公开(公告)号：US20070047438A1

公开(公告)日：2007-03-01

申请号：US11506649

申请日：2006-08-18

申请人： Patrick Malloy ,  Russell Elsner ,  John Strohm ,  Alain Cohen ,  Steven Niemczyk ,  Marc Schneider

发明人： Patrick Malloy ,  Russell Elsner ,  John Strohm ,  Alain Cohen ,  Steven Niemczyk ,  Marc Schneider

IPC分类号： H04L12/26

CPC分类号： H04L41/5067 ,  H04L41/22

摘要： Transactions within a transmission stream are identified that are related to an activity. The transactions are classified utilizing characteristics that identify the activity. Packets of the transaction are extracted from the transmission stream that corresponds to the activity. The extracted packets are presented in a visualization that identifies the packets and source and sink devices of the packets. The packets may be identified from a network trace. Classifying transactions includes identifying patterns present in packets to identify related transactions and/or packets that are temporally correlated. The characteristics may include heuristics related to a communication protocol of the transactions, examining temporal relationships of the packets, and/or identifying DNS requests related to the packets. The extracted packets may be presented as a tier pair circle wherein related devices are presented around a circumference of the tier pair circle and packet traffic between devices is indicated by a joining line.

摘要翻译： 识别与活动相关的传输流内的事务。 交易根据识别活动的特征进行分类。 从与活动相对应的传输流中提取事务的分组。 提取的分组被呈现在标识分组的分组和分组的源和宿设备的可视化中。 可以从网络迹线识别分组。 分类事务包括识别分组中存在的模式以识别与时间上相关的相关事务和/或分组。 特征可以包括与交易的通信协议相关的启发式，检查分组的时间关系和/或识别与分组相关的DNS请求。 提取的分组可以呈现为层对圆，其中相关设备围绕层对圆的周围呈现，并且设备之间的分组业务由连接线指示。

公开(公告)号：US20070140131A1

公开(公告)日：2007-06-21

申请号：US11639863

申请日：2006-12-15

申请人： Patrick Malloy ,  Alain Cohen ,  Ryan Gehl ,  John Strohm ,  Russell Elsner

发明人： Patrick Malloy ,  Alain Cohen ,  Ryan Gehl ,  John Strohm ,  Russell Elsner

IPC分类号： H04L12/26

CPC分类号： H04L43/045 ,  H04L43/026 ,  H04L43/028 ,  H04L43/062

摘要： A network monitoring system and method processes captured message data to create a plurality of categories, provides summary data corresponding to each category, and displays the categorized summary data. The categories preferably include an identification of the source node and destination node of each message, and the summary data includes the amount of traffic communicated between each pair of nodes. The display of this summary data includes a graphic display that provides a visual indication of each pair and the volume of traffic between the nodes of the pair.

摘要翻译： 网络监控系统和方法处理捕获的消息数据以创建多个类别，提供对应于每个类别的摘要数据，并显示分类的摘要数据。 类别优选地包括每个消息的源节点和目的地节点的标识，并且摘要数据包括在每对节点之间传送的业务量。 该摘要数据的显示包括图形显示器，其提供每对的可视指示和该对的节点之间的流量。

公开(公告)号：US20070067296A1

公开(公告)日：2007-03-22

申请号：US11507112

申请日：2006-08-19

申请人： Patrick Malloy ,  Dana Znamova ,  Alain Cohen ,  Antoine Dunn ,  John Strohm ,  Abbas Ali ,  Russell Elsner

发明人： Patrick Malloy ,  Dana Znamova ,  Alain Cohen ,  Antoine Dunn ,  John Strohm ,  Abbas Ali ,  Russell Elsner

IPC分类号： G06F17/30 ,  G06F7/00

CPC分类号： H04L41/145 ,  H04L41/22

摘要： Data representing application deployment attributes, network topology, and network performance attributes based on a reduced set of element attributes is utilized to simulate application deployment. The data may be received from a user directly, a program that models a network topology or application behavior, and a wizard that implies the data based on an interview process. The simulation may be based on application deployment attributes including application traffic pattern, application message sizes, network topology, and network performance attributes. The element attributes may be determined from a lookup table of element operating characteristics that may contain element maximum and minimum boundary operating values utilized to interpolate other operating conditions. Application response time may be derived using an iterative analysis based on multiple instances of one or more applications wherein a predetermined number of iterations is used or until a substantially steady state of network performance is achieved.

摘要翻译： 利用表示应用程序部署属性，网络拓扑和基于简化的元素属性集合的网络性能属性的数据来​​模拟应用程序部署。 可以直接从用户接收数据，对网络拓扑或应用行为进行建模的程序，以及基于访问过程暗示数据的向导。 模拟可以基于应用部署属性，包括应用流量模式，应用消息大小，网络拓扑和网络性能属性。 可以从可能包含用于内插其他操作条件的元件最大和最小边界操作值的元件操作特性的查找表来确定元素属性。 可以使用基于一个或多个应用的​​多个实例的迭代分析来导出应用响应时间，其中使用预定数量的迭代，或直到达到基本稳定的网络性能状态。

公开(公告)号：US20060190231A1

公开(公告)日：2006-08-24

申请号：US11358538

申请日：2006-02-21

申请人： Patrick Malloy ,  Mahesh Lavannis ,  Marc Schneider ,  John Strohm ,  Alain Cohen ,  Sukanya Sreshta ,  Jerome Plun ,  Stephen Pendleton

发明人： Patrick Malloy ,  Mahesh Lavannis ,  Marc Schneider ,  John Strohm ,  Alain Cohen ,  Sukanya Sreshta ,  Jerome Plun ,  Stephen Pendleton

IPC分类号： G06F17/50

CPC分类号： G06F17/5009 ,  G06F2217/10 ,  H04W16/22

摘要： Performance metrics related to the processing and propagation of messages related to select applications are collected during a simulation of a network. Each message associated with an application is tagged, and each simulated packet that contains some or all of a tagged message is correspondingly tagged to facilitate the creation of transmit records and receive records. A post processor is configured to collate transmit and receive records of each tagged message to identify delays associated with each node that processes the message, and each link that propagates the message from node to node within the network. The processed timing information is provided to the user via an interactive user interface that allows the user to view the timing information from an application layer perspective.

公开(公告)号：US20060190236A1

公开(公告)日：2006-08-24

申请号：US11358536

申请日：2006-02-21

申请人： Patrick Malloy ,  Alain Cohen ,  William Bardon ,  Antoine Dunn ,  Ryan Gehl ,  Nishant Gupta ,  Mahesh Lavannis ,  John Strohm ,  Prasanna Sukumar

发明人： Patrick Malloy ,  Alain Cohen ,  William Bardon ,  Antoine Dunn ,  Ryan Gehl ,  Nishant Gupta ,  Mahesh Lavannis ,  John Strohm ,  Prasanna Sukumar

IPC分类号： G06F13/10 ,  G06F9/45

CPC分类号： H04L41/145 ,  H04L41/22

摘要： A user interface to a network simulator facilitates the use of application layer parameters and application layer logic. The user interface is configured to allow the user to define the input in a graphic form, or a text/programming form, or a combination of both. Preferably, the user interface provides common graphic forms for both inputting the data to the simulator as well as for displaying the resultant data from the simulator, thereby easing the progression from the analysis of output from one simulation to the generation of new input for a subsequent simulation.

摘要翻译： 到网络仿真器的用户界面有利于应用层参数和应用层逻辑的使用。 用户界面被配置为允许用户以图形形式或文本/编程形式或两者的组合来定义输入。 优选地，用户界面提供用于将数据输入到模拟器以及用于显示来自模拟器的结果数据的公共图形形式，从而缓解从一个模拟的输出分析到后续的新输入的生成的进展 模拟。

公开(公告)号：US08990061B2

公开(公告)日：2015-03-24

申请号：US11358538

申请日：2006-02-21

申请人： Patrick J. Malloy ,  Mahesh Lavannis ,  Marc Schneider ,  John Strohm ,  Alain Cohen ,  Sukanya Sreshta ,  Jerome Plun ,  Stephen Pendleton

发明人： Patrick J. Malloy ,  Mahesh Lavannis ,  Marc Schneider ,  John Strohm ,  Alain Cohen ,  Sukanya Sreshta ,  Jerome Plun ,  Stephen Pendleton

IPC分类号： G06F9/44 ,  G06F17/50 ,  H04W16/22

CPC分类号： G06F17/5009 ,  G06F2217/10 ,  H04W16/22

摘要： Performance metrics related to the processing and propagation of messages related to select applications are collected during a simulation of a network. Each message associated with an application is tagged, and each simulated packet that contains some or all of a tagged message is correspondingly tagged to facilitate the creation of transmit records and receive records. A post processor is configured to collate transmit and receive records of each tagged message to identify delays associated with each node that processes the message, and each link that propagates the message from node to node within the network. The processed timing information is provided to the user via an interactive user interface that allows the user to view the timing information from an application layer perspective.

摘要翻译： 在网络仿真期间收集与选择应用相关的消息的处理和传播相关的性能指标。 与应用相关联的每个消息被标记，并且包含部分或全部标签消息的每个模拟分组被相应地标记，以便于创建发送记录和接收记录。 后处理器被配置为对发送和接收每个被标记的消息的记录进行整理，以识别与处理消息的每个节点相关联的延迟，以及在网络中从节点传播消息的每个链路。 经处理的定时信息经由允许用户从应用层角度来观看定时信息的交互式用户界面提供给用户。

公开(公告)号：US20070028142A1

公开(公告)日：2007-02-01

申请号：US11397359

申请日：2006-04-04

申请人： Russell Elsner ,  John Strohm ,  Michael Canney

发明人： Russell Elsner ,  John Strohm ,  Michael Canney

IPC分类号： G06F11/00

CPC分类号： H04L43/0852 ,  H04L43/045 ,  H04L67/36

摘要： A graphic user interface facilitates the hierarchical analysis of timing parameters related to network-based applications. At the top level of the hierarchy, the user is presented a summary of the delays incurred while running an application, or while simulating the running of an application, organized by delay categories, including processing delays at each node, as well as propagation delays at each link between nodes. The interface enables a user to “drill down” into lower levels of the timing information hierarchy by ‘clicking’ on currently displayed information. The information is presented in a form most appropriate to the level of analysis. The presentation forms include, for example, pie-charts, multi-variable timing diagrams (in both absolute and relative forms), data exchange charts, and so on, and ‘zoom’ capabilities are provided as appropriate to the particular display form.

摘要翻译： 图形用户界面便于与基于网络的应用相关的定时参数的分层分析。 在层次结构的顶层，用户被呈现在运行应用程序时产生的延迟，或模拟应用程序的运行情况的总结，这些延迟类别包括延迟类别，包括每个节点的处理延迟，以及传播延迟 节点之间的每个链接。 该接口使用户能够通过“点击”当前显示的信息“向下钻取”到较低级别的定时信息层级。 信息以最适合于分析水平的形式呈现。 演示表格包括例如饼图，多变量时序图（绝对和相对形式），数据交换图表等，并且适当地提供特定显示形式的“缩放”能力。

公开(公告)号：US20080016056A1

公开(公告)日：2008-01-17

申请号：US11776708

申请日：2007-07-12

申请人： Patrick MALLOY ,  John McNicholas ,  John Strohm ,  Antoine Dunn

发明人： Patrick MALLOY ,  John McNicholas ,  John Strohm ,  Antoine Dunn

IPC分类号： G06F7/06 ,  G06F17/30 ,  G06F15/16 ,  G06F15/173

CPC分类号： H04L41/5009 ,  H04L41/22 ,  H04L41/5035 ,  H04L41/5067

摘要： A method of identifying differences between activity data files includes determining a difference between the activity data files. Causal analysis may be performed to identify a cause of the difference. The difference and/or the cause of the difference may be rendered based on a rendering template. Tier pairs between the activity data files may be matched and a user may be queried to confirm the tier pair match. Statistical and/or protocol differences between each of the activity files may be presented. Transactions between each of the activity data files may be matched including comparing the content files in each of the activity data files that account for the transactions. Client side differences between each of the activity data files may be identified. A categorization may be assigned to each of the determined differences. Determined differences may be excluded from the rendering.

摘要翻译： 识别活动数据文件之间的差异的方法包括确定活动数据文件之间的差异。 可以进行因果分析以识别差异的原因。 可以基于渲染模板来呈现差异的差异和/或原因。 可以匹配活动数据文件之间的层对，并且可以查询用户以确认层对匹配。 可以呈现每个活动文件之间的统计和/或协议差异。 可以匹配每个活动数据文件之间的交易，包括比较交易中的每个活动数据文件中的内容文件。 可以识别每个活动数据文件之间的客户端差异。 可以将分类分配给每个确定的差异。 确定的差异可能会从渲染中排除。

公开(公告)号：US20070217343A1

公开(公告)日：2007-09-20

申请号：US11752283

申请日：2007-05-22

申请人： Dana Znamova ,  Patrick Malloy ,  John Strohm

发明人： Dana Znamova ,  Patrick Malloy ,  John Strohm

IPC分类号： H04J1/16 ,  H04J3/06

CPC分类号： H04J3/0682 ,  H04L41/00 ,  H04L41/147 ,  H04L43/0864

摘要： Time-varying latency is estimated based on the round-trip time between the time of sending a message and the time of receiving an acknowledgement of receipt of the message. The round-trip time relative to a transmitter is modeled as a combination of known, or determinable, delays, plus an unknown latency, plus a processing/acknowledgement delay at the receiver. The estimated time-varying latency is further refined to give more weight to estimates based on fewer unknowns or a lesser magnitude of unknowns, and to impose physical constraints, such as assuring that the estimate does not imply an unrealizable event. TCP-specific constraints and assumptions are also applied to further refine the latency estimates.

摘要翻译： 基于在发送消息的时间与接收确认接收到消息的时间之间的往返时间来估计时变等待时间。 相对于发射机的往返时间被建模为已知或可确定的延迟的组合，加上未知等待时间，加上接收机处理/确认延迟。 估计的时变延迟被进一步改进，以便基于较少的未知数或较小的未知数估计更多的权重，并施加物理约束，例如确保估计不意味着不可实现的事件。 TCP特定的约束和假设也被应用于进一步改进延迟估计。

公开(公告)号：US20070214206A1

公开(公告)日：2007-09-13

申请号：US11678595

申请日：2007-02-24

申请人： Patrick Malloy ,  Antoine Dunn ,  John Strohm ,  Steve Niemczyk

发明人： Patrick Malloy ,  Antoine Dunn ,  John Strohm ,  Steve Niemczyk

IPC分类号： G06F15/16 ,  G06F15/173

CPC分类号： H04L43/10 ,  H04L41/22 ,  H04L43/045

摘要： A network analysis system provides for a user-definable display of information related to messages communicated on the network. The network analysis system includes one or more display formats that provide a display of message exchanges between nodes of a network, and a display augmenter that provides additional information on the display based on a user-defined visualization. The user defined visualization includes augmenting the display based on user-defined coloring characteristics and/or augmenting the display with user-defined labels. To further facilitate user control of the augmentation of the display, the system accepts user-defined programs for discriminating among messages, for controlling the labeling of messages, and for controlling the coloring of messages and labels. Commonly used user-defined characteristics and labels are stored in a library, for use via a selection from among the library entries.

摘要翻译： 网络分析系统提供与在网络上传送的消息有关的信息的用户可定义的显示。 网络分析系统包括提供网络节点之间的消息交换的显示的一个或多个显示格式，以及基于用户定义的可视化来在显示器上提供附加信息的显示增强器。 用户定义的可视化包括基于用户定义的着色特征增强显示和/或用用户定义的标签来增加显示。 为了进一步促进用户对显示器增加的控制，系统接受用户定义的程序，用于区分消息，用于控制消息的标注，以及控制消息和标签的着色。 通常使用的用户定义的特征和标签存储在库中，以便通过库条目中的选择使用。