Network detection control equipment and method

Abstract

The invention discloses network detection control equipment and a network detection control method, and aims to solve the problem that in the prior art, equipment access through a mirror image port of a switch generally has limitation. The device is connected out through a network interface, network control is allowed through a wireless network, and the device comprises a linux system, a wifi module, a flash storage chip, a first network card and a second network card. The first network card and the second network card are bridged through a virtual network bridge technology provided by a linux system; a first external device is connected to a second external device sequentially through a first network card and a second network card, the first network card is connected to the first external network device through a network interface and a network cable, and the second network card is connected to the second external network device through a network interface and a network cable. Through the equipment provided by the invention, the network environment problem can be found in time, the weak network environment can be simulated for network equipment testing, and the network detection efficiency is improved.

Description

Technical Field

[0001] The present application relates to the technical field of network detection, and in particular to a network detection device. Background Art

[0002] In the process of network management and maintenance, network monitoring is an important part of ensuring network performance, security and stability. In order to achieve effective network monitoring, the commonly used technical solution is to access a specific monitoring device through the switch's mirror port (also known as the SPAN port, English name SwitchedPortAnalyzer) to capture data packets flowing through the switch. These data packets are then analyzed to provide key information about network traffic patterns, potential security threats, and network health.

[0003] However, although this approach based on switch mirror ports is widely used in practice, it also has some objective limitations. First, not all switches are equipped with mirror ports, which is especially common in some small or older models of network equipment. Second, in those environments that are indeed equipped with mirror ports, these resources may already be occupied by other monitoring or security needs. In this case, if you need to make room for new monitoring tasks, you must reconfigure the existing settings, which may interrupt ongoing monitoring activities or, in the worst case, affect the overall performance and stability of the network. Summary of the invention

[0004] The present application provides a network detection control device and method, aiming to solve the problem that the prior art generally has limitations in accessing devices through the mirror port of a switch.

[0005] In a first aspect, a network detection control device is provided, comprising: a Linux device, a first network card and a second network card;

[0006] The Linux device is connected to the first network card and the second network card, and is used to create a virtual bridge between the first network card and the second network card, and realize data forwarding between the first network card and the second network card through the virtual bridge;

[0007] The first network card is connected to the first external network device via a network interface cable, serving as an entry for network data, and receiving data from the first external network device;

[0008] The second network card is connected to the second external network device via a network interface cable, and serves as an outlet for network data, sending the network data from the first network card and forwarded by the virtual bridge to the second external network device, thereby replacing the original network cable connection between the first external network device and the second external network device.

[0009] In the above scheme, further optionally, a wifi module is also included; the wifi module is connected to the linux device, and realizes the data packet conversion with the virtual bridge through the forwarding mechanism of the linux system; at the same time, the wifi module provides a wireless network, and the external monitoring device controls the linux device by connecting to the wireless network, thereby controlling the network communication between the first external network device and the second external network device.

[0010] In the above scheme, optionally, a flash storage chip is further included; the flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge.

[0011] In the above solution, optionally, it also includes: a wifi module and a flash storage chip;

[0012] The wifi module is connected to the linux device, and realizes the data packet conversion with the virtual bridge through the forwarding mechanism of the linux system; at the same time, the wifi module provides a wireless network, and the external monitoring device controls the linux device by connecting to the wireless network, thereby controlling the network communication between the first external network device and the second external network device; the flash storage chip is connected to the linux device, and is used to store the data packets captured on the virtual bridge.

[0013] In the above solution, optionally, the network interface is an RJ45 network port.

[0014] In the above scheme, optionally, after the first network card and the second network card are bridged through the virtual bridge, they become ports of the virtual bridge, and their IP addresses and MAC addresses are no longer directly used for network communication, but are uniformly managed by the virtual bridge. The virtual bridge decides whether to receive the data packet locally, forward, discard or broadcast the data packet based on the destination MAC address of the data packet.

[0015] In a second aspect, a network detection method is provided, the network detection method is based on a network detection control device, the device includes a Linux device, a WiFi module, a flash storage chip, a first network card and a second network card; wherein the Linux device is connected to the first network card and the second network card to create a virtual bridge between the first network card and the second network card, the first network card is connected to a first external network device through a network interface cable, as an entry of network data, and receives data from the first external network device; the second network card is connected to a second external network device through a network interface cable, as an exit of network data, and sends network data from the first network card forwarded by the virtual bridge to the second external network device; the WiFi module is connected to the Linux device and provides a wireless network at the same time, and an external monitoring device logs in to a control page of the Linux device by connecting to the wireless network, thereby controlling the Linux device; the flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge; the network detection method is applied to the Linux device, including:

[0016] In response to a "network probe" command sent by a user via an external monitoring device, a packet capture tool is launched;

[0017] Capture all data packets passing through the virtual bridge and save the captured data packets to the flash storage chip; use pre-defined algorithms to analyze the captured data packets, identify the protocol format and port number of the data packets, classify them and find suspicious behaviors;

[0018] Display the analysis results on the control page for users to view;

[0019] In response to the detection instructions sent by the user through the external monitoring device, the suspicious device is isolated or corresponding measures are taken.

[0020] The above scheme may further optionally include: using a pre-defined algorithm to analyze the captured data packets, if a video stream is detected, performing video decoding, and displaying the video content through a control page.

[0021] In a third aspect, a network control method is provided, the network control method is based on a network detection control device, the device includes a Linux device, a WiFi module, a flash storage chip, a first network card and a second network card; wherein the Linux device is connected to the first network card and the second network card to create a virtual bridge between the first network card and the second network card, the first network card is connected to a first external network device through a network interface cable, as an entry of network data, and receives data from the first external network device; the second network card is connected to a second external network device through a network interface cable, as an exit of network data, and sends network data from the first network card forwarded by the virtual bridge to the second external network device; the WiFi module is connected to the Linux device and provides a wireless network at the same time, and an external monitoring device logs in to a control page of the Linux device by connecting to the wireless network, thereby controlling the Linux device; the flash storage chip is connected to the Linux device to store data packets captured on the virtual bridge; the network control method is applied to the Linux device, including:

[0022] In response to the "network control" command sent by the user through an external monitoring device, the pre-defined algorithm is used to analyze the protocol format and port number of the network data packet using the data in the Linux kernel protocol stack, and the protocol packet is filtered accordingly through the Linux netfilter function. Through the tc tool, the network jitter, delay and packet loss rate are logarithmically controlled;

[0023] Continuously monitor the effect of network control and use flash storage chips to record relevant data;

[0024] In response to the user's adjustment instructions, the network control parameters are modified, and the network control effect is fed back to the control page in real time for the user to view;

[0025] In response to the user's instruction to "cancel network control", the network control configuration is cleared and the network is restored to a normal state.

[0026] In a fourth aspect, a computer program product comprises a computer program / instruction, which implements the steps of the above method when executed by a processor.

[0027] Compared with the prior art, this application has at least the following beneficial effects:

[0028] Based on further analysis and research of the existing technical problems, this application recognizes that the existing technology often accesses the device through the mirror port of the switch to capture the network packet, and then performs relevant network analysis by analyzing the network packet. This method has limitations. Sometimes the switch may not have a mirror port or the mirror port is occupied by other devices. In this case, network monitoring cannot be performed. By providing a small network device, the device mainly includes a Linux system and two network cards. The two real network cards of the device are connected through the RJ45 network port. In actual use, the device is connected to the switch network that needs to be detected or controlled, and then log in to the device control page to select the operation you want to perform. When the device is working, the two network cards are bridged through the virtual switch technology, and the two network cards are bridged together. All accessed data can be forwarded through the Linux network card or according to the user's choice, it can be filtered according to the principles of protocol, port, MAC, etc. It can timely discover network environment problems and reduce the work pressure of operators; it can simulate a weak network environment to test network equipment and improve the device's ability to resist weak networks; it improves the efficiency of network detection; the device is easy to access, easy to upgrade, and can be remotely controlled.

[0029] Based on the Linux system and two network cards, this application also includes a WiFi module, which provides a wireless network, and external devices can perform network control through the wireless network.

[0030] In addition, the present application also includes a flash storage chip. Through the storage function provided by the flash storage chip, a large amount of network storage can be performed for manual analysis of network conditions. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 A schematic diagram of the connection relationship of a network detection control device provided in the first embodiment of the present application.

[0032] Figure 2 A schematic diagram of the connection relationship of a network detection control device provided in the second embodiment of the present application.

[0033] Figure 3 A schematic diagram of the connection relationship of a network detection control device provided in the third embodiment of the present application.

[0034] Figure 4 A schematic diagram of the connection relationship of a network detection control device provided for the fourth embodiment of the present application.

[0035] Figure 5 A schematic diagram of the connection relationship of a network detection control device provided for the fifth embodiment of the present application.

[0036] Figure 6A schematic diagram of the connection relationship of a network detection control device provided for the sixth embodiment of the present application. DETAILED DESCRIPTION

[0037] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0038] In the description of this application: unless otherwise specified, the meaning of "plurality" is two or more. The terms "first", "second", "third", etc. in this application are intended to distinguish the objects referred to, and do not have special meanings in terms of technical connotations (for example, they should not be understood as emphasizing the importance or order, etc.). Expressions such as "including", "comprising", "having", etc. also mean "not limited to" (certain units, components, materials, steps, etc.).

[0039] In one embodiment, reference Figure 1 , provides a network detection control device, including: a Linux device, a first network card and a second network card;

[0040] The Linux device is connected to the first network card and the second network card, and is used to create a virtual bridge between the first network card and the second network card, and realize data forwarding between the first network card and the second network card through the virtual bridge;

[0041] The first network card is connected to the first external network device via a network interface cable, serving as an entry for network data, and receiving data from the first external network device;

[0042] The second network card is connected to the second external network device via a network interface cable, and serves as an outlet for network data, sending network data from the first network card forwarded by the virtual bridge to the second external network device, thereby replacing the original network cable connection between the first external network device and the second external network device.

[0043] In this embodiment, the first external network device and the second external network device are originally connected via a network cable. Figure 1 The dotted part, after the network detection control device is connected to the first external network device and the second external network device through the first network card and the second network card, the original network cable connection relationship will be replaced, and the data forwarding between the first external network device and the second external network device will be completed by the first network card, the second network card and the virtual bridge connecting the two.

[0044] In this embodiment, the first external network device and / or the second external network device may be a switch (see Figure 3), network terminal or other network equipment; the first external network equipment and the second external network equipment can be two independent external networks, or they can belong to the same one.

[0045] The relationship between the first external network device and the second external network device can be various, including but not limited to the following situations:

[0046] (1) The first external network device and the second external network device may be two independent external network devices, which are directly connected via a network cable but do not belong to any larger network environment.

[0047] (2) The first external network device and the second external network device may belong to the same external network, for example, they are both connected to the same local area network (LAN), see Figure 4 The dotted line portion between the first external network device and the second external network device represents the original connection relationship. After connecting to the network detection control device of the present application, the original network cable connection relationship is replaced.

[0048] (3) The first external network device or the second external network device may be one that belongs to the external network, and the other device communicates with the device via a network cable, see Figure 5 , it may also be that the second external network device belongs to the external network, and the dotted line portion between the first external network device and the second external network device represents the original connection relationship. After accessing the network detection control device of this application, the original network cable connection relationship is replaced.

[0049] (4) The first external network device may belong to network 1, and the second external network device may belong to network 2. The two devices are connected via a network cable in some way (such as a gateway or a router). Figure 6 The dotted line portion between the first external network device and the second external network device represents the original connection relationship. After connecting to the network detection control device of the present application, the original network cable connection relationship is replaced.

[0050] Regardless of the topological structure between the first external network device and the second external network device, as long as they are connected via a network cable and can perform data communication, the present application is applicable.

[0051] In this embodiment, the naming of the first network card and the second network card is only for the convenience of distinction and description, and does not represent their fixed connection objects or data flow directions. In actual applications, the functions of the first network card and the second network card are interchangeable. For example, the first network card can also be connected to the second external network device as an outlet for network data; similarly, the second network card can also be used as an inlet for network data.

[0052] The design of the bridge itself is to achieve bidirectional data forwarding, and data flows bidirectionally between the first network card and the second network card. Therefore, the "entry" and "exit" roles of the first network card and the second network card are only descriptions of a data transmission direction based on the current device connection relationship, and do not represent their fixed functions.

[0053] In one embodiment, reference Figure 2 , and also includes a WiFi module; the WiFi module is connected to the Linux device, and realizes the data packet conversion with the virtual bridge through the forwarding mechanism of the Linux system; at the same time, the WiFi module provides a wireless network, and the external monitoring device controls the Linux device by connecting to the wireless network, thereby controlling the network communication between the first external network device and the second external network device.

[0054] In one embodiment, a flash storage chip is also included; the flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge.

[0055] In one embodiment, it also includes: a wifi module and a flash storage chip;

[0056] The wifi module is connected to the linux device, and the data packets are transferred to and from the virtual bridge through the forwarding mechanism of the linux system; at the same time, the wifi module provides a wireless network, and the external monitoring device controls the linux device by connecting to the wireless network, thereby controlling the network communication between the first external network device and the second external network device; the flash storage chip is connected to the linux device, and is used to store the data packets captured on the virtual bridge. In one embodiment, the network interface is an RJ45 network port.

[0057] This embodiment provides a small network device, which has two real network cards connected through the RJ45 network port. At the same time, the device provides a WiFi module, which can be used for network control through a wireless network. In addition, the device provides a storage function, which can perform a large amount of network storage for manual analysis of network conditions. In actual use, the device is connected to the switch network that needs to be detected or controlled, and then the device control page is logged in, and the desired operation can be selected.

[0058] The device mainly consists of Linux system, WiFi module, flash storage chip and two network cards.

[0059] When the device is working, the two network cards are bridged through the virtual switch technology. The two network cards are bridged together and all incoming data can be forwarded through the Linux network card or filtered according to the protocol, port, mac and other principles according to user selection.

[0060] The beneficial effects that this application can produce include: 1) timely discovery of network environment problems and reducing the work pressure of operators; 2) being able to simulate a weak network environment to test network equipment and improve the equipment's ability to resist weak networks; 3) improving the efficiency of network detection.

[0061] In one embodiment, after the first network card and the second network card are bridged by a virtual bridge, they become ports of the virtual bridge. Their IP addresses and MAC addresses are no longer directly used for network communication, but are uniformly managed by the virtual bridge. The virtual bridge decides whether to receive the data packet locally, forward, discard or broadcast the data packet based on the destination MAC address of the data packet.

[0062] In this embodiment, bridge is a virtual network device with the characteristics of a network device (IP, MAC address, etc. can be configured); bridge is also a virtual switch, which has similar functions to physical switch devices. Bridge is a technology that implements relay at the link layer and forwards frames. It can isolate collisions based on MAC partition blocks and connect multiple network segments at the data link layer.

[0063] For ordinary physical devices, there are only two ends, and the data coming from one end will go out from the other end. For example, the data received by the physical network card from the external network will be forwarded to the kernel protocol stack, and the data from the protocol stack will be forwarded to the external physical network. Bridges are different. Bridges have multiple ports, and data can come in from any port. The principle of which port to go out from after entering is similar to that of physical switches, and you need to look at the MAC address.

[0064] The bridge is built on a slave device (physical device, virtual device, VLAN device, etc., that is, attaching a slave device is similar to connecting a network cable between a switch and a user terminal in the real world), and an IP can be configured for the bridge (refer to LinuxBridge MAC address behavior), so that the host can communicate with other hosts in the network through this bridge device. In addition, its slave devices are virtualized as ports, their IP and MAC are no longer available, and they are set to accept any packets. Ultimately, the bridge device determines the destination of the data packet: receiving it locally, forwarding it, discarding it, or broadcasting it.

[0065] In one embodiment, a network detection method is provided. The network detection method is based on a network detection control device, which includes a Linux device, a WiFi module, a flash storage chip, a first network card, and a second network card; wherein the Linux device is connected to the first network card and the second network card to create a virtual bridge between the first network card and the second network card, the first network card is connected to the first external network device through a network interface cable, and serves as an entry for network data to receive data from the first external network device; the second network card is connected to the second external network device through a network interface cable, and serves as an exit for network data to send network data from the first network card and forwarded through the virtual bridge to the second external network device; the WiFi module is connected to the Linux device and provides a wireless network at the same time, and the external monitoring device logs in to the control page of the Linux device by connecting to the wireless network, thereby controlling the Linux device; the flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge; the network detection method is applied to the Linux device, including:

[0066] In response to a "network probe" command sent by a user via an external monitoring device, a packet capture tool is launched;

[0067] Capture all data packets passing through the virtual bridge and save the captured data packets to the flash storage chip; use pre-defined algorithms to analyze the captured data packets, identify the protocol format and port number of the data packets, classify them and find suspicious behaviors;

[0068] Display the analysis results on the control page for users to view;

[0069] In response to the detection instructions sent by the user through the external monitoring device, the suspicious device is isolated or corresponding measures are taken.

[0070] In one embodiment, the method further includes: analyzing the captured data packets using a pre-defined algorithm, decoding the video if a video stream is detected, and displaying the video content through a control page.

[0071] In this embodiment, the detection device is first connected in series to the network to be detected or controlled through a network cable. If the network status needs to be detected, the device is connected through WiFi, and then the network detection function is clicked. All data packets passing through the network can be analyzed on the web page, and classified according to ports, protocols, etc., and suspicious data content, such as ARP attacks, can be found. If the network stream contains video content, the detection device can also decode the video and watch it online through a PC connected to the device's WiFi, which can be used to analyze the cause when the video quality is poor.

[0072] In one embodiment, a network control method is provided. The network control method is based on a network detection control device, the device comprising a Linux device, a WiFi module, a flash storage chip, a first network card and a second network card; wherein the Linux device is connected to the first network card and the second network card to create a virtual bridge between the first network card and the second network card, the first network card is connected to the first external network device through a network interface cable, as an entry of network data, and receives data from the first external network device; the second network card is connected to the second external network device through a network interface cable, as an exit of network data, and sends network data from the first network card forwarded through the virtual bridge to the second external network device; the WiFi module is connected to the Linux device and provides a wireless network at the same time, and the external monitoring device logs in to the control page of the Linux device by connecting to the wireless network, thereby controlling the Linux device; the flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge; the network control method is applied to the Linux device, including:

[0073] In response to the "network control" command sent by the user through an external monitoring device, the pre-defined algorithm is used to analyze the protocol format and port number of the network data packet using the data in the Linux kernel protocol stack, and the protocol packet is filtered accordingly through the Linux netfilter function. Through the tc tool, the network jitter, delay and packet loss rate are logarithmically controlled;

[0074] Continuously monitor the effect of network control and use flash storage chips to record relevant data;

[0075] In response to the user's adjustment instructions, the network control parameters are modified, and the network control effect is fed back to the control page in real time for the user to view;

[0076] In response to the user's instruction to "cancel network control", the network control configuration is cleared and the network is restored to a normal state.

[0077] In this embodiment, the detection device is first connected to the network to be detected or controlled through a network cable. If it is network control, the device is connected through wifi, and then the corresponding control is performed. For example, the network jitter, network delay, packet loss rate, etc. are increased in the network connected to the device.

[0078] In this embodiment, two network cards can be seen in the Linux system, and the two network cards are respectively connected to two serially connected network cables.

[0079] After the network data enters the system network card, you can use the brctl tool to create a virtual network card bridge with the brctl addbrbridge command, and then use the brctl addif command to bridge the two eth0 and eth1. In this way, a virtual bridge is built through the Linux tool without a switch, and all data packets can be captured and stored on br0.

[0080] If you want to implement automatic analysis, you can use a custom algorithm (through the data in the kernel protocol stack, the protocol format of the analysis packet, port number, etc., to find suspicious network data packets), and finally implement monitoring and analysis of network data packets for all forwarded data.

[0081] If you want to achieve network control, you can also use a custom algorithm (through the data in the kernel protocol stack, analyze the protocol format, port number, etc. of the packet, and then use the netfilter function to filter the protocol packet accordingly, and use the tc tool to achieve corresponding control of network jitter, delay, packet loss rate, etc.)

[0082] In the system, the WiFi module is loaded, and the data packets between the bridge and WiFi are transferred through routing. At the same time, WiFi provides a network so that the PC can control the device.

[0083] In one embodiment, a computer program product is also provided, including a computer program / instruction, which implements the steps of the above-mentioned embodiment method when executed by a processor.

[0084] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

Claims

1. A network detection control device, characterized in that: include: Linux device, first network card and second network card; The Linux device is connected to the first network card and the second network card, and is used to create a virtual bridge between the first network card and the second network card, and to implement data forwarding between the first network card and the second network card through the virtual bridge; The first network card is connected to the first external network device via a network interface cable, serving as an entry for network data, and receiving data from the first external network device; The second network card is connected to the second external network device via a network interface cable and serves as an outlet for network data. The network data from the first network card and forwarded by the virtual bridge is sent to the second external network device, thereby replacing the original network cable connection between the first external network device and the second external network device.

2. The network detection control device according to claim 1, characterized in that: Also includes wifi module; The wifi module is connected to the linux device and realizes the data packet conversion with the virtual bridge through the forwarding mechanism of the linux system; at the same time, the wifi module provides a wireless network, and the external monitoring device controls the linux device by connecting to the wireless network, thereby controlling the network communication between the first external network device and the second external network device.

3. The network detection control device according to claim 1, characterized in that: It also includes flash memory chips; The flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge.

4. The network detection control device according to claim 1, characterized in that: Also includes: Wifi module and flash storage chip; The wifi module is connected to the linux device, and realizes data packet conversion with the virtual bridge through the forwarding mechanism of the linux system; At the same time, the wifi module provides a wireless network, and the external monitoring device controls the Linux device by connecting to the wireless network, thereby controlling the network communication between the first external network device and the second external network device; The flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge.

5. The network detection control device according to claim 1, characterized in that: The network interface is an RJ45 network port.

6. The network detection control device according to claim 1, characterized in that: After the first network card and the second network card are bridged through the virtual bridge, they become ports of the virtual bridge. Their IP addresses and MAC addresses are no longer directly used for network communication, but are uniformly managed by the virtual bridge. The virtual bridge decides whether to receive the data packet locally, forward, discard or broadcast the data packet based on the destination MAC address of the data packet.

7. A network detection method, characterized in that: The network detection method is based on a network detection control device, which includes a Linux device, a WiFi module, a flash storage chip, a first network card and a second network card; wherein the Linux device is connected to the first network card and the second network card to create a virtual bridge between the first network card and the second network card, the first network card is connected to a first external network device through a network interface cable, as an entry for network data, and receives data from the first external network device; the second network card is connected to a second external network device through a network interface cable, as an exit for network data, and sends network data from the first network card forwarded by the virtual bridge to the second external network device; the WiFi module is connected to the Linux device and provides a wireless network at the same time, and an external monitoring device logs in to a control page of the Linux device by connecting to the wireless network, thereby controlling the Linux device; the flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge; the network detection method is applied to the Linux device, including: In response to a "network probe" command sent by a user through an external monitoring device, a packet capture tool is launched; Capture all data packets passing through the virtual bridge and save the captured data packets to the flash storage chip; use pre-defined algorithms to analyze the captured data packets, identify the protocol format and port number of the data packets, classify them and find suspicious behaviors; Display the analysis results on the control page for users to view; In response to the detection instructions sent by the user through the external monitoring device, the suspicious device is isolated or corresponding measures are taken.

8. The network detection method according to claim 7, characterized in that: Also includes: Use pre-defined algorithms to analyze the captured data packets. If a video stream is detected, the video is decoded and the video content is displayed through the control page.

9. A network control method, characterized in that: The network control method is based on a network detection control device, which includes a Linux device, a WiFi module, a flash storage chip, a first network card and a second network card; wherein the Linux device is connected to the first network card and the second network card to create a virtual bridge between the first network card and the second network card, the first network card is connected to a first external network device through a network interface cable, as an entry for network data, and receives data from the first external network device; the second network card is connected to a second external network device through a network interface cable, as an exit for network data, and sends network data from the first network card forwarded by the virtual bridge to the second external network device; the WiFi module is connected to the Linux device and provides a wireless network at the same time, and an external monitoring device logs in to a control page of the Linux device by connecting to the wireless network, thereby controlling the Linux device; the flash storage chip is connected to the Linux device and is used to store data packets captured on the virtual bridge; the network control method is applied to the Linux device, including: In response to the "network control" command sent by the user through an external monitoring device, the pre-defined algorithm is used to analyze the protocol format and port number of the network data packet using the data in the Linux kernel protocol stack, and the protocol packet is filtered accordingly through the Linux netfilter function. Through the tc tool, the network jitter, delay and packet loss rate are logarithmically controlled; Continuously monitor the effect of network control and use flash storage chips to record relevant data; In response to the user's adjustment instructions, the network control parameters are modified, and the network control effect is fed back to the control page in real time for the user to view; In response to the user's "cancel network control" instruction, the network control configuration is cleared and the network is restored to a normal state.

10. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the steps of the method according to claim 7 are implemented.

Images