公开(公告)号：US20080089233A1

公开(公告)日：2008-04-17

申请号：US11866586

申请日：2007-10-03

申请人： Toshio Shimojo ,  Yoshinori Watanabe

发明人： Toshio Shimojo ,  Yoshinori Watanabe

IPC分类号： H04L12/56

CPC分类号： H04L41/00 ,  H04L43/026 ,  H04L63/08 ,  H04L63/1416 ,  H04L63/145

摘要： When abnormal traffic is detected, an abnormal traffic detection apparatus that detects the abnormal traffic reports information of the detected abnormal traffic to a management server. The management server specifies a user transmitting he abnormal traffic from an authentication server by using transmitting user information of the abnormal traffic contained in the abnormal traffic information reported. An abnormal traffic countermeasure method for each user, that is prescribed in advance and corresponds to a user transmitting the abnormal traffic, is transmitted to the abnormal traffic detection apparatus. The abnormal traffic detection apparatus executes setting for traffic control in accordance with the countermeasure method.

摘要翻译： 当检测到异常流量时，检测异常流量检测装置向管理服务器检测检测到的异常流量的信息。 管理服务器通过使用报告的异常业务信息中包含的异常业务的发送用户信息，指定从认证服务器发送异常业务的用户。 向异常业务量检测装置发送针对与用户发送异常业务对应的预先规定的每个用户的异常交通对策方法。 异常交通检测装置根据对策方法执行交通控制的设定。

公开(公告)号：US07788721B2

公开(公告)日：2010-08-31

申请号：US11621631

申请日：2007-01-10

申请人： Shinsuke Suzuki ,  Toshio Shimojo

发明人： Shinsuke Suzuki ,  Toshio Shimojo

IPC分类号： H04J3/16

CPC分类号： H04L47/10 ,  H04L41/12 ,  H04L41/22 ,  H04L43/00 ,  H04L43/026 ,  H04L43/0894

摘要： Flow information of excessive traffic detected by a traffic monitor of a packet forwarding apparatus is entirely delivered to a manager server. By combining input/output port information of the flow and topology information, the manager server calculates from where the flow is inputted and to where the flow is outputted. By further combining results of judgment of traffic contents, the manager server controls the traffic at an optimal position according to the traffic contents. The problems of inefficiency can be avoided by managing the flow information by the manager server in a concentrated way. Adding the flow information to the network topology drawing for each flow, it is possible for the network administrator to more easily understand the statuses of flows on the network.

摘要翻译： 由分组转发装置的流量监视器检测到的过多流量的流量信息被完全传递给管理服务器。 通过组合流量和拓扑信息的输入/输出端口信息，管理服务器从流输入的位置和输出流程计算。 通过进一步组合业务内容判断结果，管理服务器根据流量内容控制最佳位置的流量。 通过管理服务器以集中的方式管理流量信息，可以避免低效率的问题。 将流量信息添加到每个流的网络拓扑图中，网络管理员可以更容易地了解网络上的流的状态。

公开(公告)号：US07680114B2

公开(公告)日：2010-03-16

申请号：US11366443

申请日：2006-03-03

申请人： Takeki Yazaki ,  Toshio Shimojo

发明人： Takeki Yazaki ,  Toshio Shimojo

IPC分类号： H04L12/56 ,  H04J3/24

CPC分类号： H04L63/1458 ,  H04L49/3009

摘要： To provide a packet forwarding device which minimizes degradation in packet forwarding performance at the time of execution of filtering there is provided a technique in which a destination decision processing unit of a destination decision and filtering unit decides whether to execute filtering on the basis of at least one of an input interface, an input port number, an output interface, and an output port number of an input packet and a plurality of pieces of information constituting the header of the packet. A filtering unit executes filtering only for a packet for which execution of filtering is decided. The packet forwarding device with the destination decision and filtering unit need not execute filtering for all packets and can minimize degradation in packet forwarding performance caused by filtering.

摘要翻译： 为了提供最小化在执行滤波时的分组转发性能的劣化的分组转发设备，提供了一种技术，其中目的地决策和过滤单元的目的地决策处理单元至少基于至少执行过滤 一个输入接口，一个输入端口号，一个输出接口和一个输入端口号，以及构成数据包标题的多条信息。 过滤单元仅对决定执行过滤的分组执行过滤。 具有目的地决策和过滤单元的分组转发设备不需要对所有分组执行过滤，并且可以最小化由过滤引起的分组转发性能的劣化。

公开(公告)号：US07894441B2

公开(公告)日：2011-02-22

申请号：US12694430

申请日：2010-01-27

申请人： Takeki Yazaki ,  Toshio Shimojo

发明人： Takeki Yazaki ,  Toshio Shimojo

IPC分类号： H04L12/56 ,  H04J3/24

CPC分类号： H04L63/1458 ,  H04L49/3009

摘要： To provide a packet forwarding device which minimizes degradation in packet forwarding performance at the time of execution of filtering there is provided a technique in which a destination decision processing unit of a destination decision and filtering unit decides whether to execute filtering on the basis of at least one of an input interface, an input port number, an output interface, and an output port number of an input packet and a plurality of pieces of information constituting the header of the packet. A filtering unit executes filtering only for a packet for which execution of filtering is decided. The packet forwarding device with the destination decision and filtering unit need not execute filtering for all packets and can minimize degradation in packet forwarding performance caused by filtering.

摘要翻译： 为了提供最小化在执行滤波时的分组转发性能的劣化的分组转发设备，提供了一种技术，其中目的地决策和过滤单元的目的地决策处理单元至少基于至少执行过滤 一个输入接口，一个输入端口号，一个输出接口和一个输入端口号，以及构成数据包标题的多条信息。 过滤单元仅对决定执行过滤的分组执行过滤。 具有目的地决策和过滤单元的分组转发设备不需要对所有分组执行过滤，并且可以最小化由过滤引起的分组转发性能的劣化。

公开(公告)号：US20070047548A1

公开(公告)日：2007-03-01

申请号：US11366443

申请日：2006-03-03

申请人： Takeki Yazaki ,  Toshio Shimojo

发明人： Takeki Yazaki ,  Toshio Shimojo

IPC分类号： H04L12/56

CPC分类号： H04L63/1458 ,  H04L49/3009

摘要： To provide a packet forwarding device which minimizes degradation in packet forwarding performance at the time of execution of filtering there is provided a technique in which a destination decision processing unit of a destination decision and filtering unit decides whether to execute filtering on the basis of at least one of an input interface, an input port number, an output interface, and an output port number of an input packet and a plurality of pieces of information constituting the header of the packet. A filtering unit executes filtering only for a packet for which execution of filtering is decided. The packet forwarding device with the destination decision and filtering unit need not execute filtering for all packets and can minimize degradation in packet forwarding performance caused by filtering.

摘要翻译： 为了提供最小化在执行滤波时的分组转发性能的劣化的分组转发设备，提供了一种技术，其中目的地决策和过滤单元的目的地决策处理单元至少基于至少执行过滤 一个输入接口，一个输入端口号，一个输出接口和一个输入端口号，以及构成数据包标题的多条信息。 过滤单元仅对决定执行过滤的分组执行过滤。 具有目的地决策和过滤单元的分组转发设备不需要对所有分组执行过滤，并且可以最小化由过滤引起的分组转发性能的劣化。

公开(公告)号：US20070177600A1

公开(公告)日：2007-08-02

申请号：US11621631

申请日：2007-01-10

申请人： Shinsuke Suzuki ,  Toshio Shimojo

发明人： Shinsuke Suzuki ,  Toshio Shimojo

IPC分类号： H04L12/56 ,  H04J1/16

CPC分类号： H04L47/10 ,  H04L41/12 ,  H04L41/22 ,  H04L43/00 ,  H04L43/026 ,  H04L43/0894

摘要： Flow information of excessive traffic detected by a traffic monitor of a packet forwarding apparatus is entirely delivered to a manager server. By combining input/output port information of the flow and topology information, the manager server calculates from where the flow is inputted and to where the flow is outputted. By further combining results of judgment of traffic contents, the manager server controls the traffic at an optimal position according to the traffic contents. The problems of inefficiency can be avoided by managing the flow information by the manager server in a concentrated way. Adding the flow information to the network topology drawing for each flow, it is possible for the network administrator to more easily understand the statuses of flows on the network.

摘要翻译： 由分组转发装置的流量监视器检测到的过多流量的流量信息被完全传递给管理服务器。 通过组合流量和拓扑信息的输入/输出端口信息，管理服务器从流输入的位置和输出流程计算。 通过进一步组合业务内容判断结果，管理服务器根据流量内容控制最佳位置的流量。 通过管理服务器以集中的方式管理流量信息，可以避免低效率的问题。 将流量信息添加到每个流的网络拓扑图中，网络管理员可以更容易地了解网络上的流的状态。