JP2005236908A - Data repeater - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data repeater which detects the passage of a specific packet or a specific communication pattern. <P>SOLUTION: The data repeater 1 allows monitoring conditions to be set up for monitoring the passage of a specific packet, monitors packets, on the basis of monitoring conditions, and, if detecting a packet meeting the setting, actuates a informing means to light e.g., an LED or produce a specific sound to inform a user that the specific packet has passed. Thus, the user can easily know that the packet to be monitored has passed. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a data relay apparatus that monitors the passage of a specific packet among packets exchanged between communication devices and communication networks, and notifies the passage.

Conventionally, in a hub, which is a kind of device that relays data exchanged between communication networks and communication devices, the transmission status, reception status, collision status, etc. can be displayed on the LED, and the blinking time of the LED There was something that could be set. (For example, refer to Patent Document 1).
JP-A-7-143129

  Recently, with the spread of broadband environments such as ADSL and optical fiber that can always be connected to the Internet, users who have a desire to detect specific access patterns such as passage of specific data or unauthorized access from outside It is increasing. In addition, with the widespread use of IP telephones, an increasing number of users have a desire to confirm the passage of VoIP packets that are charged.

  However, in the hub described in Patent Document 1, the information that can be displayed on the LED is limited to that provided from the built-in repeater IC. There was a problem that the detection of the communication pattern could not be displayed.

  Therefore, the present invention sets a monitoring condition so as to detect the passage of a specific packet or a specific communication pattern, and monitors the passage of the packet based on the monitoring condition. It is an object of the present invention to provide a data relay device that notifies when a communication pattern is detected.

  The present invention has the following configuration as means for solving the above problems.

(1) A data relay device that relays packets,
A plurality of interfaces connected to a communication device or a communication network;
Condition input means for inputting packet monitoring conditions;
Condition storage means for storing the monitoring condition input by the condition input means;
Monitoring means for monitoring packets passing between the plurality of interfaces and detecting packets that match the monitoring conditions;
When the monitoring unit detects a packet that matches the monitoring condition, a notification unit that notifies the fact,
It is provided with.

  In this configuration, if the setting is made so that the passage of a specific packet is monitored, when the packet passes through the data relay device, the notification means can be notified that the specific packet has passed. Therefore, the user can easily grasp the passage of a specific packet.

  Note that the monitoring conditions for a specific packet are set for only one packet, and for example, when setting for a plurality of packet passage patterns such as port access in order from the outside, such as port scanning. And.

  (2) The monitoring means monitors, based on the monitoring condition, at least one of an interface through which the packet passes, a packet passing direction at the interface, packet identification information, and a packet passing pattern. Features.

  In this configuration, since the monitoring unit can monitor the packet identification information and the passage pattern, the packet can be easily specified. It is also possible to monitor the interface through which a specific packet passes and the direction in which the specific packet passes through the interface. Therefore, for example, by setting a monitoring condition to detect the passage of a packet when making an IP phone call, when a call is received, only when the call is made without detecting the passage of the packet It is possible to detect the passage of a packet, and to set so as to notify the passage of a packet that generates a communication cost.

  The packet identification information refers to information such as a MAC address, packet type, transmission source information, transmission destination information, protocol, port number, and packet size.

  The data relay apparatus of the present invention sets a monitoring condition for monitoring the passage of a specific packet, and when a packet that matches this setting is detected, for example, the LED is turned on or a specific voice is emitted by the notification means. For example, the user can be notified that a specific packet has passed. As a result, the user can easily grasp that the packet to be monitored has passed, and can block unauthorized access from the outside or reduce communication costs.

  FIG. 1 is a block diagram showing a schematic configuration of a data relay device according to an embodiment of the present invention. The data relay device 1 is a device that relays packets exchanged between communication devices such as computers and IP telephones and between communication networks such as LAN, WAN, and the Internet. The present invention can be applied to devices that relay data such as hubs, bridges, repeaters, and routers.

  The data relay device 1 includes an interface controller 11, an interface controller 12, a setting input / output controller 13, a memory 14, a clock 15, a display output controller 16, an audio output controller 17, and a CPU 18, each of which has an internal bus 19. It is connected to the. Each of the interface controllers 11 and 12 includes one or more interfaces for connecting to communication devices that exchange packets and communication networks. FIG. 1 shows a configuration in which the interface controller 11 is connected to the LAN 4 and the interface controller 12 is connected to the WAN 5 as an example.

  In order to simplify the description, the data relay device 1 is configured to include two interface controllers. However, the configuration is not limited to this, and a configuration including three or more interface controllers may be used. Further, the interface controllers 11 and 12 may each include a plurality of interfaces, and a communication device or a network may be connected to each interface.

  The setting input / output controller 13 is an interface for connecting a device for inputting a packet monitoring condition such as the type and characteristics of the packet monitored by the data relay device 1. FIG. 1 shows, as an example, a configuration connected to a serial interface 7 a of a computer 7 via a cable 6. In the case of this configuration, the user installs a setting program for the data relay apparatus 1 in the computer 7 in advance, and operates the computer 7 to monitor packet information (monitoring conditions) that is monitored by this setting program. Can be set.

  Further, as will be described later, when the display output controller 16 is connected to the LCD as a notification means and the setting input / output controller 13 is connected to an input terminal such as a keyboard, the user operates the keyboard to transmit the packet. When the monitoring condition setting is selected, the CPU 18 reads the monitoring condition setting program from the memory 14 and sets the contents of the monitoring condition set with the keyboard to be displayed on the LCD. Therefore, the user can set the packet monitoring condition by operating the input terminal while confirming the content displayed on the LCD.

  The memory 14 includes packet monitoring conditions set by the computer 7 and the input terminal, a control program for the CPU 18 to control each unit and perform various processes, a monitoring condition setting program executed when the monitoring conditions are set, and the like. Remember.

  The clock IC 15 generates a clock signal for the data relay device 1.

  When the packet that matches the monitoring condition passes, the display output controller 16 blinks the LED as the notification means, or displays the fact that the packet being monitored has passed on the LCD with characters or designs. FIG. 1 shows a configuration in which the LED 2 is connected as an example. As described above, when the LCD is connected to the display output controller 16 and the input terminal is connected to the setting input / output controller 13, the monitor condition is set by the input terminal. The display output controller 16 not only displays on the LCD that a packet matching the monitoring condition has passed, but also displays setting items for the packet monitoring condition in accordance with an instruction from the CPU 18.

  When a packet whose passage is being monitored passes, the voice output controller 17 outputs voice or music from a buzzer or speaker that is connected to notify that fact. FIG. 1 shows a configuration in which a buzzer 3 is connected as an example.

  The CPU 18 reads the monitoring information of the packet stored in the memory 14 and monitors whether the packet passing through the internal bus 19 matches the monitoring information. When a packet whose passage is being monitored is detected, a control signal is output to the display output controller 16 or the sound output controller 17, and the LED 2 or the buzzer 3 is operated to pass the packet being monitored. This is notified to the user. Further, the CPU 18 reads out a control program from the memory 14 and controls each unit of the data relay apparatus 1.

  The internal bus 19 is a line through which data and signals exchanged between the units of the data relay device 1 pass.

  Next, functions of the data relay device 1 will be described. The data relay apparatus 1 according to the embodiment of the present invention monitors the passage of a specific data packet using the computer 7 or the input terminal connected to the setting input / output controller 13 and when the specific packet passes. Only the LED 2 can be turned on (flashing) or the buzzer 3 can be set to sound. Further, when an LCD or a speaker is connected to the data relay device 1, it can be displayed on the LCD or notified by voice from the speaker that a specific packet has passed.

  The user sets various monitoring conditions such as (1) interface, (2) identification information, and (3) pattern information as information for monitoring the passage of a specific packet. The apparatus 1 can be monitored for packet passage. As described above, the user connects the input terminal such as the computer 7 or the keyboard to the setting input / output controller 13 of the data relay apparatus 1 and is connected to the monitor or the display output controller 16 connected to the computer 7. It is possible to set items and notification methods for identifying packets while checking the LCD. As a result, the data relay device 1 can monitor the passage of a specific packet, and when that packet passes, it can be notified by light / picture / character display / sound.

  When allowing the data relay apparatus 1 to monitor the passage of a specific packet, the user can set the following items as specific information for specifying the packet.

(1) As interface information,
1-1 Interface through which a packet passes 1-2 The direction in which a packet passes through the interface can be set.

(2) As identification information,
2-1 Protocol type 2-2 Information specifying the source and destination (MAC address, IP address, NetBIOS name, domain name, etc.)
2-3 Packet type (UDP, TCP, ICMP, etc.)
2-4 Port number 2-5 Information for specifying a packet such as a data size can be set.

(3) As pattern information,
3-1 Number of times a specific packet is detected within a specific time 3-2 The number of detected error packets can be set.

  It is not always necessary to set all items for these pieces of information, but items may be selected and set according to the type of packet.

  In addition, the user can set a method or pattern in which notification means such as an LED or a buzzer notifies the user when the data relay apparatus 1 detects the passage of a packet that matches the monitoring condition. For example, when the LED 2 is selected as the notification means of the data relay device 1, as the lighting pattern of the LED 2, for example, a. LED is continuously lit, b. Blinks at 50% duty, c. A plurality of lighting patterns are registered, such as a pattern of blinking for 1 second and turning off for 1 second. When two or three color LEDs are provided, a plurality of blinking patterns are registered such as blinking these LEDs alternately or blinking simultaneously. Furthermore, the user can register an arbitrary blink pattern. For example, it is possible to change a duty ratio at which one LED blinks, or to create a blinking pattern of LEDs of different colors.

  Further, when the user selects the LCD as the notification means, the user can also set to display the character or the picture as it is on the LCD. In addition, it is possible to set a character or design pattern so that a predetermined pattern is switched so as to attract the user's attention. Furthermore, the user can create a character or a picture to be displayed on the LCD and set it to be displayed.

  In addition, when the user selects a buzzer or speaker as the notification means, the user selects voice or music to be output from the buzzer or speaker from a plurality of pre-registered voice patterns, as in the case of the blinking pattern of LED2. Or can be set to output an audio pattern composed by the user.

  As described above, when the data relay device according to the embodiment of the present invention detects the passage of a specific packet, the notification unit can notify the user that the specific packet has passed, so that the user's attention can be drawn. The user of the data relay device 1 can easily grasp that a specific packet has passed. Further, the user can set not only one notification means but also a plurality of notification means such as LED, LCD, buzzer, and speaker to notify the passage of a specific packet.

  The setting input / output controller 13 of the data relay device 1 stores these settings in the memory 14 when monitoring conditions and notification means are set by the user. Then, the CPU 18 reads packet monitoring conditions from the memory 14 and monitors the passage of packets based on the monitoring conditions. For example, the CPU 18 detects information described in the header of each packet passing through the internal bus 19, the information amount of the data portion, and the like, and monitors whether the packet is a specific packet. Further, when a detection pattern is set as a monitoring condition, for example, the number of detections of the same packet within a certain time is confirmed.

  In the data relay device 1, as a packet for monitoring passage, for example, a packet in which a communication cost is generated due to the passage, such as a VoIP packet, can be set. When setting the monitoring condition of the VoIP packet, for example, when detecting a call in which the user A is a caller, a protocol type (SIP protocol), a telephone number or an IP address from which the user A is a caller, The interface through which the VoIP packet passes and the direction in which the VoIP packet passes through the interface (the direction from the IP phone used by user A to the IP phone of the recipient) are set as initial monitoring conditions. Thereby, it can be detected that the user A makes a call. In addition, after the call is started, the type of protocol (SIP protocol), the telephone number (IP address) from which user A becomes the sender and receiver, and the interface through which the VoIP packet passes are set as monitoring conditions, VoIP packets exchanged during a call are detected. Thereby, the telephone call which the user A transmitted can be detected continuously. By setting the monitoring conditions in this way, it is possible to easily detect the passage of a packet that generates a cost, and it can be used for the purpose of suppressing communication costs.

  Note that the VoIP packet monitoring conditions can be set in advance by the manufacturer so that the user only has to input a telephone number (IP address).

  Next, setting of a packet to be monitored by the data relay apparatus 1 and a packet monitoring operation of the data relay apparatus 1 will be described. FIG. 2 is a flowchart for explaining the setting procedure of the data relay device 1. FIG. 3 is a flowchart for explaining the monitoring operation of the data relay device 1.

  When the user causes the data relay apparatus 1 to monitor the passage of a specific packet, the cable 6 connects the setting input / output controller 13 of the data relay apparatus 1 and the serial interface 7a of the computer 7 as shown in FIG. To do. Then, a monitoring condition setting program is started on the computer 7 and a monitoring condition which is information for specifying a packet to be monitored is set according to the monitor display of the computer 7.

  As shown in FIG. 2, the computer 7 first displays an input screen for setting interface information on the monitor (s1). In accordance with this display, the user sets the interface through which the packet passes and the direction in which the packet passes through the interface. The computer 7 receives the setting input by the user (s2).

  When each setting for the interface information is completed, the user operates the setting completion button. When the computer 7 detects that the setting completion button has been operated (s3), the computer 7 subsequently displays an input screen for setting packet identification information on the monitor (s4). In accordance with this display, the user sets the protocol type, information specifying the transmission source and transmission destination, the packet type, the port number, the data size, and the like. The computer 7 receives the setting input by the user (s5).

  When each setting for the identification information is completed, the user operates a setting completion button. When the computer 7 detects that the setting completion button has been operated (s6), the computer 7 then displays an input screen for setting pattern information on the monitor (s7). In accordance with this display, the user sets the number of times a specific packet is detected within a specific time, the number of detected error packets, and the like. The computer 7 receives the setting input by the user (s8).

  When each setting for the pattern information is completed, the user operates a setting completion button. When the computer 7 detects that the setting completion button has been operated (s9), the computer 7 further displays on the monitor an input screen for setting the operation method of the notification means when the passage of the packet is detected (s10). According to this display, when detecting a packet that matches the monitoring condition, the user selects which of the notification means such as the LED 2 and the buzzer 3 is to be operated, and sets the operation pattern of the selected notification means. The computer 7 receives the setting input by the user (s11).

  The user operates the setting completion button when each setting for the notification means is completed. When the computer 7 detects that the setting completion button has been operated (s12), it outputs these setting data to the data relay device 1 (s13).

  When the setting input / output controller 13 detects that the setting data has been sent (s21), the CPU 18 of the data relay apparatus 1 stores the setting data in the memory 14 (s22).

  Next, as shown in FIG. 3, when the packet monitoring condition is set, the CPU 18 of the data relay apparatus 1 reads the monitoring condition setting data from the memory 14 (s31), and about the packet passing through the internal bus. Then, monitoring whether or not this monitoring condition is met is started (s32).

  That is, the CPU 18 confirms whether or not the packet passing through the internal bus 19 matches the interface that has passed, the passing direction, and the identification information (s33). If there is an item in which the packet does not match for these pieces of information, the CPU 18 executes step s32 in order to check whether or not the next packet matches the monitoring condition.

  On the other hand, if the packet matches all of these pieces of information in step s33, the CPU 18 updates the detection information of the packet (s34). Then, the CPU 18 confirms whether or not the detection pattern matches (s35). When the CPU 18 does not match the detection pattern, the CPU 18 checks whether or not the next packet matches the monitoring condition.

  On the other hand, if the CPU 18 matches the detection pattern in step s35, the CPU 18 reads the notification method by the notification means from the memory 14 (s36). Then, the CPU 18 outputs a control signal to the display output controller 16 or the audio output controller 17 based on the read notification method, and operates the LED 2 or the buzzer 3 by the read operation method (s37). This notifies the user that a packet matching the monitoring condition has passed.

  Further, the CPU 18 executes step s32 in order to confirm whether or not the next packet matches the monitoring condition.

  As described above, since the data relay device 1 of the present invention operates as described above, the packet to be monitored is set to the VoIP communication packet when calling to the other party by the IP phone as described above. The user can be notified of the passage of a packet for which a call charge is generated by light or voice.

  In addition, when an error packet is set as a monitoring target, it can be seen that the line state deteriorates when the occurrence of the error packet occurs frequently. Therefore, for example, when a certain number or more of error packets are detected within a certain time, a line pattern can be monitored by setting a detection pattern so as to be notified.

  Furthermore, the traffic volume of the line can be monitored in real time by changing the blinking interval and color of the LED 2 or changing the pitch output from the buzzer 3 according to the packet flow rate.

  In addition, by setting a specific access pattern as a monitoring condition, such as when a port scan is performed from the outside, it is possible to detect an external attack by a cracker.

  Further, the display output controller 16 and the audio output controller 17 are configured to notify the detection state of the packet by light or sound. However, the present invention is not limited to this. For example, the vibration output controller and the vibrator are connected to the internal bus 19. It is also possible to set to notify the passage of a specific packet by vibration.

  Furthermore, since the data relay device 1 of the present invention can notify the passage of a specific packet as described above, for example, in an IP phone, a connection request (session establishment request) from a specific partner is notified. By detecting the passage of the packet, it is possible to detect that the other party has received a call without answering the call. Therefore, for example, the message can be transmitted by making an arrangement so that the other party only performs the call operation in order to transmit some message.

It is the block diagram which showed schematic structure of the data relay apparatus which concerns on embodiment of this invention. 4 is a flowchart for explaining a setting procedure of the data relay device 1; 4 is a flowchart for explaining a monitoring operation of the data relay device 1;

Explanation of symbols

  1-data relay device, 2-LED, 3-buzzer, 4-LAN, 5-WAN, 6-cable, 7-computer, 11, 12-interface controller, 13-input / output controller, 14-memory, 15 -Clock, 16-Output controller for display, 17-Controller for audio output, 18-CPU, 19-Internal bus

Claims (2)

A data relay device that relays packets,
A plurality of interfaces connected to a communication device or a communication network;
Condition input means for inputting packet monitoring conditions;
Condition storage means for storing the monitoring condition input by the condition input means;
Monitoring means for monitoring packets passing between the plurality of interfaces and detecting packets that match the monitoring conditions;
When the monitoring unit detects a packet that matches the monitoring condition, a notification unit that notifies the fact,
A data relay device comprising:   The monitoring unit monitors at least one of an interface through which a packet passes and a packet passing direction, a packet identification information, and a packet passing pattern through the interface based on the monitoring condition. Data relay device.

Images