Abstract: Network monitoring is performed using a three-tiered distributed computing system architecture, including a data source tier, a portal tier and a client tier. The data source tier monitors the physical data on the network medium using multiple data collection sources connected to the network. The probes analyze network data and generate fundamental metrics that describe attributes of the network data. The portal tier encapsulates the fundamental metrics along with executable processor objects into data containers having a predefined format. The processor objects contain logic that operates on fundamental metrics contained in the data containers in a manner so as to generate new derived metrics or aggregates of metric data. The data containers may be requested by the client tier, which executes the processor objects and provides a user interface for displaying various types of network information derived from the contents of data containers.

Abstract: A system and method of triggering data capture in a high-speed communications network is disclosed. The triggering system enables the capture of desired data from the network according to triggers related to high-level statistical and transactional elements of the data. The triggering system includes a statistics engine that analyzes network data at the line speed of the high-speed network, thereby enabling the present system to trigger on data transmitted via networks with line speeds exceeding 1 Gbit per second. The present system preferably comprises a portion of a protocol analyzer or similar device in order to detect and diagnose problem conditions existing in or relating to the network data.

Abstract: A method and system for associating active regions with positions within displayed images in a device and display independent manner. Active regions are described by client-side image maps include in hyper-text markup language descriptions of web pages that include specifications of images to be displayed within the web pages. The specifications of images and descriptions of client-side image maps are replaced by servers with a parameterized call to an image viewer, invoked by a browser on a client computer to display the image. The browser maintains an internal description of the positions of active regions in image-relative coordinates, thereby providing dynamic viewing of web pages that include images with associated active regions while maintaining the originally-defined correspondence between the active regions and images.