50 results about "Traffic sampling" patented technology

The method is designed based on NetraMet and NetFlow system. It uses a sampling ratio supporting a high-speed multi-link logical channel network traffic measurement, which can makes self-adaption to the message sampling ratio and the traffic sampling ratio according to the network traffic state and supports to use time slice approach to output the stream message. It uses a general approach to monitor the traffic in any channels.

The invention provides a flow sampling method and system for a software-defined network, and relates to the field of communication, in particular to a flow sampling method and system for a software-defined network. The method comprises the following steps: an SDN controller is used for acquiring flow sampling requirement from a north interface or a management interface; the SDN controller is used for matching the flow sampling requirement with current flow table entry information and SDN forwarding device information, generating a set table entry and a guide flow table entry for performing sampling behavior, and sending the set table entry and the guide flow table entry to an SDN forwarding device, wherein the set table entry comprises a sampling ratio, and the guide flow table entry comprises flow information and associated set table entry ID; the SDN forwarding device is used for sampling the flow according to the guide flow table entry and the set table entry after receiving the set table entry and the guide flow table entry. The technical scheme provided by the invention is applicable to the software-defined network; according to the method, the SDN flow sampling with service continuity is achieved.

The invention discloses a message rate-limiting method of an Ethernet port, a device and data communication equipment. The method comprises the following steps: carrying out flow sampling on messages sent from the Ethernet port to a CPU within sampling time T1 and outputting the sampling flow; comparing the sampling flow with a preset first flow threshold value and judging whether the sampling flow is higher than the first flow threshold value; and when the sampling flow is higher than the first flow threshold value, controlling the message flow sent from the Ethernet port to the CPU within effective time T2 so as to cause the message flow in unit time within the effective time T2 is less than the message flow in unit time within the sampling time T1. The scheme of the invention can monitor the message sent from the Ethernet port to the CPU and the message out of limits under the condition of not occupying extra hardware timer resources, thereby having small hardware cost and wide application.

The invention discloses an adaptive adjustment method and system for a service bandwidth, and an SDN controller, relating to the field of transport network. The method comprises the steps of monitoring and sampling Ethernet service traffic and packet loss rate periodically according to an adaptive bandwidth adjustment parameter configured by a client; calculating an actual service traffic according to the packet loss rate and a service traffic sampling value; and determining whether to perform service bandwidth adjustment according to the actual service traffic, if yes, sending a bandwidth adjustment instruction to a network element device, and reporting an received adjustment result returned from the network element device to the client. The bandwidth of a private line service of the Ethernet is adjusted dynamically and adaptively in real time according to change of the actual service traffic, so that the actual service traffic of the private line service of the Ethernet is matched with the service configured bandwidth, and the use ratio of the transmission bandwidth resources is improved.

Embodiments of the present invention relate to a centralized network analytic device, the centralized network analytic device efficiently uses on-chip memory to flexibly perform counting, traffic rate monitoring and flow sampling. The device includes a pool of memory that is shared by all cores and packet processing stages of each core. The counting, the monitoring and the sampling are all defined through software allowing for greater flexibility and efficient analytics in the device. In some embodiments, the device is a network switch.

Methods implemented in a network are disclosed for dynamically distributing tasks of traffic anomaly monitoring and detecting traffic anomalies. The method starts collecting traffic statistics of large blocks of traffic flows as traffic aggregates. Based on the traffic statistics of traffic aggregates, a traffic anomaly is detected. Then for a traffic aggregate with a traffic anomaly, increased traffic sampling rate is applied to a smaller set of traffic flows within the traffic aggregate. If the smaller set of traffic flows does not contain a percentage of the traffic within the traffic aggregate, the sampling rate is further increase to an even smaller set of traffic flows until a small set of traffic flows are identified as the ones cause the traffic anomaly.

The invention discloses a network flow sampling method and a network flow sampling system, and belongs to the field of communication. The method comprises the following steps: acquiring the network flow according to a set rule, and sending the network flow through an external network; receiving the network flow, and converging the network flow according to a preset rule; and analyzing the converged network flow according to requirements of users. The network flow sampling system comprises a first network repeater, a second network repeater and a network flow analysis device. The system completes different network flow processing functions through the first network repeater and the second network repeater, and connects the two repeaters for communication through the external network, so that the system reduces the cost of the devices, contributes to expansion and flexible application, and reduces the operation cost due to realization of far-end convergence by using network resources.

The network security monitor method based on network life frequency spectrum comprises: with fixed network-flow sampling period, collecting network flow, extracting network security eigen parameter and normalizing to form a network life spectrum representing network security and healthy level vividly. This invention is real time and dynamic, and provides reference and support for management decision.

The invention discloses an abnormal traffic detection device of an energy internet information support network, which realizes identification of abnormal traffic by performing traffic sampling, feature extraction and classification on the information support network. According to the method, frequency-domain features of uplink traffic and downlink traffic data between a server and a core switch are extracted based on a wavelet packet analysis theory, an energy Internet information support network traffic time-frequency domain mixed feature set is constructed, and an artificial bee colony optimized support vector machine is used as a classification model. According to the device, support is provided for accurate and rapid verification of traffic anomaly and security situation awareness of the communication network of the intelligent substation and guarantee of stable operation of an information physical tight coupling power system.

The invention discloses a method for controlling a traffic signal lamp during traffic jam. The traffic signal lamp comprises a control module and a flow calculation module, and a first pressure sensor and a second pressure sensor are arranged below the pavement of each carriageway, wherein each first pressure sensor is arranged below a stop line, and the distance between the first pressure sensor and the corresponding second pressure sensor is equal to a preset maximum traffic jam length. The first pressure sensors and the second pressure sensors transmit signals to the flow calculation module when a vehicle passes over; the flow calculation module counts the vehicle flow of each carriageway at the first pressure sensor and the second pressure sensor in a preset flow sampling time, and transmits the vehicle flow to the control module; and the control module automatically adjusts the green light time of each direction according to the received vehicle flow information. By adopting the method of the invention, the traffic condition can be adjusted to the greatest extent during traffic jam, and human resources can be saved.

The invention discloses an optimal traffic monitoring analysis method of IDC machine room traffic. The method disclosed by the invention comprises the following steps: periodically adjusting data flow in the outward traffic of one IDC machine room, accessing a network target point keyword and other content in the IDC machine room at simulated concurrent fixed time under the condition of monitoring different sampling rates, and recording the discovered probability value of the target point content in different time ranges, thereby analyzing and inferring the optimal sampling rate and input ratio under the machine room environment, and achieving the optimal monitoring effect by reducing the input cost. The method disclosed by the invention is suitable for all applications of the IDC machine room website content monitoring matching.

The invention discloses a repeater determining method and device. The problem that the efficiency is low when whether a cell has a repeater is judged in the prior art is solved. The method comprises the steps that a cell measurement report of the cell to be determined is acquired; according to the time advance TA value which is reported by each user terminal in the cell measurement report for each time of telephone traffic, the number of telephone traffic sampling points corresponding to each TA value is determined; and for different pre-assigned TA value intervals, assigned operation is respectively carried out, until the fact that the cell to be determined has the repeater is determined, or until the assigned operation for different TA value intervals is completed.

The invention provides a real-time flow packet loss state sensing method for a high-speed network. The method can detect the packet loss state of a service transmitted by using a TCP and a UDP in the high-speed network in real time. The method comprises the specific steps of model training and model use; during model training, carrying out the traffic sampling collection in a controllable network environment; according to different transmission protocols, setting a counter of the feature Sketch so as to extract effective features; and according to the extracted features, training a machine learning classification model to obtain a packet loss prediction model. When the model is used, firstly, real traffic is sampled and collected at traffic collection points in a network, and real traffic features are extracted in real time by using the feature Sketch; and a packet loss prediction model is used to identify and classify real traffic features, and a packet loss state is detected in real time. The method can be used for a network service provider to monitor the network service state on the network intermediate node in real time, and provides a basis for improving the access service quality.

The invention provides a flow sampling device which comprises a sampling loop, a probe part, a sampling sensor and a hose, wherein the sampling loop comprises a stopper, an air stopper and a shell; the stopper comprises a through hole; the side wall of the stopper is provided with an annular groove; the air stopper is closely connected with a stopping part; the edges of two end faces of the air stopper are provided with a plurality of U-shaped grooves; the side wall of the air stopper is provided with a plurality of annular grooves; the stopper and the air stopper are closely contained in the shell; a through hole is arranged on the shell and communicated with the air stopper; the probe part is arranged in the through hole of the shell; and one end of the hose is connected with he sampling sensor while the other end is connected with the probe part. According to the flow sampling device, the sampling position is adjusted, the length of a sampling hose is shortened, a new calibration way and a new connection way are adopted, and the problems that a measured value provided for a doctor is wrong or deviated from an actual value and the like as a sampling tube accessed to a patient or a place near the patient accumulates water easily and the relatively long sampling hose generates unsmooth ventilation in the use process are overcome. Therefore, the effect of relatively high measurement precision is achieved.

The invention discloses a method and a device for detecting low interest flooding attacks (LIFA) in an information centric network, which can improve the accuracy of LIFA detection and reduce the occurrence of false alarms. The method comprises the steps of: S1, calculating a wavelet coefficient dj,k of each scale in a selected scale set by using a traffic sampling signal and a wavelet mother function in the information centric network, and reconstructing a low frequency portion of the traffic sampling signal by using the wavelet coefficient dj,k, wherein the number of wavelet decomposition layers is J, J is a positive integer, the scale set is a set of integers not less than and less than J, and dj,k represents detail information on the scale j and the translation k; and S2, comparing themodulus of the low frequency portion with a preset detection threshold, and if the modulus is not less than the detection threshold, determining a low interest flooding attack.

The invention discloses an LACP load balancing method, device and system in the field of data communications. By adoption of flow sampling technology, the method comprises the following steps of making an real-time statistical analysis on the current service flow of at least one message type of the aggregation group, and determining the optimal load balancing mode of the current service flow of atleast one message type of the aggregation group, thereby realizing the purpose of dynamically adjusting the load balancing mode of the aggregation group according to the message type, and having better flexibility and practicability.

The embodiment of the invention provides a method and controller for traffic engineering (TE) in a communication network. The communication network comprises a controller and a plurality of nodes, wherein the plurality of nodes include flexible nodes and non-flexible nodes, the flexible nodes are directly connected with the controller, and the non-flexible nodes are indirectly connected with the controller. The method comprises the following steps: the controller determines at least one sampling node from the flexible nodes and a time frequency of traffic sampling, notifies the at least one sampling node to perform traffic sampling at the time frequency, and receives the traffic sampling data acquired by all sampling nodes during each sampling; the controller determines the parameter information required for the TE according to the traffic sampling data acquired during each sampling and the total traffic information of links of which the link utilization ratio is greater than a first preset value or smaller than a second preset value in the communication network; and the controller controls the TE according to the parameter information. According to the method and controller provided by the embodiment of the invention, the TE control under limited sampling can be realized.

The invention relates to a traffic sampling method, computer equipment and a computer readable storage medium, and the traffic sampling method comprises the steps: receiving an access request; obtaining identifier information corresponding to the access request; determining a hash value of the identifier information by using a hash method with a uniform hash characteristic; determining a proportion of the hash value in a hash integer value domain range to obtain a proportion value corresponding to the hash value; comparing the proportion value and a sampling rate; if the proportion value is less than or equal to the sampling rate, accepting the access request; and if the proportion value is greater than the sampling rate, refusing the access request. According to the method, rapid trafficsampling is realized, and a large quantity of storage space and computing resources are not needed.

The invention provides a VPN (Virtual Private Network) traffic quick recognition method for a high-speed network. The method comprises the following specific steps: model training and model use. During model training, traffic sampling collection is performed in a controllable network environment, related features capable of being used for VPN traffic recognition and classification after sampling are selected, and a small-scale traffic data training set is constructed for model training. When the model is used, traffic sampling is carried out in a high-speed network, long-flow traffic is filtered out through a Count Bloom Filter algorithm, statistical information is stored in a hash table through a link method, feature values are extracted according to the recorded statistical information, and traffic feature records are obtained and used for traffic detection. According to the method, the VPN traffic existing in the high-speed network can be quickly and accurately recognized, the agent tools used by the VPN traffic are classified, and the detection capability of the network traffic is effectively improved.

The invention provides a network flow sampling method and system and electronic equipment. The method comprises the steps of: receiving data flow through an interface module, carrying out sampling statistics on the data flow, and generating a first-stage flow table; sending a control flow message to a network processor through the interface module according to the first-stage flow table; forwarding the control flow message to a central processing unit through the network processor; and performing flow statistical summarization on the control flow message through the central processing unit to generate a second-stage flow table. According to the method of the invention, the consumption of network traffic sampling on CPU resources and NP/PP resources of network equipment is reduced.

The invention discloses a P2P bot sensing based adaptive network flow sampling method, and belongs to the field of network data processing. The P2P bot sensing based adaptive network flow sampling method comprises the steps of firstly extracting IP addresses of potential P2P bots in a high speed network at a relatively low cost based on essential features of a P2P botnet; then allocating a target sampling rate based on an instant sampling rate allocation algorithm and calculating an instant sampling rate of each IP address; and finally sampling a message by using the instant sampling rates obtained through calculation, inputting the sampled network flows to a P2P botnet detecting system so as to facilitate further fine-grained detection. The P2P bot sensing based adaptive network flow sampling method is fast in adaptive adjustment speed and strong in capability of sensing the P2P bots, can greatly improve the sampling rate of the P2P dot flows extremely under the condition of keeping the target sampling rate unchanged, and can be seamlessly integrated with an existing network flow based P2P dotnet detecting system.