A method and device for identifying interruptions in a home internal network based on temporal correlation

Abstract

This application relates to the field of network management technologies, and particularly to a method and device for identifying home internal network interruptions based on temporal correlation. The method includes: obtaining periodic logs within the current time slice and restoring the network topology based on the periodic logs; when there are potential interruptions in the home internal network, determining whether PPPoE (Point-to-Point Protocol over Ethernet) interruptions occur in the home internal network; when PPPoE interruptions occur in the home internal network, determining whether a gateway interruption event occurs in the home internal network based on the periodic logs; when PPPoE interruptions do not occur in the home internal network, determining whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occurs in the home internal network based on the periodic logs, the reporting granularity of the periodic logs, and the network topology corresponding to the current time slice. This application can perform real-time identification and location of network interruption problems based on the automatically restored network topology, with high accuracy and efficiency.

Description

Technical Field

[0001] This application relates to the technical field of network management, and in particular, to a method and device for identifying home internal network interruptions based on time series correlation. Background Art

[0002] The home broadband service refers to the Internet access service provided by an Internet service provider (ISP) based on broadband technology. The home broadband service provides the ability for a home to access the Internet. On this basis, a device network, that is, a home internal network, can be built in the home in a wired or wireless manner to meet the daily needs of home users such as surfing the Internet, watching videos, playing games, downloading files, and using smart home devices.

[0003] In the daily operation and maintenance of home broadband services, there are a large number of problems where user services become unavailable due to interruptions in the internal networking on the home side. To solve this problem, it is usually necessary for operation and maintenance personnel to visit the site to understand the networking structure and troubleshoot the fault location.

[0004] However, the manual troubleshooting method has a high work intensity, low work efficiency, and low accuracy. As the scale of broadband services becomes larger and larger, the operation and maintenance challenges brought by the problem of internal networking interruptions on the home side become more and more significant. Summary of the Invention

[0005] Embodiments of this application provide a method and device for identifying home internal network interruptions based on time series correlation to solve the problems of low efficiency and accuracy of traditional interruption identification methods.

[0006] In a first aspect, embodiments of this application provide a method for identifying home internal network interruptions based on time series correlation. The home internal network is built based on multiple network devices to enable a terminal device to communicate with an external network based on the home internal network. The network devices at least include an access gateway and an access router, and the terminal devices at least include a set-top box. The method includes: for each home internal network in a target area, obtaining periodic logs reported by multiple network devices and / or terminal devices within a current time slice according to a preset time granularity, and restoring the network topology of the home internal network based on the periodic logs. The network topology at least includes the mounting relationships between various network devices and terminal devices; in the case where there is a potential interruption in the home internal network, determining whether a Point-to-Point Protocol over Ethernet (PPPoE) interruption occurs in the home internal network. There being a potential interruption means that the handshake delay value from the access gateway to the terminal device is greater than a delay threshold; in the case where a PPPoE interruption occurs in the home internal network, determining whether a gateway interruption event occurs in the home internal network based on the periodic logs; in the case where a PPPoE interruption does not occur in the home internal network, determining whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occurs in the home internal network based on the periodic logs, the reporting granularity of the periodic logs, and the network topology corresponding to the current time slice.

[0007] In a possible implementation, the periodic log includes the gateway logs reported by the access gateway, and the gateway logs include handshake delay values; before the step of determining whether the Ethernet Point-to-Point Protocol (PPPoE) in the home internal network is interrupted when there is a potential interruption risk in the home internal network, it further includes: obtaining the handshake delay value from the gateway logs reported by the access gateway in the current time slice; when the handshake delay value is greater than the delay threshold, determining that there is a potential interruption risk in the corresponding home internal network; determining the access gateway corresponding to the handshake delay value greater than the delay threshold as the target gateway, and determining the set-top box corresponding to the handshake delay value greater than the delay threshold as the target set-top box.

[0008] In a possible implementation, the gateway logs further include the device boot time; the gateway interruption event includes a gateway restart event and a gateway exception event; the step of determining whether a gateway interruption event occurs in the home internal network based on the periodic log includes: arranging the gateway logs reported by the target gateway in each time slice within the day in chronological order to obtain a first log sequence, and determining whether the target gateway has restarted based on the device boot time in each first log sequence; if the target gateway has restarted, determining that a gateway restart event has occurred in the home internal network; if the target gateway has not restarted, calculating the interruption duration of the target gateway based on the reporting time of the gateway logs in the target time slice, where the target time slice includes the current time slice and its previous time slice; if the interruption duration of the target gateway is greater than the preset duration threshold, determining that a gateway exception event has occurred in the home internal network.

[0009] In a possible implementation, the gateway exception event includes a gateway account status exception event, a gateway fiber disconnection event, a gateway power failure event, and other gateway interruption events; after the step of determining that a gateway exception event has occurred in the home internal network, it further includes: in response to the occurrence of a gateway exception event in the home internal network, obtaining the user status information, ONU fiber disconnection alarm data, and / or ONU power failure alarm data within the target time slice; determining the gateway exception event that has occurred in the home internal network based on the gateway interruption identification rule; the gateway interruption identification rule includes: if the target Internet access account corresponding to the home internal network is included in the user status information within the target time slice, determining that a gateway account status exception event has occurred in the home internal network; if the target Internet access account is included in the ONU fiber disconnection alarm data within the target time slice, determining that a gateway fiber disconnection event has occurred in the home internal network; if the target Internet access account is included in the ONU power failure alarm data within the target time slice, determining that a gateway power failure event has occurred in the home internal network; if the target Internet access account is not included in the user status information, ONU fiber disconnection alarm data, and ONU power failure alarm data within the target time slice, determining that other gateway interruption events have occurred in the home internal network.

[0010] In a possible implementation, the gateway interruption event includes the gateway reporting an interruption event; in the case that there is no PPPoE interruption in the home internal network, the steps of determining whether there is a gateway interruption event, a router interruption event, and / or a set-top box interruption event in the home internal network based on the periodic log, the reporting granularity of the periodic log, and the network topology corresponding to the current time slice include: in the case that there is no PPPoE interruption in the home internal network, determining whether the reporting granularity of the target gateway reporting the gateway log conforms to the reporting granularity missing rule; wherein, the reporting granularity missing rule is that the number of reports within the target duration is less than the preset number; if the reporting granularity of the target gateway reporting the gateway log conforms to the reporting granularity missing rule, it is determined that a gateway reporting interruption event occurs in the home internal network.

[0011] In a possible implementation, the periodic log includes the set-top box log; after the step of determining whether the reporting granularity of the target gateway reporting the gateway log conforms to the reporting granularity missing rule in the case that there is no PPPoE interruption in the home internal network, it further includes: if the reporting granularity of the target gateway reporting the gateway log does not conform to the reporting granularity missing rule, based on the network topology of the current time slice, determining whether the mounting position of the target set-top box is the target gateway; if the mounting position of the target set-top box is the target gateway, determining whether the reporting granularity of the target set-top box reporting the set-top box log conforms to the reporting granularity missing rule; if the reporting granularity of the target set-top box reporting the set-top box log conforms to the reporting granularity missing rule, it is determined that a set-top box interruption event occurs in the home internal network.

[0012] In a possible implementation, the periodic log includes the router log; after the step of determining whether the mounting position of the target set-top box is the target gateway, it further includes: if the mounting position of the target set-top box is not the target gateway, determining whether the reporting granularity of the target router reporting the router log conforms to the reporting granularity missing rule, where the target router is the home router connected above the target set-top box; if the reporting granularity of the target router reporting the router log conforms to the reporting granularity missing rule, it is determined that a router interruption event occurs in the home internal network; if the reporting granularity of the target router reporting the router log does not conform to the reporting granularity missing rule, determining whether the reporting granularity of the target set-top box reporting the set-top box log conforms to the reporting granularity missing rule; if the reporting granularity of the target set-top box reporting the set-top box log conforms to the reporting granularity missing rule, it is determined that a set-top box interruption event occurs in the home internal network.

[0013] In a possible implementation, the router log includes the device power-on time; the router interruption events include the router restart event, the gateway-caused router interruption event, and the router exception event; after the step of determining that a router interruption event occurs in the home internal network, it further includes: arranging in time sequence the router logs reported by the target router in each time slice of the day as the second log sequence, and determining whether the target router has restarted based on the device power-on time in the second log sequence; if the target router has restarted, determining that a router restart event occurs in the home internal network; if the target router has not restarted, calculating the interruption duration of the target router based on the reporting time of the router log in the target time slice; if the interruption duration of the target router is greater than the preset duration threshold, determining the router interruption event that occurs in the home internal network based on the router interruption identification rule; wherein, the router interruption identification rule includes: if the target Internet access account has a matching record in the Internet access accounts corresponding to the target gateway interruption event, determining that a gateway-caused router interruption event occurs in the home internal network, and if the target Internet access account does not have a matching record in the Internet access accounts corresponding to the target gateway interruption event, determining that a router exception event occurs in the home internal network, and the target gateway interruption event is the gateway interruption event in the target time slice.

[0014] In a possible implementation, the set-top box log includes the device power-on time; the set-top box interruption events include the set-top box restart event, the gateway-caused set-top box interruption event, the router-caused set-top box interruption event, and the set-top box exception event; after the step of determining that a set-top box interruption event occurs in the home internal network, it further includes: arranging the set-top box logs reported by the target set-top box in each time slice on the same day in chronological order to obtain a third log sequence, and determining whether the target set-top box has restarted based on the device power-on times in the third log sequence; if the target set-top box has restarted, determining that a set-top box restart event occurs in the home internal network; if the target set-top box has not restarted, calculating the interruption duration of the target set-top box based on the reporting time of the set-top box log in the target time slice; if the interruption duration of the target set-top box is greater than a preset duration threshold, determining the set-top box interruption event that occurs in the home internal network based on the set-top box interruption recognition rule; wherein, the set-top box interruption recognition rule includes: when the mounting position of the target set-top box is the target gateway, if the MAC address of the target gateway to which the target set-top box is attached has a matching record in the MAC addresses corresponding to the target gateway interruption event, determining that a gateway-caused set-top box interruption event occurs in the home internal network; when the mounting position of the target set-top box is the target router, if the MAC address of the target router to which the target set-top box is attached has a matching record in the MAC addresses corresponding to the target router interruption event, determining that a router-caused set-top box interruption event occurs in the home internal network, and the target router interruption event is the router interruption event in the target time slice; if the MAC address of the target gateway to which the target set-top box is attached does not have a matching record in the MAC addresses corresponding to the target gateway interruption event, and if the MAC address of the target router to which the target set-top box is attached does not have a matching record in the MAC addresses corresponding to the target router interruption event, and the TV account status information corresponding to the target set-top box indicates that the account status is normal, determining that a set-top box exception event occurs in the home internal network.

[0015] Second aspect, an embodiment of the present application provides a device for identifying interruptions in a home internal network based on time series association. The home internal network is built based on multiple network devices to enable a terminal device to communicate with an external network based on the home internal network. The network devices at least include an access gateway and an access router, and the terminal devices at least include a set-top box. The device includes: a topology restoration module configured to: for each home internal network in a target area, obtain periodic logs reported by multiple network devices and / or terminal devices within a current time slice according to a preset time granularity, and restore the network topology of the home internal network based on the periodic logs. The network topology at least includes the mounting relationships between the respective network devices and terminal devices; an interruption determination module configured to: in the case where there is a potential interruption in the home internal network, determine whether an Ethernet Point-to-Point Protocol (PPPoE) interruption occurs in the home internal network. The existence of a potential interruption means that the handshake delay value from the access gateway to the terminal device is greater than a delay threshold; in the case where a PPPoE interruption occurs in the home internal network, determine whether a gateway interruption event occurs in the home internal network based on the periodic logs; in the case where a PPPoE interruption does not occur in the home internal network, determine whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occurs in the home internal network based on the periodic logs, the reporting granularity of the periodic logs, and the network topology corresponding to the current time slice.

[0016] As can be seen from the above, an embodiment of the present application provides a method and device for identifying interruptions in a home internal network based on time series association. The home internal network is built based on multiple network devices to enable a terminal device to communicate with an external network based on the home internal network. The network devices at least include an access gateway and an access router, and the terminal devices at least include a set-top box. The method includes: for each home internal network in a target area, obtain periodic logs reported by multiple network devices and / or terminal devices within a current time slice according to a preset time granularity, and restore the network topology of the home internal network based on the periodic logs. The network topology at least includes the mounting relationships between the respective network devices and terminal devices; in the case where there is a potential interruption in the home internal network, determine whether an Ethernet Point-to-Point Protocol (PPPoE) interruption occurs in the home internal network. The existence of a potential interruption means that the handshake delay value from the access gateway to the terminal device is greater than a delay threshold; in the case where a PPPoE interruption occurs in the home internal network, determine whether a gateway interruption event occurs in the home internal network based on the periodic logs; in the case where a PPPoE interruption does not occur in the home internal network, determine whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occurs in the home internal network based on the periodic logs, the reporting granularity of the periodic logs, and the network topology corresponding to the current time slice. The method provided by the embodiment of the present application can achieve dynamic topology restoration within a home network and can perform real-time identification and positioning of network interruption problems based on the network topology without relying on manual labor, with high accuracy and efficiency. Brief Description of the Drawings

[0017] Figure 1 It is a schematic flow chart of the method for identifying the interruption of the home internal network based on timing association provided by the embodiment of the present application;

[0018] Figure 2 It is a schematic diagram of the network topology restoration provided by the embodiment of the present application;

[0019] Figure 3 It is the first schematic flow chart of the interruption anomaly identification provided by the embodiment of the present application;

[0020] Figure 4 It is the second schematic flow chart of the interruption anomaly identification provided by the embodiment of the present application;

[0021] Figure 5 It is a schematic structural diagram of the device for identifying the interruption of the home internal network based on timing association provided by the embodiment of the present application. Detailed Embodiments

[0022] In order to enable those skilled in the art to better understand the technical solutions in the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

[0023] The embodiment of the present application provides a method for identifying the interruption of the home internal network based on timing association. Taking the logs reported by the soft probe of each user as the monitoring unit, the internal networking situation of the user's home is identified and calculated. Through timing association, the cascading relationship of the internal networking devices of a single user's home is established, and a wide table corresponding to the internal networking network elements of each broadband user under a preset time granularity is constructed. The networking network elements are a general term for the devices of the home internal network. Using the wide table corresponding to the internal networking network elements of the home, the on-off information of the user's services is matched to effectively identify the problem of the interruption of the home internal networking.

[0024] Specifically, the home internal network is built based on multiple network devices so that the terminal devices can communicate with the external network based on the home internal network. The network devices at least include an access gateway, an access router, and a third-party router, and the terminal devices at least include a set-top box, a PC, a smart phone, a smart home terminal, etc.

[0025] It should be noted that the home gateway, also known as the "optical modem", is used to convert the optical fiber signal provided by the operator into an electrical signal and is the entry device for the home to access the Internet. The home router, also known as the intelligent networking router, is responsible for forwarding the data stream of the home internal network. In practical applications, the home gateway and the home router can be integrated into one device, and the embodiments of this application do not make specific limitations on this. The third-party router is other routers different from the home router and can be connected to the home router through bridging or Mesh, or can be mounted on the home gateway, and the embodiments of this application do not make specific limitations on this. The set-top box can be connected to the home gateway via Ethernet or Wi-Fi. The home gateway can transmit the Internet signal to the set-top box, and the set-top box is used to convert and transmit the video content to the TV for display. In practical applications, the set-top box can be mounted on the home gateway or the home router, and the embodiments of this application do not make specific limitations on this.

[0026] Figure 1 It is a schematic flowchart of the method for identifying home internal network interruption based on time sequence association provided by the embodiments of this application.

[0027] As Figure 1 shown, the method for identifying home internal network interruption based on time sequence association provided by the embodiments of this application includes the following steps S100 - S400.

[0028] S100: For each home internal network in the target area, obtain the periodic logs reported by multiple network devices and / or terminal devices within the current time slice according to a preset time granularity, and restore the network topology of the home internal network based on the periodic logs. The network topology at least includes the mounting relationships between various network devices and terminal devices.

[0029] Among them, the target area refers to administrative regions such as provinces, cities, and districts where users are located, or specific service areas set by Internet service providers for convenient management. The preset time granularity can be a 10 - minute granularity. In this way, one hour can be divided into six time slices, and each time slice is 10 min. In some implementation manners, the preset time granularity can also be 5 minutes or 15 minutes, etc., and the embodiments of this application do not make specific limitations on this.

[0030] Furthermore, each network device and terminal device can report periodic logs within each time slice at a fixed cycle, for example, once every 10 minutes. Specifically, the home gateway, home router, and set-top box can be respectively equipped with soft probes to collect and report periodic logs. Among them, the periodic logs reported by the home gateway can be called gateway logs, the periodic logs reported by the home router can be called router logs, and the logs reported by the set-top box can be called set-top box logs. The gateway logs can include the user's Internet account, the serial number (SN) of the home gateway, the periodic reporting time (actualTime), the MAC addresses of the devices connected under the gateway, the running time (RunningTime) of the home gateway device, and / or the device startup time. The router logs can include the MAC address of the home router, the MAC addresses of the devices connected under the router, the periodic reporting time, the running time of the home router device, and / or the device startup time. The set-top box logs can include the user's Internet account, the set-top box serial number, the periodic reporting time, the running time of the set-top box device, and / or the device startup time.

[0031] Furthermore, topology restoration refers to restoring the network topology structure based on network data and analyzing each network node and its connection relationship. In this way, the topology relationship can be dynamically restored according to time slices.

[0032] S200: When there is a potential interruption risk in the home internal network, determine whether an Ethernet Point-to-Point Protocol over Ethernet (PPPoE) interruption occurs in the home internal network.

[0033] Among them, the existence of an interruption risk means that the handshake delay value from the home gateway to the interrupted device is greater than the delay threshold. The delay threshold can be equal to a preset value, for example, it can be 200 ms. The embodiments of the present application do not make specific limitations on this. The increase in delay may indicate the potential of network failures or interruptions. Therefore, by monitoring the handshake delay value, possible network interruption problems can be effectively identified.

[0034] The PPPoE protocol is used to connect the internal home network to the external network. During the PPPoE connection process, the network dials to connect the internal home network to the external Internet. PPPoE interruption refers to the situation where the connection is interrupted during the process of the internal home network connecting to the external network through PPPoE dialing, resulting in the inability to access the Internet normally. This interruption may be caused by various factors, such as gateway failure, poor line contact, ISP server abnormality, etc. Once PPPoE interruption occurs, it will directly affect the network usage experience of home users, causing problems such as web pages not loading, videos freezing, and games disconnecting. Therefore, when the embodiments of the present application detect potential interruption hazards in the internal home network, they can further determine whether PPPoE interruption has occurred, which helps quickly locate the root cause of the network fault and provides an important basis for subsequent targeted repair measures, thus effectively ensuring the stable operation of the home network.

[0035] In the embodiments of the present application, the step of determining whether PPPoE interruption has occurred in the internal home network can be implemented based on the gateway log reported by the access gateway. Specifically, the gateway log may include PPPoE session status records, and the PPPoE session status records specifically include some information related to the PPPoE service. For example, the duration of the PPPoE service running continuously in this cycle, the duration of the PPPoE service running continuously in the previous cycle, the interruption duration of the PPPoE service, etc.

[0036] The determination step can be as follows: Compare the duration of the PPPoE service running continuously in this cycle with that in the previous cycle. If the duration of the PPPoE service running continuously in this cycle is significantly shorter than that in the previous cycle and / or there is a record of the interruption duration of the PPPoE service in the gateway log, it is determined that an interruption has occurred; if this cycle is similar to the previous cycle (for example, the difference is less than 2 minutes, 3 minutes, or 5 minutes) and the interruption duration is zero, the service is running normally. In some implementation manners, the specific value of the interruption duration can also be analyzed. When the interruption duration of the PPPoE service is not zero, it indicates that PPPoE interruption has occurred in this cycle.

[0037] After detecting PPPoE interruption in the internal home network, it can enter a detailed fault troubleshooting stage. The embodiments of the present application can determine which devices are abnormal by comparing information such as the cycle logs of the current time slice and the previous time slice, and then determine the interruption type. The interruption type may include, for example, interruption caused by problems with the device itself, or interruption caused by abnormalities in the upstream device.

[0038] S300: In the case of PPPoE interruption in the internal home network, determine whether a gateway interruption event has occurred in the internal home network based on the cycle log.

[0039] It can be understood that when a PPPoE interruption occurs in the home internal network, it is necessary to further determine whether a gateway interruption event has occurred. The steps for determining whether a gateway interruption event has occurred will be described in detail below and will not be elaborated here.

[0040] S400: When there is no PPPoE interruption in the home internal network, based on the periodic log, the reporting granularity of the periodic log, and the network topology corresponding to the current time slice, determine whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event has occurred in the home internal network.

[0041] When there is no PPPoE interruption in the home internal network, it is necessary to comprehensively consider various factors to determine whether there are gateway interruption events, router interruption events, and / or set-top box interruption events. Embodiments of the present application can analyze using the periodic log, the reporting granularity of the log, and the network topology information corresponding to the current time slice. For example, through the log reporting granularity, it can be determined whether there is a reporting missing event, so as to more accurately analyze the state changes of devices at different time periods. And, embodiments of the present application can respectively evaluate the states of the access gateway, the access router, and the set-top box. For the access gateway and the access router, check whether there are abnormal restarts, connection timeouts, etc.; for the set-top box, analyze whether there are interruption failures caused by access gateway failures, and interruption failures caused by access router failures, etc., to achieve comprehensive monitoring of the home internal network.

[0042] As can be seen from the above, the embodiments of the present application provide a method for identifying home internal network interruptions based on timing correlation. The home internal network is built based on multiple network devices to enable terminal devices to communicate with the external network based on the home internal network. The network devices at least include an access gateway and an access router, and the terminal devices at least include a set-top box. The method includes: for each home internal network in the target area, obtaining the periodic logs reported by multiple network devices and / or terminal devices within the current time slice according to a preset time granularity, and restoring the network topology of the home internal network based on the periodic logs. The network topology at least includes the mounting relationships between various network devices and terminal devices. When there is a potential interruption in the home internal network, it is determined whether the Point-to-Point Protocol over Ethernet (PPPoE) interruption occurs in the home internal network. The existence of a potential interruption means that the handshake delay value from the access gateway to the terminal device is greater than the delay threshold. When the PPPoE interruption occurs in the home internal network, it is determined whether a gateway interruption event occurs in the home internal network based on the periodic logs. When the PPPoE interruption does not occur in the home internal network, it is determined whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occurs in the home internal network based on the periodic logs, the reporting granularity of the periodic logs, and the network topology corresponding to the current time slice. The method provided by the embodiments of the present application can realize the dynamic topology restoration of the home network and can perform real-time identification and positioning of network interruption problems based on the network topology without relying on manual work, with high accuracy and efficiency.

[0043] Further, step S100 may include the following steps S101: obtaining the periodic logs reported by the access gateway, the access router, and the set-top box within the current time slice according to a preset time granularity, and saving the periodic logs reported by the access gateway, the access router, and / or the set-top box to the status wide table.

[0044] Among them, the status wide table is a data storage structure that can accommodate and manage a large amount of multi-dimensional device status information, providing data support for subsequent network topology restoration and interruption identification and positioning. The status wide table corresponding to the access router can be called the router online status wide table, and the status wide table corresponding to the set-top box can be called the set-top box online status wide table. When writing the periodic logs corresponding to the access router into the status wide table, the periodic logs can be distinguished according to the different access gateways mounted by the access router to achieve accurate storage. When writing the periodic logs corresponding to the set-top box into the status wide table, the periodic logs can be distinguished according to the different set-top box serial numbers and their associated AAA authentication data to achieve accurate storage. In network management, the AAA authentication data refers to the authentication data in the data composed of authentication, authorization, and accounting / auditing.

[0045] Figure 2 Schematic diagram of network topology restoration provided by an embodiment of this application.

[0046] As Figure 2 shown, step S100 may further include the following steps S102 - S106.

[0047] S102: Based on the gateway logs reported by the in - home gateway within the current time slice, determine the MAC address and device name of the devices mounted on the in - home gateway to obtain the first hanging - down log; and, based on the router logs reported by the in - home router within the current time slice, determine the MAC address and device name of the devices mounted on the in - home router to obtain the second hanging - down log.

[0048] Among them, the step of determining the first hanging - down log is a summary of the MAC address and device name of the devices hung down by the in - home gateway. The step of determining the second hanging - down log is a summary of the MAC address and device name of the devices hung down by the in - home router.

[0049] S103: Traverse each MAC address in the first hanging - down log to determine whether the MAC address is recorded in the second hanging - down log, or traverse each MAC address in the second hanging - down log to determine whether the MAC address is recorded in the first hanging - down log.

[0050] In this way, according to the time - slice attribution, the information of the MAC address of the device hung down by the in - home gateway and the MAC of the device hung down by the in - home router in the same time slice can be matched.

[0051] S104: If the MAC address is recorded in both the first hanging - down log and the second hanging - down log, determine that the network device or terminal device corresponding to the MAC address is the device mounted on the in - home router.

[0052] That is to say, if the MAC address of the mounted device appears in the periodic logs of both the in - home gateway and the in - home router, then record the hanging - down position of this mounted device as the in - home router.

[0053] S105: If the MAC address is only recorded in the first hanging - down log, determine that the network device or terminal device corresponding to the MAC address is the device mounted on the in - home gateway.

[0054] That is to say, if the MAC address of the mounted device only appears in the periodic log of the in - home gateway, then record the hanging - down position of this mounted device as the in - home gateway.

[0055] S106: If the MAC address is only recorded in the second hanging - down log, determine that the network device or terminal device corresponding to the MAC address is the device mounted on the in - home router.

[0056] That is to say, if the MAC address of the attached device only appears in the router log of the home router, then record the attachment location of the attached device as the home router.

[0057] Further, step S100 may further include the following steps S107 - S110.

[0058] S107: Based on the set - top box log reported within the current time slice, determine the MAC address of the set - top box, and match the MAC address of the set - top box in the first attachment log and the second attachment log to determine that the attached devices of the home gateway or the home router include the set - top box.

[0059] This step is the step of identifying the attachment location of the set - top box. By reading the MAC address of the attached device and matching it with the MAC address of the set - top box, the attachment location of the set - top box can be determined.

[0060] S108: Obtain the router attribution dictionary.

[0061] Among them, the router attribution dictionary includes the MAC address and / or device name of third - party routers within the target area.

[0062] S109: Compare the MAC address and / or device name in the first attachment log and the second attachment log with the router attribution dictionary, and based on the comparison result, determine that the attached devices of the home gateway and / or the home router include third - party routers.

[0063] This step is the step of identifying the attachment location of the third - party router. By reading the MAC address and / or device name of the attached device, the attachment location of the third - party router can be determined.

[0064] S110: Connect the home gateway and the home router in series with the attached device to obtain the network topology corresponding to the home internal network in the current time slice.

[0065] In this way, the topology reduction of the home side in the current time slice can be completed.

[0066] Further, the gateway log reported by the home gateway includes the handshake delay value from the terminal device to the home gateway. The handshake delay value specifically refers to the transmission delay from the home gateway to the terminal device during the three - way handshake process when establishing a TCP connection, also known as the second and third handshake delay value of TCP.

[0067] Figure 3 This is the first flow diagram for interrupt exception identification provided by the embodiments of the present application.

[0068] As Figure 3 shown, before step S200, the following steps S501 - S503 may be included.

[0069] S501: Obtain the handshake delay value from the gateway log reported by the access gateway in the current time slice.

[0070] It can be understood that the gateway log reported in the current time slice refers to the latest gateway log.

[0071] S502: When the handshake delay value is greater than the delay threshold, determine that there is a potential interruption hazard in the corresponding home internal network.

[0072] Under normal circumstances, the handshake delay between the terminal device and the access gateway should be at a stable and low level. Once the delay increases significantly, it means that the network link may be blocked, the signal may attenuate, or there may be other abnormal situations, resulting in an interruption risk. The existence of a potential interruption hazard can also be referred to as the occurrence of an "objectively perceivable hazard" event. In this way, the interruption anomaly of the home internal network can be detected without relying on manual perception, improving the timeliness and accuracy of network fault warning.

[0073] S503: Determine the access gateway corresponding to the handshake delay value greater than the delay threshold as the target gateway, and determine the set-top box corresponding to the handshake delay value greater than the delay threshold as the target set-top box.

[0074] If it is determined that there is a potential interruption hazard, the embodiments of the present application can further locate the specific problem device. Determine the access gateway corresponding to the target handshake delay value greater than the delay threshold as the target gateway. At the same time, determine the set-top box corresponding to the target gateway as the target set-top box. Since the embodiments of the present application uniformly manage all home networks in the target area, in actual operation, there may be multiple home networks with potential interruption hazards at the same time. For example, in a large-scale community broadband network, due to excessive load during peak network hours, the gateways and set-top boxes of multiple homes may simultaneously have abnormal handshake delays. At this time, step S503 will determine multiple target gateways and target set-top boxes. In this way, the interruption anomaly can be further located based on the target set-top box and the target gateway, providing a clear direction for subsequent targeted fault troubleshooting and repair.

[0075] Further, the gateway interruption event can include a gateway restart event and a gateway exception event. The gateway restart event may be caused by a gateway restart. The gateway exception event may be caused by gateway fiber disconnection, gateway power failure, gateway account exception, and user line exception. The embodiments of the present application can further locate the gateway interruption event. Specifically, step S300 may include the following steps S301 - S304.

[0076] S301: Arrange the gateway logs reported by the target gateway in each time slice within the day in chronological order to obtain the first log sequence, and determine whether the target gateway has been restarted based on the boot times of the devices in the first log sequence.

[0077] In the embodiments of the present application, gateway logs within each time slice of the current day can be selected based on the gateway serial number SN, and the gateway logs can be sorted according to the probe reporting time. Further, in the embodiments of the present application, adjacent gateway logs can be compared. When the device boot time carried in the previous gateway log is the same as the device boot time carried in the current gateway log, it is determined that the target gateway has not restarted; if they are different, it is determined that the target gateway has restarted.

[0078] It can be understood that the current gateway log can be any one of the gateway logs reported by the target gateway within each time slice of the current day.

[0079] It is worth noting that if the probe reporting time is in the following situations, the gateway log corresponding to the probe reporting time will not participate in the sorting.

[0080] Situation 1: The probe reporting time is not the current day.

[0081] Situation 2: The probe reporting time of the current gateway log is earlier than the probe reporting time of the previous gateway log.

[0082] For example, if the probe reporting time of the current gateway log is 15:13:45 on December 5, 2024, and the probe reporting time of the previous gateway log is 15:13:59 on December 5, 2024, which may be caused by network latency, then the previous gateway log can be retained to participate in the sorting, while the current gateway log does not participate in the sorting.

[0083] Situation 3: The device running time RunningTime is abnormal. RunningTime is less than or equal to 0, RunningTime is an empty string, or RunningTime is non-numeric, etc.

[0084] S302: If the target gateway has restarted, determine that a gateway restart event has occurred in the home internal network.

[0085] Among them, the user device restart event can be triggered by operations such as power failure in the home internal network or the user actively restarting the device.

[0086] S303: If the target gateway has not restarted, calculate the interruption duration of the target gateway based on the reporting time of the gateway log in the target time slice. The target time slice includes the current time slice and its previous time slice.

[0087] Among them, the interruption duration = the probe reporting time corresponding to the current gateway log - the probe reporting time corresponding to the previous gateway log - the duration of the preset time granularity. When the preset time granularity is 10 minutes, the interruption duration = the probe reporting time corresponding to the current gateway log - the probe reporting time corresponding to the previous gateway log - 10 minutes.

[0088] S304: If the interruption duration of the target gateway is greater than a preset duration threshold, it is determined that a gateway exception event occurs in the home internal network.

[0089] In some implementation manners, the preset duration threshold may be equal to 3s, 5s, 8s, etc., and the embodiments of the present application do not make specific limitations thereto.

[0090] Furthermore, the gateway exception event may specifically include a gateway account status exception event, a gateway fiber break event, a gateway power-off event, and other gateway interruption events. After determining that a gateway exception event occurs in the home internal network, the embodiments of the present application may further locate the exception. Specifically, after determining that a gateway exception event occurs in the home internal network (step S304), the following steps S305-S306 may be included.

[0091] S305: In response to a gateway exception event occurring in the home internal network, obtain user status information, ONU fiber break alarm data, and / or ONU power-off alarm data within a target time slice.

[0092] Among them, the user status information may include the AAA account status of the user, such as out of service, account cancellation, etc. The user status information, optical network unit (ONU) fiber break alarm data, and / or ONU power-off alarm data may be maintained and provided by an Internet service provider. In practical applications, the ONU, the home gateway, and the home router may be integrated in the same device, and the embodiments of the present application do not make specific limitations thereto.

[0093] Exemplarily, when the preset time granularity is 10 min, the embodiments of the present application may take the event occurrence time slice as the starting point, push back 10 min, and correlate the user status information, ONU fiber break alarm data, and / or ONU power-off alarm data within 20 min.

[0094] In some implementation manners, the embodiments of the present application may read the gateway exception event at a 10-minute granularity and perform further identification, or may perform real-time identification, and the embodiments of the present application do not make specific limitations thereto.

[0095] S306: Determine the gateway exception event occurring in the home internal network based on the gateway interruption identification rule.

[0096] Among them, the gateway interruption identification rule may include: if the user status information within the target time slice includes the target Internet access account corresponding to the home internal network, it is determined that a gateway account status exception event occurs in the home internal network.

[0097] The user status information can be static data obtained from other channels. For example, the user status information can be maintained by the operator, specifically including information such as whether the Internet access account (specifically the AAA account) is suspended or closed.

[0098] It can be understood that if the target Internet access account corresponding to the target gateway is included in the user status information, it can be determined that the target Internet access account has abnormal situations such as suspension or closure, and further, it can be determined that the gateway exception event is caused by the account exception.

[0099] In addition, the gateway interruption recognition rule can also include: if the target Internet access account is included in the ONU fiber break alarm data within the target time slice, it is determined that a gateway fiber break event occurs in the home internal network.

[0100] In addition, the gateway interruption recognition rule can also include: if the target Internet access account is included in the ONU power-off alarm data within the target time slice, it is determined that a gateway power-off event occurs in the home internal network.

[0101] Among them, the ONU fiber break alarm data and the ONU power-off alarm data can also be maintained by the operator. In the optical fiber link, if the ONU has a fiber break or a power-off, it will cause the gateway to be abnormal. Therefore, when the target Internet access account is included in the ONU fiber break alarm data and the ONU power-off alarm data, it can be determined that a gateway exception event occurs in the target access gateway, and the gateway exception is caused by the ONU exception (such as fiber break or power-off).

[0102] In addition, the gateway interruption recognition rule can also include: if the target Internet access account is not included in the user status information, the ONU fiber break alarm data, and the ONU power-off alarm data within the target time slice, it is determined that other interruption events of the gateway occur in the home internal network.

[0103] It can be understood that if the target Internet access account is not included in the user status information, the ONU fiber break alarm data, and the ONU power-off alarm data within the target time slice, it can indicate that there are potential problems with the target access gateway and further confirmation is required. At this time, the embodiments of the present application can determine that other interruption events of the gateway occur in the target access gateway.

[0104] Based on the above steps, accurate positioning of the gateway interruption can be achieved.

[0105] Furthermore, in the case where there is no PPPoE interruption in the home internal network, the embodiments of the present application can further determine whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occur. Specifically, step S400 can include the following steps S401 - S402.

[0106] S401: When there is no PPPoE interruption in the home internal network, determine whether the granularity of the gateway logs reported by the target gateway complies with the reporting granularity missing rule. Herein, the reporting granularity missing rule is that the number of reports within the target duration is less than the preset number.

[0107] Exemplarily, the target duration is, for example, 24 hours. Then, when the preset reporting granularity of the periodic logs is 10 min / time, the number of reports corresponding to the target duration should be 144 times. It can be understood that if the number of times the target gateway reports the gateway logs within 24 hours is less than 144 times, it can indicate that the granularity of the gateway logs reported by the target gateway complies with the reporting granularity missing rule, and there is a missing of log reporting for the target gateway.

[0108] S402: If the granularity of the gateway logs reported by the target gateway complies with the reporting granularity missing rule, determine that a gateway reporting interruption event has occurred in the home internal network.

[0109] It can be understood that the target gateway can continuously report the gateway logs according to the preset reporting granularity. However, if an exception occurs to the target gateway, it will cause the reporting to be interrupted. Therefore, it can be determined that a gateway reporting interruption event has occurred in the home internal network.

[0110] Figure 4 This is the second process schematic diagram for interrupt exception identification provided by the embodiments of the present application.

[0111] As Figure 4 shown, further, after step S401, the following steps S403 - S405 may further be included.

[0112] S403: If the granularity of the gateway logs reported by the target gateway does not comply with the reporting granularity missing rule, based on the network topology of the current time slice, determine whether the mounting position of the target set-top box is the target gateway.

[0113] It can be understood that when there is no PPPoE interruption, if the granularity of the gateway logs reported by the target gateway does not comply with the reporting granularity missing rule, that is, there is no missing of reporting, it can indicate that no exception has occurred to the target gateway. Therefore, it can be further determined whether an interruption has occurred to the target set-top box and the home router (also called the target router) to which the target set-top box is mounted.

[0114] It should also be noted that the mounting position of the target set-top box can be the target gateway, or the home router, or a third-party router. The embodiments of the present application can specifically analyze the device with an exception based on the mounting position of the target set-top box.

[0115] S404: If the mounting position of the target set-top box is the target gateway, determine whether the granularity of the set-top box logs reported by the target set-top box complies with the reporting granularity missing rule.

[0116] Exemplarily, if the target duration is 24 hours for example, then when the preset reporting granularity of the periodic log is 10 min / time, the number of reporting times corresponding to the target duration should be 144 times. It can be understood that if the number of times the target set-top box reports the set-top box log within 24 hours is less than 144 times, it can indicate that the reporting granularity of the target set-top box for the set-top box log conforms to the reporting granularity missing rule, and there is a missing log report for the target set-top box.

[0117] S405: If the reporting granularity of the target set-top box for the set-top box log conforms to the reporting granularity missing rule, determine that a set-top box interruption event has occurred in the home internal network.

[0118] It can be understood that when the target set-top box is interrupted, it will cause the log report to fail. Therefore, if the reporting granularity of the target set-top box for the set-top box log conforms to the reporting granularity missing rule, it can be determined that a set-top box interruption event has occurred in the home internal network.

[0119] S406: If the mounting position of the target set-top box is not the target gateway, determine whether the reporting granularity of the target router for the router log conforms to the reporting granularity missing rule, where the target router is the incoming router connected to the target set-top box.

[0120] It can be understood that when it is determined that there is no abnormality in the target gateway, in order to troubleshoot whether there is an abnormality in the target set-top box, the abnormality of the device connected to the upper layer of the target set-top box can be troubleshot. Therefore, the embodiment of the present application can determine the mounting position of the target set-top box, and when the mounting position of the target set-top box is the incoming router, further determine whether the target router has an abnormality.

[0121] S407: If the reporting granularity of the target router for the router log conforms to the reporting granularity missing rule, determine that a router interruption event has occurred in the home internal network.

[0122] The reporting granularity missing rule can refer to the foregoing content and will not be elaborated here. It can be understood that if the reporting granularity of the target router for the router log conforms to the reporting granularity missing rule, it can be determined that there is an abnormality in the target router, which leads to the missing of the log report, and then it can be determined that a router interruption event has occurred in the home internal network.

[0123] S408: If the reporting granularity of the target router for the router log does not conform to the reporting granularity missing rule, determine whether the reporting granularity of the target set-top box for the set-top box log conforms to the reporting granularity missing rule.

[0124] The reporting granularity missing rule can refer to the foregoing content and will not be elaborated here. It can be understood that if there is no abnormality in the target router and the target gateway connected to the target set-top box, the embodiment of the present application can further troubleshoot whether there is an abnormality in the target set-top box itself.

[0125] S409: If the granularity of the set-top box log reported by the target set-top box conforms to the reporting granularity missing rule, determine that a set-top box interruption event has occurred in the home internal network.

[0126] It can be understood that if the granularity of the set-top box log reported by the target set-top box conforms to the reporting granularity missing rule, it can be determined that there is an abnormality in the target set-top box, resulting in the missing of log reporting, and further, it can be determined that a set-top box interruption event has occurred in the home internal network.

[0127] Further, after determining that a router interruption event has occurred in the home internal network (step S407), the embodiment of the present application may further include the following steps S410-S413 to further identify and locate the router interruption event. In the embodiment of the present application, the router interruption event includes a router restart event, a gateway-caused router interruption event, and a router exception event.

[0128] S410: Arrange the router logs reported by the target router in each time slice within the day in chronological order as the second log sequence, and determine whether the target router has restarted based on the device boot time in the second log sequence.

[0129] Among them, in the embodiment of the present application, the router logs in each time slice within the day may be selected with the router MAC address as the dimension, and the router logs are sorted according to the probe reporting time. Further, in the embodiment of the present application, two adjacent router logs may be compared to determine whether the target router has restarted.

[0130] The embodiment of the present application may calculate based on the probe reporting time and device running duration of the current router log, and the probe reporting time and device running duration of the previous router log. When the absolute value of (device running duration of the current router log - device running duration of the previous router log) - (probe reporting time of the current router log - probe reporting time of the previous router log) is less than or equal to the first preset time threshold (for example, 5s), it is determined that the target router has not restarted. When the absolute value of (device running duration of the current router log - device running duration of the previous router log) - (probe reporting time of the current router log - probe reporting time of the previous router log) is greater than the first preset time threshold (for example, 5s), it is determined that the target router has restarted.

[0131] It should be noted that if the probe reporting time has the following situations, the router log corresponding to the probe reporting time does not participate in the sorting.

[0132] Situation 1: The probe reporting time is not within the day.

[0133] Case 2: The probe reporting time of the current router log is earlier than that of the previous router log, and the time difference is greater than 2 minutes.

[0134] For example, if the probe reporting time of the current router log is 15:23:45 on December 5, 2024, and the probe reporting time of the previous router log is 15:31:43 on December 5, 2024, which may be caused by network latency. Then, the previous router log can be retained to participate in the sorting, while the current router log does not participate in the sorting.

[0135] Case 3: The device running time RunningTime is abnormal. RunningTime is less than or equal to 0, RunningTime is an empty string, or RunningTime is non-numeric, etc.

[0136] S411: If the target router restarts, determine that a router restart event occurs in the home internal network.

[0137] S412: If the target router does not restart, calculate the interruption duration of the target router based on the reporting time of the router logs within the target time slice.

[0138] Among them, the interruption duration = the probe reporting time corresponding to the current router log - the probe reporting time corresponding to the previous router log - the duration of the preset time granularity. When the preset time granularity is 10 minutes, the interruption duration = the probe reporting time corresponding to the current router log - the probe reporting time corresponding to the previous router log - 10 minutes.

[0139] S413: If the interruption duration of the target router is greater than the preset duration threshold, determine the router interruption event that occurs in the home internal network based on the router interruption recognition rule.

[0140] Exemplarily, the preset duration threshold can be equal to 3s, 5s, or 8s, and the embodiments of the present application do not make specific limitations on this.

[0141] In addition, the router interruption recognition rule includes: If the target Internet account has a matching record in the Internet accounts corresponding to the target gateway interruption event, determine that a gateway causes a router interruption event in the home internal network. The target gateway interruption event is the gateway interruption event within the target time slice.

[0142] It can be understood that if a gateway interruption event occurs in the target gateway within two adjacent time slices, the target Internet access account corresponding to the target gateway will be recorded in the target gateway interruption event. Therefore, when identifying a router interruption, the Internet access accounts corresponding to the gateway interruption event can be screened to determine whether there is a matching record for the target Internet access account among them. If there is a matching record, it indicates that the target gateway has a gateway interruption, and it can be determined that the router interruption is caused by a gateway exception.

[0143] In addition, the router interruption identification rule further includes: if the target Internet access account does not have a matching record among the Internet access accounts corresponding to the target gateway interruption event within the target time slice, it is determined that a router exception event occurs in the home internal network.

[0144] It can be understood that if the target gateway does not have an exception within the target time slice, it can be determined that the router interruption is caused by its own exception, that is, it can be determined that a router exception event occurs in the home internal network.

[0145] Further, after determining that a set-top box interruption event occurs in the home internal network (steps S405 and S409), the embodiment of the present application can further perform location identification on the set-top box interruption event, which can specifically include the following steps S414 - S417.

[0146] S414: Arrange the set-top box logs reported by the target set-top box in each time slice of the day in chronological order to obtain a third log sequence, and determine whether the target set-top box has restarted based on the device boot times in the third log sequence.

[0147] The embodiment of the present application can select the set-top box logs corresponding to the target set-top box within the target time period with the set-top box serial number as the dimension. The target time period can be [0:00, 1:00) and [6:00, 24:00) of the current day. The embodiment of the present application does not make specific limitations on this.

[0148] Further, the embodiment of the present application can compare two adjacent set-top box logs to determine whether the target router has restarted.

[0149] The embodiments of the present application can calculate based on the probe reporting time and device running duration of the current set-top box log, as well as the probe reporting time and device running duration of the previous set-top box log. When the absolute value of (the device running duration of the current set-top box log - the device running duration of the previous set-top box log) - (the probe reporting time of the current set-top box log - the probe reporting time of the previous set-top box log) is greater than or equal to the second preset time threshold (e.g., 9 minutes), it is determined that the target set-top box has not been restarted. When the absolute value of (the device running duration of the current set-top box log - the device running duration of the previous set-top box log) - (the probe reporting time of the current set-top box log - the probe reporting time of the previous set-top box log) is less than the second preset time threshold (e.g., 9 minutes), it is determined that the target set-top box has been restarted.

[0150] It should be noted that if the probe reporting time is in the following situations, the set-top box log corresponding to the probe reporting time does not participate in sorting.

[0151] Situation 1: The probe reporting time is not on the current day.

[0152] Situation 2: The probe reporting time of the current set-top box log is earlier than the probe reporting time of the previous set-top box log, and the time difference is greater than 2 minutes.

[0153] For example, if the probe reporting time of the current set-top box log is 15:23:45 on December 5, 2024, and the probe reporting time of the previous set-top box log is 15:31:43 on December 5, 2024, which may be caused by network latency, then the previous set-top box log can be retained to participate in sorting, while the current set-top box log does not participate in sorting.

[0154] Situation 3: The device running time RunningTime is abnormal. RunningTime is less than or equal to 0, RunningTime is an empty string, or RunningTime is non-numeric, etc.

[0155] S415: If the target set-top box is restarted, determine that a set-top box restart event occurs in the home internal network.

[0156] S416: If the target set-top box has not been restarted, calculate the interruption duration of the target set-top box based on the reporting time of the set-top box log within the target time slice.

[0157] Among them, the interruption duration = the probe reporting time corresponding to the current set-top box log - the probe reporting time corresponding to the previous set-top box log - the duration of the preset time granularity. When the preset time granularity is 10 minutes, the interruption duration = the probe reporting time corresponding to the current set-top box log - the probe reporting time corresponding to the previous set-top box log - 10 minutes.

[0158] S417: If the interruption duration of the target set-top box is greater than the preset duration threshold, determine the set-top box interruption event occurring in the home internal network based on the set-top box interruption recognition rule.

[0159] Among them, the preset duration threshold can be 5s or 10s, and the embodiments of the present application do not make specific limitations on this.

[0160] Furthermore, the set-top box interruption recognition rule may include: when the mounting position of the target set-top box is the target gateway, if the mac address of the target gateway hung on the target set-top box has a matching record in the mac addresses corresponding to the target gateway interruption event, determine that a gateway-caused set-top box interruption event occurs in the home internal network.

[0161] Among them, the target gateway interruption event is the gateway interruption event within the target time slice. Therefore, if the mac address of the target gateway hung on the target set-top box has a matching record in the mac addresses corresponding to the target gateway interruption event, it can be determined that the set-top box interruption is caused by the abnormality of the target gateway, and further, it can be determined that a gateway-caused set-top box interruption event occurs in the home internal network.

[0162] And, the set-top box interruption recognition rule may further include: when the mounting position of the target set-top box is the target router, if the mac address of the target router hung on the target set-top box has a matching record in the mac addresses corresponding to the target router interruption event, determine that a router-caused set-top box interruption event occurs in the home internal network.

[0163] Among them, the target router interruption event is the router interruption event within the target time slice. Therefore, if the mac address of the target router hung on the target set-top box has a matching record in the mac addresses corresponding to the target router interruption event, it can be determined that the set-top box interruption is caused by the abnormality of the target router, and further, it can be determined that a router-caused set-top box interruption event occurs in the home internal network.

[0164] And, the set-top box interruption recognition rule may further include: if the mac address of the target gateway hung on the target set-top box does not have a matching record in the mac addresses corresponding to the target gateway interruption event, and if the mac address of the target router hung on the target set-top box does not have a matching record in the mac addresses corresponding to the target router interruption event, and the TV account status information corresponding to the target set-top box indicates that the account status is normal, determine that a set-top box abnormality event occurs in the home internal network.

[0165] It can be understood that if the target gateway and the target set-top box do not have any abnormalities within the target time slice, and the TV account of the set-top box is also normal, it can be determined that the set-top box interruption event is caused by its own abnormality. Therefore, it can be determined that a set-top box abnormality event has occurred in the home internal network.

[0166] Here, it should be supplemented that in the embodiments of the present application, the MAC address of the target set-top box's upstream device (target gateway and / or target router) can be recorded as the "gatewayMac" of the set-top box interruption event. The TV account status information is used to represent the status of the TV account when the set-top box provides TV services, which can include normal or abnormal. The embodiments of the present application do not make specific limitations on this.

[0167] From the above content, it can be seen that the embodiments of the present application provide a method for identifying home internal network interruptions based on time sequence association. This method can restore the information of the terminals connected to the access gateway, the terminals connected to the access router, and the terminals connected to the set-top box in each time slice through the time sequence association of the disconnection information recorded by three types of soft probes, and restore the original home internal topology with a daily granularity or even a larger granularity to a topology dynamically restored according to a preset time granularity, saving costs and having high accuracy. Moreover, this method can rely on the accurate association of the home internal network topology to complete the real-time identification and positioning of home internal network interruption problems, with high accuracy and efficiency.

[0168] Figure 5 It is a schematic structural diagram of a device for identifying home internal network interruptions based on time sequence association provided by the embodiments of the present application.

[0169] As Figure 5 shown, the embodiments of the present application provide a device for identifying home internal network interruptions based on time sequence association. The home internal network is built based on multiple network devices to enable terminal devices to communicate with external networks based on the home internal network; the network devices at least include an access gateway and an access router, and the terminal devices at least include a set-top box; the device includes:

[0170] A topology restoration module 1001, and the topology restoration module 1001 is configured to:

[0171] For each home internal network in the target area, according to a preset time granularity, obtain the periodic logs reported by multiple network devices and / or terminal devices within the current time slice, and restore the network topology of the home internal network based on the periodic logs; the network topology at least includes the mounting relationships between various network devices and terminal devices.

[0172] An interruption determination module 1002, which is configured to: determine whether an Ethernet Point-to-Point Protocol (PPPoE) interruption occurs in the home internal network when there is a potential interruption risk in the home internal network, where having a potential interruption risk means that the handshake delay value from the access gateway to the terminal device is greater than a delay threshold; determine whether a gateway interruption event occurs in the home internal network based on periodic logs when a PPPoE interruption occurs in the home internal network; and determine whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occurs in the home internal network based on periodic logs, the reporting granularity of the periodic logs, and the network topology corresponding to the current time slice when no PPPoE interruption occurs in the home internal network.

[0173] In some implementation manners, the periodic logs include gateway logs reported by the access gateway, and the gateway logs include handshake delay values; the interruption determination module 1002 is specifically configured to: obtain the handshake delay value from the gateway logs reported by the access gateway in the current time slice; determine that there is a potential interruption risk in the corresponding home internal network when the handshake delay value is greater than the delay threshold; determine the access gateway corresponding to the handshake delay value greater than the delay threshold as the target gateway, and determine the set-top box corresponding to the handshake delay value greater than the delay threshold as the target set-top box.

[0174] In some implementation manners, the gateway logs further include device boot times; the gateway interruption event includes a gateway restart event and a gateway exception event; the interruption determination module 1002 is specifically configured to: arrange the gateway logs reported by the target gateway in each time slice within the day in chronological order to obtain a first log sequence, and determine whether the target gateway has restarted based on the device boot times in the first log sequence; if the target gateway has restarted, determine that a gateway restart event occurs in the home internal network; if the target gateway has not restarted, calculate the interruption duration of the target gateway based on the reporting time of the gateway logs in the target time slice, where the target time slice includes the current time slice and its previous time slice; if the interruption duration of the target gateway is greater than a preset duration threshold, determine that a gateway exception event occurs in the home internal network.

[0175] In some implementations, the gateway exception events include gateway account status exception events, gateway fiber break events, gateway power-off events, and other gateway interruption events; the interruption determination module 1002 is specifically configured to: in response to a gateway exception event occurring in the home internal network, obtain user status information, ONU fiber break alarm data, and / or ONU power-off alarm data within a target time slice; determine the gateway exception event that has occurred in the home internal network based on the gateway interruption recognition rule; the gateway interruption recognition rule includes: if the target time slice of the user status information includes the target Internet access account corresponding to the home internal network, it is determined that a gateway account status exception event has occurred in the home internal network; if the ONU fiber break alarm data within the target time slice includes the target Internet access account, it is determined that a gateway fiber break event has occurred in the home internal network; if the ONU power-off alarm data within the target time slice includes the target Internet access account, it is determined that a gateway power-off event has occurred in the home internal network; if neither the user status information, ONU fiber break alarm data, nor ONU power-off alarm data within the target time slice includes the target Internet access account, it is determined that other gateway interruption events have occurred in the home internal network.

[0176] In some implementations, the gateway interruption events include: gateway reported interruption events; the interruption determination module 1002 is specifically configured to: when there is no PPPoE interruption in the home internal network, determine whether the granularity of the gateway log reported by the target gateway conforms to the reporting granularity missing rule; where the reporting granularity missing rule is that the number of reports within a target duration is less than a preset number; if the granularity of the gateway log reported by the target gateway conforms to the reporting granularity missing rule, it is determined that a gateway reported interruption event has occurred in the home internal network.

[0177] In some implementations, the periodic log includes the set-top box log; the interruption determination module 1002 is specifically configured to: if the granularity of the gateway log reported by the target gateway does not conform to the reporting granularity missing rule, based on the network topology of the current time slice, determine whether the mounting location of the target set-top box is the target gateway; if the mounting location of the target set-top box is the target gateway, determine whether the granularity of the set-top box log reported by the target set-top box conforms to the reporting granularity missing rule; if the granularity of the set-top box log reported by the target set-top box conforms to the reporting granularity missing rule, it is determined that a set-top box interruption event has occurred in the home internal network.

[0178] In some implementations, the periodic log includes router logs; the interruption determination module 1002 is specifically configured to: if the mounting location of the target set-top box is not the target gateway, determine whether the granularity of the router logs reported by the target router complies with the reporting granularity missing rule, where the target router is the incoming router mounted on the target set-top box; if the granularity of the router logs reported by the target router complies with the reporting granularity missing rule, determine that a router interruption event has occurred in the home internal network; if the granularity of the router logs reported by the target router does not comply with the reporting granularity missing rule, determine whether the granularity of the set-top box logs reported by the target set-top box complies with the reporting granularity missing rule; if the granularity of the set-top box logs reported by the target set-top box complies with the reporting granularity missing rule, determine that a set-top box interruption event has occurred in the home internal network.

[0179] In some implementations, the router logs include the device power-on time; the router interruption event includes a router restart event, a gateway-caused router interruption event, and a router exception event; the interruption determination module 1002 is specifically configured to: arrange the router logs reported by the target router in each time slice within the day in chronological order as the second log sequence, and determine whether the target router has restarted based on the device power-on time in the second log sequence; if the target router has restarted, determine that a router restart event has occurred in the home internal network; if the target router has not restarted, calculate the interruption duration of the target router based on the reporting time of the router logs within the target time slice; if the interruption duration of the target router is greater than a preset duration threshold, determine the router interruption event that has occurred in the home internal network based on the router interruption identification rule; where the router interruption identification rule includes: if the target Internet access account has a matching record in the Internet access accounts corresponding to the target gateway interruption event, determine that a gateway-caused router interruption event has occurred in the home internal network, and if the target Internet access account does not have a matching record in the Internet access accounts corresponding to the target gateway interruption event, determine that a router exception event has occurred in the home internal network, and the target gateway interruption event is the gateway interruption event within the target time slice.

[0180] In some implementations, the set-top box log includes the device startup time; the set-top box interruption events include the set-top box restart event, the gateway-caused set-top box interruption event, the router-caused set-top box interruption event, and the set-top box exception event; the interruption determination module 1002 is specifically configured to: arrange the set-top box logs reported by the target set-top box in each time slice within the day in chronological order to obtain a third log sequence, and determine whether the target set-top box has restarted based on the device startup times in the third log sequence; if the target set-top box has restarted, determine that a set-top box restart event has occurred in the home internal network; if the target set-top box has not restarted, calculate the interruption duration of the target set-top box based on the reporting time of the set-top box log within the target time slice; if the interruption duration of the target set-top box is greater than a preset duration threshold, determine the set-top box interruption event that has occurred in the home internal network based on the set-top box interruption recognition rule; wherein, the set-top box interruption recognition rule includes: when the mounting position of the target set-top box is the target gateway, if the MAC address of the target gateway to which the target set-top box is connected has a matching record in the MAC addresses corresponding to the target gateway interruption event, determine that a gateway-caused set-top box interruption event has occurred in the home internal network; when the mounting position of the target set-top box is the target router, if the MAC address of the target router to which the target set-top box is connected has a matching record in the MAC addresses corresponding to the target router interruption event, determine that a router-caused set-top box interruption event has occurred in the home internal network, and the target router interruption event is the router interruption event within the target time slice; if the MAC address of the target gateway to which the target set-top box is connected does not have a matching record in the MAC addresses corresponding to the target gateway interruption event, and, if the MAC address of the target router to which the target set-top box is connected does not have a matching record in the MAC addresses corresponding to the target router interruption event, and, the TV account status information corresponding to the target set-top box indicates that the account status is normal, determine that a set-top box exception event has occurred in the home internal network.

[0181] In a specific implementation, the present invention also provides a computer storage medium. The computer storage medium can store a program, and when the program is executed, it can include some or all of the steps in the embodiments of the method for identifying home internal network interruptions based on time sequence association provided by the present invention. The storage medium can be a magnetic disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), etc.

[0182] It is easy to understand that those skilled in the art can combine, split, reorganize, etc. the embodiments of the present application based on several embodiments provided by the present application to obtain other embodiments, and these embodiments do not exceed the protection scope of the present application.

[0183] In the above specific embodiments, the objectives, technical solutions, and beneficial effects of the embodiments of the present application have been further described in detail. It should be understood that the above are only the specific embodiments of the embodiments of the present application and are not used to limit the protection scope of the embodiments of the present application. Any modifications, equivalent replacements, improvements, etc. made on the basis of the technical solutions of the embodiments of the present application shall be included within the protection scope of the embodiments of the present application.

Claims

1. A method for identifying interruptions in a home internal network based on temporal correlation, characterized in that The internal home network is built based on multiple network devices, enabling the terminal device to communicate with the external network based on the internal home network; The network devices at least include an access gateway and an access router, and the terminal device at least includes a set-top box; the method includes: For each of the internal home networks in the target area, at a preset time granularity, obtain the periodic logs reported by multiple of the network devices and / or the terminal device within the current time slice, and restore the network topology of the internal home network based on the periodic logs; the network topology at least includes the mounting relationships between the network devices and the terminal device; When there is a potential interruption risk in the internal home network, determine whether the Point-to-Point Protocol over Ethernet (PPPoE) in the internal home network is interrupted. The existence of a potential interruption risk means that the handshake delay value from the access gateway to the terminal device is greater than the delay threshold; When the PPPoE in the internal home network is interrupted, determine whether a gateway interruption event occurs in the internal home network based on the periodic logs; When the PPPoE in the internal home network is not interrupted, determine whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occur in the internal home network based on the periodic logs, the reporting granularity of the periodic logs, and the network topology corresponding to the current time slice.

2. The method for identifying interruption of a home internal network based on temporal association according to claim 1, wherein The periodic logs include the gateway logs reported by the access gateway, and the gateway logs include the handshake delay value; Before the step of determining whether the PPPoE in the internal home network is interrupted when there is a potential interruption risk in the internal home network, it further includes: Obtain the handshake delay value from the gateway logs reported by the access gateway within the current time slice; When the handshake delay value is greater than the delay threshold, determine that the corresponding internal home network has a potential interruption risk; Determine the access gateway corresponding to the handshake delay value greater than the delay threshold as the target gateway, and determine the set-top box corresponding to the handshake delay value greater than the delay threshold as the target set-top box.

3. The method for identifying the interruption of the home internal network based on time sequence association according to claim 2, wherein, The gateway logs further include the device startup time; the gateway interruption event includes a gateway restart event and a gateway exception event; The step of determining whether a gateway interruption event occurs in the internal home network based on the periodic logs includes: Arrange the gateway logs reported by the target gateway in each time slice of the current day in chronological order to obtain a first log sequence, and determine whether the target gateway has restarted based on the device startup times in the first log sequence; If the target gateway has restarted, determine that the gateway restart event has occurred in the internal home network; If the target gateway has not restarted, calculate the interruption duration of the target gateway based on the reporting time of the gateway logs in the target time slice. The target time slice includes the current time slice and the previous time slice; If the interruption duration of the target gateway is greater than the preset duration threshold, determine that the gateway exception event has occurred in the internal home network.

4. The method for identifying the interruption of the home internal network based on temporal correlation according to claim 3, wherein The gateway exception events include gateway account status exception events, gateway fiber break events, gateway power-off events, and other gateway interruption events; After the step of determining that the gateway exception event occurs in the home internal network, it further includes: In response to the gateway exception event occurring in the home internal network, obtaining user status information, ONU fiber break alarm data, and / or ONU power-off alarm data within a target time slice; Determining the gateway exception event that occurs in the home internal network based on the gateway interruption identification rule; the gateway interruption identification rule includes: if the target Internet access account corresponding to the home internal network is included in the user status information within the target time slice, it is determined that a gateway account status exception event occurs in the home internal network; if the target Internet access account is included in the ONU fiber break alarm data within the target time slice, it is determined that a gateway fiber break event occurs in the home internal network; if the target Internet access account is included in the ONU power-off alarm data within the target time slice, it is determined that a gateway power-off event occurs in the home internal network; if the target Internet access account is not included in the user status information, ONU fiber break alarm data, and ONU power-off alarm data within the target time slice, it is determined that other gateway interruption events occur in the home internal network.

5. The method for identifying the interruption of the home internal network based on temporal correlation according to claim 2, wherein The gateway interruption events include; gateway reported interruption events; in the case that the PPPoE interruption does not occur in the home internal network, the steps of determining whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occur in the home internal network based on the periodic log, the reporting granularity of the periodic log, and the network topology corresponding to the current time slice include: In the case that the PPPoE interruption does not occur in the home internal network, determining whether the reporting granularity of the target gateway reporting the gateway log conforms to the reporting granularity missing rule; wherein, the reporting granularity missing rule is that the number of reports within the target duration is less than the preset number; If the reporting granularity of the target gateway reporting the gateway log conforms to the reporting granularity missing rule, it is determined that a gateway reported interruption event occurs in the home internal network.

6. The method for identifying an interruption of an in-home network based on temporal correlation according to claim 5, wherein The periodic log includes the set-top box log; After the step of determining whether the reporting granularity of the target gateway reporting the gateway log conforms to the reporting granularity missing rule in the case that the PPPoE interruption does not occur in the home internal network, it further includes: If the reporting granularity of the target gateway reporting the gateway log does not conform to the reporting granularity missing rule, determining whether the mounting position of the target set-top box is the target gateway based on the network topology of the current time slice; If the mounting position of the target set-top box is the target gateway, determining whether the reporting granularity of the target set-top box reporting the set-top box log conforms to the reporting granularity missing rule; If the reporting granularity of the target set-top box reporting the set-top box log conforms to the reporting granularity missing rule, it is determined that the set-top box interruption event occurs in the home internal network.

7. The method for identifying the interruption of the home internal network based on time sequence association according to claim 6, characterized in that, The periodic log includes the router log; After the step of determining whether the mounting position of the target set-top box is the target gateway, it further includes: If the mounting position of the target set-top box is not the target gateway, determine whether the granularity of the router logs reported by the target router meets the reporting granularity missing rule, where the target router is the home router connected to the target set-top box. If the granularity of the router logs reported by the target router meets the reporting granularity missing rule, determine that the router interruption event has occurred in the home internal network. If the granularity of the router logs reported by the target router does not meet the reporting granularity missing rule, determine whether the granularity of the set-top box logs reported by the target set-top box meets the reporting granularity missing rule. If the granularity of the set-top box logs reported by the target set-top box meets the reporting granularity missing rule, determine that the set-top box interruption event has occurred in the home internal network.

8. The method for identifying an interruption in a home internal network based on temporal association according to claim 7, wherein The router logs include the device power-on time; the router interruption event includes the router restart event, the gateway-caused router interruption event, and the router exception event. After the step of determining that the router interruption event has occurred in the home internal network, it further includes: Arrange the router logs reported by the target router in each time slice within the day in chronological order as the second log sequence, and determine whether the target router has restarted based on the device power-on time in the second log sequence. If the target router has restarted, determine that the router restart event has occurred in the home internal network. If the target router has not restarted, calculate the interruption duration of the target router based on the reporting time of the router logs in the target time slice. If the interruption duration of the target router is greater than the preset duration threshold, determine the router interruption event that has occurred in the home internal network based on the router interruption identification rule. Among them, the router interruption identification rule includes: if the target Internet account has a matching record in the Internet accounts corresponding to the target gateway interruption event, determine that the gateway-caused router interruption event has occurred in the home internal network; if the target Internet account does not have a matching record in the Internet accounts corresponding to the target gateway interruption event, determine that the router exception event has occurred in the home internal network, where the target gateway interruption event is the gateway interruption event in the target time slice.

9. The method for identifying the interruption of the home internal network based on time series association according to claim 7, wherein The set-top box logs include the device power-on time; the set-top box interruption event includes the set-top box restart event, the gateway-caused set-top box interruption event, the router-caused set-top box interruption event, and the set-top box exception event. After the step of determining that the set-top box interruption event has occurred in the home internal network, it further includes: Arrange the set-top box logs reported by the target set-top box in each time slice within the day in chronological order to obtain the third log sequence, and determine whether the target set-top box has restarted based on the device power-on time in the third log sequence. If the target set-top box has restarted, determine that the set-top box restart event has occurred in the home internal network. If the target set-top box has not restarted, calculate the interruption duration of the target set-top box based on the reporting time of the set-top box logs in the target time slice. If the interruption duration of the target set-top box is greater than the preset duration threshold, determine the set-top box interruption event that has occurred in the home internal network based on the set-top box interruption identification rule. Among them, the set-top box interruption recognition rules include: When the mounting position of the target set-top box is the target gateway, if the MAC address of the target gateway attached to the target set-top box has a matching record in the MAC addresses corresponding to the target gateway interruption event, it is determined that a set-top box interruption event caused by the gateway occurs in the home internal network; When the mounting position of the target set-top box is the target router, if the MAC address of the target router attached to the target set-top box has a matching record in the MAC addresses corresponding to the target router interruption event, it is determined that a set-top box interruption event caused by the router occurs in the home internal network, and the target router interruption event is the router interruption event within the target time slice; If the MAC address of the target gateway attached to the target set-top box does not have a matching record in the MAC addresses corresponding to the target gateway interruption event, and if the MAC address of the target router attached to the target set-top box does not have a matching record in the MAC addresses corresponding to the target router interruption event, and the TV account status information corresponding to the target set-top box indicates that the account status is normal, it is determined that a set-top box exception event occurs in the home internal network.

10. A device for identifying interruptions in a home internal network based on temporal correlation, characterized in that, The home internal network is built based on multiple network devices so that the terminal device can communicate with the external network based on the home internal network; The network devices at least include an access gateway and an access router, and the terminal devices at least include a set-top box; The device includes: A topology restoration module, and the topology restoration module is configured to: For each of the home internal networks in the target area, at a preset time granularity, obtain the periodic logs reported by multiple of the network devices and / or the terminal devices within the current time slice, and restore the network topology of the home internal network based on the periodic logs; at least the mounting relationships between the network devices and the terminal devices are included in the network topology; An interruption determination module, and the interruption determination module is configured to: When there is an interruption risk in the home internal network, determine whether a Point-to-Point Protocol over Ethernet (PPPoE) interruption occurs in the home internal network, and the existence of an interruption risk means that the handshake delay value from the access gateway to the terminal device is greater than the delay threshold; When the PPPoE interruption occurs in the home internal network, determine whether a gateway interruption event occurs in the home internal network based on the periodic logs; When the PPPoE interruption does not occur in the home internal network, determine whether a gateway interruption event, a router interruption event, and / or a set-top box interruption event occurs in the home internal network based on the periodic logs, the reporting granularity of the periodic logs, and the network topology corresponding to the current time slice.

Images