Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. The components of embodiments of the present invention generally described and illustrated in the figures herein may be arranged and designed in a wide variety of different configurations. Thus, the following detailed description of the embodiments of the present invention, presented in the figures, is not intended to limit the scope of the invention, as claimed, but is merely representative of selected embodiments of the invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, it need not be further defined and explained in subsequent figures.
In the process of implementing the technical solution provided in the embodiment of the present application, the inventor of the present application finds that, in the prior art, it is difficult for the current passive data information collection manner to perform network diagnosis on a specific AP or a specific terminal device. Especially for wireless networks, due to surrounding wireless interference, differences of different types of terminal devices and other influencing factors, diagnosis of network problems is difficult to solve through passive collection and statistics.
On the other hand, the way of passively collecting data information depends on the online state of the user, and when the terminal equipment of the user is in an offline state, it is difficult to collect measurement data for analysis and diagnosis. Moreover, because a wireless network is complex, in most cases, the actually occurring network problems are difficult to be solved by means of passively collecting data information, and generally, professional technicians are required to be relied on to carry out actual positioning on the site of a user, and the network problems are analyzed and determined by means of actively constructing message tests and the like, so that high labor cost is required.
The above prior art solutions have shortcomings which are the results of practical and careful study of the inventor, and therefore, the discovery process of the above problems and the solutions proposed by the following embodiments of the present invention to the above problems should be the contribution of the inventor to the present invention in the course of the present invention.
In order to alleviate the above problem, embodiments of the present invention provide a monitoring and diagnosing system and a network monitoring and diagnosing method. The following embodiments are provided to describe a monitoring and diagnosing system and a network monitoring and diagnosing method according to the present invention.
The embodiment of the invention provides a monitoring and diagnosing system 10. Referring to fig. 1, fig. 1 is a block diagram of a monitoring and diagnostic system 10 according to an embodiment of the present invention. The monitoring and diagnostic system 10 includes: an AP100, a terminal device 200, an AC400, and a server 300 communicatively connected to each other. The number of the APs 100, the terminal devices 200, the ACs 400 and the servers 300 configured in the monitoring and diagnosing system 10 may be set according to actual requirements.
In this embodiment, the AP100 or the terminal device 200 runs a probe proxy module 20, and the server 300 runs a probe service module 30. The detection agent module 20 is configured to simulate an internet surfing behavior of a client, and report network measurement data collected during an internet surfing process to the detection service module 30. The probe service module 30 is configured to analyze the network measurement data and diagnose the communication link.
In this embodiment, the deployment manner of the probe agent module 20 includes, but is not limited to, independent deployment on the terminal device 200, or extended deployment on the AP 100.
In this embodiment, the detection agent module 20 may be independently deployed on the terminal device 200 (e.g., a smart phone, a PC, etc.) as a wireless measurement product. In addition, the detection agent module 20 may be independently deployed on a separate mobile device (e.g., a mobile robot). For example, in a home wireless network application scenario, the detection agent module 20 may be set on a mobile robot as a detection device, the mobile robot needs to access a wireless network, and along with the dynamic movement of the mobile robot, the detection agent module 20 may simulate the internet access behavior of a client to actively collect network measurement data.
In this embodiment, the probe agent module 20 may also perform extended deployment of function upgrade based on the existing network AP 100. For example, the physical AP100 of the entity may virtualize a plurality of virtual APs, and in the present solution, a part of the virtual APs may be expanded in function, and the part of the virtual APs is expanded and deployed as the detection proxy module 20. The method preferably adopts an expansion deployment mode, the user side does not need to increase extra cost investment, and extra manual intervention is not needed, so that the maintenance is convenient.
In this embodiment, the existing interaction manner between the AP100 and the AC400 may be maintained, and the probe proxy module 20 may be configured and issued by the AC400 as a configuration of the AP 100.
In this embodiment, the deployment manner of the probe service module 30 may include, but is not limited to, being deployed on the server 300 as an independent system alone, or being deployed on the server 300 as a system module in an integrated manner.
In this embodiment, the carrier of the probe service module 30 may be a separate server 300, and the probe service module 30 may be deployed on the server 300 independently as a stand-alone system.
In this embodiment, the solution may also adopt a docker (an open source application container engine) technology, and integrally deploy the probe service module 30 into an existing computing system as a sub-module in the computing system. The Docker-based integrated deployment mode is preferably adopted, the modularization idea can be embodied, the hardware cost does not need to be added, and the operation is convenient. Moreover, the service layer can be expanded, and software upgrading on the AP100 side is not needed.
In this embodiment, the probe service module 30 has all functions of managing wireless clients, and facilitates the integration of test tools. The main functions include: authentication functions, such as WPA/WPA2(Wi-Fi Protected Access, Protected wireless computer network security system) authentication, Dot1X (IEEE 802.1X abbreviation, Client/Server based Access control and authentication protocol) authentication, and the like. An address obtaining function, for example, a DHCP (Dynamic Host Configuration Protocol) client. Network testing tools, such as IPERF (a network performance testing tool that can test maximum TCP and UDP bandwidth performance, has various parameters and UDP characteristics, can be adjusted as required, and can report information such as bandwidth, delay jitter, and packet loss), WGET (a free tool that supports automatic file downloading from a network), and the like. The detection service module 30 has a uniform database interface for storing the data result of the detection diagnosis.
Referring to fig. 2, fig. 2 is a schematic diagram of a channel between the probe agent module 20 and the probe service module 30 according to an embodiment of the present invention. Two independent interaction channels can be arranged between the detection agent module 20 and the detection service module 30. One is a control channel for controlling information interaction, and the probe service module 30 and the probe agent module 20 perform interactive transmission of control information through the control channel; the other is a data channel for forwarding service data, and the detection service module 30 and the detection agent module 20 perform interactive transmission of data packets through the data channel.
In this embodiment, the Control channel may be, but is not limited to, a user-defined Control channel established by a user, a Control channel established based on a CAPWAP (Control And Provisioning of Wireless Access Points protocol) technology, And the like. The data channel can be, but is not limited to, a stateless tunnel (e.g., Ether IP/GRE), a CAPWAP-based data channel, and the like.
In this embodiment, the channel construction ideas of the probe proxy module 20 and the probe service module 30 are similar to the AC + AP mode, the probe service module 30 issues a control instruction through a control channel, and service data is reported to the probe service module 30 through a data channel for processing.
In this embodiment, the detection agent module 20 provided in this embodiment can actively collect network measurement data and report the network measurement data to the detection service module 30 for analysis and diagnosis by simulating the internet access behavior of the client. The collected network measurement data has wider range and more covered information content, so that the detection service module 30 can perform remote analysis and diagnosis conveniently, the performance of remotely solving network problems can be effectively improved, and the visit rate of professional technicians is reduced. In addition, due to the adoption of the active collection and report mode, the scheme can carry out network diagnosis on the specific AP100 or the specific terminal equipment 200 and is not influenced by factors such as surrounding wireless interference, difference of different types of terminal equipment 200 and the like.
First embodiment
The embodiment of the invention also provides a network monitoring and diagnosing method. Referring to fig. 3, fig. 3 is a flowchart illustrating a network monitoring and diagnosing method according to a first embodiment of the present invention. The method is applied to the AP100 or the terminal device 200 including the probe proxy module 20, and the AP100 and/or the terminal device 200 is communicatively connected to the server 300 including the probe service module 30. The following describes a detailed flow of the network monitoring and diagnosing method.
In step S110, the detection agent module 20 simulates an online access behavior of a client, and completes online access through interactive cooperation with the detection service module 30 and the AP 100.
Referring to fig. 4, fig. 4 is a flowchart illustrating the substep of step S110 in fig. 3 according to a first embodiment of the present invention. The step S110 may include a substep S111, a substep S112, a substep S113, and a substep S114.
In the substep S111, the detection agent module 20 receives the detection instruction issued by the detection service module 30, acquires the scanning information from the AP100, and reports the scanning information to the detection service module 30.
Referring to fig. 5, fig. 5 is a schematic flowchart illustrating a sub-step of sub-step S111 in fig. 4 according to a first embodiment of the present invention. The substep S111 may include substep S1110, substep S1112, and substep S1114.
S1110, the probe agent module 20 receives the probe instruction sent by the probe service module 30 through the control channel.
In this embodiment, a control channel is disposed between the probe service module 30 and the probe agent module 20. The PROBE service module 30 issues a PROBE instruction (e.g., PROBE instruction) through a control channel, and the PROBE agent module 20 receives the PROBE instruction issued by the PROBE service module 30 through the control channel.
S1112, the probe agent module 20 generates a scanning notification message for notifying the AP100 of channel scanning according to the probe instruction, and sends the scanning notification message to the AP100, so that the AP100 performs channel scanning.
In this embodiment, the probe agent module 20 generates a scan notification message for notifying an AP driver module in the AP100 to perform channel scanning according to the probe instruction, and sends the scan notification message to the AP driver module. And the AP driving module performs channel scanning after receiving the scanning notification message.
In this embodiment, the AP driver module belongs to a kernel mode module, and is a module close to hardware in the AP100, and is used for performing driving processing such as wireless access.
S1114, the probe agent module 20 receives the scanning information reported by the AP100, and reports the scanning information to the probe service module 30.
In this embodiment, the AP driver module may report scanning information to the probe agent module 20 when the channel scanning is finished. The probe agent module 20 reports the scanning information to the probe service module 30. The scanning information may include, but is not limited to, available channels, access BSSID (Basic Service Set Identifier, an application of Ad-hoc LAN), SSID (Service Set Identifier), authentication mode (e.g., PSK (pre-shared key mode) account password authentication mode), and other information.
In this embodiment, the BSSID has a unique identification function, and is an ID broadcast by a station in the network, for example, a MAC address of the station. SSID technology can divide a wireless local area network into several sub-networks requiring different authentication, each sub-network requires independent authentication, and only authenticated users can enter the corresponding sub-network. In a colloquial sense, an SSID is the name of a local area network, and only network devices set to the same SSID name can communicate with each other.
In this embodiment, the probe service module 30 may select a network device (e.g., the AP100, the terminal device 200, etc.) that needs to be monitored and diagnosed through BSSID identification based on the scanning information reported by the probe agent module 20.
In the substep S112, the detection agent module 20 receives the association command issued by the detection service module 30, obtains the association result from the AP100, and reports the association result to the detection service module 30.
Referring to fig. 6, fig. 6 is a schematic flowchart illustrating the sub-step of sub-step S112 in fig. 4 according to a first embodiment of the present invention. The substep S112 may include substep S1120, substep S1122, and substep S1124.
In the sub-step S1120, the detection agent module 20 receives the association command sent by the detection service module 30 through a control channel.
In this embodiment, after selecting the network device that needs to be monitored and diagnosed, the probe service module 30 may issue an ASSOCIATION instruction (for example, an ASSOCIATION instruction) to the probe agent module 20 in the network device through the control channel, and the probe agent module 20 receives the ASSOCIATION instruction through the control channel.
In the substep S1122, the probe agent module 20 generates an association notification message for notifying the AP100 of performing wireless association according to the association instruction, and sends the association notification message to the AP100, so that the AP100 performs wireless association.
In this embodiment, the probe proxy module 20 generates an association notification message for notifying the AP driver module of the AP100 of performing wireless association according to the association instruction, and sends the association notification message to the AP driver module, and the AP driver module performs wireless association processing after receiving the association notification message.
In the substep S1124, the probe agent module 20 receives the association result reported by the AP100, and reports the association result to the probe service module 30.
In this embodiment, when the wireless association is finished, the AP driver module may report the association result to the probe proxy module 20, and the probe proxy module 20 reports the association result to the probe service module 30. Wherein the association result comprises association success or association failure.
In this embodiment, when association fails, the probe service module 30 may reissue an association instruction, so that the AP driver module performs wireless association again.
In the substep S113, when the association result is successful, the detection agent module 20 receives the authentication instruction issued by the detection service module 30, obtains the authentication result from the AP100, and reports the authentication result to the detection service module 30.
Referring to fig. 7, fig. 7 is a schematic flowchart illustrating a sub-step of sub-step S113 in fig. 4 according to a first embodiment of the present invention. The sub-step S113 may include a sub-step S1130, a sub-step S1132, and a sub-step S1134.
In the sub-step S1130, the detection agent module 20 receives the authentication instruction sent by the detection service module 30 through the control channel.
In sub-step S1132, the probe agent module 20 generates an authentication notification message for notifying the AP100 of identity authentication according to the authentication instruction, and sends the authentication notification message to the AP100, so that the AP100 performs identity authentication.
In the substep S1134, the probe agent module 20 receives the authentication result reported by the AP100, and reports the authentication result to the probe service module 30.
In this embodiment, the authentication process is similar to the association process in fig. 6, and is not described herein again. The authentication method may include, but is not limited to: WPA, WAP2-PSK, WAP2, and the like.
In the substep S114, when the authentication result is that the authentication is passed, the detection agent module 20 receives the key issued by the detection service module 30, and issues the key to the AP100, so that the AP100 performs key installation to complete online access.
In this embodiment, when the authentication is passed, the probe proxy module 20 receives the key issued by the probe service module 30 through a control channel, and issues the key to the AP driver module of the AP100, and the AP driver module performs key installation to complete the online access process.
Referring to fig. 3 again, the method further includes: step S120.
Step S120, when the online access is successful, the detection agent module 20 simulates an online communication behavior of the client, and collects and reports network measurement data to the detection service module 30 during the data communication process, so that the detection service module 30 performs analysis and diagnosis on the communication link based on the network measurement data.
Referring to fig. 8, fig. 8 is a flowchart illustrating the substep of step S120 in fig. 3 according to a first embodiment of the present invention. The step S120 may include a substep S121, a substep S122, a substep S123, and a substep S124.
In the substep S121, the detection agent module 20 receives the data packet sent by the detection service module 30 through a data channel, and decapsulates the data packet.
In this embodiment, after the probe agent module 20 completes the on-line authentication process of the simulation client, the probe service module 30 may send a data packet through a data channel, and the probe agent module 20 receives the data packet through the data channel.
In this embodiment, after receiving the data packet, the detection agent module 20 may perform tunnel decapsulation processing on the data packet. The data packet includes a message instruction for collecting air interface information, and the detection agent module 20 may acquire the message instruction for collecting air interface information after decapsulating the data packet, so as to actively collect network measurement data in the internet access process.
In sub-step S122, the probe agent module 20 sends the decapsulated data message to the AP 100.
In this embodiment, the probe proxy module 20 sends the decapsulated data message to the AP driver module of the AP 100.
In the substep S123, the detection agent module 20 receives the response packet carrying the network measurement data reported by the AP100, and encapsulates the response packet.
In this embodiment, the AP driver module processes the data packet, and when acquiring the message instruction for collecting air interface information, actively collects network measurement data during internet access, and reports a response packet carrying the network measurement data to the detection agent module 20, and the detection agent module 20 receives the response packet and performs tunnel encapsulation processing on the response packet. The network measurement data carried in the response message refers to data information collected in a normal internet access process (e.g., browsing a web page, opening a network application, etc.).
In the substep S124, the detection agent module 20 reports the response packet after encapsulation processing to the detection service module 30.
In this embodiment, after receiving the response packet, the probe service module 30 may analyze the response packet, and the probe service module 30 may perform statistics, analysis, and other processing on the network measurement data to diagnose the communication link.
In this embodiment, the detection agent module 20 simulates an online access behavior and an online communication behavior of the client, and can actively collect network measurement data and report the network measurement data to the detection service module 30 for analysis and diagnosis in the online process. The collected network measurement data has wider range and more contents, the performance of the detection service module 30 for remotely processing network problems can be effectively improved, the visit rate of professional technicians is reduced, and the manual processing cost is reduced. Moreover, because the active collection and reporting mode is adopted, network diagnosis can be performed on the specific AP100 or the specific terminal device 200, and the method is not affected by factors such as surrounding wireless interference and differences of different types of terminal devices 200.
Second embodiment
Referring to fig. 9, fig. 9 is a flowchart illustrating a network monitoring and diagnosing method according to a second embodiment of the present invention. The method is applied to the monitoring and diagnosis system 10, wherein the AP100 or the terminal device 200 includes the probe agent module 20, the server 300 includes the probe service module 30, and the AP100, the terminal device 200 and the server 300 are communicatively connected to each other.
Step S210, the detection service module 30 issues a control instruction, and the detection agent module 20 simulates an online access behavior of a client based on the control instruction, and completes online access through interactive cooperation with the detection service module 30 and the AP 100.
Step S220, when the online access is successful, the detection service module 30 issues a data message, the detection agent module 20 simulates the online communication behavior of the client based on the data message, and collects and reports network measurement data to the detection service module 30 during the data communication process.
In this embodiment, the control instruction may include, but is not limited to, a probe instruction, an association instruction, an authentication instruction, and the like. The description of the steps S210 and S220 can refer to the description of the steps S110 and S120 in the first embodiment.
In step S230, the probe service module 30 performs analysis and diagnosis on the communication link based on the network measurement data.
In this embodiment, the probe service module 30 may perform statistics and analysis on the network measurement data reported by the probe agent module 20, and call a network test tool to test the network function and performance, so as to diagnose the communication link.
In this embodiment, the probe service module 30 may invoke a network test tool to test the network function and performance by analyzing the test script set by the user administrator, and store the execution result of the network test tool in the database. The probe service module 30 may also return the execution results to the user.
In this embodiment, the network test tool may include, but is not limited to, WPA, DHCP (Dynamic host configuration Protocol), ICMP (Internet Control message Protocol), DNS Python Process, Web service, Traceroute (a tool for detecting the number of gateways that a host sending a packet passes through to a target host), and other tools.
In summary, the monitoring and diagnosing system and the network monitoring and diagnosing method according to the embodiments of the present invention include an AP, a terminal device and a server, which are connected to each other in a communication manner, where the AP or the terminal device includes a probe agent module, and the server includes a probe service module. The detection agent module is used for simulating the internet surfing behavior of the client and reporting the network measurement data collected in the internet surfing process to the detection service module. And the detection service module is used for analyzing the network measurement data and diagnosing the communication link.
Therefore, the detection agent module provided by the scheme can actively collect network measurement data and report the network measurement data to the detection service module for analysis and diagnosis in the online process by simulating the online behavior of the client. The collected network measurement data has wider range and more covered information content, the detection service module is convenient to carry out remote analysis and diagnosis, the performance of remotely solving the network problem can be effectively improved, and the visit rate of professional technicians is reduced.
In addition, due to the adoption of the mode of actively collecting and reporting, the scheme can carry out network diagnosis on the specific AP or the specific terminal equipment and is not influenced by factors such as surrounding wireless interference, difference of different types of terminal equipment and the like.
The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.