CN116319679A - Network connection monitoring method and device - Google Patents
Network connection monitoring method and device Download PDFInfo
- Publication number
- CN116319679A CN116319679A CN202211684614.7A CN202211684614A CN116319679A CN 116319679 A CN116319679 A CN 116319679A CN 202211684614 A CN202211684614 A CN 202211684614A CN 116319679 A CN116319679 A CN 116319679A
- Authority
- CN
- China
- Prior art keywords
- network
- application program
- target
- target application
- address
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 63
- 238000012544 monitoring process Methods 0.000 title claims abstract description 32
- 230000006855 networking Effects 0.000 claims abstract description 27
- 230000005540 biological transmission Effects 0.000 claims description 31
- 230000006399 behavior Effects 0.000 claims description 22
- 230000008569 process Effects 0.000 claims description 21
- 238000012545 processing Methods 0.000 claims description 20
- 238000010586 diagram Methods 0.000 description 14
- 230000002085 persistent effect Effects 0.000 description 6
- 230000006870 function Effects 0.000 description 5
- 239000010410 layer Substances 0.000 description 5
- 238000004590 computer program Methods 0.000 description 4
- 230000003287 optical effect Effects 0.000 description 3
- 239000004575 stone Substances 0.000 description 3
- 238000012546 transfer Methods 0.000 description 3
- 238000005516 engineering process Methods 0.000 description 2
- 230000001960 triggered effect Effects 0.000 description 2
- 238000003491 array Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 239000002355 dual-layer Substances 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000003068 static effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/34—Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/14—Network analysis or design
- H04L41/142—Network analysis or design using statistical or mathematical methods
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Physics & Mathematics (AREA)
- Algebra (AREA)
- General Physics & Mathematics (AREA)
- Mathematical Analysis (AREA)
- Mathematical Optimization (AREA)
- Mathematical Physics (AREA)
- Probability & Statistics with Applications (AREA)
- Pure & Applied Mathematics (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The application relates to a network connection monitoring method and device, which are characterized in that networking information of a target application program access network in an application program (at least comprising a target network domain accessed by the target application program, wherein the target network domain comprises at least one IP address) is acquired; then obtaining geographic position information corresponding to the target network domain according to at least one IP address; and finally, displaying at least the identification and the geographic position information of the target application program. According to the method and the device, the geographic position information of the accessed network can be determined according to the networking information of the accessed network of the target application program, the identification of the target application program and the geographic position information can be displayed, and the network behavior of the installed application program in the states of daily use, running, screen locking and the like of the Windows operating system can be intuitively known.
Description
Technical Field
The present disclosure relates to the field of network data security technologies, and in particular, to a method and an apparatus for monitoring network connection.
Background
In the related art, as shown in fig. 1, for a network access mechanism under a Windows operating system platform, after an application program is installed, when a network needs to be connected, a target domain name or a server is connected through a network to which the system has been connected. Therefore, users of the Microsoft Windows operating system can use the application program network to access, complete daily work, study, find data, acquire information, complete office work and other operations.
As shown in fig. 1, when an application program is used under the Windows operating system, the access of the application program to the network is not recorded and is not controlled, wherein the access condition of the most important application program can only be controlled and monitored by using a third party software network firewall. If the network connection record, the statistics condition, the data flow checking and other problems of each application program in the Windows operating system are to be known, no relevant software is available at present.
Disclosure of Invention
In order to overcome the problems in the related art, the application provides a network connection monitoring method and device, which can intuitively know the network behavior of an installed application program in the states of daily use, running, screen locking and the like of a Windows operating system.
The first aspect of the present application provides a network connection monitoring method, configured to monitor a connection condition of any application installed in a Windows operating system to access a network, where the method includes:
acquiring networking information of a target application program access network in the application program, wherein the networking information at least comprises a target network domain accessed by the target application program, and the target network domain comprises at least one IP address;
obtaining geographic position information corresponding to the target network domain according to the at least one IP address;
at least the identification of the target application and the geographic location information are displayed.
Wherein the networking information further includes transmission data process information, displaying at least the identification of the target application program and the geographic location information, including:
and displaying the identification of the target application program, at least one IP address and the transmission data process information.
Further, the method further comprises:
and recording the network behavior of the target application program accessing the network, and storing and displaying the network behavior and the access time.
Further, the method further comprises:
and carrying out flow statistics on the flow data of the target application program access network according to the transmission data process information, and displaying the target application program and the flow statistics result.
Further, the method further comprises:
and carrying out regional flow statistics on geographic position information corresponding to the access network of the target application program, and displaying regional flow statistics results.
Wherein the transmitting data process information includes: the volume of the data packet in the uplink direction, the transmission rate, the transmission duration, the completion exit time and the volume of the data packet in the downlink direction.
Further, the method further comprises:
and respectively carrying out transmission rate statistics on the data packet in the uplink direction and the data packet in the downlink direction, and correspondingly displaying a transmission rate statistics result.
A second aspect of the present application provides a network connection monitoring apparatus for monitoring a connection condition of any application installed in a Windows operating system to access a network, the apparatus comprising:
the first processing unit is used for acquiring networking information of a target application program access network in the application program, wherein the networking information at least comprises a target network domain accessed by the target application program, and the target network domain comprises at least one IP address;
the second processing unit is used for obtaining geographic position information corresponding to the target network domain according to the at least one IP address;
and the third processing unit is used for displaying at least the identification of the target application program and the geographic position information.
A third aspect of the present application provides an electronic device, comprising:
a processor; and
and a memory having executable code stored thereon, which when executed by the processor, causes the processor to perform the network connection monitoring method as described above.
A fourth aspect of the present application provides a non-transitory machine-readable storage medium having stored thereon executable code, which when executed by a processor of an electronic device, causes the processor to perform a network connection monitoring method as described above.
The technical scheme that this application provided can include following beneficial effect: accessing networking information of a network by a target application program in the application program (at least comprising a target network domain accessed by the target application program, wherein the target network domain comprises at least one IP address); then obtaining geographic position information corresponding to the target network domain according to at least one IP address; and finally, displaying at least the identification and the geographic position information of the target application program. According to the method and the device, the geographic position information of the accessed network can be determined according to the networking information of the accessed network of the target application program, the identification of the target application program and the geographic position information can be displayed, and the network behavior of the installed application program in the states of daily use, running, screen locking and the like of the Windows operating system can be intuitively known.
It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the application.
Drawings
The foregoing and other objects, features and advantages of the application will be apparent from the following more particular descriptions of exemplary embodiments of the application as illustrated in the accompanying drawings wherein like reference numbers generally represent like parts throughout the exemplary embodiments of the application.
FIG. 1 is a state logic diagram of a Windows operating system according to the prior art;
FIG. 2 is a schematic diagram of Windows operating system status logic according to an embodiment of the present application;
fig. 3 is a flow chart of a network connection monitoring method according to an embodiment of the present application;
FIG. 4 is an interface display presentation diagram shown in an embodiment of the present application;
FIG. 5 is another interface display presentation shown in an embodiment of the present application;
FIG. 6 is a connection detail display presentation diagram shown in an embodiment of the present application;
FIG. 7 is another interface display presentation diagram shown in an embodiment of the present application;
FIG. 8 is a diagram showing an application network behavior interface display, as shown in an embodiment of the present application;
fig. 9 is a schematic structural diagram of a network connection monitoring apparatus according to an embodiment of the present application;
fig. 10 is a schematic structural diagram of an electronic device shown in an embodiment of the present application.
Detailed Description
Noun interpretation:
software & application: the application refers to a software process or set of software installed to run in the Windows operating system and accessing the network, also known as an application running in the Windows operating system.
Network: after the Windows operating system is accessed to the channel of the operator, the system has the capability of accessing external data by connecting a network.
Domain name: the destination of the application program access through the network may be a domain name such as www.abcd.com or an IP address such as 112.23.34.123. Behind each domain name is an absolute target IP address that needs to be resolved by a root server of the internet.
Region: IP addresses (ipv 4, ipv 6) used on the Internet are allocated by negotiations of countries, and each IP address can be reversely searched to the region to which the IP address belongs through the data disclosed after allocation.
Connection duration: when the application program initiates network access, three basic stages of starting connection, transmitting data and ending exiting are all provided, and the duration of the three stages in each access is called as the duration of application connection.
Connection times: each time an application initiates a network access request, it marks 1 connection.
Connection flow rate: each time an application program initiates a network access request, data can be uploaded and downloaded, and the uploaded and uploaded data is the connection flow of the application in the process. MB is a basic statistical unit, and is a common unit. This refers to real-time traffic or instantaneous traffic, as opposed to MB/s.
Preferred embodiments of the present application will be described in more detail below with reference to the accompanying drawings. While the preferred embodiments of the present application are shown in the drawings, it should be understood that the present application may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
The terminology used in the present application is for the purpose of describing particular embodiments only and is not intended to be limiting of the present application. As used in this application and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to and encompasses any or all possible combinations of one or more of the associated listed items.
It should be understood that although the terms "first," "second," "third," etc. may be used herein to describe various information, these information should not be limited by these terms. These terms are only used to distinguish one type of information from another. For example, a first message may also be referred to as a second message, and similarly, a second message may also be referred to as a first message, without departing from the scope of the present application. Thus, a feature defining "a first" or "a second" may explicitly or implicitly include one or more such feature. In the description of the present application, the meaning of "a plurality" is two or more, unless explicitly defined otherwise.
The applicant found in the study that the existing firewall function mainly acts on network connection switch management, network speed limitation and the like of the application program. More of which the user does not go to actively close the application's network access rights, but which data the application will transfer, when, how many times, how long to transfer, where to transfer, etc., these network behavior issues are not of concern.
The application provides a network connection monitoring method and device, which are applied to a Windows operating system platform as shown in FIG. 2, and further comprise a network access recording module 20 and a network record interface display module 21 on the basis of the original operating system, wherein the network access recording module 20 is arranged between an operating system module at the bottom layer of the operating system and an application program at the upper layer of the operating system, main working files of the network access recording module 20 are positioned in the operating system module at the bottom layer of the operating system, the network access recording module 20 is started when the Windows operating system is started, and is used for acquiring networking information of the application program at the upper layer of the operating system for accessing a network, sorting and analyzing the networking information to obtain a monitoring result of the application program for accessing the network, and storing the monitoring result; the interface display file of the network recording interface display module 21 is located at the upper layer of the operating system, and when a user interface display request is received, the network recording interface display module 21 performs interface display on the monitoring result.
The application provides a network connection monitoring method and device, and aims to: how to intuitively know the network behavior of the installed application program in the states of daily use, running, screen locking and the like of the Windows operating system.
The following describes the technical scheme of the embodiments of the present application in detail with reference to the accompanying drawings.
Fig. 3 is a flow chart of a network connection monitoring method according to an embodiment of the present application.
Referring to fig. 3, an embodiment of the present application provides a network connection monitoring method, configured to monitor a connection condition of an application program installed in a Windows operating system to access a network, where the method specifically includes the following steps:
s301: and acquiring networking information of the target application program access network in the application program, wherein the networking information at least comprises a target network domain address accessed by the target application program, and the target network domain address comprises at least one IP address.
The application program is all application programs installed in the Windows operating system and accessed through the network, and the target application program can be one application program installed in the Windows operating system or a plurality of application programs installed in the Windows operating system.
It should be noted that, after determining the target application program, the system may automatically obtain application information of the application program, which mainly includes an application alias, a process name, a creation date, a signature manufacturer, a signature status, a process size, a start time, a parent-child process relationship chain, and the like.
In this embodiment of the present application, when an application accesses a network, an application network request is sent to the network, where the application network request includes: the time when the application sends the network request, the destination domain address (web address, domain name address, IP (IPv 4/IPv 6), local area network address (192.168.1.0/255.255.255), local loopback address (127.0.0.0/0.0/local)), direction (out/in), local port (Windows port), remote port number (network port), etc. The network behavior of the application program (simply referred to as application network behavior) can be determined while the network information of the target application program accessing the network is acquired, namely: which application accesses which IP address at what point in time. The networking information includes a target network domain accessed by the target application, the target network domain including at least one IP address. It should be noted that, each destination domain address at least includes one IP address, and at least one IP address forms a domain.
S302: and obtaining geographic position information corresponding to the target network domain address according to the at least one IP address.
In the network access process, the geographic position information of the access destination network can be determined according to the IP address, that is, the geographic position of the access destination network is determined by the IP address, for example, a beijing user performs network access through a WeChat program, and the request sent by the user terminal includes the destination IP address of the access (where the network location of the user friend is in a stone house or in Tianjin, etc.), and then the geographic position of the access destination network can be determined as a stone house or in Tianjin, etc. according to the IP address.
S303: at least the identification of the target application and the geographic location information are displayed.
In this embodiment of the present application, the identifier of the target application program and the geographic location information may be displayed (as shown in fig. 4) in the network recording interface presentation module 21, including a first display area (map portion) and a second display area (networking information). As can be seen from fig. 4, the destination stone house, guangzhou and Shanghai are accessed by a WeChat program. The first display area (map in the figure) shows that users in Beijing have accessed Shijia, shanghai and Guangzhou through a WeChat program more intuitively. The second display area (upper left corner) is used to display the number of networked applications (1) and the number of connection areas (3), as well as specific details of network connection monitoring.
The specific form of displaying the identification of the target application and the geographical location information is not limited to the above-described form, and may be displayed in a tabular form.
Further, in other embodiments, the network recording interface presentation module 21 may display the identification and the geographic location information of the target application program (as shown in fig. 5), and as can be seen from fig. 5, the number of networking application programs is 5, the number of connection areas is 6, and the connection areas visited by each application program are intuitively presented in the map area.
Further, the networking information further includes data process information that can be transmitted, and at least the identification of the target application program and the geographic location information are displayed, including:
and displaying the identification of the target application program, at least one IP address and transmission data process information.
In the embodiment of the present application, the identification of the target application program and the geographic location information may be displayed on the network recording interface presentation module 21 (as shown in fig. 6),
wherein, the data transmission process information includes: the volume of the data packet in the uplink direction, the transmission rate, the transmission duration, the completion exit time and the volume of the data packet in the downlink direction.
Further, the method may further include:
and recording the network behavior of the target application program accessing the network, and storing and displaying the network behavior and the access time.
And carrying out flow statistics on the flow data of the target application program access network according to the transmission data process information, and displaying the target application program and the flow statistics result.
And carrying out regional flow statistics on geographic position information corresponding to the access network of the target application program, and displaying regional flow statistics results.
And respectively carrying out transmission rate statistics on the data packet in the uplink direction and the data packet in the downlink direction, and correspondingly displaying a transmission rate statistics result.
It should be noted that, the user may adapt the display interface of the network recording interface display module 21 according to the network connection monitoring requirement, as shown in fig. 7, a third display area may be added to the display interface to display the network behavior of the application program on the interface (application network behavior in fig. 7); a fourth display area may also be added to the display interface for exposing traffic ranking of the application at the interface (application traffic ranking in fig. 7); a fifth display area may also be added to the display interface for displaying an area traffic ranking of the application at the interface (shown in the lower right hand corner of fig. 7); a sixth display area may also be added to the display interface for displaying the uplink and downlink transmission rates and the uplink and downlink ranks of the application programs at the interface (shown in the upper right corner of fig. 7).
It should be further noted that, the application network behavior in the embodiment of the present application may monitor, in real time, the connection condition of the application program installed in the Windows operating system to the network, as shown in fig. 8, or may query the connection condition of the application program installed in the Windows operating system to the network in three days or seven days, and specifically may be displayed by selecting a button in fig. 8.
In the embodiment of the application, the user can monitor all application programs installed on the Windows operating system platform, and intuitively understand the application network behaviors of the installed network application in the foreground and the background under the conditions of daily use, running, screen locking and the like of Windows through interface display, and the application network behaviors include but are not limited to automatically triggered and manually triggered network requests, data sizes, dates, flow directions and the like. In addition, the recorded monitoring data can fully prove the data transmission behavior, the data flow direction, the data flow statistics and the like implemented by the application program.
The embodiment of the application provides a network connection monitoring method, which is implemented by acquiring networking information of a target application program access network in an application program (at least comprising a target network domain accessed by the target application program, wherein the target network domain comprises at least one IP address); then obtaining geographic position information corresponding to the target network domain according to at least one IP address; and finally, displaying at least the identification and the geographic position information of the target application program. According to the method and the device for determining the geographic position information of the Windows operating system, the geographic position information of the accessed network can be determined according to the networking information of the target application program accessing the network, the identification of the target application program and the geographic position information can be displayed, and network behaviors of the installed application program in the states of daily use, running, screen locking and the like of the Windows operating system can be intuitively known.
Corresponding to the foregoing embodiment of the application function implementation method, the present application further provides a data processing device between terminals in a local area network, an electronic device, and corresponding embodiments.
Fig. 9 is a schematic structural diagram of a network connection monitoring apparatus according to an embodiment of the present application.
Referring to fig. 9, an embodiment of the present application provides a network connection monitoring apparatus for monitoring a connection condition of any application program installed in a Windows operating system to access a network, where the apparatus may include: a first processing unit 901, a second processing unit 902, and a third processing unit 903, specifically:
a first processing unit 901, configured to obtain networking information of a target application access network in the application, where the networking information includes at least a target network domain accessed by the target application, and the target network domain includes at least one IP address;
a second processing unit 902, configured to obtain geographic location information corresponding to the target network domain according to the at least one IP address;
a third processing unit 903, configured to display at least the identification of the target application program and the geographic location information.
Still further, the networking information further includes transmission data process information, and the third processing unit 903 is further configured to:
and displaying the identification of the target application program, at least one IP address and the transmission data process information.
Further, the third processing unit 903 is further configured to:
and recording the network behavior of the target application program accessing the network, and storing and displaying the network behavior and the access time.
Further, the third processing unit 903 is further configured to:
and carrying out flow statistics on the flow data of the target application program access network according to the transmission data process information, and displaying the target application program and the flow statistics result.
Further, the third processing unit 903 is further configured to:
and carrying out regional flow statistics on geographic position information corresponding to the access network of the target application program, and displaying regional flow statistics results.
Further, the transmitting data process information includes: the volume of the data packet in the uplink direction, the transmission rate, the transmission duration, the completion exit time and the volume of the data packet in the downlink direction.
Further, the third processing unit 903 is further configured to:
and respectively carrying out transmission rate statistics on the data packet in the uplink direction and the data packet in the downlink direction, and correspondingly displaying a transmission rate statistics result.
The specific manner in which the respective modules perform the operations in the apparatus of the above embodiments has been described in detail in the embodiments related to the method, and will not be described in detail herein.
Fig. 10 is a schematic structural diagram of an electronic device shown in an embodiment of the present application.
Referring to fig. 10, an electronic device 1000 includes a memory 1010 and a processor 1020.
The processor 1020 may be a central processing unit (Central Processing Unit, CPU), but may also be other general purpose processors, digital signal processors (Digital Signal Processor, DSP), application specific integrated circuits (Application Specific Integrated Circuit, ASIC), field programmable gate arrays (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or the like. A general purpose processor may be a microprocessor or the processor may be any conventional processor or the like.
Memory 1010 may include various types of storage units, such as system memory, read Only Memory (ROM), and persistent storage. Where the ROM may store static data or instructions that are required by the processor 1020 or other modules of the computer. The persistent storage may be a readable and writable storage. The persistent storage may be a non-volatile memory device that does not lose stored instructions and data even after the computer is powered down. In some embodiments, the persistent storage device employs a mass storage device (e.g., magnetic or optical disk, flash memory) as the persistent storage device. In other embodiments, the persistent storage may be a removable storage device (e.g., diskette, optical drive). The system memory may be a read-write memory device or a volatile read-write memory device, such as dynamic random access memory. The system memory may store instructions and data that are required by some or all of the processors at runtime. Furthermore, memory 1010 may comprise any combination of computer-readable storage media including various types of semiconductor memory chips (DRAM, SRAM, SDRAM, flash memory, programmable read-only memory), magnetic disks, and/or optical disks may also be employed. In some implementations, memory 1010 may include readable and/or writable removable storage devices such as Compact Discs (CDs), digital versatile discs (e.g., DVD-ROMs, dual-layer DVD-ROMs), blu-ray discs read only, super-density discs, flash memory cards (e.g., SD cards, min SD cards, micro-SD cards, etc.), magnetic floppy disks, and the like. The computer readable storage medium does not contain a carrier wave or an instantaneous electronic signal transmitted by wireless or wired transmission.
The memory 1010 has stored thereon executable code that, when processed by the processor 1020, can cause the processor 1020 to perform some or all of the methods described above.
The aspects of the present application have been described in detail hereinabove with reference to the accompanying drawings. In the foregoing embodiments, the descriptions of the embodiments are focused on, and for those portions of one embodiment that are not described in detail, reference may be made to the related descriptions of other embodiments. Those skilled in the art will also appreciate that the acts and modules referred to in the specification are not necessarily required in the present application. In addition, it can be understood that the steps in the method of the embodiment of the present application may be sequentially adjusted, combined and pruned according to actual needs, and the modules in the apparatus of the embodiment of the present application may be combined, divided and pruned according to actual needs.
Furthermore, the method according to the present application may also be implemented as a computer program or computer program product comprising computer program code instructions for performing part or all of the steps of the above-described method of the present application.
Alternatively, the present application may also be embodied as a non-transitory machine-readable storage medium (or computer-readable storage medium, or machine-readable storage medium) having stored thereon executable code (or a computer program, or computer instruction code) that, when executed by a processor of an electronic device (or electronic device, server, etc.), causes the processor to perform some or all of the steps of the above-described methods according to the present application.
Those of skill would further appreciate that the various illustrative logical blocks, modules, circuits, and algorithm steps described in connection with the application herein may be implemented as electronic hardware, computer software, or combinations of both.
The flowcharts and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of systems and methods according to various embodiments of the present application. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
The embodiments of the present application have been described above, the foregoing description is exemplary, not exhaustive, and not limited to the embodiments disclosed. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the various embodiments described. The terminology used herein was chosen in order to best explain the principles of the embodiments, the practical application, or the improvement of technology in the marketplace, or to enable others of ordinary skill in the art to understand the embodiments disclosed herein.
Claims (10)
1. A method for monitoring network connection, the method being used for monitoring connection conditions of any application program installed in a Windows operating system to access a network, the method comprising:
acquiring networking information of a target application program access network in the application program, wherein the networking information at least comprises a target network domain address accessed by the target application program, and the target network domain address comprises at least one IP address;
obtaining geographic position information corresponding to the target network domain address according to the at least one IP address;
at least the identification of the target application and the geographic location information are displayed.
2. The method of claim 1, wherein the networking information further comprises transmission data process information, and wherein displaying at least the identification of the target application and the geographic location information comprises:
and displaying the identification of the target application program, at least one IP address and the transmission data process information.
3. The method according to claim 1 or 2, further comprising:
and recording the network behavior of the target application program accessing the network, and storing and displaying the network behavior and the access time.
4. The method as recited in claim 2, further comprising:
and carrying out flow statistics on the flow data of the target application program access network according to the transmission data process information, and displaying the target application program and the flow statistics result.
5. The method as recited in claim 1, further comprising:
and carrying out regional flow statistics on geographic position information corresponding to the access network of the target application program, and displaying regional flow statistics results.
6. The method of claim 2, wherein transmitting the data process information comprises: the volume of the data packet in the uplink direction, the transmission rate, the transmission duration, the completion exit time and the volume of the data packet in the downlink direction.
7. The method as recited in claim 6, further comprising:
and respectively carrying out transmission rate statistics on the data packet in the uplink direction and the data packet in the downlink direction, and correspondingly displaying a transmission rate statistics result.
8. A network connection monitoring apparatus for monitoring the connection of any application installed in a Windows operating system to a network, the apparatus comprising:
the first processing unit is used for acquiring networking information of a target application program access network in the application program, wherein the networking information at least comprises a target network domain address accessed by the target application program, and the target network domain address comprises at least one IP address;
the second processing unit is used for obtaining geographic position information corresponding to the target network domain address according to the at least one IP address;
and the third processing unit is used for displaying at least the identification of the target application program and the geographic position information.
9. An electronic device, comprising:
a processor; and
a memory having executable code stored thereon, which when executed by the processor causes the processor to perform the network connection monitoring method of any of claims 1-7.
10. A non-transitory machine-readable storage medium having stored thereon executable code, which when executed by a processor of an electronic device, causes the processor to perform the network connection monitoring method of any of claims 1-7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211684614.7A CN116319679A (en) | 2022-12-27 | 2022-12-27 | Network connection monitoring method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211684614.7A CN116319679A (en) | 2022-12-27 | 2022-12-27 | Network connection monitoring method and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116319679A true CN116319679A (en) | 2023-06-23 |
Family
ID=86812017
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211684614.7A Pending CN116319679A (en) | 2022-12-27 | 2022-12-27 | Network connection monitoring method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116319679A (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104125596A (en) * | 2014-07-07 | 2014-10-29 | 北京奇虎科技有限公司 | Data traffic statistics method and data traffic statistics device |
| CN110336805A (en) * | 2019-06-27 | 2019-10-15 | 维沃移动通信有限公司 | Network access management method and mobile terminal |
| CN111858248A (en) * | 2020-07-20 | 2020-10-30 | 北京百度网讯科技有限公司 | Application monitoring method, device, equipment and storage medium |
| WO2021004144A1 (en) * | 2019-07-11 | 2021-01-14 | 广东美的制冷设备有限公司 | Domain name resolution method, domain name resolution device, household appliance, and storage medium |
-
2022
- 2022-12-27 CN CN202211684614.7A patent/CN116319679A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104125596A (en) * | 2014-07-07 | 2014-10-29 | 北京奇虎科技有限公司 | Data traffic statistics method and data traffic statistics device |
| CN110336805A (en) * | 2019-06-27 | 2019-10-15 | 维沃移动通信有限公司 | Network access management method and mobile terminal |
| WO2021004144A1 (en) * | 2019-07-11 | 2021-01-14 | 广东美的制冷设备有限公司 | Domain name resolution method, domain name resolution device, household appliance, and storage medium |
| CN111858248A (en) * | 2020-07-20 | 2020-10-30 | 北京百度网讯科技有限公司 | Application monitoring method, device, equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108965007B (en) | API gateway interface configuration updating method and device | |
| CN108881211B (en) | Illegal external connection detection method and device | |
| US9098325B2 (en) | Persistent volume at an offset of a virtual block device of a storage server | |
| US8689280B2 (en) | DNS-based content routing | |
| CN103995674B (en) | Access request processing method, device and equipment | |
| CN109213604B (en) | Data source management method and device | |
| CN110099142B (en) | IP address allocation method, device, equipment and storage medium | |
| CN112468416A (en) | Network flow mirroring method and device, computer equipment and storage medium | |
| WO2017095820A1 (en) | Methods and devices for acquiring data using virtual machine and host machine | |
| CN106411819A (en) | Method and apparatus for recognizing proxy Internet protocol address | |
| CN113238923B (en) | Service behavior tracing method and system based on state machine | |
| CN116319679A (en) | Network connection monitoring method and device | |
| CN110933082A (en) | Method, device and equipment for identifying lost host and storage medium | |
| CN107124310B (en) | Permission configuration method and device | |
| WO2022010811A1 (en) | Secure data storage for anonymized contact tracing | |
| CN112134968A (en) | Domain name access method and device, electronic equipment and storage medium | |
| CN111597564A (en) | Data access and permission configuration method, device, terminal and storage medium | |
| CN111970250B (en) | Method for identifying account sharing, electronic device and storage medium | |
| CN109660497B (en) | Data processing method and device, terminal, processor and storage medium | |
| CN112468356B (en) | Router interface testing method, device, electronic equipment and storage medium | |
| US11729246B2 (en) | Apparatus and method for determining types of uniform resource locator | |
| CN110688350B (en) | Method and device for storing logs | |
| CN115914383A (en) | Service publishing method, system, device and storage medium | |
| CN114422240A (en) | Internet of things cross-layer attack path identification method based on attack behavior analysis | |
| US20230101945A1 (en) | Remediating storage of sensitive data on hardware device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |