Patent ID: 7444408

Claim:
An apparatus to analyze traffic on a network, comprising: a database to store a plurality of packets forming said traffic; a static traffic analyzer to identify static traffic in said plurality of packets, the static traffic analyzer including: a static packet identifier to identify at least one static packet in said plurality of packets as said static traffic, said static packet including an address and a static port, said address identifying a static host and said static port being a confirmed port; a static connection identifier to identify at least one static connection to said static port on said static host in said static traffic; and a static combiner to combine all of said static connections into a static connection rollup, said static connection rollup including a number of said static connections to said static port on said static host; a dynamic traffic analyzer to identify dynamic traffic in said plurality of packets; and a host identifier to identify at least one host as a communication point including said static host and said static port from said static traffic and said dynamic traffic.