CN102316486A - Network log processing method and device thereof - Google Patents
Network log processing method and device thereof Download PDFInfo
- Publication number
- CN102316486A CN102316486A CN201110272855A CN201110272855A CN102316486A CN 102316486 A CN102316486 A CN 102316486A CN 201110272855 A CN201110272855 A CN 201110272855A CN 201110272855 A CN201110272855 A CN 201110272855A CN 102316486 A CN102316486 A CN 102316486A
- Authority
- CN
- China
- Prior art keywords
- adheres
- subscriber equipment
- information
- message
- adhere
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000003672 processing method Methods 0.000 title abstract 2
- 238000000034 method Methods 0.000 claims abstract description 123
- 230000006854 communication Effects 0.000 claims abstract description 101
- 230000008569 process Effects 0.000 claims abstract description 85
- 238000012360 testing method Methods 0.000 claims abstract description 54
- 238000004891 communication Methods 0.000 claims abstract description 43
- 239000000284 extract Substances 0.000 claims description 68
- 238000000605 extraction Methods 0.000 claims description 28
- 238000012545 processing Methods 0.000 claims description 12
- 238000012163 sequencing technique Methods 0.000 claims description 12
- 238000004458 analytical method Methods 0.000 abstract description 21
- 238000005516 engineering process Methods 0.000 abstract description 7
- 230000002159 abnormal effect Effects 0.000 abstract 1
- 230000000875 corresponding effect Effects 0.000 description 78
- 230000004044 response Effects 0.000 description 10
- 238000013468 resource allocation Methods 0.000 description 8
- 238000004590 computer program Methods 0.000 description 7
- 238000010586 diagram Methods 0.000 description 6
- 230000013011 mating Effects 0.000 description 6
- 230000004048 modification Effects 0.000 description 5
- 238000012986 modification Methods 0.000 description 5
- 230000006870 function Effects 0.000 description 4
- 230000007774 longterm Effects 0.000 description 2
- 238000007726 management method Methods 0.000 description 2
- 238000000926 separation method Methods 0.000 description 2
- 241000931705 Cicada Species 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 230000002596 correlated effect Effects 0.000 description 1
- 230000008878 coupling Effects 0.000 description 1
- 238000010168 coupling process Methods 0.000 description 1
- 238000005859 coupling reaction Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 239000012467 final product Substances 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000005259 measurement Methods 0.000 description 1
- 238000012544 monitoring process Methods 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000011664 signaling Effects 0.000 description 1
- 238000003786 synthesis reaction Methods 0.000 description 1
- 230000007704 transition Effects 0.000 description 1
Images
Landscapes
- Mobile Radio Communication Systems (AREA)
Abstract
An embodiment of the invention relates to the wireless communication technology field, especially relating to a network log processing method and a device thereof to solve a problem that efficiency of test and analysis of a network log is low in the prior art. The method comprises the following steps: determining user equipment of adhesion acceptance; to the user equipment of adhesion acceptance, in dependence on an adhesion process template, extracting a user adhesion information set corresponding to the user equipment of adhesion acceptance from the network log; extracting communication process information corresponding to the user equipment from the network log according to the user adhesion information set corresponding to the user equipment of adhesion acceptance and a system level test template corresponding to a communication process needed to be analyzed. Since a normal process and an abnormal process in the network log can be automatically identified, a complete system level process of a specific user can be separated, thereby efficiency of test and analysis of the network log is raised.
Description
Technical field
The present invention relates to wireless communication technology field, particularly a kind of method and apparatus of handling network log.
Background technology
Each intercarrier interface message in the cordless communication network in order to monitor conveniently, is pooled in the monitoring equipment as much as possible, and each interface message of compiling is commonly referred to network log.
Present method for testing and analyzing to network log; Be according to own understanding by the test analysis personnel to technology; Keyword through specific filters test log, finds the key component of correlated process, analyzes one by one then, judges; Through this exclusive method, finally find unusual process to occur; After finding exception procedure,, find a unusual side to occur according to the normal order of this process; At last, confirm and find the reason of makeing mistakes, so far accomplish the test analysis process of whole network log by a unusual side.
Because be subject to the complexity of network technology, test analysis work major part is manually accomplished by engineers.And for the test analysis of the network log in LTE (Long Term Evolution, the Long Term Evolution) system, can catch to resolve with single frames to data and carry out automatic processing mode.But because various information are mingled in together in the network log, and single user's information disperses, and can't isolate a system-level process that the specific user is complete automatically.
In sum, the efficient of the test analysis of network log is very low at present.
Summary of the invention
A kind of method and apparatus of handling network log that the embodiment of the invention provides is in order to the very low problem of efficient of the test analysis that solves the network log that exists in the prior art.
A kind of method of handling network log that the embodiment of the invention provides comprises:
Confirm to adhere to the subscriber equipment of acceptance;
To a subscriber equipment that adheres to acceptance,, from network log, extract the corresponding user of subscriber equipment who adheres to acceptance and adhere to ensemble of communication according to the attaching process template;
Adhere to the corresponding system level testing template of communication process that ensemble of communication and needs are analyzed according to the corresponding user of the said subscriber equipment that adheres to acceptance, from network log, extract the communication process information of said subscriber equipment correspondence.
A kind of equipment of handling network log that the embodiment of the invention provides comprises:
Determination module.Be used to confirm to adhere to the subscriber equipment of acceptance;
First extraction module is used for to a subscriber equipment that adheres to acceptance, according to the attaching process template, from network log, extracts the corresponding user of subscriber equipment who adheres to acceptance and adheres to ensemble of communication;
Second extraction module is used for adhering to the corresponding system level testing template of communication process that ensemble of communication and needs are analyzed according to the corresponding user of the said subscriber equipment that adheres to acceptance, from network log, extracts the communication process information of said subscriber equipment correspondence.
The beneficial effect of the embodiment of the invention is following:
The scheme of the embodiment of the invention can automatically identify normal processes and the exception procedure in the network log, and can isolate the complete system-level process of specific user, thereby has improved the efficient of the test analysis of network log; Further, reduced requirement to the tester.
Description of drawings
Fig. 1 handles the method flow sketch map of network log for the embodiment of the invention;
The figure schematic flow sheet that Fig. 2 draws according to time sequencing and information node for the embodiment of the invention;
Fig. 3 is the method for testing and analyzing schematic flow sheet of embodiment of the invention network log;
Fig. 4 handles the device structure intention of network log for the embodiment of the invention.
Embodiment
The very low problem of efficient of the test analysis of the network log that exists to background technology, the embodiment of the invention extracts the corresponding user of subscriber equipment who adheres to acceptance and adheres to ensemble of communication according to the attaching process template from network log; Adhere to the corresponding system level testing template of communication process that ensemble of communication and needs are analyzed according to the corresponding user of the subscriber equipment that adheres to acceptance, from network log, extract the communication process information of subscriber equipment correspondence.Owing to can automatically identify normal processes and the exception procedure in the network log, and can isolate the complete system-level process of specific user, thereby improve the efficient of the test analysis of network log.
Below in conjunction with Figure of description the embodiment of the invention is described in further detail.
As shown in Figure 1, the method that the embodiment of the invention is handled network log comprises the following steps:
The user adheres to ensemble of communication and includes but not limited to that following user adheres at least a in the set:
IMSI (International Mobile SubscriberIdentity; International mobile subscriber identification code), the IP address of S1 interface, UE (subscriber equipment) S1AP (S1Application protocol; S1 Application Protocol) ID (sign), MME (Mobility Management Entity; Mobility Management Entity) S11F-TEID (Forward Tunnel Endpoint Identifier; The forward tunnel Endpoint ID), SGW (Serving GateWay; Gateway) S11F-TEID, SGW S5/8F-TEID, PGW (PDN GW, packet data gateway) S5/8F-TEID, SGW S1-U F-TEID, ENB (evolved NodeB) S1-U F-TEID, UE IP Address.
Wherein, the scheme of the embodiment of the invention can be provided with a plurality of system level testing templates in advance, and attaching process also can a corresponding system-level attaching process template (referring to table 1), the corresponding system level testing template (referring to table 2) of each communication process.
All can have in each template and need the information that proposes in the message that need search and the corresponding message.
In the step 101, from network log, search for to adhere to and accept message or adhere to refuse information;
Accept message if search to adhere to; Then accept to extract the message S1AP ID from adhering to; Attach Request message in the related network daily record extracts IMSI from the Attach Request message that is associated with then, confirms that the corresponding subscriber equipment of this IMSI is the subscriber equipment that adheres to acceptance;
Adhere to refuse information if search; Then from adhere to refuse information, extract S1AP ID; Attach Request message in the related network daily record extracts IMSI from the Attach Request message that is associated with then, confirms that the corresponding subscriber equipment of this IMSI is the subscriber equipment that adheres to refusal.
After having confirmed to adhere to the subscriber equipment of acceptance; In the step 102; Through the attaching process template; From network log, extract and adhere to corresponding attachment message in the template, select to belong to the message of adhering to of the subscriber equipment that adheres to acceptance confirmed in the step 101, and adhere to information and adhere to ensemble of communication as the corresponding user of subscriber equipment that this adheres to acceptance with selecting to adhere to user in the message.
Concrete, to a subscriber equipment that adheres to acceptance, from network log, extract with the attaching process template in comprise adhere to message name identical adhere to message;
All that extract are adhered to the subscriber equipment corresponding attachment message of selecting to adhere to acceptance in the message;
Extract the user the message from adhering to of selection and adhere to information, and form the corresponding user of subscriber equipment who adheres to acceptance and adhere to ensemble of communication.
The corresponding user of subscriber equipment who just obtains adhering to acceptance after the execution in step 102 adheres to ensemble of communication.
In the step 103; To a subscriber equipment that adheres to acceptance; From network log, extract with the system level testing template in the communication process name of the information that comprises identical, and comprise the communication process information that the corresponding user of at least one subscriber equipment that adheres to acceptance adheres to information.
Concrete, the corresponding system level testing template of the at first definite communication process that need analyze then according to the system level testing template, extracts communication process information corresponding in the system level testing template from network log; Owing to known that the user adheres to ensemble of communication, adhere to ensemble of communication so can confirm the corresponding user of subscriber equipment who adheres to acceptance, comprise the communication process information that the user adheres to information in the communication process information that selective extraction goes out then.
The system-level attaching process module of table 1
Adhere to refuse information if search in the table 1; All be exception procedure then, just stop subsequent extracted process after then finishing to this subscriber equipment to the extraction of the attaching process of this subscriber equipment with searching the message of adhering to of adhering to the corresponding subscriber equipment of refuse information.
With table 1 is example, describes extracting attaching process:
The first step, from network log, find Attach request message, wherein can obtain the source IP address and the target ip address of S1 interface, and customer equipment identification IMSI or GUTI.
If in Attach request message, have only GUTI, then can association go out IMSI according to the GUTI that obtains, have much by the method for the related IMSI of GUTI, wherein use always a kind of be the backstepping method.
At first find the Initial Context Setup message corresponding with Attach request, the characteristic of this message is source IP address and target ip address and the same UE S1AP id field that has identical S1 interface with Attach Request message;
In Initial Context Setup message, find the E-RABToBeSetupListCtxtSUReq field; In the E-RABToBeSetupListCtxtSUReq field, find transportLayerAddress, this field comprises transportLayerAddress and GTP-TEID;
According to the numerical value of transportLayerAddress and GTP-TEID, back seek in time, find the corresponding Create Session Response message of this message.
This Create Session Response message has following characteristic: (the Fully Qualified Tunnel Endpoint Identifier of the F-TEID in the Bearer Context field that it comprises; Complete qualified TEID) field the inside; Entrained TEID/GRE Key and F-TEID field, with gTP-TEID in the top said InitialContext Setup message and transportLayerAddress and numerical value identical.
Found after this Create Session Response message; According to source IP address in the message and target ip address; And the Tunnel Endpoint Identifier value of message header, can obtain corresponding Create Session Request message.
In Create Session Request message, directly just can find International Mobile Subscriber Identity (being IMSI).
Suppose from daily record, to find to comprise and accept message (i.e. the 18th in the table 1 and 19) adhering to of IMSI, that is to say, the subscriber equipment that the IMSI in the first step is corresponding adheres to the subscriber equipment of acceptance.
Second the step, according to the IMSI that the first step obtains, in the S6a interface message, search the message that comprises this IMSI keyword, i.e. sequential in the table 1 2～9.
In the 3rd step, the IMSI according to the first step obtains in the S11 interface message, searches the Create session request message that comprises this IMSI keyword, according to time and out of Memory, can confirm and obtain MME S11F-TEID.
Such as obtaining after the IMSI information, the Create session request message that comprises all S11 interfaces of this IMSI value just can be filtered out.Create session request message also can occur at the S5/8 interface not only at the S11 interface.
Difference between the Create session request message of S11 interface and the message of the same name of S5/8 interface is: Fully Qualified Tunnel Endpoint Identifier (F-TEID) field that the S11 interface message comprises has only 1, and the S5/8 interface then has 2 F-TEID fields (F-TEID is made up of IP address and two parts of TEID).
If subscriber equipment has only carried out once adhering to, this message of the S11 interface that finds so just has only one.If the user has carried out repeatedly adhering to/the attachment removal process, so this message has a plurality of.
Have repeatedly adhere to/situation of attachment removal process under, need according to the time sequencing of receiving recently Attach request message after selection corresponding C reate session request message.
The 4th step; IMSI according to the first step obtains in the S5/8 interface message, searches the Create session request message that comprises this IMSI keyword; Further feature (in order to distinguish the message of the same name of S11 interface) according to message can obtain SGW S5/8F-TEID.
Concrete; Difference between the Create session request message of S11 interface and the message of the same name of S5/8 interface is: Fully Qualified Tunnel Endpoint Identifier (F-TEID) field that the S11 interface message comprises has only 1, and the S5/8 interface then has 2 F-TEID fields.
In the 5th step,, search corresponding Create session response message, thereby obtain PGW S5/8 chain of command F-TEID and user plane F-TEID according to the Create session request message that the 4th step was found.
Concrete; The characteristic of Create session response message is: the Create session request message of source IP address and purpose IP address and S5/8 interface is just opposite; Be that source IP address becomes purpose IP address, purpose IP address becomes source IP address; And the TEID numerical value that the Tunnel Endpoint Identifier of this message header and the 4th step obtain among the SGW 5/8F-TEID is the same.
In the 6th step, the IMSI and the MME S11F-TEID in the 3rd step according to the first step obtains in the S11 interface message, search the Create session response message that comprises this IMSI keyword, thereby obtain SGW S11F-TEID and user plane S1-U F-TEID.
The 7th step, according to UE S1AP ID, in the S1 interface message, search Initial Context Setup Request message, obtain distributing to the UE IPAddress of UE, and the QoS information of default bearing.
Concrete, according to the regulation of S1AP agreement, after the S1 interface was set up, all S1 message that belong to a subscriber equipment were by an array (MME UE S1AP ID, eNB UE S1AP ID) to be come uniquely identified.That is to say that the S1 interface message with identical UE S1AP ID belongs to same user.
In Attach request message, include a field eNB UE S1APID, but do not comprise another field MME UE S1AP ID.
Numerical value according to eNB UE S1AP ID; Find other one to have same eNB UE S1AP ID numerical value but be not the S1 message of Attach request; Wherein will comprise MME UE S1AP ID; (MME UE S1AP ID, the eNB UE S1AP ID) array that has so just obtained identifying this subscriber equipment is right.
All (MME UE S1AP ID, eNB UE S1AP ID) numerical value that find afterwards and this array all are the S1 message of a same attaching process and follow-up dedicated process thereof to living message.
Only after this subscriber equipment attachment removal, when adhering to once more, this array is to just changing.
In the 8th step,, in the S1 interface message, search UE Capability Info Indication according to UE S1AP ID.
The 9th step, according to UE S1AP ID, in the S1 interface message, search Initial Context Setup Response message, obtain the S1-U F-TEID of eNB.
In the tenth step,, in the S1 interface message, search UL NAS Transport message according to UE S1AP ID.
The system-level bearing resource allocation-request procedure of table 2
A communication process end to end, its signaling process figure not only have the regular time order, and direct corresponding relation is arranged between each message, can carry out direct association through particular keywords in the message.An attaching process template is provided in the above, and according to this template, the user that can separate and extract the attaching process of standard one by one and obtain each subscriber equipment adheres to ensemble of communication.Same reason as long as can set up the test analysis template of other dedicated process, so just can be carried out similar test analysis to other process, and provide adding system more comprehensively, friendly more Measurement results.
With table 2 is example, describes extracting communication process, and wherein the system level testing template in the table 2 is the bearing resource allocation-request procedure, and other system level test template and table 2 are similar, repeat no more at this:
The first step, in S1AP message, if Bearer resource allocation request message, then call the corresponding system level testing template of bearing resource allocation-request procedure, carry out normal, the unusual test analysis of this process.
Wherein, can find the corresponding Frame of Bearer resource allocation request message, in this Frame; The S1AP agreement keyword of subscriber equipment under finding, i.e. (MME UE S1AP ID, eNB UE S1AP ID); And message keyword (PTI value, qos value).
Second step, in the S11 interface message of S11TEID with the user profile that extracts coupling; Search corresponding Bearer resource command message; And PTI and the QoS in the Bearer resource allocation request message in the PTI in this message and the QoS and the first step relatively respectively; If then deterministic process is normal for result's consistent (being that PTI need be identical), otherwise deterministic process is unusual.
Wherein, the array referring to sign S11 interface of the user profile here is to (MME F-TEID, SGW F-TEID):
Each user's S11 interface message is identified (MME F-TEID, SGW F-TEID) by an array, and this (MME UE S1AP ID, eNB UE S1AP ID) array that is similar to the S1 interface a little is right.
All have the message of identical (MME F-TEID, SGW F-TEID) value, all are the S11 interface messages that belongs to same subscriber equipment.
The 3rd step, the S5 interface message of mating in S5TEID and user profile; Search corresponding Bearer resource command message; And PTI and the QoS in the Bearer resource allocation request message in the PTI in this message and the QoS and the first step relatively respectively; If then deterministic process is normal for unanimity as a result, otherwise deterministic process is unusual.
The 4th step, in the S5 interface message that S5TEID and user profile are mated; Search corresponding Create bearer request message; And PTI and the QoS in the Bearer resource allocation request message in the PTI in this message and the QoS and the first step relatively respectively; If then deterministic process is normal for unanimity as a result, otherwise deterministic process is unusual.
The 5th step, the S11 interface message of mating in S11TEID and user profile; Search corresponding Create bearer request message; And PTI and the QoS in the Bearer resource allocation request message in the PTI in this message and the QoS and the first step relatively respectively; If then deterministic process is normal for unanimity as a result, otherwise deterministic process is unusual.
The 6th step, the S1 interface message of mating in UE S1AP ID and user profile; Search corresponding E-RAB setup request message; And PTI and the QoS in the Bearer resource allocation request message in the PTI in this message and the QoS and the first step relatively respectively; If then deterministic process is normal for unanimity as a result, otherwise deterministic process is unusual.Find E-RAB ID and EBI value simultaneously.
The 7th step, the S1 interface message of mating in UE S1AP ID and user profile; Search corresponding E-RAB setup response message; Find E-RAB ID and EBI and the E-RAB ID in this message and EBI consistent with during the 6th goes on foot whether relatively respectively; If then deterministic process is normal for unanimity as a result, otherwise deterministic process is unusual.
The 8th step, the S1 interface message of mating in UE S1AP ID and user profile; Search corresponding Uplink NAS Transport message; And relatively PTI in this message and the PTI in the Bearer resource allocation request message in the 7th step respectively; If then deterministic process is normal for unanimity as a result, otherwise deterministic process is unusual.
The 9th step, the S11 interface message of mating in S11TEID and user profile; Search corresponding Create bearer response message; And whether the EBI that relatively finds in the EBI in this message and the 6th step respectively is consistent, and then deterministic process is normal as if unanimity as a result, otherwise deterministic process is unusual.
The tenth step, in the S5 interface message that S5TEID and user profile are mated; Search corresponding Create bearer response message; And whether the EBI in respectively relatively in the EBI in this message and the 6th step is consistent, and then deterministic process is normal as if unanimity as a result, otherwise deterministic process is unusual.
Need to prove that the mode that different process judgment is whether unusual is also not necessarily identical.With table 2 is example, judges whether unusual mode is the bearing resource allocation-request procedure: need the PTI that compares in the message respectively to determine whether identical with QoS.What comprise in message transmitted and the message in mode whether each process judgment is unusual and the detailed process is information-related, does not give unnecessary details one by one at this.
Through after the above-mentioned steps,, can draw patterned flow chart as shown in Figure 2 according to time sequencing and information node.
Preferably, can in advance network log be divided into the sub-daily record of a plurality of networks; Wherein, the message in the sub-daily record of each network belongs to same agreement.
Such as difference S1AP, DIAMETER (S6a), GTP-C (S11 and S5/8) and GTP-U (GTP UserPlane, GTP user plane) is keyword, can test log be filtered into several basic classifications, promptly tests sub-daily record.The carrying out of test analysis is operand to test sub-daily record, like this when searching some message, only need from the corresponding sub-daily record of network of this message corresponding protocols, search and gets final product, thereby save the efficient speed up processing.
Concrete, in the step 102, adhere to message to one, what the user who confirms to comprise needs extraction adhered to information adheres to the message corresponding protocols;
The user who from the corresponding sub-daily record of network of the agreement of confirming, confirms to comprise needs extraction adheres to the message of information;
Extract the user the message from definite adhering to and adhere to information.
In the step 103, to a communication process information, confirm with the system level testing template in the identical communication process information corresponding protocols of communication process name of the information that comprises;
From the corresponding sub-daily record of network of the agreement of confirming, extract and comprise the communication process information that the corresponding user of subscriber equipment adheres to information.
Preferably, can further include after the step 103:
According to time sequencing, export each and adhere to information and communication process information.
Preferably, the embodiment of the invention, extracts the corresponding user of subscriber equipment who adheres to refusal and adheres to ensemble of communication according to the attaching process template to a subscriber equipment that adheres to refusal from network log;
The corresponding user of subscriber equipment that refusal is adhered in output adheres to ensemble of communication and adheres to information.
Wherein, adhering to ensemble of communication extracting mode and the user of the subscriber equipment that adheres to acceptance for the user of the subscriber equipment that adheres to refusal, to adhere to the ensemble of communication extracting mode identical, repeats no more at this.
Preferably, according to time sequencing, export each and adhere to information.
As shown in Figure 3, the method for testing and analyzing of embodiment of the invention network log comprises the following steps:
The communication process information that wherein, can't be associated with attaching process is meant that it is not that the user who extracts in this attaching process adheres to information that the user who comprises in the communication process information adheres to information.
The embodiment of the invention is not being introduced extra foreground transition activities, carries out the analysis-by-synthesis and the automation of test data on the backstage and handles;
On the basis of having inherited the daily record data fairness, to have expanded the function of test analysis, and realized simply, the logical AND friendly of the scope of test analysis and output result tissue can effectively be ensured;
Extensibility just can be expanded the scope of application as long as increase the test analysis template;
Automation is handled, and can improve the efficient of test analysis greatly, reduces workload and personnel demand that reperformance test is analyzed.
Based on same inventive concept; A kind of equipment of handling network log also is provided in the embodiment of the invention; Because the principle that this equipment is dealt with problems is similar with the method for handling network log, so the enforcement of this equipment can repeat part and repeat no more referring to the enforcement of method.
As shown in Figure 4, the equipment that the embodiment of the invention is handled network log comprises: determination module 10, first extraction module 20 and second extraction module 30.
Determination module 10 is used to confirm to adhere to the subscriber equipment of acceptance;
First extraction module 20 is used for to a subscriber equipment that adheres to acceptance, according to the attaching process template, from network log, extracts the corresponding user of subscriber equipment who adheres to acceptance and adheres to ensemble of communication;
Second extraction module 30 is used for basis and adheres to the corresponding system level testing template of communication process that the corresponding user of subscriber equipment of acceptance adheres to ensemble of communication and needs analysis, from network log, extracts the corresponding communication process information of subscriber equipment.
Preferably, to a subscriber equipment that adheres to acceptance, first extraction module 20 from network log, extract with the attaching process template in comprise adhere to message name identical adhere to message; All that extract are adhered to the subscriber equipment corresponding attachment message of selecting to adhere to acceptance in the message; Extract the user the message from adhering to of selection and adhere to information, and form the corresponding user of subscriber equipment who adheres to acceptance and adhere to ensemble of communication.
Preferably; To a subscriber equipment that adheres to acceptance; Second extraction module 30 from network log, extract with the system level testing template in the communication process name of the information that comprises identical, and comprise the communication process information that the corresponding user of at least one subscriber equipment that adheres to acceptance adheres to information.
Preferably, determination module 10 also is used for: network log is divided into the sub-daily record of a plurality of networks;
Wherein, the message in the sub-daily record of each network belongs to same agreement.
Accordingly, adhere to message to one, first extraction module 20 confirms to comprise that user that needs extract adheres to information adheres to the message corresponding protocols; The user who from the corresponding sub-daily record of network of the agreement of confirming, confirms to comprise needs extraction adheres to the message of information; Extract the user the message from definite adhering to and adhere to information.
Accordingly, to a communication process information, second extraction module 30 confirm with the system level testing template in the identical communication process information corresponding protocols of communication process name of the information that comprises; From the corresponding sub-daily record of network of the agreement of confirming, extract and comprise the communication process information that the corresponding user of subscriber equipment adheres to information.
Preferably, second extraction module 30 is exported each and is adhered to information and communication process information according to time sequencing.
Wherein, the equipment of the embodiment of the invention can further include: processing module 40.
Processing module 40 is used to confirm to adhere to the subscriber equipment of refusal; To a subscriber equipment that adheres to refusal,, from network log, extract the corresponding user of subscriber equipment who adheres to refusal and adhere to ensemble of communication according to the attaching process template; The corresponding user of subscriber equipment that refusal is adhered in output adheres to ensemble of communication and adheres to information.
Preferably, processing module 40 is exported each and is adhered to information according to time sequencing.
It can be seen from the above: the scheme of the embodiment of the invention can automatically identify normal processes and the exception procedure in the network log, and can isolate the complete system-level process of specific user, thereby has improved the efficient of the test analysis of network log; Further, reduced requirement to the tester.
Those skilled in the art should understand that embodiments of the invention can be provided as method, system or computer program.Therefore, the present invention can adopt the form of the embodiment of complete hardware embodiment, complete software implementation example or combination software and hardware aspect.And the present invention can be employed in the form that one or more computer-usable storage medium (including but not limited to magnetic disc store, CD-ROM, optical memory etc.) that wherein include computer usable program code go up the computer program of implementing.
The present invention is that reference is described according to the flow chart and/or the block diagram of method, equipment (system) and the computer program of the embodiment of the invention.Should understand can be by the flow process in each flow process in computer program instructions realization flow figure and/or the block diagram and/or square frame and flow chart and/or the block diagram and/or the combination of square frame.Can provide these computer program instructions to the processor of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing device to produce a machine, make the instruction of carrying out through the processor of computer or other programmable data processing device produce to be used for the device of the function that is implemented in flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame appointments.
These computer program instructions also can be stored in ability vectoring computer or the computer-readable memory of other programmable data processing device with ad hoc fashion work; Make the instruction that is stored in this computer-readable memory produce the manufacture that comprises command device, this command device is implemented in the function of appointment in flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame.
These computer program instructions also can be loaded on computer or other programmable data processing device; Make on computer or other programmable devices and to carry out the sequence of operations step producing computer implemented processing, thereby the instruction of on computer or other programmable devices, carrying out is provided for being implemented in the step of the function of appointment in flow process of flow chart or a plurality of flow process and/or square frame of block diagram or a plurality of square frame.
Although described the preferred embodiments of the present invention, in a single day those skilled in the art get the basic inventive concept could of cicada, then can make other change and modification to these embodiment.So accompanying claims is intended to be interpreted as all changes and the modification that comprises preferred embodiment and fall into the scope of the invention.
Obviously, those skilled in the art can carry out various changes and modification to the present invention and not break away from the spirit and scope of the present invention.Like this, belong within the scope of claim of the present invention and equivalent technologies thereof if of the present invention these are revised with modification, then the present invention also is intended to comprise these changes and modification interior.
Claims (18)
1. a method of handling network log is characterized in that, this method comprises:
Confirm to adhere to the subscriber equipment of acceptance;
To a subscriber equipment that adheres to acceptance,, from network log, extract the corresponding user of subscriber equipment who adheres to acceptance and adhere to ensemble of communication according to the attaching process template;
Adhere to the corresponding system level testing template of communication process that ensemble of communication and needs are analyzed according to the corresponding user of the said subscriber equipment that adheres to acceptance, from network log, extract the communication process information of said subscriber equipment correspondence.
2. the method for claim 1 is characterized in that, the said user who from network log, extracts the subscriber equipment correspondence of adhering to acceptance adheres to ensemble of communication and comprises:
To a said subscriber equipment that adheres to acceptance, from network log, extract with the attaching process template in comprise adhere to message name identical adhere to message;
All that extract are adhered to the said subscriber equipment corresponding attachment message of adhering to acceptance of selection in the message;
Extract the user the message from adhering to of selection and adhere to information, and form the said corresponding user of subscriber equipment who adheres to acceptance and adhere to ensemble of communication.
3. the method for claim 1 is characterized in that, the said corresponding communication process information of said subscriber equipment that from network log, extracts comprises:
To a said subscriber equipment that adheres to acceptance; From network log, extract with said system level testing template in the communication process name of the information that comprises identical, and comprise the communication process information that at least one said corresponding user of subscriber equipment who adheres to acceptance adheres to information.
4. like the arbitrary described method of claim 1～3, it is characterized in that the extraction user also comprises before adhering to ensemble of communication:
Said network log is divided into the sub-daily record of a plurality of networks;
Wherein, the message in the sub-daily record of each network belongs to same agreement.
5. method as claimed in claim 4 is characterized in that, from network log, extracts the user and adheres to ensemble of communication and comprise:
Adhere to message to one, confirm to comprise that user that needs extract adheres to information adheres to the message corresponding protocols;
The user who from the corresponding sub-daily record of network of the agreement of confirming, confirms to comprise needs extraction adheres to the message of information;
Extract the user the message from definite adhering to and adhere to information.
6. method as claimed in claim 4 is characterized in that, from network log, extracts communication process information and comprises:
To a communication process information, confirm with said system level testing template in the identical communication process information corresponding protocols of communication process name of the information that comprises;
From the corresponding sub-daily record of network of the agreement of confirming, extract and comprise the communication process information that the corresponding user of subscriber equipment adheres to information.
7. method as claimed in claim 2 is characterized in that, the said corresponding communication process information of said subscriber equipment that from network log, extracts also comprises afterwards:
According to time sequencing, export each and adhere to information and communication process information.
8. the method for claim 1 is characterized in that, this method comprises:
Confirm to adhere to the subscriber equipment of refusal;
To a subscriber equipment that adheres to refusal,, from network log, extract the said corresponding user of subscriber equipment who adheres to refusal and adhere to ensemble of communication according to the attaching process template;
The corresponding user of subscriber equipment that refusal is adhered in output adheres to ensemble of communication and adheres to information.
9. method as claimed in claim 8 is characterized in that, the corresponding user of subscriber equipment that refusal is adhered in said output adheres to ensemble of communication and adheres to information and comprises:
According to time sequencing, export each and adhere to information.
10. an equipment of handling network log is characterized in that, this equipment comprises:
Determination module is used to confirm to adhere to the subscriber equipment of acceptance;
First extraction module is used for to a subscriber equipment that adheres to acceptance, according to the attaching process template, from network log, extracts the corresponding user of subscriber equipment who adheres to acceptance and adheres to ensemble of communication;
Second extraction module is used for adhering to the corresponding system level testing template of communication process that ensemble of communication and needs are analyzed according to the corresponding user of the said subscriber equipment that adheres to acceptance, from network log, extracts the communication process information of said subscriber equipment correspondence.
11. equipment as claimed in claim 10 is characterized in that, said first extraction module specifically is used for:
To a said subscriber equipment that adheres to acceptance, from network log, extract with the attaching process template in comprise adhere to message name identical adhere to message; All that extract are adhered to the said subscriber equipment corresponding attachment message of adhering to acceptance of selection in the message; Extract the user the message from adhering to of selection and adhere to information, and form the said corresponding user of subscriber equipment who adheres to acceptance and adhere to ensemble of communication.
12. equipment as claimed in claim 10 is characterized in that, said second extraction module specifically is used for:
To a said subscriber equipment that adheres to acceptance; From network log, extract with said system level testing template in the communication process name of the information that comprises identical, and comprise the communication process information that at least one said corresponding user of subscriber equipment who adheres to acceptance adheres to information.
13., it is characterized in that said determination module also is used for like the arbitrary described equipment of claim 10～12:
Said network log is divided into the sub-daily record of a plurality of networks;
Wherein, the message in the sub-daily record of each network belongs to same agreement.
14. equipment as claimed in claim 13 is characterized in that, said first extraction module specifically is used for:
Adhere to message to one, confirm to comprise that user that needs extract adheres to information adheres to the message corresponding protocols; The user who from the corresponding sub-daily record of network of the agreement of confirming, confirms to comprise needs extraction adheres to the message of information; Extract the user the message from definite adhering to and adhere to information.
15. equipment as claimed in claim 13 is characterized in that, said second extraction module specifically is used for:
To a communication process information, confirm with said system level testing template in the identical communication process information corresponding protocols of communication process name of the information that comprises; From the corresponding sub-daily record of network of the agreement of confirming, extract and comprise the communication process information that the corresponding user of subscriber equipment adheres to information.
16. equipment as claimed in claim 11 is characterized in that, said second extraction module also is used for:
According to time sequencing, export each and adhere to information and communication process information.
17. equipment as claimed in claim 10 is characterized in that, said equipment also comprises:
Processing module is used to confirm to adhere to the subscriber equipment of refusal; To a subscriber equipment that adheres to refusal,, from network log, extract the said corresponding user of subscriber equipment who adheres to refusal and adhere to ensemble of communication according to the attaching process template; The corresponding user of subscriber equipment that refusal is adhered in output adheres to ensemble of communication and adheres to information.
18. equipment as claimed in claim 17 is characterized in that, said processing module specifically is used for:
According to time sequencing, export each and adhere to information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 201110272855 CN102316486B (en) | 2011-09-15 | 2011-09-15 | Network log processing method and device thereof |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN 201110272855 CN102316486B (en) | 2011-09-15 | 2011-09-15 | Network log processing method and device thereof |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102316486A true CN102316486A (en) | 2012-01-11 |
| CN102316486B CN102316486B (en) | 2013-10-16 |
Family
ID=45429228
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN 201110272855 Active CN102316486B (en) | 2011-09-15 | 2011-09-15 | Network log processing method and device thereof |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102316486B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105517066A (en) * | 2015-11-24 | 2016-04-20 | 武汉虹信技术服务有限责任公司 | Method for identifying users from mass data of LTE S1-MME interface |
| CN105554784A (en) * | 2015-12-07 | 2016-05-04 | 中国联合网络通信集团有限公司 | Information correlation method and device |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2005323322A (en) * | 2004-04-08 | 2005-11-17 | Hitachi Ltd | Log information storage and analysis system |
| CN1975684A (en) * | 2006-12-13 | 2007-06-06 | 天津理工大学 | Distributing real-time data bank fault recovering method capable of supporting serving and recovering simultaneously |
| CN102118720A (en) * | 2009-12-31 | 2011-07-06 | 华为技术有限公司 | Signaling tracking method, system and device |
-
2011
- 2011-09-15 CN CN 201110272855 patent/CN102316486B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2005323322A (en) * | 2004-04-08 | 2005-11-17 | Hitachi Ltd | Log information storage and analysis system |
| CN1975684A (en) * | 2006-12-13 | 2007-06-06 | 天津理工大学 | Distributing real-time data bank fault recovering method capable of supporting serving and recovering simultaneously |
| CN102118720A (en) * | 2009-12-31 | 2011-07-06 | 华为技术有限公司 | Signaling tracking method, system and device |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN105517066A (en) * | 2015-11-24 | 2016-04-20 | 武汉虹信技术服务有限责任公司 | Method for identifying users from mass data of LTE S1-MME interface |
| CN105517066B (en) * | 2015-11-24 | 2018-10-26 | 武汉虹信技术服务有限责任公司 | A kind of mass data user knowledge method for distinguishing of LTE S1-MME interface |
| CN105554784A (en) * | 2015-12-07 | 2016-05-04 | 中国联合网络通信集团有限公司 | Information correlation method and device |
| CN105554784B (en) * | 2015-12-07 | 2019-05-14 | 中国联合网络通信集团有限公司 | A method and device for information association |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102316486B (en) | 2013-10-16 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR101494143B1 (en) | Radio resource optimization method, device and system | |
| CN109155994B (en) | User plane resource management method, user plane network element and control plane network element | |
| CN102802174B (en) | Drive test data acquiring method, drive test data acquiring system and drive test data acquiring device | |
| RU2015107560A (en) | METHODS, TERMINALS, AND SYSTEMS FOR FACILITATING THE COMMON USE OF DATA | |
| CN107222318A (en) | The performance data processing method and device and NMS of a kind of network element | |
| CN111625419B (en) | Log acquisition method, system, equipment and computer readable storage medium | |
| CN109271793A (en) | Internet of Things cloud platform device class recognition methods and system | |
| CN111400127B (en) | Service log monitoring method and device, storage medium and computer equipment | |
| CN105808353A (en) | Camera resource sharing method and device | |
| US8175256B2 (en) | Call center system and method for obtaining interface invoke information | |
| CN108092685A (en) | Double card state identification method, device, equipment and the medium of double card slot terminal | |
| CN103530247B (en) | The priority concocting method of bus access between a kind of node based on multiserver | |
| CN106713351B (en) | Secure communication method and device based on serial server | |
| CN102316486B (en) | Network log processing method and device thereof | |
| US10536393B2 (en) | Mail obtaining method, terminal, and system | |
| CN104684020A (en) | Signaling congestion processing method, device, base station and system | |
| CN105743676B (en) | A kind of multi-data source synthetical collection device and method | |
| CN109688633A (en) | Core network data acquisition system, method, apparatus and terminal device | |
| CN105554784A (en) | Information correlation method and device | |
| CN113133017A (en) | Target user determination method, device, equipment and medium | |
| CN105357129B (en) | A kind of business sensing system and method based on software defined network | |
| CN105429695A (en) | Method and device of detecting wireless equipment information | |
| WO2023093605A1 (en) | Information transmission method, terminal, and network device | |
| CN106559838B (en) | business processing optimization method and device | |
| CN106469168B (en) | The method and device that diversiform data is handled in data integrated system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| ASS | Succession or assignment of patent right |
Owner name: DATANG LIANZHI INFORMATION TECHNOLOGY CO., LTD. Free format text: FORMER OWNER: DATANG MOBILE COMMUNICATION EQUIPMENT CO., LTD. Effective date: 20140515 |
|
| C41 | Transfer of patent application or patent right or utility model | ||
| COR | Change of bibliographic data |
Free format text: CORRECT: ADDRESS; FROM: 100083 HAIDIAN, BEIJING TO: 550001 GUIYANG, GUIZHOU PROVINCE |
|
| TR01 | Transfer of patent right |
Effective date of registration: 20140515 Address after: 550001, Guizhou province Guiyang economic and Technological Development Zone Development Road, Meng Meng equipment manufacturing eco industrial park standard workshop two project, building No. 5 floor Patentee after: DATANG LIANZHI INFORMATION TECHNOLOGY CO., LTD. Address before: 100083 Haidian District, Xueyuan Road, No. 29, Patentee before: Datang Mobile Communication Equipment Co., Ltd. |
|
| TR01 | Transfer of patent right |
Effective date of registration: 20200904 Address after: 100083 Haidian District, Xueyuan Road, No. 29, Patentee after: DATANG MOBILE COMMUNICATIONS EQUIPMENT Co.,Ltd. Address before: 550001, Guizhou province Guiyang economic and Technological Development Zone Development Road, Meng Meng equipment manufacturing eco industrial park standard workshop two project, building No. 5 floor Patentee before: DATANG LIANZHI INFORMATION TECHNOLOGY Co.,Ltd. |
|
| TR01 | Transfer of patent right |