Fault analysis methods and related equipment

Abstract

The embodiment of the present application discloses a fault analysis method, a switch system, a computer-readable storage medium, and a computer program product containing instructions, which are used to perform fault analysis while improving the comprehensiveness, accuracy, and efficiency of fault analysis. The method of the embodiment of the present application includes: obtaining at least one target communication data, performing fault analysis on at least one target communication data according to the characteristic indicators of at least one service quality dimension, determining whether there is a fault corresponding to the service quality dimension, at least one service quality dimension includes an authentication quality dimension, a network service quality dimension, a business use service quality dimension, and / or an edge security identification dimension, if there is a fault corresponding to the service quality dimension, then determining the fault analysis result corresponding to the service quality dimension, the fault analysis result includes a fault point and a fault solution, and after the fault point is repaired based on the fault solution, data forwarding is performed according to the target communication data.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of fault analysis, and more specifically, to a fault analysis method, a switch system, a computer-readable storage medium, and a computer program product containing instructions. Background Art

[0002] With the advancement of technology and the growth of network requirements, traditional switch fault analysis methods are no longer sufficient to meet the efficient operation and maintenance needs of modern enterprises.

[0003] Since traditional enterprise networks are often built on fixed, inefficient, non-intelligent hardware devices and static topology structures, due to the limitations of low-efficiency and non-intelligent hardware, they can only record basic information such as connection status, but cannot parse complex traffic patterns or identify potential root causes of problems. They do not have advanced data analysis functions and cannot perform in-depth fault analysis on communication data. Due to the limitations of static topology structures, once new equipment is added or business adjustments are made, the fault detection system may not be able to adapt quickly, which in turn affects fault location, making it impossible to accurately understand the quality of the entire network and the quality of business services. When a fault occurs, it is impossible to conduct effective troubleshooting in a timely manner, and it is impossible to achieve preventive maintenance of the network, which cannot meet the needs of the rapid development of enterprise business for network stability.

[0004] Therefore, there is an urgent need to introduce more advanced fault analysis technologies to improve operation and maintenance efficiency and network stability. Summary of the invention

[0005] The embodiments of the present application provide a fault analysis method, a switch system, a computer-readable storage medium, and a computer program product including instructions, which can perform fault analysis while improving the comprehensiveness, accuracy, and efficiency of fault analysis.

[0006] In a first aspect, an embodiment of the present application provides a fault analysis method, comprising:

[0007] Acquire at least one piece of target communication data, wherein the at least one piece of target communication data is used to characterize communication between at least one source device and a corresponding destination device;

[0008] Performing fault analysis on the at least one target communication data according to a characteristic indicator of at least one quality of service dimension to determine whether there is a fault corresponding to the quality of service dimension, wherein the at least one quality of service dimension includes an authentication quality dimension, a network service quality dimension, a business use service quality dimension, and / or an edge security identification dimension;

[0009] If there is a fault corresponding to the service quality dimension, a fault analysis result corresponding to the service quality dimension is determined, the fault analysis result includes a fault point and a fault solution, and after the fault point is repaired based on the fault solution, data forwarding is performed according to the target communication data.

[0010] In a second aspect, the present application provides a switch system, including: a central processing unit, a switch chip 、 Memory and multiple ports;

[0011] The port is used to obtain communication data between the source device and the destination device;

[0012] The memory is a temporary storage memory or a permanent storage memory; the central processing unit is configured to communicate with the memory and execute instructions in the memory to perform the method of any one of claims 1 to 7;

[0013] The central processing unit is connected to the switching chip, and the switching chip is used for forwarding data according to the target communication data.

[0014] In a third aspect, an embodiment of the present application provides a computer-readable storage medium, which includes instructions. When the instructions are executed on a computer, the computer executes the aforementioned fault analysis method.

[0015] In a fourth aspect, an embodiment of the present application provides a computer program product comprising instructions, which, when the computer program product is run on a computer, enables the computer to execute the aforementioned fault analysis method.

[0016] It can be seen from the above technical scheme that the embodiments of the present application have the following advantages: fault analysis can be performed on the at least one target communication data according to the characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension, and the characteristic indicators of the service quality dimensions covered are relatively comprehensive. Therefore, the comprehensiveness, accuracy and efficiency of the fault analysis are relatively high.

[0017] Furthermore, at least one target communication data communicated between at least one source device and a corresponding destination device can be acquired in real time, and fault analysis can be performed on the at least one target communication data, which can further improve the accuracy and efficiency of the fault analysis. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 A schematic diagram of a flow chart of a fault analysis method disclosed in an embodiment of the present application;

[0019] Figure 2 A schematic diagram of another fault analysis process disclosed in an embodiment of the present application;

[0020] Figure 3 A schematic diagram of another fault analysis process disclosed in an embodiment of the present application;

[0021] Figure 4 A flowchart of another fault analysis method disclosed in an embodiment of the present application;

[0022] Figure 5 A schematic diagram of the structure of a switch system disclosed in an embodiment of the present application;

[0023] Figure 6 A schematic diagram of the structure of another switch system disclosed in an embodiment of the present application;

[0024] Figure 7 A schematic diagram of an expansion module of a tray-type housing structure disclosed in an embodiment of the present application;

[0025] Figure 8 This is a schematic diagram of an expansion module whose shell structure is an optical module type shell structure disclosed in an embodiment of the present application. DETAILED DESCRIPTION

[0026] The embodiments of the present application provide a fault analysis method, a switch system, a computer-readable storage medium, and a computer program product including instructions, for performing fault analysis while improving the comprehensiveness, accuracy, and efficiency of the fault analysis.

[0027] See also Figure 1 , Figure 1 A schematic diagram of a fault analysis method disclosed in an embodiment of the present application is provided, wherein the method comprises:

[0028] 101. Obtain at least one piece of target communication data, where the at least one piece of target communication data is used to represent communication between at least one source device and a corresponding destination device.

[0029] In this embodiment, when performing fault analysis, at least one piece of target communication data may be obtained, and the at least one piece of target communication data is used to characterize the communication between at least one source device and a corresponding destination device.

[0030] Specifically, the target communication data may include information such as the timestamp of the communication, protocol header information, and data content.

[0031] 102. Perform fault analysis on at least one target communication data according to characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension, wherein at least one service quality dimension includes an authentication quality dimension, a network service quality dimension, a business usage service quality dimension and / or an edge security identification dimension.

[0032] After obtaining at least one target communication data, a fault analysis can be performed on the at least one target communication data based on characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension. The at least one service quality dimension includes an authentication quality dimension, a network service quality dimension, a business usage service quality dimension and / or an edge security identification dimension.

[0033] Specifically, the target communication data can be subjected to fault analysis of characteristic indicators of various service quality dimensions, such as message delay, packet loss, jitter, server busyness (for example, TCP zero window phenomenon, where the server is temporarily unable to send data, resulting in an empty window), number of connection failures, etc.

[0034] It is worth mentioning that fault analysis can be performed on at least one target communication data according to characteristic indicators of at least one service quality dimension, and the characteristic indicators of the service quality dimensions covered are relatively comprehensive. Therefore, the comprehensiveness, accuracy and efficiency of the fault analysis are relatively high.

[0035] 103. If there is a fault corresponding to the service quality dimension, determine the fault analysis result corresponding to the service quality dimension, the fault analysis result includes the fault point and the fault solution, and after the fault point is repaired based on the fault solution, forward data according to the target communication data.

[0036] Performing fault analysis on at least one target communication data according to characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension, if there is a fault corresponding to the service quality dimension, then determining the fault analysis result corresponding to the service quality dimension, the fault analysis result including the fault point and the fault solution, and after repairing the fault point based on the fault solution, performing data forwarding according to the target communication data.

[0037] Specifically, for example, if the analysis shows that the latency of a service node is abnormally high, the fault analysis result is: the fault point is the node, the fault cause is network congestion or equipment performance problems, and the fault solution is to optimize resource configuration or troubleshoot and repair performance bottlenecks. Then the corresponding fault can be repaired for the node, and finally data forwarding can be performed according to the target communication data.

[0038] Among them, fault analysis is performed on at least one target communication data according to the characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension. If there is no fault corresponding to the service quality dimension, data forwarding can be performed according to the target communication data.

[0039] Specifically, if there is no fault corresponding to the service quality dimension, it means that the current communication status is normal in this dimension. At this time, the data can continue to be forwarded normally according to the predetermined routing rules or strategies, that is, the communication data can be transmitted to the destination device along the expected path.

[0040] It is worth mentioning that the existing fault analysis method can only utilize the mirroring function of the switch to identify the fault of a single terminal by monitoring the traffic of a single specific port and checking the ports one by one. Therefore, the comprehensiveness, accuracy and efficiency of the fault analysis are low. However, the embodiment of the present application can obtain multiple copies of target communication data of communication between multiple source devices and corresponding destination devices in real time, and perform fault analysis on the multiple copies of target communication data, and the comprehensiveness, accuracy and efficiency of the fault analysis are high.

[0041] In the embodiment of the present application, at least one target communication data can be subjected to fault analysis based on the characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension. The characteristic indicators of the service quality dimension covered are relatively comprehensive, so the comprehensiveness, accuracy and efficiency of the fault analysis are relatively high. Furthermore, at least one target communication data of the communication between at least one source device and the corresponding destination device can be obtained in real time, and the at least one target communication data can be subjected to fault analysis, which can further improve the accuracy and efficiency of the fault analysis.

[0042] based on Figure 1 In the described embodiment, during the fault analysis process, although the fault analysis can be performed on at least one target communication data according to the characteristic indicators of at least one service quality dimension, the comprehensiveness and accuracy of the fault analysis are relatively high. However, due to the uncertainty between the characteristic indicators of different service quality dimensions, for example, some indicators may not be sufficient to fully reflect all the problems of the dimension, so although the analysis process is relatively accurate, it is still possible that the accuracy and efficiency of the fault analysis of the characteristic indicators of a specific service quality dimension are not high enough due to insufficient indicator selection or unclear correlation between indicators. In order to solve the above problems, the following provides a detailed embodiment of this solution that can be optionally executed during the implementation process. Please refer to Figure 2 , Figure 2 This is a flowchart of another fault analysis disclosed in an embodiment of the present application. Another embodiment of the fault analysis method of the present application includes:

[0043] 201. Obtain at least one piece of target communication data, where the at least one piece of target communication data is used to represent communication between at least one source device and a corresponding destination device.

[0044] Step 201 in this embodiment is similar to the aforementioned Figure 1 Step 101 in the illustrated embodiment is similar and will not be described in detail here.

[0045] 202. Determine whether there is a fault corresponding to the service quality dimension by determining whether the response delay of the authentication request in the target communication data, the response success rate, the authentication completion rate, the number of authentication requests, the authentication failure statistics, the delay, jitter, packet loss rate of the data message of the network service, the terminal access detection data, the service address detection data, the DNS address resolution detection data, the DHCP address acquisition detection data, the connection failure rate, delay, jitter and / or packet loss rate of the data message of the business use service meets the preset standard, and / or determine whether the connection failure rate, delay, jitter, and packet loss rate of the data message of the business use service in the target communication data meets the preset service quality standard of the business use service.

[0046] After obtaining at least one target communication data, it is possible to determine whether there is a fault corresponding to the service quality dimension by determining the response delay of the authentication request in the target communication data, the response success rate, the authentication completion rate, the number of authentication requests, the authentication failure statistics, the delay, jitter, packet loss rate of the data packets of the network service, the terminal access detection data, the service address detection data, the DNS address resolution detection data, the DHCP address acquisition detection data, the connection failure rate, delay, jitter and / or packet loss rate of the data packets of the business use service, and / or determining whether the connection failure rate, delay, jitter and packet loss rate of the data packets of the business use service in the target communication data meet the preset service quality standards for the business use service.

[0047] Specifically, the method for determining whether there is a fault corresponding to the service quality dimension may include at least one of the following situations:

[0048] 1. Determine whether the response delay, response success rate, authentication completion rate, number of authentication requests and / or authentication failure statistics of the authentication request in the target communication data meet the preset authentication standards to determine whether there are any faults corresponding to the authentication quality dimension.

[0049] Specifically, the response delay of an authentication request refers to the time required from sending an authentication request to the server returning a response. The response success rate refers to the proportion of successful responses from the server during the authentication request process. The authentication completion rate refers to the proportion of requests that actually complete the authentication process and confirm the user's identity, which usually involves the user's authorization process, such as login or service verification. The number of authentication requests represents the total number of authentication requests initiated by the user during the entire time period. The authentication failure statistics refer to the proportion of requests that failed to pass the authentication, etc.

[0050] 2. Determine whether the latency, jitter, packet loss rate, terminal access detection data, service address detection data, DNS address resolution detection data and / or DHCP address acquisition detection data of the data packets of the network service in the target communication data meet the preset network service quality standards to determine whether there are faults corresponding to the network service quality dimensions.

[0051] Specifically, the data packet delay of network services refers to the time required from the data being sent to the receiving end to receive the complete data packet. Jitter describes the uncertainty of the arrival time of data packets during network transmission. The packet loss rate refers to the proportion of data packets lost during network transmission. Terminal access detection data is used to monitor when new devices or users are connected to the network so that administrators can quickly identify and configure resources to ensure service quality. Business address detection data focuses on the status of IP addresses used by applications to ensure that business traffic is directed to the correct network path to improve efficiency. DNS address resolution detection data focuses on the success or failure of domain name to IP address conversion, which is crucial for network access. If DNS resolution fails, users will not be able to access the corresponding website. DHCP address acquisition detection data monitors whether the client can effectively obtain a dynamic IP address from the DHCP server. For a network environment with dynamically assigned IP addresses, this is the key to maintaining connectivity.

[0052] The latency of the data packets of the network service includes at least one of the DHCP request time, the average DNS resolution latency, the average network detection latency and the average gateway latency. The packet loss rate of the data packets of the network service includes at least one of the gateway packet loss rate and the network packet loss rate. The DHCP (Dynamic Host Configuration Protocol) request time refers to the time required for the client to send a request to the DHCP server to obtain network configurations such as the IP address and subnet mask when it first connects to the network. The average DNS resolution latency refers to the average time to find and return the corresponding IP address during the DNS (Domain Name System) query process. The average network detection latency usually refers to the average waiting time from sending a request to receiving a response during the connectivity and performance test of a specific service (such as HTTP, FTP, etc.) in the network environment. The average gateway latency reflects the average delay of the data packet forwarded from the local computer to another network node through the router (gateway). The gateway packet loss rate refers to the proportion of data packets forwarded through the gateway (router or switch) that fail to successfully reach the destination and are discarded due to various reasons during the data transmission process. The network packet loss rate more broadly covers all types of network connections, including but not limited to packet loss at the gateway. It describes the proportion of data packets lost on the entire network path.

[0053] It can be understood that DHCP request time, average DNS resolution delay, average gateway delay, gateway packet loss rate, average network detection delay, and network packet loss rate are indicators used to characterize network health and network quality, and terminal access detection, DHCP address acquisition detection, gateway detection, DNS address resolution detection, and service address detection are indicators in the full-link detection technology used to determine whether the preset network service quality standards are met.

[0054] 3. Determine whether the connection failure rate, delay, jitter and / or packet loss rate of the data packets of the business usage service in the target communication data reaches the preset business usage service quality standard to determine whether there is a fault corresponding to the business usage quality dimension.

[0055] Specifically, the connection failure rate of data packets used by the business refers to the frequency of failure to successfully establish a connection during the transmission of requested information. Latency refers to the time required for a data packet to be confirmed by the receiver from the sender. Jitter involves fluctuations in the arrival time of data packets. Packet loss rate refers to the proportion of data packets lost during network transmission to the total number of data packets.

[0056] 4. Determine whether the source of the target communication data is an unauthorized terminal, and / or determine whether the target communication data includes malicious behavior data to determine whether there is a fault corresponding to the edge security identification dimension.

[0057] Specifically, real-time monitoring and detection of possible security threats and attack behaviors in the edge network can be used to timely review and process terminals and / or target terminal traffic with security risks through methods such as terminal identification, terminal address binding, terminal location binding, and terminal type binding, so as to achieve the effects of port protection, traffic hijacking defense, and vulnerability attack defense. In addition, the content of the target communication data can be checked to see if it contains malicious behavior patterns or suspicious activities, such as viruses, attack scripts, or other harmful information. If malicious behavior data is detected, it indicates that there is a potential security threat.

[0058] To be more specific, for example, if the response delay and success rate of the authentication request do not meet the pre-set standards, it is determined that there is an authentication-related fault; if the delay, jitter and packet loss rate of the data message do not meet the expected network performance standard, it is determined that there is a problem in the network service quality dimension; examine the connection failure rate, delay, jitter and packet loss rate of the data message of the business use service to confirm whether the terminal service is stable. If there is a significant decline, it is determined that there is a problem with the data message of the business use service. It can detect whether the traffic source is unauthorized or malicious to determine whether there is a network security threat. For example, if it is determined that the authentication request response delay of the target terminal traffic exceeds the preset response delay standard, or the response success rate is lower than the preset response success rate standard, the fault analysis result corresponding to the authentication quality dimension can be obtained. The fault point is located in the authentication service itself or the network path related to it, the cause of the fault is such as slow server response, invalid user account permission management, etc., and the fault solution is such as improving server performance or checking network bottlenecks.

[0059] It is worth mentioning that these specific indicators ensure the targeted nature of fault analysis, and perform fault analysis on the target communication data based on specific and comprehensive characteristic indicators corresponding to each service quality dimension. The indicators for each service quality dimension are sufficient and the correlation between the indicators is strong, thus further improving the accuracy and efficiency of fault analysis.

[0060] 203. If there is a fault corresponding to the service quality dimension, determine the fault analysis result corresponding to the service quality dimension, the fault analysis result includes a fault point and a fault solution, and after repairing the fault point based on the fault solution, forward data according to the target communication data.

[0061] Step 203 in this embodiment is similar to the aforementioned Figure 2 Step 103 in the illustrated embodiment is similar and will not be described in detail here.

[0062] Specifically, if there is a fault corresponding to the service quality dimension, then determining the fault analysis result corresponding to the service quality dimension includes at least one of the following situations:

[0063] 1. If there is a fault corresponding to the authentication quality dimension, the fault analysis result corresponding to the authentication quality dimension is determined based on the response delay of the authentication request, the response success rate, the authentication completion rate, the number of authentication requests and / or the authentication failure statistics.

[0064] Specifically, if the response speed of the authentication request slows down (such as the response delay increases), the success rate decreases, or the authentication completion rate does not meet the standard, and authentication failures occur frequently, it can be inferred that the authentication server may be overloaded, the identity authentication mechanism is wrong, or there may be a network connection problem.

[0065] 2. If there is a fault corresponding to the network service quality dimension, the fault analysis result corresponding to the network service quality dimension is determined based on the delay, jitter, packet loss rate, terminal access detection index, service address detection index, DNS address resolution detection index and / or DHCP address acquisition detection index of the network service data message.

[0066] Specifically, based on the delay fluctuation (jitter) of the data message, the increase in the packet loss rate, and the abnormal connectivity test of the access terminal, it can be determined that there may be problems with the network link, such as fiber breakage, insufficient wireless coverage, or router congestion.

[0067] 3. If there is a fault corresponding to the service usage quality dimension, determine the fault analysis result corresponding to the service usage quality dimension based on the connection failure rate, delay, jitter and / or packet loss rate of the data message of the service usage service.

[0068] Specifically, if the number of connection failures of service data packets increases, the latency increases significantly, or the jitter is large, accompanied by packet loss, it indicates that there may be bottlenecks or network instability at the application level. For example, in gaming applications, frequent game disconnections may be due to problems in the service usage quality dimension.

[0069] 4. If there is a fault corresponding to the edge security identification dimension, the fault analysis result corresponding to the edge security identification dimension is determined based on the first determination result of whether the source of the target communication data is an unauthorized terminal and / or the second determination result of whether the target communication data includes malicious behavior data.

[0070] Specifically, by verifying the source of communication data (such as from unknown devices) and checking whether there is malicious behavior, it can be determined whether edge security protection has failed. For example, if an enterprise finds that some internal systems receive a large number of abnormal access requests from outside, it may reflect a failure in the edge security identification dimension.

[0071] In this embodiment, at least one target communication data can be subjected to fault analysis based on the characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension. The characteristic indicators of the service quality dimensions covered are relatively comprehensive, so the comprehensiveness, accuracy and efficiency of the fault analysis are relatively high. Furthermore, at least one target communication data of the communication between at least one source device and the corresponding destination device can be obtained in real time, and at least one target communication data can be subjected to fault analysis, which can further improve the accuracy and efficiency of the fault analysis. Secondly, at least one target communication data can be subjected to fault analysis of specific and comprehensive characteristic indicators corresponding to each service quality dimension. The indicator selection for each service quality dimension is sufficient, and the correlation between the indicators is relatively strong, so the accuracy and efficiency of the fault analysis are further improved.

[0072] based on Figure 1 In the described embodiment, during the fault analysis process, although at least one target communication data can be analyzed for faults according to the characteristic indicators of at least one service quality dimension, the comprehensiveness and accuracy of the fault analysis are relatively high. However, there may still be insufficient data volume of the target communication data to be analyzed for faults or other reasons, which may result in the inability to prevent the occurrence of faults in advance or the accuracy and efficiency of the fault analysis being low. In order to solve the above problems, the following provides a detailed embodiment of this solution that can be optionally executed during implementation. Please refer to Figure 3 , Figure 3 This is a flowchart of another fault analysis disclosed in an embodiment of the present application. A method of another embodiment of the fault analysis method of the present application includes:

[0073] 301. Copy the real-time communication data of at least one port of the switch device to the destination port of the switch device as at least one target communication data, where the target communication data is mirror communication data; and / or generate at least one target communication data for simulating communication between at least one source device and a corresponding destination device through an artificial intelligence model.

[0074] In this embodiment, when performing fault analysis, the real-time communication data of at least one port of the switch device can be copied to the destination port of the switch device as at least one target communication data, and the target communication data is mirrored communication data; and / or at least one target communication data for simulating communication between at least one source device and the corresponding destination device is generated through an artificial intelligence model.

[0075] Specifically, at least one port of the switch device is used to obtain real-time communication data, and the destination port is used to copy the real-time communication data of at least one port of the switch device as at least one target communication data, and the target communication data is mirror communication data, so as to analyze the mirror communication data later. It should be understood that analyzing the copied mirror communication data instead of analyzing the real-time communication data can ensure that data forwarding and data management can be performed based on the complete real-time communication data later, avoiding the increase of delay or data loss of the real-time communication data.

[0076] It is worth mentioning that simulation tests can be performed before the source device and the corresponding destination device communicate. Based on simulating at least one target communication data between at least one source device and the corresponding destination device, potential network quality problems can be discovered in advance and proactively, risks can be eliminated in a timely manner, and the probability of failure when the actual source device and the corresponding destination device communicate can be reduced. Secondly, by combining the copied mirror communication data and the simulated target communication data, the overall picture of the problem can be more fully understood, the accuracy of fault analysis can be improved, and temporary changes can be quickly responded to, as well as long-term planning and optimization can be achieved, thereby improving the efficiency of network management.

[0077] 302. Perform fault analysis on at least one target communication data according to characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension, wherein at least one service quality dimension includes an authentication quality dimension, a network service quality dimension, a business usage service quality dimension, and / or an edge security identification dimension.

[0078] 303. If there is a fault corresponding to the service quality dimension, determine the fault analysis result corresponding to the service quality dimension, the fault analysis result includes a fault point and a fault solution, and after repairing the fault point based on the fault solution, forward data according to the target communication data.

[0079] Steps 302 and 303 in this embodiment are similar to those in the previous Figure 1 Steps 102 and 103 in the illustrated embodiment are similar and will not be described in detail herein.

[0080] In this embodiment, at least one target communication data can be analyzed for faults according to the characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension. The characteristic indicators of the service quality dimension covered are relatively comprehensive. Therefore, the real-time, comprehensive, accurate and efficient nature of the fault analysis is high. Further, at least one target communication data of the communication between at least one source device and the corresponding destination device can be obtained in real time, and at least one target communication data can be analyzed for faults, which can further improve the accuracy and efficiency of the fault analysis. And the network quality of the entire network and the service quality of the business can be accurately understood. When a fault occurs, effective troubleshooting can be carried out in time, preventive maintenance of the network can be achieved, and the demand for network stability for the rapid development of enterprise business can be met. Therefore, the accuracy and efficiency of the fault analysis are high. Secondly, a simulation test can be carried out before the source device and the corresponding destination device communicate. Based on the simulated at least one target communication data, potential quality problems of the network can be discovered in advance and actively, risks can be eliminated in time, and the probability of failure when the actual source device and the corresponding destination device communicate can be reduced. Furthermore, by combining the copied mirrored communication data with the simulated target communication data, we can gain a more comprehensive understanding of the problem, improve the accuracy of fault analysis, respond quickly to temporary changes, and perform long-term planning and optimization, thereby improving the efficiency of network management.

[0081] based on Figure 1 , Figure 2 and Figure 3 On the basis of, in order to improve the accuracy of fault analysis, the signal of at least one target communication data can be regenerated or enhanced first, and then the fault analysis of the characteristic indicator of at least one service quality dimension can be performed. In order to improve the efficiency of fault analysis, at least one target communication data can be filtered first, and then the fault analysis of the characteristic indicator of at least one service quality dimension can be performed. After the fault analysis result is obtained, the fault can be repaired. For the specific implementation method, please refer to the following description:

[0082] Among them, before performing fault analysis on at least one target communication data according to the characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension, retiming and signal regeneration, or signal enhancement processing can be performed on at least one target communication data to obtain at least one target communication data after recovery or signal enhancement, and wherein, the method for performing fault analysis on at least one target communication data according to the characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension can be to perform fault analysis on at least one target communication data after recovery or signal enhancement according to the characteristic indicators of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension.

[0083] Specifically, the target communication data can be retimed and signal regenerated through the Retimer chip, or the target communication data can be restored or enhanced through the Redrver chip. The Retimer chip or Redrver chip contains a series of electronic components, such as a fully adaptive continuous time linear equalizer (CTLE), a self-calibrating 5-tap decision feedback equalizer (DFE), a clock and data recovery (CDR) lock detection, and a send de-emphasis (DE) driver. These circuit components work together to enhance, adjust or synchronize input signals, and reconstruct high-speed signals through internal clocks, so that information that is attenuated or distorted during long-distance transmission can be enhanced or restored, ensuring the information integrity of the target communication data, thereby improving the accuracy of fault analysis.

[0084] Among them, before performing fault analysis of characteristic indicators of at least one service quality dimension on at least one target communication data and obtaining the fault analysis result corresponding to at least one service quality dimension, the target communication data can be filtered and counted, and then fault analysis and reporting of characteristic indicators of at least one service quality dimension are performed on the filtered and counted target communication data to obtain the fault analysis result corresponding to at least one service quality dimension.

[0085] Specifically, the target communication data can be accurately filtered through the mirroring function. Accurate filtering refers to filtering out the interactive messages of key protocols, such as TCP (Transmission Control Protocol, a connection-oriented, reliable, byte-stream-based transport layer communication protocol) messages, DHCP messages, DNS messages, ICMP messages, terminal authentication messages, etc.

[0086] It is worth mentioning that filtering the target communication data and then performing fault analysis on the filtered target communication data based on characteristic indicators of at least one service quality dimension can improve the efficiency and accuracy of the fault analysis.

[0087] Among them, after obtaining the fault analysis results corresponding to at least one service quality dimension, the fault analysis results can be sent to the network management center platform, and the network management center platform will display the fault analysis results so that third-party equipment or management personnel can repair the fault point and manage the network based on the fault solution.

[0088] Specifically, in addition to directly repairing the fault point based on the fault solution, the switch system can also send the fault analysis results to the network management center platform through the tunnel process. Non-emergency events adopt a periodic reporting mechanism of minutes, and emergency events adopt an immediate reporting mechanism to help users identify problems that need to be paid attention to and handled in a timely manner. For more details, please refer to Figure 4 , Figure 4 A flowchart of another fault analysis method disclosed in an embodiment of the present application is shown in FIG. Figure 4 It can be seen that the fault analysis results can be sent to the network management center platform, and the network management center platform will display the fault analysis results. The display form of the fault analysis results can be text, pictures, portraits, etc.

[0089] It is worth mentioning that directly repairing the fault point based on the fault solution can improve the intelligence of the entire system and improve the efficiency and real-time performance of fault repair. Secondly, the fault analysis results are sent to the network management center platform, which displays the fault analysis results, so that the third-party equipment can repair the fault point based on the fault solution, which can improve the feasibility of accurate fault repair. Furthermore, faults can be promptly and effectively checked, which can prevent and maintain the network, and the network stability is better.

[0090] The switch system in the embodiment of the present application is described below. Figure 5 , an embodiment of the switch system 500 in the embodiment of the present application includes:

[0091] CPU 501, switch chip 502, memory 505, multiple ports 504 and power supply 503;

[0092] The memory 505 is a temporary storage memory or a permanent storage memory;

[0093] The CPU 501 is configured to communicate with the memory 505 and execute the instructions in the memory 505 to perform the aforementioned Figure 1 , Figure 2 , Figure 3 and Figure 4 The method in the illustrated embodiment;

[0094] The switching chip 502 is connected to the central processor 501, and the switching chip 502 is used for forwarding data according to the target communication data.

[0095] It can be understood that the switch of this embodiment may include but is not limited to a box switch, a non-orthogonal frame switch, and an orthogonal frame switch.

[0096] See also Figure 6 Another embodiment of the switch system in the embodiment of the present application includes:

[0097] Central processing unit 601, switch chip 602 and memory, multiple ports and power supply;

[0098] The memory is either transient storage memory or persistent storage memory;

[0099] The CPU 601 is configured to communicate with the memory and execute the instructions in the memory to perform the aforementioned Figure 1 , Figure 2 , Figure 3 and Figure 4 The method in the illustrated embodiment;

[0100] The switching chip 602 is connected to the central processor 601, and the switching chip 602 is used for forwarding data according to the target communication data.

[0101] The central processing unit 601 and the switching chip 602 are connected in an integrated manner.

[0102] The switching chip includes a central processing unit.

[0103] Specifically, in a switch system where the central processing unit and the switching chip are connected in an integrated manner, user terminals include but are not limited to network cameras, APs, computers, etc., which are connected to the switch network port, optical port, or SC port through network cables or optical fibers and optical modules. The switching chip implements the function of processing the user terminal traffic passing through the switch network port, optical port, or SC port. In order to obtain the user's terminal data, data collection and filtering, intelligent perception, data reporting, and other functions are performed through mirrored traffic, and an intelligent sensing engine is added inside the switch. The intelligent sensing engine can be installed in, but is not limited to, box switches, frame switches, and switch expansion slots. The intelligent sensing engine is mainly composed of 1 intelligent sensing chip, 1 flash memory, 1 PHY chip, 1 gold finger connector, a row of printed circuit board gold fingers connected to the switch gold finger connector, and 3 power modules; the intelligent sensing engine has a pair of high-speed signal interfaces, the rate of which can be 10M / 100M / 1000M / 2500M / 10Gbps. The intelligent sensing engine can communicate with the switching chip inside the switch or the external terminal device through the high-speed signal interface for data collection and filtering, intelligent perception and data reporting; 1 flash memory is used for long-term data storage, such as an independent analysis system of the software intelligent sensing engine; 1 PHY chip realizes the mutual conversion and transmission communication between the serial high-speed signal output by the switching chip and the parallel high-speed signal output by the intelligent sensing chip; 1 gold finger connector, the connector type includes but is not limited to any one of Mini PCIE connector, high-speed connector, optical module connector, and COME connector; a row of printed circuit board gold fingers connected to the switch gold finger connector is used to connect the switching chip through the switch gold finger connector for data communication; 3 power modules realize the system power supply function of the intelligent sensing engine.

[0104] Another embodiment of the switch system in the embodiment of the present application includes:

[0105] CPU, switch chip and memory, multiple ports and power supply;

[0106] The memory is either transient storage memory or persistent storage memory;

[0107] The CPU is configured to communicate with the memory and execute instructions in the memory to perform the aforementioned Figure 1 , Figure 2 , Figure 3 and Figure 4 The method in the illustrated embodiment;

[0108] The central processing unit is an expansion module, the expansion module is connected to the central processing unit in a non-integrated manner through the connection module, and the expansion module includes a hot-swap circuit, and the hot-swap circuit is used to maintain a constant voltage and / or current supply and prevent signal loss or distortion when the expansion module is plugged in and out of the running switch system;

[0109] The switching chip is used to forward data according to the target communication data;

[0110] The shell structure of the expansion module is a tray-type shell structure.

[0111] See also Figure 7 , Figure 7 This is a schematic diagram of an expansion module with a tray-type shell structure disclosed in an embodiment of the present application. The expansion module with a tray-type shell structure includes a central processing unit 701, a printed circuit board gold finger 702 connected to a switch gold finger connector, a gold finger connector 703 connected to the switch, and an expansion module tray 704.

[0112] Specifically, in the expansion module with a tray-type shell structure, in order to obtain the user's terminal data, data collection and filtering, intelligent perception, data reporting and other functions are performed through mirrored traffic. An intelligent sensing engine is added inside the switch. The pluggable expansion module with the intelligent sensing engine can be installed in including but not limited to box switches, frame switches, and switch expansion slots. The intelligent sensing engine is mainly composed of 1 intelligent sensing chip, 1 flash memory, 1 PHY chip, 1 gold finger connector, a row of printed circuit board gold fingers connected to the switch gold finger connector, 3 power modules, 1 hot-swappable circuit and 1 expansion module tray; the intelligent sensing engine has a pair of high-speed signal interfaces, the rate of which can be 10M / 100M / 1000M / 2500M / 10Gbps. The intelligent sensing engine can communicate with the switching chip inside the switch or the external terminal device through the high-speed signal interface for data collection and filtering, intelligent perception and data reporting; 1 flash memory is used for long-term data storage, such as an independent analysis system of the software intelligent sensing engine; 1 PHY chip realizes the mutual conversion and transmission communication between the serial high-speed signal output by the switching chip and the parallel high-speed signal output by the intelligent sensing chip; 1 gold finger connector, the connector type includes but is not limited to Mini Any one of PCIE connector, high-speed connector, optical module connector and COME connector; one row of printed circuit board gold fingers connected to the switch gold finger connector is used to connect the switching chip through the switch gold finger connector for data communication; 3 power modules realize the system power supply function of the intelligent sensing engine; 1 hot-swap circuit realizes the voltage and current stabilization function to avoid damage to the equipment when plugging and unplugging the expansion module under power; 1 expansion module tray is the shell structure of the intelligent sensing engine.

[0113] Another embodiment of the switch system in the embodiment of the present application includes:

[0114] CPU, switch chip and memory;

[0115] The memory is either transient storage memory or persistent storage memory;

[0116] The CPU is configured to communicate with the memory and execute instructions in the memory to perform the aforementioned Figure 1 , Figure 2 , Figure 3 and Figure 4 The method in the illustrated embodiment;

[0117] The expansion module is connected to the central processing unit in a non-integrated manner through the connection module, the central processing unit is the expansion module, and the expansion module includes a hot-swap circuit, which is used to maintain a constant voltage and / or current supply when the expansion module is plugged in and out of the running switch system;

[0118] The switching chip is used for forwarding data according to the target communication data.

[0119] The shell structure of the extension module is an optical module type shell structure.

[0120] The central processing unit includes a regeneration timer chip or a re-driver chip, wherein the regeneration timer chip is used to retime and regenerate the target communication data signal, and the re-driver chip is used to restore or enhance the target communication data signal.

[0121] See also Figure 8 , Figure 8 A schematic diagram of an expansion module with a shell structure of an optical module type disclosed in an embodiment of the present application, wherein the expansion module with a shell structure of an optical module type includes a printed circuit board gold finger 801 connected to a switch gold finger connector, a Retimer chip (retimer chip) or a Redriver chip (redriver chip) 802, a power module 1 803 for providing system power, a power module 2 804 for providing system power, a power module 3 805 for providing system power, a Flash chip (flash memory chip) 806, a PHY chip (physical layer chip) 807, and an intelligent sensing engine 808.

[0122] Specifically, in the expansion module with an optical module shell structure, in order to obtain the user's terminal data, data collection and filtering, intelligent perception, data reporting and other functions are performed through mirrored traffic. An intelligent sensing engine is added inside the switch. The pluggable optical module type expansion module with the intelligent sensing engine can be installed in types including but not limited to box switches, frame switches, switch expansion slots, and switch optical port positions. The intelligent sensing engine is mainly composed of 1 intelligent sensing chip, 1 flash memory, 1 PHY chip, a row of printed circuit board gold fingers connected to the switch optical port connector, 1 Retimer chip or Redriver chip, 3 power modules and 1 optical module structure; the intelligent sensing engine has a pair of high-speed signal interfaces, the rate of the high-speed signal interface can be 10M / 100M / 1000M / 2500M / 10Gbps, and the intelligent sensing engine can communicate with the switching chip inside the switch or the external terminal device through the high-speed signal interface for data collection and filtering, intelligent perception and data reporting; 1 flash memory is used for long-term data storage, such as the independent analysis system of the software intelligent sensing engine; 1 PHY chip realizes the mutual conversion and transmission communication between the serial high-speed signal output by the switching chip and the parallel high-speed signal output by the intelligent sensing chip; 1 gold finger connector, the connector type includes but is not limited to Mini Any one of PCIE connector, high-speed connector, optical module connector and COME connector; one row of printed circuit board gold fingers connected to the switch gold finger connector is used to connect the switching chip through the switch gold finger connector for data communication; one Retimer chip or Redriver chip can be used or not to realize that when the high-speed signal passes through the Retimer or Redriver, the high-speed signal is reconstructed through the internal clock to restore or enhance the signal and then continue to be transmitted; three power modules realize the system power supply function of the intelligent sensing engine; one optical module type structure is the shell structure of the intelligent sensing engine.

[0123] The embodiment of the present application also provides a computer-readable storage medium, the computer-readable storage medium includes instructions, when the instructions are executed on a computer, the computer executes the aforementioned Figure 1 , Figure 2 , Figure 3 and Figure 4 The method in the illustrated embodiment.

[0124] The present application also provides a computer program product including instructions, which, when executed on a computer, enables the computer to execute the aforementioned Figure 1 , Figure 2 , Figure 3 and Figure 4 The method in the illustrated embodiment.

[0125] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0126] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0127] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0128] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0129] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0130] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, read-only memory), random access memory (RAM, random access memory), Flash disk or optical disk, etc., various media that can store program codes.

Claims

1. A fault analysis method, characterized in that: Applied to a switch device, the method comprises: Acquire at least one piece of target communication data, wherein the at least one piece of target communication data is used to characterize communication between at least one source device and a corresponding destination device; Performing fault analysis on the at least one target communication data according to a characteristic indicator of at least one quality of service dimension to determine whether there is a fault corresponding to the quality of service dimension, wherein the at least one quality of service dimension includes an authentication quality dimension, a network service quality dimension, a business use service quality dimension, and / or an edge security identification dimension; If there is a fault corresponding to the service quality dimension, a fault analysis result corresponding to the service quality dimension is determined, the fault analysis result includes a fault point and a fault solution, and after the fault point is repaired based on the fault solution, data forwarding is performed according to the target communication data.

2. The method according to claim 1, characterized in that After performing fault analysis on the at least one target communication data according to the characteristic indicator of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension, the method further includes: If there is no fault corresponding to the service quality dimension, data forwarding is performed according to the target communication data.

3. The method according to claim 1, characterized in that The performing fault analysis on the at least one target communication data according to the characteristic indicator of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension includes at least one of the following situations: Determine whether the response delay, response success rate, authentication completion rate, number of authentication requests and / or authentication failure statistics of the authentication request in the target communication data meet the preset authentication standard to determine whether there is a fault corresponding to the authentication quality dimension; Determine whether the delay, jitter, packet loss rate, terminal access detection data, service address detection data, DNS address resolution detection data and / or DHCP address acquisition detection data of the data message of the network service in the target communication data meet the preset network service quality standard, so as to determine whether there is a fault corresponding to the network service quality dimension; Determine whether the connection failure rate, delay, jitter and / or packet loss rate of the data message of the business usage service in the target communication data reaches the preset business usage service quality standard to determine whether there is a fault corresponding to the business usage quality dimension; Determine whether the source of the target communication data is an unauthorized terminal, and / or determine whether the target communication data includes malicious behavior data, so as to determine whether there is a fault corresponding to the edge security identification dimension.

4. The method according to claim 3, characterized in that The delay of the data message of the network service includes at least one of DHCP request time, DNS resolution average delay, network detection average delay and gateway average delay; and / or the packet loss rate of the data message of the network service includes at least one of gateway packet loss rate and network packet loss rate.

5. The method according to claim 3, characterized in that If there is a fault corresponding to the service quality dimension, determining the fault analysis result corresponding to the service quality dimension includes at least one of the following situations: If there is a fault corresponding to the authentication quality dimension, determining the fault analysis result corresponding to the authentication quality dimension based on the response delay, response success rate, authentication completion rate, number of authentication requests and / or authentication failure statistics of the authentication request; If there is a fault corresponding to the network service quality dimension, determine the fault analysis result corresponding to the network service quality dimension based on the delay, jitter, packet loss rate, terminal access detection index, service address detection index, DNS address resolution detection index and / or DHCP address acquisition detection index of the data message of the network service; If there is a fault corresponding to the service usage quality dimension, determining a fault analysis result corresponding to the service usage quality dimension based on a connection failure rate, a delay, a jitter and / or a packet loss rate of a data message of the service usage service; If there is a fault corresponding to the edge security identification dimension, the fault analysis result corresponding to the edge security identification dimension is determined based on a first determination result of whether the source of the target communication data is an unauthorized terminal and / or a second determination result of whether the target communication data includes malicious behavior data.

6. The method according to claim 1, characterized in that The obtaining of at least one target communication data comprises: Copying a copy of the real-time communication data of at least one port of the switch device to a destination port of the switch device as the at least one copy of the target communication data, wherein the target communication data is the mirror communication data; and / or The at least one target communication data for simulating the communication between the at least one source device and the corresponding destination device is generated by an artificial intelligence model.

7. The method according to claim 1, characterized in that If there is a fault corresponding to the service quality dimension, after determining the fault analysis result corresponding to the service quality dimension, the method further includes: The fault analysis result is sent to a network management center platform, and the network management center platform displays the fault analysis result, so that a third-party device can perform fault repair on the fault point based on the fault solution.

8. The method according to claim 1, characterized in that Before performing fault analysis on the at least one target communication data according to a characteristic indicator of at least one quality of service dimension to determine whether there is a fault corresponding to the quality of service dimension, the method further includes: Retiming and signal regeneration, or signal enhancement processing, are performed on the at least one target communication data to obtain at least one target communication data after restoration or signal enhancement; The performing fault analysis on the at least one target communication data according to the characteristic indicator of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension includes: A fault analysis is performed on at least one target communication data after the recovery or signal enhancement according to a characteristic indicator of at least one service quality dimension to determine whether there is a fault corresponding to the service quality dimension.

9. A switch system, characterized in that: include: CPU, switch chip 、 Memory and multiple ports; The port is used to obtain communication data between the source device and the destination device; The memory is a short-term storage memory or a persistent storage memory; The central processing unit is configured to communicate with the memory and execute instructions in the memory to perform the method of any one of claims 1 to 8; The central processing unit is connected to the switching chip, and the switching chip is used for forwarding data according to the target communication data.

10. The switch system according to claim 9, characterized in that The central processing unit is connected to the switching chip, and includes: The central processing unit and the switching chip are connected in an integrated manner.

11. The switch system according to claim 9, characterized in that The central processing unit is an expansion module; The switching chip is connected to the central processing unit and includes: The expansion module is connected to the central processing unit in a non-integrated manner via a connection module. The expansion module includes a hot-swap circuit, which is used to maintain a constant voltage and / or current supply and prevent signal loss or distortion when the expansion module is plugged in or out of a running switch system.

12. The switch system according to claim 11, characterized in that The shell structure of the expansion module is a tray-type shell structure or an optical module-type shell structure.

13. The switch system according to any one of claims 8 to 12, characterized in that The central processing unit includes a regeneration timer chip or a re-driver chip, wherein the regeneration timer chip is used to retime and regenerate the target communication data signal, and the re-driver chip is used to restore or enhance the target communication data signal.

Images