reference will now be made in detail to exemplary embodiments of the present invention , examples of which are illustrated in the accompanying drawings , wherein like reference numerals refer to the like elements throughout . exemplary embodiments are described below to explain the present invention by referring to the figures . fig1 is a diagram illustrating a configuration of a dynamic flow sampling apparatus 100 according to an embodiment of the present invention . referring to fig1 , the dynamic flow sampling apparatus 100 may include a traffic receiver 110 , a system monitoring unit 120 , a storage unit 130 , a flow sampling processor 140 , and a traffic transmitter 150 . the traffic receiver 110 may receive traffic of an internet network . depending on embodiments , the dynamic flow sampling apparatus 100 may be configured as a separate apparatus , and may be connected to an internet network such as a traffic splitter , and the like to receive the traffic from an apparatus for copying the traffic . the dynamic flow sampling apparatus 100 may be inserted into network equipment of the internet network such as a router , and the like in a module form to receive the traffic . the system monitoring unit 120 may collect load information about a load of the internet network . the load information may include information about at least one of a current number of flows in contrast to a maximum number of the flows to be maintained by the internet network , and a number of the packets included in the flows . depending on embodiments , the load information may include information about a load of a flow maintaining unit 160 . the storage unit 130 may store a reference value with respect to a flow sampling . the flow may be a set of packets having the same characteristic among internet network packets . the flow sampling may correspond to a scheme for sampling packets using a predetermined operation rule focusing on the flow . the reference value may correspond to a reference value with respect to a parameter associated with the internet network . for example , the reference value may correspond to a value with respect to one of a number of flows maintained by the internet network , a number of the packets included in the flows , and a size of the packet . according to an embodiment of the present invention , the dynamic flow sampling apparatus 100 may further include an input unit 170 . the input unit may receive the reference value from a user of the internet network . depending on embodiments , the storage unit 130 may store the reference value received from the input unit 170 . the flow sampling processor 140 may perform the flow sampling with respect to the packet included in the traffic received by the traffic receiver 110 , based on the load information collected in the system monitoring unit 120 and the reference value stored in the storage unit 130 . according to an embodiment of the present invention , the flow sampling processor 140 may correct the load information and information about at least one of a sampling cycle count and a sampling random probability included in the packet included in the traffic received by the traffic receiver 110 . the flow sampling processor 140 may perform the flow sampling with respect to the packet in response to the corrected information . an embodiment of performing the flow sampling by the flow sampling processor 140 will be further described with reference to fig2 to fig4 . according to an embodiment of the present invention , the input unit 170 may receive sampling information about a scheme of performing the flow sampling . the flow sampling processor 140 may perform the flow sampling with respect to the packet in response to the sampling information received by the input unit 170 . the traffic transmitter 150 may transmit the traffic with respect to the flow - sampled packet . according to an embodiment of the present invention , the dynamic flow sampling apparatus 100 may further include a flow maintaining unit 160 . the flow maintaining unit 160 may maintain the flow - sampled packet for each flow . fig2 is a diagram illustrating a flow sampling processor 210 performing a flow sampling according to an embodiment of the present invention . referring to fig2 , the flow sampling processor 210 may receive , from a system monitoring unit 220 , load information about a number of flows currently maintained by an internet network . the flow sampling processor 210 may receive a stored reference value from a storage unit 230 . the reference value may be 50 % corresponding to a reference value with respect to a rate ( percentage ) of the number of flows currently maintained by the internet network in contrast to a maximum number of the flows to be maintained by the internet network . depending on embodiments , the storage unit 230 may receive , from an input unit 240 , and store the 50 % corresponding to the reference value , and may transmit the stored reference value that is 50 % to the flow sampling processor 210 . according to an embodiment of the present invention , the flow sampling processor 210 may directly receive the reference value that is 50 % from the input unit 240 receiving the reference value from a user of the internet network . the flow sampling processor 210 may perform the flow sampling with respect to the packet included in the flow received by a dynamic flow sampling apparatus , based on load information , that is , the number of flows currently maintained by the internet network , received from the system monitoring unit 220 and the reference value that is 50 % received from the storage unit 230 or the input unit 240 . depending on embodiments , when the number of flows currently maintained by the internet network is less than 50 % of the maximum number of flows to be maintained by the internet network , the flow sampling processor 210 may generate the flows with a cycle count n set to be 100 with respect to newly generated flows . when the number of flows currently maintained by the internet network is greater than or equal to 50 % of the maximum number of flows to be maintained by the internet network , the flow sampling processor 210 may generate the flows with the cycle count n set to be 1000 with respect to the newly generated flows . an operation of performing the flow sampling by the flow sampling processor 210 may be shown as , for example , table 1 below . referring to fig3 , the flow sampling processor 310 may receive , from a system monitoring unit 320 , load information about a number of packets included in a flow . the flow sampling processor 310 may receive a stored reference value from a storage unit 330 . the reference value may be 100 corresponding to a reference value with respect to the number of packets included in the flow . depending on embodiments , the storage unit 330 may receive , from the input unit 340 , and store the reference value that is 100 , and may transmit the stored reference value of 100 to the flow sampling processor 310 . according to an embodiment of the present invention , the flow sampling processor 310 may directly receive the reference value of 100 from the input unit 340 receiving the reference value from a user of an internet network . the flow sampling processor 310 may perform the flow sampling with respect to the packet included in the traffic received by a dynamic sampling apparatus , based on the load information , that is , the number of the packets included in the flow , received from the system monitoring unit 320 , and the reference value of 100 received from the storage unit 330 or the input unit 340 . depending on embodiments , when the number of packets included in the flow is less than 100 , the flow sampling processor 310 may perform the flow sampling with a cycle count n set to be 10 with respect to the packets included in the flow . when the number of packets included in the flow is greater than or equal to 100 , the flow sampling processor 310 may perform the flow sampling with the cycle count n set to be 100 with respect to the packets included in the flow . an operation of performing the flow sampling by the flow sampling processor 310 may be shown as , for example , table 2 below . the flow sampling processor 410 may receive a stored reference value from a storage unit 430 . the reference value may be 1 megabyte ( mb ) corresponding to the reference value with respect to the size of the flow . depending on embodiments , the storage unit 430 may receive , from an input unit 440 , and store 1 mb corresponding to the reference value , and may transmit the stored reference value 1 mb to the flow sampling processor 410 . according to an embodiment of the present invention , the flow sampling processor 410 may directly receive the reference value 1 mb from the input unit 440 receiving the reference value from a user of an internet network . the flow sampling processor 410 may perform the flow sampling with respect to the packet included in the flow received by a dynamic flow sampling apparatus , based on load information that is a size of the flow , received from the system monitoring unit 420 , and the reference value that is 1 mb received from the storage unit 430 or the input unit 440 . depending on embodiments , when the size of the flow is less than 1 mb , the flow sampling processor 410 may generate the flows with a cycle count n set to be 1000 with respect to the packet included in the flow . when the size of the flow is greater than or equal to 1 mb , the flow sampling processor 410 may perform the flow sampling with cycle count n set to be 10000 with respect to the packet included in the flow . an operation of performing the flow sampling by the flow sampling processor 410 may be shown as , for example , table 3 below . the load information may include information about at least one of a current number of flows in contrast to a maximum number of the flows to be maintained by the internet network , and a number of the packets included in the flows . in operation 530 , a flow sampling may be performed with respect to a packet included in the received traffic , based on load information and a stored reference value with respect to the flow sampling . the reference value may correspond to a reference value with respect to a parameter associated with the internet network . for example , the reference value may correspond to a value with respect to one of a number of flows maintained by the internet network , a number of the packets included in the flows , and a size of the packet . according to an embodiment of the present invention , the dynamic flow sampling scheme may further include receiving the reference value . depending on embodiments , the dynamic flow sampling scheme may further include storing the received reference value . according to an embodiment of the present invention , performing the flow sampling may include correcting information about at least one of a sampling cycle count and a sampling random probability included in the packet , and performing the flow sampling with respect to the packet in response to the corrected information . according to an embodiment of the present invention , the dynamic flow sampling scheme may further include receiving sampling information about a scheme of performing the flow sampling . the flow sampling may be performed with respect to the packet in response to the received sampling information . in operation 540 , the traffic with respect to the flow - sampled packet may be transmitted . according to an embodiment of the present invention , the dynamic flow sampling scheme may further include maintaining the flow - sampled packet for each flow . the above - described exemplary embodiments of the present invention may be recorded in non - transitory computer - readable media including program instructions to implement various operations embodied by a computer . the media may also include , alone or in combination with the program instructions , data files , data structures , and the like . examples of non - transitory computer - readable media include magnetic media such as hard disks , floppy disks , and magnetic tape ; optical media such as cd rom disks and dvds ; magneto - optical media such as optical disks ; and hardware devices that are specially configured to store and perform program instructions , such as read - only memory ( rom ), random access memory ( ram ), flash memory , and the like . examples of program instructions include both machine code , such as produced by a compiler , and files containing higher level code that may be executed by the computer using an interpreter . the described hardware devices may be configured to act as one or more software modules in order to perform the operations of the above - described exemplary embodiments of the present invention , or vice versa . although a few exemplary embodiments of the present invention have been shown and described , the present invention is not limited to the described exemplary embodiments . instead , it would be appreciated by those skilled in the art that changes may be made to these exemplary embodiments without departing from the principles and spirit of the invention , the scope of which is defined by the claims and their equivalents .