APPARATUS AND METHOD FOR MERGING INTERNET TRAFFIC WHICH IS MIRRORED ON THE MULTIPLE LINK

摘要

An apparatus and a method for merging Internet traffic collected from a plurality of lines are provided to process traffic collected from the Internet to generate a merged flow to thereby facilitate a traffic analysis and detailed application analysis. A traffic collecting unit(210) collects traffic from a plurality of points of an Internet line. A traffic classifying unit(220) analyzes the collected traffic to classify them into traffic each having the same characteristics. A uni-directional traffic merging unit(240) merges forward traffic classified by the traffic classifying unit to generate forward merged traffic, and merges reverse traffic to generate reverse merged traffic. A bi-directional merging unit(250) merges again the forward merged traffic and the reverse merged traffic merged by the uni-directional merging unit to generate bi-directional merged traffic. The traffic characteristics include a key value and a reverse key value of traffic. A flow creation unit(260) creates a merging flow by using a merging traffic created in the uni-directional traffic merging unit and the bi-directional merging unit.