Message exception analysis method and device and storage medium

Abstract

The invention provides a message exception analysis method and device and a storage medium, relates to the technical field of communication, and can analyze the reason of message exception. The method comprises the following steps: the electronic equipment receives a first message from target equipment, wherein the first message comprises an abnormal message; the electronic equipment inputs the abnormal message into the target simulator to obtain an original forwarding path and abnormal message information of the abnormal message, the abnormal message information is information that the abnormal message is abnormal, the original forwarding path is a forwarding path under the condition that the message is not abnormal, and the target simulator is any simulator in the at least one simulator. And the electronic equipment displays the original forwarding path of the abnormal message and the abnormal message information.

Description

Technical Field

[0001] The present application relates to the field of communications, and in particular to a method, device and storage medium for analyzing message anomalies. Background Art

[0002] With the increasing popularity of broadband applications, users have higher and higher demands on broadband networks, and the number of network devices (replacement or addition) introduced in broadband networks is also increasing. In the process of network devices processing services, network devices can forward and process multiple messages to handle various services.

[0003] However, in the process of message forwarding, there may be various abnormal situations (such as message packet loss, message forwarding abnormality, etc.), which may lead to message forwarding failure and affect the handling of services. Therefore, how to analyze the cause of message abnormality has become an urgent problem to be solved. Summary of the invention

[0004] The present application provides a method, device and storage medium for analyzing message anomalies, which can analyze the cause of the message anomaly.

[0005] In order to achieve the above objectives, this application adopts the following technical solutions:

[0006] In the first aspect, the present application provides a method for parsing message anomalies, which is applied to an electronic device, wherein the electronic device is deployed with at least one simulator, and the simulator is used to simulate the forwarding path of the message. In the method, a first message from a target device is received, and the first message includes: an abnormal message. The abnormal message is input into the target simulator, and the original forwarding path and abnormal message information of the abnormal message are obtained. The abnormal message information is information about the abnormality of the abnormal message, and the original forwarding path is the forwarding path of the message when no abnormality occurs. The target simulator is any simulator among at least one simulator. The original forwarding path and abnormal message information of the abnormal message are displayed.

[0007] Based on the above technical solution, the electronic device receives a first message from the target device, and the first message includes: an abnormal message. Afterwards, the electronic device inputs the abnormal message into the target simulator, obtains the original forwarding path and abnormal message information of the abnormal message, the abnormal message information is the information that the abnormal message is abnormal, the original forwarding path is the forwarding path of the message when no abnormality occurs, and the target simulator is any simulator in at least one simulator. Then, the electronic device can display the original forwarding path and abnormal message information of the abnormal message. In this way, after the electronic device receives the abnormal message, the electronic device can obtain the original forwarding path and abnormal message information through the target simulator, and display the original forwarding path and abnormal message information to achieve the effect of white-box analysis of the abnormal message. Moreover, by white-boxing the abnormal message through the simulator, the efficiency of parsing the abnormal message can be improved. In this way, it is convenient for operation and maintenance personnel to manage the abnormal message through the original forwarding path and abnormal message information, thereby reducing the probability of failure.

[0008] In one possible design, it is determined whether there is configuration information in the first message, the configuration information being used to configure the simulator. If there is configuration information in the first message, the target simulator is updated based on the configuration information.

[0009] In a possible design, the first message includes: an identifier of a target device, and a correspondence between the device identifier and at least one simulator is stored in the electronic device. According to the identifier of the target device, a target simulator is determined from at least one simulator, and the identifier of the target device corresponds to the target simulator.

[0010] In one possible design, the configuration information includes: a routing table and register information, and the register information is used to indicate whether the target routing is enabled.

[0011] In one possible design, the abnormal message includes at least one of the following: a message discarded by the target device and a message of abnormal service, and the abnormal service is configured by the user.

[0012] In a second aspect, the present application provides a device for analyzing message anomalies, the device comprising: a receiving unit, a processing unit and a display unit.

[0013] The receiving unit is used to receive a first message from a target device, wherein the first message includes an abnormal message. The processing unit is used to input the abnormal message into a target simulator, and obtain an original forwarding path and abnormal message information of the abnormal message, wherein the abnormal message information is information about an abnormality of the abnormal message, and the original forwarding path is a forwarding path of the message when no abnormality occurs, and the target simulator is any simulator of at least one simulator. The display unit is used to display the original forwarding path and abnormal message information of the abnormal message.

[0014] In one possible design, the processing unit is further configured to determine whether there is configuration information in the first message, the configuration information being used to configure the simulator. The processing unit is further configured to update the target simulator based on the configuration information if there is configuration information in the first message.

[0015] In one possible design, the first message includes: an identifier of a target device, and a correspondence between the device identifier and at least one simulator is stored in the electronic device. The processing unit is also used to determine a target simulator from at least one simulator based on the identifier of the target device, and the identifier of the target device corresponds to the target simulator.

[0016] In one possible design, the configuration information includes: a routing table and register information, and the register information is used to indicate whether the target routing is enabled.

[0017] In one possible design, the abnormal message includes at least one of the following: a message discarded by the target device and a message of abnormal service, and the abnormal service is configured by the user.

[0018] In a third aspect, the present application provides a message anomaly parsing device, the device comprising: a processor and a memory; the processor and the memory are coupled; the memory is used to store one or more programs, the one or more programs including computer execution instructions, when the message anomaly parsing device is running, the processor executes the computer execution instructions stored in the memory to implement the message anomaly parsing method as described in the first aspect and any possible implementation method of the first aspect.

[0019] In a fourth aspect, the present application provides a computer-readable storage medium, which stores instructions. When the instructions are executed on a computer, the computer executes the message anomaly parsing method described in the above-mentioned first aspect and any possible implementation method of the first aspect.

[0020] In a fifth aspect, the present application provides a chip, the chip including a processor and a communication interface, the communication interface and the processor are coupled, and the processor is used to run a computer program or instructions to implement the message anomaly parsing method described in the first aspect and any possible implementation method of the first aspect.

[0021] In the above scheme, the technical problems that can be solved by the message anomaly analysis device, computer equipment, computer storage medium or chip and the technical effects achieved can be referred to the technical problems and technical effects solved by the above-mentioned first aspect, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 A system architecture diagram of a communication system provided in an embodiment of the present application;

[0023] Figure 2 A flowchart of a method for analyzing message anomalies provided in an embodiment of the present application;

[0024] Figure 3 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application;

[0025] Figure 4 A flowchart of another method for analyzing message anomalies provided in an embodiment of the present application;

[0026] Figure 5 A flowchart of another method for analyzing message anomalies provided in an embodiment of the present application;

[0027] Figure 6 A flowchart of another method for analyzing message anomalies provided in an embodiment of the present application;

[0028] Figure 7 A flowchart of another method for analyzing message anomalies provided in an embodiment of the present application;

[0029] Figure 8 A schematic diagram of the structure of a device for analyzing message anomalies provided in an embodiment of the present application;

[0030] Fig. 9 A schematic diagram of the structure of another device for analyzing message anomalies provided in an embodiment of the present application;

[0031] Fig.10 A conceptual partial view of a computer program product provided for an embodiment of the present application. DETAILED DESCRIPTION

[0032] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0033] In this article, the character " / " generally indicates that the objects before and after are in an "or" relationship. For example, A / B can be understood as A or B.

[0034] The terms “first” and “second” in the description and claims of the present application are used to distinguish different objects rather than to describe a specific order of the objects.

[0035] In addition, the terms "including" and "having" and any variations thereof mentioned in the description of this application are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or modules is not limited to the listed steps or modules, but may optionally include other steps or modules that are not listed, or may optionally include other steps or modules that are inherent to these processes, methods, products or devices.

[0036] In addition, in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present concepts in a specific way.

[0037] With the increasing popularity of broadband applications, users have higher and higher demands on broadband networks, and the number of network devices (replacement or addition) introduced in broadband networks is also increasing. In the process of network devices processing services, network devices can forward and process multiple messages to handle various services.

[0038] However, in the process of message forwarding, there may be various abnormal situations (such as message loss, message forwarding abnormality, etc.), which may lead to message forwarding failure and affect the handling of services. Therefore, how to analyze the cause of message abnormality has become an urgent problem to be solved.

[0039] Currently, the cause of message anomalies can be diagnosed through network equipment diagnostic tools and information collection tools. However, network equipment diagnostic tools and information collection tools take a long time to process, and the diagnostic method is black box diagnosis, which makes it difficult to accurately diagnose complex business forwarding anomalies or occasional packet loss problems. Alternatively, the information collected can be analyzed manually, but the fault diagnosis efficiency is low.

[0040] In order to solve the above problems, an embodiment of the present application provides a method for parsing message anomalies, wherein an electronic device receives a first message from a target device, and the first message includes: an abnormal message. Afterwards, the electronic device inputs the abnormal message into a target simulator, and obtains the original forwarding path and abnormal message information of the abnormal message, wherein the abnormal message information is information about the abnormality of the abnormal message, and the original forwarding path is the forwarding path of the message when no abnormality occurs, and the target simulator is any simulator of at least one simulator. Then, the electronic device can display the original forwarding path and abnormal message information of the abnormal message.

[0041] In this way, after the electronic device receives the abnormal message, the electronic device can obtain the original forwarding path and abnormal message information through the target simulator, and display the original forwarding path and abnormal message information to achieve the effect of white-box analysis of the abnormal message. In addition, by white-boxing the abnormal message through the simulator, the efficiency of abnormal message analysis can be improved. In this way, it is convenient for operation and maintenance personnel to manage the abnormal message through the original forwarding path and abnormal message information, thereby reducing the probability of failure.

[0042] The implementation environment of the embodiments of the present application is introduced below.

[0043] like Figure 1 As shown, a communication system provided in an embodiment of the present application includes a network device 101 (eg, a base station) and an electronic device 102 (eg, a terminal or a server).

[0044] The base station may include various forms of base stations, such as macro base stations, micro base stations (also called small stations), relay stations, access points, etc. Specifically, it may be an access point (AP) in a wireless local area network (WLAN), a base station (Base Transceiver Station, BTS) in a global system for mobile communications (GSM) or code division multiple access (CDMA), a base station (NodeB, NB) in a wideband code division multiple access (WCDMA), an evolved Node B (eNB or eNodeB) in LTE, or a relay station or access point, or a vehicle-mounted device, a wearable device, and a next generation Node B (gNB) in a future 5G network or a base station in a future evolved public land mobile network (PLMN) network, etc.

[0045] A terminal can be a device with transceiver functions. The terminal can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; it can also be deployed on the water (such as ships, etc.); it can also be deployed in the air (such as airplanes, balloons, and satellites, etc.). The terminal includes a handheld device, a vehicle-mounted device, a wearable device, or a computing device with wireless communication functions. Exemplarily, the terminal can be a mobile phone, a tablet computer, or a computer with wireless transceiver functions. The terminal device can also be a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal in industrial control, a wireless terminal in unmanned driving, a wireless terminal in telemedicine, a wireless terminal in a smart grid, a wireless terminal in a smart city, a wireless terminal in a smart home, etc.

[0046] It should be noted that the server may be a single physical server, or a server cluster consisting of multiple servers. Alternatively, the server cluster may also be a distributed cluster. Alternatively, the server may be a cloud server. The embodiments of the present application do not limit the specific implementation of the server.

[0047] In the embodiment of the present application, the network device 101 can obtain the abnormal message and transmit the abnormal message to the electronic device 102, and the electronic device 102 analyzes the abnormal message to obtain the abnormal cause of the abnormal message.

[0048] The embodiments of the present application are described in detail below in conjunction with the accompanying drawings.

[0049] like Figure 2 As shown, a method for parsing message anomalies provided in an embodiment of the present application includes:

[0050] S201. An electronic device receives a first message from a target device.

[0051] The first message includes: abnormal messages. The abnormal messages include at least one of the following: messages discarded by the target device and messages of abnormal services, and the abnormal services are configured by the user.

[0052] It should be noted that the target device may be the above network device, such as a base station, a network element device, etc. Users (such as operation and maintenance personnel) may set some services in the target device as abnormal services according to the usage of the services.

[0053] Optionally, the abnormal message also includes: a message that is different from the original forwarding path.

[0054] In one possible implementation, the target device may include: a forwarding chip, a central processing unit (CPU), and storage (memory or flash memory FALSH). The forwarding chip can set the forwarding behavior through the chip microcode, and the discarded messages are transferred to the CPU by default, and the messages of abnormal services can also be set to be mirrored to the CPU. The CPU can receive the abnormal messages transmitted by the forwarding chip and store the abnormal messages in the memory or flash. Then, the target device can periodically send abnormal messages to the electronic device (also called a network management or monitoring device).

[0055] For example, Figure 3 As shown, the target device includes: a forwarding chip 301, a CPU 302 and a storage 303. The forwarding chip and the CPU can be connected via a bus, and the CPU and the storage can be connected via a bus. The forwarding chip may include multiple network ports (such as port a and port b), which can be used to obtain abnormal messages. The CPU may include a management network port (such as network port 1), and the CPU may send abnormal messages to the electronic device through the management network port.

[0056] S202: The electronic device inputs the abnormal message into the target simulator to obtain the original forwarding path and abnormal message information of the abnormal message.

[0057] The abnormal message information is information about the abnormality of the abnormal message, and the original forwarding path is the forwarding path of the message when no abnormality occurs.

[0058] It should be noted that the embodiments of the present application do not limit the abnormal message information. For example, the abnormal message information may include the node where the message is discarded. For another example, the abnormal message information may include the abnormal forwarding path of the message (i.e., a path different from the original forwarding path).

[0059] In an embodiment of the present application, at least one simulator is deployed in the electronic device, the simulator is used to simulate the forwarding path of the message, and the target simulator is any one of the at least one simulator.

[0060] In a possible design, the target simulator is configured with initial information, which may include: a routing table and register information, wherein the routing table is used to indicate a forwarding path of a message, and the register information is used to indicate target routing enablement.

[0061] Exemplarily, the target route can be an Internet Protocol version (English: Internet Protocol version, IPv4) route or an IPv6 route. If the register information is 1, the target route is an IPv4 route, that is, the IPv4 route is used. If the register information is 0, the target route is an IPv6 route, that is, the IPv6 route is used.

[0062] In a possible implementation, the electronic device can simulate the forwarding path of the abnormal message through the target simulator to obtain the original forwarding path and the real forwarding path of the abnormal message. Then, the electronic device can obtain the abnormal message information based on the original forwarding path and the real forwarding path of the abnormal message.

[0063] In some embodiments, the first message further includes: an identifier of the target device, and the electronic device stores a correspondence between the identifier of the device and at least one simulator. The electronic device can determine the target simulator from at least one simulator according to the identifier of the target device, and the identifier of the target device corresponds to the target simulator.

[0064] For example, if simulator a, simulator b and simulator c are deployed in the electronic device, device identification 01 corresponds to simulator a, device identification 02 corresponds to simulator b, and device identification 03 corresponds to simulator c. If the first message includes device identification 02, the target simulator is simulator b.

[0065] Optionally, the electronic device may include multiple forwarding chips, and one forwarding chip corresponds to one emulator.

[0066] For example, for a programmable chip, one microcode corresponds to one emulator, and for an Application Specific Integrated Circuit (ASIC) chip, one chip type corresponds to one emulator.

[0067] S203: The electronic device displays the original forwarding path of the abnormal message and abnormal message information.

[0068] Based on the above technical solution, the electronic device receives a first message from the target device, and the first message includes: an abnormal message. Afterwards, the electronic device inputs the abnormal message into the target simulator, obtains the original forwarding path and abnormal message information of the abnormal message, the abnormal message information is the information that the abnormal message is abnormal, the original forwarding path is the forwarding path of the message when no abnormality occurs, and the target simulator is any simulator in at least one simulator. Then, the electronic device can display the original forwarding path and abnormal message information of the abnormal message. In this way, after the electronic device receives the abnormal message, the electronic device can obtain the original forwarding path and abnormal message information through the target simulator, and display the original forwarding path and abnormal message information to achieve the effect of white-box analysis of the abnormal message. Moreover, by white-boxing the abnormal message through the simulator, the efficiency of parsing the abnormal message can be improved. In this way, it is convenient for operation and maintenance personnel to manage the abnormal message through the original forwarding path and abnormal message information, thereby reducing the probability of failure.

[0069] like Figure 4 As shown, a model training method provided in an embodiment of the present application includes:

[0070] S401. The electronic device determines whether there is configuration information in the first message.

[0071] The configuration information is used to configure the simulator, and includes: a routing table and register information, wherein the register information is used to indicate that the target routing is enabled.

[0072] In an embodiment of the present application, after the electronic device receives the first message from the target device, the electronic device may determine whether configuration information exists in the first message.

[0073] It should be noted that, combined with Figure 3 It can be seen that the target device includes a CPU, which can collect the underlying interface provided by the network device chip manufacturer, collect the changes of the chip relative to the initial information (such as routing table and register information), update the chip configuration file (ie configuration information) in real time, and send it to the electronic device periodically. Among them, the abnormal message stored in the memory or flash can form a packet file, and the stored configuration information can form a chip config difference file.

[0074] Optionally, the configuration information includes information different from the initial information, that is, information that has been changed in the initial information.

[0075] It is understandable that the full register information and routing table are large in number and will take up a lot of storage space and network bandwidth. Only recording the changed configuration can save resources.

[0076] In some embodiments, if the first message contains configuration information, the electronic device executes S402. If the first message contains no configuration information, the electronic device executes S202.

[0077] S402: The electronic device updates the target simulator based on the configuration information.

[0078] In a possible implementation, if the first message contains configuration information, the electronic device may update the routing table and register information.

[0079] In this way, the simulator can be updated in combination with the real-time data of the target device, thereby improving the authenticity of the simulator's simulated forwarding path, and further improving the accuracy of the obtained abnormal message information and the original forwarding path.

[0080] In an embodiment of the present application, after the electronic device updates the target emulator, the electronic device can input the abnormal message into the target emulator (ie, the updated target emulator) to obtain the original forwarding path and abnormal message information of the abnormal message.

[0081] Exemplarily, the electronic device can obtain the packet file and configdifference file regularly uploaded by the target device, determine the target emulator based on the target device, and update the routing table and register information by loading the configuration difference file. Then, for the messages in the packet file, the electronic device can perform white-box software simulation of the microcode, and can fully provide the white-box forwarding behavior and abnormal message information of each message. For example, the abnormal message information is: the message identifier (such as the name) of the discarded message, the reason for the message discard, and the target microcode that caused the abnormal forwarding behavior (such as the forwarding microcode includes: microcode a, microcode b and microcode c, where microcode b forwarding is abnormal).

[0082] That is to say, in the embodiment of the present application, if there is configuration information in the first data file, the electronic device first executes S402 and then executes S202.

[0083] It is understandable that the electronic device determines whether there is configuration information in the first message, and the configuration information is used to configure the simulator. If there is configuration information in the first message, the electronic device updates the target simulator based on the configuration information. In this way, the simulator can be updated in combination with the real-time data of the target device, and the authenticity of the simulator's simulated forwarding path can be improved, thereby improving the accuracy of the abnormal message information and the original forwarding path obtained.

[0084] It should be noted that the electronic device in the embodiment of the present application can deploy a network device message forwarding white box analysis subsystem, and the network device message forwarding white box analysis subsystem can execute the steps executed by the electronic device. A network device message collection subsystem can be deployed in the target device, and the network device message collection subsystem can execute the steps executed by the target device. The embodiment of the present application does not limit this.

[0085] The following is an introduction to the embodiments of the present application with reference to specific examples. Figure 5 As shown, it shows the process of a network device obtaining an abnormal message and forwarding it to an electronic device. The user configures the discarded message or abnormal message on the network device to be sent to the local CPU forwarding chip. The microcode runs according to the user configuration to send the relevant messages received on the physical port that meet the requirements to the CPU for processing. The CPU receives the relevant messages through the internal bus for processing, stores them in the packetfile file of the memory or flash, and regularly sends them to the electronic device for analysis.

[0086] like Figure 6As shown, it shows the process of updating the emulator of the network device. The configuration update of the forwarding chip of the network device can be triggered by a preset network protocol (such as various network protocols running on switches and routers) or a user command. The software development kit (SDK) running in the CPU monitors the changes in the routing table and register information (i.e., configuration information). Then, the CPU can store the configuration information in the form of a file and send it to the electronic device regularly.

[0087] like Figure 7 As shown, it shows the process of an electronic device parsing an abnormal message. Step one, the electronic device can obtain the packet file and config difference file uploaded by the network device, and regularly start the message diagnosis and analysis program. Step two, the electronic device determines whether there is configuration information in the config difference file. If there is configuration information, the electronic device can control the emulator to load and update the configuration file, and synchronously update the routing table and register information. If there is no configuration information, the electronic device executes step three. Step three, the electronic device determines whether there is a new abnormal message in the packet file. If there is a new abnormal message, the electronic device parses the abnormal message based on the emulator. For example, the reasons for each message that needs to be analyzed are analyzed one by one, and the complete microcode forwarding path of the discarded message or the forwarded abnormal message is reproduced, and the cause of the fault is completely white-boxed. Analysis conclusion.

[0088] The above mainly introduces the scheme provided by the embodiment of the present application from the perspective of the method. It is understandable that the parsing device or electronic device for message anomalies, in order to realize the above functions, includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should easily realize that, in combination with the parsing method steps of the message anomalies of each example described in the embodiment disclosed in this application, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of this application.

[0089] The embodiment of the present application also provides a message anomaly analysis device. The message anomaly analysis device can be a computer device, a CPU in the above computer device, a parsing module in the above computer device for parsing message anomalies, or a client in the above computer device for parsing message anomalies.

[0090] The embodiment of the present application can divide the analysis of message anomalies into functional modules or functional units according to the above method example. For example, each functional module or functional unit can be divided corresponding to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules or functional units. Among them, the division of modules or units in the embodiment of the present application is schematic, which is only a logical function division, and there may be other division methods in actual implementation.

[0091] like Figure 8 FIG. 1 is a schematic diagram of a structure of a message anomaly analysis device provided in an embodiment of the present application. The message anomaly analysis device is used to perform Figure 2 or Figure 4 The method for analyzing abnormal messages shown in the figure. The device for analyzing abnormal messages may include: a receiving unit 801 , a processing unit 802 and a display unit 803 .

[0092] The receiving unit 801 is used to receive a first message from a target device, wherein the first message includes an abnormal message. The processing unit 802 is used to input the abnormal message into a target simulator, and obtain an original forwarding path and abnormal message information of the abnormal message, wherein the abnormal message information is information about an abnormality of the abnormal message, and the original forwarding path is a forwarding path of the message when no abnormality occurs. The target simulator is any simulator among the at least one simulator. The display unit 803 is used to display the original forwarding path and abnormal message information of the abnormal message.

[0093] In one possible design, the processing unit 802 is further configured to determine whether there is configuration information in the first message, the configuration information being used to configure the simulator. The processing unit 802 is further configured to update the target simulator based on the configuration information if there is configuration information in the first message.

[0094] In one possible design, the first message includes: an identifier of a target device, and a correspondence between the device identifier and at least one simulator is stored in the electronic device. The processing unit 802 is also used to determine a target simulator from at least one simulator according to the identifier of the target device, and the identifier of the target device corresponds to the target simulator.

[0095] In one possible design, the configuration information includes: a routing table and register information, and the register information is used to indicate whether the target routing is enabled.

[0096] In one possible design, the abnormal message includes at least one of the following: a message discarded by the target device and a message of abnormal service, and the abnormal service is configured by the user.

[0097] Fig. 9The hardware structure diagram of a message anomaly analysis device according to an exemplary embodiment is shown. The message anomaly analysis device may include a processor 902, and the processor 902 is used to execute application code to implement the message anomaly analysis method in this application.

[0098] The processor 902 may be a CPU, a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of the program of the present application.

[0099] like Fig. 9 As shown, the message anomaly analysis device may further include a memory 903. The memory 903 is used to store application program codes for executing the solution of the present application, and the execution is controlled by the processor 902.

[0100] The memory 903 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 903 may exist independently and be connected to the processor 902 via the bus 904. The memory 903 may also be integrated with the processor 902.

[0101] like Fig. 9 As shown, the message anomaly analysis device may further include a communication interface 901, wherein the communication interface 901, the processor 902, and the memory 903 may be coupled to each other, for example, via a bus 904. The communication interface 901 is used to exchange information with other devices, for example, to support information exchange between the message anomaly analysis device and other devices.

[0102] It should be pointed out that Fig. 9 The device structure shown in the figure does not constitute a limitation on the parsing device for the message anomaly, except Fig. 9In addition to the components shown, the message anomaly parsing device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0103] In actual implementation, the functions implemented by the processing unit 802 can be Fig. 9 The processor 902 shown calls the program code in the memory 903 to implement.

[0104] The present application also provides a computer-readable storage medium, on which instructions are stored, and when the instructions in the computer-readable storage medium are executed by a processor of a computer device, the computer is able to execute the message anomaly parsing method provided in the above-mentioned embodiment. For example, the computer-readable storage medium may be a memory 903 including instructions, and the above instructions may be executed by a processor 902 of a computer device to complete the above method. Optionally, the computer-readable storage medium may be a non-temporary computer-readable storage medium, for example, the non-temporary computer-readable storage medium may be a ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, etc.

[0105] Fig.10 A conceptual partial view of a computer program product provided by an embodiment of the present application is schematically shown, where the computer program product includes a computer program for executing a computer process on a computing device.

[0106] In one embodiment, the computer program product is provided using a signal bearing medium 1000. The signal bearing medium 1000 may include one or more program instructions that, when executed by one or more processors, may provide the above-described Figure 2 , Figure 4 Thus, for example, reference to Figure 2 In the embodiment shown in , one or more features of S201 to S203 may be undertaken by one or more instructions associated with the signal bearing medium 1000. In addition, Fig.10 The program instructions in also describe example instructions.

[0107] In some examples, the signal bearing medium 1000 may include a computer readable medium 1001, such as, but not limited to, a hard drive, a compact disk (CD), a digital video disk (DVD), a digital tape, a memory, a read-only memory (ROM) or a random access memory (RAM), and the like.

[0108] In some implementations, signal bearing medium 1000 may include computer recordable medium 1002 such as, but not limited to, a memory, a read / write (R / W) CD, a R / W DVD, or the like.

[0109] In some implementations, signal bearing medium 1000 may include communication medium 1003 such as, but not limited to, digital and / or analog communication media (eg, fiber optic cables, waveguides, wired communication links, wireless communication links, etc.).

[0110] The signal bearing medium 1000 may be communicated by a wireless form of communication medium 1003. The one or more program instructions may be, for example, computer executable instructions or logic implemented instructions.

[0111] In some examples, such as for Figure 8 The described message anomaly parsing apparatus may be configured to provide various operations, functions, or actions in response to one or more program instructions in the computer-readable medium 1001 , the computer-recordable medium 1002 , and / or the communication medium 1003 .

[0112] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0113] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0114] The units described as separate components may or may not be physically separated, and the components shown as units may be one physical unit or multiple physical units, that is, they may be located in one place or distributed in multiple different places. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0115] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0116] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the prior art or the full classification part or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium, including a number of instructions to enable a device (which can be a single-chip microcomputer, chip, etc.) or a processor (processor) to execute the full classification part or part of the steps of each embodiment method of the present application. The aforementioned storage medium includes various media that can store program codes, such as-U disk, mobile hard disk, ROM, RAM, disk or CD.

[0117] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto, and any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for analyzing message anomalies, characterized in that: Applied to an electronic device, the electronic device is deployed with at least one simulator, the simulator is used to simulate the forwarding path of the message; the method comprises: receiving a first message from a target device, wherein the first message includes: an abnormal message; Input the abnormal message into the target simulator, obtain the original forwarding path and abnormal message information of the abnormal message, wherein the abnormal message information is the information that the abnormal message is abnormal, and the original forwarding path is the forwarding path of the message when no abnormality occurs, and the target simulator is any simulator among the at least one simulator; The original forwarding path of the abnormal message and the abnormal message information are displayed.

2. The method according to claim 1, characterized in that After receiving the first message from the target device, the method further includes: Determine whether there is configuration information in the first message, the configuration information being used to configure the simulator; If the configuration information exists in the first message, the target simulator is updated based on the configuration information.

3. The method according to claim 1 or 2, characterized in that: The first message includes: an identifier of the target device, and the electronic device stores a correspondence between the device identifier and the at least one emulator; before inputting the abnormal message into the target emulator to obtain the original forwarding path of the abnormal message, the method further includes: The target simulator is determined from the at least one simulator according to the identifier of the target device, the identifier of the target device corresponding to the target simulator.

4. The method according to claim 1 or 2, characterized in that: The configuration information includes: a routing table and register information, and the register information is used to indicate whether the target routing is enabled.

5. The method according to claim 1 or 2, characterized in that: The abnormal message includes at least one of the following: a message discarded by the target device and a message of an abnormal service, where the abnormal service is configured by a user.

6. A message anomaly analysis device, characterized in that: Applied to an electronic device, the electronic device is deployed with at least one simulator, the simulator is used to simulate the forwarding path of the message, the device comprises: A receiving unit, configured to receive a first message from a target device, wherein the first message includes: an abnormal message; A processing unit, configured to input the abnormal message into a target simulator, obtain an original forwarding path of the abnormal message and abnormal message information, wherein the abnormal message information is information indicating that the abnormal message is abnormal, and the original forwarding path is a forwarding path of the message when no abnormality occurs, and the target simulator is any simulator among the at least one simulator; The display unit is used to display the original forwarding path of the abnormal message and the abnormal message information.

7. The device according to claim 6, characterized in that The processing unit is further used to determine whether there is configuration information in the first message, the configuration information being used to configure the simulator; The processing unit is further configured to update the target simulator based on the configuration information if the configuration information exists in the first message.

8. The device according to claim 6 or 7, characterized in that The first message includes: an identifier of the target device, wherein the electronic device stores a correspondence between the device identifier and the at least one emulator; The processing unit is further configured to determine the target simulator from the at least one simulator according to the identifier of the target device, wherein the identifier of the target device corresponds to the target simulator.

9. The device according to claim 6 or 7, characterized in that The configuration information includes: a routing table and register information, and the register information is used to indicate whether the target routing is enabled.

10. The device according to claim 6 or 7, characterized in that The abnormal message includes at least one of the following: a message discarded by the target device and a message of an abnormal service, where the abnormal service is configured by a user.

11. A message anomaly analysis device, characterized in that: include: Processor and memory; The processor is coupled to the memory; The memory is used to store one or more programs, which include computer-executable instructions. When the message abnormality analysis device is running, the processor executes the computer-executable instructions stored in the memory to enable the message abnormality analysis device to perform the method as described in any one of claims 1-5.

12. A computer-readable storage medium, wherein instructions are stored in the computer-readable storage medium, characterized in that: When a computer executes the instruction, the computer performs the method according to any one of claims 1 to 5.

Images