Netscout Systems, Inc.

Ashwani Singhal

Anil K Singhal

Narendra Byrapuram

Rajeev Nadkarni

Bruce A Kelley, Jr

Abhishek Saraswati

Paul Barrett

Bob Vogt

Bruce J Kosbab

Bruce Sweet

Bruce Kosbab

Mahesh Rajmane

Bruce Kelley

Decrypting synthetic transactions with beacon packets is provided. A probe receives, from a client device, a start beacon packet that identifies a test of a service provided by one or more servers. The probe establishes, responsive to receipt of the start beacon packet, a log for the test. The probe stores, in the log established responsive to the start beacon packet, data packets transmitted between the client device and the one or more servers subsequent to the start beacon packet and encrypted with a key using a security protocol. The probe receives, from the client device, key information used to decrypt the data packets of the test encrypted with the key using the security protocol. The probe provides at least one of the data packets for evaluation or decryption using the key information to determine a performance of the service.

Decrypting synthetic transactions with beacon packets

A network monitoring system that summarizes a plurality of data packets of a session into a compact session record for storage and processing. Each session record may be produced in real-time and made available during the session and/or after the termination of the session. Depending on protocols, a network monitoring system extracts different sets of information, removes redundant information from the plurality of data packets, and adds performance information to produce the session record. The network monitoring system may retrieve and process a single session record or multiple session records for the same or different protocols to determine cause of events, resolve issues in a network or evaluate network performance or conditions. The session record enables analysis in the units of session instead of individual packets. Hence, the network monitoring system can analyze events, issues or performance of the network more efficiently and effectively.

Real-time adaptive processing of network data packets for analysis

A network monitor that segments data packets at variable locations of data packets and stores a subset of the segments for troubleshooting or analysis. The network monitor selects data packets to be stored based on a set of user-defined classifier rules and discards other data packets. Each data packets selected for storage are analyzed up to an application protocol layer to determine start locations and/or end locations of data fields in the data packet. A set of user-defined slice rules are applied to each analyzed data packets to segment the data packets at the determined locations of the data fields. A subset of the data packet segments is stored in the network monitor. By storing relevant portions of data packets and discarding other portions of the data packets, the amount of data of data to be stored in the network monitor can be significantly reduced.

Intelligent slicing of monitored network packets for storing

Network performance data is collected, recorded, and normalized. In one embodiment, a set of first performance data collected by an agent in response to network transactions initiated by the agent and a second set of performance data resulting from passively monitoring traffic on the network are received. The first and second sets of performance data are normalized to create a set of constantly formatted network performance data capable of convenient analysis.

Real-time network performance monitoring system and related methods

Growing community of inventors

Andover, MA, United States of America

Ashwani Singhal