Patent ID: 9092620
Filing Date: 2015-07-28
Classification: G06F,H04L

Abstract:
1. A monitoring apparatus comprising: a memory which stores a program for executing process; and a processor coupled to the memory and executes the process based on the program, wherein the process comprise: detecting a destination of access from a server apparatus to a storage apparatus on the basis of a result of analysis of a packet transmitted and received between the storage apparatus and the server apparatus, the storage apparatus including a plurality of storage areas, the server apparatus executing a plurality of virtual servers, part of the plurality of storage areas being allocated to each of the plurality of virtual servers as an accessible storage area, each packet transmitted to the storage apparatus being created based on accessing to the storage apparatus by each virtual server and including an address indicating the server apparatus as an initiator with regard to the packet; and determining that abnormal access is performed from the server apparatus to the storage apparatus when the storage areas of the detected destination are beyond a certain criterion in the plurality of storage areas.