| 摘要 |
<p>The present invention relates to a system for detecting an IP sharing router, and more particularly, to a system for detecting an illegal IP sharing router which is unauthorized. A system for detecting an IP sharing router according to the present invention includes a packet collecting module for collecting a packet data necessary to detect an IP sharing router among IP packets on an Ethernet network; at least one queue memory for storing a packet having an activated SYB flag among TCP packets, or at least one piece of user-agent information among HTTP data and IP-ID information of an IP header; an IP-ID analysis module for analyzing an IP-ID information increment pattern of the IP header varied with an elapsed time to analyze whether at least two IP-ID increment patterns are detected for an arbitrary time at the same time; and a sharing router determination module for determining an IP sharing router when at least two IP-ID increment patterns corresponding to a single IP are detected at the same time.</p> |
