EXCESSIVE FLOW DETECTING APPARATUS, EXCESSIVE FLOW DETECTING CIRCUIT, TERMINAL APPARATUS, AND NETWORK NODE

摘要

PROBLEM TO BE SOLVED: To monitor excessive traffics higher than the presumed or preset frequency band with a small-sized circuit not depending on the number of flows.

SOLUTION: A packet data extracting circuit 102 extracts the preset key data (for example, destination data or source data) from a receiving packet. A HASH value calculating circuit 104 generates m (a plurality of) pieces of pseudo random numbers (HASH value) of the fixed length from the extracted data. A cache table 106 holds the key data and accumulated packet length within the predetermined period using the generated pseudo random number as the address. When it is detected that the accumulated packet length exceeds a value of a threshold value holding/comparing circuit 114, a message signal is sent to a judging means within the packet exchange. The key data and the accumulated value of packet length are stored in the hash table 106 based on the receiving packet by leaving the data having long accumulated packet length and erasing the data having short accumulated packet length.

COPYRIGHT: (C)2009,JPO&INPIT