| 摘要 |
The present invention discloses a method for detecting abnormal network packets, which is applied to a packet distributing unit in a network. The packet distributing unit exchanges a plurality of network packets with a plurality of network devices on an extranet, and records a destination IP address, a destination port number and a network packet output time of the network packets specifically outputted within at least two time periods, every time before the packet distributing unit sends these specific output network packets out, then the packet distributing unit compares these specific output network packets in different time periods to determine whether or not there are data having the same output time, same destination IP address and same destination port number; if yes, then the packet distributing unit issues a warning report.
|
