Method of monitoring network and application performance by analyzing web clients and web servers

• US 8,438,276 B1
• Filed: 12/02/2010
• Issued: 05/07/2013
• Est. Priority Date: 08/31/2004
• Status: Active Grant

• Current Assignee: Precise Software Solutions, Inc. (Idera, Inc.)
• Original Assignee: Precise Software Solutions, Inc. (Idera, Inc.)
• Inventors: Haber, Lior, Bercovici, Samuel
• Primary Examiner(s): Park, Jeong S
• Application Number:
  US12/958,740
• Time in Patent Office: 887 Days
• Field of Search: 709/223, 709/224, 719/318
• US Class Current: 709/224
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
• CPC Class Codes: H04L 41/5083 wherein the managed service relates to web hosting
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

A system and method for monitoring network and application performance. In one embodiment the method comprises logging information on network interface card (NIC) events involving a web page transaction, logging information on web server events involving the web page transaction, logging information on client browser events involving the web page transaction, collecting the information on NIC events, the information on web server events, and the information on client browser events on a collector server, and correlating the information on NIC events, the information on web server events, and the information on client browser events. In a further embodiment, correlating the information may comprise correlating the information on NIC events with the information on web server events by grouping the events by a client address and by a server address and then matching pairs of NIC events and web server events by time and data transfer size. Correlating the information may also comprise correlating the information on client browser events with the information on web server events by a color ID.

Claims

1. A method comprising:

logging information on network interface card (NIC) events involving a web page transaction, said steps of logging information on NIC events including maintaining said information on NIC events in one or more data structures after said NIC events;

logging information on web server events involving the web page transaction;

logging information on client browser events involving the web page transaction;

collecting the information on NIC events, the information on web server events, and the information on client browser events on a collector server; and

correlating the information on NIC events, the information on web server events, and the information on client browser events to monitor performance of the web page transaction;

wherein correlating the information comprises correlating the information on client browser events with the information on web server events by a color ID, said color ID being sufficient to uniquely identify a specific web page and its associated components.

2. The method of claim 1, wherein correlating the information comprises correlating the information on NIC events with the information on web server events by matching pairs of NIC events and web events by time and data transfer size.

3. The method of claim 1,

wherein logging information on NIC events comprises utilizing a NIC agent configured to recognize messages which are part of selected web page transaction,

wherein logging information on web server events comprises utilizing a web server agent, and

wherein logging information on client browser events comprises utilizing a browser agent.

4. The method of claim 1, including steps of, at the client device, logging whether the web page was abandoned before the web page completed rendering.

5. The method of claim 1, including steps displaying information on the overall operation of one or more web servers.

6. The method of claim 1 wherein correlating the information comprises correlating the information on NIC events with the information on web server events by grouping events by a client address and a server address.

7. A system comprising:

a performance monitoring system operable to;

log event information from a client browser operable to request a web page as part of a web page transaction,

log information from a web server operable to return the web page as part of the web page transaction, and

log information from a network interface card (NIC) operable to convey the web page as part of the web page transaction, including maintained logged information from said NIC in one or more data structures after said information has left said NIC; and

a collector server operable to monitor performance of the web page transaction by;

collecting the event information from the client browser, from the web server, and from the NIC; and

correlating the event information from the client browser, from the web server, and from the NIC;

wherein the collector server is able to correlate the event information from the client browser with the event information from the web server events by a color ID, said color ID being sufficient to uniquely identify a specific web page and its associated components.

8. The system of claim 7, wherein the collector server is able to correlate the event information from the NIC with the event information from the web server by matching pairs of NIC events and web events by time and data transfer size.

9. The system of claim 7, wherein the performance monitoring system comprises:

a NIC agent operable to log event information from the client browser, said NIC agent configured to recognize messages which are part of selected web page transactions,

a web server agent operable to log event information from the web server, and

a browser agent operable to log event information from the client browser.

10. The method of claim 7, wherein an agent at the client device is further operable to log whether the web page was abandoned before the web page completed rendering.

11. The method of claim 7, wherein the collector server is further operable to display information on the overall operation of one or more web servers.

12. The system of claim 7, wherein the collector server is able to correlate the event information from the NIC with the event information from the web server by grouping events by a client address and a server address.

13. A non-transitory computer readable medium including program instructions executed to implement a method comprising:

logging information on network interface card (NIC) events involving a web page transaction, including maintaining said information on NIC events in one or more data structures after said NIC events;

logging information on web server events involving the web page transaction;

logging information on client browser events involving the web page transaction; and

collecting the information on NIC events, the information on web server events, and the information on client browser events on a collector server; and

correlating the information on NIC events, the information on web server events, and the information on client browser events to monitor performance of the web page transaction;

wherein correlating the information comprises correlating the information with the information on web server events by a color ID, said color ID being sufficient to uniquely identify a specific web page and its associated components.

14. The non-transitory computer readable medium of claim 13, wherein correlating the information comprises correlating the information on NIC events with the information on web server events by matching pairs of NIC events and web events by time and data transfer size.

15. The non-transitory computer readable medium of claim 13, wherein correlating the information comprises correlating the information on NIC events with the information on web server events by grouping events by a client address and a server address.