PACKET CAPTURING DEVICE

• US 20100103946A1
• Filed: 10/22/2009
• Published: 04/29/2010
• Est. Priority Date: 10/28/2008
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Nomura, Yuji, Yasuie, Takeshi
• Granted Patent: US 8,243,736 B2
• Time in Patent Office: Days
• US Class Current: 370/412
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/0852 Delays

Abstract

A next sequence number, which is a sequence number that a next packet should have, is compared with the sequence number of a current packet, an identifier of a previous packet is compared with the identifier of the current packet, and a delay is judged to be a simple delay when the next sequence number matches the sequence number of the current packet and the identifier of the previous packet is followed by the identifier of the current packet. Or the delay is judged to be caused by a retransmission when the identifier of the previous packet is not followed by the identifier of the current packet.

Claims

1. A packet capturing device comprising:

an acquisition unit that acquires an ID value and a sequence number written on a header of a received packet;

a storage unit that stores a previous ID value which is an ID value of a previously-received packet and a next sequence number which is a sequence number that a next packet to be received should have; and

a detection unit that judges whether a delay of the received packet is caused by a simple delay or a retransmission accompanying a loss,

wherein the detection unit

compares the next sequence number with a sequence number of the received packet,

compares the previous ID value with an ID value of the received packet, and

judges that the delay is a simple delay when the next sequence number matches the sequence number of the received packet and the previous ID value is followed by the ID value of the received packet or judges that the delay is caused by a retransmission when the previous ID value is not followed by the ID value of the received packet.

2. The packet capturing device according to claim 1,

wherein the storage unit stores an immediately preceding ID value which is an ID value of a packet previously transmitted by a sender host, and

wherein the detection unit

compares the next sequence number with the sequence number of the received packet,

compares the ID value of the received packet with a value resulting from adding a predetermined number to the immediately preceding ID value, and

judges that the delay is a simple delay when the next sequence number matches the sequence number of the received packet and the ID value of the received packet is equal to or less than the value resulting from adding the predetermined number to the immediately preceding ID value, or judges that judgment is not possible when the ID value of the received packet received this time is greater than the value resulting from adding the predetermined number to the immediately preceding ID value.

3. The packet capturing device according to claim 2, wherein the detection unit

judges an OS type of a transmitting host,

when the OS of the transmitting host is an OS that gives ID values differing from one TCP session to another to packets and gives the ID values in increments of 1 to packets that belong to a same TCP session,

compares the next sequence number with the sequence number of the received packet,

compares the previous ID with the ID value of the received packet,

judges that the delay is a simple delay when the next sequence number matches the sequence number of the received packet and the previous ID is followed by the ID value of the received packet, or judges that the delay is caused by a retransmission when the previous ID is not followed by the ID value of the received packet,

when the OS of the transmitting host is an OS that does not give ID values differing from one TCP session to another to packets,

compares, the next sequence number with the sequence number of the received packet,

compares the ID value of the received packet with the value resulting from adding the predetermined number to the immediately preceding ID value, and

judges that the delay is a simple delay when the next sequence number matches the sequence number of the received packet and the ID value of the received packet is equal to or less than the value resulting from adding the predetermined number to the immediately preceding ID value, or judges that judgment is not possible when the ID value of the received packet is greater than the value resulting from adding the predetermined number to the immediately preceding ID value.

4. The packet capturing device according to claim 1, wherein the ID value is an identifier of an IP header of a packet and the sequence number is a sequence number of a TCP header.