201123939 四、指定代表圖： 圖0 2·無線作業電腦 4.無線側錄器 10·防火牆 (一) 本案指定代表圖為：第（一 (二) 本代表圖之元件符號簡單說明： 1·無線基地台 3·網際網路 5.無線側錄器中控端 五、本案若有化學式時，請揭示最能_發日㈣徵的化學式 六、發明說明： 【發明所屬之技術領域】 ，尤錄與集中解譯方法 雜由刀散式多·點&置之複數個無線侧錄 輸之封包進行侧錄作業，且使各別所側錄之封 ㈣或集中進仃封包合併(Capture)與解譯(DecQde)作举 方=加侧錄封包策集、還原完整度之無線側錄與集中解譯 【先前技術】 純t目前市場上已知的無線觸方法，細單點式侧錄 環ϋΐί封包，以幫助制者或崎人員，追蹤無線網路 1 、/.洞，或者觀察通訊效能上的瓶頸。然而，針對同一 、、網路，單點式無線封包側錄之主機設在不同地理位置 所側錄到的無線封包，或因無線波強弱、或因地理地形 201123939 之干擾等等因素’單點無線側錄所側錄到封包數及遺漏之封 包數結果皆有所不同。因此，為改良使無線侧錄之封包數完 整或減少側錄遺漏之封包數，本發明方法利用『多點封包側 錄』再加上『封包合併演算法』，於不同地理位置分散設置多 點之無線侧錄，再將多點設置無線側錄所側錄到的無線封包 集中進行合併，得具有極完整的封包侧錄效率，而使所側錄 之無線封包數更為完備，亦即，使封包解譯程式更完整的還 原，進而對還原、鑑定作業，更具效益。201123939 IV. Designated representative figure: Figure 0 2·Wireless working computer 4. Wireless side recorder 10·Firewall (1) The representative representative picture of this case is: (1) The simple description of the component symbol of the representative figure: 1·Wireless Base station 3 · Internet 5. Wireless side recorder central control terminal 5. If there is a chemical formula in this case, please disclose the chemical formula of the most capable (four) levy. The invention description: [Technical field of invention] And the centralized interpretation method is performed by a multi-point, multi-point & set of multiple wireless side recording and recording packages for the side recording operation, and the respective side of the recorded seal (four) or centralized into the package combination (Capture) and solution Translation (DecQde) for the party = plus side recording package, restore the integrity of the wireless side recording and centralized interpretation [previous technology] pure t currently known on the market wireless touch method, fine single point side recording ring ϋΐ Packets to help the makers or people in the market to track the wireless network 1, or hole, or to observe the bottleneck of communication performance. However, for the same, network, single-point wireless packet side of the host is set in different geography The wireless packet recorded on the side of the location, or The strength of the wireless wave, or the interference of the geographical terrain 201123939, etc. 'The number of packets recorded by the single-point wireless side record is different from the number of packets and the number of missing packets. Therefore, in order to improve the number of packets recorded by the wireless side record or To reduce the number of missing packets, the method of the present invention utilizes "multi-point packet side recording" plus "packet consolidation algorithm", and sets multiple points of wireless side recording in different geographical locations, and then sets multiple points for wireless side recording. The wireless packets recorded on the side are merged in a centralized manner, which has a very complete packet side recording efficiency, and the number of wireless packets recorded on the side is more complete, that is, the package interpretation program is more completely restored, and then restored. And identification operations are more effective.
【發明内容】 本發明之主要目的，即在提供—種分散式多點無線側錄 ，、集中解譯方法，以分散式多點設置多數個無_錄器，並 使多數個單點無_錄H單騎行無線晴傳輸封包之側錄 ，再集中合併多數個無_錄騎讎 明加封包鱗該攸整 包側錄及元整還原的成功率。 由益式多點無線側錄與集中解譯方法，係利用於 ":線基地口（Access Point)與無線作業電腦(Wireiess 却in所組成無_輸之網際網路封包側錄作業。盆中， 係與網際網路(ΐηΐ—連接，以提供;:作 ^ ,上網傳輸服務，而構成無線網路，·複數個無線侧 錄器（wlreiess - Detective)係以分 側 路’藉由該等多數無線侧錄器ΐ獨進行封L侧 進行封包集中合併與解嗶作Mana__，以 錄到的封包集中合併，以增加封包Siii線側錄器測 201123939 則述之分散式多點無線側錄與針解釋方法 無線側錄器可設置為具備兩張無線網卡， ϋ辭職行無制聽彼此之 桃，，、線貞料傳輸’明加無、_錄後資料傳輸的效率。 【實施方式】 參閱第一圖及第二圖’係為本發明之分散式多點 :線侧錄裝置無、_卡配置w。如騎示，本發明欲側 ^無線網路由無線基地台丄與一個或複數個無線作業電腦 2所組成。其中，該無線基地台1通常係有-防火牆]_ 〇斑 :際網路3連接’以提供無線作f電腦2無線上網服務；本 發明方法之裝置以分散式設置圍繞於被侧錄網路之複數個無 ，側錄器4所組成，藉由該等無線側錄器4各麟該無線 路進行無線傳輸的封包側錄作業’且將測錄到的封包(本件實 ，例以無線網路傳輸方式的說明），傳遞給無線侧錄器中控端 並由無線侧錄器中控端5將所有無線侧錄器4所侧錄的 封包集巾進行封包合併贿譯健。該無_聽4除本身 $單獨進行封包侧錄與解譯作業外，亦可傳輸予無線側錄 器中控端5將多台無線側錄器4測錄到的封包集中合併與解 譯，以增加封包荒集1原的完整度。 开興解 其中： 該專無線侧錄器4係可決定為主控管理中心模式 (Wireless-Detective Central Management) ’ 或是被控制模 式、。其若為主控管理中心模式則為無線侧錄器中控端5，可 透過無線控麵管理之無制錄II 4設備進行同步侧錄作業 〇 該無線侧錄器中控端5，可提供時間同步機制，使分散 在不同地理位置之錄個無制㈣4進行系統時間同步^ 201123939 讓側錄封包的時間紀錄一致。 無線側錄器中控端5接收所有無線側錄器4所側錄之封 匕，並合併所有封包集中解譯。 該等無線側錄器4於可設為具有無線控制卡41及無線 貝11¾卡4，等兩張無線網卡，其中之無賴錄卡4 2係負責 進行封集、側錄作業，另-無線控制卡41則可進行無 線j錄器4或無線侧錄器中控端g彼此之間的溝通與資料傳 輸。SUMMARY OF THE INVENTION The main object of the present invention is to provide a distributed multi-point wireless side recording, centralized interpretation method, and set a plurality of non-recorders in a distributed multi-point, and make most of the single points have no _ Record the side record of H single riding wireless clear transmission package, and then concentrate the merger of most of the non-recording 雠 雠 加 加 加 加 加 加 攸 攸 攸 攸 攸 攸 攸 攸 攸 攸 攸 攸 攸 攸 攸 攸 。 。 。 。 。 The multi-point wireless side recording and centralized interpretation method is used in the ": Access Point and wireless operating computers (Wireiess are composed in the Internet. In the middle, the Internet and the Internet (connected to provide;; for ^, Internet transmission services, and constitute a wireless network, a plurality of wireless video recorders (wlreiess - Detective) are divided into sideways by Most of the wireless side recorders perform the centralized integration and unpacking of Mana__ on the L side, and combine the recorded packets to increase the packet. The Siii line side recorder measures the 201123939 decentralized multipoint wireless side recording. The wireless side recorder can be set to have two wireless network cards, and the resignation line does not have to listen to each other's peaches, and the efficiency of data transmission after the transmission of the data is clear. Referring to the first figure and the second figure 'is a decentralized multi-point of the present invention: the line side recording device is not, the _ card configuration w. If the riding is shown, the invention intends to side wireless network routing wireless base station with one or plural A wireless work computer 2 is composed of The wireless base station 1 usually has a firewall - _ 〇 : : : : : : 以 以 以 以 以 以 以 以 以 以 以 以 以 以 以 ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; No, the side recorder 4 is composed of the wireless side recorders 4, the wireless side of the wireless channel for wireless transmission of the packet side recording operation 'and the recorded packets (this case, for example, wireless network transmission The description of the mode is transmitted to the central control unit of the wireless side recorder, and the packet collection towel recorded by all the wireless side recorders 4 is sealed and combined by the wireless side recorder central control terminal 5. The no-listening 4 In addition to the individual side of the package side recording and interpretation operations, it can also be transmitted to the wireless side recorder central control unit 5 to combine the recording and interpretation of the packets recorded by the multiple wireless side recorders 4 to increase the packet collection 1 The original integrity. Kaixing solution: The wireless wireless recorder 4 can determine the Wireless-Detective Central Management mode or the controlled mode. If it is the master management center mode It is the wireless side recorder central control terminal 5, which can be wireless No management of face management II 4 equipment for synchronous side recording operation 〇 The wireless side recorder central control terminal 5, can provide time synchronization mechanism, so that scattered in different geographical locations recorded no system (four) 4 system time synchronization ^ 201123939 let The time record of the side recording packets is consistent. The wireless side recorder central control terminal 5 receives the seals recorded by all the wireless side recorders 4, and combines all the packet centralized interpretations. The wireless side recorders 4 can be set to have Wireless control card 41 and wireless beacon 113⁄4 card 4, and other two wireless network cards, of which the rogue card 4 2 is responsible for the enclosing and side recording operations, and the other - the wireless control card 41 can be used for wireless j recorder 4 or wireless Communication and data transmission between the control terminals g in the side recorder.
刖述本發明建立網路的應用方法如下： 1 ·無淪是無線側錄器4或是無線侧錄器中控端5，係 字…、線控制卡4 1以點對點(Ad-h〇c Network)的模式來建立 通訊網路基礎，且職使_無__道細鐵丨u。 2 .無線側錄器中控端5將會啟動動態ιρ配置(DHCp _ ynamic Host Controlling Protocol)服務來配發 ip給其他 線側錄H4 ’因此可以避免各個無線侧錄器杨lp重複問 0 .…、蜾惻綠器4獲得IP之後，將會主動發送廣播封包 (Recast Packet)來探索無線側錄器中控端5的Ip位 ，，這代表當無線侧錄H中控端5接收到無線側錄器4所發 /达Ϊ探ί封包後，會主動回應，藉以讓無線侧錄器4與無線 =錄器t控端5概獲知各自的ΙΡ位置與狀態，為往後通訊 使用。 4 -㈣讎控端5確認掌握制無線側錄器4 ί，ί可灯達各雜務齡給無_錄114，如無線側錄 等工作。 ㈣^無論是哪—種任務指令，如果將針對某—無線通訊 3 η)進行無線阻斷、側錄’㈣無線側錄器中 控& 5必翻編以Ghannel，是讀目前無_錄器4彼 201123939 此溝通使_ Channel _，例如都是丨卜如 相同，則必須更換通訊使用的Channel，此時無線側錄器中控 端5將會通知所有的無線側錄器4進行頻道更換的作二 複前述1〜3的動作完成分散式側錄的^ 置作業，並且開始執行要求的侧錄作業。 6 ♦若執行的任務為側錄健，則各個無線側錄器4包 括…線侧錄器中控端5，就會開始利用無線側錄卡4 封包侧錄’並且先將封包儲存於各本機的中，然後 j無線控制卡4 1將龍傳制無線側錄器中控端5中 中進行封包解譯作業。 p 遂第三® ’係為本翻綠封包繼、傳送的基本 私二f圖。如圖所不，本發明係於無線側錄器4中建立- 、紗^目0^的封包6流量A於無 拉工泳卡4 1將封包6傳送給無線侧錄器中控端5的頻寬 4題排序緩舰4 4避免封包6遺失(Paeket Loss) ::=降低時(離峰時)，可以提供二二;=: 無線侧錄器主控管理中心5來進行合併解譯。 章^圖。圖-’係為本發明無線封包侧錄及集中合併作 么所示’當各個無線側錄器4將所側錄到的封 錄器+控端5後，由無線側錄器中控端5 封勺併的作業。而封包6合併作業在於滤除重複的 的整封包6的排列順序。這是由於在不同地理位置 有齡丨制綱㈣包6外，也 用了 t1"成ίί6合併順序不合理的現象。故而，本發明採 二下的祕法來㈣解決封包合併順序的問題： 如圓所示，本發曰月可將封包資料6a與封包資料6b視為 201123939 ======彳_控端5的側 封包合併程式的健步驟如下 4 5進仃封包合併。 並且由处封包資料6a、封包資料6b取出每個封包6， 並且计异封包資料内容建立一 目的在於辨別兩個封包6是相同、）益此雜湊值主要 浪費m^oadlng去進行byte_t〇_byte的封包内容比對。要 肺L1封包合併程式45準備將封包存放在封包排序緩 ^ 4 4時，會赠性方式，依序將『 序，區44内的封包6—做比對，並且利 =比碑緩衝區4 4内已經有重複的封包6 出現如果實屬重複，則就拋棄『候選封包』。 3 ·而在封包合併程式4 5進行重複性比對的時候 實同時也會進行排序作業，排序主要是針對仰封包虞The application method of the invention for establishing a network is as follows: 1 · Innocent is the wireless side recorder 4 or the wireless side recorder central control terminal 5, the word..., the line control card 4 1 is point-to-point (Ad-h〇c Network) mode to establish the basis of the communication network, and the job _ no __ 细细丨 丨 u. 2. The wireless side recorder central control terminal 5 will start the dynamic ιρ configuration (DHCp_ynamic Host Controlling Protocol) service to distribute ip to other line side recording H4 'so can avoid each wireless side recorder Yang lp repeat 0. ..., after the green device 4 obtains the IP, it will actively send a broadcast packet (Recast Packet) to explore the Ip bit of the wireless side recorder central control terminal 5, which means that when the wireless side recording H central control terminal 5 receives the wireless After the side recorder 4 sends/reaches the ί packet, it will respond actively, so that the wireless side recorder 4 and the wireless=recorder t terminal 5 can know their respective positions and states for later communication. 4 - (4) The control terminal 5 confirms that the master wireless recording device 4 ί, ί can reach the various service ages for no-record 114, such as wireless side recording. (4) ^ No matter which kind of mission instruction, if it will be wirelessly blocked for some - wireless communication 3 η, side recording '(four) wireless side recorder central control & 5 must be copied to Ghannel, is read currently no _ recorded 4th 201123939 This communication makes _Channel_, for example, the same as the same, you must replace the channel used for communication, at this time the wireless side recorder central terminal 5 will notify all wireless side recorders 4 for channel replacement The second operation of the above 1 to 3 completes the operation of the distributed side recording, and starts the execution of the required side recording operation. 6 ♦ If the task to be performed is side recording, each wireless side recorder 4 includes... the line side recorder central control terminal 5, and will start to use the wireless side card 4 to package the side record 'and store the package in each book first. In the middle of the machine, then the j wireless control card 4 1 will perform the packet interpretation operation in the central control terminal 5 of the dragon transmission wireless recorder. The p 遂 third® ’ is the basic private image of the green packet. As shown in the figure, the present invention is to establish a packet 6 flow rate A in the wireless side recorder 4, and the package 6 is transmitted to the wireless side recorder central control terminal 5 by the pull-free swimming card 4 1 . Bandwidth 4 title sorting slow ship 4 4 Avoid packet loss 6 (Paeket Loss) ::= Reduced (when off peak), can provide 22; =: Wireless side recorder master management center 5 for merge interpretation. Chapter ^ map. Figure-' is the wireless packet side recording and centralized combination of the present invention. 'When the wireless side recorder 4 will record the side to the recorder + control terminal 5, the wireless side recorder central control terminal 5 Seal the spoon and work. The merging operation of the packet 6 is to filter out the order of the repeated entire packets 6. This is due to the fact that in different geographical locations, the ageing system (four) package 6 also uses t1" into the ίί6 merger order is unreasonable. Therefore, the invention adopts the secret method of the second (4) to solve the problem of the order of the merger of the package: As indicated by the circle, the packet data 6a and the packet data 6b can be regarded as 201123939 in the current month. ======彳_ The health steps of the side packet merging program of 5 are as follows. And each packet 6 is taken out by the packet data 6a and the packet data 6b, and the content of the different packet data is established to distinguish that the two packets 6 are the same, and the hash value is mainly wasted m^oadlng to perform byte_t〇_byte The contents of the package are compared. To the lung L1 packet merging program 45 to prepare the packet to be stored in the packet sorting slow ^ 4 4, will be gifted, in order, in the order, the packet in the area 44 - 6 comparison, and profit = than the monument buffer 4 If there is already a duplicate packet in 4, if it is repeated, then the "candidate packet" will be discarded. 3 · When the repetitive comparison is performed in the packet merging program 4 5, the sorting operation is also performed at the same time, and the sorting is mainly for the sag package.
TCP 封包的 Source IP，Source Port，Destination IPSource IP of the TCP packet, Source Port, Destination IP
Destination Port, Session Number, Session Acknowledge Number等6個參數加總，計算出一權量值(Weight “丨此）， 做為排序比較的依據。在TCP通訊原理中，同一連線中的 session number有其順序性，因此我們依此特性，來做為重 新調整合併封包後的封包排序方式。 4 ·封包排序緩衝區4 4有一數量限制，通常給予 1000〜2000的封包緩衝數量，將足以應付即時侧錄的需求。而 當封包排序緩衝區4 4的空間滿時，我們會將最舊的封包6 轉存至另外一合併封包檔案6c中，而此合併封包檔案6C中 的封包6内容，將會因為前面的緩衝機制加以正確排序所有 封包6。此合併封包檔案6c，也將會成為無線側錄器中控端 5未來進行封包解譯還原的來源。 前述各實施例’僅為說明本發明之較佳實施方式，而非 201123939 、變更，仍不失本創作 所在林脫摘作之精神範嘴。 ΐ:=ΐ機：無線封包^ 專利之中請，祈β 爰依法提出 —早日賜准專利，至感德便。 【圖式簡單說明】Destination Port, Session Number, Session Acknowledge Number and other 6 parameters are added together to calculate a weight value (Weight "this"), as the basis for sort comparison. In the TCP communication principle, the session number in the same connection has The ordering, so we use this feature as a way to re-adjust the packet sorting after the merged packet. 4 · Packet sorting buffer 4 4 has a limit, usually giving 1000~2000 packet buffering amount, which will be enough to cope with the immediate side Record the demand. When the space of the packet sorting buffer 4 4 is full, we will transfer the oldest packet 6 to another merged packet file 6c, and the content of the packet 6 in the merged package file 6C will Because the previous buffering mechanism correctly sorts all the packets 6. This merged packet file 6c will also become a source of future packet interpretation and restoration of the wireless side recorder central control unit 5. The foregoing embodiments are merely illustrative of the present invention. The preferred embodiment, instead of 201123939, changes, still does not lose the spirit of the creation of the novel. ΐ:=ΐ机: wireless packet ^ patent please Chi β Yuan proposed law - as soon as possible thanks to patent-pending, to a sense of ethics will be briefly described [drawings].
第一圖係本發明之裝置圖。 第二圖係本發明之無線網卡配置圖。 第三圖係本發明之封包側錄、傳送的基本運作結構圖 第四圖係本發明之無線封包側錄及合併作業結構圖。 【主要元件符號說明】 2·無線作業電腦 4.無線侧錄器 4 2 ·無線側錄卡 4 4 ·封包排序緩衝區 6 ·封包 6b .封包資料 10·防火牆 1·無線基地台 3·網際網路 41·無線控制卡 4 3 ·封包暫存佇列 4 5 ·封包合併程式 5·無線侧錄器中控端 6a ·封包資料 6c ·合併封包檔案 8The first figure is a diagram of the apparatus of the present invention. The second figure is a wireless network card configuration diagram of the present invention. The third figure is a basic operational structure diagram of the packet side recording and transmission of the present invention. The fourth figure is a structural diagram of the wireless packet side recording and combining operation of the present invention. [Main component symbol description] 2·Wireless computer 4. Wireless side recorder 4 2 · Wireless side card 4 4 · Packet sorting buffer 6 · Packet 6b. Packet data 10 · Firewall 1 · Wireless base station 3 · Internet Road 41·Wireless Control Card 4 3 ·Package Temporary Queue 4 5 ·Packet Consolidation Program 5·Wireless Side Recorder Central Terminal 6a ·Package Data 6c ·Merge Packet File 8