Lacework Inc.

Fortinet, Inc.

Rakesh Sachdeva

Vikram Kapoor

Samuel Joseph Pullara, Iii

In some embodiments, a data platform receives a first set of connection information collected from a first machine in a cloud environment, receives a second set of connection information collected from a second machine in the cloud environment, identifies, based on the first set of connection information and the second set of connection information, a pod-to-pod communication from a source pod on the first machine to a destination pod on the second machine, and generates a graph that includes a plurality of nodes representing a plurality of pods and a plurality of edges interconnecting the plurality of nodes and representing communications between the plurality of pods, wherein the graph represents the pod-to-pod communication from the source pod on the first machine to the destination pod on the second machine.

Monitoring communications in a containerized environment

A frame is received at an agent. The frame is analyzed to determine that the frame is associated with a first known pod. IP information is reported to a backend process. The backend process is configured to stitch the IP information with other IP information reported by one or more additional agents to identify a second pod.

An agent executes in user space on a machine and monitors for network connections. In response to detecting an initiation of a network connection, data associated with a process associated with the network connection is collected, e.g., by the agent. At least a portion of the collected process data is reported to an external node. The reported information can be used to detect anomalies in a network environment.

Using network connections to monitor a data center

Agent networking in a containerized environment

An agent executes in user space on a machine and monitors for network connections. In response to detecting an initiation of a network connection, data associated with a process associated with the network connection is collected, e.g., by the agent. At least a portion of the collected process data is reported to an external node. The reported information is used to detect anomalies in a network environment.

Growing community of inventors

Santa Clara, CA, United States of America

Rakesh Sachdeva