JP2011015151A - Device and method for controlling route, and program therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To decrease the number of capture devices needed to capture a protocol flow in a network.SOLUTION: When the protocol flow needs to be captured, a route control device 10 stores connection relation among respective repeating devices 20 in the network and information on repeaters 20 to which capture devices 40 are connected. Then the route control device 10 controls the repeaters 20 and capture devices 40 in the network, and changes the route of the protocol flow to a route passing through the capture devices 40. After the end of the capture, the route is returned to the original route.

Description

  The present invention relates to a technique for capturing packets flowing in a network.

  In an IP (Internet Protocol) network, a control protocol is used to control a route through which a packet flows and to provide various services such as Web, electronic mail, and IP telephone. This control protocol is used for setting and checking the status of the network itself and setting and checking the status of services provided on the network. Examples include SIP (Session Initiation Protocol) used for IP telephone call control, HTTP (HyperText Transfer Protocol) used for Web access, BGP (Border Gateway Protocol) used for packet flow path control, OSPF (Open Shortest Path First) and RIP (Routing Information Protocol).

  Here, there is a method of capturing the control protocol packet itself in order to distinguish a network failure caused by a control protocol setting error or bug from other failures.

  FIG. 5 is a diagram illustrating a configuration example of a network. The network includes a data transmitting / receiving device 30 (30A, 30B, 30C) that transmits a packet, and one or more relay devices 20 (20A to 20E) that transfer a packet from the data transmitting / receiving device 30. . The control protocol packet is transmitted from an arbitrary data transmission / reception device 30 and reaches another data transmission / reception device 30 via the relay device 20. Each of the relay devices 20 (20A, 20B, 20C) is connected to a capture device 40 (40A, 40B, 40C) that captures (collects) a control protocol flow (a series of flow of control protocol packets). The capture device 40 captures the control protocol flow transferred by the relay device 20. This protocol flow to be captured is called a target protocol flow.

  Although there are a plurality of selectable paths between the data transmitting / receiving apparatuses 30B and 30C shown in FIG. 5, regardless of which path is selected, it passes through the relay apparatuses 20B and 20C. Therefore, if at least one of the capture devices 40B and 40C connected to the relay devices 20B and 20C is used, the control protocol flow that flows between the data transmission / reception devices 30B and 30C can be captured. Here, when the capture device 40B is used, the packet of the target protocol flow (including packets other than the control protocol packet) flowing between the data transmitting / receiving devices 30B and 30C is copied to the capture device 40B to the relay device 20B. Configure settings to transfer. The capture device 40B displays or accumulates the contents of the packet transferred from the relay device 20B. As a result, a network administrator or the like can confirm a setting error or bug in the control protocol.

  As shown in FIG. 6, the capture device 40 is connected to the relay device 20 and captures the control protocol flow that flows through the relay device 20, as shown in FIG. There is also a type that performs capture by drawing a control protocol flow into the capture device 40 (40D).

Packet capture is [online], [Search June 3, 2009], Internet, <URL: http://www.infraexpert.com/study/span.htm> @It, understanding and verification of windows network protocol, [online], [Search June 3, 2009], Internet, <http://www.atmarkit.co.jp/fwin2k/operation/netanalysis01/netanalysis_01.html >

  However, in order to reliably capture a control protocol flow that flows between arbitrary data transmission / reception devices in the above-described network, it is necessary to install a capture device in a relay device in the vicinity of each data transmission / reception device. Therefore, there is a problem that the number of necessary capture devices increases as the network scale increases. Such a problem also occurs when capturing packets of protocol flows other than the control protocol flow. Accordingly, an object of the present invention is to solve the above-described problems and reduce the number of capture devices necessary for packet capture in a network.

  In order to solve the above-described problem, the present invention provides a path control apparatus that transmits a control signal to each relay apparatus that transfers a packet transmitted from a data transmitting / receiving apparatus in a network and performs path control. And a storage unit for storing inter-device connection information indicating connection information of each of the data transmitting / receiving device and the packet capturing device. When receiving the data transmission / reception device that is the transmission source of the packet to be captured and the data transmission / reception device that is the transmission destination, the path from the data transmission / reception device of the transmission source to the capture device and the The route from the device to the destination data transmitting / receiving device is calculated. Next, for each relay device on the path from the transmission source data transmission / reception device to the capture device, a setting content for transmitting a packet addressed to the transmission destination data transmission / reception device to the capture device is generated. In addition, for each relay device from the capture device to the transmission destination data transmission / reception device, a setting content for generating a packet addressed to the transmission destination data transmission / reception device to the transmission destination data transmission / reception device is generated. Further, a setting content for generating a packet addressed to the transmission destination data transmission / reception device to the capture device to the relay device serving as the next hop on the route to the transmission destination data transmission / reception device is generated. Then, a control signal indicating the generated setting content is transmitted to each relay device and capture device on the route.

  According to such a path control device, since the route of the packet to be captured is changed to a route that passes through the capture device, it is not necessary to install a capture device in a relay device in the vicinity of each data transmitting / receiving device. Therefore, the number of capture devices required for packet capture in the network can be reduced.

  Further, the routing control device of the present invention refers to the inter-device connection information, and transmits the packet to be captured from the data transmission / reception device that is the transmission source of the packet to be captured via the relay device to which the capture device is connected. Calculate the route to reach the destination data transceiver. In addition, the path control device, as a setting content for each relay device on the route from the transmission source data transmission / reception device to the relay device to which the capture device is connected, sends a packet addressed to the transmission destination data transmission / reception device to the capture device. A setting content to be transmitted to the connected relay device is generated. In addition, as a setting for each relay device from the relay device to which the capture device is connected to the data transmission / reception device of the transmission destination, a packet addressed to the data transmission / reception device of the transmission destination is transmitted to the data transmission / reception device of the transmission destination. Generate settings. And the control signal which shows this produced | generated setting content is transmitted to each relay apparatus on a path | route.

  According to such a path control device, since the route of the packet to be captured is changed to a route via the relay device to which the capture device is connected, it is necessary to install the capture device in a relay device in the vicinity of each data transmission / reception device Disappears. Therefore, the number of capture devices required for packet capture in the network can be reduced.

  Also, the route control device of the present invention deletes a route that passes through the same relay device or capture device a plurality of times in the calculated route.

  According to such a route control device, when calculating the route of the packet to be captured, the route can be prevented from including a loop.

  In addition, the program of the present invention is a program for causing a route control device, which is a computer, to execute a route control method used in the route control device.

  According to such a program, it is possible to cause a general computer to execute the path control method.

  According to the present invention, the number of capture devices necessary for packet capture in a network can be reduced.

It is the figure which showed the structural example of the network containing the route control apparatus of this Embodiment. FIG. 2 is a block diagram of the path control device of FIG. 1. It is the flowchart which showed the process sequence of the route control apparatus of FIG. It is the figure which showed the structural example of the network containing the route control apparatus of this Embodiment. It is the figure which showed the network used as a comparative example. It is the figure which showed the network used as a comparative example.

<Overview>
Hereinafter, the best mode for carrying out the present invention (hereinafter referred to as an embodiment) will be described. The network of the present embodiment is, for example, an IP network. As shown in FIG. 1, the data transmitting / receiving device 30 (30A, 30B, 30C) and the relay device 20 (20A, 20B, 20C, 20D, 20E) The capture device 40 and the path control device 10 are configured.

  The data transmitter / receiver 30 transmits and receives various protocol packets such as control protocol packets. This control protocol packet is, for example, a packet such as SIP, HTTP used for Web access, BGP, OSPF, RIP, etc. used for packet path control. The relay device 20 transfers protocol packets from the data transmitting / receiving device 30. The capture device 40 captures the protocol packet transferred from the relay device 20. The capture here refers to accumulation of transferred packets, output display on a display device or the like. Note that the relay device 20 and the capture device 40 perform routing control by performing routing setting based on a control signal transmitted from the route control device 10. That is, the path control device 10 performs routing control of the protocol flow that flows between the relay device 20 and the capture device 40 by performing routing settings of the relay device 20 and the capture device 40 in the network by remote control. The data transmission / reception device 30 is, for example, a computer that transmits / receives data, and the relay device 20 is realized by a router, a switch, or the like. The capture device 40 is realized by a computer or the like in which a capture program is installed.

  In the network shown in FIG. 1, when capturing a protocol flow that follows the path indicated by the thick broken line (the path of data transmitting / receiving apparatus 30A-relay apparatus 20A-relay apparatus 20B-data transmitting / receiving apparatus 30B), the following is performed. That is, the route control device 10 transmits a control signal for changing the route indicated by the thick broken line to the route indicated by the thick solid line, to each of the relay device 20 (20A, 20B, 20D, 20E) and the capture device 40. That is, the route control device 10 changes the route so that the capture target protocol flow is drawn into the capture device 40. When the path control device 10 performs such path control, the capture by the capture device 40 becomes possible, and the protocol flow can be captured without a large number of capture devices 40 in the network. The path control device 10 may return the protocol flow path to the original state (thick dashed path) after the capture by the capture device 40 is completed.

<Configuration>
Next, the configuration of the route control device 10 in FIG. 1 will be described with reference to FIG. The route control device 10 is largely divided into an input / output unit 11, a storage unit 13, and a processing unit 12. The input / output unit 11 is responsible for inputting various information used for determining the route of the protocol flow, and transmitting / receiving control signals to the relay device 20, the capture device 40, and the like. The storage unit 13 stores various types of information referred to when the processing unit 12 generates setting contents (routing settings) for the relay device 20 and the capture device 40. The processing unit 12 controls the entire route control device 10, and here mainly generates setting contents for the relay device 20 and the capture device 40.

  The input / output unit 11 is realized by a communication interface, an input / output interface, and a program execution process for communicating with the relay device 20, the capture device 40, and the like. The processing unit 12 is realized by a program execution process by a CPU (Central Processing Unit) included in the path control device 10, a dedicated circuit, or the like. Furthermore, the storage unit 13 is realized by a storage medium such as a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), and a flash memory. When the path control device 10 is realized by a program execution process, the storage unit 13 stores the program. Further, the route control device 10 includes an input device (for example, a keyboard and a mouse) for inputting various information to the route control device 10 and an output device (for example, a device for outputting a processing result by the processing unit 12). A liquid crystal monitor or the like) may be connected.

  The input / output unit (input unit) 11 includes a capture target protocol flow information input unit 111, a control signal transmission unit 112, and a reply signal reception unit 113.

  When receiving capture target protocol flow information from an input device (not shown) or the like, the capture target protocol flow information input unit 111 outputs this information to the control signal content determination unit 120. The capture target protocol flow information is information indicating identification information (for example, an IP address) of the transmission / reception data transmission device 30 and the transmission destination data transmission / reception device 30 of the capture target protocol flow (target flow). .

  The control signal transmission unit 112 converts the setting contents for each device (the relay device 20 and the capture device 40) output from the processing unit 12 into a control signal for controlling each device, and transmits the control signal to each device.

  The reply signal receiving unit 113 receives a reply signal for the control signal from each device. This reply signal is a signal including status information indicating the success or failure of the setting in the device to which the control signal is transmitted. The reply signal receiving unit 113 outputs the received reply signal to the processing unit 12.

  The storage unit 13 stores path setting target device information 131 and inter-device connection information 132.

  The route setting target device information 131 is information indicating setting information of devices (the relay device 20 and the capture device 40) that can be controlled by the route control device 10. As shown in Table 1, the setting information is information indicating an IP address of each device, a user name for logging in to each device, a password, and the like. This setting information is used when the route control device 10 transmits a control signal to each device, logs in, and changes the routing setting of each device.

  The inter-device connection information 132 is information indicating the connection relationship of each device (relay device 20, capture device 40, data transmission / reception device 30) in the network. For example, as shown in Table 2, for each device, This is information indicating the IP address of the device directly connected to the device, that is, the next hop device. As illustrated in Table 2, since the inter-device connection information 132 includes information of the relay device 20 to which the capture device 40 is connected, the path calculation unit 1201 (described later) uses the inter-device connection information 132 as the information. By referencing, a route that draws the target flow into the capture device 40 can be calculated.

  The inter-device connection information 132 is created using, for example, a Traceroute command. This Traceroute command is a command often used in Unix (registered trademark) and Windows (registered trademark), and is connected between a command issuing device (for example, the route control device 10) and a device having a specified IP address. Collect the IP address of each device that is being used. For example, when a network configuration change or the like occurs, the route control device 10 can issue the Traceroute command again to know the changed network configuration. Thereby, the inter-device connection information 132 can be updated.

  Further, the route setting target device information 131 and the inter-device connection information 132 will be described as being input to the storage unit 13 in advance. However, the route control device 10 is provided by an external device including a network facility management database or the like. You may make it acquire.

  The processing unit 12 includes a control signal content determination unit 120, a transmission signal generation unit 121, a control unit 122, and a reception signal confirmation unit 123.

  The control signal content determination unit 120 refers to the path setting target device information 131 and the inter-device connection information 132 to determine the content of the control signal to be transmitted to each device (capture device 40 and relay device 20). The control signal content determination unit 120 includes a route calculation unit 1201 and a setting content generation unit 1202.

  The route calculation unit 1201 refers to the inter-device connection information 132 and calculates a route from the data transmission / reception device 30 that is the transmission source of the target flow to the data transmission / reception device 30 that is the transmission destination via the capture device 40. To do. Details of the route calculation will be described later using a flowchart.

  The setting content generation unit 1202 reads the setting information of each relay device 20 on the route calculated by the route calculation unit 1201 and the setting information of the capture device 40 from the route setting target device information 131. Then, the setting content generation unit 1202 generates the setting content (routing setting) of each relay device 20 on the calculated route. Here, the setting content generation unit 1202 sends a packet addressed to the destination data transmitting / receiving device 30 to the capturing device 40 for each relay device 20 on the path from the source data transmitting / receiving device 30 to the capturing device 40. To generate a routing setting to send. In addition, a packet addressed to the destination data transmitting / receiving device 30 is transmitted to each relay device 20 from the capture device 40 to the destination data transmitting / receiving device 30 toward the destination data transmitting / receiving device 30. Generate a routing configuration. Also, the setting content generation unit 1202 transmits the packet addressed to the destination data transmitting / receiving device 30 to the capture device 40 to the relay device 20 serving as the next hop on the route to the destination data transmitting / receiving device 30. Generate a routing setting to that effect. By performing such routing setting in each device, the packet to the data transmission / reception device 30 that is the transmission destination of the target flow is once transmitted to the capture device 40 and then reaches the data transmission / reception device 30 that is the transmission destination. Can be. The setting content generation unit 1202 that has generated such a routing setting generates setting content including setting information of each device on the route in the routing setting, and outputs the setting content to the control unit 122. Details of the processing of the setting content generation unit 1202 will be described later using a flowchart.

  The transmission signal generation unit 121 instructs the control signal transmission unit 112 to transmit a control signal indicating the setting content output from the control unit 122.

  The control unit 122 controls the entire processing unit 12. The control unit 122 outputs the setting content generated by the setting content generation unit 1202 to the transmission signal generation unit 121. Further, it is determined from the received signal output from the received signal confirmation unit 123 (a signal indicating whether the setting is successful or unsuccessful in the relay device 20 or the capture device 40) whether to transmit the control signal again. Details of the processing of the control unit 122 will be described later using a flowchart.

  The reception signal confirmation unit 123 extracts status information indicating the success or failure of the setting in the device from the packet transmitted from the capture device 40 or the relay device 20 via the reply signal reception unit 113 and outputs the status information to the control unit 122. .

<Processing procedure>
Next, the processing procedure of the path control device 10 will be described with reference to FIG. 2 and FIG.

  The capture target protocol flow information input unit 111 of the path control device 10 receives input of the capture target protocol flow information from the input device or the like (S1). That is, input of information such as the IP addresses of the transmission / reception data transmission device 30 and transmission destination data transmission / reception device 30 of the control flow is accepted. Then, the capture target protocol flow information input unit 111 outputs the input information to the control signal content determination unit 120.

  The control signal content determination unit 120 reads the inter-device connection information 132 and the route setting target device information 131 from the storage unit 13 (S2).

  Then, the route calculation unit 1201 of the control signal content determination unit 120 is connected to the transmission source of the target flow (data transmission / reception device 30 of the transmission source) from the read inter-device connection information 132 (see Table 2). And the information of the device connected to the transmission destination of the target flow (data transmission / reception device 30 of the transmission destination) are identified (S3). For example, in the case of the target flow transmission source: the data transmission / reception device 30A and the target flow transmission destination: the data transmission / reception device 30B in the network configuration shown in FIG. 1, the relay device 20A is specified as the device connected to the data transmission / reception device 30A. The relay device 20B is identified as a device connected to the data transmitting / receiving device 30B.

  The route calculation unit 1201 refers to the inter-device connection information 132, and connects the transmission source of the target flow (data transmission / reception device 30 of the transmission source) and the capture device 40, and the transmission destination of the target flow (data transmission / reception of the transmission destination). All paths connecting the device 30) and the capture device 40 are calculated (S4). That is, the route calculation unit 1201 refers to the inter-device connection information 132, and transmits the source data such as the relay device 20 connected to the source data transmitting / receiving device 30 and the relay device 20 connected to the relay device 20. The relay device 20 group through which the transmission / reception device 30 reaches the capture device 40 is specified. In addition, the data transmission / reception device 30 of the transmission destination is also captured from the data transmission / reception device 30 of the transmission destination such as the relay device 20 connected to the data transmission / reception device 30 of the transmission destination and the relay device 20 connected to the relay device 20. The group of relay devices 20 through which the device 40 is reached is specified. Then, the route calculation unit 1201 obtains a route connecting the transmission source (data transmission / reception device 30 of the transmission source) of the target flow and the capture device 40. Further, a route connecting the transmission destination of the target flow (data transmission / reception device 30 as the transmission destination) and the capture device 40 is obtained. When the route calculation unit 1201 obtains a route connecting the data transmission / reception device 30 that is the transmission source of the target flow and the capture device 40 and a route connecting the data transmission / reception device 30 that is the transmission destination of the target flow and the capture device 40. , Combine these. For example, in the network configuration illustrated in FIG. 1, a route of data transmission / reception device 30A-relay device 20A-relay device 20D-capture device 40-relay device 20E-relay device 20B-data transmission / reception device 30B is obtained. In such a process, a path connecting the transmission source of the target flow (data transmission / reception device 30 of the transmission source) and the capture device 40, and a transmission destination of the target flow (data transmission / reception device 30 of the transmission destination) and the capture device 40 are connected. Run until you find all the patterns related to the route. Then, the calculated list of route groups is stored in a predetermined area of the storage unit 13.

  Next, the route calculator 1201 deletes the route group calculated in S4 that causes a routing loop (S5). That is, the route calculation unit 1201 deletes the route group calculated in S4 that passes through the same device a plurality of times. For example, in the path group calculated in S4, data transmission / reception device 30A-relay device 20A-relay device 20D-relay device 20E-relay device 20D-capture device 40-relay device 20E-relay device 20B-data transmission / reception device 30B. If a route is included, this route is deleted. Thereby, the route of the change destination of the target flow is determined. Here, if there are a plurality of paths to which the target flow is changed, one of the paths is selected.

  Then, the setting content generation unit 1202 sets login information (IP address, user name, password, etc.) necessary for setting each device (relay device 20 and capture device 40) on the route after the change of the target flow. Read from the target device information 131 (S6). For example, the setting content generation unit 1202 reads the login information of the relay devices 20A and 20D, the capture device 40, and the relay devices 20E and 20B from the route setting target device information 131.

  Next, the setting content generation unit 1202 determines the content of the control signal to each device (the relay device 20 and the capture device 40) on the route after the change of the target flow (S7). That is, the contents of the routing setting for each device are determined, and a control signal indicating the contents is generated. Here, the setting content generation unit 1202 sends the destination data transmission / reception device 30 to each device (relay device 20) on the path from the data transmission / reception device 30 that is the transmission source of the target flow to the capture device 40. Is generated to transmit to the capture device 40. Further, each device (relay device 20) from the capture device 40 to the data transmission / reception device 30 that is the transmission destination of the target flow receives a packet addressed to the data transmission / reception device 30 that is the transmission destination. A setting content to be transmitted to the device 30 is generated. Further, the capture device 40 sends a packet addressed to the data transmission / reception device 30 that is the transmission destination of the target flow to the relay device 20 that is the next hop of the route from the capture device 40 to the data transmission / reception device 30 that is the transmission destination of the target flow. Generate settings to send.

  For example, when the path after the change of the target flow is data transmission / reception device 30A-relay device 20A-relay device 20D-capture device 40-relay device 20E-relay device 20B-data transmission / reception device 30B, relay devices 20A, 20D Needs to make the packet of the target flow reach the capture device 40. Further, the relay devices 20E and 20B must cause the packet of the target flow to reach the data transmitting / receiving device 30B, and the capture device 40 needs to reach the packet of the target flow to the relay device 20E. For this reason, for relay devices 20A and 20D, setting contents for transmitting a packet addressed to data transmitting / receiving device 30B to capture device 40 are generated. In addition, for relay devices 20E and 20B, a setting content for transmitting a packet addressed to data transmitting / receiving device 30B to data transmitting / receiving device 30B is generated. Further, for the capture device 40, a setting content for generating a packet addressed to the data transmission / reception device 30B to the relay device 20E is generated.

  The control signal indicating the setting contents here may be a signal using a protocol specific to the relay device 20 or the capture device 40, or may be a signal using a standardized path control protocol. The setting content generation unit 1202 outputs the protocol used for control of each device and the setting content for each device to the transmission signal generation unit 121 via the control unit 122. The transmission signal generation unit 121 instructs the control signal transmission unit 112 to transmit a control signal indicating the setting content output from the control unit 122. That is, the user name and password indicated in the setting information are logged in to each device (relay device 20 and capture device 40) on the route after the change of the target flow, and the setting content determined in S7 is input (S8). Here, the control unit 122 confirms the presence / absence of a response from the apparatus that has input the setting contents from the reception signal confirmation unit 123 (S9). If there is no response from the device that has input the setting (Yes in S9), and the control signal has not been transmitted a predetermined number of times (setting input) (No in S10), the process returns to S8. . On the other hand, in S9, if there is a response from the apparatus that has input the setting (No in S9), the process proceeds to S12. In S10, if the control unit 122 has already transmitted a control signal (setting input) a predetermined number of times to the device (Yes in S10), it is determined that the setting to the device has failed. (S11), to that effect, is output to a display device (not shown) connected to the route control device 10. Then, the process proceeds to S12.

  In S12, the control unit 122 determines whether or not the setting has been input for all devices on the route after the change of the target flow, and for all devices on the route to which the target flow is changed. If the setting has been input (Yes in S12), the process is terminated. On the other hand, if there is an apparatus that has not been turned on (No in S12), the process returns to S7.

  When the path control device 10 performs the above processing, the target flow goes through the capture device 40. Therefore, the capture device 40 can capture the capture target flow.

  When capture by the capture device 40 is being executed, the control unit 122 of the route control device 10 moves the flow number of the capture target flow, the data transmission / reception device 30 of the transmission source, and the data transmission / reception device 30 of the transmission destination to this route. You may make it display on the display apparatus etc. which are connected to the control apparatus 10. FIG. By doing in this way, the network administrator or the like can know that the capture target flow is currently performing capture and that the path is being changed for capture.

  Note that when receiving an input of a capture end command via the input / output unit 11, the path control device 10 may return the target flow to the path before the change. That is, when receiving the input of the capture end command, the control signal content determination unit 120 of the path control device 10 controls the control unit to return the setting to the original state for each device on the path after the change of the target flow. A command is sent to the transmission signal generator 121 via 122. As a result, each apparatus returns the setting contents to the state before the path change, and the capture target flow returns to the original path. At this time, the control unit 122 may display on the display device or the like that the path of the capture target flow has returned to the original path.

  In the above-described embodiment, the capture device 40 is described as being installed between the relay devices 20 and capturing a flow flowing between the relay devices 20, but the present invention is not limited to this. For example, as shown in FIG. 4, the capture device 40 may capture a flow that flows through the relay device 20 (relay device 20 </ b> D) to which the capture device 40 is connected. When such a capture device 40 is used, the route calculation unit 1201 of the route control device 10 determines from the data transmission / reception device 30 (for example, the data transmission / reception device 30A) that is the transmission source of the target flow as the route after the change of the target flow. A route that passes through the relay device 20 (for example, the relay device 20D) to which the capture device 40 is connected may be calculated up to the data transmission / reception device 30 (for example, the data transmitter / receiver 30B) of the transmission destination. That is, the route calculation unit 1201 calculates a route from the data transmission / reception device 30A to the relay device 20D to which the capture device 40 is connected and a route from the data transmission / reception device 30B to the relay device 20D, and combines the routes. This is the route after the change of the target flow.

  In such a case, the setting content generated by the setting content generation unit 1202 of the route control device 10 is as follows. That is, the setting content generation unit 1202 adds the relay device group (relay device 20A) up to one hop before the relay device 20D to which the capture device 40 is connected among the relay devices 20 on the route calculated by the route calculation unit 1201. On the other hand, a setting content for generating a packet addressed to the data transmitting / receiving device 30B to the relay device 20D is generated. In addition, for the relay device group (relay devices 20D, 20E, 20B) from the relay device 20D to the destination data transmission / reception device 30B, a setting is made to transmit packets addressed to the data transmission / reception device 30B to the data transmission / reception device 30B. Generate content. These settings are converted into control signals and transmitted to the relay device 20 (relay devices 20A, 20D, 20E, and 20B) on the route calculated by the route calculation unit 1201. By doing so, the protocol flow is changed to a path indicated by a thick solid line in FIG. 4, and capture by the capture device 40 becomes possible.

  In the above-described embodiment, the case where one capture device 40 is installed in the network has been described as an example. However, a plurality of capture devices 40 may be installed in the network. In this case, the route calculation unit 1201 of the route control device 10 calculates a route that passes through at least one capture device 40 (or the relay device 20 to which the capture device 40 is connected) of the capture devices 40. Good. The selection of the capture device 40 to be routed may be based on a selection input from a network administrator or the like, or the hops from the data transmission / reception device 30 that is the transmission source of the flow to be changed and the data transmission / reception device 30 that is the transmission destination The capture device 40 having the smallest number may be used.

  Furthermore, although the capture device 40 in the network has been described as a separate device from the relay device 20 in the above-described embodiment, these may be realized as one device. That is, instead of the relay device 20 to which the capture device 40 is connected in the network, a relay device having a capture function may be used. Further, when the relay device 20 itself has a function of transmitting a control signal to each other device and setting each device, the relay device 20 itself may change the path of the target flow as described above. Good.

DESCRIPTION OF SYMBOLS 10 Path control device 11 Input / output unit 12 Processing unit 13 Storage unit 20 Relay device 30 Data transmission / reception device 40 Capture device 111 Capture target protocol flow information input unit 112 Control signal transmission unit 113 Reply signal reception unit 120 Control signal content determination unit 121 Transmission Signal generation unit 122 Control unit 123 Received signal confirmation unit 131 Route setting target device information 132 Inter-device connection information 1201 Route calculation unit 1202 Setting content generation unit

Claims (5)

A route control device that transmits a control signal to each relay device that transfers a packet transmitted from a data transmission / reception device in a network and performs route control,
A storage unit for storing inter-device connection information indicating connection information of each of the relay device, the data transmission / reception device, and the packet capture device;
An input unit that receives a data transmission / reception device that is a transmission source of a packet to be captured and a data transmission / reception device that is a transmission destination;
With reference to the inter-device connection information, a route calculation unit that calculates a route from the data transmission / reception device of the transmission source to the capture device, and a route from the capture device to the data transmission / reception device of the transmission destination,
For each relay device on the path from the transmission source data transmission / reception device to the capture device, a setting content is generated to transmit a packet addressed to the transmission destination data transmission / reception device to the capture device, and the capture For each relay device from the device to the destination data transmission / reception device, a setting content is generated to transmit a packet addressed to the transmission destination data transmission / reception device to the destination data transmission / reception device, and the capture device On the other hand, a setting content generation unit that generates a setting content indicating that a packet addressed to the data transmission / reception device of the transmission destination is transmitted to a relay device that is a next hop on a route to the data transmission / reception device of the transmission destination;
A path control device comprising: a control signal transmission unit configured to transmit a control signal indicating the generated setting content to each relay device and the capture device on the route. The route calculation unit refers to the inter-device connection information and calculates a route from the transmission source data transmission / reception device to the transmission destination data transmission / reception device via the relay device to which the capture device is connected. And
The setting content generation unit, as setting content for each relay device on a path from the data transmission / reception device of the transmission source to the relay device to which the capture device is connected, a packet addressed to the data transmission / reception device of the transmission destination, The transmission destination is generated as the setting content for each relay device from the relay device to which the capture device is connected to the data transmission / reception device of the transmission destination by generating the setting content to be transmitted to the relay device to which the capture device is connected. Generating the setting content to transmit a packet addressed to the data transmission / reception device to the data transmission / reception device of the transmission destination,
The path control device according to claim 1, wherein the control signal transmission unit transmits a control signal indicating the generated setting content to each relay device on the path.   3. The route calculation unit according to claim 1, wherein when the calculated route includes a route that passes through the same relay device or capture device a plurality of times, the route calculation unit deletes the route. The routing control device according to 1. A route control method for performing a path control by transmitting a control signal to each relay device for transferring a packet transmitted from a data transmitting / receiving device in a network,
A path control device including a storage unit that stores connection information between devices indicating connection information of the relay device, the data transmission / reception device, and a packet capture device,
Receiving a data transmission / reception device of a transmission source and a data transmission / reception device of a transmission destination of a packet to be captured;
With reference to the inter-device connection information, calculating a path from the transmission source data transmission / reception apparatus to the capture apparatus and a path from the capture apparatus to the transmission destination data transmission / reception apparatus;
For each relay device on the path from the transmission source data transmission / reception device to the capture device, a setting content is generated to transmit a packet addressed to the transmission destination data transmission / reception device to the capture device, and the capture For each relay device from the device to the transmission destination data transmission / reception device, a setting content for generating a packet addressed to the transmission destination data transmission / reception device to the transmission destination data transmission / reception device is generated, and the capture device On the other hand, generating a setting content indicating that a packet addressed to the data transmission / reception device of the transmission destination is transmitted to a relay device serving as a next hop on a route to the data transmission / reception device of the transmission destination;
And a step of transmitting a control signal indicating the generated setting content to each relay device and the capture device on the route.   The program for making the said route control apparatus which is a computer perform the route control method of Claim 4.

Images