Back to results
US 9,270,550 B2Granted
Session-based traffic analysis system
AssigneePlustech Oy
InventorKyu-Min Choi
Life of this patent
Estimating the term…
Abstract
The present invention relates to a session-based traffic analysis system that may accurately analyze an amount of traffic for each transmission control protocol (TCP) connection using only one-way packets. The system may accurately analyze an amount of two-way traffic using only one-way connection information.
Claims15
A session-based traffic analysis system to analyze two-way traffic based on one-way traffic, with respect to broadband traffic using a transmission control protocol (TCP), the session-based traffic analysis system comprising:
- at least one processor which implements a traffic mirror operatively coupled to a broadband network which monitors the one-way traffic transmitted from the broadband network on the TCP, the one-way traffic corresponding to either upstream traffic or downstream traffic;
- at least one processor which implements a traffic analysis subsystem operatively coupled to a nontransitory storage medium and operatively coupled to the traffic mirror to receive the traffic monitored thereby, the traffic analysis subsystem:
- extracts a sequence number and an acknowledgement number for each set of session information from the traffic monitored by the traffic mirror;
- updates an initial value and a final value for each of the extracted sequence number and the extracted acknowledgement number;
- determines an amount of traffic transmitted in a direction in which traffic is collected based on the initial value and the final value of the sequence number;
- determines an amount of traffic transmitted in a direction opposite to the direction in which traffic is collected based on the initial value and the final value of the acknowledgement number;
- and
- stores a traffic analysis result value in the nontransitory storage medium based at least in part on at least one of the determined amount of traffic transmitted in a direction in which traffic is collected or the determined amount of traffic transmitted in a direction opposite to the direction in which traffic is collected.
5 more elements
A traffic analysis system, the traffic analysis system comprising:
- at least one processor which implements a traffic mirror operatively coupled to a network which monitors one-way traffic on a transmission control protocol (TCP), the one-way traffic corresponding to either a first direction or a second direction, wherein traffic in the second direction is opposite to traffic in the first direction;
- at least one processor which implements a traffic analysis subsystem operatively coupled to the traffic mirror to receive the traffic monitored thereby, the traffic analysis subsystem:
- extracts a sequence number and an acknowledgement number for session information from the monitored one-way traffic;
- determines an initial value of the sequence number and a final value of the sequence number;
- determines an initial value of the acknowledgement number and a final value of the acknowledgement number;
- determines an amount of traffic in the first direction based on a difference between the initial value of the sequence number and the final value of the sequence number;
- and
- determines an amount of traffic in the second direction based on a difference between the initial value of the acknowledgement number and the final value of the acknowledgement number.
5 more elements
A traffic analysis method, the traffic analysis method comprising:
- monitoring, by a processor-based traffic mirror, one-way traffic on a transmission control protocol (TCP), the one-way traffic corresponding to either traffic in a first direction or traffic in a second direction;
- extracting, by a processor-based traffic analysis subsystem, a sequence number and an acknowledgement number for session information from the monitored one-way traffic;
- determining, by the processor-based traffic analysis subsystem, an initial value of the sequence number and a final value of the sequence number;
- determining, by the processor-based traffic analysis subsystem, an initial value of the acknowledgement number and a final value of the acknowledgement number;
- determining, by the processor-based traffic analysis subsystem, an amount of traffic in the first direction based on the initial value of the sequence number and the final value of the sequence number;
- determining, by the processor-based traffic analysis subsystem, an amount of traffic in the second direction based on the initial value of the acknowledgement number and the final value of the acknowledgement number,
- wherein traffic in the second direction is opposite to traffic in the first direction.
4 more elements
Dependencies are inferred from the claim text.