Abstract: A method comprising: receiving object identifiers associated with each entity of an enterprise network, receiving relationship data indicating directionality of data flow between two or more entities of enterprise network, receiving search query which includes at least one of an object identifier associated with one of the entities or relationship data indicating directionality of data flow associated with one of the entities, traversing a portion of topology to identify objects of the portion of the topology and a pivot point, the pivot point being directionally coupled to at least three objects, identifying two mini-topologies based on two of the least three objects of the pivot point, traversing each of the two mini-topologies to identify further objects within the portion of the topology, generating a partial topology based on the traversal of the portion of the topology and of the mini-topologies, and providing information including objects identified in the partial topology.

Abstract: A method comprising: receiving from a third party virtualization platform: virtual machine manager identifiers identifying virtual machine managers, hypervisor identifiers identifying hypervisors and virtual machine identifiers identifying virtual machines, generating a first logical mapping of virtual machine managers to hypervisors, generating a second logical mapping of hypervisors to virtual machines, generating a third logical mapping of virtual machines to other virtual machines, receiving from network probes hypervisor traffic data identifying communication between hypervisors and entities of a switch fabric and virtual machine traffic data identifying communication between virtual machines to entities of the switch fabric, generating a fourth logical mapping of hypervisors to entities of the switch fabric based on the hypervisor traffic data, generating a fifth logical mapping virtual machines to entities of the switch fabric based on the virtual machine traffic data, and outputting a master mapping b

Abstract: A method comprising: receiving object identifiers associated with each entity of an enterprise network, receiving relationship data indicating directionality of data flow between two or more entities of enterprise network, receiving search query which includes at least one of an object identifier associated with one of the entities or relationship data indicating directionality of data flow associated with one of the entities, traversing a portion of topology to identify objects of the portion of the topology and a pivot point, the pivot point being directionally coupled to at least three objects, identifying two mini-topologies based on two of the least three objects of the pivot point, traversing each of the two mini-topologies to identify further objects within the portion of the topology, generating a partial topology based on the traversal of the portion of the topology and of the mini-topologies, and providing information including objects identified in the partial topology.

Abstract: A method comprising: receiving from a third party virtualization platform: virtual machine manager identifiers identifying virtual machine managers, hypervisor identifiers identifying hypervisors and virtual machine identifiers identifying virtual machines, generating a first logical mapping of virtual machine managers to hypervisors, generating a second logical mapping of hypervisors to virtual machines, generating a third logical mapping of virtual machines to other virtual machines, receiving from network probes hypervisor traffic data identifying communication between hypervisors and entities of a switch fabric and virtual machine traffic data identifying communication between virtual machines to entities of the switch fabric, generating a fourth logical mapping of hypervisors to entities of the switch fabric based on the hypervisor traffic data, generating a fifth logical mapping virtual machines to entities of the switch fabric based on the virtual machine traffic data, and outputting a master mapping b

Abstract: Automatically identifying a location of a network monitor within a network topology is described. A location of a network monitor within a network topology (which can, and often does, change structure, constituent devices, or both) is determined by monitoring transmissions passing through the network link to which the network monitor is connected. The network monitor uses locally unique device identifiers present in a network transmission to identify the devices or ports most commonly communicating with each other.

Abstract: Methods and systems are described for storing network device identities and application assignments as a function of time to facilitate analysis of network devices and applications even in a temporally dynamic network. Server assignments are stored as a function of time for various applications executed within a network. Performance data are indexed according to a server and/or port unique identifier and stored as a function of time. Using the time-based server assignments and time-based performance data, the system can be queried using at least one of an application and intermediate entity identifier to determine the performance of the application, the entity, or both at one or more points in time.

Abstract: Automatically identifying a location of a network monitor within a network topology is described. A location of a network monitor within a network topology (which can, and often does, change structure, constituent devices, or both) is determined by monitoring transmissions passing through the network link to which the network monitor is connected. The network monitor uses locally unique device identifiers present in a network transmission to identify the devices or ports most commonly communicating with each other.