Method of configuring a filter device for a data stream comprising frames, and protocol tester

0001The present invention relates to a method for configuring a filter device appropriate for an organized in frames data stream in a protocol tester, as well as a Protocol tester.

0002For a better understanding of the invention underlying problem is first a well-known from the prior art method for configuring a Filter device for an organized in frames data stream in a protocol tester explained in more detail with reference to Figures 1 to 7th

0003As is known, in a protocol tester, a large amount of data is recorded. at the large amounts of data, it is necessary for a meaningful evaluation by various Filter to be displayed on a monitor an operator dataset to reduce.

0004Figure 1 shows a graphical user interface of a display unit, for example, a computer screen with multiple windows and more icons, which, as been known example of Windows application programs, made selections and functions can be triggered. In Figure 1 are initially in a Window 10 predefined filters groups stated in a window 12 associated Filter and into a window 14 showing the selection of the type of filter with which a data stream is filtered between a data source and a data sink 16 eighteenth The Data source 16 may comprise a plurality of individual data sources, said output data composed of the individual data sources to a serial data stream be, which then passes through the filter device. For clarity, are in Below, only the features which are known from the prior art device explained in greater detail to the configuration of a filter device, which in view of the invention are relevant. By clicking the icons 20 to configure protocol filtering the display of Figure 1 goes to the display of Figure 2. In the window 22 of Figure 2 are shown various configured protocol stacks. A scroll bar 24 allows the display further configured protocol stacks. to be in the window 26 the selected window 22 protocol stack associated protocols appear. in the Window 28 displays messages (Messages), the marked to the window 26 Protocol belong. In the window 30, the parameter or field names are given, belonging to the highlighted window 28 message.

0005the corresponding filter is enabled by clicking on the icon 32 of Figure 2, ie the display goes to the representation of Figure 3. As window 14 of Figure 3 can be seen, the data stream now passes through the filter device. The task the operator is in the present example is that from the data stream fish out frames that contain the Message RPAC-UL. For this, they must now configure their filtering device. As readily apparent, this is considerable Expertise necessary: ​​The operator must know firstly to what protocol found this message and must secondly know which protocol stack the appropriate protocol can be found. A trained operator is a certain have idea where he has to seek. An untrained users relies in a search at random or systematically all protocol stacks and protocols durchzuprobieren until the appropriate message to him appears in the window. With luck, expertise or patience, the user is finally illustrated in Figure 4 received view that it's message RPAC-UL 34 in the window 28 as a component the Protocol SMRP is, see box 26, which is part of the protocol stack umts_iu_cs_ps_sms_1 ... is, see box 22, has found. Highlighting of UL-RPAC in the window 28, see Figure 5, the filter device is in accordance with is configured and the data emanating from the source data stream 16 in accordance with filtered. The result of the filtering can be found in Figure 6: In FIG 6 the window 36, a so-called short-view, display the frames that the Message RPAC-UL have. The short-view 36 has several columns: In the column 39 the serial numbers of frames are indicated. The column 40 gives each Frame associated time stamp again. The column 42 is the data source again. The following columns 44a, b, 46a, b, 48a, b give, in an orderly manner in the each frame contained protocols and the associated message again. In the present has been marked in the window 36 of the frame with the sequence number 681st Of the Content of this frame is protocol as ranked in full ausdekodierter form window 38, the so-called frame-view reproduced. The windows assigned scrollbars allow the display is not currently displayed information. In the window 36 was in the frame 681, the second protocol SSCOP, see column 44a marks, see reference numeral 50, the window 38 of the frame is 681, see reference numeral 52, beginning with the protocol SSCOP, see reference numeral 54, in full ausdekodierter Manner shown. A first column 56 represents the bit mask, a second column 58 the name of the protocol data unit and a third column 60 a corresponding associated comment or value. In the first section 62, the protocol data units the Message SD, see column 44b indicated. The same applies for the other Protocols and other news. In a third window 64 is in the first Windows 36 marked frame in hexadecimal manner indicated. As Figure 6 taken may be, were filtering a data packet with 1529 kB content five Frames selected.

0006Figure 7 shows the in a window 66 the relevant data to configure the filter device for displaying the result as shown in FIG 6. This information can, for example, are stored and the operator as predefined (predefined) Filters are available for selection.

0007Starting from the illustrated prior art, the present invention, the Object to provide a method of the type mentioned, in which a filter device in a simpler manner, especially without extensive Expert knowledge on the part of the user can be configured. You persists to provide a corresponding protocol tester.

0008The first object is achieved by a method having the features of patent claim 1. According to a further aspect of the invention, the second-mentioned Object is achieved by a protocol tester with the features of patent claim 17th

0009The present invention is based on the recognition that a user then without Knowledge of internal protocol structure a filter to a stream in a simple can configure way when it together in one window frames displays with content of the frame, wherein the user by marking, Define ie clicking, a content appropriate content as a filter function and the data stream can apply. The fact that in the protocol test means are provided which perform a partial decoding of the contents of the respective frames, need this knowledge not be available to the user, rather it is sufficient to Deposit in the protocol tester. a specific example, if the prior art Message has been identified as critical, the user had to know to what Protocol stack and in which protocol the corresponding message was contained. In the present invention will him the logs contained in each frame and messages displayed on the screen. A detailed knowledge of the structure the protocol stack and the protocols contained in it is not necessary. The present Invention further results in that a user no filter configuration syntax must learn more.

0010As content of the frames are preferably the protocols used in each frame and / or messages and / or protocol data units and / or values ​​of protocol data units displayed. It is further preferred that the in on the display unit shown depending on the filter frames provision shown in another window will. The other window, in which the frames as a function of the filter rule are displayed, can be equal to the first window or an additional Window. When the second window is equal to the first window, results in an increased Clarity and it is provided in a simple manner the possibility of the now reduced number of frames to create an additional filter specification and apply.

0011By providing the possibility of negation can be selected, whether the filter procedure for the preparation of frames in the second window leads to the have marked content, or just do not have.

0012For a particularly precise filtering, it is further preferred if in step b) the inventive method labeled frame in ausdekodierter form, in particular is represented in full ausdekodierter form.

0013It is further preferred if the In a further window of the display unit marked frame is shown in hexadecimal notation. For the purposes of the present Invention includes the term "another window" simultaneous display multiple windows on the display unit and the sequential display of multiple A window on the display unit.

0014In general, the provision of means for scrolling is advantageous, particularly for the Case that not all frames or contents of a frame in the respective window displayable are. Thus, the clarity of the display will be significantly increased.

0015To further refine the filter specification, it is particularly preferred that the in Depending on the filter frames provision shown in another window in ausdekodierter form, are represented especially in fully ausdekodierter form. by by providing the ability to derive a further filter rule Marking a specific protocol data unit or a specific value of a Protocol data unit is made possible a particularly effective filtering of the data stream. In particular, in this aspect of the invention will be apparent which immense knowledge which had to be present in the prior art to the user, to create a desired filter rule, now of an inventive Protocol tester is provided.

0016To give the user an overview of what the marked him Protocol Data Unit or belongs to the value of the protocol data unit, it is preferred if in another window of the marked to the protocol data unit or to the particular Value of the protocol data unit associated protocol stack and / or the associated Protocol and / or the associated message and / or the associated parameters the associated field name will be displayed and / or. This is equally the reverse path trodden as in the prior art: What are the prior Technique membership of defining the filtering element to be used had to be known, now shows a reversed to define the filtering rule according to the invention Protocol tester to this membership.

0017A particularly effective filtering is made possible, when a possibility for modifying the highlighted content of the selected frames to derive a filter rule provided. In particular, by using so-called wildcards or by displaying a desired range of a value can be characterized in a simple way and Way highly effective filter rules create.

0018Furthermore, it is preferred if those elements, in particular protocols, messages, Protocol data units, values ​​of protocol data units, with an error identification feature be in an error in the decoding is. This is the user's attention immediately on critical news content directed. In this context is also preferable if by marking one marked with an error identification feature element a is filter rule derivable that permits filtering by frames that both the element as well as the error identification feature which is assigned to this element, exhibit. This can be filtered easily by frames exactly this have errors.

0019Of course, it is possible to correspondingly derived filter rules as predefined storing filter rules in a protocol tester according to the invention to to use them in future applications again.

0020It is obvious to the expert that for performing the corresponding process steps appropriate resources must be provided, in particular by Creation of appropriate programs.

0021The preferred described in connection with the method according to the invention Embodiments and advantages apply to the extent applicable to the present invention Protocol tester.

0022Further advantageous embodiments emerge from the dependent claims.

0023In the following will now an embodiment of the invention with reference described in more detail to the accompanying drawings. Show it:<dl tsize="8"><dt>figure 1</dt><dd>a first graphical user interface of a prior art known method for configuring a filter device;</dd><dt>figure 2</dt><dd>a second graphical user interface of a prior art known method for configuring a filter device;</dd><dt>figure 3</dt><dd>a third graphical user interface of a prior art known method for configuring a filter device;</dd><dt>figure 4</dt><dd>a fourth graphical user interface of a prior art known method for configuring a filter device;</dd><dt>figure 5</dt><dd>a fifth graphical user interface of a prior art known method for configuring a filter device;</dd><dt>figure 6</dt><dd>a sixth graphical user interface of a prior Art known method for configuring a filter device;</dd><dt>figure 7</dt><dd>a seventh of a graphical user interface from the prior Art known method for configuring a filter device;</dd><dt>figure 8</dt><dd>a first graphical user interface of an inventive method the configuration of a filter device;</dd><dt>figure 9</dt><dd>a second graphical user interface of an inventive method the configuration of a filter device; </dd><dt>figure 10</dt><dd>a third graphical user interface of an inventive method the configuration of a filter device;</dd><dt>figure 11</dt><dd>a fourth graphical user interface of an inventive method the configuration of a filter device;</dd><dt>figure 12</dt><dd>a fifth GUI of an inventive method the configuration of a filter device; and</dd><dt>figure 13</dt><dd>a signal flow diagram of one embodiment of the inventive method.</dd></dl>

0024For identical and similar elements are hereinafter, like reference numerals used.

0025The illustrated in Figure 8 graphical user interface corresponding structurally in Essentially that of Figure 6, with the difference that it is in Figure 6 display of the result of filtering in which, from the prior art known methods is, while Figure 8 entry to configure a represents filter device in the inventive process. This is obviously upon consideration of the window 36, in which the frames, see column 39, yet all are available, see the consecutive numbering, ie none yet subjected to filtering were. The window 38 again shows the marked in the window frame 36 in full ausdekodierter form, present the frame with the number 681. Within the Window 36 in the frame 681, the cell is 66, ie the message "RPAC-UL" mark. A corresponding display can be seen in the window 68th The arrangement of the protocols and Messages in the window 36 extends from the lowest logs left to the highest protocols in the OSI model right. is by clicking on the window 68 triggered the appropriate filtering and the display is obtained according to FIG. 9 This corresponds to the display of Figure 6 and results clearly in this direct comparison the advantages of the method in mind.

0026Figure 10 illustrates that not only the content displayed in the window 36 of the frames can be used to derive a filter rule, but also the window 38 shown in full ausdekodierter form content of the frame, in this case the frame No. 681. can by clicking on the line 70 a filter rule derived, leaving it up to the user to the specified value for the Parameter "Destination Local Ref." for example, by using wildcards or to modify by defining a desired target range. In the window 64, ie, in the hexadecimal notation, the corresponding to the parameter marks belonging bytes. Accordingly, there remain two overarching variants distinguish define a filter rule: In the first variant is related to Figure 6 in the window 36, a content of a frame to define a filter rule used, wherein then, see Figure 9, by selecting the contents of the window 38 another filter rule can be derived. The other variant is therein, starting from the illustration in Figure 10, in the first step a in Window 38 zoom pull content shown to define a filter rule.

0027The representation of Figure 11 shows the membership of the selected line in 70 of Figure 10 Parameter, namely umts_iu_cs_ps_sms_i the protocol stack ..., see Window 22 of Figure 11, the Protocol SCCP, see box 26 of Figure 11, for Message DT1, see box 28 of Figure 11. The parameter is specified in box 30, where it can be modified to define a filter rule, for example, by wildcard, by using greater-DC, DC-Kleiner, unequal sign etc.

0028Figure 12 shows the corresponding filter result, that is in the window 36, the frames are specified, that meet the defined in Figure 11 filter rule.

0029In an embodiment not shown, contents of a frame, wherein to decode failure have shown visually marked for the user. By Select an appropriate content of a frame-by-frame is used for searching be, which also have this content in faulty form.

0030Figure 13 shows a signal flow diagram of one embodiment of the invention Process, which begins in step 100th In step 110, on a display unit an overview of frames of the data stream shown, in each case for one frame display an identifier of the frame and at least one content in the frame will. In step 120, a particular frame is selected and in step 130 is a certain content of the selected frames to derive a filter rule marked. Subsequently, in step 140 on a display unit frames in dependence the filter regulation shown. In step 150, the user can decide whether it wishes to or not further define the filter rule. in the the positive case, the process is returned to step 130 where the user opportunity is given to mark another contents of a frame and it derive a filter rule. In the negative, the process is terminated in step 160th