Abstract: A system with accompanying method and computer program product are provided for database management and recovery. Included are information source modules for collecting network communications usage information in real-time from a plurality of network devices. Also included is a plurality of gatherers coupled to the information source modules. The gatherers are adapted for filtering and aggregating the network communications usage information. A central event manager is coupled to the gatherers for completing a plurality of data records from the filtered and aggregated network communications usage information. Such data records correspond to network usage by a plurality of users. A database is coupled to the central event manager for storing the data records. Further provided is logic for continuously monitoring a state of the gatherers, detecting a fault, and utilizing the state of the gatherers and the stored data records to recover from the fault upon the detection thereof.

Abstract: A method and apparatus for reconstructing a session using a first analyzer coupled to a second analyzer is provided. Session reconstruction is performed on packets received at the first analyzer. Moreover, responsive to unsuccessful session reconstruction on the first analyzer, one or more messages are sent to the second analyzer. The one or more messages from the first analyzer to the second analyzer comprise packets received by the first analyzer which are unrecognized, and the second analyzer recognizes the unrecognized packets to successfully reconstruct the session.

Abstract: A system with accompanying method and computer program product are provided for reporting on the collection of network usage information from a plurality of network devices. Included is a plurality of information source modules for collecting network communications usage information in real-time from a plurality of network devices. Gatherers are coupled to the information source modules for filtering and aggregating the network communications usage information. Coupled to the gatherers is a central event manager. The central event manager is adapted for completing a plurality of data records from the filtered and aggregated network communications usage information. The data records correspond to network usage by a plurality of users. Also included is a database coupled to the central event manager for storing the plurality of data records.

Abstract: A system with accompanying method and computer program product are provided for aggregating network usage information from a plurality of network devices in a user-specified manner. First included is a graphical user interface for defining an enhancement procedure. This is accomplished by listing a plurality of available functions, allowing a user to choose at least one of a plurality of fields, and allowing the user to choose at least one of the listed functions to be applied to the chosen field(s). Also included is a plurality of information source modules for collecting network communications usage information in real-time from a plurality of network devices. Gatherers are coupled to the information source modules. Such gatherers are adapted for aggregating the network communications usage information in accordance with the enhancement procedure.

Abstract: A system, method and computer program product are provided for generating a single record reflecting multiple services for accounting purposes. First, a plurality of services carried out over a network are identified. Such services may include an hypertext transfer protocol (HTTP) session, an electronic mail session, and/or a voice over Internet Protocol (IP) session. Further, data is collected describing the plurality of services. A single record is subsequently generated using the collected data to represent each of the services.

Abstract: A system, method and computer program product are provided for gathering statistics associated with a network session. Initially, a plurality of packets is received at a plurality of analyzers. Such packets are analyzed to identify a plurality of flows. Further identified are a session associated with the plurality of flows and at least one application associated with the session. The session is then reconstructed utilizing the identified application for analysis purposes. A plurality of statistics associated with the session is then gathered based on the analysis.

Abstract: In some embodiments, network traffic information is captured at network information sources. These sources provide detailed information about the network communications transactions at a network device. Importantly, different types of sources can provide different types of information. Gatherer devices gather the detailed information from the various information source devices and convert the information into standardized information. The gatherer devices can correlate the gathered information with account information for network transaction accounting. Manager devices manage the gatherer devices and store the gathered standardized information. The manager devices eliminate duplicate network information that may exist in the standardized information. The manager devices also consolidate the information. Importantly, the information stored by the manager devices represents the consolidated, account correlated, network transaction information that can be used for billing or network accounting.