Hewlett-packard Development Company, L.P.

Hewlett Packard Enterprise Development LP

Nick Ioffe

Michael Gopshtein

Eyal Kenigsberg

Rotem Steuer

Sergey Pastukhov

A method for discovering an operating system of a remote machine includes monitoring network communications to detect a plurality of data packets that were generated by the remote machine. The contents of each detected data packet are read so as to extract a packet signature of each detected data packet. Each packet signature is compared with at least one signature of a database of signatures in order to determine a similarity between each packet signature and the signature from the database. A confidence level for at least one candidate operating system is calculated based on the determined similarities. A candidate operating system is selected based on the confidence level for that operating system. Relating computer program product and data processing system are also disclosed.

Identifying remote machine operating system

A method for determining a response time of a server may include monitoring communications to and from the server to detect a client request to the server. The method may also include detecting in the monitored communications at least one trigger signal associated with the client request. The method may further include determining a response time of the server to be the time difference between a time at which the at least one trigger signal was fully received and a beginning time of transmission of a final server response from the server, disregarding transmission periods and periods during which the client request is not processed by the server. A computer readable medium and system for determining a response time of a server are also disclosed.

Method and system for determining response time of a server

Ingress and egress port packets for a connection between a first node and second node are mirrored to a mirroring port on a network switch. A count of ingress and egress port packets associated with a handshake process is determined. Duplicate mirrored packets associated with the connection are filtered based at least in part on the count.

Packet filtering

Systems and methods of identifying users of remote sessions are disclosed. In an example, a method includes establishing a remote session in a virtual machine. The method also includes identifying a user of the remote session. The method also includes identifying information of the user in an outgoing request by the virtual machine for access to an application on a backend server during the remote session.

Identifying users of remote sessions

Discovering communication traffic in a computer network is useful to administrators of computer networks. Communication packets from a communication transaction on the network are read to determine a source computing device and to determine whether the communication transaction contains a data pattern match to one of a plurality of defined data patterns. If a match is made to an exact data pattern, the source computing device is associated with an application or service corresponding to that exact data pattern. If a match is made to a statistical data pattern, the source computing device is associated with an application or service corresponding to that statistical data pattern if a threshold number of data pattern matches have occurred for that statistical data pattern for the source computing device.

Methods and apparatus for discovering traffic on a network

A sniffer device determines whether an abnormal condition is present in a network communication. In response to determining that the abnormal condition is present, the sniffer device collects network-level packets into a data structure. The data structure containing the collected network-level packets can be analyzed for determining whether the abnormal condition caused an issue with a communicating entity.

Growing community of inventors

Bat Yam, Israel

Nick Ioffe