Method of configuring a filter device for a data stream comprising frames, and protocol tester

The present invention relates to a method for configuring a filter device for an organized in frames data stream in a protocol tester and a corresponding protocol tester.

For a better understanding of the invention underlying problem is first a known from the prior art method for configuring a filter device for an organized in frames data stream in a protocol tester with respect to the <figref idrefs="f0001 f0002 f0003 f0004 f0005 f0006 f0007">Figures 1-7</figref> explained in more detail.

As is well known in Protokolltestem a large amount of data is recorded. For large amounts of data, it is necessary to reduce to be displayed on a monitor an operator dataset for a meaningful evaluation by various filters.

<figref idrefs="f0001">figure 1</figref> shows a graphical user interface of a display unit, for example, a computer screen with multiple windows and more icons, which, such as Windows user programs fro known, made selections and functions can be initiated. In<figref idrefs="f0001">figure 1</figref> are first pre-defined groups specified filter in a window 10, in a window 12, the associated filter and a window 14 showing the selection of the type of filter with which a data stream between a data source and a data sink 16 is filtered 18th The data source 16 may comprise a plurality of individual data sources, wherein the output data of the individual data sources are assembled into a serial data stream which is then passed through the filter device. For clarity, are explained below only the features which are known from the prior art apparatus for configuration of a filter device in more detail, which are in view of the invention of concern. By clicking the icons 20 to configure protocol filtering the display goes from<figref idrefs="f0001">figure 1</figref> on the display of <figref idrefs="f0002">figure 2</figref>, In the window 22 of<figref idrefs="f0002">figure 2</figref> are displayed various configured protocol stacks. A scroll bar 24 allows the display further configured protocol stacks. associated logs are displayed for the marked in the window 22 protocol stack in windows 26th In Window 28 messages (Messages) are displayed that belong to the marked in the window 26 minutes. In the window 30, the parameter or field names are given, belonging to the marked in the window 28 message.

By clicking on the icons of 32 <figref idrefs="f0002">figure 2</figref> is enabled the corresponding filter, ie the display goes into the presentation of <figref idrefs="f0003">figure 3</figref>, As window 14 of<figref idrefs="f0003">Figure 3</figref> It is apparent from the data stream now passes through the filter device. The task of the operator is presently exemplified therein, fish out the frames from the data stream containing the message RPAC-UL. For this, they must now configure their filtering device. As readily apparent, this considerable expertise is necessary: ​​The operator must first know which protocol found this message and must secondly know in which protocol stack to find the appropriate protocol. A trained operator will have a certain idea of ​​where he has to seek. An inexperienced user relies on a search at random or systematically all protocol stacks and protocols durchzuprobieren until the appropriate message to him appears in the window. With luck, expertise or patience, the user is finally in<figref idrefs="f0004">figure 4</figref> received view illustrated what he 34 is the message RPAC-UL in the window 28 as part of the protocol SMRP, see box 26, which is part of the protocol stack umts_iu_cs_ps_sms_1 ..., see box 22, has found. Highlighting RPAC-UL in window 28, see<figref idrefs="f0005">figure 5</figref>, The filter device is appropriately configured and the filtered outgoing from the data source 16 data stream accordingly. The result of the filtering can<figref idrefs="f0006">figure 6</figref> be taken: In <figref idrefs="f0006">figure 6</figref> are in the window 36, a so-called short-view, the frames displayed having the Message RPAC-UL. The short-view 36 has several columns: In the 39 column the serial numbers of frames are shown. The column 40 gives each frame associated time stamp again. The column 42 is the data source again. The following columns 44a, b, 46a, b, 48a, b give, in an orderly manner the protocols contained in each frame and the associated message again. In the present case, the frame is marked with the serial number 681 in the window 36th The content of this frame is protocol as ranked in full ausdekodierter form in the window 38, the so-called frame-view represented. The windows assigned scrollbars allow the display is not currently displayed information. In the window 36 was in the frame 681, the second protocol SSCOP, see column 44a marks, see reference numeral 50 in the window 38 of the frame is 681, see reference numeral 52, beginning with the protocol SSCOP, see reference numeral 54, shown in full ausdekodierter way. A first column 56 is the bit mask again, a second column 58 the name of the protocol data unit and a third column 60 a corresponding associated comment or value. In the first section 62, the protocol data units of the Message SD, see column 44b indicated. The same applies to the other protocols and other news. In a third window 64 of selected in the first window frame 36 is given in hexadecimal way. As<figref idrefs="f0006">figure 6</figref> can be removed, selected by filtering a data packet with 1529 kB content five frames.

<figref idrefs="f0007">figure 7</figref> shows in a window 66 the relevant data to the configuration of the filter device for displaying the result in accordance with <figref idrefs="f0006">figure 6</figref>, This information can be stored, for example, and the operator will be offered as a pre-defined (predefined) filter to select.

In this context, reference is made to <patcit id="pcit0001" dnum="US20030135612A1"><text>US 2003/0135612 A1</text></patcit> reference, which discloses two different systems and methods for configuring a filter device for an organized in frames stream. In one method, the filter rules can be entered and edited directly in a graphical user interface. In the other method Filter rules can be set in ausdekodierter form the basis of a representation of data packets. The user selects either a decoded protocol specific field or a hexadecimal Untreated or a text box, and then selects a local menu, select "Filter" from. If the resulting filter rule is applied to the representation of ausdekodierten data packets, each data packet retains its parcel number, but there are only the filtered packets displayed. This publication also discloses a display for presenting web sessions for a user. This display includes a plurality of windows are being displayed in a window the data packets of a node or a meeting. In another window a user-selected data packet is shown in ausdekodierter form, while a last window displays the selected data packet in hexadecimal notation.

According to a first aspect of the present invention, a method for configuring a filter device for an organized in frames data stream in a protocol tester comprising the steps contained in claim 1 is provided. According to a second aspect of the invention, a protocol tester is further provided according to claim 18th

A user can configure a filter on a data stream in a simple manner without knowledge of the internal protocol structure, when the frames him to appear with contents of the frames in a window where the user by marking, ie clicking, a content appropriate content as may define filter function and to apply to the data stream. The fact that means are provided in the protocol test, perform a partial decoding of the contents of the respective frames, this knowledge does not need to be present to the user, rather the deposit in a protocol tester is sufficient. In the present invention, the user logs and messages on the screen contained in each frame displayed. A detailed knowledge of the structure of the protocol stack and the protocols contained in it is not necessary. Because according to the invention those contents are marked with an error identification feature, in which decoding an error has occurred, the user's attention is immediately drawn to the critical news content.

As a content of the frames preferably the protocols used in the respective frame and / or messages and / or protocol data units and / or values ​​of protocol data units are displayed. It is further preferred that the frames shown on the display unit as a function of the filter rule are shown in a further window. The additional window in which the frames are displayed depending on the filter rule can be equal to the first window or an additional window. When the second window is equal to the first window, there is an increased clarity, and it is provided in a simple manner the possibility to create on the now reduced number of frames, a further filter rule and apply.

By providing the possibility of negation can be selected whether the filter procedure for the preparation of frames into the second window having the marked content or not having straight.

For a particularly precise filtering, it is also preferable if the selected in step b) of the novel frame is represented in ausdekodierter form, especially in fully ausdekodierter form.

It is also preferable if is displayed in another window of the display unit of the selected frame in hexadecimal notation. According to the present invention, the term "another window" simultaneous multi-window on the display unit and the sequential display of multiple windows on the display unit includes.

In general, the provision of means for scrolling is advantageous, in particular for the case that not all frames or contents of a frame in the respective window can be displayed. Thus, the clarity of the display will be significantly increased.

To further refine the filter rule, it is particularly preferred that the frames shown as a function of the filter rule are displayed in another window in ausdekodierter form, especially in fully ausdekodierter form. By providing the possibility to derive a further filter rule by marking a specific protocol data unit or a specific value of a protocol data unit, a particularly effective filtering of the data stream is enabled. In particular, in this aspect of the invention will be apparent which immense knowledge that needed in the prior art the user to be present in order to create a desired filter rule is now provided by a protocol tester according to the invention.

To give the user an overview of what the marked him protocol data unit or the value of the protocol data unit belongs, it is preferred if in another window of the marked to the protocol data unit or to the particular value of the protocol data unit associated protocol stack and / or its Protocol and / or the associated message and / or the associated parameters and / or the associated field name appear. This is equally the reverse path trodden as in the prior art: What had to be known to the membership of the definition of the filtering item to be used in the prior art, shows now reversed as defined by the filter rule, an inventive protocol tester this belonging to.

A particularly effective filtering is made possible if a possibility to modify the highlighted content of the highlighted frame is provided to derive a filter rule. In particular, by using so-called wildcards or by displaying a desired range of a value can be characterized to create a simple manner highly effective filter rules.

It is further preferred if a filter rule can be derived by selecting a tab marked with an error identification feature that permits filtering by frames, which have both the content and the error identification feature that is associated with this content. This filter can be easily to frames that have exactly this error.

Of course it is possible to store correspondingly derived filter rules as predefined filter rules in a protocol tester according to the invention in order to reuse them in future applications.

It is obvious to the skilled person that the execution of the corresponding process steps appropriate resources should be provided, in particular by creating appropriate programs.

The preferred embodiments and advantages described in connection with the inventive method applies if applicable for the protocol tester according to the invention.

Further advantageous embodiments emerge from the dependent claims.

In the following, an embodiment of the invention is described with reference to the accompanying drawings in more detail now. Show it:<dl id="dl0001"><dt>figure 1</dt><dd>a first graphical user interface of a known from the prior art method for configuration of a filter device;</dd><dt>figure 2</dt><dd>a second graphical user interface of a known from the prior art method for configuration of a filter device;</dd><dt>figure 3</dt><dd>a third graphical user interface of a known from the prior art method for configuration of a filter device;</dd><dt>figure 4</dt><dd>a fourth graphical user interface of a known from the prior art method for configuration of a filter device;</dd><dt>figure 5</dt><dd>a fifth graphical user interface of a known from the prior art method for configuration of a filter device;</dd><dt>figure 6</dt><dd>a sixth graphical user interface of a known from the prior art method for configuration of a filter device;</dd><dt>figure 7</dt><dd>a seventh of a graphical user interface, known from the prior art method for configuration of a filter device;</dd><dt>figure 8</dt><dd>a first graphical user interface of a method for configuring a filter device;</dd><dt>figure 9</dt><dd>a second graphical user interface of a method for configuring a filter device; </dd><dt>figure 10</dt><dd>a third graphical user interface of a method for configuring a filter device;</dd><dt>figure 11</dt><dd>a fourth graphical user interface of a method for configuring a filter device;</dd><dt>figure 12</dt><dd>a fifth graphical interface of a method for configuring a filter device; and</dd><dt>figure 13</dt><dd>a signal flow diagram of one embodiment of the inventive method.</dd></dl>

For same and similar elements, like reference numerals are used in the following.

In the <figref idrefs="f0008">figure 8</figref> illustrated graphical user interface corresponds structurally essentially that of <figref idrefs="f0006">figure 6</figref>, With the difference that it in itself <figref idrefs="f0006">figure 6</figref> is the representation of the result of filtering in the method known from the prior art, while <figref idrefs="f0008">figure 8</figref> representing the initial configuration for a filter device in the inventive process. This becomes obvious when looking at the window 36, in which the frames, see column 39, nor are all available, see the consecutive numbering, ie none yet filtering were subjected. The window 38 again shows the marked in the window 36 frame in full ausdekodierter form, present the frame with the number 681. Within the window 36 in the frame 681, the cell is 66, that marks the message "RPAC-UL". A corresponding display is shown in the window 68th The arrangement of the protocols and message in the window 36 extends from the lowest logs left to the highest protocols in the OSI model right. Clicking the window 68 the appropriate filtering is triggered and the display is obtained in accordance with<figref idrefs="f0009">figure 9</figref>, This corresponds to the display of<figref idrefs="f0006">figure 6</figref> and leads in this direct comparison clearly shows the advantages of the method in mind.

<figref idrefs="f0010">figure 10</figref> shows that not only displayed in the window 36 content of the frames can be used to derive a filter rule, but also the illustrated in full ausdekodierter shape of the window 38 content of the frame, in this case the frame with the number 681. can by clicking on the line 70 a filter rule derived, leaving it up to the user to the specified value for the parameter "Destination Local Ref." to modify for example, by using wildcards or by defining a desired target range. In the window 64, ie in the hexadecimal representation, belonging to the corresponding parameter bytes are marked. Accordingly, there remain to distinguish two general variants to define a filter rule: In the first variant, with reference to<figref idrefs="f0006">figure 6</figref> used in the window 36, a content of a frame to define a filter rule, which then, see <figref idrefs="f0009">figure 9</figref>, By selecting the contents of the window 38 another filter rule can be derived. The other variant consists in starting from the illustration in<figref idrefs="f0010">figure 10</figref>, In the first step to define a filter rule to appoint a content displayed in the window 38th

The presentation of <figref idrefs="f0011">figure 11</figref> shows the membership of the of in line 70 <figref idrefs="f0010">figure 10</figref> selected parameter, namely umts_iu_cs_ps_sms_i the protocol stack ..., see box 22 of <figref idrefs="f0011">figure 11</figref>, The Protocol SCCP, see box 26 of <figref idrefs="f0011">figure 11</figref>, The message DT1, see box 28 of <figref idrefs="f0011">figure 11</figref>, The parameter is specified in box 30, where it can be modified to define a filter rule, for example, by wildcards, by using greater-DC, DC-Kleiner, unequal character etc.

<figref idrefs="f0012">figure 12</figref> shows the associated filtering result, that is, in the window 36, the frames are specified, in the <figref idrefs="f0011">figure 11</figref> meet defined filter rule.

In an embodiment not shown, contents of a frame in which decoding errors have shown visually marked for the user. By selecting an appropriate content of a frame can be searched for frames, which also have this content in faulty form.

<figref idrefs="f0013">figure 13</figref> shows a signal flow diagram of one embodiment of the inventive process, which begins in step 100th In step 110 is displayed on a display unit an overview of frames of the data stream, wherein each displayed for one frame an identification feature of the frame and at least one content of the frame. In step 120, a particular frame is selected and in step 130, a certain content of the selected frames to derive a filter rule is marked. Frames are then shown as a function of the filter rule, in step 140 on a display unit. In step 150, the user can decide whether he wants a further specification of the filter rule or not. In the affirmative, the procedure is returned to step 130 where the user is given the opportunity to highlight another contents of a frame and derive a filter rule. In the negative, the process is terminated in step 160th