WO2021088438A1 - 一种接入设备类型确定方法、设备及系统 - Google Patents

一种接入设备类型确定方法、设备及系统 Download PDF

Info

Publication number
WO2021088438A1
WO2021088438A1 PCT/CN2020/106483 CN2020106483W WO2021088438A1 WO 2021088438 A1 WO2021088438 A1 WO 2021088438A1 CN 2020106483 W CN2020106483 W CN 2020106483W WO 2021088438 A1 WO2021088438 A1 WO 2021088438A1
Authority
WO
WIPO (PCT)
Prior art keywords
message
time difference
access device
type
pairs
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2020/106483
Other languages
English (en)
French (fr)
Inventor
薛莉
张亮
谢于明
程剑
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to EP20885804.3A priority Critical patent/EP4044556A4/en
Publication of WO2021088438A1 publication Critical patent/WO2021088438A1/zh
Priority to US17/735,330 priority patent/US20220263824A1/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/16—Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/10—Active monitoring, e.g. heartbeat, ping or trace-route
    • H04L43/106—Active monitoring, e.g. heartbeat, ping or trace-route using time related information in packets, e.g. by adding timestamps
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • H04L63/166—Implementing security features at a particular protocol layer at the transport layer
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L7/00—Arrangements for synchronising receiver with transmitter
    • H04L7/0079—Receiver details

Definitions

  • This application relates to the field of communications, a method, device and system for determining the type of access device.
  • the home broadband service is a main service provided by operators to home users. In this service, operators provide access devices for families to access the Internet. When an operator needs to locate faults or targeted marketing and promotion of the home network, it must first determine whether there is a third-party access device in the home network. Generally, when there is a third-party access device in the home network, the type of the access device can be determined through the media access control (media access control, MAC) address of the device. However, when the device manufacturer that provides the access device also produces terminal devices, such as mobile phones, tablet computers, etc., the device type of the access device cannot be determined by the MAC address.
  • media access control media access control
  • the method of determining the type of access device through the MAC address requires the operation and maintenance personnel of the operator to regularly track and maintain the MAC address, which is more complicated. At the same time, it may be impossible to obtain the MAC address of the relevant device due to the user's privacy and security issues, which makes the management complicated and consumes a lot of manpower.
  • This application provides a method, equipment, and system for determining the type of access device, which are used to reduce maintenance manpower required to determine the type of access device and reduce management complexity.
  • a method for determining an access device type comprises: obtaining one or more message pairs, each message pair includes a first message and a second message, and the second message The message is a response to the first message, and the one or more message pairs all pass through the same access device; the type of the access device is determined according to the time difference of the one or more message pairs, The time difference of any message pair is the difference between the reception times of two messages in the message pair.
  • the device type of the access device can be determined through a simple message pair time difference solution, which reduces the management complexity and the operation and maintenance management complexity.
  • the first message is a synchronization confirmation message of a transmission control protocol TCP connection
  • the second message is an acknowledgement message of the TCP connection.
  • the time difference information from the access device to the network device can be obtained, thereby providing a calculation basis for determining the type of the access device based on the time difference information.
  • the determining the type of the access device according to the time difference of the one or more message pairs includes: determining the type of the access device according to the time difference threshold and the time difference of the one or more message pairs The type of access device.
  • the determining the type of the access device according to the time difference threshold and the time difference of the one or more message pairs includes: comparing the average value of the time difference of the multiple message pairs or The median and the time difference threshold are used to determine the type of the access device.
  • the determining the type of the access device according to the time difference threshold and the time difference of the one or more message pairs includes: according to the time difference of the multiple message pairs that is greater than or less than The ratio of the time difference threshold to the number of packets determines the type of the access device.
  • the type of the access device can be determined quickly and accurately, and the management is simple.
  • the obtaining one or more message pairs includes: obtaining the first message received by the physical interface of the message intercepting device far away from the access device; obtaining the message intercepting device The second message received by the physical interface close to the access device.
  • a network system which is characterized in that it includes: a message obtaining device obtains one or more message pairs, each message pair includes a first message and a second message, and the second message The message is a response to the first message, and the one or more message pairs all pass through the same access device; the type determining device determines the access device according to the time difference of the one or more message pairs The time difference of any message pair is the difference between the reception times of two messages in the message pair.
  • the device type of the access device can be determined through a simple message pair time difference scheme, which reduces the management complexity and the operation and maintenance management complexity.
  • the first message is a synchronization confirmation message of a transmission control protocol TCP connection
  • the second message is an acknowledgement message of the TCP connection.
  • the time difference information from the access device to the network device can be obtained, thereby providing a calculation basis for determining the type of the access device based on the time difference information.
  • the type determining device determines the type of the access device according to the time difference of the one or more message pairs, including: the type determining device determines the type of the access device according to the time difference threshold and the one or more message pairs. The time difference of each message pair determines the type of the access device.
  • the type determining device determines the type of the access device according to the time difference of the one or more message pairs, including: the type determining device compares the data of the multiple message pairs The average or median of the time difference and the time difference threshold are used to determine the type of the access device.
  • the type determining device determines the type of the access device according to the time difference of the one or more message pairs, including: the type determining device determines the type of the access device according to the time difference of the multiple message pairs.
  • the ratio of the number of packets in the time difference greater than or less than the time difference threshold determines the type of the access device.
  • the type of the access device can be determined quickly and accurately, and the management is simple.
  • the network system includes a packet interception device, and obtaining one or more packet pairs includes: obtaining the first packet received by a physical interface of the packet interception device away from the access device ; Obtain the second message received by the physical interface of the message intercepting device close to the access device.
  • a network device which is characterized by comprising: a processor and at least two communication interfaces;
  • the processor is configured to enable the network device to intercept a first packet received by a first communication interface of the at least two communication interfaces, and intercept a second packet received by a second communication interface of the at least two communication interfaces Message, and obtaining the receiving time of the first message and the second message, the second message being a response to the first message, the first message and the second message All go through the same access device.
  • the first message and the second message can be obtained, so that it is possible to determine the device type of the access device according to the simple message pair time difference scheme, and reduce the management complexity and the operation and maintenance management complexity .
  • the first message is a synchronization confirmation message of a transmission control protocol TCP connection
  • the second message is an acknowledgement message of the TCP connection.
  • the time difference information from the access device to the network device can be obtained, thereby providing a calculation basis for determining the type of the access device based on the time difference information.
  • the first communication interface is a communication interface of the network device far away from the access device;
  • the second communication interface is a communication of the network device close to the access device interface.
  • the network device further includes a memory, wherein the processor is configured to enable the network device to intercept the first packet received by the first communication interface of the at least two communication interfaces , Intercepting the second message received by the second communication interface of the at least two communication interfaces, and obtaining the receiving time for receiving the first message and the second message, specifically:
  • Instructions are stored in the memory, and the processing executes the instructions so that the network device intercepts the first message received by the first communication interface of the at least two communication interfaces, and intercepts the at least two communication interfaces The second message received by the second communication interface in the second communication interface, and the receiving time of the first message and the second message.
  • the processor is further configured to: determine that the first message and the second message are a message pair; determine the time difference of the message pair, and the time difference of the message pair The time difference is the difference between the receiving time of the first packet pair and the receiving time of the second packet.
  • the processor is further configured to determine the type of the access device according to the time difference of the message pair.
  • the processor is further configured to obtain a first message feature according to the first message, and obtain a second message feature according to the second message;
  • the first communication interface is further configured to For forwarding the first message or the first message feature, the second communication interface is also used for forwarding the second message or the second message feature.
  • the first message and the second message are sent, so that other network devices can determine the device type of the access device according to a simple message pair time difference scheme, which reduces management complexity and operation and maintenance management. the complexity.
  • a network device a processor, a memory, and a communication interface
  • the communication interface is used to receive multiple messages, all of which pass through the same access device
  • the memory stores There is an instruction
  • the processor is configured to execute the instruction to determine one or more message pairs according to the multiple messages, and any message pair in the one or more message pairs includes the first message And a second message, the second message in the arbitrary message pair is a response to the first message in the arbitrary message pair
  • the processor is further configured to obtain the one or more messages
  • the time difference of the message pair, the time difference of the one or more message pairs is the difference between the receiving time of two messages in any message pair.
  • the processor is configured to determine one or more message pairs according to the multiple messages, specifically: the first message carries the characteristics of the first message, and the second message The message carries a second message feature, and the processor determines that the first message and the second message are a message pair according to the first message feature and the second message feature.
  • the first message is a synchronization confirmation message of a transmission control protocol TCP connection
  • the second message is an acknowledgement message of the TCP connection.
  • the processor is further configured to determine the type of the access device according to the time difference of the one or more message pairs.
  • the processor is configured to determine the type of the access device according to the time difference of the one or more message pairs, specifically: the processor is configured to determine the type of the access device according to the time difference threshold and the The time difference of one or more message pairs determines the type of the access device.
  • the processor is configured to determine the type of the access device according to the time difference threshold and the time difference of the one or more message pairs, specifically: comparing the time difference of the multiple message pairs To determine the type of the access device.
  • the processor is configured to determine the type of the access device according to the time difference threshold and the time difference of the one or more message pairs, specifically: according to the multiple message pairs
  • the ratio of the number of packets with a time difference greater than or less than the time difference threshold is determined to determine the type of the access device.
  • a network device which is characterized by comprising: a processor and a memory; instructions are stored in the memory, and the processor is configured to execute the instructions in the memory according to one or more The time difference of the message pair determines the type of the access device, the message pair includes a first message and a second message, the second message is a response to the first message, the one or more All message pairs pass through the same access device.
  • the first message is a synchronization confirmation message of a transmission control protocol TCP connection
  • the second message is an acknowledgement message of the TCP connection.
  • the processor is configured to determine the type of the access device according to the time difference of the one or more message pairs, specifically: the processor is configured to determine the type of the access device according to the time difference threshold and The time difference of the one or more message pairs determines the type of the access device.
  • the processor is configured to determine the type of the access device according to the time difference threshold and the time difference of the one or more message pairs, specifically: comparing the multiple message pairs The average or median of the time difference and the time difference threshold are used to determine the type of the access device.
  • the processor is configured to determine the type of the access device according to the time difference threshold and the time difference of the one or more message pairs, specifically: according to the multiple message pairs
  • the ratio of the number of packets with a time difference greater than or less than the time difference threshold is determined to determine the type of the access device.
  • a network device which is characterized by comprising: an obtaining unit and a transceiving unit, where the obtaining unit is configured to receive a first message and a second message from the at least two communication interfaces, and obtain The receiving time of the first message and the second message, the second message is a response to the first message, and the first message and the second message both pass through the same receiving time Into the device.
  • the first message and the second message can be obtained, so that it is possible to determine the device type of the access device according to the simple message pair time difference scheme, and reduce the management complexity and the operation and maintenance management complexity .
  • the first message is a synchronization confirmation message of a transmission control protocol TCP connection
  • the second message is an acknowledgement message of the TCP connection.
  • the time difference information from the access device to the network device can be obtained, thereby providing a calculation basis for determining the type of the access device based on the time difference information.
  • the receiving interface of the first packet is a communication interface of the network device far away from the access device;
  • the receiving interface of the second packet is a communication interface of the network device close to the access device Communication interface.
  • the transceiving unit is further configured to send the first message and the second message.
  • the first message and the second message are sent, so that other network devices can determine the device type of the access device according to a simple message pair time difference scheme, which reduces management complexity and operation and maintenance management. the complexity.
  • a network device which is characterized by comprising: an obtaining unit and a transceiver unit, where the obtaining unit is configured to receive one or more message pairs, and each message pair includes a first message and a first message.
  • the second message, the second message is a response to the first message, and the one or more message pairs all pass through the same access device;
  • the obtaining unit is further configured to obtain the first message The receiving time of the message and the receiving time of the second message;
  • the obtaining unit is further configured to obtain the time difference of the one or more message pairs.
  • the obtaining unit is configured to obtain the time difference of the one or more message pairs, specifically: the first message carries the characteristics of the first message, and the second message carries A second message feature, the obtaining unit is configured to determine that the first message and the second message are a message pair according to the first message feature and the second message feature; The obtaining unit is used to obtain the time difference between the first message and the second message.
  • the first message is a synchronization confirmation message of a transmission control protocol TCP connection
  • the second message is an acknowledgement message of the TCP connection.
  • a network device which is characterized by comprising: an obtaining unit and a determining unit; the obtaining unit is configured to obtain the time difference between one or more message pairs and the one or more message pairs , The message pair includes a first message and a second message, the second message is a response to the first message, and the one or more message pairs all pass through the same access device; The determining unit is configured to determine the type of the access device according to the time difference of the one or more message pairs.
  • the first message is a synchronization confirmation message of a transmission control protocol TCP connection
  • the second message is an acknowledgement message of the TCP connection.
  • the determining unit is configured to determine the type of the access device according to the time difference of the one or more message pairs, specifically: the determining unit is configured to determine the type of the access device according to the time difference threshold and The time difference of the one or more message pairs determines the type of the access device.
  • the determining unit is configured to determine the type of the access device according to the time difference threshold and the time difference of the one or more message pairs, specifically: the determining unit is configured to determine the type of the access device according to The time difference threshold and the time difference between the one or more message pairs determine the type of the access device.
  • the determining unit is configured to determine the type of the access device according to the time difference threshold and the time difference of the one or more message pairs, specifically: the determining unit is configured to compare The average or median of the time difference of the multiple message pairs and the time difference threshold are used to determine the type of the access device.
  • the determining unit is configured to compare the average or median of the time difference of the multiple message pairs with the time difference threshold to determine the type of the access device, specifically : The determining unit is configured to determine the type of the access device according to the ratio of the number of message pairs that are greater than or less than the time difference threshold among the time differences of the multiple message pairs.
  • FIG. 1 is a schematic diagram of an application scenario in an embodiment of the application
  • FIG. 2 is a schematic diagram of a system for determining an access device type according to an embodiment of the application
  • FIG. 3 is a flowchart of a method for determining an access device type according to an embodiment of the application
  • FIG. 4 is an example of a packet pair obtained by a method for determining an access device type according to an embodiment of the application
  • FIG. 5 is a schematic diagram of a message pair information provided by an embodiment of this application.
  • FIG. 6 is a schematic diagram of message-to-time difference information provided by an embodiment of this application.
  • FIG. 7 is a schematic structural diagram of a network device provided by an embodiment of this application.
  • FIG. 8 is a schematic structural diagram of a network device provided by an embodiment of this application.
  • FIG. 9 is a schematic structural diagram of a network device provided by an embodiment of this application.
  • FIG. 10 is a schematic structural diagram of a network device provided by an embodiment of this application.
  • FIG. 11 is a schematic structural diagram of a network device provided by an embodiment of this application.
  • the scene includes a network device 101, an access device 102, a terminal device 103, a terminal device 104, a terminal device 105, a terminal device 106, a network device 107, and a service device 108 .
  • the terminal device 105 and the terminal device 106 access the Internet (Internet) or an intranet (intranet) through the access device 102 and the network device 101.
  • the terminal device 105 and the access device 102 are connected in a wireless manner, such as a wireless local area network (WLAN).
  • the terminal device 106 and the access device 102 are connected in a wired manner.
  • the terminal device 103 and the terminal device 104 directly access the Internet or the corporate intranet through the network device 101.
  • the terminal device requests a certain application service from the service device 108 via the Internet or an intranet.
  • the network device 101 may be an optical network terminal (optical network termination, ONT), or may be a network device such as a switch and a router.
  • the access device 102 may be a wireless network access point (access point, AP), may also be a switch, or may be a device such as a router.
  • the terminal device can be a mobile phone, a notebook computer, a personal computer, a tablet computer and other devices.
  • the network device 101 is provided by an operator or service provider, and the access device 102 is a home or enterprise user
  • the operator or service provider that provides the network device 101 cannot manage the access device 102.
  • the network is faulty, or the operator or service provider hopes to improve the network quality in a targeted manner, it is impossible to determine whether there is an access device in the network provided by it, and it is necessary to arrange for operation and maintenance personnel to visit home users or call home users or corporate customers. , To determine the situation, and then perform further troubleshooting or analysis to improve the network quality, which is complicated to deal with and consumes a lot of manpower.
  • FIG. 2 is a schematic diagram of a system for determining an access device type according to an embodiment of the application.
  • the system includes a packet intercepting device 201, a packet obtaining device 202, and a type determining device 203.
  • the message intercepting device 201 is connected to the message obtaining device 202
  • the message obtaining device 202 is connected to the message intercepting device 201 and the type determining device 203
  • the type determining device 203 is connected to the message obtaining device 202.
  • the network device 101 can be used as a packet interception device.
  • the message obtaining device and the type determining device can be implemented by the same device, or can be implemented by independent devices (such as servers or other network devices) with corresponding functions.
  • the message intercepting device 201, the message obtaining device 202, and the type determining device 203 may also all be implemented by the network device 101.
  • FIG. 3 shows a flowchart of a method for determining an access device type.
  • the method may include the following steps:
  • the packet interception device obtains a packet interception instruction, which instructs the packet interception device to obtain a qualified packet and its receiving time.
  • the message interception instruction can be issued by the network management system or manually configured by the operation and maintenance personnel.
  • the message interception instruction obtained by the message interception device may be: Obtain a Transmission Control Protocol (Transmission Control Protocol, TCP) synchronization acknowledgement (synchronize sequence number acknowledgement, SYNACK) message and an acknowledgement (acknowledgement, ACK) message Text.
  • TCP Transmission Control Protocol
  • SYNACK sequence number acknowledgement
  • ACK acknowledgement
  • the message interception device may also be a predefined or factory-configured device that can automatically intercept messages, instead of having to obtain a message interception instruction.
  • the message intercepting device obtains the first message and its reception time.
  • the packet interception device matches the obtained instruction and obtains the first packet. For example, when the packet interception instruction obtained by the packet interception device is to obtain a TCP SYNACK packet, the packet interception device intercepts the TCP SYNACK packet and records the receipt of the TCP SYNACK packet. TCP SYNACK packet time. S305: The message intercepting device sends the first message and its receiving time to the message obtaining device.
  • the message intercepting device sends the first message it obtains and its receiving time to the message obtaining device within a specified time period.
  • the message intercepting device obtains the second message and its receiving time.
  • the first message and the second message both pass through the same access device, that is, the first message and the second message can be sent by the same access device, or can be sent by different devices, but the Both the first message and the second message have the same access device on the forwarding path, which forwards or sends.
  • the first message is a SYNACK message sent by the server device in response to the TCP handshake synchronization message sent by the terminal device
  • the second message is a TCP ACK message sent by the terminal device in response to the TCP SYNACK message sent by the server device.
  • Fig. 4 shows an example of a first message and a second message intercepted by a message intercepting device.
  • the terminal device when the terminal device needs to request a certain service from the service device, the terminal device will initiate a TCP connection. During the connection process, it will experience a three-way handshake, that is, as shown in step S401, the terminal device will send a TCP synchronization (synchronize, SYN) messages.
  • the service device obtains the SYN message
  • SYNACK message SYNACK message
  • the message will also pass through the message interception device, and the message interception device will obtain the message and its reception time.
  • the terminal device receives the SYNACK message sent by the server device, it will send another ACK message to the server device.
  • the message will pass through the access device and the message interception device.
  • the message interception device obtains the message and its Receiving time.
  • the message interception device is away from the physical interface of the access device, such as a wide area network (wide area network).
  • the first message is received, that is, the first message is a message sent from the service side to the access device side
  • the message intercepts the physical interface from which the device approaches the access device, such as A local area network (LAN) interface receives the second message, that is, the second message is a message sent from the access device side to the service side.
  • LAN local area network
  • the message intercepting device sends the second message and its receiving time to the message obtaining device.
  • Both S305 and S309 may be executed after S307.
  • the message interception device may also generate one or two messages to replace S305 and S309 according to the intercepted first message and second message and their receiving time.
  • the two messages generated by the message intercepting device in place of S305 and S309 include message feature information of the first message and the second message and receiving time information of the two messages.
  • the message feature information can be: the IP quintuple information determined by the message intercepting device according to the same TCP connection, including the destination IP address, source IP address, destination port number, source port number, and transport layer protocol, that is, when the two When the IP quintuple of the message can correspond, the two messages are considered to be a message pair.
  • the message feature information may also be a specific identifier generated by the message intercepting device to indicate the same TCP connection.
  • the identifier may be a message obtained by the message intercepting device through a hash algorithm based on the IP 5-tuple. Text identification.
  • the message may also include the identification of the access device, and the identification of the access device may be: the IP address of the access device, the interface identification of the device that intercepts the access device's connection message, and the media access control MAC of the access device. The address or the name of the access device assigned by the message intercepting device to the access device, etc., or any combination thereof. It should be understood that when only the access device is connected to the message intercepting device, the identification of the access device It is not necessary to carry it.
  • the message obtaining device obtains one or more message pairs.
  • the message obtaining device can obtain multiple messages, and confirm that the two messages are a message pair by matching the information of the multiple messages. For example, by confirming that the first message and the second message are the TCP SYNACK message and the ACK message of the same TCP connection, it is confirmed that the two messages are a message pair.
  • the message obtaining device when the message obtaining device obtains one or more message pairs, the message obtaining device also obtains the identification of the access device that the message passes through, including: the IP address of the access device, the The MAC address of the access device, the identifier of the interface through which the packet interception device is connected to the access device, or the name of the access device, etc.
  • the message obtaining device when the message obtaining device obtains one or more message pairs, the message obtaining device also obtains the connection mode between the access device through which the message pair passes and the message intercepting device, such as wired connection or Wireless connections.
  • the connection mode between the access device through which the message pair passes and the message intercepting device such as wired connection or Wireless connections.
  • the message obtaining device obtains the message pair information shown in FIG. 5 according to the obtained information of multiple message pairs, the message obtaining device records the identification of the message intercepting device, the identification of the access device, and the The connection mode of the access device and the message interception device, the time when the message interception device receives the first message, and the time when the message interception device receives the second message.
  • S313 The time difference when the packet obtaining device obtains the packet pair.
  • the message obtaining device obtains the time difference according to 1 message pair.
  • the message obtaining device obtains information about the time difference of the message pair as shown in Figure 6.
  • the message obtaining device records the identification of the message interception device, the identification of the access device, and the access device and the message interception The connection mode of the device and the time difference of the message pair.
  • the above message acquisition device and message interception device can be the same device or different devices.
  • the message interception device needs to perform the above steps S305 and S309, and the above steps S305 and S309 may be performed together or separately.
  • the message intercepting device can send 100 messages to the message obtaining device at a time, and the message intercepting device can also be divided into multiple times.
  • the message obtaining device sends one or more messages until the message intercepting device sends all 100 messages to the message obtaining device.
  • steps S305 and S309 do not need to be performed.
  • S315 The message obtaining device sends the time difference of one or more message pairs to the type determining device.
  • the message obtaining device when the message obtaining device sends the time difference of one or more message pairs to the type determining device, the message obtaining device also sends the message to the type determining device to obtain the identification of the device.
  • the identification of the device for obtaining the message may be any of the following identifications: the home user number of the device for which the message is obtained, the IP address of the device for which the message is obtained, the ESN code of the device for which the message is obtained, The message obtains the MAC address of the device, etc., which is not specifically limited in this application.
  • the message obtaining device when the message obtains the time difference when the device sends one or more message pairs to the type determining device, the message obtaining device also sends to the type determining device the identification of the access device that the message passes through, including : The IP address of the access device, the MAC address of the access device, the interface information of the access packet interception device of the access device, etc.
  • the identification of the access device is not necessary.
  • the message obtaining device when the message obtains the time difference between the device sending one or more message pairs to the type determining device, the message obtaining device also sends the message to the type determining device to allow the passing access device to access the message.
  • Ways to intercept devices include: wired connection or wireless connection.
  • the above message obtaining device and type determining device may be the same device or different devices.
  • the device does not perform step S315.
  • S317 The type determines the time difference when the device obtains one or more message pairs.
  • the method for the type determining device to obtain the time difference of one or more message pairs may be: the message obtaining device actively sends the one or more message pairs to the type determining device within a period of time, or the type determining device actively receives the time difference from Obtain the time difference of one or more message pairs stored by the device.
  • the type determining device when the type determining device actively obtains the time difference of one or more packet pairs from the packet obtaining device, the type determining device may also specify to obtain one or more packets related to the specified access device. The time difference of the text.
  • the type determining device determines the type of the access device according to the time difference of one or more message pairs.
  • the type determining device determines the type of the access device that the packet passes through according to the time difference of the obtained packet pair. For example, when the time difference is 5 milliseconds, it is determined that the type of the access device is a switch.
  • the type-determining device can be based on the average value of the time difference of multiple message pairs, the median, the average value after removing the time difference with large deviation, or the average value after removing the large deviation. Results such as the median after a large time difference determine the type of access device.
  • the type determination determines the type of the access device according to the time difference threshold and the time difference of one or more message pairs.
  • the time difference threshold may be a time difference threshold issued by the network management system, or a time difference threshold manually configured by operation and maintenance personnel, or a time difference threshold calculated by the type-determining device itself, which is not specifically limited in this application.
  • the time difference threshold may also be pre-defined or type-determined and configured before the device leaves the factory, instead of having to obtain the time difference threshold additionally.
  • the time difference threshold is: 4 milliseconds
  • the time difference threshold indicates that when the time difference of a pair of packets passing through a certain access device is greater than or equal to 4 milliseconds, the access device is an AP, and the time difference threshold may also indicate When the time difference between a pair of packets passing through an access device is less than or equal to 4 milliseconds, the access device is a switch. For example, when the time difference of 1 message pair obtained by the type determining device is 10 milliseconds, the access device is an AP. For example, when the time difference of 1 message pair obtained by the type determining device is 2 milliseconds, the access device is a switch or a personal computer.
  • the type determining device compares the average value of the time difference of multiple message pairs with the magnitude of the time difference threshold to determine the type of the access device.
  • the type determining device when the type determining device obtains the time difference of multiple message pairs, the type determining device can be based on the average value of the time difference of multiple message pairs, the median, and the average value after removing the time difference with large deviation. , Or the median after removing the large deviation of the time difference, etc., are compared with the time difference threshold to determine the type of the access device. For example, when the result is greater than or equal to 4 milliseconds, the type determining device considers the access device to be an AP, and when the value is less than or equal to 4 milliseconds, the type determining device considers the access device to be a switch or a personal computer.
  • the type determining device determines the type of the access device according to the ratio of the number of packet pairs that are greater than or less than the time difference threshold in the time difference of the multiple packet pairs.
  • the above ratio can be: the number of time differences that meet the time difference threshold divided by the total number of time differences or the number of time differences less than the time difference threshold divided by the total number of time differences, or the number of time differences greater than the time difference threshold divided by the number of time differences less than the time difference threshold Number, etc., this application does not make specific limitations.
  • the type determining device determines that the total number of time differences between multiple message pairs received by the device is 20. If the number of time differences greater than or equal to the time difference threshold is 18, the ratio may be: 90%, and the ratio is a high probability ratio, then the type determining device determines that the access device is an AP. If the number of time differences less than or equal to the time difference threshold is 4, the ratio can be 20%, and the ratio is a low probability ratio, then the type determining device determines that the access device is a switch or a personal computer. Or if the number of time differences greater than or equal to the time difference threshold is 15, and the number of time differences less than the time difference threshold is 5, the ratio can be: 3, greater than 1, then the type determining device determines that the access device is an AP.
  • the method for determining the type of access device in the embodiment of the present application is described above, and the following describes a network device provided in the embodiment of the present application.
  • FIG. 7 is a network device 700 provided by an embodiment of the present application.
  • the network device 700 can execute the method executed by the packet interception device shown in FIG. 3.
  • the network device 700 includes an obtaining unit 701 and a transceiver unit 702.
  • the obtaining unit 701 may be used to perform steps S301, S303, and S307 and related optional manners in the embodiment of FIG. 3, and the transceiving unit 702 may be used to perform steps S305 and S309 and related optional manners in the embodiment of FIG. 3, for example.
  • FIG. 8 is a network device 800 provided by an embodiment of the present application, and the network device 800 can execute the method executed by the packet obtaining device shown in FIG. 3.
  • the network device 800 includes an obtaining unit 801 and a transceiver unit 802.
  • the obtaining unit 801 may be used to perform steps S311 and S313 and related optional manners in the embodiment of FIG. 3, and the transceiver unit 702 may be used to perform step S315 and related optional manners in the embodiment of FIG. 3.
  • FIG. 9 is a network device 900 provided by an embodiment of the present application, and the network device 900 can execute the method for type determination and execution shown in FIG. 3.
  • the network device 900 includes an obtaining unit 901 and a determining unit 902.
  • the obtaining unit 901 may be used to perform step S317 and related optional manners in the embodiment of FIG. 3, and the determining unit 902 may be used to perform step S319 and related optional manners in the embodiment of FIG. 3.
  • the network devices 700, 800, and 900 shown above may be executed by multiple network devices to execute the corresponding method, or one device may execute the corresponding method.
  • the network device 101 can simultaneously complete the methods executed by the network device 700 and the network device 800; the server can simultaneously complete the methods executed by the network device 800 and the network device 900, and the network device 101 can simultaneously complete the methods executed by the network device 700, the network device 800, and the network device.
  • the division of the above functional units is illustrated by examples.
  • the above functional allocation can be completed by different functional units as required, that is, the internal structure of the network device is divided into different functional units to complete all or part of the above description. Function; or use the same functional unit to complete the functions of the above-mentioned multiple units.
  • the network equipment provided in the foregoing embodiment and the foregoing embodiment of the method for determining the type of access device belong to the same concept.
  • steps performed by each unit of the network device are described as examples, but it does not mean that they are not. Execute other steps or optional methods in the above-mentioned embodiments.
  • For the specific implementation process please refer to the method embodiments for details, which will not be repeated here.
  • the network device of the embodiment of the present application is described above, and the possible product form of the network device is described below. It should be understood that any product having the characteristics of the network device 700 in FIG. 7, the network device 800 in FIG. 8, and the network device 900 in FIG. 9 described above fall within the protection scope of the present application. It should also be understood that the following introduction is only an example, and does not limit the product form of the network device in the embodiment of the present application.
  • FIG. 10 is a schematic structural diagram of a device 1000 provided by an embodiment of the present application.
  • the message intercepting device, the message obtaining device, and the type determining device shown in the embodiment of FIG. 3 can all be implemented by the device shown in FIG. 10. See the schematic diagram of the device structure shown in Figure 10.
  • the device 1000 includes at least one processor 1001, a communication bus 1002, a communication interface 1004 and a communication interface 1005.
  • the device 1000 may further include a memory 1003.
  • the processor 1001 may be a general-purpose central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the program execution of the solution of this application.
  • the processor may be used to implement the method for determining the type of access device provided in the embodiment of the present application.
  • the processor 1001 may be used to obtain a packet interception instruction, so that the communication interface 1004 obtains the first packet, and the communication interface obtains The second message, and the receiving time of the first message and the receiving time of the second message are obtained.
  • the processor 1001 may also be used to obtain the message pair and the time difference of the message pair.
  • the processor 1001 may also be configured to determine the type of the access device according to the time difference of the message pair.
  • the communication bus 1002 is used to transfer information between the processor 1001, the communication interface 1004, the communication interface 1005, and the memory 1003.
  • the memory 1003 may be a read-only memory (ROM), such as: electrically erasable programmable read-only memory (electrically erasable programmable read-only memory, EEPROM), compact disc read-only memory, CD -ROM) or other optical discs, optical disc storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.). Or the memory 1003 may also be a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions.
  • ROM read-only memory
  • EEPROM electrically erasable programmable read-only memory
  • CD -ROM compact disc read-only memory
  • optical disc storage including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.
  • RAM random access memory
  • the memory 1003 may exist independently, and is connected to the processor 1001 through a communication bus 1002.
  • the memory 1003 may also be integrated with the processor 1001.
  • the memory 1003 is used to store program codes or instructions for executing the solutions of the present application, and the processor 1001 controls the execution.
  • the processor 1001 is configured to execute program codes stored in the memory 1003.
  • One or more software modules can be included in the program code.
  • the processor 1001 itself may also store program codes or instructions for executing the solutions of the present application.
  • the communication interface 1004 uses any device such as a transceiver to communicate with other devices or communication networks.
  • the communication network may be Ethernet, wireless access network (RAN), or wireless local area networks (WLAN).
  • the communication interface 1004 may be used to receive the first packet sent by other network devices, and may also send the first packet to the access network device or other network devices.
  • the communication interface 1004 may be an Ethernet interface (Ethernet) interface, a Fast Ethernet (FE) interface, or a Gigabit Ethernet (GE) interface.
  • the communication interface 1005 uses any device such as a transceiver to communicate with other devices or communication networks.
  • the communication network may be Ethernet, wireless access network (RAN), or wireless local area networks (WLAN).
  • the communication interface 1005 may be used to receive the second packet sent by the access device, and may also send the second packet to other network devices.
  • the communication interface 1005 may be an Ethernet interface (Ethernet) interface, a Fast Ethernet (FE) interface, or a Gigabit Ethernet (GE) interface.
  • the device 1000 may include multiple processors, such as the processor 1001 and the processor 1005 shown in FIG. 10. Each of these processors can be a single-CPU (single-CPU) processor or a multi-core (multi-CPU) processor.
  • the processor here may refer to one or more devices, circuits, and/or processing cores for processing data (for example, computer program instructions).
  • FIG. 11 is a schematic structural diagram of a device 1100 provided by an embodiment of the present application. Both the message obtaining device and the type determining device shown in the embodiment of FIG. 3 can be implemented by the device shown in FIG. 11. See the schematic diagram of the device structure shown in Figure 11.
  • the device 1100 includes at least one processor 1101, a communication bus 1102, and a communication interface 1104.
  • the device 1100 may further include a memory 1103.
  • the processor 1101 may be a general-purpose central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling program execution of the solution of the present application.
  • the processor may be used to implement the method for determining the type of access device provided in the embodiment of the present application.
  • the processor 1101 may be used to obtain the message pair and the time difference of the message pair.
  • the processor 1101 may also be configured to determine the type of the access device according to the time difference of the message pair.
  • the communication bus 1102 is used to transfer information between the processor 1101, the communication interface 1104, and the memory 1103.
  • the memory 1103 may be read-only memory (ROM), such as: electrically erasable programmable read-only memory (electrically erasable programmable read-only memory, EEPROM), compact disc read-only memory, CD -ROM) or other optical discs, optical disc storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.).
  • ROM read-only memory
  • the memory 1003 may also be a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions.
  • the memory 1103 may exist independently, and is connected to the processor 1101 through a communication bus 1102.
  • the memory 1103 may also be integrated with the processor 1101.
  • the memory 1103 is used to store program codes or instructions for executing the solutions of the present application, and the processor 1101 controls the execution.
  • the processor 1101 is used to execute the program code stored in the memory 1103.
  • One or more software modules can be included in the program code.
  • the processor 1101 itself may also store program codes or instructions for executing the solutions of the present application.
  • the communication interface 1104 uses any device such as a transceiver to communicate with other devices or communication networks.
  • the communication network may be Ethernet, wireless access network (RAN), or wireless local area networks (WLAN).
  • the communication interface 1104 may be used to receive the first packet sent by other network devices, and may also send the first packet to the access network device or other network devices.
  • the communication interface 1104 may be an Ethernet interface (Ethernet) interface, a Fast Ethernet (FE) interface, or a Gigabit Ethernet (GE) interface.
  • the device 1100 may include multiple processors, such as the processor 1101 and the processor 1105 shown in FIG. 11. Each of these processors can be a single-CPU (single-CPU) processor or a multi-core (multi-CPU) processor.
  • the processor here may refer to one or more devices, circuits, and/or processing cores for processing data (for example, computer program instructions).
  • the disclosed device and method can be implemented in other ways.
  • the device embodiments described above are only illustrative.
  • the division of the unit is only a logical function division.
  • there may be other division methods for example, multiple units or components may be combined or may be Integrate into another system, or some features can be ignored or not implemented.
  • the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may also be electrical or other forms of connection.
  • the unit described as a separate component may or may not be physically separated, and the component displayed as a unit may or may not be a physical unit, that is, it may be located in one place, or may also be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments of the present application.
  • processing units in the various embodiments of the present application can be dispersed into multiple functional units, can also be integrated in one processing unit, or each unit can exist alone physically, or two or more units can be integrated. In one unit.
  • the above-mentioned integrated unit can be implemented in the form of hardware or software functional unit.
  • the above-mentioned embodiments it may be implemented in whole or in part by software, hardware, firmware, or any combination thereof.
  • software, firmware, or a combination thereof it may be implemented in the form of a computer program product in whole or in part.
  • the computer program product includes one or more computer program instructions.
  • the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.
  • the computer instructions may be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium.
  • the computer program instructions may be transmitted from a website, computer, server, or data.
  • the center transmits to another website site, computer, server or data center through wired or wireless means.
  • the computer-readable storage medium may be any medium that can be accessed by a computer or a data storage device such as a server or a data center integrated with one or more media.
  • the medium may be a magnetic medium (for example, a floppy disk, a hard disk, and a magnetic tape), an optical medium (for example, an optical disk), or a semiconductor medium (for example, a solid state hard disk).

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Power Engineering (AREA)
  • Health & Medical Sciences (AREA)
  • Cardiology (AREA)
  • General Health & Medical Sciences (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本申请提供了一种接入设备类型确定方法、设备及系统。通过获得一个或多个报文对以及每个报文对的时间差的方式，确定接入设备类型。所述每个报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备。通过采用此方案，可以减少为了确定接入设备类型而需要的维护人力，同时降低运营商或服务提供商的运维人员的管理复杂度。

Description

一种接入设备类型确定方法、设备及系统
本申请要求在2019年11月5日提交中华人民共和国知识产权局、申请号为201911071868.X、申请名称为“一种接入设备类型确定方法、设备及系统”的中国专利申请的优先权，这篇中国专利申请的全部内容通过引用结合在本申请中。
技术领域
本申请涉及通信领域，一种接入设备类型确定方法、设备及系统。
背景技术
家庭宽带业务是运营商向家庭用户提供的一种主要业务，在该业务中，运营商提供接入设备以供家庭接入上网。当运营商需要对家庭网络进行故障定位或针对性营销推广时，首先需要确定家庭网络中是否存在第三方接入设备。通常，当家庭网络中存在第三方接入设备时，可以通过设备的媒体接入控制(media access control，MAC)地址确定该接入设备的类型。但是当提供该接入设备的设备生产商同时还生产终端设备，如手机、平板电脑等时，则无法通过MAC地址确定该接入设备的设备类型。同时，通过MAC地址确定接入设备类型的方式需要运营商的运维人员定期对MAC地址进行跟踪维护，比较复杂。同时，可能还因为用户隐私安全问题而无法获取到相关设备的MAC地址，管理复杂，耗费大量人力。
发明内容
本申请提供了一种接入设备类型确定方法、设备及系统，用于减少确定接入设备类型需要的维护人力，降低管理复杂度。
第一方面，提供了一种接入设备类型确定方法，其特征在于，包括：获得一个或多个报文对，每个报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备；根据所述一个或多个报文对的时间差确定所述接入设备的类型，任意报文对的时间差为所述报文对中的两个报文的接收时间之差。
根据上述方法，可以通过简单的报文对的时间差的方案即可确定接入设备的设备类型，降低管理复杂度和运维管理复杂度。
在一种可能的方式中，所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
通过上述方法，通过获取同一个TCP连接的同步确认报文和确认报文，可以获得从接入设备到网络设备的时间差信息，从而为根据时间差信息确定接入设备的类型提供计算基础。
在一种可能的方式中，所述根据所述一个或多个报文对的时间差确定所述接入设备的类型包括：根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述根据时间差阈值和所述一个或多个报文对的时间 差确定所述接入设备的类型，包括：比较所述多个报文对的时间差的平均值或中位数与所述时间差阈值，以确定所述接入设备的类型。
在一种可能的方式中，所述根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，包括：根据所述多个报文对的时间差中大于或小于所述时间差阈值的报文对个数的比值，确定所述接入设备的类型。
通过以上多种方式提供的多种根据报文对的时间差与时间差阈值的比较方案，可以快速、较准确的确定接入设备的类型，管理简单。
在一种可能的方式中，所述获得一个或多个报文对包括：获得报文拦截设备的远离接入设备的物理接口接收到的所述第一报文；获得所述报文拦截设备的接近接入设备的物理接口接收到的所述第二报文。
通过从离接入设备较远的接口获得第一报文和从离接入设备较近的接口，即，结合数据流的发送方向，来获取第一报文和第二报文，可以获得较为准确的时间差信息，有利于提高接入设备的类型的确定的准确度。
第二方面，提供了一种网络系统，其特征在于，包括：报文获得设备获得一个或多个报文对，每个报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备；类型确定设备根据所述一个或多个报文对的时间差确定所述接入设备的类型，任意报文对的时间差为所述报文对中的两个报文的接收时间之差。
通过上述系统，可以通过简单的报文对的时间差的方案即可确定接入设备的设备类型，降低管理复杂度和运维管理复杂度。
在一种可能的方式中，所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
通过上述方式，通过获取同一个TCP连接的同步确认报文和确认报文，可以获得从接入设备到网络设备的时间差信息，从而为根据时间差信息确定接入设备的类型提供计算基础。
在一种可能的方式中，所述类型确定设备根据所述一个或多个报文对的时间差确定所述接入设备的类型，包括：所述类型确定设备根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述类型确定设备根据所述一个或多个报文对的时间差确定所述接入设备的类型，包括：所述类型确定设备比较所述多个报文对的时间差的平均值或中位数与所述时间差阈值，以确定所述接入设备的类型。
在一种可能的方式中，所述类型确定设备根据所述一个或多个报文对的时间差确定所述接入设备的类型，包括：所述类型确定设备根据所述多个报文对的时间差中大于或小于所述时间差阈值的报文对个数的比值确定所述接入设备的类型。
通过以上多种方式提供的多种根据报文对的时间差与时间差阈值的比较方案，可以快速、较准确的确定接入设备的类型，管理简单。
在一种可能的方式中，所述网络系统包括报文拦截设备，获得一个或多个报 文对包括：获得报文拦截设备的远离接入设备的物理接口接收到的所述第一报文；获得所述报文拦截设备的接近接入设备的物理接口接收到的所述第二报文。
通过从离接入设备较远的接口获得第一报文和从离接入设备较近的接口，即，结合数据流的发送方向，来获取第一报文和第二报文，可以获得较为准确的时间差信息，有利于提高接入设备的类型的确定的准确度。
第三方面，提供了一种网络设备，其特征在于，包括：处理器和至少两个通信接口；
所述处理器用于使得所述网络设备拦截所述至少两个通信接口中的第一通信接口接收的第一报文，拦截所述至少两个通信接口中的第二通信接口接收的第二报文，以及获得所述接收第一报文和第二报文的接收时间，所述第二报文为对所述第一报文的响应，所述第一报文和所述第二报文都经过同一接入设备。
通过上述网络设备，可以获取到第一报文和第二报文，从而使得根据简单的报文对的时间差的方案确定接入设备的设备类型成为可能，降低管理复杂度和运维管理复杂度。
在一种可能的方式中，所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
通过上述方式，通过获取同一个TCP连接的同步确认报文和确认报文，可以获得从接入设备到网络设备的时间差信息，从而为根据时间差信息确定接入设备的类型提供计算基础。
在一种可能的方式中，所述第一通信接口为所述网络设备的远离所述接入设备的通信接口；所述第二通信接口为所述网络设备的接近所述接入设备的通信接口。
通过从离接入设备较远的接口获得第一报文和从离接入设备较近的接口，即，结合数据流的发送方向，来获取第一报文和第二报文，可以获得较为准确的时间差信息，有利于提高接入设备的类型的确定的准确度。
在一种可能的方式中，所述网络设备还包括存储器，其特征在于，所述处理器用于使得所述网络设备拦截所述至少两个通信接口中的第一通信接口接收的第一报文，拦截所述至少两个通信接口中的第二通信接口接收的第二报文，以及获得所述接收第一报文和第二报文的接收时间，具体为：
所述存储器中存储有指令，所述处理执行所述指令，使得所述网络设备拦截所述至少两个通信接口中的第一通信接口接收的第一报文，拦截所述至少两个通信接口中的第二通信接口接收的第二报文，以及获得所述接收第一报文和第二报文的接收时间。
在一种可能的方式中，所述处理器还用于：确定所述第一报文与所述第二报文为报文对；确定所述报文对的时间差，所述报文对的时间差为所述第一报文对的接收时间与所述第二报文的接收时间之差。
在一种可能的方式中，所述处理器还用于：根据所述报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述处理器还用于根据所述第一报文获得第一报文特征，根据所述第二报文获得第二报文特征；所述第一通信接口还用于转发所述第一报文或所述第一报文特征，所述第二通信接口还用于转发所述第二报文或所述第二报文特征。
通过上述网络设备，发送第一报文和第二报文，从而使得其他网络设备可以根据简单的报文对的时间差的方案确定接入设备的设备类型成为可能，降低管理复杂度和运维管理复杂度。
第四方面，提供了一种网络设备，处理器、存储器和通信接口；所述通信接口，用于接收多个报文，所述多个报文都经过同一接入设备；所述存储器中存储有指令，所述处理器用于执行所述指令，以根据所述多个报文确定一个或多个报文对，所述一个或多个报文对中的任意报文对包括第一报文和第二报文，所述任意报文对中的第二报文为对所述任意报文对中的第一报文的响应；所述处理器还用于获得所述一个或多个报文对的时间差，所述一个或多个报文对的时间差为任意报文对中的两个报文的接收时间之差。
在一种可能的方式中，所述处理器用于根据所述多个报文确定一个或多个报文对，具体为：所述第一报文携带第一报文特征，所述第二报文携带第二报文特征，所述处理器根据所述第一报文特征与所述第二报文特征确定所述第一报文和所述第二报文为一个报文对。
在一种可能的方式中，所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
在一种可能的方式中，所述处理器还用于：根据所述一个或多个报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述处理器用于根据所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：所述处理器，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述处理器用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：比较所述多个报文对的时间差的平均值或中位数与所述时间差阈值，以确定所述接入设备的类型。
在一种可能的方式中，所述处理器，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：根据所述多个报文对的时间差中大于或小于所述时间差阈值的报文对个数的比值，确定所述接入设备的类型。
第五方面，提供了一种网络设备，其特征在于，包括：处理器和存储器；所述存储器中存储有指令，所述处理器用于执行所述存储器中的所述指令以根据一个或多个报文对的时间差确定接入设备的类型，所述报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备。
在一种可能的方式中，所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
在一种可能的方式中，所述处理器，用于根据所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：所述处理器，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述处理器，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：比较所述多个报文对的时间差的平均值或中位数与所述时间差阈值，以确定所述接入设备的类型。
在一种可能的方式中，所述处理器，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：根据所述多个报文对的时间差中大于或小于所述时间差阈值的报文对个数的比值，确定所述接入设备的类型。
第六方面，提供了一种网络设备，其特征在于，包括：获得单元和收发单元，所述获得单元用于从所述至少两个通信接口接收第一报文和第二报文，以及获得所述接收第一报文和第二报文的接收时间，所述第二报文为对所述第一报文的响应，所述第一报文和所述第二报文都经过同一接入设备。
通过上述网络设备，可以获取到第一报文和第二报文，从而使得根据简单的报文对的时间差的方案确定接入设备的设备类型成为可能，降低管理复杂度和运维管理复杂度。
在一种可能的方式中，所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
通过上述方式，通过获取同一个TCP连接的同步确认报文和确认报文，可以获得从接入设备到网络设备的时间差信息，从而为根据时间差信息确定接入设备的类型提供计算基础。
在一种可能的方式中，所述第一报文的接收接口为所述网络设备的远离接入设备的通信接口；所述第二报文的接收接口为所述网络设备的接近接入设备的通信接口。
通过从离接入设备较远的接口获得第一报文和从离接入设备较近的接口，即，结合数据流的发送方向，来获取第一报文和第二报文，可以获得较为准确的时间差信息，有利于提高接入设备的类型的确定的准确度。
在一种可能的方式中，所述收发单元还用于发送所述第一报文和所述第二报文。
通过上述网络设备，发送第一报文和第二报文，从而使得其他网络设备可以根据简单的报文对的时间差的方案确定接入设备的设备类型成为可能，降低管理复杂度和运维管理复杂度。
第七方面，提供了一种网络设备，其特征在于，包括：获得单元和收发单元，所述获得单元用于接收一个或多个报文对，每个报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备；所述获得单元，还用于获得所述第一报文的接收时间和所述第二报文的接收时间；所述获得单元还用于获得所述一个或多个报文对的时间差。
在一种可能的方式中，所述获得单元用于获得所述一个或多个报文对的时间 差，具体为：所述第一报文携带第一报文特征，所述第二报文携带第二报文特征，所述获得单元用于根据所述第一报文特征与所述第二报文特征确定所述第一报文和所述第二报文为一个报文对；所述获得单元用于获得所述第一报文和所述第二报文的时间差。
在一种可能的方式中，所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
第八方面，提供了一种网络设备，其特征在于，包括：获得单元和确定单元；所述获得单元，用于获得一个或多个报文对和所述一个或多个报文对的时间差，所述报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备；所述确定单元用于根据所述一个或多个报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
在一种可能的方式中，所述确定单元，用于根据所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：所述确定单元，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述确定单元，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：所述确定单元，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型。
在一种可能的方式中，所述确定单元，用于根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，具体为：所述确定单元，用于比较所述多个报文对的时间差的平均值或中位数与所述时间差阈值，以确定所述接入设备的类型。
在一种可能的方式中，所述确定单元，用于比较所述多个报文对的时间差的平均值或中位数与所述时间差阈值，以确定所述接入设备的类型，具体为：所述确定单元，用于根据所述多个报文对的时间差中大于或小于所述时间差阈值的报文对个数的比值，确定所述接入设备的类型。
附图说明
为了更清楚地说明本发明的技术方案，下面将对实施例中使用的附图作简单地介绍。显而易见地，下面附图只是本发明的一些实施例的附图，对于本领域普通技术人员来说，在不付出创造性劳动性的前提下，还可以根据这些附图获得同样能实现本发明的其他技术方案和附图。这些技术方案和附图也应该被认为是在本发明的范围之内。
图1为本申请实施例中的一种应用场景的示意图；
图2为本申请实施例提供的一种接入设备类型确定系统示意图；
图3为本申请实施例提供的一种接入设备类型确定方法流程图；
图4为本申请实施例提供的一种接入设备类型确定方法获得报文对示例；
图5为本申请实施例提供的一种报文对信息示意图；
图6为本申请实施例提供的一种报文对时间差信息示意图；
图7为本申请实施例提供的一种网络设备的结构示意图；
图8为本申请实施例提供的一种网络设备的结构示意图；
图9为本申请实施例提供的一种网络设备的结构示意图；
图10为本申请实施例提供的一种网络设备的结构示意图；
图11为本申请实施例提供的一种网络设备的结构示意图。
具体实施方式
为了使本技术领域的人员更好地理解本发明方案，下面结合附图和实施方式对本发明实施例作进一步的详细说明。
本申请中术语“第一”“第二”等字样用于对作用和功能基本相同的相同项或相似项进行区分，应理解，“第一”、“第二”之间不具有逻辑或时序上的依赖关系，也不对数量和执行顺序进行限定。
以下，示例性介绍本申请的应用场景。
参见图1，示出了一种网络通信系统场景图，该场景包括网络设备101、接入设备102、终端设备103、终端设备104、终端设备105、终端设备106、网络设备107和服务设备108。其中，终端设备105和终端设备106通过接入设备102和网络设备101访问互联网(Internet)或企业内部网(intranet)。终端设备105与接入设备102通过无线方式，如无线局域网(wireless local area networking，WLAN)，相连。终端设备106与接入设备102通过有线方式相连。终端设备103和终端设备104直接通过网络设备101接入互联网或企业内部网。在一种示例中，终端设备通过互联网或企业内部网络从服务设备108处请求某种应用服务。
在本场景中，网络设备101可以为光网络终端设备(optical network termination，ONT)，也可以为交换机、路由器等网络设备。接入设备102可以为无线网络接入点(access point，AP)，也可以是交换机，也可以是路由器等设备。终端设备可以为手机、笔记本电脑、个人计算机、平板电脑等设备。
在如图1所示的场景中，当网络设备101和接入设备102的提供方不一样时，如：网络设备101为运营商或服务提供商提供，而接入设备102为家庭或企业用户自行采购使用时，提供网络设备101的运营商或服务提供商无法管理接入设备102。当该网络存在故障，或运营商或服务提供商希望能够针对性提高网络质量时，无法确定在其提供的网络中是否存在接入设备，需要安排运维人员上门或电话联系家庭用户或企业客户，确定该情况，再进一步进行故障排查或分析改善网络质量，处理复杂，耗费大量人力。
参见图2，该图为本申请实施例提供的一种接入设备类型确定系统示意图，该系统包括报文拦截设备201、报文获得设备202和类型确定设备203。报文拦截设备201和报文获得设备202相连，报文获得设备202和报文拦截设备201、类型确定设备203相连，类型确定设备203和报文获得设备202相连。应用于 如图1所示的应用场景，可将网络设备101作为报文拦截设备。报文获得设备和类型确定设备可以由同一个设备实现，也可以分别由独立的具备相应功能的设备(如服务器或其他网络设备)实现。报文拦截设备201、报文获得设备202和类型确定设备203也可以都由网络设备101实现。
应理解，这仅是一种示例，本领域的技术人员也可以参考本实施例，做类似的替换、应用，本申请不再一一举例。
下面，结合图3示例性介绍本申请实施例提供的一种接入设备类型确定方法，图3示出了一种接入设备类型确定方法流程图。
该方法可以包括如下步骤：
S301：报文拦截设备获得报文拦截指令，该指令指示该报文拦截设备获取符合条件的报文及其接收时间。该报文拦截指令可以由网络管理系统下发，或是由运维人员人工配置。
在一个示例中，该报文拦截设备获得的报文拦截指令可能为：获取传输控制协议(Transmission Control Protocol，TCP)同步确认(synchronize sequence number acknowledgement，SYNACK)报文和确认(acknowledgement，ACK)报文。
可选的，报文拦截设备也可以是预定义或出厂已配置的可以自动拦截报文的设备，而不是必须获得报文拦截指令。
S303：报文拦截设备获得第一报文和其接收时间。
报文拦截设备匹配获得的指令，获取第一报文，如当该报文拦截设备获得的报文拦截指令为获取TCP SYNACK报文时，报文拦截设备拦截TCP SYNACK报文，并记录接收该TCP SYNACK报文的时间。S305：报文拦截设备向报文获得设备发送第一报文和其接收时间。
在一个示例中，报文拦截设备在指定的时间段内向报文获得设备发送其获取到的第一报文和其接收时间。
S307：报文拦截设备获得第二报文和其接收时间。
该第一报文和第二报文都经过同一个接入设备，即：该第一报文和第二报文可以是由同一个接入设备发送，也可以由不同的设备发送，但是该第一报文和第二报文的转发路径上都有同一个接入设备，进行其转发或发送。
在另一个例子中，第一报文为服务设备响应终端设备发送的TCP握手同步报文的SYNACK报文，第二报文为终端设备响应服务设备发送的TCP SYNACK报文而发送的TCP ACK报文。
在图4中示出了一种报文拦截设备拦截的第一报文和第二报文的示例。在该示例中，当终端设备需要向服务设备请求某服务时，终端设备会发起TCP连接，在连接过程中，会经历3次握手，即如步骤S401所示，终端设备会向服务设备发送一个TCP同步(synchronize，SYN)报文。服务设备获得该SYN报文后，会向终端设备发送一个SYNACK报文，该报文会经过接入设备转发。该报文也会经过报文拦截设备，报文拦截设备获得该报文及其接收时间。 在终端设备接收到服务端设备发送的SYNACK报文后，会向服务设备再发送一个ACK报文，该报文会经过接入设备以及报文拦截设备，报文拦截设备获得该报文和其接收时间。
可选的，当该第一报文和第二报文为TCP的SYNACK报文或和TCP的ACK报文时，该报文拦截设备从其远离接入设备的物理接口，如广域网(wide area network，WAN)接口，接收到该第一报文，即该第一报文为从服务侧向接入设备侧发送的报文，该报文拦截设备从其接近接入设备的物理接口，如局域网(local area network，LAN)接口，接收到该第二报文，即该第二报文为从接入设备侧向服务侧发送的报文。
S309：报文拦截设备向报文获得设备发送第二报文和其接收时间。
S305和S309可以都在S307之后执行。报文拦截设备也可以根据拦截的第一报文和第二报文及其接收时间生成一个或两个报文以代替S305和S309。
在一个示例中，该报文拦截设备为代替S305和S309而生成的两个报文中包括该第一报文和第二报文的报文特征信息和两个报文的接收时间信息。报文特征信息可以为：报文拦截设备根据同一个TCP连接确定的IP五元组信息，包括目的IP地址、源IP地址、目的端口号、源端口号和传输层协议，即当该两个报文的IP五元组能够对应时，则认为两个报文为一个报文对。
该报文特征信息还可以是该报文拦截设备为指示同一个TCP连接的报而生成特定的标识，如：该标识可以为报文拦截设备根据IP五元组经过哈希算法而得到的报文标识。该报文中还可以包括接入设备的标识，该接入设备标识可以为：接入设备的IP地址、该接入设备连接报文拦截设备的接口标识、该接入设备的媒体访问控制MAC地址或该报文拦截设备为该接入设备的分配的接入设备名称等或其任意组合，应理解，当仅有接入设备与该报文拦截设备相连时，则该接入设备的标识则不是必须携带的。
S311：报文获得设备获得1个或多个报文对。
报文获得设备可以获得多个报文，并通过匹配多个报文的信息确认两个报文为1个报文对。如：通过确认该第一报文和第二报文为同一个TCP连接的TCP SYNACK报文和ACK报文确认两个报文为一个报文对。
可选的，在该报文获得设备获得一个或多个报文对时，该报文获得设备还获得该报文对经过的接入设备的标识，包括：该接入设备的IP地址、该接入设备的MAC地址、报文拦截设备连接该接入设备的接口的标识、或该接入设备的名称等。
可选的，在该报文获得设备获得一个或多个报文对时，该报文获得设备还获得该报文对经过的接入设备与该报文拦截设备的连接方式，例如有线连接或无线连接。
在一个示例中，报文获得设备根据获得的多个报文对的信息得到如图5所示的报文对信息，报文获得设备记录报文拦截设备的标识，接入设备的标识，该接入设备与报文拦截设备的连接方式，报文拦截设备接收第一报文的 时间，和报文拦截设备接收第二报文的时间。
S313：报文获得设备获得报文对的时间差。
在一个示例中，报文获得设备根据1个报文对获得其时间差。
在一个示例中，报文获得设备获得报文对的时间差的信息如图6所示，该报文获得设备记录了报文拦截设备的标识，接入设备的标识，接入设备与报文拦截设备的连接方式，以及报文对的时间差。
以上报文获得设备和报文拦截设备可以为同一个设备，也可以为不同的设备。当报文拦截设备和报文获得设备为两台设备时，报文拦截设备需要执行上述步骤S305和S309，且上述步骤S305和步骤S309可能为一起执行，也可能分开执行。如，当报文拦截设备需要向报文获得设备发送100个报文时，报文拦截设备可以一次向报文获得设备发送100个报文，报文拦截设备也可以分多次，每次向报文获得设备发送1个或多个报文，直到报文拦截设备将100个报文全部发送给报文获得设备为止。当报文拦截设备和报文获得设备为同一台设备时，则不需要执行步骤S305和S309。
S315：报文获得设备向类型确定设备发送一个或多个报文对的时间差。
可选的，在该报文获得设备向类型确定设备发送一个或多个报文对的时间差时，该报文获得设备还向类型确定设备发送所述报文获得设备的标识。
在一个示例中，该报文获得设备的标识可以是以下标识中的任一项：该报文获得设备的家庭用户编号、该报文获得设备的IP地址、该报文获得设备的ESN码、该报文获得设备的MAC地址等，本申请不做具体限定。
可选的，在该报文获得设备向类型确定设备发送一个或多个报文对的时间差时，该报文获得设备还向类型确定设备发送该报文对经过的接入设备的标识，包括：该接入设备的IP地址、该接入设备的MAC地址、该接入设备接入报文拦截设备的接口信息等。对应于当报文拦截设备仅与一台接入设备相连时，则该接入设备的标识也不是必须的。
可选的，在该报文获得设备向类型确定设备发送一个或多个报文对的时间差时，该报文获得设备还向类型确定设备发送该报文对经过的接入设备接入该报文拦截设备的方式，包括：有线连接或无线连接。
应理解，以上报文获得设备和类型确定设备可以为同一个设备，也可以为不同的设备。当以上报文获得设备和类型确定设备为同一个设备时，则该设备不执行步骤S315。
S317：类型确定设备获得1个或多个报文对的时间差。
类型确定设备获得1个或多个报文对的时间差的方式可为：报文获得设备在一段时间内主动向该类型确定设备发送该1个或多个报文对，或类型确定设备主动从获取报文获得设备存储的1个或多个报文对的时间差。
可选的，在类型确定设备主动从报文获得设备处获取1个或多个报文对的时间差时，该类型确定设备还可以指定获取与指定的接入设备相关的1个或多个报文对的时间差。
S319：类型确定设备根据1个或多个报文对的时间差确定接入设备的类型。
在一个示例中，当类型确定设备根据获得的一个报文对的时间差确定该报文对经过的接入设备的类型。如当该时间差值为5毫秒时，则确定该接入设备的类型为交换机。
当类型确定设备获得多个报文对的时间差，则该类型确定设备可以根据多个报文对的时间差的平均值、中位数、去掉偏差较大的时间差之后的平均值、或去掉偏差较大的时间差之后的中位数等结果确定该接入设备的类型。
可选的，该类型确定根据时间差阈值和一个或多个报文对的时间差确定接入设备的类型。
该时间差阈值可以是由网络管理系统下发的时间差阈值，或是由运维人员人工配置的时间差阈值，也可以是类型确定设备自身计算得到的时间差阈值，本申请不做具体限定。时间差阈值也可以是预定义或类型确定设备出厂前已配置的，而不是必须额外获得该时间差阈值。
在一个示例中，该时间差阈值为：4毫秒，该时间差阈值指示当经过某接入设备的报文对的时间差大于或等于4毫秒时，则该接入设备为AP，该时间差阈值还可以指示当经过某接入设备的报文对的时间差小于或等于4毫秒时，则该接入设备为交换机。例如，当类型确定设备获得的1个报文对的时间差为10毫秒时，则该接入设备为AP。例如，当类型确定设备获得的1个报文对的时间差为2毫秒时，则该接入设备为交换机或个人计算机。
可选的，该类型确定设备比较多个报文对的时间差的平均值与该时间差阈值的大小，以确定该接入设备的类型。
在一个示例中，当类型确定设备获得多个报文对的时间差，则该类型确定设备可以根据多个报文对的时间差的平均值、中位数、去掉偏差较大的时间差之后的平均值、或去掉偏差较大的时间差之后的中位数等结果与时间差阈值进行比较，确定该接入设备的类型。如当该结果大于等于4毫秒时，则类型确定设备认为该接入设备为AP，当该值小于等于4毫秒时，则类型确定设备认为该接入设备为交换机或个人计算机。
可选的，该类型确定设备根据多个报文对的时间差中大于或小于时间差阈值的报文对个数的比值确定该接入设备的类型。
应理解，上述的“大于或小于”可以为“大于等于或小于等于”，即将等于的场景也考虑在内。
上述比值可以为：满足大于时间差阈值的时间差的个数除以时间差总数或小于时间差阈值的时间差的个数除以时间差总数，或者大于时间差阈值的时间差的个数除以小于时间差阈值的时间差的个数等等，本申请不做具体限定。
在一个示例中，如当该类型确定设备接收到的多个报文对的时间差的总个数为20个。如果其中大于等于时间差阈值的时间差的个数为18个，则该比值可以为：90％，该比值为高概率比值，则该类型确定设备确定该接入设备为AP。如果其中 小于等于时间差阈值的时间差的个数为4个时，则该比值可以为20％，该比值为低概率比值，则该类型确定设备确定该接入设备为交换机或个人计算机。或如果其中大于等于时间差阈值的时间差的个数为15，小于时间差阈值的时间差的个数为5时，该比值可以为：3，大于1，则该类型确定设备确定该接入设备为AP。
以上介绍了本申请实施例的接入设备类型确定方法，以下介绍本申请实施例提供的一种网络设备。
图7是本申请实施例提供的一种网络设备700，该网络设备700可以执行图3所示的报文拦截设备执行的方法。
该网络设备700包括获得单元701，收发单元702。该获得单元701可用于执行例如图3实施例中的步骤S301、S303和S307以及相关可选方式，该收发单元702可用于执行如图3实施例中的步骤S305和S309以及相关可选方式。
图8是本申请实施例提供的一种网络设备800，该网络设备800可以执行图3所示的报文获得设备执行的方法。
该网络设备800包括获得单元801和收发单元802。该获得单元801可用于执行例如图3实施例中的步骤S311和S313以及相关可选方式，该收发单元702可用于执行如图3实施例中的步骤S315以及相关可选方式。
图9是本申请实施例提供的一种网络设备900，该网络设备900可以执行图3所示的类型确定执行的方法。
该网络设备900包括获得单元901和确定单元902。该获得单元901可用于执行例如图3实施例中的步骤S317以及相关可选方式，该确定单元902可用于执行如图3实施例中的步骤S319以及相关可选方式。
应理解，如上所示的网络设备700、800和900可以由多台网络设备执行对应的方法，也可以由一台设备执行对应的方法。如，网络设备101可以同时完成网络设备700和网络设备800所执行的方法；服务器可以同时完成网络设备800和网络设备900所执行的方法，网络设备101可以同时完成网络设备700、网络设备800和网络设备900所执行的方法。需要说明的一点是，图7实施例提供的网络设备700、图8实施例提供的网络设备800和图9实施例提供的网络设备900在进行如上所述的接入设备类型确定时，仅以上述各功能单元的划分进行举例说明，实际应用中，可以根据需要而将上述功能分配由不同的功能单元完成，即将网络设备的内部结构划分成不同的功能单元，以完成以上描述的全部或者部分功能；或者用同一个功能单元完成上述多个单元的功能。应理解，上述实施例提供的网络设备与上述接入设备类型的确定方法实施例属于同一构思，在此仅针对该网络设备的各单元执行的步骤进行了举例说明，但并不代表其就不执行上述实施例中的其他步骤或可选方法，其具体实现过程详见方法实施例，这里不再赘述。
以上介绍了本申请实施例的网络设备，以下介绍该网络设备可能的产品形态。应理解，但凡具备上述图7中的网络设备700、图8中的网络设备800 和图9中的网络设备900的特征的任何形态的产品，都落入本申请的保护范围。还应理解，以下介绍仅为举例，不限制本申请实施例的网络设备的产品形态。
图10是本申请实施例提供的一种设备1000的结构示意图。图3实施例所示的报文拦截设备、报文获得设备和类型确定设备，均可以通过图10所示的设备来实现。参见图10所示的设备结构示意图。该设备1000包括至少一个处理器1001，通信总线1002以及通信接口1004和通信接口1005，可选地，该设备1000还可以包括存储器1003。
处理器1001可以是一个通用中央处理器(central processing unit，CPU)、特定应用集成电路(application-specific integrated circuit，ASIC)或一个或多个用于控制本申请方案程序执行的集成电路。处理器可以用于实现本申请实施例中提供的接入设备类型的确定方法。
比如，当图3实施例中的报文拦截设备通过图10所示的设备1000来实现时，处理器1001可以用于获得报文拦截指令，使得通信接口1004获得第一报文，通信接口获得第二报文，并获得第一报文的接收时间和第二报文的接收时间。当图3实施例中的报文获得设备也通过图10所示的设备1000来实现时，该处理器1001还可用于获得报文对，以及报文对的时间差。当图3实施例中的类型确定设备也通过图10所示的设备1000来实现时，该处理器1001还可用于根据所述报文对的时间差确定接入设备的类型。
通信总线1002用于在处理器1001、通信接口1004、通信接口1005和存储器1003之间传送信息。
存储器1003可以是只读存储器(read-only memory，ROM)，如：电可擦可编程只读存储器(electrically erasable programmable read-only memory，EEPROM)、只读光盘(compact disc read-only Memory，CD-ROM)或其它光盘、光碟存储(包括压缩光碟、激光碟、光碟、数字通用光碟、蓝光光碟等)。或者存储器1003也可以是随机存取存储器(random access memory，RAM)或者可存储信息和指令的其它类型的动态存储设备。
存储器1003可以是独立存在，通过通信总线1002与处理器1001相连接。存储器1003也可以和处理器1001集成在一起。
可选地，存储器1003用于存储执行本申请方案的程序代码或指令，并由处理器1001来控制执行。处理器1001用于执行存储器1003中存储的程序代码。程序代码中可以包括一个或多个软件模块。可选地，处理器1001自身也可以存储执行本申请方案的程序代码或指令。
通信接口1004，使用任何收发器一类的装置，用于与其它设备或通信网络通信，通信网络可以为以太网、无线接入网(RAN)或无线局域网(wireless local area networks，WLAN)等。在本申请实施例中，通信接口1004可以用于接收其他网络设备发送的第一报文，也可以向接入网络设备或其他网络设备发送第一报文。通信接口1004可以为以太接口(Ethernet)接口、快 速以太(Fast Ethernet，FE)接口或千兆以太(Gigabit Ethernet，GE)接口。
通信接口1005，使用任何收发器一类的装置，用于与其它设备或通信网络通信，通信网络可以为以太网、无线接入网(RAN)或无线局域网(wireless local area networks，WLAN)等。在本申请实施例中，通信接口1005可以用于接收接入设备发送的第二报文，也可以向其他网络设备发送第二报文。通信接口1005可以为以太接口(Ethernet)接口、快速以太(Fast Ethernet，FE)接口或千兆以太(Gigabit Ethernet，GE)接口。
在具体实现中，作为一种实施例，设备1000可以包括多个处理器，例如图10中所示的处理器1001和处理器1005。这些处理器中的每一个可以是一个单核(single-CPU)处理器，也可以是一个多核(multi-CPU)处理器。这里的处理器可以指一个或多个设备、电路、和/或用于处理数据(例如计算机程序指令)的处理核。
图11是本申请实施例提供的一种设备1100的结构示意图。图3实施例所示的报文获得设备和类型确定设备，均可以通过图11所示的设备来实现。参见图11所示的设备结构示意图。该设备1100包括至少一个处理器1101，通信总线1102以及通信接口1104，可选地，该设备1100还可以包括存储器1103。
处理器1101可以是一个通用中央处理器(central processing unit，CPU)、特定应用集成电路(application-specific integrated circuit，ASIC)或一个或多个用于控制本申请方案程序执行的集成电路。处理器可以用于实现本申请实施例中提供的接入设备类型的确定方法。
比如，当图3实施例中的报文获得设备通过图11所示的设备1100来实现时，该处理器1101可用于获得报文对，以及报文对的时间差。当图3实施例中的类型确定设备也通过图11所示的设备1100来实现时，该处理器1101还可用于根据所述报文对的时间差确定接入设备的类型。
通信总线1102用于在处理器1101、通信接口1104和存储器1103之间传送信息。
存储器1103可以是只读存储器(read-only memory，ROM)，如：电可擦可编程只读存储器(electrically erasable programmable read-only memory，EEPROM)、只读光盘(compact disc read-only Memory，CD-ROM)或其它光盘、光碟存储(包括压缩光碟、激光碟、光碟、数字通用光碟、蓝光光碟等)。或者存储器1003也可以是随机存取存储器(random access memory，RAM)或者可存储信息和指令的其它类型的动态存储设备。
存储器1103可以是独立存在，通过通信总线1102与处理器1101相连接。存储器1103也可以和处理器1101集成在一起。
可选地，存储器1103用于存储执行本申请方案的程序代码或指令，并由处理器1101来控制执行。处理器1101用于执行存储器1103中存储的程 序代码。程序代码中可以包括一个或多个软件模块。可选地，处理器1101自身也可以存储执行本申请方案的程序代码或指令。
通信接口1104，使用任何收发器一类的装置，用于与其它设备或通信网络通信，通信网络可以为以太网、无线接入网(RAN)或无线局域网(wireless local area networks，WLAN)等。在本申请实施例中，通信接口1104可以用于接收其他网络设备发送的第一报文，也可以向接入网络设备或其他网络设备发送第一报文。通信接口1104可以为以太接口(Ethernet)接口、快速以太(Fast Ethernet，FE)接口或千兆以太(Gigabit Ethernet，GE)接口。
在具体实现中，作为一种实施例，设备1100可以包括多个处理器，例如图11中所示的处理器1101和处理器1105。这些处理器中的每一个可以是一个单核(single-CPU)处理器，也可以是一个多核(multi-CPU)处理器。这里的处理器可以指一个或多个设备、电路、和/或用于处理数据(例如计算机程序指令)的处理核。
应理解，上述各种产品形态的网络设备，分别具有上述接入设备类型确定方法实施例中的网络设备任意功能，此处不再赘述。
本领域普通技术人员可以意识到，结合本文中所公开的实施例中描述的各方法步骤和单元，能够以电子硬件、计算机软件或者二者的结合来实现，为了清楚地说明硬件和软件的可互换性，在上述说明中已经按照功能一般性地描述了各实施例的步骤及组成。这些功能究竟以硬件还是软件方式来执行，取决于技术方案的特定应用和设计约束条件。本领域普通技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本申请的范围。
本领域普通技术人员可以清楚地了解到，为了描述的方便和简洁，上述描述的系统、装置和单元的具体工作过程，可以参见前述方法实施例中的对应过程，在此不再赘述。
在本申请所提供的几个实施例中，应该理解到，所揭露的装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅是示意性的，例如，该单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个系统，或一些特征可以忽略，或不执行。另外，所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口、装置或单元的间接耦合或通信连接，也可以是电的或其它的形式连接。
该作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本申请实施例方案的目的。
另外，在本申请各个实施例中的处理单元可以分散到多个功能单元中， 也可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以是两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现，也可以采用软件功能单元的形式实现。
在上述实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件、固件或者其组合实现时，可以全部或部分地以计算机程序产品的形式实现。所述计算机程序产品包括一个或多个计算机程序指令。在计算机上加载和执行所述计算机程序指令时，全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一个计算机可读存储介质传输，例如，所述计算机程序指令可以从一个网站站点、计算机、服务器或数据中心通过有线或无线方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何介质或者是包含一个或多个介质集成的服务器、数据中心等数据存储设备。所述介质可以是磁性介质(例如软盘、硬盘、磁带)、光介质(例如，光盘)、或者半导体介质(例如固态硬盘)等。
以上所述的具体实施方式，对本发明的目的、技术方案和有益效果进行了进一步详细说明，所应理解的是，以上所述仅为本发明的具体实施方式而已，并不用于限定本发明的保护范围，凡在本发明的技术方案的基础之上，所做的任何修改、等同替换、改进等，均应包括在本发明的保护范围之内。

Claims (21)

  1. 一种接入设备类型确定方法，其特征在于，包括：
    获得一个或多个报文对，每个报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备；
    根据所述一个或多个报文对的时间差确定所述接入设备的类型，任意报文对的时间差为所述报文对中的两个报文的接收时间之差。
  2. 根据权利要求1所述的方法，其特征在于，
    所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
  3. 根据权利要求1或2所述的方法，其特征在于，所述根据所述一个或多个报文对的时间差确定所述接入设备的类型包括：
    根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型。
  4. 根据权利要求3所述的方法，其特征在于，所述根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，包括：
    比较所述多个报文对的时间差的平均值或中位数与所述时间差阈值，以确定所述接入设备的类型。
  5. 根据权利要求3所述的方法，其特征在于，所述根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型，包括：
    根据所述多个报文对的时间差中大于或小于所述时间差阈值的报文对个数的比值，确定所述接入设备的类型。
  6. 根据权利要求1-5任一项所述的方法，其特征在于，所述获得一个或多个报文对包括：
    获得报文拦截设备的远离接入设备的物理接口接收到的所述第一报文；
    获得所述报文拦截设备的接近接入设备的物理接口接收到的所述第二报文。
  7. 一种网络系统，其特征在于，包括：
    报文获得设备获得一个或多个报文对，每个报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备；
    类型确定设备根据所述一个或多个报文对的时间差确定所述接入设备的类型，任意报文对的时间差为所述报文对中的两个报文的接收时间之差。
  8. 根据权利要求7所述的网络系统，其特征在于，
    所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
  9. 根据权利要求7或8所述的网络系统，其特征在于，所述类型确定设备根据所述一个或多个报文对的时间差确定所述接入设备的类型，包括：
    所述类型确定设备根据时间差阈值和所述一个或多个报文对的时间差确定所述接入设备的类型。
  10. 根据权利要求9所述的网络系统，其特征在于，所述类型确定设备根据所述一个或多个报文对的时间差确定所述接入设备的类型，包括：
    所述类型确定设备比较所述多个报文对的时间差的平均值或中位数与所述时间差阈值，以确定所述接入设备的类型。
  11. 根据权利要求10所述的网络系统，其特征在于，所述类型确定设备根据所述一个或多个报文对的时间差确定所述接入设备的类型，包括：
    所述类型确定设备根据所述多个报文对的时间差中大于或小于所述时间差阈值的报文对个数的比值确定所述接入设备的类型。
  12. 根据权利要求7-11任一项所述的网络系统，其特征在于，所述网络系统包括报文拦截设备，获得一个或多个报文对包括：
    获得报文拦截设备的远离接入设备的物理接口接收到的所述第一报文；
    获得所述报文拦截设备的接近接入设备的物理接口接收到的所述第二报文。
  13. 一种网络设备，其特征在于，包括：
    处理器和至少两个通信接口；
    所述处理器用于使得所述网络设备拦截所述至少两个通信接口中的第一通信接口接收的第一报文，拦截所述至少两个通信接口中的第二通信接口接收的第二报文，以及获得所述接收第一报文和第二报文的接收时间，所述第二报文为对所述第一报文的响应，所述第一报文和所述第二报文都经过同一接入设备。
  14. 根据权利要求13所述的网络设备，其特征在于，
    所述第一报文为一个传输控制协议TCP连接的同步确认报文，所述第二报文为所述TCP连接的确认报文。
  15. 根据权利要求13或14所述的网络设备，其特征在于，
    所述第一通信接口为所述网络设备的远离所述接入设备的通信接口；
    所述第二通信接口为所述网络设备的接近所述接入设备的通信接口。
  16. 根据权利要求13-15任一项所述的网络设备，其特征在于，所述处理器还用于：
    确定所述第一报文与所述第二报文为报文对；
    确定所述报文对的时间差，所述报文对的时间差为所述第一报文对的接收时间与所述第二报文的接收时间之差。
  17. 根据权利要求16所述的网络设备，其特征在于，所述处理器还用于：
    根据所述报文对的时间差确定所述接入设备的类型。
  18. 根据权利要求13-17任一项所述的网络设备，其特征在于，
    所述处理器还用于根据所述第一报文获得第一报文特征，根据所述第二报文获得第二报文特征；
    所述第一通信接口还用于转发所述第一报文或所述第一报文特征，所述第二通信接口还用于转发所述第二报文或所述第二报文特征。
  19. 一种网络设备，其特征在于，包括：
    处理器、存储器和通信接口；
    所述通信接口，用于接收多个报文，所述多个报文都经过同一接入设备；
    所述存储器中存储有指令，所述处理器用于执行所述指令，以根据所述多个报文确定一个或多个报文对，所述一个或多个报文对中的任意报文对包括第一报文和第二报文，所述任意报文对中的第二报文为对所述任意报文对中的第一报文的响应；
    所述处理器还用于获得所述一个或多个报文对的时间差，所述一个或多个报文对的时间差为任意报文对中的两个报文的接收时间之差。
  20. 根据权利要求19所述的网络设备，其特征在于，所述处理器用于根据所述多个报文确定一个或多个报文对，具体为：
    所述第一报文携带第一报文特征，所述第二报文携带第二报文特征，
    所述处理器根据所述第一报文特征与所述第二报文特征确定所述第一报文和所述第二报文为一个报文对。
  21. 一种网络设备，其特征在于，包括：
    处理器和存储器；
    所述存储器中存储有指令，
    所述处理器用于执行所述存储器中的所述指令以根据一个或多个报文对的时间差确定接入设备的类型，所述报文对包括第一报文和第二报文，所述第二报文为对所述第一报文的响应，所述一个或多个报文对都经过同一接入设备。
PCT/CN2020/106483 2019-11-05 2020-08-01 一种接入设备类型确定方法、设备及系统 Ceased WO2021088438A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP20885804.3A EP4044556A4 (en) 2019-11-05 2020-08-01 PROCEDURE FOR DETERMINING THE TYPE OF ACCESS DEVICE, DEVICE AND SYSTEM
US17/735,330 US20220263824A1 (en) 2019-11-05 2022-05-03 Method for determining access device type, device, and system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201911071868.X 2019-11-05
CN201911071868.XA CN112787975B (zh) 2019-11-05 2019-11-05 一种接入设备类型确定方法、设备及系统

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US17/735,330 Continuation US20220263824A1 (en) 2019-11-05 2022-05-03 Method for determining access device type, device, and system

Publications (1)

Publication Number Publication Date
WO2021088438A1 true WO2021088438A1 (zh) 2021-05-14

Family

ID=75747373

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2020/106483 Ceased WO2021088438A1 (zh) 2019-11-05 2020-08-01 一种接入设备类型确定方法、设备及系统

Country Status (4)

Country Link
US (1) US20220263824A1 (zh)
EP (1) EP4044556A4 (zh)
CN (1) CN112787975B (zh)
WO (1) WO2021088438A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114390511A (zh) * 2021-12-20 2022-04-22 苏州迈科网络安全技术股份有限公司 基于mac地址的终端型号动态识别方法、装置、终端及存储介质

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US12170665B2 (en) * 2021-06-25 2024-12-17 Tp-Link Corporation Limited Client identification method and apparatus, and storage medium and network device
CN114513399B (zh) * 2021-12-31 2024-09-24 锐捷网络股份有限公司 设备识别方法、装置和计算机可读存储介质及电子设备

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20010034791A1 (en) * 2000-01-31 2001-10-25 Kenneth Clubb System and method for forwarding messages to multiple devices or over multiple paths
CN1965309A (zh) * 2004-01-09 2007-05-16 Npx科技有限公司 检测经中继的通信
CN101217429A (zh) * 2008-01-18 2008-07-09 清华大学 基于tcp时间戳选项确定tcp报文之间的引发关系的方法
CN101631052A (zh) * 2009-08-25 2010-01-20 杭州华三通信技术有限公司 一种检测接入终端数量的方法及装置
CN101841445A (zh) * 2010-04-20 2010-09-22 北京星网锐捷网络技术有限公司 共享上网用户识别方法及装置
CN102377620A (zh) * 2011-12-09 2012-03-14 浙江大学 基于osi传输层时间戳的宽带私接检测方法
CN103634359A (zh) * 2012-08-27 2014-03-12 阿里巴巴集团控股有限公司 一种代理服务器识别方法及装置
CN105827473A (zh) * 2015-01-06 2016-08-03 中国移动通信集团江苏有限公司 一种网络质量评估方法及装置
CN107483431A (zh) * 2017-08-10 2017-12-15 杭州迪普科技股份有限公司 一种基于tcp/ip协议的交换机端口安全防护方法和装置
CN109787865A (zh) * 2019-01-25 2019-05-21 深圳市信锐网科技术有限公司 一种升级情况的验证方法、系统、交换机及存储介质

Family Cites Families (23)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6646996B1 (en) * 1999-12-15 2003-11-11 International Business Machines Corporation Use of adaptive resonance theory to differentiate network device types (routers vs switches)
EP1401150B1 (en) * 2002-09-17 2015-11-11 Broadcom Corporation Communication system and method in a hybrid wired/wireless local area network
US6850541B2 (en) * 2002-09-30 2005-02-01 Intel Corporation Technique to measure network path bandwidth capacity using modal analysis
WO2008127154A1 (en) * 2007-04-12 2008-10-23 Telefonaktiebolaget L M Ericsson (Publ) Measuring network performance with reference packet probing
JP5163398B2 (ja) * 2008-09-26 2013-03-13 富士通株式会社 パケット特定プログラム、パケット特定方法、パケット特定装置及び制御プログラム
WO2010042578A1 (en) * 2008-10-08 2010-04-15 Citrix Systems, Inc. Systems and methods for real-time endpoint application flow control with network structure component
US20100315967A1 (en) * 2009-06-11 2010-12-16 Qualcomm Incorporated Multi-frequency pilot signals
CN101917732B (zh) * 2010-07-16 2012-10-31 中国科学院计算技术研究所 无线流量判别方法
US8316155B2 (en) * 2010-12-17 2012-11-20 Microsoft Corporation Distributed robust clock synchronization
KR101272670B1 (ko) * 2011-11-28 2013-06-10 엔에이치엔(주) 사용자 단말의 접속 네트워크 식별 장치, 방법 및 컴퓨터 판독 가능한 기록 매체
EP2723021A1 (en) * 2012-10-18 2014-04-23 Telefonaktiebolaget L M Ericsson AB (Publ) A method and an apparatus for determining the presence of a rate limiting mechanism in a network
JP5958325B2 (ja) * 2012-12-20 2016-07-27 富士通株式会社 ネットワーク分析方法、情報処理装置およびプログラム
US9980156B2 (en) * 2015-07-17 2018-05-22 Altiostar Networks, Inc. Optimization of downlink throughput
US10194379B2 (en) * 2015-08-06 2019-01-29 Arris Enterprises Llc Discovery and security in LWA communication
US9992120B2 (en) * 2015-10-21 2018-06-05 Citrix Systems, Inc. System and method for rate-based packet transmission over a network
CN107231266A (zh) * 2016-03-24 2017-10-03 中兴通讯股份有限公司 报文通道的检测方法及装置
WO2018174222A1 (ja) * 2017-03-24 2018-09-27 日本電気株式会社 通信装置、通信方法及びプログラム
EP3607777A1 (en) * 2017-04-07 2020-02-12 Nokia of America Corporation Ad hoc service switch-based control of ad hoc networking
US10608887B2 (en) * 2017-10-06 2020-03-31 Nicira, Inc. Using packet tracing tool to automatically execute packet capture operations
WO2019144213A1 (en) * 2018-01-29 2019-08-01 Nanoport Technology Inc. Facilitating invocation of a service hosted at a proximate electronic device from a mobile software application
CN108901025B (zh) * 2018-07-10 2021-07-06 迈普通信技术股份有限公司 一种非法接入点反制方法及反制设备
IL260986B (en) * 2018-08-05 2021-09-30 Verint Systems Ltd A system and method for using a user action log to study encrypted traffic classification
US11115142B1 (en) * 2018-12-21 2021-09-07 Equinix, Inc. Timing synchronization service and distribution system

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20010034791A1 (en) * 2000-01-31 2001-10-25 Kenneth Clubb System and method for forwarding messages to multiple devices or over multiple paths
CN1965309A (zh) * 2004-01-09 2007-05-16 Npx科技有限公司 检测经中继的通信
CN101217429A (zh) * 2008-01-18 2008-07-09 清华大学 基于tcp时间戳选项确定tcp报文之间的引发关系的方法
CN101631052A (zh) * 2009-08-25 2010-01-20 杭州华三通信技术有限公司 一种检测接入终端数量的方法及装置
CN101841445A (zh) * 2010-04-20 2010-09-22 北京星网锐捷网络技术有限公司 共享上网用户识别方法及装置
CN102377620A (zh) * 2011-12-09 2012-03-14 浙江大学 基于osi传输层时间戳的宽带私接检测方法
CN103634359A (zh) * 2012-08-27 2014-03-12 阿里巴巴集团控股有限公司 一种代理服务器识别方法及装置
CN105827473A (zh) * 2015-01-06 2016-08-03 中国移动通信集团江苏有限公司 一种网络质量评估方法及装置
CN107483431A (zh) * 2017-08-10 2017-12-15 杭州迪普科技股份有限公司 一种基于tcp/ip协议的交换机端口安全防护方法和装置
CN109787865A (zh) * 2019-01-25 2019-05-21 深圳市信锐网科技术有限公司 一种升级情况的验证方法、系统、交换机及存储介质

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP4044556A4

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114390511A (zh) * 2021-12-20 2022-04-22 苏州迈科网络安全技术股份有限公司 基于mac地址的终端型号动态识别方法、装置、终端及存储介质
CN114390511B (zh) * 2021-12-20 2024-05-17 苏州迈科网络安全技术股份有限公司 基于mac地址的终端型号动态识别方法、装置、终端及存储介质

Also Published As

Publication number Publication date
CN112787975B (zh) 2022-06-10
CN112787975A (zh) 2021-05-11
EP4044556A1 (en) 2022-08-17
US20220263824A1 (en) 2022-08-18
EP4044556A4 (en) 2022-11-02

Similar Documents

Publication Publication Date Title
US10581907B2 (en) Systems and methods for network access control
US10630784B2 (en) Facilitating a secure 3 party network session by a network device
US20190089818A1 (en) Hardware-based packet forwarding for the transport layer
US11277313B2 (en) Data transmission method and corresponding device
JP6573658B2 (ja) リンク制御ノードおよびリンク制御方法、および通信システム
US9565167B2 (en) Load balancing internet protocol security tunnels
US11089473B2 (en) Service access, and control method and apparatus therefor
US10064096B2 (en) Traffic distribution in heterogenous network environment
US10425870B2 (en) Wireless client traffic continuity across controller failover and load-balancing
US10944734B2 (en) Creating secure encrypted broadcast/multicast groups over wireless network
US11889568B2 (en) Systems and methods for paging over WiFi for mobile terminating calls
US10348687B2 (en) Method and apparatus for using software defined networking and network function virtualization to secure residential networks
CN111133427A (zh) 生成和分析网络配置文件数据
US20220263824A1 (en) Method for determining access device type, device, and system
CN107078946A (zh) 业务流处理策略的处理方法、装置和系统
EP3747165A1 (en) Application based routing of data packets in multi-access communication networks
US11968237B2 (en) IPsec load balancing in a session-aware load balanced cluster (SLBC) network device
CN107257558B (zh) 报文转发方法及装置
CN109981462B (zh) 一种报文处理方法及装置
CN107666443A (zh) 一种报文转发方法及装置
US12184494B2 (en) Methods and systems for automatic open shortest path first (OSPF) configuration
EP4315814B1 (en) Method of operating a telecommunications network

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20885804

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2020885804

Country of ref document: EP

Effective date: 20220427

NENP Non-entry into the national phase

Ref country code: DE