Identifying an analysis reporting message in network traffic

• US 10,305,760 B2
• Filed: 01/03/2013
• Issued: 05/28/2019
• Est. Priority Date: 01/03/2013
• Status: Active Grant

• Current Assignee: Micro Focus LLC (Open Text Corporation)
• Original Assignee: entIT Software LLC (Open Text Corporation)
• Inventors: Offer, Guy, Gopshtein, Michael, Kenigsberg, Eyal
• Primary Examiner(s): Katsikis, Kostas J
• Application Number:
  US14/655,772
• Publication Number:
  US 20150333985A1
• Time in Patent Office: 2,336 Days
• CPC Class Codes: H04L 43/028 by filtering
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 43/062 related to network traffic
• CPC Class Codes: H04L 43/12 Network monitoring probes
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/562 Brokering proxy services

Abstract

A non-transitory machine-readable storage medium encoded with instructions executable by a processing resource of a computing device to access network traffic exchanged with a web server application. The storage medium also identifies, in the accessed network traffic, an analysis reporting message of a client system and extracts, from the analysis reporting message, information representing a client system analysis of at least one prior transaction between the client system and a proxy server associated with the web server application. The information representing the client system analysis can comprise information describing an experience of the client system, including an indication of an amount of time to perform at least one prior transaction between the client system and the proxy server.

Claims

1. A non-transitory machine-readable storage medium encoded with instructions executable by a processing resource of a computing device to:

access, over a network without going through a proxy server, network traffic exchanged between a client system and a web server application;

identify, in the accessed network traffic, an analysis reporting message generated by a client system, wherein the analysis reporting message includes information representing a client system analysis of at least one transaction between the client system and at least one of a web server application implementing a website, and a proxy server associated with the web server application; and

extract, from the analysis reporting message in the accessed network traffic, information representing a client system analysis of at least one prior transaction between the client system and a proxy server associated with the web server application,

wherein the information representing the client system analysis comprises information describing an experience of the client system, including an indication of an amount of time to perform the at least one prior transaction between the client system and the proxy server.

2. The storage medium of claim 1, wherein the instructions to identify the analysis reporting message comprise instructions to:

identify, as the analysis reporting message, a message in the accessed network traffic sent to an analysis reporting uniform resource locator (URL) of the web server application.

3. The storage medium of claim 2, further comprising instructions to:

identify another message in the accessed network traffic sent to another URL of the web server application as a non-reporting message; and

analyze the non-reporting message in relation to other messages of the accessed network traffic to generate information representing network traffic analysis.

4. The storage medium of claim 1, wherein:

the at least one prior transaction between the client system and the proxy server comprises downloading, from the proxy server to the client system, content of the website implemented by the web server application, wherein the content is cached at the proxy server, and

wherein the amount of time to perform at least one prior transaction between the client system and the proxy server is an amount of time to download the content from the proxy server to the client system.

5. The storage medium of claim 1, wherein the web server application receives the analysis reporting message from the client system and acknowledges the analysis reporting message, without further processing by the web server application.

6. A system comprising:

a processor; and

a non-transitory machine-readable storage medium storing machine-readable instructions that are executable by the processor to;

access, over a network without going through a proxy server, network traffic exchanged between a client system and a web server application;

identify, as an analysis reporting message generated by a client system, a message in the accessed network traffic sent to an analysis reporting uniform resource locator (URL) of the web server application, wherein the analysis reporting message includes information representing a client system analysis of at least one transaction between the client system and at least one of a web server application implementing a website, and a proxy server associated with the web server application;

extract, from the analysis reporting message in the accessed network traffic, information representing a client system analysis of at least one prior transaction associated with a request of the client system targeting another URL of the web server application;

identify another message in the accessed network traffic sent to another URL of the web server application as a non-reporting message; and

analyze the non-reporting message in relation to other messages of the accessed network traffic to generate information representing network traffic analysis.

7. The system of claim 6, wherein the web server application receives the analysis reporting message from the client system and acknowledges the analysis reporting message, without further processing by the web server application.

8. The system of claim 6, wherein the at least one prior transaction comprises at least one prior transaction between the client system and a proxy server associated with the web server application.

9. The system of claim 8, wherein the proxy server is at least one server of a content delivery network (CDN).

10. The system of claim 9, wherein the processor is to:

identify the message in accessed network traffic exchanged between the web server application and the proxy server.

11. The system of claim 6, wherein the information representing the client system analysis comprises information describing a subject matter of the at least one prior transaction.

12. A method comprising:

sniffing, over a network without going through a proxy server with a probe system, network traffic exchanged between a client system and a web server application;

identifying, in the network traffic, an analysis reporting message generated by a client system, wherein the analysis reporting message includes information representing a client system analysis of at least one transaction between the client system and at least one of a web server application implementing a website, and a proxy server associated with the web server application;

parsing the analysis reporting message in the network traffic with the probe system, the analysis reporting message including information representing a client system analysis of at least one prior transaction between the client system and a proxy server associated with the web server application; and

providing the information representing the client system analysis from the probe system to a data aggregator,

wherein the information representing the client system analysis comprises information describing an experience of the client system including an indication of an amount of time to perform the at least one prior transaction between the client system and the proxy server.

13. The method of claim 12, wherein the web server application receives the analysis reporting message from the client system and acknowledges the analysis reporting message, without further processing by the web server application.

14. The method of claim 12, wherein the identifying comprises:

determining whether a message in the network traffic is targeting an analysis reporting uniform resource locator (URL) of the web server application; and

if the message is targeting the analysis reporting URL, identifying the message as the analysis reporting message.

15. The method of claim 14, further comprising:

if the message is not targeting the analysis reporting URL, analyzing the message in association with other messages of the network traffic to generate information representing a network traffic analysis; and

providing the information representing the network traffic analysis from the probe system to the data aggregator.