Network equipment abnormity monitoring method and device

Abstract

The invention provides a network equipment abnormity monitoring method and device. Receiving an anomaly detection request for target equipment in the target network; determining a first device group corresponding to the target device according to the topological connection relationship of the target device in the target network; determining operation state data of the first equipment group according to the performance data of the ports of the plurality of first equipment in the first equipment group; obtaining a first line where the target device is located in the target network, and obtaining a first line group corresponding to the first line; determining operation state data of the first line group according to line operation conditions of a plurality of second lines in the first line group; and according to the operation state data of the first device group and / or the operation state data of the first line group, determining an anomaly detection result for the target device. Based on the above mode, abnormity monitoring can be carried out on the equipment by taking the group as the unit from the perspective of the business, and the continuity of business execution can be ensured while the abnormity detection efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of network equipment monitoring, and in particular to a method and device for monitoring abnormalities of network equipment. Background Art

[0002] At present, network monitoring often locates faults based on the monitoring of a single device and a single line. However, the monitoring capabilities for multiple devices and multiple lines are insufficient, and the operation of the network field cannot be evaluated as a whole, resulting in low efficiency in anomaly detection. In addition, since network faults cannot be discovered quickly, business interruptions occur frequently, and the user experience is poor.

[0003] To address the above problems, no effective solution has been proposed yet. Summary of the invention

[0004] The present specification provides a method and apparatus for monitoring network device anomalies. From a business perspective, the target device is monitored for anomalies in groups according to the operating status data of the first device group and the first line group corresponding to the target device. This method can avoid business interruptions caused by abnormalities in the device or line while ensuring efficient anomaly detection efficiency, thereby ensuring business continuity.

[0005] This specification provides a method for monitoring abnormalities of network devices, including:

[0006] receiving an anomaly detection request for a target device in a target network;

[0007] Determine a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices having a device stability association relationship with the target device;

[0008] determining, according to performance data of ports of a plurality of first devices in the first device group, operating status data of the first device group;

[0009] Acquire a first line where the target device is located in the target network, and acquire a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line;

[0010] determining operation status data of the first line group according to line operation conditions of a plurality of second lines in the first line group;

[0011] An abnormality detection result for the target device is determined according to the operating status data of the first device group and / or the operating status data of the first line group.

[0012] In one embodiment, determining the operation status data of the first device group according to the performance data of the ports of the plurality of first devices in the first device group includes:

[0013] Determining a load balancing state of the first device group according to performance data of ports of a plurality of first devices in the first device group and performance data of a port of the target device;

[0014] According to the load balancing state, operating state data of the first device group is determined.

[0015] In one embodiment, determining the operation status data of the first device group according to the performance data of the ports of the plurality of first devices in the first device group includes:

[0016] Obtaining abnormality detection results for a plurality of first devices in the first device group within a preset detection period;

[0017] The operation status data of the first device group is determined according to the performance data of the ports of the plurality of first devices in the first device group and the abnormality detection result.

[0018] In one embodiment, determining the operation status data of the first device group according to the performance data of the ports of the plurality of first devices in the first device group includes:

[0019] Aggregate the performance data of the ports of the plurality of first devices in the first device group, and determine the operation status data of the first device group according to the aggregation result.

[0020] In one embodiment, the method further comprises:

[0021] Determine whether the target device has an abnormality according to the abnormality detection result;

[0022] When it is determined that the target device has an abnormality, an abnormality handling strategy for the target device is determined according to the operating status data of the first device group and / or the operating status data of the first line group.

[0023] In one embodiment, determining the exception handling strategy for the target device according to the operation status data of the first device group includes:

[0024] When it is determined that load imbalance exists in the first device group based on the operating status data of the first device group, the exception handling strategy for load balancing the first device group is determined based on the performance data of the ports of multiple first devices in the first device group and the performance data of the port of the target device.

[0025] In one embodiment, determining the exception handling strategy for the target device according to the operation status data of the first line group includes:

[0026] When it is determined based on the operation status data of the first line group that the number of second lines with signal interruption in the first line group is greater than a preset number threshold, the exception handling strategy for the line having a line stability association relationship with the first line is determined.

[0027] This specification provides a network device abnormality monitoring device, including:

[0028] An anomaly detection request module, used to receive an anomaly detection request for a target device in a target network;

[0029] A first group determination module is used to determine a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices that have a device stability association relationship with the target device;

[0030] A first status determination module, configured to determine operation status data of the first device group according to performance data of ports of a plurality of first devices in the first device group;

[0031] A second group determination module is used to obtain a first line where the target device is located in the target network, and obtain a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line;

[0032] A second state determination module, configured to determine operation state data of the first line group according to line operation conditions of a plurality of second lines in the first line group;

[0033] The abnormality detection module is used to determine an abnormality detection result for the target device according to the operating status data of the first device group and / or the operating status data of the first line group.

[0034] The present specification also provides an electronic device, including a processor and a memory for storing instructions executable by the processor, wherein when the processor executes the instructions, a method for monitoring abnormalities of network devices is implemented.

[0035] The present specification also provides a computer-readable storage medium on which computer instructions are stored, and when the instructions are executed, a method for monitoring abnormalities of network devices is implemented.

[0036] Based on a network device abnormality monitoring method provided in this specification, an abnormality detection request for a target device in a target network is received; according to the topological connection relationship of the target device in the target network, a first device group corresponding to the target device is determined; wherein the first device group includes multiple first devices that have a device stability association relationship with the target device; according to the performance data of the ports of the multiple first devices in the first device group, the operation status data of the first device group is determined; the first line where the target device is located in the target network is obtained, and the first line group corresponding to the first line is obtained; wherein the first line group includes multiple second lines that have a line stability association relationship with the first line; according to the line operation status of the multiple second lines in the first line group, the operation status data of the first line group is determined; according to the operation status data of the first device group and / or the operation status data of the first line group, the abnormality detection result for the target device is determined. In this way, on the one hand, in the case where there are multiple devices and multiple lines in the target network, the target device can be detected whether there is an abnormality according to the first device group constructed by the first device that has a device stability association relationship with the target device, and the operation status data of the first line group constructed by the second line that has a line stability association relationship with the first line where the target device is located, so as to improve the efficiency of device abnormality detection. On the other hand, from a business perspective, the target device can be monitored for abnormalities in groups (i.e., device groups and line groups) according to the operating status data of the first device group and the first line group corresponding to the target device. This can ensure efficient abnormality detection while avoiding business interruptions caused by abnormalities in equipment or lines, thereby ensuring business continuity. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of this specification, the drawings required for use in the embodiments will be briefly introduced below. The drawings described below are only some embodiments recorded in this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0038] Figure 1 It is a flowchart of a method for monitoring abnormality of a network device provided by an embodiment of the present specification;

[0039] Figure 2 It is a schematic diagram of the structure of an electronic device provided by an embodiment of this specification;

[0040] Figure 3 It is a schematic diagram of the structure of a network device abnormality monitoring device provided by an embodiment of the present specification;

[0041] Figure 4 It is a flowchart of a method for monitoring abnormality of a first device group of network devices provided by an embodiment of the present specification;

[0042] Figure 5 It is a flowchart of another method for monitoring abnormality of a first line group of a network device provided by an embodiment of the present specification. DETAILED DESCRIPTION

[0043] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this specification.

[0044] See also Figure 1 As shown, the embodiment of this specification provides a method for monitoring abnormalities of network devices, wherein the method is specifically applied to the server side. When implemented specifically, the method may include the following contents:

[0045] S101: receiving an anomaly detection request for a target device in a target network;

[0046] S102: Determine a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices having a device stability association relationship with the target device;

[0047] S103: determining operation status data of the first device group according to performance data of ports of a plurality of first devices in the first device group;

[0048] S104: Acquire a first line where the target device is located in the target network, and acquire a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line;

[0049] S105: determining operation status data of the first line group according to line operation conditions of a plurality of second lines in the first line group;

[0050] S106: Determine an abnormality detection result for the target device according to the operating status data of the first device group and / or the operating status data of the first line group.

[0051] Among them, the device stability association may refer to a collaborative working relationship (i.e., a high availability relationship) established between multiple devices in a network system through mechanisms such as master-slave, load balancing, or redundant design. For example, taking the device stability association as an association established through the master-slave mechanism as an example, assuming that the target device is the master device, the first device that has a device stability association relationship with the target device may be a backup device of the target device, that is, when the target device is in an unavailable state, the first device may be switched to the master device, and the first device may take over the business being processed by the target device, so as to ensure the continuity of business processing through the device stability association.

[0052] Among them, the above-mentioned first device group can be a high-availability device group constructed by a first device that has a high-availability relationship (i.e., device stability association) with the target device, that is, the first device group can be a logical set composed of multiple first devices that have redundancy, active-standby switching or load balancing relationships with the target device. Taking the first device group as an example of a device constructed based on a device that has an active-standby relationship with the target device, the first device can maintain coordination with the target device through mechanisms such as heartbeat detection and state synchronization to ensure that when the target device fails, the first device can quickly take over the business and ensure the high availability of the network. Specifically, the target device can be a core switch, and the first device can be a backup switch. In this way, multiple backup switches can form a high-availability device group (i.e., the first device group) corresponding to the core switch, and the stable operation of the data center can be ensured through the first device in the high-availability device group.

[0053] Among them, the above-mentioned first line group can refer to a high-availability line group composed of multiple redundant lines (i.e., second lines) corresponding to the first line. The second line can achieve dynamic collaboration with the first line through performance indicators such as delay and bandwidth utilization, ensuring that when the first line is interrupted or the performance does not meet the requirements, the second line can automatically take over the data transmission task. The high-availability line group can be used to ensure the reliability of the network connection of the business. For example, a dedicated transmission line group can be formed based on multiple physical links (i.e., second lines) corresponding to the first line to support high-speed data transmission across data centers.

[0054] The performance data of the port of the first device may include key performance data of the network device such as traffic, false alarms, packet loss, number of ports, temperature, and fan status.

[0055] The operating status data of the first device group may be used to characterize the operating status of the first device group (eg, normal, faulty, standby, etc.).

[0056] Among them, the line operation status of the above-mentioned second line may include the connection status of the line (such as smooth, disconnected, etc.), the connection performance status, etc., and the operation status data of the above-mentioned first line group can be used to characterize the connection status of the first line group (such as smooth, disconnected, jitter, etc.).

[0057] In some embodiments, determining the first device group corresponding to the target device according to the topological connection relationship of the target device in the target network may include:

[0058] According to the topological connection relationship of the target device in the target network, a plurality of devices in the target network that have a cooperative relationship with the target device are acquired, and according to preset device configuration information, a plurality of devices in the target network that have a master-slave relationship with the target device are acquired;

[0059] The acquired multiple devices are determined as first devices, and based on the multiple first devices, a first device group corresponding to the target device is constructed.

[0060] Specifically, multiple devices that have a collaborative relationship (such as a business collaborative relationship, a load balancing collaborative relationship, etc.) with the target device can be determined through the connection position of the target device in the network topology, and multiple devices that have a master-slave relationship with the target device can be obtained in combination with device configuration information such as network configuration files or management platform records. The multiple acquired devices can be determined as first devices, that is, the multiple acquired devices can be devices that have a device stability association with the target device, and the high availability requirements of the network service can be jointly met by the multiple first devices and the target device.

[0061] In some embodiments, the acquiring the first line group corresponding to the first line may include:

[0062] S1: Acquire multiple lines having the same data processing node as the first line, and acquire multiple lines in the target network that have a master-slave relationship and / or a bandwidth sharing relationship with the first line according to preset line configuration information;

[0063] S2: Determine the acquired multiple lines as second lines, and construct a first line group corresponding to the first line based on the multiple second lines.

[0064] Specifically, first, multiple lines with the same data processing node as the first line can be obtained through the physical link information between the first line and other lines; secondly, multiple lines with redundant characteristics (such as master-slave switching, multi-path transmission or bandwidth sharing mechanism) as the first line can be obtained according to preset line configuration information, and the obtained multiple lines are determined as second lines.

[0065] Based on the above embodiments, on the one hand, when there are multiple devices and multiple lines in the target network, the operation status data of the first device group constructed by the first device that has a device stability association relationship with the target device and the first line group constructed by the second line that has a line stability concern with the first line where the target device is located can be used to detect whether the target device has an abnormality, which can improve the efficiency of device abnormality detection. On the other hand, from a business perspective, the target device can be monitored for abnormalities based on the operation status data of the first device group and the first line group corresponding to the target device in groups (i.e., device groups and line groups), which can ensure efficient abnormality detection efficiency while avoiding business interruptions caused by abnormalities in devices or lines, thereby ensuring business continuity.

[0066] In some embodiments, the method of determining the operation status data of the first device group according to the performance data of the ports of the plurality of first devices in the first device group may further include the following when the method is specifically implemented:

[0067] S1: determining a load balancing state of the first device group according to performance data of ports of a plurality of first devices in the first device group and performance data of a port of the target device;

[0068] S2: Determine the operation status data of the first device group according to the load balancing status.

[0069] The load balancing state may refer to the allocation and usage of the resources (such as port traffic, computing power, bandwidth, etc.) of each device in the first device group. The load balancing state may be used to characterize whether the workload of multiple first devices in the first device group remains uniform when carrying services, and whether some devices are overloaded or idle. When the load is unevenly distributed, it may cause performance problems, such as overload of individual devices or waste of some resources, thereby affecting the overall efficiency and reliability of the system.

[0070] In some embodiments, determining the load balancing state of the first device group according to the performance data of the ports of the plurality of first devices in the first device group and the performance data of the port of the target device may include:

[0071] The performance data of the ports of the plurality of first devices in the device group and the maximum and minimum values ​​of the performance data of the port of the target device are obtained, and the load balancing state of the first device group is determined according to the difference between the maximum and the minimum.

[0072] In addition, since there may be a master-slave relationship between the target device and multiple first devices, the load balancing state of the first device group can also be determined based on the performance data of the ports of the multiple first devices, the performance data of the ports of the target device, the preset load weight corresponding to each first device, and the load weight corresponding to the target device.

[0073] Based on the above embodiment, by monitoring the load balancing status, the target device can be monitored through the operating status of the first device group, which can avoid resource waste and single point overload problems, and enhance the stability and high availability of the service. In addition, it also helps to simplify fault location and management, improve operation and maintenance efficiency, and support dynamic expansion capabilities to ensure that network resources can be flexibly adjusted when business demand grows, thereby ensuring the long-term stable operation and efficient operation of the system.

[0074] In some embodiments, the method of determining the operation status data of the first device group according to the performance data of the ports of the plurality of first devices in the first device group may further include the following when the method is specifically implemented:

[0075] S1: Obtaining abnormality detection results for multiple first devices in the first device group within a preset detection period;

[0076] S2: Determine the operation status data of the first device group according to the performance data of the ports of the plurality of first devices in the first device group and the abnormality detection result.

[0077] In some embodiments, obtaining abnormality detection results for multiple first devices in the first device group within a preset detection period may include:

[0078] During a preset detection period, the status data of multiple first devices in the first device group are collected and analyzed, and then the performance indicators of the devices in the first device group (such as port traffic, packet loss rate, delay, CPU usage, etc.) are detected for anomalies. Anomaly detection can be implemented based on a variety of methods, such as threshold comparison, historical trend analysis, or machine learning model prediction, so as to accurately identify abnormal devices or abnormal behaviors that may exist in the device group.

[0079] Based on the above embodiment, by obtaining the abnormal detection results of multiple first devices in the first device group, not only can the abnormal devices be accurately located, but potential problems can also be discovered through correlation analysis, thereby improving the accuracy and timeliness of fault warning.

[0080] In some embodiments, the method of determining the operation status data of the first device group according to the performance data of the ports of the plurality of first devices in the first device group may further include the following when the method is specifically implemented:

[0081] Aggregate the performance data of the ports of the plurality of first devices in the first device group, and determine the operation status data of the first device group according to the aggregation result.

[0082] Specifically, by aggregating the port performance data (such as traffic, packet loss rate, delay, bandwidth utilization, etc.) of multiple first devices in the first device group, the system can comprehensively analyze the overall operating status of the device group. Aggregation processing can include calculating statistical indicators such as average, maximum, minimum, sample variance, etc. to evaluate the balance of port loads and resource usage in the first device group. At the same time, by comprehensively comparing the historical trends and real-time dynamics of these performance data, potential anomalies of the first device group can also be discovered, and ports that may be faulty or overloaded can be identified. Based on the results of the aggregation processing, the operating status data of the first device group can be generated, including load balancing status, health assessment results, and overall resource availability.

[0083] Based on the above embodiments, by aggregating and processing port performance data, the operating status of the device group can be grasped from an overall perspective, avoiding the limitations of single device data analysis, and helping to quickly discover performance anomalies and locate problems. Through these operating status data, the resource utilization of the device group can be improved, load distribution can be balanced, and the risk of overload and the occurrence rate of failures can be reduced, thereby further improving the stability and high availability of the network. In addition, this aggregate analysis also reduces the complexity of manual troubleshooting and improves operation and maintenance efficiency.

[0084] In some embodiments, the method may further include the following when implemented:

[0085] S1: Determine whether the target device has an abnormality according to the abnormality detection result;

[0086] S2: When it is determined that the target device is abnormal, determine an abnormality handling strategy for the target device according to the operating status data of the first device group and / or the operating status data of the first line group.

[0087] The above-mentioned operation status data may include performance indicators (such as flow, delay, packet loss rate, etc.) of other devices in the first device group and / or the availability and current load of the backup lines in the first line group.

[0088] Specifically, based on the operation status data, the optimal exception handling strategy can be dynamically selected, such as switching the traffic or tasks of the target device to the backup device in the first device group, rerouting the data traffic to the backup line in the first line group, or triggering an operation and maintenance alarm to arrange manual intervention. At the same time, the possible impact range can be predicted and preventive measures can be taken in combination with historical exception records and current operation status to further reduce the interference of exceptions on the business.

[0089] Based on the above embodiment, by combining the operation status data of the first device group and the first line group to determine the exception handling strategy, it is possible to achieve optimal allocation and dynamic adjustment of resources, ensure uninterrupted services and reduce the risk of exception spread. This method not only improves the automation level and response speed of exception handling, but also effectively reduces the complexity of manual intervention, further improves the high availability and stability of network equipment monitoring, and provides strong support for continuous network operation.

[0090] In some embodiments, the method of determining the exception handling strategy for the target device according to the operation status data of the first device group may further include the following contents when the method is specifically implemented:

[0091] When it is determined that load imbalance exists in the first device group based on the operating status data of the first device group, the exception handling strategy for load balancing the first device group is determined based on the performance data of the ports of multiple first devices in the first device group and the performance data of the port of the target device.

[0092] Specifically, when it is determined that there is a load imbalance in the first device group, the port performance data of multiple first devices in the first device group and the port performance data of the target device are used to calculate the traffic, bandwidth utilization, delay, packet loss rate and other indicators of each port to identify specific high-load devices and low-load devices. At the same time, combined with the resource allocation rules and real-time business needs in the first device group, a targeted load balancing exception handling strategy can be formulated, such as dynamically adjusting the traffic allocation weight, directing part of the traffic from the high-load device to the low-load device, or enabling backup devices to share the traffic load.

[0093] Furthermore, based on the prediction model, the impact of load balancing adjustments on the overall performance of the device group can be evaluated, and the optimal processing solution can be adopted to reduce business interruptions or performance fluctuations. The execution of this strategy can be completed automatically through intelligent scheduling algorithms, and manual intervention can also be triggered when necessary.

[0094] Based on the above embodiments, by analyzing the load balancing problem of the first device group and formulating an accurate exception handling strategy, the utilization efficiency of resources in the first device group can be significantly improved, and the performance degradation or failure of individual devices due to overload can be avoided. At the same time, the optimization of load balancing can also ensure the uniform distribution of business traffic, reduce network delays and data loss, and improve the stability and high availability of the overall network. In addition, the automated load balancing processing method reduces the intervention of operation and maintenance personnel, improves the efficiency and intelligence level of network management, and provides important support for efficient operation and maintenance in complex network environments.

[0095] In some embodiments, the method of determining the exception handling strategy for the target device according to the operation status data of the first line group may further include the following when the method is specifically implemented:

[0096] When it is determined based on the operation status data of the first line group that the number of second lines with signal interruption in the first line group is greater than a preset number threshold, the exception handling strategy for the line having a line stability association relationship with the first line is determined.

[0097] Specifically, when it is determined that the number of second lines with signal interruption in the first line group exceeds the preset number threshold, the operating status data of the first line group will be analyzed, including the load capacity of normal lines, the availability of backup lines, and the historical fault information and interruption reasons of the interrupted lines (such as physical disconnection, signal interference or equipment failure). Combined with these data, the overall stability of the first line group can be judged, and other lines associated with the stability of the interrupted lines can be identified, such as lines that share key nodes, belong to the same physical link or have insufficient redundancy design. In response to this situation, an exception handling strategy can be formulated, such as giving priority to enabling backup lines to replace interrupted lines to carry business traffic, dynamically adjusting traffic distribution to prevent associated lines from overloading, or issuing high-level alarms to prompt operation and maintenance personnel to conduct emergency inspections and repairs on related line groups. If necessary, multi-line redundant switching technology can also be used to ensure that business traffic is not interrupted, thereby alleviating the impact of line interruptions on network stability.

[0098] Based on the above embodiment, by deeply analyzing the signal interruption situation in the first line group and its associated lines and formulating an exception handling strategy, the fault resistance and service recovery efficiency of the first line group can be significantly improved. The implementation of the exception handling strategy can effectively reduce the impact of the interrupted line on the associated lines and the overall business, and ensure the continuity of key businesses.

[0099] Furthermore, it can also detect potential line stability risks in advance, reduce the possibility of further expansion of faults, and improve network reliability. In addition, exception handling reduces the complexity of manual intervention and improves the efficiency and accuracy of network operation and maintenance.

[0100] As can be seen from the above, the embodiment of this specification provides a network device abnormality monitoring method, receiving an abnormality detection request for a target device in a target network; determining a first device group corresponding to the target device according to the topological connection relationship of the target device in the target network; wherein the first device group includes multiple first devices that have a device stability association relationship with the target device; determining the operation status data of the first device group according to the performance data of the ports of the multiple first devices in the first device group; obtaining the first line where the target device is located in the target network, and obtaining the first line group corresponding to the first line; wherein the first line group includes multiple second lines that have a line stability association relationship with the first line; determining the operation status data of the first line group according to the line operation conditions of the multiple second lines in the first line group; determining the abnormality detection result for the target device according to the operation status data of the first device group and / or the operation status data of the first line group. In this way, on the one hand, in the case where there are multiple devices and multiple lines in the target network, the target device can be detected whether there is an abnormality according to the operation status data of the first device group constructed by the first device that has a device stability association relationship with the target device, and the operation status data of the first line group constructed by the second line that has a line stability concern with the first line where the target device is located, so as to improve the efficiency of device abnormality detection. On the other hand, from a business perspective, the target device can be monitored for abnormalities in groups (i.e., device groups and line groups) according to the operating status data of the first device group and the first line group corresponding to the target device. This can ensure efficient abnormality detection while avoiding business interruptions caused by abnormalities in equipment or lines, thereby ensuring business continuity.

[0101] See also Figure 2 As shown, the embodiment of this specification also provides a specific electronic device, wherein the electronic device includes a network communication port 201, a processor 202 and a memory 203, and the above structures are connected through internal cables so that each structure can perform specific data interaction.

[0102] The network communication port 201 may be specifically used to receive an anomaly detection request for a target device in a target network.

[0103] The processor 202 can be specifically used to determine a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices that have a device stability association relationship with the target device; determine operation status data of the first device group according to performance data of ports of the plurality of first devices in the first device group; obtain a first line where the target device is located in the target network, and obtain a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line; determine operation status data of the first line group according to line operation conditions of the plurality of second lines in the first line group; determine an abnormality detection result for the target device according to the operation status data of the first device group and / or the operation status data of the first line group.

[0104] The memory 203 may be specifically used to store corresponding instruction programs.

[0105] Based on the above method, the relevant structural performance of the electronic equipment can be effectively utilized, the data processing speed of the electronic equipment can be improved, and the abnormal monitoring method of the network equipment can be efficiently implemented.

[0106] In this embodiment, the network communication port 201 can be a virtual port that is bound to different communication protocols so that different data can be sent or received. For example, the network communication port can be a port responsible for web data communication, a port responsible for FTP data communication, or a port responsible for email data communication. In addition, the network communication port can also be a physical communication interface or communication chip. For example, it can be a wireless mobile network communication chip, such as GSM, CDMA, etc.; it can also be a Wifi chip; it can also be a Bluetooth chip.

[0107] In this embodiment, the processor 202 may be implemented in any appropriate manner. For example, the processor may take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) executable by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller, etc. This specification does not limit this.

[0108] In this embodiment, the memory 203 may include multiple levels. In a digital system, anything that can store binary data can be a memory; in an integrated circuit, a circuit with a storage function that has no physical form is also called a memory, such as RAM, FIFO, etc.; in a system, a storage device with a physical form is also called a memory, such as a memory stick, TF card, etc.

[0109] The embodiment of the present specification also provides a computer-readable storage medium based on the above-mentioned network device abnormality monitoring method, wherein the computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed, the following are implemented: receiving an abnormality detection request for a target device in a target network; determining a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices that have a device stability association relationship with the target device; determining operation status data of the first device group according to performance data of ports of the plurality of first devices in the first device group; obtaining a first line where the target device is located in the target network, and obtaining a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line; determining operation status data of the first line group according to line operation conditions of the plurality of second lines in the first line group; determining an abnormality detection result for the target device according to the operation status data of the first device group and / or the operation status data of the first line group.

[0110] In this embodiment, the storage medium includes, but is not limited to, a random access memory (RAM), a read-only memory (ROM), a cache, a hard disk (HDD), or a memory card. The memory may be used to store computer program instructions. The network communication unit may be an interface for network connection communication set in accordance with the standard specified by the communication protocol.

[0111] In this embodiment, the functions and effects specifically implemented by the program instructions stored in the computer-readable storage medium can be explained in comparison with other implementations and will not be described in detail here.

[0112] See also Figure 3 At the software level, the embodiment of this specification also provides a network device abnormality monitoring device, which may specifically include the following structural modules:

[0113] Anomaly detection request module 301, used to receive anomaly detection request for a target device in a target network;

[0114] A first group determination module 302 is used to determine a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices that have a device stability association relationship with the target device;

[0115] A first state determination module 303, configured to determine operation state data of the first device group according to performance data of ports of a plurality of first devices in the first device group;

[0116] The second group determination module 304 is used to obtain a first line where the target device is located in the target network, and obtain a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line;

[0117] A second state determination module 305, configured to determine the operation state data of the first line group according to the line operation conditions of the plurality of second lines in the first line group;

[0118] The abnormality detection module 306 is used to determine an abnormality detection result for the target device according to the operating status data of the first device group and / or the operating status data of the first line group.

[0119] In some embodiments, the above-mentioned first state determination module 303, when specifically implemented, is used to determine the load balancing state of the first device group based on the performance data of the ports of multiple first devices in the first device group and the performance data of the port of the target device; and determine the operating state data of the first device group based on the load balancing state.

[0120] In some embodiments, the above-mentioned first state determination module 303, when implemented, is used to obtain abnormal detection results for multiple first devices in the first device group within a preset detection period; and determine the operating state data of the first device group based on the performance data of the ports of the multiple first devices in the first device group and the abnormal detection results.

[0121] In some embodiments, the first status determination module 303 is specifically implemented to aggregate the performance data of the ports of the plurality of first devices in the first device group, and determine the operation status data of the first device group according to the aggregation result.

[0122] In some embodiments, during specific implementation, it is used to determine whether the target device has an abnormality based on the abnormality detection result; the policy determination module is used to determine the abnormality handling strategy for the target device based on the operating status data of the first device group and / or the operating status data of the first line group when it is determined that the target device has an abnormality.

[0123] In some embodiments, the above-mentioned policy determination module, when implemented, is used to determine the exception handling strategy for load balancing the first device group based on the performance data of the ports of multiple first devices in the first device group and the performance data of the port of the target device when it is determined that the first device group has a load imbalance based on the operating status data of the first device group.

[0124] In some embodiments, the above-mentioned strategy determination module, when implemented specifically, is used to determine the exception handling strategy for the line that has a line stability association relationship with the first line when it is determined based on the operating status data of the first line group that the number of second lines with signal interruption in the first line group is greater than a preset number threshold.

[0125] It should be noted that the units, devices or modules described in the above embodiments can be implemented by computer chips or entities, or by products with certain functions. For the convenience of description, the above devices are described separately by functions divided into various modules. Of course, when implementing this specification, the functions of each module can be implemented in the same or more software and / or hardware, or the modules that implement the same function can be implemented by a combination of multiple sub-modules or sub-units. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0126] As can be seen from the above, a network device anomaly monitoring device provided based on an embodiment of the present specification receives an anomaly detection request for a target device in a target network; determines a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices that have a device stability association relationship with the target device; determines operation status data of the first device group according to performance data of ports of the plurality of first devices in the first device group; obtains a first line where the target device is located in the target network, and obtains a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line; determines operation status data of the first line group according to line operation conditions of the plurality of second lines in the first line group; determines an anomaly detection result for the target device according to the operation status data of the first device group and / or the operation status data of the first line group.

[0127] In a specific scenario example, a network device anomaly monitoring method and apparatus provided in this specification can be applied. From a business perspective, the target device is monitored for anomalies in groups according to the operating status data of the first device group and the first line group corresponding to the target device. This can avoid business interruptions caused by abnormalities in the device or line while ensuring efficient anomaly detection efficiency, thereby ensuring business continuity.

[0128] At present, network monitoring basically has the ability to monitor a single device and a single line, but the monitoring capability of the high availability group as a whole is insufficient. In addition to paying attention to the operation of a single device, operation and maintenance personnel often need to pay more attention to the overall operation of the high availability group in actual production operation, and need to evaluate the operation of the network field from the overall perspective.

[0129] In some embodiments, see Figure 4 As shown, for the port traffic balance monitoring of the high-availability device group (i.e., the first device group), it may include:

[0130] S1: Single device network monitoring related data input;

[0131] Specifically, the data input related to single-device network monitoring includes obtaining the performance data of the network device port, and the real-time data of each port of a single device is used as input.

[0132] S2: high availability port group (i.e., first device group) configuration data input;

[0133] Specifically, through the high availability relationship between network devices and the topological connection relationship of network devices, certain ports across devices can be calculated as a high availability group (i.e., the first device group), which serves as the configuration basis for subsequent calculations.

[0134] S3: Display of traffic statistics of the high-availability port group (i.e., the first device group).

[0135] Specifically, the real-time data of each port of a single device is aggregated and calculated through the configuration relationship of the port high availability group obtained above. The maximum value, minimum value, average value, sample variance and other data of the port flow in the high availability group (i.e., the first device group) can be calculated to observe whether the flow of each port in the high availability unit is normal, whether it is evenly distributed, whether the high availability effect is achieved, and supplemented by performance curve display, so as to facilitate operation and maintenance personnel to locate problems.

[0136] In some embodiments, see Figure 5 As shown, the on-off monitoring of the high-availability line group (i.e., the first line group) may include:

[0137] S1: Single line monitoring related data input;

[0138] Specifically, the input of data related to monitoring of a single line includes obtaining monitoring performance data of a single line and real-time on / off data of a single line as input.

[0139] S2: high availability line group (i.e., first line group) configuration data input;

[0140] Specifically, the high availability configuration relationship of the network line construction can be used to confirm the line high availability group, and the high availability group serves as the configuration basis for subsequent calculations.

[0141] S3: Statistics display of high availability line group lines (i.e., the first line group).

[0142] Specifically, through the configuration relationship of the above line high availability group, the real-time on / off data of the above single line is aggregated and calculated. The interruption of all lines in the group is judged. If all lines are disconnected, an alarm is triggered to add a reminder, which may affect all the services undertaken by the first line group and require emergency operation and maintenance.

[0143] Based on the above embodiment, the alarms collected and generated by the network monitoring system are used as the analysis input. The equipment operation performance data (including key performance indicators of network equipment such as traffic, false alarms, packet loss, number of ports, temperature, fan status, etc.) and alarm data (including major alarms and minor alarms) are summarized and counted based on the high availability group information of network lines and equipment. The alarms and performance data of the high availability group are displayed, providing network operation and maintenance colleagues with a method for observing the overall service quality of the network high availability group, discovering network faults more quickly, and improving fault location capabilities.

[0144] Although the present specification provides method operation steps as described in the embodiments or flow charts, more or less operation steps may be included based on conventional or non-creative means. The order of steps listed in the embodiments is only one way of executing the order of many steps, and does not represent a unique execution order. When the device or client product in practice is executed, it can be executed in sequence or in parallel according to the method shown in the embodiments or the drawings (for example, a parallel processor or a multi-threaded processing environment, or even a distributed data processing environment). The term "include", "include" or any other variant thereof is intended to cover non-exclusive inclusion, so that the process, method, product or device including a series of elements includes not only those elements, but also includes other elements that are not explicitly listed, or also includes elements inherent to such a process, method, product or device. In the absence of more restrictions, it is not excluded that there are other identical or equivalent elements in the process, method, product or device including the elements. The first, second, etc. words are used to represent the name, and do not represent any particular order.

[0145] Those skilled in the art also know that, in addition to implementing the controller in a purely computer-readable program code, the controller can be made to implement the same function in the form of logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded microcontrollers by logically programming the method steps. Therefore, such a controller can be considered as a hardware component, and the devices for implementing various functions included therein can also be considered as structures within the hardware component. Or even, the devices for implementing various functions can be considered as both software modules for implementing the method and structures within the hardware component.

[0146] Through the description of the above embodiments, it can be known that those skilled in the art can clearly understand that the present specification can be implemented by means of software plus a necessary general hardware platform. Based on such an understanding, the technical solution of the present specification can essentially be embodied in the form of a software product, which can be stored in a storage medium such as ROM / RAM, a disk, an optical disk, etc., and includes a number of instructions for enabling a computer device (which can be a personal computer, a mobile terminal, a server, or a network device, etc.) to execute the methods described in each embodiment of the present specification or some parts of the embodiments.

[0147] Although the present specification is described through embodiments, those skilled in the art will appreciate that there are many modifications and changes to the present specification without departing from the spirit of the present specification, and it is intended that the appended claims include these modifications and changes without departing from the spirit of the present specification.

Claims

1. A method for monitoring abnormality of network equipment, characterized in that: include: receiving an anomaly detection request for a target device in a target network; Determine a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices having a device stability association relationship with the target device; determining, according to performance data of ports of a plurality of first devices in the first device group, operating status data of the first device group; Acquire a first line where the target device is located in the target network, and acquire a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line; determining operation status data of the first line group according to line operation conditions of a plurality of second lines in the first line group; An abnormality detection result for the target device is determined according to the operating status data of the first device group and / or the operating status data of the first line group.

2. The method according to claim 1, characterized in that The determining, according to the performance data of the ports of the plurality of first devices in the first device group, the operation status data of the first device group includes: determining a load balancing state of the first device group according to performance data of ports of a plurality of first devices in the first device group and performance data of a port of the target device; According to the load balancing state, operating state data of the first device group is determined.

3. The method according to claim 1, characterized in that The determining, according to the performance data of the ports of the plurality of first devices in the first device group, the operation status data of the first device group includes: Obtaining abnormality detection results for a plurality of first devices in the first device group within a preset detection period; The operation status data of the first device group is determined according to the performance data of the ports of the plurality of first devices in the first device group and the abnormality detection result.

4. The method according to claim 1, characterized in that: The determining, according to the performance data of the ports of the plurality of first devices in the first device group, the operation status data of the first device group includes: Aggregate the performance data of the ports of the plurality of first devices in the first device group, and determine the operation status data of the first device group according to the aggregation result.

5. The method according to claim 1, characterized in that The method further comprises: Determine whether the target device has an abnormality according to the abnormality detection result; When it is determined that the target device has an abnormality, an abnormality handling strategy for the target device is determined according to the operating status data of the first device group and / or the operating status data of the first line group.

6. The method according to claim 5, characterized in that The determining, according to the operation status data of the first device group, an exception handling strategy for the target device includes: When it is determined that load imbalance exists in the first device group based on the operating status data of the first device group, the exception handling strategy for load balancing the first device group is determined based on the performance data of the ports of multiple first devices in the first device group and the performance data of the port of the target device.

7. The method according to claim 6, characterized in that The determining, according to the operation status data of the first line group, an exception handling strategy for the target device includes: When it is determined based on the operation status data of the first line group that the number of second lines with signal interruption in the first line group is greater than a preset number threshold, the exception handling strategy for the line having a line stability association relationship with the first line is determined.

8. A network equipment abnormality monitoring device, characterized in that: include: An anomaly detection request module, used to receive an anomaly detection request for a target device in a target network; A first group determination module is used to determine a first device group corresponding to the target device according to a topological connection relationship of the target device in the target network; wherein the first device group includes a plurality of first devices that have a device stability association relationship with the target device; A first status determination module, configured to determine operation status data of the first device group according to performance data of ports of a plurality of first devices in the first device group; A second group determination module is used to obtain a first line where the target device is located in the target network, and obtain a first line group corresponding to the first line; wherein the first line group includes a plurality of second lines that have a line stability association relationship with the first line; A second state determination module, configured to determine operation state data of the first line group according to line operation conditions of a plurality of second lines in the first line group; The abnormality detection module is used to determine an abnormality detection result for the target device according to the operating status data of the first device group and / or the operating status data of the first line group.

9. An electronic device, characterized in that: It comprises a processor and a memory for storing processor executable instructions, and when the processor executes the instructions, the steps of the network device abnormality monitoring method described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, characterized in that: Computer instructions are stored thereon, and when the instructions are executed by a processor, the steps of the network device abnormality monitoring method described in any one of claims 1 to 7 are implemented.

Images