Abstract: An aspect of the present disclosure discloses a method for diagnosing a network performance in an apparatus for diagnosing network performance connected to a switching device provided between a first entity and a second entity. The method may include: obtaining at least one mirrored packet for at least one packet transmitted between the first entity and the second entity based on mirroring from the switching device, calculating performance related indicator representing performance of a network service associated with the first entity and the second entity based on at least a part of information included in the at least one mirrored packet, and storing the calculated performance related indicators.

Abstract: An aspect of the present disclosure discloses a method for diagnosing a network performance in an apparatus for diagnosing network performance connected to a switching device provided between a first entity and a second entity. The method may include: obtaining at least one mirrored packet for at least one packet transmitted between the first entity and the second entity based on mirroring from the switching device, calculating performance related indicator representing performance of a network service associated with the first entity and the second entity based on at least a part of information included in the at least one mirrored packet, and storing the calculated performance related indicators.

Abstract: An aspect of the present disclosure discloses a method for diagnosing a network performance in an apparatus for diagnosing network performance connected to a switching device provided between a first entity and a second entity. The method may include: obtaining at least one mirrored packet for at least one packet transmitted between the first entity and the second entity based on mirroring from the switching device, calculating performance related indicator representing performance of a network service associated with the first entity and the second entity based on at least a part of information included in the at least one mirrored packet, and storing the calculated performance related indicators.

Abstract: An aspect of the present disclosure discloses a method for diagnosing a network performance in an apparatus for diagnosing network performance connected to a switching device provided between a first entity and a second entity. The method may include: obtaining at least one mirrored packet for at least one packet transmitted between the first entity and the second entity based on mirroring from the switching device, calculating performance related indicator representing performance of a network service associated with the first entity and the second entity based on at least a part of information included in the at least one mirrored packet, and storing the calculated performance related indicators.

Abstract: Disclosed is a network security monitoring device, which is included in a network comprising a first entity, a second entity, a switching device provided between the first entity and the second entity, and the network security monitoring device connected to the switching device. The device comprises the port for obtaining at least one mirrored packet for at least one packet transmitted and received between the first entity and the second entity on the basis of mirroring from the switching device, and a processor for determining whether a security problem has occurred for a network associated with the first entity and the second entity on the basis of at least some of information included in the at least one mirrored packet.