8 results about "Raw socket" patented technology

The invention discloses an internet-of-things multi-device intelligent tunnel security penetration interconnection system and an internet-of-things multi-device intelligent tunnel security penetration interconnection method. The system comprises a management end, an equipment end and a cloud end. The management end integrates an intelligent connection management layer, an efficient data plane engine, a unified business operation layer and a dynamic strategy and control center. The intelligent connection management layer dynamically selects an optimal tunnel link through a pluggable protocol framework; the efficient data plane engine intelligently switches multiple modes such as an original socket, libpcap and the like to perform high-performance data capture and filtration according to authority and requirements; the unified service operation layer deeply integrates operation and maintenance tools such as an embedded Web browser and an SSH terminal into a single interface; and the dynamic policy center can issue network rules in real time. According to the method, high-reliability and low-delay tunnel connection in a complex network environment is realized, refined flow control is driven based on service intention, and functions of network penetration, state monitoring, configuration maintenance and the like are seamlessly fused.

The invention provides a network performance test method, a message interception method, equipment and a medium, and the network performance test method comprises the steps: constructing a test message based on a TCP protocol through an original socket; and sending the test message to a server so as to test the network performance of a network transmission link between the client and an interception device, the interception device being located at any position in the network transmission link between the client and the server, and the interception device being located at any position in the network transmission link between the client and the server. The interception device is configured with a first forwarding rule and a second forwarding rule, the first forwarding rule is used for intercepting the test message with the TCP flag bit containing the PSH, and the second forwarding rule is used for forwarding the test message with the TCP flag bit not containing the PSH to the server.

The invention provides a WAN interface detection method and device, electronic equipment and a readable storage medium. The method is applied to a target router, and comprises the following steps: in response to monitoring that first equipment is connected to a target to-be-detected interface, binding a first original socket with the target to-be-detected interface, and sending a generated target detection message to the target to-be-detected interface based on the first original socket, the target detection message is used for indicating first interface information of a target to-be-detected interface, and different to-be-detected interfaces correspond to different interface information; broadcasting the target detection message through a target to-be-detected interface, and when a first device connected with the target to-be-detected interface is a target device supporting a detection protocol, indicating the target device to generate a target response message by the target detection message; and in response to the received target response message, taking the target to-be-detected interface as the WAN interface. According to the method, the WAN interface can be efficiently determined.

A network device with wireless access point capabilities selectively captures PDUs detected on an instrumented interface(s) to capture those of one or more types / subtypes “of interest.” PDU types / subtypes that network device interface(s) has been instrumented to treat as “of interest” include those transmitted during a device's initial network activity during startup or attempted establishment of a wireless network connection. The interface(s) instrumented for targeted PDU capture can include wireless and / or wired (e.g., Ethernet) interfaces that are received on raw sockets so that each header type of a captured PDU is written to the PDU capture file. Prior to upload of a PDU capture file to a system from which it can be retrieved for analysis, the network device adds network metadata to the file based on context of the environment in which the network device operates. The network metadata can include IP address and / or network topology information determined at runtime.

The embodiment of the present application provides a kind of multipath TCP gateway and data forwarding method, its technical scheme includes: through the raw socket of gateway operating system kernel state, IP packet is received from the network of both sides of the gateway;Through the tunnel application module of gateway operating system user state, the generation or analysis of multipath TCP is realized according to the IP packet, so as to realize the data forwarding between the network that does not support multipath TCP protocol and the network that supports multipath TCP protocol.The technical scheme of the embodiment of the present application realizes multipath TCP protocol in the user state of gateway operating system, so as to realize multipath TCP without modifying the core state on the gateway that the core state does not support multipath TCP protocol, and low cost.

This invention discloses a non-network layer-based communication system and method. The system includes a Layer 2 switch supporting Layer 2 forwarding capabilities, a first intranet machine, a second intranet machine, a first extranet machine, and a second extranet machine. Both the first and second intranet machines are connected to the Layer 2 switch via MAC interfaces. The first and second extranet machines are connected via an IP network. The first extranet machine connects to the first intranet machine via a MAC interface, and the second extranet machine connects to the second intranet machine via a MAC interface. In this invention, data between hosts in the intranet environment and between hosts in the intranet and extranet environments are processed using RAW Sockets combined with a custom data structure. This eliminates the need for network layer protocol forwarding, preventing the risk of network layer communication information leakage. Furthermore, the custom data structure allows users to define their own data filtering rules, increasing customization to adapt to different business or scenario operational requirements.

The present application relates to the field of network management technology, and in particular to a device online method, apparatus, and related equipment. The method is applied to a network management device, the network management device being configured with a management address pool and device startup files configured for various types of devices, and the network management device being interconnected with the device to be online on a Layer 2 network; the method comprising: receiving a raw socket broadcast message carrying an online request sent by the device to be online; allocating a management IP address to the device to be online from the management address pool; and sending a raw socket response message to the device to be online, wherein the raw socket response message carries the management IP address and the IP address of the network management device, so that the device to be online establishes an IP communication connection with the network management device based on the management IP address and the IP address of the network management device, obtains the device startup file based on the IP communication connection, and performs a device online operation based on the device startup file.

The invention relates to the technical field of information, in particular to a method, a device and equipment for acquiring DHCP (Dynamic Host Configuration Protocol) information based on a PON (Passive Optical Network) router and a medium, and the method for acquiring the DHCP information can also be applied to fiber to room (Fiber To Room, FTTR), enterprise-level fiber to room (Fiber To Room-Bus, FTTR-B) and broadband fusion terminal products. The router in the application obtains an original data packet through a pre-created original socket and a preset target filter in a bridge mode, and obtains a target data packet of which a source port number is a target port number from the original data packet, thereby analyzing DHCP information of the terminal device from the target data packet, and sending the DHCP information to the terminal device. And the creation of the original socket and the setting of the target filter can be realized in an application layer of the router, and related function codes do not need to be realized in a kernel bottom layer module, so that compared with the prior art, the method provided by the invention can achieve the purpose of improving the security of the router.