Abstract: Provided are computer-implemented methods and systems for analyzing domain name system requests and developing profiles associated with these requests. Multiple requests received from the same internet protocol (IP) address may be analyzed to differentiate computer systems used to generate these requests, applications provided on these computer systems, and even different users. The requests are analyzed based on text string content (e.g., domain and subdomain names) and timing. One or more profiles are developed and continuously updated based on requests received from the same IP address. These profiles may be used in real time to provide feedback to the users (e.g., deliver marketing content) or for subsequent analysis of comprehensive data sets (e.g., to identify behavior patterns). For example, a profile may be used to identify a number and types of computers in the household, a number and demographic information of users, and other such identifiers.

Abstract: Monitoring is done of communications which occur in a network of nodes, each communication being effected by a transmission of one or more packets among two or more communicating nodes, each communication complying with a predefined communication protocol selected from among protocols available in the network. The contents of packets are detected passively and in real time, communication information associated with multiple protocols is derived from the packet contents.