![一种网络风暴快速检测方法及装置](/CN/2017/1/19/images/201710096711.jpg)
基本信息:
- 专利标题: 一种网络风暴快速检测方法及装置
- 专利标题(英):Network storm quick detection method and device
- 申请号:CN201710096711.7 申请日:2017-02-22
- 公开(公告)号:CN106789448A 公开(公告)日:2017-05-31
- 发明人: 沈沉 , 王西邓 , 宋彦锋 , 李英明 , 任红旭 , 汤洋 , 凌特利 , 张荣良 , 马卫平 , 徐云松 , 顾峰 , 胡凯利
- 申请人: 许继集团有限公司 , 许继电气股份有限公司 , 许昌许继软件技术有限公司 , 国家电网公司
- 申请人地址: 河南省许昌市许继大道1298号; ; ;
- 专利权人: 许继集团有限公司,许继电气股份有限公司,许昌许继软件技术有限公司,国家电网公司
- 当前专利权人: 许继集团有限公司,许继电气股份有限公司,许昌许继软件技术有限公司,国家电网公司
- 当前专利权人地址: 河南省许昌市许继大道1298号; ; ;
- 代理机构: 郑州睿信知识产权代理有限公司
- 代理人: 崔旭东
- 主分类号: H04L12/26
- IPC分类号: H04L12/26
The invention relates to a network storm quick detection method and device. The method includes: comparing a time interval between a collected message and a previous message having same CRC (cyclic redundancy check) with a set time threshold T; when the time interval is smaller than the time threshold T, accumulating message flow corresponding to CRC; comparing flow after flow accumulation with a set flow threshold Fmax to judge a network storm. The method is simple in principle, and quick detection of the network storm is realized by utilizing a method of comparing CRC of Ethernet messages; detection is accurate, free of limitation of message type and flow and free of influence on receiving and processing of normal business messages, and a starting condition is provided for network storm handling, so that impact on equipment caused by the network storm is lowered or avoided.