Abstract: During monitoring of IP network traffic, network application monitoring metrics are extracted, aggregated into logical group types and subsequently analyzed by identifying group sets of the logical group types, correlating anomalous conditions across the logically grouped and aggregated metrics, and isolating the anomalous conditions to one or more related members of the logical group types. The metrics may include usage metrics, network performance metrics and application performance metrics.

Abstract: A distributed network monitoring system includes a central monitoring device configured to store global configuration information for all monitoring devices which make up the distributed system, and one or more remote monitoring devices configured to receive, in response to a request therefor, at least a portion of the configuration information from the central monitoring device. The remote monitoring devices and the central monitoring device may be communicatively coupled through respective secure communications paths (e.g., SSH communication tunnels) established on an as-needed basis by secure communication tunnel processes executing at the central monitoring device and remote monitoring devices. The central network monitoring device may further include a configuration servlet configured to provide requested portions of the configuration information to the one or more remote monitoring devices.

Abstract: During monitoring of IP network traffic, network application monitoring metrics are extracted, aggregated into logical group types and subsequently analyzed by identifying group sets of the logical group types, correlating anomalous conditions across the logically grouped and aggregated metrics, and isolating the anomalous conditions to one or more related members of the logical group types. The metrics may include usage metrics, network performance metrics and application performance metrics.