Michael H Percy

US Patent:

20030223367, Dec 4, 2003

Filed:

Mar 31, 2003

Appl. No.:

10/403956

Inventors:

A. Shay - Lawrenceville GA, US
Michael Percy - Marietta GA, US
Jeffry Jones - Canton GA, US

International Classification:

H04L001/00

US Classification:

370/231000, 370/395320

Abstract:

The present invention provides methods for identifying and tracking data packets across a network. Specifically, network monitoring devices are configured to identify particular data packets or traffic flows at different points in a network by conversation fingerprinting. Conversation fingerprinting involves creating a unique identifier based on an invariant portion of one or more data packets in a traffic flow. An equivalency test is then performed between two identifiers from different monitoring devices to determine if the same data packet is received at two or more network monitoring devices. In order to reduce the probability of mismatches, additional heuristics may be applied based on additional attributes of the data packet or conversation. If a match occurs, then the timestamps of the two identifiers are compared to determine the point-to-point network transit latency between the two network monitoring devices.

US Patent:

20030225549, Dec 4, 2003

Filed:

Mar 31, 2003

Appl. No.:

10/403191

Inventors:

A. Shay - Lawrenceville GA, US
Michael Percy - Marietta GA, US
Jeffry Jones - Canton GA, US
Robert O'Halloran - Atlanta GA, US
Keri Richardson - Atlanta GA, US

International Classification:

G06F011/30
G06F015/00
G21C017/00

US Classification:

702/182000

Abstract:

The present invention provides a framework for metering, monitoring, measuring, analyzing and reporting on network traffic data. The framework of the present invention is comprised of multiple synchronized components that each contribute highly specialized functionality to the framework as a whole. In certain configurations, the present invention includes two types of metering/measuring components, referred to as Instrumentation Access Points (IAPs). The first metering/measuring component is a terminal IAP, referred to as Node Workstation and Node Server. The second metering/measuring component is an edge IAP, referred to as Probe. Probe monitors all traffic that traverses the network segment upon which it is installed, while Node is limited to the traffic specific to the particular host (i.e., workstation or server). The IAPs communicate their data to monitoring, analysis, and reporting software modules that rely upon and reside in another component referred to as Diagnostic Server. The Diagnostic Server may accept data from the IAP and stores such data for use by software modules referred to as: Modeler, Trender and Reporter. These three software modules perform the monitoring, trending, capacity planning and reporting functions of the present invention.

US Patent:

20040153563, Aug 5, 2004

Filed:

Mar 31, 2003

Appl. No.:

10/404820

Inventors:

A. Shay - Lawrenceville GA, US
Michael Percy - Marietta GA, US
Jeffrey Jones - Canton GA, US

International Classification:

G06F015/16

US Classification:

709/232000

Abstract:

The present invention provides systems and methods for predicting expected service levels based on measurements relating to network traffic data. Measured network performance characteristics can be converted to metrics for quantifying network performance. The response time metric may be described as a service level metric whereas bandwidth, latency, utilization and processing delays may be classified as component metrics of the service level metric. Service level metrics have certain entity relationships with their component metrics that may be exploited to provide a predictive capability for service levels and performance. The present invention involves system and methods for processing metrics representing current conditions in a network, in order to predict future values of those metrics. Based on predicted service level information, actions may be taken to avoid violation of a service level agreement including, but not limited to, deployment of network engineers, re-provisioning equipment, identifying rogue elements, etc.