US 11,683,255 B2
Apparatus and method for capturing packets before and after network communication failure
Shuhei Yoshida, Tokyo (JP); Yuta Ukon, Tokyo (JP); Shoko Oteru, Tokyo (JP); Namiko Ikeda, Tokyo (JP); and Koyo Nitta, Tokyo (JP)
Assigned to Nippon Telegraph and Telephone Corporation, Tokyo (JP)
Appl. No. 17/604,943
Filed by Nippon Telegraph and Telephone Corporation, Tokyo (JP)
PCT Filed May 14, 2019, PCT No. PCT/JP2019/019123
§ 371(c)(1), (2) Date Oct. 19, 2021,
PCT Pub. No. WO2020/230265, PCT Pub. Date Nov. 19, 2020.
Prior Publication US 2022/0217069 A1, Jul. 7, 2022
Int. Cl. H04L 43/12 (2022.01); H04L 43/0811 (2022.01); H04L 43/0829 (2022.01); H04L 43/0823 (2022.01); H04L 43/0882 (2022.01)
CPC H04L 43/12 (2013.01) [H04L 43/0811 (2013.01); H04L 43/0829 (2013.01); H04L 43/0847 (2013.01); H04L 43/0882 (2013.01)] 12 Claims
OG exemplary drawing
 
1. A packet capture device comprising:
a packet receiver configured to receive a packet from a network;
a packet retainer configured to store the received packet in a memory to temporarily retain the received packet;
a failure detector configured to determine a communication failure is present in the network based on information of the received packet;
a capture controller configured to determine an operation stop address such that retention of packets from the network in time periods before and after a detection time point of the communication failure is ensured when the communication failure is determined present by the failure detector, wherein the capture controller is further configured to determine the operation stop address based on a storage destination address of the packet at the detection time point of the communication failure and a length of a preset ensuring time period in which retention of the packet before detection of the communication failure is ensured; and
a capture data generator configured to output the packet stored in the memory as capture data when the storage destination address of the packet stored in the memory has reached the operation stop address or when at least a predetermined waiting time period has elapsed from the detection time point of the communication failure.