Sqlstream, Inc.

Amdocs (israel) Ltd.

Other

Xacct Technologies, Ltd.

Damian Black

Tal Givoly

Limor Schweitzer

Ori Kushnir

Methods for processing streaming data records are provided that include facilities for defining and naming multiple input and output data streams using relational processing definitions and abstractions similar to those found in relational database management systems (RDBMS) and embodied as a set of communicating stream processing nodes. The result is a Distributed Data Stream Management System (DDSMS) which is also a kind of Relational Data Stream Management System (RDSMS). The former comprises a set of Relational Data Stream Management System (RDSMS) nodes, whereas the latter might contain only a single RDSMS node.

Method for distributed RDSMS

Distributed Data Stream Management System (DDSMS) and the optimization strategies and capabilities enabled therein, and embodiments of its stream processing nodes are provided. Data recovery both from local buffered data and through recursive recovery are possible.

A method and potential embodiment for processing streaming data records is described which provides facilities for defining and naming multiple input and output data streams using relational processing definitions and abstractions similar to those found in relational database management systems (RDBMS) and embodied as a set of communicating stream processing nodes. The result is a Distributed Data Stream Management System (DDSMS) which is also a kind of Relational Data Stream Management System (RDSMS). The former comprises a set of Relational Data Stream Management System (RDSMS) nodes, whereas the latter might contain only a single RDSMS node. A unique combination of the method, means, capabilities, interfaces to and potential embodiments of its constituent elements, work together to provide a seamless and complete DDSMS, and in the optimization strategies and capabilities enabled therein, and in the method, means and embodiments of its stream processing nodes.

A method and apparatus for reconstructing sessions on a network is described. The method allows for monitoring of quality of service at an application level as well as for understanding application specific events. This allows the method to be used to generate service detail records for usage based on application type for use in billing. It also allows the qualitative and quantitative analysis of quality of service based on application specific parameters. For example, for web applications, quality of service can be measured by the time from requesting a link till the close of the session by delivery of the whole page. Similarly, for voice over IP calls, application events like adding participants and removing participants can be detected and billed accordingly. Also, the quality of service can be measured. For example, the actual latency can be compared to a predetermined latency amount set by a provider for voice over IP calls. Additionally, service detail records can be generated based on application specific events instead of generic flows, so usage billing can be performed based on factors such as a price per minute per leg, etc, with application specific events generated each time a leg is added or dropped. Further, because the periodicity of the output can be controlled on a per application basis, output for voice over IP calls can be generated more often than for other applications. Additionally, embodiments of the invention can reconstruct sessions that are flowing across multiple network devices.

Method and apparatus for session reconstruction

Methods and products for processing streams of data records using at least one data stream processing program executing on at least one data processing device and communicating with one another through data communication interfaces to form a network of data stream processing programs. In at least one embodiment, a method includes holding and maintaining information to record a configuration history, processing streams of data records with a plurality of data stream processing programs together functioning as a stream processing system, receiving input streams of data records by the data stream processing programs over the data communication interfaces, sending output streams of data records by the data stream processing programs over the data communication interfaces, and interoperating internal data producer/publisher programs with internal data consumer/producer programs in accordance with a current configuration in order to perform the sending and receiving.

A method for network performance and server application performance monitoring in at least one of the probes in a system having one or more distributed probes and one or more analyzers coupled to a network is disclosed. Configuration information is installed into one or more of the probes. The arrival at the probe of a flow instance of interest is detected based on the configuration information. The probe determines whether arriving flow instance is a new flow instance. If the arriving flow instance is a new flow instance, a state associated with the flow instance is established with the probe. The probe captures relevant information associated with the flow instance and it is determined whether an end of the flow has been reached. Flow monitoring continues until the end of the flow has been reached.

System and method for network performance and server application performance monitoring and for deriving exhaustive performance metrics

A system, method and computer program product are provided for policy-based billing for a network session. Initially, a plurality of packets is received by a plurality of analyzers. Thereafter, the packets are aggregated. Next, the plurality of packets is analyzed to identify a plurality of flows and an session associated with the flows. At least one application associated with the session is also identified. The session is then reconstructed utilizing the identified application. A user associated with the session is then identified along with a policy. The user is then billed for the session in accordance with the policy.

System, method and computer program product for policy-based billing in a network architecture

A method and potential embodiment for processing streaming data records is described which provides facilities for defining and naming multiple input and output data streams (along with their related transformation, filtering, aggregation and other processing operations) using relational processing definitions, abstractions and techniques similar to those found in relational database management systems (RDBMS) and which is embodied as a set of communicating stream processing nodes. Whereas RDBMS process queries on a centralized processing node against historical stored data records, DDSMS process queries on distributed processing nodes against future flowing data records. The result is a Distributed Data Stream Management System (DDSMS) comprising a set of relational stream processing nodes that work and communicate together in concert to perform useful distributed data processing for a variety of applications such as service monitoring, alerting, message brokering and other applications.

A method and apparatus for reconstructing a session using a first analyzer coupled to a second analyzer is provided. Session reconstruction is performed on packets received at the first analyzer. Moreover, responsive to unsuccessful session reconstruction on the first analyzer, one or more messages are sent to the second analyzer. The one or more messages from the first analyzer to the second analyzer comprise packets received by the first analyzer which are unrecognized, and the second analyzer recognizes the unrecognized packets to successfully reconstruct the session.

A method, computer program product, and apparatus for reconstructing sessions on a network are described. The method allows for monitoring of quality of service at an application level as well as for understanding application specific events. This allows the method to be used to generate service detail records for usage based on application type for use in billing. It also allows the qualitative and quantitative analysis of quality of service based on application specific parameters. For example, for voice over IP calls, application events like adding participants and removing participants can be detected and billed accordingly. Also, the quality of service can be measured. For example, the actual latency can be compared to a predetermined latency amount set by a provider for voice over IP calls. Additionally, service detail records can be generated based on application specific events instead of generic flows, so usage billing can be performed based on factors such as a price per minute per leg, etc, with application specific events generated each time a leg is added or dropped.

Method and apparatus for session reconstruction and accounting involving VoIP calls

A system, method and computer program product are provided for gathering statistics associated with a network session. Initially, a plurality of packets is received at a plurality of analyzers. Such packets are analyzed to identify a plurality of flows. Further identified are a session associated with the plurality of flows and at least one application associated with the session. The session is then reconstructed utilizing the identified application for analysis purposes. A plurality of statistics associated with the session is then gathered based on the analysis.

Growing community of inventors

San Francisco, CA, United States of America

Damian Black