Network flow recovery method

Abstract

The invention relates to a network flow recovery method, which belongs to the technical field of Internet and discloses a method for recovering network flow to a file. The method adopts a two-stage parallel strategy method to fully make the best of the processing efficiency of a multi-core computer, which comprises the following steps: firstly acquiring high-speed flow, adopting a Mac address xorand IP address xor method to split flow twice, and resolving the acquired initial flow into a plurality of thin flows to realize the two-stage parallel resolution of the flow; then adopting a 'producer-consumer model' loose coupling multithreading framework between working modules with data transfer in a thin flow recovery flow path to realize parallel on a threading level. In addition, the method realizes load balancing on each thin flow, and supports IPv4 and IPv6 protocols simultaneously. The invention aims to solve the problem of converting 'invisible' network flow into information which can be directly processed by a computer under high-speed network bandwidth, and provides technical support for identifying and blocking illegal network information transmission.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a method for restoring network traffic to application layer files by fully utilizing the efficiency of existing multi-core computers in a parallel manner through network traffic distribution. Background technique [0002] Since the reform and opening up, the sustained and rapid growth of my country's economy and the development of network technology have jointly promoted the development of the Internet industry. On July 16, 2009, the China Internet Network Information Center (CNNIC) released a report showing that in the first half of this year, the number of Internet users in my country has exceeded 300 million. The scale of Internet users, the number of broadband Internet users, and the number of national top-level domain name registrations (12.96 million) still rank first in the world, and the Internet penetration rate has steadily increased. [0003] At the same time, net...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to solve the problem of "invisible" transmission data in the existing network traffic and the bottleneck of real-time traffic collection and restoration in a high-bandwidth network environment, and make full use of the multi-core concurrent computing advantages of the existing computer processor to improve the performance of the device Processing capacity, the invention adopts a two-level parallel strategy method to fully tap the processing efficiency of existing multi-core computers: firstly, by capturing and secondly splitting the original flow for multiple fine network flows to achieve first-level parallelism at the flow level; In the network traffic restoration process, the "producer-consumer model" loosely coupled multi-threaded architecture is adopted between the working modules with data transfer to realize the second-level parallelism at the thread level

Images