JP2523143B2 - Line log data flow image output processing method - Google Patents

Description

Detailed Description of the Invention [Outline] The line log is analyzed for each layer of the protocol, and the analysis result is displayed in a data flow image format.
Regarding the data flow image output processing method of the line log that is output, it is possible to easily and clearly grasp the transmission and reception data for each protocol, and when a line failure occurs,
For the purpose of providing a means that enables early separation of protocol levels, the line logs collected by the line logging function are analyzed for each protocol, and the analysis result of the protocol in each layer is expressed as character information, and the hierarchical structure of the above protocol The protocol-specific analysis display processing means that edits and outputs the character information at the output positions divided according to, and the arrow of the direction determined according to the input side and the output side in correspondence with the character information of the above analysis result. And a data direction display processing means for editing and outputting a character or an image.

[Industrial applications]

The present invention relates to a data flow image output processing method for a line log, which analyzes a line log for each layer of a protocol and displays / outputs the analysis result in a data flow image format.

[Conventional technology]

FIG. 6 shows an example of a line log output result by the conventional method.

In a network system, line logging is performed to collect history information of transmission data / reception data in order to investigate what kind of data has flowed on the line. In displaying the line log information collected by this line logging machine, the data on the line is often expressed in hexadecimal numbers and characters and output in the so-called dump format. Conventionally, for example, as shown in FIG. 、 The line log was displayed on the display or printed out on the printer.

The output in such a format is, for example, because the line log output processing has been designed so far with emphasis on the developer, and line logs are not collected for each protocol but are collected regardless of the protocol. This is because it is being collected.

[Problems to be solved by the invention]

In the conventional display as shown in FIG. 6, all the information transmitted and received on the line is output, and sufficient data is output in terms of content. However, if an error occurs on the line, it is effective for developer level failure investigation,
There was a problem that it was very difficult to understand in the trouble investigation at the maintenance person level, which is not familiar with the protocol for each layer.

Therefore, even if an abnormal operation occurs due to a simple operation mistake such as an operator, it is necessary to call the developer and report the failure by telephone, and it is necessary to deal with it, which is a waste of labor and time. There was a problem.

The present invention solves the above-mentioned problems, makes it possible to easily and clearly grasp the data of transmission and reception for each protocol, and provides means for enabling early isolation of the protocol level when a failure occurs on the line. The purpose is to do.

[Means for solving problems]

 FIG. 1 is an explanatory view of the principle of the present invention.

In FIG. 1, reference numeral 10 is a processing unit including a CPU and memory, 11-1 to 11-3 are protocol control units for respective layers, 14 is an application for processing online work, and 15 is a line for collecting line logs. Logging processing unit, 16 is a line log output processing unit for displaying and outputting a line log, 17 is an analysis display processing unit for each protocol, 18 is a data direction display processing unit, 19 is a logging file in which the line log is stored, and 20 is a display , 21 is a printer, and 22 is a line log output result.

The present invention is intended for a system that performs hierarchical protocol control. For example, as shown in FIG. 1 (a), the data on the line has a lower level first protocol control unit 11
-1, the second protocol control unit 11-2, and the higher level third protocol control unit 11-3 are transmitted to the application 14 via a plurality of protocol control units. The line logging processing unit 15 includes P1 and P2 shown in the figure.
Extract the data at the location of
Export to.

The line log output processing unit 16 outputs the data written in the logging file 19 to the display 20 or the printer 21 in a data flow format as shown in FIG.

The analysis-by-protocol display processing means 17 analyzes the line log in the logging file 19 by protocol and displays the analysis result by character information C1 to C5 for each layer.
This is a processing unit that edits and outputs the character information at the divided positions corresponding to the hierarchical structure of the protocol.

The data direction display processing means 18 corresponds to the character information of the analysis result and has arrows A1 to A1 whose directions are determined according to the input side and the output side.
This is a processing unit that edits and outputs the A5 character or image as the line log output result 22.

[Action]

In the line log output result 22 by the line log output processing unit 16, for example, as shown in FIG. 1B, the first protocol level, the second protocol level, ... Corresponding to the hierarchical structure of the protocol, The output position is divided vertically.

The analysis-by-protocol display processing means 17 displays the character information C1 to C3 of the analysis result at the first protocol level in the output field of the first protocol level and the character information of the analysis result at the second protocol level according to the passage of time.
For C4, in the output field of the second protocol level, ...
In this way, edit output is performed sequentially. Further, the data direction display processing means 18 uses the character information C1 to C5 of these analysis results.
Corresponding to, the direction of data flow is indicated by the characters or images of arrows A1 to A5.

Therefore, looking at this line log output result 22, the transmission data / reception data can be discerned at a glance, especially by the direction of the arrow, and the protocol of each layer is intuitively easy even for those who are not familiar with the protocol. Since it is possible to understand, and the minimum necessary information is collectively output,
The number of output pages can be reduced.

〔Example〕

2 is an example of an application system of the present invention, FIG. 3 is an example of a data format on a line, FIG. 4 is an example of a line log output result according to the present invention, and FIG. 5 is a process flow of one embodiment of the present invention. Show.

The present invention is applied to a system supporting a network as shown in FIG. 2, for example. In FIG. 2, reference numerals 10 and 16 correspond to those in FIG. 1, 30 is a line control program (LCP), and 31 is a packet switching program (PS).
P), 32 is a communication control program (CCP), 33 is an NSS for the network support subsystem (NSS) corresponding to the line logging processing unit 15 shown in FIG.
A logging processing unit, 34 is a supervisor that provides system monitoring and control functions, and 35 is a line adapter.

The LCP30 is a processing unit that performs control close to the line side,
Mainly controls the high-level data link control procedure (HDLC protocol). PSP31 exists only when using DDX packets, and controls the protocol related to packet switching. The CCP32 is a processing unit that controls a higher level near the application side, and mainly controls a level protocol (hereinafter, referred to as FNA protocol) corresponding to the type of network.

The NSS logging processing unit 33 collects log information at points P1 and P2 shown in FIG. That is, the data on the line collects information at the end of the line. The format of the data on this line is, for example, as shown in FIG.

FIG. 3A shows the outermost HDLC protocol format. The firmware processes the flag F and the frame check sequence FCS, and the software handles the address (A) field, control (C) field, and information field shown in FIG.

Since the information collected by the NSS logging processing unit 33 in this embodiment is the delivery information between the firmware and the software, the information in the portion shown in FIG. 3B is the log information. That is, the beginning of the log information is always the A field of the HDLC protocol.

When packet switching is performed, the ILC of the HDLC protocol becomes the packet format as shown in FIG. If it is a DT packet, the DT packet data part becomes the target to be handled by the FNA protocol, as shown in FIG.
The NA data part becomes the application data part shown in FIG.

As can be seen from the format example of FIG. 3, protocol analysis for each layer can be performed sequentially from the outside.

In the present invention, for example, a line log as shown in FIG. 4 is displayed and output by such protocol analysis for each layer.

The display of (i) shown in FIG. 4 indicates that SABM / P is transmitted to the partner system in the HDLC protocol. And the following (ii) display is SABM P
It indicates that UA / F has been received as a response to.

The displays (i) and (ii) according to the present invention correspond to (a) and (b) shown in FIG. 6, respectively, in the output by the conventional method. For example, in the hexadecimal number “013F” in the first line of FIG. 6A, the A field of the HDLC protocol is “01”, and the next “3F” is the C field indicating SABM · P. As is clear from comparison between FIG. 4 and FIG. 6, the output is very easy to understand in the present invention.

In (iii) shown in Fig. 4, CR is used in the packet protocol.
It indicates that the packet is transmitted to the partner system by mounting it on an I frame in the HDLC protocol. Next (i
v) indicates that the CC packet was received as the response.

Further, (v) shown in FIG. 4 indicates that the ACTPU requesting activation of the physical unit (PU) in the FNA protocol is received in the DT packet of the packet protocol and the I frame of the HDLF protocol. ing.
In the conventional method, this information is displayed as shown in FIG. 6 (c). (Vi) shown in FIG. 4 indicates that “+ RESP” is being transmitted as a response to ACTPU.

In the present embodiment, when the line log output processing unit 16 shown in FIG. 1 is started, what kind of protocol hierarchical structure the data on the line follows, for example, (1) HDLC + FNA hierarchical structure? (2) Is it a hierarchical structure of HDLC + packet + FNA? Etc. can be specified by the startup parameter.
In addition, whether or not to display by layer (layer unit) can be specified by a start parameter.

FIG. 5 is a processing flow of an embodiment of the present invention. In particular, FIG. 5A shows an outline of the main processing for performing the editing as shown in FIG. Fig. 5 (b)-(e)
Is a subroutine called from this main process.

 Hereinafter, description will be given according to the steps shown in FIG.

Data on the line as shown in FIG. 3B is read from the logging file 19 shown in FIG.

The process shown in FIG. 5B is called to edit the HDLC protocol.

It is determined whether there is an I frame, and if there is no I frame, control is passed to the processing.

Whether or not a packet exists is determined by specifying the startup parameter. If the packet does not exist, control is passed to the process.

The process shown in FIG. 5C is called to edit the packet protocol.

Determine if it is a DT packet. If it is not a DT packet, control is transferred to the processing.

The process shown in FIG. 5D is called to edit the FNA protocol.

The processing shown in FIG. 5 (e) is called and the edited result up to this point is output.

It is judged whether the line data in the logging file 19 shown in Fig. 1 has ended, and if it has not ended,
The control is returned to the processing and the processing is repeated in the same manner. If the line data has ended, the processing ends.

FIG. 5B shows an editing process regarding the HDLC protocol. Hereinafter, description will be given according to the steps shown in FIG.

Parse the HDLC protocol. Here, the following processing is performed.

(A) Initialization of each flag, (b) Editing of HDLC protocol analysis result, (c) Set of arrows according to transmission / reception, (d) Update of pointer indicating editing position.

Next, it is determined whether the line data is an I frame. If it is not an I frame, control is passed to the processing.

If it is an I frame, the flag indicating that it is an I frame is turned ON.

Whether or not the HDLC protocol output is specified is determined by the startup parameter. If not, control is returned to the main processing unit.

If output is specified, the edited data up to this point is set in the PRINT buffer secured for output, and control is returned to the calling main processing unit.

FIG. 5C shows the editing process regarding the packet protocol. Hereinafter, description will be given according to the steps shown in FIG.

Parse the packet protocol. Here, the following processing is performed.

(A) Initialization of each flag, (b) Editing of packet protocol analysis result, (c) Set of arrows according to transmission / reception, (d) Update of pointer indicating editing position.

Next, it is determined whether the packet is a DT packet. If it is not a DT packet, control is transferred to the processing.

If it is a DT packet, the flag indicating that it is a DT packet is turned ON.

Whether or not the packet protocol output is specified is determined by the start parameter. If not, control is returned to the main processing unit.

If output is specified, the edited data so far is PRIN
Set it in the T buffer and return control to the main processing unit that called it.

FIG. 5D shows an editing process regarding the FNA protocol. Hereinafter, description will be given according to the steps shown in FIG.

Parse the FNA protocol. Here, the following processing is performed.

(A) Initialization of each flag, (b) Editing of FNA protocol analysis result, (c) Set of arrows according to transmission / reception.

Next, it is determined whether or not the output of the FNA protocol is specified by the start parameter. If not, control is returned to the main processing unit.

If output is specified, the edited data so far is PRIN
Set it in the T buffer and return control to the main processing unit that called it.

In the PRINT output process called by the process shown in FIG. 5 (a), the process shown in FIG. 5 (e) is performed.

Print the contents of the PRINT buffer. After that, the control is returned to the calling main processing unit.

Through the above processing, the line log output of the data flow image based on the analysis result for each protocol as shown in FIG. 4 is performed. Since it is possible that a detailed output result of the related art as shown in FIG. 6 is required, the output means of the related art method is left so that the output of the related art method can be selected as necessary. It is convenient to keep it.

〔The invention's effect〕

As described above, according to the present invention, transmission and reception data can be easily and clearly grasped for each protocol, and even when a failure occurs on a line, the developer is familiar with various protocols. Even if it is not a thing, it is possible to perform early isolation at the protocol level. Also, useful information can be obtained as a learning tool for line protocols.

[Brief description of drawings]

1 is an explanatory view of the principle of the present invention, FIG. 2 is an example of an application system of the present invention, FIG. 3 is an example of a format of data on a line, FIG. 4 is an example of a line log output result according to the present invention, and FIG. FIG. 6 shows a processing flow of one embodiment of the present invention, and FIG. 6 shows an example of a line log output result by the conventional method. In the figure, 10 is a processing device, 11-1 to 11-3 are protocol control units, 14 is an application, 15 is a line logging processing unit, 16
Is a line log output processing unit, 17 is a protocol-specific analysis display processing unit, 18 is a data direction display processing unit, 19 is a logging file, 20 is a display, 21 is a printer, and 22 is a line log output result.

Claims (1)

(57) [Claims] 1. A line log collected by the above line logging function in a system having a protocol control function for controlling network communication corresponding to a hierarchical structure of protocols and a line logging function for collecting data on the line. A protocol-specific analysis display processing means (17) that analyzes each protocol, represents the analysis result of the protocol in each layer with character information, and edits and outputs the character information at the output position divided corresponding to the hierarchical structure of the protocol. And a data direction display processing means (18) for editing and outputting a character or an image of an arrow whose direction is determined according to the input side and the output side in correspondence with the character information of the above analysis result. Line log data flow image output processing method.