KR19980066036A - Charging Data Processing Method Using Packet Network Traffic Analysis System - Google Patents

Abstract

When a call is made in the packet network, a billing ticket is generated, and the billing ticket includes a lot of useful information such as call origination / end time, origin / destination address, origin / destination exchange and port number, service rate, usage time, and transmission amount.

Processing such billing data can produce value-added information related to data communications networks.

To produce this value-added information, raw billing data must be processed and stored in a database for use in applications that perform a variety of statistical and analytical functions.

The present invention relates to a billing data processing method using a packet network traffic analysis device for automatically collecting billing data generated in a packet network, verifying billing records in units, performing statistical processing, and storing the data in a database to perform the above functions. will be.

Description

Charging Data Processing Method Using Packet Network Traffic Analysis System

The present invention relates to a billing data processing method using a packet network traffic analysis device for automatically collecting billing data generated in a packet network, verifying billing records in units of charges, processing statistics, and storing them in a database. The present invention relates to a method applied when effectively developing a packet network traffic analysis apparatus that provides a network quality and traffic characteristic analysis function.

Conventionally, it is impossible to analyze the status, quality, and faults of the entire packet network by performing a simple sort function on the charged data files collected for billing data processing. Relying on manual work. Since this method takes a long time and does not process billing data, it does not support network history management of packet networks.

Therefore, the billing data is used only as a basic data for billing, there is a problem that the value-added production using a variety of information contained in the billing data can not be produced and discarded.

In order to solve the above problems, the present invention utilizes billing data to analyze the target (network, regional headquarters, main exchange area, packet switch, port, information provider, subscriber), time zone, protocol, etc. Analysis items according to analysis functions such as / speed, call release cause, traffic matrix, and traffic day / month change, such as occurrence lake, failure lake, connection success lake, connection failure lake, virtual call release water, transmission / reception The purpose of the present invention is to provide a billing data processing method that can effectively analyze traffic in a packet network by extracting a volume, a use time, a use time per call, a transfer amount per call, a transfer amount per second, and an access call per second).

In order to achieve the above object, the present invention collects the billing data automatically, verifies the billing record unit, extracts the necessary items, and performs statistical processing for each date and analysis object to store in a database. The purpose of this study is to provide a method to utilize the saved statistical data as input data of a device.

1 is a network configuration of the packet network traffic analysis apparatus to which the present invention is applied.

2 is a schematic diagram of a packet network traffic analysis apparatus to which the present invention is applied.

3 is a detailed flowchart of charging data preprocessing job management to which the present invention is applied.

4 is a detailed flowchart of charging data collection to which the present invention is applied.

5 is a detailed flowchart of charging data verification to which the present invention is applied.

Figure 6 is a detailed flow chart of the billing data date to which the present invention is applied.

7 is a detailed flowchart of statistical processing for each billing data analysis target to which the present invention is applied.

* Explanation of symbols for main parts of the drawings

10: packet network traffic analysis device 20: billing data collection device

30: network management device 40: packet network

The billing data processing method using the packet network traffic analysis apparatus according to the present invention is connected to a billing data collection system and a network management system, by a billing data collection and verification unit using a packet network traffic analysis apparatus for analyzing the traffic of the packet network. Periodically accesses the billing data collection device and performs the billing data collection function to receive the new billing data file if it exists and the billing data verification function to read and verify the collected billing data file by billing record unit, Perform the preprocessing process which classifies the billing records verified by date, statistically processes the file units in the corresponding directory of daily statistical processing data, and stores them temporarily, and analyzes each shape table of the packet network shape database by the statistical processing unit for each analysis target. To After the necessary items are extracted and statistically processed from the daily statistical data processing section, the data is collected and verified in the daily and monthly summary tables for each analysis target in the traffic statistics database. Billing data preprocessing task management to manage tasks such as daily statistics processing, billing data postprocessing task management to manage statistical processing tasks according to analysis targets, and processing of faults and log messages generated during the management process; And start and stop the device.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

When a call is made in the packet network, a billing ticket is generated, and the billing ticket includes call origination / end time, origination / destination address, origination / exit exchange and port number, service speed, usage time, transmission amount, facility usage, cause and It contains a lot of useful information such as diagnostic codes. By processing such billing data, it is possible to produce value-added information related to data communication network, such as data network design, quality improvement, and long-term planning.

To produce this value-added information, raw billing data must be processed and stored in a database for use in applications that perform a variety of statistical and analytical functions.

In order to perform the function described above, the present invention provides a billing data preprocessing process for performing a series of tasks such as billing data collection, verification, and daily statistical processing, and selects a work date from the statistically stored data for each day or daily. After deciding the monthly summary function, it consists of post-processing process that performs a series of tasks such as statistical processing by analysis target and storage in the corresponding table.Pre / post-processing process includes billing data preprocessing task management process and billing data postprocessing task management process. By mutually exclusive work simultaneously.

The preprocessing step is to periodically connect to the billing data collection device in which billing data is stored to determine whether a new billing data file exists and to collect the billing data, and to verify the validity of billing records by reading billing records from the collected billing data files. After that, extract the necessary items from the valid billing record and temporarily store them in the verified billing record file, read the data from the verified billing record file, perform statistical processing by call / reception according to the date, and then process the statistics by date. After the pre-processing process is completed on the collected billing data, the billing data preprocessing task management process is performed by performing statistical processing on the call characteristic data extracted from the billing data and storing it in the database. .

The post-processing process is performed on a daily and monthly basis according to the analysis target (by packet exchange, by protocol / rate, by information provider, by subscriber, by port, by incomplete call) for the work date selected by the billing data post-processing work management process. Perform it separately.

In the daily summary process, each process extracts the shape data from the corresponding table in the packet network shape database, reads the accounting records from the files in the directory of the daily statistical data (same as the date of the work), and then statistics the traffic statistics. Store in a daily summary table in the database. In the monthly summary process, each process retrieves the data stored in the daily summary table of the traffic statistics database, statistically processes the data for one month, and stores it in the monthly summary table of the traffic statistics database.

1 is a diagram illustrating a network configuration in which a packet network traffic analysis apparatus 10 to which the present invention is applied is used. The billing data collection device 20 collects the raw billing records generated by the packet switch of the packet network 40 through the X.25 line to generate a billing data file.

The packet network traffic analysis device 10 is connected to the network management device 30, the billing data collection device 20, and a local area network (LAN), and is periodically connected to the billing data collection device 20, and the existence of new billing data exists. After determining whether it is received by using FTP (File Transfer Protocol), it performs a series of tasks such as verification, daily statistical processing, statistical processing by analysis target, and storage in database. Data stored in the database outputs statistical analysis results on the screen in the form of various graphical user interfaces (GUIs) according to the user's analysis requirements.

2 is a system diagram of a packet network traffic analysis apparatus to which the present invention is applied, and includes a system manager 2-1, a billing data collection and verification unit 2-6, a daily statistical processor 2-10, and an analysis target statistical processor ( 2-12), traffic statistics analysis processing section 2-19, user interface section 2-24, and database management section 2-30.

The system management unit performs overall device management functions of the packet network traffic analysis device. The billing data preprocessing job management function (2-2) manages billing data collection, verification, and daily statistical processing. Billing data post-processing task management function (2-2) that manages execution, function (2-4) for handling fault and log messages generated in each function block, and function to perform system start and stop (2-5) )

The billing data collection and verification unit 2-6 periodically connects to the billing data collection device 20 via a LAN to determine the existence of new billing data, and receives a billing data collection function if a new billing data file exists ( 2-7), a billing data verification function (2-8) that reads the collected billing data file in billing record units and performs verification. The daily statistical processing function (2-11) of the daily statistical processing unit (2-10) sorts the charging records verified by the charging data verification function by date, statistically processes the files in the corresponding directory of the daily statistical processing data, and stores them temporarily. It performs the function.

Function to perform daily and monthly summary and storage by analysis target statistical processing unit (2-12) by analysis target (by packet exchange (2-13), by protocol / rate (2-14), by subscriber (2-15), By information provider (2-16), by port (2-17), and by incomplete call (2-18), refer to each shape table of the packet network shape database and extract the necessary items from the statistical processing data by date. After processing, it is stored in the daily / monthly summary table for each analysis target in the traffic statistics database.

The database manager 2-30 manages the functions of creating a database and a table schema (2-31), performing a table initialization (2-32), and searching, registering, deleting, and changing various data. And a function (2-34) for displaying status information such as the number of rows in the database and the amount of disk usage.

The database 2-35 of the packet network traffic analysis apparatus is composed of a system database, a packet network shape database, and a traffic statistics database.

The user interface unit 2-24 provides various input / output GUIs to the graphic terminals 2-36 and the printer 2-37 for traffic analysis and statistics requests from the user to the packet network. Function (2-25), traffic analysis graphic I / O processing function (2-26), traffic matrix graphic I / O processing function (2-27), report inquiry function (2-28), help processing function (2-29) It is.

Traffic statistics analysis processing unit (2-19) has a function (2-20) to generate a report for each day / month / quarter / year, the traffic occurrence statistics processing function that performs the statistical processing according to the traffic occurrence status input of the user interface unit ( 2-21), a traffic matrix statistics processing function for performing statistical processing according to the traffic matrix input of the user interface unit (2-22), and a traffic analysis statistics processing function for performing statistical processing according to the traffic analysis input of the user interface unit (2- 23).

3 is a flowchart of charging data preprocessing operation to which the present invention is applied.

The billing data preprocessing task management process manages billing data collection, verification, and daily statistical processing, and is a daemon process that runs when the packet network traffic analysis device is started. Whether the operation of the billing data preprocessing work management process is first performed is determined whether the current time is a working time, and if it is a working time, it is suspended until the end of the working time and re-executed (3-1).

If the current time is not a working time, the billing data preprocessing task management process creates a billing data collection process as a child process, and receives failure, log, and termination messages through IPC (Inter Process Communication) (3-2).

The received fault and log messages are sent to the fault and log message processing process through IPC, and the fault details and work processing status are displayed on the screen. When the failure message is received, a routine for determining whether the charging data preprocessing job management process is performed is performed as in 3-1 (3-6).

When the termination message is received from the billing data collection process, the new billing data file name received from the message is passed as an argument. Then, failure, log, and termination messages are received through IPC (3-3).

Upon receiving the termination message from the charging data verification process, the charging data preprocessing job management process generates a daily statistical processing process and then receives failure, log and termination messages via IPC (3-4).

When the billing data preprocessing task management process receives an end message from the daily statistics processing process, call characteristic information (billing data file name and file size) extracted by the billing data collection process and call characteristic information (record characteristic statistics value) extracted by the billing data verification process The number of failed records, the total number of records, the number of duplicate call identifiers, the number of days included in billing data, the number of facility usages, and the number of records by time of use) Base billing data processing job history table (billing data file name, file size, record property statistics, verification failed records, total records, duplicate call identifiers), call facility table (various facility usage), call usage time Table (number of records by time interval), job waiting date table (billing) And each stored in a date number) included in the itaconic, and deletes the collected charging data is proven and billing data (3-5).

4 is a detailed flowchart of charging data collection to which the present invention is applied.

The billing data collection process driven by the billing data preprocessing job management process pulls information from the network configuration file for access to the billing data collection device (4-1). After FTP access to the billing data collection device according to the IP address, login name, and password information of the network configuration file, and if the connection fails, the billing data preprocessing is performed through IPC as shown in 4-5. Send a fault message to the task management process and terminate the task.

When the connection to the billing data collection device 20 is successful, the directory is moved according to the directory information stored in the billing data file name of the network shape file to receive the file names in that directory.

The received file names are compared with the billing data file names in the billing data processing job history table of the system database to determine whether the same file name exists, and then the billing data file name with the earliest date among billing data file names not registered in the billing data processing job history table. Is the new billing data file. If the new billing data file name does not exist, it terminates after transmitting the new billing data as an end message to the billing data preprocessing job management process through IPC as shown in 4-5 (4-2).

Before receiving the new billing data from the billing data collection device, the directory in which the collected billing data of the packet network traffic analysis device is stored is determined to determine whether the same file name exists.

If it does not exist, access the billing data collection device, move to the directory where the billing data file exists, receive the billing data file using FTP and store it in the collected billing data directory (4-3).

If the same file name exists, the billing data file in the collected billing data directory is used without accessing the billing data collection device. When a new billing data file is received, the billing data file name, file size, etc. are extracted and stored temporarily in the call characteristic data file, and the new billing data file name is transferred to the billing data preprocessing task management process through the end message through the IPC, and then terminated. (4-4).

5 is a detailed flowchart of charging data verification to which the present invention is applied.

The billing data verification process, driven by the billing data preprocessing task management process, receives a new billing data file name as an argument, a clear code file that divides each cause code into a network side, an interface side, and a subscriber side. The packet switch shape table of the packet network shape database in which the local number of each packet switch is registered is read (5-1).

A new billing data file is opened from the collected billing data directory, read one byte at a time, and when two bytes are reached, the length of the billing record is calculated.

If the calculated length is larger or negative than the maximum charging record length, the second one byte is left, and after reading the next one byte, the length of the charging record is calculated when two bytes are reached. If the length of the billing record is determined to be valid, the verification process is performed after reading the data as long as the length of the billing record from the new billing data file. The verification process is based on verification items (time of use, amount of data sent / received, class of incoming / outgoing processing, NPI, originating / receiving address, originating / exchanging exchange and port number, originating / receiving Logical Channel Number (LCN), originating / receiving) The minimum, maximum, and reference values are checked according to address length, incoming / outgoing DSE, service type, incoming / outgoing window size, start and end time record type). Repeat 5-6 with one byte left. If the billing record passes the verification and is a success, the local number is extracted from the network user address (NUA) of the billing record and compared with the packet switch local number of the packet switch configuration table. Store in Local numbers stored in the unregistered local table are stored by the operator in the packet switch configuration table of the packet network configuration database in the future. The billing record that has passed the verification is marked as a connection failure call in the call cause field if the reason code is classified as a network cause if the success code is classified according to the method classified in the clear code file (5-4). Necessary items among billing records (call origination time, origination / reception address, origination / reception exchange and port number, origination / reception processing class, origination of call release, record characteristics, cause and diagnosis code, amount of transmission / reception data, usage time Etc.), and sorts and stores them in a directory of verified billing records by date, and then skips by the length of the billing record and reads from the next byte (5-5).

6 is a detailed flowchart of daily statistical processing to which the present invention is applied. The daily statistics processing process initiated by the billing data preprocessing job management process consists of a directory of verified billing records (sorted by date), a file name (originating local number) belonging to the directory, and a directory of statistical processing data by date (sorted by date). And file name (calling local number) belonging to the directory (6-1). First, it is determined whether there is mutual existence between the directory of the verified charging record (hereinafter 'A') and the directory of daily statistical processing data (hereinafter, 'C'). If 'A' does not exist in 'C', the billing record is read for each file for the file belonging to the specific directory of the verified billing record (hereinafter 'B'), and then the date, time zone, origin / destination address, / Receiving exchange and port number Calling / receiving class, NUI usage, cause and diagnostic code, charge records with the same items include success lake, failure lake, virtual call clearing, connection failure lake, transmission data volume, and reception data volume. In addition, the sum of usage times is performed for statistical processing and then stored in daily statistical processing data (6-2).

If 'A' exists in 'C', it is determined whether a file belonging to a specific directory of the verified billing record exists in a file belonging to a specific directory (hereinafter, 'D') of daily statistical processing data.

If 'B' does not exist in 'D', the statistical processing is performed as in 6-2 and then stored in the daily statistical processing data (6-3). If 'A' is present in 'C' and 'B' is present in 'D', statistical processing is performed as shown in 6-2 by reading the charging record for the same file name from the verified accounting record and the daily statistics processing data. After that, the file existing in the daily statistics processing data is deleted and stored, and the date (directory) included in the verified billing record is stored in the job betting date table of the system database (6-4). As described above, when the daily statistics processing process completes the data processing on the daily statistical processing data after performing the statistical processing on all the data stored in the verified charging record, send the end message to the charging data preprocessing job management process through the IPC End (6-5).

7 is a detailed flowchart of an analysis target for each analysis target to which the present invention is applied. Post-processing of billing data The task management process is a daemon process, which refers to the current time and the existence of a target to determine whether a task is performed. If the current time is a working time, it is put on hold and re-run after work, and the user's buffer date set from the buffer duration setting file is read. The number of dates registered in the If the number of days registered in the task waiting date table is larger than the buffer period set by the user, select the earliest date and select the target date (7-1). If the target date is selected, the daily summary process is performed by default. If the selected date is a specific date (buffer duration +1 set by the user), the monthly summary process is performed. The billing data post-processing task management process starts the packet storage, packet exchanger, information provider, subscriber, protocol / speed, port, and incomplete call summary storage process, which performs statistical processing by analysis object as shown in 7-2. Each process terminates normally with exit (0) when it completes its work and exit (9) when abnormally terminated due to a failure.

The billing data post-process management process waits for the SIGCHLD signal after starting the child process, checks the return value when an interrupt occurs, and stops the next task if the result is abnormal termination of the process. The various messages generated by each process during the operation are transmitted through IPC to the fault and log message processing process and displayed on the screen.

Statistical processing by analysis target is largely divided into daily summary and monthly summary. The daily summary process is performed after each process extracts the shape data from the corresponding table in the packet network shape database, reads the accounting records from the files in the directory of the daily statistical data (same as the date of the work), and performs statistics on traffic statistics. Store in a daily summary table in the database.

In the monthly summary process, each process retrieves data stored in the daily summary table of the traffic statistics database, statistically processes the data for one month by time, and stores it in the monthly summary table of the traffic statistics database (7-4, 7). -5, 7-6, 7-7, 7-8, 7-9).

Daily summary storage by packet exchange reads data from daily statistical processing data and extracts items such as date, time zone, origin / destination number, NUI usage, etc. After performing statistical processing by adding up the number, connection failure number, transmission data amount, reception data amount, and usage time, the packet switch configuration table (local name, local number, local headquarter name, local price, and local price) of the packet network shape database. Refer to the name of the main exchange area, to which the originating / receiving area headquarters corresponding to the originating / receiving local number and the originating / receiving main exchange area name are added and stored in the packet switch daily summary table (7-4).

For daily summary storage by information provider, refer to the information provider configuration table (information provider name, group name of the information provider, information provider NUA) of the packet network configuration database and read / receive data from the daily statistical processing data. In the case of data belonging to a specific information provider by comparing the information provider NUA in the provider shape table, the items such as date, time zone, call / reception classification, information provider side NUA, and remote side NUA are extracted. After performing statistical processing by adding up the failure lake, virtual call resolution number, connection failure lake, transmission data amount, reception data amount, and usage time, the group name to which the information provider belongs is added and stored in the information provider daily summary table. 7-5).

For daily summary storage by subscriber, refer to subscriber shape table (subscriber name, subscriber NUA) of packet network shape database, read data from daily statistical processing data, compare incoming / outgoing NUA and subscriber NUA of subscriber shape table to specific subscriber. In the case of belonging data, items such as date, time zone, origination / reception classification, subscriber side NUA, remote side NUA, etc. are extracted, and the same data is used for success lake, failure lake, virtual call release number, connection failure number, transmission data. Statistics, received data amount, and usage time are summed and stored in subscriber daily summary table (7-6).

Daily summary storage by protocol / speed reads data from daily statistical processing data and extracts items such as date, time zone, call / call destination, call / call destination number, call / call agreement number, and treatment class. The data is calculated by adding up the success lake, failure lake, virtual call release number, connection failure lake, transmission data amount, reception data amount, and usage time, and then the number system configuration table (protocol name, contract of packet network configuration database). The contract number extracted from the data with reference to the number) and the processing class configuration table (class number, class name) is converted into the protocol name registered in the number system configuration table and stored in the protocol / speed daily summary table (7-7).

Daily summary storage by port reads data from daily statistical processing data and extracts items such as date, time zone, origin / destination, origin / destination address, origin / destination exchange and port number. In addition, the number of failed lakes, virtual call resolutions, connection failure lakes, transmission data amount, received data amount, and usage time are added together to perform statistical processing and stored in the port daily summary table (7-8).

Daily summary storage by incomplete call is based on the date, time zone, origin / destination origin / destination exchange and port number, cause and diagnostic code, and cause of callback after reading data from virtual statistics release data or number of connection failures 1 or more from daily statistical processing data. The same data items are extracted and stored in the daily summary table of incomplete calls after adding virtual call release numbers or connection failure lakes (7-9).

When the statistical processing by analysis target is completed normally, the billing data post-processing process deletes the selected target date from the system waiting date table in the system database, and includes the directory corresponding to the selected target date in the daily statistical data. After deleting the data, return to the first step and continue the operation (7-3).

As described in detail above, the present invention automatically collects billing data generated in the packet network, verifies the billing record by unit, statistically processes the data by date and analysis target, and stores the data in a database, thereby using the billing data to network quality of the packet network. And the data stored in the database as basic data when developing a packet network traffic analysis device or similar application program that provides a traffic characterization function.

In addition, a preferred embodiment of the present invention is disclosed for the purpose of illustration, those skilled in the art will be able to make various modifications, changes, additions, etc. within the spirit and scope of the present invention, such modifications and modifications belong to the following claims You should see.

Claims (13)

A billing data processing method using a packet network traffic analysis device for analyzing traffic of a packet network connected to a billing data collection system and a network management system, wherein the billing data collection and verification unit periodically connects to the billing data collection device to make a new billing. Receiving a data file if it exists, reading the collected billing data file in billing record units, validating the billing record, and extracting the necessary items from the valid billing record units and temporarily storing them in the verified billing record file. And classifying the verified billing records by date, performing statistical processing for each file in the corresponding directory of the statistical processing data for each day, and storing them in a file unit, and each shape table of the packet network shape database by the statistical processing unit for each analysis object. True After the necessary items are extracted and statistically processed from the daily statistical data processing section, the data is collected and verified in the daily and monthly summary tables for each analysis target in the traffic statistics database. Management of billing data cloth processing task to manage tasks such as statistics processing by date, billing data post-processing task management to manage statistical processing tasks according to analysis targets, and processing of faults and log messages generated in the management process And a data processing method using a packet network traffic analysis apparatus, which starts and stops the device. The method of claim 1, further comprising: a function of creating a database and a table schema by a database manager, a function of performing a table initialization, a function of performing a search, registration, deletion, change, etc. of various data; A billing data processing method using a packet network traffic analysis apparatus, comprising a function of displaying status information such as the number of rows of a database, disk usage, and the like. The method of claim 1, wherein the preprocessing process and the postprocessing process are performed mutually exclusively at the same time. 3. The charging data processing method using a packet network traffic analysis apparatus according to claim 2, further comprising a function of processing a traffic analysis and a statistical request for a packet network from a user by a user interface unit. The method according to claim 4, further comprising: a function of generating a report by the traffic statistical analysis processor, a traffic occurrence status statistical processing function of performing statistical processing according to the traffic occurrence status input of the user interface unit, and a traffic matrix input of the user interface unit; And a traffic matrix statistics processing function for performing statistical processing, and a traffic analysis statistics processing function for performing statistical processing according to the traffic analysis input of the user interface unit. The method of claim 1, wherein the preprocessing task management process, when receiving a termination message from the billing data collection process, passes the received new billing data file name as an argument to the billing data verifying process, and from the billing data verifying process. When receiving the end message, it generates the daily statistical processing, and then receives the log and the ending message.When receiving the ending message from the daily statistical processing, the call characteristics information extracted during the charging data collection process and the call extracted during the charging data verification process are received. After reading the statistics from the call characteristic data where the characteristic information is stored, the statistics are processed and stored in the billing data processing work history table, call facility table, call usage time table, and work waiting date table of the system database. Clearing charged data Charging a data processing method using a packet network traffic analyzer as claimed. The billing data collection process according to claim 6, wherein the billing data collection process transmits a failure message to the billing data preprocessing task management process when the connection to the billing data collection system fails, and terminates the task. Packet network traffic analysis device, characterized in that if not present and transmits the end message to the preprocessing task management process, and if a new billing data file exists, the new billing data file is transmitted to the preprocessing task management process through the end message. Charging data processing method using. The billing data verification process of claim 6, wherein the billing data is read by one byte from the new file with the new billing data file name as an argument and the billing record is calculated by reading the billing record as long as the billing record length. By checking the minimum, maximum, and reference values for each item, if one item is not satisfied, it is indicated as connection failure call in the cause of release, and if all items are satisfied, it is indicated as virtual call release in the cause of release and the necessary items are extracted from the billing record. The billing record processing method using a packet network traffic analysis device characterized in that the classified storage by date in the directory of the verified billing record. 10. The method of claim 8, wherein if the calculated length of the charging record is greater than or equal to the length of the maximum charging record, the second 1 byte is read and the next 1 byte is read to calculate the length of the new charging record when it reaches 2 bytes. A billing record processing method using a packet network traffic analysis apparatus, characterized in that the billing record length if the number is positive and not greater than the length of the record. The method of claim 6, wherein the daily statistical process determines whether the directory of the verified charging record and the directory of the daily statistical processing data are mutually present, and if the directory of the verified charging record does not exist in the directory of the daily statistical processing data, After reading the billing record for each file for the file belonging to the specific directory of the verified billing record, statistics the file for each file and save it in the statistical processing data by date, and the directory of the verified charging record exists in the directory of the statistical processing data by date. In this case, it is determined whether a file belonging to a specific directory of the verified billing record exists in a file belonging to a specific directory of the daily statistical processing data. Each par after reading a record After statistical processing by day and stored in daily statistical processing data, a directory of verified billing records exists in a directory of daily statistical processing data, and a file belonging to a specific directory of verified charging records belongs to a specific directory of daily statistical processing data. If present in the file, the accounting record is read for the same file name as the verified accounting record and the date-based statistical data. After performing statistical processing, the file existing in the date-based statistical data is deleted and stored, and included in the verified accounting record. A method of processing billing data using a packet network traffic analysis device, comprising storing the date in a work waiting date table of a system database and transmitting an end message to a billing data preprocessing process. The process of claim 1, wherein the post-processing job management process reads the buffer period set by the user from the buffer period setting file and compares the number of days registered in the job waiting date table of the system database to be registered in the job waiting date table. If the number of days is greater than the buffer period set by the user, select the earliest date and select it as the target date, and if the target date is selected, the daily summary processing is performed by default. If the selected date is a specific date, the monthly summary processing is performed. After performing the process, the billing data post-processing process deletes the selected work target date from the system waiting table in the system database, and also deletes the directory and contained data corresponding to the selected work target date from the daily statistical processing data. Packet network traffic analysis device, characterized in that Yonghan billing data processing methods. The billing data using the packet network traffic analysis apparatus according to claim 11, wherein the daily and monthly summary processing is performed by packet switch, information provider, subscriber, protocol / speed, port, and incomplete call. Treatment method. The method of claim 12, wherein the daily summary process extracts the shape data from the corresponding table of the packet network shape database, reads the billing records from files belonging to the directory of the daily statistical data, and statistically processes the data. In the summary table, the monthly summary processing process searches the data stored in the daily summary table of the traffic statistics database, processes the data for one month by time, and stores it in the monthly summary table of the traffic statistics database. Billing data processing method using a packet network traffic analysis device.