Abstract: Implied relationships between entities, such as network endpoints, are automatically discovered based on co-temporal events. Events involving pairs of endpoints, such as messaging events in which one endpoint acts as a source and another endpoint acts as a destination, may be detected. Edges between nodes representing those endpoints and other nodes representing other endpoints involved in other recent (co-temporal) events may be added to a progressively constructed graph. Over time, such edges may be progressively weighted in response to the detection of further co-temporal events involving the same endpoints. Relationships between endpoints may be implied based on the resulting accumulated weights of edges linking those endpoints' nodes in the graph even if there is no express relationship between those endpoints in any real-word context (e.g., even if those endpoints are not directly connected in any network, and even if no single event involves both of those endpoints together).

Abstract: Physical Layer and Data-Link Layer data are connected with Networking through Application Layer data/information to enable searching, sorting, and identification of novel relationships between signal sources and their contents. Metadata can be used at the Physical Layer in an optical fiber network, connecting with metadata generated at the Data Link Layer, connected to metadata generated at the Network to Application Layer. The Physical Layer metadata is obtained from configuration and provisioning data within an Intelligent Optical System. The Data-Link Layer metadata is obtained from a signal processing device. The Network through Application Metadata is obtained from a packet capture or flow capture probe. The metadata from all layers are linked in a data store such that the network traffic, passing through stream(s) in optical fiber(s) layer data are combined.