Periodic flow detection device, delay estimation device, periodic flow detection method and program
A periodic flow detection device include a packet classification unit configured to classify packets into a plurality of flows on the basis of information included in acquired packets; a flow evaluation unit configured to evaluate a possibility that each of the plurality of flows is periodically transmitted on the basis of time at which the packets are acquired; and a flow detection unit configured to detect, from the plurality of flows, a periodic flow that is a flow to which packets periodically acquired belongs on the basis of a result of the evaluation.
1. A periodic flow detection device comprising:
a packet classification unit, including one or more processors, configured to classify packets into a plurality of flows on a basis of information included in acquired packets;
a flow evaluation unit, including one or more processors, configured to evaluate a possibility that each of the plurality of flows is periodically transmitted on a basis of time at which the packets are acquired and the flow evaluation unit is configured to evaluate each of the plurality of flows on a basis of whether or not a packet belonging to the flow is a periodic flow acquired at a predetermined frequency or more, and in a case where the flow is not the periodic flow, an evaluation value is calculated as zero; and
a flow determination unit, including one or more processors, configured to determine, from the plurality of flows, a periodic flow that is a flow to which packets periodically acquired belong on a basis of a result of the evaluation.
2. The periodic flow detection device according to claim 1 , wherein the flow evaluation unit is configured to evaluate each of the plurality of flows on a basis of whether or not the packet belonging to the flow is a continuous acquisition flow acquired from a predetermined period ago, and
in a case where the flow is not the continuous acquisition flow, an evaluation value is calculated as zero.
3. The periodic flow detection device according to claim 1 , wherein in a case where an evaluation value is not set at zero, the flow evaluation unit is configured to calculate the evaluation value using a predetermined equation.
4. A periodic flow detection method comprising:
classifying packets into a plurality of flows on a basis of information included in acquired packets;
evaluating a possibility that each of the plurality of flows is periodically transmitted on a basis of time at which the packets are acquired;
evaluating each of the plurality of flows on a basis of whether or not a packet belonging to the flow is a periodic flow acquired at a predetermined frequency or more, and in a case where the flow is not the periodic flow, an evaluation value is calculated as zero; and
detecting, from the plurality of flows, a periodic flow that is a flow to which packets periodically acquired belong on a basis of a result of the evaluation.
5. The periodic flow detection method of claim 4 , further comprising evaluating each of the plurality of flows on a basis of whether or not the packet belonging to the flow is a continuous acquisition flow acquired from a predetermined period ago, and in a case where the flow is not the continuous acquisition flow, an evaluation value is calculated as zero.
6. The periodic flow detection method of claim 4 , wherein in a case where an evaluation value is not set at zero, calculating the evaluation value using a predetermined equation.
7. A non-transitory computer-readable medium storing software comprising instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:
classifying packets into a plurality of flows on a basis of information included in acquired packets;
evaluating a possibility that each of the plurality of flows is periodically transmitted on a basis of time at which the packets are acquired;
evaluating each of the plurality of flows on a basis of whether or not a packet belonging to the flow is a periodic flow acquired at a predetermined frequency or more, and in a case where the flow is not the periodic flow, an evaluation value is calculated as zero; and
detecting, from the plurality of flows, a periodic flow that is a flow to which packets periodically acquired belong on a basis of a result of the evaluation.
8. The non-transitory computer-readable medium of claim 7 , further comprising evaluating each of the plurality of flows on a basis of whether or not the packet belonging to the flow is a continuous acquisition flow acquired from a predetermined period ago, and in a case where the flow is not the continuous acquisition flow, an evaluation value is calculated as zero.
9. The non-transitory computer-readable medium of claim 7 , wherein in a case where an evaluation value is not set at zero, calculating the evaluation value using a predetermined equation.