JPH11261591A - Data collection stop method in network data collection device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To preserve data before and after the service relating to specified data stops by stopping the collection of data on a network when data specified by information which is set does not flow onto the network by exceeding the permission range of non-communication time. SOLUTION: Stop conditions are stored in the respective areas of a service address storage area, a service transmission destination address storage area, a non-communication time permission range storage area, a service address valid information storage area and a transmission destination address valid information storage area in a storage part 5. When specified data on a network does not flow by exceeding the permission range of non-communication time which is previously set for data, the collection of data on the network 1 is stopped based on information stored in the service address storage area, the service transmission destination address storage area, the non-communication time permission range storage area, the service address valid information storage area and the transmission destination address valid information storage area.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for stopping data collection in a network data collection device for collecting data on a network.

[0002]

2. Description of the Related Art A conventional network data collection device (for example, a LAN monitor or a LAN analyzer) for collecting data flowing on a network represented by a LAN.
Has stopped data collection by a method of analyzing acquired data on a network.

[0003]

However, according to the conventional data collection stopping method in the network data collecting apparatus, the data collection is not stopped unless the data on the network is analyzed. The data collection cannot be stopped under the condition that the data collection is stopped and the data is no longer transmitted on the network.

For this reason, since the area for storing collected data is limited, when the data cannot be completely stored in the area for storing collected data, the data storage area is reused for storing new data. However, there is a problem that data collection continues even after the service is stopped, and data before and after the service is stopped is erased. Also,
Data collection can be stopped when data can no longer be stored in the area where collected data is stored,
In that case, there was a problem that the phenomenon after the collection was stopped could not be collected.

[0005]

According to the present invention, there is provided a method for stopping data collection in a network data collection apparatus, comprising the steps of specifying data on a network in advance in the method for stopping data collection in a network data collection apparatus for collecting data on a network. Information and the allowable range of non-communication time of the data are set, and when the data specified by the set information does not flow over the network beyond the allowable range of the non-communication time, the data of the network Stop collecting.

[0006]

FIG. 1 is a block diagram showing a configuration of a network data collection device according to an embodiment of the present invention. In the figure, 1 is a network such as a LAN for collecting data, 2 is an interface unit connected to the network 1, 3 is an operation unit for performing operations such as various settings and data settings, and 4 is a display of a collection result and the like. Display,
Reference numeral 5 denotes a storage unit for storing a collection result, a collection stop condition, and the like.
Is a control unit for controlling the entire apparatus.

Here, the data stored in the storage unit 5 will be described. FIG. 2 is an explanatory diagram for explaining data stored in the storage unit 5. In the figure, 10 is a service address storage area for storing a source address of a service for transmitting data, 11 is a service destination address storage area for storing a service destination address, 12
Is a non-communication time allowable range storage area for storing an allowable range of non-communication time, 13 is a service address valid information storage area for storing whether the contents stored in the service address storage area 10 are valid, and 14 is a service destination address storage A destination address valid information storage area for storing whether the content stored in the area 11 is valid, a final data reception time storage area 15 for storing the last time when expected data was obtained, and a data 16 obtained from the network 1 Is an acquisition data storage area for storing.

The service address storage area 10, service destination address storage area 11, non-communicable time allowable range storage area 12, service address valid information storage area 1
3 and the information stored in the destination address valid information storage area 14 become conditions for stopping data collection on the network, and various data collection stop conditions are set as shown in FIG. 3 by a combination of these conditions. You can do it.

Here, the stop condition shown in FIG. 3 will be described. First, under the condition shown in FIG. 3A, the collection of data is stopped by the source address of a service or the like, and data from a specific service or a server providing the service is transmitted from the network 1. When data does not flow out of the allowable range of the no-communication time, data collection is stopped. In the condition shown in FIG. 3B, data collection is stopped by a source address of a service or the like and an address of the destination, and a specific service or a server providing a service is stopped. When data to a specific partner does not flow from the network 1 beyond the allowable range of no-communication time, data collection is stopped.

Further, under the condition shown in FIG. 3C, the data collection is stopped only by the data on the network, and the data does not flow from the network 1 beyond the allowable range of the non-communication time. Stop collecting data when In addition, under the condition shown in FIG. 3D, the collection of data is stopped by the transmission destination address of the service or the like, and the data to the specific destination exceeds the allowable range of the non-communication time from the network 1. Stop collecting data when it does not flow.

As the allowable range of the non-communication time under each condition, the allowable range of the non-communication time is determined in advance according to the type of service or server, and the allowable range of the non-communication time is determined according to the stop condition. Range information is stored in the non-communication time allowable range storage area 12.

Next, the operation of this embodiment will be described. FIG. 4 is a flowchart showing the operation of this embodiment. First, the service address storage area 10, service destination address storage area 11, non-communicable time allowable range storage area 12, service address valid information storage area 13, and transmission destination address valid information storage area 1 in the storage unit 5.
The stop condition is stored in each area of No. 4 (S100).

Then, the current time is stored in the last data reception time storage area 15 (S101), and the difference between the last data acquisition time stored in the last data reception time storage area 15 and the current time is the non-communication time. It is determined whether the value is equal to or smaller than the allowable range stored in the allowable range storage area 12 (S102).
If it is determined in step S102 that the data is not smaller than the allowable range, the data collection is terminated. If it is determined that the data is smaller than the allowable range in step S102, it is determined whether data is acquired from the network 1 (S103). .

If it is determined in S103 that data has not been acquired, the process returns to S102, and if it is determined in S103 that data has been acquired, the acquired data is stored in the acquired data storage area 16 (S104). ).

It is determined whether the information stored in the destination address valid information storage area 14 is valid information (S
105), if the information is determined to be valid in S105, it is determined that the destination address of the acquired data acquired in S103 is the same as the information stored in the service destination address storage area 11 (S106), and in S106 If it is not the same, the process returns to S102.

Then, it is determined in S106 that they are the same,
Alternatively, if it is determined in S105 that the information is not valid information, the information stored in the service address valid information storage area 13 is
It is determined whether the information is valid information (S107). If it is determined in S107 that the information is not valid information, the process returns to S101 and S1
07, it is determined that the source address of the acquired data acquired in S103 is the same as the information stored in the service address storage area 10 (S10).
8) If it is determined in S108 that they are not the same, S102
Returning to step S108, if the same is determined in step S108, the process returns to step S101.

With the above operations, the service address storage area 10, the service destination address storage area 11, the non-communicable time allowable range storage area 12, the service address valid information storage area 13, and the destination address valid information storage area 1
If the specific data on the network 1 does not flow over the non-communication time allowable range set in advance for the data based on the information stored in the network 4, data collection on the network 1 is performed. It is to be stopped.

In this embodiment, an address of a specific data on the network 1 is set in advance, a service stop is detected based on a non-communicable time allowable range for the data, and the data collection is stopped. Thus, it is possible to save data before and after the service is stopped.

In this embodiment, the start of the determination of the service stop as shown in FIG. 4 is made immediately after the start of the operation of the apparatus. However, the start of the determination of the service may be performed after the acquisition of the specific data. Further, the detection of service stoppage can be used by a server or service monitoring tool.

In this embodiment, data on the network 1 is collected regardless of the setting of the data collection stop condition. However, only data that matches the data collection stop condition is obtained. The information may be stored in the storage area 16. Also, in this embodiment,
Based on the information stored in the service address valid information storage area 13 and the destination address valid information storage area 14, it is determined whether the information stored in the service address storage area 10 and the service destination address storage area 11 is valid or invalid. Determines whether the information stored in the service address storage area 10 and the service transmission destination address storage area 11 is valid or invalid depending on whether information is stored in the service address storage area 10 and the service transmission destination address storage area 11. You may make it determine.

[0021]

As described above, according to the present invention, information specifying data on a network and an allowable range of non-communication time of the data are set in advance, and data specified by the set information is When data does not flow over the network for longer than the permissible period of no-communication time, data collection on the network is stopped, so data before and after the service related to specific data is stopped can be saved. It has the effect of being able to.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a configuration of a network data collection device according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram for explaining data stored in a storage unit 5;

FIG. 3 is an explanatory diagram for explaining a data collection stop condition.

FIG. 4 is a flowchart showing the operation of the embodiment.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Network 2 Interface part 3 Operation part 4 Display part 5 Storage part 6 Control part 10 Service address storage area 11 Service destination address storage area 12 Non-communicable time allowable range storage area 13 Service address valid information storage area 14 Destination address valid information Storage area 15 Last data reception time storage area 16 Acquired data storage area

Claims (2)

[Claims] 1. A method for stopping data collection in a network data collection device for collecting data on a network, comprising: setting information for specifying data on the network and an allowable range of non-communication time of the data in advance; When the data specified by the obtained information does not flow over the network beyond the permissible range of the non-communication time, the data collection in the network data collection device, wherein the data collection on the network is stopped. How to stop collection. 2. The method according to claim 1, wherein at least one of a source address and a destination address of the data is set as the information for specifying the data.