Packet capture device and packet capture method

A packet capture device which captures packets that flow in a communication network, and stores the packets captured into a secondary storage device, the packet capture device comprising:

• a capture unit which sequentially captures packets that flow in the communication network at 200 Gbps without dropping any of the packets;
• a control unit which temporarily holds the packets captured by the capture unit;
• and
• an interface which stores the packets temporarily held in the control unit into the secondary storage device,
• wherein the control unit includes:
• two Non-Uniform Memory Access (NUMA) nodes included in a NUMA architecture;
• and a communication path which connects a first processor and a second processor, the two NUMA nodes being a first NUMA node including the first processor and a first memory and a second NUMA node including the second processor and a second memory,
• the capture unit includes:
• a first capture unit which is connected to the first NUMA node, captures packets that flow in the communication network, and stores the packets captured into the first memory;
• and
• a second capture unit which is connected to the second NUMA node, captures packets that flow in the communication network in parallel with the capturing by the first capture unit, and stores the packets captured into the second memory,
• the interface includes:
• a first interface which is connected to the first NUMA node, and stores the packets stored in the first memory into the secondary storage device;
• and
• a second interface which is connected to the second NUMA node, and stores the packets stored in the second memory into the secondary storage device in parallel with the storing by the first interface, and
• first processing and second processing are performed in parallel, the first processing being processing in which the packets captured by the first capture unit are stored into the first memory included in the first NUMA node without passing through the communication path, and then stored into the secondary storage device via the first interface connected to the first NUMA node and the second processing being processing in which the packets captured by the second capture unit are stored into the second memory included in the second NUMA node without passing through the communication path, and then stored, into the secondary storage device via the second interface connected to the second NUMA node.

A packet capture method for capturing packets that flow in a communication network, and storing the packets captured into a secondary storage device, the packet capture method, comprising:

• a capture step of sequentially capturing packets that flow in the communication network at 200 Gbps without dropping any of the packets;
• and
• a store step of storing the packets captured in the capture step into the secondary storage device,
• wherein the capture step includes:
• a first capture step of capturing packets that flow in the communication network, and storing the packets captured into a first memory included in a first Non-Uniform Memory Access (NUMA) node included in a NUMA architecture;
• and
• a second capture step of capturing the packets that flow in the communication network in parallel with the capturing in the first capture step, and storing the packets captured into a second memory included in a second NUMA node included in the NUMA architecture,
• the store step includes:
• a first store step of storing the packets stored in the first memory into the secondary storage device;
• and
• a second store step of storing the packets stored in the second memory into the secondary storage device in parallel with the storing in the first storing step, and
• in the first capture step, the second capture step, the first store step, and the second store step, the packets do not pass through a communication path which connects a first processor included in the first NUMA node and a second processor included in the second NUMA node.