METHOD FOR DISTRIBUTED STORAGE AND SEARCH FOR NETFLOW-BASED CONNECTION FINGERPRINT AND SERVER USING THE SAME

摘要

The present invention relates to a method for distributed storage and retrieval of a connection fingerprint based on a Netflow and a server using the same. According to the present invention, when the net flow data is collected, the server generates at least one connection fingerprint segment from the collected net flow data that is a fragment of the divided connection fingerprint, Generates log information corresponding to one connected fingerprint piece, and when the log information is generated, the server normalizes the log information. Also, if a backtrace request for a specific link fingerprint piece is obtained from the user, the server performs a search according to the backtrace request, and returns a backtracking result as a result of the search.