Summary of the invention
The purpose of the present invention is to provide the determination methods and device of a kind of network element working condition of WLAN, solveWhen tradition determines network element working condition, need manually to the simulation test of each network element, so that the waste of man power and material is caused,The problem of working efficiency is lower and cost is got higher is brought simultaneously.
In order to solve the above-mentioned technical problem, the network element working condition of a kind of WLAN provided in an embodiment of the present inventionDetermination method, the WLAN include multiple network elements, and each network element is in normal operating conditions, predetermined in every execution oneWhen key operations, a log will be generated, and updates the corresponding key operations of the log in the library management information MIB and occurs total timeNumber, wherein the determination method includes:
Obtain the log of network element generation；
The log obtained in preset period of time is analyzed, obtains each key operations the first of the preset period of timeTotal degree occurs；
It obtains each key operations recorded in the library MIB and total degree occurs the second of the preset period of time；
According to the first generation total degree and second hair of each key operations in the preset period of timeDifference between raw total degree, judge the network element whether operation irregularity.
Further, the network element is access controller AC or access points AP.
Further, when the network element is the AC, the log obtained in the analysis preset period of time is closedKey, which is acted, occurs total degree the first of the preset period of time, comprising:
All logs that each key operations got in the preset period of time generate are analyzed, determine each logCorresponding key operations；
Statistics obtains corresponding to the log quantity of same key operations, as the key operations the of the preset period of timeOne occurs total degree.
Further, total degree and institute occur for described first according to each key operations in the preset period of timeState the difference between the second generation total degree, judge the network element whether operation irregularity, comprising:
According to the first generation total degree and second hair of each key operations in the preset period of timeDifference between raw total degree obtains the first generation total degree and described second of each key operations respectively and occurs total timeSeveral ratio, the result after subtracting 1 for the ratio take absolute value, and obtain the exceptional value of the key operations；
From the exceptional value of each key operations of acquisition, largest outliers are selected, and judge that the largest outliers areIt is no to be greater than preset threshold；
It is greater than the preset threshold in the largest outliers, then judges the network element operation irregularity；Or
It is not more than the preset threshold in the largest outliers, then judges that the network element is working properly.
It wherein, is the AC in the network element, and when the AC exception, the determination method further include:
Within a preset time from the log that AC is generated, each crucial processing movement of the AP under the AC is obtainedCritical data, wherein the critical packet includes the number of success of key operations and the total degree of key operations；
According to the number of success of key operations and the total degree, each key operations of the log of the AC are obtainedKey Performance Indicator KPI index；
Obtain the KPI index of each key operations recorded in the library MIB in the preset time；
Compare each key operations in the log got, described first in the preset period of time occurs totalThe each key operations recorded in number and the acquisition library MIB occur total time described the second of the preset period of timeNumber；
Sum occurs described first and is greater than the second generation sum, then uses each key operations of the AC logKPI index replace the KPI index of each key operations recorded in the library MIB；Or sum occurs not described firstSum occurs greater than described second, then using the KPI index of each key operations recorded in the library MIB.
The present invention also provides a kind of decision maker of the network element working condition of WLAN, the WLAN includesMultiple network elements, each network element in normal operating conditions, in one predetermined key operations of every execution, will generate a log,And the corresponding key operations of the log are updated in the library management information MIB, total degree occurs, wherein the decision maker packetIt includes:
First obtains module, for obtaining the log of network element generation；
Second acquisition module obtains each key operations described for analyzing the log obtained in preset period of timeTotal degree occurs for the first of preset period of time；
Third obtains module, for obtaining each key operations recorded in the library MIB in the preset period of timeSecond occur total degree；
First processing module, for total according to first generation of each key operations in the preset period of timeNumber and it is described second occur total degree between difference, judge the network element whether operation irregularity.
Further, the network element is access controller AC or access points AP.
Further, when the network element is the AC, the second acquisition module includes:
First acquisition submodule, the institute generated for analyzing each key operations got in the preset period of timeThere is log, determines the corresponding key operations of each log；
Second acquisition submodule obtains corresponding to the log quantity of same key operations for counting, as the key operationsFirst in the preset period of time occurs total degree.
Further, the first processing module includes:
First processing submodule, for first generation according to each key operations in the preset period of timeDifference between total degree and the second generation total degree obtains the first generation total degree of each key operations respectivelyThe ratio that total degree occurs with described second, the result after subtracting 1 for the ratio take absolute value, and obtain the exception of the key operationsValue；
Second processing submodule, for selecting largest outliers from the exceptional value of each key operations of acquisition, andJudge whether the largest outliers are greater than preset threshold；
Judging submodule then judges the network element operation irregularity for being greater than the preset threshold in the largest outliers；Or
It is not more than the preset threshold in the largest outliers, then judges that the network element is working properly.
It wherein, is the AC in the network element, and when the AC exception, the decision maker further include:
First module, for from the log that AC is generated, obtaining each of the AP under the AC within a preset timeThe critical data of crucial processing movement, wherein the critical packet include key operations number of success and total time of key operationsNumber；
Second module, for according to key operations the number of success and the total degree, obtain the log of the ACEach key operations Key Performance Indicator KPI index；
Third module, the KPI for obtaining each key operations recorded in the library MIB in the preset time refer toMark；
Comparison module, for comparing each key operations in the log got, in the preset period of timeThe each key operations recorded in the first generation total degree and the acquisition library MIB, in the institute of the preset period of timeState the second generation total degree；
Second processing module is greater than the second generation sum for sum to occur described first, then uses the ACThe KPI index of each key operations of log replaces the KPI index of each key operations recorded in the library MIB；OrDescribed first, which occurs sum, occurs sum no more than described second, then using each key operations recorded in the library MIBKPI index.
The advantageous effects of the above technical solutions of the present invention are as follows:
In the solution of the present invention, by same preset period of time, obtaining each key operations in the log of network elementFirst generation total degree and obtain the library MIB in record each key operations second generation total degree compare, according to sameWhen key operations have differences between the first generation total degree and the second generation total degree in same preset period of time, comeJudge the network element whether operation irregularity.It does not need manually to go acquisition data in this way, can also check the working condition of network element, not onlyReduce the waste of man power and material, and reduce costs, improves work efficiency simultaneously.
Specific embodiment
To keep the technical problem to be solved in the present invention, technical solution and advantage clearer, below in conjunction with attached drawing and toolBody embodiment is described in detail.
The present invention needs manually to carry out the simulation test of each network element for judgement network element working condition in the prior art, fromAnd the waste of man power and material is caused, work at the same time that efficiency is lower low and higher cost, while can not on a large scale automaticallyThe problem of determining network element services state and verifying corrigendum WLAN network management data provides a kind of network element work of WLANThe determination method and device of state, by comparing identical service request in the same sampling period, the network element record obtained automaticallyDifferent from WLAN network management data two kinds records of log, realize the judgement to network element state；Determining network element work simultaneouslyWhen abnormal, change WLAN data may be implemented and improved work efficiency so there is no need to waste a large amount of man power and material,And it may be implemented on a large scale, it is long-term efficiently and in real time to determine network element state automatically, and verify and correct WLAN network management data.
As shown in Figure 1, the determination method of the network element working condition of the WLAN of the embodiment of the present invention, shown wireless officeDomain net includes multiple network elements, and each network element in normal operating conditions, in one predetermined key operations of every execution, will generate oneLog, and update the corresponding key operations of the log in the library management information MIB and total degree occurs, wherein the judgementMethod includes:
Above-mentioned predetermined key operations include association, and address distribution authenticates, online and offline.
Above-mentioned log corresponds to the association class log that associated key operations generate, and the key operations of corresponding address distribution generateAddress distribute log, perhaps corresponding to certification key operations generate the log of certification class or corresponding to offline keyAct the offline class log generated, or the online class log generated corresponding to online key operations.
The above-mentioned corresponding key operations generation total degree of the log that updates in the library management information MIB refers to corresponding to eachKey operations are generating a log recording, the numerical value that every log recording of same key operations is added up, for each passKey movement has respective accumulating values.
Step 11, the log that a network element generates is obtained；
Wherein the network element includes access controller AC, and system record is all arranged on AC, on log server both endsSyslog function, can also be with AC log real-time Transmission to log server, and saves at log server end, by periodically from ACThe log of network element is obtained on upper or log server.
Step 12, the log obtained in analysis preset period of time obtains each key operations in the preset time weekTotal degree occurs for the first of phase；Wherein the preset period of time can carry out certainly according to user or analysis WLAN network management dataRow setting, it is general the smaller the better, it is achieved in that the data of the first generation total degree are more accurate.
Step 13, each key operations recorded in the library MIB are obtained to occur the second of the preset period of timeTotal degree；Described second wherein can be directly obtained from the library MIB by WLAN network management, total degree occurs.
Step 14, according to each key operations in the preset period of time it is described first occur total degree with it is describedSecond occur total degree between difference, judge the network element whether operation irregularity.
In first in predetermined period the difference between total degree and the second generation total degree is occurred into for associated key operationsIt is different to be compared, judge the network element whether operation irregularity；Or by address distribution key operations in predetermined period firstOccur total degree and second generation total degree between difference be compared judge the network element whether operation irregularity or other closeKey movement carries out similar diversity ratio pair, judge the network element whether operation irregularity；It is also possible to each autodyne of all key operationsDifferent comparison, it is maximum to find out difference, judge the network element whether operation irregularity, all belonged to the scope of protection of the present invention with upper type.
After the log that step 11 obtains that network element generates, each of log is obtained in preset period of time by step 12Total degree, and second of each key operations by recording in the library MIB of the acquisition of step 13 occur for the first of key operationsTotal degree occurs, then step 14 compares the difference of the first generation total degree with the second generation total degree, it can be determined that network element isNo operation irregularity.A large amount of manpower is not needed in this way and goes acquisition data, is improved work efficiency, is reduced costs simultaneously, it can be withOn a large scale, the working condition of network element is determined automatically, and realization is permanently effective, and verifies network element state in real time, not only increasesThe reliability of network element, and be conducive to the optimization of network element.
In order in network element operation irregularity, find the position of specific exception, therefore the determination method of the embodiment of the present inventionIn, the network element is access controller AC or access points AP.
As shown in Fig. 2, being event triggering property information source by AC log, by converging AP1 in AC, AP2 ... APn's is allThe log recording of each key operations of AP, WLAN network management obtain in preset period of time from AC, the pass that AC implements and recordsKey action record, and the same key operations of the network element experience record formed in same preset period of time with AC log recordingThe generation total degree of record is made comparisons, to realize the assessment of network element state, automatically to determine the network element in preset period of timeIn working condition, and guide verification failure.
When determining that operation irregularity occurs in a certain AC, preset time is analyzed in the log of the generation by obtaining each APIDThe first of the preset period of time total degree occurs for the log obtained in the period, each key operations for obtaining each AP,Then difference is compared with the second generation total degree of each key operations recorded in the library MIB, while shouldDifference is compared in all AP under the AC of abnormal work, some AP comparison result difference be more than user's self-setting orOne threshold value of system worked well, then specific judgement is the AP operation irregularity.
First total degree, therefore the embodiment of the present invention occurs to accurately obtain each key operations of the log in ACDetermination method in, the network element be the AC when, step 11 includes:
Step 111, all logs that each key operations got in the preset period of time generate are analyzed, are determinedThe corresponding key operations of each log；
According to the head of each key operations of AC log recording, the corresponding key operations of each log can be determined, hereinThe key operations are for including the 4 class logs such as association, address distribution, certification, offline.
Step 112, statistics obtains corresponding to the log quantity of same key operations, as the key operations in the preset timeTotal degree occurs for the first of period.Wherein, it is described first generation total degree be by the associated cumulative total degree of each AP, orThe cumulative total degree for referring to the address distribution of each AP perhaps refers to the cumulative total degree of the certification of each AP or refers to everyThe offline cumulative total degree of a AP.
The cumulative of the log quantity of same key operations can be calculated under AC in some sampling period of each APLog recording degree of incidence, be successfully associated number, address assignment request number, address assignment request success rate number, recognizeDemonstrate,prove request number of times, certification number of success.
In order to realize in the same sampling period, same network element, to identical service request, two kinds of different records are realNow to the judgement of network element state, therefore in the determination method of the embodiment of the present invention, step 14 includes:
Step 141, total degree and institute occur for described first according to each key operations in the preset period of timeThe difference between the second generation total degree is stated, the first generation total degree and described second of each key operations respectively is obtainedThe ratio of total degree occurs, the result after subtracting 1 for the ratio takes absolute value, and obtains the exceptional value of the key operations；
Step 142, from the exceptional value of each key operations of acquisition, largest outliers are selected, and judge the maximumWhether exceptional value is greater than preset threshold；
Step 143, it is greater than the preset threshold in the largest outliers, then judges the network element operation irregularity；Or
It is not more than the preset threshold in the largest outliers, then judges that the network element is working properly.
Above-mentioned preset threshold can be user according to network demand sets itself.
Specific embodiments of the present invention are exemplified below.
Citing one: assuming that when key operations refer to the key operations of associated key operations and certification, it is associated crucial dynamicThe daily record data for making to generate includes degree of incidence, is successfully associated number；The daily record data that the key operations of certification generate includes recognizingDemonstrate,prove number, certification number of success.
The summation of the degree of incidence of each AP is the association total degree A of AC in ACIt is associated with total degree；
The summation for being successfully associated number of each AP is successfully associated number A for AC in ACIt is successfully associated number；
The certification total degree A that the summation of the certification number of each AP is AC in ACAuthenticate total degree；
The summation of the certification number of success of each AP is the certification number of success A of AC in ACAuthenticate number of success；
The association total degree W that WLAN network management is directly obtained from the library MIBIt is associated with total degree；
What WLAN network management was directly obtained from the library MIB is successfully associated number WIt is successfully associated number；
The certification total degree W that WLAN network management is directly obtained from the library MIBAuthenticate total degree；
The certification number of success W that WLAN network management is directly obtained from the library MIBAuthenticate number of success；
Wherein λ is the state factor of the AC in preset period of time；
By comparing AC daily record data and WLAN network management data, find out one group of data of maximum difference, if AC state becauseSub- λ be greater than preset threshold, represent AC work it is abnormal, need further analyze be certain AP states caused by, equally makeThe state factor for calculating any AP of each key operations with formula 1 by each AP in preset period of time, it is naturalThe state for adjudicating each AP can be implemented, and realize fault location.
Traditional is directed to WLAN network management data, and test experiments are successful, whether can only also knowing WLAN data accurately, at allWLAN data can not be corrected, therefore in the determination method of the embodiment of the present invention, be the AC in the network element, and the AC is abnormalWhen, the determination method further include:
Step 15, each key aspect of the AP under the AC is obtained from the log that AC is generated within a preset timeThe critical data of reason movement, wherein the critical packet includes the number of success of key operations and the total degree of key operations；
Step 16, according to the number of success of key operations and the total degree, each of the log of the AC is obtainedThe Key Performance Indicator KPI index of key operations；
Wherein by the way that total number of success and the total degree are made ratio operation, it can be deduced that the log of the ACThe Key Performance Indicator KPI index of each key operations, such as (total number of success/total trial time)=association/address are allocated successfullyRate.
Step 17, the KPI index of each key operations recorded in the library MIB in the preset time is obtained；
Step 18, compare each key operations in the log got, described in the preset period of timeThe each key operations recorded in one generation total degree and the acquisition library MIB, described the second of the preset period of timeTotal degree occurs；Wherein, sum and described second occurs by described first and sum comparison occurs, take biggish numerical value between the two,Then it is judged as the comprehensive data of data.
Step 19, sum occurs described first and is greater than the second generation sum, then using each of the AC logThe KPI index of key operations replaces the KPI index of each key operations recorded in the library MIB；Or
Sum occurs described first, sum occurs no more than described second, then it is each using being recorded in the library MIBThe KPI index of key operations.
By being greater than threshold values as AC state factor λ, discovery AC working condition is abnormal, WLAN network management data and AC log at this timeAccuracy it is all doubtful, therefore, in preset period of time, the first of each key operations in log that will acquireTotal degree occurs and is compared with the second generation total degree for obtaining each key operations recorded in the library MIB, is tied by comparingIf sum, which occurs, for fruit first is greater than the second generation sum, whether comprehensive WLAN network management data is determined, if not comprehensively, with AC daysThe KPI data of will is converted into network element KPI, is calibrated；If first occurs sum, and sum occurs no more than second, determineWLAN network management data is comprehensively, then to trust WLAN network management data.
Specific embodiments of the present invention are exemplified below.
According to network topology, by preset time period, (degree of incidence is successfully associated the crucial processing data of each APNumber, address assignment request number, address assignment request success rate number, certification request number, certification number of success) it poolsTo the crucial processing data of AC, the network element experience record that network element experience record returns to AC log is formed, preset time period is calculatedIt is upper, on AP be associated to power, address is distributed into the KPI such as power index and the business such as flow, association user number, online user numberIndex.
The present invention preferable assumes that key operations as association and certification, counts association class log and and certification class log in ACKPI index.
By in convergence preset time period, the association class log of a certain AP, it is each each link number of success of ∑, ∑ to be passed throughLink number of attempt obtains association/address and is allocated successfully number, association/address distribution number of attempt, and according to " association failsReason is that can not add new user ", it screens and converges out " association times of congestion "；
Then, according to association class, whether certification class log has goes association or offline log accordingly, come obtain this it is default whenBetween association user number in section, online user number；
Then, according to offline class log, by ∑ (flow in offline log), the AP stream in the preset time period is obtainedAmount；It is interior, the AP can also to be obtained by ∑ (no log duration) for the preset time period according to all log time of origin pointsWithout log total duration and distribution situation；
By converging the operational indicator of all AP under certain preset time period, AC, the total correlation number of users, total online of AC is obtainedNumber of users, flow；
Then, the molecule and denominator for converging the KPI index of all AP under certain preset time period, AC, according to (total success timeNumber/total to attempt time)=association/address be distributed into power, (total correlation times of congestion/total correlation attempt time)=association congestion ratio；
When can preferably be association by key operations, being associated in preset period of time in the log that will acquireFirst generation total degree and the comparison for obtaining the second generation total degree for being associated in preset period of time recorded in the library MIB,
Wherein, φ is the state factor of some key operations.If φ > 0, WLAN just is substituted with the KPI data of AC logNetwork management data；If φ < 0, it is more comprehensive to represent WLAN network management data, just trusts WLAN network management data.
According to " China Mobile's WLAN (WLAN) log interface specification ", the Request Log format of terminal association CMCCAre as follows: 6 STA_ASSOC_START [STA mac=" of 2003-10-11T22:14:15.233Z TEST-SYSTEM WLAN5566-7788-eeff "] [AP unique address identifies mac=" 00:11:2a:3b:5e:6f " radio=" 1 "] [WLAN bssid=" 1122-3344-5566 " ssid=" CMCC " security=" 0 "] Station start association.
The journal format being successfully associated are as follows: 2003-10-11T22:14:15.233Z TEST-SYSTEM WLAN6STA_ASSOC_SUCCESS [STA mac=" 5566-7788-eeff "] [AP mac=" 00:11:2a:3b:5e:6f " radio="2 "] [WLAN bssid=" 1122-3344=5566 " ssid=" CMCC " security=" 0 "] Stationassociation success；
And it is associated with the journal format of failure are as follows: 2003-10-11T22:14:15.233Z TEST-SYSTEM WLAN4STA_ASSOC_FAIL [STA mac=" 5566-7788-eeff "] [AP mac=" 00:11:2a:3b:5e:6f " radio=" 1 "][WLAN bssid=" 1122-3344=5566 " ssid=" CMCC " security=" 0 "] [REASON code=" 1 "]Station association failed；
According to specification, it can pass through the mac and keyword of AP, by AC log " being associated with, address distribution, recognizing by each APIt is card, offline " key operations of information classify.
As shown in figure 3, the embodiment of the present invention also provides a kind of decision maker of the network element working condition of WLAN, instituteStating WLAN includes multiple network elements, each network element in normal operating conditions, in one predetermined key operations of every execution,A log will be generated, and updates the corresponding key operations of the log in the library management information MIB and total degree occurs, wherein instituteThe decision maker stated includes:
First obtains module 31, for obtaining the log of network element generation；
Second acquisition module 32 obtains each key operations in institute for analyzing the log obtained in preset period of timeTotal degree occurs for state preset period of time first；
Third obtains module 33, for obtaining each key operations recorded in the library MIB in the preset time weekTotal degree occurs for the second of phase；
First processing module 34, for first generation according to each key operations in the preset period of timeTotal degree and it is described second occur total degree between difference, judge the network element whether operation irregularity.
After the first acquisition module 31 gets the log of network element generation, module 32 is obtained in preset time week by secondThe first of each key operations of log are obtained in phase, and total degree, and the MIB with the acquisition for obtaining module 33 by third occursTotal degree comparing difference occurs for the second of each key operations recorded in library, and then first processing module 34 may determine that network elementWhether operation irregularity.A large amount of manpower is not needed in this way and goes acquisition data, is improved work efficiency, is reduced costs simultaneously, it canWith large-scale, the automatic working condition for determining network element, realization is permanently effective, and verifies network element state in real time, not only improvesThe reliability of network element, and be conducive to the optimization of network element.
In the decision maker of further embodiment of this invention, the network element is access controller AC or access points AP.
In the decision maker of further embodiment of this invention, when the network element is the AC, described second obtains module 32Include:
First acquisition submodule, the institute generated for analyzing each key operations got in the preset period of timeThere is log, determines the corresponding key operations of each log；
Second acquisition submodule obtains corresponding to the log quantity of same key operations for counting, as the key operationsFirst in the preset period of time occurs total degree.
In the decision maker of further embodiment of this invention, the first processing module 34 includes:
First processing submodule, for first generation according to each key operations in the preset period of timeDifference between total degree and the second generation total degree obtains the first generation total degree of each key operations respectivelyThe ratio that total degree occurs with described second, the result after subtracting 1 for the ratio take absolute value, and obtain the exception of the key operationsValue；
Second processing submodule, for selecting largest outliers from the exceptional value of each key operations of acquisition, andJudge whether the largest outliers are greater than preset threshold；
Judging submodule then judges the network element operation irregularity for being greater than the preset threshold in the largest outliers；Or
It is not more than the preset threshold in the largest outliers, then judges that the network element is working properly.
It is the AC in the network element, and when the AC exception in the decision maker of further embodiment of this invention, it is describedDecision maker further include:
First module, for from the log that AC is generated, obtaining each of the AP under the AC within a preset timeThe critical data of crucial processing movement, wherein the critical packet include key operations number of success and total time of key operationsNumber；
Second module, for according to key operations the number of success and the total degree, obtain the log of the ACEach key operations Key Performance Indicator KPI index；
Third module, the KPI for obtaining each key operations recorded in the library MIB in the preset time refer toMark；
Comparison module, for comparing each key operations in the log got, in the preset period of timeThe each key operations recorded in the first generation total degree and the acquisition library MIB, in the institute of the preset period of timeState the second generation total degree；
Second processing module is greater than the second generation sum for sum to occur described first, then uses the ACThe KPI index of each key operations of log replaces the KPI index of each key operations recorded in the library MIB；OrDescribed first, which occurs sum, occurs sum no more than described second, then using each key operations recorded in the library MIBKPI index.
Since the format of general log category information is substantially stationary, foreign enterprises using when some dedicated certain classes can be made assistThe instrument of view, side hang over certain network element sides, can obtain data automatically, then carry out Data correction with network management.
The above is a preferred embodiment of the present invention, it is noted that for those skilled in the artFor, without departing from the principles of the present invention, it can also make several improvements and retouch, these improvements and modificationsIt should be regarded as protection scope of the present invention.