Traffic detection system and communication-quality monitoring system on a network

• US 20070060166A1
• Filed: 07/20/2006
• Published: 03/15/2007
• Est. Priority Date: 07/21/2005
• Status: Abandoned Application

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Kitamura, Tsutomu, Okabe, Toshiya
• Application Number:
  US11/489,603
• Publication Number:
  US 20070060166A1
• Time in Patent Office: Days
• US Class Current: 455/450
• CPC Class Codes: H04L 43/026 using flow identification
• CPC Class Codes: H04L 43/045 for graphical visualisation of monitoring data
• CPC Class Codes: H04L 43/062 related to network traffic
• CPC Class Codes: H04L 43/16 Threshold monitoring

Abstract

A communication-quality monitoring system includes a receiving unit for receiving packets to detect packets of a traffic, a frequency-distribution calculator for calculating frequency distribution of the arrival times of the received packets, and a degradation detection unit for detecting degradation of communication quality in the network by comparing statistic parameters of the peak in the frequency distribution against thresholds of the parameters. The parameters include a dispersion, standard deviation, half-power breadth and peak power of the peak in the distribution diagram.

Claims

1. A traffic detection system comprising:

a receiving unit for receiving packets configuring a traffic on a network;

frequency-distribution calculation unit for calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets; and

a traffic detection unit for comparing data of said frequency distribution calculated by said frequency-distribution calculation unit against data of an expected frequency distribution of arrival times of a subject traffic to be detected, to detect said subject traffic based on said comparison.

2. The traffic detection system according to claim 1, wherein said traffic on said network includes encrypted packets.

3. The traffic detection system according to claim 1, further comprising a separator for separating said received packets into a plurality of groups of packets based on at least one of a frame length, a transmission terminal and a destination terminal of said received packets, wherein said frequency-distribution calculation unit calculates said frequency distribution for each of said groups.

4. The traffic detection system according to claim 3, wherein said traffic detection unit compares said received packets having a frame length substantially equal to an expected fame length of packets of said subject traffic.

5. The traffic detection system according to claim 3, wherein said separator separates said received packets based on at least one of a MAC address, an IP address and a port number of a transmission terminal and/or a destination terminal of said received packets.

6. The traffic detection system according to claim 1, wherein said data of said expected frequency distribution includes at least one of an expected peak frequency and an expected peak power of an expected peak in said expected frequency distribution.

7. The traffic detection system according to claim 1, wherein said subject traffic is a voice traffic.

16. The communication-quality monitoring system according to claim 1, wherein said traffic on said network includes encrypted packets.

8. A traffic detection method comprising the steps of:

receiving packets configuring a traffic on a network;

calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets; and

comparing data of said frequency distribution calculated by said frequency-distribution calculating step against data of an expected frequency distribution of arrival times of a subject traffic to be detected, to detect said subject traffic based on said comparison.

9. The traffic detection method according to claim 8, wherein said traffic on said network includes encrypted packets.

10. The traffic detection method according to claim 8, further comprising the step of separating said received packets into a plurality of groups of packets based on at least one of a frame length, a transmission terminal and a destination terminal of said received packets, wherein said frequency-distribution calculating step calculates said frequency distribution for each of said groups.

11. The traffic detection method according to claim 10, wherein said comparing step compares said received packets having a frame length substantially equal to an expected fame length of packets of said subject traffic.

12. The traffic detection method according to claim 10, wherein said separating step separates said received packets based on at least one of a MAC address, an IP address and a port number of a transmission terminal and/or a destination terminal of said received packets.

13. The traffic detection method according to claim 8, wherein said data of said expected frequency distribution includes at least one of an expected peak frequency and an expected peak power of an expected peak in said expected frequency distribution.

14. The method according to claim 8, wherein said subject traffic is a voice traffic.

15. A communication-quality monitoring system comprising:

a receiving unit for receiving packets configuring a traffic on a network;

frequency-distribution calculation unit for calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets; and

a communication quality judgement unit for comparing at lest one parameter of said frequency distribution against a threshold stored in a communication-quality-threshold memory to judge presence or absence of a degradation in a communication quality of said traffic on said network based on said comparison.

17. The communication-quality monitoring system according to claim 15, wherein said at least one parameter includes at least one of dispersion, standard deviation, half-power breadth and peak power of a peak in said frequency distribution.

18. The communication-quality monitoring system according to claim 17, wherein said communication quality judgement unit judges presence of a degradation if at least one of said dispersion, standard deviation and half-power breadth is larger than a corresponding threshold stored in a threshold memory.

19. The communication-quality monitoring system according to claim 17, wherein said communication quality judgement unit judges presence of a degradation if said peak power is smaller than a corresponding threshold stored in a threshold memory.

20. The communication-quality monitoring system according to claim 15, wherein said traffic on said network is a voice traffic.

24. The communication quality monitoring method according to claim 17, wherein said communication quality judgement step judges presence of a degradation if at least one of said dispersion, standard deviation and half-power breadth is larger than a corresponding threshold stored in a threshold memory.

21. A communication quality monitoring method comprising the steps of:

receiving packets configuring a traffic on a network;

calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets;

calculating at least one parameter from said frequency distribution; and

comparing said calculated parameter calculated by said parameter calculating step against a threshold stored in a communication-quality-threshold memory to judge presence or absence of a degradation in a communication quality of said traffic on said network based on said comparison.

22. The communication quality monitoring method according to claim 21, wherein said traffic on said network includes encrypted packets.

23. The communication quality monitoring method according to claim 21, wherein said at least one parameter includes at least one of dispersion, standard deviation, half-power breadth and peak power of a peak in said frequency distribution.

25. The communication quality monitoring method according to claim 23, wherein said communication quality judgement step judges presence of a degradation if said peak power is smaller than a corresponding threshold stored in a threshold memory.

26. The communication quality monitoring method according to claim 23, wherein said traffic on said network is a voice traffic.

27. A communication-quality monitoring system comprising:

a receiving unit for receiving packets configuring a traffic on a network;

frequency-distribution calculation unit for calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets;

a traffic detection unit for comparing data of said frequency distribution calculated by said frequency-distribution calculation unit against data of an expected frequency distribution of arrival times of a subject traffic to be detected, to detect said subject traffic based on said comparison; and

a communication quality judgement unit for comparing at least one parameter of said frequency distribution against a threshold stored in a communication-quality-threshold memory to judge presence or absence of a degradation in a communication quality of said traffic on said network based on said comparison.

28. The communication-quality monitoring system according to claim 27, wherein said traffic on said network includes encrypted packets.

29. The communication-quality monitoring system according to claim 27, further comprising a separator for separating said received packets into a plurality of groups of packets based on at least one of a frame length, a transmission terminal and a destination terminal, wherein said frequency-distribution calculation unit calculates said frequency distribution for each of said groups.

30. The communication-quality monitoring system according to claim 29, wherein said traffic detection unit compares said received packets having a frame length substantially equal to an expected fame length of packets of said subject traffic.

31. The communication-quality monitoring system according to claim 29, wherein said separator separates said received packets based on at least one of a MAC address, an IP address and a port number of a transmission terminal and/or a destination terminal of said received packets.

32. The communication-quality monitoring system according to claim 27 wherein said data of said expected frequency distribution includes at least one of an expected peak frequency and an expected peak power of an expected peak in said expected frequency distribution.

33. The communication-quality monitoring system according to claim 27, wherein said at least one parameter includes at least one of dispersion, standard deviation, half-power breadth and peak power of a peak in said frequency distribution.

34. The communication-quality monitoring system according to claim 33, wherein said communication quality judgement unit judges presence of a degradation if at least one of said dispersion, standard deviation and half-power breadth is larger than a corresponding threshold stored in a threshold memory.

35. The communication-quality monitoring system according to claim 33, wherein said communication quality judgement unit judges presence of a degradation if said peak power is smaller than a corresponding threshold stored in a threshold memory.

36. The communication-quality monitoring system according to claim 27, wherein said traffic on said network is a voice traffic.

37. A communication quality monitoring method comprising the steps of:

receiving packets configuring a traffic on a network;

calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets;

comparing data of said frequency distribution calculated by said frequency-distribution calculation unit against data of an expected frequency distribution of arrival times of a subject traffic to be detected, to detect said subject traffic based on said comparison,

calculating at least one parameter from said frequency distribution for said detected subject traffic; and

comparing said calculated parameter calculated by said parameter calculating step against a threshold stored in a communication-quality-threshold memory to judge presence or absence of a degradation in a communication quality of said traffic on said network based on said comparison.

38. The communication quality monitoring method according to claim 37, wherein said traffic on said network includes encrypted packets.

39. The communication quality monitoring method according to claim 37, further comprising the step of separating said received packets into a plurality of groups of packets based on at least one of a frame length, a transmission terminal and a destination terminal, wherein said frequency-distribution calculating step calculates said frequency distribution for each of said groups.

40. The communication quality monitoring method according to claim 39, wherein said comparing step compares said received packets having a frame length substantially equal to an expected fame length of packets of said subject traffic.

41. The communication quality monitoring method according to claim 39, wherein said separating step separates said received packets based on at least one of a MAC address, an IP address and a port number of a transmission terminal and/or a destination terminal of said received packets.

42. The communication quality monitoring method according to claim 37 wherein said data of said expected frequency distribution includes at least one of an expected peak frequency and an expected peak power of an expected peak in said expected frequency distribution.

43. The communication quality monitoring method according to claim 37, wherein said at least one parameter includes at least one of dispersion, standard deviation, half-power breadth and peak power of a peak in said frequency distribution.

44. The communication quality monitoring method according to claim 43, wherein said communication quality judging step judges presence of a degradation if at least one of said dispersion, standard deviation and half-power breadth is larger than a corresponding threshold stored in a threshold memory.

45. The communication quality monitoring method according to claim 43, wherein said communication quality judging step judges presence of a degradation if said peak power is smaller than a corresponding threshold stored in a threshold memory.

46. The communication quality monitoring method according to claim 37, wherein said traffic on said network is a voice traffic.

47. A program running on a computer to operate said computer in the processings of:

receiving packets configuring a traffic on a network;

calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets; and

comparing data of said frequency distribution calculated by said frequency-distribution calculation unit against data of an expected frequency distribution of arrival times of a subject traffic to be detected, to detect said subject traffic based on said comparison.

48. A program running on a computer to operate said computer in the processings of:

receiving packets configuring a traffic on a network;

calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets;

calculating at least one parameter from said frequency distribution; and

comparing said calculated parameter calculated by said parameter calculating processing against a threshold stored in a communication-quality-threshold memory to judge presence or absence of a degradation in a communication quality of said traffic on said network based on said comparison.

49. A program running on a computer to operate said computer in the processings of:

receiving packets configuring a traffic on a network;

calculating a frequency distribution of arrival times of said received packets based on arrival times of said received packets;

comparing data of said frequency distribution calculated by said frequency-distribution calculation unit against data of an expected frequency distribution of arrival times of a subject traffic to be detected, to detect said subject traffic based on said comparison;

calculating at least one parameter from said frequency distribution for said detected subject traffic; and

comparing said calculated parameter calculated by said parameter calculating processing against a threshold stored in a communication-quality-threshold memory to judge presence or absence of a degradation in a communication quality of said traffic on said network based on said comparison.