트래픽 패턴-맵을 이용한 네트워크 트래픽 이상 상태 표시 및 검출 방법
장범환, 나중찬, 방효찬, 이수형, 김현주, 김건량, 김진오, 김동영, 손승원, 장종수, 손선경
- 7849187 (2010.12.07)
- A network status display device using a traffic pattern map is provided. The device includes: a traffic feature extractor extracting a port number of a port having the maximum occupancy of micro-flows and macro-flows for each network address section and host address section with reference to traffic information collected by an external traffic information collector, calculating and storing an occupancy rate of the port; a traffic status display unit making a network traffic pattern map expressed by destination-source network addresses and a host traffic pattern map expressed by destination-source host addresses and displaying the port information stored in the traffic feature extractor on the network traffic pattern map and the host traffic pattern map; and a traffic anomaly determination unit determining whether a network status is abnormal with reference to the network traffic pattern map and the host traffic pattern map and detecting and reporting a harmful or abnormal traffic which causes the abnormal network status. The device can determine whether the anomaly deteriorating the network performance exists and can easily and quickly detect the harmful or abnormal traffic which causes the anomaly by the use of the port information of the port having the maximum occupancy of the micro-flows and the macro-flows for each network address section and each host address section.
- KSP 제안 키워드
- Abnormal traffic, Display device, External traffic, Micro-flow, Network Traffic, Network performance, Network status, Occupancy rate, Traffic anomalies, Traffic pattern, Traffic status, feature extractor, pattern map, traffic information