Abstract: An automated service discovery and monitoring utility employs automatically generated policies (rules) for monitoring network health of a service based on network discovery using flow data derived from transmissions sent over segments between computing components defining the service. An interactive discovery application employs flow data based on transmissions associated with a service. Analysis of the flow data identifies associated components from inspection of the transmissions. Iterative component selection allows network traversal of components based on flow data of the segments used for providing the service.

Abstract: An automated service discovery and monitoring utility employs automatically generated policies (rules) for monitoring network health of a service based on network discovery using flow data derived from transmissions sent over segments between computing components defining the service. An interactive discovery application employs flow data based on transmissions associated with a service. Analysis of the flow data identifies associated components from inspection of the transmissions. Iterative component selection allows network traversal of components based on flow data of the segments used for providing the service.

Abstract: According to an aspect of the invention, a system and method is configured to generate a user interface to display information about time series outliers in network traffic.

Abstract: An arrangement is disposed in a network. The arrangement includes a device that is logically disposed adjacent logically nearby routers having a first type of probe that are disposed to sample traffic, and that is has second type of probe that is disposed in-line during an attack by modifying router tables on the nearby routers.

Abstract: A monitoring device disposed for thwarting denial of service attacks on the data center is described. The monitoring device includes a plurality of probe devices that are disposed to collect statistical information on packets that are sent between the network and the data center and a cluster head coupled to each of the plurality of probe devices, the cluster head receiving collected statistical information from the probe devices and determining from the collected information whether the data center is under a denial of service attack.

Abstract: An arrangement is disposed in a network. The arrangement includes a device that is logically disposed adjacent logically nearby routers having a first type of probe that are disposed to sample traffic, and that is has second type of probe that is disposed in-line during an attack by modifying router tables on the nearby routers.

Abstract: A monitoring device disposed for thwarting denial of service attacks on the data center is described. The monitoring device includes a plurality of probe devices that are disposed to collect statistical information on packets that are sent between the network and the data center and a cluster head coupled to each of the plurality of probe devices, the cluster head receiving collected statistical information from the probe devices and determining from the collected information whether the data center is under a denial of service attack.