Patent ID: 9742699
Date: 2017-08-22
CPC Classifications: H04L

Claim:
1. A network apparatus, comprising: one or more physical interfaces connected to a monitoring target host and configured to receive network packets from the monitoring target host; and in response to receipt of the network packets, a configurable monitoring module comprising a packet information filtering unit and an information transmission unit which being configured and executed by a processor using algorithm, which when executed, causes the processor to determine whether to monitor the monitoring target host by determining whether a current host is a monitoring target host, in response to detection of the current host being the monitoring target host, to extract selective information to be monitored from the network packets collected through the one or more physical interfaces and to transmit the extracted selective information according to monitoring setting information which configured to specify selective information to be extracted from the network packets and how to transmit by algorithm, the algorithm being performed by the processor according to the following condition, the algorithm enables a determination to be made in relation to whether to monitor entire information of the network packets or whether to monitor partial information of the network packets, in response to detection of a single packet copy, to transmit entire information by maintaining a format of the network packets without change, in response to detection of a single packet copy and remote transmission method, to transmit partial information copied using the single packet copy to monitoring information reception equipment using a protocol, in response to detection of a single packet information remote transmission method, to transmit only monitoring information of the network packets to monitoring information reception equipment using a specific protocol by generating a header based on the specific protocol, and adding the monitoring information to the network packets, and in response to detection of a multi-packet information remote transmission method to transmit information by gathering monitoring information of multiple packets into a single packet and transmitting the single packet.