Hierarchy for characterizing interactions with an application

• US 8,402,131 B2
• Filed: 08/24/2010
• Issued: 03/19/2013
• Est. Priority Date: 05/11/2006
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Bansal, Jyoti K., Thio, Ling, Cobb, Jeffrey R.
• Primary Examiner(s): Zele, Krista
• Assistant Examiner(s): FORMAN, JAMES Q
• Application Number:
  US12/862,109
• Publication Number:
  US 20110022707A1
• Time in Patent Office: 938 Days
• Field of Search: 709/224, 709/223, 709/226, 709/203, 714/37, 717/127, 370/252
• US Class Current: 709/224
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

Application runtime data is obtained from an application monitoring system which monitors execution of an application, and traffic monitoring data is obtained from a traffic monitoring system which monitors traffic to/from the application as the clients interact with the application. Corresponding application runtime data and traffic monitoring data can be selectively output to assist an operator in investigating an anomalous condition. The data can be classified and selectively output according to one or more hierarchies which characterize the interactions. The hierarchies can include a domain level, a business process level (where a domain is made up of a number of business processes), a business transaction level (where a business process is made up of different business transactions), an individual transaction level (where a business transaction is made up of different transactions), and a transaction component level (where a transaction is made up of one or more transaction components).

Claims

1. A method for providing information regarding an application, comprising:

generating traffic monitoring data based on observing traffic between a client and an application, the observing the traffic comprises obtaining a copy of the traffic from a device which receives the traffic, the device is between the client and the application;

classifying the traffic monitoring data according to a first hierarchy, thereby providing classified traffic monitoring data, the first hierarchy comprising different levels which characterize the client interacting with the application, the traffic monitoring data is classified according to a single request associated with one of the different levels of the first hierarchy;

generating application runtime data based on monitoring instrumented components of the application during execution of the application, the execution is responsive to the client interacting with the application;

classifying the application runtime data according to a second hierarchy, thereby providing classified application runtime data, the second hierarchy comprising different levels which characterize the client interacting with the application, the application runtime data is classified according to a sequence of multiple requests from the client to the application, the sequence of multiple requests is associated with one of the different levels of the second hierarchy which differs from one of the different levels of the first hierarchy; and

providing an output using the classified traffic monitoring data and the classified application runtime data.

2. The method of claim 1, wherein:

the traffic monitoring data and the application runtime data are classified according to a sequence of multiple requests associated with a shared hierarchical level of the first and second hierarchies.

3. The method of claim 1, wherein:

the classifying the traffic monitoring data comprises comparing components of the traffic to a set of definitions to determine a matching definition, the matching definition being associated with the one of the different levels of the first hierarchy.

4. The method of claim 3, wherein:

the definitions comprise one of URLs, HTTP post parameters, cookie parameters, query parameters and session manager parameters.

5. The method of claim 1, wherein:

the classifying the application runtime data comprises comparing components of one of;

(a) a request provided to the application by the client and (b) a response provided to the client by the application to a set of definitions to determine a matching definition, the matching definition being associated with the one of the different levels of the second hierarchy.

6. The method of claim 5, wherein:

the definitions comprise one of URLs, HTTP post parameters, cookie parameters, query parameters and session manager parameters.

7. The method of claim 1, wherein:

the classifying the traffic monitoring data comprises classifying an aggregation of traffic monitoring data associated with a plurality of clients according to the first hierarchy.

8. The method of claim 1, wherein:

the classifying the application runtime data comprises classifying an aggregation of application runtime data associated with a plurality of clients according to the second hierarchy.

9. The method of claim 1, wherein:

the providing the output comprises displaying an interface which allows viewing of a selected portion of the classified traffic monitoring data according to the one of the different levels of the first hierarchy, and of a selected portion of the classified application runtime data according to the one of the different levels of the second hierarchy.

10. The method of claim 1, wherein:

the application runtime data is classified according to;

a business process associated with one level of the different levels of the second hierarchy,

business transactions, which are associated with a lower level of the different levels of the second hierarchy, and which are parts of the business process, and

individual transactions, which are associated with a further lower level of the different levels of the second hierarchy, and which are parts of the business transactions, each individual transaction is defined by a sequence of multiple requests to the application.

11. The method of claim 1, wherein:

the sequence of multiple requests is associated with a transaction.

12. The method of claim 1, wherein:

the sequence of multiple requests is associated with a set of web pages.

13. The method of claim 1, wherein:

the sequence of multiple requests is associated with a set of transactions, and each transaction is associated with a web page.

14. The method of claim 1, wherein:

the single request is associated with a single request-response pair; and

the traffic monitoring data is classified according to sequences of multiple request-response pairs associated with a higher level of the different levels of the first hierarchy, the single request-response pair represents a request provided to the application by the client and an associated response provided to the client by the application.

15. The method of claim 9, wherein:

the selected portion of the classified traffic monitoring data and the selected portion of the classified application runtime data are correlated by a request-response pair identifier.

16. The method of claim 1, wherein:

the different levels of the second hierarchy characterize the interacting from a perspective of the client with different degrees of breadth.

17. The method of claim 1, wherein:

the different levels of the second hierarchy characterize the interacting according to a business model with different degrees of breadth.

18. The method of claim 14, wherein:

the traffic monitoring data is classified according to groups of sequences of multiple request-response pairs associated with a further higher level of the different levels of the first hierarchy.

19. A computer program product comprising:

a computer readable storage device comprising computer readable program code embodied therewith, the computer readable program code comprising;

computer readable program code configured to observe traffic at a location in a route traversed by traffic between an application server and a client device that is physically separate from the application server, execution of an application at the application server occurs in response to a client at the client device interacting with the application;

computer readable program code configured to generate traffic monitoring data based on the traffic;

computer readable program code configured to classify the traffic monitoring data according to a first hierarchy, to provide classified traffic monitoring data, the first hierarchy comprising different levels which characterize the interacting, and the traffic monitoring data is classified according to a single request associated with one of the different levels of the first hierarchy;

computer readable program code configured to monitor instrumented components of the application which are invoked during the execution of the application;

computer readable program code configured to generate application runtime data based on the execution of the monitored instrumented components;

computer readable program code configured to classify the application runtime data according to a second hierarchy, to provide classified application runtime data, the second hierarchy comprising different levels which characterize the interacting, the application runtime data is classified according to a sequence of multiple requests from the client to the application, the sequence of multiple requests is associated with one of the different levels of the second hierarchy which differs from one of the different levels of the first hierarchy; and

computer readable program code configured to provide an output which integrates the classified traffic monitoring data and the classified application runtime data.