Abnormal traffic monitoring system for access gateway equipment

Abstract

The invention provides an access gateway equipment abnormal flow monitoring system, and relates to the technical field of gateway equipment monitoring, the access gateway equipment abnormal flow monitoring system comprises a shell, a heat dissipation base is fixed at the bottom of the shell, five groups of monitoring assemblies are installed between the shell and the heat dissipation base at equal intervals, and each monitoring assembly comprises an interface unit module. The interface unit module is fixed at the front ends of the shell and the heat dissipation base, the rear end of the interface unit module is fixedly connected with a feature comparison module, and compared with the prior art, five groups of monitoring assemblies in the shell correspond to five ports of gateway equipment, and after the monitoring assemblies are connected with the ports, the gateway equipment can be monitored according to the use condition of the gateway ports. Whether the integrated board is connected through the connecting assembly to form the channel is selected, the pushing assembly can synchronously start the monitoring assembly in use to grab and recognize the flow of the port, whether abnormal flow exists or not is judged after comparison, uniformity is high, flow interception is convenient, and unused ports can be automatically neglected.

Description

Technical Field

[0001] The present invention relates to the technical field of gateway device monitoring, and in particular to an abnormal traffic monitoring system for an access gateway device. Background Technique

[0002] As the total "gateway" for the network data of end-users to enter and exit the Internet, the access gateway device has convenient conditions for implementing sensitive information theft and is closely related to the security of the end-user network. In recent years, the exposure of vulnerabilities and attack behaviors such as backdoors, XSS, and CSRF in access gateway devices has indicated that there are significant security risks in network devices such as access gateways, which are increasingly becoming a new focus of network security games. If the access gateway device is deliberately implanted with a backdoor or attacked and controlled and is used for the identification, interception, and remote transmission of sensitive information, then the network communication behaviors of end-users will be spied on and the communication data will be stolen. What is even more worrying is that the access gateway device may become a springboard for attacking the end-user network, performing operations such as scanning and detecting the end-user network host, discovering vulnerabilities, planting Trojans, and collecting sensitive data, with strong concealment and serious harm. Therefore, it is necessary to strengthen the security monitoring of access gateway devices to accurately and timely detect abnormal traffic such as attack and penetration behaviors.

[0003] The existing technology for monitoring abnormal traffic of gateway devices is to connect a dedicated traffic monitor to the ports of the gateway device. After capturing some traffic data and analyzing and identifying it, the appearance of abnormal traffic can be detected in a timely manner. In this method, when capturing the port traffic of the gateway device, since the gateway device generally has more ports, the monitoring is generally sequential identification, and it is difficult to capture and identify the ports in use simultaneously, and the ports that are not in use are automatically ignored for monitoring. Summary of the Invention

[0004] Aiming at the deficiencies of the existing technology, the purpose of the present invention is to provide an abnormal traffic monitoring system for an access gateway device to solve the problems raised in the above background technology. The structure of the present invention is novel. The five groups of monitoring components inside the shell correspond to five ports of the gateway device. After connecting to the ports, according to the usage situation of the gateway ports, it is selected whether to form a path by connecting the connection components to the integration board. The pushing component can synchronously activate the monitoring components in use to capture and identify the traffic of the ports. After comparison, it is determined whether there is abnormal traffic. The unity is relatively high, and it is convenient to intercept traffic, and the unused ports can be automatically ignored.

[0005] In order to achieve the above-mentioned purpose, the present invention is realized by the following technical scheme: an abnormal flow monitoring system of an access gateway device, comprising a shell, a heat dissipation base is fixed at the bottom of the shell, five groups of monitoring components are equidistantly installed between the shell and the heat dissipation base, the monitoring component comprises an interface unit module, the interface unit module is fixed at the front end of the shell and the heat dissipation base, a feature comparison module is fixedly connected to the rear end of the interface unit module, a partition is fixed between the shell and the heat dissipation base and located between adjacent feature comparison modules, a switch key is installed on the top of the interface unit module, an integrated board is fixed at the tail end of the shell and the heat dissipation base, a connecting component is arranged between the integrated board and the feature comparison module, the connecting component comprises a connecting box, a copper column is fixed inside the connecting box, a lower copper sheet is fixed at the lower end of the copper column, and an upper copper sheet is slidably sleeved on the upper end of the copper column, the upper copper sheet and the lower copper sheet are respectively connected to the feature comparison module and the integrated board through wires, a pushing component is arranged on the top of the switch key, the pushing component comprises a pressing plate, a pressing plate is slidably contacted on the top surface of the switch key, and a connecting frame is fixed at the rear end of the pressing plate, and the connecting frame is slidably plugged on the top of the feature comparison module.

[0006] Furthermore, an upper heat dissipation window is opened on the top of the shell corresponding to the position of each group of monitoring components, the bottom of the upper heat dissipation window is covered with an upper cover plate, and a warning light is fixed on the top of the shell at the tail end of the upper heat dissipation window, and the warning light is electrically connected to the feature comparison module through wires.

[0007] Furthermore, air inlets are provided on both sides of the heat dissipation base, and a lower heat dissipation window is provided on the top of the heat dissipation base corresponding to the position of each group of monitoring components, and the bottom surface of the lower heat dissipation window is covered with a lower cover plate, and the upper cover plate and the lower cover plate are both transmission-connected to the connecting component.

[0008] Furthermore, the connecting assembly also includes an adjusting screw, the top thread of the connecting box is threaded with the adjusting screw, a knob is fixed on the top of the adjusting screw, a fixing plate is fixed on the top of the integrated board at a position corresponding to the adjusting screw, and the adjusting screw is threadedly inserted on the surface of the fixing plate.

[0009] Furthermore, the bottom of the adjusting screw is rotatably connected to the upper copper sheet via a bearing and an insulating sheet, and two connecting wires are fixed to the outer end of the integrated board.

[0010] Furthermore, a second vertical frame is rotatably sleeved on the upper end surface of the adjusting screw, and the top of the second vertical frame is fixedly connected to the upper cover plate, and the bottom of the second vertical frame is fixedly connected to the first vertical frame, and the bottom of the first vertical frame is fixedly connected to the lower cover plate.

[0011] Further, the pushing component further includes a cross plate. The cross plate is provided on the top of the pressing plate. The partition board is provided with a moving groove corresponding to the position of the cross plate, and the cross plate slides along the inside of the moving groove.

[0012] Further, a plug board is slidably inserted into the top of the pressing plate. Slots are provided at the positions corresponding to each plug board on the top of the cross plate, and the top of the plug board is buckled inside the slots.

[0013] Further, electric push rods are fixed on the inner walls of both sides of the outer shell, and the extending ends of the electric push rods are fixedly connected to the cross plate. A first spring is fixed between the connecting frame and the feature comparison module.

[0014] Further, a telescopic plate is fixed at the middle position of the first vertical frame and the second vertical frame, and the extending end of the telescopic plate is fixedly connected to the back of the plug board.

[0015] Advantages of the present invention: When the adjusting screw of a single connecting component moves upward in the present invention, the first vertical frame and the second vertical frame also move upward. At the same time, the telescopic plate moves upward, driving the plug board to separate from the slot of the cross plate. Thus, the movement of the cross plate will not drive the plug board and the bottom cross plate to move. This part can be used when the port of the gateway device is in an unused state. When capturing and identifying traffic packets, this part of the monitoring component can be ignored, and at the same time, the backend connecting component is also in a short-circuit state.

[0016] In the present invention, the top of the plug board is buckled inside the slot of the cross plate. With the push of the electric push rod, the cross plate moves along the moving groove of the partition board, driving the bottom pressing plate to move along the surface of the power switch, changing the power switch from the off state to the on state, automatically intercepting the port traffic during this time, and transporting it to the feature comparison module for comparison. Multiple groups of monitoring components can be turned on and off synchronously, with higher unity.

[0017] In the state where the port of the gateway device of the present invention is normally used, rotate the knob, and the adjusting screw is inserted into the connecting box, driving the upper copper sheet to contact the lower copper sheet, completing the electrical connection between the feature comparison module and the integrated board, forming a complete circuit, identifying and comparing the intercepted traffic packets. When abnormal traffic appears, the information is fed back to the terminal system, and at the same time, the corresponding warning light lights up. By connecting the adjusting screw with the first vertical frame and the second vertical frame, the opening and closing of the upper cover plate and the lower cover plate can be driven, thereby sealing the top and bottom of the monitoring components that are not in use and do not need to intercept traffic, reducing the entry of dust, and opening the heat dissipation windows at the upper and lower ends of the remaining monitoring components in use to maintain sufficient heat dissipation capacity.

[0018] The upper cover plate and the lower cover plate of the present invention can be opened and closed simultaneously by the movement of the second vertical frame and the first vertical frame. In the closed state, that is, when the monitoring component is not in use, the entry of dust is reduced. In the open state, the heat dissipation capacity during the operation of the monitoring component can be continuously ensured.

[0019] Compared with the prior art, the five groups of monitoring components inside the housing of the present invention correspond to the five ports of the gateway device. After being connected to the ports, according to the usage situation of the gateway ports, it is selected whether to form a path by connecting the connection components to the integrated board. The pushing component can synchronously turn on the monitoring components that are in use to capture and identify the traffic of the ports. After comparison, it is determined whether there is abnormal traffic. The unity is relatively high, and it is convenient to intercept the traffic, and the unused ports can be automatically ignored. Description of the Drawings

[0020] Figure 1 It is a system control diagram of an abnormal traffic monitoring system for an access gateway device according to the present invention; Figure 2 It is a schematic diagram of the overall structure of an abnormal traffic monitoring system for an access gateway device according to the present invention; Figure 3 It is a schematic diagram of the internal structure of the housing of an abnormal traffic monitoring system for an access gateway device according to the present invention; Figure 4 It is a schematic diagram of the structure of the monitoring component of an abnormal traffic monitoring system for an access gateway device according to the present invention; Figure 5 It is a schematic diagram of the connection between the pushing component and the power switch of an abnormal traffic monitoring system for an access gateway device according to the present invention; Figure 6 It is a schematic diagram of the connection between the connection component and the lower cover plate of an abnormal traffic monitoring system for an access gateway device according to the present invention; Figure 7 It is a schematic diagram of the connection between the connection component and the upper cover plate of an abnormal traffic monitoring system for an access gateway device according to the present invention; Figure 8 It is a schematic diagram of the structure of the pushing component of an abnormal traffic monitoring system for an access gateway device according to the present invention; Figure 9 It is a schematic diagram of the structure of the connection component of an abnormal traffic monitoring system for an access gateway device according to the present invention.

[0021] In the figure: 1. Outer shell; 11. Partition board; 12. Moving groove; 13. Warning light; 14. Upper heat dissipation window; 15. Upper cover plate; 2. Heat dissipation base; 21. Air inlet; 22. Lower heat dissipation window; 23. Lower cover plate; 24. First vertical frame; 3. Monitoring component; 31. Interface unit module; 32. Feature comparison module; 33. Integrated board; 34. Connecting wire; 35. Power switch; 4. Pushing component; 41. Electric push rod; 42. Cross plate; 43. Telescopic plate; 44. Plug board; 45. Pressing plate; 46. Connecting frame; 47. First spring; 48. Slot; 5. Connecting component; 51. Fixed plate; 52. Rotary knob; 53. Second vertical frame; 54. Adjusting screw; 55. Connecting box; 56. Copper column; 57. Upper copper sheet; 58. Lower copper sheet. Detailed implementation manners

[0022] In order to make the technical means, creative features, achieved purposes and effects of the present invention easy to understand, the present invention will be further described below in conjunction with the specific implementation manners.

[0023] Please refer to Figures 1 to 9, the present invention provides a technical solution: an abnormal traffic monitoring system for an access gateway device, including a housing 1, a heat dissipation base 2 is fixed at the bottom of the housing 1, and five groups of monitoring components 3 are equidistantly installed between the housing 1 and the heat dissipation base 2. The monitoring component 3 includes an interface unit module 31, and the interface unit module 31 is fixed at the front ends of the housing 1 and the heat dissipation base 2. A feature comparison module 32 is fixedly connected to the rear end of the interface unit module 31. A partition 11 is fixed between the adjacent feature comparison modules 32 between the housing 1 and the heat dissipation base 2. A power switch 35 is installed on the top of the interface unit module 31. An integrated board 33 is fixed at the tail ends of the housing 1 and the heat dissipation base 2. A connection component 5 is provided between the integrated board 33 and the feature comparison module 32. The connection component 5 includes a connection box 55. A copper column 56 is fixed inside the connection box 55. A lower copper sheet 58 is fixed at the lower end of the copper column 56, and an upper copper sheet 57 is slidably sleeved on the upper end of the copper column 56. The upper copper sheet 57 and the lower copper sheet 58 are respectively connected to the feature comparison module 32 and the integrated board 33 through wires. A pushing component 4 is provided on the top of the power switch 35. The pushing component 4 includes a pressing plate 45. The pressing plate 45 is in sliding contact with the top surface of the power switch 35, and a connecting frame 46 is fixed at the rear end of the pressing plate 45. The connecting frame 46 is slidably inserted into the top of the feature comparison module 32. In this solution, the monitoring methods of the interface unit module 31 and the feature comparison module 32 for abnormal traffic are as follows: The interface unit module 31 is composed of a data capture and recording module, a protocol parsing and feature extraction module, an application service data digest information calculation module, a data in and out two-way separation module, and an input and output packet feature cache module. Each module is sequentially connected to each other. The data in and out two-way separation module is respectively connected to the input packet feature cache module and the output packet feature cache module to realize data collection, feature extraction and caching of network traffic. The feature comparison module is composed of an input packet feature cache scheduling module, an output packet feature cache scheduling module, a protocol feature comparison module and a comparison result output module. Each packet output from each interface is sequentially subjected to protocol feature matching with the input packets of all interfaces, and the comparison result is transmitted to the abnormal traffic alarm unit. When using the device, connect the monitoring component 3 to the port of the gateway device through a network cable. According to the usage situation of the gateway device port, select the connection component 5 to connect the monitoring component 3 to the integrated board 33. The pushing component 4 intercepts the traffic of the gateway port by all the monitoring components 3 that are in use and have a path, and conveys it to the feature comparison module 32 for comparison. When abnormal traffic appears, it is fed back to the terminal.

[0024] In this embodiment, upper heat dissipation windows 14 are provided at the top of the housing 1 corresponding to the positions of each group of monitoring components 3. The bottom of the upper heat dissipation windows 14 is covered with upper cover plates 15. A warning light 13 is fixed at the end of the upper heat dissipation windows 14 on the top of the housing 1. The warning light 13 is electrically connected to the feature comparison module 32 through an electric wire. Air inlets 21 are provided on both sides of the heat dissipation base 2. Lower heat dissipation windows 22 are provided at the top of the heat dissipation base 2 corresponding to the positions of each group of monitoring components 3. The bottom surface of the lower heat dissipation windows 22 is covered with lower cover plates 23. Both the upper cover plates 15 and the lower cover plates 23 are drivingly connected to the connection assembly 5. The upper cover plates 15 and the lower cover plates 23 can be opened and closed simultaneously by the movement of the second vertical frame 53 and the first vertical frame 24. In the closed state, that is, when the monitoring components 3 are not in use, the entry of dust is reduced. In the open state, the heat dissipation capacity during the operation of the monitoring components 3 can be continuously ensured.

[0025] In this embodiment, the connection assembly 5 further includes an adjustment screw 54. The adjustment screw 54 is threadedly inserted into the top of the connection box 55. A knob 52 is fixed at the top of the adjustment screw 54. A fixing plate 51 is fixed at the top of the integrated board 33 corresponding to the position of the adjustment screw 54. The adjustment screw 54 is threadedly inserted into the surface of the fixing plate 51. The bottom of the adjustment screw 54 is rotatably connected to the upper copper sheet 57 through a bearing and an insulating sheet. Two connection wires 34 are fixed to the outer end of the integrated board 33. A second vertical frame 53 is rotatably sleeved on the upper surface of the upper end of the adjustment screw 54. The top of the second vertical frame 53 is fixed to the upper cover plate 15. The bottom of the second vertical frame 53 is fixed to the first vertical frame 24. The bottom of the first vertical frame 24 is fixed to the lower cover plate 23. In the normal use state of the gateway device port, rotate the knob 52. The adjustment screw 54 is inserted into the connection box 55, driving the upper copper sheet 57 to contact the lower copper sheet 58, completing the electrical connection between the feature comparison module 32 and the integrated board 33, forming a complete circuit, identifying and comparing the intercepted traffic packets. When abnormal traffic appears, the information is fed back to the terminal system, and at the same time, the corresponding warning light 13 lights up. Through the connection between the adjustment screw 54 and the first vertical frame 24 and the second vertical frame 53, the opening and closing of the upper cover plate 15 and the lower cover plate 23 can be driven, thereby sealing the top and bottom of the monitoring components 3 that are not in use and do not need to intercept traffic, reducing the entry of dust, and opening the upper and lower heat dissipation windows of the remaining monitoring components 3 that are in use to maintain sufficient heat dissipation capacity.

[0026] In this embodiment, the pushing component 4 further includes a cross plate 42. The cross plate 42 is provided at the top of the pressing plate 45. The partition plate 11 is provided with a moving groove 12 at a position corresponding to the cross plate 42, and the cross plate 42 slides along the inside of the moving groove 12. The top of the pressing plate 45 is slidably inserted with a plug board 44. The cross plate 42 is provided with a slot 48 at a position corresponding to each plug board 44 at the top. The top of the plug board 44 is buckled inside the slot 48. Electric push rods 41 are fixed on the inner walls of both sides of the outer shell 1, and the extending ends of the electric push rods 41 are fixedly connected to the cross plate 42. A first spring 47 is fixed between the connecting frame 46 and the feature comparison module 32. A telescopic plate 43 is fixed at the middle position of the first vertical frame 24 and the second vertical frame 53, and the extending end of the telescopic plate 43 is fixedly connected to the back of the plug board 44. When the adjusting screw 54 of a single connecting component 5 moves upward, the first vertical frame 24 and the second vertical frame 53 will also move upward. At the same time, the telescopic plate 43 moves upward, driving the plug board 44 to separate from the slot 48 of the cross plate 42. Thus, the movement of the cross plate 42 will not drive the plug board 44 and the bottom cross plate 42 to move. This part can be applied when the port of the gateway device is in an unused state. When capturing and identifying traffic packets, this part of the monitoring component 3 can be ignored. At the same time, the connecting component 5 at the back end is also in a short-circuit state. The remaining monitoring components 3 that are normally connected to the gateway port are buckled on the slot 48 of the cross plate 42 through the top of the plug board 44. With the push of the electric push rod 41, the cross plate 42 moves along the moving groove 12 of the partition plate 11, driving the bottom pressing plate 45 to move along the surface of the power switch 35, changing the power switch 35 from the off state to the on state, automatically intercepting the port traffic during this time, and transporting it to the feature comparison module 32 for comparison. Multiple groups of monitoring components 3 can be turned on and off synchronously, with higher unity.

[0027] When using the device, connect the monitoring component 3 to the port of the gateway device through a network cable. When the port of the gateway device is in normal use, turn the knob 52, and the adjusting screw 54 is inserted into the connection box 55, driving the upper copper sheet 57 to contact the lower copper sheet 58, completing the electrical connection between the feature comparison module 32 and the integrated board 33, forming a complete circuit, identifying and comparing the intercepted traffic packets. When abnormal traffic appears, the information is fed back to the terminal system, and at the same time, the corresponding warning light 13 lights up. By adjusting the connection between the screw 54 and the first vertical frame 24 and the second vertical frame 53, the opening and closing of the upper cover plate 15 and the lower cover plate 23 can be driven, thereby sealing the top and bottom of the monitoring component 3 that is not in use and does not need to intercept traffic, reducing the entry of dust. The heat dissipation windows at the upper and lower ends of the other monitoring components 3 in use are opened to maintain sufficient heat dissipation capacity. When the adjusting screw 54 of a single connection component 5 moves upward, the first vertical frame 24 and the second vertical frame 53 also move upward. At the same time, the telescopic plate 43 moves upward, driving the insertion plate 44 to separate from the slot 48 of the cross plate 42. Thus, the movement of the cross plate 42 will not drive the insertion plate 44 and the bottom cross plate 42 to move. This part can be used when the port of the gateway device is not in use. When capturing and identifying traffic packets, this part of the monitoring component 3 can be ignored, and at the same time, the backend connection component 5 is also in a short-circuit state. The other monitoring components 3 that are normally connected to the gateway port are buckled on the top of the insertion plate 44 inside the slot 48 of the cross plate 42. With the push of the electric push rod 41, the cross plate 42 moves along the movement slot 12 of the partition plate 11, driving the bottom pressing plate 45 to move along the surface of the power switch 35, changing the power switch 35 from the off state to the on state, automatically intercepting the port traffic during this time and transporting it to the feature comparison module 32 for comparison. Multiple groups of monitoring components 3 can be turned on and off synchronously, with higher unity, and are transported to the feature comparison module 32 for comparison. When abnormal traffic appears, it is fed back to the terminal.

[0028] The above shows and describes the basic principles, main features and advantages of the present invention. For those skilled in the art, it is obvious that the present invention is not limited to the details of the above exemplary embodiments, and without departing from the spirit or basic features of the present invention, the present invention can be implemented in other specific forms.

[0029] In addition, it should be understood that although this specification is described according to embodiments, not each embodiment only contains an independent technical solution. This narrative way of the specification is only for clarity. Those skilled in the art should regard the specification as a whole, and the technical solutions in each embodiment can also be appropriately combined to form other embodiments that can be understood by those skilled in the art.

Claims

1. An abnormal traffic monitoring system for an access gateway device, including a housing (1), characterized in that: A heat sink (2) is fixed to the bottom of the housing (1); five groups of monitoring components (3) are equidistantly installed between the housing (1) and the heat sink (2); the monitoring components (3) include an interface unit module (31); the interface unit module (31) is fixed to the front ends of the housing (1) and the heat sink (2); a feature comparison module (32) is fixedly connected to the rear end of the interface unit module (31); a partition (11) is fixed between adjacent feature comparison modules (32) between the housing (1) and the heat sink (2); a switch key (35) is installed on the top of the interface unit module (31); an integrated board (33) is fixed to the rear ends of the housing (1) and the heat sink (2); the integrated board (33) and the feature comparison module (32) are connected to each other. A connection assembly (5) is provided between the switch key (35), the connection assembly (5) comprising a connection box (55), a copper column (56) being fixed inside the connection box (55), a lower copper sheet (58) being fixed at the lower end of the copper column (56), and an upper copper sheet (57) being slidably sleeved at the upper end of the copper column (56), the upper copper sheet (57) and the lower copper sheet (58) being respectively connected to the feature comparison module (32) and the integrated board (33) via electric wires, a push assembly (4) being provided at the top of the switch key (35), the push assembly (4) comprising a pressure plate (45), a top surface of the switch key (35) being in sliding contact with the pressure plate (45), and a connection frame (46) being fixed at the rear end of the pressure plate (45), the connection frame (46) being slidably plugged into the top of the feature comparison module (32).

2. The abnormal traffic monitoring system for an access gateway device according to claim 1, wherein: An upper heat dissipation window (14) is provided at the top of the housing (1) at a position corresponding to each group of monitoring components (3); the bottom of the upper heat dissipation window (14) is covered with an upper cover plate (15); and a warning light (13) is fixed to the top of the housing (1) at the rear end of the upper heat dissipation window (14); the warning light (13) is electrically connected to the feature comparison module (32) via an electric wire.

3. The abnormal traffic monitoring system for an access gateway device according to claim 2, wherein: Air inlets (21) are provided on both sides of the heat dissipation base (2), and a lower heat dissipation window (22) is provided at the top of the heat dissipation base (2) at a position corresponding to each group of monitoring components (3), and the bottom surface of the lower heat dissipation window (22) is covered with a lower cover plate (23), and the upper cover plate (15) and the lower cover plate (23) are both drivingly connected to the connection component (5).

4. An abnormal traffic monitoring system for an access gateway device according to claim 3, characterized in that: The connection assembly (5) further comprises an adjusting screw (54), the top of the connection box (55) is threadedly plugged with the adjusting screw (54), the top of the adjusting screw (54) is fixed with a knob (52), the top of the integrated board (33) is fixed with a fixing plate (51) at a position corresponding to the adjusting screw (54), and the adjusting screw (54) is threadedly plugged with the surface of the fixing plate (51).

5. The abnormal traffic monitoring system for an access gateway device according to claim 4, characterized in that: The bottom of the adjusting screw rod (54) is rotatably connected to the upper copper sheet (57) via a bearing and an insulating sheet, and two connecting wires (34) are fixed to the outer end of the integrated board (33).

6. The abnormal traffic monitoring system for an access gateway device according to claim 5, characterized in that: A second vertical frame (53) is rotatably sleeved on the upper end surface of the adjusting screw rod (54), and the top of the second vertical frame (53) is fixedly connected to the upper cover plate (15). The bottom of the second vertical frame (53) is fixedly provided with a first vertical frame (24), and the bottom of the first vertical frame (24) is fixedly connected to the lower cover plate (23).

7. An abnormal traffic monitoring system for an access gateway device according to claim 6, characterized in that: The pushing component (4) further includes a cross plate (42). The cross plate (42) is provided on the top of the pressing plate (45). A moving groove (12) is formed in the partition plate (11) at a position corresponding to the cross plate (42), and the cross plate (42) slides along the inside of the moving groove (12).

8. The abnormal traffic monitoring system for an access gateway device according to claim 7, wherein: A plug board (44) is slidably inserted into the top of the pressing plate (45). A slot (48) is formed in the top of the cross plate (42) at a position corresponding to each plug board (44), and the top of the plug board (44) is buckled inside the slot (48).

9. The abnormal traffic monitoring system for an access gateway device according to claim 8, characterized in that: Electric push rods (41) are fixedly mounted on the inner walls of both sides of the housing (1), and the extending ends of the electric push rods (41) are fixedly connected to the cross plate (42). A first spring (47) is fixed between the connecting frame (46) and the feature comparison module (32).

10. The abnormal traffic monitoring system for an access gateway device according to claim 9, characterized in that: A telescopic plate (43) is fixed at the middle position of the first vertical frame (24) and the second vertical frame (53), and the extending end of the telescopic plate (43) is fixedly connected to the back of the plug board (44).

Images