NETWORK DEVICE, COMMUNICATION SYSTEM, METHOD FOR DETECTING ABNORMAL TRAFFIC, AND PROGRAM

摘要

According to the present invention, abnormal traffic to be detected can be observed without increase in load. A network device is provided with: a marking unit which marks traffic exceeding a predetermined limit rate; a measurement unit which measures the amount of the marked traffic; and an observation unit which outputs the measured amount of traffic during a period determined in accordance with an assumed continuation time for the abnormal traffic to be detected.