TCP/IP HTTP NAT Method and Apparatus for Identifying NAT Host Based on TCP/IP Header and HTTP Cookie

摘要

Embodiments of the present invention provide an apparatus and method for identifying an inner host of NAT, capable of not only accurately grasping the number of hosts inside the NAT in the outside of the NAT without installing a separate program inside the NAT but also identifying a specific host inside the NAT, by acquiring a packet from an NAT device, classifying the packet according to an operating system using a TTL field value, classifying the hosts based on a source port field value in case of Windows series and based on a time stamp field value in case of Linux series, and determining whether or not the host is a new hosts based on cookie information with regard to the classified hosts and a power state of a conventional host.