Code stream information reverse generation and reconstruction method and device based on XDR call ticket and medium

Abstract

The invention discloses a code stream information reverse generation and reconstruction method and device based on an XDR call ticket and a medium, and the method comprises the steps: extracting a protocol data structure from ASN information of a 3GPP protocol, and analyzing key fields through ASN.1 and other coding and decoding tools; based on a multi-protocol support mechanism of dynamic protocol analysis, automatically identifying and adapting to different network protocols; xDR call ticket information of the DPI system is cleaned and associated, and service data records are extracted; recombining the analyzed signaling information and XDR ticket data into a complete network session according to communication logic; and constructing a file header and a data packet record based on a PCAP format, filling the recombined session data according to a time sequence, and generating a PCAP file. According to the method, the problems of large-scale original code stream file storage and management are solved, and a more efficient solution is provided for storage, verification and analysis of network communication data.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a method, device and medium for reversely generating and reconstructing code stream information based on XDR call records. Background Art

[0002] In the field of mobile communication network optimization and security analysis, Extended Detail Recording (XDR) call records and raw data stream files (such as PCAP format) generated by deep packet inspection (DPI) systems are key data sources for network troubleshooting and service quality assessment. XDR call records record detailed service characteristics of user sessions in a structured manner, while PCAP files store complete network traffic information in the form of raw data packets.

[0003] The main technical bottlenecks in the existing technology are as follows: 1) The high cost of storing raw bitstreams: The PCAP files directly collected by traditional network probes contain a large amount of redundant information at the physical layer. A single-user high-definition video service may generate traffic files of several GB, resulting in enormous pressure on data storage and transmission. According to statistics, the storage cost of raw bitstreams in 5G networks accounts for more than 35% of total operation and maintenance expenses. 2) Difficulty in adapting to multi-standard protocols: As wireless access technology evolves from LTE to NR, the 3GPP protocol stack continues to iterate and upgrade (such as R15 to R17 versions). Existing parsing tools require customized development of dedicated parsing modules for different network architectures, and cannot achieve adaptive identification and parsing of protocol versions, resulting in compatibility issues when analyzing cross-generational network data. Summary of the Invention

[0004] This invention aims to address the existing issues of high raw stream storage costs and difficulty adapting to multiple protocols. It provides a method, device, and medium for reversely generating and reconstructing stream information based on XDR call records. By processing the 3GPP protocol's data description language and the XDR call record information of the DPI system, it generates efficient stream files, providing a better solution for the storage, verification, and analysis of network communication data. It also achieves multi-protocol adaptive parsing capabilities while ensuring the integrity of the protocol stack.

[0005] The technical solution adopted in the present invention is: The method for reversely generating and reconstructing code stream information based on XDR call records includes the following steps: Step S1: Information Extraction and Preparation: Extract the protocol-defined data structures from 3GPP protocol information (ASN.1 for the control plane protocol and JSON / XML for the service-based interface). Use codec tools to parse the protocol message types, field encoding rules, and key parameter information. The signaling data structure description language for the control plane protocol of the RRC and NGAP interfaces is ASN.1, while the signaling data structure description language for other service-based interfaces is JSON / XML.

[0006] Furthermore, step S1 specifically includes the following steps: Step S1-1: Use a compiler to convert the protocol definition into a data structure that can be called by a programming language.

[0007] Step S1-2: extract the session identifier, message type and key parameter information of the corresponding interface from the signaling message, and map them to the corresponding fields of the XDR call record.

[0008] In step S1-3, at the same time, the XDR call record information of the DPI system is cleaned to remove redundant data, extract user identification, service type, timestamp and traffic information, and associate it with the corresponding network session.

[0009] Step S2: Dynamic protocol parsing: Based on the multi-protocol support mechanism of dynamic protocol parsing, different network protocols (such as LTE, NR, etc.) are automatically identified and adapted.

[0010] Furthermore, step S2 specifically includes the following steps: Step S2-1: Establish a protocol feature library including protocol version number, field mapping table, and encoding and decoding rules.

[0011] Step S2-2: Identify the network architecture type through the protocol sniffing module.

[0012] Step S2-3: Dynamically load the corresponding protocol parsing template based on the recognition result to ensure that XDR call record data can be efficiently extracted and reconstructed regardless of the network architecture.

[0013] Step S3: Data parsing and reassembly: Parse the signaling message in the signaling data structure data description language information according to the 3GPP protocol specification, determine the message interaction process and field meaning, and reassemble to generate a logically coherent session record.

[0014] Furthermore, step S3 specifically includes the following steps: Step S3-1: Match and reorganize the service data in the XDR call record with the parsed signaling message in chronological order and according to the session identifier.

[0015] Step S3-2: Associating the service data of the XDR call record with the signaling message through the session identifier.

[0016] Step S3-3: sort the signaling interaction and service data transmission according to the communication time sequence to generate a logically coherent session record.

[0017] Step S4: Generate code stream file: Construct PCAP file header based on logically coherent session records, and set global parameters including file version, timestamp precision and network type.

[0018] Furthermore, step S4 specifically includes the following steps: Step S4-1: encapsulate the reorganized network session data into a data packet record in PCAP format, including a timestamp, data length, and original byte stream.

[0019] Step S4-2: Write all data packets in chronological order to generate a PCAP file, and verify the integrity and parsability of the file through a verification tool.

[0020] Step S4-3: byte-align and pad the data packet to ensure compliance with the PCAP format specification.

[0021] Step S4-4, adding dummy data packets to simulate network packet loss or delay scenarios for testing and verification.

[0022] The present invention provides a device for reversely generating and reconstructing code stream information based on XDR call records, the device comprising: Signaling message parsing module 401: used to process 3GPP protocol signaling information and extract key parameter information, providing core support for subsequent data reassembly and code stream generation.

[0023] Dynamic adaptation module 402: includes a protocol feature library and a template loader, and implements multi-protocol parsing support through protocol sniffing and template loading, ensuring that the device can adapt to the parsing requirements of different network protocols.

[0024] XDR processing module 403: used for cleaning and correlating XDR call record data, extracting key information and performing correlation, and improving the quality and usability of XDR call record data.

[0025] The session reassembly engine 404 logically reassembles the parsed signaling and XDR service data to construct a complete network communication process and restore the network session.

[0026] The code stream generator 405 encapsulates the reorganized data into a PCAP file and performs verification to generate a code stream file that meets the requirements, thereby satisfying the storage and analysis requirements of network communication data.

[0027] The present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory. When the processor executes the program, it implements the method for reverse generation and reconstruction of code stream information based on XDR call records as described in any one of the present inventions, so that the computer device has the ability to efficiently process network communication data.

[0028] The present invention also provides a computer-readable storage medium storing instructions for executing any of the methods for reverse generation and reconstruction of code stream information based on XDR call records described in the present invention. By storing the instructions, software support is provided for realizing reverse generation and reconstruction of code stream information.

[0029] This invention utilizes the above technical solution, starting with 3GPP protocol ASN information and XDR call record information, to achieve multi-protocol adaptive parsing, deep data fusion, and collaborative reconstruction. The generated bitstream file avoids unnecessary data redundancy and offers significant advantages in data processing and storage efficiency. This effectively solves the storage and management challenges of large-scale raw bitstream files, providing a more efficient solution for the storage, verification, and analysis of network communication data.

[0030] In the technical solution of the present invention, since the XDR call record already contains the key data in the communication process, unnecessary data redundancy is avoided in the generated code stream file, which has significant advantages in data processing and storage efficiency, solves the problem of large-scale original code stream file storage and management, and provides a more efficient solution for the storage, verification and analysis of network communication data.

[0031] The present invention supports dynamic protocol adaptation in a 3G / 4G / 5G multi-network coexistence environment; deep integration of XDR structured data and ASN protocol metadata; and a collaborative reconstruction mechanism for control plane and user plane data. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments; Figure 1 Schematic diagram of the process of the method for reverse generation and reconstruction of code stream information based on XDR call records of the present invention; Figure 2 Schematic diagram of matching and reassembling XDR call records and ASN signaling messages in an embodiment of the present invention.

[0033] Figure 3 Schematic diagram of the PCAP file structure generated in an embodiment of the present invention.

[0034] Figure 4 Schematic diagram of the structure of the device for reversely generating and reconstructing code stream information based on XDR call records according to an embodiment of the present invention. DETAILED DESCRIPTION

[0035] In order to make the purpose, technical solutions and advantages of the embodiments of the present application clearer, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.

[0036] like Figures 1 to 4 As shown in FIG1 , the present invention discloses a method for reversely generating and reconstructing code stream information based on XDR call records, which mainly includes the following steps: Step S1: Information extraction and preparation: Extract the protocol-defined data structure from the signaling information of the 3GPP protocol, and use the ASN.1 encoding and decoding tool to parse the protocol message type, field encoding rules and key parameter information.

[0037] Furthermore, step S1 specifically includes the following steps: Step S1-1: Use a compiler to convert the protocol definition into a data structure that can be called by a programming language.

[0038] Step S1-2: extract the session identifier, message type and key parameter information of the corresponding interface from the signaling message, and map them to the corresponding fields of the XDR call record.

[0039] In step S1-3, at the same time, the XDR call record information of the DPI system is cleaned to remove redundant data, extract user identification, service type, timestamp and traffic information, and associate it with the corresponding network session.

[0040] Step S2: Dynamic protocol parsing: Based on the multi-protocol support mechanism of dynamic protocol parsing, different network protocols (such as LTE, NR, etc.) are automatically identified and adapted.

[0041] Furthermore, step S2 specifically includes the following steps: Step S2-1: Establish a protocol feature library including protocol version number, field mapping table, and encoding and decoding rules.

[0042] Step S2-2, identifying the network architecture type through the protocol sniffing module.

[0043] Step S2-3: Dynamically load the corresponding protocol parsing template based on the recognition result to ensure that XDR call record data can be efficiently extracted and reconstructed regardless of the network architecture.

[0044] Step S3: Data parsing and reassembly: Parse the signaling message in the signaling data structure data description language information according to the 3GPP protocol specification, determine the message interaction process and field meaning, and reassemble to generate a logically coherent session record.

[0045] Furthermore, step S3 specifically includes the following steps: Step S3-1: Match and reorganize the service data in the XDR call record with the parsed signaling message in chronological order and according to the session identifier.

[0046] Step S3-2: Associating the service data of the XDR call record with the signaling message through the session identifier.

[0047] Step S3-3: sort the signaling interaction and service data transmission according to the communication time sequence to generate a logically coherent session record.

[0048] like Figure 2 As shown in the figure, the process of matching and reassembling XDR call records and signaling messages can be used to build a complete network communication process.

[0049] Step S4: Generate code stream file: Construct PCAP file header based on logically coherent session records, and set global parameters including file version, timestamp precision and network type.

[0050] Furthermore, step S4 specifically includes the following steps: Step S4-1: encapsulate the reorganized network session data into a data packet record in PCAP format, including a timestamp, data length, and original byte stream.

[0051] Step S4-2: Write all data packets in chronological order to generate a PCAP file, and verify the integrity and parsability of the file through a verification tool.

[0052] Step S4-3: byte-align and pad the data packet to ensure compliance with the PCAP format specification.

[0053] Step S4-4, adding dummy data packets to simulate network packet loss or delay scenarios for testing and verification.

[0054] Figure 3 The generated PCAP file structure is shown as an example, which ensures that the generated file complies with the standard format and can be used for subsequent analysis and verification.

[0055] The embodiment of the present invention provides a schematic diagram of the structure of a device for reverse generation and reconstruction of code stream information based on XDR call records. Figure 4 As shown, the device includes: Signaling message parsing module 401: used to process 3GPP protocol signaling information and extract key parameter information, providing core support for subsequent data reassembly and code stream generation.

[0056] Dynamic adaptation module 402: includes a protocol feature library and a template loader, and implements multi-protocol parsing support through protocol sniffing and template loading, ensuring that the device can adapt to the parsing requirements of different network protocols.

[0057] XDR processing module 403: used for cleaning and correlating XDR call record data, extracting key information and performing correlation, and improving the quality and usability of XDR call record data.

[0058] The session reassembly engine 404 logically reassembles the parsed signaling information and the XDR service data to construct a complete network communication process and restore the network session.

[0059] The code stream generator 405 encapsulates the reorganized data into a PCAP file and performs verification to generate a code stream file that meets the requirements, thereby satisfying the storage and analysis requirements of network communication data.

[0060] An embodiment of the present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory. When the processor executes the program, it implements the method for reverse generation and reconstruction of code stream information based on XDR call records as described in any of the embodiments of the present invention, so that the computer device has the ability to efficiently process network communication data.

[0061] An embodiment of the present invention further provides a computer-readable storage medium storing instructions for executing any of the methods described in the embodiments of the present invention. By storing the instructions, software support is provided for achieving reverse generation and reconstruction of code stream information.

[0062] This invention utilizes the above technical solution, starting with 3GPP protocol signaling information and XDR call record information, to achieve multi-protocol adaptive parsing, deep data fusion, and collaborative reconstruction. The generated bitstream file avoids unnecessary data redundancy and offers significant advantages in data processing and storage efficiency. This effectively solves the storage and management challenges of large-scale raw bitstream files, providing a more efficient solution for the storage, verification, and analysis of network communication data.

[0063] In the technical solution of the present invention, since the XDR call record already contains the key data in the communication process, unnecessary data redundancy is avoided in the generated code stream file, which has significant advantages in data processing and storage efficiency, solves the problem of large-scale original code stream file storage and management, and provides a more efficient solution for the storage, verification and analysis of network communication data.

[0064] The present invention supports dynamic protocol adaptation in a 3G / 4G / 5G multi-network coexistence environment; deep integration of XDR structured data and 3GPP protocol signaling data; and a collaborative reconstruction mechanism for control plane and user plane data.

[0065] Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. In the absence of conflict, the embodiments in the present application and the features in the embodiments can be combined with each other. The components of the embodiments of the present application generally described and shown in the drawings here can be arranged and designed in various different configurations. Therefore, the detailed description of the embodiments of the present application is not intended to limit the scope of the application for protection, but merely represents the selected embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

Claims

1. A method for reversely generating and reconstructing code stream information based on XDR call records, characterized by: It includes the following steps: Step S1: Information extraction and preparation: Extract the signaling data structure defined by the protocol from the 3GPP protocol information, and use codec tools to parse the protocol message type, field encoding rules, and key parameter information. The signaling data structure description language for the control plane protocol of the RRC and NGAP interfaces is ASN.1, and the signaling data structure description language for other service-oriented interfaces is JSON / XML. Step S2: Dynamic protocol analysis: The multi-protocol support mechanism based on dynamic protocol analysis automatically identifies and adapts different network protocols; Step S3: Data parsing and reassembly: Parse the signaling message in the signaling data structure data description language information according to the 3GPP protocol specification, determine the message interaction process and field meaning, and reassemble to generate a logically coherent session record; Step S4: Generate code stream file: Construct PCAP file header based on logically coherent session records, and set global parameters including file version, timestamp precision and network type.

2. The method for reversely generating and reconstructing code stream information based on XDR call records according to claim 1, characterized in that: Step S1 specifically includes the following steps: Step S1-1, using a compiler to convert the protocol definition into a data structure that can be called by a programming language; Step S1-2: extract the session identifier, message type, and key parameter information of the corresponding interface from the signaling message, and map them to the corresponding fields of the XDR call record; In step S1-3, the XDR call record information of the DPI system is cleaned at the same time to remove redundant data, extract user identification, service type, timestamp and traffic information, and associate it with the corresponding network session.

3. The method for reversely generating and reconstructing code stream information based on XDR call records according to claim 1, characterized in that: Step S2 specifically includes the following steps: Step S2-1, establish a protocol feature library including protocol version number, field mapping table, and encoding and decoding rules; Step S2-2, identifying the network architecture type through a protocol sniffing module; Step S2-3: Dynamically load the corresponding protocol parsing template according to the recognition result.

4. The method for reversely generating and reconstructing code stream information based on XDR call records according to claim 1, characterized in that: Step S3 specifically includes the following steps: Step S3-1, matching and reorganizing the service data in the XDR call record with the parsed signaling message in chronological order and according to the session identifier; Step S3-2, associating the service data of the XDR call record with the signaling message through the session identifier; Step S3-3: sort the signaling interaction and service data transmission according to the communication time sequence to generate a logically coherent session record.

5. The method for reversely generating and reconstructing code stream information based on XDR call records according to claim 1, characterized in that: Step S4 The specific steps include: Step S4-1, encapsulating the logically coherent conversation record data into a data packet record in PCAP format, including a timestamp, data length, and original byte stream; Step S4-2: Write all data packets in chronological order to generate a PCAP file, and verify the integrity and parsability of the file using a verification tool; Step S4-3, byte alignment and padding of the data packet to ensure compliance with the PCAP format specification; Step S4-4, adding dummy data packets to simulate network packet loss or delay scenarios for testing and verification.

6. A device for reversely generating and reconstructing code stream information based on XDR call records, applying the method for reversely generating and reconstructing code stream information based on XDR call records according to any one of claims 1 to 5, characterized in that: The device includes: Signaling message parsing module: used to process the ASN.1 data description language of the 3GPP control plane protocol and the JSON / XML data description language of the service interface, extract key parameter information, and provide core support for data reassembly and code stream generation; Dynamic adaptation module: contains protocol signature library and template loader, and implements multi-protocol parsing support through protocol sniffing and template loading; XDR processing module: used to clean and correlate XDR call record data, extract key information and perform correlation; Session Reconstruction Engine: Logically reconstructs the parsed signaling data and XDR service data to build a complete network communication process and restore the network session; Code stream generator: Encapsulates the reorganized data into a PCAP file and performs verification to generate a code stream file that meets the requirements to meet the storage and analysis needs of network communication data.

7. A computer device comprising a memory, a processor, and a computer program stored in the memory, wherein: When the processor executes the program, it implements the method for reverse generation and reconstruction of code stream information based on XDR call records as described in any one of claims 1 to 5, so that the computer device has the ability to efficiently process network communication data.

8. A computer-readable storage medium, characterized in that: Instructions for executing the method for reverse generation and reconstruction of code stream information based on XDR call records as described in any one of claims 1 to 5 are stored, and software support is provided for realizing reverse generation and reconstruction of code stream information by storing the instructions.

Images