JP5213886B2 - Protocol monitor device, log information collection method, and log information collection program - Google Patents

Description

  The present invention relates to a protocol monitor device, a log information collection method, and a log information collection program that collect log information during communication using SIP (Session Initiation Protocol) that performs session control.

  Conventionally, an identifier such as a telephone number registered in advance as a collection target is compared with a character string on a communication signal using SIP (see Non-Patent Document 1), and text information of the matching communication signal is stored in a signal log file. A protocol monitor device for outputting is known (for example, see Non-Patent Document 2). The protocol monitor device collects log information when a telephone service with a number conversion from a logical number such as toll-free starting from “0120” to a physical number (for example, 0422zzzzzz) is provided by SIP-AS (SIP application server). Used for etc.

J. Rosenberg, et al., 'SIP: Session Initiation Protocol', RFC 3261 (Jun. 2002). wireshark (http://www.wireshark.org/)

  However, in the conventional protocol monitor device, when collecting log information of the number conversion processing from the logical number to the physical number, two kinds of identifiers (for example, a logical number starting from 0120, such as toll-free, and the actual number) Log information is collected independently for each identifier, and when a signal is detected, the log information is collected for each identifier. There is a problem of being recorded in two signal log files.

  FIG. 6 is a diagram showing the processing operation of the conventional protocol monitor device. In the conventional protocol monitor apparatus, identifiers (here, 0120xxxxxxxx and 0422zzzzzz) for which log information is to be collected must be manually registered from the maintenance terminal by the maintenance telephone number DB5. In this example, 0120xxxxxxxx is a logical number corresponding to the physical number 0422zzzzzz. An INVITE request is transmitted from an S-CSCF (Serving-Call Session Control Function) provided in the communication network to a SIP-AP (SIP application server) (step S21). The protocol monitor device collates the identifier included in the signal of this INVITE request with the identifier registered in the collection target telephone number DB 5 to determine the identifier included in the signal, and the collection target telephone. When it is detected that the identifier registered in the number DB 5 matches, log information is recorded in the signal log file. When it matches with the identifier 0422zzzzzz, log information is recorded in the signal log file 6 for 0422zzzzzz.

  Then, when the SIP-AS performs number conversion from the logical number (0120xxxxxxxx) to the physical number (0422zzzzzz) and returns an INVITE request to the S-CSCF (step S22), the protocol monitor device transmits the INVITE request. The identifier included in the signal is checked against the identifier registered in the collection target telephone number DB5, and the identifier included in the signal and the identifier registered in the collection target telephone number DB5 are: When a match is detected, log information is recorded in the signal log file. When it matches with the identifier 0120xxxxxxxx, log information is recorded in the signal log file 7 for 0120xxxxxxxx. Subsequently, when a response (200 OK) is returned from the S-CSCF to the SIP-AS in response to the INVITE request (step S23), the identifier included in the signal and the collection target telephone number DB5 are stored in the response. When it is checked against the registered identifier and it is detected that the identifier included in the signal matches the identifier registered in the collection target telephone number DB 5, log information is recorded in the signal log file. When it matches with the identifier 0120xxxxxxxx, log information is recorded in the signal log file 7 for 0120xxxxxxxx.

  As described above, when the identifier (phone number) that matches the identifier (phone number) registered in the collection target phone number DB 5 is included in the signal, the conventional protocol monitor device outputs a signal for each matching identifier. A log file (for example, 0120xxxxxxxx.log in the case of 0120xxxxxxxx) is generated and log information is recorded in the signal log file. Therefore, even if the physical number has a logical number, it is logged in another signal log file. Information is recorded (a signal log related to one call is divided into two signal log files and output), and there is a problem that the analysis work becomes complicated and time-consuming, resulting in poor work efficiency.

  The present invention has been made in view of such circumstances, and when collecting log information of a SIP message signal, an identifier (for example, a destination telephone number) in the signal to be collected is a logical number and a physical number. The two identifiers can be efficiently registered in order to collect log information when they are combined. When a SIP message signal including the identifier is detected, the log information is stored in one signal log file. It is an object of the present invention to provide a protocol monitor device, a log information collection method, and a log information collection program that can be recorded.

The present invention is a protocol monitor device that collects log information based on an identifier included in a SIP message signal, wherein log information storage means for storing the collected log information is associated with two identifier information. Pre-stored identifier information storage means, input means for inputting log information collection target identifier information, first collection target identifier storage means for storing first identifier information, and second identifier information a second collection target identifier storage means for storing, by storing in the first collection target identifier storage means identifier information input as the first identifier of the log information collection target by said input means, said first identification that is associated with the first collection target identifier registration means for registering the identifier, the identifier information registered in the first collection target identifier storage means To identify the child information read out from the identifier information storage unit by storing in the second collection target identifier storage means as a second identifier in the log information collection target, to automatically register the second identifier a second collection target identifier registration unit, the transmitted and received SIP message signal, when it contains the first identifier or the second identifier registered to collect log information of the SIP message signal Log information collection means for storing the collected log information as a signal log file in the log information storage means , wherein the log information collection means includes the second identifier included in the SIP message signal A log based on the second identifier in the signal log file storing log information based on the first identifier associated with the second identifier. And to store the broadcast.

The present invention is characterized in that the identifier information storage means stores a logical telephone number and a physical telephone number in association with each other as identifier information.

In the present invention, in order to collect log information based on an identifier included in a SIP message signal, log information storage means for storing the collected log information and two identifier information are stored in advance in association with each other. Identifier information storage means; input means for inputting identifier information for log information collection; first collection object identifier storage means for storing information of the first identifier; and second information for storing information of the second identifier. Log information collection method in a protocol monitor device comprising a collection target identifier storage means , wherein the protocol monitor device uses the identifier information input by the input means as a first identifier of a log information collection target. A first collection target identifier registration step for registering the first identifier by storing in the collection target identifier storage means, and the first collection The identifier information associated with the identifier information registered in the elephant identifier storage means is identified and read out from the identifier information storage means, and the second collection target identifier storage as the second identifier of the log information collection target A second collection target identifier registration step for automatically registering the second identifier by storing in the means; and the registered first identifier or the second identifier is included in the transmitted / received SIP message signal if it was, the SIP message signal log information collected in the collected the log information has been closed and a log information collecting step of storing a signal log file to the log-information storing unit, in the log information collection step The first identifier associated with the second identifier when the second identifier is included in the SIP message signal. And to store the log information in the signal log file that stores the log information based on the identifier based on the second identifier.

In the present invention, in order to collect log information based on an identifier included in a SIP message signal, log information storage means for storing the collected log information and two identifier information are stored in advance in association with each other. Identifier information storage means; input means for inputting identifier information for log information collection; first collection object identifier storage means for storing information of the first identifier; and second information for storing information of the second identifier. And storing the identifier information inputted by the input means in the first collection target identifier storage means as a first identifier of the log information collection target. The first collection target identifier registration step for registering the first identifier, and the identification registered in the first collection target identifier storage means By identifying the identifier information associated with the information and reading it from the identifier information storage means, and storing it in the second collection target identifier storage means as the second identifier of the log information collection target, A second collection target identifier registration step for automatically registering an identifier , and when the registered first identifier or the second identifier is included in the transmitted / received SIP message signal, the SIP message signal A log information collecting step of collecting log information and storing the collected log information in the log information storage means as a signal log file , wherein in the log information collecting step, the second identifier is the SIP message signal The log information based on the first identifier associated with the second identifier is stored. And to store the log information based on the second identifier in a log file.

  According to the present invention, when the maintenance manager manually registers only one of at least two associated identifiers as the identifier of the log information collection target, another identifier corresponding to the manually registered identifier is changed to log information. Since the identifier to be collected is automatically registered, the registration work of the maintenance manager can be greatly reduced. Further, since log information of another identifier corresponding to the manually registered identifier is recorded in the signal log file for recording the log information of the manually registered identifier, the log information of the two associated identifiers is 1 It is recorded in one file, and the effect that analysis work of log information can be performed efficiently is also obtained.

It is a block diagram which shows the structure of one Embodiment of this invention. It is explanatory drawing which shows the relationship of each database (DB) shown in FIG. It is explanatory drawing which shows the relationship of each database (DB) shown in FIG. It is a sequence diagram which shows operation | movement of the apparatus shown in FIG. It is a sequence diagram which shows operation | movement of the apparatus shown in FIG. It is a sequence diagram which shows the information collection operation | movement in the protocol monitor apparatus by a prior art.

  Hereinafter, a protocol monitoring apparatus according to an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing the configuration of the embodiment. In this figure, reference numeral 1 denotes a SIP-AS (SIP application server) that provides a telephone service with telephone number conversion from a logical number to a physical number, and is configured from a computer device. Reference numeral 2 denotes a communication network having an S-CSCF (Serving-Call Session Control Function) function therein. Reference numeral 3 denotes a terminal that realizes a telephone function, and here is a terminal that performs a call (hereinafter referred to as a caller terminal). Reference numeral 4 denotes a terminal that implements a telephone function, and here is a terminal that performs an incoming call (hereinafter referred to as a called party terminal). Here, it is assumed that the telephone number of the caller terminal 3 is 03yyyyyyyy and the telephone number of the callee terminal 4 is 0422zzzzzz. The callee terminal 4 has 0120xxxxxxxx as a logical number.

  Reference numeral 11 denotes a protocol function unit that implements a SIP communication function. Reference numeral 12 denotes a protocol monitor function unit that inputs a SIP message signal transmitted / received by the protocol function unit 11 and realizes a protocol monitor function. Reference numeral 13 denotes a service function unit that converts a telephone number from a logical number to a physical number. Reference numeral 14 denotes a subscriber database (DB) that stores subscriber information, and stores at least a physical number corresponding to a logical number. The subscriber DB 14 is a database in which information necessary for the service function unit 13 to perform telephone number conversion is stored. When a subscriber is registered, a logical number and a physical number corresponding to the logical number are related. It will be attached and memorized. Here, it is assumed that physical numbers 0422zzzzzz and 0852bbbbbb are registered for logical numbers 0120xxxxxxxx and 0120aaaaaa, respectively.

  Reference numeral 15 denotes a collection target telephone number database (DB) in which identifiers (here, telephone numbers) for collecting log information are registered by the maintenance manager. Reference numeral 16 denotes a collection target telephone number database (DB) that automatically registers an identifier (here, a telephone number) for collecting log information based on an identifier registered in the collection target telephone number DB 15. Reference numeral 17 denotes a signal log file for recording log information output from the protocol monitor function unit 12. Reference numeral 18 denotes a maintenance terminal for the maintenance manager to perform an input operation.

  Next, the processing operation of the SIP-AS 1 shown in FIG. 1 will be described. First, the automatic registration operation of the collection target telephone numbers will be described with reference to FIGS. FIG. 2 is a diagram showing the relationship between databases when a logical number is manually registered in the collection target telephone number DB 15 as a collection target telephone number. FIG. 3 is a diagram showing the relationship of each database when a physical number is manually registered in the collection target telephone number DB 15 as a collection target telephone number.

  First, when the maintenance manager inputs a collection target telephone number that is a telephone number from which log information should be collected from the maintenance terminal 18, the protocol monitor function unit 12 writes the input telephone number in the collection target telephone number DB 15. Register the phone number. When there are a plurality of telephone numbers from which log information is to be collected, all the telephone numbers are input from the maintenance terminal 18 and registered in the collection target telephone number DB 15. When the logical number is the telephone number to be collected, it is assumed that at least 0120xxxxxxxx and 0120aaaaaa are registered as shown in FIG. In addition, when the physical number is a collection target telephone number, it is assumed that at least 0422zzzz and 0852bbbbbb are registered as collection target telephone numbers as shown in FIG.

  Next, when the maintenance manager performs an operation to execute automatic registration processing of the collection target telephone number from the maintenance terminal 18, the protocol monitor function unit 12 sets the telephone number in the collection target telephone number DB 15 that has been manually registered. Other related telephone numbers are identified with reference to the subscriber DB 14. If the telephone number registered in the collection target telephone number DB 15 is a logical number, the physical number corresponding to the telephone number specified here is specified and the telephone number registered in the collection target telephone number DB 15 is specified. If the number is a physical number, the corresponding logical number is specified (see FIGS. 2 and 3).

  Then, the protocol monitor function unit 12 reads the identified telephone number from the subscriber DB 14 and writes it in the collection target telephone number DB 16. This processing operation is performed for all telephone numbers registered in the collection target telephone number DB 15. However, if the telephone number registered in the collection target telephone number DB 15 is a physical number and the physical number does not have a corresponding logical number, there is no telephone number to be written in the collection target telephone number DB 16. , Automatic registration processing is not performed. With this processing operation, when manual registration is a logical number, 0422zzzzzz corresponding to 0120xxxxxxxx and 0852bbbbbb corresponding to 0120aaaaaa are registered in the collection target telephone number DB 16 as shown in FIG. When manual registration is a physical number, as shown in FIG. 3, 0120xxxxxxxx corresponding to 0422zzzz and 0120aaaaaa corresponding to 0852bbbbbb are registered in the collection target telephone number DB16. These automatic registration processes can be executed autonomously following the process in which the protocol monitor function unit 12 writes the telephone number in the collection target telephone number DB 15 without any operation from the maintenance terminal 18.

  Next, a processing operation for writing log information to the signal log file 17 will be described. FIG. 4 is a sequence diagram showing an operation of collecting log information from the SIP message signal and recording the log information in the signal log file 17 in the apparatus shown in FIG. Here, description will be made assuming that logical numbers are manually registered in the collection target telephone number DB 15. First, when the caller performs a call operation on the logical number “0120xxxx” of the callee terminal 4 from the caller terminal 3, an INVITE request is sent from the S-CSCF provided in the communication network 2 to the SIP-AP1. Is transmitted (step S1), the protocol function unit 11 transfers the INVITE request signal to the service function unit 13 and the protocol monitor function unit 12, respectively. In the INVITE request shown in the figure, other headers and bodies of the SIP signal are omitted. Further, “R-URI” included in this INVITE request indicates that it is a Request-URI (Uniform Resource Identifier).

  In response to this, the protocol monitor function unit 12 receives the identifier (telephone number) included in the signal of the INVITE request and the identifiers (telephone numbers) registered in the collection target telephone number DB 15 and the collection target telephone number DB 16. ), And when it is detected that the identifier included in the signal matches the identifier registered in either the collection target telephone number DB 15 or the collection target telephone number DB 16, it is logged in the signal log file 17. Record information.

  In the example shown in FIG. 4, since “0120xxxx” in the signal matches, log information is recorded in the signal log file 17. At this time, if the signal log file 17 already exists, it is recorded by adding new log information in the existing signal log file 17. On the other hand, if the obtained log information is log information corresponding to the first telephone number and the signal log file 17 does not exist, a file is generated with the file name “phone number. Log information is recorded in the log file 17. In the example shown in FIG. 4, 0120xxxxxxxx. Create and write a log file name. However, the telephone number used for the file name of the signal log file 17 is a telephone number registered in the manually registered collection target telephone number DB 15. When the telephone number of the obtained log information is a telephone number registered in the collection target telephone number DB 16 that is automatically registered, the protocol monitor function unit 12 refers to the subscriber DB 14 and stores the obtained log information. The signal log file 17 is generated using another telephone number (a manually registered telephone number) associated with the telephone number.

  In parallel with this operation, when the INVITE request signal is transferred from the protocol function unit 11, the service function unit 13 refers to the subscriber DB 14 and performs telephone number conversion. In the example shown in FIG. 4, 0120xxxxxxxx is converted to 0422zzzzzz and returned to the protocol function unit 11. In response to this, the protocol function unit 11 transmits an INVITE request to the S-CSCF 2 (step S2). This INVITE request signal is also output to the protocol monitor function unit 12.

  In response to this, the protocol monitor function unit 12 compares the identifier included in the signal of this INVITE request with the identifier registered in the collection target telephone number DB 15 and the collection target telephone number DB 16, and When it is detected that the included identifier matches the identifier registered in the collection target telephone number DB 15 and the collection target telephone number DB 16, log information is recorded in the signal log file 17. Since the telephone number at this time is the telephone number (0422zzzzzz) registered in the collection-target telephone number DB 16 that is automatically registered, the protocol monitor function unit 12 refers to the subscriber DB 14 to obtain the log information obtained. The other telephone number related to the telephone number (the manually registered telephone number 0120xxxx) is specified, and the log information is recorded in the signal log file 17 having the file name of this telephone number. At this time, if the signal log file 17 does not exist, the signal log file 17 is generated in the same manner as the processing operation described above, and the log information is recorded in the signal log file 17.

  Next, when a response (200 OK) is returned from the S-CSCF 2 to the SIP-AS 1 in response to the INVITE request from the SIP-AS 1 (step S 3), the protocol function unit 11 transfers this signal to the protocol monitor function unit 12. To do. In response to this, the protocol monitor function unit 12 receives the identifier (telephone number) included in the response signal and the identifiers (telephone numbers) registered in the collection target telephone number DB 15 and the collection target telephone number DB 16. And when it is detected that the identifier included in the signal matches the identifier registered in either the collection target telephone number DB 15 or the collection target telephone number DB 16, log information is stored in the signal log file 17. Record. At this time, the signal log file 17 in which log information is to be recorded is specified in the same manner as the processing operation described above, and the log information is recorded in the signal log file 17.

  Next, a modification of the processing operation for writing log information to the signal log file 17 will be described. FIG. 5 is a sequence diagram showing an operation of collecting log information from the SIP message signal and recording the log information in the signal log file 17 in the apparatus shown in FIG. Here, description will be made assuming that the physical number is manually registered in the collection target telephone number DB 15. First, when the caller performs a call operation on the logical number “0120xxxx” of the callee terminal 4 from the caller terminal 3, an INVITE request is sent from the S-CSCF provided in the communication network 2 to the SIP-AP1. Is transmitted (step S11), the protocol function unit 11 transfers the INVITE request signal to the service function unit 13 and the protocol monitor function unit 12, respectively.

  In response to this, the protocol monitor function unit 12 receives the identifier (telephone number) included in the signal of the INVITE request and the identifiers (telephone numbers) registered in the collection target telephone number DB 15 and the collection target telephone number DB 16. ), And when it is detected that the identifier included in the signal matches the identifier registered in either the collection target telephone number DB 15 or the collection target telephone number DB 16, it is logged in the signal log file 17. Record information.

  In the example shown in FIG. 5, since “0120xxxx” in the signal matches, log information is recorded in the signal log file 17. At this time, if the signal log file 17 already exists, it is recorded by adding new log information in the existing signal log file 17. On the other hand, if the obtained log information is log information corresponding to the first telephone number and the signal log file 17 does not exist, a file is generated with the file name “phone number. Log information is recorded in the log file 17. However, the telephone number used for the file name of the signal log file 17 is a telephone number registered in the manually registered collection target telephone number DB 15. In the example shown in FIG. 5, 0422zzzzzz. Create and write a log file name.

  In parallel with this operation, when the INVITE request signal is transferred from the protocol function unit 11, the service function unit 13 refers to the subscriber DB 14 and performs telephone number conversion. In the example illustrated in FIG. 5, 0120xxxx is converted into 0422zzzzzz and returned to the protocol function unit 11. In response to this, the protocol function unit 11 transmits an INVITE request to the S-CSCF 2 (step S12). This INVITE request signal is also output to the protocol monitor function unit 12.

  In response to this, the protocol monitor function unit 12 compares the identifier included in the signal of this INVITE request with the identifier registered in the collection target telephone number DB 15 and the collection target telephone number DB 16, and When it is detected that the included identifier matches the identifier registered in the collection target telephone number DB 15 and the collection target telephone number DB 16, log information is recorded in the signal log file 17. At this time, the signal log file 17 in which log information is to be recorded is specified in the same manner as the processing operation described above, and the log information is recorded in the signal log file 17.

  Next, when a response (200 OK) is returned from the S-CSCF 2 to the SIP-AS 1 in response to the INVITE request from the SIP-AS 1 (step S 13), the protocol function unit 11 transfers this signal to the protocol monitor function unit 12. To do. In response to this, the protocol monitor function unit 12 receives the identifier (telephone number) included in the response signal and the identifiers (telephone numbers) registered in the collection target telephone number DB 15 and the collection target telephone number DB 16. And when it is detected that the identifier included in the signal matches the identifier registered in either the collection target telephone number DB 15 or the collection target telephone number DB 16, log information is stored in the signal log file 17. Record. At this time, the signal log file 17 in which log information is to be recorded is specified in the same manner as the processing operation described above, and the log information is recorded in the signal log file 17.

  As described above, in the SIP-AS 1 having the protocol monitor function, when the maintenance manager manually registers only one of the logical number or the physical number for which log information is to be collected, the number conversion provided in the SIP-AS 1 in advance. Since the other telephone number corresponding to the manually registered telephone number is read out and automatically registered as the collection target telephone number with reference to the database (for example, subscriber DB 14), the maintenance manager's Registration work can be greatly reduced. In addition, log information of other phone numbers corresponding to manually registered phone numbers is recorded in a signal log file that records log information of manually registered phone numbers. Log information is recorded in one file, and it is possible to efficiently analyze the log information.

  Note that a log information collecting process is performed by recording a program for realizing the function of the processing unit in FIG. 1 on a computer-readable recording medium, causing the computer system to read and execute the program recorded on the recording medium. May be performed. Here, the “computer system” includes an OS and hardware such as peripheral devices. The “computer system” includes a WWW system having a homepage providing environment (or display environment). The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Further, the “computer-readable recording medium” refers to a volatile memory (RAM) in a computer system that becomes a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. In addition, those holding programs for a certain period of time are also included.

  The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, what is called a difference file (difference program) may be sufficient.

  When collecting log information of a SIP message signal, it can be applied to an application in which it is indispensable to collect log information by associating with another identifier associated with one identifier.

  DESCRIPTION OF SYMBOLS 1 ... SIP-AS, 11 ... Protocol function part, 12 ... Protocol monitor function part, 13 ... Service function part, 14 ... Subscriber DB, 15 ... Collection telephone number ( Manual registration) DB, 16 ... Collection target telephone number (automatic registration) DB, 17 ... Signal log file, 18 ... Maintenance terminal, 2 ... Communication network (S-CSCF), 3 ... Caller terminal, 4 ... Callee terminal

Claims (4)

A protocol monitoring device that collects log information based on an identifier included in a SIP message signal,
Log information storage means for storing the collected log information;
Identifier information storage means for storing two identifier information in association with each other;
An input means for inputting identifier information for log information collection;
First collection target identifier storage means for storing information of the first identifier;
Second collection target identifier storage means for storing information of the second identifier;
First collection target identifier registration for registering the first identifier by storing the identifier information input by the input unit in the first collection target identifier storage unit as the first identifier of the log information collection target Means,
And read out from said first collection target identifier storage means to identify the identifier information associated with the identifier information registered the identifier information storage means, wherein the second identifier of the log information collection target A second collection target identifier registration unit for automatically registering the second identifier by storing in a second collection target identifier storage unit ;
When the transmitted and received SIP message signal includes the registered first identifier or the second identifier, log information of the SIP message signal is collected, and the collected log information is used as the log information. Log information collecting means for storing as a signal log file in the storage means ,
The log information collection means stores the log information based on the first identifier associated with the second identifier when the second identifier is included in the SIP message signal. A protocol monitor device that stores log information based on the second identifier in a log file . 2. The protocol monitor apparatus according to claim 1, wherein the identifier information storage means stores a logical telephone number and a physical telephone number in association with each other as identifier information. In order to collect log information based on an identifier included in a SIP message signal, log information storage means for storing the collected log information, and identifier information storage means in which two pieces of identifier information are associated and stored in advance Input means for inputting identifier information of log information collection target, first collection target identifier storage means for storing information of the first identifier, and second collection target identifier for storing information of the second identifier Log information collection method in a protocol monitor device comprising storage means ,
The protocol monitoring device is
First collection target identifier registration for registering the first identifier by storing the identifier information input by the input unit in the first collection target identifier storage unit as the first identifier of the log information collection target Steps,
The identifier information associated with the identifier information registered in the first collection target identifier storage unit is identified and read out from the identifier information storage unit, and the second identifier is used as a log information collection target second identifier. A second collection target identifier registration step of automatically registering the second identifier by storing in the collection target identifier storage means,
When the transmitted and received SIP message signal includes the registered first identifier or the second identifier, log information of the SIP message signal is collected, and the collected log information is used as the log information. possess a log information collecting step of storing a signal log file in the storage means,
In the log information collecting step, when the second identifier is included in the SIP message signal, the signal for storing log information based on the first identifier associated with the second identifier A log information collecting method , wherein log information based on the second identifier is stored in a log file . In order to collect log information based on an identifier included in a SIP message signal, log information storage means for storing the collected log information, and identifier information storage means in which two pieces of identifier information are associated and stored in advance Input means for inputting identifier information of log information collection target, first collection target identifier storage means for storing information of the first identifier, and second collection target identifier for storing information of the second identifier A computer on a protocol monitor device comprising storage means ;
First collection target identifier registration for registering the first identifier by storing the identifier information input by the input unit in the first collection target identifier storage unit as the first identifier of the log information collection target Steps,
The identifier information associated with the identifier information registered in the first collection target identifier storage unit is identified and read out from the identifier information storage unit, and the second identifier is used as a log information collection target second identifier. A second collection target identifier registration step of automatically registering the second identifier by storing in the collection target identifier storage means,
When the transmitted and received SIP message signal includes the registered first identifier or the second identifier, log information of the SIP message signal is collected, and the collected log information is used as the log information. storage means to perform a log information collecting step of storing a signal log file,
In the log information collecting step, when the second identifier is included in the SIP message signal, the signal for storing log information based on the first identifier associated with the second identifier A log information collection program that stores log information based on the second identifier in a log file .

Images