Cross-segment monitoring and detection method, system and medium based on unidirectional transmission equipment

By adopting a cross-network monitoring and detection method based on one-way transmission equipment in the multi-domain service system, the problem of not being able to perceive the operating status of other domain services and being difficult to locate file transfer loss nodes is solved, real-time monitoring and rapid problem positioning of multi-domain environments are realized.

CN119299321BActive Publication Date: 2025-04-11南京中孚信息技术有限公司
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202411803552.6
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-12-10
Publication Date
2025-04-11
Estimated Expiration
2044-12-10

AI Technical Summary

Technical Problem

In multi-domain service systems, existing solutions cannot sense the service operation status of other domains, and it is difficult to quickly locate lost file transfer nodes.

Method used

The cross-network segment monitoring and detection method based on one-way transmission equipment is adopted, and node data is collected through cross-network switching system nodes and one-way transmission equipment, node information and routing information are added, data files are generated, and these data are analyzed and analyzed through a unified operation and maintenance supervision system to obtain the service status and system status of each node, as well as file transfer records, and determine whether the files are lost and the nodes are lost.

Benefits of technology

Real-time data collection and transmission across different domains is realized, the system's ability to perceive the operating status of services in multi-domain environments is enhanced, network problems can be discovered and handled in a timely manner, and file transfer lost nodes are quickly located.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119299321B_ABST
    Figure CN119299321B_ABST
Patent Text Reader

Abstract

The present application discloses a cross-segment monitoring and detection method, system and medium based on unidirectional transmission equipment, which mainly relates to the field of cross-segment detection technology, and is used to solve the problem that the existing solution cannot monitor and detect the service operation status of other domains in the scenario of multi-domain business system, and it is difficult to quickly locate the node where the file transmission is lost. It includes: adding the data files data collected by the cross-network switching system nodes of each network segment passed during the transmission process and the data files data collected by the unidirectional transmission equipment to the preset data file set in sequence; obtaining the preset data file set of the end node through the unified operation and maintenance supervision system; parsing the data files data of each node based on the node information; and then obtaining the business status and system status of the node based on the node data in the node data file data; determining whether the file is lost and the node where the file is lost based on the transmission record of the file in the data file data at each node.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the technical field of cross-segment detection, and in particular to a cross-segment monitoring detection method, system and medium based on unidirectional transmission equipment. Background Art

[0002] In different network domains, data should flow from low-density network domains to high-density network domains. One-way transmission equipment is usually deployed from low-density network domains to high-density network domains, such as single guides, network gates or optical gates (hereinafter referred to as one-way transmission equipment). Currently, many cross-network data exchange fields, typical work scenarios such as the Internet, work network, private network and other multiple network domains deploy cross-network data exchange systems. The cross-network data exchange system is based on one-way transmission equipment to achieve the exchange of business and files in different office network areas (hereinafter referred to as network domains or network segments) isolated from the network. With the increasing standardization of network security management, three or more multi-domain business systems will also appear.

[0003] The existing switching system needs to check the switching system service status in its own domain in its own network domain to determine whether the business is normal. Due to the isolation of network domains and the increasing number of businesses, checking the service status in different network domains will undoubtedly increase the workload for operation and maintenance supervision and business diagnosis, and when a file is lost, it is impossible to quickly locate the location of the lost file.

[0004] Therefore, there is an urgent need for a cross-segment monitoring and detection method, system and medium based on unidirectional transmission equipment to solve the problem that in the actual business operation process, each network domain can only know the service status of its own network domain, and often cannot perceive the service operation status of other network domains, and it is difficult to quickly locate the node where file transfer is lost. Summary of the invention

[0005] In response to the above-mentioned deficiencies in the prior art, the present application provides a cross-segment monitoring and detection method, system and medium based on unidirectional transmission equipment to solve the problem that the existing solutions are unable to perceive the service operation status of other domains in the scenario of multi-domain business systems, and it is difficult to quickly locate the lost nodes of file transfer.

[0006] In a first aspect, the present application provides a cross-segment monitoring and detection method based on a unidirectional transmission device, the method comprising:

[0007] The node data of the network segment corresponding to the cross-network switching system node is collected through the starting cross-network switching system node on the preset transmission link, and the node information and routing information are added to generate a data file data, which is added to the preset data file collection, and the preset data file collection is transmitted to the unidirectional transmission device corresponding to the routing information; the node data of the unidirectional transmission device itself is collected through the unidirectional transmission device, the node information and routing information are added to generate a data file data, which is added to the preset data file collection, and the preset data file collection is transmitted to the next cross-network switching system node corresponding to the routing information; based on the routing information carrying the preset transmission link, the cross-network switching system nodes of each network segment passed during the transmission process are added to the preset data file collection. The data files data of the system nodes and the data files data of the one-way transmission devices are added to the preset data file set in sequence; until the preset data file set is transmitted to the end node of the preset transmission link; wherein the nodes include cross-network switching system nodes and one-way transmission devices; the preset data file set of the end node is obtained through a unified operation and maintenance supervision system; based on the node information, the data files data of each node are obtained by parsing; then based on the node data in the data files data of each node, the business status and system status of the node are obtained; based on the transmission records of the files in the data files data at each node, it is determined whether the file is lost and the node where the file is lost.

[0008] In one implementation of the present application, node data of the network segment corresponding to the node of the cross-network switching system is collected, and node information and routing information are added to generate a data file data, which specifically includes:

[0009] Through several collectors corresponding to the nodes of the cross-network switching system, the node data involved in the current network segment is collected and written into the collection file; wherein the node data at least includes: device status, network status, program status, data link status, and business file transmission information; the collection agent service module obtains the node information and routing information of the cross-network switching system node; all collection files in the directory are read regularly, node information and routing information are added, and data file data is generated.

[0010] In one implementation of the present application, the collection file is named using the collection type-date.cumulative value.json format; wherein the cumulative value starts from 1, and the cumulative value is +1 each time a file is generated, and the daily cumulative value starts from 1; support is provided for controlling the size of a single collection file from preset dimensions; wherein the preset dimensions are any one or more of the following: time, number of records.

[0011] In one implementation of the present application, transmitting a preset data file set to a unidirectional transmission device corresponding to routing information specifically includes:

[0012] The routing information corresponding to the data file data of the node of the cross-network switching system is updated through the preset routing information in the data routing service deployed on the node of the cross-network switching system; the preset data file set is transmitted to the one-way transmission device corresponding to the updated routing information through the data routing service.

[0013] In one implementation of the present application, the node data at least includes the device status, network status, program status, and data exchange link of the node; based on the node data in each node data file data, the business status and system status of the node are obtained, specifically including: by reading the CPU information, memory information, and hard disk information in the device status, and comparing them with the preset device status health threshold, determining whether the device status of the node is abnormal; reading the network port name, network port type, bandwidth, receive and send rate, receive and send bytes, duplex status, network port load, and network port status in the network status, and displaying the network status of each network port of the node in the form of a curve graph; reading the service name, process ID, CPU occupancy, memory occupancy, and operation status in the program status, and presenting the program status of each service of the node in a list; reading the link channel name, channel status, and status description in the data exchange link, and presenting the data exchange link data of each link channel of the node in a list.

[0014] In one implementation of the present application, the method also includes: when the device status is abnormal, issuing an abnormal device status alarm reminder; when the operating status of the program status is abnormal, issuing an abnormal program status alarm reminder; when the network port load involved in the network status exceeds a threshold or the network port status is abnormal, issuing an abnormal network status alarm reminder.

[0015] In a second aspect, the present application provides a cross-segment monitoring and detection system based on a unidirectional transmission device, the system comprising:

[0016] A cross-network switching system node is used to collect node data of a network segment corresponding to the cross-network switching system node, add node information and routing information, generate a data file data, add it to a preset data file set, and transmit the preset data file set to a unidirectional transmission device corresponding to the routing information; a unidirectional transmission device is used to collect its own node data, add node information and routing information, generate a data file data, add it to a preset data file set, and transmit the preset data file set to a next cross-network switching system node corresponding to the routing information; based on the routing information of the preset transmission link, the data files data of the cross-network switching system nodes of each network segment passed during the transmission process and the data files data of the unidirectional transmission device are sequentially added to the preset data file set; until the preset data file set is transmitted to the end node of the preset transmission link; wherein the node includes the cross-network switching system node and the unidirectional transmission device; a unified operation and maintenance supervision system is used to obtain the preset data file set of the end node; based on the node information, the data file data of each node is parsed and obtained; and then based on the node data in the data file data of each node, the business status and system status of the node are obtained; based on the transmission record of the file in the data file data at each node, whether the file is lost and the node where the file is lost are determined.

[0017] In one implementation of the present application, several collectors are preset in the cross-network switching system node, which are used to collect node data involved in the current network segment and write it into the collection file; wherein the node information at least includes: device status, network status, program status, data link status, and business file transmission information; the cross-network switching system node includes a collection agent service module, which is used to obtain the node information and routing information of the cross-network switching system node; all collection files in the directory are read regularly, node information and routing information are added, and data file data is generated.

[0018] In a third aspect, the present application provides a non-volatile computer storage medium on which computer instructions are stored. When the computer instructions are executed, they implement a cross-segment monitoring and detection method based on a unidirectional transmission device as described above.

[0019] Those skilled in the art can understand that the present application has at least the following beneficial effects:

[0020] This application adopts a cross-segment monitoring and detection method based on unidirectional transmission equipment, which can cross different network domains and collect and transmit node data information of each network segment in real time. This realizes the system's perception of the service operation status in a distributed, multi-domain environment, which helps to promptly discover and deal with potential network problems. The unified operation and maintenance supervision system in this application can receive and parse data file collections from different network segments, and realize centralized monitoring and management of multi-domain business systems. That is, it solves the problem that existing solutions cannot monitor and detect the service operation status of other domains in the scenario of multi-domain business systems.

[0021] In addition, the cross-network switching system nodes, one-way transmission equipment, and unified operation and maintenance supervision system in this application are designed as an expandable modular structure, which is convenient for flexible configuration and expansion according to actual needs. It helps to adapt to network environments of different scales and complexities and reduce the difficulty of future system upgrades and modifications.

[0022] In addition, the present application can determine whether a file is lost and the node where the file is lost by parsing the preset data file set of the end node, thereby solving the problem of difficulty in quickly locating the node where the file is lost during file transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Some embodiments of the present disclosure are described below with reference to the accompanying drawings, in which:

[0024] Figure 1 This is a flow chart of a cross-segment monitoring and detection method based on a unidirectional transmission device provided in an embodiment of the present application.

[0025] Figure 2 It is a schematic diagram of the internal structure of a cross-segment monitoring and detection system based on a unidirectional transmission device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0026] It should be understood by those skilled in the art that the embodiments described below are only preferred embodiments of the present disclosure, and do not mean that the present disclosure can only be implemented through the preferred embodiments. The preferred embodiments are only used to explain the technical principles of the present disclosure, and are not used to limit the protection scope of the present disclosure. Based on the preferred embodiments provided by the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work should still fall within the protection scope of the present disclosure.

[0027] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0028] 1. In order to clearly describe the technical solutions of the embodiments of the present application, some of the terms and technologies involved in the embodiments of the present application are briefly introduced below:

[0029] The cross-network exchange system node deployment service includes data collection service and data routing service; among them, the data collection service is responsible for collecting node data information, and the node data information includes but is not limited to device resource status, network status, program running status, data exchange link status, business file transmission information, etc.

[0030] The data routing service is responsible for forwarding the collected data in the current node to the next node. The data routing service relies on the cross-network data exchange system to forward data.

[0031] The present application deploys relevant service data exchange nodes on each cross-network data exchange node in each network domain, including but not limited to data exchange systems, one-way transmission equipment, etc., wherein the one-way transmission equipment includes two nodes, the sending end and the receiving end of the transmission equipment.

[0032] The collected data of each node of the cross-network data exchange system is finally gathered at the end node. Statistical analysis is performed on the end node to generate business diagnosis results, which are displayed through the unified operation and maintenance supervision system, realizing the function of supervising systems in multiple network domains at a single node, including the system status, service status, file loss status, etc. of each node.

[0033] The technical solution proposed in the embodiments of the present application is described in detail below with reference to the accompanying drawings.

[0034] The embodiment provides a cross-segment monitoring and detection method based on a unidirectional transmission device, such as Figure 1 As shown, the method provided in the embodiment of the present application mainly includes the following steps:

[0035] Step 110: collect node data of the network segment corresponding to the inter-network switching system node through the starting inter-network switching system node on the preset transmission link, add node information and routing information, generate a data file data, add it to the preset data file set, and transmit the preset data file set to the unidirectional transmission device corresponding to the routing information.

[0036] It should be noted that relevant services are deployed on each cross-network data exchange node in each network domain. The cross-network exchange system node deployment services include data collection services and data routing services; among them, the data collection service collects the information required by this node, including collectors and collection agents. Different types of collectors collect different types of information, such as device status, network status, program status, data link status, business file transfer information, etc.

[0037] Specifically, multiple collectors collect different types of information and write them into collection files in a specified format.

[0038] The collection file name format is: collection type-date.accumulated value.json. The accumulated value (n) starts from 1, and increases by 1 each time a file is generated. It is reset to zero every day and starts accumulating from 1 again. For example, the file transfer information is written to the file filetrans-2024-08-08.10.json.tmp. During the process of writing files, the files all end with .tmp.

[0039] The collection file supports controlling the size of a single collection file from two dimensions: time or number of records. Both dimensions are configurable, for example, the time dimension is set to 1 minute and the record number threshold is set to 100.

[0040] When the threshold configured in any dimension is reached first in the two dimensions, the collection file of the cumulative value n is written to the end, the file is renamed, the .tmp suffix is ​​removed, and the collection file is generated.

[0041] The cumulative value n of the new acquisition file is incremented, that is, the acquisition data will be written into another acquisition file.

[0042] The collection of device status, network status, program status, and link status can be done through the corresponding collectors. The collected program list status indicators, link port list, etc. can all be dynamically configured.

[0043] The collection of business file transfer logs is done through a file transfer collector, and the collection methods include but are not limited to collecting through log files of the transfer business. It can also be collected through other methods that can filter out file transfer records.

[0044] For example, through business log file collection, you can monitor the log files of the transmission business and collect file transfer records through the embedded point marks in the log files.

[0045] If there are file transfer records in Kafka messages, the file transfer records can be collected through Kafka messages.

[0046] The collected information varies depending on the type of collector, but it basically needs to cover the following general information: system name, subsystem name, module, transmission status, collection time, log level, collection identifier, summary, description, status, etc. Personalized information refers to CPU usage, memory usage, program status, link channel status, file sender, file receiver, file name, file unique ID, etc.

[0047] Each node has a collector, which can be dynamically set according to the collection parameter configuration, such as the type of information collected, the frequency of collection, etc.

[0048] The node information includes the node name, node code, node IP, node packaging time, etc.

[0049] The routing information includes the next node and target node information to which the file is to be transferred.

[0050] The information collected by multiple collectors is processed by the collection agent, which periodically reads all the collection files (.json format files) in the directory, adds the corresponding node information and routing information, and generates the data file data.

[0051] In addition, in the step, the preset data file set is transmitted to the one-way transmission device corresponding to the routing information, which can be specifically:

[0052] The routing information corresponding to the data file data of the node of the cross-network switching system is updated through the preset routing information in the data routing service deployed on the node of the cross-network switching system; the preset data file set is transmitted to the one-way transmission device corresponding to the updated routing information through the data routing service.

[0053] Step 120: collect own node data through unidirectional transmission equipment, add node information and routing information, generate data file data, add it to the preset data file set, and transmit the preset data file set to the next cross-network switching system node corresponding to the routing information.

[0054] It should be noted that the one-way transmission device has a data routing service function and will also collect information of this node. Similar to step 110, all data are transmitted to the one-way receiving side and transmitted to the data exchange system of the next node through the data routing service corresponding to the one-way transmission device. If there are only two network domains, the data file has reached the end node after passing through the one-way transmission device; if there are multiple network domains, the data routing service will continue to transmit the data file data until the end node.

[0055] Step 130: based on the routing information of the preset transmission link, the data files data of the cross-network switching system nodes and the data files data of the unidirectional transmission devices of each network segment passed during the transmission process are sequentially added to the preset data file set; until the preset data file set is transmitted to the end node of the preset transmission link.

[0056] Among them, the nodes include cross-network switching system nodes and unidirectional transmission equipment.

[0057] It is understandable to those skilled in the art that data files data are collected at the end node, and these data cover the device status, network status, service status, file transfer status, etc. of each node. According to these data, statistical analysis can be performed to obtain the status of the entire data exchange link, the system status of each node, the information of system or file alarms, file loss statistics, etc., so as to diagnose the business situation of the entire cross-network exchange system. For example, for a file with the same unique ID, checking the node to which it is transmitted can determine whether the file is lost. For example, for a file, there is only a record of a single-channel sending module, but no receiving record, then it is determined that the file is lost in the single-channel transmission process.

[0058] Step 140, obtain the preset data file set of the end node through the unified operation and maintenance supervision system; based on the node information, parse and obtain the data file data of each node; then based on the node data in the data file data of each node, obtain the business status and system status of the node; based on the transmission record of the file in the data file data at each node, determine whether the file is lost and the node where the file is lost.

[0059] It should be noted that the node information at least includes device status, network status, program status, data exchange link and file transfer status.

[0060] This step can be specifically as follows:

[0061] By reading the CPU information, memory information, and hard disk information in the device status and comparing them with the preset device status health threshold, it is determined whether the device status of the node is abnormal.

[0062] In some embodiments, the device operating status processing process: Input: read the system-date.n.data file.

[0063] Output: parse out the node name, CPU, memory, and hard disk.

[0064] CPU information: The data file contains the CPU usage rate collected periodically and whether the CPU usage status is normal. The recorded data needs to support the display of the CPU usage curve in the form of a graph;

[0065] Memory information: The data file contains the regularly collected memory usage rate, whether the memory usage status is normal, the total memory, the memory usage, and the remaining memory. The recorded data needs to support the display of the memory usage curve in the form of a graph;

[0066] Hard disk information: The data file contains two dimensions: space and inode number. It collects the usage rate of each partition, the total capacity of the hard disk, the usage and the remaining usage. The recorded data needs to support the presentation of the overall usage rate of the hard disk and the usage rate of each partition in the form of a curve or pie chart.

[0067] Read the network port name, network port type, bandwidth, receiving and sending rate, number of bytes received and sent, duplex status, network port load, and network port status in the network status, and display the network status of each network port of the node in the form of a curve graph.

[0068] In some embodiments, the device network status processing process: Input: Read network-date.n.data file.

[0069] Output: each node name, network port name, network port attributes (management port, HA port, service port), network port type (electrical port / optical port), duplex status, bandwidth, number of bytes received and sent, and receive and send rates (kbps or mbps).

[0070] Processing: Display the usage of each network port (send / receive), network port upper limit, etc. in the form of a curve graph. The recorded data needs to support display in the form of a curve graph.

[0071] Read the service name, process ID, CPU usage, memory usage, and operation status in the program status, and present the program status of each service of the node in a list.

[0072] In some embodiments, the program running status processing process: Input: read program-date.n.data file.

[0073] Output: parse out the node name, service programs, process ID, CPU usage, memory usage, operating status (normal / abnormal), and status description. The recorded data needs to be displayed in a table.

[0074] Processing: Supports presenting the running status of each service in a list format, including node name, service name, process ID, CPU usage, memory usage, operating status (normal / abnormal), and status description.

[0075] Read the link channel name, channel status, and status description in the data exchange link, and present the data exchange link data of each link channel of the node in a list.

[0076] In some embodiments, the switch link status process: Input: Read switchlink-date.n.data file.

[0077] Output: parse out the node name, link channel name, channel status, and status description.

[0078] deal with:

[0079] Supports presenting the node name, channel name, channel status, and status description of each channel in a list format. Displays the node name, channel name, channel status, and status description of the channel based on the single-channel heartbeat detection to see if the one-way channel is working properly.

[0080] Read the file transfer status, parse the node name, file ID, file name, processing action, and processing result; obtain the initiating node and receiving node of the file corresponding to the file ID; obtain the file transfer record of the file corresponding to the file ID at the initiating node and the receiving node; wherein the file transfer record includes at least the file name, task ID, file sender, and recipient; when the file transfer records of the initiating node and the receiving node are different, determine that the file corresponding to the file ID is lost.

[0081] In addition, this application can also issue abnormal alarms, which can be specifically:

[0082] When the device status is abnormal, an abnormal device status alarm will be issued; when the program status is abnormal, an abnormal program status alarm will be issued; when the network port load involved in the network status exceeds the threshold or the network port status is abnormal, an abnormal network status alarm will be issued; when there is file loss, a file loss alarm will be issued.

[0083] It should be noted that the alarm reminder can be to display the alarm information on the server interface corresponding to the unified operation and maintenance supervision system.

[0084] Based on the foregoing description, it can be seen that this embodiment, through information collection and data routing, collects data information of multiple nodes in different network domains to one node for analysis, and obtains system monitoring information and file transfer information of all nodes. Through a unified operation and maintenance supervision system, the status of the entire cross-network data exchange system can be viewed intuitively and conveniently, and the business health status can be quickly diagnosed, thereby enhancing the supervision of the cross-network exchange system, improving the efficiency of locating abnormal problems and the speed of problem discovery, and providing a reliable operation and maintenance supervision and business diagnosis solution for products in the field of cross-network data exchange.

[0085] In addition, this application Figure 2 A cross-segment monitoring and detection system based on a unidirectional transmission device is provided in an embodiment of the present application. Figure 2 As shown, the system provided in the embodiment of the present application mainly includes:

[0086] The inter-network switching system node 210 is set on a preset transmission link, and is used to collect node data of the network segment corresponding to the inter-network switching system node 210, and add node information and routing information, generate a data file data, add it to a preset data file set, and transmit the preset data file set to the unidirectional transmission device 220 corresponding to the routing information.

[0087] Several collectors are preset in the cross-network switching system node 210, which are used to collect node data involved in the current network segment and write it into the collection file; wherein the node information at least includes: device status, network status, program status, data link status, and business file transmission information; the cross-network switching system node 210 includes a collection agent service module, which is used to obtain the node information and routing information of the cross-network switching system node 210; all collection files in the directory are read regularly, node information and routing information are added, and data file data is generated.

[0088] The inter-network switching system node 210 also transmits the preset data file set to the unidirectional transmission device 220 through the data routing service.

[0089] The unidirectional transmission device 220 is used to collect its own node data, add node information and routing information, generate data file data, add it to the preset data file set, and transmit the preset data file set to the next cross-network switching system node 210 corresponding to the routing information; based on the routing information carrying the preset transmission link, the data file data of the cross-network switching system node 210 of each network segment passed during the transmission process and the data file data of the unidirectional transmission device 220 are added to the preset data file set in sequence; until the preset data file set is transmitted to the end node of the preset transmission link.

[0090] The nodes include an inter-network switching system node 210 and a unidirectional transmission device 220 .

[0091] The unified operation and maintenance supervision system 230 is used to obtain a preset data file set of the end node; based on the node information, parse and obtain the data file data of each node; then based on the node data in the data file data of each node, obtain the business status and system status of the node; based on the transmission record of the file in the data file data at each node, determine whether the file is lost and the node where the file is lost.

[0092] In addition, an embodiment of the present application further provides a non-volatile computer storage medium on which executable instructions are stored. When the executable instructions are executed, a cross-segment monitoring and detection method based on the unidirectional transmission device 220 as described above is implemented.

[0093] So far, the technical solutions of the present disclosure have been described in combination with the above multiple embodiments, but it is easy for those skilled in the art to understand that the protection scope of the present disclosure is not limited to these specific embodiments. Without departing from the technical principles of the present disclosure, those skilled in the art can split and combine the technical solutions in the above-mentioned various embodiments, and can also make equivalent changes or replacements to the relevant technical features. Any changes, equivalent replacements, improvements, etc. made within the technical concept and / or technical principle of the present disclosure will fall within the protection scope of the present disclosure.

Claims

1. A cross-segment monitoring and detection method based on unidirectional transmission equipment, characterized in that: The method comprises: Collect node data of the network segment corresponding to the inter-network exchange system node through the starting inter-network exchange system node on the preset transmission link, add node information and routing information, generate data file data, add it to the preset data file set, and transmit the preset data file set to the unidirectional transmission device corresponding to the routing information; Among them, the node data of the corresponding network segment of the cross-network switching system node is collected, and the node information and routing information are added to generate the data file data, which specifically includes: Through several collectors corresponding to the nodes of the cross-network switching system, the node data involved in the current network segment is collected and written into the collection file; wherein the node data at least includes: device status, network status, program status, data link status, and business file transmission information; obtain the node information and routing information of the cross-network switching system node; read all the collection files in the directory regularly, add the node information and routing information, and generate the data file data; The step of transmitting the preset data file set to the one-way transmission device corresponding to the routing information specifically includes: Update the routing information corresponding to the data file data of the node of the cross-network exchange system through the preset routing information in the data routing service deployed on the node of the cross-network exchange system; transmit the preset data file set to the one-way transmission device corresponding to the updated routing information through the data routing service; Collect its own node data through a unidirectional transmission device, add node information and routing information, generate a data file data, add it to a preset data file set, and transmit the preset data file set to the next cross-network switching system node corresponding to the routing information; Based on the routing information of the preset transmission link, the data files data of the cross-network switching system nodes and the data files data of the unidirectional transmission devices of each network segment passed during the transmission process are sequentially added to the preset data file set; until the preset data file set is transmitted to the end node of the preset transmission link; wherein the node includes the cross-network switching system node and the unidirectional transmission device; Obtain the preset data file set of the end node through the unified operation and maintenance supervision system; based on the node information, parse and obtain the data file data of each node; then based on the node data in the data file data of each node, obtain the business status and system status of the node; based on the transmission record of the file in the data file data at each node, determine whether the file is lost and the node where the file is lost.

2. The cross-segment monitoring and detection method based on unidirectional transmission equipment according to claim 1 is characterized in that: Use the collection type-date.accumulated value.json format to name the collection file; The cumulative value starts from 1, and the cumulative value increases by 1 each time a file is generated. The cumulative value starts from 1 every day. Supports controlling the size of a single collection file from preset dimensions; the preset dimensions are any one or more of the following: time, number of records.

3. The cross-segment monitoring and detection method based on unidirectional transmission equipment according to claim 1 is characterized in that: The node data at least includes the device status, network status, program status, and data exchange link of the node involved; Based on the node data in each node data file data, obtain the business status and system status of the node, including: By reading the CPU information, memory information, and hard disk information in the device status and comparing them with the preset device status health threshold, it is determined whether the device status of the node is abnormal; Read the network port name, network port type, bandwidth, receiving and sending rate, number of bytes received and sent, duplex status, network port load, and network port status in the network status, and display the network status of each network port of the node in the form of a curve graph; Read the service name, process ID, CPU usage, memory usage, and operation status in the program status, and present the program status of each service of the node in a list format; Read the link channel name, channel status, and status description in the data exchange link, and present the data exchange link data of each link channel of the node in a list.

4. The cross-segment monitoring and detection method based on unidirectional transmission equipment according to claim 3 is characterized in that: The method further comprises: When the device status is abnormal, an abnormal device status alarm will be issued; When the operating status of the program status is abnormal, an abnormal program status alarm reminder is issued; When the network port load involved in the network status exceeds the threshold or the network port status is abnormal, a network status abnormality alarm reminder will be issued.

5. A cross-segment monitoring and detection system based on unidirectional transmission equipment, characterized in that: The system comprises: A cross-network exchange system node is used to collect node data of a network segment corresponding to the cross-network exchange system node, and add node information and routing information to generate a data file data, add it to a preset data file set, and transmit the preset data file set to a unidirectional transmission device corresponding to the routing information; wherein, a plurality of collectors are preset in the cross-network exchange system node, which are used to collect node data involved in the current network segment and write it into a collection file; wherein the node information at least includes: device status, network status, program status, data link status, and business file transmission information; the cross-network exchange system node includes a collection agent service module, which is used to obtain node information and routing information of the cross-network exchange system node; all collection files under the directory are read regularly, node information and routing information are added, and data file data is generated; wherein, transmitting the preset data file set to the unidirectional transmission device corresponding to the routing information specifically includes: updating the routing information corresponding to the cross-network exchange system node data file data through the preset routing information in the data routing service deployed on the cross-network exchange system node; transmitting the preset data file set to the unidirectional transmission device corresponding to the updated routing information through the data routing service; A unidirectional transmission device is used to collect its own node data, add node information and routing information, generate data file data, add it to a preset data file set, and transmit the preset data file set to the next inter-network switching system node corresponding to the routing information; based on the routing information of the preset transmission link, the data file data of the inter-network switching system node of each network segment passed during the transmission process and the data file data of the unidirectional transmission device are sequentially added to the preset data file set; until the preset data file set is transmitted to the end node of the preset transmission link; wherein the node includes the inter-network switching system node and the unidirectional transmission device; A unified operation and maintenance supervision system is used to obtain a preset data file set of the end node; based on the node information, the data file data of each node is parsed; then based on the node data in the data file data of each node, the business status and system status of the node are obtained; based on the transmission record of the file in the data file data at each node, it is determined whether the file is lost and the node where the file is lost.

6. A non-volatile computer storage medium, characterized in that: Computer instructions are stored thereon, and when the computer instructions are executed, they implement a cross-segment monitoring and detection method based on a unidirectional transmission device as described in any one of claims 1-4.

Citation Information

Patent Citations

  • Safe and trusted gateway system, control method, medium, equipment and terminal

    CN116055254A

  • Unidirectional isolated data acquisition and offline algorithm verification system

    WO2020177441A1