Monitoring communications in a containerized environment

A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

• receiving a frame at a first agent configured to collect information from one or more network interfaces of a first machine in a cloud environment, wherein the frame is associated with a communication from a source pod that is an abstraction of a set of one or more containers deployed on the first machine;
• and
• reporting, by the agent and based on the frame, a first set of connection information to a data platform configured to match the first set of connection information with a second set of connection information reported by a second agent configured to collect information from one or more network interfaces of a second machine in the cloud environment to identify a pod-to-pod communication from the source pod on the first machine to a destination pod on the second machine for representation in a pod communication graph that includes a plurality of nodes representing a plurality of pods and a plurality of edges interconnecting the plurality of nodes and representing communications between the plurality of pods, wherein the first set of connection information indicates the source pod but not the destination pod;
• wherein the data platform is configured to generate the pod communication graph based on a process cluster graph, wherein clusters of the process cluster graph are regrouped by pod type to generate the pod communication graph.

A system comprising:

• a processor, and
• a memory coupled to the processor and configured to provide the processor with instructions to:
• receive a frame at a first agent configured to collect information from one or more network interfaces of a first machine in a cloud environment, wherein the frame is associated with a communication from a source pod that is an abstraction of a set of one or more containers deployed on the first machine;
• and
• report, based on the frame, a first set of connection information to a data platform configured to match the first set of connection information with a second set of connection information reported by a second agent configured to collect information from one or more network interfaces of a second machine in the cloud environment to identify a pod-to-pod communication from the source pod on the first machine to a destination pod on the second machine for representation in a pod communication graph that includes a plurality of nodes representing a plurality of pods and a plurality of edges interconnecting the plurality of nodes and representing communications between the plurality of pods, wherein the first set of connection information indicates the source pod but not the destination pod;
• wherein the data platform is configured to generate the pod communication graph based on a process cluster graph, wherein clusters of the process cluster graph are regrouped by pod type to generate the pod communication graph.