Patent ID: 11863412
Assignee: CHUNG YUAN CHRISTIAN UNIVERSITY
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 8:
9. A network traffic monitoring device, comprising:
a network traffic capturing interface configured to obtain network flow data, wherein the network flow data comprises a plurality of network packets;
a storage circuit configured to store a plurality of candidate mapping models; and
a processor coupled to the network traffic capturing interface and the storage circuit,
wherein the processor is configured to:
generate an index parameter according to packet information of a first network packet among the plurality of network packets;
determine a target mapping model from the plurality of candidate mapping models according to the index parameter, wherein the index parameter is between a first sampling point and a second sampling point of the target mapping model;
wherein one of the plurality of candidate mapping models is reflected in a mapping relation between a plurality of sampling points and a plurality of mapping values in one of a plurality of sample periods;
wherein the plurality of candidate mapping models at least comprise:
a first mapping model, the first mapping model being reflected in a first mapping relation between a plurality of first candidate sampling points and a plurality of first candidate mapping values in a first sample period among the plurality of sample periods; and
a second mapping model, the second mapping model being reflected in a second mapping relation between a plurality of second candidate sampling points and a plurality of second candidate mapping values in a second sample period among the plurality of sample periods,
wherein the first sample period is different from the second sample period;
obtain an interpolation mapping value according to the index parameter, the first sampling point, the second sampling point, and the target mapping model; and
obtain an evaluation value according to the interpolation mapping value, wherein the evaluation value reflects a distribution status of a monitoring item in the plurality of network packets.