An abnormal traffic monitoring system for access gateway equipment

Abstract

The present invention provides an abnormal traffic monitoring system for access gateway devices, which relates to the technical field of gateway device monitoring. The system comprises a shell, a heat dissipation base is fixed to the bottom of the shell, and five groups of monitoring components are equidistantly installed between the shell and the heat dissipation base. The monitoring components comprise an interface unit module, the interface unit module is fixed to the front end of the shell and the heat dissipation base, and a feature comparison module is fixedly connected to the rear end of the interface unit module. Compared with the prior art, the five groups of monitoring components inside the shell correspond to the five ports of the gateway device. After being connected to the ports, it is selected whether to connect to the integrated board through the connection component to form a path according to the usage of the gateway port. The pushing component can synchronously start the monitoring component in use to capture and identify the traffic of the port. After comparison, it is determined whether abnormal traffic exists. The system has high uniformity, is convenient to intercept traffic, and can automatically ignore unused ports.

Description

Technical Field

[0001] The present invention relates to the technical field of gateway device monitoring, in particular to an abnormal traffic monitoring system for access gateway devices. Background Art

[0002] As the central gateway for end-user network data to enter and exit the Internet, access gateway devices offer convenient conditions for stealing sensitive information and are therefore closely linked to the security of end-user networks. The backdoor, XSS, CSRF, and other access gateway device vulnerabilities and attacks that have been exposed in recent years indicate that network devices such as access gateways present significant security risks and are increasingly becoming a new focus of cybersecurity debate. If an access gateway device is intentionally implanted with a backdoor or compromised by an attacker and used to identify, intercept, and remotely transmit sensitive information, the end-user's network communications can be spied on and their data stolen. Even more worrying is that access gateway devices can become a springboard for attacks against end-user networks, conducting scans, detection, vulnerability discovery, Trojan horse planting, and sensitive data collection on end-user network hosts. These attacks are highly concealed and pose serious risks. Therefore, it is crucial to strengthen security monitoring of access gateway devices to accurately and promptly detect abnormal traffic such as attack and penetration behaviors.

[0003] The existing technology for monitoring abnormal traffic in gateway devices is to connect a special traffic monitor to the port of the gateway device. By capturing part of the traffic data and analyzing and identifying it, the occurrence of abnormal traffic can be discovered in a timely manner. In this method, when capturing the traffic of the gateway device port, because the gateway device generally has more ports, it is generally identified in sequence during monitoring. It is difficult to capture and identify the ports in use at the same time, and some unused ports are automatically ignored for monitoring. Summary of the Invention

[0004] In view of the shortcomings of the existing technology, the purpose of the present invention is to provide an abnormal traffic monitoring system for access gateway devices to solve the problems raised in the above-mentioned background technology. The present invention has a novel structure. The five groups of monitoring components inside the shell correspond to the five ports of the gateway device. After connecting to the ports, according to the usage of the gateway port, it is selected whether to connect the integrated board through the connecting component to form a path. The pushing component can synchronously turn on the monitoring component in use to capture and identify the traffic of the port. After comparison, it is determined whether abnormal traffic exists. The system has high uniformity, convenient traffic interception, and can automatically ignore unused ports.

[0005] To achieve the above-mentioned object, the present invention is implemented through the following technical solution: an abnormal traffic monitoring system for access gateway devices, comprising a housing, a heat sink base fixed to the bottom of the housing, five groups of monitoring components equidistantly installed between the housing and the heat sink base, the monitoring component comprising an interface unit module, the interface unit module fixed to the front end of the housing and the heat sink base, a feature comparison module fixedly connected to the rear end of the interface unit module, a partition fixed between adjacent feature comparison modules between the housing and the heat sink base, a switch key installed on the top of the interface unit module, an integrated board fixed to the rear end of the housing and the heat sink base, a connecting component provided between the integrated board and the feature comparison module, the connecting component comprising a connecting box, a copper column fixed inside the connecting box, a lower copper sheet fixed to the lower end of the copper column, and an upper copper sheet slidably sleeved on the upper end of the copper column, the upper and lower copper sheets being connected to the feature comparison module and the integrated board respectively by wires, a pushing component provided on the top of the switch key, the pushing component comprising a pressure plate, the pressure plate slidably contacting the top surface of the switch key, and a connecting frame fixed to the rear end of the pressure plate, the connecting frame slidably plugged into the top of the feature comparison module.

[0006] Furthermore, an upper heat dissipation window is provided on the top of the shell corresponding to the position of each group of monitoring components, the bottom of the upper heat dissipation window is covered with an upper cover plate, and a warning light is fixed on the top of the shell at the tail end of the upper heat dissipation window, and the warning light is electrically connected to the feature comparison module through wires.

[0007] Furthermore, air inlets are provided on both sides of the heat dissipation base, and a lower heat dissipation window is provided on the top of the heat dissipation base corresponding to the position of each group of monitoring components, and the bottom surface of the lower heat dissipation window is covered with a lower cover plate, and the upper cover plate and the lower cover plate are both transmission-connected to the connecting component.

[0008] Furthermore, the connecting assembly also includes an adjusting screw, the top thread of the connecting box is threaded with the adjusting screw, a knob is fixed on the top of the adjusting screw, a fixing plate is fixed on the top of the integrated board at the position corresponding to the adjusting screw, and the adjusting screw thread is inserted on the surface of the fixing plate.

[0009] Furthermore, the bottom of the adjusting screw is rotatably connected to the upper copper sheet via a bearing and an insulating sheet, and two connecting wires are fixed to the outer end of the integrated board.

[0010] Furthermore, a second vertical frame is rotatably sleeved on the upper end surface of the adjusting screw, and the top of the second vertical frame is fixedly connected to the upper cover plate, and the bottom of the second vertical frame is fixedly connected to the first vertical frame, and the bottom of the first vertical frame is fixedly connected to the lower cover plate.

[0011] Furthermore, the pushing assembly also includes a transverse plate, a transverse plate is provided on the top of the pressure plate, a movable groove is opened at a position of the partition corresponding to the transverse plate, and the transverse plate slides along the inside of the movable groove.

[0012] Furthermore, a plug-in board is slidably plugged into the top of the pressure plate, and a slot is provided at the top of the transverse plate corresponding to the position of each plug-in board, and the top of the plug-in board is buckled into the inside of the slot.

[0013] Furthermore, electric push rods are fixed on the inner walls on both sides of the shell, and the extended ends of the electric push rods are fixedly connected to the cross plates, and a first spring is fixed between the connecting frame and the feature comparison module.

[0014] Furthermore, a telescopic plate is fixed in the middle of the first vertical frame and the second vertical frame, and the extended end of the telescopic plate is fixedly connected to the back of the plug board.

[0015] Beneficial effects of the present invention:

[0016] In the present invention, when the adjusting screw of a single connecting component moves upward, the first vertical frame and the second vertical frame will also move upward, and at the same time the telescopic plate moves upward, driving the slots of the plug-in plate and the horizontal plate to separate, so that the movement of the horizontal plate will not drive the movement of the plug-in plate and the bottom horizontal plate. This part can act on the unused state of the port of the gateway device. When capturing and identifying traffic packets, the monitoring component of this part can be ignored, and the connection component at the back end is also in a short-circuit state.

[0017] The present invention fastens the top of the plug-in plate inside the slot of the horizontal plate. As the electric push rod pushes, the horizontal plate moves along the movable groove of the partition, driving the bottom pressure plate to move along the surface of the switch key, changing the switch key from a closed state to an open state, automatically intercepting the port flow within the time and transmitting it to the feature comparison module for comparison. Multiple groups of monitoring components can be opened and closed synchronously, with higher uniformity.

[0018] When the gateway device port of the present invention is in normal use, the knob is turned and the adjusting screw is inserted into the inside of the connection box, driving the upper copper sheet to contact the lower copper sheet, completing the electrical connection between the feature comparison module and the integrated board, forming a whole path, identifying and comparing the intercepted traffic packets, and when abnormal traffic occurs, the information is fed back to the terminal system, and the corresponding warning light is turned on. By adjusting the connection between the screw and the first vertical frame and the second vertical frame, the upper cover and the lower cover can be driven to open and close, and then the top and bottom of the monitoring components that are not in use and do not need to intercept traffic are sealed to reduce the entry of dust. The heat dissipation windows at the upper and lower ends of the remaining monitoring components in use are opened to maintain sufficient heat dissipation capacity.

[0019] The upper cover and the lower cover of the present invention can be opened and closed simultaneously by moving the second vertical frame and the first vertical frame. In the closed state, that is, the monitoring component is not in use, the entry of dust is reduced. In the open state, the heat dissipation capacity of the monitoring component when it is working can be continuously guaranteed.

[0020] Compared with the prior art, the present invention has five groups of monitoring components inside the shell corresponding to the five ports of the gateway device. After being connected to the ports, it is selected whether to connect the integrated board through the connecting components to form a path according to the usage of the gateway port. The pushing component can synchronously turn on the monitoring components in use to capture and identify the traffic of the port. After comparison, it can be determined whether abnormal traffic exists. The uniformity is high, the traffic interception is convenient, and unused ports can be automatically ignored. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 This is a system control diagram of an abnormal traffic monitoring system for access gateway devices according to the present invention;

[0022] Figure 2 This is a schematic diagram of the overall structure of an abnormal traffic monitoring system for access gateway devices according to the present invention;

[0023] Figure 3 This is a schematic diagram of the internal structure of a housing of an abnormal traffic monitoring system for access gateway devices according to the present invention;

[0024] Figure 4 This is a schematic diagram of the monitoring component structure of an abnormal traffic monitoring system for access gateway devices according to the present invention;

[0025] Figure 5 This is a schematic diagram of the connection between a push component and a switch key of an abnormal traffic monitoring system for access gateway equipment of the present invention;

[0026] Figure 6 This is a schematic diagram of the connection between the connection component and the lower cover plate of an abnormal flow monitoring system for access gateway equipment of the present invention;

[0027] Figure 7 This is a schematic diagram of the connection between the connection component and the upper cover plate of an abnormal traffic monitoring system for access gateway equipment of the present invention;

[0028] Figure 8 This is a schematic diagram of the driving component structure of an abnormal traffic monitoring system for access gateway devices of the present invention;

[0029] Figure 9 This is a schematic diagram of the connection component structure of an abnormal traffic monitoring system for access gateway devices of the present invention.

[0030] In the figure: 1. Shell; 11. Partition; 12. Moving slot; 13. Warning light; 14. Upper heat dissipation window; 15. Upper cover; 2. Heat dissipation base; 21. Air inlet; 22. Lower heat dissipation window; 23. Lower cover; 24. First vertical frame; 3. Monitoring component; 31. Interface unit module; 32. Feature comparison module; 33. Integrated board; 34. Connecting wire; 35. On / off switch; 4. Pushing component; 41. Electric push rod; 42. Horizontal board; 43. Telescopic board; 44. Insert board; 45. Pressing plate; 46. Connecting frame; 47. First spring; 48. Slot; 5. Connecting component; 51. Fixed plate; 52. Knob; 53. Second vertical frame; 54. Adjusting screw; 55. Connecting box; 56. Copper column; 57. Upper copper sheet; 58. Lower copper sheet. DETAILED DESCRIPTION

[0031] In order to make the technical means, creative features, objectives and effects achieved by the present invention easier to understand, the present invention is further described below in conjunction with specific implementation methods.

[0032] See also Figures 1 to 9The present invention provides a technical solution: an abnormal traffic monitoring system for access gateway devices, comprising a housing 1, a heat dissipation base 2 being fixed to the bottom of the housing 1, five groups of monitoring components 3 being equidistantly installed between the housing 1 and the heat dissipation base 2, the monitoring components 3 comprising an interface unit module 31, the interface unit module 31 being fixed to the front end of the housing 1 and the heat dissipation base 2, a feature comparison module 32 being fixedly connected to the rear end of the interface unit module 31, a partition 11 being fixed between adjacent feature comparison modules 32 between the housing 1 and the heat dissipation base 2, a switch key 35 being installed on the top of the interface unit module 31, the housing 1 and the heat dissipation base 2 is fixed with an integrated board 33 at the tail end, and a connecting component 5 is provided between the integrated board 33 and the feature comparison module 32. The connecting component 5 includes a connecting box 55, and a copper column 56 is fixed inside the connecting box 55. The lower end of the copper column 56 is fixed with a lower copper sheet 58, and the upper end of the copper column 56 is slidably sleeved with an upper copper sheet 57. The upper copper sheet 57 and the lower copper sheet 58 are respectively connected to the feature comparison module 32 and the integrated board 33 through wires. A pushing component 4 is provided on the top of the switch key 35, and the pushing component 4 includes a pressure plate 45. The pressure plate 45 is in sliding contact with the top surface of the switch key 35, and the rear end of the pressure plate 45 is fixed with a connecting frame 46. The connecting frame 46 is slidably plugged into the top of the feature comparison module 32. In this solution, the interface unit module 31 and the feature comparison module 32 monitor abnormal traffic in the following manner: the interface unit module 31 is composed of a data capture and recording module, a protocol parsing and feature extraction module, an application business data summary information acquisition module, a data in and out bidirectional separation module, and an input and output packet feature cache module. Each module is connected to each other in sequence. The data in and out bidirectional separation module is connected to the input packet feature cache module and the output packet feature cache module respectively to realize data collection, feature extraction and caching of network traffic. The feature comparison module is composed of an input packet feature cache scheduling module. , output packet feature cache scheduling module, protocol feature comparison module and comparison result output module, which matches the protocol features of each packet output by each interface with the input packets of all interfaces in turn, and transmits the comparison results to the abnormal traffic alarm unit. When using the device, the monitoring component 3 is connected to the port of the gateway device through the network cable. According to the usage of the gateway device port, the connection component 5 is selected to connect the monitoring component 3 to the integrated board 33. The traffic of all the monitoring components 3 in use and in passage to the gateway port is intercepted by the pushing component 4, and transmitted to the feature comparison module 32 for comparison. When abnormal traffic occurs, it is fed back to the terminal.

[0033] In this embodiment, an upper heat dissipation window 14 is provided at the top of the shell 1 corresponding to the position of each group of monitoring components 3, and the bottom of the upper heat dissipation window 14 is covered with an upper cover 15, and a warning light 13 is fixed to the tail end of the upper heat dissipation window 14 on the top of the shell 1, and the warning light 13 is electrically connected to the feature comparison module 32 through an electric wire, and air inlets 21 are provided on both sides of the heat dissipation base 2, and a lower heat dissipation window 22 is provided at the top of the heat dissipation base 2 corresponding to the position of each group of monitoring components 3, and the bottom surface of the lower heat dissipation window 22 is covered with a lower cover 23, and the upper cover 15 and the lower cover 23 are both transmission-connected to the connecting component 5, and the upper cover 15 and the lower cover 23 can be opened and closed simultaneously by moving the second vertical frame 53 and the first vertical frame 24. In the closed state, that is, the state where the monitoring component 3 is not in use, the entry of dust is reduced. In the open state, the heat dissipation capacity of the monitoring component 3 when working can be continuously guaranteed.

[0034] In this embodiment, the connecting assembly 5 also includes an adjusting screw 54, the top of the connecting box 55 is threadedly plugged with the adjusting screw 54, the top of the adjusting screw 54 is fixed with a knob 52, the top of the integrated board 33 is fixed with a fixing plate 51 at a position corresponding to the adjusting screw 54, and the adjusting screw 54 is threadedly plugged into the surface of the fixing plate 51, the bottom of the adjusting screw 54 is rotatably connected to the upper copper plate 57 through a bearing and an insulating sheet, the outer end of the integrated board 33 is fixed with two connecting wires 34, a second vertical frame 53 is rotatably sleeved on the upper end surface of the adjusting screw 54, and the top of the second vertical frame 53 is fixedly connected to the upper cover 15, the bottom of the second vertical frame 53 is fixed with the first vertical frame 24, and the bottom of the first vertical frame 24 is fixed to the lower cover 23 When the gateway device port is connected and in normal use, turn the knob 52 and insert the adjusting screw 54 into the connection box 55 to drive the upper copper sheet 57 to contact the lower copper sheet 58, completing the electrical connection between the feature comparison module 32 and the integrated board 33, forming a whole path, identifying and comparing the intercepted traffic packets, and when abnormal traffic occurs, feeding back the information to the terminal system, and the corresponding warning light 13 lights up. By adjusting the connection between the screw 54 and the first vertical frame 24 and the second vertical frame 53, the upper cover 15 and the lower cover 23 can be driven to open and close, thereby sealing the top and bottom of the monitoring components 3 that are not in use and do not need to intercept traffic, reducing the entry of dust, and the heat dissipation windows at the upper and lower ends of the remaining monitoring components 3 in use are opened to maintain sufficient heat dissipation capacity.

[0035] In this embodiment, the pushing component 4 also includes a transverse plate 42, a transverse plate 42 is provided on the top of the pressing plate 45, a movable groove 12 is opened at the position of the partition 11 corresponding to the transverse plate 42, and the transverse plate 42 slides inside the movable groove 12, and the top of the pressing plate 45 is slidably inserted with a plug-in plate 44, and a slot 48 is opened at the top of the transverse plate 42 corresponding to the position of each plug-in plate 44, and the top of the plug-in plate 44 is buckled inside the slot 48, electric push rods 41 are fixed on the inner walls of both sides of the shell 1, and the extended end of the electric push rod 41 is fixedly connected to the transverse plate 42, a first spring 47 is fixed between the connecting frame 46 and the feature comparison module 32, a telescopic plate 43 is fixed at the middle position of the first vertical frame 24 and the second vertical frame 53, and the extended end of the telescopic plate 43 is fixedly connected to the back of the plug-in plate 44, when the adjusting screw 54 of the single connecting component 5 moves upward, the first vertical frame 24 and the second vertical frame 53 It will also move upward, and at the same time, the telescopic plate 43 moves upward, driving the plug-in plate 44 to separate from the slot 48 of the horizontal plate 42, so that the movement of the horizontal plate 42 will not drive the plug-in plate 44 and the bottom horizontal plate 42 to move. This part can act on the unused port of the gateway device. When capturing and identifying traffic packets, the monitoring component 3 of this part can be ignored. At the same time, the connection component 5 at the back end is also in a short-circuit state. The remaining monitoring components 3 used for normal connection with the gateway port are fastened to the slot 48 of the horizontal plate 42 through the top of the plug-in plate 44. As the electric push rod 41 pushes, the horizontal plate 42 moves along the moving groove 12 of the partition 11, driving the bottom pressure plate 45 to move along the surface of the switch key 35, changing the switch key 35 from the closed state to the open state, automatically intercepting the port traffic during the time, and transmitting it to the feature comparison module 32 for comparison. Multiple groups of monitoring components 3 can be opened and closed synchronously, with higher uniformity.

[0036] When the device is in use, the monitoring component 3 is connected to the port of the gateway device through the network cable. When the gateway device port is in normal use, the knob 52 is turned and the adjusting screw 54 is inserted into the connection box 55, driving the upper copper sheet 57 to contact the lower copper sheet 58, completing the electrical connection between the feature comparison module 32 and the integrated board 33, forming a whole path, identifying and comparing the intercepted traffic packets, and when abnormal traffic occurs, the information is fed back to the terminal system, and the corresponding warning light 13 lights up. By adjusting the connection between the screw 54 and the first vertical frame 24 and the second vertical frame 53, the upper cover 15 and the lower cover 23 can be driven to open and close, thereby sealing the top and bottom of the monitoring components 3 that are not in use and do not need to intercept traffic, reducing the entry of dust. The heat dissipation windows at the upper and lower ends of the remaining monitoring components 3 in use are opened to maintain sufficient heat dissipation capacity. When the adjusting screw 54 of a single connecting component 5 moves upward, the first vertical frame 24 and the second vertical frame 53 will also move upward, extending The retracted plate 43 moves upward, driving the plug-in plate 44 to separate from the slot 48 of the horizontal plate 42, so that the movement of the horizontal plate 42 will not drive the plug-in plate 44 and the bottom horizontal plate 42 to move. This part can act when the port of the gateway device is not in use. When capturing and identifying traffic packets, the monitoring components 3 of this part can be ignored. At the same time, the connection component 5 at the back end is also in a short-circuit state. The remaining monitoring components 3 used for normal connection with the gateway port are buckled into the slot 48 of the horizontal plate 42 through the top of the plug-in plate 44. As the electric push rod 41 pushes, the horizontal plate 42 moves along the movable groove 12 of the partition 11, driving the bottom pressure plate 45 to move along the surface of the switch key 35, changing the switch key 35 from the closed state to the open state, automatically intercepting the port traffic during this time and transmitting it to the feature comparison module 32 for comparison. Multiple groups of monitoring components 3 can be opened and closed synchronously, with higher uniformity, and transmitted to the feature comparison module 32 for comparison. When abnormal traffic occurs, it is fed back to the terminal.

[0037] The basic principles, main features and advantages of the present invention are shown and described above. It is obvious to those skilled in the art that the present invention is not limited to the details of the above exemplary embodiments, and that the present invention can be implemented in other specific forms without departing from the spirit or basic features of the present invention.

[0038] In addition, it should be understood that although this specification is described in terms of implementation methods, not every implementation method contains only one independent technical solution. This narrative method of the specification is only for the sake of clarity. Those skilled in the art should regard the specification as a whole. The technical solutions in each embodiment can also be appropriately combined to form other implementation methods that can be understood by those skilled in the art.

Claims

1. An abnormal traffic monitoring system for access gateway equipment, comprising a housing (1), characterized in that: A heat dissipation base (2) is fixed to the bottom of the housing (1), and five groups of monitoring components (3) are equidistantly installed between the housing (1) and the heat dissipation base (2). The monitoring components (3) include an interface unit module (31), the interface unit module (31) is fixed to the front end of the housing (1) and the heat dissipation base (2), and a feature comparison module (32) is fixedly connected to the rear end of the interface unit module (31). A partition (11) is fixed between adjacent feature comparison modules (32) between the housing (1) and the heat dissipation base (2), and a switch key (35) is installed on the top of the interface unit module (31). An integrated board (33) is fixed to the rear end of the housing (1) and the heat dissipation base (2), and the integrated board (33) and the feature comparison module (32) are connected. A connecting assembly (5) is provided between the switch key (35), the connecting assembly (5) including a connecting box (55), a copper column (56) is fixed inside the connecting box (55), a lower copper sheet (58) is fixed to the lower end of the copper column (56), and an upper copper sheet (57) is slidably sleeved on the upper end of the copper column (56), the upper copper sheet (57) and the lower copper sheet (58) are respectively connected to the feature comparison module (32) and the integrated board (33) through wires, a pushing assembly (4) is provided on the top of the switch key (35), the pushing assembly (4) includes a pressure plate (45), the top surface of the switch key (35) is in sliding contact with the pressure plate (45), and a connecting frame (46) is fixed to the rear end of the pressure plate (45), and the connecting frame (46) is slidably plugged into the top of the feature comparison module (32).

2. The abnormal traffic monitoring system for access gateway devices according to claim 1, characterized in that: An upper heat dissipation window (14) is provided at the top of the housing (1) corresponding to the position of each group of monitoring components (3), the bottom of the upper heat dissipation window (14) is covered with an upper cover plate (15), and a warning light (13) is fixed to the top of the housing (1) at the tail end of the upper heat dissipation window (14), and the warning light (13) is electrically connected to the feature comparison module (32) through an electric wire.

3. The abnormal traffic monitoring system for access gateway devices according to claim 2, characterized in that: Air inlets (21) are provided on both sides of the heat dissipation base (2), and a lower heat dissipation window (22) is provided at the top of the heat dissipation base (2) corresponding to the position of each group of monitoring components (3), and the bottom surface of the lower heat dissipation window (22) is covered with a lower cover plate (23), and the upper cover plate (15) and the lower cover plate (23) are both transmission-connected to the connecting component (5).

4. The abnormal traffic monitoring system for access gateway devices according to claim 3, characterized in that: The connection assembly (5) further comprises an adjusting screw (54), the top of the connection box (55) is threadedly plugged with the adjusting screw (54), a knob (52) is fixed to the top of the adjusting screw (54), a fixing plate (51) is fixed to the top of the integrated board (33) at a position corresponding to the adjusting screw (54), and the adjusting screw (54) is threadedly plugged into the surface of the fixing plate (51).

5. The abnormal traffic monitoring system for access gateway devices according to claim 4, characterized in that: The bottom of the adjusting screw (54) is rotatably connected to the upper copper plate (57) via a bearing and an insulating plate, and two connecting wires (34) are fixed to the outer end of the integrated board (33).

6. The abnormal traffic monitoring system for access gateway devices according to claim 5, characterized in that: A second vertical frame (53) is rotatably sleeved on the upper end surface of the adjusting screw (54), and the top of the second vertical frame (53) is fixedly connected to the upper cover (15). The bottom of the second vertical frame (53) is fixedly connected to the first vertical frame (24), and the bottom of the first vertical frame (24) is fixedly connected to the lower cover (23).

7. The abnormal traffic monitoring system for access gateway devices according to claim 6, characterized in that: The pushing assembly (4) further includes a transverse plate (42), the top of the pressing plate (45) is provided with the transverse plate (42), the partition (11) is provided with a movable groove (12) at a position corresponding to the transverse plate (42), and the transverse plate (42) slides inside the movable groove (12).

8. The abnormal traffic monitoring system for access gateway devices according to claim 7, characterized in that: The top of the pressure plate (45) is slidably connected to an inserting plate (44), and a slot (48) is provided on the top of the transverse plate (42) at a position corresponding to each inserting plate (44), and the top of the inserting plate (44) is buckled inside the slot (48).

9. The abnormal traffic monitoring system for access gateway devices according to claim 8, characterized in that: Electric push rods (41) are fixed on the inner walls of both sides of the housing (1), and the extended ends of the electric push rods (41) are fixedly connected to the transverse plate (42). A first spring (47) is fixed between the connecting frame (46) and the feature comparison module (32).

10. The abnormal traffic monitoring system for access gateway devices according to claim 9, characterized in that: A telescopic plate (43) is fixed at a middle position between the first vertical frame (24) and the second vertical frame (53), and an extended end of the telescopic plate (43) is fixedly connected to the back of the inserting plate (44).

Images