Method and apparatus for transferring packets in network with monitoring of malicious packets

摘要

In a packet transfer apparatus with a function of preventing transfer of invalid packets, a segment determination unit (16) determines a transmitting destination network segment of a packet which has not been abandoned as an invalid packet in a packet analysis unit (13) with reference to a routing table (160). A MAC address rewrite unit (17) rewrites a MAC address of the received packet to a MAC address of a device such as a server on a transmitting destination network segment. A packet transmission unit (18A, 18B) transmits the packet whose MAC address has been rewritten to a connecting destination network segment.