EXTRACTING DEVICE, EXTRACTING METHOD AND EXTRACTING PROGRAM
In an extraction device ( 10 ), a storage unit ( 14 ) stores positional information ( 14 a ) indicating a position of predetermined information included in an element forming a protocol stack of a packet in the element. A specifying unit ( 15 b ) specifies a protocol stack of a packet to be analyzed. An extraction unit ( 15 c ) extracts, from the packet, information at a position of the positional information ( 14 a ) for each element forming the specified protocol stack.
1 . An extraction device comprising:
a storage unit configured to store positional information indicating a position of predetermined information included in an element forming a protocol stack of a packet in the element;
a specifying unit configured to specify a protocol stack of a packet to be analyzed; and
an extraction unit configured to extract, from the packet, information at a position of the positional information for each element forming the specified protocol stack.
2 . The extraction device according to claim 1 , wherein the specifying unit specifies the protocol stack by permutation of the elements.
3 . The extraction device according to claim 1 , wherein the positional information indicates a start position and a size of the predetermined information in the element.
4 . The extraction device according to claim 1 , further comprising a presentation unit configured to present information at a position of the extracted positional information as information regarding a predetermined item for each of the protocol stacks.
5 . An extraction method executed by an extraction device including a storage unit that stores positional information indicating a position of predetermined information included in an element forming a protocol stack of a packet in the element, the method comprising:
specifying a protocol stack of a packet to be analyzed; and
extracting, from the packet, information at a position of the positional information for each element forming the specified protocol stack.
6 . A computer-readable non-transitory recording medium storing computer-executable program instructions that when executed by a processor cause a computer to execute an extraction program, with reference to a storage unit that stores positional information indicating a position of predetermined information included in an element forming a protocol stack of a packet in the element, the extraction program comprising:
specifying a protocol stack of a packet to be analyzed; and
extracting, from the packet, information at a position of the positional information for each element forming the specified protocol stack.
7 . The extraction device according to claim 1 , wherein the extraction unit further extracts a predetermined statistical key information from a header of an element of a protocol stack.
8 . The extraction method according to claim 5 , wherein the protocol stack is specified by permutation of the elements.
9 . The extraction method according to claim 5 , wherein the positional information indicates a start position and a size of the predetermined information in the element.
10 . The extraction method according to claim 5 , further comprising presenting information at a position of the extracted positional information as information regarding a predetermined item for each of the protocol stacks.
11 . The extraction method according to claim 5 , wherein a predetermined statistical key information is extracted from a header of an element of a protocol stack.
12 . The computer-readable non-transitory recording medium according to claim 6 , wherein the protocol stack is specified by permutation of the elements.
13 . The computer-readable non-transitory recording medium according to claim 6 , wherein the positional information indicates a start position and a size of the predetermined information in the element.
14 . The computer-readable non-transitory recording medium according to claim 6 , further comprising presenting information at a position of the extracted positional information as information regarding a predetermined item for each of the protocol stacks.
15 . The computer-readable non-transitory recording medium according to claim 6 , wherein a predetermined statistical key information is extracted from a header of an element of a protocol stack.