Network interaction analysis
View Patent ↗Network interaction analysis is disclosed. Traffic is monitored including a network interaction. Monitoring includes monitoring at least one of TCP, HTTP, or IP layer information. The network interaction is analyzed based at least in part on a source of a transaction determined from the layer information.
1. A system for analyzing a network interaction, comprising:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
monitor traffic including the network interaction, wherein monitoring includes monitoring at least one of TCP, HTTP, or IP layer information; and
determine whether the network interaction is a qualified network interaction with a user, wherein the qualified network interaction is qualified for a payment between an advertiser and a publisher, wherein determining whether the network interaction is qualified is based at least in part on a source of a transaction determined from the layer information.
2. A system as in claim 1 , wherein the network interaction comprises a click.
3. A system as in claim 1 , wherein the network interaction comprises a cookie.
4. A system as in claim 1 , wherein the network interaction comprises a simple mail transfer protocol interaction.
5. A system as in claim 1 , wherein the network interaction comprises a file transfer protocol interaction.
6. A system as in claim 1 , wherein the network interaction comprises a hypertext transfer protocol interaction.
7. A system as in claim 1 , wherein the network interaction comprises a telnet interaction.
8. A system as in claim 1 , wherein the monitoring comprises monitoring of Ethernet traffic.
9. A system as in claim 1 , wherein the source of the transaction comprises a router.
10. A system as in claim 1 , wherein the source of the transaction comprises an internet protocol address.
11. A system as in claim 1 , wherein the source of the transaction comprises a network node.
12. A system as in claim 1 , wherein the source of the transaction comprises an Internet service provider.
13. A system as in claim 1 , wherein the layer information includes information of a network route traversed.
14. A system as in claim 1 , wherein the layer information comprises layer 3 through layer 7 information associated the network interaction.
15. A system as in claim 1 , wherein analyzing the network interaction is based at least in part on a time associated with a transaction determined from the layer information.
16. A system as in claim 1 , wherein analyzing the network interaction is based at least in part on a time associated with a transaction determined from the layer information, and wherein the time is used to determine a connection bandwidth.
17. A system as in claim 1 , wherein analyzing the network interaction includes probing network to check a route back.
18. A system as in claim 1 , wherein analyzing the network interaction includes real-time probing network to check a route back.
19. A system as in claim 1 , wherein analyzing the network interaction includes detecting onion routing.
20. A system as in claim 1 , wherein analyzing the network interaction includes detecting use of bot networks.
21. A method of analyzing a network interaction, comprising:
monitoring traffic including the network interaction, wherein monitoring includes monitoring at least one of TCP, HTTP, or IP layer information; and
determining whether the network interaction is a qualified network interaction with a user, wherein the qualified network interaction is qualified for a payment between an advertiser and a publisher, wherein determining whether the network interaction is qualified is based at least in part on a source of a transaction determined from the layer information.
22. A method as in claim 21 , wherein the network interaction comprises a click.
23. A method as in claim 21 , wherein the network interaction comprises a cookie.
24. A method as in claim 21 , wherein the network interaction comprises a simple mail transfer protocol interaction.
25. A method as in claim 21 , wherein the network interaction comprises a file transfer protocol interaction.
26. A method as in claim 21 , wherein the network interaction comprises a hypertext transfer protocol interaction.
27. A method as in claim 21 , wherein the network interaction comprises a telnet interaction.
28. A method as in claim 21 , wherein the monitoring comprises monitoring of Ethernet traffic.
29. A method as in claim 21 , wherein the layer information includes information of a network route traversed.
30. A method as in claim 21 , wherein the layer information comprises layer 3 through layer 7 information associated the network interaction.
31. A method as in claim 21 , wherein analyzing the network interaction is based at least in part on a time associated with a transaction determined from the layer information.
32. A method as in claim 21 , wherein analyzing the network interaction is based at least in part on a time associated with a transaction determined from the layer information, and wherein the time is used to determine a connection bandwidth.
33. A method as in claim 21 , wherein analyzing the network interaction includes probing network to check a route back.
34. A method as in claim 21 , wherein analyzing the network interaction includes real-time probing network to check a route back.
35. A method as in claim 21 , wherein analyzing the network interaction includes detecting onion routing.
36. A method as in claim 21 , wherein analyzing the network interaction includes detecting use of bot networks.
37. A computer program product for analyzing a network interaction, the computer program product being embodied in a computer readable storage medium and comprising computer instructions for:
monitoring traffic including the network interaction, wherein monitoring includes monitoring at least one of TCP, HTTP, or IP layer information; and
determining whether the network interaction is a qualified network interaction with a user. wherein the qualified network interaction is qualified for a payment between an advertiser and a publisher, wherein determining whether the network interaction is qualified is based at least in part on a source of a transaction determined from the layer information.