JP2009065256A - Traffic information processing apparatus, traffic information processing method, and traffic information processing program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a traffic information processing apparatus and the like capable of generating traffic data at high speed with high efficiency by dividing traffic information by predetermined unit, analyzing parallel processing, and accumulating it. <P>SOLUTION: The traffic information processing apparatus 100 for analyzing and accumulating the traffic information transmitted by a network system includes: a traffic information division processing part 120 for dividing the traffic information into information every ID to generate sub-traffic information; a traffic information analysis processing part 140 for performing analysis processing in parallel every sub-traffic information divided by the traffic information division processing part 120; and a traffic data accumulation processing part 160 for accumulating the result analyzed by the traffic information analysis processing part 140 as traffic data. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a traffic information processing apparatus that analyzes and accumulates information of a traffic file acquired from a network system, and more particularly to a traffic information processing apparatus that can succinctly analyze traffic information in a short time.

  The network management system is composed of a network system (hereinafter referred to as NE) and a management server. The traffic information collected by the management server from the NE is configured in various file formats such as binary files and CSV files. When traffic data is generated, the traffic data generated by the management server is stored as unified data by a parsing rule described in a definition file as a simple language. FIG. 21 shows a system configuration diagram of a conventional network management system. The traffic information transmitted from each NE is collected by the management server. The management server analyzes the received traffic information to generate and store traffic data. The network monitor refers to the generated traffic data and monitors the network state.

  In the generation of traffic data, it is necessary to analyze and accumulate the traffic information periodically transmitted from the NE until the traffic information of the next cycle is transmitted, so that the processing time can be shortened and the processing efficiency can be improved. It has been demanded. However, when the traffic information to be parsed is a binary file or the like, it is necessary to perform sequential processing such as parse analysis in order from the beginning of the file (see FIG. 21), so traffic from multiple NEs. When information is transmitted, the analysis time has increased. Further, the traffic information is transmitted in a separate file for each NE, and the parsing is performed for each file. Therefore, the management server accumulates traffic data for each NE. Therefore, when referring to the same type of traffic data of a plurality of NEs, it is necessary to access a plurality of NEs for each NE, which increases the processing time.

  Although it is not a technology related to traffic information, a data processing method capable of performing a large number of data processing such as search and update of long data at high speed and efficiently with a minimum necessary input / output processing using a limited input / output buffer area, and a data processing method therefor A technique related to the apparatus is disclosed in Patent Document 1. According to Patent Document 1, under the control of the record search processing unit 13, the record update processing unit 14, the record deletion processing unit 15, and the record storage processing unit 16, the sub-record selection processing unit 17 operates the record operation instruction 1. The sub-record unit parallel input / output processing unit automatically selects the minimum sub-record necessary for instruction execution by unit and uses the sub-record unit input / output buffer managed by the sub-record unit input / output buffer management processing unit 18 19 is characterized in that independent input / output is performed in units of sub-records.

Similarly, although not related to traffic information, Patent Document 2 discloses a technology related to a communication apparatus that can share processing units in different communication systems and can easily cope with changes and expansions of system functions. . According to this patent document 2, the identifier assigning unit 1 detects the head position of the data block and assigns the identifier U-1, and thereafter each time the data of the minimum unit amount of processing is input, the identifier U-2, U-3,... Are assigned and input in parallel to the four processing units A1 to A4 of the data processing unit 2, and the processing units A1 to A1 that are selectively activated only when a predetermined identifier is input. By executing the process on the minimum unit amount of data according to A4, the data length of the corresponding type of data in the data block is changed regardless of the length. Can be used as is.
Japanese Patent No. 3294326 Japanese Patent Laid-Open No. 9-247234

  However, the technique of Patent Document 1 divides record data into a plurality of sub-records and performs input / output in parallel to improve the processing speed and efficiency. However, the record length of the divided sub-record is the last one. Since non-sub-records have a fixed length and only the last sub-record is variable length and associated with a pointer, the structure of record data and the number of sub-records that can be divided are limited, speeding up processing and efficiency It is not enough in terms of conversion. In addition, when trying to support variable-length subrecords, all subrecords must be associated with pointers, which can only be handled by a system having a pointer function, and management becomes complicated. Has a problem.

  Further, the technique of Patent Document 2 assigns an identifier to data of the minimum unit amount of processing and distributes and executes the processing, so that the data length of the corresponding type of data in the data block is determined. However, even if the data length is changed, it can be used as it is, but only the processing unit associated with the identifier is activated and executes the processing, so that the processing speed is increased. However, the problem is insufficient.

  Accordingly, the present invention has been made to solve the above-described problems, and generates traffic data at high speed and high efficiency by dividing traffic information into predetermined units, analyzing and accumulating in parallel processing. An object is to provide a traffic information processing apparatus, a traffic information processing method, and a traffic information processing program.

(1. Division of traffic information)
The traffic information processing apparatus according to the present invention is a traffic information processing apparatus that analyzes and accumulates traffic information transmitted from a network system, and divides the traffic information into information for each pre-assigned ID to obtain sub-traffic information. Traffic information dividing means for generating traffic information, traffic information analyzing means for performing analysis processing in parallel for each sub-traffic information divided by the traffic information dividing means, and traffic for storing the results analyzed by the traffic information analyzing means as traffic data And a data storage means.

  As described above, in the present invention, the traffic information is divided into information for each ID assigned in advance to generate sub-traffic information, and the analysis processing is performed in parallel for each of the divided sub-traffic information. The processing time can be shortened and the processing can be efficiently performed as compared with the case where the processing is performed sequentially from the top of the device, and the throughput of the entire apparatus can be improved.

In addition, since an ID is assigned to the traffic information in advance, a uniform analysis process can be performed by dividing the traffic information into information for each ID.
Furthermore, since the processing is speeded up and made efficient, it is possible to bring about a favorable environment for the response to the operator who performs processing with reference to the accumulated traffic data.
Furthermore, by realizing simultaneous processing using a plurality of threads or the like, it is possible to improve the processing speed following resource enhancement, such as increasing the number of CPUs mounted.

(2. Assignment of attribute information)
The traffic information processing apparatus according to the present invention comprises: attribute information holding means for holding attribute information indicating the same processing content preset for each ID with respect to the sub-traffic information; and attribute information held by the attribute information holding means. Attribute information providing means for assigning corresponding to each ID of the sub-traffic information.

  In this way, in the present invention, for each divided sub-traffic information, corresponding corresponding attribute information is given in advance, so analysis processing and storage processing according to attributes can be performed uniformly, Processing can be made more efficient. In addition, since the accumulated traffic data is accumulated with the attribute information added, it can be easily and flexibly operated when the operator later handles the traffic data (for example, when performing statistical processing). It becomes possible to do.

(3. Unnecessary processing according to attribute information)
In the traffic information processing apparatus according to the present invention, the traffic information analysis means and / or the traffic data storage means performs analysis processing and / or storage processing based on attribute information given by the attribute information addition means. Is not executed.

As described above, in the present invention, the traffic information analysis unit and / or the traffic data storage unit do not execute the analysis process and / or the storage process based on the attribute information given by the attribute information addition unit. Unnecessary processing can be omitted, processing time can be shortened, and processing load on the apparatus can be reduced.
In addition, since only necessary traffic data is accumulated, it is not necessary for the operator to perform a sorting operation for each ID, and the burden on the operator can be reduced.

(4. Processing of traffic information from multiple NEs)
In the traffic information processing apparatus according to the present invention, the traffic information storage unit aggregates and stores the traffic information transmitted from a plurality of the network systems based on the information content or information for each ID. And

As described above, in the present invention, traffic information transmitted from a plurality of network systems is accumulated and accumulated based on the information content or information for each ID, so that the operator refers to the accumulated traffic data. It is not necessary to refer to a plurality of data parts, and information of a plurality of NEs can be confirmed only by referring to only one data part.
Also, when referring to the accumulated traffic data, the load on the apparatus is reduced, and the processing can be performed efficiently.

(5. Distribution of traffic information)
The traffic information processing apparatus according to the present invention includes a distribution information holding unit that holds information relating to the distribution of the sub-traffic information, and the sub-traffic information for each related content based on the distribution information held by the distribution information holding unit. Or a distribution processing unit that distributes each ID, and the traffic information analysis unit and / or the traffic data storage unit performs an analysis process according to a result distributed by the distribution processing unit, and / or An accumulation process is performed.

  As described above, in the present invention, the sub-traffic information is distributed for each related content or ID, and the analysis process and / or the storage process are performed according to the distributed result. Since the previous arithmetic processing result by the same process can be diverted to prevent duplication of arithmetic processing, the processing can be made more efficient.

Further, since related information is collected, analysis processing and storage processing can be performed in a series of processes, and further processing efficiency can be achieved.
Furthermore, the number of threads generated by the distribution function can be reduced, and resources can be saved and used.
Furthermore, when traffic data is accumulated, data is accumulated from a thread determined to some extent, so that it can be efficiently performed when performing exclusive processing or the like.

  Embodiments of the present invention will be described below. The present invention can be implemented in many different forms. Therefore, the present invention should not be construed based only on the description of the present embodiment. Also, the same reference numerals are given to the same elements throughout the present embodiment.

  In this embodiment, the apparatus will be mainly described. However, as will be apparent to those skilled in the art, the present invention can be implemented as a system, a method, and a program for operating a computer. In addition, the present invention can be implemented in hardware, software, or hardware and software embodiments. The program can be recorded on any computer-readable medium such as a hard disk, CD-ROM, DVD-ROM, optical storage device, or magnetic storage device. Furthermore, the program can be recorded on another computer via a network.

(First embodiment of the present invention)
(1 Traffic information processing device module configuration)
FIG. 1 is a module configuration diagram of a traffic information processing apparatus according to the present embodiment.
The traffic information processing apparatus 100 includes a traffic information receiving unit 110, a traffic information division processing unit 120, a syntax analysis rule reading processing unit 130, a traffic information analysis processing unit 140, a traffic information accumulation processing unit 150, a traffic data unit 160, and a traffic data display. Unit 170.

The traffic information receiving unit 110 performs a process of receiving the traffic information transmitted from the monitoring target device 10 as a traffic file. At this time, the contents of the traffic information are received in a state classified by the ID.
The monitoring target device 10 in the present invention is a device such as a telephone exchange.

The traffic information division processing unit 120 performs a process of dividing the traffic file received by the traffic information receiving unit 110 for each classified ID.
It is not always necessary to divide a traffic file for each ID. For example, it may be divided into a plurality of IDs depending on the information content, or may be divided at a predetermined length (number of bits).

  The syntax analysis rule reading processing unit 130 performs processing for reading a syntax analysis rule described in a definition file as a simple language. In this process, information divided for each ID is processed in parallel.

  The traffic information analysis processing unit 140 analyzes traffic information in accordance with the analysis rule read by the syntax analysis rule reading processing unit 130. In this process, information divided for each ID is processed in parallel.

  The traffic information accumulation processing unit 150 performs processing for accumulating the analyzed traffic information in the traffic data unit 160. In this process, information divided for each ID is processed in parallel.

  The traffic data display unit 170 performs processing for displaying the data accumulated in the traffic data unit on the screen. The operator looks at the information displayed on the screen and manages the network system.

(2. Operation of traffic information processing device)
FIG. 2 is a sequence diagram showing processing of the traffic information processing apparatus according to the present embodiment.
First, when there is an information display request in the monitoring target device 10, the traffic file is transmitted to the traffic information processing device 100. The transmitted traffic file is received by the traffic information receiving unit 110. The traffic file received by the traffic information receiving unit 110 is divided by the traffic information division processing unit 120 for each traffic ID.

  Here, the division of the traffic file will be described. FIG. 3 is a diagram illustrating a state in which the traffic file is divided for each ID. The traffic file shown in FIG. 3A is classified into 10 IDs and holds information from “A” to “J”. Each of these alphabets represents unparsed binary data. Conventionally, analysis processing and storage processing are performed sequentially from ID1 in this state. FIG. 3B shows a traffic file after division. In this embodiment, as shown in the figure, information is divided for each ID, a thread is generated for each divided information, and analysis processing and storage processing are performed in parallel. By performing processing in parallel in this way, in the case of FIG. 3, the time required for analysis processing is theoretically reduced to 1/10.

  Returning to FIG. 2, when the traffic file is divided for each traffic ID, the syntax analysis rule reading processing unit 130 reads the analysis rule for each traffic information divided for each traffic ID, and the traffic information analysis processing unit 140 Analyze traffic information. The analyzed traffic information is stored in the traffic data unit 160 by the traffic information storage processing unit 150.

  Here, analysis processing and accumulation processing after division will be described. FIG. 4 is a diagram illustrating a state in which the divided traffic information is analyzed and accumulated in parallel. The traffic file classified by the ID is divided by the traffic information division processing unit 120. The divided information is read in parallel by the parsing rule reading processing unit 130 and multiplexed and analyzed by the traffic information analysis processing unit 140 as a distributed process. The analyzed traffic information is stored in the traffic data unit 160 by the traffic information storage processing unit 150. By this processing, parallel processing and multiple analysis for each ID are executed for traffic information that continues to be distributed in large quantities and hugely, so that the processing speed can be improved and the processing time can be shortened.

  Returning to FIG. 2, when the traffic data information is accumulated in the traffic data section 160, the traffic data display section 170 displays the information of the traffic data section on the screen and ends the process. The processing from the parsing rule reading processing unit 130 to the traffic information storage unit 150 is performed in parallel for each traffic information divided for each ID as described above.

(Second embodiment of the present invention)
(1 Traffic information processing device module configuration)
FIG. 5 is a module configuration diagram of the traffic information processing apparatus according to the present embodiment. The difference from the first embodiment is that an attribute information adding unit 510, an attribute information possessing unit 520, and an ID type determination processing unit 530 are provided.

The attribute information holding unit 520 holds information related to the processing content set for each ID to be divided.
The information held here is information related to the processing content for each unit to be divided. For example, when the information is divided for each of a plurality of IDs, information on processing contents is held in units of a plurality of IDs.

The attribute information giving unit 510 performs processing for giving information for each ID held by the attribute information holding unit 520 in association with each ID.
The ID type determination processing unit 530 performs determination processing based on the information provided by the attribute information addition unit 510. Analysis processing and storage processing are executed according to the result of the determination. Further, the process performed by the operator is also efficiently performed according to the determination result.

(2 Operation of traffic information processing device)
FIG. 6 is a sequence diagram showing processing of the traffic information processing apparatus according to the present embodiment.
Since the processing up to the traffic information division processing unit 120 is the same as that in the first embodiment, description thereof is omitted. The attribute information adding unit 510 reads the information of the attribute information holding unit 520 and assigns the read attribute information corresponding to each ID to the traffic file divided for each ID.

  Here, the provision of attribute information will be described. FIG. 7 is an example of attribute information held by the attribute information holding unit 520. From the left column, items of ID, screen display, accumulation presence / absence, range value determination, analysis presence / absence,... Are arranged, and each row is an ID. That is, whether to perform screen display processing, storage processing, and other processing is determined for each ID, and the attribute information holding unit 520 holds such information. In this example, ID1 to ID4 and ID7 to ID9 are “YES” for screen display, and screen display is performed. Other IDs “NO” are not displayed. Similarly, regarding the presence / absence of accumulation, accumulation processing is not performed for ID2 and ID4, and data is discarded after analysis. Similarly, information on processing contents is held for each ID for various processing.

  FIG. 8 is a diagram illustrating how attribute information is added to traffic information. Attribute information is assigned to the traffic information divided for each ID by the traffic information division processing unit 120 in association with the ID. That is, the information A of ID1 is subjected to screen display, accumulation processing, and range value determination processing, and the information B of ID2 is subjected to screen display and range value determination processing, but is not subjected to accumulation processing. In this way, since the processing content can be set for each ID, the processing can be simplified and performed efficiently.

Returning to FIG. 6, the ID type determination processing unit 530 performs determination processing based on the assigned attribute information. In accordance with the determination processing, the parsing rule reading processing unit 130 reads the analysis rule, the traffic information analysis processing unit 140 analyzes the traffic information, and the traffic information storage processing unit 150 stores the traffic information in the traffic data unit 160. . For example, if the ID type determination processing unit 530 determines that the traffic data is not to be stored based on the attribute information provided, the traffic data is not stored.
Since the subsequent processing is the same as that of the first embodiment, description thereof is omitted.

(Third embodiment of the present invention)
(1 Traffic information processing device module configuration)
FIG. 9 is a module configuration diagram of the traffic information processing apparatus according to the present embodiment. The difference from the second embodiment is that an unnecessary information discard processing unit 910 is provided.
The unnecessary information discard processing unit 910 is a processing unit that discards information that does not require analysis processing or storage processing and prevents the processing from being executed.

(2 Operation of traffic information processing device)
FIG. 10 is a sequence diagram showing processing of the traffic information processing apparatus according to the present embodiment.
Since the processing up to the ID type determination processing unit 530 is the same as that of the second embodiment, the description thereof is omitted. For the traffic information determined to be unnecessary for the analysis processing and storage processing by the ID type determination processing unit 530, the unnecessary information discard processing unit 910 discards the traffic information and continues only the necessary traffic information. Execute. Since the subsequent processing is the same as that of the second embodiment, description thereof is omitted.

  Here, discarding of traffic information will be described. FIG. 11 is a diagram of traffic information to which attribute information is assigned for each ID. There are items in the sixth column that do not require analysis. Here, the analysis processing is not performed on the information of IDs (ID2 and ID4) for which “NO” is set. That is, traffic information that is not analyzed is unnecessary traffic information and may be discarded. Therefore, the unnecessary information discard processing unit 910 discards the traffic information.

  FIG. 12 is a diagram showing a state of processing when unnecessary information is discarded in the processing of analyzing and accumulating the divided traffic information in parallel. The information determined to be unnecessary by the ID type determination processing unit 530 is discarded by the unnecessary information discard processing unit 910, and only the remaining data is analyzed and stored. In FIG. 12, assuming that “necessary IDs: 1, 3, 5, 8” and “unnecessary IDs: 2, 4, 6, 7, 9, 10” are defined, the unnecessary information discard processing unit 910 displays “ID: When the traffic information of 2, 4, 6, 7, 9, 10 "is read, the traffic information analysis process is skipped. As a result, the traffic information that is analyzed and accumulated is only “necessary IDs: 1, 3, 5, and 8”, and unnecessary analysis processing is not required, the processing time can be shortened, and the accumulated data Since the amount is also reduced, the data area can be saved.

(Fourth embodiment of the present invention)
(1 Traffic information processing device module configuration)
FIG. 13 is a module configuration diagram of the traffic information processing apparatus according to the present embodiment. The difference from the third embodiment is that the traffic data section 160 is divided for each NE, each ID, and each information content.

  A traffic data section (for each NE) 161 is a traffic data section that holds traffic data for each network system. Access is facilitated when it is desired to collectively refer to information about one NE.

  The traffic data unit (for each ID) 162 is a traffic data unit that aggregates a plurality of NEs based on information for each ID and holds traffic data. Access to a plurality of NEs is facilitated when it is desired to refer to specific ID information collectively.

The traffic data part (for each information content) 163 is a traffic data part for collecting and holding traffic data for each information content based on the related information content. For a plurality of NEs, access is facilitated when it is desired to collectively refer to related information (for example, the number of transmissions and receptions, the number of packets and the amount of data).
In the present embodiment, the traffic data unit 160 is divided into the three data units, but the present invention is not limited to this. That is, the traffic data part may be held in more detail (three or more), or one or two traffic data parts may be held. The traffic data part can be added or changed according to the processing of the operator.

(2 Operation of traffic information processing device)
FIG. 14 is a sequence diagram showing processing of the traffic information processing apparatus according to the present embodiment.
Since the processing up to the traffic information analysis processing unit 140 is the same as that of the third embodiment, the description thereof is omitted.

  In FIG. 14, the processing of the attribute information adding unit 510, the ID type determination processing unit 530, and the unnecessary information exhaust processing unit 910 is omitted, but these processing may be included as is clear from the above embodiment. It does not have to be included.

  The traffic information accumulation processing unit 150 performs processing for accumulating traffic data by dividing a file for each NE, for each ID, or for each information content. In response to the operator's request, the traffic data display unit 170 accesses any one of the three files, displays the traffic data, and ends the process.

  Hereinafter, the processing of the traffic information accumulation processing unit 150 will be described. FIG. 15 shows two different NE traffic files. FIG. 15A shows the contents of the traffic file received from NE-a, and FIG. 15B shows the contents of the traffic file received from NE-b. The alphabet from “A” to “T” indicates binary data as described above.

  FIG. 16 is a diagram showing a state of processing when a plurality of different data storage methods are used in processing of analyzing and storing the divided traffic information in parallel. For each of a plurality of NEs, each transmitted traffic file is divided for each ID and analyzed, and as shown in the figure, the traffic information accumulation processing unit 150 accumulates data for each NE, each ID, or each information content. By doing so, the operator does not need to perform the two operations of node selection and ID selection, which are conventionally required, and can simply refer to the traffic data section (for each ID) 162. Also, when it is desired to refer to the traffic data for each information content, the information can be referred to simply by accessing the traffic data portion (for each information content) 163. For example, in FIG. 16, when the number of outgoing calls (ID1), the number of packets (ID3), and the data amount (ID8) are deeply related, it is desired to see the relationship between the number of outgoing calls, the number of packets, and the data amount in multiple NEs. Need only access the traffic data part (for each information content) 163 once. In addition, when it is desired to see the relationship between other information contents, the traffic on the operator can be reduced by adding a traffic data part as necessary.

(Fifth embodiment of the present invention)
(1 Traffic information processing device module configuration)
FIG. 17 is a module configuration diagram of the traffic information processing apparatus according to the present embodiment. The difference from the fourth embodiment is that a distribution information holding unit 1710 and a distribution processing unit 1720 are provided.
The distribution information holding unit 1710 holds information grouped for each related information content. For example, if the number of outgoing calls (ID: 1) and the number of incoming calls (ID: 4) are related, information in which ID1 and ID4 are grouped is held.

  The distribution processing unit 1720 performs processing for distributing and distributing analysis processing based on the grouped information held by the distribution information holding unit 1710. For example, when ID1 and ID4 are grouped, ID1 and ID4 analysis processing and storage processing are distributed to the same thread. By doing so, compared with the case where it accumulate | stores from various threads, a related process can be processed in series by one process, a process becomes simple and processing efficiency can be raised.

(2 Operation of traffic information processing device)
FIG. 18 is a sequence diagram showing processing of the traffic information processing apparatus according to the present embodiment.
Since the processing up to the traffic information division processing unit 120 is the same as that of the fourth embodiment, description thereof is omitted.
In FIG. 18, the processing of the attribute information adding unit 510, the ID type determination processing unit 530, and the unnecessary information exhaust processing unit 910 is omitted, but these processing may be included as is clear from the above embodiment. It does not have to be included.

The traffic information divided by the traffic information division processing unit 120 is distributed by the distribution processing unit 1720 so that related information is grouped. In the subsequent processing, the traffic information distributed by the distribution processing unit 1720 is aggregated, and analysis processing and storage processing are performed in a series of processes.
If the relevant information is set for each ID, the traffic data of the above-described traffic data portion (for each ID) 162 can be accumulated in a series of processes. If the information content is set for each information content, the above-described traffic data portion ( (For each information content) 163 traffic data can be accumulated in a series of processes.
In addition, grouping of related information may be performed based on attribute information. For example, by grouping traffic information that requires screen display processing, the screen display processing can be performed in one process.

  FIG. 19 is a diagram showing how the divided traffic information is distributed. The divided traffic information is distributed to each thread (corresponding to the calculation unit in the figure) via the distribution processing unit 1720. At this time, the relationship of the traffic information related to the distribution information holding unit 1710 is registered so that the related traffic information is distributed to the same thread. In the figure, ID1, ID4, and ID7 are distributed to the thread 1 as highly relevant information. Since ID2, ID5, and ID6 are also highly related, they are distributed to the threads 2. Since ID3, ID8, and ID9 are also highly related, they are distributed to the threads 3. Since ID 10 is not related to any ID, it is distributed to the threads 4. The subsequent analysis processing and storage processing are performed in a series of processes.

  Even when traffic files from multiple NEs are aggregated and stored for each ID, the ID1 information is distributed to the thread 1 and the ID2 information is distributed to the thread 2 (hereinafter distributed to ID10 in the same manner) as described above. If registered in the distribution information holding unit 1710, traffic information from a plurality of NEs can be aggregated for each ID in a series of processes to accumulate traffic data.

(Other embodiments of the present invention)
FIG. 20 is a diagram illustrating an example of the operation screen of the operator. On the screen of FIG. 20 (a), a list of nationwide regions and monitoring target devices is displayed. When the operator selects a traffic data area and a monitoring target device to be referred to in the list, the screen is switched to FIG. On the screen in FIG. 20B, a detailed list of monitored devices in the area selected on the screen in FIG. 20A and a list of traffic data items are displayed. When the operator selects a detailed region and traffic data item of the monitoring target device in the list, the operator can refer to detailed information of the monitoring target device in that region for each item of traffic data. FIG. 20C is an example showing detailed information of traffic data. The line graph at the top of the screen shows the relationship between the number of outgoing calls and time, and the horizontal bar graph at the bottom of the screen shows the number of outgoing calls in each region. The operator can determine the busy state from this information and monitor the entire network. Further, for example, it is possible to refer to the relationship between the number of outgoing calls and the number of incoming calls in a specific region, the relationship between time and the amount of data, and the like.

  In each of the above embodiments, a telephone exchange is assumed as a monitoring target device. However, an identifier is allocated in advance, and traffic information that can be processed uniformly can be held and transmitted. If it is a thing, it is not limited to an exchange.

  As described above, according to the traffic information processing apparatus according to the present invention, traffic data can be generated at high speed and with high efficiency by dividing and analyzing traffic information in a predetermined unit and analyzing and accumulating it in parallel processing. . In addition, by holding attributes for each traffic ID in units of files and performing analysis according to the file, analysis processing for unnecessary information can be skipped, processing time can be shortened, and the load on the apparatus can be reduced. Can save the storage area of information. Furthermore, the time required for referring to the traffic data can be reduced by collecting and storing the divided traffic information for each ID and information content. Furthermore, by distributing related information, analysis processing and storage processing can be performed in a series of processes, and processing time can be shortened and processing efficiency can be improved.

  Although the present invention has been described with the above embodiments, the technical scope of the present invention is not limited to the scope described in the embodiments, and various modifications or improvements can be added to these embodiments. . And embodiment which added such a change or improvement is also contained in the technical scope of the present invention. This is apparent from the claims and the means for solving the problems.

It is a module block diagram of the traffic information processing apparatus which concerns on 1st Embodiment. It is a sequence diagram which shows the process of the traffic information processing apparatus which concerns on 1st Embodiment. It is a figure which shows a mode that the traffic file was divided | segmented for every ID. It is the figure which showed a mode that the divided traffic information was analyzed and accumulate | stored in parallel. It is a module block diagram of the traffic information processing apparatus which concerns on 2nd Embodiment. It is a sequence diagram which shows the process of the traffic information processing apparatus which concerns on 2nd Embodiment. It is an example of the attribute information which an attribute information holding part hold | maintains. It is the figure which showed a mode that attribute information was provided to traffic information. It is a module block diagram of the traffic information processing apparatus which concerns on 3rd Embodiment. It is a sequence diagram which shows the process of the traffic information processing apparatus which concerns on 3rd Embodiment. It is a figure of the traffic information to which attribute information was given for every ID. It is the figure which showed the mode of the process at the time of discarding unnecessary information in the process which analyzes and accumulate | stores the divided traffic information in parallel. It is a module block diagram of the traffic information processing apparatus which concerns on 4th Embodiment. It is a sequence diagram which shows the process of the traffic information processing apparatus which concerns on 4th Embodiment. It is a figure which shows the traffic file of two different NE. It is the figure which showed the mode of the process at the time of utilizing the storage method of several different data in the process which analyzes and accumulate | stores the divided traffic information in parallel. It is a module block diagram of the traffic information processing apparatus which concerns on 5th Embodiment. It is a sequence diagram which shows the process of the traffic information processing apparatus which concerns on 5th Embodiment. It is the figure which showed a mode that the divided | segmented traffic information was distributed. It is the figure which showed an example of the operator's operation screen. It is a system configuration | structure figure of the conventional network management system.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Monitoring object apparatus 100 Traffic information processing apparatus 110 Traffic information receiving part 120 Traffic information division | segmentation process part 130 Syntax analysis rule reading process part 140 Traffic information analysis process part 150 Traffic information accumulation | storage process part 160 Traffic data part 161 Traffic data part (Each NE )
162 Traffic data part (per ID)
163 Traffic data section (for each information content)
170 Traffic Data Display Unit 510 Attribute Information Giving Unit 520 Attribute Information Holding Unit 530 ID Type Determination Processing Unit 910 Unnecessary Information Discarding Processing Unit 1710 Distribution Information Holding Unit 1720 Distribution Processing Unit

Claims (7)

In a traffic information processing apparatus that analyzes and accumulates traffic information transmitted from a network system,
Traffic information dividing means for generating sub-traffic information by dividing the traffic information into information for each ID assigned in advance;
Traffic information analyzing means for performing analysis processing in parallel for each sub-traffic information divided by the traffic information dividing means;
A traffic information processing apparatus comprising: traffic data storage means for storing results analyzed by the traffic information analysis means as traffic data. The traffic information processing apparatus according to claim 1,
Attribute information holding means for holding attribute information indicating the same processing content preset for each ID with respect to the sub-traffic information;
9. A traffic information processing apparatus comprising: attribute information providing means for assigning attribute information held by the attribute information holding means in association with each ID of the sub-traffic information. The traffic information processing apparatus according to claim 2,
The traffic information analyzing means and / or the traffic data accumulating means does not execute an analysis process and / or an accumulating process based on the attribute information given by the attribute information giving means. Information processing device. The traffic information processing apparatus according to any one of claims 1 to 3,
A traffic information processing apparatus, wherein the traffic information storage means aggregates and stores the traffic information transmitted from a plurality of the network systems based on the information content or information for each ID. The traffic information processing apparatus according to any one of claims 1 to 4,
Distribution information holding means for holding information relating to distribution of the sub-traffic information;
Distribution processing means for distributing the sub-traffic information for each related content or ID based on the distribution information held by the distribution information holding means;
The traffic information analysis means and / or the traffic data storage means performs an analysis process and / or a storage process according to a result distributed by the distribution processing means. apparatus. In a traffic information processing method for analyzing and storing traffic information transmitted from a network system,
A traffic information dividing step for dividing the traffic information into information for each ID to generate sub-traffic information;
A traffic information analysis step for performing an analysis process for each sub-traffic information divided in the traffic information division step;
A traffic information storage method comprising: a traffic data storage step of storing the result analyzed in the analysis step as traffic data. In a traffic information processing program for operating a computer to analyze and store traffic information transmitted from a network system,
Traffic information dividing means for dividing the traffic information into information for each ID and generating sub-traffic information;
Traffic information analyzing means for performing analysis processing for each sub-traffic information divided by the traffic information dividing means;
A traffic information processing program for operating a computer as traffic data storage means for storing results analyzed by the analysis means as traffic data.

Images