Cisco Technology, Inc.

Brocade Communications Systems, Inc.

Appdynamics, Inc.

Prakash Kaligotla

Harish Nataraj

Naveen Kondapalli

Ajay Chandel

David Brooks Hamilton

Hui-Lin Li

Nikhar Rakesh Saxena

Marcus Thordal

David John Zacks

Thomas Szigeti

Suresh Muthu

Mark Montañez

Ning Zhou

Murthy N Bhetanabhotla

Sathiapriya Sathiyagiri

Samir Savla

According to one or more embodiments of the disclosure, techniques herein provide for auto discovery of network proxies. In particular, in one embodiment, a controller in a computer network receives, from both source devices and destination devices, corresponding Transmission Control Protocol/Internet Protocol (TCP/IP) information and associated transaction identifiers (IDs) for packets sent by the source devices and for packets received at the destination devices. The controller may then correlate particular source TCP/IP information to particular destination TCP/IP information based on associated transaction IDs being the same, and can compare the correlated source TCP/IP information and destination TCP/IP information in order to determine whether a proxy device exists (e.g., and which particular type of proxy device exists) between the source device and the destination device.

Auto discovery of network proxies

Systems, methods, and computer-readable for determining performance metrics of a network include obtaining, from a network assurance system, one or more network performance metrics, the network performance metrics corresponding to execution of one or more applications in a network domain. An Application Performance Management (APM) system provides one or more applications performance metrics, the applications performance metrics corresponding to execution of the one or more applications in an applications domain. The one or more network performance metrics are integrated with the one or more applications performance metrics to determine integrated performance metrics for the one or more applications across the network domain and the applications domain.

Application performance management integration with network assurance

In one embodiment, a network analysis process initiates network path analysis for a transaction application operating over a logical transaction path having a first segment from a first set of transaction servers to a load balancer and a second segment then to a second set of transaction servers. The network path analysis, when for the second segment, comprises: selecting a receiving transaction server of the second set of transaction servers; identifying a TCP session associated with the transaction application already in progress to the receiving transaction server; initiating a TCP traceroute using ACK packets, whose signature matches the in-progress TCP session, from the receiving transaction server to the load balancer; and determining, in reverse, a network path of layer-3 segments and associated network metrics between the receiving transaction server and the load balancer. Specific layer-3 segments of the network path causing performance degradation of the transaction application are then identifiable.

Deep network path analysis for identifying network segments affecting application performance

In one embodiment, an agent process produces synthetic packet traffic and iteratively performs a sub-process that determines isolated network segments of the communication channel between intermediate nodes and computes a set of network metrics for the isolated network segments based at least in part on incrementing TTL expiry error data points. The sub-process also encapsulates, for inclusion within the next packet to be sent, a list of intermediate node IDs along the communication channel up to a latest received node ID and computed sets of network metrics for respective network segments. The agent process may then generate, upon termination of the sub-process, a report, the report including the list of intermediate node IDs along the communication channel up to a latest received node ID and computed sets of network metrics for respective network segments.

Isolation of network segments affecting application performance

In one embodiment, a network agent, associated with an operating system of a computing device, tracks socket connection calls made by a plurality of cotenant processes on the computing device that share a common network transport between the computing device and a remote computing device. The network agent may then extract a process identification (ID) for the socket connection calls, the process ID identifying which particular cotenant process of the plurality of cotenant processes is making each particular socket connection call. While monitoring network metrics of network traffic flows over socket connections between the computing device and the remote computing device, the network agent may attribute given network metrics from particular socket connections to a corresponding cotenant process based on the correlated process ID for the socket connection. As such, the network agent may then report the network metrics as attributed to the corresponding cotenant processes.

Network visibility for cotenant processes

A system monitors applications and network flows used during the business transaction to determine distributed business transaction anomalies caused at least in part by network performance issues. A network flow associated with a business transaction is monitored by a network agent. The network agent may capture packets, analyze the packets and other network data to determine one or more baselines, and dynamically compare subsequent network flow performance to those baselines to determine an anomaly. When an anomaly in a network flow is detected, this information may be provided to a user along with other data regarding a business transaction that is utilizing the network flow. Concurrently with the network agent monitoring, application agents may monitor one or more applications performing the business transaction. The present system reports performance data for a business transaction in terms of application performance and network performance, all in the context of a distributed business transaction.

Network aware distributed business transaction anomaly detection

What is disclosed is network management software which displays a widget for tracking a particular characteristic of a network. The widget title bar contains a first and second indicator. The first indicator represents the severity of the most severe alert for the particular characteristic being tracked by the widget. The second indicator is a numerical value of the characteristic that caused the alert.

Minimized display of monitored events with live severity level and count indications

A system and method is disclosed for seamless network management monitoring when a device or Virtual Machine migrates. As part of a network management monitoring system and method, a separate distinct identifier is designated to each port and each device or VM being monitored. When a device is located a specific port a correlation between the distinct identifier of that port and the distinct identifier of the device is stored in a correlation table and monitored. Once this correlation changes, the network management monitoring system recognizes a migration has occurred and updates the correlation table to correlate the new port's distinct identifier with the device's distinct identifier. Parameters that were set up to be monitored for the device can then continue to be monitored at the new location.

Smart migration of monitoring constructs and data

A management station which manages the encryption devices in a SAN to set up encrypted LUNs. In setting up the encryption, the source and target ports are identified, along with the target LUN. LUN serial numbers used to identify unique LUNs. As paths to a given LUN are defined, the management station compares the path to existing paths and provides an indication if there is a mismatch in the encryption policies or keys being applied to the LUN over the various paths. This allows the administrator to readily identify when there is a problem with the paths to an encrypted LUN and then take steps to cure the problem. By determining the paths and then comparing them, the management station greatly simplifies setting up multipath I/O to an encrypted LUN or access by multiple hosts to an encrypted LUN.

Growing community of inventors

San Jose, CA, United States of America

Prakash Kaligotla