白丝美女被狂躁免费视频网站,500av导航大全精品,yw.193.cnc爆乳尤物未满,97se亚洲综合色区,аⅴ天堂中文在线网官网

Firewall control device, method and firewall device

專利號(hào)
US10097515B2
公開日期
2018-10-09
申請(qǐng)人
FUJITSU LIMITED（JP Kawasaki）
發(fā)明人
Dai Suzuki
IPC分類
H04L29/06; G06F9/455
技術(shù)領(lǐng)域
fw,fwc,fws,entry,in,discarded,discarding,packets,address,packet
地域： Kawasaki-shi, Kanagawa

摘要

A firewall control device controls a plurality of firewall devices provided between a core network and a plurality of sub-networks respectively, the firewall control device is configured to receive, from the plurality of firewall devices, data amount information indicating an amount of the data discarded in the plurality of firewall devices respectively and node information indicating a transmission source node of the discarded data, identify, based on the data amount information and the node information, a data flow including the discarded data which is transmitted from an information processing device indicated by the node information and of which total amount of the discarded data exceeds a threshold value, and set, in a first firewall device which is included in the plurality of firewall devices and which is coupled to the information processing device, a first discarding flow entry defining discarding of data of the identified data flow.

說(shuō)明書

The FWC 7 checks whether or not a flow in which the total number of discarded packets exceeds the threshold value exists in a totalization result (processing operation P53 in FIG. 18). If no flow exceeding the threshold value exists (processing operation P53: NO), the FWC 7 may shift the processing to the processing operation P51.

If a flow exceeding the threshold value exists (processing operation P53: YES), the FWC 7 may generate an entry candidate list A (processing operation P54 in FIG. 18). In the example of FIG. 20, the total of the numbers of discarded packets of the respective flows A and B is “1168” packet and exceeds the threshold value of “1000” packets. Therefore, the FWC 7 may generate the entry candidate list A.

The FWC 7 may reference, for example, the all-FW entry table 721 and may register, in the entry candidate list A, an entry #1 for discarding a packet having the same transmission source address, protocol type, and port number as those of the flow A (the same applies to the flow B) (processing operation P54 in FIG. 18).

In other words, the FWC 7 may set the destination address as the wild card (*), may search, within the table 721, for the entry #1 for discarding a packet having the transmission source address=IP#1, the protocol type=UDP, and the port number=35, and may add the entry #1 to the entry candidate list A.

權(quán)利要求

1
微信群二維碼
意見反饋