Network data analysis method and device and electronic equipment

Abstract

The invention discloses a network data analysis method and device and electronic equipment. The method comprises the following steps: acquiring network data; performing classified sniffing on the network data according to an acquisition mode of the network data to obtain a sniffing result, wherein the sniffing result comprises the identified network protocol type; according to the sniffing result,classifying, integrating and storing the network data in a database to serve as a to-be-analyzed data source; and analyzing the to-be-analyzed data source in different modes and different degrees according to an analysis demand of a user to obtain an analysis result of the network data. According to the network data analysis method, the conventional automatic analysis can be achieved, and the hierarchical analysis of any layer of network data messages and analysis of a nested network protocol can be achieved; meanwhile, the autonomous addition of a private protocol is supported, and the flexibility and expandability of network data processing are greatly improved.

Description

technical field [0001] The present application relates to the technical field of network data processing, in particular to a network data analysis method, device and electronic equipment. Background technique [0002] In the network data processing scenario, due to the layered design of the network, there are different layered protocol data on the network, such as the transport layer UDP (User Datagram Protocol, User Datagram Protocol) protocol data often used in unreliable transmission, IP (Internet Protocol, Internet Interconnection Protocol) application layer RTP (Real-timeTransport Protocol, Real-time Transport Protocol) protocol data, etc. in voice communication. How to obtain target protocol data and analyze it effectively is of great significance in network analysis and network security applications. [0003] Currently commonly used sniffing tools include Wireshark (a network packet analysis software, no Chinese translation), Sniffer (sniffer, a network packet captur...

AI Technical Summary

Problems solved by technology

[0003] Currently commonly used sniffing tools include Wireshark (a network packet analysis software, no Chinese translation yet), Sniffer (sniffer, a network packet capture tool), etc. Wireshark can analyze network protocols one by one in a tree structure. Layer analysis can meet certain practical application requirements, but the form of protocol data in the actual network is very complex, and protocol re-encapsulation often occurs. Network protocols are not encapsulated layer by layer in strict order from high to low. The payload will nest some lower-level protocol data, which will cause great difficulties for protocol analysis

In addition, traditional sniffing tools generally only support the analysis of protocols with public standards, and do not support the analysis of private protocols, and they are often presented to users in the form of UI (UserInterface, user interface), which hides the specific details of the underlying development, giving customization Development and maintenance have caused great difficulties, greatly limiting application scenarios

Images