Back to results
US 11,082,510 B2Granted
Identifying a push communication pattern
AssigneeMicro Focus LLC
InventorsOfer Eliassaf, Amir Kessner, Meidan Zemer, Oded Keret, Moshe Eran Kraus
Life of this patent
Estimating the term…
Abstract
A method for identifying a push communication pattern includes creating clusters from a communication entity's response buffers. Clusters that meet a first criterion are detected. The communication entity is identified as having a push communication pattern upon a determination that the detected clusters meet a second criterion.
Claims17
A method comprising:
- storing, by a computing device, received bytes in response buffers of a communication entity, the communication entity being a request-response pair of a request sent by a client device to a server device over a network and a corresponding response sent back by the server device to the client device over the network;
- measuring, by the computing device, arrival times of the bytes that are stored in the response buffers;
- creating, by the computing device, clusters of the response buffers of the communication entity based on the arrival times of the bytes in the response buffers;
- after creating the clusters of the response buffers of the communication entity, detecting, by the computing device, clusters with content lengths that are smaller than a first threshold, the first threshold set such that each of the detected clusters has no more than a predetermined number of sub-messages sent by the server device back to the client device;
- determining that a number of the detected clusters exceeds a second threshold requiring that the detected clusters together constitute a predetermined percentage of a response length of the communication entity;
- identifying, by the computing device, the communication entity as having a push communication pattern denoting that the communication entity is part of a communication between the client device and the server device based on the determination that each of the number of the detected clusters has a content length smaller than the first threshold and the determination that the number of the detected clusters exceed the second threshold;
- and
- displaying details of the communication entity on a graphical user interface (GUI).
5 more elements
A non-transitory computer readable medium having instructions stored thereon that when executed by a processor of a computing device implement a system comprising:
- instructions that cause the processor to store received bytes in response buffers of respective communication entities;
- instructions that cause the processor to measure arrival times of the bytes in the response buffers of the respective communication entities;
- a filter engine, a cluster engine, a detection engine, and an identification engine, wherein the filter engine is configured to filter a sequence of the communication entities to remove communication entities according to a first criterion, and
- for each remaining communication entity:
- the cluster engine is configured to create clusters of the remaining communication entity's response buffers by the arrival times of the bytes in the remaining communication entity's response buffers;
- the detection engine is configured to, after creation of the clusters, detect clusters with content lengths that are smaller than a first threshold;
- and
- the identification engine is configured to, after the creation of the clusters and in response to determining that a predetermined percentage of the detected clusters exceeds a second threshold that requires the predetermined percentage of the detected clusters together constitute a response length of the communication entity, identify the remaining communication entity as having a push communication pattern,
- wherein each community entity is a request-response pair of a request sent by a client device to a server device over a network and a corresponding response sent back by the server device to the client device over the network, the first threshold specifies that each of the detected clusters includes no more than a predetermined number of sub-messages sent by the server device back to the client device,
- wherein the push communication pattern denotes that the communication entity, having the push communication pattern, is part of a communication between the client device and the server device;
- and
- instructions that cause the processor to display details of each communication entity identified as having the push communication pattern on a graphical user interface (GUI).
9 more elements
A system comprising:
- a processor;
- and
- a non-transitory computer readable medium with which the processor is in communication, the non-transitory computer readable medium containing a set of instructions executable by the processor to:
- store received bytes in response buffers of a communication entity that is a request-response pair of a request sent by a client device to a server device over a network and a corresponding response sent back by the server device to the client device over the network;
- measure arrival times of the bytes in the response buffers of the communication entity;
- create clusters of the response buffers of the communication entity based on the arrival times of the bytes;
- after creating the clusters of the response buffers of the communication entity, detect clusters with content lengths that are smaller than a first threshold which ensures that each of the detected clusters includes no more than a predetermined number of sub-messages sent by the server device back to the client device;
- and
- after creating the clusters, determine that a number or percentage of the detected clusters exceeds a second threshold that requires the detected clusters together constitute a predetermined percentage of a response length of the communication entity;
- identify the communication entity as having a push communication pattern denoting that the communication entity is part of communication between the client device and the server device based on the determination that each of the number of the detected clusters have content lengths smaller than the first threshold and the determination that the number of the detected clusters exceed the second threshold;
- and
- display details of the communication entity on a graphical user interface (GUI).
9 more elements
Dependencies are inferred from the claim text.