Patent ID: 7787394
Filing Date: 2010-08-31
Classification: H04L

Abstract:
1. A network status display device using a traffic pattern map, the device comprising: a traffic feature extractor calculating flow occupancy rates for total flows, micro-flows and macro-flows with respect to each of a plurality of traffic features with reference to traffic information for each traffic feature such as a network address, a port, a transmitting/receiving host address or a protocol collected by an external traffic information collector, and storing the calculation result wherein micro-flows are those flows that exist for periods less than a predetermined time and macro-flows are those flows that exist for periods longer than the predetermined time; a traffic status display unit displaying the flow occupancy rates with respect to each traffic feature calculated and stored in the traffic feature extractor on a radar map with dots with respect to each traffic feature wherein the radar map has radial coordinate axes which indicate network addresses and circular coordinate axes which indicate threshold values for determining whether the network status is abnormal; and a traffic anomaly determination unit determining whether a network status is abnormal with reference to the radar map with respect to each traffic feature, detecting and reporting harmful traffic or abnormal traffic which generates the abnormal network status.