JP2006254134A5 - - Google Patents
Download PDFInfo
- Publication number
- JP2006254134A5 JP2006254134A5 JP2005068338A JP2005068338A JP2006254134A5 JP 2006254134 A5 JP2006254134 A5 JP 2006254134A5 JP 2005068338 A JP2005068338 A JP 2005068338A JP 2005068338 A JP2005068338 A JP 2005068338A JP 2006254134 A5 JP2006254134 A5 JP 2006254134A5
- Authority
- JP
- Japan
- Prior art keywords
- flow
- packet
- information
- statistical information
- transfer
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 230000000875 corresponding Effects 0.000 claims 8
- 238000004364 calculation method Methods 0.000 claims 3
- 230000005540 biological transmission Effects 0.000 claims 2
- 238000000034 method Methods 0.000 claims 2
- 238000001914 filtration Methods 0.000 claims 1
- 238000007619 statistical method Methods 0.000 claims 1
Claims (9)
フロー識別条件と対応して、フローを識別するフロー識別情報を定義した少なくとも1つのフロー識別情報テーブルを有し、
上記検索処理部が、各受信パケットのヘッダ情報から生成したフロー検索キーに従って上記フローテーブルを検索し、フロー検索キーに該当するフローエントリが存在しなかった場合に新たにフロー識別情報の割り当てを行うフローテーブル管理部を有し、
受信したパケットを転送するか廃棄するかを決定するパケット転送処理部を有し、
上記パケット転送処理部の判定結果毎に、上記フロー識別情報に対応して統計情報を収集する統計収集部を1つ以上有することを特徴とする通信統計情報収集装置。 Flow from the above flow table using a flow search key that is a combination of a flow table consisting of a plurality of flow entries defining flow identification conditions for identifying packet flows and a plurality of header information items extracted from the headers of network received packets. In a communication statistical information collection device that has a search processing unit that searches for a flow entry having a flow identification condition corresponding to a search key, and that collects statistical information for each packet flow using the search result of the flow table,
Corresponding to the flow identification condition, it has at least one flow identification information table defining flow identification information for identifying a flow
The search processing unit searches the flow table according to the flow search key generated from the header information of each received packet, and newly assigns flow identification information when there is no flow entry corresponding to the flow search key. Have a flow table manager,
A packet transfer processing unit for deciding whether to forward or discard a received packet;
A communication statistical information collecting apparatus, comprising: one or more statistical collection units that collect statistical information corresponding to the flow identification information for each determination result of the packet transfer processing unit.
上記フィルタテーブルの検索結果と、QoSテーブルの検索結果に基づきパケットを転送するか廃棄するかを決定するパケット転送処理部を有し、
上記パケット転送処理部の判定結果毎に上記フロー識別情報に対応して統計情報を収集する統計収集部を有することを特徴とする請求項1に記載の通信統計情報収集装置。 Aside from the above flow table, a filtering table capable of setting a plurality of information combinations indicating whether or not to discard a packet corresponding to a combination of a plurality of header information items extracted from the packet header, and a packet header A QoS table capable of setting a plurality of combinations of information indicating the transfer priority of the packet in the device corresponding to the combination of the plurality of extracted header information items, and another search process for searching the filter table and the QoS table Part
A packet transfer processing unit for determining whether to transfer or discard the packet based on the search result of the filter table and the search result of the QoS table;
The communication statistical information collection device according to claim 1, further comprising a statistical collection unit that collects statistical information corresponding to the flow identification information for each determination result of the packet transfer processing unit.
And a statistical information notifying unit that collects statistical information of the same packet flow based on flow identification information from the one or more statistical information collecting units and notifies the statistical analysis device of the collected statistical information. The communication statistical information collection device according to claim 1, claim 2, claim 3, or claim 4.
上記演算部は、上記送受信部から受信したデータに対してフローごとに転送するか廃棄するかの判定を行い、 The calculation unit determines whether to transfer or discard the data received from the transmission / reception unit for each flow,
上記演算部は、上記判定結果および上記フローごとの統計情報を記憶することを特徴とするデータ転送装置。 The calculation unit stores the determination result and the statistical information for each flow.
上記フローを識別する情報は、上記受信したデータのヘッダから抽出される一のヘッダ情報項目または複数のヘッダ情報項目の組合せであることを特徴とするデータ転送装置。The information for identifying the flow is a data transfer apparatus characterized in that it is one header information item or a combination of a plurality of header information items extracted from the header of the received data.
上記メモリには、上記フローごとの転送優先度の情報が記憶されており、The memory stores information on transfer priority for each flow,
上記演算部は、上記転送優先度に基づいて、上記判定を行うことを特徴とするデータ転送装置。The data transfer device, wherein the arithmetic unit performs the determination based on the transfer priority.
上記メモリには、上記判定の結果廃棄すると判定されたフローについて、該廃棄の判定の要因と該要因が発生した箇所のうち少なくともいずれか一つを示す情報が記憶されていることを特徴とするデータ転送装置。 In the memory, information indicating at least one of a factor of the discard determination and a location where the factor has occurred is stored for the flow determined to be discarded as a result of the determination. Data transfer device.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2005068338A JP2006254134A (en) | 2005-03-11 | 2005-03-11 | Communication statistic collection apparatus |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2005068338A JP2006254134A (en) | 2005-03-11 | 2005-03-11 | Communication statistic collection apparatus |
Publications (2)
Publication Number | Publication Date |
---|---|
JP2006254134A JP2006254134A (en) | 2006-09-21 |
JP2006254134A5 true JP2006254134A5 (en) | 2008-01-24 |
Family
ID=37094136
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
JP2005068338A Pending JP2006254134A (en) | 2005-03-11 | 2005-03-11 | Communication statistic collection apparatus |
Country Status (1)
Country | Link |
---|---|
JP (1) | JP2006254134A (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP7104201B2 (en) | 2021-03-19 | 2022-07-20 | アラクサラネットワークス株式会社 | Packet relay device and packet relay method |
Families Citing this family (16)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP4742013B2 (en) * | 2006-11-29 | 2011-08-10 | 富士通株式会社 | Data transfer apparatus and data transfer method |
WO2008108403A1 (en) * | 2007-03-06 | 2008-09-12 | Nec Corporation | Node device, node system, and method and program for changing statistics information management table used for the node device |
JP4871775B2 (en) * | 2007-04-06 | 2012-02-08 | アラクサラネットワークス株式会社 | Statistical information collection device |
WO2009022953A1 (en) * | 2007-08-15 | 2009-02-19 | Telefonaktiebolaget Lm Ericsson (Publ) | Monitoring individual data flow performance |
JP5014282B2 (en) * | 2008-08-06 | 2012-08-29 | アラクサラネットワークス株式会社 | Communication data statistics apparatus, communication data statistics method and program |
JP5233504B2 (en) * | 2008-08-25 | 2013-07-10 | 富士通株式会社 | Route control apparatus and packet discarding method |
JP5309924B2 (en) * | 2008-11-27 | 2013-10-09 | 富士通株式会社 | Packet processing apparatus, network device, and packet processing method |
JP5476857B2 (en) * | 2009-08-24 | 2014-04-23 | 富士通株式会社 | Communication apparatus and statistical information collection method |
JP2011151470A (en) * | 2010-01-19 | 2011-08-04 | Alaxala Networks Corp | Service diagnosis system, and network relay device |
JP5299856B2 (en) | 2010-04-19 | 2013-09-25 | 日本電気株式会社 | Switch and flow table control method |
CN103379039B (en) * | 2012-04-23 | 2016-12-14 | 华为技术有限公司 | A kind of for flowing the method for statistics, Apparatus and system |
JP6112556B2 (en) * | 2013-07-24 | 2017-04-12 | アラクサラネットワークス株式会社 | Packet relay device and discarded packet information collection system |
JP6692178B2 (en) * | 2016-02-23 | 2020-05-13 | 株式会社日立製作所 | Communications system |
JP6652912B2 (en) * | 2016-12-21 | 2020-02-26 | アラクサラネットワークス株式会社 | Network device and abnormality detection system |
JP6934758B2 (en) * | 2017-06-28 | 2021-09-15 | アラクサラネットワークス株式会社 | Packet relay device and packet relay method |
WO2021149245A1 (en) * | 2020-01-24 | 2021-07-29 | 日本電信電話株式会社 | Conversion device, conversion method, and conversion program |
Family Cites Families (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH08130538A (en) * | 1994-10-31 | 1996-05-21 | Hitachi Ltd | Packet repeating method and inter-network equipment |
JP3626017B2 (en) * | 1998-08-07 | 2005-03-02 | 富士通株式会社 | Fixed-length data processor |
JP4410432B2 (en) * | 2001-05-09 | 2010-02-03 | 株式会社日立製作所 | Flow search method |
JP2003078549A (en) * | 2001-08-31 | 2003-03-14 | Hitachi Ltd | Packet transferring method and device |
JP4341413B2 (en) * | 2003-07-11 | 2009-10-07 | 株式会社日立製作所 | PACKET TRANSFER APPARATUS HAVING STATISTICS COLLECTION APPARATUS AND STATISTICS COLLECTION METHOD |
-
2005
- 2005-03-11 JP JP2005068338A patent/JP2006254134A/en active Pending
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP7104201B2 (en) | 2021-03-19 | 2022-07-20 | アラクサラネットワークス株式会社 | Packet relay device and packet relay method |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP2006254134A5 (en) | ||
CN108282497B (en) | DDoS attack detection method for SDN control plane | |
JP2006005402A5 (en) | ||
US9485155B2 (en) | Traffic analysis of data flows | |
JP4983671B2 (en) | Traffic analysis device, traffic analysis method, and traffic analysis system | |
CN101729389B (en) | Flow control device and method based on flow prediction and credible network address learning | |
CN105745870B (en) | Extend operation from for detecting the serial multistage filter flowed greatly removal nose filter to remove stream to realize | |
EP3059908B1 (en) | Tracking fragmented data flows | |
JP2007336512A5 (en) | ||
CN108429761B (en) | DDoS attack detection and defense method for resource adaptation analysis server in intelligent cooperative network | |
CN105187437B (en) | A kind of centralized detecting system of SDN network Denial of Service attack | |
Lu et al. | ElephantTrap: A low cost device for identifying large flows | |
CN104753863A (en) | DDoS (Distributed Denial of Service) attack prevention method, device and system | |
CN102882881A (en) | Data filtering method for denial of service attack on DNS service | |
JPWO2008108403A1 (en) | Node device, node system, statistical information management table replacement method and program used for the node device | |
RU2010138321A (en) | MULTILEVEL MESSAGE FILTERING | |
WO2018120915A1 (en) | Ddos attack detection method and device | |
EP2530873B1 (en) | Method and apparatus for streaming netflow data analysis | |
JP4860745B2 (en) | BGP traffic fluctuation monitoring apparatus, method, and system | |
CN101316268B (en) | Detection method and system for exception stream | |
CN113162939A (en) | Detection and defense system for DDoS (distributed denial of service) attack under SDN (software defined network) based on improved k-nearest neighbor algorithm | |
KR100681000B1 (en) | Flow measuring device and method | |
CN115134849A (en) | Data acquisition algorithm based on 5G gateway | |
JP2004289806A5 (en) | ||
JP5798530B2 (en) | Packet processing apparatus and packet processing method |