Microsoft Technology Licensing, LLC

Tanium Inc.

Bluestripe Software, Inc.

David Irwin

Patrick Reynolds

John Branson Bley

Glenn Thomas Nethercutt

Aydan R Yumerefendi

Christian L Hunt

Rishi Kant

Andrew R White

Naveen Goela

Patrick A Reynolds

Jeffrey Robert King

An application mapping procedure obtains and aggregates application mapping information from a plurality of machines in a distributed system. An application dependency map, including first layer of application mapping information, is initialized, and then a first query is sent to one or more of the machines. In response, information identifying entities that have participated in predefined communications with entities identified in an existing layer of application mapping information in the application dependency map are received, and a second layer of application mapping information is added to the application dependency map, based at least in part on the information received in response to the first query. After adding the second layer of application mapping information to the application dependency map, a second query is sent to one or more of the of the endpoint machines, the second query being based at least in part on the application dependency map.

Automated mapping of multi-tier applications in a distributed system

An application mapping procedure obtains and aggregates application mapping information from a plurality of machines in a distributed system. A first layer of application mapping information is generated, identifying application entry points, each comprising a machine and a process executed by the identified machine. An application map is initialized with the first layer of application mapping information. A plurality of iterations of a predefined map gathering operation are performed, each iteration adding a layer of application mapping information to the application map, thereby producing an application map of the distributed processing of one or more respective applications. Each iteration sends queries, via one or more linear communication orbits, to machines in the distributed system, and obtains from the machines information identifying entities that have participated in predefined communications with entities identified in a most recently generated or added layer of application mapping information.

Provided are methods and computer program products for monitoring the contents of network traffic in a network device and performing correlation analysis of collected performance metrics to help identify reasons for network performance issues. Methods for correlation analysis include selecting scope and network metric types to include in the correlation analysis to generate an educated candidate set for correlation analysis. The correlation analysis methods result in a hypothesis set that assist the operator in identifying transactions and infrastructure problems resulting in network performance degradation.

Methods and computer program products for correlation analysis of network traffic in a network device

Provided are methods and computer program products for analyzing and tracing the contents of network traffic in a network device and to help identify network performance issues. Methods for analyzing traffic include identifying thread identifiers associated with transactions, determining related events, and associating similar transactions and events into an aggregated list of transactions. Methods of tracing transactions include identifying thread identifiers associated with transactions and related events and serializing events into a serialized list of events to facilitate tracing single transactions.

Methods and computer program products for transaction analysis of network traffic in a network device

Provided are methods and computer program products for analyzing transactions across a network and to help identify network performance issues. Methods for analyzing traffic include identifying an outbound transaction and a related transaction type, and identifying candidate inbound transactions that have the same transaction type as the transaction type of the outbound transaction. One or more transaction data parameters may be selected that correspond to the outbound or inbound transactions. Candidate transactions may be determined to be related to the outbound transaction based on one or more transaction data parameters.

Methods and computer program products for transaction relationships between application servers

Provided are methods and computer program products for aggregating and reporting network application performance metrics by process pool. Methods may include mapping ones of a plurality of processes into one of at least one process pool; and aggregating, for each of the process pools, performance metrics generated for each of the plurality of processes mapped into that process pool.

Growing community of inventors

Cary, NC, United States of America

David Irwin