| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To distribute a memory optimally for minimizing probability that a mass flow generation host is lost erroneously in a method for locating the mass flow generation host, where the number of flows generated for unit time exceeds a threshold by using data obtained from flow measurement. <P>SOLUTION: By using a method of allocating a memory optimally in a method of identifying a mass flow generation host for identifying a host, where the number of flows generated per unit time becomes not less than a threshold by using only statistical data obtained by flow sampling, the amount of mounted memory is allocated to a Bloom filter used for determining a new flow and a host table for storing the number of sample flows for each sampled host, so that the possibility is minimized that the mass flow generation host is lost erroneously. When the amount of mounted memory B and a specified determination threshold Y are given, the Bloom filter and the entire parameter of the host table are derived. <P>COPYRIGHT: (C)2008,JPO&INPIT</p> |
