Abstract:
An apparatus and a method for identify an application to which a packet flow belongs in a communication system. In the method, characteristic information of a first application is selected. Bit lines of a position designated by a mask included in the characteristic information are examined from packets transferred via the packet flow. A ratio of the number of examination results of coincidence to the number of all input packets is calculated. When the ratio exceeds a first threshold included in the characteristic information, it is determined that the packet flow belongs to the first application.