Patent ID: 11924072
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 29:
30. A system comprising:
one or more processors; and
non-transitory computer-readable media encoding instructions which, when executed by the one or more processors, cause one or more processors to:
receive, at a first device, a stream of network flow data via an attached communications network;
evaluate the stream of network flow data to derive a directed control flow graph corresponding to a distributed application, the control flow graph including a plurality of nodes and a plurality of edges between various nodes, wherein:
the nodes of the graph correspond to network-addressable application components connected to the communications network, each application component sending and receiving network traffic including one or more packets at a network interface;
one or more of the application components includes a workload creating and/or processing a data stream as part of the distributed application; and
one or more first edges of the plurality of edges between the nodes of the graph correspond to data streams between source nodes and destination nodes;

annotate one or more flows associated with one or more nodes of the plurality of nodes and/or one or more second edges of the plurality of edges in the control flow graph with one or more tags, the tags relating to a functioning of the distributed application;
identify patterns of normal behavior of the distributed application; and
display a representation of the distributed application.