A method for characterizing a computer network having a topology and comprising: - a plurality of stations capable of exchanging data with each other, and - a plurality of routers conveying data between the different stations, the method comprising providing a log including a set of events having taken place in the computer network, the method being characterized in that the method further includes: - the selection of events corresponding to a same exchange of data between a same first station and a second station from among the plurality of events in the log, to obtained selected events, - for at least one selected event, extracting at least one information to obtain extracted informations, an extracted information of a selected event being relative to one or more elements from the group made up of: • a primary station, the primary station being a station emitting exchanged data of the considered selected event, • a secondary station, the secondary station being a station receiving exchanged data of the considered selected event, • routers of the plurality of routers, the routers being routers through which the exchanged data of the considered selected event passed, • a nature, the nature being the kind of the exchanged data of said selected event, • a temporal information, the temporal information being the date and time of the exchange of data of the considered selected event, and - determining at least part of the topology of the computer network based on the extracted information, the method further comprises: - choosing among a plurality of events of the log the events involving one station from the plurality of stations, - determining, among the selected events, events involving the three most frequently used communication protocols by the considered third station, to obtain determined events, - computing the ratio between the number of determined events and the number of chosen events, and - deducing the nature of the considered third station based on the value of the ratio. - a plurality of stations capable of exchanging data with each other, and - a plurality of routers conveying data between the different stations, - the selection of events corresponding to a same exchange of data between a same first station and a second station from among the plurality of events in the log, to obtained selected events, - for at least one selected event, extracting at least one information to obtain extracted informations, an extracted information of a selected event being relative to one or more elements from the group made up of: • a primary station, the primary station being a station emitting exchanged data of the considered selected event, • a secondary station, the secondary station being a station receiving exchanged data of the considered selected event, • routers of the plurality of routers, the routers being routers through which the exchanged data of the considered selected event passed, • a nature, the nature being the kind of the exchanged data of said selected event, • a temporal information, the temporal information being the date and time of the exchange of data of the considered selected event, and • a primary station, the primary station being a station emitting exchanged data of the considered selected event, • a secondary station, the secondary station being a station receiving exchanged data of the considered selected event, • routers of the plurality of routers, the routers being routers through which the exchanged data of the considered selected event passed, • a nature, the nature being the kind of the exchanged data of said selected event, • a temporal information, the temporal information being the date and time of the exchange of data of the considered selected event, and - determining at least part of the topology of the computer network based on the extracted information, - choosing among a plurality of events of the log the events involving one station from the plurality of stations, - determining, among the selected events, events involving the three most frequently used communication protocols by the considered third station, to obtain determined events, - computing the ratio between the number of determined events and the number of chosen events, and - deducing the nature of the considered third station based on the value of the ratio.