SERVER OPERATION INFORMATION ACQUISITION DEVICE, METHOD, AND COMPUTER PROGRAM

摘要

[PROBLEMS] To provide a mechanism for acquiring an operation log from a client without causing a load on a server and the client regardless of the serer type or the OS. [MEANS FOR SOLVING PROBLEMS] A server operation information acquisition device includes: a definition storage unit which stores a method expressing an operation on a server from a client terminal and a command corresponding to the method; an acquisition unit which acquires a packet transmitted and received between the server and the client terminal; a filtering unit which judges a protocol from data in the acquired packet and selects a packet corresponding to a predetermined protocol; an analysis unit which references information specifying a client in the selected packet and the definition storage unit so as to identify a method corresponding to the acquired packet command; and an analysis result storage unit which stores log data containing a date and time when the method occurred, information for identifying a client, and the analyzed method.