Abstract: A method for determining a response time of a server may include monitoring communications to and from the server to detect a client request to the server. The method may also include detecting in the monitored communications at least one trigger signal associated with the client request. The method may further include determining a response time of the server to be the time difference between a time at which the at least one trigger signal was fully received and a beginning time of transmission of a final server response from the server, disregarding transmission periods and periods during which the client request is not processed by the server. A computer readable medium and system for determining a response time of a server are also disclosed.

Abstract: Methods, systems, and computer-readable and executable instructions are provided for simulating real user issues in support environments. Simulating real user issues in support environments can include providing stored data related to a real user issue associated with an application to a support device having the ability to modify the application, the stored data can include network traffic associated with a user device in a live environment and inputs provided via the user device. Simulating real user issues in support environments can include causing the support device to simulate the real user issue using the stored data.

Abstract: Ingress and egress port packets for a connection between a first node and second node are mirrored to a mirroring port on a network switch. A count of ingress and egress port packets associated with a handshake process is determined. Duplicate mirrored packets associated with the connection are filtered based at least in part on the count.

Abstract: Systems and methods of identifying users of remote sessions are disclosed. In an example, a method includes establishing a remote session in a virtual machine. The method also includes identifying a user of the remote session. The method also includes identifying information of the user in an outgoing request by the virtual machine for access to an application on a backend server during the remote session.

Abstract: Examples disclosed herein relate to determining the type of a network tier. Examples include determining that a target network tier is a forwarding type network tier if a protocol of communications between the target network tier and a source network resource is the same as a protocol of communications between the target network tier and a backend network tier. Examples further include comparing select content of communications between the target and backend network tiers to select content of communications between the target network tier and the source networking resource, if the protocols are the same.

Abstract: A method for recording files of data is disclosed. A file identifier indicative of a file is received. The file identifier is compared to a file conversion value. The file conversion value is determined to be a static file or a dynamic file. Static files are saved as the conversion value and dynamic files are saved as a unique identifier.

Abstract: A method for identifying a difference in application performance includes identifying first recorded statistics pertaining to traffic of an application sniffed during a first period prior to an application change. Subsequent to the application change, causing a collection, at the node, of the application's traffic during a second period and recording second statistics pertaining to that traffic. An evaluation is generated from a comparison of the first statistics with the second statistics. The evaluation indicates a difference in application performance following the change.

Abstract: Systems and methods of identifying users of remote sessions are disclosed. In an example, a method includes establishing a remote session in a virtual machine. The method also includes identifying a user of the remote session. The method also includes identifying information of the user in an outgoing request by the virtual machine for access to an application on a backend server during the remote session.

Abstract: A method for discovering an operating system of a remote machine includes monitoring network communications to detect a plurality of data packets that were generated by the remote machine. The contents of each detected data packet are read so as to extract a packet signature of each detected data packet. Each packet signature is compared with at least one signature of a database of signatures in order to determine a similarity between each packet signature and the signature from the database. A confidence level for at least one candidate operating system is calculated based on the determined similarities. A candidate operating system is selected based on the confidence level for that operating system. Relating computer program product and data processing system are also disclosed.

Abstract: A method for determining a response time of a server may include monitoring communications to and from the server to detect a client request to the server. The method may also include detecting in the monitored communications at least one trigger signal associated with the client request. The method may further include determining a response time of the server to be the time difference between a time at which said at least one trigger signal was fully received and a beginning time of transmission of a final server response from the server, disregarding transmission periods and periods during which the client request is not processed by the server. A computer readable medium and system for determining a response time of a server are also disclosed.

Abstract: Discovering communication traffic in a computer network is useful to administrators of computer networks. Communication packets from a communication transaction on the network are read to determine a source computing device and to determine whether the communication transaction contains a data pattern match to one of a plurality of defined data patterns. If a match is made to an exact data pattern, the source computing device is associated with an application or service corresponding to that exact data pattern. If a match is made to a statistical data pattern, the source computing device is associated with an application or service corresponding to that statistical data pattern if a threshold number of data pattern matches have occurred for that statistical data pattern for the source computing device.

Abstract: A sniffer device determines whether an abnormal condition is present in a network communication. In response to determining that the abnormal condition is present, the sniffer device collects network-level packets into a data structure. The data structure containing the collected network-level packets can be analyzed for determining whether the abnormal condition caused an issue with a communicating entity.

Abstract: Ingress and egress port packets for a connection between a first node and second node are mirrored to a mirroring port on a network switch. A count of ingress and egress port packets associated with a handshake process is determined. Duplicate mirrored packets associated with the connection are filtered based at least in part on the count.

Abstract: A sniffer device determines whether an abnormal condition is present in a network communication. In response to determining that the abnormal condition is present, the sniffer device collects network-level packets into a data structure. The data structure containing the collected network-level packets can be analyzed for determining whether the abnormal condition caused an issue with a communicating entity.

Abstract: Methods, apparatus, and articles of manufacture to manage encryption keys are disclosed. An example method to manage encryption keys includes obtaining data including a private key, determining that the data cannot be read according to a first format by attempting to read the data in the first format, in response to determining that the data cannot be read according to the first format, accessing the private key by reading the data according to a second format different from the first format, and converting the data from the second format to a third format.

Abstract: Discovering communication traffic in a computer network is useful to administrators of computer networks. Communication packets from a communication transaction on the network are read to determine a source computing device and to determine whether the communication transaction contains a data pattern match to one of a plurality of defined data patterns. If a match is made to an exact data pattern, the source computing device is associated with an application or service corresponding to that exact data pattern. If a match is made to a statistical data pattern, the source computing device is associated with an application or service corresponding to that statistical data pattern if a threshold number of data pattern matches have occurred for that statistical data pattern for the source computing device.

Abstract: A method for recording files of data is disclosed. A file identifier indicative of a file is received. The file identifier is compared to a file conversion value. The file conversion value is determined to be a static file or a dynamic file. Static files are saved as the conversion value and dynamic files are saved as a unique identifier.