Abstract: A packet communication method and a packet communication system capable of making an IPv4-compatible application operating on an information processing apparatus communicate with another information processing apparatus connected to an IPv6 network without using an address translation router. In the information processing apparatus connected to the IPv6 network incorporates, an IPv4-to-IPv6 protocol conversion control function is incorporated in a LAN driver. A protocol conversion control module receives an IPv4 packet from a protocol control module. When a send destination IPv4 address contained in a header of the packet is registered in an address translation table incorporated in the protocol conversion control module, an IPv6 address is generated to be sent onto a LAN. Unless the send destination IPv4 address contained in the packet header is registered in the address translation table incorporated in the protocol conversion control module, the IPv4 packet as received is intactly sent onto the LAN.

Abstract: A packet communication method and a packet communication system capable of making an IPv4-compatible application operating on an information processing apparatus communicate with another information processing apparatus connected to an IPv6 network without using an address translation router. In the information processing apparatus connected to the IPv6 network, an IPv4-to-IPv6 protocol conversion control function is incorporated in a LAN driver. A protocol conversion control module receives an IPv4 packet from a protocol control module. When a send destination IPv4 address contained in a header of the packet is registered in an address translation table incorporated in the protocol conversion control module, an IPv6 address is generated to be sent onto a LAN. Unless the send destination IPv4 address contained in the packet header is registered in the address translation table incorporated in the protocol conversion control module, the IPv4 packet as received is intactly sent onto the LAN.

Abstract: A traffic statistical analysis processing unit is provided in a network control apparatus so as to detect an abnormal traffic. When the abnormal traffic is detected, a filter is set to a packet transfer processing unit so as to stop transferring operation of the abnormal traffic. At the same time, abnormal condition sensing information is superimposed on a statistical information packet, and the resulting statistical information packet is transmitted to a traffic analyzing apparatus.

Abstract: In an apparatus, there are provided an IP transmitting and receiving unit for transmitting and receiving an IPv4 packet and an IPv6 packet; an IP header converting unit for performing a mutual conversion of the IPv4 packet and the IPv6 packet by an IP header conversion; a DNS substituting unit for receiving a domain information capturing request sent from an IPv4 terminal or an IPv6 terminal and substituting its process; an IPv4 address capturing unit for capturing an IPv4 address from a DHCP server; and an IP address conversion information holding unit for holding an IPv6 address of the IPv6 terminal and the IPv4 address captured by the IPv4 address capturing unit in correspondence to each other. Thus, a communication with the IPv4 terminal can be executed without preliminarily fixedly allocating the IPv4 address to the IPv6 terminal.

Abstract: In an apparatus, there are provided an IP transmitting and receiving unit for transmitting and receiving an IPv4 packet and an IPv6 packet; an IP header converting unit for performing a mutual conversion of the IPv4 packet and the IPv6 packet by an IP header conversion; a DNS substituting unit for receiving a domain information capturing request sent from an IPv4 terminal or an IPv6 terminal and substituting its process; an IPv4 address capturing unit for capturing an IPv4 address from a DHCP server; and an IP address conversion information holding unit for holding an IPv6 address of the IPv6 terminal and the IPv4 address captured by the IPv4 address capturing unit in correspondence to each other. Thus, a communication with the IPv4 terminal can be executed without preliminarily fixedly allocating the IPv4 address to the IPv6 terminal.

Abstract: There is provided a packet routing apparatus for performing an IP additional function processing for a packet in the middle of a packet routing processing without damaging the high speed characteristic of the packet routing processing. A unique address is determined for each of function accelerators 11 to 14 in the inside of an extended function module 6, the unique address is added to a packet by a physical address lookup unit 105, and a data distribution unit 112 distributes the packet to the function accelerator corresponding to the unique address.

Abstract: A packet communication method and a packet communication system capable of making an IPv4-compatible application operating on an information processing apparatus communicate with another information processing apparatus connected to an IPv6 network without using an address translation router. In the information processing apparatus connected to the IPv6 network incorporates, an IPv4-to-IPv6 protocol conversion control function is incorporated in a LAN driver. A protocol conversion control module receives an IPv4 packet from a protocol control module. When a send destination IPv4 address contained in a header of the packet is registered in an address translation table incorporated in the protocol conversion control module, an IPv6 address is generated to be sent onto a LAN. Unless the send destination IPv4 address contained in the packet header is registered in the address translation table incorporated in the protocol conversion control module, the IPv4 packet as received is intactly sent onto the LAN.

Abstract: A communications apparatus for converting an IPv4 multicast packet transmit from an IPv4 terminal into an IPv6 multicast packet and transmitting the converted IPv6 multicast packet to one of a plurality of IPv6 networks. The communications apparatus has information indicating to which IPv6 network the IPv4 multicast packet to undergo conversion processing is to be transmitted. The communications apparatus then converts the received IPv4 multicast packet into an IPv6 multicast packet and transmits the converted IPv6 multicast packet to an IPv6 network where it is required to be sent.

Abstract: Prior art quarantine networks were implemented by two methods, the IEEE802.1x method and the DHCP method, but these methods both have different problems. The problem with the IEEE802.1x method is that it is difficult to make the transition from an existing management framework. The problem with the DHCP method is that it is difficult to prevent attacks on the network itself, and to repeat client quarantine. The present invention implements client login authentication and client security status quarantine independently, and controls layer-2 connectivity based on the respective results. This permits quarantine using an existing management framework, as well as enhancing network protection by layer-2 connection control and permitting repeat quarantine of the client using the same IP address. Moreover, by incorporating other layer-2 connectivity control mechanisms, flexible layer-2 connectivity control outside the quarantine network can also be implemented.

Abstract: A communications apparatus for converting an IPv4 multicast packet transmit from an IPv4 terminal into an IPv6 multicast packet and transmitting the converted IPv6 multicast packet to one of a plurality of IPv6 networks. The communications apparatus has information indicating to which IPv6 network the IPv4 multicast packet to undergo conversion processing is to be transmitted. The communications apparatus then converts the received IPv4 multicast packet into an IPv6 multicast packet and transmits the converted IPv6 multicast packet to an IPv6 network where it is required to be sent.

Abstract: A packet routing apparatus has a plurality of routing units, connected by a first connecting mechanism. The plurality of routing units comprise a first routing unit, connected to at least one port, and a second routing unit, connected to an extended function processor. The first routing unit transmits a packet, received from the port, to another first routing unit and/or a second routing unit. The second routing unit transmits the packet, received from the first connecting mechanism, to the extended function processor.

Abstract: A network controller, capable of high-speed extraction of malicious traffic from networks and determining characteristics of such traffic, includes a unit for accumulating a number of packets for each arbitrary itemset included in the header portions of packets to be transferred, and a unit for determining whether the accumulated value obtained by the accumulating unit exceeds a predetermined threshold, and determines the types of packets to be transferred from accumulated values of the itemset and an itemset different from the itemset when the number of packets exceed a threshold.

Abstract: A routing apparatus includes a plurality of routing units and function units. The routing unit receives a packet from each port, and uses header information contained in the packet to judge whether the packet should be transmitted to the function unit. In the case where the packet should be transmitted to the function unit, the routing unit adds a first identifier to the packet and transmits it to a transmission unit. The function unit receives the packet containing the first identifier from the transmission unit, and executes a predetermined processing for the packet. The function unit adds a second identifier to the packet and transmits it to the transmission unit.

Abstract: A packet routing apparatus has a plurality of routing units, connected by a first connecting mechanism. The plurality of routing units comprise a first routing unit, connected to at least one port, and a second routing unit, connected to an extended function processor. The first routing unit transmits a packet, received from the port, to another first routing unit and/or a second routing unit. The second routing unit transmits the packet, received from the first connecting mechanism, to the extended function processor.

Abstract: In an apparatus, there are provided an IP transmitting and receiving unit for transmitting and receiving an IPv4 packet and an IPv6 packet; an IP header converting unit for performing a mutual conversion of the IPv4 packet and the IPv6 packet by an IP header conversion; a DNS substituting unit for receiving a domain information capturing request sent from an IPv4 terminal or an IPv6 terminal and substituting its process; an IPv4 address capturing unit for capturing an IPv4 address from a DHCP server; and an IP address conversion information holding unit for holding an IPv6 address of the IPv6 terminal and the IPv4 address captured by the IPv4 address capturing unit in correspondence to each other. Thus, a communication with the IPv4 terminal can be executed without preliminarily fixedly allocating the IPv4 address to the IPv6 terminal.

Abstract: In an apparatus, there are provided an IP transmitting and receiving unit for transmitting and receiving an IPv4 packet and an IPv6 packet; an IP header converting unit for performing a mutual conversion of the IPv4 packet and the IPv6 packet by an IP header conversion; a DNS substituting unit for receiving a domain information capturing request sent from an IPv4 terminal or an IPv6 terminal and substituting its process; an IPv4 address capturing unit for capturing an IPv4 address from a DHCP server; and an IP address conversion information holding unit for holding an IPv6 address of the IPv6 terminal and the IPv4 address captured by the IPv4 address capturing unit in correspondence to each other. Thus, a communication with the IPv4 terminal can be executed without preliminarily fixedly allocating the IPv4 address to the IPv6 terminal.

Abstract: A routing apparatus includes a plurality of routing units and function units. The routing unit receives a packet from each port, and uses header information contained in the packet to judge whether the packet should be transmitted to the function unit. In the case where the packet should be transmitted to the function unit, the routing unit adds a first identifier to the packet and transmits it to a transmission unit. The function unit receives the packet containing the first identifier from the transmission unit, and executes a predetermined processing for the packet. The function unit adds a second identifier to the packet and transmits it to the transmission unit.

Abstract: A multicast communication method for allowing a communication control apparatus for communicating in accordance with IPv4 to communicate with a communication control apparatus for communicating in accordance with IPv6. This method includes the steps of: when an IPv4 multicast packet is inputted, discriminating that this packet is a data packet on the basis of an IPv4 header; when it is determined that the packet is the data packet, converting the IPv4 header of the IPv4 multicast packet into an IPv6 header; generating an IPv6 multicast packet; and outputting the generated IPv6 multicast packet to a IPv6 network.

Abstract: In an apparatus, there are provided an IP transmitting and receiving unit for transmitting and receiving an IPv4 packet and an IPv6 packet; an IP header converting unit for performing a mutual conversion of the IPv4 packet and the IPv6 packet by an IP header conversion; a DNS substituting unit for receiving a domain information capturing request sent from an IPv4 terminal or an IPv6 terminal and substituting its process; an IPv4 address capturing unit for capturing an IPv4 address from a DHCP server; and an IP address conversion information holding unit for holding an IPv6 address of the IPv6 terminal and the IPv4 address captured by the IPv4 address capturing unit in correspondence to each other. Thus, a communication with the IPv4 terminal can be executed without preliminarily fixedly allocating the IPv4 address to the IPv6 terminal.

Abstract: A multicast communication method for allowing a communication control apparatus for communicating in accordance with IPv4 to communicate with a communication control apparatus for communicating in accordance with IPv6. This method includes the steps of: when an IPv4 multicast packet is inputted, discriminating that this packet is a data packet on the basis of an IPv4 header; when it is determined that the packet is the data packet, converting the IPv4 header of the IPv4 multicast packet into an IPv6 header; generating an IPv6 multicast packet; and outputting the generated IPv6 multicast packet to a IPv6 network.