| 摘要 |
A method and apparatus for identifying a device acting as a server on a network is disclosed which uses network data representing communications on the network. The network data contains source device, destination device, data transfer protocol and data volume information for each communication represented therein and may be collected by network traffic monitors or packet capture devices such as RMON2 probes on the network. Data relating to relevant server protocols is identified within the network data, and using the identified data, a device is determined to be acting as a server if it has the highest data volume for communications in which it is the source or destination device, provided the communications involve at least a threshold number of other devices. The method may be conveniently implemented in a computer program and may be used in conjunction with a network management application.
|
