17 results about "Raw socket" patented technology

The invention discloses an internet-of-things multi-device intelligent tunnel security penetration interconnection system and an internet-of-things multi-device intelligent tunnel security penetration interconnection method. The system comprises a management end, an equipment end and a cloud end. The management end integrates an intelligent connection management layer, an efficient data plane engine, a unified business operation layer and a dynamic strategy and control center. The intelligent connection management layer dynamically selects an optimal tunnel link through a pluggable protocol framework; the efficient data plane engine intelligently switches multiple modes such as an original socket, libpcap and the like to perform high-performance data capture and filtration according to authority and requirements; the unified service operation layer deeply integrates operation and maintenance tools such as an embedded Web browser and an SSH terminal into a single interface; and the dynamic policy center can issue network rules in real time. According to the method, high-reliability and low-delay tunnel connection in a complex network environment is realized, refined flow control is driven based on service intention, and functions of network penetration, state monitoring, configuration maintenance and the like are seamlessly fused.

The invention provides a network performance test method, a message interception method, equipment and a medium, and the network performance test method comprises the steps: constructing a test message based on a TCP protocol through an original socket; and sending the test message to a server so as to test the network performance of a network transmission link between the client and an interception device, the interception device being located at any position in the network transmission link between the client and the server, and the interception device being located at any position in the network transmission link between the client and the server. The interception device is configured with a first forwarding rule and a second forwarding rule, the first forwarding rule is used for intercepting the test message with the TCP flag bit containing the PSH, and the second forwarding rule is used for forwarding the test message with the TCP flag bit not containing the PSH to the server.

Embodiments of the invention provide a data processing method and apparatus, and a computing device, which can normally use an EtherCAT master station protocol stack on an operating system running a lightweight protocol stack, and improve the application range of the EtherCAT master station protocol stack. Specifically, the processor obtains a first message of a second protocol stack through a target socket, then obtains an EtherCAT protocol frame in the first message through the first protocol stack according to the first message, and sends the EtherCAT protocol frame through the first protocol stack. It can be understood that the first protocol stack in the processor can process the message of the second protocol stack and send the EtherCAT protocol frame provided by the second protocol stack, for example, the EtherCAT protocol frame is sent to a network card supporting an original socket, so that the EtherCAT protocol frame is sent to the EtherCAT slave station equipment through the network card.

The invention provides a WAN interface detection method and device, electronic equipment and a readable storage medium. The method is applied to a target router, and comprises the following steps: in response to monitoring that first equipment is connected to a target to-be-detected interface, binding a first original socket with the target to-be-detected interface, and sending a generated target detection message to the target to-be-detected interface based on the first original socket, the target detection message is used for indicating first interface information of a target to-be-detected interface, and different to-be-detected interfaces correspond to different interface information; broadcasting the target detection message through a target to-be-detected interface, and when a first device connected with the target to-be-detected interface is a target device supporting a detection protocol, indicating the target device to generate a target response message by the target detection message; and in response to the received target response message, taking the target to-be-detected interface as the WAN interface. According to the method, the WAN interface can be efficiently determined.

The invention discloses a simulation system and device based on virtualized Ethernet cards, the system comprises N virtualized Ethernet cards vEth and N preset containers, and N is a positive integer; the vEth comprises a communication driving program layer, and the communication driving program layer is used for sending and receiving an Ethernet message through a Raw Socket between an application program and underlying hardware; the preset containers are used for running vEth in the containers based on an application container engine Docker, each preset container corresponds to one vEth, the preset containers are isolated from an external network through a network bridge of the Docker, and the multiple preset containers are connected through the network bridge of the Docker. In the vEth Driver, the raw Socket is created, so that the direct sending and receiving of the Ethernet message are realized.

The invention relates to the technical field of fiber to the room (FTTR) networking, is applied to fiber to the room (FTTR), enterprise-level fiber to the room (Fiber To the Room-Bus) and broadband fusion terminal products, and particularly relates to a wired ad hoc network method, device and equipment based on the FTTR and a medium. Visibly, the original socket based on the data link layer is created and bound to the network interface in the network equipment, the preset thread is started to monitor each network data packet passing through the original socket, the target data packet is filtered out from each network data packet by using the preset target filtering rule, and the target data packet is filtered out by using the target filtering rule. According to the embodiment of the invention, port detection is carried out on the target data packet, and then the host and slave identities of each network device are determined according to the connection condition of the LAN interface and the WAN interface of the network device and the receiving condition of the LAN interface and the WAN interface about a plurality of target types of message data, so that role selection errors during networking are avoided; therefore, wired networking can be completed quickly and accurately, and the user networking experience is improved.

A network device with wireless access point capabilities selectively captures PDUs detected on an instrumented interface(s) to capture those of one or more types / subtypes “of interest.” PDU types / subtypes that network device interface(s) has been instrumented to treat as “of interest” include those transmitted during a device's initial network activity during startup or attempted establishment of a wireless network connection. The interface(s) instrumented for targeted PDU capture can include wireless and / or wired (e.g., Ethernet) interfaces that are received on raw sockets so that each header type of a captured PDU is written to the PDU capture file. Prior to upload of a PDU capture file to a system from which it can be retrieved for analysis, the network device adds network metadata to the file based on context of the environment in which the network device operates. The network metadata can include IP address and / or network topology information determined at runtime.

The invention discloses a real-time simulation test method for a large-scale extensible networking protocol, which comprises the following steps of: S1, writing a pipe program, connecting a Docker container with a Ubuntu system through an original socket, receiving and sending a packet through a socket, connecting the Ubuntu system with an Exata system, and constructing a large-scale extensible networking, simulation routing switching and real-time simulation testing method. The conditions of data packet transceiving interruption, time delay and packet loss during routing interruption and reconnection; s2, a plurality of virtual network nodes are constructed by utilizing a Docker container, and the nodes have independent protocol stacks and can be added into an Exata simulation environment as independently running Exata nodes, so that real-time simulation testing of a large-scale networking protocol is realized; and S3, real-time testing is carried out on the large-scale expandable networking by observing data packet receiving and transmitting interruption, time delay and packet loss conditions among the Docker containers. According to the method, the real-time simulation test of the large-scale expandable networking protocol can be completed, and the real-time performance, the accuracy and the confidence coefficient are effectively improved.

The embodiment of the present application provides a kind of multipath TCP gateway and data forwarding method, its technical scheme includes: through the raw socket of gateway operating system kernel state, IP packet is received from the network of both sides of the gateway;Through the tunnel application module of gateway operating system user state, the generation or analysis of multipath TCP is realized according to the IP packet, so as to realize the data forwarding between the network that does not support multipath TCP protocol and the network that supports multipath TCP protocol.The technical scheme of the embodiment of the present application realizes multipath TCP protocol in the user state of gateway operating system, so as to realize multipath TCP without modifying the core state on the gateway that the core state does not support multipath TCP protocol, and low cost.

This invention discloses a non-network layer-based communication system and method. The system includes a Layer 2 switch supporting Layer 2 forwarding capabilities, a first intranet machine, a second intranet machine, a first extranet machine, and a second extranet machine. Both the first and second intranet machines are connected to the Layer 2 switch via MAC interfaces. The first and second extranet machines are connected via an IP network. The first extranet machine connects to the first intranet machine via a MAC interface, and the second extranet machine connects to the second intranet machine via a MAC interface. In this invention, data between hosts in the intranet environment and between hosts in the intranet and extranet environments are processed using RAW Sockets combined with a custom data structure. This eliminates the need for network layer protocol forwarding, preventing the risk of network layer communication information leakage. Furthermore, the custom data structure allows users to define their own data filtering rules, increasing customization to adapt to different business or scenario operational requirements.

The invention provides a high-frequency network detection method and device, electronic equipment and a readable storage medium, and relates to the technical field of artificial intelligence such as big data, cloud services, the Internet of Things and cloud computing. The high-frequency network detection method applied to a source detection node comprises the following steps: taking a result of multiplying a target link number between the source detection node and a target detection node by a preset numerical value as a target numerical value; creating an original socket, and constructing a plurality of detection request packets according to the target numerical value; sending the plurality of detection request packets to a target detection node through the original sockets; receiving a detection return packet sent by the target detection node through the original socket; and obtaining the network connection state according to the plurality of detection request packets and the detection return packets. The high-frequency network detection method applied to a target detection node comprises the following steps: receiving a detection request packet sent by a source detection node; and obtaining a detection return packet according to the detection request packet, and sending the detection return packet to the source detection node.

The present application relates to the field of network management technology, and in particular to a device online method, apparatus, and related equipment. The method is applied to a network management device, the network management device being configured with a management address pool and device startup files configured for various types of devices, and the network management device being interconnected with the device to be online on a Layer 2 network; the method comprising: receiving a raw socket broadcast message carrying an online request sent by the device to be online; allocating a management IP address to the device to be online from the management address pool; and sending a raw socket response message to the device to be online, wherein the raw socket response message carries the management IP address and the IP address of the network management device, so that the device to be online establishes an IP communication connection with the network management device based on the management IP address and the IP address of the network management device, obtains the device startup file based on the IP communication connection, and performs a device online operation based on the device startup file.

The invention discloses a data service performance evaluation method, a storage medium and computer equipment. The data service performance evaluation method comprises the following steps: S10, copying a data packet received by a local machine to an original socket program; s20, filtering the data packet through an original socket program to obtain a transmission control protocol data packet; s30, analyzing the parameter information of the transmission control protocol data packet through the original socket program and analyzing the transmission control protocol data packet; and S40, calculating record data of the transmission control protocol data packet through the original socket program and outputting performance data. Through the mode, the efficiency and the accuracy of the network data service performance test method can be effectively improved.

The invention relates to the technical field of information, in particular to a method, a device and equipment for acquiring DHCP (Dynamic Host Configuration Protocol) information based on a PON (Passive Optical Network) router and a medium, and the method for acquiring the DHCP information can also be applied to fiber to room (Fiber To Room, FTTR), enterprise-level fiber to room (Fiber To Room-Bus, FTTR-B) and broadband fusion terminal products. The router in the application obtains an original data packet through a pre-created original socket and a preset target filter in a bridge mode, and obtains a target data packet of which a source port number is a target port number from the original data packet, thereby analyzing DHCP information of the terminal device from the target data packet, and sending the DHCP information to the terminal device. And the creation of the original socket and the setting of the target filter can be realized in an application layer of the router, and related function codes do not need to be realized in a kernel bottom layer module, so that compared with the prior art, the method provided by the invention can achieve the purpose of improving the security of the router.

The invention relates to the technical field of domain name interception, and discloses a domain name interception method of a MacOS system, a client, computer equipment and a product, the domain name interception method of the MacOS system comprises the following steps: capturing a DNS request message, and extracting request domain name information of the DNS request message; matching the request domain name information with authorized domain name class resources, and determining a target authorized domain name corresponding to the request domain name information; determining a corresponding target virtual IP based on the target authorized domain name, and disguising to send a DNS response message through an original socket; receiving an application layer request corresponding to the DNS response message; and searching a target authorized domain name based on the target virtual IP, determining a real IP based on the target authorized domain name, and returning a response result of the real IP. According to the invention, the problem that compatibility with a wide domain name scene is not supported can be solved.

The present invention discloses a real-time simulation test method for a large-scale scalable networking protocol, which includes the following steps: S1: Write a pipe program to connect a Docker container to the Ubuntu system through a raw socket, and then send and receive packets through a socket to connect the Ubuntu system to the Exata system, constructing a large-scale scalable network, simulating routing switching, and the situations of packet sending and receiving interruption, time delay, and packet loss during routing interruption and reconnection; S2: Use Docker containers to construct multiple virtual network nodes, all of which have independent protocol stacks and can be added to the Exata simulation environment as independently operating Exata nodes to achieve real-time simulation testing of the large-scale networking protocol; S3: Conduct real-time testing on the large-scale scalable network by observing the situations of packet sending and receiving interruption, time delay, and packet loss among Docker containers. The present invention can complete real-time simulation testing of the large-scale scalable networking protocol, effectively improving real-time performance, accuracy, and confidence level.

The invention provides a data packet processing method and device, electronic equipment and a storage medium, and relates to the field of networks, and the method comprises the steps: moving an original data packet sent to a physical network card by an application program to a virtual network card; packaging an original data packet meeting a preset communication drainage configuration in the virtual network card into a tunnel data packet, and sending the tunnel data packet to a corresponding tunnel through the physical network card; and analyzing and restoring the tunnel reply packet sent to the physical network card by the tunnel into an original reply packet, and sending the original reply packet to the application program through the virtual network card. An original data packet sent to a physical network card by an application program can be moved to a virtual network card for drainage, an original data packet meeting a preset communication drainage configuration in the virtual network card can be packaged into a tunnel data packet, and a tunnel reply packet sent to the physical network card by a tunnel can be analyzed and restored into an original reply packet. According to the method and the device, the use of a routing table and an original socket for data packet drainage can be avoided, and the data packet drainage performance can be effectively improved.