| 摘要 |
<P>PROBLEM TO BE SOLVED: To provide a network monitoring method, system, device and program, capable of dynamically extracting an address group available for monitoring from a actually-used network to operate a monitoring server using the acquired address group. <P>SOLUTION: A network monitoring system comprises a traffic analysis device, a traffic transfer device, internal hosts and monitoring servers. The traffic analysis device includes means for analysing traffic from an external host to the internal host in a network, extracting the internal host which, when detecting a communication request from the external host to the internal host in a fixed period, returns no response and transmits no communication request to the external host, and registering a set of addresses of the internal hosts corresponded to identifiers of the monitoring servers in a monitoring address list. The traffic transfer device includes means for referring to the monitoring address list, and transmitting a packet to an address of the internal server to the monitoring server corresponded to the address of the internal server. The monitoring server includes means for receiving the packet transferred from the traffic transfer device, processing the packet in place of the internal host of an original address in the packet, and for transmitting a processed result to a transmission source of the packet. <P>COPYRIGHT: (C)2012,JPO&INPIT |
