JP4846663B2 - IP packet tracking device - Google Patents

Description

  The present invention relates to an IP packet tracking apparatus for acquiring information for specifying a passage route of an IP packet transmitted through an IP network.

  In an IP network, an IP packet is transmitted from a source node to which a source terminal device is connected to a destination node to which a destination terminal device is connected via a number of nodes constituting the network.

  In each node that relays an IP packet, when multiple routes can be selected, considering the various factors such as the number of hops, changes in traffic, and the processing capacity of the router on the route, Dynamic routing that routes to an economical route is adopted to maintain the availability of the network system.

On the other hand, in the IP network, as a technique for specifying a route through which an IP packet is transmitted, using a traceroute utility or a ping (Packet Internet Groper) utility, the TTL (Time to Live) is changed and the source node is changed. A technique for specifying a node on a path through which an IP packet is transmitted by sending an IP packet to a destination node and detecting a node that returns Timeover is common (see Patent Document 1).
JP-A-2005-3120033

  However, since the network topology and traffic change from moment to moment, the ping utility later determines what route the IP packet was transmitted from the source node to the destination node when a failure occurred. It is difficult to specify using

  For this reason, for example, in response to a complaint from a user or the like, a search is made for nodes that pass through all routes that can be considered as passing routes of IP packets related to the service provided to the user. You must find out the node that is occurring.

  In addition, even if a faulty node is identified, the conventional IP network management technology does not store history information indicating IP packets transmitted via individual nodes. Thus, the transmitted IP packet cannot be specified. Therefore, the user who is affected by the failure of the node cannot be identified other than checking whether or not a failure has occurred for all communication connections.

  An object of the present invention is to provide an IP packet tracking device that can specify the transmission path of an IP packet in an IP network.

  The first IP packet tracking device according to the present invention comprises an adding means, a history storage means, and a route specifying means.

  The principle of the first IP packet tracking device according to the present invention is as follows.

The adding means is provided in each of a plurality of nodes included in the IP network , and adds a node ID for identifying the own node in the network to a node information storage area provided in an IP header of an IP packet transmitted to the next node. The history storage unit is provided in each of a plurality of nodes , and when sending an IP packet having an IP header including information indicating that the terminal device connected to the own node is a destination to the terminal device , extracting routing information including the sequence of node ID indicating each node involved in the transmission of the IP packet from the node information storage area provided in the IP header, in response to the information for identifying the IP packet, extracted Holds route information. The route specifying means obtains the route information stored corresponding to the information specifying the IP packet from the history storage means of a plurality of nodes according to the designation of the information specifying the desired IP packet. It was based on the sequence of node ID contained in the route information, specifying the transmission path of the IP packet.

  The operation of the first IP packet tracking device configured as described above is as follows.

By adding means provided in each node, each individual IP packet is transferred to the adjacent node, will be added the node ID in the node information storage area provided in the IP header attached to IP packets . When each IP packet reaches the destination node to which the terminal device that is the destination of the IP packet is connected, and the IP packet is sent from the destination node to the destination terminal device , information on the IP packet The series of node IDs held in the storage area is held in the history accumulation means of the destination node described above .

  That is, node IDs of all nodes involved in the transmission of this packet are stored in the node information storage area of each IP packet, and this sequence of node IDs is held in the history storage means of the node that has become the destination node. The

  Accordingly, since history information corresponding to each IP packet transmitted in the IP network is held in the history storage means provided in any of the nodes constituting the IP network, the desired IP packet is obtained by the route specifying means. By searching the history information corresponding to, the transmission path of this IP packet can be specified reliably.

  When the node ID series is extracted, the contents of the node information storage area are cleared from the IP header, so that the destination terminal device can receive the packet as a normal IP packet.

  Moreover, the history accumulation means provided in each node is provided with IP address holding means for holding the IP address of the IP packet source and the destination IP address as a part of the history information, and constitutes an IP packet tracking device Is also possible.

  In such an IP packet tracking device, each IP packet can be reliably identified based on the incoming and outgoing IP addresses, and the transmission path of each IP packet can be reliably tracked.

  A second IP packet tracking device according to the present invention is the above-described first IP packet tracking device, wherein the adding means includes a replacement means and a relay history holding means, and the route specifying means includes a collecting means and a restoring means. Composed.

  The principle of the second IP packet tracking device according to the present invention is as follows.

  In the adding means provided in the first IP packet tracking device described above, the replacing means is such that the node information storage area of finite length provided in the IP header of the transmission target IP packet is already filled with the node ID series. When this is detected, the node ID series is replaced with a route pattern number composed of the internal number assigned to the node ID series and the own node ID. The relay history holding unit holds a correspondence relationship between a series of node IDs to be replaced and a route pattern number as a part of history information. In the route specifying means, the collecting means collects history information from all nodes constituting the IP network. The restoring means restores the node ID series based on the route pattern number included in the route information searched for corresponding to the IP packet and the correspondence relationship included in the collected history information.

  The operation of the second IP packet tracking device configured as described above is as follows.

  When an IP packet is transmitted, if the node information storage area is already filled with a node ID sequence indicating a transmission path, a unique internal number is given to this node ID sequence by the replacement means. And the own node ID are combined to generate a route pattern number indicating the node ID sequence obtained by adding the node ID to the above-described node ID sequence. The route information is replaced and transferred to the next node.

  The correspondence relationship between the node ID series and the route pattern number held as a part of the history information by the relay history holding means is collected by the collecting means provided in the route specifying means, and the node ID series by the restoring means is collected. Provided for restoration processing.

  By replacing such a node ID series with a route pattern number and restoring the node ID series based on the above-described correspondence, a large-scale node information storage area can be used. It is possible to collect route information indicating the transmission route of the IP packet in the IP network and specify the transmission route of the desired IP packet.

  A third IP packet tracking device according to the present invention is configured such that, in the above-described second IP packet tracking device, the relay history holding unit includes a counting unit.

  The principle of the third IP packet tracking device according to the present invention is as follows.

  In the relay history holding means provided in the second IP packet tracking device described above, the counting means counts the number of times an IP packet has arrived via the transmission path indicated by each route pattern number, and the count result is recorded as history information. Keep as part of.

  The operation of the third IP packet tracking device configured as described above is as follows.

  Each time the node ID series is replaced with the route pattern number, the count means adds the frequency corresponding to the route pattern number and holds it as a part of the history information.

  By analyzing the frequency corresponding to each route pattern number included in the history information collected from all nodes constituting the IP network, the number of packets passing through each node can be obtained and used for traffic analysis processing. it can.

  A fourth IP packet tracking device according to the present invention is configured such that, in the third IP packet tracking device described above, the relay history holding means includes packet information holding means.

  The principle of the fourth IP packet tracking apparatus according to the present invention is as follows.

  In the relay history holding means provided in the third IP packet tracking device described above, the packet information holding means sets the time stamp and the packet size for each IP packet that arrives via the transmission path indicated by each route pattern number. Store as part of history information.

  The operation of the fourth IP packet tracking apparatus configured as described above is as follows.

  When the node ID series is replaced with the route pattern number, the packet information holding means holds the size and time stamp of the packet as part of the history information.

  As a result, for each IP packet transmitted through the IP network, it is possible to collect time stamps each time it is transferred by the number of nodes corresponding to the number of node IDs that can be stored in the node information storage area. The amount of traffic between each node and the adjacent node can be estimated based on the size of each packet and the analysis result regarding the number of packets that have passed through the node obtained based on the above-described frequency.

  A fifth IP packet tracking device according to the present invention is configured such that, in the first IP packet tracking device described above, a history storage unit includes a notification unit, and a route identification unit includes a history information holding unit.

  The principle of the fifth IP packet tracking device according to the present invention is as follows.

  In the history accumulating means provided in the first IP packet tracking device described above, the notifying means detects that a predetermined amount of history information has been accumulated and notifies the route identifying means. In the route specifying means, the history information holding means collects and accumulates history information from the history accumulation means provided in the notification source node in response to the notification.

  The operation of the fifth IP packet tracking device configured as described above is as follows.

  When a predetermined amount of history information is stored in the history storage means provided in each node, the notification means notifies the route specifying means to that effect and collects history information from the notification history storage means accordingly. Is stored in the history information holding means in the route specifying means.

  For example, a sufficient capacity of history information holding means is prepared in the maintenance center and the history information stored in the history storage means is collected in response to a notification from each node, so that the capacity that is realistic for each node is obtained. By providing the history storage means, it is possible to realize the transmission route of the IP packet described above.

  In addition, the route information indicated by the node ID sequence held in the node information storage area secured in the IP packet when transferred by each node constituting the IP network as described above is the destination terminal of the IP packet. As a monitoring device for monitoring an IP network having a configuration held in a history storage unit of a node sent to the device, a receiving unit that receives designation of an IP packet that is a target of transmission path specification, and according to a designation received by the receiving unit Based on history collection means for collecting and holding history information from history storage means provided in all nodes assumed to be involved in transmission of IP packets, and a sequence of node IDs indicated by the collected history information Provided with a route specifying means for specifying a transmission route of the designated IP packet. It is also useful.

  According to such a monitoring apparatus, according to the designation of the IP packet that is the target for specifying the transmission path, the history information accumulated in the history accumulation means of the appropriate node is collected, and accordingly, according to the transmission of the IP packet. By collecting the path information formed by the nodes involved in the transmission of the IP packet without omission and analyzing the path information, the transmission path of the designated IP packet can be reliably specified.

  According to the IP packet tracking apparatus according to the present invention, the transmission path can be reliably specified for each IP packet transmitted in the IP network regardless of the routing method adopted in each node. When a failure occurs in a service provided by packet transmission, the cause of the failure can be quickly identified.

  Further, it is possible to identify an IP packet that has passed through the node identified as the cause of the failure based on the information collected for identifying the transmission path. As a result, it is possible to extract the users affected by the failure of the node without omission and take appropriate measures, so that high-quality services can be provided to the users.

  In particular, according to the second and fifth IP packet tracking apparatuses, information necessary for specifying the transmission path of the IP packet can be collected without omission regardless of the hardware limitation in each node. it can.

  Further, according to the third and fourth IP packet tracking devices, in addition to the information for specifying the transmission path, information usable for traffic analysis processing can be accumulated, and the performance of each node and the node It is possible to support the work of optimizing the configuration of the IP network by changing the transmission band allocated between them.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
(First embodiment)
FIG. 1 shows an embodiment of an IP packet tracking apparatus according to the present invention.

  In the IP network shown in FIG. 1, the IP packet tracking device uses the history information collecting unit 202 provided in the monitoring system 201 to generate an IP packet by the tracking processing unit 205 that is distributed and arranged in each node constituting the IP network. The history information obtained by the tracking process (described later) is collected. The collected history information is subjected to analysis processing by the history information analysis unit 203, and the analysis result is provided to the maintenance manager via the operator terminal 204.

  The tracking processing unit 205 provided in each node shown in FIG. 1 adds the node ID indicating the own node to the IP header of each IP packet transmitted via the own node, so that the own node transmits the node ID. History information indicating that it is included in the route, and if the node is the destination node, the route information indicated by the node ID string added to the IP packet is extracted and the transmission route of the IP packet is indicated. Accumulate as.

  In other words, in the process of transmitting the IP packet through each node shown in FIG. 1, the node ID is given by the tracking processing unit 205 of each node, so that the tracking process of the transmission path of this IP packet is performed. The history information indicating the transmission path is accumulated at the destination node which is the end point of the transmission path in the IP network of each IP packet.

  FIG. 2 shows a detailed configuration of the tracking processing unit provided in each node.

  In the tracking processing unit 205 shown in FIG. 2, the IP header operation unit 210 performs an operation described later on the extension area in the IP header added to the IP packet in the routing processing process by the routing processing unit 206.

  When the IP packet is routed to the next node by the routing processing unit 206, the operation control unit 212 is extracted from the IP header by the route information extraction unit 211 in the IP header operation unit 210 shown in FIG. Depending on the contents of the extension area, the route information included in the extension area is subjected to node ID addition processing by the node ID addition unit 213 or route pattern number (described later) replacement processing by the replacement processing unit 214. The route information formed by the node ID adding unit 213 or the replacement processing unit 214 is inserted into the extension area of the IP header by the route information inserting unit 215 and sent to the next node together with the IP packet.

  On the other hand, when the IP packet is routed to the destination terminal, the route information extracted from the IP header by the route information extraction unit 211 is passed from the operation control unit 212 to the history management unit 216 and is stored in the packet history storage unit 219. Accumulated in.

  In addition, the route pattern table 217 shown in FIG. 2 holds the route information replaced with the route pattern by the replacement processing unit 214, and the pattern history storage unit 218 stores information on the packet subjected to the replacement. Is accumulated.

  Hereinafter, the IP packet tracking operation in each node will be described in detail.

  FIG. 3 is a flowchart showing the IP packet tracking process. FIG. 4 is a diagram illustrating route pattern numbers, and FIG. 5 is a diagram illustrating an example of packet history information.

  The operation control unit 212 shown in FIG. 2 receives the route information extracted from the extension area (see FIG. 4A) of the IP header added to the IP packet by the route information extraction unit 211 (step in FIG. 3). 301), based on the IP packet transfer destination (next node or destination terminal) by the routing processing unit 206, it is determined whether or not the own node is the destination node (step 302).

  For example, when the IP packet directly received from the user terminal device by the routing processing unit 206 is transferred to the next node according to the IP address indicating the destination terminal device, a negative determination is made in step 302, and the IP The packet tracking process is started. At this time, if necessary, the operation control unit 212 performs setting processing for using the extended area provided in the IP header of the IP packet for storing path information.

As described above, when the own node is the originating node, since the node ID is not yet stored in the extension area, there is a space for the operation control unit 212 to store the node ID indicating the own node. Determination is made (affirmative determination in step 303). In this case, the node ID adding unit 213 adds the node IDN ₁ indicating the originating node to the head of the route information (step 304), and the route information inserting unit 215 inserts it into the extension area of the IP header (step 305, see FIG. 4 (a)).

  In this way, by sequentially writing the node ID of the node that forwarded the IP packet to the path information storage unit provided in the extension area, for example, in a small network where the total number of nodes constituting the IP network is small The transmission path of the IP packet can be reliably specified by the series of node IDs stored in the path information storage unit.

  On the other hand, in a general IP network, it is not realistic to provide a path information storage unit in an IP header that can store all node IDs indicating all nodes through which an IP packet passes. Hereinafter, a method for tracking an IP packet adapted to a large-scale IP network by replacing route information including a plurality of node IDs with a route pattern number obtained by combining a node ID and an internal number will be described.

  As described above, every time an IP packet passes through a node, the node ID is added to the path information storage unit. When the path information storage unit is filled with the node ID, a negative determination at step 303 in FIG. Become.

  At this time, the route information extracted by the route information extraction unit 211 illustrated in FIG. 2 is passed to the replacement processing unit 214 via the operation control unit 212. In response to this, the replacement processing unit 214 searches the route pattern table 217 via the history management unit 216 for a route pattern number corresponding to the sequence including the node ID indicated by the route information, and the corresponding route pattern number is found. If not, a new route pattern number is generated and the above-described route information is registered in the route pattern table 217 (see FIG. 4B). Next, the replacement processing unit 214 replaces the route information using the route pattern number obtained by searching from the route pattern table 217 or generating a new route pattern number (step 306), and is used for replacing the route pattern table 217. The frequency corresponding to the route pattern number is incremented. At this time, the history management unit 216 accumulates information about the IP packet subjected to the route information replacement processing by the route pattern number in the pattern history accumulation unit 218 (step 307). For example, as shown in FIG. 4 (c), the route pattern number used for replacement of route information, the size of the IP packet, and the transfer time (time stamp) are stored by the history management unit 216. The route pattern number is inserted into the extension area of the IP header, and the IP packet having the IP header is transferred to the next node. In the example shown in FIG. 4, the node ID is indicated by a symbol “N” appended with a node number as a subscript, and represents a route pattern number obtained by combining the node ID with an internal number in parentheses.

  In this way, when the IP packet is transferred together with the information indicating its own transmission path and finally transferred to the destination terminal device, the determination in step 302 described above is affirmative, and the IP packet is extracted from the extended area. The route information is transferred to the history management unit 216 via the operation control unit 212 and stored in the packet history storage unit 219 (step 308). At this time, the history management unit 216 can replace the route information using the route pattern number, for example, in the same manner as in step 306 described above. In this case, as shown in FIG. 5, for each IP packet sent to the destination terminal device, the source of the IP packet is set together with the route pattern number, the size of the IP packet, and the time (time stamp) when the transfer was performed. A source IP address to indicate and a destination IP address to indicate a destination are stored.

  By performing the above-described tracking process in each node constituting the IP network, the packet history is stored at least at the destination node at the end of the transmission path of the IP packet for each IP packet. Each time the route information is replaced by the route pattern number described above, the pattern history is stored in the node where the replacement processing is performed.

  In this way, by collecting packet history information and pattern history information accumulated in each node in the monitoring system 201 and analyzing the collected information, for example, according to a complaint from a user, there is a problem with the complaint. It is possible to reliably identify the transmission path of the IP packet that has been involved in providing the specified service.

  In addition, when a node connected to another IP network receives an IP packet from another IP network, the IP packet starts to be traced. When the IP packet is sent to another IP network, the previous trace is performed. By saving the path information obtained in step (1) and ending the tracking process, it is possible to realize path tracking within the IP network even for an IP network having a connection point with another IP network.

  For example, in the tracking processing unit 205 of the node that has received an IP packet from another IP network, the route information formed in the extended area in the other IP network is replaced with an appropriate route pattern number in the same manner as in step 306 described above. On the other hand, when an IP packet is transmitted to another IP network, a packet history accumulation process is performed in the same manner as when it is determined as a destination node in step 302 described above (see step 308 in FIG. 3). As a result, regardless of how the extension area of the IP header is used in another connected IP network, the transmission path of the IP packet within the local network is traced and necessary information is accumulated. be able to.

  Hereinafter, the cooperative operation between the monitoring system and each node will be described with reference to FIG.

  The history management unit 216 provided at each node periodically determines the storage capacity allocated to the packet history storage unit 219 and the pattern history storage unit 218, for example, 80% of the storage capacity allocated to each node. Until the history information is accumulated, the history management unit 216 sends a history collection request to the monitoring system 201.

  In response to the history collection request raised from each node in this way, the history information collection unit 202 of the monitoring system 201 shown in FIG. 1 collects and accumulates history information from the requesting node, Then, by erasing the contents of the packet history storage unit 219 and the pattern history storage unit 218, the storage capacity to be secured for storing history information in each node is reduced, and the hardware burden on each node is reduced. be able to.

  In addition, for example, when an IP packet to be tracked is designated by the maintenance manager via the operator terminal 204 shown in FIG. 1, the history information collection unit 202 causes the packet history information and the route pattern table 217 to be changed from each node. It is also possible to collect content and pattern history information.

  From the packet history information collected in this way, the history information analysis unit 203 transmits the IP packet to be tracked based on the information specifying the IP packet (for example, the originating IP address, the destination IP address, and the arrival time). By searching for the route pattern number in which the route is replaced at the destination node, and correspondingly replacing the route pattern number with the route information held in the route pattern table 217 of the destination node, this IP packet A node ID column indicating a sequence of nodes involved in the transfer can be obtained.

  Since the node ID column obtained in this way indicates the route through which the designated IP packet has been transmitted, for example, when a failure relating to the designated IP packet is reported, Based on the information, it is possible to reliably narrow down the nodes considered as the cause of the failure.

  Further, the information collected by the IP packet tracking apparatus according to the present invention is used to extract an IP packet that may be affected by the failure after the cause of the failure is identified by such a narrowing operation. It can also be used.

  For example, route information including the node ID of the identified node or the route pattern number including this node ID is searched from the route pattern table collected from all nodes, and corresponding to the route pattern number given to them. By collecting the accumulated packet history information, it is possible to acquire the source IP address and the destination IP address that specify the packet transmitted via the node described above. Further, by sequentially tracing the route information obtained by the above-described search, it is possible to specify the IP packet that has passed through the specified node without omission.

  In this way, it is possible to identify the IP packets that have passed through the failed node without excess or deficiency. For example, you can send an apology email to a user who is affected by the failure, or you can get a discount It is possible to provide aftercare such as providing services and the like, and it is possible to improve serviceability for users.

  On the other hand, based on the information collected by the IP packet tracking apparatus according to the present invention, it is possible to grasp traffic for each of various routes.

  For example, by analyzing the frequency collected for each route pattern number in the route pattern table 217 of each node, the packet size collected in the pattern history information storage unit 218 and the packet history storage unit 219, and the reception time, For example, traffic between adjacent nodes can be obtained by dividing the traffic every hour, every day, or the like.

  Based on the information on traffic obtained in this way, we investigate the transition of traffic in individual nodes or groups of multiple nodes, and provide future demand prediction, change of node performance and transmission band, or It can be used for network configuration optimization work by establishing (or abolishing) nodes.

  Regarding the above description, the following items are further disclosed.

(Supplementary Note 1) Addition means for adding a node ID for identifying the own node in the network to a node information storage area provided in each of the nodes constituting the IP network and provided in the IP header of the IP packet transmitted to the next node ,
Route information indicated by a sequence of node IDs held in the node information storage area when sending an IP packet to a destination terminal device specified by an IP header, provided in each node constituting the IP network. A history storage unit that extracts and retains the extracted route information corresponding to the information identifying the IP packet;
The route information corresponding to the IP packet designated as the route identification target is searched from the history information accumulated in the history accumulation means of each node, and based on the node ID series indicated by the obtained route information An IP packet tracking device comprising: a route specifying unit that specifies a transmission route of an IP packet. (1)
(Supplementary Note 2) In the IP packet tracking device according to Supplementary Note 1,
The IP packet tracking device, wherein the history storage unit includes an IP address holding unit that holds an IP packet source IP address and a destination IP address as part of history information.

(Supplementary Note 3) In the IP packet tracking device according to Supplementary Note 1,
The adding means includes
When it is detected that the node information storage area of finite length provided in the IP header of the IP packet to be transmitted is already filled with the node ID series, an internal number given to the node ID series; Replacement means for replacing the sequence of node IDs with a route pattern number consisting of its own node ID;
Relay history holding means for holding a correspondence relationship between the series of node IDs to be replaced and a route pattern number as a part of history information;
The route specifying means includes
Collecting means for collecting history information from all nodes constituting the IP network;
And a restoration unit that restores a sequence of node IDs based on a route pattern number included in route information searched for corresponding to an IP packet and a correspondence relationship included in the collected history information. IP packet tracking device. (2)
(Supplementary Note 4) In the IP packet tracking device according to Supplementary Note 3,
The relay history holding means includes counting means for counting the frequency of arrival of an IP packet via the transmission path indicated by each route pattern number, and holding the counting result as a part of history information. IP packet tracking device. (3)
(Supplementary Note 5) In the IP packet tracking device according to Supplementary Note 4,
The relay history holding means includes packet information holding means for holding a time stamp and a packet size as part of history information for each IP packet arriving via a transmission path indicated by each route pattern number. An IP packet tracking device. (4)
(Supplementary Note 6) In the IP packet tracking device according to Supplementary Note 1,
The history storage means includes notification means for detecting that a predetermined amount of history information has been stored and notifying the route specifying means,
The IP packet tracking device according to claim 1, wherein the route specifying unit includes a history information holding unit that collects and stores history information from a history storage unit provided in a notification source node in response to the notification. (5)
(Supplementary note 7) Route information indicated by a sequence of node IDs held in a node information storage area secured in an IP packet when transferred by each node constituting the IP network is transmitted to the destination terminal device of the IP packet. In a monitoring device for monitoring an IP network having a configuration held in a history storage unit of a sent node,
Accepting means for accepting designation of an IP packet for which a transmission path is specified;
History collection means for collecting and holding history information from history accumulation means provided in all nodes assumed to be involved in transmission of the IP packet in response to the designation received by the reception means;
A monitoring apparatus comprising: path specifying means for specifying a transmission path of the designated IP packet based on a sequence of node IDs indicated by the collected history information.

  As described above, according to the IP packet tracking device of the present invention, it is possible to reliably specify the transmission path when each IP packet is actually transmitted.

  As a result, it is possible to obtain accurate information indicating the transmission path followed by the IP packet when a failure occurs, so the task of identifying the cause of the failure is extremely strongly supported and the response to the failure can be accelerated. Can be achieved.

  In addition, since it is possible to identify the IP packet transmitted via the node identified as the cause of the failure, it is possible to reliably identify the range affected by the failure, and to the affected customers It can be used for countermeasures such as taking appropriate measures.

  It is also possible to collect information that can be used for tracking processing and traffic analysis in the IP network.

  These features are very useful for smoothly operating various service systems using an IP network.

It is a figure which shows embodiment of the IP packet tracking apparatus concerning this invention. It is a figure which shows the detailed structure of a tracking process part. It is a flowchart showing an IP packet tracking process. It is a figure explaining a route pattern number. It is a figure which shows the example of packet history information. It is a figure explaining the cooperation operation | movement with a monitoring system and each node.

Explanation of symbols

201 Monitoring System 202 History Information Collection Unit 203 History Information Analysis Unit 204 Operator Terminal 205 Tracking Processing Unit 206 Routing Processing Unit 210 IP Header Operation Unit 211 Route Information Extraction Unit 212 Operation Control Unit 213 Node ID Addition Unit 214 Replacement Processing Unit 215 Path Information Insertion unit 216 History management unit 217 Route pattern table 218 Pattern history storage unit 219 Packet history storage unit

Claims (5)

An adding unit that is provided in each of a plurality of nodes included in the IP network and adds a node ID for identifying the own node in the network to a node information storage area provided in an IP header of an IP packet transmitted to the next node;
When an IP packet having an IP header including information indicating that a terminal device connected to the node is a destination is provided to each of the plurality of nodes , the IP packet includes the IP header. extracting routing information from the node information storage area provided including a sequence of node ID indicating each node involved in the transmission of the IP packet, in response to the IP packet identifying information, the extracted path information A history storage means for holding
In response to designation of information for specifying a desired IP packet , the route information stored in correspondence with the information for specifying the IP packet is searched from the history storage means of the plurality of nodes, and the obtained route information is obtained. An IP packet tracking apparatus , comprising: a path specifying unit that specifies a transmission path of the IP packet based on the sequence of the node IDs included . The IP packet tracking device according to claim 1,
The adding means includes
When it is detected that the node information storage area of finite length provided in the IP header of the IP packet to be transmitted is already filled with the node ID series, an internal number given to the node ID series; Replacement means for replacing the sequence of node IDs with a route pattern number consisting of its own node ID;
Relay history holding means for holding a correspondence relationship between the series of node IDs to be replaced and a route pattern number as a part of history information;
The route specifying means includes
Collecting means for collecting history information from all nodes constituting the IP network;
And a restoration unit that restores a sequence of node IDs based on a route pattern number included in route information searched for corresponding to an IP packet and a correspondence relationship included in the collected history information. IP packet tracking device. The IP packet tracking device according to claim 2,
The relay history holding means includes counting means for counting the frequency of arrival of an IP packet via the transmission path indicated by each route pattern number, and holding the counting result as a part of history information. IP packet tracking device. The IP packet tracking device according to claim 3,
The relay history holding means includes packet information holding means for holding a time stamp and a packet size as part of history information for each IP packet arriving via a transmission path indicated by each route pattern number. An IP packet tracking device. The IP packet tracking device according to claim 1,
The history storage means includes notification means for detecting that a predetermined amount of history information has been stored and notifying the route specifying means,
The IP packet tracking device according to claim 1, wherein the route specifying unit includes a history information holding unit that collects and stores history information from a history storage unit provided in a notification source node in response to the notification.

Images