Hi, dear!
Have a good day!
This post describes how to deal with the problem that SoftVCN produces a large number of video recording is interrupted.
Issue
XX site, the customer video surveillance products SoftVCN occasionally produces a large number of recording is interrupted symptom, occurrence time, sometimes a random number of a week sometimes a month.
SoftVCN version V100R002C20SPC200.
Video surveillance platform: 4 SoftVCN platforms
Camera model: IPC6621-Z30-I, IPC6331-IR, IP6221-VRZ
Power supply mode: POE power supply
The following figure shows the network topology information.
Alarm Information
According to the situation of the log and the CU client query to the video, different SoftVCN camera at the same time point of the camera offline, analysis of the reasons for the network. At the same time on the same SoftVCN, the device is offline, the module log is not interrupted, and the service is not found abnormal.
Therefore, preliminary judgment for the operation of the network is not stable, please contact the network engineer to analyze the switch/router log. we in the four SoftVCN deployed Ping script, a ping server under the camera timing, and save the log to /opt/ping.log, the video is interrupted again.
The following is the log analysis information
Handling Process
First of all, because the phenomenon has often faults during sporadic and reports a fault has occurred and has been automatically cleared, it involves many products. The onsite network complex. The video surveillance products after-process log check can only see the disconnection information, evidence collection, and determine the root cause difficulties, Direct network problem boils down to convince strength is insufficient.
In addition, the customer tried to contact the network technical support engineers to locate network problems, but check the simple cope with, and also in Checks after switchover, no locate the specific problem.
Because the fault usually occurs when 30 -120 minutes, contact the customer in case of a problem for the first time to contact when a fault occurs to check.
The analysis process is as follows:
4 console SoftVCN is running independently, 167 a video camera is running independently. Currently, a large number of cameras are distributed on different SoftVCN on site, different types of camera at the same moment is different from the media stream times out (network). Therefore, you need to rectify the fault on the network side.
On-site 4 SoftVCN servers, namely, VCN01, VCN02, VCN03, VCN04, each server load is 43/41/23/60, a total of 167 video camera.
IP6221-VRZ cameras need to be distributed on VCN02 41, VCN04 on 20 console; IPC6621-Z30-I distributed on VCN02 2, VCN01 on 9 consoles.
IPC6331-IR distributed on VCN01 51 41 on one, VCN03, VCN04 on 3 consoles.
Abnormal time in batches at a time point, the equipment usually video interruption occurs, different types of cameras are distributed on different SoftVCN cameras are displayed, and at the same time, related screenshots are as follows:
The camera A and B at the same time occurrence recording is interrupted.
The camera A VCN01, model is IPC6331-IR.
The camera B in VCN04, the model is IPC6221-VRZ.
Abnormal time in batches at a time point, the equipment usually video interruption occurs, different types of cameras are distributed on different SoftVCN cameras are displayed, and at the same time, related screenshots is as follows:
The device: of Camera C: -- --2017/9/28 13:05 and 13:47 media stream keep-alive fails:
The device: of Camera D: --2017/9/28 13:05 and 13:47 media stream keep-alive fails:
According to the analysis result, we can see that:
4 SoftVCN machine running on the live network is running independently, different types of cameras are mounted on different SoftVCN above. In addition, different types of cameras at the same moment, different media flow timeout occurs on the network segment. In theory, it indicates that the fault is not caused by the video surveillance platform and products.
Select two camera test, the two different camera model, the SoftVCN download log analysis, it is found that 2 cameras are interrupted at the same time, and fail to be is a media stream keep-alive, you are advised to check the network status. In addition, from the log, the POE power supply of the device has multiple power-off. This indicates that the network-side fault occurs.
Root Cause
Due to network issues caused by video interruption.
After capture packets on the network switch through the network. When a recording interruption time, found in the local area network (LAN), have a computer PC ARP virus attacks by MAC address spoofing, occasional attacks. As a result, the LAN broadcast storms, network congestion occurs. As a result, a large number of camera video recording is interrupted.
Solution
The video surveillance platform and cameras is running properly. When a fault occurs, locate the fault by the network side, and the network side needs to check the fault cause.
It is recommended that when the problem occurs on the network switch to capture the network packets to locate the problems.
Finally, through packet capturing and log analysis, found in the local area network (LAN), ARP virus attacks are launched by MAC address spoofing not regularly attacks. As a result, the broadcast storm in the local area network, causing a large number of camera video recording is interrupted.
Suggestions
It is recommended that antivirus software be installed on a regular basis by security scanning and patching, inspection, and cleaning the LAN virus, ensure the network quality of the local area network(LAN).
Thanks for reading!
