CN113747470B - Interface traffic analysis method, routing device and storage medium - Google Patents

Abstract

The present invention discloses an analysis method of interface traffic, a routing device and a computer-readable storage medium, the method comprising: when a data stack routing interface receives a data packet, determining the version information corresponding to the data packet; determining the tag information corresponding to the data packet according to the version information, wherein the tag information includes an IPV4 tag and an IPV6 tag; when the data packet is popped, the data packet associated with the IPV4 tag is popped from a first popping interface, and the data packet associated with the IPV6 tag is popped from a second popping interface; determining the analysis result of the interface traffic according to the data traffic corresponding to the data stack routing interface, the first popping interface and/or the second popping interface. The present invention aims to achieve the effect of reducing the cost of analyzing interface traffic.

Description

Interface traffic analysis method, routing device and storage medium

Technical Field

The present invention relates to the field of communication technology, and in particular to an interface traffic analysis method, a routing device and a computer-readable storage medium.

Background technique

With the rapid development of mobile Internet, in order to solve the limitation of address space and low security of IPV4 (Internet Protocol version 4) address at the network layer, IPV6 (Internet Protocol version 6) address has been widely used. As a result, the current business data is based on both IPV4 address and IPV6 address.

However, in some existing router devices (such as Juniper MX960), the router device interface cannot directly separate the service data corresponding to the IPV4 address and the IPV6 address, which makes it impossible for operators to perform traffic analysis based on data addresses. Therefore, in order to achieve the purpose of interface traffic analysis, network operators can only achieve it by replacing router devices with address separation functions. As a result, the cost of interface traffic analysis is high.

The above contents are only used to assist in understanding the technical solution of the present invention and do not constitute an admission that the above contents are prior art.

Summary of the invention

The main purpose of the present invention is to provide an interface traffic analysis method, a routing device and a computer-readable storage medium, aiming to achieve the effect of reducing the cost of interface traffic analysis.

To achieve the above object, the present invention provides an interface traffic analysis method, which is applied to a routing device and comprises the following steps:

When the data stack routing interface receives a data packet, determining version information corresponding to the data packet;

Determine the tag information corresponding to the data packet according to the version information, wherein the tag information includes an IPV4 tag and an IPV6 tag;

Controlling the data packet to be popped out of the stack, when the data packet is popped out of the stack, the data packet associated with the IPV4 mark is popped out of the stack from a first popping interface, and the data packet associated with the IPV6 mark is popped out of the stack from a second popping interface;

An analysis result of the interface traffic is determined according to the data traffic corresponding to the data push routing interface, the first out-of-stack interface and/or the second out-of-stack interface.

Optionally, the analysis result of the interface traffic includes an IPV4 traffic proportion and/or an IPV6 traffic proportion, and before the step of determining the analysis result of the interface traffic according to the data push routing interface, the first out-of-stack interface and/or the second out-of-stack interface corresponding to the data traffic, further includes:

Upon receiving a traffic analysis instruction, determining a target time period corresponding to the traffic analysis instruction;

Acquire a first data flow corresponding to the data stack routing interface within a target time period;

Acquire the second data flow corresponding to the first outgoing interface and/or the third data flow corresponding to the second outgoing interface within a target time period;

The step of determining the analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first out-of-stack interface and/or the second out-of-stack interface comprises:

Determine the IPv4 traffic proportion according to the first data traffic and the second data traffic; and/or

The IPV6 traffic proportion is determined according to the first data traffic and the third data traffic.

Optionally, before the step of determining the analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first out-of-stack interface and/or the second out-of-stack interface, the step further includes:

According to the preset port filtering method, the data flow corresponding to different types of data packets within the preset time period is counted, wherein different ports correspond to different types of data packets;

The step of determining the analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first out-of-stack interface and/or the second out-of-stack interface comprises:

An analysis result of the interface traffic is determined according to the statistical result and the data traffic corresponding to the first outbound interface and/or the second outbound interface.

Optionally, the statistical result includes a first text transmission data flow corresponding to the first out-of-stack interface and/or a first hypertext transfer protocol service flow corresponding to the first out-of-stack interface, and the step of determining an analysis result of the interface flow according to the statistical result, the data flow corresponding to the first out-of-stack interface and/or the second out-of-stack interface includes:

The IPV4 Hypertext Transfer Protocol service ratio is determined based on the first Hypertext Transfer Protocol service traffic and the data traffic corresponding to the first outbound interface, and/or the IPV4 text transmission service ratio is determined based on the first text transmission data traffic and the data traffic corresponding to the first outbound interface, wherein the analysis results of the interface traffic include the IPV4 Hypertext Transfer Protocol service ratio, the IPV4 text transmission service ratio, the IPV6 text transmission service ratio and/or the IPV6 Hypertext Transfer Protocol service ratio.

Optionally, the statistical result includes a second text transmission data flow corresponding to the second out-of-stack interface, and/or a second hypertext transfer protocol service flow corresponding to the second out-of-stack interface, and the step of determining an analysis result of the interface flow according to the statistical result, the data flow corresponding to the first out-of-stack interface and/or the second out-of-stack interface includes:

The IPV6 Hypertext Transfer Protocol service ratio is determined based on the second Hypertext Transfer Protocol service traffic and the data traffic corresponding to the second outbound interface, and/or the IPV6 text transmission service ratio is determined based on the second text transmission data traffic and the data traffic corresponding to the second outbound interface.

Optionally, the IPV6 text transmission service ratio is the ratio of the second text transmission traffic to the data traffic corresponding to the second outbound interface; the IPV6 hypertext transfer protocol service ratio is the ratio between the second hypertext transfer protocol service data traffic and the data traffic corresponding to the second outbound interface.

Optionally, the step of determining the tag information corresponding to the data packet according to the version information includes:

If the version information satisfies the first regular expression, the tag information corresponding to the data packet is the IPV4 tag; otherwise, the tag information corresponding to the data packet is the IPV6 tag; or

If the version information satisfies the second regular expression, the tag information corresponding to the data packet is the IPV6 tag; otherwise, the tag information corresponding to the data packet is the IPV4 tag.

In addition, to achieve the above-mentioned purpose, the present invention also provides a routing device, which includes a memory, a processor, and an interface traffic analysis program stored in the memory and executable on the processor, wherein the interface traffic analysis program implements the steps of the interface traffic analysis method as described above when executed by the processor.

In addition, to achieve the above object, the present invention further provides a routing device, the routing device comprising:

A stacking module, used for determining the version information corresponding to the data when the data stacking routing interface receives the data packet;

A marking module, used to determine the marking information corresponding to the data packet according to the version information, wherein the marking information includes an IPV4 mark and an IPV6 mark;

A stacking module, used for controlling the data packet to be stacked, when the data packet is stacked, the data packet associated with the IPV4 mark is stacked from a first stacking interface, and the data packet associated with the IPV6 mark is stacked from a second stacking interface;

The analysis module is used to determine the analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first out-of-stack interface and/or the second out-of-stack interface.

In addition, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, on which an interface traffic analysis program is stored, and when the interface traffic analysis program is executed by a processor, the steps of the interface traffic analysis method as described above are implemented.

The embodiment of the present invention proposes an interface traffic analysis method, routing device and computer-readable storage medium. When a data stack routing interface receives a data packet, the version information corresponding to the data packet is determined, and the tag information corresponding to the data packet is determined according to the version information, wherein the tag information includes an IPV4 tag and an IPV6 tag, and then the data packet is controlled to be popped out of the stack. When the data packet is popped out of the stack, the data packet associated with the IPV4 tag is popped out of the first popping interface, and the data packet associated with the IPV6 tag is popped out of the second popping interface. The analysis result of the interface traffic is determined according to the data traffic corresponding to the data stack routing interface, the first popping interface and/or the second popping interface. Since the analysis of the interface traffic can be realized without replacing the routing device, the cost of analyzing the interface traffic is saved.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a schematic diagram of a terminal structure of a hardware operating environment involved in an embodiment of the present invention;

FIG2 is a schematic diagram of a flow chart of an embodiment of an analysis method for interface traffic of the present invention;

3 is a schematic diagram of an interface arrangement of a routing device involved in an embodiment of the present invention;

FIG. 4 is a schematic diagram of a modularization of a routing device according to an embodiment of the present invention.

The realization of the purpose, functional features and advantages of the present invention will be further explained in conjunction with embodiments and with reference to the accompanying drawings.

Detailed ways

It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

As shown in FIG. 1 , FIG. 1 is a schematic diagram of a terminal structure of a hardware operating environment involved in an embodiment of the present invention.

The terminal in the embodiment of the present invention may be a routing device.

As shown in Figure 1, the terminal may include: a processor 1001, such as a CPU, a network interface 1004, a user interface 1003, a memory 1005, and a communication bus 1002. Among them, the communication bus 1002 is used to realize the connection and communication between these components. The user interface 1003 may include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory or a stable memory (non-volatile memory), such as a disk memory. The memory 1005 may also be a storage device independent of the aforementioned processor 1001.

Those skilled in the art will appreciate that the terminal structure shown in FIG. 1 does not limit the terminal and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

As shown in FIG. 1 , the memory 1005 as a computer storage medium may include an operating system, a network communication module, a user interface module, and an analysis program for interface traffic.

In the terminal shown in FIG. 1 , the processor 1001 may be used to call an interface traffic analysis program stored in the memory 1005 and perform the following operations:

When the data stack routing interface receives a data packet, determining version information corresponding to the data packet;

Determine the tag information corresponding to the data packet according to the version information, wherein the tag information includes an IPV4 tag and an IPV6 tag;

Controlling the data packet to be popped out of the stack, when the data packet is popped out of the stack, the data packet associated with the IPV4 mark is popped out of the stack from a first popping interface, and the data packet associated with the IPV6 mark is popped out of the stack from a second popping interface;

An analysis result of the interface traffic is determined according to the data traffic corresponding to the data push routing interface, the first out-of-stack interface and/or the second out-of-stack interface.

In order to solve the problems of IPv4 address, such as limited address space, low security at the network layer, NAT (Network Address Translation) destroying the end-to-end mode of the Internet, and the overly complex IPv4 packet header, IPv6 address has been widely used. As a result, the current business data is based on both IPv4 and IPv6 addresses.

However, in some existing router devices (such as Juniper MX960), since the router device interface cannot directly separate the service data corresponding to the IPV4 address and the IPV6 address, the operator cannot perform traffic analysis based on the data address. Therefore, in order to achieve the purpose of interface traffic analysis, network operators can only achieve it by replacing router devices with address separation functions. As a result, the cost of interface traffic analysis is relatively high. In order to achieve interface traffic analysis without replacing the equipment and reduce the cost of interface traffic analysis, an embodiment of the present invention proposes an interface traffic analysis method. The following is an explanation of the interface traffic analysis method proposed in the embodiment of the present invention through specific examples.

2, in one embodiment of the interface traffic analysis method of the present invention, the interface traffic analysis method comprises the following steps:

Step S10: when the data stack routing interface receives a data packet, determining the version information corresponding to the data packet;

Step S20, determining the tag information corresponding to the data packet according to the version information, wherein the tag information includes an IPV4 tag and an IPV6 tag;

Step S30: When the data packet is popped out of the stack, the data packet associated with the IPV4 mark is popped out of the first popping interface, and the data packet associated with the IPV6 mark is popped out of the second popping interface;

Step S40: Determine an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first outgoing interface and/or the second outgoing interface.

In this embodiment, the routing device may include at least three physical interfaces. Referring to FIG3 , taking the Juniper MX960 router as an example, the physical interface A of the router may be configured as a data inbound routing interface. Interface B may be configured as a first outbound interface, and interface C may be configured as a second outbound interface.

Further, when the data stack routing interface receives a data packet, the version information corresponding to the data packet can be determined by the stack data message detection mechanism. It is understandable that a data packet based on an IPV4 address will have V4 version information, and a data packet based on an IPV6 address will have V6 version information. Therefore, when the data packet can be determined based on the version information, it is a data packet based on an IPV4 address or a data packet based on an IPV6 address. Wherein, the version information can be stored in the message header.

For example, a regular expression can be set in advance so that if the version information satisfies the first regular expression, the tag information corresponding to the data packet is the IPV4 tag, otherwise the tag information corresponding to the data packet is the IPV6 tag; or if the version information satisfies the second regular expression, the tag information corresponding to the data packet is the IPV6 tag, otherwise the tag information corresponding to the data packet is the IPV4 tag.

For example, since the version numbers corresponding to the IPC4 message and the IPV6 message are different, the regular expression can be set based on the version number corresponding to the IPV4 or IPV6 message to achieve data separation. Or since the IPV6 message does not include the header length field, the regular expression can be set based on whether the header length field exists to achieve data separation.

After determining the version information of the data packet, we can mark it according to its version information. That is, determine the tag information corresponding to the data packet according to the version information. It is understandable that when the data packet is a data packet based on an IPV4 address, an IPV4 tag is added to it; similarly, when the data packet is a data packet based on an IPV6 address, an IPV6 tag is added to it.

Furthermore, the marked data packets can be forwarded to other interfaces of the router. Among them, the data packets with the IPV4 mark are forwarded to the first out-of-stack interface, and the data packets with the IPV6 mark are forwarded to the second data interface. When the data packets are out of the stack, the data packets associated with the IPV4 mark are out of the first out-of-stack interface, and the data packets associated with the IPV6 mark are out of the second out-of-stack interface.

Further, when a flow analysis instruction is received, a target time period corresponding to the flow analysis instruction can be determined. Then, a first data flow corresponding to the data stack routing interface in the target time period is obtained. The first data flow represents the total amount of data passing through the data stack routing interface in the target time period.

Furthermore, the content to be analyzed can also be determined according to the traffic analysis instruction. When the content to be analyzed is the proportion of IPV4 traffic, the second data traffic corresponding to the first outbound interface in the target time period can also be obtained. Then the direct ratio of the second data traffic to the first data traffic is used as the proportion of IPV4 traffic.

Optionally, when the content to be analyzed is the proportion of IPV6 traffic, the third data traffic corresponding to the second outgoing interface in the target time period can also be obtained, and the direct ratio of the third data traffic to the first data traffic is used as the proportion of IPV6 traffic.

Optionally, when the content to be analyzed is the proportion of IPV6 traffic and the proportion of IPV4 traffic, the second data traffic and the third data traffic corresponding to the first outgoing interface and the second outgoing interface in the target time period can also be obtained. Then, the direct ratio of the second data traffic to the first data traffic is used as the proportion of IPV4 traffic, and the direct ratio of the third data traffic to the first data traffic is used as the proportion of IPV6 traffic.

Optionally, when the data corresponding to the data stack routing interface includes data packets based on two address modes, IPV4 and IPV6, after obtaining the first data flow, it is only necessary to obtain at least one of the second data flow and the third data flow to determine the proportion of IPV6 flow and the proportion of IPV4 flow. For example, after obtaining the second data flow, the proportion of IPV4 flow can be determined based on the second data flow and the first data flow. Further, the proportion of IPV6 flow can be determined according to the following formula:

P6＝1-P4

Among them, P6 is the proportion of IPV6 traffic, and P4 is the proportion of IPV4 traffic.

Optionally, as an optional implementation scheme, the analysis result of the above-mentioned interface traffic may also include the proportion of IPv4 Hypertext Transfer Protocol services and/or the proportion of IPv6 Hypertext Transfer Protocol services.

Exemplarily, the first text transmission data traffic corresponding to the first outbound interface within a preset time period and/or the first hypertext transfer protocol service traffic corresponding to the first outbound interface can be obtained first, and then the IPV4 hypertext transfer protocol service proportion can be determined based on the first hypertext transfer protocol service traffic and/or the IPV4 text transmission service proportion can be determined based on the first text transmission data traffic.

Optionally, the second text transmission data traffic corresponding to the second outbound interface within a preset time period, and/or the second hypertext transfer protocol service traffic corresponding to the second outbound interface can also be obtained, and then the IPV6 hypertext transfer protocol service proportion can be determined based on the second hypertext transfer protocol service traffic, and/or the IPV6 text transmission service proportion can be determined based on the second text transmission data traffic.

For example, taking the implementation in the Juniper MX960 router as an example, the first out-of-stack interface can be provided with a screening module. The first out-of-stack interface can be determined by the screening module, within a preset time (the value of the preset time can be customized, for example, set to 1s to 10s, optionally, the preset time is set to 1s) The data packets passing through itself contain the number of data packets of port 20 and port 21, that is, the first text transfer (File Transfer Protocol, FTP) data flow. And/or filter out the data packets corresponding to the first out-of-stack interface within the preset time, including the amount of data on port 80 and port 8080, that is, the first hypertext transfer protocol service flow. Then obtain the total data flow (that is, the second data flow) corresponding to the first out-of-stack interface. Then the ratio of the first hypertext transfer protocol service flow to the second data flow is used as the proportion of the IPV4 hypertext transfer protocol service, and the ratio of the first text data flow to the second data flow is used as the proportion of the IPV4 text transfer service.

The second out-of-stack interface may be provided with a screening module. The second out-of-stack interface may be determined through the screening module, that is, the number of data packets containing port 20 and port 21 in the data packets passing through itself within a preset time length (the value of the preset time length can be customized, for example, set to 1s to 10s, and optionally, the preset time length is set to 1s), that is, the second text transmission data flow. And/or filter out the amount of data containing port 80 and port 8080 in the data packets corresponding to the second out-of-stack interface passing through the preset time length, that is, the second hypertext transfer protocol service flow. Then obtain the total data flow corresponding to the second out-of-stack interface (that is, the third data flow). Then use the ratio of the second hypertext transfer protocol service flow to the third data flow as the IPV6 hypertext transfer protocol service proportion, and use the ratio of the second text data flow to the third data flow as the IPV6 text transmission service proportion.

It is understandable that in some variant implementations, the data analysis function can be set in a device independent of the routing device. The routing device only performs the data forwarding task, so that the flow data of each interface of the routing device is read by the device with data analysis function to analyze the interface flow. This is also within the protection scope of the present invention.

Optionally, after the routing device determines the analysis result of the interface traffic, it may also output the analysis result of the interface traffic through a preset user interface.

In the technical solution disclosed in this embodiment, when the data push routing interface receives a data packet, the version information corresponding to the data packet is determined, and the tag information corresponding to the data packet is determined based on the version information, wherein the tag information includes an IPV4 tag and an IPV6 tag, and when the data packet is popped out of the stack, the data packet associated with the IPV4 tag is popped out of the first popping interface, and the data packet associated with the IPV6 tag is popped out of the second popping interface, and the analysis result of the interface traffic is determined based on the data traffic corresponding to the data push routing interface, the first popping interface and/or the second popping interface. Since the analysis of the interface traffic can be achieved without replacing the routing equipment, the effect of saving the cost of the interface traffic analysis is achieved.

In addition, an embodiment of the present invention also proposes a routing device, which includes a memory, a processor, and an interface traffic analysis program stored in the memory and executable on the processor, wherein the interface traffic analysis program, when executed by the processor, implements the steps of the interface traffic analysis method described in the above embodiments.

In addition, referring to FIG. 4 , an embodiment of the present invention further provides a routing device 100, wherein the routing device 100 includes:

The stacking module 101 is used to determine the version information corresponding to the data when the data packet is received by the data stacking routing interface;

A marking module 102, configured to determine the marking information corresponding to the data packet according to the version information, wherein the marking information includes an IPV4 mark and an IPV6 mark;

The stacking module 103 is used to control the data packet to be stacked. When the data packet is stacked, the data packet associated with the IPV4 mark is stacked from the first stacking interface, and the data packet associated with the IPV6 mark is stacked from the second stacking interface;

The analysis module 104 is used to determine an analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first out-of-stack interface and/or the second out-of-stack interface.

In addition, an embodiment of the present invention also proposes a computer-readable storage medium, on which an interface traffic analysis program is stored. When the interface traffic analysis program is executed by a processor, the steps of the interface traffic analysis method described in the above embodiments are implemented.

It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or system including the element.

The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention is essentially or the part that contributes to the prior art can be embodied in the form of a software product, which is stored in a storage medium (such as ROM/RAM, magnetic disk, optical disk) as described above, and includes a number of instructions for a routing device to execute the methods described in each embodiment of the present invention.

The above are only preferred embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.

Claims (9)

1. The method for analyzing the interface traffic is characterized by being applied to routing equipment, wherein the routing equipment comprises at least three physical interfaces, the physical interfaces are respectively configured as a data push routing interface, a first pop interface and a second pop interface, and the method for analyzing the interface traffic comprises the following steps:

When a data push routing interface receives a data packet, determining version information corresponding to the data packet;

determining mark information corresponding to the data packet according to the version information, wherein the mark information comprises an IPV4 mark and an IPV6 mark;

Controlling the data packet to be popped, and when the data packet is popped, popping the data packet associated with the IPV4 mark from a first popping interface, and popping the data packet associated with the IPV6 mark from a second popping interface;

Determining an analysis result of interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface;

the step of determining the marking information corresponding to the data packet according to the version information comprises the following steps:

The version information meets a first regular expression, the marking information corresponding to the data packet is the IPV4 marking, otherwise, the marking information corresponding to the data packet is the IPV6 marking; or alternatively

And if the version information meets a second regular expression, the marking information corresponding to the data packet is the IPV6 marking, otherwise, the marking information corresponding to the data packet is the IPV4 marking.

2. The method for analyzing the interface traffic according to claim 1, wherein the analysis result of the interface traffic includes an IPV4 traffic ratio and/or an IPV6 traffic ratio, and before the step of determining the analysis result of the interface traffic according to the data traffic corresponding to the data push routing interface, the first pop interface, and/or the second pop interface, the method further includes:

when a flow analysis instruction is received, determining a target period corresponding to the flow analysis instruction;

acquiring a first data flow corresponding to the data push routing interface in a target period;

Acquiring second data traffic corresponding to the first pop interface and/or third data traffic corresponding to the second pop interface in a target period;

the step of determining the analysis result of the interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface comprises the following steps:

determining the IPV4 flow ratio according to the first data flow and the second data flow; and/or

And determining the IPV6 flow ratio according to the first data flow and the third data flow.

3. The method for analyzing interface traffic according to claim 1, wherein before the step of determining an analysis result of interface traffic according to data traffic corresponding to the data push routing interface, the first pop interface, and/or the second pop interface, the method further comprises:

According to a preset port filtering and screening mode, counting data flows corresponding to data packets of different types within a preset time period, wherein the types of the data packets corresponding to different ports are different;

the step of determining the analysis result of the interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface comprises the following steps:

And determining an analysis result of the interface flow according to the statistical result and the data flow corresponding to the first pop interface and/or the second pop interface.

4. The method for analyzing the interface traffic according to claim 3, wherein the statistics result includes a first text transmission data traffic corresponding to a first pop interface and/or a first hypertext transmission protocol service traffic corresponding to the first pop interface, and the step of determining the analysis result of the interface traffic according to the statistics result, the data traffic corresponding to the first pop interface and/or the second pop interface includes:

And determining the IPV4 hypertext transfer protocol service duty ratio according to the first hypertext transfer protocol service flow and the data flow corresponding to the first pop interface, and/or determining the IPV4 text transfer service duty ratio according to the first text transfer data flow and the data flow corresponding to the first pop interface, wherein the analysis result of the interface flow comprises the IPV4 hypertext transfer protocol service duty ratio, the IPV4 text transfer service duty ratio, the IPV6 text transfer service duty ratio and/or the IPV6 hypertext transfer protocol service duty ratio.

5. The method for analyzing the interface traffic according to claim 3, wherein the statistics result includes a second text transmission data traffic corresponding to the second pop interface and/or a second hypertext transmission protocol service traffic corresponding to the second pop interface, and the step of determining the analysis result of the interface traffic according to the statistics result, the data traffic corresponding to the first pop interface and/or the second pop interface includes:

And determining the IPV6 hypertext transfer protocol service duty ratio according to the second hypertext transfer protocol service flow and the data flow corresponding to the second pop interface, and/or determining the IPV6 text transfer service duty ratio according to the second text transfer data flow and the data flow corresponding to the second pop interface.

6. The method for analyzing interface traffic according to claim 5, wherein the IPV6 text transfer service duty cycle is a ratio of the second text transfer traffic to the data traffic corresponding to the second pop interface; the IPV6 hypertext transfer protocol service duty ratio is the ratio between the second hypertext transfer protocol service data flow and the data flow corresponding to the second pop interface.

7. A routing device, the routing device comprising: memory, a processor and an analysis program for interface traffic stored on the memory and executable on the processor, which when executed by the processor, implements the steps of the method for analyzing interface traffic according to any one of claims 1 to 6.

8. The routing device is characterized by comprising at least three physical interfaces, wherein the physical interfaces are respectively configured as a data push routing interface, a first pop interface, a second pop interface and a third pop interface, and

The push module is used for determining version information corresponding to the data when the data push route interface receives the data packet;

the marking module is used for determining marking information corresponding to the data packet according to the version information, wherein the marking information comprises an IPV4 mark and an IPV6 mark;

The pop module is used for controlling the data packet to be popped, when the data packet is popped, the data packet associated with the IPV4 mark is popped from a first pop interface, and the data packet associated with the IPV6 mark is popped from a second pop interface;

The analysis module is used for determining an analysis result of interface flow according to the data flow corresponding to the data push routing interface, the first push interface and/or the second push interface;

The marking module is further configured to, if the version information satisfies a first regular expression, mark the IPV4 as the marking information corresponding to the data packet, and if not, mark the IPV6 as the marking information corresponding to the data packet; or the version information satisfies a second regular expression, the marking information corresponding to the data packet is the IPV6 mark, otherwise, the marking information corresponding to the data packet is the IPV4 mark.

9. A computer-readable storage medium, wherein an analysis program of interface traffic is stored on the computer-readable storage medium, which when executed by a processor, implements the steps of the interface traffic analysis method according to any one of claims 1 to 6.