摘要 |
PROBLEM TO BE SOLVED: To realize a hierarchization flow identification function and thereby to improve processing performance and restrain power consumption and packaging density.SOLUTION: In a packet analysis device of the present invention, in the case where a search condition management unit instructs a DPI unit to register a search condition, the DPI unit registers the search condition, and a dedicated instruction unit calculates a signature in which a feature of a bit sequence of a search pattern included in the search condition is represented by a bit string, and instructs the DPI unit to register the calculated signature with a DPI signature table. The DPI unit registers the signature with the DPI signature table. If the DPI unit has received a packet of communication flow, the dedicated instruction unit calculates a signature of a bit sequence extracted from a payload of the packet, and determines whether the calculated signature accords with the signature registered with the DPI signature table. |