Patent ID: 7983164

Claim:
An apparatus for merging internet traffic mirrored from multiple links and providing the merged internet traffic to an analysis server of a traffic analysis system, the apparatus comprising: a traffic collector for collecting traffic at several spots of multiple internet links; a traffic classifier for classifying the traffic according to an identical traffic characteristic by analyzing the collected traffic; a traffic merger for generating merged traffic by merging traffic of each classification type; and a flow generator for generating a single merged flow from the generated merged traffic and providing the single merged flow to the analysis server, wherein the traffic merger comprises: a one-way traffic merging unit for generating forward merged traffic by merging forward traffic classified in the traffic classifier, and generating reverse merged traffic by merging reverse traffic classified in the traffic classifier; and a two-way traffic merging unit for generating two-way merged traffic by merging the forward merged traffic with the reverse merged traffic, which are generated in the one-way traffic merging unit.