摘要 |
A traffic analysis apparatus includes: a packet transmitter/receiver; a packet aggregating unit, for adding the number of packets that employ the same values for items in a combination that includes one arbitrary item or multiple items in packets obtained by the packet transmitter/receiver; a variety aggregating unit, for adding the number of appearances of different values in the items that are not included in the combination; and a packet estimation unit for, when the total number of packets is greater than a designated threshold value, employing a relationship between the values of the items of the combination formed of one arbitrary item or multiple items, the number of appearances of different values and the threshold value, and estimating the characteristics of the packets for which the number has exceeded the threshold value.
|