白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專利號
US10097515B2
公開日期
2018-10-09
申請人
FUJITSU LIMITED(JP Kawasaki)
發(fā)明人
Dai Suzuki
IPC分類
H04L29/06; G06F9/455
技術(shù)領(lǐng)域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域: Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說明書

In such a situation, in a set time period (may be called a “unit time period” or a “measurement time period”), the FW #4 collects information of packets discarded in accordance with a flow entry (may be abbreviated to “discarded-packet information”) for each of the flows A and B.

The discarded-packet information may exemplarily include header information of the discarded packets. The header information may include a transmission source address, a service identifier, and a destination address. The transmission source address, the service identifier, and the destination address are examples of parameters able to be set in a packet header.

The service identifier is an example of a parameter able to identify the service type of communication. The service identifier may be exemplarily expressed by a combination of the protocol type of packet and a port number thereof. In this regard, however, the service identifier may be replaced with another parameter.

While the transmission source address and the destination address may be exemplarily IP addresses, the transmission source address and the destination address may be addresses based on another communication protocol.

The discarded-packet information may be exemplarily totalized for each of packets each having an identical transmission source address, an identical destination address, and an identical service identifier (exemplarily includes a protocol type and a port number). FIG. 9 illustrates an example of a totalization result of the discarded-packet information.

權(quán)利要求

1
微信群二維碼
意見反饋