Packet capture apparatus, packet capture method, and computer readable medium having a packet capture program

A packet capture apparatus comprising:

• the packet capture apparatus communicating with a computer including:
• a packet capturing part to receive packets through a packet communication network;
• a data extracting-storing part to acquire target packets including specific information from the received packets, extract the target packets of each session, and store the extracted target packets in a data storage part;
• a capture on-off time estimating part estimating a capture cycle, a capture width, and a capture start time based on information about the target packets to determine a start time and an end time of reception of the packets based on the capture cycle, the capture width, and the capture start time, the capture cycle being a time period during which the reception of the packets is performed, the capture width being a time period during which the reception of the packets is continued, the capture start time being a time when the reception of the packets is started;
• a capture on-off time setting part to set the start time and the end time;
• and
• a capture on-off controlling part configured to set intermittent packet reception by the packet capturing part, and
• wherein the packet capturing part receives the packets during a time period from a time when the capture on-off controlling part instructs the capture start time to a time when the capture on-off controlling part instructs the end time of the reception, and
• wherein the packet capturing part receives packets through the packet communication network during a predetermined estimated capture period, and
• wherein the data extracting-storing part acquires the target packets from the packets received during the estimated capture period, extracts the target packets of each session, and stores the extracted target packets in the data storage part in according with the reception time of each target packet, and
• the capture on-off time estimating part estimates the capture cycle, the capture width, and the capture start time based on information indicating a reception state of the packets received during the estimated capture period.

A packet capture method performed by a computer including packet capturing part to receive packets from a packet communication network and data storage unit to store the received packets, the packet capture method comprising:

• receiving packets through a packet communication network;
• acquiring target packets including specific information from the received packets, extracting the target packets of each session, and storing the extracted target packets in the data storage unit;
• estimating a capture cycle, a capture width, and a capture start time based on information indicating a reception state of the packets through a packet communication network;
• determining a start time and an end time of the reception of the packets based on the capture cycle, the capture width, and the capture start time, the capture cycle being a time period during which the reception of the packets by the packet capturing part is performed, the capture width being a time period during which the reception of the packets is continued, the capture start time being a time when the reception of the packets is started;
• setting the start time and the end time;
• performing a control with the start time and the end time being set;
• and
• receiving the packets during a time period from a time when an instruction is received regarding the capture start time to a time when an instruction is received regarding the end time of reception.

A non-transitory computer-readable storage medium storing a packet capture program causing a computer to execute an operation, the operation comprising:

• receiving packets through a packet communication network;
• acquiring target packets including specific information from the received packets, extracting the target packets of each session, and storing the extracted target packets in a data storage part;
• estimating a capture cycle, a capture width, and a capture start time based on information indicating a reception state of the packets received by the packet capturing part and to determine a start time and an end time of the reception of the packets based on the capture cycle, the capture width, and the capture start time, the capture cycle being a time period during which the reception of the packets is performed, the capture width being a time period during which the reception of the packets is continued, the capture start time being a time when the reception of the packets is started;
• setting the start time and the end time in control of the reception of the packets;
• using the start time and the end time being set to control intermittent packet reception;
• and
• receiving the packets during a time period from a time when an instruction is received regarding the capture start time to a time when an instruction is received regarding the end time.