Traffic feature information extraction method, traffic feature information extraction device, and traffic feature information extraction program

A traffic feature information extraction device, comprising:

• a regular expression unit that extracts an item set in advance from a traffic log and represents a partial character string included in the item in a regular expression based on a predetermined rule;
• a clustering unit that clusters an entry of the traffic log represented in the regular expression;
• and
• a feature information extraction unit that extracts, as traffic feature information of each of clusters, an entry having a minimum total sum of distances among entries included in the traffic logs clustered by the clustering unit.

A non-transitory computer-readable recording medium having stored therein a traffic feature information extraction program that causes a computer to execute a process comprising:

• a regular expression procedure of extracting an item set in advance from a traffic log and represents a partial character string included in the item in a regular expression based on a predetermined rule;
• a clustering procedure of clustering an entry of the traffic log represented in the regular expression;
• and
• a feature information extraction procedure of extracting, as traffic feature information of each of clusters, an entry having a minimum total sum of distances among entries included in the traffic logs clustered in the clustering procedure.