Abstract:
본 발명은 고속의 인터넷 회선으로부터 패킷을 수집하기 위해서 지금까지 분석 소프트웨어에서 수행되던 샘플링 기능과 시그너쳐 검색 기능을 하드웨어로 구현한 IP 패킷 수집 장치 및 그 방법에 관한 것이다. 본 발명에 따르면, 지금까지 분석 소프트웨어에서 수행되던 샘플링 기능과 시그너쳐 검색 기능을 FPGA(Field Programmable Gate Array) 하드웨어로 구현함으로써 고속의 인터넷 회선에 대한 트래픽 수집에 요구되는 많은 컴퓨팅 자원을 줄일 수 있으며 보다 정확한 실시간 분석이 가능한 모니터링 시스템을 효율적으로 구축할 수 있다. IP 패킷 수집, 플로우 샘플링, 시그너쳐 검색, 모니터링, FPGA
Abstract:
본 발명은 인터넷 고속회선에서의 플로우 분산 측정 방법 및 그 장치에 관한 것이다. 본 발명에 따르면, 회선의 신호를 복제하여 전송하는 신호 복제기와, 패킷수신모듈에 해쉬처리 기능이 있는 플로우 측정기가 있는 환경에서 여러 대의 플로우 측정기를 이용하여 회선 상에 존재하는 모든 플로우를 수집할 수 있는 방법이 제공된다. 또한, 본 발명은 인터넷 회선에서 플로우 정보를 수집하기 위하여 플로우 측정기를 사용할 때 한대의 측정기로 처리가 힘든 과부하가 발생하는 경우에 여러 대의 플로우 측정기를 사용함으로써 이를 해결할 수 있다. 플로우정보, 회선, 패킷, 해쉬함수
Abstract:
본 발명에 따르면 인터넷 트래픽의 분석 결과를 응용 프로그램 별로 분류하여 저장하기 위한 DBMS 스키마 및, 새로운 인터넷 응용 프로그램이 등장하거나 기존의 인터넷 응용 프로그램의 특성이 변화하였을 때 DBMS 스키마를 자동으로 변경하는 인터넷 트래픽 분석 시스템 및 방법 그리고 DBMS 스키마 변경 방법이 제시된다. 상기 DBMS 스키마 변경 방법에 따르면, 응용 프로그램의 종류 및 특성을 명시하는 인터넷 응용 설정 파일의 내용이 변경되었을 경우 그 내용을 분석하여 DBMS 스키마를 변경할 수 있다. 인터넷 트래픽, DBMS, DBMS 스키마
Abstract:
PURPOSE: A device for collecting IP packets including header information of a link layer is provided to define a common part for analysis, and to realize the defined common part in hardware system, then to make analysis software for configuring a monitoring system lighter, thereby constructing a network monitoring system which can measure in real time. CONSTITUTION: A network interface connection port(200) receives bit stream-type traffic. A PPS(Precise Positioning Service) port(206) generates a precise time stamp. A framer(201) makes the traffic inputted through the network interface connection port(200) into a PDU packet of a link layer. An FPGA(Field Programmable Gate Array)(202) records IP length and IP packets collected according to the designated length in an FIFO buffer(207) by detecting the generated time stamp information and the header of an IP frame and the length of the IP frame, and performs a designated filtering function. A booter(210) performs an initialization process. FIFO buffers(203,204) supply buffer functions for transmitting data between the FPGA(202) and a MPC(Micro Processor Controller)(205).
Abstract:
PURPOSE: A system and a method for measuring network performance by using a command line interface of a router are provided to perform measurement by using a CLI(Common Line Interface) of a router without using an additive measuring apparatus when measuring delay and loss of a packet with ping-based. CONSTITUTION: A user interface(10) produces a measuring schedule and then stores it to a schedule storage device(103). A schedule engine(104) receives the measuring schedule stored to the schedule storage device(103) and commands measuring instructions relating to designated time and object to a proxy server(105) on the basis of the measuring schedule. The proxy server(105) connects a router as a measuring object on the basis of the measuring instructions of the schedule engine(104), performs the given measurement and transmits the measuring result to the schedule engine(104).
Abstract:
PURPOSE: A system and a method for measuring network performance are provided to simultaneously measure the performance of each section using a passive measuring device when a test packet generated from an active measuring device moves from end to end. CONSTITUTION: A system for measuring network performance is comprised of a server(101), active measuring devices(102,105), and passive measuring devices(103,104). The server(101) creates a measurement schedule and transmits it to each measuring device(102-105). Also the server(101) receives measured results from the measuring devices(102-105), analyzes them, and outputs analyzed results. Each active measuring device(102,105) generates a test packet according to the created measurement schedule and transmits it to another active measuring device. Also each active measuring device(102,105) receives a test packet from another active measuring device(102,105), calculates network performance, and transmits a measured result to the server(101). Each passive measuring device(103,104) monitors and collects test packets according to the measurement schedule and transmits a measured result to the server(101).
Abstract:
PURPOSE: An address providing apparatus is provided to offer an address of a necessary shortcut route by providing the shortcut route address using a function of an address resolution protocol(ARP) server as an interface. CONSTITUTION: An ARP server(14) serves as functions of receiving, processing and answering an address resolution request(13) from a terminal(11) or a router(12). A policy manager(18) finds related policy from a policy information database(21) and serves as a decision-making function with regard to a shortcut route establishment of the required address. A route server(16) determines the shortcut route based on information of a topology database(17), which is established by a topology information update function(20) and is used to determine a route at an IP layer. An address information update function(19) provides mapping information of IP and ATM addresses and is stored in an address table(15).
Abstract:
PURPOSE: A simulation apparatus for estimating router performance is provided to estimate affect of the router performance to point to point quality by simulating at a network situation similar to a real situation. CONSTITUTION: A simulation apparatus for estimating router performance comprises a simulation control and edition part(11) which designs a virtual network and processes and parses a result after simulation. The simulation control edition and part(11) has a simulation designer(111) that is used for a virtual network simulation design and has a resource editor(113), a network design editor(114), and a network property editor(115). A simulation engine part(15) extracts network constituent element values from databases(12,13,14) to construct network simulation. A router connection configuration part(16) has a simulation time adjuster(161), a packet converter(162) and a physical connection function(163). When not using the configuration part(16), the simulation apparatus is configured so as to operate as a network simulator on a computer.