METHOD FOR MONITORING A TABLE OF ADAPTIVE FLOWS AND DIRECTING A FLOOD ATTACK OF A WIDEBAND PACKET DATA TRANSMISSION NETWORK AND CORRESPONDING ANALYZING EQUIPMENT

摘要

The invention concerns a method for monitoring adaptive flows of a network. For one type of message (M<SUB>i</SUB>) carried by the flows, it consists (A) in extracting from flow descriptors (FD), the attributes of the flow (FA) and associating the latter with a relevant flow to define a plurality of candidate flows (CF); calculating (B) for each candidate flow (CF) a memory zone potential address (HA) in the table of flows, based on the destination address (DA) of the candidate flow; writing or not (C) the attributes of each of the candidate flows to a potential address (HA(DA)), accompanied by an updating of the value of the number of messages (CNM<SUB>i</SUB>) of that type of message, based on non-existence respectively conditional existence criterion of attributes of an existing flow in the potential address memory zone (HA(DA)). The conditional existence criterion of attributes comprises at least the identity or absence of identity of the candidate flow (CF) and of the existing flow (EF) and the superiority of the candidate flow volume (FV) over the existing flow volume (F'V). The invention is useful for monitoring and protecting IP networks against flood attacks.