JP5511017B2 - Failure analysis system, IPv4-IPv6 conversion device, failure analysis method, and program - Google Patents

Description

  The present invention relates to a failure analysis system, and more particularly to a failure analysis system in an IPv4-IPv6 mixed environment.

  An IPv4 (Internet Protocol Version 4) address (hereinafter referred to as IPv4) is an IP address currently used on the Internet, and manages address resources with 32 bits. However, due to the rapid spread of the Internet in recent years, there is a concern about address resource depletion.

  Therefore, based on the current IPv4, which is worried about the exhaustion of address resources, an IPv6 (Internet Protocol Version 6) address (hereinafter referred to as IPv6) for managing address resources with 128 bits has been developed as a next-generation IP address.

  Although IPv6 usage is expected to increase due to the IPv4 resource depletion problem, the existing IPv4 usage will not be terminated immediately and will continue to be used for some time in the future.

  Therefore, it is expected that a network environment of IPv4 and IPv6 will be used in the future.

  In a network environment where IPv4 and IPv6 are mixed, when performing a failure analysis of the network environment, it is necessary to investigate both the IPv4 network and the IPv6 network. However, since an IPv4 terminal has only an IPv4 address, A reply (response) from an IPv6 native terminal (terminal unique to IPv6) cannot be obtained. Therefore, it is considered preferable that an IPv4-IPv6 translation apparatus having both an IPv4 address and an IPv6 address executes a trace route (“traceroute” or “tracert”) command.

  However, when a trace route command is executed from this IPv4-IPv6 conversion device to the WAN side IPv4 terminal via the WAN (Wide Area Network) side IPv6 network, only the IPv6 address is displayed on the display. . That is, even if it is actually an IPv4 address, it is displayed with an IPv6 address.

  Thus, since the boundary between the IPv4 network and the IPv6 network is not clarified in the display at the time of command execution, there is a problem that it is difficult to investigate the cause when a failure occurs.

  That is, when the IPv4-IPv6 translation device executes a trace route command from the IPv4 network to the IPv4 terminal via the IPv6 network, the following problems exist in the conventional method.

  When the conventional trace route command is used, only the IPv6 address is displayed on the execution result display. Therefore, the boundary between the IPv6 network and the IPv4 network on the network is not clarified from the display.

  The response from the WAN side IPv4 network at the time of executing the trace route command uses the address converted from the IPv4 address to the IPv6 address using the translation prefix set in the IPv4-IPv6 translation device. Since this IPv6 address is used, only the result of IPv6 address is displayed.

  Therefore, when a failure occurs, there is a problem that it is difficult to determine whether the failure has occurred in the IPv6 network or the IPv4 network and to identify the failure location.

  As a related technique, Japanese Patent Application Laid-Open No. 2009-206562 discloses an IPv4-IPv6 translator device and a dummy address response method. In this related technology, an IPv6 address resolution query for a certain FQDN (Fully Qualified Domain Name) is received from a user terminal to which only an IPv6 address is assigned, and the IPv4 address and IPv6 address name of the FQDN are received from the DNS server. Make a resolution inquiry. When the IPv6 address and the IPv4 address can be acquired as a result of the name resolution, a dummy IPv6 address in which the IPv4 address is embedded in a preset dummy prefix is returned together with the acquired IPv6 address. When the user terminal starts communication with the dummy IPv6 address, the dummy IPv6 address is converted into an IPv4 address, and communication between the user terminal and the communication partner is relayed. At this time, a unique local IPv6 unicast address or a global IPv6 address is used as a dummy IPv6 prefix.

JP 2009-206562 A

  An object of the present invention is to provide a failure analysis system for displaying an IPv4 address obtained by reconverting an IPv6 address of a response from a WAN-side IPv4 network having a destination IPv4 terminal as a result of a command such as a trace route when executing a command such as a trace route. Is to provide.

  The failure analysis system according to the present invention includes a first IPv4-IPv6 translation device that connects a first IPv4 network and an IPv6 network, a second IPv4-IPv6 translation device that connects the IPv6 network and a second IPv4 network, and the second IPv4 network. IPv4 terminals existing above. When the first IPv4-IPv6 translation device receives the second IPv4-IPv6 translation device and the IPv4 command to the IPv4 terminal and receives a response to the IPv6 command, the first IPv4-IPv6 translation device receives the response from the second IPv4-IPv6 translation device. A means for displaying the IPv6 address as a response address as it is, and a means for converting and displaying the IPv6 address as a response address from the IPv4 terminal into an IPv4 address and clarifying the boundary between the IPv4 network and the IPv6 network To do.

  The IPv4-IPv6 translation device according to the present invention receives a command execution unit that transmits an IPv6 command to an IPv6 network and an IPv4 network, and whether a response to the IPv6 command is received from the IPv4 network. A response address determination unit that determines whether or not, and, if the response is from the IPv4 network, an address conversion unit that converts an IPv6 address into an IPv4 address, an IPv4 address after the conversion, and a response from the IPv6 network The IPv6 address is displayed as it is, and a result display unit for clarifying the boundary between the IPv4 network and the IPv6 network is provided.

  The failure analysis method according to the present invention is a failure analysis method implemented by an IPv4-IPv6 translation device, which transmits an IPv6 command to an IPv6 network and an IPv4 network and receives a response to the IPv6 command. At this time, it is determined whether or not the response is a response from the IPv4 network, and if the response is from the IPv4 network, an IPv6 address is converted into an IPv4 address, and the IPv4 address after the conversion is displayed. , Displaying the IPv6 address as a response from the IPv6 network as it is, and clarifying the boundary between the IPv4 network and the IPv6 network.

  A program according to the present invention is a program for causing an IPv4-IPv6 translation apparatus to execute the processing in the above-described failure analysis method. The program according to the present invention can be stored in a storage device or a storage medium.

  In the communication using the IPv4-IPv6 address translation device, when a trace route command or the like is executed from the IPv4-IPv6 address translation device to the IPv4 terminal via the IPv6 network, the boundary between the IPv4 network and the IPv6 network is clarified on the display, It facilitates failure analysis in a mixed IPv4 and IPv6 environment.

It is a figure which shows the structural example of the failure analysis system which concerns on this invention. It is a figure which shows the structural example of the IPv4-IPv6 conversion apparatus in this invention. It is a flowchart which shows operation | movement of the failure analysis system which concerns on this invention. It is a figure which shows the example of execution of the conventional IPv6 trace route command. It is a figure which shows the example of execution of the IPv6 trace route command by this invention. It is a figure which shows the example of execution of the conventional PING6 trace route command. It is a figure which shows the example of execution of the PING6 command by this invention.

<Embodiment>
Embodiments of the present invention will be described below with reference to the accompanying drawings.

FIG. 1 shows a configuration example of a failure analysis system according to the present invention.
The failure analysis system according to the present invention includes an IPv4 terminal 10 (10-i, i = 1 to n) and an IPv4-IPv6 translation device 20 (20-j, j = 1 to m).

  Here, description will be made using the IPv4 terminal 10-1, the IPv4 terminal 10-2, the IPv4-IPv6 translation device 20-1, and the IPv4-IPv6 translation device 20-2.

  In FIG. 1, the IPv4 terminal 10-1 is installed in a LAN (Local Area Network) side IPv4 network 100.

  The IPv4-IPv6 translation device 20-1 is installed between the LAN-side IPv4 network 100 and the WAN-side IPv6 network 150. Here, the IPv4-IPv6 translation apparatus 20-1 connects the LAN-side IPv4 network 100 and the WAN-side IPv6 network 150.

  The IPv4-IPv6 translation device 20-2 is installed between the WAN-side IPv6 network 150 and the WAN-side IPv4 network 200. Here, the IPv4-IPv6 translation apparatus 20-2 connects the WAN-side IPv6 network 150 and the WAN-side IPv4 network 200.

  The IPv4 terminal 10-2 is installed in the WAN-side IPv4 network 200. That is, the IPv4 terminal 10-2 exists on the WAN side IPv4 network 200.

  In the present invention, a display when an IPv6 command (IPv6 trace route command, PING6 command, etc.) is executed from the IPv4-IPv6 translation apparatus 20-1 of FIG. 1 to the IPv4 terminal 10-2 via the WAN-side IPv6 network 150. Intended for results.

  The IPv6 trace route command is a trace route command in which an IPv6 address is specified as a destination. The IPv6 trace route command can be used when confirming a route on the IPv6 network or a route on the destination IPv4 network via the IPv6 network.

  The PING6 command is a PING command in which an IPv6 address is specified as a destination. The PING6 command can be used when confirming communication with a destination existing on the IPv6 network or a destination existing on the destination IPv4 network via the IPv6 network.

  Here, as an IPv6 command, an IPv6 trace route command or a PING6 command will be described as an example, but it is not limited to these examples in practice.

Conventionally, in a system having such a configuration, when a trace route command is executed, a response from the WAN side IPv4 network 200 having the destination IPv4 terminal 10-2 is converted by the IPv4-IPv6 translation device 20-2 to have a translation prefix. It is converted to the assigned IPv6 address.
Therefore, even if it is actually an IPv4 address, it is displayed as an IPv6 address, so only the IPv6 address is displayed on the display, the boundary between the IPv4 network and the IPv6 network becomes unclear, and there is a failure in either the Pv6 network or the IPv4 network. It is difficult to determine the location of the failure by determining whether it has occurred.

  In the present invention, the IPv4-IPv6 translation device 20-1 re-converts the translated IPv6 address into an IPv4 address based on the above-described translation prefix, and displays the IPv4 address as a result of the trace route command.

[Configuration of IPv4-IPv6 Conversion Device]
FIG. 2 shows a configuration example of the IPv4-IPv6 translation device 20 (20-j, j = 1 to m) in the present invention.

  Each of the IPv4-IPv6 translation devices 20 (20-j, j = 1 to m) includes a destination designation unit 21, a destination determination unit 22, an FQDN (Fully Qualified Domain Name) resolution unit 23, A priority order determination unit 24, an address conversion unit 25, a command execution unit 26, a response address determination unit 27, and a result display unit 28 are provided.

  The destination designation unit 21 designates a command destination. For example, the destination designating unit 21 may designate IP addresses as destinations one by one from the top within a preset address range. The destination designation unit 21 may receive the designation of the destination from the IPv4 terminal 10 in the same network.

  The destination determination unit 22 determines a specified destination. Here, the destination determination unit 22 determines whether the designated destination is an IPv4 address, an IPv6 address, or a domain name.

  The FQDN resolution unit 23 performs destination name resolution. Here, when the destination is a domain name, the FQDN resolution unit 23 expresses the domain name in FQDN, inquires a DNS (Domain Name System) server or the like, and acquires an IP address corresponding to the FQDN.

  Note that when both the IPv4 address and the IPv6 address are obtained as a result of the name resolution, the FQDN resolution unit 23 inquires of the priority order determination unit 24 about the priority order. At this time, when only one of the IPv4 address and the IPv6 address is obtained, the FQDN resolution unit 23 adopts the obtained address regardless of the priority order. 24 may not be inquired about the priority order.

  The priority order determination unit 24 determines the priority order of which of the IPv4 address and IPv6 address is prioritized, and adopts the higher priority order as the destination.

  The address conversion unit 25 converts the IPv4 address and the IPv6 address into each other.

  The address translation unit 25 includes an IPv4 → IPv6 translation unit 251 and an IPv6 → IPv4 translation unit 252.

  The IPv4 → IPv6 conversion unit 251 performs processing for converting an IPv4 address into an IPv6 address.

  The IPv6 → IPv4 conversion unit 252 performs processing for converting an IPv6 address into an IPv4 address.

  The command execution unit 26 executes an IPv6 command and transmits a packet to a designated destination.

  The command execution unit 26 includes an IPv6 trace route command execution unit 261 and a PING6 command execution unit 262.

  The IPv6 trace route command execution unit 261 executes an IPv6 trace route command and performs a trace route in the IPv6 network.

  The PING6 command execution unit 262 executes the PING6 command and confirms network communication with the destination in the IPv6 network.

  The response address determination unit 27 receives a response packet and determines whether the received packet is a response from the IPv6 network or a response from the IPv4 network.

  The result display unit 28 displays the result of the executed command. The result display unit 28 notifies the result of the executed command to the IPv4 terminal 10 (10-i, i = 1 to n) and displays it on the IPv4 terminal 10 (10-i, i = 1 to n) side. You may make it do.

[Hardware example]
As an example of the IPv4 terminal 10 (10-i, i = 1 to n), a computer such as a PC (personal computer), an appliance, a workstation, a mainframe, and a supercomputer is assumed. Other examples include mobile phones, smartphones, smart books, car navigation systems (car navigation systems), portable game consoles, home game consoles, portable music players, handy terminals, gadgets (electronic devices), interactive TVs, and digital tuners. Digital recorders, information home appliances, OA (Office Automation) devices, and the like are also conceivable. The IPv4 terminal 10 (10-i, i = 1 to n) may be a virtual machine (VM: Virtual Machine) constructed on a physical machine. The IPv4 terminal 10 (10-i, i = 1 to n) may be mounted on a moving body such as a vehicle, a ship, or an aircraft.

  As an example of the IPv4-IPv6 conversion device 20 (20-j, j = 1 to m), a relay device or an intermediate device is assumed. Examples of relay devices and intermediate devices include network switches, routers, proxies, gateways, firewalls, load balancers, bandwidth control devices, security monitoring control devices, base stations, access points Etc. are considered. The IPv4-IPv6 translation device 20 (20-j, j = 1 to m) may be the above-described computer or the like.

  The IPv4 terminal 10 (10-i, i = 1 to n) and the IPv4-IPv6 translation device 20 (20-j, j = 1 to m) as described above are driven based on a program and execute predetermined processing. This is realized by a processor, a memory for storing the program and various data, and an interface used for communication with a network.

  Examples of the processor include a CPU (Central Processing Unit), a network processor (NP), a microprocessor, a microcontroller, or a semiconductor integrated circuit (IC: Integrated Circuit) having a dedicated function. Conceivable.

  Examples of the memory include semiconductor storage devices such as a RAM (Random Access Memory), a ROM (Read Only Memory), an EEPROM (Electrically Erasable and Programmable Read Only Memory), a flash memory, and an HDD (Hold SMD). An auxiliary storage device such as State Drive), a removable disk such as a DVD (Digital Versatile Disk), a storage medium such as an SD memory card (Secure Digital memory card), or the like is conceivable. A register may also be used. Alternatively, DAS (Direct Attached Storage), FC-SAN (Fibre Channel-Storage Area Network), NAS (Network Attached Storage), IP-SAN (IP-Storage Area), etc. may be used.

  Note that the processor and the memory may be integrated. For example, in recent years, a single chip such as a microcomputer has been developed. Therefore, the case where the 1-chip microcomputer mounted in an electronic device etc. is equipped with a processor and memory can be considered.

  Examples of the interfaces include semiconductor integrated circuits such as substrates (motherboards and I / O boards) and chips that support network communication, network adapters such as NIC (Network Interface Card), and similar expansion cards and communication devices such as antennas. A communication port such as a connection port (connector) is conceivable.

  Examples of the network include the Internet, a LAN (Local Area Network), a wireless LAN (Wireless LAN), a WAN (Wide Area Network), a backbone (Backbone), a cable television (CATV) line, a fixed telephone network, a mobile phone network, WiMAX (IEEE 802.16a), 3G (3rd Generation), dedicated line (lease line), IrDA (Infrared Data Association), Bluetooth (registered trademark), serial communication line, data bus, and the like can be considered.

  In addition, each part (internal structure) in the IPv4-IPv6 conversion apparatus 20 (20-j, j = 1 to m) is a module, a component, a dedicated device, or an activation (calling) program thereof. But it ’s okay.

  However, actually, it is not limited to these examples.

[Failure analysis processing]
FIG. 3 shows the operation (failure analysis processing) of the failure analysis system according to the present invention.

(1) Step S101
The destination designation unit 21 designates a destination. For example, the destination designating unit 21 designates the destination of an IPv6 command (IPv6 trace route command, PING6 command, etc.) using an IP address or a domain name.

(2) Step S102
The destination determination unit 22 determines a destination and determines whether or not the destination is specified by a domain name. That is, the destination determination unit 22 determines whether the destination is specified by a domain name or an IP address.

  Here, the destination determination unit 22 activates / executes the FQDN resolution unit 23 when the destination is specified by the domain name (Yes in step S102). That is, the process proceeds from the process of the destination determination unit 22 (step S102) to the process of the FQDN resolution unit 23 (step S104).

  Further, when the destination is not specified by the domain name (No in step S102), the destination determining unit 22 determines that the destination is specified by the IP address, and proceeds to the process of determining the type of the IP address (step S103). To do.

(3) Step S103
The destination determination unit 22 determines whether a destination is specified by an IPv4 address. Here, the destination determination unit 22 determines whether the destination is specified by an IPv4 address or an IPv6 address.

  Here, the destination determination unit 22 activates / executes the address conversion unit 25 when the destination is designated by the IPv4 address (Yes in Step S103). That is, the process proceeds from the process of the destination determination unit 22 (step S103) to the process of the address conversion unit 25 (step S107).

  Also, the destination determination unit 22 activates / executes the command execution unit 26 when the destination is specified by the IPv6 address (No in step S103). That is, the process proceeds from the process of the destination determination unit 22 (step S103) to the process of the command execution unit 26 (step S108).

(4) Step S104
The FQDN resolution unit 23 requests name resolution of the destination domain. For example, the FQDN resolution unit 23 issues a name resolution request for both the IPv4 address and the IPv6 address for the destination domain.

(5) Step S105
The FQDN resolution unit 23 determines the result of name resolution. For example, the FQDN resolution unit 23 determines whether name resolution has succeeded or failed.

  Here, the FQDN resolution unit 23 ends the process when the name resolution fails (No in step S105).

  Further, the FQDN resolution unit 23 activates / executes the priority order determination unit 24 when the name resolution is successful (Yes in step S105). That is, the process proceeds from the process of the FQDN resolution unit 23 (step S105) to the process of the priority order determination unit 24 (step S106).

(6) Step S106
The priority order determination unit 24 determines the priority order of which of the IPv4 address and the IPv6 address is given priority as the destination obtained by the FQDN resolution unit 23. For example, when both the IPv4 address and the IPv6 address are received as a response to the name resolution request, the priority order determination unit 24 determines whether to give priority to the destination of the IPv4 address.

  Here, the priority order determination unit 24 activates / executes the address conversion unit 25 when giving priority to the IPv4 address (Yes in step S106). That is, the process proceeds from the process of the priority determining unit 24 (step S106) to the process of the address converting unit 25 (step S107).

  Further, the priority determination unit 24 activates / executes the command execution unit 26 when the IPv6 address is prioritized (No in step S106). That is, the process proceeds from the process of the priority determining unit 24 (step S106) to the process of the command execution unit 26 (step S108).

(7) Step S107
The address translation unit 25 translates the destination IPv4 address into an IPv6 address based on the translation prefix set in the IPv4-IPv6 translation apparatus 20.

(8) Step S108
The command execution unit 26 executes an IPv6 command (such as an IPv6 trace route command or a PING6 command) to the destination.

(9) Step S109
The response address determination unit 27 receives a response to the IPv6 command from the destination of the IPv6 command (IPv6 trace route command, PING6 command, etc.) and a route on the way, and determines whether the response is from the IPv4 network. For example, the response address determination unit 27 refers to the response address (response transmission source address) and determines whether the address corresponding to the prefix length from the head matches the conversion prefix. Since the response address is a response to the IPv6 command, it is displayed as an IPv6 address.

  Here, when the address corresponding to the prefix length from the top matches the prefix for conversion, the response address determination unit 27 determines that the response is from the IPv4 network (Yes in step S109), and activates the IPv6 → IPv4 conversion unit 252. Run. That is, the process proceeds from the process of the response address determination unit (step S109) to the process of the address conversion unit 25 (step S110).

  If the address corresponding to the prefix length from the beginning does not match the translation prefix, the response address determination unit 27 determines that the response is from the IPv6 network (No in step S109), and activates / executes the result display unit 28. That is, the process proceeds from the process of the response address determination unit (step S109) to the process of the result display unit 28 (step S111).

(10) Step S110
The address translation unit 25 translates the response address from the IPv6 address to the IPv4 address based on the translation prefix set in the IPv4-IPv6 translation device 20.

(11) Step S111
The result display unit 28 displays the response from the IPv4 network as an IPv4 address and the response from the IPv6 network as a Pv6 address as a command execution result.

  In the present invention, the IPv4-IPv6 translation device 20-1 transmits an IPv6 command (IPv6 trace route command, PING6 command, etc.) to the IPv4-IPv6 translation device 20-2 and the IPv4 terminal 10-2, and the IPv6 command A response to is received. At this time, the IPv4-IPv6 translation device 20-1 displays the IPv6 address, which is the response address from the IPv4-IPv6 translation device 20-2, as it is. Further, the IPv4-IPv6 translation device 20-1 converts the IPv6 address, which is a response address from the IPv4 terminal 10-2, into an IPv4 address and displays it. Thereby, the IPv4-IPv6 translation apparatus 20-1 clarifies the boundary between the IPv4 network and the IPv6 network.

[Comparison of Conventional Example and Example of the Present Invention (IPv6 Traceroute Command)]
Hereinafter, an IPv6 trace route command (in this case, expressed as “traceroute6”) will be described by comparing a conventional example and an example of the present invention.

[Execution example of conventional IPv6 trace route command]
FIG. 4 shows an execution example of a conventional IPv6 trace route command.

  In FIG. 4, the IPv4-IPv6 translation apparatus 20 executes an IPv6 trace route command from the LAN-side IPv4 network 100 to the WAN-side IPv4 network 200 via the WAN-side IPv6 network 150. However, all the execution results are IPv6 addresses. It is displayed in.

  In FIG. 4, the response from the IPv4 network is actually received from the response (2400: 3000: 1000: 6464 :: d2ab: e1a0) with the hop count “10” (hop = 10) when the IPv6 trace route command is executed. However, only the IPv6 address is displayed as the execution result.

  For this reason, it is difficult to determine whether the response is from the IPv6 network or from the IPv4 network.

[Execution example of IPv6 trace route command according to the present invention]
FIG. 5 shows an execution example of the IPv6 trace route command according to the present invention.

  In FIG. 5, the same IPv4-IPv6 translation apparatus 20 as in FIG. 4 executes an IPv6 trace route command from the LAN side IPv4 network 100 to the WAN side IPv4 network 200 via the WAN side IPv6 network 150. In the middle of the display, an IPv4 address is displayed.

  In FIG. 5, the IPv4 address is displayed from the response (210.711.2225.160) of the hop count “10” (hop = 10) when the IPv6 trace route command is executed, and the boundary between the IPv4 network and the IPv6 network is indicated. Clarified.

  Both FIG. 4 and FIG. 5 are examples in which “2400: 3000: 1000: 6464 :: / 64” is used as a conversion prefix. In FIG. 5, the prefix length (in this case, 64 bits) is used. ), And if it matches the conversion prefix, conversion from the IPv6 address to the IPv4 address is performed.

  For example, the response (2400: 3000: 1000: 6464 :: d2ab: e1a0) with the hop count “10” (hop = 10) in FIG. 4 is converted into the conversion prefix (2400: 3000: 1000: 6464: : / 64) is removed and the address (210.711.2225.160) is displayed in decimal with the lower 4 bytes.

[Comparison of Conventional Example and Example of the Present Invention (PING6 Command)]
Hereinafter, a PING6 command (in this case, expressed as “PING6”) will be described by comparing a conventional example and an example of the present invention.

[Execution example of conventional PING6 command]
FIG. 6 shows an execution example of a conventional PING6 command.

  In FIG. 6, the IPv4-IPv6 translation apparatus 20 executes the PING6 command from the LAN-side IPv4 network 100 to the WAN-side IPv4 network 200 via the WAN-side IPv6 network 150, but the execution results are all for IPv6 addresses. It is displayed.

  In FIG. 6, the response when executing the PING6 command is actually a response from the IPv4 network, but the execution result is displayed only for the IPv6 address.

  For this reason, it is difficult to determine whether the response is from the IPv6 network or from the IPv4 network.

[Execution example of PING6 command according to the present invention]
FIG. 7 shows an execution example of the PING6 command according to the present invention.

  In FIG. 7, as in FIG. 6, the IPv4-IPv6 translation device 20 executes the PING6 command from the LAN side IPv4 network 100 to the WAN side IPv4 network 200 via the WAN side IPv6 network 150.

  In FIG. 7, the response when the PING6 command is executed is displayed as an IPv4 address, and it is clarified that the response is from the IPv4 network.

[Effect of the present invention]
By using the present invention, when the IPv4-IPv6 translation apparatus executes an IPv6 command (IPv6 trace route command, PING6 command, etc.) from the IPv4 network to the IPv4 terminal via the IPv6 network, the IPv6 network and the IPv4 on the network. The boundary of the network can be clarified on the display, and failure analysis in an IPv4 / IPv6 mixed environment can be facilitated.

[Supplement]
In the above description, “IPv4” and “IPv6” may be interchanged. In this case, “IPv4” is read as “IPv6”, and “IPv6” is read as “IPv4”.

<Summary>
As described above, according to the present invention, when a trace route command (or PING6 command) is executed from an IPv4-IPv6 address translator to an IPv4 terminal via an IPv6 network in communication using the IPv4-IPv6 address translator, The feature is that the boundary between the IPv4 network and the IPv6 network is clarified above, and the failure analysis in the IPv4 / IPv6 mixed environment is facilitated.

  In the present invention, when executing the trace route command (or PING6 command), the IPv4-IPv6 translation device translates a response from the WAN-side IPv4 network 200 having the destination IPv4 terminal into an IPv6 address to which a translation prefix is assigned.

  Further, the IPv4-IPv6 translation device displays the IPv4 address obtained by re-transforming the IPv6 address translated based on the translation prefix as a result of the trace route command (or PING6 command).

  As a result, the response from the IPv6 network is displayed as an IPv6 address, and the response from the IPv4 network is displayed as an IPv4 address. Therefore, when a trace route command (or PING6 command) is executed in a mixed IPv6 and IPv4 environment, the IPv6 network And the IPv4 network boundary are clarified, and analysis at the time of failure is easy.

  In the present invention, when the IPv4-IPv6 translation apparatus executes a trace route command (or PING6 command) from the IPv4 network to the IPv4 terminal via the IPv6 network, the boundary between the IPv6 network and the IPv4 network on the network is displayed. Clarified.

  In the present invention, when the IPv4-IPv6 translation apparatus performs PING from the IPv4 network to the IPv4 terminal via the IPv6 network, it is clarified from the display that the response is from the IPv4 terminal.

  In the present invention, the response display from the IPv4 network and the IPv6 network is clarified when communication is performed in an IPv4 and IPv6 mixed environment regardless of the type of application.

  In the present invention, when performing FQDN name resolution, it is possible to select which of the resolution results of the IPv4 address or the IPv6 address has priority.

<Remarks>
As mentioned above, although embodiment of this invention was explained in full detail, actually, it is not restricted to said embodiment, Even if there is a change of the range which does not deviate from the summary of this invention, it is included in this invention.

DESCRIPTION OF SYMBOLS 10 ... IPv4 terminal 20 ... IPv4-IPv6 conversion apparatus 21 ... Destination designation | designated part 22 ... Destination determination part 23 ... FQDN (Fully Qualified Domain Name) resolution part 24 ... Precedence determination part 25 ... Address conversion part 251 ... IPv4 → IPv6 conversion unit 252 ... IPv6 → IPv4 conversion unit 26 ... Command execution unit 261 ... IPv6 trace route command execution unit 262 ... PING6 command execution unit 27 ... Response address determination unit 28 ... Result display unit 100 ... LAN side IPv4 network 150 ... WAN side IPv6 network 200 ... WAN side IPv4 network

Claims (10)

A first IPv4-IPv6 translation device for connecting the first IPv4 network and the IPv6 network;
A second IPv4-IPv6 translation device for connecting the IPv6 network and the second IPv4 network;
An IPv4 terminal existing on the second IPv4 network,
The first IPv4-IPv6 translation device is:
Means for transmitting an IPv6 command to the second IPv4-IPv6 translation device and the IPv4 terminal;
Means for directly displaying an IPv6 address that is a response address from the second IPv4-IPv6 translation device when a response to the IPv6 command is received;
A failure analysis system comprising: means for converting and displaying an IPv6 address, which is a response address from the IPv4 terminal, into an IPv4 address, and clarifying a boundary between the IPv4 network and the IPv6 network. The failure analysis system according to claim 1,
The first IPv4-IPv6 translation device is:
Means for determining whether the destination is specified by a domain name, an IPv4 address, or an IPv6 address when transmitting the IPv6 command;
If the destination is specified by a domain name, means for requesting name resolution for the domain name;
Means for determining which of the IPv4 address and the IPv6 address should be given priority when both an IPv4 address and an IPv6 address are obtained as a response to the name resolution request;
When the destination is specified by an IPv4 address, the IPv4 address is converted into an IPv6 address based on the conversion prefix, and an IPv6 command is transmitted to the converted IPv6 address;
A failure analysis system further comprising means for transmitting an IPv6 command to the IPv6 address when the destination is designated by an IPv6 address. The failure analysis system according to claim 1 or 2,
The first IPv4-IPv6 translation device is:
Means for determining, when receiving a response to the IPv6 command, whether a prefix length address from the top of the response address matches a translation prefix;
Means for determining that the response from the IPv6 network is a response from the IPv6 network when the address for the prefix length from the top of the response address does not match the prefix for translation, and displaying the IPv6 address as it is;
A failure analysis system further comprising: means for determining that the response from the IPv4 network is a response from the IPv4 network when the address corresponding to the prefix length from the top of the response address matches the prefix for conversion, and converting the IPv6 address to an IPv4 address and displaying the response. A command execution unit for transmitting an IPv6 command to the IPv6 network and the IPv4 network;
A response address determination unit that determines whether the response is a response from the IPv4 network when receiving a response to the IPv6 command;
If the response is a response from the IPv4 network, an address conversion unit that converts an IPv6 address included in the response into an IPv4 address;
An IPv4-IPv6 translation apparatus comprising: a result display unit for displaying the IPv4 address after the translation, displaying the IPv6 address as a response from the IPv6 network as it is, and clarifying a boundary between the IPv4 network and the IPv6 network. An IPv4-IPv6 translation device according to claim 4,
A destination determination unit that determines whether a destination is specified by a domain name, an IPv4 address, or an IPv6 address when transmitting the IPv6 command;
When the destination is specified by a domain name, an FQDN resolution unit that performs a name resolution request for the domain name;
A priority determining unit that determines which of the IPv4 address and the IPv6 address is given priority when both the IPv4 address and the IPv6 address are obtained as a response to the name resolution request;
When the destination is specified by an IPv4 address, the address conversion unit converts the IPv4 address into an IPv6 address based on the conversion prefix,
The IPv4-IPv6 translation device, wherein the command execution unit transmits an IPv6 command addressed to the translated IPv6 address, and when the destination is designated by an IPv6 address, the command execution unit transmits the IPv6 command addressed to the IPv6 address. An IPv4-IPv6 translation device according to claim 4 or 5, wherein
The response address determination unit
Means for determining, when receiving a response to the IPv6 command, whether a prefix length address from the top of the response address matches the translation prefix;
Means for determining a response from the IPv6 network when the address for the prefix length from the head of the response address does not match the translation prefix;
An IPv4-IPv6 translation device comprising means for judging that the response from the IPv4 network is a response when an address corresponding to a prefix length from the head of the response address matches a translation prefix. A failure analysis method implemented by an IPv4-IPv6 translation device,
Sending an IPv6 command to the IPv6 network and the IPv4 network;
When receiving a response to the IPv6 command, determining whether the response is a response from the IPv4 network;
When the response is a response from the IPv4 network, converting an IPv6 address included in the response to an IPv4 address;
A failure analysis method including displaying the converted IPv4 address, displaying the IPv6 address as a response from the IPv6 network as it is, and clarifying a boundary between the IPv4 network and the IPv6 network. Transmitting an IPv6 command to the IPv6 network and the IPv4 network;
When receiving a response to the IPv6 command, determining whether the response is a response from the IPv4 network;
When the response is a response from the IPv4 network, converting an IPv6 address included in the response to an IPv4 address;
Displaying the translated IPv4 address, displaying the IPv6 address as a response from the IPv6 network as it is, and causing the IPv4-IPv6 translation apparatus to execute the step of clarifying the boundary between the IPv4 network and the IPv6 network program. The program according to claim 8, wherein
Determining whether a destination is specified by a domain name, an IPv4 address, or an IPv6 address when transmitting the IPv6 command;
If the destination is specified by a domain name, requesting name resolution for the domain name; and
When both an IPv4 address and an IPv6 address are obtained as a response to the name resolution request, a step of determining which of the IPv4 address and the IPv6 address should be prioritized, and when the destination is specified by an IPv4 address, conversion Converting the IPv4 address into an IPv6 address based on the prefix for
Sending an IPv6 command to the translated IPv6 address;
A program for causing an IPv4-IPv6 translation apparatus to further execute a step of transmitting an IPv6 command to an IPv6 address when the destination is designated by an IPv6 address. The program according to claim 8 or 9, wherein
When receiving a response to the IPv6 command, determining whether an address corresponding to the prefix length from the top of the response address matches the translation prefix;
If the prefix length address from the top of the response address does not match the translation prefix, it is determined as a response from the IPv6 network and displayed as it is as an IPv6 address;
If the address corresponding to the prefix length from the top of the response address matches the prefix for conversion, it is determined that the response is from the IPv4 network, and the step of converting the IPv6 address into an IPv4 address and displaying it is further displayed on the IPv4-IPv6 translation device. A program to be executed.

Images