Abstract: A method for discovering an operating system of a remote machine includes monitoring network communications to detect a plurality of data packets that were generated by the remote machine. The contents of each detected data packet are read so as to extract a packet signature of each detected data packet. Each packet signature is compared with at least one signature of a database of signatures in order to determine a similarity between each packet signature and the signature from the database. A confidence level for at least one candidate operating system is calculated based on the determined similarities. A candidate operating system is selected based on the confidence level for that operating system. Relating computer program product and data processing system are also disclosed.

Abstract: A method for determining a response time of a server may include monitoring communications to and from the server to detect a client request to the server. The method may also include detecting in the monitored communications at least one trigger signal associated with the client request. The method may further include determining a response time of the server to be the time difference between a time at which the at least one trigger signal was fully received and a beginning time of transmission of a final server response from the server, disregarding transmission periods and periods during which the client request is not processed by the server. A computer readable medium and system for determining a response time of a server are also disclosed.

Abstract: Ingress and egress port packets for a connection between a first node and second node are mirrored to a mirroring port on a network switch. A count of ingress and egress port packets associated with a handshake process is determined. Duplicate mirrored packets associated with the connection are filtered based at least in part on the count.

Abstract: Systems and methods of identifying users of remote sessions are disclosed. In an example, a method includes establishing a remote session in a virtual machine. The method also includes identifying a user of the remote session. The method also includes identifying information of the user in an outgoing request by the virtual machine for access to an application on a backend server during the remote session.

Abstract: A method for discovering tiers within an application includes monitoring network traffic. A periodic report may be assembled based on the network traffic. Tiers may be discovered using the periodic report.

Abstract: A method for discovering an operating system of a remote machine includes monitoring network communications to detect a plurality of data packets that were generated by the remote machine. The contents of each detected data packet are read so as to extract a packet signature of each detected data packet. Each packet signature is compared with at least one signature of a database of signatures in order to determine a similarity between each packet signature and the signature from the database. A confidence level for at least one candidate operating system is calculated based on the determined similarities. A candidate operating system is selected based on the confidence level for that operating system. Relating computer program product and data processing system are also disclosed.

Abstract: A method for determining a response time of a server may include monitoring communications to and from the server to detect a client request to the server. The method may also include detecting in the monitored communications at least one trigger signal associated with the client request. The method may further include determining a response time of the server to be the time difference between a time at which said at least one trigger signal was fully received and a beginning time of transmission of a final server response from the server, disregarding transmission periods and periods during which the client request is not processed by the server. A computer readable medium and system for determining a response time of a server are also disclosed.

Abstract: Discovering communication traffic in a computer network is useful to administrators of computer networks. Communication packets from a communication transaction on the network are read to determine a source computing device and to determine whether the communication transaction contains a data pattern match to one of a plurality of defined data patterns. If a match is made to an exact data pattern, the source computing device is associated with an application or service corresponding to that exact data pattern. If a match is made to a statistical data pattern, the source computing device is associated with an application or service corresponding to that statistical data pattern if a threshold number of data pattern matches have occurred for that statistical data pattern for the source computing device.

Abstract: A sniffer device determines whether an abnormal condition is present in a network communication. In response to determining that the abnormal condition is present, the sniffer device collects network-level packets into a data structure. The data structure containing the collected network-level packets can be analyzed for determining whether the abnormal condition caused an issue with a communicating entity.

Abstract: Ingress and egress port packets for a connection between a first node and second node are mirrored to a mirroring port on a network switch. A count of ingress and egress port packets associated with a handshake process is determined. Duplicate mirrored packets associated with the connection are filtered based at least in part on the count.

Abstract: A sniffer device determines whether an abnormal condition is present in a network communication. In response to determining that the abnormal condition is present, the sniffer device collects network-level packets into a data structure. The data structure containing the collected network-level packets can be analyzed for determining whether the abnormal condition caused an issue with a communicating entity.

Abstract: Methods, apparatus, and articles of manufacture to manage encryption keys are disclosed. An example method to manage encryption keys includes obtaining data including a private key, determining that the data cannot be read according to a first format by attempting to read the data in the first format, in response to determining that the data cannot be read according to the first format, accessing the private key by reading the data according to a second format different from the first format, and converting the data from the second format to a third format.

Abstract: Discovering communication traffic in a computer network is useful to administrators of computer networks. Communication packets from a communication transaction on the network are read to determine a source computing device and to determine whether the communication transaction contains a data pattern match to one of a plurality of defined data patterns. If a match is made to an exact data pattern, the source computing device is associated with an application or service corresponding to that exact data pattern. If a match is made to a statistical data pattern, the source computing device is associated with an application or service corresponding to that statistical data pattern if a threshold number of data pattern matches have occurred for that statistical data pattern for the source computing device.