Patent ID: 8489679

Claim:
A method comprising: monitoring, using a monitoring device located near a first end of one segment of a connection between a client and a server in a network, at least packets of an initial transmission control protocol handshake between the client and the server; and determining by the monitoring device a network time, a server time, and a client time based on information collected when monitoring the one segment, wherein the determining comprises at least: classifying client and server packets based on one or more transmission control protocol turns in a message exchange on the one segment, wherein each of the one or more transmission control protocol turns comprises at least one request message and at least one response message to the at least one request message; identifying a network roundtrip time based on the classifying the client and server packets; identifying a first time period corresponding to a total time that transpires after each transmission control protocol turn from the one segment, and determining a second end time period for a second end of a further segment of the connection between the client and the server, the further segment not comprising the monitoring device, by subtracting the network roundtrip time from the first time period; and determining a first end time period by subtracting a total of the network roundtrip times for all of the one or more transmission control protocol turns and a total of the times of the second end for all of the one or more transmission control protocol turns from a total time associated with the message exchange.