Patent ID: 9100320
Filing Date: 2015-08-04
Classification: H04L

Abstract:
1. A method comprising: establishing a first network tap point near, in a network topology sense, an intranet/internet access point device, wherein the first network tap point provides a substantially non-intrusive means of viewing network communication through the intranet/internet access point; establishing a second network tap point near, in a network topology sense, a server computing device, wherein the second network tap point provides a substantially non-intrusive means of viewing network communication received or transmitted by the server computing device; monitoring, via the first and second network tap points, at least partially encrypted network communication between a client computing device that is within an intranet and the server computing device that is external to the intranet, the monitoring including inferring, by a first network tap point analyzer device, a network communication transaction based on a first portion of the monitored at least partially encrypted network communication that is viewed by the first network tap point analyzer device, generating an identifier for the inferred network communication transaction, and transmitting the identifier of the inferred network communication transaction to a second network tap point analyzer device; decrypting a second portion of the at least partially encrypted network communication that is viewed by the second tap point analyzer device to derive a decrypted network communication transaction; and analyzing the inferred network communication transaction and the decrypted network communication transaction to generate at least one set of metrics regarding the performance of the at least partially encrypted network communication between the client computing device and the server computing device, wherein the analyzing includes comparing and matching the identifier of the inferred network communication with an identifier of the decrypted network communication.