Application discovery and dependency mapping

A non-transitory computer-readable medium having instructions stored thereon that, when executed, cause one or more processors to:

• receive first network information from a first server of a multi-server system, wherein the first network information is time-indexed and has been obtained from the first server at a synchronized time at periodic intervals;
• receive second network information from a second server of the multi-server system, wherein the second network information is time-indexed and has been obtained from the second server at the synchronized time or approximately the synchronized time;
• determine a server dependency between the first server and the second server of the multi-server system based on the first network information received from the first server and the second network information received from the second server, wherein determining the server dependency comprises identifying a bilateral communication between the first server and the second server;
• determine for the determined server dependency, an application dependency between a first application executed at the first server and a second application executed at the second server, wherein to determine the application dependency, the instructions cause the one or more processors to:
• determine first directory information associated with the first application and indicated by a first process identifier assigned to the first application by the first server;
• map the first directory information to the first application using an application identification file;
• determine second directory information associated with the second application and indicated by a second process identifier assigned to the second application by the second server;
• and
• map the second directory information to the second application using the application identification file;
• and
• generate data that indicates at least one of the determined server dependency or the determined application dependency.

A computing system comprising:

• one or more processors of a first server of a multi-server system, the one or more processors configured to:
• capture network information at a predetermined time interval for a predetermined duration, wherein the network information is associated with one or more outgoing messages of the first server and indicates a destination of the one or more outgoing messages;
• and
• capture process information at the predetermined time interval for the predetermined duration, wherein the process information is associated with the one or more outgoing messages of the first server and indicates a process responsible for generating the one or more outgoing messages, and wherein the process information comprises a process identifier assigned to the process by the first server and configured to indicate directory information associated with the process;
• and
• a memory configured to store the captured network information and the captured process information over the predetermined duration,
• wherein the one or more processors are further configured to transmit, at the end of the predetermined duration, the captured network information and the captured process information from the first server to a computing device for determining at least one dependency between the first server and a second server of the multi-server system.