Network state monitoring method and system of distributed control system

Abstract

The invention provides a network state monitoring method and system of a distributed control system, and belongs to the field of network monitoring. The method for monitoring the network state of the decentralized control system comprises the following steps of: constructing a network topology structure of the decentralized control system by utilizing a simple network management protocol and a link layer discovery protocol according to acquired various equipment information of each piece of equipment; sNMP polling is carried out on the network topology structure to obtain polling scanning information; meanwhile, trap information is obtained through a trap mechanism of a simple network management protocol, the trap information is an abnormal alarm from a switch port, and detailed abnormal information of the corresponding switch port is determined according to the trap information; and respectively displaying the polling scanning information and the detailed abnormal information of the switch port. According to the method, a real and accurate network topology structure is established, and a simple network management protocol is utilized to monitor the network state of the distributed system, so that network state fault information can be accurately positioned.

Description

Technical Field

[0001] The present invention relates to the field of network monitoring, and in particular to a network status monitoring method of a distributed control system and a network status monitoring terminal of a distributed control system. Background Art

[0002] Although the network status monitoring terminals currently on the market can monitor the operation data of the equipment, perceive the network situation, and provide fault alarms, their underlying implementation is often based on the analysis and processing of data packets in network communications, resulting in the intelligently generated network topology being derived from the network logical connection relationship based on the source address and the destination address, focusing on the data flow path between network devices, and the fault location capability of network nodes is limited. Especially when facing complex fault scenarios in distributed control system networks, it cannot directly reflect the actual location and wiring method of physical devices, and cannot quickly and accurately locate the root cause of the problem. Summary of the invention

[0003] In order to solve the above-mentioned technical defects, the present invention provides a network status monitoring method and system for a distributed control system. The network status monitoring method for a distributed control system obtains multiple device information of each device in the distributed control system, and uses a simple network protocol and a link layer discovery protocol to establish a real and accurate network topology structure based on the obtained multiple device information. The simple network management protocol is used to monitor the network status of the distributed system based on the real and accurate network topology structure, and the network status fault information can be accurately located.

[0004] A first aspect of the present invention provides a network status monitoring method for a distributed control system, wherein the distributed control system comprises: a distributedly deployed switch and a plurality of devices connected to the switch, wherein the switch adopts a simple network management protocol, and the method comprises: Using the simple network management protocol and the link layer discovery protocol to build a network topology structure of the distributed control system based on the various device information obtained from each device; Perform SNMP polling on the network topology to obtain polling scan information; at the same time, use the trap mechanism of the simple network management protocol to obtain trap information, the trap information is an abnormal alarm from the switch port, and determine the detailed abnormal information of the corresponding switch port according to the trap information; The polling scan information and the detailed abnormal information of the switch port are displayed respectively.

[0005] In an embodiment of the present invention, the network topology structure of a distributed control system is constructed by using a simple network management protocol and a link layer discovery protocol, including: Use the Simple Network Management Protocol to send an SNMP GET request to the switch to obtain the connection relationship on the switch; Use the link layer discovery protocol to query the LLDP neighbor table of the switch, and obtain the connection relationship between the switch and each device based on the LLDP neighbor table; The network topology of the distributed control system is constructed based on the connection relationship on the switch and the connection relationship between the switch and each device.

[0006] In an embodiment of the present invention, the method further includes: Acquire multiple device information of each device in the distributed control system, and associate multiple device information of the same device to obtain device association information of each device; Among them, various device information includes: IP address, network segment information, device name and other basic information of the device.

[0007] In the embodiment of the present invention, the performing SNMP polling on the network topology structure to obtain an abnormal polling result includes: Using the Simple Network Management Protocol to perform SNMP polling scans on the switches of the distributed control system according to the network topology, and using the Internet Control Message Protocol to scan all managed devices in the distributed control system according to the network topology, and obtaining the polling scan information generated after each round of Simple Network Management Protocol scanning and each round of Internet Control Message Protocol scanning; The method simultaneously uses the trap mechanism of the simple network management protocol to obtain trap information, wherein the trap information is abnormal information from the switch port, and determines the switch port corresponding to the abnormal information according to the trap information to obtain detailed abnormal information of the switch port, including: While performing SNMP polling on the network topology structure, receiving trap information from the switch port using the trap mechanism of the simple network management protocol; When the trap information is received, an SNMP walk operation is performed on the switch port corresponding to the trap information to obtain detailed abnormal information of the switch port corresponding to the trap information.

[0008] In the embodiment of the present invention, the displaying of the polling scanning information and the detailed abnormal information of the switch port respectively includes: According to the ARP table, the mac address in the polling scan information generated after each round of simple network management protocol scanning and each round of Internet control message protocol scanning is converted into an IP address; Searching the device association information for a device name associated with the IP address according to the IP address; Replacing the MAC address in the polling scanning information generated after each round of SNMP scanning and each round of ICP scanning with the device name to obtain the polling scanning information for displaying to the user; Convert the MAC address in the detailed abnormal information of the switch port obtained after the trap walk operation to the IP address according to the ARP protocol table; Searching the device association information for a device name associated with the IP address according to the IP address; The mac address in the detailed abnormal information of the switch port is replaced with the device name to obtain the detailed abnormal information of the switch port for displaying to the user.

[0009] A second aspect of the present invention provides a distributed control system, the distributed control system comprising: a network status monitoring terminal and distributedly deployed switches; The distributed deployed switches are used to construct a network topology structure of a distributed control system using a simple network management protocol and a link layer discovery protocol; The network status monitoring terminal is used to perform SNMP polling on the network topology structure to obtain polling scanning information; at the same time, the trap mechanism of the simple network management protocol is used to obtain trap information, and the trap information is an abnormal alarm from the switch port. The detailed abnormal information of the corresponding switch port is determined according to the trap information; and it is used to display the polling scanning information and the detailed abnormal information of the switch port respectively.

[0010] In an embodiment of the present invention, the network status monitoring terminal includes: The device information acquisition module is used to acquire multiple device information of each device in the distributed control system, and associate multiple device information of the same device to obtain device association information of each device; A polling module is used to perform SNMP polling scans on switches of a distributed control system according to a network topology structure using a simple network management protocol, and to scan all managed devices in the distributed control system according to a network topology structure using an Internet control message protocol, and to obtain polling scan information generated after each round of simple network management protocol scanning and each round of Internet control message protocol scanning; A detailed abnormal information acquisition module is used to receive trap information from a switch port by using a trap mechanism of a simple network management protocol while performing SNMP polling on the network topology structure; When the trap information is received, an SNMP walk operation is performed on the switch port corresponding to the trap information to obtain detailed abnormal information of the switch port corresponding to the trap information.

[0011] In an embodiment of the present invention, the network status monitoring terminal further includes: Alarm module: used to warn users based on the alarm results of the distributed control system obtained by the judgment module.

[0012] A third aspect of the present invention provides a computer device, comprising: a memory storing a computer program; The processor is used to execute the computer program to implement the network status monitoring method of the distributed control system as described above.

[0013] A fourth aspect of the present invention provides a computer-readable storage medium having a computer program stored thereon, wherein the computer program is executed by a processor to implement the network status monitoring method of the distributed control system as described above. The network status monitoring method of the distributed control system obtains multiple device information of each device in the distributed control system, and uses a simple network protocol and a link layer discovery protocol to establish a real and accurate network topology structure based on the obtained multiple device information. The simple network management protocol is used to monitor the network status of the distributed system based on the real and accurate network topology structure, and network status fault information can be accurately located.

[0014] Other features and advantages of the technical solution of the present invention will be described in detail in the specific implementation section below. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The drawings described herein are used to provide a further understanding of the present invention and constitute a part of the present invention. The exemplary embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings: Figure 1 It is a schematic diagram of a traditional network monitoring solution in the prior art; Figure 2 is a flow chart of a method for monitoring network status of a distributed control system provided by an embodiment of the present invention; Figure 3 It is a structural block diagram of a network status monitoring terminal of a distributed control system provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0016] In order to make the technical solutions and advantages of the embodiments of the present invention more clearly understood, the exemplary embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than an exhaustive list of all the embodiments. It should be noted that the embodiments of the present invention and the features in the embodiments can be combined with each other without conflict.

[0017] In the description of the present invention, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside" and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as limiting the present invention.

[0018] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include one or more of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0019] In the present invention, unless otherwise clearly specified and limited, the terms such as "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection, an electrical connection, or can communicate with each other; it can be a direct connection, or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0020] In the process of realizing the present invention, the inventor found that although the network status monitoring terminal on the market can monitor the operation data of the equipment, perceive the network situation, and provide fault alarms, its underlying implementation is often based on the analysis and processing of data packets in network communication, resulting in the intelligently generated network topology also being derived from the network logical connection relationship based on the source address and the destination address, focusing on the data flow path between network devices, and the fault location capability of network nodes is limited. Especially when facing complex fault scenarios of distributed control system networks, it cannot directly reflect the actual location and wiring method of physical devices, and cannot quickly and accurately locate the root cause of the problem.

[0021] Figure 1 This is a schematic diagram of a traditional network monitoring solution in the prior art, such as Figure 1As shown in the figure, in the traditional method of network monitoring, you only need to enter the IP segment of the device, then parse the segment, and use the network scanning tool to scan all IP addresses of the segment to determine which devices are online or responding. If a device exceeds the set threshold, the system can send an alarm notification via email. Frequent network scanning in traditional network monitoring methods will increase network traffic. Especially in large-scale networks, regular scanning of all IPs in the segment may cause great pressure on network bandwidth and greatly affect the data transmission efficiency of power plant production business. This method mainly relies on the response of the network layer, and it is difficult to monitor the status of the application layer. The device does not have an active reporting function, and it is impossible to fully understand the operating status of the device or service. Among them, network scanning tools include: ping, ICMP scanning (i.e., Internet Control Message Protocol scanning) and TCP scanning (i.e., Transmission Control Protocol scanning).

[0022] In view of the above problems, an embodiment of the present invention provides a network status monitoring method for a distributed control system, wherein the distributed control system includes: a distributedly deployed switch and multiple devices connected to the switch, wherein the switch adopts a simple network management protocol, and the method includes: using the simple network management protocol and the link layer discovery protocol to construct a network topology structure of the distributed control system according to the multiple device information of each device obtained; performing SNMP polling on the network topology structure to obtain polling scan information; and simultaneously using the trap mechanism of the simple network management protocol to obtain trap information, wherein the trap information is an abnormal alarm from a switch port, and the detailed abnormal information of the corresponding switch port is determined according to the trap information; and the polling scan information and the detailed abnormal information of the switch port are displayed respectively. The network status monitoring method of the distributed control system obtains multiple device information of each device in the distributed control system, and the simple network protocol and the link layer discovery protocol establish a real and accurate network topology structure according to the obtained multiple device information, and uses the simple network management protocol to monitor the network status of the distributed system according to the real and accurate network topology structure, so as to accurately locate network status fault information.

[0023] Figure 2 FIG. 1 is a flow chart of a method for monitoring the network status of a distributed control system provided by an embodiment of the present invention. Figure 2 As shown, this embodiment provides a network status monitoring method for a distributed control system, the distributed control system comprising: a distributedly deployed switch and a plurality of devices connected to the switch, the switch adopts a simple network management protocol, and the method comprises: S1. Use the simple network management protocol and the link layer discovery protocol to build a network topology structure of the distributed control system based on the various device information obtained from each device; S2. Perform SNMP polling on the network topology to obtain polling scan information; at the same time, use the trap mechanism of the Simple Network Management Protocol to obtain trap information, the trap information is an abnormal alarm from the switch port, and the detailed abnormal information of the corresponding switch port is determined according to the trap information; S3. Display the polling scan information and the detailed abnormal information of the switch port respectively.

[0024] In step S1, the network topology structure of the distributed control system is constructed by using the simple network management protocol and the link layer discovery protocol, including: S11. Use the Simple Network Management Protocol to send an SNMP GET request to the switch to obtain the connection relationship on the switch; S12. Use the link layer discovery protocol to query the LLDP neighbor table of the switch, and obtain the connection relationship between the switch and each device according to the LLDP neighbor table; S13. Construct a network topology structure of a distributed control system according to the connection relationship on the switch and the connection relationship between the switch and each device, wherein the device information includes: IP address, network segment information and device name.

[0025] In this embodiment, the method further includes: Acquire multiple device information of each device in the distributed control system, and associate multiple device information of the same device to obtain device association information of each device; Among them, various device information includes: IP address, network segment information and device name.

[0026] In step S2, SNMP polling is performed on the network topology structure to obtain abnormal polling results, including: S21. Perform SNMP polling scans on switches of the distributed control system according to the network topology using the Simple Network Management Protocol, and perform polling scans on all devices of the distributed control system according to the network topology using the Internet Control Message Protocol, and obtain polling scan information generated after each round of Simple Network Management Protocol scanning and each round of Internet Control Message Protocol scanning; The method simultaneously uses the trap mechanism of the simple network management protocol to obtain trap information, wherein the trap information is abnormal information from the switch port, and determines the switch port corresponding to the abnormal information according to the trap information to obtain detailed abnormal information of the switch port, including: S22. While performing SNMP polling on the network topology, the trap mechanism of the Simple Network Management Protocol is used to receive trap information from the switch port; S23. When the trap information is received, a snmpwalk operation is performed on the switch port corresponding to the trap information to obtain detailed abnormal information of the switch port corresponding to the trap information.

[0027] In step S3, the polling scan information and the detailed abnormal information of the switch port are displayed respectively, including: S311. Convert the mac address in the polling scan information generated after each round of Simple Network Management Protocol scan and each round of Internet Control Message Protocol scan to an IP address according to the ARP table; S312. Find the device name associated with the IP address in the device association information according to the IP address; S313. Replace the mac address in the polling scan information generated after each round of the Simple Network Management Protocol scan and each round of the Internet Control Message Protocol scan with the device name to obtain the polling scan information for display to the user; S321. Convert the mac address in the detailed abnormal information of the switch port obtained after the trap walk operation to an IP address according to the ARP protocol table; S322. Find the device name associated with the IP address in the device association information according to the IP address; S323. Replace the mac address in the detailed abnormal information of the switch port with the device name to obtain the detailed abnormal information of the switch port for displaying to the user.

[0028] In this embodiment, the ARP protocol table is generated by the ARP protocol.

[0029] The network status monitoring method of the distributed control system provided by the present invention, with the help of the powerful function of the SNMP protocol (i.e., Simple Network Management Protocol), constructs an automated network topology structure of the distributed control system, regularly polls the switches of the distributed control system according to the topology structure, collects key information such as the link status of each port, and presents this information to the user in the form of an intuitive network topology diagram through an advanced graphical interface.

[0030] SNMP (Simple Network Management Protocol) polling is used to regularly monitor the overall health status of each device in the distributed control system, and the event or abnormal information actively reported by the device is obtained through the reported trap information. The saved network topology is deeply integrated and compared with the subsequent SNMP polling scan results and Trap events, which can quickly identify the specific location of the problem - accurate to the specific device and its port.

[0031] Therefore, network administrators can not only quickly understand the physical layout of the entire network, but also promptly discover potential connection problems or configuration errors, thereby greatly improving the efficiency and accuracy of network management.

[0032] This embodiment also provides a method for monitoring the network status of a distributed control system. The specific process is as follows: 1. Users need to first understand the basic information such as network connection status and IP of each device, and gradually configure the domain, network, and device status. In the process of generating connection relationships, you can obtain the connection relationship on the switch by 1) sending an SNMP GET request to the switch, 2) using the LLDP protocol to query the LLDP neighbor table of the switch, determine the relationship between the switch and the directly connected device, and realize automatic discovery and mapping of the connection between the network device and the host device to generate a network baseline topology map; you can also manually configure the connection relationship between the network device and the host device.

[0033] 2. "Polling" in network management and monitoring usually refers to periodically initiating SNMP GET requests to the switch to obtain information such as the connection status of each port of the switch (port number and the MAC address of the device connected to the port), port status (UP or down), port traffic sending rate and receiving rate. The information obtained may vary in data format and type depending on the switch model.

[0034] 3. SNMP GET requests often obtain the MAC address of the device connected to each port of the switch. The ARP protocol can convert the MAC address into an IP address, and the IP address is matched with the basic information configured in step 1 to display the device name in the system user interface. ICMP is a ping protocol, which is used to determine whether the network of all devices in the system is reachable. It can assist in analyzing the network status and display the most comprehensive network status (scan results) on the interface.

[0035] 4. Trap is a spontaneous behavior of the managed device. When the managed device reaches the triggering condition of the alarm, it will send a Trap message to the network status monitoring system to inform the abnormal situation on the device side, so that the network management personnel can handle it in time.

[0036] If there is a trap report, it is known that the device is abnormal, and then the device is snmpwalked to obtain detailed status information of all interfaces on the device, and accurate judgment is made; if there is no trap abnormality in the current network, all switches are polled normally (step 3), after all, after polling, the network status is updated, and if there is a connection abnormality or device abnormality, it will also be judged and displayed. Polling is the main task that the system has been carrying out, and if there is a trap, it will be located.

[0037] The beneficial effects of the present invention are as follows: 1) Use SNMP (Simple Network Management Protocol) and LLDP (Link Layer Discovery Protocol) protocols to accurately monitor the physical connection of the switch port. After processing the collected information of various devices in the distributed control system, the network topology can be constructed to make the network architecture and its status observable; 2) Combining the SNMP protocol (Simple Network Management Protocol) with the ARP protocol (Address Resolution Protocol) can detect and report IP address conflicts, and promptly discover and prevent ARP spoofing protocols; 3) Continuously monitor the network status through SNMP protocol polling, and use the Trap mechanism to capture abnormal events in real time. When receiving an SNMP Trap report from a specific port, immediately perform a detailed SNMP Walk operation on the port. Once a problem is detected, the system can quickly locate the alarm information to the specific device port level, greatly improving the accuracy of fault location and providing network administrators with the most accurate alarm information.

[0038] Figure 3 is a structural block diagram of a distributed control system provided by an embodiment of the present invention. Figure 3 As shown, the distributed control system provided in this embodiment includes: a network status monitoring terminal and distributedly deployed switches; The distributed deployed switches are used to construct a network topology structure of a distributed control system using a simple network management protocol and a link layer discovery protocol; The network status monitoring terminal is used to perform SNMP polling on the network topology structure to obtain polling scanning information; at the same time, the trap mechanism of the simple network management protocol is used to obtain trap information, and the trap information is an abnormal alarm from the switch port. The detailed abnormal information of the corresponding switch port is determined according to the trap information; and it is used to display the polling scanning information and the detailed abnormal information of the switch port respectively.

[0039] In this embodiment, the network status monitoring terminal includes: The device information acquisition module is used to acquire multiple device information of each device in the distributed control system, and associate multiple device information of the same device to obtain device association information of each device; A polling module is used to perform SNMP polling scans on switches of a distributed control system according to a network topology structure using a simple network management protocol, and to scan all managed devices in the distributed control system according to a network topology structure using an Internet control message protocol, and to obtain polling scan information generated after each round of simple network management protocol scanning and each round of Internet control message protocol scanning; A detailed abnormal information acquisition module is used to receive trap information from a switch port by using a trap mechanism of a simple network management protocol while performing SNMP polling on the network topology structure; when receiving the trap information, perform an SNMP walk operation on the switch port corresponding to the trap information to obtain detailed abnormal information of the switch port corresponding to the trap information; A display module is used to convert the mac address in the polling scan information generated after each round of simple network management protocol scanning and each round of Internet control message protocol scanning into an IP address according to the ARP table; search the device name associated with the IP address in the device association information according to the IP address; replace the mac address in the polling scan information generated after each round of simple network management protocol scanning and each round of Internet control message protocol scanning with the device name, and obtain the polling scan information for display to the user; and convert the mac address in the detailed abnormal information of the switch port obtained after the trap walk operation according to the ARP protocol table into an IP address; search the device name associated with the IP address in the device association information according to the IP address; replace the mac address in the detailed abnormal information of the switch port with the device name, and obtain the detailed abnormal information of the switch port for display to the user.

[0040] In this embodiment, the network status monitoring terminal further includes: Alarm module: used to warn users based on the alarm results of the distributed control system obtained by the judgment module.

[0041] Specifically, the network status monitoring terminal is the network management center of the entire network, which will manage the input devices (conduct information exchange). The working principle is that the network status monitoring terminal exchanges information with network devices that support the SNMP protocol, and users obtain data from them. Network devices that support the SNMP protocol generally refer to devices such as switches, routers, and servers. In our network status monitoring terminal, it is a managed switch that supports the SNMP protocol. The most commonly used SNMP GET request can obtain information such as the connection status of each port of the switch (port number and the mac address of the device connected to the port), port status (UP or down), port traffic sending rate and receiving rate. The information obtained may vary in data format and type depending on the switch model.

[0042] An embodiment of the present invention further provides a computer device, including: a memory, a processor, and a computer program. The computer program is stored in the memory and is configured to be executed by the processor to implement the above-mentioned network status monitoring method of the distributed control system.

[0043] The embodiment of the present invention further provides a machine-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the network status monitoring method of the distributed control system is implemented.

[0044] It should be understood by those skilled in the art that the embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. The solutions in the embodiments of the present invention may be implemented in various computer languages, for example, object-oriented programming language Java and interpreted scripting language JavaScript, etc.

[0045] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0046] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0047] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0048] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0049] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

Claims

1. A network status monitoring method for a distributed control system, characterized in that: The distributed control system includes: a distributedly deployed switch and a plurality of devices connected to the switch, the switch adopts a simple network management protocol, and the method includes: Using the simple network management protocol and the link layer discovery protocol to build a network topology structure of the distributed control system based on the various device information obtained from each device; Perform SNMP polling on the network topology to obtain polling scan information; at the same time, use the trap mechanism of the simple network management protocol to obtain trap information, the trap information is an abnormal alarm from the switch port, and determine the detailed abnormal information of the corresponding switch port according to the trap information; The polling scan information and the detailed abnormal information of the switch port are displayed respectively.

2. The network status monitoring method of a distributed control system according to claim 1, characterized in that: The network topology structure of the distributed control system is constructed by using the simple network management protocol and the link layer discovery protocol, including: Use the Simple Network Management Protocol to send an SNMP GET request to the switch to obtain the connection relationship on the switch; Use the link layer discovery protocol to query the LLDP neighbor table of the switch, and obtain the connection relationship between the switch and each device based on the LLDP neighbor table; The network topology of the distributed control system is constructed based on the connection relationship on the switch and the connection relationship between the switch and each device.

3. The network status monitoring method of a distributed control system according to claim 2, characterized in that: The method further comprises: Acquire multiple device information of each device in the distributed control system, and associate multiple device information of the same device to obtain device association information of each device; Among them, various device information includes: IP address, network segment information and device name.

4. The network status monitoring method of a distributed control system according to claim 3, characterized in that: The performing SNMP polling on the network topology structure to obtain an abnormal polling result includes: Using the Simple Network Management Protocol to perform SNMP polling scans on the switches of the distributed control system according to the network topology, and using the Internet Control Message Protocol to scan all managed devices in the distributed control system according to the network topology, and obtaining the polling scan information generated after each round of Simple Network Management Protocol scanning and each round of Internet Control Message Protocol scanning; The method simultaneously uses the trap mechanism of the simple network management protocol to obtain trap information, wherein the trap information is abnormal information from the switch port, and determines the switch port corresponding to the abnormal information according to the trap information to obtain detailed abnormal information of the switch port, including: While performing SNMP polling on the network topology structure, receiving trap information from the switch port using the trap mechanism of the simple network management protocol; When the trap information is received, an SNMP walk operation is performed on the switch port corresponding to the trap information to obtain detailed abnormal information of the switch port corresponding to the trap information.

5. The network status monitoring method of a distributed control system according to claim 4, characterized in that: The displaying of the polling scanning information and the detailed abnormal information of the switch port respectively includes: According to the ARP table, the mac address in the polling scan information generated after each round of simple network management protocol scanning and each round of Internet control message protocol scanning is converted into an IP address; Searching the device association information for a device name associated with the IP address according to the IP address; Replacing the MAC address in the polling scanning information generated after each round of SNMP scanning and each round of ICP scanning with the device name to obtain the polling scanning information for displaying to the user; Convert the MAC address in the detailed abnormal information of the switch port obtained after the trap walk operation to the IP address according to the ARP protocol table; Searching the device association information for a device name associated with the IP address according to the IP address; The mac address in the detailed abnormal information of the switch port is replaced with the device name to obtain the detailed abnormal information of the switch port for displaying to the user.

6. A distributed control system, characterized in that: The distributed control system includes: a network status monitoring terminal and a distributedly deployed switch; The distributed deployed switches are used to construct a network topology structure of a distributed control system using a simple network management protocol and a link layer discovery protocol; The network status monitoring terminal is used to perform SNMP polling on the network topology structure to obtain polling scanning information; at the same time, the trap mechanism of the simple network management protocol is used to obtain trap information, and the trap information is an abnormal alarm from the switch port. The detailed abnormal information of the corresponding switch port is determined according to the trap information; and it is used to display the polling scanning information and the detailed abnormal information of the switch port respectively.

7. The distributed control system according to claim 6, characterized in that: The network status monitoring terminal comprises: The device information acquisition module is used to acquire multiple device information of each device in the distributed control system, and associate multiple device information of the same device to obtain device association information of each device; A polling module is used to perform SNMP polling scans on switches of a distributed control system according to a network topology structure using a simple network management protocol, and to scan all managed devices in the distributed control system according to a network topology structure using an Internet control message protocol, and to obtain polling scan information generated after each round of simple network management protocol scanning and each round of Internet control message protocol scanning; The detailed abnormal information acquisition module is used to receive trap information from the switch port by using the trap mechanism of the simple network management protocol while performing SNMP polling on the network topology structure; when receiving the trap information, an SNMP walk operation is performed on the switch port corresponding to the trap information to obtain detailed abnormal information of the switch port corresponding to the trap information.

8. The distributed control system according to claim 7, characterized in that: The network status monitoring terminal also includes: Alarm module: used to warn users based on the alarm results of the distributed control system obtained by the judgment module.

9. A computer device, characterized in that: include: a memory storing a computer program; A processor is used to execute the computer program to implement the network status monitoring method of a distributed control system according to any one of claims 1 to 5.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: The computer program is executed by a processor to implement the network status monitoring method of a distributed control system according to any one of claims 1 to 5.

Images