A call signaling trace method and related apparatus
By obtaining and parsing the tracking identifier and message parameters in the call signaling, and combining the port sequence for path backtracking, the problem of call signaling tracing in complex network environments is solved, and the complete association of signaling data and accurate fault location are achieved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- CHINA CITIC BANK CO LTD
- Filing Date
- 2026-04-30
- Publication Date
- 2026-07-10
AI Technical Summary
In complex network environments, UUID failure can prevent the establishment of forward and backward signaling associations in call signaling scenarios such as operator border firewalls and NAT, making effective call signaling tracing impossible.
By acquiring call signaling and the tracing identifier (GTID) generated by the calling party, the association between call signaling and tracing identifier is established, message parameters are parsed, the source port sequence in the signaling interaction process is obtained, and path backtracking is performed based on this information to achieve signaling tracing.
It enables complete traceability of call signaling in complex network environments, improves the correlation of signaling data, supports signaling session path restoration in cross-domain networks and NAT scenarios, and enhances operation and maintenance efficiency and fault location accuracy.
Smart Images
Figure CN122372937A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of signaling tracing technology, and in particular to a call signaling tracing method and related apparatus. Background Technology
[0002] Currently, call signaling tracing methods primarily rely on UUID (Universally Unique Identifier) serial numbers to achieve cross-node association, enabling fast and accurate signaling tracing. However, in complex network environments, global UUID commands transmitted through cross-domain network scenarios such as carrier border firewalls and NAT (Network Address Translation) suffer from UUID invalidation, making it impossible to establish logical associations between preceding and following signaling messages, thus hindering call signaling tracing. Therefore, developing a method for tracing call signaling is essential. Summary of the Invention
[0003] In view of the above problems, this application provides a call signaling tracing method and related apparatus to trace call signaling. The specific solution is as follows:
[0004] The first aspect of this application provides a call signaling tracing method, including:
[0005] Obtain call signaling and the tracking identifier generated by the calling party, and establish the association between the call signaling and the tracking identifier;
[0006] Message parameters are obtained by parsing the call signaling;
[0007] Obtain the sequence formed by the source port during the signaling interaction process to obtain the port sequence;
[0008] Based on the association, the message parameters, and the port sequence, the call signaling session path is traced back to obtain the signaling tracing result.
[0009] One possible implementation also includes:
[0010] Obtain media logs; wherein, the media logs are logs obtained after statistical analysis of streaming media data;
[0011] The media logs and message parameters are processed to obtain the processed data;
[0012] The processed data is stored to obtain the stored data.
[0013] One possible implementation also includes:
[0014] Anomaly detection is performed on the stored data to obtain the detection results;
[0015] If the detection result indicates an anomaly, the features of the call signaling are extracted;
[0016] Based on the characteristics of the call signaling, the cause of the signaling anomaly is predicted, and the prediction result is obtained.
[0017] One possible implementation also includes:
[0018] Extract signaling interaction information at different times from the stored data, and generate a timing diagram based on the signaling interaction information at different times;
[0019] Extract target indicators from the stored data, and generate a heatmap based on the target indicators;
[0020] A topology map is generated based on the signaling tracing results;
[0021] The timing diagram, the heatmap, and the topology diagram are displayed.
[0022] In one possible implementation, the data processing of the media logs and the message parameters to obtain processed data includes:
[0023] The media logs and message parameters are cleaned to obtain cleaned data;
[0024] The cleaned data is parsed to obtain the processed data.
[0025] In one possible implementation, parsing the message parameters from the call signaling includes:
[0026] When the call signaling is encrypted, the metadata is extracted from the call signaling using a protocol signature scanning method to obtain the message parameters.
[0027] A second aspect of this application provides a call signaling tracing system, comprising:
[0028] The association module is used to obtain call signaling and the tracking identifier generated by the calling party, and to establish the association relationship between the call signaling and the tracking identifier;
[0029] The parsing module is used to parse and obtain message parameters from the call signaling;
[0030] The acquisition module is used to acquire the sequence formed by the source port during the signaling interaction process, and obtain the port sequence;
[0031] The tracing module is used to perform path backtracking on the call signaling session path based on the association, the message parameters, and the port sequence to obtain the signaling tracing result.
[0032] One possible implementation also includes:
[0033] The processing module is used to acquire media logs, which are logs obtained after statistical analysis of streaming media data. The module processes the media logs and message parameters to obtain processed data, and then stores the processed data.
[0034] One possible implementation also includes:
[0035] The prediction module is used to perform anomaly detection on the stored data and obtain the detection results; when the detection results indicate anomalies, it extracts the features of the call signaling; and based on the features of the call signaling, it predicts the cause of the signaling anomaly and obtains the prediction results.
[0036] One possible implementation also includes:
[0037] The display module is used to extract signaling interaction information at different times from the stored data, generate a time sequence diagram based on the signaling interaction information at different times, extract target indicators from the stored data, generate a heat map based on the target indicators, generate a topology diagram based on the signaling tracing results, and display the time sequence diagram, heat map, and topology diagram.
[0038] In one possible implementation, the processing module is specifically used for:
[0039] The media logs and message parameters are cleaned to obtain cleaned data; the cleaned data is then parsed to obtain processed data.
[0040] In one possible implementation, the parsing module is specifically used for:
[0041] When the call signaling is encrypted, the metadata is extracted from the call signaling using the protocol signature scanning method to obtain the message parameters.
[0042] A third aspect of this application provides a computer program product including computer-readable instructions that, when executed on an electronic device, cause the electronic device to implement the call signaling tracing method described in the first aspect or any implementation thereof.
[0043] A fourth aspect of this application provides an electronic device, including at least one processor and a memory connected to the processor, wherein:
[0044] The memory is used to store computer programs;
[0045] The processor is used to execute the computer program so that the electronic device can implement the call signaling tracing method of the first aspect or any implementation thereof.
[0046] The fifth aspect of this application provides a computer storage medium carrying one or more computer programs, which, when executed by an electronic device, enable the electronic device to implement the call signaling tracing method described in the first aspect or any implementation thereof.
[0047] By means of the above technical solution, the call signaling tracing method and related apparatus provided in this application obtain call signaling and the tracing identifier generated by the calling party, and establish the association between call signaling and tracing identifier; parse message parameters from call signaling; obtain the sequence formed by the source port during the signaling interaction process to obtain the port sequence; and perform path backtracking on the call signaling session path based on the association, message parameters and port sequence to obtain the signaling tracing result, thereby realizing the tracing of call signaling. Attached Figure Description
[0048] The above and other features, advantages, and aspects of the embodiments of this disclosure will become more apparent from the accompanying drawings and the following detailed description. Throughout the drawings, the same or similar reference numerals denote the same or similar elements. It should be understood that the drawings are schematic, and the originals and elements are not necessarily drawn to scale.
[0049] Figure 1 A flowchart of a call signaling tracing method provided in this application;
[0050] Figure 2 This application provides a flowchart of the joint association process between GTID and port sequence;
[0051] Figure 3 A structural diagram of a call signaling tracing system provided in this application;
[0052] Figure 4 A schematic diagram of the overall system architecture provided in this application;
[0053] Figure 5 This is a schematic diagram of the structure of an electronic device provided in this application. Detailed Implementation
[0054] The embodiments of this application are described below with reference to the accompanying drawings. The terminology used in the implementation section of this application is for explaining specific embodiments only and is not intended to limit the scope of this application.
[0055] The embodiments of this application will now be described with reference to the accompanying drawings. Those skilled in the art will recognize that, with technological advancements and the emergence of new scenarios, the technical solutions provided in the embodiments of this application are equally applicable to similar technical problems.
[0056] The terms "first," "second," etc., used in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such terms are interchangeable where appropriate; this is merely a way of distinguishing objects with the same attributes in the embodiments of this application. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion, so that a process, method, system, product, or apparatus that comprises a series of elements is not necessarily limited to those elements, but may include other elements not explicitly listed or inherent to those processes, methods, products, or apparatuses.
[0057] Reference Figure 1 , Figure 1 This is a flowchart illustrating a call signaling tracing method provided in an embodiment of this application, such as... Figure 1 As shown in the embodiment of this application, a call signaling tracing method may include steps 101 to 103, which are described in detail below.
[0058] Step 101: Obtain the call signaling and the tracking identifier generated by the caller, and establish the association between the call signaling and the tracking identifier.
[0059] The call signaling can be SIP (Session Initiation Protocol) call signaling. SIP call signaling data sources include terminal layer data sources, network layer data sources, and service layer data sources.
[0060] Terminal-layer data sources include hardware terminals and software terminals. Hardware terminals include mobile phones and telephones. Software terminals include client phones, such as desktop SIP softphones and browsers.
[0061] Network layer data sources include SBC (Session Border Controller), IVR (Interactive Voice Response), and signaling relay nodes such as WETALK. The SBC sits between the softswitch controlling VoIP (Voice over Internet Protocol) services and the public network, addressing issues such as SIP public network security. IVR is an automated service technology based on the telephone network, interacting with users through multi-level menu navigation, voice recognition, or keypad input to provide self-service, information inquiry, and service transfer functions. WETALK is a telephone softswitch platform that supports real-time audio and video communication and conferencing, and supports multiple communication protocols such as SIP and WebRTC.
[0062] The service layer data source includes business logic processing nodes such as media servers, registration and routing servers, and business application servers.
[0063] The trace identifier generated by the calling party can be a GTID (Global Trace ID), which establishes an association between call signaling and the trace identifier to facilitate signaling tracing.
[0064] GTIDs can be generated at the call initiator. For TLS (Transport Layer Security) encryption scenarios, GTIDs are injected at the TLS handshake layer (ClientHello phase), and the generated GTID format conforms to the RFC-8446 extension specification. For plaintext SIP scenarios, GTIDs are embedded in the INVITE request initiated by signaling, and the generated GTID format conforms to the RFC-3261 extension specification.
[0065] Step 102: Parse the message parameters from the call signaling.
[0066] The message parameters may include the call identifier (Call-ID), command sequence number (Cesq), and path header (Via header), etc.
[0067] In one possible implementation, message parameters are parsed from the call signaling, including:
[0068] When the call signaling is encrypted, the metadata is extracted from the call signaling using the protocol signature scanning method to obtain the message parameters.
[0069] Furthermore, when the call signaling is encrypted, protocol signature scanning technology can be used to extract metadata from the encrypted SIP signaling to obtain message parameters such as Call-ID, Cesq, and Via headers.
[0070] Step 103: Obtain the sequence formed by the source port during the signaling interaction process to obtain the port sequence.
[0071] The port sequence is the source port sequence of consecutive signaling packets in a session. By jointly associating GTID and port sequence, the complete restoration of the SIP signaling session path can be achieved in cross-domain networks and NAT (Network Address Translation) scenarios, improving the correlation of SIP signaling data in complex network environments such as 5G.
[0072] Step 104: Based on the association, message parameters and port sequence, perform path backtracking on the call signaling session path to obtain the signaling tracing result.
[0073] The workflow for jointly associating GTID and port sequence is as follows: Figure 2 As shown. The user terminal sends an INVITE request to the border SBC. The border SBC returns interactive signaling to the user terminal. After detecting the TLS ClientHello, the border SBC implants a GTID into the TLS ClientHello. The border SBC forwards the INVITE request with the GTID to the SBC / IVR / WETALK. The SBC / IVR / WETALK returns interactive signaling to the border SBC. The SBC / IVR / WETALK records the port sequence, and multiple SBC / IVR / WETALKs exchange SIP signaling data. The GTID and port sequence are sent to the full path backtracking system. The full path backtracking system performs signaling diagnosis and analysis based on the GTID and port sequence, constructs a full path virtual topology, and can also display multi-dimensional visualizations such as timing diagrams, topology diagrams, and QoS heatmaps in the visualization interface Dashboard.
[0074] In one possible implementation, the call signaling tracing method provided in this application further includes:
[0075] Obtain media logs; where media logs are logs obtained after statistical analysis of streaming media data.
[0076] The media logs and message parameters are processed to obtain the processed data.
[0077] The processed data is stored to obtain the stored data.
[0078] After each media stream is completed, statistical information can be collected from the media stream data to obtain media logs. The media logs are RTP media logs (Real-time Transport Protocol MediaLogs) generated from the collected signaling data sources, and real-time data transmission is performed.
[0079] Optionally, the media logs and message parameters are processed to obtain the processed data, including:
[0080] Perform data cleaning on media logs and message parameters to obtain cleaned data;
[0081] The cleaned data is parsed to obtain the processed data.
[0082] The system can perform data cleaning and parsing on media logs and message parameters, and finally store the signaling data in a big data real-time storage platform.
[0083] In one possible implementation, the call signaling tracing method provided in this application further includes:
[0084] Extract signaling interaction information at different times from the stored data, and generate a timing diagram based on the signaling interaction information at different times;
[0085] Extract target metrics from stored data and generate heatmaps based on those metrics;
[0086] Generate a topology map based on signaling tracing results;
[0087] Display time series diagrams, heatmaps, and topology diagrams.
[0088] A multi-dimensional visualized SIP signaling end-to-end view can include timing diagrams, topology diagrams, and QoS heatmaps. Timing diagrams are generated based on signaling interaction information at different times, specifically displaying the SIP signaling transaction status interactions of different nodes along a timeline. Topology diagrams are generated based on signaling tracing results, dynamically rendering the transmission paths of traffic across multiple network topology nodes. QoS heatmaps map RTP media stream packet loss rate, return codes, and other metrics; clicking on marked abnormal nodes returns the associated QoS-related metrics for the corresponding media stream. Artificial intelligence can be combined for intelligent diagnosis, intelligent analysis, and intelligent alarms across all fault scenarios.
[0089] In one possible implementation, the call signaling tracing method provided in this application further includes:
[0090] Perform anomaly detection on the stored data and obtain the detection results;
[0091] When the detection results indicate anomalies, features of the call signaling are extracted.
[0092] Based on the characteristics of call signaling, the cause of signaling anomalies is predicted, and the prediction results are obtained.
[0093] When predicting the causes of signaling anomalies, an LSTM (Long Short-Term Memory) and Attention neural network can be constructed. By inputting features such as SIP response code sequence, adjacent node delay matrix and media stream jitter rate, the cause of signaling anomalies can be predicted. The prediction results can include SBC overload, firewall interception, routing configuration errors, etc. It can also output processing suggestions, upgrading fault location from "manual guessing" to "AI precise location", thus improving operation and maintenance efficiency.
[0094] This application obtains call signaling and the tracing identifier generated by the calling party, establishes the association between call signaling and the tracing identifier, parses message parameters from the call signaling, obtains the sequence formed by the source port during the signaling interaction, obtains the port sequence, and performs path backtracking on the call signaling session path based on the association, message parameters and port sequence to obtain the signaling tracing result, thus realizing the tracing of call signaling.
[0095] The above describes a call signaling tracing method provided by the embodiments of this application. The following will describe the system for implementing the above call signaling tracing method.
[0096] Please see Figure 3 , Figure 3 This is a schematic diagram of a call signaling tracing system provided in an embodiment of this application. Figure 3 As shown, the call signaling tracing system includes:
[0097] The association module 301 is used to obtain the call signaling and the tracking identifier generated by the caller, and to establish the association between the call signaling and the tracking identifier.
[0098] The parsing module 302 is used to parse and obtain message parameters from the call signaling.
[0099] The acquisition module 303 is used to acquire the sequence formed by the source port during the signaling interaction process, and obtain the port sequence.
[0100] The tracing module 304 is used to trace the path of the call signaling session based on the association, message parameters and port sequence to obtain the signaling tracing result.
[0101] In one possible implementation, the call signaling tracing system provided in this application further includes:
[0102] The processing module is used to acquire media logs, which are logs obtained after statistical analysis of streaming media data. The module processes the media logs and message parameters to obtain processed data, and then stores the processed data.
[0103] In one possible implementation, the call signaling tracing system provided in this application further includes:
[0104] The prediction module is used to perform anomaly detection on the stored data and obtain the detection results; when the detection results indicate anomalies, it extracts the features of the call signaling; and based on the features of the call signaling, it predicts the cause of the signaling anomaly and obtains the prediction results.
[0105] In one possible implementation, the call signaling tracing system provided in this application further includes:
[0106] The display module is used to extract signaling interaction information at different times from the stored data, generate a time sequence diagram based on the signaling interaction information at different times, extract target indicators from the stored data, generate a heat map based on the target indicators, generate a topology diagram based on the signaling tracing results, and display the time sequence diagram, heat map, and topology diagram.
[0107] In one possible implementation, the processing module is specifically used for:
[0108] The media logs and message parameters are cleaned to obtain cleaned data; the cleaned data is then parsed to obtain processed data.
[0109] In one possible implementation, parsing module 302 is specifically used for:
[0110] When the call signaling is encrypted, the metadata is extracted from the call signaling using the protocol signature scanning method to obtain the message parameters.
[0111] The call signaling tracing system provided in this application adopts a layered architecture design, dividing the system into multiple independent layers according to functional responsibilities. Each layer focuses on a specific function, and the layers cooperate with each other to achieve the overall function of the system. The system mainly includes a SIP signaling data source layer, a SIP signaling data tagging and acquisition layer, a SIP signaling data processing layer, and a SIP signaling data application layer. The overall system architecture is as follows: Figure 4 As shown.
[0112] The SIP signaling data source layer is the origin of SIP signaling data, mainly including hardware phones, browser phones, and SBC, IVR, and WETALK clusters. The SIP signaling data marking and acquisition layer mainly includes a signaling coloring and tracing module, a SIP signaling acquisition module, and an RTP media log acquisition module. The signaling coloring and tracing module is responsible for coloring the signaling data source with GTIDs and extracting metadata from the TLS encrypted signaling through a lightweight TLS metadata intelligent extraction module integrated on the network node side of the signaling data source. It uses protocol signature scanning technology to extract key metadata messages from the encrypted SIP signaling and finally collects SIP signaling data and RTP media quality indicators from each data source network node through a distributed probe cluster. The SIP signaling acquisition module is responsible for collecting SIP signaling data; the RTP media log acquisition module is responsible for collecting RTP media logs. The SIP signaling data processing layer combines a big data stream processing platform, big data cleaning, and big data storage to perform data transmission, data cleaning and parsing, and data storage on the SIP signaling data collected from different network topology nodes. The SIP signaling data application layer uses AI-related technologies to intelligently predict, diagnose, and analyze abnormal call information, and output processing suggestions. At the same time, it generates a multi-dimensional visualized full-link view of SIP signaling that includes time sequence diagrams, topology diagrams, and QoS heatmaps.
[0113] The system deployment architecture can include two dimensions: SIP call signaling and RTP media logs. It manages the entire lifecycle of SIP call signaling and RTP media logs, from data generation, collection, processing, storage, and application. It automates analysis, maintenance, and monitoring of call quality and system operating status, facilitating rapid fault location, timely understanding of business operations, and ensuring system availability and reliability. By integrating RTP intelligent engines and SIP intelligent engines with metadata extraction modules on the SBC, IVR, and WETALK cluster sides, the RTP intelligent engine extracts RTP media logs, and the SIP intelligent engine extracts SIP signaling data. It supports metadata extraction from TLS encrypted signaling, extracting key metadata messages from encrypted SIP signaling through protocol signature scanning technology. Finally, the SIP signaling acquisition module and RTP media log acquisition module collect SIP signaling data and RTP media logs from various data source network nodes and transmit the collected SIP signaling data and RTP media logs to the signaling media transmission module. The signaling media cleaning and parsing module consumes and subscribes to SIP signaling data and RTP media logs from the signaling media transmission module. It then cleans, parses, and outputs the subscribed data according to specific rules to ensure it conforms to subsequent application specifications. The cleaned and parsed data is stored in the signaling media storage module. The multi-dimensional visualization module performs full-path backtracking on the real-time collected SIP signaling data using time-series diagrams, topology diagrams, and QoS heatmaps, and displays the data on a web dashboard. The intelligent analysis module combines artificial intelligence to perform intelligent prediction, intelligent diagnosis, and intelligent analysis of SIP signaling and media log data, providing real-time alerts for system and call anomalies and outputting handling suggestions.
[0114] This application can improve the security level of intelligent cloud contact centers by integrating a lightweight TLS metadata intelligent extraction module on the call transmission node side and using protocol signature scanning technology to extract metadata from encrypted SIP signaling, thereby enhancing the security level of intelligent cloud contact centers in finance and government sectors. It can also improve the correlation of signaling data in cross-domain NAT scenarios: through GTID + port sequence joint correlation technology, it can achieve complete restoration of SIP signaling session paths in cross-domain networks and NAT scenarios, improving the correlation of SIP signaling data in complex network environments such as 5G. Furthermore, it achieves intelligent fault root cause prediction and alarm, combining AI artificial intelligence technology to realize fault root cause prediction and alarm across the entire call chain of intelligent cloud contact centers, upgrading fault location from "manual guessing" to "AI precise location," significantly improving operational efficiency. It also built a digital operation and maintenance decision center, which realizes a closed loop of "fault discovery-location-resolution" by constructing a multi-dimensional visualized signaling full-link intelligent linkage mechanism with time sequence diagrams, topology diagrams and QoS heat maps, improves the visualization rendering of complex call paths to the second level, and shortens the mean time to repair (MTTR) to the minute level.
[0115] This application also provides an electronic device in its embodiments. (See reference...) Figure 5 The diagram illustrates a structural schematic suitable for implementing the electronic device in the embodiments of this application. The electronic device in the embodiments of this application may include, but is not limited to, fixed terminals such as mobile phones, laptops, PDAs (personal digital assistants), PADs (tablet computers), desktop computers, etc. Figure 5 The electronic device shown is merely an example and should not impose any limitation on the functionality and scope of use of the embodiments of this application.
[0116] like Figure 5 As shown, the electronic device may include a processing unit (e.g., a central processing unit, a graphics processing unit, etc.) 501, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 502 or a program loaded from a storage device 508 into a random access memory (RAM) 503. When the electronic device is powered on, the RAM 503 also stores various programs and data required for the operation of the electronic device. The processing unit 501, ROM 502, and RAM 503 are interconnected via a bus 504. An input / output (I / O) interface 505 is also connected to the bus 504.
[0117] Typically, the following devices can be connected to I / O interface 505: input devices 506 including, for example, touchscreens, touchpads, keyboards, mice, cameras, microphones, accelerometers, gyroscopes, etc.; output devices 507 including, for example, liquid crystal displays (LCDs), speakers, vibrators, etc.; storage devices 508 including, for example, memory cards, hard drives, etc.; and communication devices 509. Communication device 509 allows electronic devices to communicate wirelessly or wiredly with other devices to exchange data. Although Figure 5 Electronic devices with various devices are shown, but it should be understood that it is not required to implement or have all of the devices shown. More or fewer devices may be implemented or have alternatively.
[0118] This application also provides a computer program product including computer-readable instructions, which, when executed on an electronic device, cause the electronic device to implement any of the call signaling tracing methods provided in this application.
[0119] This application also provides a computer-readable storage medium that carries one or more computer programs. When the one or more computer programs are executed by an electronic device, the electronic device can implement any of the call signaling tracing methods provided in this application.
[0120] It should also be noted that the device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. In addition, in the device embodiment drawings provided in this application, the connection relationship between modules indicates that they have a communication connection, which can be implemented as one or more communication buses or signal lines.
[0121] Through the above description of the embodiments, those skilled in the art can clearly understand that this application can be implemented by means of software plus necessary general-purpose hardware, or it can be implemented by special-purpose hardware including application-specific integrated circuits, special-purpose CPUs, special-purpose memory, special-purpose components, etc. Generally, any function performed by a computer program can be easily implemented by corresponding hardware, and the specific hardware structure used to implement the same function can also be diverse, such as analog circuits, digital circuits, or special-purpose circuits. However, for this application, software program implementation is more often the preferred implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a readable storage medium, such as a computer floppy disk, USB flash drive, mobile hard disk, ROM, RAM, magnetic disk, or optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, training equipment, or network device, etc.) to execute the methods described in the various embodiments of this application.
[0122] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product.
[0123] The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions may be transmitted from one website, computer, training device, or data center to another website, computer, training device, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium may be any available medium that a computer can store or a data storage device such as a training device or data center that integrates one or more available media. The available media may be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., DVDs), or semiconductor media (e.g., solid-state drives (SSDs)).
Claims
1. A method for tracing call signaling, characterized in that, include: Obtain call signaling and the tracking identifier generated by the calling party, and establish the association between the call signaling and the tracking identifier; Message parameters are obtained by parsing the call signaling; Obtain the sequence formed by the source port during the signaling interaction process to obtain the port sequence; Based on the association, the message parameters, and the port sequence, the call signaling session path is traced back to obtain the signaling tracing result.
2. The call signaling tracing method according to claim 1, characterized in that, Also includes: Obtain media logs; wherein, the media logs are logs obtained after statistical analysis of streaming media data; The media logs and message parameters are processed to obtain the processed data; The processed data is stored to obtain the stored data.
3. The call signaling tracing method according to claim 2, characterized in that, Also includes: Anomaly detection is performed on the stored data to obtain the detection results; If the detection result indicates an anomaly, the features of the call signaling are extracted; Based on the characteristics of the call signaling, the cause of the signaling anomaly is predicted, and the prediction result is obtained.
4. The call signaling tracing method according to claim 2, characterized in that, Also includes: Extract signaling interaction information at different times from the stored data, and generate a timing diagram based on the signaling interaction information at different times; Extract target indicators from the stored data, and generate a heatmap based on the target indicators; A topology map is generated based on the signaling tracing results; The timing diagram, the heatmap, and the topology diagram are displayed.
5. The call signaling tracing method according to claim 2, characterized in that, The process of processing the media logs and message parameters to obtain processed data includes: The media logs and message parameters are cleaned to obtain cleaned data; The cleaned data is parsed to obtain the processed data.
6. The call signaling tracing method according to any one of claims 1 to 4, characterized in that, The step of parsing message parameters from the call signaling includes: When the call signaling is encrypted, the metadata is extracted from the call signaling using a protocol signature scanning method to obtain the message parameters.
7. A call signaling tracing system, characterized in that, include: The association module is used to obtain call signaling and the tracking identifier generated by the calling party, and to establish the association relationship between the call signaling and the tracking identifier; The parsing module is used to parse and obtain message parameters from the call signaling; The acquisition module is used to acquire the sequence formed by the source port during the signaling interaction process, and obtain the port sequence; The tracing module is used to perform path backtracking on the call signaling session path based on the association, the message parameters, and the port sequence to obtain the signaling tracing result.
8. A computer program product, characterized in that, Includes computer-readable instructions that, when executed on an electronic device, cause the electronic device to implement the call signaling tracing method as described in any one of claims 1 to 6.
9. An electronic device, characterized in that, It includes at least one processor and a memory connected to the processor, wherein: The memory is used to store computer programs; The processor is used to execute the computer program to enable the electronic device to implement the call signaling tracing method as described in any one of claims 1 to 6.
10. A computer storage medium, characterized in that, The storage medium carries one or more computer programs that, when executed by an electronic device, enable the electronic device to implement the call signaling tracing method as described in any one of claims 1 to 6.