Devices and methods may allow for a first process associated with a probe process to receive a message transmitted across a network from a second process, the message including data and an identifier for the second process. The probe process may transmit identifiers for the first and second process to a server. A server may receive a message from a probe process including entity identifiers, and update a record recording a connection between the entities.