Information processing device, information processing method, and information processing program

Abstract

An xFlow conversion device (10) collects, from each collection router, sample data of packets of each flow that were sampled by the collection router. Thereafter, the xFlow conversion device (10) resamples sample data outputted from an interface of a collection router set from a user (for example, a maintenance person) among the collected sample data at a resampling rate set by the user. Thereafter, using resampled sample data of packets of a flow, the xFlow conversion device (10) creates flow statistical information relating to this flow and outputs the flow statistical information.

Description

Technical Field

[0004] ,

[0006] , , , , , ,

[0005] , , , , , , ,

[0001] The present invention relates to an information processing apparatus, an information processing method, and an information processing program for creating flow statistical information using sampling data of packets in each flow.

Background Art

[0002] Conventionally, in order to visualize the traffic of each flow in a carrier network, information (for example, header information) of each flow has been obtained from each router (collection router) operating in the carrier network.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Patent Document 2

Summary of the Invention

Problems to be Solved by the Invention

[0004] It is preferable that the amount of information of each flow obtained from each collection router can be flexibly changed according to the situation. To change the amount of information of each flow, it is necessary to change the sampling rate of the information of each flow in each collection router, but the sampling rate cannot be flexibly changed. For example, there has been a problem that the sampling rate of each flow cannot be flexibly changed for flows accommodated in different interfaces of the collection router.

[0005] Therefore, an object of the present invention is to solve the above-described problems and flexibly change the amount of information of each flow without changing the settings of the collection router.

Means for Solving the Problems

[0006] To solve the aforementioned problems, the present invention is characterized by comprising: a resampling setting unit that accepts input from a user for identification information of a router that accommodates flows to be resampled and the interface of the router, and for setting the resampling rate of the flows; a data receiving unit that receives sample data of packets of each flow sampled at a predetermined sampling rate in the router from the router; a resampling unit that resamples the sample data of packets of flows accommodated in the router and interface set by the user from the received sample data at the set resampling rate; an information creation unit that creates flow statistics information relating to the flows using the resampled sample data of packets of the flows; and an information output unit that outputs the created flow statistics information. [Effects of the Invention]

[0007] According to the present invention, the amount of information for each flow can be flexibly changed without making any configuration changes to the collection router. [Brief explanation of the drawing]

[0008] [Figure 1] Figure 1 is a diagram illustrating the overview of the xFlow conversion device. [Figure 2] Figure 2 is a diagram illustrating the overview of the xFlow conversion device. [Figure 3] Figure 3 is a diagram illustrating the overview of the resampling settings in the xFlow transformer. [Figure 4] Figure 4 is a diagram illustrating the overview of resampling in the xFlow transformer. [Figure 5] Figure 5 shows an example of the configuration of an xFlow conversion device. [Figure 6] Figure 6 is a flowchart showing an example of the processing steps performed by the xFlow converter. [Figure 7] Figure 7 shows a computer running an information processing program. [Modes for carrying out the invention]

[0009] The following describes embodiments for carrying out the present invention with reference to the drawings. The present invention is not limited to these embodiments.

[0010] The overview of the information processing device (xFlow converter) of this embodiment will be explained using Figures 1 to 4. As shown in Figure 1, the collection router samples the xFlow packets that are received by its collection router. For example, the collection router samples the header information of the User A flow packets received at IF:1 and the header information of the User B flow packets received at IF:N. The xFlow converter 10 then collects the data sampled by each collection router (sample data of each xFlow packet).

[0011] Subsequently, as shown in Figure 2, the xFlow converter 10 resamples (resamples) the sample data of xFlow packets collected from each collection router based on the resampling settings configured in advance by the user. Then, the xFlow converter 10 creates flow statistics using the resampled sample data.

[0012] This resampling configuration information includes, for example, the IP address and IF (INPUT IF, OUTPUT IF) of the collection router that accommodates the flow to be resampled, as well as the resampling rate, as shown by reference numeral 301 in Figure 3. The various information set in this resampling configuration information is entered, for example, by a carrier network maintenance person.

[0013] For example, as shown in FIG. 3, the resampling setting unit 141 of the xFlow conversion device 10 creates resampling setting information (see reference numeral 301) based on the setting input by a maintenance person or the like. Then, the resampling unit 143 performs resampling on the sample data of the xFlow packets received from each collection router based on the resampling setting information.

[0014] For example, as shown in FIG. 4, the resampling unit 143 resamples the sample data of the flow of INPUT IF: N and OUTPUT IF: N received from the collection router with the IP address: X.X.X.X at a resampling rate of 1 / 10 based on the resampling setting information (see reference numeral 301 in FIG. 3).

[0015] For example, when the sample data of the flow of INPUT IF: N and OUTPUT IF: N is sent 10 times from the collection router with the IP address: X.X.X.X, the resampling unit 143 discards 9 times of the sample data out of the 10 times of sample data. That is, the resampling unit 143 reduces the sampling data of the flow sent from the collection router to 1 / 10.

[0016] Note that the resampling unit 143 does not perform resampling on the sample data for which resampling is not set in the resampling setting information (see reference numeral 301 in FIG. 3) among the sample data received from each collection router. For example, the resampling unit 143 does not perform resampling on the sample data of the flows other than INPUT IF: N and OUTPUT IF: N of the collection router with the IP address: X.X.X.X, and outputs the sample data as it is.

[0017] After that, the information creation unit 144 creates flow statistical information using the sample data output from the resampling unit 143.

[0018] According to such an xFlow conversion device 10, the amount of sample data used for creating flow statistical information can be adjusted for each flow (for each IF of the collection router).

[0019] For example, if the amount of traffic of the flow of IF:N of the collection router is large and it is desired to reduce the sample data by 1 / 10, the maintainer sets the resampling rate of the flow to 1 / 10 in the resampling setting information (see reference numeral 301 in FIG. 3). Thereby, the xFlow conversion device 10 can reduce the amount of sample data of the flow of IF:N by 1 / 10 and create flow statistical information.

[0020] As shown in FIG. 4, when the sampling rate of the flow of IF:N in the collection router is 1 / 10 and the resampling rate of the flow in the xFlow conversion device 10 is 1 / 10, the final sampling rate of the flow of IF:N is 1 / 10 × 1 / 10 = 1 / 100. Therefore, the information creation unit 144 sets the sampling rate of the flow of IF:N in the flow statistical information (see reference numeral 401) to 1 / 100.

[0021] Thereafter, the xFlow conversion device 10 outputs the created flow statistical information to, for example, the visualization APL group (the APL group that visualizes the state of the network) shown in FIGS. 1 and 2. The visualization APL group processes the flow statistical information together with, for example, the flow information, routing information, topology information, etc. of each flow and accumulates it in the data lake.

[0022] [Configuration example] Next, a configuration example of the xFlow conversion device 10 will be described using FIG. 5. The xFlow conversion device 10 includes, for example, a communication unit 11, an input / output unit 12, a storage unit 13, and a control unit 14.

[0023] The communication unit 11 is an interface for transmitting and receiving various data with other devices. The communication unit 11 receives, for example, sample data of xFlow packets from the collection router via the network.

[0024] The input / output unit 12 is an interface that handles the input and output of various types of data. For example, the input / output unit 12 receives input of various settings related to resampling from network maintenance personnel, etc. The input / output unit 12 also outputs flow statistics information created by the control unit 14 to the visualization APL group, for example.

[0025] The memory unit 13 stores data, programs, etc., that are referenced when the control unit 14 performs various processes. The memory unit 13 is implemented by semiconductor memory elements such as RAM (Random Access Memory) and flash memory, or by storage devices such as hard disks and optical discs. For example, the memory unit 13 stores resampling setting information (reference numeral 301 in Figure 3).

[0026] The control unit 14 is responsible for controlling the entire xFlow conversion device 10. The functions of the control unit 14 are realized, for example, by the CPU (Central Processing Unit) executing a program stored in the memory unit 13. The control unit 14 includes, for example, a resampling setting unit 141, a data receiving unit 142, a resampling unit 143, an information creation unit 144, and an information output unit 145.

[0027] The resampling setting unit 141 receives input from a user (e.g., a maintenance worker) including identification information of the collection router that accommodates the flow to be resampled (e.g., an IP address), identification information of the interface (IF), and the setting of the resampling rate. Based on the settings input from the user, the resampling setting unit 141 creates resampling setting information (reference numeral 301 in Figure 3).

[0028] The data receiving unit 142 receives sample data from each collection router. The resampling unit 143 resamples the sample data of the packets of flows that are accommodated in the collection routers and interfaces set by the user, from the sample data received by the data receiving unit 142, at the resampling rate set by the user.

[0029] For example, the resampling unit 143 refers to the header information of the received sample data and resamples the sample data of the flow to be resampled, as set in the resampling setting information, at the resampling rate (e.g., 1 / 10) set in the resampling setting information.

[0030] Furthermore, the resampling unit 143 does not resample sample data for flows that are not set as targets for resampling in the resampling setting information. In other words, the resampling unit 143 outputs resampled sample data for sample data that is targeted for resampling, and outputs the sample data as is for sample data that is not targeted for resampling.

[0031] The information creation unit 144 uses the sample data output by the resampling unit 143 to create flow statistics information for each flow.

[0032] For example, the information creation unit 144 creates flow statistics for flows that have been resampled by the resampling unit 143 using the resampled sample data. Furthermore, for flows that are not subject to resampling, the information creation unit 144 creates flow statistics for those flows using the received sample data as is.

[0033] The information output unit 145 outputs flow statistics information for each flow created by the information creation unit 144.

[0034] [Example of processing procedure] Next, an example of the processing procedure performed by the xFlow converter 10 will be described. First, the resampling setting unit 141 of the xFlow converter 10 sets the resampling settings (S1).

[0035] For example, the resampling setting unit 141 receives input from a user (e.g., a maintenance worker) including the IP address and interface identification information of the collection router that accommodates the flow to be resampled, as well as the resampling rate setting for that flow. The resampling setting unit 141 then creates resampling rate setting information based on the input information.

[0036] After S1, when the data receiving unit 142 receives sample data for each flow from the collection router (S2), the resampling unit 143 resamples the sample data of the flows that are to be resampled from the received sample data based on the resampling setting information (S3). Then, the resampling unit 143 outputs the resampled sample data. The resampling unit 143 does not resample sample data that is not to be resampled, and outputs the sample data received in S2 as is.

[0037] After S3, the information creation unit 144 creates flow statistics using the sample data output by the resampling unit 143 in S3 (S4). Then, the information output unit 145 outputs the flow statistics created in S4 (S5).

[0038] With this xFlow conversion device 10, the amount of information (sample data) for each flow can be flexibly changed without making any configuration changes to the collection router.

[0039] [System configuration, etc.] Furthermore, the components of each part shown in the diagram are functional concepts and do not necessarily need to be physically configured as shown. In other words, the specific forms of distribution and integration of each device are not limited to those shown in the diagram, and all or part of them can be functionally or physically distributed and integrated in any unit according to various loads and usage conditions. Moreover, all or any part of the processing functions performed by each device can be realized by a CPU and the program executed on that CPU, or by hardware using wired logic.

[0040] Furthermore, among the processes described in the embodiments described above, all or part of the processes described as being performed automatically can be performed manually, or all or part of the processes described as being performed manually can be performed automatically by known methods. In addition, the processing procedures, control procedures, specific names, and information including various data and parameters shown in the above document and drawings can be arbitrarily changed unless otherwise specified.

[0041] [program] The aforementioned xFlow conversion device 10 can be implemented by installing a program (information processing program) as packaged software or online software on a desired computer. For example, by having the above program run on an information processing device, the information processing device can function as the xFlow conversion device 10. The information processing device referred to here includes mobile communication terminals such as smartphones, mobile phones and PHS (Personal Handyphone System), as well as terminals such as PDA (Personal Digital Assistant).

[0042] Figure 7 shows an example of a computer that executes an information processing program. Computer 1000 has, for example, memory 1010 and a CPU 1020. Computer 1000 also has a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. These components are connected by a bus 1080.

[0043] Memory 1010 includes ROM (Read Only Memory) 1011 and RAM (Random Access Memory) 1012. ROM 1011 stores, for example, a boot program such as BIOS (Basic Input Output System). The hard disk drive interface 1030 is connected to the hard disk drive 1090. The disk drive interface 1040 is connected to the disk drive 1100. For example, a removable storage medium such as a magnetic disk or optical disk is inserted into the disk drive 1100. The serial port interface 1050 is connected to, for example, a mouse 1110 and a keyboard 1120. The video adapter 1060 is connected to, for example, a display 1130.

[0044] The hard disk drive 1090 stores, for example, the OS 1091, application program 1092, program module 1093, and program data 1094. That is, the program that defines each process executed by the xFlow conversion device 10 is implemented as a program module 1093 in which executable code for a computer is written. The program module 1093 is stored, for example, in the hard disk drive 1090. For example, a program module 1093 for executing a process similar to the functional configuration in the xFlow conversion device 10 is stored in the hard disk drive 1090. Note that the hard disk drive 1090 may be replaced by an SSD (Solid State Drive).

[0045] Furthermore, the data used in the processing of the above-described embodiment is stored as program data 1094 in, for example, memory 1010 or hard disk drive 1090. The CPU 1020 then reads the program module 1093 and program data 1094 stored in memory 1010 or hard disk drive 1090 into RAM 1012 as needed and executes them.

[0046] Furthermore, the program module 1093 and program data 1094 are not limited to being stored in the hard disk drive 1090; for example, they may be stored in a removable storage medium and read by the CPU 1020 via a disk drive 1100 or the like. Alternatively, the program module 1093 and program data 1094 may be stored in another computer connected via a network (LAN (Local Area Network), WAN (Wide Area Network), etc.). The program module 1093 and program data 1094 may then be read by the CPU 1020 from the other computer via a network interface 1070. [Explanation of symbols]

[0047] 10 xFlow converter 11 Communications Department 12 Input / output section 13 Storage section 14 Control Unit 141 Resampling setting section 142 Data receiving unit 143 Resampling section 144 Information Creation Department 145 Information output section

Claims

1. A resampling setting unit that accepts input from a user for identification information of a router that accommodates the flow to be resampled and the interface of the router, and the setting of the resampling rate of the flow, A data receiving unit that receives sample data of packets of each flow sampled at a predetermined sampling rate in the router from the router, A resampling unit that resamples sample data of packets in flows that are accommodated in the router and interface configured by the user, from the received sample data, at the configured resampling rate, An information creation unit that creates flow statistics information relating to the flow using sample data of the resampled flow packets, An information output unit that outputs the created flow statistics information and Equipped with, The aforementioned information creation unit, An information processing device characterized in that, for flows resampled by the resampling unit, flow statistics information relating to the flow is created using sample data of the resampled flow packets, and for flows not subject to resampling, flow statistics information relating to the flow is created using the received sample data of the flow packets as is.

2. The aforementioned information creation unit, The sampling rate of the flow to be resampled is set as the sampling rate of the flow in the flow statistics information for that flow, and output, by multiplying the sampling rate of the packets of each flow in the router that accommodates the flow to be resampled by the resampling rate of the flow to be resampled. The information processing apparatus according to feature 1.

3. An information processing method performed by an information processing device, A process of receiving input from a user for identification information of a router that accommodates the flow to be resampled and the interface of the router, and the setting of the resampling rate of the flow, The process of receiving sample data of packets for each flow sampled at a predetermined sampling rate in the router from the router, The process of resampling the sample data of the packets of the flow that will be accommodated in the router and interface set by the user, from the received sample data, at the set resampling rate, A step of creating flow statistics information relating to the flow using the resampled sample data of the flow packets, A step of outputting the created flow statistics information and Includes, The above-mentioned process for creation is: An information processing method characterized in that, for the resampled flow, flow statistics information relating to the flow is created using sample data of the resampled flow packets, and for flows not subject to resampling, flow statistics information relating to the flow is created using the received sample data of the flow packets as is.

4. A process of receiving input from a user for identification information of a router that accommodates the flow to be resampled and the interface of the router, and the setting of the resampling rate of the flow, The process of receiving sample data of packets for each flow sampled at a predetermined sampling rate in the router from the router, The process of resampling the sample data of the packets of the flow that will be accommodated in the router and interface set by the user, from the received sample data, at the set resampling rate, A step of creating flow statistics information relating to the flow using the resampled sample data of the flow packets, A step of outputting the created flow statistics information and Have the computer run it, The above-mentioned process for creation is: An information processing program that, for the resampled flows, creates flow statistics information for those flows using sample data of the resampled flow packets, and for flows that are not subject to resampling, creates flow statistics information for those flows using the received sample data of the flow packets as is.

Images