A packet loss sampling resolution implementation method, device, equipment and medium

Abstract

The embodiment of the specification discloses a packet loss sampling analysis implementation method, device, equipment and medium, comprising: creating an internal loopback port and a next hop node, and pointing the egress of the next hop node to the internal loopback port; when packet loss occurs, pointing the next hop of the packet loss data packet related route to the next hop node; sampling the packet loss data packet at the internal loopback port to obtain a sampling message; and sending the sampling message to a CPU so that the CPU analyzes the sampling message to obtain a packet loss analysis result. When packet loss occurs in a network, the embodiment of the specification can perform packet loss sampling analysis through the internal loopback port, quickly locate the problem, narrow the troubleshooting range, and improve the fault solving efficiency.

Description

TECHNICAL FIELD

[0001] The present specification relates to the technical field of computer technology, and particularly relates to a packet loss sampling and analysis implementation method, device, equipment and medium. BACKGROUND

[0002] With the rapid development of Internet technology, network communication plays an increasingly important role in people's life and work. However, in the process of Internet transmission, the situation of packet loss often occurs, which will seriously affect the network performance and bring bad experience to users.

[0003] In the past technology, the communication device can usually only count the message of the port in and out direction, and then obtain the difference value by subtraction to perceive the packet loss situation. Although this method is simple and easy to implement, it has obvious limitations. It cannot provide detailed packet loss statistical information, which is not conducive to the comprehensive perception of device forwarding situation, and cannot accurately judge the reason of packet loss and the content of discarded packets. SUMMARY

[0004] One or more embodiments of the present specification provide a packet loss sampling and analysis implementation method, device, equipment and medium, which are used to solve the technical problems proposed in the background technology.

[0005] One or more embodiments of the present specification adopt the following technical solutions:

[0006] The packet loss sampling and analysis implementation method provided by one or more embodiments of the present specification comprises:

[0007] Create an internal loopback port and a next hop node, and point the egress of the next hop node to the internal loopback port;

[0008] When packet loss occurs, point the next hop of the packet loss data packet related route to the next hop node;

[0009] Sample the packet loss data packet at the internal loopback port to obtain a sampling message;

[0010] Send the sampling message to the CPU so that the CPU analyzes the sampling message to obtain a packet loss analysis result.

[0011] It should be noted that the above-mentioned embodiments of the present specification have the following beneficial effects:

[0012] Provide detailed packet loss statistical information: by sampling and analyzing the packet loss data packet, more detailed packet loss statistical information can be obtained, which can include the number, frequency and distribution of packet loss. This helps to better understand the packet loss situation in the network and provides a basis for optimizing network performance.

[0013] Advantages of comprehensive perception of device forwarding situation: By pointing the next hop of the dropped packet to the internal loopback interface for sampling, the packet loss situation during the forwarding process of the device can be obtained. This helps to comprehensively perceive the forwarding performance of the device, discover potential problems in a timely manner, and take corresponding measures for optimization.

[0014] Accurate judgment of packet loss reason and discarded message content: By analyzing the sampled message, relevant information of packet loss can be obtained, such as source IP address, source port, destination IP address, destination port and protocol type. These information helps to accurately determine the reason of packet loss, such as network congestion, device failure, protocol error, etc. At the same time, the discarded message content can be understood, providing clues for further analysis and problem solving.

[0015] Improve user experience: Timely discovery and solution of packet loss problem can reduce network delay, improve data transmission reliability, and thus improve user experience in network communication.

[0016] Optimize network performance: Based on the packet loss analysis result, targeted measures can be taken to optimize network performance, such as adjusting network topology, increasing bandwidth, optimizing routing strategy, etc. This helps to improve the overall performance and efficiency of the network.

[0017] Convenient for troubleshooting and positioning: When there is a packet loss problem in the network, the problem can be quickly located by packet loss sampling analysis, reducing the scope of troubleshooting and improving the efficiency of fault solution.

[0018] Further, the CPU analyzes the sampled message to obtain a packet loss analysis result, including:

[0019] The CPU analyzes the sampled message to extract five-tuple information, including source IP address, source port, destination IP address, destination port and protocol type.

[0020] Based on the five-tuple information, the packet loss analysis result is obtained.

[0021] It should be noted that the embodiments of the present application have the following beneficial effects through the above content:

[0022] More accurate analysis of packet loss reason: By extracting five-tuple information, the specific location and related factors of packet loss can be determined more accurately. This helps to understand the reason of packet loss, such as whether there is a problem with a specific source or destination IP address, port or protocol type.

[0023] Targeted problem solving: Based on the packet loss analysis result obtained from the five-tuple information, more targeted measures can be taken to solve the packet loss problem. For example, if it is found that packet loss mainly concentrates on a specific source or destination IP address, the network connection or device configuration of the address can be further checked.

[0024] Optimizing network configuration: Understanding the five-tuple information of dropped packets can help optimize network configuration. For example, firewall rules, routing strategies, or QoS (Quality of Service) settings can be adjusted based on the dropped packet situation to improve network performance and reduce packet loss.

[0025] Troubleshooting and positioning: Five-tuple information is very helpful for troubleshooting and positioning. It can provide detailed information about dropped packets, allowing network administrators to quickly find the problem and take appropriate measures to repair.

[0026] Enhancing network security: By analyzing the five-tuple information, potential security threats or abnormal traffic patterns can be detected. This helps to take timely measures to protect network security and prevent malicious attacks or data leaks.

[0027] Supporting performance optimization decisions: The dropped packet analysis results combined with five-tuple information can provide decision-making basis for network performance optimization. For example, based on the requirements of different applications or services for five-tuple, priority settings or resource allocation can be performed to ensure the normal operation of critical business.

[0028] Further, the five-tuple information is used to obtain the dropped packet analysis results, including:

[0029] Correlate the five-tuple information with the dropped packet data to obtain correlation information;

[0030] Based on the correlation information, the dropped packet analysis results are obtained.

[0031] It should be noted that the embodiments of the present specification have the following beneficial effects through the above content:

[0032] More comprehensive packet loss analysis: By correlating the five-tuple information with the dropped packet data, more comprehensive packet loss analysis results can be obtained. This helps to understand the specific context of packet loss, including detailed information about the source and destination, as well as protocols and ports related to packet loss.

[0033] Accurate packet loss positioning: Correlation information can help more accurately locate the position of packet loss. By correlating the five-tuple with the dropped packet data, it can be determined whether the packet loss occurs between specific sources and destinations, or is related to specific protocols or ports.

[0034] In-depth understanding of network behavior: The dropped packet analysis results based on correlation information can provide an in-depth understanding of network behavior. This helps to discover potential network problems, such as abnormal traffic patterns of specific applications or services, or frequent packet loss on specific network paths.

[0035] Targeted troubleshooting: Correlation information makes troubleshooting more targeted. Based on the packet loss analysis result, focus on checking network components, devices or applications related to correlation information to quickly determine the root cause of packet loss.

[0036] Optimize network performance: Understanding the correlation between packet loss and five-tuple can guide the optimization of network performance. Network configuration can be adjusted, routing can be optimized, or traffic control strategies can be implemented to reduce packet loss and improve the overall performance of the network.

[0037] Further, the packet loss analysis result is obtained based on the correlation information, including:

[0038] According to the correlation information, determine the packet loss mode of the packet loss data packet;

[0039] According to the packet loss mode, determine one or more network problems that cause packet loss;

[0040] According to the one or more network problems, obtain the packet loss analysis result.

[0041] It should be noted that the embodiments of the present application have the following beneficial effects through the above content:

[0042] Accurate positioning of packet loss causes: By determining the packet loss mode, the network problems that cause packet loss can be more accurately identified. This helps quickly locate the root cause of the problem, reducing the time and cost of troubleshooting.

[0043] Comprehensive understanding of network status: Determining multiple network problems based on packet loss mode can provide a comprehensive understanding of potential problems in the network. This helps to identify and solve potential problems that may affect network performance in advance, improving network stability and reliability.

[0044] Targeted problem solving: After identifying the specific network problems that cause packet loss, targeted measures can be taken to solve them. This improves the efficiency of problem solving and avoids blind attempts at various solutions, thereby faster restoring the normal operation of the network.

[0045] Optimize network performance: Solving network problems that cause packet loss can optimize network performance. Reducing packet loss can improve the efficiency and accuracy of data transmission, reduce latency, and improve user experience.

[0046] Prevent problems from happening again: Through analysis of the packet loss analysis result, lessons can be learned and corresponding preventive measures can be developed. This helps to avoid similar network problems from happening again in the future and improves the overall reliability of the network.

[0047] Further, if the lost packet data packet related route is an ACL reject forwarding, the method further comprises:

[0048] pointing the next hop of the ACL reject forwarding to the next hop node.

[0049] It should be noted that the above-mentioned embodiments of the present specification have the following beneficial effects:

[0050] Quickly locate the problem: by pointing the next hop of the ACL reject forwarding to the correct node, and sampling the lost packet data packet at the internal loopback interface, the location and cause of the packet loss can be quickly determined. This helps the network administrator to quickly locate the problem and take appropriate measures to repair.

[0051] Further, if the lost packet data packet related route is a black hole route, the method further comprises:

[0052] pointing the next hop of the black hole route to the next hop node.

[0053] It should be noted that the above-mentioned embodiments of the present specification have the following beneficial effects:

[0054] Quickly locate the problem: by pointing the next hop of the black hole route to the correct next hop node, and by sampling the lost packet data packet at the internal loopback interface and sending the sampled packet to the CPU for analysis, the location and cause of the packet loss can be quickly determined. This helps the network administrator to quickly locate the problem and take appropriate measures to repair.

[0055] Further, before the sampling of the lost packet data packet at the internal loopback interface, the method further comprises:

[0056] configuring a port sampling function on the internal loopback interface and setting a suitable sampling rate.

[0057] It should be noted that the above-mentioned embodiments of the present specification have the following beneficial effects:

[0058] Improve sampling accuracy: by configuring a port sampling function on the internal loopback interface and setting a suitable sampling rate, accurate sampling of the lost packet data packet can be ensured. A suitable sampling rate can ensure that the lost packet data packet is effectively captured without losing important information.

[0059] One or more embodiments of the present specification provide a lost packet sampling and analysis implementation device, comprising:

[0060] create an internal loopback interface and a next hop node, and point an egress of the next hop node to the internal loopback interface;

[0061] point a next hop of a route related to a lost packet to the next hop node when the lost packet occurs;

[0062] sample the lost packet at the internal loopback interface to obtain a sample packet;

[0063] analyze the sample packet and send the sample packet to a CPU, so that the CPU analyzes the sample packet to obtain a lost packet analysis result.

[0064] One or more embodiments of the present specification provide a lost packet sampling and analyzing implementation device, comprising:

[0065] at least one processor; and

[0066] a memory in communication connection with the at least one processor; wherein

[0067] the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to:

[0068] create an internal loopback interface and a next hop node, and point an egress of the next hop node to the internal loopback interface;

[0069] point a next hop of a route related to a lost packet to the next hop node when the lost packet occurs;

[0070] sample the lost packet at the internal loopback interface to obtain a sample packet;

[0071] analyze the sample packet and send the sample packet to a CPU, so that the CPU analyzes the sample packet to obtain a lost packet analysis result.

[0072] One or more embodiments of the present specification provide a non-volatile computer storage medium, which stores computer executable instructions, and the computer executable instructions are executed by a computer to enable:

[0073] create an internal loopback interface and a next hop node, and point an egress of the next hop node to the internal loopback interface;

[0074] point a next hop of a route related to a lost packet to the next hop node when the lost packet occurs;

[0075] sample the lost packet at the internal loopback interface to obtain a sample packet;

[0076] The sampling packet is sent to a CPU, so that the CPU parses the sampling packet to obtain a packet loss analysis result.

[0077] The above at least one technical solution adopted by the embodiments of the present specification can achieve the following beneficial effects:

[0078] Provide detailed packet loss statistics: By sampling and analyzing packet loss packets, more detailed packet loss statistics can be obtained, including the number, frequency, distribution, etc. of packet loss. This helps to better understand the packet loss situation in the network and provides a basis for optimizing network performance.

[0079] Beneficial to comprehensive perception of device forwarding: The next hop of the packet loss data packet is directed to the internal loopback port for sampling, which can obtain the packet loss situation of the device in the forwarding process. This helps to comprehensively perceive the forwarding performance of the device, discover potential problems in time, and take appropriate measures to optimize.

[0080] Accurately determine the cause of packet loss and the content of discarded packets: By analyzing the sampling packet, relevant information of packet loss can be obtained, such as source IP address, source port, destination IP address, destination port and protocol type. These information helps to accurately determine the cause of packet loss, such as network congestion, device failure, protocol error, etc. At the same time, the content of discarded packets can be understood, providing clues for further analysis and problem solving.

[0081] Improve user experience: Timely discovery and solution of packet loss problems can reduce network delay, improve data transmission reliability, and thus improve user experience in network communication.

[0082] Optimize network performance: Based on the packet loss analysis result, targeted measures can be taken to optimize network performance, such as adjusting network topology, increasing bandwidth, optimizing routing strategy, etc. This helps to improve the overall performance and efficiency of the network.

[0083] Convenient for troubleshooting and positioning: When there is a packet loss problem in the network, the problem can be quickly located by packet loss sampling and analysis, reducing the scope of troubleshooting and improving the efficiency of problem solving. BRIEF DESCRIPTION OF DRAWINGS

[0084] In order to more clearly illustrate the technical solutions in the embodiments of the present specification or the prior art, the drawings needed in the embodiment or prior art description will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments described in the present specification, and those skilled in the art can also obtain other drawings according to these drawings without creating any creative labor. In the drawings:

[0085] Figure 1A flowchart of a packet loss sampling resolution implementation method provided for one or more embodiments of the present specification;

[0086] Figure 2 A structural diagram of a packet loss sampling resolution implementation device provided for one or more embodiments of the present specification;

[0087] Figure 3 A structural diagram of a packet loss sampling resolution implementation device provided for one or more embodiments of the present specification. DETAILED DESCRIPTION

[0088] The embodiments of the present specification provide a packet loss sampling resolution implementation method, device, equipment and medium.

[0089] In order for those skilled in the art to better understand the technical solutions in the present specification, the technical solutions in the embodiments of the present specification will be described clearly and completely in conjunction with the drawings in the embodiments of the present specification. Obviously, the described embodiments are only part of the embodiments of the present specification, not all embodiments. Based on the embodiments of the present specification, all other embodiments obtained by those of ordinary skill in the art without creative labor should be within the scope of protection of the present specification.

[0090] Figure 1 A flowchart of a packet loss sampling resolution implementation method provided for one or more embodiments of the present specification, which can be executed by a packet loss sampling resolution system. Some input parameters or intermediate results in the flow allow manual intervention to adjust to help improve accuracy.

[0091] The method flow steps of the embodiments of the present specification are as follows:

[0092] S102, create an internal loopback interface and a next hop node, and point the egress of the next hop node to the internal loopback interface.

[0093] In the embodiments of the present specification, regarding the above, the following specific implementation schemes can be used:

[0094] Determine the network device: select a network device that supports internal loopback interface and routing configuration.

[0095] Log in to the network device: log in to the management interface of the network device using appropriate login credentials.

[0096] Enter configuration mode: in the management interface, enter the configuration mode of the device.

[0097] Create an internal loopback interface: create an internal loopback interface using the corresponding command or interface option. The specific command or operation method may vary depending on the device.

[0098] Configure next-hop node: Specify the IP address or other identifier of the next-hop node.

[0099] Point next-hop node's egress to internal loopback interface: Use route configuration commands to set the next-hop node's egress to an internal loopback interface.

[0100] Save configuration: Ensure that the configuration changes made are saved to take effect.

[0101] S104, when a packet loss occurs, the next hop of the route related to the lost packet is pointed to the next-hop node.

[0102] In the embodiments of the present specification, with regard to the above, the following specific implementation can be used:

[0103] Monitor packet loss events: Use network monitoring tools or devices to monitor packet loss in real time. When a packet loss event is detected, subsequent operations are triggered.

[0104] Obtain relevant routing information: Obtain routing information related to the lost packet, including source address, destination address, routing table, etc.

[0105] Modify routing table: According to the obtained routing information, the next hop of the route related to the lost packet is pointed to the created next-hop node.

[0106] Further, if the route related to the lost packet is ACL denied forwarding, the next hop of the ACL denied forwarding can be pointed to the next-hop node.

[0107] In the embodiments of the present specification, with regard to the above, the following specific implementation can be used:

[0108] Check ACL rules: Determine the access control list (ACL) rules related to the lost packet. ACL rules are used to control the forwarding and access of network traffic.

[0109] Find the next hop of ACL denied forwarding: In the ACL rules, find the next hop address or interface that denies forwarding the packet.

[0110] Modify the next hop pointing: Modify the next hop address or interface of ACL denied forwarding to the specified next-hop node.

[0111] It should be noted that the embodiments of the present specification have the following beneficial effects through the above:

[0112] Quickly locate the problem: By pointing the next hop of the ACL drop forwarding to the correct node and sampling the dropped packets at the internal loopback interface, the location and cause of packet loss can be quickly determined. This helps network administrators quickly locate the problem and take appropriate measures to repair it.

[0113] Further, if the dropped packet related route is a black hole route, the next hop of the black hole route can be pointed to the next hop node when the next hop of the dropped packet related route is pointed to the next hop node.

[0114] In the embodiments of the present specification, regarding the above, the following specific implementation can be used:

[0115] Check the route type: Check if the determined route is a black hole route. Black hole route is a special route that directly discards packets without forwarding.

[0116] Get next hop information: Get the node information of the next hop of the black hole route. The next hop is the next network node to which the packet will be forwarded under this route.

[0117] Modify the next hop pointing: Point the next hop of the black hole route to the specified next hop node. This can be achieved by modifying the routing table or related network configuration.

[0118] It should be noted that the above embodiments of the present specification have the following beneficial effects:

[0119] Quickly locate the problem: Point the next hop of the black hole route to the correct next hop node, and by sampling the dropped packets at the internal loopback interface and sending the sampled packets to the CPU for analysis, the location and cause of packet loss can be quickly determined. This helps network administrators quickly locate the problem and take appropriate measures to repair it.

[0120] S106, sampling the dropped packet at the internal loopback interface to obtain a sampled packet.

[0121] In the embodiments of the present specification, regarding the above, the following specific implementation can be used:

[0122] Enable sampling function: Enable the sampling function on the internal loopback interface to sample the dropped packets.

[0123] Define sampling rules: Define sampling rules as needed, such as sampling frequency, sampling quantity, etc.

[0124] Receive dropped packets: When packet loss occurs, the dropped packets will be sent to the internal loopback interface.

[0125] Sampling: The internal loopback port samples the lost packet according to a defined sampling rule to obtain a sampling message.

[0126] Further, before sampling the lost packet, the internal loopback port can be configured with a port sampling function and an appropriate sampling rate.

[0127] It should be noted that the above-described embodiments of the present specification have the following beneficial effects:

[0128] Improved sampling accuracy: By configuring the internal loopback port with a port sampling function and setting an appropriate sampling rate, accurate sampling of the lost packet can be ensured. An appropriate sampling rate can ensure that the lost packet is effectively captured without losing important information.

[0129] S108, the sampling message is sent to the CPU so that the CPU analyzes the sampling message to obtain a lost packet analysis result.

[0130] In the embodiments of the present specification, when the CPU analyzes the sampling message to obtain a lost packet analysis result, the CPU analyzes the sampling message to extract five-tuple information, including source IP address, source port, destination IP address, destination port and protocol type; based on the five-tuple information, the lost packet analysis result is obtained.

[0131] In the embodiments of the present specification, the above-mentioned content can be implemented by the following specific implementation schemes:

[0132] CPU analyzes the sampling message: the CPU uses a corresponding protocol analysis tool to analyze the sampling message.

[0133] Extract five-tuple information: extract source IP address, source port, destination IP address, destination port and protocol type from the analyzed message.

[0134] Lost packet analysis based on five-tuple information: according to the extracted five-tuple information, analyze the cause and situation of the lost packet. The specific cause of the lost packet can be determined by comparing with other network data, checking the routing table, etc.

[0135] Obtain the lost packet analysis result: the analyzed cause and situation of the lost packet are taken as the lost packet analysis result.

[0136] It should be noted that the above-described embodiments of the present specification have the following beneficial effects:

[0137] More accurate packet loss cause analysis: By extracting quintuple information, the specific location and related factors of packet loss can be determined more accurately. This helps to understand the reasons for packet loss, such as whether there are problems with specific source or destination IP addresses, ports or protocol types.

[0138] Targeted problem solving: Based on the packet loss analysis results obtained from quintuple information, more targeted measures can be provided to solve the problem of packet loss. For example, if it is found that packet loss is mainly concentrated in a certain specific source or destination IP address, further checks can be made on the network connection or device configuration of that address.

[0139] Optimization of network configuration: Understanding the quintuple information of packet loss can help optimize network configuration. For example, firewall rules, routing strategies or QoS (Quality of Service) settings can be adjusted according to the packet loss situation to improve network performance and reduce packet loss.

[0140] Troubleshooting and positioning: Quintuple information is very helpful for troubleshooting and positioning. It can provide detailed information about the lost packet, allowing network administrators to quickly find the problem and take appropriate measures to repair it.

[0141] Enhancing network security: By analyzing quintuple information, potential security threats or abnormal traffic patterns can be detected. This helps to take timely measures to protect network security and prevent malicious attacks or data breaches.

[0142] Supporting performance optimization decisions: Packet loss analysis results combined with quintuple information can provide decision-making basis for network performance optimization. For example, based on the requirements of different applications or services for quintuple, priority settings or resource allocation can be made to ensure the normal operation of critical business.

[0143] Further, when obtaining the packet loss analysis result based on the quintuple information, the quintuple information can be associated with the lost packet data packet to obtain association information; and the packet loss analysis result is obtained based on the association information.

[0144] In the embodiments of the present specification, with respect to the above, the following specific implementation schemes can be used:

[0145] Obtaining quintuple information: By parsing the sampled packet with the CPU, the quintuple information of source IP address, source port, destination IP address, destination port and protocol type is extracted.

[0146] Obtaining lost packet data packet: Obtain the data packet that has lost packets.

[0147] Associating quintuple information and lost packet data packet: The quintuple information is associated with the corresponding lost packet data packet, and some identifier or index can be used to establish the association relationship.

[0148] Storing the associated information: store the associated five-tuple information and the lost packet data packet for subsequent analysis and processing.

[0149] Analyzing the associated information: based on the associated information, analyze, for example, the characteristics of the lost packet data packet, the relationship with other data packets, etc., to determine the cause of the packet loss and possible solutions.

[0150] Obtaining the packet loss analysis result: according to the analysis result, the conclusion of the packet loss analysis is obtained, for example, it is determined that the packet loss is caused by network congestion, device failure or other reasons.

[0151] It should be noted that the embodiments of the present specification have the following beneficial effects through the above content:

[0152] More comprehensive packet loss analysis: by associating the five-tuple information with the lost packet data packet, more comprehensive packet loss analysis results can be obtained. This helps to understand the specific context of packet loss, including detailed information of the source and destination, as well as protocols and ports related to packet loss.

[0153] Accurate packet loss positioning: the associated information can help to more accurately locate the position of the packet loss. By associating the five-tuple with the lost packet data packet, it can be determined whether the packet loss occurs between a specific source and destination, or is related to a specific protocol or port.

[0154] In-depth understanding of network behavior: the packet loss analysis result based on the associated information can provide an in-depth understanding of network behavior. This helps to discover potential network problems, such as abnormal traffic patterns of specific applications or services, or frequent packet loss on specific network paths.

[0155] Targeted troubleshooting: the associated information makes troubleshooting more targeted. Based on the packet loss analysis result, focus can be concentrated on checking network components, devices or applications related to the associated information to quickly determine the root cause of the packet loss.

[0156] Optimizing network performance: understanding the association between packet loss and five-tuple can provide guidance for optimizing network performance. Network configuration can be adjusted, routing can be optimized, or traffic control strategies can be implemented based on the associated information to reduce packet loss and improve the overall performance of the network.

[0157] Further, when obtaining the packet loss analysis result based on the associated information, the packet loss mode of the lost packet data packet can be determined according to the associated information; one or more network problems that cause packet loss can be determined according to the packet loss mode; and the packet loss analysis result can be obtained according to the one or more network problems.

[0158] In the embodiments of the present specification, regarding the above content, the following specific implementation schemes can be used:

[0159] Correlation information analysis: Detailed analysis of the obtained correlation information. Observe the time series, number, distribution, etc. of the lost packet data. Compare the loss of packets under different quintuple information.

[0160] Determine the loss pattern: According to the analysis result of the correlation information, determine the mode of the lost packet data. For example, whether there is periodic loss, burst loss, loss of specific source or destination, etc.

[0161] Determine network problems: According to the loss pattern, infer one or more network problems that may cause packet loss. Possible network problems include network congestion, link failure, device failure, configuration error, etc. Network monitoring data and device logs can be combined to further confirm network problems.

[0162] Get the loss analysis result: The determined network problem is the loss analysis result. Provide detailed instructions, including the type of problem, possible causes and impact range.

[0163] It should be noted that the embodiments of the present application have the following beneficial effects through the above content:

[0164] Accurate positioning of packet loss causes: By determining the loss pattern, the network problem causing the loss can be more accurately identified. This helps quickly locate the root cause of the problem, reducing troubleshooting time and cost.

[0165] Comprehensive understanding of network status: According to the loss pattern, determine multiple network problems to comprehensively understand potential problems in the network. This helps to identify and solve potential problems that may affect network performance in advance, improving network stability and reliability.

[0166] Targeted problem solving: After identifying the specific network problem causing packet loss, targeted measures can be taken to solve it. This improves problem-solving efficiency and avoids blind attempts at various solutions, thereby faster recovery of normal network operation.

[0167] Optimize network performance: Solving network problems that cause packet loss can optimize network performance. Reducing packet loss can improve data transmission efficiency and accuracy, reduce latency, and improve user experience.

[0168] Prevent problems from happening again: Through analysis of the loss analysis result, lessons can be learned and appropriate preventive measures can be developed. This helps to avoid similar network problems from occurring again in the future and improves the overall reliability of the network.

[0169] It should be noted that in the process of Internet transmission, packet loss often occurs, affecting network performance. The packet loss sampling and counting function can detect packet loss that occurs during the forwarding process of the message inside the device. When packet loss occurs, the device will sample the packet loss and, according to the user's configured sampling rate, upload the sampling information to the CPU. The CPU analyzes the five-tuple information of the packet loss message, and finally presents the packet loss information to the user.

[0170] The communication device in the prior art can only perceive packet loss by counting the number of packets in the port entry and exit direction, obtaining the number of packet loss by subtracting the difference, and sensing packet loss.

[0171] The embodiment of the present specification provides a scheme, which redirects the packet loss message to a specified port, and then samples the redirected message according to the set sampling rate by the port sampling function to upload the CPU, and analyzes the five-tuple information by the CPU. The scheme realizes the visualization of packet loss and the characteristics of convenient and fast fault positioning.

[0172] The steps set by the embodiment of the present specification include:

[0173] 1. First, create an internal loopback port loopback A.

[0174] 2. Create a next hop nexthop B, and the exit of the next hop points to loopback A.

[0175] 3. Modify the ACL reject forwarding action to redirect to nexthop B.

[0176] 4. Point the next hop of the black hole route to nexthop B.

[0177] 5. Enable the port sampling function on the loopback port loopback A and set the sampling rate.

[0178] 6. Upload the sampled message to the CPU.

[0179] 7. The CPU analyzes the received message and extracts the five-tuple information, and feeds back the information to the client.

[0180] It should be noted that the packet enters the switch device, hits the ACL DROP rejection forwarding table item. The packet is not discarded directly, but is redirected to the next hop nexthop B, and is redirected to the loopback interface loopback A through the interface pointed to by the next hop. The port sampling function is enabled on the loopback interface loopback A, and the sampling rate is configured. The packet redirected to the loopback interface loopback A is sampled by the port at the configured sampling rate and sent to the CPU controller. After the CPU controller receives the packet, the five-tuple information of the packet is parsed, and the five-tuple information is sent to the client foreground and displayed to the user. The visualization of the packet loss information is realized.

[0181] The black hole routing packet enters the switch device, hits the black hole routing table item. The packet is not discarded directly, but is also redirected to the next hop nexthop B, and the subsequent forwarding process is the same as the process described above.

[0182] The embodiments of the present specification have the following beneficial effects:

[0183] 1. The scheme can realize the visualization of packet loss, facilitate the viewing of packet loss reasons and specific contents of packet loss, so as to achieve the purpose of accurate and rapid positioning of faults.

[0184] 2. The scheme can control the number of sampled packets sent to the CPU by setting the sampling rate of the loopback interface. Avoiding the impact of all discarded packets on the CPU, thereby avoiding the performance impact of excessive discarded packets.

[0185] Figure 2 A structure diagram of a packet loss sampling and analysis implementation device provided for one or more embodiments of the present specification, comprising: a creating unit 202, a routing pointing unit 204, a sampling unit 206 and an analyzing unit 208.

[0186] The creating unit 202 creates an internal loopback interface and a next hop node, and points the exit of the next hop node to the internal loopback interface;

[0187] The routing pointing unit 204 points the next hop of the packet loss data packet related route to the next hop node when packet loss occurs;

[0188] The sampling unit 206 samples the packet loss data packet on the internal loopback interface to obtain a sampling packet;

[0189] The analyzing unit 208 sends the sampling packet to the CPU so that the CPU analyzes the sampling packet to obtain a packet loss analysis result.

[0190] Figure 3A structural diagram of a packet loss sampling and analyzing implementation device for one or more embodiments of the present specification comprises:

[0191] at least one processor; and

[0192] a memory in communication connection with the at least one processor; wherein

[0193] the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to:

[0194] create an internal loopback interface and a next hop node, and point an egress of the next hop node to the internal loopback interface;

[0195] when packet loss occurs, point a next hop of a route related to a packet loss packet to the next hop node;

[0196] sample the packet loss packet at the internal loopback interface to obtain a sampling message;

[0197] send the sampling message to a CPU so that the CPU analyzes the sampling message to obtain a packet loss analysis result.

[0198] A non-volatile computer storage medium provided by one or more embodiments of the present specification stores computer executable instructions, and the computer executable instructions are executed by a computer to enable:

[0199] create an internal loopback interface and a next hop node, and point an egress of the next hop node to the internal loopback interface;

[0200] when packet loss occurs, point a next hop of a route related to a packet loss packet to the next hop node;

[0201] sample the packet loss packet at the internal loopback interface to obtain a sampling message;

[0202] send the sampling message to a CPU so that the CPU analyzes the sampling message to obtain a packet loss analysis result.

[0203] Each of the embodiments in the present specification is described in a progressive manner, and the same or similar parts between each of the embodiments can be referred to each other. Each of the embodiments focuses on the difference from other embodiments. In particular, for the device, equipment, and non-volatile computer storage medium embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the part of the method embodiment.

Claims

1. A method for implementing packet loss sampling and parsing, characterized in that, include: Create an internal loopback port and a next-hop node, and point the exit of the next-hop node to the internal loopback port; When packet loss occurs, the next hop of the route related to the lost packet is pointed to the next hop node; The lost data packets are sampled at the internal loopback interface to obtain sampled packets; The sampled message is sent to the CPU so that the CPU can parse the sampled message and obtain the packet loss analysis result; The CPU parses the sampled packet to obtain the packet loss parsing result, including: The CPU parses the sampled packet and extracts the five-tuple information, which includes the source IP address, source port, destination IP address, destination port, and protocol type. Based on the quintuple information, the packet loss parsing result is obtained; The process of obtaining the packet loss parsing result based on the five-tuple information includes: The quintuple information is associated with the lost data packet to obtain association information; Based on the aforementioned association information, the packet loss parsing result is obtained; The process of obtaining the packet loss parsing result based on the associated information includes: Based on the associated information, determine the packet loss mode of the lost data packet; Based on the packet loss pattern, identify one or more network problems that are causing the packet loss; The packet loss resolution result is obtained based on one or more of the aforementioned network problems.

2. The method according to claim 1, characterized in that, If the route related to the lost packet is ACL-rejected for forwarding, the step of pointing the next hop of the route related to the lost packet to the next hop node includes: The next hop for the ACL that refuses to forward is directed to the next hop node.

3. The method according to claim 1, characterized in that, If the route related to the lost data packet is a black hole route, the step of pointing the next hop of the route related to the lost data packet to the next hop node includes: The next hop of the black hole route is pointed to the next hop node.

4. The method according to claim 1, characterized in that, Before sampling the lost data packets at the internal loopback interface, the method further includes: Configure port sampling function on the internal loopback port and set an appropriate sampling rate.

5. A packet loss sampling and parsing implementation device, characterized in that, include: Create a unit, create an internal loopback port and a next-hop node, and point the outlet of the next-hop node to the internal loopback port; The routing pointing unit, when packet loss occurs, points the next hop of the route related to the lost data packet to the next hop node; The sampling unit samples the lost data packets at the internal loopback interface to obtain a sampled message; The parsing unit sends the sampled packet to the CPU so that the CPU can parse the sampled packet and obtain the packet loss parsing result; The CPU parses the sampled packet to obtain the packet loss parsing result, including: The CPU parses the sampled packet and extracts the five-tuple information, which includes the source IP address, source port, destination IP address, destination port, and protocol type. Based on the quintuple information, the packet loss parsing result is obtained; The process of obtaining the packet loss parsing result based on the five-tuple information includes: The quintuple information is associated with the lost data packet to obtain association information; Based on the aforementioned association information, the packet loss parsing result is obtained; The process of obtaining the packet loss parsing result based on the associated information includes: Based on the associated information, determine the packet loss mode of the lost data packet; Based on the packet loss pattern, identify one or more network problems that are causing the packet loss; The packet loss resolution result is obtained based on one or more of the aforementioned network problems.

6. A packet loss sampling and parsing implementation device, characterized in that, include: At least one processor; as well as, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enable the at least one processor to: Create an internal loopback port and a next-hop node, and point the exit of the next-hop node to the internal loopback port; When packet loss occurs, the next hop of the route related to the lost packet is pointed to the next hop node; The lost data packets are sampled at the internal loopback interface to obtain sampled packets; The sampled message is sent to the CPU so that the CPU can parse the sampled message and obtain the packet loss analysis result; The CPU parses the sampled packet to obtain the packet loss parsing result, including: The CPU parses the sampled packet and extracts the five-tuple information, which includes the source IP address, source port, destination IP address, destination port, and protocol type. Based on the quintuple information, the packet loss parsing result is obtained; The process of obtaining the packet loss parsing result based on the five-tuple information includes: The quintuple information is associated with the lost data packet to obtain association information; Based on the aforementioned association information, the packet loss parsing result is obtained; The process of obtaining the packet loss parsing result based on the associated information includes: Based on the associated information, determine the packet loss mode of the lost data packet; Based on the packet loss pattern, identify one or more network problems that are causing the packet loss; The packet loss resolution result is obtained based on one or more of the aforementioned network problems.

7. A non-volatile computer storage medium, characterized in that, It stores computer-executable instructions, which, when executed by a computer, can achieve the following: Create an internal loopback port and a next-hop node, and point the exit of the next-hop node to the internal loopback port; When packet loss occurs, the next hop of the route related to the lost packet is pointed to the next hop node; The lost data packets are sampled at the internal loopback interface to obtain sampled packets; The sampled message is sent to the CPU so that the CPU can parse the sampled message and obtain the packet loss analysis result; The CPU parses the sampled packet to obtain the packet loss parsing result, including: The CPU parses the sampled packet and extracts the five-tuple information, which includes the source IP address, source port, destination IP address, destination port, and protocol type. Based on the quintuple information, the packet loss parsing result is obtained; The process of obtaining the packet loss parsing result based on the five-tuple information includes: The quintuple information is associated with the lost data packet to obtain association information; Based on the aforementioned association information, the packet loss parsing result is obtained; The process of obtaining the packet loss parsing result based on the associated information includes: Based on the associated information, determine the packet loss mode of the lost data packet; Based on the packet loss pattern, identify one or more network problems that are causing the packet loss; The packet loss resolution result is obtained based on one or more of the aforementioned network problems.

Images