摘要 |
<p><P>PROBLEM TO BE SOLVED: To totally and efficiently verify setting of a packet filter. <P>SOLUTION: Regarding a set combining a source IP address and a source port number, sample points are selected respectively from each of areas to which a plurality of rules to be verified are singly corresponding, each of areas to which a plurality of arbitrary rules in the plurality of rules are commonly corresponding, and areas to which all the plurality of rules are not corresponding, in the entire set. A protocol and a destination IP address are fixedly set to an attribute being commonly set between the rules, a combination of the source IP address and the source port number is sequentially changed and set to each of the selected sample points, and a verification packet which is set by sequentially changing a destination port number for each sample point within a suitable range is sequentially generated. The verification packet generated sequentially is inputted to the packet filter, the packet filter is operated and setting of the filter is verified. <P>COPYRIGHT: (C)2008,JPO&INPIT</p> |