TTE network test real-time monitoring method and system based on dynamic probe

By using dynamic probe technology to perform data frame replication, feature matching, and anomaly detection in TTE networks, the problems of real-time monitoring and fault injection in large-scale networks are solved, enabling diverse fault injection and efficient monitoring, and supporting long-term reliable testing of TTE networks.

CN120880952APending Publication Date: 2025-10-31XIDIAN UNIV
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510826544.1
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-06-19
Publication Date
2025-10-31

AI Technical Summary

Technical Problem

Existing TTE network testing methods are difficult to use for long-term real-time monitoring and reporting in large-scale networks, cannot inject faults into existing business data, cannot provide real-time monitoring and early warning, and cannot eliminate the impact of their own equipment on the network.

Method used

By using a dynamic probe-based method, service data frames are obtained from the original transmission link, copied and matched for features, the packet header fields are updated, and the data is sent back to the link to achieve fault injection. At the same time, field-level anomaly detection and early warning log reporting are performed.

Benefits of technology

It enables customizable and scalable fault injection into TTE networks, improving the diversity and scalability of test scenarios, timely and effective error analysis, and long-term efficient monitoring of large-scale networks.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120880952A_ABST
    Figure CN120880952A_ABST
Patent Text Reader

Abstract

The invention discloses a TTE network test real-time monitoring method and system based on a dynamic probe, and the method comprises the steps: obtaining a first service data frame from an original transmission link, and copying the first service data frame to obtain a second service data frame; after a packet header field of the first service data frame is extracted, multi-segment feature matching is carried out based on a preset assembly line action matching table, and the packet header field is updated according to a matching result; the first service data frame comprises a packet header field and load data; re-packaging the updated packet header field and the load data into a new first service data frame, and returning the new first service data frame to the original transmission link to realize fault injection; performing field-level anomaly detection on the second service data frame, triggering early warning when an anomaly result occurs, and generating and reporting an early warning log; and realizing TTE network test real-time monitoring suitable for large-scale networking based on the early warning log and the new first service data frame.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention belongs to the field of communication technology, specifically relating to a real-time monitoring and testing method and system for TTE (Time Triggered Ethernet) network testing based on dynamic probes. Background Technology

[0002] TTE is a deterministic real-time communication protocol based on the standard Ethernet architecture. It achieves high-precision synchronization and low-latency transmission through a strict time scheduling mechanism, and is widely used in fields with extremely high requirements for real-time performance, reliability, and security. TTE supports TT (Time-Triggered) and ET (Event-Triggered) services. ET services include RC (Rate-Constrained) and BE (Best-Effort) services, and different services can be adapted to different application scenarios.

[0003] A TTE network consists of three core components: the TTE end system, the TTE switch, and virtual links. The TTE end system is mainly responsible for data generation, reception, and protocol processing. The TTE switch is the core switching device, which realizes data forwarding, traffic scheduling, and synchronization control. Virtual links meet the QoS (Quality of Service) requirements of different applications by isolating different traffic types.

[0004] Traditional TTE network testing has the following limitations: (1) It only tests individual devices, such as TTE end system testers and TTE switch testers. It can only test individual TTE end systems and TTE switches and cannot support testing in large-scale networks. (2) As a node in a TTE network, it participates in the synchronization and service transmission and reception in the TTE network. It cannot participate in the testing and verification of the network by default and cannot eliminate the impact of its own equipment on the network. (3) It can only collect periodic monitoring information and cannot report abnormal traffic statistics and early warnings in real time, nor can it locate the root cause of historical faults. (4) It cannot inject faults on the basis of the original service data in the network. Fault data is generated by its own equipment.

[0005] It is evident that how to perform long-term real-time monitoring and reporting of various devices in a TTE network, inject faults into existing business data, and conduct real-time monitoring and early warning in large-scale networking are problems that urgently need to be solved by those skilled in the art. Summary of the Invention

[0006] To address the aforementioned problems in the existing technology, this invention provides a real-time monitoring method and system for TTE network testing based on dynamic probes.

[0007] The technical problem to be solved by this invention is achieved through the following technical solution:

[0008] In a first aspect, the present invention provides a real-time monitoring method for TTE network testing based on dynamic probes, the real-time monitoring method for TTE network testing comprising:

[0009] The first service data frame is obtained from the original transmission link, and the first service data frame is copied to obtain the second service data frame;

[0010] After extracting the header field of the first service data frame, multi-segment feature matching is performed based on a preset pipeline action matching table, and the header field is updated according to the matching results; the first service data frame includes a header field and payload data;

[0011] After re-encapsulating the updated header field and the payload data into a new first service data frame, it is sent back to the original transmission link to achieve fault injection.

[0012] Perform field-level anomaly detection on the second business data frame, and trigger an alert when an abnormal result occurs, generate an alert log and report it;

[0013] Real-time monitoring of TTE network testing is achieved based on the aforementioned warning logs and the new first service data frame.

[0014] Optionally, after extracting the header field of the first service data frame, performing multi-segment feature matching based on a preset pipeline action matching table, and updating the header field according to the matching results includes:

[0015] Extract the header field of the first service data frame, and perform MAC feature matching, IP feature matching and / or UDP feature matching operations in sequence based on the MAC pipeline action matching table, IP pipeline action matching table and / or UDP pipeline action matching table.

[0016] Optionally, the MAC feature matching operation includes:

[0017] Feature matching is performed based on the source MAC address, destination MAC address, frame type, frame length, VPC, and CRC of the packet header field and the MAC pipeline action matching table.

[0018] Optionally, the IP feature matching operation includes:

[0019] Feature matching is performed between the source IP address, destination IP address, IP protocol identifier, and IP fragmentation identifier in the packet header field and the IP pipeline action matching table.

[0020] Optionally, the UDP feature matching operation includes:

[0021] Feature matching is performed based on the source UDP port, destination UDP port, and UDP checksum in the packet header field, and then against the UDP pipeline action matching table.

[0022] Optionally, field-level anomaly detection is performed on the second business data frame, including:

[0023] The second service frame is subjected to integrity verification, and the processed second service frame is subjected to anomaly detection according to TT type and RC type.

[0024] Secondly, the present invention provides a real-time monitoring system for TTE network testing based on dynamic probes, the real-time monitoring system for TTE network testing comprising:

[0025] The data interface module is used to obtain the first service data frame from the original transmission link and copy the first service data frame to obtain the second service data frame.

[0026] The data frame decapsulation module is used to extract the header fields of the first service data frame;

[0027] The pipeline matching module is used to perform feature matching based on a preset pipeline action matching table, and update the packet header field according to the matching result; the first service data frame includes the packet header field and payload data;

[0028] The data frame encapsulation module is used to re-encapsulate the updated header field and the payload into a new first service data frame and then send it back to the original transmission link to achieve fault injection.

[0029] The anomaly detection module is used to perform field-level anomaly detection on the second business data frame, and trigger hierarchical warnings when anomalies occur, generating warning logs for reporting.

[0030] The monitoring module is used to implement real-time monitoring of TTE network testing based on the warning log and the new first service data frame.

[0031] Thirdly, the present invention provides an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

[0032] Memory, used to store computer programs;

[0033] When a processor executes a computer program stored in memory, it implements the steps described in any of the above-mentioned methods for real-time monitoring of TTE network testing based on dynamic probes.

[0034] Fourthly, the present invention provides a computer-readable storage medium storing a computer program, wherein the computer program, when executed by a processor, implements the steps described in any of the above-mentioned methods for real-time monitoring of TTE network testing based on dynamic probes.

[0035] This invention provides a real-time monitoring method for TTE network testing based on dynamic probes. It performs multi-segment feature matching using a pipeline action matching table, updates the header field of the first service data frame based on the matching results, and repackages the updated header field and payload data into a new first service data frame. This enables customizable and scalable diverse fault injection, effectively improving the diversity and scalability of test scenarios. The regular reporting of early warning logs not only facilitates timely and effective analysis of error information but also has significant implications for the long-term and efficient monitoring of large-scale TTE networks.

[0036] The present invention will now be described in further detail with reference to the accompanying drawings. Attached Figure Description

[0037] Figure 1 This is a flowchart illustrating a real-time monitoring method for TTE network testing based on dynamic probes provided in an embodiment of the present invention.

[0038] Figure 2 This is a schematic diagram of the format of the pipeline action matching rule table provided in an embodiment of the present invention;

[0039] Figure 3 This is an application diagram of the TTE network testing real-time monitoring method based on dynamic probes provided in this embodiment of the invention;

[0040] Figure 4 This is a schematic diagram of a format for reporting early warning logs provided in an embodiment of the present invention;

[0041] Figure 5 This is a schematic diagram of the structure of a TTE network test real-time monitoring system based on dynamic probes provided in an embodiment of the present invention;

[0042] Figure 6 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present invention. Detailed Implementation

[0043] The present invention will be further described in detail below with reference to specific embodiments, but the implementation of the present invention is not limited thereto.

[0044] To address the limitations of existing TTE network testing methods in providing long-term real-time monitoring and reporting of various devices in large-scale networks, as well as their inability to inject faults into existing service data and perform real-time monitoring and early warning, this invention provides a TTE network testing real-time monitoring method based on dynamic probes. (See [link to relevant documentation]). Figure 1 , Figure 1 This is a flowchart illustrating a real-time monitoring method for TTE network testing based on dynamic probes provided in an embodiment of the present invention, specifically including the following steps:

[0045] Step S101: Obtain the first service data frame from the original transmission link, and copy the first service data frame to obtain the second service data frame.

[0046] In this embodiment of the invention, the hardware board captures the service data on the original transmission link in real time to obtain the first service data frame, and accurately records the reception timestamp of each data frame. The reception timestamp is implemented and provided by the AS6802 synchronization protocol.

[0047] Then, the received first service data frame is copied to obtain the second service data frame, so that the first service data frame and the second service data frame can be processed in parallel in subsequent steps.

[0048] In this embodiment of the invention, before obtaining the first service data frame from the original transmission link, test configuration parameters sent by the host computer are received; the test configuration parameters include a pipeline action matching rule table and an error statistics table.

[0049] See Figure 2 , Figure 2 This is a schematic diagram of the format of the pipeline action matching rule table provided in this embodiment of the invention. The format of the pipeline matching table includes matching priority, matching level, matching field type, matching data, opcode, and operation data. Here, matching priority indicates the priority of the execution matching order in the pipeline; matching level indicates that rules are classified according to logical or physical levels, and matched layer by layer to optimize efficiency; matching field type indicates the data type of the data field that the rule needs to match; opcode indicates the operation to be performed after a successful rule match; matching data refers to the matched field, that is, the data content in a data packet that can be matched according to the rule; operation data indicates the data content that needs to be replaced after a successful match. For example, if the rule after matching is: replace data A with data B, then B is the operation data.

[0050] See Figure 3 , Figure 3 This is a schematic diagram illustrating the application of the real-time monitoring method for TTE network testing based on dynamic probes provided in this embodiment of the invention. Figure 3In this context, the probe refers to the TTE network testing real-time monitoring method provided in this embodiment of the invention. It can be applied between any end system device and switch device, supports testing under large-scale network conditions, and can participate in network testing and verification by default without affecting the network itself. The link between the end system device and the switch device is the original transmission link.

[0051] Step S102: After extracting the header field of the first service data frame, perform multi-segment feature matching based on the preset pipeline action matching table, and update the header field according to the matching results; the first service data frame includes the header field and payload data.

[0052] In this embodiment of the invention, the packet header field may include key information such as protocol type and source / destination address.

[0053] Specifically, the header fields may include the source MAC (Media Access Control) address, destination MAC address, frame type, frame length, VPC (Variable Payload Check) or CRC (Cyclic Redundancy Check), source IP (Internet Protocol Address), destination IP address, IP protocol identifier and IP fragmentation identifier, as well as the source UDP (User Datagram Protocol) port, destination UDP port, and UDP checksum.

[0054] In this embodiment of the invention, header fields can be extracted from the received first service data frame according to different levels, such as the source MAC address and destination MAC address at the data link layer, and the IP version number and IP checksum at the network layer. The remaining payload data is stored in a reordering buffer and awaits reassembly.

[0055] In this embodiment of the invention, the pipeline action matching table includes a MAC pipeline action matching table, an IP pipeline action matching table, and a UDP pipeline action matching table.

[0056] In one implementation, after extracting the header field of the first service data frame, multi-segment feature matching is performed based on a preset pipeline action matching table, and the header field is updated according to the matching results, including:

[0057] Extract the header fields of the first service data frame, and perform MAC feature matching, IP feature matching and / or UDP feature matching operations in sequence based on the MAC pipeline action matching table, IP pipeline action matching table and / or UDP pipeline action matching table.

[0058] In this embodiment of the invention, the header fields of the service data frame are parsed layer by layer, and the header fields are checked layer by layer to see if they match the rules in the MAC pipeline action matching table, the IP pipeline action matching table, and the UDP pipeline action matching table. After matching, a preset operation is performed, such as modification, discarding, or copying, to achieve fault injection.

[0059] The implementation methods for MAC signature matching, IP signature matching, and UDP signature matching operations will be explained below:

[0060] In this embodiment of the invention, the MAC feature matching operation includes:

[0061] Feature matching is performed based on the source MAC address, destination MAC address, frame type, frame length, VPC, CRC, and MAC pipeline action matching table in the packet header field.

[0062] For example, the header field of the first service data frame is extracted, and feature matching is performed between the destination MAC address in the header field and the MAC address list in the MAC pipeline action matching table. If the destination MAC address in the header field matches a MAC address in the MAC pipeline action matching table, the corresponding operation for that field is executed according to the opcode, such as modifying the MAC destination address. That is, the destination MAC address in the header field is modified to a specified value, such as an incorrect address, and then transmission continues. In this way, fault injection by modifying the MAC destination address is achieved, which can trigger network devices to forward based on the incorrect MAC address, simulating fault scenarios such as address errors and routing anomalies, so as to verify network fault tolerance later.

[0063] In this embodiment of the invention, the IP feature matching operation includes:

[0064] Feature matching is performed based on the source IP address, destination IP address, IP protocol identifier, and IP fragmentation identifier in the packet header field against the IP pipeline action matching table.

[0065] For example, the source IP address, destination IP address, IP protocol identifier, and IP fragmentation identifier in the packet header field are matched against the IP pipeline action matching table. If a match is found, the corresponding action is performed based on the opcode, such as discarding the header field, which directly blocks this frame and prevents its further transmission. If no match is found, transmission continues, thus enabling fault injection into IP information. Discarding the header field is equivalent to missing a frame. In a TTE network, each frame has its own sequence number, and the order of frames must be consecutive. Missing frames triggers a sequence number error.

[0066] In this embodiment of the invention, the UDP feature matching operation includes:

[0067] Feature matching is performed based on the source UDP port, destination UDP port, UDP checksum, and UDP pipeline action matching table in the packet header field.

[0068] For example, feature matching is performed based on the source UDP port, destination UDP port, UDP checksum, and UDP pipeline action matching table in the packet header field. If a match is found, the operation corresponding to that field is executed according to the opcode, such as copying. That is, the same data frame information is copied for that packet header field, and the two identical packet header fields are sent forward to realize fault injection into UDP information and to simulate the continuity of the test transmission.

[0069] Step S103: After re-encapsulating the updated header field and payload data into a new first service data frame, the data is sent back to the original transmission link to achieve fault injection.

[0070] In this embodiment of the invention, the updated packet header field and the payload information of the reordering buffer are re-encapsulated to form new data that meets the testing requirements. This new first service data frame is then transmitted back through the original transmission link, thereby achieving the injection of dynamically modified data into the network protocol. This is used to verify the processing logic, fault recovery capabilities, and transmission continuity of the device or system under abnormal data scenarios.

[0071] In this embodiment of the invention, the above-mentioned modification, copying and discarding operations can be set by technicians according to their needs. For example, they can be set to discard when the MAC destination address matches, or to modify when the source UDP port matches, thereby achieving flexible fault injection. No restrictions are imposed here.

[0072] Step S104: Perform field-level anomaly detection on the second business data frame, trigger an alert when an abnormal result occurs, and generate an alert log for reporting.

[0073] Anomaly detection includes numerical range, temporal continuity, and business logic verification.

[0074] In this embodiment of the invention, field-level anomaly detection of the second service data frame includes two-level detection of the second service data frame.

[0075] In one implementation, field-level anomaly detection is performed on the second business data frame, including:

[0076] The second service frame is subjected to integrity verification, and the processed second service frame is subjected to anomaly detection according to TT (Time-Triggered) type and RC (Rate-Constrained) type.

[0077] In this embodiment of the invention, before performing field-level anomaly detection on the second service data frame, key statistical information of the second service data frame can be extracted first, such as: frame length, VL (Virtual Link), SN (Serial Number), MAC destination address error, IP checksum error, UDP frame length error, etc.

[0078] In this embodiment of the invention, performing integrity verification on the second service frame means verifying whether the sequence of the SN in the received second service data frame conforms to the protocol specification. If it does not conform, the second service data frame is filtered out.

[0079] In this embodiment of the invention, anomaly detection is performed on the unfiltered second service frame according to its TT and RC types.

[0080] Specifically, for TT data frames, it is verified whether their arrival time is within the planned time window. If not, the arrival time is recorded; if so, the difference between the arrival time and the planned time is calculated. For RC data frames, it is used to verify whether the data frame interval within the same VL is greater than or equal to the BAG (Bandwidth Allocation Gap). If not, the arrival time is recorded; if so, the difference between the arrival time and the BAG is calculated.

[0081] In this embodiment of the invention, while generating the early warning log, multi-dimensional business statistics such as traffic and latency are performed on the compliant fields to obtain statistical information and report it.

[0082] The reporting process of warning logs and statistical information involves reading warning logs and statistical information from DDR in parallel at the configured rate through a dual-channel DMA engine, and uploading them to the host computer via the PCIE interface. The transmission process supports priority scheduling, and the reporting rate can be dynamically adjusted.

[0083] In this embodiment of the invention, when various error messages are detected, the device should report high-priority messages more quickly and comprehensively according to the previously configured CPU hierarchy information, while low-priority messages can be reported more slowly.

[0084] See Figure 4 , Figure 4This is a schematic diagram of a warning log reporting format provided by an embodiment of the present invention. The warning log reporting format includes: a packet header identifier, a port number, a receiving time point, a warning type, warning fields, and specific information, such as the difference between the reported time point and the planned time point or the difference between the reported time point and the BAG. Specifically, the packet header identifier, i.e., the packet header field, is a unique identifier located at the header of the log data packet, used to mark the log type or protocol version; the port number is the network port number used when reporting the log, identifying the service or application receiving the log; the receiving time point is the aforementioned receiving timestamp; the warning type is the classification of the warning event represented by the log, identifying the nature or severity level of the event; and the warning fields are structured data describing the key parameters or triggering conditions of the warning event.

[0085] Step S105: Real-time monitoring of TTE network testing is achieved based on the early warning log and the new first service data frame.

[0086] In this embodiment of the invention, the warning log records abnormal information in the TTE network, and the new first service data frame enables accurate multi-dimensional fault injection. The combination of the warning log and the new first service data frame is conducive to the construction of multi-dimensional test scenarios and to obtaining more realistic and comprehensive network performance data, providing a reliable basis for network optimization and error diagnosis.

[0087] In this embodiment of the invention, multi-segment feature matching is performed through a pipeline action matching table. The header field of the first service data frame is updated according to the matching result. The updated header field and payload data are then repackaged into a new first service data frame to achieve customizable and scalable diverse fault injection. This can effectively improve the diversity and scalability of test scenarios. The regular reporting of early warning logs is not only beneficial for timely and effective analysis of error information, but also of great significance for long-term and efficient monitoring of large-scale TTE networks.

[0088] Based on the same inventive concept, embodiments of the present invention also provide a system for a real-time monitoring method for TTE network testing based on dynamic probes, see [link to documentation]. Figure 5 , Figure 5 This is a schematic diagram of a real-time monitoring system for TTE network testing based on dynamic probes provided in an embodiment of the present invention. The real-time monitoring system for TTE network testing includes:

[0089] The data interface module 10 is used to obtain a first service data frame from the original transmission link and copy the first service data frame to obtain a second service data frame.

[0090] The data frame decapsulation module 30 is used to extract the header fields of the first service data frame;

[0091] The pipeline matching module is used to perform feature matching based on a preset pipeline action matching table, and update the packet header field according to the matching result; the first service data frame includes a packet header field and payload data;

[0092] The data frame encapsulation module 70 is used to re-encapsulate the updated header field and the payload data into a new first service data frame and then send it back to the original transmission link to achieve fault injection.

[0093] The anomaly detection module is used to perform field-level anomaly detection on the second business data frame, and to trigger an alert when an abnormal result occurs, and generate an alert log for reporting.

[0094] The monitoring module is used to implement a real-time monitoring method for TTE network testing based on the warning logs and the new first service data frame.

[0095] In this embodiment of the invention, multi-segment feature matching is performed through a pipeline action matching table. The header field of the first service data frame is updated according to the matching result. The updated header field and payload data are then repackaged into a new first service data frame to achieve customizable and scalable diverse fault injection. This can effectively improve the diversity and scalability of test scenarios. The regular reporting of warning logs is not only beneficial for timely and effective analysis of error information, but also of great significance for long-term and efficient monitoring of TTE networks.

[0096] Optionally, the data frame decapsulation module is used to extract the header field of the first service data frame; the pipeline matching module is specifically used to extract the header field of the first service data frame, and perform MAC feature matching operation, IP feature matching operation and / or UDP feature matching operation sequentially based on the MAC pipeline action matching table, the IP pipeline action matching table and / or the UDP pipeline action matching table.

[0097] Optionally, the pipelined matching module includes a MAC matching pipeline module 40; the MAC matching pipeline module 40 is used to perform MAC feature matching operations, including:

[0098] Feature matching is performed based on the source MAC address, destination MAC address, frame type, frame length, VPC, CRC, and MAC pipeline action matching table in the packet header field.

[0099] Optionally, the pipeline matching module includes an IP matching pipeline module 50; the IP matching pipeline module 50 is used to perform IP feature matching operations, including:

[0100] Feature matching is performed between the source IP address, destination IP address, IP protocol identifier, and IP fragmentation identifier in the packet header field and the IP pipeline action matching table.

[0101] Optionally, the pipeline matching module includes a UDP matching pipeline module 60; the UDP matching pipeline module 60 is used to perform UDP feature matching operations, including:

[0102] Feature matching is performed based on the source UDP port, destination UDP port, and UDP checksum in the packet header field, and then against the UDP pipeline action matching table.

[0103] Optionally, the anomaly detection module includes an integrity filtering module 90 and an alarm management module 100;

[0104] The integrity filtering module 90 is used to perform integrity verification processing on the second service frame.

[0105] The alarm management module 100 is used to perform anomaly detection on the processed second service frame according to the TT type and RC type.

[0106] In one implementation, the data interface module 10 is also used to convert the physical signals of the network to TTE standard format data. The data interface module may include a PHY and a MAC general IP core.

[0107] The TTE network test real-time monitoring system based on dynamic probe provided in this embodiment of the invention also includes a timestamp extraction module 20, a frame information collection module 80, an early warning information assembly module 110, a DDR dynamic partitioning module 120, a read / write control module 130, a reporting module 140, and a PCIE interface 150.

[0108] Timestamp extraction module 20: mainly responsible for performing high-precision timestamps on the received service data frames. The timestamps are implemented and provided by the AS6802 synchronization protocol.

[0109] Frame information collection module: used to extract key statistical information of data frames, such as frame length, VL, SN, MAC destination address error, IP checksum error, UDP frame length error, etc., to facilitate analysis and processing by subsequent modules.

[0110] Warning information assembly module: Used to assemble warning information into warning logs according to the error statistics table and analysis, and output them to the DDR dynamic partition module.

[0111] DDR Dynamic Partitioning Module: Used to allocate dynamically adjustable DDR storage space to the received warning logs based on the bandwidth of TT, RC, and BE data frames over a period of time.

[0112] Read / write control module: Used to write or read corresponding warning logs and statistical information into or from the storage space allocated in DDR.

[0113] Reporting module: Used to report sudden warning logs, which may include business parameters such as RC alarm management errors, MAC address errors, etc., as well as regular statistical information of normal business flow such as total number of bytes received, total number of frames received, packet loss rate, etc.

[0114] PCIe interface: Downlink is used to send data frame configuration information to the hardware board, and uplink is used to report statistical information and early warning logs to the host computer agent module.

[0115] Host computer agent module: used for communication with the host computer.

[0116] This invention also provides an electronic device, such as... Figure 6 As shown, it includes a processor 601, a communication interface 602, a memory 603, and a communication bus 604, wherein the processor 601, the communication interface 602, and the memory 603 communicate with each other through the communication bus 604.

[0117] Memory 603 is used to store computer programs;

[0118] When the processor 601 executes the program stored in the memory 603, it implements the method steps of any of the above-mentioned TTE network test real-time monitoring methods based on dynamic probes.

[0119] The communication bus mentioned in the above electronic devices can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. This communication bus can be divided into address bus, data bus, control bus, etc. For ease of representation, only one thick line is used in the diagram, but this does not indicate that there is only one bus or one type of bus.

[0120] The communication interface is used for communication between the aforementioned electronic devices and other devices.

[0121] The memory may include random access memory (RAM) or non-volatile memory (NVM), such as at least one disk storage device. Optionally, the memory may also be at least one storage device located remotely from the aforementioned processor.

[0122] The processors mentioned above can be general-purpose processors, including central processing units (CPUs), network processors (NPs), etc.; they can also be digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components.

[0123] The present invention also provides a computer-readable storage medium. A computer program is stored in the computer-readable storage medium, and when executed by a processor, the computer program implements the method steps of any of the above-described real-time monitoring methods for TTE network testing based on dynamic probes.

[0124] Optionally, the computer-readable storage medium may be non-volatile memory (NVM), such as at least one disk storage device.

[0125] Optionally, the aforementioned computer-readable storage medium may also be at least one storage device located remotely from the aforementioned processor.

[0126] In another embodiment of the present invention, a computer program product containing instructions is also provided, which, when run on a computer, causes the computer to execute the steps described in any of the above-described methods for real-time monitoring of TTE network testing based on dynamic probes.

[0127] It should be noted that the terms "first," "second," etc., are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Rather, they are merely examples of systems and methods consistent with some aspects of the invention.

[0128] In the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of the present invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Furthermore, those skilled in the art can combine and integrate the different embodiments or examples described in this specification.

[0129] Although the invention has been described herein in conjunction with various embodiments, those skilled in the art will understand and implement other variations of the disclosed embodiments by reviewing the accompanying drawings and the disclosure in carrying out the claimed invention. In the description of the invention, the word "comprising" does not exclude other components or steps, "a" or "an" does not exclude a plurality, and "a plurality" means two or more, unless otherwise explicitly specified. Furthermore, while different embodiments may describe certain measures, this does not mean that these measures cannot be combined to produce good results.

[0130] The method provided in this invention can be applied to electronic devices. Specifically, the electronic device can be a desktop computer, a portable computer, a smart mobile terminal, a server, etc. No limitation is made herein; any electronic device that can implement this invention falls within the protection scope of this invention.

[0131] For system / electronic device / storage medium embodiments, since they are basically similar to method embodiments, the description is relatively simple, and relevant parts can be referred to in the description of the method embodiments.

[0132] It should be noted that the system, electronic device and storage medium in the embodiments of the present invention are respectively the system, electronic device and storage medium applying the above-mentioned TTE network test real-time monitoring method based on dynamic probe. Therefore, all embodiments of the above-mentioned TTE network test real-time monitoring method based on dynamic probe are applicable to the system, electronic device and storage medium, and can achieve the same or similar beneficial effects.

[0133] The above description, in conjunction with specific preferred embodiments, provides a further detailed explanation of the present invention. It should not be construed that the specific implementation of the present invention is limited to these descriptions. For those skilled in the art, various simple deductions or substitutions can be made without departing from the concept of the present invention, and all such modifications and substitutions should be considered within the scope of protection of the present invention.

Claims

1. A real-time monitoring method for TTE network testing based on dynamic probes, characterized in that, The real-time monitoring method for TTE network testing includes: The first service data frame is obtained from the original transmission link, and the first service data frame is copied to obtain the second service data frame; After extracting the header field of the first service data frame, multi-segment feature matching is performed based on a preset pipeline action matching table, and the header field is updated according to the matching results; the first service data frame includes the header field and payload data; After re-encapsulating the updated header field and the payload data into a new first service data frame, it is sent back to the original transmission link to achieve fault injection. Perform field-level anomaly detection on the second business data frame, and trigger an alert when an abnormal result occurs, generate an alert log and report it; Real-time monitoring of TTE network testing is achieved based on the aforementioned warning logs and the new first service data frame.

2. The real-time monitoring method for TTE network testing according to claim 1, characterized in that, After extracting the header field of the first service data frame, multi-segment feature matching is performed based on a preset pipeline action matching table, and the header field is updated according to the matching results, including: Extract the header field of the first service data frame, and perform MAC feature matching, IP feature matching and / or UDP feature matching operations in sequence based on the MAC pipeline action matching table, IP pipeline action matching table and / or UDP pipeline action matching table.

3. The real-time monitoring method for TTE network testing according to claim 2, characterized in that, The MAC feature matching operation includes: Feature matching is performed based on the source MAC address, destination MAC address, frame type, frame length, VPC, and CRC of the packet header field and the MAC pipeline action matching table.

4. The real-time monitoring method for TTE network testing according to claim 2, characterized in that, The IP feature matching operation includes: Feature matching is performed between the source IP address, destination IP address, IP protocol identifier, and IP fragmentation identifier in the packet header field and the IP pipeline action matching table.

5. The real-time monitoring method for TTE network testing according to claim 2, characterized in that, The UDP feature matching operation includes: Feature matching is performed based on the source UDP port, destination UDP port, and UDP checksum in the packet header field, and then against the UDP pipeline action matching table.

6. The real-time monitoring method for TTE network testing according to claim 1, characterized in that, Perform field-level anomaly detection on the second business data frame, including: The second service frame is subjected to integrity verification, and the processed second service frame is subjected to anomaly detection according to TT type and RC type.

7. A real-time monitoring system for TTE network testing based on dynamic probes, characterized in that, The TTE network test real-time monitoring system includes: The data interface module is used to obtain the first service data frame from the original transmission link and copy the first service data frame to obtain the second service data frame. The data frame decapsulation module is used to extract the header fields of the first service data frame; The pipeline matching module is used to perform feature matching based on a preset pipeline action matching table, and update the packet header field according to the matching result; the first service data frame includes the packet header field and payload data; The data frame encapsulation module is used to re-encapsulate the updated header field and the payload into a new first service data frame and then send it back to the original transmission link to achieve fault injection. The anomaly detection module is used to perform field-level anomaly detection on the second business data frame, and trigger hierarchical warnings when anomalies occur, generating warning logs for reporting. The monitoring module is used to implement real-time monitoring of TTE network testing based on the warning log and the new first service data frame.

8. The TTE network test real-time monitoring system according to claim 7, characterized in that, The data frame decapsulation module is used to extract the header fields of the first service data frame; The pipeline matching module is specifically used to perform MAC feature matching, IP feature matching and / or UDP feature matching operations sequentially based on the MAC pipeline action matching table, the IP pipeline action matching table and / or the UDP pipeline action matching table.

9. An electronic device, characterized in that, It includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus; Memory, used to store computer programs; A processor, when executing a computer program stored in memory, implements the TTE network test real-time monitoring method according to any one of claims 1-6.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program, which, when executed by a processor, implements the TTE network test real-time monitoring method according to any one of claims 1-6.