Abstract: In an analysis apparatus, when detecting each packet communicated via a network, an update unit updates statistical information that is stored in a continuous storage area of a storage unit and that indicates the communication state of the network for a first cycle. Then, a first processing unit reads the statistical information from the storage unit at every first cycle, and processes the statistical information and initializes the statistical information in the storage unit. A second processing unit reads partial statistical information that is part of the statistical information from the storage unit at every second cycle shorter than the first cycle, and processes the partial statistical information and initializes the partial statistical information in the storage unit.

Abstract: An operation unit detects that a received first ACK packet is an ACK packet transmitted in response to a single data packet. The operation unit determines whether to calculate a round trip time by using reception time of the first ACK packet on the basis of a window size included in the first ACK packet and a window size included in a second ACK packet acquired immediately before the first ACK packet. If the operation unit determines to calculate the round trip time, the operation unit outputs the round trip time calculated by using the reception time of the first ACK packet.

Abstract: A computer obtains a first packet group transmitted wirelessly by a first wireless communication apparatus and a second packet group transmitted wirelessly by a second wireless communication apparatus. The computer then detects a first non-communication period, during which there are no packets transmitted by the first wireless communication apparatus for a prescribed time or longer, and also detects a second non-communication period, during which there are no packets transmitted by the second wireless communication apparatus for the prescribed time or longer. The computer then determines based on an overlap between the first and second non-communication periods whether the first and second wireless communication apparatuses are connected to the same wireless base station.

Abstract: An information processing apparatus, including: a memory unit; and a processor configured to perform a migration process of migrating a migration source file system to a migration target file system, the memory unit is configured to store first and second information, the first information managing a target object of the first migration process stored in the migration source file system and the target object to be stored in the migration target file system, and the second information managing a progress status of the first migration process for each object, the processor is configured to: select either or both of the migration source and target file systems based on the first and second information when a write request for the target object is received from a host apparatus; and perform a process related to the write request on the file system selected.

Abstract: A method includes receiving a first packet, the first packet being including a first packet identifier and a first error detection code, storing first information indicating the first packet identifier and second information indicating the first error detection code, receiving a second packet, the second packet being including a second packet identifier and a second error detection code, comparing the second packet identifier and the second error detection code with the first information and the second information, respectively, in response to a determination that the second packet identifier corresponds to the first information and the second error detection code corresponds to the second information, discarding the second packet, in response to a determination that at least one the second packet identifier and the second error detection code does not correspond to the first information and the second information, providing the first packet and the second packet for a packet analysis.

Abstract: An information processing apparatus includes a processor configured to perform a process which includes determining an address available to be set as a source address of a first packet to be transmitted to an apparatus included in a network; identifying one or more relay apparatuses in a communication route from the apparatus to the information processing apparatus; and configuring, for at least one of the identified relay apparatuses, a setting regarding a transfer destination of a second packet whose destination address is the determined address in such a manner that the second packet is transferred toward the information processing apparatus along the communication route.

Abstract: An apparatus acquires time-series information that stores information on a packet transmitted and received between a first apparatus and a second apparatus in association with a time at which the packet is transmitted or received. The apparatus estimates a window size indicating an amount of data that a receiver of the data is able to accept without acknowledging a sender of the data, based on the acquired time-series information, and, based on temporal change in the estimated window size, determines a type of congestion control being executed by the first apparatus, from among a plurality of candidate types of congestion control.

Abstract: A method for analyzing communication qualities between virtual machines serving as transmission sources and virtual machines serving as transmission destinations on a virtual network includes identifying, by a computer, based on the temporal sequence of the input queue information and the temporal sequence of the output queue information, a first pair and a second pair as mirroring targets, wherein the input queue information indicates a first queue length indicating a number of pieces of data addressed from one of the transmission sources to one of the transmission destinations, wherein the output queue information indicates a second queue length indicating a number of pieces of data included in an output queue of the one of the transmission destinations.

Abstract: A non-transitory computer-readable storage medium storing therein a packet processing program for causing a computer to execute a process includes specifying, according to acquisition of an IP packet, on the basis of information for specifying a communication session included in a header of the acquired IP packet, a communication session in which the acquired IP packet is transmitted and received, referring to management information corresponding to the specified communication session, and discarding the acquired IP packet when the management information corresponding to an IP packet identifier of the acquired IP packet is present and, when the management information corresponding to the IP packet identifier of the acquired IP packet is absent, storing the management information corresponding to the IP packet identifier of the acquired IP packet in the storage.

Abstract: A storage unit stores a plurality of packets collected in a wired section. An operation unit classifies the plurality of packets stored in the storage unit for each connection. The operation unit determines packets corresponding to a connection having a period in which a total data amount of packets for each of which a confirmation response packet has not arrived from a destination apparatus among packets transmitted by an information processing apparatus connected to the wired section increases when the connection is started, a round-trip time of each of the packets transmitted by the information processing apparatus not increasing monotonically in the period, to be packets of communication including the wireless section.

Abstract: There is provided a packet storage method including: processing in which a sequence identifier is successively assigned to a packet captured from a network and the packet is stored in a buffer; creation processing in which the packet is read out from the buffer, a first identifier involved in a first property of the packet is identified, and an index data that mutually correlates the sequence identifier and the first identifier is created; and storage processing in which the packet corresponding to the sequence identifier included in the index data is read out from the buffer, the packet is sorted according to the first identifier included in the index data, and the sorted packet is stored in a storage unit on a per-first-identifier basis, executed by a processor.

Abstract: An apparatus allocates a packet-identifier to each packet captured from a network, and stores the each packet in a buffer. The apparatus associates, with each of the packet-identifiers, a connection-identifier specifying a connection of a packet identified by the each packet-identifier, and detects a connection to which a primary abnormality is occurring by analyzing packets stored in the buffer.

Abstract: A computer-readable recording medium stores a program that causes a computer to execute a verification support process that includes acquiring a series of data transmitted and received between apparatuses; creating a plurality of data groups by dividing the series of acquired data; detecting among the created data groups, a data group that includes given data acting as an issuance request for identification information of a transmission source; adding the given data to the beginning of subsequent data groups that are among the created data groups and transmitted after the detected data group; and outputting the subsequent data groups to which the given data has been added.

Abstract: A packet analysis method includes acquiring a first acknowledge packet and a second acknowledge packet transmitted from the first device; acquiring a plurality of packets transmitted from the second device during a period from reception of the first acknowledge packet to reception of the second acknowledge packet; identifying a number of packets corresponds to data transmitted from the second device, by calculating a difference between a first identification number corresponding to the first acknowledge packet and a second identification number corresponding to the second acknowledge packet; calculating a plurality of bandwidth values, a number of the plurality of bandwidth values is identical to the number of packets, based on acquisition timings of the plurality of packets and an interval between the acquisition timings of two adjacent packets; and determining a bandwidth value that is to be removed from the plurality of bandwidth values by comparing the plurality of bandwidth values.

Abstract: A device is configured to specify a first time difference between a first time in which a first data packet is transmitted and a second time in which a first response packet is received, specify a second time difference between the second time and a third time in which a second response packet is received, the second response packet being a final response packet corresponding to second data packets transmitted after the first time and before the second time, specify a first data amount of the one or more second data packets, and a second data amount of the first data packet and the one or more second data packets, specify a first throughput value based on the second data amount and the first time difference, specify a second throughput value based on the first data amount and the second time difference.

Abstract: A monitoring apparatus includes a memory, and a processor coupled to the memory and configured to receive plural acknowledgment packets each including an identifier for identifying a packet and information indicating selective acknowledgment which are transmitted from a reception node that has received a data packet transmitted from a transmission node via a network to the transmission node via the network, and determine that a data packet loss occurs in the reception node in a case where a first identifier and first information included in a first acknowledgment packet among the plural acknowledgment packets are respectively matched with a second identifier and second information included in a second acknowledgment packet received after the first acknowledgment packet among the plural acknowledgment packets.

Abstract: A packet analysis method includes acquiring a first acknowledge packet and a second acknowledge packet transmitted from the first device; acquiring a plurality of packets transmitted from the second device during a period from reception of the first acknowledge packet to reception of the second acknowledge packet; identifying a number of packets corresponds to data transmitted from the second device, by calculating a difference between a first identification number corresponding to the first acknowledge packet and a second identification number corresponding to the second acknowledge packet; calculating a plurality of bandwidth values, a number of the plurality of bandwidth values is identical to the number of packets, based on acquisition timings of the plurality of packets and an interval between the acquisition timings of two adjacent packets; and determining a bandwidth value that is to be removed from the plurality of bandwidth values by comparing the plurality of bandwidth values.

Abstract: A physical machine calculates, for each virtual switch, an increment of a usage of a processor in accordance with the number of packets to be collected, by using a usage of the processor by a virtual switch and a number of packets passing through each port when mirroring is executed and when mirroring is not executed, respectively. For each of candidates for capture point, the physical machine calculates, for each physical machine, a usage of the processor by a hypervisor when mirroring is executed, by using an increment of a usage of the processor by the virtual switch and a usage of the processor by the hypervisor when mirroring is not executed. The physical machine determines a combination of ports used for collection of packets from among the candidates for capture point, in accordance with a deviation of the calculated usage of the processor by each hypervisor.

Abstract: An apparatus acquires a packet transmitted between a transmission-terminal and a reception-terminal, and stores the acquired packet in association with a time at which the packet has been acquired. When a first bandwidth of data packets transmitted by the transmission-terminal during a time-period from acquisition of a first ACK-packet transmitted by the reception-terminal to acquisition of a second ACK-packet transmitted by the reception-terminal subsequently to the first ACK-packet, is smaller than a second bandwidth or greater than a third bandwidth, the apparatus determines the second ACK-packet to be a packet not desired to measure a bandwidth, where the second bandwidth is calculated using an acquisition interval between first and second data packets transmitted respectively after waiting for the first and second ACK-packets, and the third bandwidth is calculated using an acquisition interval between two adjacent data packets including a data packet transmitted without waiting for an ACK-packet.

Abstract: A mismatch detecting method includes: specifying a configuration of test data in accordance with a condition in which a time when a first packet out of a plurality of packets included in the test data caused to make a round trip through a transmission path including a plurality of sections is transmitted in one section out of the plural sections in an inbound path and a time when a second packet out of the plural packets is transmitted in the one section in an outbound path overlap with each other; transmitting the test data to the transmission path in accordance with the configuration specified by the specifying; and determining a mismatch of a transmission system within the transmission path, based on a loss situation of the test data returning from the transmission path after the transmitting.