首页> 外国专利> ROUTING MONITOR, A METHOD FOR MONITORING ROUTER INFORMATION OF A NETWORK AND A PROGRAM PRODUCT, PARTICULARLY FOR A NETWORK MONITOR TO MONITOR COMMUNICATIONS BETWEEN ROUTERS THROUGH A TAP WITHOUT REQUESTING A BGP SESSION/CONNECTION WITH ROUTERS, NOT REQUESTING A CHANGE IN A CONSTRUCTION OF THE ROUTERS

ROUTING MONITOR, A METHOD FOR MONITORING ROUTER INFORMATION OF A NETWORK AND A PROGRAM PRODUCT, PARTICULARLY FOR A NETWORK MONITOR TO MONITOR COMMUNICATIONS BETWEEN ROUTERS THROUGH A TAP WITHOUT REQUESTING A BGP SESSION/CONNECTION WITH ROUTERS, NOT REQUESTING A CHANGE IN A CONSTRUCTION OF THE ROUTERS

机译:路由监视程序,一种用于监视网络和程序产品的路由信息​​的方法,尤其是用于网络监视程序通过TAP监视路由器之间的通信,而无需请求BGP会话/与路由器的连接,而无需构造路由

摘要

PURPOSE: A routing monitor, a method for monitoring router information of a network and a program product are provided to enhance efficiency of an overall system by not setting a BGP(Border Gateway Protocol) session between a monitored router and a monitoring system and thus omitting use of a CPU cycle in the monitored router. CONSTITUTION: A TI(TAP Interface) module(405) captures traffic by using a TAP(404) and filters non-routing information. BGP data indicating an IP address of a monitored router is transmitted to a TR(Transport Reconstruction) module(406) of a network monitor(400). The TR module(406) reconstructs a TCP data stream and processes a defective packet and packet retransmission in time. The TI module(405) reduces data traffic to data required for reconfiguring a TCP session related to exchange of routing information. The TAP(404) can collect a plurality of physical TAPs for providing each individual interface to a line card of a router. The TR module(406) can detect intrusion. The TR module(406) can authenticate only traffic with a destination of an IP address of a monitored router and can be constructed to log a different attempt to establish a connection. After a portion of a TCP data stream is reconstructed, the TR module(406) transfers data to a BMR(BGP Message Reconstruction) module(407) for assembling the BGP message and guaranteeing its completeness. The BMR module(407) transmits the BGP message to one of an RR(Routing Reconstruction) module(408) and a BSE(BGP Session Emulation) module(410). The RR module(408) provides a device-integrated solution and can be used for constructing an RIB(Routing Information Base). A snapshot of the RIB as well as time-stamped BGP update information can be stored in a local disk(412).
机译:目的:提供路由监视器,用于监视网络的路由器信息的方法和程序产品,以通过不设置被监视路由器和监视系统之间的BGP(边界网关协议)会话并因此省略而提高整个系统的效率。在受监控路由器中使用CPU周期。构成:TI(TAP接口)模块(405)通过使用TAP(404)捕获流量并过滤非路由信息。指示被监视路由器的IP地址的BGP数据被发送到网络监视器(400)的TR(传输重构)模块(406)。 TR模块(406)重建TCP数据流并及时处理有缺陷的分组和分组重传。 TI模块(405)将数据业务减少为重新配置与路由信息的交换有关的TCP会话所需的数据。 TAP(404)可以收集多个物理TAP,以向路由器的线卡提供每个单独的接口。 TR模块(406)可以检测到入侵。 TR模块(406)可以仅对具有被监视路由器的IP地址的目的地的流量进行认证,并且可以被构造为记录建立连接的不同尝试。在重构TCP数据流的一部分之后,TR模块(406)将数据传输到BMR(BGP消息重构)模块(407)以用于组装BGP消息并保证其完整性。 BMR模块(407)将BGP消息发送到RR(路由重建)模块(408)和BSE(BGP会话仿真)模块(410)之一。 RR模块(408)提供设备集成的解决方案,并且可以用于构建RIB(路由信息库)。 RIB的快照以及带有时间戳的BGP更新信息可以被存储在本地磁盘中(412)。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号