摘要 |
<p><P>PROBLEM TO BE SOLVED: To construct technology capable of specifying a massive-amount-of-flow generation host. <P>SOLUTION: In a method for specifying a massive-amount-of-flow generation host, a new flow judgment apparatus 103 judges whether a flow sampled in a measuring period is a new flow or not. When the new flow judgment apparatus 103 judges a flow as a new flow, the number of flows in the host concerned is updated in a host table 104. A massive-amount-of-flow generation host specification apparatus 105 specifies the host in which the number of flows in the host table 104 is a predetermined threshold Y and more as a large flow generation host. A flow sampling apparatus 102 samples flows at flow sampling probability (f). A parameter design apparatus 101 designs the flow sampling probability (f) and the threshold Y. The flow sampling probability (f) and the threshold Y designed by the parameter design apparatus 101 are respectively set in the flow sampling apparatus 102 and the massive-amount-of-flow generation host specification apparatus 105. <P>COPYRIGHT: (C)2007,JPO&INPIT</p> |