Filtering web proxy for recording web-based transactions that supports secure HTTP steps

• US 7,072,935 B2
• Filed: 03/30/2001
• Issued: 07/04/2006
• Est. Priority Date: 04/28/2000
• Status: Active Grant

• Current Assignee: Viavi Solutions, Inc. (Lumentum Holdings Inc.)
• Original Assignee: Agilent Technologies, Inc.
• Inventors: Lehmann, Robert, Kehoe, Jeffrey W.
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): Coffy, Emmanuel
• Application Number:
  US09/822,397
• Publication Number:
  US 20020035498A1
• Time in Patent Office: 1,922 Days
• Field of Search: 709/203, 709/224, 709/227, 709/238, 709/249, 709/251, 709/252, 709/223, 709/225, 709/226, 709/229
• US Class Current: 709/203
• CPC Class Codes: G06F 11/2294 by remote test
• CPC Class Codes: G06F 11/3414 Workload generation, e.g. scripts, playback
• CPC Class Codes: G06F 11/3476 Data logging G06F11/14, G06F11/2205 take precedence
• CPC Class Codes: G06F 11/3495 for systems
• CPC Class Codes: G06F 2201/805 Real-time
• CPC Class Codes: G06F 2201/81 Threshold
• CPC Class Codes: G06F 2201/875 Monitoring of systems including the internet
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 43/045 for graphical visualisation of monitoring data
• CPC Class Codes: H04L 43/067 using time frame reporting
• CPC Class Codes: H04L 43/0829 Packet loss
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

A software product tests and monitors an Internet server system. Advantageously, the software product communicates with a web browser without the need for other client software to configure transactions. The user of the web browser is guided through web pages to record, edit, and playback transactions. Recording may occur over a secure connection. The software product performs automated tests using the transactions in addition to measuring both system performance data and business performance data. The software product generates alarms when thresholds are exceeded. The test data, performance data, and alarms are correlated in time and presented graphically to the user.

Claims

1. A software product implemented on a computer readable medium for a computer system to record a transaction for a user operating a web browser wherein the transaction is used for automated testing of an Internet server system, the software product comprising:

proxy instructions configured to direct a processor to receive a first request from the web browser, transfer the first request to the Internet, receive a response to the first request from the Internet, transfer the response to the web browser, receive a second request from the web browser, and transfer the second request to the Internet;

response instructions configured to direct the processor to search the response for a secure address and if the response includes the secure address then replace the secure address with a non-secure address and identifying characters;

request instructions configured to direct the processor to record the second request as a new page if the second request is for a new page and to replace the non-secure address and the identifying characters with the secure address if the second request is for the non-secure address and the identifying characters; and

a storage medium configured to store the proxy instructions, the response instructions, and the request instructions.

2. The software product of claim 1 wherein:

the response instructions are further configured to direct the processor to search the response for embedded objects and if the response includes any of the embedded objects then to add corresponding embedded object addresses to a list; and

the request instructions are further configured to direct the processor to record the second request as a new page if the second request is not for any of the embedded object addresses on the list.

3. The software product of claim 2 wherein the request instructions are further configured to direct the processor to clear the list if the second request is not for any of the embedded object addresses on the list.

4. The software product of claim 1 wherein the request instructions are further configured to direct the processor to record Uniform Resource Locators for the first request and the second request.

5. The software product of claim 1 wherein the request instructions are further configured to direct the processor to record a sequence of the first request and the second request.

6. The software product of claim 1 wherein the request instructions are further configured to direct the processor to record an elapsed time between the first request and the second request.

7. The software product of claim 1 wherein the request instructions are further configured to direct the processor to record user input within the first request and the second request.

8. The software product of claim 1 wherein the transaction is a purchase from the Internet server system.

9. The software product of claim 1 wherein the first request and the second request comprise Hypertext Transfer Protocol requests, the secure address and the non-secure address comprise Uniform Resource Locators, and the response comprises a Hypertext Markup Language page.

10. The software product of claim 1 wherein the response instructions are further configured to direct the processor to search a header in the response for a special instruction and if the header includes the special instruction then to record the special instruction.

11. A method of operating a computer system to record a transaction for a user operating a web browser wherein the transaction is used for automated testing of an Internet server system, the method comprising the steps of:

receiving a first request from the web browser and transferring the first request to the Internet;

receiving a response to the first request from the Internet and searching the response for a secure address;

if the response includes the secure address, then replacing the secure address with a non-secure address and identifying characters;

transferring the response to the web browser and receiving a second request from the web browser;

if the second request is for a new page, then recording the second request as a new page;

if the second request is for the non-secure address and the identifying characters, then replacing the non-secure address and the identifying characters with the secure address; and

transferring the second request to the Internet.

12. The method of claim 11 further comprising the steps of:

searching the response for embedded objects, and if the response includes any of the embedded objects, then adding corresponding embedded object addresses to a list; and

wherein

recording the second request if the second request is for a new page comprises recording the second request if the second request is not for any of the embedded object addresses on the list.

13. The method of claim 12 further comprising the step of:

clearing the list if the second request is not for any of the embedded object addresses on the list.

14. The method of claim 11 further comprising the step of:

recording Uniform Resource Locators for the first request and the second request.

15. The method of claim 11 further comprising the step of:

recording a sequence of the first request and the second request.

16. The method of claim 11 further comprising the step of:

recording an elapsed time between the first request and the second request.

17. The method of claim 11 further comprising the step of:

recording user input within the first request and the second request.

18. The method of claim 11 wherein the transaction is a purchase from the Internet server system.

19. The method of claim 11 wherein the first request and the second request comprise Hypertext Transfer Protocol requests, the secure address and the non-secure address comprise Uniform Resource Locators, and the response comprises a Hypertext Markup Language page.

20. The method of claim 11 further comprising the step of:

searching a header in the response for a special instruction, and if the header includes the special instruction, then recording the special instruction.