Abstract: A method of tracking information in a multi-tier computerized environment, the method comprising: receiving an at least one packet; storing data associated with the at least one packet and with an at least one request or transaction associated with the at least one packet; parsing a byte stream generated from conversion of the at least one packet; detecting data associated with the at least one request or transaction related to the byte stream; matching a thread associated with the byte stream with the at least one request or transaction associated with the at least one packet according to predetermined fields within the byte stream, an apparatus for implementing the same and methods for determining resource consumption of requests or transactions.

Abstract: The subject matter discloses a method and apparatus for associating requests and responses in a multi-tier computerized environment, comprising for each tier, detecting incoming and outgoing data flow; sending the detected data to a processing module; for each two neighboring tiers, comparing incoming data of one tier and outgoing data of the other tier; associating incoming requests of one tier to outgoing requests of the other tier. The association may use an ad-hoc ID. The subject matter also discloses a computerized apparatus detecting data and sending the data to a central storage outside the multi-tier environment when the data is used to match requests and responses. Another object of the subject matter is a method for associating an incoming request and outgoing response or outgoing requests in a multi-threaded computerized environment.

Abstract: A computerized method for organizing representations of transactions in a multi-node system, comprising randomly selecting by each computer of a plurality of computers a message in a repository of messages of transactions accessible to the plurality of computers, and selecting in the repository by each computer of the plurality of computers further messages belonging to the transaction the randomly selected message belongs to, and assembling the selected messages to a representation of the transaction the randomly selected message belongs to, and an apparatus for the same.

Abstract: A method and apparatus for diagnosis of a computerized system, the method comprising the steps of collecting one or more events; transforming the events to events based time series, said events based time series having intervals; determining which resources of the computerized system are being consumed by which events, for a first predetermined time interval; and determining a function between the events based time series and one or more measurable attributes of one or more resources that were consumed by the events for a second predetermined time interval.

Abstract: A method of tracking information in a multi-tier computerized environment, the method comprising: receiving an at least one packet; storing data associated with the at least one packet and with an at least one request or transaction associated with the at least one packet; parsing a byte stream generated from conversion of the at least one packet; detecting data associated with the at least one request or transaction related to the byte stream; matching a thread associated with the byte stream with the at least one request or transaction associated with the at least one packet according to predetermined fields within the byte stream, an apparatus for implementing the same and methods for determining resource consumption of requests or transactions.