Method, switching device and packet capturing system

A switching device configured to be coupled to a network, the switch device comprising:

• a memory;
• and
• a processor coupled to the memory, the processor being configured to:
• receive a first packet transmitted through the network,
• generate a first mirror packet of the received first packet by performing a first mirroring processing on the received first packet, the first mirror packet including first identification information identifying the first mirror packet,
• generate a first time stamp packet including the first identification information and first time information indicating a first time when the first mirroring processing is performed, and
• transmit the generated first mirror packet and the generated first time stamp packet.

A packet capturing system configured to be coupled to a network, the packet capturing system comprising:

• a switching device including a first memory and a first processor coupled to the first memory;
• and
• a capturing device including a second memory and a second processor coupled to the second memory, wherein
• the first processor is configured to:
• receive a first packet transmitted through the network,
• generate a first mirror packet of the received first packet by performing a first mirroring processing on the received first packet, the first mirror packet including first identification information identifying the first mirror packet,
• generate a first time stamp packet including the first identification information and first time information indicating a first time when the first mirroring processing is performed, and
• transmit the generated first mirror packet and the generated first time stamp packet, and
• the second processor is configured to:
• store, in a storage device, the first mirror packet and the first time stamp packet transmitted from the switching device.