Abstract: In embodiments, a known network relation is generated from a known topology of a network and is sent to a first data source agent associated with a first tool configured to monitor the network. A first contextual topology of the network is received from the first data source agent and is based on the known network relation and first data associated with the first tool. An extended topology is generated by reconciling the known topology with at least the first contextual topology. In further embodiments, a derived network relation is received from the first data source agent. The derived network relation is sent to a second data source agent. Second contextual topology based, at least in part, on the derived network relation can be received from the second data source agent. An updated extended topology based, at least in part, on the second contextual topology can be generated.

Abstract: In embodiments, a known network relation is generated from a known topology of a network and is sent to a first data source agent associated with a first tool configured to monitor the network. A first contextual topology of the network is received from the first data source agent and is based on the known network relation and first data associated with the first tool. An extended topology is generated by reconciling the known topology with at least the first contextual topology. In further embodiments, a derived network relation is received from the first data source agent. The derived network relation is sent to a second data source agent. Second contextual topology based, at least in part, on the derived network relation can be received from the second data source agent. An updated extended topology based, at least in part, on the second contextual topology can be generated.

Abstract: To avoid inflated measurements, a flow data analyzer can select a single source of flow data to use when determining network traffic measurements for a given host. By selecting a single source of flow data, the flow data analyzer reduces the chance of redundant flow data causing inflated measurements. To select a flow data source for a host, the flow data analyzer analyzes flow data received from network devices and selects a network device based on a flow data source criterion. Examples of a flow data source criterion include a network device's sample rate or an amount of flow data for the host captured by the network device. Once a flow data source is selected, the flow data analyzer uses flow data generated by the selected source. The flow data analyzer may select a different flow data source for each host being monitored by the network manager.