Patent ID: 8892737
Filing Date: 2014-11-18
Classification: G06F,H04L

Abstract:
1. A network sniffer for passively capturing data traffic flows between a plurality of clients and a plurality of web servers, the network sniffer comprising: a traffic processor for processing data traffic sent from the plurality of clients and from the plurality of web servers, wherein the traffic processor is configured to collect contexts by parsing each request for content from each of the plurality of clients to retrieve a context, wherein the context includes at least one of a web server name and request parameters; an application learner for identifying transactions sent from the plurality of clients, wherein the application learner is configured to determine if the each request for content belongs to a previously discovered application, and when the each request for content has been determined as belonging to the previously discovered application, the application learner is configured to assign an application identification of the previously discovered application to the context that is retrieved by parsing the each request for content; a monitor for monitoring and generating statistics respective of the operation of the web servers and their respective web applications; and a controller for performing a corrective action when a predefined policy has been violated, wherein the predefined policy defines a minimum allowable throughput for an application, wherein the corrective action comprises stalling traffic directed to a server that executes the application, wherein a result of the corrective action is monitored to determine whether at least one monitored parameter is improved due to the corrective action and the controller is updated with a next corrective action to activate when a subsequent request is received based on the monitored result, wherein at least one of the traffic processor, the application learner and the monitor is implemented in hardware or stored in a memory.