US 9,813,442 B2
Server grouping system
Jan Jusko, Prague (CZ); Tomas Pevny, Prague (CZ); and Martin Rehak, Prague (CZ)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Feb. 1, 2017, as Appl. No. 15/421,447.
Application 15/421,447 is a continuation of application No. 14/748,281, filed on Jun. 24, 2015, granted, now 9,596,321.
Prior Publication US 2017/0142151 A1, May 18, 2017
This patent is subject to a terminal disclaimer.
Int. Cl. G08B 23/00 (2006.01); G06F 12/16 (2006.01); G06F 12/14 (2006.01); G06F 11/00 (2006.01); H04L 29/06 (2006.01); H04L 29/12 (2006.01); H04L 29/08 (2006.01); H04L 12/26 (2006.01)
CPC H04L 63/1441 (2013.01) [H04L 43/08 (2013.01); H04L 61/2007 (2013.01); H04L 63/101 (2013.01); H04L 67/10 (2013.01); H04L 67/42 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a communication interface, client-server connection data for a plurality of clients and a plurality of servers, the client-server connection data including a plurality of server Internet Protocol (IP) addresses corresponding to the plurality of servers;
for each one IP address pair of a plurality of IP address pairs selected from the plurality of server IP addresses, performing, by a hardware processor, a statistical test to determine whether the server IP addresses in the one IP address pair are related by common clients based on the number of the clients connecting to each of the server IP addresses in the one IP address pair;
generating, by the hardware processor, a graph including a plurality of vertices and a plurality of edges between the vertices, each of the vertices corresponding to a different one of the server IP addresses, each one edge of the edges corresponding to a different one of the IP address pairs determined to be related by the common clients in the statistical test, the one edge connecting the server IP addresses in the one IP address pair determined to be related by the common clients in the statistical test; and
clustering, by the hardware processor, the vertices in the graph yielding a plurality of clusters, each of the clusters including the vertices representing a subset of the server IP addresses, the subset of the server IP addresses in one of the clusters providing an indication of the server IP addresses of the servers serving a same application.