Back to results
US 2016/0255003 A1Published application
Network apparatus, communication system, abnormal traffic detection method, and program
AssigneeNEC Corporation
InventorKoji TABUCHI
Life of this patent
Estimating the term…
Abstract
A network apparatus includes a marking unit marking traffic that exceeds a predetermined rate limit, a measuring unit measuring an amount of the marked traffic, and a monitoring unit outputting the measured traffic amount in a period determined based on an expected duration time of abnormal traffic as a detection target.
Claims16
1-9. (canceled)
A switch apparatus, comprising:
- a memory storing an identifier corresponding to a predetermined packet processing rate;
- and
- a processor configured to execute instructions to:
- receive a packet from a node;
- determine whether an identifier in the received packet corresponds to the stored identifier;
- identify, when it is determined that the identifier in the received packet corresponds to the stored identifier, the received packet as a monitoring target packet;
- monitor the monitoring target packet;
- and
- process the monitoring target packet.
6 more elements
A switch apparatus, comprising:
- a memory storing a matching rule and an identifier corresponding to a predetermined packet processing rate;
- and
- a processor configured to execute instructions to:
- receive packets from a node;
- identify, based on the matching rule, a first packet;
- determine whether an identifier in a second received packet corresponds to the stored identifier;
- monitor the second packet when it is determined that the identifier in the second received packet corresponds to the stored identifier;
- and
- process the first packet and the second packet.
6 more elements
A communication system, comprising:
- a first switch apparatus configured to add an identifier to a packet, the identifier corresponding to a predetermined packet processing rate;
- and
- a second switch apparatus, comprising:
- a memory storing the identifier;
- and
- a processor configured to execute instructions to:
- receive a packet from a node;
- determine whether an identifier in the received packet corresponds to the stored identifier;
- identify, when it is determined that the identifier in the received packet corresponds to the stored identifier, the received packet as a monitoring target packet;
- monitor the monitoring target packet;
- and
- process the monitoring target packet.
9 more elements
A communication system, comprising:
- a first switch apparatus configured to add an identifier to a packet;
- and
- a second switch apparatus, comprising:
- a storage storing a matching rule and an identifier;
- and
- a processor configured to execute instructions to:
- receive packets from a node;
- identify, based on the matching rule, a first packet;
- determine whether an identifier in a second received packet corresponds to the stored identifier;
- monitor the second packet when it is determined that the identifier in the second received packet corresponds to the stored identifier;
- and
- process the first packet and the second packet.
9 more elements
A communication method, comprising:
- receiving a packet from a node;
- determining whether an identifier in the received packet corresponds to a stored identifier corresponding to a predetermined packet processing rate;
- identifying, when it is determined that the identifier in the received packet corresponds to the stored identifier, the received packet as a monitoring target packet;
- monitoring the monitoring target packet;
- and
- processing the monitoring target packet.
3 more elements
Dependencies are inferred from the claim text.