| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To efficiently specify a frequently appearing flow with respect to the definition of each flow. <P>SOLUTION: In a frequently appearing flow specification device 1, packet sampling is performed between the nodes of a communication network and information on a flow, to which a sampled packet belongs, is managed. When a frequently appearing flow that occupies bands is specified, a packet header is analyzed and the values of five attributes of "source IP address (srcIP)", "destination IP address (dstIP)", (source port number srcPort)", "destination port number (dstPort)" and "protocol (Protocol)" are read out. A group of packets (flows) having the same attribute values in a predetermined attribute set is extracted during a predetermined measuring period, the number of packets is counted, and a flow with the number of packets exceeding a predetermined threshold y* is specified as a frequently appearing flow. <P>COPYRIGHT: (C)2011,JPO&INPIT</p> |
