JP5919915B2 - Communication monitoring apparatus, network control method, and network control program - Google Patents

Description

  The present invention relates to a communication monitoring apparatus, a relay method, and a relay program.

  In recent years, even when disasters such as earthquakes and tsunamis occur, the importance of continuing business has increased. By preparing a working path and a redundant backup path, even if a failure occurs in the working path, the backup path can be used to continue business. Also, even when preparing a backup route, a wireless line may be used instead of a wired line, but the data transmission amount tends to be smaller in the wireless line than in the wired line.

  Therefore, when the backup route is used, in order to prevent the traffic amount of the backup route from being depleted, an operation is performed in which the service flowing into the backup route is blocked and the inflow amount is suppressed. For example, in the operation of the backup route, since the data amount of the multicast service is particularly large, there is a case where the multicast service is set to be cut off in the initial state.

  However, when a failure actually occurs on the working path, there is a case where the specific service is not interrupted uniformly on the backup path but the specific service is communicated to be rescued. In this case, a method of relieving the specific service by releasing the block of the specific service among a plurality of services to be blocked on the backup route is adopted.

  As a method for this, changes are made to allow only a multicast service to be relieved by changing the setting of network equipment or converting communication data to a small capacity.

  For example, when a network failure is detected, the address of the multicast service that cannot be communicated is changed to the address of the multicast service that can be communicated, and the specific service is rescued. In this case, when a network failure occurs, the network management device needs to change settings for one or a plurality of devices. Therefore, when a plurality of failures occur, there is a possibility that a device that cannot be reset is generated, and there is a possibility that an abnormal operation occurs at the time of recovery due to a contradiction in setting values. Moreover, it is necessary to restore the settings again when the failure is recovered.

  In addition, a method of increasing the number of services to be repaired by changing the detour setting or communication rate setting for the communication device when a failure occurs can be considered. However, the information to be set in the device differs depending on the location where the failure occurs, so it is necessary to reset it when the failure is recovered.

JP 2005-184387 A JP 2011-109339 A

  However, when a failure occurs on the working path, when switching to the protection path and trying to relieve the specific service among multiple services to be blocked on the protection path, for example, changing the address of the service, detour change or communication for each device Settings such as rate changes are required. Therefore, when trying to rescue a specific service, the setting becomes complicated.

  An object of one aspect is to provide a communication monitoring apparatus, a relay method, a relay program, and the like that can easily relieve only a specific service among services to be blocked.

  An aspect of the disclosure includes a blocking unit that can block a service that passes through, and a storage unit that stores a release condition for releasing the blocking of the service for each piece of identification information that identifies the service. Further, according to an aspect of the disclosure, a determination unit that determines whether the state of each network corresponds to the release condition stored in the storage unit based on notification information that notifies a state of each network in the system. Have. Further, the disclosed aspect includes a control unit that controls the blocking unit so as to cancel blocking of a service related to the cancellation condition when a state of each network corresponds to the cancellation condition. To do.

  In the disclosed aspect, only a specific service among the services to be blocked can be easily relieved.

FIG. 1 is an explanatory diagram illustrating an example of a transmission system according to the first embodiment. FIG. 2 is a block diagram illustrating an example of the configuration of the probe apparatus. FIG. 3 is an explanatory diagram showing an example of the LSA table. FIG. 4 is an explanatory diagram illustrating an example of a blocking condition table according to the first embodiment. FIG. 5 is a flowchart showing an example of the processing operation of the probe apparatus related to the blocking determination process. FIG. 6 is an explanatory diagram illustrating an example of the transmission system according to the second embodiment. FIG. 7 is an explanatory diagram illustrating an example of a blocking condition table according to the second embodiment. FIG. 8 is an explanatory diagram illustrating an example of the transmission system according to the second embodiment (when a failure occurs in the working path and the backup path). FIG. 9 is an explanatory diagram illustrating an example of the transmission system according to the third embodiment. FIG. 10A is an explanatory diagram illustrating an example of a blocking condition table of the probe device. FIG. 10B is an explanatory diagram illustrating an example of a blocking condition table of the probe device. FIG. 11 is an explanatory diagram illustrating an example of the transmission system according to the third embodiment (when a failure occurs in the working path and the backup path). FIG. 12 is an explanatory diagram illustrating a communication device that executes a relay program.

  Hereinafter, embodiments of a communication monitoring device, a relay method, and a relay program disclosed in the present application will be described in detail based on the drawings. The disclosed technology is not limited by the present embodiment. Moreover, you may combine suitably each Example shown below in the range which does not cause contradiction.

  FIG. 1 is an explanatory diagram illustrating an example of a transmission system according to the first embodiment. The transmission system 1 illustrated in FIG. 1 includes, for example, an active path 7 that connects between an office A and an office B, an active path 7, and a redundant path 8 having a redundant configuration. The working path 7 is, for example, a 100 Mbps wired line. The backup path 8 is, for example, a 50 Mbps wireless line that is used as a detour when the working path 7 fails.

  On the office A side, an IP (Internet Protocol) telephone 2 (2A), a plurality of cameras 3 (3A, 3B), a plurality of L3 switches 4 (4A to 4C), and a probe device 5 (5A) are provided. Have. The IP telephone 2 is a terminal used for voice calls, for example. The camera 3 is a terminal that captures video. The L3 switch 4 is a switch for routing data (service) such as voice and video from the IP telephone 2 and the camera 3 to the destination.

  The L3 switch 4A connects to the network “1” connected to the IP telephone 2A, the network “2” connected to the camera 3A, and the network “3” connected to the camera 3B. . The L3 switch 4A is connected to the network “4” connected to the L3 switch 4B and the network “5” connected to the L3 switch 4C.

  The office B side also has an IP telephone 2 (2B), a plurality of L3 switches 4 (4D to 4F), a decoder 6, and a probe device 5 (5B). The L3 switch 4D includes a network “10” connected to the IP telephone 2B, a network “8” connected to the L3 switch 4E, and a network “9” connected to the L3 switch 4F, respectively. Connecting. The L3 switch 4D is connected to the network “11” connected to the decoder 6 respectively. The decoder 6 is a device that decodes video data distributed from the camera 3, for example.

  The working path 7 corresponds to the network “6” that connects the L3 switch 4B on the office A side and the L3 switch 4E on the office B side. The backup path 8 corresponds to the network “7” that connects between the L3 switch 4C on the office A side and the L3 switch 4F on the office B side. The working path 7 is used, for example, for the operation of all services between the office A and the office B, for example, voice communication between the IP telephone 2A and the IP telephone 2B, and between the camera 3A and the decoder 6 For video communication and video communication between the camera 3B and the decoder 6.

  The backup path 8 blocks all services flowing into the backup path 8 when the working path 7 is normal. However, routing-related packets such as OSPF (Open shortest Path First) / PIM (Protocol Independent Multicast) are not blocked (discarded). Further, when a failure occurs in the working route 7, the backup route 8 uniformly blocks all services other than the voice service of the IP telephone 2 as a blocking target. However, in the backup path 8, the specific service is released from the plurality of services to be blocked, and the communication of the specific service is permitted. The service block and the block cancellation are executed by the probe device 5A on the office A side and the probe device 5B on the office B side. The probe device 5A on the office A side is arranged on the network between the L3 switch 4A and the L3 switch 4C. The probe device 5B on the office B side is arranged on a network between the L3 switch 4D and the L3 switch 4F.

  FIG. 2 is an explanatory diagram showing an example of the configuration of the probe device 5. 2 includes a blocking unit 11, an extracting unit 12, a monitor unit 13, a setting unit 14, a determination unit 15, a control unit 16, an LSA table 20, a blocking condition table 30, And a blocking target list 40. The blocking unit 11 can block a service that passes therethrough. The blocking target list 40 is a list that stores addresses that are identification information for identifying blocking target services that are to pass through the backup route 8. The control unit 16 controls the blocking unit 11 to block the blocking target service that is about to pass through the backup path 8 based on the address of the blocking target service in the blocking target list 40. For example, when the service that is going to pass through the backup route 8 is in the blocking target list 40, the control unit 16 controls the blocking unit 11 to block the service. On the other hand, when the service is not in the block target list 40, the control unit 16 controls the block unit 11 to communicate the service.

  The extraction unit 12 extracts an OSPF packet from the service. The extraction unit 12 extracts a packet with the protocol number “89” in the IP header as an OSPF packet. The extraction unit 12 extracts an LSU (Link State Update) packet having a packet type “4” from the extracted OSPF packet. The extraction unit 12 extracts LSA (Link State Advertisement) information from the LSU packet. Each L3 switch 4 in the transmission system 1 identifies the state of the network to which it is connected, and reports the state of the network to the representative L3 switch 4 in the transmission system 1. The representative L3 switch 4 collects network information obtained from each L3 switch 4 in the transmission system 1 and transmits the collection results of all the L3 switches 4 to each L3 switch 4 as LSA information.

  The monitor unit 13 includes an analysis unit 13A that analyzes the extracted LSA information, and updates and registers all normal networks in the transmission system 1 in the LSA table 20 based on the analysis result of the LSA information. When the monitor unit 13 receives LSA information that is not in the LSA table 20, the monitor unit 13 updates and registers the LSA table 20 and requests the determination unit 15 to perform a blockage determination request described later. Also, when receiving the MaxAge LSA information, the monitor unit 13 deletes the network of the corresponding LSA from the LSA table 20 and requests the determination unit 15 for a blocking determination request. Note that network failure and failure recovery can be determined by whether or not the setting of the LS Age field in the LSA information defined by the OSPF protocol is MaxAge (3600 seconds). In the case of MaxAge, the monitor unit 13 determines that there is a network failure, and in cases other than MaxAge, it determines that the failure is recovered. FIG. 3 is an explanatory diagram showing an example of the LSA table 20.

  The LSA table 20 shown in FIG. 3 manages the states of the networks “1” to “11” in the system 1. The probe device 5 refers to the LSA table 20 and confirms the state of each network in the transmission system 1. The monitor unit 13 in the probe device 5 requests the determination unit 15 for a blocking determination request in accordance with a normal network change in the LSA table 20.

  FIG. 4 is an explanatory diagram illustrating an example of the blocking condition table 30 according to the first embodiment. The blocking condition table 30 illustrated in FIG. 4 manages the blocking target 31 and the blocking release condition 32 in association with each other. The blocking target 31 is an address of the service of the blocking target 31 to be blocked by the probe device 5. For example, the multicast address of the camera 3A, the multicast address of the camera 3B, and the like.

  The blocking release condition 32 is a condition for the probe device 5 to release the blocking of the service of the blocking target 31. In the example of FIG. 4, the multicast address blocking cancellation condition 32 of the camera 3A is when the network “6” between the L3 switch 4B and the L3 switch 4E, that is, the failure of the working path 7 occurs. The multicast address blocking cancellation condition 32 of the camera 3B is “-”. The setting unit 14 is an interface used when changing table contents in the blocking condition table 30.

  The determination unit 15 determines whether or not the network of the block cancellation condition 32 is in the LSA table 20 in response to the block determination request from the monitor unit 13. The determination unit 15 determines that the network in the LSA table 20 is normal when the network of the blocking cancellation condition 32 is in the LSA table 20. As a result, the determination unit 15 registers the specific service in the blocking target list 40 because the network of the blocking cancellation condition 32 is normal and does not correspond to the blocking cancellation condition of the specific service. As a result, the control unit 16 controls the blocking unit 11 to block the specific service.

  In addition, when the network of the blocking cancellation condition 32 is not in the LSA table 20, the determination unit 15 determines that the network is a failure. The determination unit 15 deletes the specific service from the block target list 40 because the network of the block cancellation condition 32 corresponds to the block cancellation condition of the specific service because the network is faulty. As a result, the control unit 16 controls the blocking unit 11 so as to release the blocking of the specific service and allow the specific service to communicate among the plurality of services to be blocked. And the specific service can be relieved.

  Next, the operation of the transmission system 1 according to the first embodiment will be described. FIG. 5 is a flowchart showing an example of the processing operation of the probe device 5 related to the blocking determination process. The blocking determination process shown in FIG. 5 is a process for releasing the blocking of a specific service among a plurality of services to be blocked 31 on the backup route 8 when the blocking cancellation condition 32 for the specific service is met. Note that each of the probe devices 5A and 5B independently executes a processing operation related to the blocking determination process.

  In FIG. 5, the determination unit 15 of the probe device 5 determines whether or not a blocking determination request is detected from the monitor unit 13 (step S <b> 11). When the determination unit 15 detects a blocking determination request (Yes at Step S11), the determination unit 15 determines whether there is a service of the blocking target 31 in the blocking condition table 30 (Step S12).

  When there is a service to be blocked 31 (Yes at Step S12), the determination unit 15 specifies the service to be blocked 31 (Step S13). Then, the determination unit 15 determines whether or not the network of the blocking cancellation condition 32 related to the specified blocking target 31 service exists in the LSA table 20 (step S14).

  When the network of the blocking cancellation condition 32 related to the service of the blocking target 31 is in the LSA table 20 (Yes in Step S14), the determination unit 15 registers the service of the specified blocking target 31 in the blocking target list 40 (Step S14). S15). Then, the determination unit 15 determines whether there is an unspecified service to be blocked (step S16). When there is an unspecified service to be blocked (Yes at Step S16), the determination unit 15 proceeds to Step S13 to designate a service to be blocked.

  If there is no unspecified block target 31 service (No at Step S16), the determination unit 15 ends the processing operation illustrated in FIG. The determination unit 15 determines that the service of the specified blocking target 31 is in the blocking target list 40 when the network of the blocking release condition 32 related to the service of the specified blocking target 31 is not in the LSA table 20 (No in step S14). It is determined whether or not there is (step S17).

  When the service of the block target 31 is in the block target list 40 (Yes at Step S17), the determination unit 15 deletes the specified service of the block target 31 from the block target list 40 (Step S18). Then, after deleting the service of the blocking target 31, the determination unit 15 proceeds to step S16 to determine whether there is an unspecified service of the blocking target 31. As a result, the probe device 5 can release the block of the specific service among the plurality of services of the block target 31 that intends to pass through the backup path 8.

  If the service of the block target 31 is not in the block target list 40 (No at Step S17), the determination unit 15 proceeds to Step S16 to determine whether there is an unspecified block target 31 service. The determination part 15 complete | finishes the processing operation shown in FIG. 5, when the interruption | blocking determination request is not detected (step S11 negative).

  In the probe device 5 according to the first embodiment, even when the active route 7 is switched to the backup route 8 due to a failure, the service that is desired to be released from a plurality of services to be blocked and the release of the block are not interrupted. Condition 32 is registered in advance. Then, the probe device 5 deletes the specific service corresponding to the blocking cancellation condition 32 from the blocking target list 40 among the plurality of services of the blocking target 31. As a result, in order to delete the specific service from the blocking target list 40, the probe device 5 cancels the blocking of the specific service among the plurality of services of the blocking target 31, thereby suppressing the band used for the backup path 8. , You can relieve a specific service registered in advance.

  The probe device 5 according to the first embodiment can detect a path failure by itself and can realize the cancellation of the cutoff setting and the cutoff setting for each detected fault location. Moreover, it is not necessary to change the device setting every time a failure occurs on the working path 7.

  Further, in the probe device 5 of the first embodiment, even when attempting to individually rescue a multicast specific service with a large amount of data, the conventional complicated setting is not required, and the effect is remarkable.

  In the probe device 5 according to the first embodiment, after releasing the blocking of the specific service corresponding to the blocking cancellation condition 32, if the network state related to the specific service for which the blocking is canceled does not correspond to the blocking cancellation condition, the specific service is Register in the blocking target list 40. As a result, the probe device 5 no longer corresponds to the blocking cancellation condition 32. For example, when the failure is recovered, the specific service is registered again in the blocking target list 40. Specific services can be blocked.

  In the first embodiment, temporary and permanent unnecessary inflow of traffic to the backup path 8 can be prevented, and the bandwidth of the backup path 8 having a small communication capacity can be effectively used.

  In the first embodiment, the service is cut off at both ends of the backup path 8 using the probe device 5A on the office A side and the probe device 5B on the office B side. However, for example, when assuming a system that unilaterally provides services from the office A side to the office B side, one probe device 5 may be arranged on the backup path 8.

  In the first embodiment, the number of spare paths 8 between the office A and the office B is one. However, the number of the spare paths 8 may be two. 2 will be described below.

  FIG. 6 is an explanatory diagram illustrating an example of the transmission system according to the second embodiment. Note that the same components as those in the transmission system 1 shown in FIG. 1 are denoted by the same reference numerals, and the description of the overlapping configuration and operation is omitted. The transmission system 1A illustrated in FIG. 6 includes a backup path 8A connected between the office A and the office B in addition to the backup path 8. The backup path 8A is configured by a 100 Mbps wired line between the L3 switch 4G on the office A side and the L3 switch 4H on the office B side. In the transmission system 1A, when a failure in the working path 7 is detected, all services that can be used in the working path 7 can be transmitted through the backup path 8A.

  FIG. 7 is an explanatory diagram illustrating an example of the blocking condition table 30 according to the second embodiment. In the example of FIG. 7, when the service of the blocking target 31 is the multicast address of the camera 3A, the blocking cancellation condition 32 is between the failure of the network “6” (working path 7) and the L3 switch 4G and the L3 switch 4H. This is a failure of the connected network (backup path 8A).

  The determination unit 15 in the probe device 5 determines that the working path 7 and the backup path 8A are faulty when the working path 7 and the backup path 8A of the blocking release condition 32 are not in the LSA table 20. Then, the determination unit 15 determines that the failure corresponds to the failure of the working route 7 and the backup route 8A, that is, the specific service blocking cancellation condition 32 (see FIG. 7), and deletes the address of the specific service from the blocking target list 40. For example, the determination unit 15 deletes the multicast address of the camera 3A from the blocking target list 40. FIG. 8 is an explanatory diagram illustrating an example of the transmission system 1A according to the second embodiment (when a failure occurs in the working path 7 and the backup path 8A). As a result, as shown in FIG. 8, the probe device 5 can rescue the specific service by releasing the block of the specific service, for example, the multicast service of the camera 3 </ b> A, among the plurality of services to be blocked.

  In the second embodiment, when the working path 7 and the backup path 8A of the cutoff cancellation condition 32 are not in the LSA table 20, it is determined that the working path 7 and the backup path 8A correspond to the failure, that is, the specific service cutoff cancellation condition 32, The specific service is deleted from the blocking target list 40. As a result, the probe device 5 can rescue the specific service by releasing the block of the specific service among the plurality of services to be blocked.

  In the probe device 5 of the second embodiment, a plurality of backup paths 8 and 8A are registered in the cutoff release condition 32 for each specific service to be relieved in advance. As a result, even when all the backup paths 8 other than the specific backup path 8A cannot be communicated, it is possible to cancel the block of the specific service to be repaired.

  In the second embodiment, the backup path 8A is arranged between the office A and the office B in addition to the backup path 8, but the probe is placed on the path of the L3 switch 4 connected to the backup path 8A. The apparatus 5 may be arranged, and an embodiment in this case will be described below as Example 3.

  FIG. 9 is an explanatory diagram illustrating an example of the transmission system according to the third embodiment. Note that the same components as those in the transmission system 1A shown in FIG. 6 are denoted by the same reference numerals, and description of the overlapping components and operations is omitted.

  A transmission system 1B illustrated in FIG. 9 includes a probe device 5C disposed on a network connected between the L3 switch 4G and the L3 switch 4A on the office A side of the backup path 8A. Furthermore, the transmission system 1B includes a probe device 5D arranged on a network connected between the L3 switch 4H and the L3 switch 4D on the office B side of the backup path 8A. FIG. 10A is an explanatory diagram illustrating an example of the blocking condition table 30 of the probe devices 5C and 5D. In the example of FIG. 10A, when the blocking target 31 is the multicast address of the camera 3 </ b> A, the blocking cancellation condition 32 is a failure of the working path 7. Further, when the blocking target is the multicast address of the camera 3B, the blocking cancellation condition 32 is a failure of the working path 7. When the blocking target 31 is the multicast address of the camera 3C, the blocking cancellation condition 32 is “none (−)”.

  FIG. 10B is an explanatory diagram illustrating an example of the blocking condition table 30 of the probe devices 5A and 5B. In the example of FIG. 10B, when the blocking target 31 is the multicast address of the camera 3A, the blocking cancellation condition 32 is a failure of the working route 7 and a failure of the backup route 8A. Further, when the blocking target 31 is the multicast address of the camera 3B and the multicast address of the camera 3C, the blocking cancellation condition 32 is “none (−)”.

  The probe devices 5A, 5B, 5C, and 5D uniformly block all services operated on the working path 7 when the working path 7 is normal. As described above, routing-related packets are communicated. Further, when the working path 7 is faulty, the probe devices 5A to 5D uniformly block, for example, the multicast address of the camera 3A, the multicast address of the camera 3B, and the multicast address of the camera 3C.

  However, if the determination unit 15 of the probe devices 5C and 5D detects a failure in the working path 7, that is, if there is no working path 7 in the LSA table 20, the determination is made in the multicast address blocking cancellation condition 32 of the cameras 3A and 3B. Applicable. The determination unit 15 deletes the multicast addresses of the cameras 3A and 3B from the blocking target list 40. As a result, the probe devices 5C and 5D cancel the interruption of the multicast service of the cameras 3A and 3B on the backup path 8A.

  Further, when the working path 7 and the backup path 8A are faulty, the probe devices 5A and 5B uniformly block, for example, the multicast address of the camera 3A, the multicast address of the camera 3B, and the multicast address of the camera 3C. FIG. 11 is an explanatory diagram illustrating an example of the transmission system 1B according to the third embodiment (when a failure occurs in the working path 7 and the backup path 8A). As shown in FIG. 11, the determination unit 15 of the probe devices 5A and 5B detects the failure of the working path 7 and the backup path 8A, that is, when there is no working path 7 and the backup path 8A in the LSA table 20, the camera 3A The multicast address corresponds to the blocking release condition 32. As a result, the probe devices 5A and 5B delete the multicast address of the camera 3A from the blocking target list 40. Accordingly, the probe devices 5A and 5B can rescue the multicast service of the camera 3A because the multicast service of the camera 3A communicates on the backup path 8.

  In addition, when the determination unit 15 of the probe devices 5A and 5B detects a failure in the working path 7 and the backup path 8A, the multicast address of the camera 3B is not determined because the multicast address blocking cancellation condition 32 of the camera 3B is not met. Register in the blocking target list 40. As a result, the probe devices 5A and 5B block communication on the backup route 8 of the multicast service of the cameras 3B and 3C as shown in FIG.

  In the third embodiment, various operations can be performed by arranging the probe device 5 for each backup path 8 (8A) and appropriately changing the cutoff release condition 32 in the cutoff condition table 30 of the probe device 5. In addition, by giving priority to the cutoff release condition, even if the multicast cutoff release condition equal to or higher than the transmission capacity of the backup path 8A is met, the multicast service having a high priority within the transmission capacity is relieved. Is also possible.

  In the above embodiment, the status of each network is updated and registered in the LSA table 20 based on the LSA information of the LSU packet in the OPSF packet. However, if there is broadcast information for reporting the status of each network in the transmission system 1 (1A, 1B), it is not limited to the OSPF packet.

  Moreover, in the said Example, although the probe apparatus 5 was illustrated as a communication monitoring apparatus, you may provide in L3 switch etc., for example.

  In addition, each component of each part illustrated does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each part is not limited to the one shown in the figure, and all or a part thereof may be functionally or physically distributed / integrated in arbitrary units according to various loads and usage conditions. Can be configured.

  Furthermore, various processing functions performed in each device are performed on a CPU (Central Processing Unit) (or a microcomputer such as an MPU (Micro Processing Unit), MCU (Micro Controller Unit), etc.) in whole or in part. You may make it perform. Various processing functions may be executed entirely or arbitrarily on a program that is analyzed and executed by a CPU (or a microcomputer such as an MPU or MCU) or hardware based on wired logic. Needless to say.

  By the way, the various processes described in the present embodiment can be realized by executing a program prepared in advance on a communication device. Therefore, in the following, an example of a communication device that executes a program having the same function as the above embodiment will be described. FIG. 12 is an explanatory diagram illustrating a communication device that executes a relay program.

  A communication device 100 that executes the control program illustrated in FIG. 12 includes a communication interface 111 that is connected to a transmission path that transmits communication packets, a memory 112 that includes a RAM, a ROM, and the like, and a processor 113 that controls the entire communication device 100. Have.

  The memory 112 stores in advance a relay program that exhibits the same function as in the above embodiment. Note that the relay program may be recorded not on the memory 112 but on a recording medium readable by a drive (not shown). The recording medium may be, for example, a portable recording medium such as a CD-ROM, a DVD disk, or a USB memory, or a semiconductor memory such as a flash memory. As shown in FIG. 12, the relay program is a determination program 112A and a control program 112B. Note that the programs 112A and 112B may be integrated or distributed as appropriate.

  Then, the processor 113 reads these programs 112A and 112B from the memory 112, and executes each of the read programs. As shown in FIG. 12, the processor 113 functions as the determination process 113A and the control process 113B for the programs 112A and 112B. The RAM in the memory 112 stores a release condition for releasing the service block for each identification information for identifying the service.

  The processor 113 refers to the contents of the RAM, and determines whether or not the state of each network meets the release condition based on the notification information that notifies the state of each network. When the state of each network corresponds to the release condition, the processor 113 controls the communication interface 111 to release the blocking of the service related to the release condition. As a result, only specific services among services to be blocked can be easily relieved.

DESCRIPTION OF SYMBOLS 1 Transmission system 5 Probe apparatus 7 Current route 8 Backup route 11 Blocking unit 13 Monitor unit 15 Determination unit 16 Control unit 20 LSA table 30 Blocking condition table 40 Blocking target list 100 Communication device 111 Communication interface 112 Memory 113 Processor

Claims (6)

A blocking portion that enables blocking the multiple services through multiple networks for each network,
For each of the services, a storage unit that stores release conditions based on the state of the network used by the service for releasing the block of the service;
Based on the notification information for reporting the states of the plurality of networks, when the state of the plurality of networks corresponds to the release condition stored in the storage unit, the service related to the release condition among the plurality of services is blocked And a control unit that controls the blocking unit so as to cancel the communication. The controller is
2. The blocking unit is controlled to block a service related to the cancellation condition when the state of the plurality of networks no longer corresponds to the cancellation condition stored in the storage unit. The communication monitoring device described. A storage unit for storing the release condition with a priority;
The communication monitoring apparatus according to claim 1, further comprising: a control unit that cancels the network according to the stored priority. Multiple services that pass through multiple networks can be blocked by the blocking unit for each network,
For each service, store a release condition based on the state of the network used by the service for releasing the block of the service in the storage unit ,
Based on the broadcast information for reporting the status of the plurality of networks, when the status of the plurality of networks corresponds to the cancellation condition stored in the storage unit, the network passes through the network related to the cancellation condition. A network control method, wherein the computer executes a process of controlling the blocking unit so as to release the blocking of the service to be performed. Multiple services that pass through multiple networks can be blocked by the blocking unit for each network,
For each service, the release condition based on the state of the network used by the service for releasing the block for the service is stored in the storage unit ,
Based on the broadcast information for reporting the status of the plurality of networks, when the status of the plurality of networks corresponds to the cancellation condition stored in the storage unit, the network passes through the network related to the cancellation condition. A network control program for causing a computer to execute a process of controlling the blocking unit so as to release blocking of a service to be performed. In a communication monitoring device provided on a route between a plurality of switches that perform routing according to a destination,
Based on the address list to be blocked, a control unit that controls a blocking unit that performs packet blocking processing according to whether the address of the received packet is included in the address list to be blocked;
A storage unit for storing conditions for excluding addresses to be blocked from being blocked according to the state of the network;
When receiving the failure information of the network through the route, a determination unit that switches the address specified as an address to be excluded from being blocked by the determination according to the condition to an address list excluded from the blocking target;
A communication monitoring apparatus comprising:

Images