A program storage device readable by a computer tangibly embodying a program of instructions executable by said computer to perform method steps for determining frequent node traversal patterns in a communications network coupled to a computer which includes a memory and a trace collector for collecting node traversal sequences, said method steps comprising:
- collecting and storing the node traversal sequences, each node traversal sequence including an end user identifier, a source node and a destination node;
- sorting the node traversal sequences by said end user identifier into a series of time-ordered pairs, responsive to said steps of collecting and storing;
- determining a set of maximal forward references from said series of time-ordered pairs;
- and
- determining a set of large reference sequences from said set of maximal forward references, a large reference sequence being a consecutive subsequence of said maximal forward references which occurs in excess of a predetermined threshold.