WO2020095692A1

WO2020095692A1 - Packet flow monitoring device, packet data extraction device, extracted data aggregating device, and program

Info

Publication number: WO2020095692A1
Application number: PCT/JP2019/041643
Authority: WO
Inventors: 智史小山; 政宏河原木; 倉掛　卓也; 真樹辻; 瞭長谷川; 圭一郎勝田; 直哉鈴木
Original assignee: 株式会社インテリジェントウェイブ
Priority date: 2018-11-09
Filing date: 2019-10-24
Publication date: 2020-05-14

Abstract

[Problem] To provide a packet flow monitoring device, a packet data extraction device, an extracted data aggregating device, and a program for efficiently and highly accurately monitoring a packet flow in a video or audio communication system constructed with an Ethernet (registered trademark) frame or IP packet network. [Solution] This packet flow monitoring device 1 comprises: a packet data extraction device 2 for replicating all of passed packets that have passed through one or a plurality of specific network switches on the network, extracting predetermined partial information in each of the replicated passed packets, and configuring and outputting an aggregated extracted data report packet; and an extracted data aggregating device 3 for receiving the extracted data report packet, analyzing the partial information in each of the replicated passed packets included in the extracted data report packet so as to aggregate for each packet flow, and recording the result as aggregate data.

Description

Packet flow monitoring device, packet data extraction device, extracted data aggregation device, and program

The present invention monitors the quality of a packet flow (packet flow) when storing video / audio / synchronization information constructed in an Ethernet (registered trademark) / IP (Internet Protocol) network in a packet and transmitting the packet. The present invention relates to a packet flow monitoring device, a packet data extracting device, an extracted data totaling device, and a program.

Conventionally, there is a program production system that transmits video / audio / synchronization information by a signal transmission method such as SDI (see Non-Patent Document 1) or MADI (see Non-Patent Document 2) developed for program production. Was configured. As a typical example of a program production system of the SDI / MADI signal format, for example, it can be configured as shown in FIG. A video transmitting device 510 that transmits a video image of a photographing camera or the like transmits the video image to the SDI router 600 by an SDI format signal (SDI signal), and distributes the video image from the SDI router 600 to a designated receiving device 800 such as a receiver. To transmit. Further, the voice transmitting device 520 that transmits voice such as a microphone transmits the voice as a MADI format signal (MADI signal) to the SDI router 600 via the voice router 700, and the SDI router 600 specifies the receiving device 800. It is distributed to and transmitted. The video transmitting device 510, the audio transmitting device 520, the SDI router 600, the audio router 700, and the receiving device 800 can be synchronized by a synchronization signal from the synchronization signal generator 900.

On the other hand, in recent years, Ethernet (registered trademark) frames (hereinafter, also referred to as “E frame” in the present specification) and IP packets (E frames and IP packets in the present specification are collectively referred to as “packets”. It is considered to construct a program production system so that video / audio / synchronization information is stored in and transmitted in (.) (For example, see Non-Patent Document 3). As a typical example of a program production system constructed by an E-frame or IP packet network, for example, the program production system can be configured as shown in FIG. The video transmission device 51 that transmits video from a photographing camera or the like stores the video in an E frame or an IP packet and transmits the video to a certain network switch 60, and from the network switch 60 via another network switch 60. Alternatively, directly, the route is selected and transmitted to a designated receiving device 80 such as a receiver based on the header information in the packet. In addition, the voice transmitting device 52 that transmits voice such as a microphone stores the voice in an E frame or an IP packet, transmits the voice to a certain network switch 60, and transmits the voice from the network switch 60 via another network switch 60. Alternatively, the route is directly selected and transmitted to the designated receiving device 80 based on the header information in the packet.

One network switch 60 is connected to another network switch 60 and a transmitting device such as the video transmitting device 51 and the audio transmitting device 52 by a communication cable such as a LAN (Local Area Network) cable, It has another network switch 60 and respective input ports for inputting packets from these plural transmitters. Further, one network switch 60 is connected to another network switch 60 and one or a plurality of receiving devices 80 by a communication cable, and the other network switch 60 and one or a plurality of receiving devices 80. It has respective output ports for relaying and outputting the packet transmitted to the receiving device 80.

In a program production system constructed by an E-frame or IP packet network, each network switch 60 uses a synchronization signal from a synchronization signal generator 90 so as to be able to handle the case of transmitting video / audio / synchronization information in real time. Be in sync. Although not shown, the synchronization signal is transferred to the video transmission device 51 and the reception device 80 via the network switch 60 so that all devices can be synchronized.

In the program production system constructed by the E-frame or IP packet network, the network switch 60 and each device can be constructed at a relatively low cost, and the transmission capacity of the network can be increased. It is expected to reduce costs. In addition, since a general-purpose PC (Personal Computer) server can be configured to intervene in the network to receive and process, it is possible to support communication services such as on-demand, and packets on the program production system. Realization of advanced processing such as monitoring the flow of packets (packet flow) can also be expected.

By the way, as a packet flow monitoring technique in a general communication system, for each interface of a network switch arranged in an IP network, the number of packets output from the network switch, the number of discarded packets, and the average bit rate at intervals of several minutes are used. A monitoring server may be provided to acquire quality information such as. A monitoring system called sFlow is known as a technique for monitoring a packet flow on a general communication system (for example, see Non-Patent Document 4). In sFlow, it is possible to estimate the traffic amount for each packet flow by sampling the packets processed in the switch, inspecting the packet contents of only some of the packets, and statistically processing the results.

Note that a network switch in a general communication system usually has a function of copying a packet to be transmitted. Therefore, in a general communication system, as shown in FIG. 22, from each network switch (because the network switch 60 in the program production system shown in FIG. 21 can be similarly configured, the same reference numeral is given). A dedicated analysis device 200 that extracts the duplicated packet and analyzes the packet flow may be provided. For example, it is possible to adopt a configuration in which the packets duplicated by the plurality of network switches 60 are transmitted to the analysis device 200 and the analysis processing is performed so as to monitor each packet flow. In the case of collecting and analyzing duplicated packets using the packet duplication function in such a network switch, a plurality of communication cables connected to duplicated data transfer ports as many as the number of ports used for data transmission It will be composed of.

In general, when storing video signal data in packets on an IP network for transmission, the SMPTE ST2110-20 standard is defined (for example, refer to Non-Patent Document 5), and audio is transmitted on the IP network. When storing signal data in packets and transmitting the packets, the SMPTE ST2110-30 standard is defined (for example, see Non-Patent Document 6). In addition, the SMPTE ST2022-6 standard is defined when storing video / audio information in a packet for transmission (see, for example, Non-Patent Document 7). As a representative, FIG. 23 (a) shows the signal format of the SMPTE ST2110-20 standard, and FIG. 23 (b) shows the signal format of the SMPTE ST2022-6 standard, both of which are designated headers. It is specified that information and a payload for storing data are arranged with a specified number of bits.

When a failure occurs in a certain video signal during operation of the program production system, it is necessary to perform quality measurement to confirm the state of that video signal. In the SDI / MADI signal format program production system, it is clear which cable the video signal is transmitted through, and a technique for measuring the quality of the video signal has been established.

On the other hand, in a program production system constructed by an E-frame or IP packet network, each packet is multiplexed by the network switch in the network, and the packet transmission route is autonomously determined by each network switch. It is difficult to understand which LAN cable the video signal whose quality is to be measured flows, and it is necessary to separate it from other video signals and audio signals.

For example, as described above, as a packet flow monitoring technique on a general communication system, the number of packets output for each interface of a network switch arranged in an IP network, the number of discarded packets, and the average bit rate at intervals of several minutes. A monitoring server that can acquire quality information such as is sometimes provided. However, even if such a monitoring server is applied to the program production system shown in FIG. 22, the values indicating the quality information obtained by the monitoring server are all values obtained by multiplexing packets storing video signals and audio signals. Is the total value of the packets, and there is a problem that the quality of the video signal to be measured cannot be known.

Further, based on the sFlow technique disclosed in Non-Patent Document 4, the packets processed in the network switch are sampled, only some of the packets are inspected for packet contents, and the results are statistically processed to obtain IP. It is possible to estimate the traffic volume for each flow. However, since sFlow does not measure all the packets processed in the network switch, there is a problem in that it is impossible to accurately grasp the traffic amount and detect the packet loss. Especially in the field of broadcast program production, packet loss is directly linked to the deterioration of video, so all packets are checked in real time to detect packet loss, and jitter is measured. There is a demand for accurate monitoring that is not required, and a monitoring technique that is more accurate than the packet flow monitoring that has been performed in conventional communication systems is required. Therefore, even if sFlow is applied to the program production system, it is impossible to detect packet loss and measure jitter, which makes quality control difficult. Further, monitoring all the packets on the network switch increases the load as the speed of the network increases, which may adversely affect the original processing of the network switch.

Further, as described above, if the packet flow monitoring device 100 for communication as shown in FIG. 22 is configured by using the packet duplication function in the network switch, the duplication data as many as the number of ports used for data transfer can be obtained. You need multiple communication cables to connect to the transfer port. That is, in this mode, in order to monitor all the packets processed by the network switch, the same number of ports as in normal data transfer is required, which is not realistic.

In view of the above problems, an object of the present invention is to monitor packet flow efficiently and with high accuracy in a video or audio communication system built in an Ethernet (registered trademark) frame or IP packet network. An object of the present invention is to provide a device, a packet data extraction device, an extracted data totaling device, and a program.

A packet flow monitoring device of the present invention is a packet flow monitoring device for monitoring a packet flow in a video or audio communication system built in an Ethernet (registered trademark) or IP (Internet Protocol) packet network, Of all the passing packets that pass through one or more specific network switches, and extract data report packets that are aggregated by extracting some predetermined information in each duplicated passing packet. A packet data extraction device for outputting, and analysis data for receiving the extracted data report packet and analyzing the partial information in each duplicated transit packet included in the extracted data report packet so as to be aggregated for each packet flow. And an extracted data totaling device for recording as And it features.

Further, in the packet flow monitoring device of the present invention, the packet data extraction device and the extracted data totaling device are connected by a communication cable using a single port.

Further, in the packet flow monitoring device of the present invention, the extracted data report packet is formed of a variable length IP format packet within a range not exceeding a predetermined packet length, and the packet data extracting device and the extracted data totaling device Following the IP header and UDP header for transferring between devices, an extraction data common header consisting of items common to each duplicated transit packet to be aggregated, and items to be individually extracted for each duplicate transit packet The extracted data for each packet is configured to be assigned, and the extracted data for each packet includes an extracted data individual header indicating information identifying the extracted passed packet and the extracted duplicated packet. Make a pair with the extracted data that stores some predetermined information in the transit packet Made is characterized in that is.

Further, in the packet flow monitoring device of the present invention, the extracted data common header includes a value indicating the reception time of the leading data of the duplicated transit packet in each packet flow, and the extracted data individual header is the duplicated transit packet. The passing packet length indicating the packet length, the data type indicating the packet type of the duplicated passing packet, and the elapsed time information indicating the time difference between the head data described in the extracted data common header are displayed. Including,
The packet type is characterized by including a value that identifies at least Ethernet (registered trademark), IP, and RTP (Real-time Transport Protocol).

In the packet flow monitoring device of the present invention, the packet type is a value that further identifies IGMP (Internet Group Management Protocol), TCP (Transmission Control Protocol), UDP (User Datagram Protocol), and PTP (Precision Time Protocol). It is characterized by including.

In the packet flow monitoring device of the present invention, the partial information extracted by the packet data extraction device is
The extracted data for Ethernet (registered trademark) consists of a destination MAC address, a source MAC address, and an E frame header type number.
The extracted data for the IP network includes a destination MAC address, a source MAC address, a source IP address, a destination IP address, and a protocol number of an IP header,
As the extracted data for IGMP, the destination MAC address, the source MAC address, the source IP address, the destination IP address, the difference between the passing packet length and the IGMP payload length, and a predetermined number of IGMP payloads from the beginning,
The extracted data for TCP or UDP includes a destination MAC address, a source MAC address, a source IP address, a destination IP address, a source L4 port number, and a destination L4 port number,
As the extracted data for PTP, destination MAC address, source MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, difference between passing packet length and PTP header and payload length, PTP Consists of all headers and PTP payload,
As the extracted data for RTP, destination MAC address, source MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, difference between passing packet length and RTP payload length, RTP header It is characterized by including a marker bit, an RTP header payload type, an RTP sequence number, an RTP time stamp value, and an SSRC that is an identifier indicating a transmission source.

Further, in the packet flow monitoring device of the present invention, the extracted data totaling device analyzes the extracted data common header and the extracted data for each packet in each duplicated passing packet in the sequentially received extracted data report packets, and determines the packet type. Generate aggregate data for each packet flow according to
The aggregated data for Ethernet (registered trademark) consists of a source MAC address, a destination MAC address, an E frame type number, an average throughput, and a total number of received packets for each packet flow.
The aggregate data for IP includes a source MAC address, a destination MAC address, a source IP address, a destination IP address, an IP header protocol number, an average throughput, and a total number of received packets for each packet flow.
As aggregated data for IGMP, a source MAC address, a destination MAC address, a source IP address, a destination IP address, an average throughput, a total number of received packets, a reception time, and a predetermined number of bytes from an IGMP payload for each packet flow. Becomes
As the aggregated data for TCP or UDP, the source MAC address, the destination MAC address, the source IP address, the destination IP address, the source L4 port number, the destination L4 port number, the average throughput, and the total number of received packets for each packet flow Consists of
As aggregated data for PTP, source MAC address, destination MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, average throughput, total number of received packets, transmission delay for each packet flow , Reception time, and PTP header and payload,
As aggregated data for RTP, source MAC address, destination MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, average throughput, total number of received packets, RTP payload for each packet flow It is characterized by comprising a type number, RTP SSRC, the number of packets having an RTP marker bit value of 1, a packet reception interval, a packet loss number, and a maximum burst loss number.

Further, in the packet flow monitoring device of the present invention, when the packet data extraction device extracts the partial information from the duplicated transit packet related to RTP, whether the marker bit in the RTP header is 1 or not. And an RTP data extraction unit that extracts the RTP payload including 40 bytes from the beginning when the marker bit is 1, and the extraction data totaling device includes the RTP data extraction unit in the extraction data report packet. When totaling the partial information in each duplicated transit packet related to the RTP to be performed for each packet flow, each duplicated transit packet related to the RTP is ST 2110-20, ST 2110-30, or ST 2022-6. Whether it complies with the SMPTE protocol of When the RTP payload judging section for judging from 40 bytes of RTP payload and the SMPTE protocol of ST 2110-20, ST 2110-30, or ST 2022-6 are complied with, and the marker bit is 1, the head is concerned. From the RTP payload of 40 bytes to ST 2110-20, ST 2110-30, or ST 2022-6 to obtain predetermined information, and add it to the aggregate data. Characterize.

Further, in the packet flow monitoring device of the present invention, the packet data extraction device, when extracting the partial information from the duplicated transit packet and creating extraction data, uses the same extraction received in the same packet flow. An extracted data compression unit that performs data compression on the extracted data to be stored in the data report packet, the data after the data compression, a data compression presence / absence flag indicating the presence or absence of data compression, and data indicating the data compressed data position. An extraction data report packet transmitting unit that inserts a compression position flag and generates and outputs the extraction data report packet is provided, and the extraction data totaling device refers to the data compression presence flag and the data compression position flag. And an extracted data decompression unit for decompressing the data after the data compression.

Further, the packet data extraction device of the present invention is a packet data extraction device used for monitoring a packet flow in a video or audio communication system constructed by an Ethernet (registered trademark) or IP packet network, All the passing packets passing through one or more specific network switches above are duplicated, and a part of predetermined information in each duplicated passing packet is extracted to form an extracted data report packet. And output to the outside.

Further, the extracted data totaling device of the present invention receives the extracted data report packet from the packet flow monitoring device of the present invention, and outputs the partial information in each duplicated transit packet included in the extracted data report packet. It is characterized in that it is analyzed so as to be aggregated for each packet flow and recorded as aggregated data.

Further, the program of the present invention is configured as a program for causing a computer to function as a packet data extraction device in the packet flow monitoring device of the present invention.

Further, the program of the present invention is configured as a program for causing a computer to function as an extracted data totaling device in the packet flow monitoring device of the present invention.

According to the present invention, it is possible to efficiently and highly accurately monitor a packet flow in a video or audio communication system constructed in an Ethernet (registered trademark) frame or IP packet network. Preferably, it becomes possible to monitor and measure the quality related to the packet flow in a program production system that transmits video and the like efficiently and highly accurately.

In particular, according to one aspect of the present invention, predetermined partial information (partial information in the packet header and the payload of the packet when the packet type is IGMP, in the transit packet that passes through the network of the E frame or the IP packet). Part of the PTP, and in the case of PTP, the entire extracted payload is extracted to form an extracted data report packet. Therefore, information on traffic flowing through a high-throughput network (for example, a packet flow with a high transmission rate). As a result, it is possible to monitor and measure the quality of all packets even in the case of signal transmission related to a 4K / 8K video system).

Further, according to one aspect of the present invention, when extracting the predetermined partial information in the transit packet, the packet type of the transit packet is determined, and necessary information is extracted according to the packet type. Therefore, detailed information such as throughput and packet loss for each packet flow, video resolution, and packet transmission delay can be monitored in real time.

Further, according to one aspect of the present invention, by compressing the extracted information to be embedded in the extracted data report packet, one packet flow monitoring device can monitor and measure the quality of more packet flows. It will be possible.

It is a block diagram which shows schematic structure of the packet flow monitoring apparatus of 1st Embodiment by this invention. (A), (b) is a figure which shows the signal format of the extraction data common header and the extraction data individual header in the extraction data report packet in the packet flow monitoring apparatus of 1st Embodiment by this invention, respectively. It is a block diagram showing a schematic structure of a packet data extraction device in a packet flow monitoring device of a first embodiment according to the present invention. It is a block diagram showing a schematic structure of a data extraction part in a packet data extraction device in a packet flow monitoring device of a first embodiment according to the present invention. It is a flowchart which shows the example of determination of the packet type (data type) by the packet type determination unit in the packet data extraction device in the packet flow monitoring device of the first exemplary embodiment of the present invention. It is a figure which shows the signal format of the extraction data for networks of the E frame in the packet flow monitoring apparatus of 1st Embodiment by this invention. It is a figure which shows the signal format of the extraction data for IP networks in the packet flow monitoring apparatus of 1st Embodiment by this invention. It is a figure which shows the signal format of the extraction data for IGMP (Internet Group Management Protocol) in the packet flow monitoring apparatus of 1st Embodiment by this invention. It is a figure which shows the signal format of the extraction data for TCP (Transmission Control Protocol) / UDP (User Datagram Protocol) in the packet flow monitoring apparatus of 1st Embodiment by this invention. It is a figure which shows the signal format of the extraction data for PTP (Precision Time Protocol) in the packet flow monitoring apparatus of 1st Embodiment by this invention. It is a figure which shows the signal format of the extraction data for RTP (Real-time Transport Protocol) in the packet flow monitoring apparatus of 1st Embodiment by this invention. It is a block diagram which shows schematic structure of the extraction data totaling apparatus in the packet flow monitoring apparatus of 1st Embodiment by this invention. It is a figure which shows the total data list of the extraction data totaling apparatus in the packet flow monitoring apparatus of 1st Embodiment by this invention. (A), (b) is a block diagram which shows the schematic structure of the RTP extraction part of the packet data extraction device in the packet flow monitoring apparatus of 2nd Embodiment by this invention, and the RTP collection part of an extraction data totaling device, respectively. .. (A), (b) is a block diagram which shows the schematic structure of ST2110-20 processing part and ST2110-30 processing part of the extraction data totaling apparatus in the packet flow monitoring apparatus of 2nd Embodiment by this invention, respectively. It is a figure which shows the signal format of the extraction data for every packet for RTP in the packet flow monitoring apparatus of 2nd Embodiment by this invention. It is a figure which shows the total data for RTP among the total data of the extraction data totaling apparatus in the packet flow monitoring apparatus of 2nd Embodiment by this invention. (A) and (b) are schematic configurations of an extracted data transmission unit in the packet data extraction device and an extracted data report packet reception unit in the extracted data totaling device in the packet flow monitoring device of the third embodiment according to the present invention, respectively. It is a block diagram showing. It is a figure which shows the signal format of the extraction data for every packet for RTP in the packet flow monitoring apparatus of 3rd Embodiment by this invention. It is a block diagram which shows the typical example of the conventional SDI / MADI signal format program production system. It is a block diagram which shows the typical example of the program production system constructed | assembled by the network of the conventional E frame or IP packet. It is a block diagram which shows the schematic structure of the conventional communication packet flow monitoring apparatus. (A), (b) is a figure which shows the signal format of SMPTEST2110-20 standard and SMPTEST2022-6 standard, respectively.

Hereinafter, the packet flow monitoring device 1 of each embodiment according to the present invention will be described in detail with reference to the drawings.

[First Embodiment]
(overall structure)
FIG. 1 is a block diagram showing a schematic configuration of a packet flow monitoring device 1 according to the first embodiment of the present invention. The packet flow monitoring device 1 is a program production system constructed by a network of E frames or IP packets shown in FIG. 21, and all passing packets passing through one or a plurality of specific network switches 60 on the network. Is a device for monitoring the quality related to the packet flow and measuring predetermined quality information described later, and includes a packet data extraction device 2 and an extracted data totaling device 3.

The packet data extraction device 2 shown in FIG. 1 is arranged, for example, between a plurality of specific network switches 60 shown in FIG. 21, duplicates each passing packet passing between the plurality of network switches 60, and duplicates each packet. Predetermined partial information in the passing packet (partial information in the packet header shown in FIGS. 6 to 11 and a part of the payload when the packet type is IGMP, and the payload when the packet type is PTP (Excluding all of the above) is extracted and aggregated to form an “extracted data report packet” and transferred to the extracted data totalizing device 3. However, the packet data extraction device 2 is a bridge device between a transmission device such as the video transmission device 51 and the audio transmission device 52 shown in FIG. 21 and the network switch 60, or between the network switch 60 and the reception device 80. May be installed in the network switch 60 or in a specific network switch 60.

The extracted data totaling device 3 receives the “extracted data report packet” from the packet data extracting device 2 and outputs the partial information in each duplicated transit packet included in the “extracted data report packet” for each packet flow. Is a device that analyzes so as to be aggregated into and aggregated as aggregated data and records it in a predetermined recording unit (totalized data recording unit 329 shown in FIG. 12). The quality of each packet flow is monitored and predetermined quality information described later is displayed. The aggregated data can be output to the outside so that it can be measured.

The packet data extracting device 2 and the extracted data summarizing device 3 are connected with a communication cable such as a LAN cable using a single port to facilitate the installation. Further, when the packet data extracting device 2 extracts the partial information in the passing packet of each packet flow, it is aggregated into the “extracted data report packet”, so that even in the case of a single communication cable, a large number of packet flows are extracted. The partial information in the passing packet can be handled and efficiently transferred to the extracted data totaling device 3.

As shown in FIG. 1, the “extracted data report packet” is composed of an IP format packet having a variable length within a range not exceeding a predetermined packet length, and is between the packet data extracting device 2 and the extracted data totaling device 3. Following the IP header and UDP header for transfer, an “extracted data common header” (see FIG. 2A) consisting of items common to each aggregated duplicated transit packet is assigned, and each duplicated “Extracted data for each packet”, which includes items to be individually extracted for the passed packets, is assigned. Each “extracted data for each packet” includes an “extracted data individual header” (see FIG. 2B) indicating information for identifying the extracted duplicated transit packet, and the extracted duplicated transit packet. It is configured to make a pair with "extracted data" that stores predetermined partial information (see FIGS. 6 to 11).

As shown in FIG. 2A, the “extracted data common header” contains the “device ID” for identifying the installed packet data extraction device 2 and the leading data of the duplicated passing packet in each packet flow. A "timestamp value (second) synchronized with PTP at the time of receiving the first data" and a "timestamp value (nanosecond) synchronized with PTP at the time of receiving the first data" indicating the reception time are assigned.

On the other hand, as shown in FIG. 2B, the “extracted data individual header” may indicate the relative relationship with the “extracted data common header”, so that the amount of information identifying the extracted passing packet is minimized. After the reserve bit R (1 bit), the "passing packet length" indicating the length of the duplicated transit packet, the packet type of the duplicated transit packet (E frame / IP / IGMP / TCP / UDP / A "data type" indicating PTP / RTP) and a "reception port ID" for identifying each packet flow connected to the port are assigned, and the reserved bit R (1 bit) is followed by the corresponding Time difference from the leading data described in the "extracted data common header" regarding the reception time of the extracted passing packet in the packet flow "Elapsed time from the start data reception timestamp values synchronized with PTP in until the timestamp value of the received PTP of the relevant data (nanoseconds)" is assigned to indicate.

(Packet data extraction device)
FIG. 3 is a block diagram showing a schematic configuration of the packet data extraction device 2 in the packet flow monitoring device 1 according to the first embodiment of the present invention.

The packet data extraction device 2 includes a packet duplication unit 21, a data extraction unit 22, a switch processing unit 23, an extraction data transmission unit 24, and a PTP processing unit 25, the number of which corresponds to the number of ports to be extracted.

The packet duplication unit 21 temporarily stores the “reception time (time stamp value of received PTP)” of the received transit packet in the packet flow to be extracted, transfers the transit packet to the switch processing unit 23, and duplicates it. The duplicated passing packet and the information on the reception time are output to the data extracting unit 22.

The data extraction unit 22 extracts the “extracted data common header” and the “extract for each packet” shown in FIGS. 1 and 2 from the header information of the duplicated transit packet obtained from the packet duplication unit 21 and the information of the reception time. The information of “data” is extracted and output to the extracted data transmitting unit 24.

The switch processing unit 23 outputs the original passing packet transferred from the packet copying unit 21 through the route of the data flow. As a result, the normal processing of the network switch 60 is maintained.

Although FIG. 1 shows an example in which the packet duplication unit 21, the data extraction unit 22, and the switch processing unit 23 are provided for each input port for inputting a packet flow, a single packet duplication unit 21, data The extraction unit 22 and the switch processing unit 23 may be configured to collectively process the plurality of input ports.

The extracted data transmitting unit 24 defines the extracted data output from each data extracting unit 22 as “packet-specific extracted data”, and extracts a plurality of packet-specific extracted data, “extracted-data common header” (see FIG. 2A), and Information necessary for forming the “extracted data individual header” (see FIG. 2B) is obtained from each data extraction unit 22, an “extracted data report packet” is formed, and output to the extracted data totaling device 3. ..

The PTP processing unit 25 communicates with the PTP master device 4 (not shown in FIG. 1) in the network according to PTP (Precision Time Protocol), and sets the operation time of each packet duplication unit 21 in the packet data extraction device 2 to PTP. This is a processing unit that synchronizes with the control time of the master device 4, and is similar to a general PTP processing mechanism.

(Detailed configuration of data extraction unit)
FIG. 4 is a block diagram showing a schematic configuration of the data extraction unit 22 in the packet data extraction device 2 in the packet flow monitoring device 1 according to the first embodiment of the present invention.

The data extraction unit 22 includes a packet type determination unit 221, an RTP extraction unit 222, a PTP extraction unit 223, an IGMP extraction unit 224, an IP extraction unit 225, a UDP extraction unit 226, a TCP extraction unit 227, and an E frame extraction unit 228. ..

The packet type determination unit 221 determines the packet type from the header information and the payload of the duplicated transit packet obtained from the packet duplication unit 21, and determines the duplicated transit packet and the reception time based on the determination result. The information is output to any of the corresponding RTP extraction unit 222, PTP extraction unit 223, IGMP extraction unit 224, IP extraction unit 225, UDP extraction unit 226, TCP extraction unit 227, and E frame extraction unit 228.

The RTP extraction unit 222, the PTP extraction unit 223, the IGMP extraction unit 224, the IP extraction unit 225, the UDP extraction unit 226, the TCP extraction unit 227, and the E frame extraction unit 228 are respectively determined in advance from the duplicated passing packet. Partial information (see FIGS. 6 to 11) is extracted as “extracted data” and output to the extracted data transmitting unit 24.

In addition, the RTP extraction unit 222, the PTP extraction unit 223, the IGMP extraction unit 224, the IP extraction unit 225, the UDP extraction unit 226, the TCP extraction unit 227, and the E frame extraction unit 228, respectively, based on the above reception time information. , An "extracted data common header" (see FIG. 2 (a)) and an "extracted data individual header" (see FIG. 2 (b)) necessary to form the "extracted data report packet" shown in FIGS. Information is identified and output to the extracted data transmission unit 24.

That is, the RTP extraction unit 222, the PTP extraction unit 223, the IGMP extraction unit 224, the IP extraction unit 225, the UDP extraction unit 226, the TCP extraction unit 227, and the E frame extraction unit 228 respectively identify the packet data extraction device 2 to which they belong. The "device ID" for identifying, the "time stamp value (seconds) synchronized with the PTP at the time of receiving the start data" regarding the reception time of the extracted transit packet in the corresponding packet flow, and the "PTP at the time of receiving the start data" Synchronized time stamp value (nanoseconds) "," passing packet length "indicating the length of the corresponding passing packet," data type "indicating the packet type of the corresponding passing packet, and for identifying each packet flow And the information of the “reception port ID” is output to the extracted data transmission unit 24.

As a result, the extracted data transmitting unit 24 sets the extracted data output from the one or more data extracting units 22 as “extracted data for each packet”, the extracted data for each packet, and the “extracted data common header” ( The information necessary for forming the “extracted data individual header” (see FIG. 2A) (see FIG. 2B) can be obtained from each data extraction unit 22, and the predetermined information shown in FIG. An “extracted data report packet” composed of variable-length IP format packets is formed within a range not exceeding the packet length, and is output to the extracted data totaling device 3.

FIG. 5 is a flowchart showing a packet type (data type) determination example by the packet type determination unit 221 in the packet data extraction device 2 in the packet flow monitoring device 1 according to the first embodiment of the present invention.

When the packet type determination unit 221 acquires the duplicate packet (step S1), the packet type determination unit 221 determines the packet type from the header information and the payload in the following procedure.

First, the packet type determination unit 221 determines whether or not the type number of the E frame is indicated from the header information of the duplicate packet, and when the type number of the E frame is indicated, the type number is 0x0800. It is determined (step S2). When 0x0800 is indicated as the type number of the E frame, the process proceeds to step S3, and otherwise the duplicate packet is sent to the E frame processing unit 228 (step S6).

When the process proceeds to step S3, the packet type determination unit 221 determines whether the header information of the duplicated packet indicates the header information of the IP header, and when the header information of the IP header is indicated, the protocol number is 0x02. , 0x06, 0x11 (step S3), and when 0x02 is indicated as the protocol number of the IP header, the duplicate packet is sent to the IGMP processing unit 224 (step S9), and 0x06 is indicated. If it is, the duplicate packet is sent to the TCP processing unit 227 (step S8). If 0x11 is indicated as the protocol number of the IP header, the process proceeds to step S4. Otherwise, the duplicate packet is sent to the IP processing unit 225. It is sent (step S7).

When the process proceeds to step S4, the packet type determination unit 221 determines whether the UDP port number is indicated from the header information of the duplicate packet, or when the UDP port number is indicated, the port number is 319, 320. , 1024 or more (step S4), and when the UDP port number 319 or 320 is indicated, the duplicate packet is sent to the PTP processing unit 223 (step S11), and 1024 or more is indicated. If so, the process proceeds to step S5, and otherwise, the duplicate packet is sent to the UDP processing unit 226 (step S10).

When the process proceeds to step S5, the packet type determination unit 221 determines from the payload information of the duplicate packet (that is, the first 2 bits of the UDP payload) whether the first 2 bits are 0x2 (step S5), When 0x2 is indicated as the first two bits of the UDP payload, the duplicate packet is sent to the RTP processor 222 (step S12), and otherwise the duplicate packet is sent to the UDP processor 226 (step S10).

In this way, the packet type determination unit 221 can determine the packet type from the header information and the payload of the duplicated transit packet obtained from the packet duplication unit 21.

(Extracted data for each packet type)
6 to 11 show signal formats of extracted data for each packet type assigned in the "extracted data report packet" shown in FIG. 1 in the first embodiment.

As shown in FIG. 6, the extracted data for the E frame network includes a destination MAC address, a source MAC address, and an E frame header type number.

As shown in FIG. 7, the extracted data for the IP network is composed of the destination MAC address, the source MAC address, the source IP address, the destination IP address, and the protocol number of the IP header.

As shown in FIG. 8, the extracted data for IGMP includes the destination MAC address, the source MAC address, the source IP address, the destination IP address, the difference (1 byte) between the passing packet length and the IGMP payload length, and from the beginning. It consists of 39 bytes of IGMP payload.

As shown in FIG. 9, the extracted data for TCP or UDP includes a destination MAC address, a source MAC address, a source IP address, a destination IP address, a source L4 port number, and a destination L4 port number.

As shown in FIG. 10, the extracted data for PTP includes the destination MAC address, the source MAC address, the source IP address, the destination IP address, the source L4 port number, the destination L4 port number, the transit packet length, and the (PTP header + (Payload length) (1 byte), PTP header and PTP payload.

As shown in FIG. 11, the extracted data for RTP includes a destination MAC address, a source MAC address, a source IP address, a destination IP address, a source L4 port number, a destination L4 port number, a transit packet length, and an RTP payload length. (1 byte), the marker bit M (1 bit) of the RTP header, the payload type PT (7 bits) of the RTP header, the RTP sequence number, the RTP time stamp value, and the SSRC (32 which is an identifier indicating the transmission source). Bits).

As shown in FIGS. 6 to 11, for any of the seven types of packets, only a part of the header information for quality monitoring related to the packet flow is extracted as the header information, and the packet type is IGMP. Includes a part of the payload, and in the case of PTP includes the entire payload, the extracted data totaling device 3 described below enables more convenient and accurate monitoring and quality measurement. To do so.

(Extracted data aggregation device)
FIG. 12 is a block diagram showing a schematic configuration of the extracted data totaling device 3 in the packet flow monitoring device 1 according to the first embodiment of the present invention.

The extracted data totaling device 3 includes an extracted data report packet receiving unit 31, an extracted data totaling unit 32, and an aggregated data output unit 33. The extracted data totaling unit 32 includes an extracted data type determining unit 321, an RTP totaling unit 322, a PTP totaling unit 323, an IGMP totaling unit 324, an IP totaling unit 325, a UDP totaling unit 326, a TCP totaling unit 327, an E frame totaling unit. 328 and a total data recording unit 329.

When the extracted data report packet receiving unit 31 receives the extracted data report packet from the extracted data totaling device 2, the extracted data common packet and the extracted data for each packet are extracted and output to the extracted data totaling unit 32.

The extracted data totaling unit 32 determines the contents of the extracted data for each packet indicating the partial information in each duplicated passing packet in the extracted data report packet sequentially received by the extracted data report packet receiving unit 31 (that is, according to each protocol). Data) is analyzed and tabulated for each packet flow, and the tabulated data is collectively recorded as tabulated data in the tabulated data recording unit 329.

The aggregated data output unit 33 reads the aggregated data from the aggregated data recording unit 329 of the aggregated data aggregater 32 according to an external instruction, and outputs it externally. The aggregated data output from the aggregated data output unit 33 can be written in another general storage device (not shown) or can be transmitted and displayed in a display device (not shown) in, for example, an IP packet format. As a result, the aggregated data can be output to the outside so that the quality of each packet flow can be monitored and predetermined quality information described later can be measured.

Here, the details of the extracted data totaling unit 32 will be described.

The extracted data type determination unit 321 determines from the data type described in the extracted data individual header in the extracted data for each packet in the extracted data report packets sequentially received by the extracted data report packet receiving unit 31 via the extracted data type determination unit 321. The packet type is determined, and the RTP aggregation unit 322, the PTP aggregation unit 323, the IGMP aggregation unit 324, the IP aggregation unit 325, the UDP aggregation unit 326 corresponding to the extraction data common header and the extraction data for each packet according to the determination result, The data is output to either the TCP totaling unit 327 or the E frame totaling unit 328.

The RTP aggregation unit 322 passes through the extraction data type determination unit 321, and the extraction data common header and the extraction data for each packet in each duplicated passage packet regarding the RTP in the extraction data report packet sequentially received by the extraction data report packet reception unit 31. Is analyzed to read the source MAC address, the destination MAC address, the source IP address, the destination IP address, the source L4 port number, and the destination L4 port number, and a packet in which these 6 items are the same (a duplicated transit packet) As the same packet flow, average throughput, total number of received packets, RTP marker bit value (M), number of packets in which M is 1, packet reception interval (average / minimum / maximum), packet loss number, and maximum burst loss The last in each packet flow that aggregates the numbers To produce the aggregated data by adding the replicated values of RTP payload type number and RTP SSRC pass packets, and records in the aggregation data recording unit 329.

The PTP aggregation unit 323 passes through the extraction data type determination unit 321, and the extraction data common header and the extraction data for each packet in each duplicated passing packet regarding the RTP in the extraction data report packet sequentially received by the extraction data report packet reception unit 31. Is analyzed to read the source MAC address, the destination MAC address, the source IP address, the destination IP address, the source L4 port number, and the destination L4 port number, and a packet in which these 6 items are the same (a duplicated transit packet) The average throughput, the total number of received packets, and the transmission delay (average / minimum / maximum) are aggregated as the same packet flow, and the reception time of the last duplicated transit packet in each aggregated packet flow and "PTP header and payload" Generate aggregated data with "" added and aggregate It is recorded in the over data recording unit 329.

The IGMP tabulation unit 324 passes through the extracted data type determination unit 321, and the extracted data common header and the extracted data for each packet in each duplicated transit packet regarding the RTP in the extracted data report packet sequentially received by the extracted data report packet receiving unit 31. The source MAC address, the destination MAC address, the source IP address, and the destination IP address are read, and the packets with the same four items (copied transit packets) are treated as the same packet flow, and the average throughput and the total are obtained. The number of received packets is aggregated, aggregated data with the reception time of the last duplicated transit packet and the IGMP payload in each aggregated packet flow is generated, and recorded in the aggregated data recording unit 329.

The IP totaling unit 325 analyzes the extraction data common header and the extraction data for each packet in each passing packet regarding the RTP in the extraction data report packet sequentially received by the extraction data report packet receiving unit 31 via the extraction data type determination unit 321. Then, the source MAC address, the destination MAC address, the source IP address, the destination IP address, and the IP header protocol number are read, and the packets having the same five items (copied transit packets) are regarded as the same packet flow, and the average throughput, Also, aggregated data in which the total number of received packets is aggregated is generated and recorded in the aggregated data recording unit 329.

The UDP aggregating unit 326 analyzes the extracted data common header and the extracted data for each packet in each passing packet regarding RTP in the extracted data report packet sequentially received by the extracted data report packet receiving unit 31 via the extracted data type determination unit 321. The source MAC address, the destination MAC address, the source IP address, the destination IP address, the source L4 port number, and the destination L4 port number are read. As a packet flow, aggregated data in which the average throughput and the total number of received packets are aggregated is generated and recorded in the aggregated data recording unit 329.

The TCP totaling unit 327 analyzes the extraction data common header and the extraction data for each packet in each passing packet regarding RTP in the extraction data report packet sequentially received by the extraction data report packet receiving unit 31 via the extraction data type determination unit 321. The source MAC address, the destination MAC address, the source IP address, the destination IP address, the source L4 port number, and the destination L4 port number are read. As a packet flow, aggregated data in which the average throughput and the total number of received packets are aggregated is generated and recorded in the aggregated data recording unit 329.

The E frame totaling unit 328 analyzes the extracted data common header and the extracted data for each packet in each passing packet regarding RTP in the extracted data report packet sequentially received by the extracted data report packet receiving unit 31 via the extracted data type determination unit 321. Then, the source MAC address, the destination MAC address, and the E frame type number are read, and the average throughput and the total number of received packets are aggregated by using the packets with the same three items (copied transit packets) as the same packet flow. Data is generated and recorded in the total data recording unit 329.

The "average throughput" is calculated from the "passed packet length", the "timestamp value synchronized with PTP when the top data is received" and the "timestamp value synchronized with PTP when the top data is received" shown in FIG. It can be calculated from the “elapsed time up to the time stamp value of the received PTP”.

The total data recording unit 329 is totaled for each data type by the RTP totaling unit 322, the PTP totaling unit 323, the IGMP totaling unit 324, the IP totaling unit 325, the UDP totaling unit 326, the TCP totaling unit 327, and the E frame totaling unit 328. Record the aggregated data (see FIG. 13).

As shown in FIG. 13, the aggregated data according to the first embodiment includes E-frame aggregated data from the source MAC address, the destination MAC address, the E frame type number, the average throughput, and the total number of received packets for each packet flow. Become.

Further, the IP aggregated data includes a source MAC address, a destination MAC address, a source IP address, a destination IP address, an IP header protocol number, an average throughput, and a total number of received packets for each packet flow.

Also, the IGMP aggregate data includes a source MAC address, a destination MAC address, a source IP address, a destination IP address, an average throughput, a total number of received packets, a reception time, and an IGMP payload (39 bytes from the beginning) for each packet flow. Consists of.

The TCP or UDP aggregate data is the source MAC address, destination MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, average throughput, and total number of received packets for each packet flow. Consists of.

Further, the PTP aggregation data includes a source MAC address, a destination MAC address, a source IP address, a destination IP address, a source L4 port number, a destination L4 port number, an average throughput, a total number of received packets, and a transmission delay for each packet flow. (Average / minimum / maximum), reception time, and PTP header and payload (all).

Also, the RTP aggregation data is the source MAC address, destination MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, average throughput, total number of received packets, RTP payload for each packet flow. It consists of the type number, RTP SSRC, RTP marker bit value (M), the number of packets in which M is 1, the packet reception interval (average / minimum / maximum), the number of packet losses, and the maximum number of burst losses.

According to the packet flow monitoring device 1 of the first embodiment configured as described above, it is possible to efficiently obtain the aggregated data related to the packet flow of all the packets in the program production system constructed by the network of E frames or IP packets. Therefore, it becomes possible to monitor and measure the quality of the packet flow with high accuracy.

In particular, according to the packet flow monitoring device 1 of the first embodiment, predetermined partial information (partial information in the packet header and packet type IGMP in the transit packet of the E frame or IP packet that passes through the network). In the case of PTP, a part of the payload is included, and in the case of PTP, the entire payload is included) to form an extracted data report packet. Therefore, information of traffic flowing through a high-throughput network (for example, transmission) As a high-rate packet flow, it is possible to monitor and measure the quality of all packets even in the case of signal transmission related to a 4K / 8K video system.

Further, according to the packet flow monitoring device 1 of the first embodiment, when the predetermined partial information in the passing packet is taken out, the packet type of the passing packet is determined, and it is necessary according to the packet type. Since detailed information can be retrieved, detailed information such as throughput and packet loss for each packet flow can be monitored in real time.

[Second Embodiment]
(overall structure)
The schematic configuration of the packet flow monitoring device 1 of the second embodiment is similar to that shown in FIGS. 1 to 5 and FIG. 12, but as shown in FIG. 14A, the packet data extraction shown in FIG. The RTP extraction unit 222 of the device 2 is configured to include the marker bit inspection unit 2221 and the RTP data extraction unit 2222, and as illustrated in FIG. 14B, the extracted data totaling device 3 illustrated in FIG. The RTP aggregation unit 322 is configured to include an RTP data processing unit 3221, an RTP payload determination unit 3222, an ST 2110-20 processing unit 3223, an ST 2110-30 processing unit 3224, and an ST 2022-6 processing unit 3225. There is a difference.

FIGS. 14A and 14B are schematic diagrams of the RTP extraction unit 222 of the packet data extraction device 2 and the RTP aggregation unit 322 of the extracted data aggregation device 3 in the packet flow monitoring device 1 of the second embodiment according to the present invention. It is a block diagram which shows a structure. The same components as those in the first embodiment described above are designated by the same reference numerals.

(RTP extractor)
First, as shown in FIG. 14A, the RTP extraction unit 222 in the packet data extraction device 2 of this embodiment includes a marker bit inspection unit 2221 and an RTP data extraction unit 2222.

The marker bit inspection unit 2221 inputs the reception time information and the copied transit packet through the packet type determination unit 221, and determines whether the value of the marker bit M is 1 from the header information in the duplicate transit packet. It is checked whether it is 0, and the information of the reception time and the duplicated passing packet are output to the RTP data extraction unit 2222 together with the value of the marker bit M.

The RTP data extraction unit 2222 is an “extracted data common header” required to form the “extracted data report packet” shown in FIGS. 1 and 2 based on the information on the reception time obtained through the packet type determination unit 221. (See FIG. 2 (a)) and “extracted data individual header” (see FIG. 2 (b)) information is identified, and predetermined partial information from the duplicated passing packet is extracted as “extracted data”. The data is extracted according to the value of the marker bit M and output to the extracted data transmission unit 24.

Here, when the value of the marker bit M is 0, the RTP data extraction unit 2222 according to the second embodiment extracts the “extracted data” shown in FIG. When is 1, "extracted data" shown in FIG. 16 is extracted.

That is, in the “extracted data for each packet for RTP” shown in FIG. 16, the “extracted data” is compared with the “extracted data” shown in FIG. 11 according to the first embodiment, and the “RTP payload” is from the beginning. The difference is that 40 bytes are added. If the RTP payload stored in the duplicated transit packet is less than 40 bytes, 0 is complemented as the "RTP payload" in the "extracted data" shown in FIG.

(RTP counting section)
On the other hand, as shown in FIG. 14B, the RTP aggregation unit 322 in the extracted data aggregation device 3 of the present embodiment includes an RTP data processing unit 3221, an RTP payload determination unit 3222, ST 2110-20 processing unit 3223, and ST 2110. A −30 processing unit 3224 and an ST 2022-6 processing unit 3225 are provided.

When the value of the marker bit M is 0, the RTP data processing unit 3221 performs data aggregation by the same operation as in the first embodiment, and the RTP payload determination unit 3222, ST 2110-20 processing unit 3223, ST 2110-30 processing. The aggregated data is output to the aggregated data recording unit 329 by omitting each processing of the unit 3224 and the ST2022-6 processing unit 3225. However, when the value of the marker bit M is 1, the RTP payload determination unit 3222, ST 2110. The aggregated data is output to the aggregated data recording unit 329 through each processing of the −20 processing unit 3223, the ST 2110-30 processing unit 3224, and the ST 2022-6 processing unit 3225.

That is, when the value of the marker bit M is 1, the RTP data processing unit 3221 passes through the extraction data type determination unit 321 and replicates each RTP in the extraction data report packet sequentially received by the extraction data report packet receiving unit 31. The extracted data common header and the extracted data for each packet in the passed packet are analyzed to read the source MAC address, the destination MAC address, the source IP address, the destination IP address, the source L4 port number, and the destination L4 port number, Packets with the same six items (copied passing packets) are regarded as the same packet flow, average throughput, total number of received packets, number of packets indicating RTP marker bit 1, packet reception interval (average / minimum / maximum), number of packet losses. , And the maximum burst loss number Aggregate data added with the value of the RTP payload type number and RTP SSRC last replicated passed packets in each packet flow temporarily generated, and outputs the RTP payload determination unit 3222 with each duplicated traversing packet.

The RTP payload determination unit 3222 determines the determination information (the source IP address, the destination IP address, the source L4 port number, and the destination L4 port number) given by the external instruction and the packet flow in which these four items match, ST2110-20, A list of pairs of information indicating which of the SMPTE protocols of ST2110-30 and ST2022-6 is applicable), and a packet being processed of each duplicated transit packet obtained from the RTP data processing unit 3221. It is determined that the source IP address, the destination IP address, the source L4 port number, and the destination L4 port number are compared, and if they match, the ST2110-20 processing unit, ST2110-30 processing unit of the corresponding SMPTE protocol, and ST2022-6 The processing unit is informed of the packet being processed. The packet each extracted data transmitted with aggregated data generated one end of the.

Note that the RTP payload determination unit 3222 discards the packet being processed that does not match the above determination, and outputs the aggregated data once aggregated by the RTP data processing unit 3221 to the aggregated data recording unit 329 as it is.

The ST 2110-20 processing unit 3223 analyzes the packet-by-packet extraction data of the packet being processed, which is input from the RTP payload determination unit 3222, and predetermined information regarding video / synchronization characterized by SMPTE ST 2110-20. Is acquired, added to the aggregate data once aggregated by the RTP data processing unit 3221 and output to the aggregate data recording unit 329.

The ST 2110-30 processing unit 3224 analyzes the packet-by-packet extraction data of the packet being processed, which is input from the RTP payload determination unit 3222, and predetermines information regarding voice / synchronization characterized by SMPTE ST 2110-30. Is acquired, added to the aggregate data once aggregated by the RTP data processing unit 3221 and output to the aggregate data recording unit 329.

The ST2022-6 processing unit 3225 analyzes the packet-by-packet extraction data of the packet being processed, which is input from the RTP payload determination unit 3222, and determines a predetermined video / audio / synchronization characteristic of SMPTE ST2022-6. The obtained information is acquired, added to the aggregate data once aggregated by the RTP data processing unit 3221 and output to the aggregate data recording unit 329.

(ST 2110-20 processing unit)
FIGS. 15A and 15B respectively show schematic configurations of the ST2110-20 processing unit 3223 and the ST2110-30 processing unit 3224 of the extracted data totaling device 3 in the packet flow monitoring device 1 according to the second embodiment of the present invention. It is a block diagram shown.

First, as shown in FIG. 15A, the ST 2110-20 processing unit 3223 includes a delay calculation unit 32231, a resolution calculation unit 32232, a frame rate calculation unit 32233, and a video scanning method identification unit 32234.

The delay calculation unit 32231 operates when the value of the marker bit M is 1, and the RTP time stamp value (within the extracted data) in the packet-by-packet extracted data of the packet being processed obtained from the RTP payload determination unit 3222 and the packet From the reception time (reception PTP time in the extracted data individual header), the transmission delay time (delay time indicating the average / minimum / maximum value) is calculated by the following calculation, and the RTP data processing unit 3221 once aggregates the totals. The data is added and output to the total data recording unit 329.

T _{rcv_90kHz} = T _{rcv_ptp} * 90000% 0x100000000
if (T _{rcv_90kHz} > RTPtimestamp)
then D = (T _{rcv_90kHz} -RTPtimestamp) / 90000
else D = (RTPtimestamp-T _{rcv_90kHz} ) / 90000
(D: delay (seconds), _{Trcv_ptp} : reception PTP time, RTPtimestamp: RTP time stamp value)

The resolution calculation unit 32232 operates when the value of the marker bit M is 1, and analyzes the RTP payload in the packet-by-packet extraction data of the packet being processed, which is obtained from the RTP payload determination unit 3222, as an ST 2110-20 header. , The last line number included in the header is read, the height of the image is determined, the width of the image is acquired from the table held in advance using the height of the image as a key, the height and width of the image are obtained, and the RTP is calculated. The data processing unit 3221 outputs the totalized data to the totalized data recording unit 329 to be added to the totalized data.

More specifically, the value of the 49th bit from the beginning of the ST 2110-20 header (the value of “C” shown in FIG. 23A, which will be referred to as the Cont value here) is more specifically described. If the cont value is 1, the next cont value is further 48 bits behind, so the cont value is sequentially checked until it becomes 0. When the Cont value is 0, the value of the 17th bit before the Cont value is the number of lines to be read (“Line No” shown in FIG. 23A).

Then, from the header information according to ST 2110-20 shown in FIG. 23 (a), the interlace information of the packet flow to be aggregated (the F value at the 33rd bit of the ST 2110-20 header), the next F value, and its The height of the image can be obtained from the number of lines read, and when the height of the image is obtained, the width of the image is obtained from the separately determined table using the height of the image as a key, and the height and width of the image are obtained. be able to.

The frame rate calculation unit 32233 operates when the value of the marker bit M is 1 and the value of F at the 33rd bit of the ST2110-20 header is 0, and the frame rate calculation unit 32233 obtains from the RTP payload determination unit 3222 for the packet under processing. The frame rate is calculated from the RTP time stamp value in the extracted data for each packet, and is output to the total data recording unit 329 to be added to the total data once totaled by the RTP data processing unit 3221.

More specifically, the RTP time stamp value (initial value is 0) in the once aggregated total data is read, and the difference from the RTP time stamp value of the packet to be processed is calculated. If this difference is 3600, it is 25 fps, 3003 is 29.97 fps, 3000 is 30 fps, 1800 is 50 fps, 1501 or 1502 is 59.94 fps, and 1500 is 60 fps. The value is recorded in the total data recording unit 329 so as to be added to the once totaled total data. Also, the frame rate calculation unit 32233 updates the RTP time stamp value of the total data recorded in the total data recording unit 329 with the read RTP time stamp value.

The video scanning method identification unit 32234 operates when the value of the marker bit M is 1, and analyzes the RTP payload in the packet-by-packet extraction data of the packet being processed, which is obtained from the RTP payload determination unit 3222, as an ST2110-20 header. Then, it is determined from the header whether the video frame is interlaced or progressive, and the RTP data processing unit 3221 outputs to the total data recording unit 329 to add the total data to the total data.

(ST 2110-30 processing unit)
Next, as shown in FIG. 15B, the ST 2110-30 processing section 3224 includes a delay calculating section 32241, a sampling frequency calculating section 32242, a packet time identifying section 32243, and a payload length updating section 32244.

The sampling frequency calculation unit 32242 operates when the value of the marker bit M is 1, and outputs the RTP time stamp value (within the extracted data) in the packet-by-packet extracted data of the packet being processed, which is obtained from the RTP payload determination unit 3222. When the second value of the reception time of ST2110-30 changes based on the recorded and recorded 1 second RTP time stamp (initial value 0), the recorded 1 second RTP recorded The sampling frequency is calculated by calculating the difference TS _diff of the time stamp (initial value 0), and is output to the total data recording unit 329 to be added to the total data once totaled by the RTP data processing unit 3221. Further, the sampling frequency calculation unit 32242 updates the RTP time stamp value of the total data recorded in the total data recording unit 329 with the read RTP time stamp value.

if (44100 * (1-α) <TS _diff <44100 * (1 + α)) then 44.1 kHz
else if (48000 * (1-α) <TS _diff <48000 * (1 + α)) then 48kHz
else if (96000 * (1-α) <TS _diff <96000 * (1 + α)) then 96kHz
else indefinite

伪 is a parameter equivalent to network jitter, and normally setting α to 0.01 seconds can sufficiently cover network jitter. Therefore, in this example, the sampling frequency calculation unit 32242 sets α = 0.01 and updates the RTP time stamp of one second before in the totalized data recording unit with the RTP time stamp value of the packet in which the second value of the reception time has increased. ..

The packet time identification unit 32243 operates when the value of the marker bit M is 1, and determines the RTP time stamp value (within the extracted data) in the packet-by-packet extracted data of the packet being processed, which is obtained from the RTP payload determination unit 3222. By checking and performing the following calculation, the RTP time stamp value (RTPtimestamp _now ) for this time, the RTP time stamp value (RTPtimestamp _pre ) of the previous relevant total data recorded in the total data recording unit 329, and the total data recording unit 329 are recorded. The packet time (Packet time) is calculated based on the recorded sampling frequency (F _sample ), added to the aggregate data once aggregated by the RTP data processing unit 3221 and output to the aggregate data recording unit 329.

Packet time (ms) = 1000 * (RTPtimestamp _now -RTPtimestamp _pre ) / F _sample

Note that the packet time identification unit 32243 does not calculate the packet time when the sampling frequency is indefinite.

The delay calculation unit 32241 is substantially the same as the operation of the delay calculation unit 32231 described above, operates when the value of the marker bit M is 1, and obtains the packet of the packet being processed, which is obtained from the RTP payload determination unit 3222. From the RTP time stamp value (in extracted data) in each extracted data and the packet reception time (reception PTP time in the extracted data individual header), the transmission delay time (delay indicating the average / minimum / maximum value) is calculated by the following calculation. Time) is calculated and output to the total data recording unit 329 to be added to the total data once totaled by the RTP data processing unit 3221.

T _{rcv_fsample} = T _{rcv_ptp} * F _sample % 0x100000000
if (T _{rcv_fsamle} > RTPtimestamp)
then D = (T _{rcv_fsample} -RTPtimestamp) / F _sample
else D = (RTPtimestamp-T _{rcv_fsample} ) / F _sample
(D: delay (second), _{Trcv_ptp} : reception PTP time, RTPtimestamp: RTP time stamp value, F _sample : sampling frequency)

Note that the delay calculation unit 32241 does not calculate the transmission delay time (delay time indicating the average / minimum / maximum value) when the sampling frequency is indefinite.

The payload length updating unit 32244 operates when the value of the marker bit M is 1, and the “passing packet length” (extracted data individual header) in the packet-by-packet extracted data of the packet being processed, which is obtained from the RTP payload determination unit 3222. And the “difference between the passing packet length and the RTP payload length” (within the extracted data) included in the extracted data in the case of RTP, and the aggregated data once aggregated by the RTP data processing unit 3221 as the payload length. It is output to the total data recording unit 329 so as to update the payload length in.

(ST2022-6 processing unit)
The ST2022-6 processing unit operates when the value of the marker bit M is 1, and outputs the RTP payload in the packet-by-packet extraction data of the packet being processed obtained from the RTP payload determination unit 3222 to the ST2022-6 header (see FIG. 23). (See (b)), extract the values of MAP, FRAME, FRATE, SAMPLE, and R included in the header, and record the aggregate data so as to update the payload length in the aggregate data once aggregated by the RTP data processing unit 3221. Output to the unit 329.

Therefore, the aggregated data recording unit 329 according to this embodiment uses ST2110-20, ST2110-30, and ST2022-6 as the aggregated data for RTP (see FIG. 17) by the RTP aggregation unit 322 shown in FIG. 14B. According to the SMPTE protocol, the total data is individually added to the total data of the first embodiment and recorded.

That is, as shown in FIG. 17, the data on the right side of the figure is added up to the aggregated data of the first embodiment on the left side of the figure.

More specifically, for (ST 2110-20), each value of data output by RTP, resolution, frame rate, identification of interlace / progressive, and transmission delay (average / minimum / maximum) is added to the aggregated data. To be done.

For (ST 2110-30), each value of data output by RTP, sampling frequency, packet time (Packet time), payload length, and transmission delay (average / minimum / maximum) is added to the aggregated data.

For (ST 2022-6), data output by RTP, MAP value in ST 2022-6, FRAME value in ST 2022-6, FRATE value in ST 2022-6, SAMPLE value in ST 2022-6, and ST 2022 An R value of -6 is added to the aggregated data.

According to the packet flow monitoring device 1 of the second embodiment configured as described above, in addition to the actions and effects of the first embodiment, the delay of the video or audio signal used in the program production system, the video resolution, etc. It becomes possible to monitor more detailed information in real time.

[Third Embodiment]
(overall structure)
The schematic configuration of the packet flow monitoring device 1 of the third embodiment is similar to that shown in FIGS. 1 to 5 and 12, but an example is shown in which data compression is possible before forming the extracted data report packet. As illustrated in FIG. 18A, the extracted data transmission unit 24 of the packet data extraction device 2 illustrated in FIG. 3 has the extracted data compression units 241 and the extracted data storage units 242 in the number corresponding to the number of ports to be extracted. And an extracted data report packet transmitting unit 243, and as shown in FIG. 18B, the extracted data report packet receiving unit 31 of the extracted data totaling device 3 shown in FIG. The difference is that the extraction data restoration unit 311 and the extraction data storage unit 312 are provided.

The packet flow monitoring device 1 of the third embodiment can be configured as a modification of the first embodiment and further as a modification of the second embodiment. An example configured as a modification will be described.

That is, in order to improve the understanding of the configuration according to the third embodiment, the “extracted data for each packet for RTP” will be described as a representative, but the “extracted data for each packet for RTP” according to the third embodiment is 19, a data compression presence / absence flag C indicating the presence or absence of data compression and a data compression position flag DM, SM, SI, DI, SP, DP, TS, SS indicating the data compressed data position are assigned to predetermined positions. This is different from the “RTP packet-by-packet extraction data” according to the second embodiment shown in FIG.

The data compression presence / absence flag C indicates 1 when data compression is performed in the extracted data, and 0 when it is not performed.

The data compression position flag DM indicates 1 when data is omitted for the destination MAC address, and 0 when data is not omitted.

The data compression position flag SM indicates 1 when the data regarding the source MAC address is omitted, and 0 when the data is not omitted.

The data compression position flag SI indicates 1 when data is omitted for the source IP address, and 0 when data is not omitted.

The data compression position flag DI indicates 1 when data is omitted for the destination IP address, and 0 when data is not omitted.

The data compression position flag SP indicates 1 if the data regarding the source L4 port number is omitted, and indicates 0 if the data is not omitted.

The data compression position flag DP indicates 1 when the data regarding the destination L4 port number is omitted, and 0 when the data is not omitted.

The data compression position flag TS indicates 1 when data is omitted with respect to the RTP time stamp value and 0 when data is not omitted.

The data compression position flag SS indicates 1 when the data regarding the SSRC is omitted, and 0 when the data is not omitted.

(Extracted data transmitter)
18A and 18B respectively show the extracted data transmitting unit 24 of the packet data extracting device 2 and the extracted data report packet reception of the extracted data summarizing device 3 in the packet flow monitoring device 1 of the third embodiment according to the present invention. 3 is a block diagram showing a schematic configuration of a unit 31. FIG. The same components as those in the above-described embodiments are designated by the same reference numerals.

First, as shown in FIG. 18A, the extracted data transmission unit 24 of the packet data extraction device 2 according to the present embodiment includes the extracted data compression units 241 and the extracted data storage units 242 according to the number of ports to be extracted. And an extraction data report packet transmission unit 243. Each of the extracted data compression units 241 corresponding to the number of ports to be extracted is arranged for each input port of the packet data extraction device 2 and performs data compression before forming an extracted data report packet for each input port. In other words, when the extracted data is created by the packet data extraction device 2, the extracted data to be stored in the same extracted data report packet received by the same port (the same packet flow) is compressed. ..

The extracted data compressing unit 241 sequentially stores the data received from the data extracting unit 22 in a built-in queue (not shown), and when there is no data that can be output to the extracted data report packet transmitting unit 243 in the queue, The extracted data report packet transmission unit 243 is notified that the data does not exist.

Then, when the data that can be output to the extracted data report packet transmission unit 243 exists in the queue, the extracted data compression unit 241 reads the head data of the queue and generates the extracted data for each packet by the following procedure, The extracted data report packet is output to the transmission unit 243.

Here, when the extracted data report packet transmitting unit 243 is ready to output the extracted data report packet to the extracted data summarization device 3, the extracted data compressing unit 241 sends “compression possibility information” and “maximum data length”. , And “reception time (timestamp value of received PTP based on reception of top data shown in FIG. 2)” are output to the extraction data compression unit 241 as information of the compression request, and “extraction data for each packet” to be transmitted. Is output to the extracted data compression unit 241.

First, the extraction data compression unit 241 sets the 33rd bit (C) of the extraction data individual header to 0 when the compression propriety information is “uncompressible”, and extracts the per-packet extraction data according to the data type from the head data of the queue. Is generated and temporarily stored in the extracted data storage unit 242 and is output to the extracted data report packet transmission unit 243.

On the other hand, when the compression availability information is “compressible”, the extracted data compression unit 241 determines that “destination MAC address”, “source MAC address”, “destination IP address”, “source MAC address” of the head data of the queue. , “Destination L4 port number”, “source L4 port number”, “RTP time stamp”, and “RTP SSRC”, and these eight items temporarily stored in the extracted data storage unit 242 are compared to obtain one However, if there is the same item, the 33rd bit (data compression flag C) of the extracted data individual header is set to 1, and the data compression position flag (1 byte) is inserted immediately after the extracted data individual header (see FIG. 19).

After inserting the data compression position flag (1 byte), the extracted data compression unit 241 corresponds to the data compression position flag for the items whose head data of the queue and the data temporarily stored in the extracted data storage unit 242 have the same value. Set the bit to 1, do not include the data of the same item in the extracted data, set the corresponding bit of the data compression position flag to 0 for items with different values, include the data of items with different values in the extracted data, and The corresponding extracted data for each packet is created.

At this time, the extracted data compressing unit 241 performs the same process as the case where the compression is impossible if there is no same item. When the head data of the queue is data output from the IP extraction unit 225, for example, this data does not include the RTP time stamp value. In this way, the extracted data compression unit 241 sets the corresponding bit of the data compression position flag to 0 for items that are not included depending on the data type.

If the data length of the extracted data for each packet is equal to or less than the “maximum data length” indicated by the compression request received from the extracted data report packet transmission unit 243, the extracted data compression unit 241 transmits the extracted data for each packet to the extracted data report packet. The data is output to the unit 243, the items included in the head data of the queue among the above eight items are temporarily stored in the extracted data storage unit 242, and the head data of the queue is discarded.

On the other hand, when the data length of the extracted data for each packet is larger than the “maximum data length” indicated by the compression request received from the extracted data report packet transmission unit 243, the extracted data compression unit 241 issues a notification that output is impossible to the extracted data report packet. Output to the transmission unit 243.

As described above, when the extracted data report packet transmitting unit 243 becomes a state in which the extracted data report packet can be output to the extracted data summarization device 3 as the “extracted data report packet”, the extracted data compressing unit 241 receives “compression possibility information” and “maximum”. “Data length” and “reception time (timestamp value of reception PTP based on reception of top data shown in FIG. 2)” are output to the extraction data compression unit 241 as compression request information, and “extraction for each packet to be transmitted” is performed. The extracted data compression unit 241 is requested to output "data".

This compression permission / inhibition information is “if the first data request is made to the extraction data compression unit 241 which is the destination of the request after the extraction data report packet transmission unit 243 transmits the extraction data report packet to the extraction data aggregation device 3. “Compressible”, and “Compressible” after the second time.

Further, the maximum data length is the sum of the predetermined maximum payload length of the extracted data report packet and the data length of the extracted data for each packet that the extracted data report packet transmission unit 243 has already acquired from each extracted data compression unit 241. It is the difference with.

In addition, the “reception time” of the extraction data for each packet at the head of the extraction data report packet is the extraction data report packet transmission unit 243 when the extraction data for each packet that can be transmitted to the extraction data totaling device 3 has not yet been acquired. If there is a value indicating the effect (for example, "-1") and the extracted data for each packet can be transmitted, the reception time of the first data is set.

The extraction data report packet transmitting unit 243 outputs the extraction data report packet to the extraction data totaling device 3 when a notification indicating that extraction is impossible is received from the extraction data compression unit 243 or when a predetermined time has elapsed after the top data was acquired.

(Extracted data report packet receiver)
As illustrated in FIG. 18B, the extracted data report packet receiving unit 31 of the extracted data totaling device 3 illustrated in FIG. 12 includes an extracted data restoring unit 311 and an extracted data storage unit 312.

When the extracted data decompression unit 311 receives the extracted data report packet from the packet data extraction device 2 according to the present embodiment, the extracted data common header and the extracted data for each packet are read from the extracted data report packet, and the data is compressed. The extracted data restoration process is executed and output to the extracted data totaling unit 32.

More specifically, the extraction data storage unit 312 first receives the device ID and the reception when the 33rd bit of the extraction data individual header (data compression flag C) of the extraction data for each packet in the received extraction data report packet is 0. Using the port ID as a key, "source MAC address", "destination MAC address", "source IP address", "destination IP address", "source L4 port number", "destination L4 port number", "RTP time" Of the “stamp value” and the “RTP SSRC”, the items included in the extracted data for each packet are stored in the extracted data storage unit 312.

Subsequently, when the 33rd bit of the extracted data individual header (data compression presence / absence flag C) of the extracted data for each packet is 1, the extracted data storage unit 312 uses the device ID and the receiving port ID as a key to set the “source MAC address”. Data of "destination MAC address", "source IP address", "destination IP address", "source L4 port number", "destination L4 port number", "RTP time stamp value", and "RTP SSRC" The item for which the compression presence / absence flag C is 1 is read out, and the extracted data for each packet is complemented. After this complementation, the extraction data storage unit 312 stores the items included in the extraction data for each packet among the above eight items in the extraction data storage unit 312, and the extraction data for each packet after this processing and the extraction data common header Is output to the extracted data totaling unit 32.

According to the packet flow monitoring device 1 of the third embodiment configured as described above, in addition to the actions and effects of the first embodiment, and further the actions and effects of the second embodiment, for example, MPTE ST2110 It becomes possible to efficiently transfer a packet flow composed of a large number of IP packets having the same IP address, port number, etc. to the extracted data totaling unit 32 as in -20.

Regarding the examples of the above-described respective embodiments, the computer can be configured to function as the packet data extraction device 2 or the extracted data aggregation device 3. Specifically, each function of the packet data extracting device 2 or the extracted data totaling device 3 reads a program stored in a storage unit inside or outside the computer by a central processing unit (CPU) in the computer. It can be realized by executing. Further, the program for realizing the function of the packet data extracting device 2 or the extracted data totaling device 3 can be configured as a part of software on the OS used in the computer. Further, the program for realizing the function of the packet data extracting device 2 or the extracted data totaling device 3 can be recorded in a computer-readable recording medium and made portable. Further, each function of the packet data extracting device 2 or the extracted data totaling device 3 can be configured as a part of hardware or software and can be realized by combining them.

Although the present invention has been described above with reference to the example of the specific embodiment, the present invention is not limited to the example of the above-described embodiment, and various modifications can be made without departing from the technical idea thereof. For example, in the above-described example of the third embodiment, the data compression related to the RTP extracted data has been mainly described, but the same applies to the case where the data compression related to the extracted data of another packet type (data type) is performed. A configuration that utilizes the data compression presence / absence flag and the data compression position flag can be used.

Further, in the example of the above-described embodiment, an example in which the packet flow monitoring apparatus according to the present invention is applied to monitor the packet flow in the program production system that transmits video or the like has been described, but any video or audio communication is performed. Applicable to system. That is, the packet flow monitoring device according to the present invention can be configured as a device that monitors a packet flow in a video or audio communication system constructed by an Ethernet (registered trademark) or IP packet network. Therefore, the invention is not limited to the examples of embodiment described above, but only by the claims.

According to the present invention, it is possible to monitor and measure the quality related to the packet flow of all packets in a program production system constructed by a network of E frames or IP packets efficiently and with high accuracy. It is useful for monitoring packet flow in the system.

1 Packet Flow Monitor 2 Packet Data Extractor 3 Extracted Data Aggregator 4 PTP Master Device 21 Packet Duplicator 22 Data Extractor 23 Switch Processor 24 Extracted Data Transmitter 25 PTP Processor 31 Extracted Data Report Packet Receiver 32 Extracted Data Aggregation unit 33 Aggregation data output unit 51 Video transmission device 52 Audio transmission device 60 Network switch 80 Reception device 90 Synchronous signal generator 100 Communication packet flow monitoring device 200 Analysis device 221 Packet type determination unit 222 RTP extraction unit 223 PTP extraction unit 224 IGMP extractor 225 IP extractor 226 UDP extractor 227 TCP extractor 228 E frame extractor 241 Extracted data compressor 242 Extracted data memory 243 Extracted data report packet transmitter 311 Extracted data Data recovery unit 312 Extracted data storage unit 321 Extracted data type determination unit 322 RTP aggregation unit 323 PTP aggregation unit 324 IGMP aggregation unit 325 IP aggregation unit 326 UDP aggregation unit 327 TCP aggregation unit 328 E frame aggregation unit 329 Aggregated data recording unit 510 Video transmission device 520 Audio transmission device 600 SDI router 700 Voice router 800 Reception device 900 Synchronization signal generator 2221 Marker bit inspection unit 2222 RTP data extraction unit 3221 RTP data processing unit 3222 RTP payload determination unit 3223 ST 2110-20 processing unit 3224 ST 2110-30 processing unit 3225 ST 2022-6 processing unit 32231 delay calculation unit 32232 resolution calculation unit 32233 frame rate calculation unit 32234 video scanning system identification unit 32241 Delay calculation unit 32242 Sampling frequency calculation unit 32243 Packet time identification unit 32244 Payload length update unit

Claims

A packet flow monitoring device for monitoring a packet flow in a video or audio communication system constructed by an Ethernet (registered trademark) or IP (Internet Protocol) packet network,
An extracted data report packet is created by duplicating all passing packets passing through one or a plurality of specific network switches on the network, extracting predetermined partial information in each duplicated passing packet, and aggregating the extracted partial information. A packet data extraction device configured and output,
An extracted data totaling device that receives the extracted data report packet, analyzes the partial information in each duplicated transit packet included in the extracted data report packet so as to be aggregated for each packet flow, and records it as aggregated data. ,
A packet flow monitoring device comprising:
The packet flow monitoring device according to claim 1, wherein the packet data extracting device and the extracted data totaling device are connected by a communication cable using a single port.
The extracted data report packet is composed of a variable-length IP format packet within a range not exceeding a predetermined packet length, and an IP header for performing transfer between the packet data extraction device and the extracted data totaling device, and Following the UDP header, the extraction data common header consisting of items common to each duplicated transit packet to be aggregated and the packet-by-packet extraction data consisting of items to be individually extracted for each duplicate transit packet are allocated. The extracted data for each packet is configured to store an extracted data individual header indicating information for identifying the extracted duplicated transit packet, and predetermined partial information of the extracted duplicated transit packet. It is constituted so that it may be paired with the extracted data to be stored. Packet flow monitoring device according.
The extracted data common header includes a value indicating the reception time of the head data of the copied transit packet in each packet flow,
The extracted data individual header is a time of a passage packet length indicating the length of the duplicated passage packet, a data type indicating the packet type of the duplicated passage packet, and the head data described in the extracted data common header. Including the information of the elapsed time showing the difference
The packet flow monitoring device according to claim 3, wherein the packet type includes a value that at least identifies Ethernet (registered trademark), IP, and RTP (Real-time Transport Protocol).
The packet type further includes a value for identifying an IGMP (Internet Group Management Protocol), a TCP (Transmission Control Protocol), a UDP (User Datagram Protocol), and a PTP (Precision Time Protocol). The packet flow monitoring device described in 1.
Partial information extracted by the packet data extraction device is
The extracted data for Ethernet (registered trademark) consists of a destination MAC address, a source MAC address, and an E frame header type number.
The extracted data for the IP network includes a destination MAC address, a source MAC address, a source IP address, a destination IP address, and a protocol number of an IP header,
As the extracted data for IGMP, the destination MAC address, the source MAC address, the source IP address, the destination IP address, the difference between the passing packet length and the IGMP payload length, and a predetermined number of IGMP payloads from the beginning,
The extracted data for TCP or UDP includes a destination MAC address, a source MAC address, a source IP address, a destination IP address, a source L4 port number, and a destination L4 port number,
As the extracted data for PTP, destination MAC address, source MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, difference between passing packet length and PTP header and payload length, PTP Consists of all headers and PTP payload,
As the extracted data for RTP, destination MAC address, source MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, difference between passing packet length and RTP payload length, RTP header The marker bit, the payload type of the RTP header, the RTP sequence number, the RTP time stamp value, and the SSRC that is an identifier indicating the transmission source,
The packet flow monitoring device according to claim 5, wherein:
The extracted data totaling device analyzes the extracted data common header and the extracted data for each packet in each duplicated passing packet in the sequentially received extracted data report packets, and generates the aggregated data for each packet flow according to the packet type. Then
The aggregated data for Ethernet (registered trademark) consists of a source MAC address, a destination MAC address, an E frame type number, an average throughput, and a total number of received packets for each packet flow.
The aggregate data for IP includes a source MAC address, a destination MAC address, a source IP address, a destination IP address, an IP header protocol number, an average throughput, and a total number of received packets for each packet flow.
As aggregated data for IGMP, a source MAC address, a destination MAC address, a source IP address, a destination IP address, an average throughput, a total number of received packets, a reception time, and a predetermined number of bytes from an IGMP payload for each packet flow. Becomes
As the aggregated data for TCP or UDP, the source MAC address, the destination MAC address, the source IP address, the destination IP address, the source L4 port number, the destination L4 port number, the average throughput, and the total number of received packets for each packet flow Consists of
As aggregated data for PTP, source MAC address, destination MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, average throughput, total number of received packets, transmission delay for each packet flow , Reception time, and PTP header and payload,
As aggregated data for RTP, source MAC address, destination MAC address, source IP address, destination IP address, source L4 port number, destination L4 port number, average throughput, total number of received packets, RTP payload for each packet flow The type number, the RTP SSRC, the number of packets whose RTP marker bit value indicates 1, the packet reception interval, the number of packet losses, and the maximum number of burst losses,
The packet flow monitoring device according to claim 6, characterized in that
The packet data extraction device determines whether or not the marker bit in the RTP header is 1 when extracting the partial information from the duplicated transit packet related to RTP, and the marker bit is 1 Sometimes, it has an RTP data extraction unit that extracts the RTP payload including 40 bytes from the beginning,
When the extracted data totaling device totals the partial information in each duplicated transit packet regarding the RTP included in the extracted data report packet for each packet flow, each duplicated transit packet regarding the RTP is An RTP payload determination unit that determines from the RTP payload of 40 bytes from the head based on predetermined determination information whether or not it complies with the SMPTE protocol of ST 2110-20, ST 2110-30, or ST 2022-6. And the SMPTE protocol of ST 2110-20, ST 2110-30, or ST 2022-6, and when the marker bit is 1, from the RTP payload of 40 bytes from the beginning to ST 2110-20, Characterized by ST 2110-30 or ST 2022-6 It acquires predetermined information to be the a processing unit that applies to the aggregate data, and having a packet flow monitoring device according to any one of claims 4 7.
When the packet data extraction device extracts the partial information from the duplicated transit packet and creates the extracted data, the packet data extraction device stores it in the same extracted data report packet received in the same packet flow. An extraction data compression unit that performs data compression on data, data after the data compression, a data compression presence / absence flag indicating presence / absence of data compression, and a data compression position flag indicating a data compressed data position are inserted to report the extraction data. It has an extracted data report packet transmitter that generates and outputs a packet,
9. The extracted data totaling device includes an extracted data decompression unit for decompressing the data after the data compression, with reference to the data compression presence / absence flag and the data compression position flag. The packet flow monitoring device according to any one of claims.
A packet data extraction device used for monitoring a packet flow in a video or audio communication system constructed by an Ethernet (registered trademark) or IP packet network,
An extracted data report packet is created by duplicating all passing packets passing through one or a plurality of specific network switches on the network, extracting predetermined partial information in each duplicated passing packet, and aggregating the extracted partial information. A packet data extraction device, which is configured and output to the outside.
The packet data extraction device according to claim 10, wherein the extracted data report packet is received, and the partial information in each duplicated transit packet included in the extracted data report packet is analyzed for each packet flow. The extracted data totaling device is characterized in that it is recorded as aggregated data.
A program for causing a computer to function as a packet data extraction device in the packet flow monitoring device according to any one of claims 1 to 9.
A program for causing a computer to function as the extracted data totaling device in the packet flow monitoring device according to any one of claims 1 to 9.