Traffic monitoring device and traffic monitoring program

A traffic monitoring device, comprising:

• one or more processors;
• and
• a storage device storing a program to be executed by the one or more processors, the program including instructions for:
• acquiring traffic statistical information of a flow in a monitoring target network;
• determining whether the acquired traffic statistical information satisfies a predetermined reference for failure detection;
• capturing packets of the flow determined to satisfy the predetermined reference as packets at a time of failure occurrence in the flow;
• and
• dynamically updating the predetermined reference while acquiring traffic statistical information of the flow in the monitoring target network.

A method for monitoring traffic in a network, comprising:

• acquiring, by an information processor, traffic statistical information of a flow in the network;
• determining, by the information processor, whether the acquired traffic statistical information satisfies a predetermined reference for failure detection;
• capturing, by a packet capturer, packets of the flow determined to satisfy the predetermined reference as packets at a time of occurrence of a failure of the flow;
• and
• dynamically updating, by the information processor, the predetermined reference based on time from a time source while the information processor is in operation.