Message statistical method and device of satellite communication system, server and medium
By receiving message information in the satellite communication system and matching it with the filtering rule table, the problem of traditional methods occupying a large amount of system resources under the high-speed network interface is solved, and more efficient system resource utilization is achieved.
Patent Information
- Application Number
- CN202411966123.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-30
- Publication Date
- 2025-05-13
AI Technical Summary
Traditional satellite communication system packet statistics methods such as Wireshark software will occupy a large amount of system resources when processing high-speed network interfaces, resulting in the inability to operate other business applications.
By receiving message information, the source IP, destination IP, port number and protocol number are extracted, and the filtering rule table is matched, and the filtering rule table is modified based on the matching results to realize message statistics.
The filtering conditions are simplified, the system resource occupation is reduced, and the system resource utilization is improved.
Smart Images
Figure CN119996538A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of satellite communication technology, and more specifically, to a method, device, server and medium for counting messages in a satellite communication system. Background Art
[0002] The traditional method of collecting packet statistics in satellite communication systems is to use Wireshark software for statistics. Wireshark software uses complex regular expressions to filter packets and saves captured packets to files. The software runs on the netfilter network driver architecture and can configure the network interface to promiscuous mode, thereby capturing and analyzing all packets flowing through the interface. However, due to the complex regular expressions, the software has high requirements for system performance, especially when dealing with high-speed network interfaces of 10Gbps or even 100Gbps. Wireshark software will quickly occupy a large amount of system resources, causing other business applications to fail to operate normally. Summary of the invention
[0003] The purpose of the embodiment of the present application is to provide a method, device, server and medium for counting messages in a satellite communication system, which can reduce the occupation of system resources and improve the utilization rate of system resources. The embodiment of the present application is mainly achieved through the following technical solutions:
[0004] According to a first aspect of an embodiment of the present application, a method for counting messages in a satellite communication system is provided, comprising:
[0005] receiving at least one message information;
[0006] Extracting first source IP information, first destination IP information, first source port number, first destination port number and first protocol number from target message information, wherein the target message information is any one of the at least one message information;
[0007] Match the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number with each first filtering rule in the filtering rule table to obtain a target matching result;
[0008] The filtering rule table is modified based on the target matching result to obtain a statistical result.
[0009] According to one embodiment of the present application, after the step of receiving at least one message information, the message statistics method of the satellite communication system further includes:
[0010] Calling the packet receiving hook function to process the target message information and obtain the target processing result;
[0011] The target message information is discarded based on the target processing result, and feedback information is returned.
[0012] According to one embodiment of the present application, before the step of receiving at least one message information, the message statistics method of the satellite communication system further includes:
[0013] Register the packet receiving hook function with the kernel.
[0014] According to one embodiment of the present application, before the step of receiving at least one message information, the message statistics method of the satellite communication system further includes:
[0015] Setting a text file with multiple second filtering rules;
[0016] The text file is subjected to binary conversion processing to obtain the filtering rule table.
[0017] According to one embodiment of the present application, after the step of performing binary conversion processing on the text file to obtain the filtering rule table, the message statistics method of the satellite communication system further includes:
[0018] The filtering rule table is stored in a specified location.
[0019] According to an embodiment of the present application, after the step of calling the packet receiving hook function to perform message processing on the target message information and obtaining the target processing result, the message statistics method of the satellite communication system further includes:
[0020] A target node is created in the sysfs file system of the kernel, and the target node is used to reload the filtering rule table, store the statistical result to the designated location, and display the statistical result.
[0021] According to one embodiment of the present application, before the step of receiving at least one message information, the message statistics method of the satellite communication system further includes:
[0022] Receive statistical task information;
[0023] Perform statistical processing on the at least one message information based on the statistical task information.
[0024] A second aspect of an embodiment of the present application provides a message statistics device for a satellite communication system, comprising:
[0025] A receiving module, used for receiving at least one message information;
[0026] An extraction module, used to extract the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number from the target message information, wherein the target message information is any one of the at least one message information;
[0027] A matching module, used for matching the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number with each first filtering rule in a filtering rule table to obtain a target matching result;
[0028] A modification module is used to modify the filtering rule table based on the target matching result to obtain a statistical result.
[0029] According to a third aspect of an embodiment of the present application, a server is provided, comprising: a processor and a memory, the memory being used to store a computer program, the processor being used to call and run the computer program stored in the memory, and executing the steps of the message statistics method of the satellite communication system provided in the first aspect of the embodiment of the present application.
[0030] According to a fourth aspect of an embodiment of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium is used to store a computer program, wherein the computer program enables a computer to execute the steps of the message statistics method for a satellite communication system provided in the first aspect of the embodiment of the present application.
[0031] The beneficial effects of the embodiments of the present application include:
[0032] The embodiment of the present application adopts a filtering rule table for filtering (i.e., statistics), thereby simplifying the filtering process and reducing the occupation of system resources. Specifically, the embodiment of the present application is by receiving at least one message information; extracting the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number from the target message information, wherein the target message information is any one of the at least one message information; matching the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number with each first filtering rule in the filtering rule table to obtain a target matching result; modifying the filtering rule table based on the target matching result to obtain a statistical result. Compared with the prior art, the embodiment of the present application simplifies the filtering conditions, thereby reducing the occupation of system resources and improving the utilization rate of system resources. BRIEF DESCRIPTION OF THE DRAWINGS
[0033] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the conventional technology, the drawings required for use in the embodiments or the conventional technology descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.
[0034] Figure 1 It is a principle block diagram of the satellite communication system in some embodiments of the present application;
[0035] Figure 2 A flowchart of a message statistics method for a satellite communication system in some embodiments of the present application;
[0036] Figure 3 A flowchart of a message statistics method for a satellite communication system in another embodiment of the present application;
[0037] Figure 4 This is a principle block diagram of message information transmission in some embodiments of the present application;
[0038] Figure 5 A flowchart of a message statistics method for a satellite communication system in some other embodiments of the present application;
[0039] Figure 6 A flowchart of a message statistics method for a satellite communication system in some other embodiments of the present application;
[0040] Figure 7 It is a principle block diagram of a message statistics device of a satellite communication system in some embodiments of the present application;
[0041] Figure 8 This is a functional block diagram of the server in some embodiments of the present application. DETAILED DESCRIPTION
[0042] In order to make the above-mentioned purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are described in detail below in conjunction with the accompanying drawings. In the following description, many specific details are set forth to facilitate a full understanding of the present application. However, the present application can be implemented in many other ways different from those described herein, and those skilled in the art can make similar improvements without violating the connotation of the present application, so the present application is not limited by the specific embodiments disclosed below.
[0043] It should be noted that the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.
[0044] The terms "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.
[0045] The terms "comprises," "includes," or any other variations thereof are intended to cover a non-exclusive inclusion, for example, a process, method, system, product, or apparatus that comprises a series of steps or elements is not necessarily limited to those steps or elements explicitly listed but may include other steps or elements not explicitly listed or inherent to such process, method, product, or apparatus.
[0046] The term "satellite communication system" includes satellites, satellite observation stations, optical splitters, core network equipment and fault diagnosis systems. Figure 1 As shown. The star observation station refers to a ground observation station or ground station, which is a facility for communicating and exchanging data with the satellite. The fault diagnosis system is deployed on a server and is used to implement the message statistics method of the satellite communication system. The communication relationship between the satellite, the star observation station, the optical splitter, the core network device and the fault diagnosis system can be referred to Figure 1 As shown, that is, the satellite sends data to the observatory, the observatory packages the data into message information, and transmits the message information to the core network device via the optical splitter, and the optical splitter also copies the message information and transmits it to the fault diagnosis system.
[0047] The term "packet receiving hook function" refers to a function that is called before or after a data packet arrives at the receiving end and is used to pre-process or post-process the data packet.
[0048] The term "hook point" is also called a mount point. In the context of a packet receiving hook function, a hook point refers to a specific moment or event in the packet receiving process, such as when a packet arrives at a network interface, when a packet is parsed into a specific format, when a packet is passed to an upper-layer application, etc. In some programming languages, such as Python, the hook function of a packet receiving hook function can be implemented through a callback function or a decorator.
[0049] Unless otherwise defined, all technical and scientific terms used in the specification of this application have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used in the specification of this application are only for the purpose of describing specific embodiments and are not intended to limit this application. The term "and / or" used in the specification of this application includes any and all combinations of one or more related listed items.
[0050] The specific implementation of the present application is further described below in conjunction with the accompanying drawings.
[0051] refer to Figure 2 FIG. 1 is a flowchart of a method for counting messages in a satellite communication system provided in the first aspect of the embodiment of the present application. The method for counting messages in a satellite communication system is applied to a server (it can also be expressed as the method for counting messages in a satellite communication system is applied to a fault diagnosis system). Figure 2 In the method, the message statistics method of the satellite communication system includes:
[0052] S1. Receive at least one message information.
[0053] The at least one message information is sent by the stargazing station to the optical splitter, and then transmitted to the fault diagnosis system by the optical splitter. The fault diagnosis system is used to implement the message statistics method of the satellite communication system.
[0054] S2, extracting the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number from the target message information, wherein the target message information is any one of the at least one message information. The step S2 can refer to Figure 3 As stated in Figure 3 In the example, TCP message information is taken as an example, so the target message information is expressed as TCP message information.
[0055] Exemplarily, the extraction operation in step S2 can be implemented using a network programming library such as Python's socket library, Python's dpkt library, Go language's gopacket library, or Go language's libpcap library. In other embodiments, other technologies can also be used to implement the extraction operation in step S2, which is specifically set by those skilled in the art according to actual needs.
[0056] S3. Match the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number with each first filtering rule in the filtering rule table to obtain a target matching result.
[0057] The filtering rule table includes multiple first filtering rules, each of which includes second source IP information, second destination IP information, second source port number, second destination port number, second protocol number and quantity, that is, a five-tuple structure plus a statistical number. Exemplarily, the filtering rule table can refer to the following Table 1, where each row is one of the first filtering rules.
[0058] Table 1
[0059]
[0060]
[0061] Further, refer to Figure 3 As shown, the S3 step includes:
[0062] S31. Match the first source IP information with the second source IP information in the target first filtering rule to obtain a first matching result, wherein the target first filtering rule is any first filtering rule in the filtering rule table.
[0063] Specifically, when the first source IP information is the same as the second source IP information in the target first filtering rule, the first matching result is a successful match; when the first source IP information is different from the second source IP information in the target first filtering rule, the first matching result is a failed match.
[0064] S32: Match the first destination IP information with the second destination IP information in the target first filtering rule to obtain a second matching result.
[0065] Specifically, when the first destination IP information is the same as the second destination IP information in the target first filtering rule, the second matching result is a successful match; when the first destination IP information is not the same as the second destination IP information in the target first filtering rule, the second matching result is a failed match.
[0066] S33: Match the first source port number with the second source port number in the target first filtering rule to obtain a third matching result.
[0067] Specifically, when the first source port number is the same as the second source port number in the target first filtering rule, the third matching result is a successful match; when the first source port number is different from the second source port number in the target first filtering rule, the third matching result is a failed match.
[0068] S34. Match the first destination port number with the second destination port number in the target first filtering rule to obtain a fourth matching result.
[0069] Specifically, when the first destination port number is the same as the second destination port number in the target first filtering rule, the fourth matching result is a successful match; when the first destination port number is different from the second destination port number in the target first filtering rule, the fourth matching result is a failed match.
[0070] S35. Match the first protocol number with the second protocol number in the target first filtering rule to obtain a fifth matching result.
[0071] Specifically, when the first protocol number is the same as the second protocol number in the target first filtering rule, the fifth matching result is a successful match; when the first protocol number is different from the second protocol number in the target first filtering rule, the fifth matching result is a failed match.
[0072] S36: Generate the target matching result based on the first matching result, the second matching result, the third matching result, the fourth matching result, and the fifth matching result.
[0073] Specifically, when the first matching result, the second matching result, the third matching result, the fourth matching result and the fifth matching result are all matching successfully, the target matching result is a matching success; when at least one of the first matching result, the second matching result, the third matching result, the fourth matching result and the fifth matching result is a matching failure, the target matching result is a matching failure.
[0074] It should be understood that the Figure 3 The "other quadruple of the target first filtering rule" refers to the second source IP information, second destination IP information, second source port number and second destination port number of the target first filtering rule, and the "other quadruple of TCP message information" refers to the first source IP information, first destination IP information, first source port number and first destination port number of the TCP message information.
[0075] S4. Modify the filtering rule table based on the target matching result to obtain statistical results.
[0076] Specifically, when the target matching result is a successful match, the number in the target first filtering rule in the filtering rule table is incremented by one, thereby obtaining the statistical result. The statistical result can be shown in Table 2 below.
[0077] Table 2
[0078]
[0079]
[0080] The difference between the statistical result and the filtering rule table is that the quantity column is different.
[0081] The statistical results are applied to the full-link data plane packet loss analysis.
[0082] Through the above implementation, the embodiment of the present application adopts a filtering rule table to perform filtering (ie, statistics), thereby simplifying the filtering process, reducing the occupation of system resources, and improving the utilization rate of system resources.
[0083] In some implementations, after step S1, the message statistics method of the satellite communication system further includes:
[0084] S51. Call the packet receiving hook function to perform message processing on the target message information to obtain a target processing result.
[0085] The packet receiving hook function can be expressed as lan_rx_hook_fn.
[0086] The hook point of the packet receiving hook function is set at NF_INET_PRE_ROUTING. When the network port driver receives the message information, it immediately analyzes the message information.
[0087] refer to Figure 4 As shown, the entry device is a stargazing station. After the message information is transmitted by the entry device, the NF_IP_PRE_ROUTING hook function is triggered. After the message information passes through the NF_IP_PRE_ROUTING hook function, a route search is performed. According to the route search result, the message information may be sent to the local system (triggering the NF_IP_LOCAL_IN hook function) or forwarded to other machines (triggering the NF_IP_FORWARD hook function). The message information sent by the local system will trigger the NF_IP_LOCAL_OUT hook function. The message information after the NF_IP_LOCAL_OUT hook function will perform a route search. According to the route search result, the NF_IP_POST_ROUTING hook function is triggered. Finally, the message information is sent to the exit device (that is, the stargazing station) through the NF_IP_POST_ROUTING hook function. In addition, the message information after the NF_IP_FORWARD hook function will also trigger the NF_IP_POST_ROUTING hook function.
[0088] Further, refer to Figure 5 , the step S51 comprises:
[0089] S511: When the layer 2 protocol number of the target message information is not an IP message, directly discard the target message information as the target processing result.
[0090] The layer 2 protocol number refers to the protocol identifier used on the data link layer (the second layer of the OSI model). The layer 2 protocol number is usually called the "type / length" field, which is used to indicate which upper layer protocol should process the data carried by the target message information. Exemplarily, when the value of this field (that is, the layer 2 protocol number) is 0x0800, it indicates that the payload of the target message information is an IPv4 message; when the value is 0x86DD, it indicates that the payload of the target message information is an IPv6 message. Both IPv4 messages and IPv6 messages belong to the IP messages.
[0091] S512. When the layer 2 protocol number of the target message information is the IP message, execute the following steps S513, S514, S515 and S516.
[0092] S513: When the layer-3 protocol number of the target message information is equal to the first value corresponding to IPPROTO_IP, perform IP protocol message processing on the target message information, and obtain a first processing result after the processing is completed.
[0093] The three-layer protocol number is the protocol number used on the network layer (the third layer of the OSI model). The three-layer protocol number is used to identify what protocol the upper layer (i.e., the transport layer) is. Exemplarily, if the three-layer protocol number is 6, it means that the upper layer is the TCP protocol, and if the three-layer protocol number is 17, it means that the upper layer is the UDP protocol. The three-layer protocol number is used to distinguish different upper layer protocols at the network layer, thereby ensuring that the target message information can be correctly processed by the upper layer protocol.
[0094] The first value is 0. The IPPROTO_IP represents the IP protocol itself.
[0095] The first processing result is that the processing is completed.
[0096] The IP protocol message processing can be expressed as lan_RxlpProcedure.
[0097] S514: When the layer 3 protocol number of the target message information is equal to the second value corresponding to IPPROTO_ICMP, perform ICMP protocol message processing on the target message information, and obtain a second processing result after the processing is completed.
[0098] The second value is 1. The IPPROTO_ICMP represents Internet Control Message Protocol (ICMP).
[0099] The second processing result is that the processing is completed.
[0100] The ICMP protocol message processing can be expressed as lan_RxlcmpProcedure.
[0101] S515: When the layer 3 protocol number of the target message information is equal to the third value corresponding to IPPROTO_TCP, perform TCP protocol message processing on the target message information, and obtain a third processing result after the processing is completed.
[0102] The third value is 6. The IPPROTO_TCP indicates the TCP protocol.
[0103] The third processing result is that the processing is completed.
[0104] The TCP protocol message processing can be expressed as lan_RxTcpProcedure.
[0105] S516: When the layer-3 protocol number of the target message information is equal to the fourth value corresponding to IPPROTO_UDP, perform UDP protocol message processing on the target message information, and obtain a fourth processing result after the processing is completed.
[0106] The fourth value is 17. The IPPROTO_UDP indicates the UDP protocol.
[0107] The fourth processing result is that the processing is completed.
[0108] The UDP protocol message processing can be expressed as lan_RxUdpProcedure.
[0109] S517: Use the first processing result, the second processing result, the third processing result or the fourth processing result as the target processing result.
[0110] S52: discard the target message information based on the target processing result, and return feedback information.
[0111] Specifically, no matter the target processing result is "directly discard the target message information" or "processing completed", the target message information is discarded.
[0112] The feedback information is NF_DROP.
[0113] The step S52 can speed up the processing of the message statistics method of the satellite communication system and also save the computing overhead of the server.
[0114] In some embodiments, reference Figure 6 As shown, before the step S1, the message statistics method of the satellite communication system further includes:
[0115] S6. Register the packet receiving hook function with the kernel.
[0116] The setting of step S6 can enable the network port driver of the server to call the packet receiving hook function immediately after receiving the at least one message information.
[0117] It should also be understood that the network port driver is only used for packet capture and statistics, and all received message information does not need to be submitted to the kernel protocol stack.
[0118] In some implementations, before the step S1, the message statistics method of the satellite communication system further includes:
[0119] S71. Set a text file with multiple second filtering rules.
[0120] Exemplarily, the text file is a txt file. The text file is used to configure filtering rules.
[0121] S72: Perform binary conversion on the text file to obtain the filtering rule table.
[0122] In other implementations, an additional application may be provided to execute the step S72. Furthermore, the application may also read the number of qualified messages captured by the kernel driver.
[0123] In some implementations, after the step S72, the message statistics method of the satellite communication system further includes:
[0124] S73. Store the filtering rule table to a specified location.
[0125] The designated location is / usr / lan-filter.bin. In other implementations, the designated location may also be other paths, which may be set by those skilled in the art according to actual needs.
[0126] In some implementations, after the step S51, the message statistics method of the satellite communication system further includes:
[0127] S53, creating a target node in the sysfs file system of the kernel, wherein the target node is used to reload the filtering rule table, store the statistical result to the designated location, and display the statistical result.
[0128] The sysfs file system (System Filesystem) is a virtual file system provided by the Linux kernel, which is mainly used to disclose information about devices and drivers to the user space.
[0129] The target node is a lan_rx node. The target node allows the user space program to interact with the kernel in a file operation manner.
[0130] The storing of the statistical results to the designated location may refer to Figure 6 "Register sysfs file storage commands: start and stop" step; for displaying the statistical results, please refer to Figure 6 "Register sysfs file for displaying statistics results" in the previous step.
[0131] Reloading the filter rule table refers to reading the binary file at the specified location (ie, the filter rule table) into the global variable table st_eth_rx_filter m_stRxFilter[RX_FILTER_MAX_ITEMS].
[0132] Before "storing the statistical results to the designated location", a packet capture stop command is executed to write the statistical results in m_stRxFilter[] back to the / usr / lan-filter.bin file, which can also be understood as storing the statistical results to the designated location.
[0133] In some implementations, before the step S1, the message statistics method of the satellite communication system further includes:
[0134] S81. Receive statistical task information.
[0135] S82. Perform statistical processing on the at least one message information based on the statistical task information.
[0136] refer to Figure 7 FIG. 1 is a block diagram of a message statistics device for a satellite communication system provided in the second aspect of the embodiment of the present application. Figure 7 In the embodiment, the message statistics device 100 of the satellite communication system comprises:
[0137] The receiving module 101 is used to receive at least one message information;
[0138] An extraction module 102 is used to extract the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number from the target message information, wherein the target message information is any one of the at least one message information;
[0139] A matching module 103, configured to match the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number with each first filtering rule in a filtering rule table to obtain a target matching result;
[0140] The modification module 104 is used to modify the filtering rule table based on the target matching result to obtain a statistical result.
[0141] refer to Figure 8 , which is a principle block diagram of a server provided in the third aspect of the embodiment of the present application. Figure 8 In the embodiment, the server 200 includes a processor 201 and a memory 202, the memory 202 is used to store computer programs, and the processor 201 is used to call and run the computer program stored in the memory 202 to execute the steps of the message statistics method of the satellite communication system provided in the first aspect of the above-mentioned embodiment of the present application.
[0142] According to a fourth aspect of an embodiment of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium is used to store a computer program, wherein the computer program enables a computer to execute the steps of the message statistics method for a satellite communication system provided in the first aspect of the embodiment of the present application.
[0143] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).
[0144] The technical features of the above embodiments can be combined without changing the basic principles of the present application. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0145] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the patent application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the scope of patent protection of the present application shall be subject to the attached claims.
Claims
1. A message statistics method for a satellite communication system, characterized in that: include: receiving at least one message information; Extracting first source IP information, first destination IP information, first source port number, first destination port number and first protocol number from target message information, wherein the target message information is any one of the at least one message information; Match the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number with each first filtering rule in the filtering rule table to obtain a target matching result; The filtering rule table is modified based on the target matching result to obtain a statistical result.
2. The message statistics method of the satellite communication system according to claim 1, characterized in that: After the step of receiving at least one message information, the message statistics method of the satellite communication system further includes: Calling the packet receiving hook function to process the target message information and obtain the target processing result; The target message information is discarded based on the target processing result, and feedback information is returned.
3. The message statistics method of the satellite communication system according to claim 2, characterized in that: Before the step of receiving at least one message information, the message statistics method of the satellite communication system further includes: Register the packet receiving hook function with the kernel.
4. The message statistics method of the satellite communication system according to claim 3, characterized in that: Before the step of receiving at least one message information, the message statistics method of the satellite communication system further includes: Setting a text file with multiple second filtering rules; The text file is subjected to binary conversion processing to obtain the filtering rule table.
5. The message statistics method of the satellite communication system according to claim 4, characterized in that: After the step of performing binary conversion processing on the text file to obtain the filtering rule table, the message statistics method of the satellite communication system further includes: The filtering rule table is stored in a specified location.
6. The message statistics method of the satellite communication system according to claim 5, characterized in that: After the step of calling the packet receiving hook function to process the target message information and obtaining the target processing result, the message statistics method of the satellite communication system further includes: A target node is created in the sysfs file system of the kernel, and the target node is used to reload the filtering rule table, store the statistical result to the designated location, and display the statistical result.
7. The message statistics method of a satellite communication system according to claim 1, characterized in that: Before the step of receiving at least one message information, the message statistics method of the satellite communication system further includes: Receive statistical task information; Perform statistical processing on the at least one message information based on the statistical task information.
8. A message statistics device for a satellite communication system, characterized in that: include: A receiving module, used for receiving at least one message information; An extraction module, used to extract the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number from the target message information, wherein the target message information is any one of the at least one message information; A matching module, used for matching the first source IP information, the first destination IP information, the first source port number, the first destination port number and the first protocol number with each first filtering rule in a filtering rule table to obtain a target matching result; A modification module is used to modify the filtering rule table based on the target matching result to obtain a statistical result.
9. A server, characterized in that: include: A processor and a memory, the memory being used to store a computer program, the processor being used to call and run the computer program stored in the memory to execute the steps of the message statistics method of the satellite communication system as described in any one of claims 1 to 7.
10. A computer-readable storage medium, characterized in that: Used to store a computer program, wherein the computer program enables a computer to execute the steps of the message statistics method for a satellite communication system as described in any one of claims 1 to 7.