receiving unit;

[0009] An instruction sending unit, connected to the data acquisition unit, for sending a data packet to a target host;

[0010] An instruction receiving unit, connected to the instruction sending unit, and configured to receive a data packet returned by the target host;

[0011] A data storage unit, which is connected to the data acquisition unit and the instruction receiving unit respectively, and is used to store the fault information of each target host;

[0012] a parameter analysis unit, which is connected to the instruction receiving unit and the data storage unit respectively, and is used to determine the size of the received data packet, and to determine the abnormality index of the target host according to the fault information stored in the data storage unit;

[0013] A central control unit connected to the parameter analysis unit is used to determine whether the installation or operation of the local TCP / IP is normal, whether the received target host is correct, and determine the inspection frequency of the target host;

[0014] The fault warning unit is connected to the central control unit and is used to issue warning information to inform the staff to repair the vulnerability in time.

[0015] Moreover, the fault information stored in the data storage unit includes network transmission anomalies, memory anomalies, disk space anomalies, tasks not sent to the engine, tasks not moving for a long time, system access anomalies, incorrect subnet mask, network card configuration errors and network traffic anomalies.

[0016] Moreover, the data acquisition unit is also used to acquire the response time of the target host when the instruction sending unit completes sending the data packet to the target IP address, and the central control unit determines whether the installation or operation of the local TCP / IP is normal according to the response time, and sets the standard response time as T;

[0017] Under the first preset condition, the central control unit determines that the installation or operation of the local TCP / IP is normal;

[0018] Under the second preset condition, the central control unit determines that there is a problem with the installation or operation of TCP / IP on the local machine;

[0019] The first preset condition is that the response time of the target host obtained by the data acquisition unit is less than or equal to the standard response time T, and the second preset condition is that the response time of the target host obtained by the data acquisition unit is greater than the standard response time T.

[0020] Moreover, under the first preset condition, the data acquisition unit acquires the data packet of the target IP address received by the instruction receiving unit, the parameter analysis unit determines the size of the received data packet, the central control unit compares the size of the data packet received by the instruction receiving unit with the size of the data packet sent by the instruction sending unit, and determines whether the received target host is correct according to the comparison result.

[0021] If the size of the data packet received by the instruction receiving unit is consistent with the size of the data packet sent by the instruction sending unit, the central control unit determines that the received target host is correct;

[0022] If the size of the data packet received by the instruction receiving unit is inconsistent with the size of the data packet sent by the instruction sending unit, the central control unit determines that the received target host is wrong.

[0023] Moreover, under the second preset condition, the fault warning unit warns the staff to prompt the staff to repair the machine.

[0024] Moreover, when the central control unit determines that the received target host is correct, the parameter analysis unit determines the abnormality index of the target host according to the number of fault repairs, fault repair interval and fault repair duration of each target host stored in the data storage unit, and sets

[0025] Y=C / C0+N / N0+T / T0,

[0026] Among them, Y represents the abnormality index of the target host, C represents the number of fault repairs of the target host, C0 represents the average number of repairs, N represents the fault repair interval of the target host, N0 represents the average repair interval, T represents the fault repair time of the target host, and T0 represents the average repair time.

[0027] Moreover, the central control unit compares the abnormal index with the abnormal index standard, determines the inspection frequency of the target host according to the comparison result, sets the first abnormal index standard to Y1, the second abnormal index standard to Y2, the first inspection frequency to V1, the second inspection frequency to V2, the third inspection frequency to V3, Y1<Y2, V1<V2<V3,

[0028] If the abnormality index of the target host is less than or equal to the first abnormality index standard, the central control unit determines that the inspection frequency of the target host is the first inspection frequency;

[0029] If the abnormality index of the target host is greater than the first abnormality index standard and less than or equal to the second abnormality index standard, the central control unit determines that the inspection frequency of the target host is the second inspection frequency;

[0030] If the abnormality index of the target host is greater than the second abnormality index standard, the central control unit determines that the inspection frequency of the target host is the third inspection frequency.

[0031] Moreover, when the central control unit determines that the received target host is wrong, the instruction sending unit resends the data packet to the target host. If the size of the data packet received by the instruction receiving unit is wrong, the fault warning unit sends a warning message to the staff to inform the staff to repair the vulnerability.

[0032] The advantages and positive effects of the present invention are:

[0033] The automated abnormal inspection system described in the present invention can not only check the problems of the target host but also check the problems of the local host, and automatically store and analyze the fault information, so as to formulate the inspection times, reduce the manual inspection process, and reduce the complex manual labor. Only when the inspection system detects a fault will it alarm the staff, and promptly and effectively remind the staff to carry out maintenance, so that the staff can eliminate the fault as soon as possible, thereby improving the reliability of the server and further improving the operation and maintenance efficiency of the network. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 It is a logic block diagram of the present invention. DETAILED DESCRIPTION

[0035] In order to make the objects and advantages of the present invention more clearly understood, the present invention is further described below in conjunction with embodiments; it should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0036] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the protection scope of the present invention.

[0037] It should be noted that, in the description of the present invention, terms such as "up", "down", "left", "right", "inside" and "outside" indicating directions or positional relationships are based on the directions or positional relationships shown in the drawings. This is merely for the convenience of description and does not indicate or imply that the device or element must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation on the present invention.

[0038] In addition, it should be noted that in the description of the present invention, unless otherwise clearly specified and limited, the terms "installed", "connected", and "connected" should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be the internal communication of two components. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0039] See also Figure 1 , Figure 1 It is a logic block diagram of the present invention.

[0040] An automated abnormal inspection system, comprising:

[0041] A data acquisition unit, used to acquire the response time of the target host and the data packet of the target IP address received by the instruction receiving unit;

[0042] An instruction sending unit, connected to the data acquisition unit, for sending a data packet to a target host;

[0043] An instruction receiving unit, connected to the instruction sending unit, and configured to receive a data packet returned by the target host;

[0044] A data storage unit, which is connected to the data acquisition unit and the instruction receiving unit respectively, and is used to store the fault information of each target host;

[0045] a parameter analysis unit, which is connected to the instruction receiving unit and the data storage unit respectively, and is used to determine the size of the received data packet, and to determine the abnormality index of the target host according to the fault information stored in the data storage unit;

[0046] A central control unit connected to the parameter analysis unit is used to determine whether the installation or operation of the local TCP / IP is normal, whether the received target host is correct, and determine the inspection frequency of the target host;

[0047] The fault warning unit is connected to the central control unit and is used to issue warning information to inform the staff to repair the vulnerability in time.

[0048] The fault information stored in the data storage unit includes but is not limited to network transmission anomalies, memory anomalies, disk space anomalies, tasks not being sent to the engine, tasks not being moved for a long time, system access anomalies, incorrect subnet mask, network card configuration errors, and network traffic anomalies.

[0049] The data acquisition unit is also used to acquire the response time of the target host when the instruction sending unit completes sending the target IP address data packet, and the central control unit determines whether the installation or operation of the local TCP / IP is normal according to the response time, and sets the standard response time as T;

[0050] Under the first preset condition, the central control unit determines that the installation or operation of the local TCP / IP is normal;

[0051] Under the second preset condition, the central control unit determines that there is a problem with the installation or operation of TCP / IP on the local machine;

[0052] The first preset condition is that the response time of the target host obtained by the data acquisition unit is less than or equal to the standard response time T, and the second preset condition is that the response time of the target host obtained by the data acquisition unit is greater than the standard response time T.

[0053] Under the first preset condition, the data acquisition unit acquires the data packet of the target IP address received by the instruction receiving unit, the parameter analysis unit determines the size of the received data packet, the central control unit compares the size of the data packet received by the instruction receiving unit with the size of the data packet sent by the instruction sending unit, and determines whether the received target host is correct according to the comparison result.

[0054] If the size of the data packet received by the instruction receiving unit is consistent with the size of the data packet sent by the instruction sending unit, the central control unit determines that the received target host is correct;

[0055] If the size of the data packet received by the instruction receiving unit is inconsistent with the size of the data packet sent by the instruction sending unit, the central control unit determines that the received target host is wrong.

[0056] In the embodiment of the present invention, the target host has a unique IP address. When a data packet is sent to the target address, the target host will return a data packet of the same size if it is operating normally, so that the operating status of the target host can be determined.

[0057] Under the second preset condition, the fault warning unit warns the staff to prompt the staff to repair the machine.

[0058] When the central control unit determines that the received target host is correct, the parameter analysis unit determines the abnormality index of the target host according to the number of fault repairs, fault repair interval and fault repair duration of each target host stored in the data storage unit, and sets

[0059] Y=C / C0+N / N0+T / T0,

[0060] Among them, Y represents the abnormality index of the target host, C represents the number of fault repairs of the target host, C0 represents the average number of repairs, N represents the fault repair interval of the target host, N0 represents the average repair interval, T represents the fault repair time of the target host, and T0 represents the average repair time.

[0061] The central control unit compares the abnormal index with the abnormal index standard, determines the inspection frequency of the target host according to the comparison result, sets the first abnormal index standard to Y1, the second abnormal index standard to Y2, the first inspection frequency to V1, the second inspection frequency to V2, the third inspection frequency to V3, Y1<Y2, V1<V2<V3,

[0062] If the abnormality index of the target host is less than or equal to the first abnormality index standard, the central control unit determines that the inspection frequency of the target host is the first inspection frequency;

[0063] If the abnormality index of the target host is greater than the first abnormality index standard and less than or equal to the second abnormality index standard, the central control unit determines that the inspection frequency of the target host is the second inspection frequency;

[0064] If the abnormality index of the target host is greater than the second abnormality index standard, the central control unit determines that the inspection frequency of the target host is the third inspection frequency.

[0065] When the central control unit determines that the received target host is wrong, the instruction sending unit resends the data packet to the target host. If the size of the data packet received by the instruction receiving unit is wrong, the fault warning unit sends a warning message to the staff to inform the staff to repair the vulnerability in time.

[0066] Although the embodiments of the present invention are disclosed for illustrative purposes, those skilled in the art will appreciate that various substitutions, changes and modifications are possible without departing from the spirit and scope of the present invention and the appended claims. Therefore, the scope of the present invention is not limited to the contents disclosed in the embodiments.

Claims

1. An automated abnormal inspection system, characterized in that: include: A data acquisition unit, used to acquire the response time of the target host and the data packet of the target IP address received by the instruction receiving unit; An instruction sending unit, connected to the data acquisition unit, for sending a data packet to a target host; An instruction receiving unit, connected to the instruction sending unit, and configured to receive a data packet returned by the target host; A data storage unit, which is connected to the data acquisition unit and the instruction receiving unit respectively, and is used to store the fault information of each target host; a parameter analysis unit, which is connected to the instruction receiving unit and the data storage unit respectively, and is used to determine the size of the received data packet, and to determine the abnormality index of the target host according to the fault information stored in the data storage unit; A central control unit connected to the parameter analysis unit is used to determine whether the installation or operation of the local TCP / IP is normal, whether the received target host is correct, and determine the inspection frequency of the target host; A fault warning unit, which is connected to the central control unit and is used to issue warning information to promptly inform the staff to repair the vulnerability; The data acquisition unit is also used to acquire the response time of the target host when the instruction sending unit completes sending the target IP address data packet, and the central control unit determines whether the installation or operation of the local TCP / IP is normal according to the response time, and sets the standard response time as T; Under the first preset condition, the central control unit determines that the installation or operation of the local TCP / IP is normal; Under the second preset condition, the central control unit determines that there is a problem with the installation or operation of TCP / IP on the local machine; The first preset condition is that the response time of the target host obtained by the data acquisition unit is less than or equal to the standard response time T, and the second preset condition is that the response time of the target host obtained by the data acquisition unit is greater than the standard response time T; Under the first preset condition, the data acquisition unit acquires the data packet of the target IP address received by the instruction receiving unit, the parameter analysis unit determines the size of the received data packet, the central control unit compares the size of the data packet received by the instruction receiving unit with the size of the data packet sent by the instruction sending unit, and determines whether the received target host is correct according to the comparison result. If the size of the data packet received by the instruction receiving unit is consistent with the size of the data packet sent by the instruction sending unit, the central control unit determines that the received target host is correct; If the size of the data packet received by the instruction receiving unit is inconsistent with the size of the data packet sent by the instruction sending unit, the central control unit determines that the received target host is wrong; When the central control unit determines that the received target host is correct, the parameter analysis unit determines the abnormality index of the target host according to the number of fault repairs, fault repair interval and fault repair duration of each target host stored in the data storage unit, and sets Y=C / C0+N / N0+T / T0, Where Y represents the abnormality index of the target host, C represents the number of fault repairs of the target host, C0 represents the average number of repairs, N represents the fault repair interval of the target host, N0 represents the average repair interval, T represents the fault repair time of the target host, and T0 represents the average repair time; The central control unit compares the abnormal index with the abnormal index standard, determines the inspection frequency of the target host according to the comparison result, sets the first abnormal index standard to Y1, the second abnormal index standard to Y2, the first inspection frequency to V1, the second inspection frequency to V2, the third inspection frequency to V3, Y1<Y2, V1<V2<V3, If the abnormality index of the target host is less than or equal to the first abnormality index standard, the central control unit determines that the inspection frequency of the target host is the first inspection frequency; If the abnormality index of the target host is greater than the first abnormality index standard and less than or equal to the second abnormality index standard, the central control unit determines that the inspection frequency of the target host is the second inspection frequency; If the abnormality index of the target host is greater than the second abnormality index standard, the central control unit determines that the inspection frequency of the target host is the third inspection frequency.

2. The automatic abnormal inspection system according to claim 1, characterized in that: The fault information stored in the data storage unit includes network transmission anomalies, memory anomalies, disk space anomalies, tasks not being sent to the engine, tasks not being moved for a long time, system access anomalies, incorrect subnet mask, network card configuration errors, and network traffic anomalies.

3. The automatic abnormal inspection system according to claim 1, characterized in that: Under the second preset condition, the fault warning unit warns the staff to prompt the staff to repair the machine.

4. The automatic abnormal inspection system according to claim 1, characterized in that: When the central control unit determines that the received target host is wrong, the instruction sending unit resends the data packet to the target host. If the size of the data packet received by the instruction receiving unit is wrong, the fault warning unit sends a warning message to the staff to inform the staff to repair the vulnerability.

Images