Time-based correlation of non-translative network segments

摘要

Methods and systems for correlating network traffic between non-translative network systems are provided. Generally, time-based offset data, or transmission latency, is first determined between devices in non-translative network segments by injecting, with a time stamp, a known network pattern at a first end of the network topology. Traces are then recorded, with time stamps, of the network traffic over one or more nodes throughout the non-translative network. The generate network traffic is then compared to the traced network traffic in a best fit to thereby determine the time latency in traffic throughout the network. Later, when it is desired to determine causality of network activity between non-translative network segments, the determined latency between different network devices can be compared to traced patterns of network traffic to determine the origin of a network operation that created an observed event.