Abstract: A network-configuration management apparatus manages a configuration of a network in which a plurality of network devices including a plurality of servers is connected. An upper-layer-specification receiving unit receives an upper layer specification from a user. A grouping unit groups the servers based on the received upper layer specification. A configuration display unit that displays the configuration of the network based on the grouping of the servers.

Abstract: The present invention provides a network configuration change evaluation program, a network configuration change evaluation device, and a network configuration change evaluation method which can evaluate influence due to configuration change of a network.

Abstract: The communication availability information between a plurality of transmitters and a plurality of destinations before the communication state between a transmitter and a destinations in a communication network changes from available to unavailable is compared, layer by layer from an upper layer toward a lower layer, with the communication availability information after change, and destinations in paths where the communication state has changed from available to unavailable are grouped. Thus, the communication network is divided into a plurality of affected ranges and an interface of a device located at the border between the affected ranges is deduced as a fault occurrence point.

Abstract: A packet processing unit and a session managing unit, which are conventionally arranged in a server, are arranged in a network connecting device, and the network connecting device performs a packet relay process based on session management. As a result, the load on a server is reduced, and a process by the server is performed faster.

Abstract: According to this invention, it is possible to display the overall configuration of a network and, at the same time, an important part of the network in detail according to the objective of monitoring so as to be able to grasp/monitor the important part of the network in detail, while globally grasping/monitoring the network configuration, for the purpose of an efficient monitoring operation on the network configuration. A network configuration management apparatus 100 for managing the configuration of a network 101 formed by connecting a plurality of network devices comprises a topology information acquiring section 11 for acquiring topology information on each of the network devices and a degree of importance determining section 12 for computationally determining the degree of importance of each of the network devices, using the topology information acquired by the topology information acquiring section 11.

Abstract: A packet processing unit and a session managing unit, which are conventionally arranged in a server, are arranged in a network connecting device, and the network connecting device performs a packet relay process based on session management. As a result, the load on a server is reduced, and a process by the server is performed faster.

Abstract: Connections included in the topology of a lower-order layer of a plurality of layers are grouped according to device setting information of a plurality of devices composing a communication network with a communication function having a hierarchical structure composed of the plurality of layers, and an information reach range in a higher-order layer is generated. Then, the topology of the higher-order layer is generated based on the obtained information reach range.

Abstract: A source address-fabricated packet detection unit that detects a packet with a fabricated source IP address comprises a packet controller that controls the input/output of a packet and acquires a source IP address and TTL value of the input packet; a reference TTL value storage section that stores a reference TTL value that represents a normal time to live range and source address in a correspondence manner; and an address fabrication determination section that compares the TTL value of the input packet and reference TTL value corresponding to the source IP address of the input packet to determine the presence or absence of the fabrication of the source IP address in the input packet based on the comparison result.

Abstract: By providing a plurality of packet relay processing units, each of which is realized by a different CPU, for a packet relay device performing an advanced function, such as a proxy server, a fire wall and the like, which comprises a server and a network interface card connected to this server, sessions can be appropriately distributed among the plurality of packet relay processing units and simultaneously the packet relay device is controlled in such a way that packets in the same session are processed by the same packet relay processing unit.

Abstract: A packet processing unit and a session managing unit, which are conventionally arranged in a server, are arranged in a network connecting device, and the network connecting device performs a packet relay process based on session management. As a result, the load on a server is reduced, and a process by the server is performed faster.