Mapping virtual internet protocol addresses

• US 9,009,304 B2
• Filed: 06/04/2012
• Issued: 04/14/2015
• Est. Priority Date: 08/08/2006
• Status: Active Grant

• Current Assignee: Riverbed Technology, LLC (Riverbed Technology Incorporated)
• Original Assignee: Riverbed Technology Incorporated
• Inventors: Malloy, Patrick J., Strohm, John Wilson, Ryan, Gehl, Dunn, Antoine
• Primary Examiner(s): EDWARDS, LINGLAN E
• Application Number:
  US13/487,863
• Publication Number:
  US 20120246307A1
• Time in Patent Office: 1,044 Days
• Field of Search: 709/200, 709/220, 709/221, 709223-225
• US Class Current: 709/224
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

The embodiments provide for analyzing activity of devices in a network. Activity from a device may result from multiple devices translated to a common address, such as a public internet protocol (IP) address. In some embodiments, the activity from a network or device is analyzed to identify if multiple devices communicate via translated addresses from the common address. The devices may be identified based on various criteria, such as a unique identifier, protocol header information, or a media access control (or “MAC”) address. Other criteria may also be employed. Each device that is mapped to common address is then remapped so that each device has its own address. The activity data is then modified so that each device is correlated with its unique address. Alternatively, a new activity data file may be generated so that the activity of each device is indicated.

Claims

1. A method of analyzing network activity, wherein two or more devices in the network are mapped to a common address, said method comprising:

receiving, by a processor, data indicating activity of the network;

identifying, by the processor, two or more devices that map to a common address;

modifying, by the processor, the activity data to indicate a unique individual address for each device that is mapped to the common address, wherein said modifying comprises generating a new internet protocol address for each media access control address that is mapped to the common address;

determining, by the processor, performance statistics related to each device based on the modified activity data; and

outputting, by the processor, the determined performance statistics.

2. The method of claim 1, wherein identifying two or more devices that map to a common address comprises identifying a router that translates private internet protocol (IP) addresses of devices coupled to the router to a common, public IP address.

3. The method of claim 1, wherein identifying two or more devices that map to a common address comprises identifying a plurality of media access control addresses that are mapped to the common address.

4. The method of claim 1, wherein modifying, by the processor, the activity data to indicate a unique individual address for each device comprises generating a unique individual address for each device based on an X-Forwarded-For (XFF) HTTP header.

5. The method of claim 1, wherein modifying, by the processor, the activity data to indicate a unique individual address for each device comprises generating at least a portion of an internet protocol address for at least one of the devices.

6. The method of claim 5, wherein modifying, by the processor, the activity data to indicate a unique individual address for each device comprises generating, by the processor, a unique address for at least one of the devices responsive to a user input.

7. The method of claim 1, wherein modifying, by the processor, the activity data to indicate a unique individual address for each device comprises generating a new internet protocol address for at least one of the devices.

8. The method of claim 1, wherein modifying the activity data to indicate the unique individual address for each device that is mapped to a common address comprises generating an activity data file that indicates activity for each device.

9. The method of claim 1, wherein modifying the activity data to indicate the unique individual address for each device that is mapped to a common address comprises modifying an activity data file to indicate activity for each device.

10. A system comprising:

an input for receiving data indicating activity of the network;

a processor, configured by executable program code, to

identify two or more devices in the network that map to a common address,

modify the activity data to indicate a unique individual address for each device, wherein said modifying comprises generating a new internet protocol address for each media access control address that is mapped to the common address, and

determine performance statistics related to each device based on the modified activity data; and

an output device that is configured to provide the determined performance statistics to a graphical user interface.

11. The system of claim 10, wherein the processor is configured to identify a router that translates private internet protocol (IP) addresses of devices coupled to the router to a common, public IP address.

12. The system of claim 10, wherein the processor is configured to identify a plurality of media access control addresses that are mapped to the common address.

13. The system of claim 10, wherein the processor is configured to generate at least one individual address based on an X-Forwarded-For (XFF) HTTP header.

14. The system of claim 10, wherein the processor is configured to generate at least a portion of an individual internet protocol address for at least one of the devices.

15. The system of claim 10, wherein the processor is configured to generate the individual address responsive to a user input received via the graphical user interface.

16. The system of claim 10, wherein the processor is configured to generate a new internet protocol address for at least one of the devices.

17. The system of claim 10, wherein the processor is configured to generate an activity data file that indicates activity for each device.

18. The system of claim 10, wherein the processor is configured to modify an activity data file to indicate activity for each device.

19. A non-transitory computer readable medium that includes a program that, when executed by a processor, causes the processor to:

receive an activity data file that includes data indicative of activity of the network,

identify two or more devices in the network that map to a common address,

modify the activity data to indicate a unique individual address for each device, wherein said modifying comprises generating a new internet protocol address for each media access control address that maps to the common address,

determine performance statistics related to each device based on the modified activity data, and

provide the determined performance statistics to a graphical user interface.

20. The medium of claim 19, wherein the program causes the processor to identify the two or more devices via a process that includes identifying a router that translates private internet protocol (IP) addresses of devices coupled to the router to the common address.

21. The medium of claim 19, wherein the program causes the processor to identify the devices that map to the common address via a process that includes identifying a plurality of media access control addresses that are mapped to the common address.