Abstract: Selecting combinations of antennae of a wireless device based on transmission type includes determining a transmission type of a transmission between the wireless device and an access node and, based on the transmission type, instructing the wireless device to utilize different antenna configurations, including 5G EN-DC, MIMO, mm-wave, and other combinations. The different antenna configurations comprise different combinations of antennae of the wireless device.

Abstract: Described is a method performed by a downloadable agent, the method comprising: collecting WAN performance information, wherein the downloadable agent is executable on a computing device coupled to a LAN of a broadband subscriber, wherein the LAN is coupled by another device to a WAN; and transmitting the WAN performance information to a machine; wherein the machine is operable to: store and analyze the performance information to generate an analysis result; and report the analysis result to at least one of the broadband subscriber and its service provider. Described is a corresponding system which comprises a database; and a server coupled to the database, the server operable to: receive WAN performance information from a downloadable agent; store the information in the database, analyze the information to generate an analysis result; and report the analysis result to at least one of the broadband subscriber and the broadband subscriber's service provider.

Abstract: The present disclosure provides a method, apparatus and system for switching a virtual IP, relates to the field of artificial intelligence and particularly to cloud computing and cloud network technologies, and can be applied to intelligent cloud scenarios. A detailed implementation comprises: receiving a free ARP packet sent by a virtual machine to which a high-availability virtual IP is successfully switched; generating a first forwarding table of the high-availability virtual IP according to the free ARP packet; encapsulating the first forwarding table in a first UDP packet by VXLAN; and synchronizing the first UDP packet to another virtual router.

Abstract: A vehicle is provided that includes Ethernet controllers that operate first electronic devices and perform communication using scalable service-oriented middleware on Ethernet/internet protocol (SOME/IP). An Ethernet switch generates a communication path between the Ethernet controllers and executes communication between the Ethernet controllers based on the generated path. A plurality of CAN controllers operate second electronic devices and perform CAN communication. A gateway then executes the CAN communication with the CAN controllers, executes communication with the Ethernet switch, and transmits CAN diagnostic information of the CAN controller to the Ethernet switch.

Abstract: This disclosure describes various methods, systems, and devices related to mirrored traffic forwarding in a hybrid network. An example method includes receiving, from a source forwarder in a source network, a mirrored data packet. A session of the mirrored data packet may be identified based on a header of the mirrored data packet. A destination forwarder in a destination network may be identified based on the session. The destination network may be different than the source network. The mirrored data packet may be forwarded to the destination forwarder.

Abstract: A reflectometry system for analyzing faults in a transmission line, a reference signal being generated, in an initial step, and injected in the transmission line, the system includes a device (CPL) for acquiring the analog signal back-propagated in the transmission line, an equalization circuit (EGA) configured for equalizing the amplitudes obtained on the reflectogram for the peaks of the injected signal after its point of injection into the transmission line and of the signal reflected on the end of the transmission line, a binarization device (B) for converting the back-propagated analog signal into a signal digitized over two quantization levels, a correlator (COR) configured for correlating the digitized signal with the reference signal in order to produce a time-domain reflectogram, a module for analyzing the time-domain reflectogram in order to identify the presence of faults in the transmission line.

Abstract: An apparatus for the buffered transmission of data and a corresponding method are shown. The apparatus has a central processing unit, multiple first buffers, one or multiple second buffers and a controller configured to ascertain, in response to a first signal, which initiates a transmission of first data from the first buffers to the second buffers based on descriptor list entries, to block the ascertained first buffer for external access, to store an address of the ascertained first buffer in a parameter memory of the controller, to copy the first data from the ascertained first buffer to the second buffer, and to mark the first data as valid or invalid after the copying thereof.

Abstract: Single points of failure (SPoFs) may be determined for I/O connectivity on a storage network. I/O path information may be determined for a storage device, for example, as a result of a host system logging into the storage network, and may be updated in response to events on the storage network. From this determined I/O path information, one or more SPoFs between a storage device and an application layer may be determined if, for the I/O path information collectively, it is determined that there is only one of any of the path components between the storage device and the application layer. The I/O path information may be displayed in a manner that facilitates a user identifying that there is an SPoF on an I/O path between a storage device and an application layer of a host system. Based on the determination of an SPoF, an alert may be issued.

Abstract: When a multifunction peripheral (MFP) that notifies guidance indicating how to resolve an abnormal state that occurs in itself detects the abnormal state, the MFP notifies a log-in user of the MFP of guidance according to the combination of the detected abnormal state and authority of the log-in user of the MFP.

Abstract: A system for remotely controlling a plurality of subsystems of a vehicle comprises a processor and a memory storing instructions. When executed by the processor, the instructions cause the processor to send a signal via a wireless network to activate a control circuit connected to a Controller Area Network (CAN) bus in the vehicle. The instructions cause the processor to send a command via the wireless network to the control circuit to clear a fault code associated with one of a plurality of Electronic Control Units (ECUs) respectively controlling the plurality of subsystems of the vehicle via the CAN bus, to reset a parameter of one of the plurality of ECUs controlling an exhaust subsystem of the vehicle to a default value, or to initiate a forced regeneration of a diesel particulate filter of the exhaust subsystem of the vehicle.

Abstract: The disclosed systems and techniques enable data integrity checks by an enterprise system to verify that a local alias address matches an alias maintained by an aliasing system. More generally, the disclosed systems and techniques enable an enterprise system to use alias addresses (e.g., email addresses, phone numbers) for users while avoiding storing and managing the users' personal addresses. For example, the enterprise system may forward personal addresses (e.g., received from a user) to a relay or aliasing server configured to generate alias addresses (e.g., alias email addresses or alias phone numbers) based on the personal addresses. The aliasing server may operate as a “middle man” that receives emails, phone calls, or text messages directed to the alias addresses and that forwards the messages to the personal addresses (when appropriate).

Abstract: Techniques are disclosed for implementing networks in a virtualized computing environment. One or more spoke virtual networks are instantiated and connected to a first virtual network hub to form a first hub and spoke topology. One or more spoke virtual networks are instantiated and connected to a second hub virtual network to form a second hub and spoke topology. A virtual connection is established from the first virtual network hub to the second hub virtual network. The first and second hub and spoke networks are allocated to a user of the virtualized computing environment.

Abstract: There has been desired a technology for performing a publishing setting of a variable to an external device more easily. A development assistance device provides a development tool configured to develop a user program for controlling a controller. The user program includes at least one variable belonging to a predetermined namespace. The development tool is configured to accept, for the namespace, a publishing setting for causing the controller to determine whether to publish the variable belonging to the namespace to an external device that is communicatively connected to the controller. A communication interface transfers the user program and the publishing setting to the controller on the basis of acceptance of transfer operation of the user program by the development tool.

Abstract: A method for transmitting a data block begins with segmenting the data block into a number of data sub-blocks. Each data sub-block where a number of high bits is greater than a number of low bits is then inverted. The data sub-blocks are then grouped into sets of data sub-blocks. For each set of data sub blocks, a number of pulses indicative of a number of high bits in each one of the data sub-blocks in the set is transmitted, there is a delay, and a number of pulses indicative of each high bit in each data sub-block of the set of data sub-blocks is transmitted followed by a delay. Finally, a number of pulses indicative of which ones of the data sub-blocks were inverted is transmitted.

Abstract: Systems, methods, and computer-readable media are disclosed for using real time network traffic for validating policy configuration(s) of containers, virtual machines, bare-metals, etc. In one aspect of the present disclosure a method includes receiving, at a controller, an incoming data packet destined for one or more containers; replicating, at the controller, the incoming data packet for validating at least one non-production container to yield a replicated data packet; sending the replicated data packet to the at least one non-production container; and dropping any data packet received from the at least one non-production container at a corresponding incoming port of the controller.

Abstract: The disclosed technology relates a system is configured to identify a domain for analysis, transmit instructions for querying the domain to each network device in a set of network devices, receive domain reports associated with the domain for analysis from the set of network devices, and determine, based on the domain reports, that the domain is associated with malicious features.

Abstract: A system for determining a communication mode utilized by a transmitting node to transmit a data packet in a mesh network is provided. For example, a receiving node operates in a base communication mode to detect a pilot prefix of a data packet. The pilot prefix contains a signal with a predetermined frequency. In response to determining that the pilot prefix is detected, the receiving node detects a communication mode used to transmit the data packet based on preamble signals that are contained in a preamble of the data packet and are received after the detected pilot prefix. Once the communication mode is detected, the receiving node receives and processes the remaining portion of the data packet using the detected communication mode.

Abstract: Method for transmitting data packets between a network management station monitoring a network and network devices on which agents are installed, the network management station communicating with the agent of a network device via instructions; said method is characterized in that the network management station accesses a management information base of a network device by means of a configurable instruction and retrieves data packets corresponding to the configuration of the instruction.

Abstract: One embodiment of the present invention relates to a method for transmission a sidelink signal by a terminal in a wireless communication system, and the method comprises: a step of determining a transmission power of a physical sidelink control channel (PSCCH) and a physical sidelink shared channel (PSSCH); and a step of transmitting the PSCCH and the PSSCH with the determined transmission power, wherein the PSCCH and the PSSCH are frequency division multiplexed (FDM) in one subframe and transmitted, and when a modulation and coding scheme (MCS) or a modulation order is equal to or larger than a predetermined value, the power offset value for increasing the transmission power is not applied when determining the PSCCH transmission power. The terminal is included in an autonomous vehicle.

Abstract: A repeater device in a communication network includes a microcomputer configured to determine whether the repeater device will function as a mirroring switch that generates and transfers a mirror frame, or as a mirror-transfer switch that transfers the mirror frame. When the repeater device functions as a mirror switch and performs port mirroring, the repeater device adds monitor port and destination port information of the mirroring switch to the mirror frame. When the repeater device functions as a mirror-transfer switch, the repeater device adds sender port and destination port information of the mirror-transfer switch to the mirror frame. A monitor device in the communication network uses information in the mirror frame to identify a mirror source device in the network.

Abstract: A method and system are provided for controlling which communication interface of a plurality of communication interfaces is used for communication between a plurality of devices that can be part of a wireless body area network for a medical device system. The communication interfaces can include a body area network communication interface and a far field communication interface. A controller can determine whether a first device is able to establish a communication link with a second device that is located in a coverage region of the wireless body area network using a first body area network communication interface. If so, the controller can determine whether a quality of service over the communication link is greater than or equal to a first threshold, and if so, the first body area network communication interface can be used to communicate data from the first device to the second device via magnetic signals.

Abstract: The present invention relates to a method for transmitting and receiving a Physical Protocol Data Unit (PPDU) and an apparatus for supporting the same. Particularly, a method for transmitting a Physical Protocol Data Unit (PPDU) performed by an apparatus in a wireless communication system may include generating a High Efficiency-Short Training Field (HE-STF) sequence in a frequency domain throughout a transmission bandwidth of the PPDU and transmitting the PPDU that includes an HE-STF field which is constructed based on the HE-STF sequence, wherein the HE-STF sequence may be mapped to a data tone except a direct current tone and a guard tone, and wherein a non-zero value may be mapped to all data tones that include a tone index which is a multiple of a predetermined value in the data tone.

Abstract: A method for obtaining uplink calibration values in a terminal of a wireless communication system is provided, in order to enable a Base Station (BS) having a number of antennas to determine a respective hardware chain value for each antenna of the number of antennas, said method comprising calculating, by the terminal, an uplink calibration value for each antenna on the basis of a downlink channel estimate value for each antenna and a normalization value obtained from said downlink channel estimate values, and sending transmitting, by the terminal, the calculated uplink calibration value for each antenna to the BS. A corresponding terminal for a wireless communication system, adapted to obtain uplink calibration values, is also provided.

Abstract: Provided is a communication network determination apparatus, etc. capable of correctly specifying a communication network which can be monitored by a monitoring device even when necessary and sufficient configuration information about the configuration of the communication network cannot be obtained.

Abstract: A service function chaining (SFC)-based packet forwarding method, an apparatus, and a system, where the packet forwarding method includes receiving, by a first service function forwarding node, a packet forwarding rule from a control node, where the packet forwarding rule indicating a mapping relationship between a match item of traffic characteristic information of a packet and route prefix information, receiving, by the first service function forwarding node, a first packet, where a header of the first packet carries traffic characteristic information of the first packet, determining, by the first service function forwarding node based on the packet forwarding rule, target route prefix information corresponding to the traffic characteristic information of the first packet, determining, by the first service function forwarding node, target next-hop information based on the target route prefix information, and forwarding the first packet based on the target next-hop information.

Abstract: An apparatus is configured to perform a method for user equipment (UE) offloading. The method includes receiving, at a network controller, a measurement report from a UE, the measurement report radio link measurement quantities of a serving cell and one or more candidate serving cells, the measurement quantities measured after interference cancellation or suppression. The method also includes, based in part on the measurement report from the UE, determining whether to offload the UE to a second cell among the one or more candidate serving cells.

Abstract: In one embodiment, a method includes receiving at a thermal modeling module, data from a Power Sourcing Equipment device (PSE) for cables extending from the PSE to Powered Devices (PDs), the cables configured to transmit power and data from the PSE to the PDs, calculating at the thermal modeling module, thermal characteristics for the cables based on the data, and identifying a thermal rise above a specified threshold at one of the cables. The data comprises real-time electrical data for the cables. An apparatus and logic are also disclosed herein.

Abstract: A disclosed method for applying firewall rules on packets in kernel space on network devices may include (1) intercepting, via a socket-intercept layer in kernel space on a routing engine of a network device, a packet that is destined for a remote device and then, in response to intercepting the packet in kernel space on the routing engine, (2) identifying an egress interface index that specifies an egress interface that (A) is external to kernel space and (B) is capable of forwarding the packet from the network device to the remote device, and (3) applying, on the packet in kernel space, at least one firewall rule based at least in part on the egress interface index before the packet egresses from the routing engine. Various other apparatuses, systems, and methods are also disclosed.

Abstract: A controller for operably coupling a drive unit to a host unit in a serial advanced technology attachment (SATA) system is described. The controller comprises a hardware processor arranged to: receive a plurality of SATA data frames; identify a first primitive sequence in at least one of the plurality of SATA data frames that adversely affects a performance of the SATA system; and replace the identified first primitive sequence with a second primitive sequence in response thereto.

Abstract: A system comprises a processor and a non-transitory computer-readable medium to store instructions for execution by the processor. The instructions are configured to discover a topology of a network in an on-premises datacenter, where the topology includes hardware and software components in the on-premises datacenter and in one or more hops from an external network to a gateway of the network. The instructions are configured to determine a plurality of parameters of the components that affect performance of applications and services running on the network. The instructions are configured to determine, based on the discovered topology and the parameters, an optimal topology for the network that optimizes one or more of the parameters to improve the performance of applications and services running on the network.

Abstract: Provided is an on-chip monitor circuit mounted on a semiconductor chip that is equipped with a security function module for performing a security function process on an input signal and outputting a security function signal, the on-chip monitor circuit comprising a monitor circuit for monitoring signal waveforms of the semiconductor chip, wherein the circuit is provided with a first storage means for storing data that designates a window period in which to perform a test of the semiconductor chip, and a control means for performing control to operate the circuit during the window period, when a prescribed test signal is inputted to the security function module. By using the on-chip monitor circuit in a semiconductor chip of which security is required, security attacks, e.g., a Trojan horse or the like, intended to embed a malicious circuit in the production stage of security function module-equipped semiconductors chips, can be prevented.

Abstract: A method, blocking device, and a non-transitory computer-readable storage medium are provided. For example, the method is performed by processing circuitry of the blocking device. In the method, alarm data that includes attacking information of attacking packets among packets that enter a service network that provides services to servers is received. The alarm data is generated based on parsing the packets to identify the attacking packets and to determine the attacking information of the attacking packets. A blocking policy for blocking the attacking packets is determined based on the alarm data and blocking rules for determining whether the servers are attacked. A blocking action is initiated to block the attacking packets based on the blocking policy.

Abstract: Systems and methods for generating a graphical representation of a fire system network and identifying network information for predicting network faults are provided. Some methods can include extracting at least one network parameter from a network board of at least one a plurality of nodes in a fire system network and using the extracted at least one network parameter to generate a topology map that graphically represents a physical connectivity structure of the plurality of nodes.

Abstract: A path detection method and apparatus, where the method includes generating M virtual extensible local area network (VXLAN) probe packets according to a source User Datagram Protocol (UDP) port number, a destination UDP port number, and a probe identifier when there are multiple equivalent paths between a source VXLAN tunnel endpoint (VTEP) and a destination VTEP, sending the M VXLAN probe packets to the source VTEP to forward the M VXLAN probe packets to the destination VTEP, receiving VXLAN advertisement packets from the source VTEP, the destination VTEP, and intermediate nodes in the multiple equivalent paths according to the M VXLAN probe packets, and detecting, according to the VXLAN advertisement packets, whether a fault occurs in a path of the multiple equivalent paths between the source VTEP and the destination VTEP.

Abstract: A method for anomaly identification and IT resource optimization includes retrieving, by a workload engine executing on a first computing resource, from a database populated by a client agent executing on a second computing resource, a metric associated with a process. The method includes analyzing, by the workload engine, the retrieved metric and the process. The method includes associating, by the workload engine, at least one workload with the process, responsive to the analysis. The method includes analyzing, by an exception engine executing on the first computing resource, the retrieved metric, the process, and the at least one workload; analyzing includes applying at least one workload rule to the at least one workload. The method includes identifying, by the exception engine, an operational anomaly within the process, responsive to the analysis by the exception engine. The method includes providing a recommendation for mitigating the operational anomaly.

Abstract: Implementations generally relate methods, systems, and computer readable media for providing threat index based wireless local area networks (WLAN) security and quality of service. In one implementation, a method includes receiving a request from a client device connected to a network via a network link. The method further includes determining a threat index value for the client device. The method further includes determining one or more security policies associated with one or more respective network resources, where each security policy applies one or more rules for allocating one of the network resources. The method further includes determining allocation of one or more of the network resources to the client device based on the one or more security policies and the threat index value.

Abstract: A system for processing data is provided. During operation, the system obtains a current window of one or more intervals of timeseries data collected from a monitored system. Next, the system continuously performs a statistical hypothesis test that compares the one or more intervals of the time-series data with baseline values from historic time-series data associated with the monitored system. When the statistical hypothesis test indicates a deviation of the time-series data from the baseline values, the system outputs an alert of an anomaly represented by the deviation.

Abstract: A disclosed method for applying firewall rules on packets in kernel space on network devices may include (1) intercepting, via a socket-intercept layer in kernel space on a routing engine of a network device, a packet that is destined for a remote device and then, in response to intercepting the packet in kernel space on the routing engine, (2) identifying an egress interface index that specifies an egress interface that (A) is external to kernel space and (B) is capable of forwarding the packet from the network device to the remote device and (3) applying, on the packet in kernel space, at least one firewall rule based at least in part on the egress interface index before the packet egresses from the routing engine. Various other apparatuses, systems, and methods are also disclosed.

Abstract: In an example implementation according to aspects of the present disclosure, a method may include identifying, by a computing system, an infrastructure device and an end-host device within a network. The method may further include disseminating, by the computing system, network traffic rules to the infrastructure device, the network traffic rules to route network traffic between end-host devices through the infrastructure device. Further, the network traffic transmitted from a first end-host device to a second end-host device is passed through the infrastructure device to the second end-host device in accordance with the network traffic rules, and network traffic transmitted from the first end-host device to the infrastructure device is blocked by the infrastructure device in accordance with the network traffic rules.

Abstract: An automated telecommunications system includes a first system that receives audio frequency signals such as PSTN-compatible, voice over IP, or high definition voice, decodes and interprets said incoming signals according to the type and format, and transmits digital messages to a second system over a software defined wide area network (SDWAN). Said second system receives and interprets digital messages incoming from the first system, encodes and regenerates outgoing audio frequency signals. The system may be bi-directional and operate over a software defined wide area network, such as an IP based wireless or wired data network. The functionality of said first and second systems may be combined at a single location and interface with a conventional PSTN compatible VoIP system or High Definition Voice system at either or both ends and allow PSTN, conventional VoIP and High Definition Voice communications to share the same packet data stream over a SDWAN connection.

Abstract: The technology disclosed herein automatically detects network topology for merging two isolated networks. In a particular embodiment, a method is performed in a first network of the two isolated networks and provides sending probe messages to a second network of the two isolated networks. The probe messages formatted for one or more passive protocols in the second network. The method further provides receiving replies to at least a portion of the probe messages from the second network indicating configuration parameters of the passive protocols and receiving neighbor messages from the second network indicating configuration parameters of active protocols in the second network. Additionally, the method provides determining a network topology of the second network using the configuration parameters of the passive protocols and the configuration parameters of the active protocols.

Abstract: An apparatus in one embodiment comprises a host device configured to communicate over a network with a storage system comprising a plurality of storage devices. The host device includes a set of input-output queues and a multi-path input-output driver configured to select input-output operations from the set of input-output queues for delivery to the storage system. The multi-path input-output driver is further configured to detect at least first and second input-output operations from respective ones of at least first and second different processes executing on the host device, to assign a first policy identifier to the first input-output operation from the first process, and to assign a second policy identifier different than the first policy identifier to the second input-output operation from the second process. The input-output operations are queued in different ones of the queues of the set of input-output queues based at least in part on their respective assigned policy identifiers.

Abstract: A device searches for a primary access network, and acquires the primary access network. The device also requests a service provided by a network connected to the primary access network, and attaches to the primary access network only when the service is requested by the device.

Abstract: A system and method for multifunction peripheral data collection includes a network data connection with one or more multifunction peripherals and at least one peer data collector. A memory stores address data identifying each of a set of multifunction peripherals tasked for data collection. A processor initiates data transfer sessions in accordance with stored address data with each of the plurality of multifunction peripherals to retrieve device report data. Device report data from each successful data transfer session is retrieved and each device with an unsuccessful data transfer session is identified. A collection report is generated from retrieved device report data and this report is sent to an associated networked server. A generated problem list is sent to at least one other one networked device for further data collection and processing.

Abstract: Disclosed is a method for processing a SOCKET, a method and an apparatus for transmitting packet data, wherein, the method for processing a SOCKET comprises: a connection management application obtaining a SOCKET identifier corresponding to each service application, and transmitting the SOCKET identifier and a modification instruction to a TCP/IP (Transmission Control Protocol/Internet Protocol) protocol stack; the TCP/IP protocol stack searching for SOCKET file description information corresponding to the SOCKET identifier, and modifying the SOCKET file description information according to the modification instruction. After adopting the technical solution mentioned above, the IP binding operation across applications can be performed on a single-process or multi-process operating system, and the application level traffic selection of the different data connection can be performed according to intention of a user.

Abstract: Storage area network (SAN) load balancing process is disclosed. The load balancing process can include monitoring an input/output workload within the SAN. The input/output workload of a first source to first destination is monitored by an analyzing unit. The analyzing unit gathers a source identifier (S_ID) and a destination identifier (D_ID) to determine the location of a first source and a first destination. An input/output workload of the first source and the first destination can be tracked by the analyzing unit. The analyzing unit can be used to determine if the first input/output workload is above an upper threshold. A first condition can be logged based on the determination of the first input/output workload being above the upper threshold. The determination of the first condition is communicated to a first user.

Abstract: A method performed by a radio network node for determining a partitioning of a first signal into one or more parts to be transmitted to a first radio node. The radio network node comprises two or more antennas, each associated with a respective radio chain. The radio network node and the radio node operate in a wireless communications network. The radio network node determines a number of radio chains, to be used to send the first signal, and determines a partitioning of the first signal into the one or more parts of the first signal over the determined number of radio chains. The one or more parts are to be transmitted to the first radio node. The radio network node determines the number of radio chains and the partitioning based on a scheduling decision associated with the radio network node, and one or more parameters.

Abstract: Methods, systems, and devices for wireless communication are described. Uplink resources may be allocated for transmissions of beam recovery messages. For example, a user equipment (UE) communicating in a system that supports beamformed transmissions may receive a configuration for resources from a base station, where the resources may be used for beam recovery signaling. The UE may identify a beam failure on one or more active beams used to communicate with the base station, and the UE may transmit a beam recovery message to the base station. In such cases, the beam recovery message may be transmitted according to the configuration received from the base station such that the beam recovery message is transmitted using the beam recovery resources. In some cases, the configuration may be received at the UE via radio resource control (RRC) signaling or via a system information broadcast from the base station.

Abstract: A method and system for buffer flush optimization in Ethernet ring protection (ERP) networks includes generating ERP control messages to include a sub-ring identifier (SUB RING ID) and a topology change notification sequence number (TCN#). When the ERP control messages are received with the sub-ring SUB RING ID and the TCN#, the recipient is enabled to disambiguate multiple redundant ERP control messages. Additionally, a do not flush attribute bit is set for subsequently sent ERP control messages.

Abstract: A method for anomaly identification and IT resource optimization includes retrieving, by a workload engine executing on a first computing resource, from a database populated by a client agent executing on a second computing resource, a metric associated with a process. The method includes analyzing, by the workload engine, the retrieved metric and the process. The method includes associating, by the workload engine, at least one workload with the process, responsive to the analysis. The method includes analyzing, by an exception engine executing on the first computing resource, the retrieved metric, the process, and the at least one workload; analyzing includes applying at least one workload rule to the at least one workload. The method includes identifying, by the exception engine, an operational anomaly within the process, responsive to the analysis by the exception engine. The method includes providing a recommendation for mitigating the operational anomaly.