Abstract: The constituency and topology of a dynamic network cluster comprising a plurality of hosts and a plurality of Level 2 network switches is automatically detected and mapped at selected intervals of time to provide current real time topology mappings. Network connections are determined by identifying the MAC addresses of host interfaces of hosts that a part of the cluster and the MAC addresses of the particular host interfaces connected to the switch ports of each switch. Resiliency to account for changes to the cluster between intervals is provided by caching cluster mapping and constituency information, and using the cached information from a previous update round to supplement information detected during a current round.