# US 10,122,599 B2 · Method and apparatus for dynamically scaling application performance analysis completeness based on available system resources

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,122,599 B2
- Document ID: US10122599B2
- Status: Granted
- Kind: B2
- Application number: 13/655,451
- Filed: 2012-10-19
- Published: 2014-04-24
- Granted: 2018-11-06
- Earliest claimed: 2012-10-19
- Assignees: AirMagnet, Inc.
- Applicants: Fluke Corporation
- Inventors: John Monk; Dan Prescott; Robert Vogt; Bruce Kosbab
- Web page: https://patentgrep.com/patent/US10122599B2

## CPC

- H04L 43/04: Processing captured monitoring data, e.g. for logfile generation
- G06F 11/3419: {by assessing time}
- G06F 11/3495: {for systems}
- H04L 43/12: Network monitoring probes
- G06F 2201/81: Threshold
- G06F 2201/875: Monitoring of systems including the internet
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method and apparatus is disclosed herein for dynamically scaling application performance analysis completeness based on available system resources. In one embodiment, the method comprises monitoring incoming network traffic and a rate at which the traffic is being analyzed and dynamically adjusting application performance analysis completeness, the analysis being performed on the observed network traffic.

## Claims

### Claim 1

A method for use with a network application performance monitoring system, the method comprising: monitoring incoming network traffic and a rate at which the traffic is being analyzed using an analysis process; and dynamically adjusting, in response to monitoring the incoming network traffic and the rate at which the traffic is being analyzed including layer 7 application analysis, layer 4 application analysis and network performance level analysis, a selected parameter of the monitoring process to adjust application performance analysis completeness, the analysis being performed on the observed network traffic wherein dynamically adjusting application performance analysis completeness comprises:
computing an amount of time that analysis by the application performance monitoring system can continue without dropping incoming packets;
comparing the amount of time to a first threshold; and
adjusting completeness of application performance analysis based on results of comparing the amount of time to the first threshold including eliminating a subset of the following analyses: network performance level analysis, layer 4 application analysis, and layer 7 application analysis.

### Claim 2 (depends on 1)

The method of claim 1 wherein adjusting the completeness of the application performance analysis comprises: determining that the amount of time is below the first threshold; and decreasing the completeness of the application performance analysis.

### Claim 3 (depends on 2)

The method of claim 2 wherein decreasing the completeness of the application performance analysis is only performed with respect to the non-critical applications.

### Claim 4 (depends on 3)

The method of claim 3 further comprising: subsequently reevaluating the amount of time to the first threshold; and changing the completeness of the application performance analysis of one or more critical applications if the amount of time is still below the first threshold.

### Claim 5 (depends on 2)

The method of claim 2 further comprising increasing application performance analysis completeness if the monitoring system is running under maximum capacity and is not performing all levels of application performance analysis.

### Claim 6 (depends on 1)

The method of claim 1 wherein decreasing application performance analysis completeness comprises performing only network performance level analysis.

### Claim 7 (depends on 1)

The method of claim 1 wherein decreasing application performance analysis comprises performing only network performance level analysis and layer 4 application analysis.

### Claim 8

An article of manufacture having one or more non-transitory storage media storing instructions therein which, when executed by a system, causes the system to perform a method for use with a network application performance monitoring system, the method comprising: monitoring incoming network traffic and a rate at which the traffic is being analyzed using an analysis process; and dynamically adjusting, in response to monitoring the incoming network traffic and the rate at which the traffic is being analyzed including layer 7 application analysis, layer 4 application analysis and network performance level analysis, a selected parameter of the monitoring process to adjust application performance analysis completeness, the analysis being performed on the observed network traffic wherein dynamically adjusting application performance analysis completeness comprises:
computing an amount of time that analysis by the application performance monitoring system can continue without dropping incoming packets;
comparing the amount of time to a first threshold; and
adjusting completeness of application performance analysis based on results of comparing the amount of time to the first threshold including eliminating a subset of the following analyses: network performance level analysis, layer 4 application analysis, and layer 7 application analysis.

### Claim 9 (depends on 8)

The article of manufacture defined in claim 8 wherein adjusting the completeness of the application performance analysis comprises: determining that the amount of time is below the first threshold; and decreasing the completeness of the application performance analysis.

### Claim 10 (depends on 9)

The article of manufacture defined in claim 9 wherein decreasing the completeness of the application performance analysis is only performed with respect to the non-critical applications.

### Claim 11 (depends on 10)

The article of manufacture defined in claim 10 wherein the method further comprises: subsequently reevaluating the amount of time to the first threshold; and changing the completeness of the application performance analysis of one or more critical applications if the amount of time is still below the first threshold.

### Claim 12 (depends on 9)

The article of manufacture defined in claim 9 wherein the method further comprises increasing application performance analysis completeness if the monitoring system is running under maximum capacity and is not performing all levels of application performance analysis.

### Claim 13 (depends on 8)

The article of manufacture defined in claim 8 wherein decreasing application performance analysis completeness comprises performing only network performance level analysis.

### Claim 14 (depends on 8)

The article of manufacture defined in claim 8 wherein decreasing application performance analysis comprises performing only network performance level analysis and layer 4 application analysis.

### Claim 15

A system for use in monitoring network application performance, the system comprising: a memory to store a network application performance analysis module; and a processor coupled to the memory to execute the network application performance analysis module to: monitor incoming network traffic and a rate at which the traffic is being analyzed using an analysis process; and dynamically adjust, in response to monitoring the incoming network traffic and the rate at which the traffic is being analyzed including layer 7 application analysis, layer 4 application analysis and network performance level analysis, a selected parameter of the monitoring process to adjust application performance analysis completeness, the analysis being performed on the observed network traffic wherein dynamically adjusting application performance analysis completeness comprises:
computing an amount of time that analysis by the application performance monitoring system can continue without dropping incoming packets;
comparing the amount of time to a first threshold; and
adjusting completeness of application performance analysis based on results of comparing the amount of time to the first threshold including eliminating a subset of the following analyses: network performance level analysis, layer 4 application analysis, and layer 7 application analysis.

### Claim 16 (depends on 15)

The system defined in claim 15 wherein the processor is operable to: compute an amount of time that analysis by the application performance monitoring system can continue without dropping incoming packets; compare the amount of time to a first threshold; and adjust completeness of application performance analysis based on results of comparing the amount of time to the first threshold.
