Method and system for generating transaction data from network traffic data for an application system

A system for generating transaction data from network traffic data for an application system which is distributed across a plurality of network connected nodes, comprising:

• a processor coupled to memory and an interface to the network;
• and,
• at least one of hardware and software modules within the memory and controlled or executed by the processor, the modules including:
• a module for gathering the network traffic data from network traffic passing between the plurality of network connected nodes of the application system, the network traffic data including syntactic information;
• a module for storing the network traffic data and the syntactic information in field-sets;
• a module for deriving semantic information from the network traffic data and the syntactic information in the field-sets with a first module which implements a first semantic model relating to first transactions within the application system having a first granularity, and modifying the field-sets to include the semantic information;
• a module for passing the field-sets to a second module;
• a module for deriving additional semantic information from the network traffic data, the syntactic information, and the semantic information in the field-sets with the second module which implements a second semantic model relating to second transactions within the application system having a second granularity, the second granularity being coarser than the first granularity, and further modifying the field-sets to include the additional semantic information;
• and,
• a module for outputting the field-sets from the second module to provide the transaction data for the application system;
• wherein the syntactic information pertains to form and content of the network traffic data and wherein the semantic information and the additional semantic information pertain to meaning and context of the network traffic data and the syntactic information in relation to the network traffic and the application system.