Filtering and Transforming a Graph Representing an Application

[0001] A programmer often examines and tests an application during development in many different manners. The programmer may run the application in various use scenarios, apply loading, execute test suites, or perform other operations on the application in order to understand how the application performs and to verify that the application operates as designed.

[0002] As the programmer identifies a problem area, the programmer may locate the problem area in source code and improve or change the code in that area. Such improvements may then be tested again to verify that the problem area was corrected.

[0003] Code elements may be selected from a graph depicting an application. The graph may show code elements as nodes, with edges representing connections between the nodes. The connections may be messages passed between code elements, code flow relationships, or other relationships. When a code element or group of code elements are selected from the graph, the corresponding source code may be displayed. The code may be displayed in a code editor or other mechanism by which the code may be viewed, edited, and manipulated.

[0004] Breakpoints may be set by selecting nodes on a graph depicting code elements and relationships between code elements. The graph may be derived from tracing data, and may reflect the observed code elements and the observed interactions between code elements. In many cases, the graph may include performance indicators. The breakpoints may include conditions which depend on performance related metrics, among other things. In some embodiments, the nodes may reflect individual instances of specific code elements, while other embodiments may present nodes as the same code elements that may be utilized by different threads. The breakpoints may include parameters or conditions that may be thread-specific.

[0005] Relationships between code elements in an application may be selected and used during analysis and debugging of the application. An interactive graph may display code elements and the relationships between code elements, and a user may be able to select a relationship from the graph, whereupon details of the relationship may be displayed. The details may include data passed across the relationship, protocols used, as well as the frequency of communication, latency, queuing performance, and other performance metrics. A user may be able to set breakpoints, increase or decrease tracing options, or perform other actions from the relationship selection.

[0006] Highlighted objects may traverse a graph representing an application's code elements and relationships between those code elements. The highlighted objects may be animated to represent how the objects are processed in an application. The graph may represent code elements and relationships between the code elements, and the highlighting may be generated by tracing the application to determine the flow of the object through code elements and across relationships. A user may control the highlighted graph with a set of playback controls for playing through the sequence of highlights on the graph. The playback controls may include pause, rewind, forward, fast forward, and other controls. The controls may also include a step control which may step through small time increments.

[0007] A graph representing code element and relationships between code elements may have elements combined to consolidate or collapse portions of the graph. A filter may operate between the graph data and a renderer to show the graph in different states. The graph may be implemented with an interactive user interface through which a user may select a node, edge, or groups of nodes and edges, then apply a filter or other transformation. When the user selects to combine a group of code elements, the combined elements may be displayed as a single element. In some cases, the single element may be presented with visual differentiation to show that the element is a collapsed or combined element, as opposed to a singleton element.

[0008] This Summary is provided to introduce a selection of concepts in a simplified form that are further described below in the Detailed Description. This Summary is not intended to identify key features or essential features of the claimed subject matter, nor is it intended to be used to limit the scope of the claimed subject matter.

[0022] Navigating Source Code Through an Interactive Graph

[0023] A graph showing code elements and relationships between code elements may be used to select and display the code elements. The graph may represent both static and dynamic relationships between the code elements, including performance another metrics gathered while tracing the code elements during execution.

[0024] The interactive graph may have active input areas that may allow a user to select a node or edge of the graph, where the node may represent a code element and the edge may represent a relationship between code elements. After selecting the graph element, the corresponding source code or other representation of the code element may be displayed.

[0025] In some cases, the code elements may be displayed in a code editor, and a user may be able to edit the code and perform various functions on the code, including compiling and executing the code. The selected code elements may be displayed with highlighting or other visual cues so that a programmer may easily identify the precise line or lines of code represented by a node selected from the graph.

[0026] A selection of an edge may identify two code elements, as each edge may link the two code elements. In such a case, some embodiments may display both code elements. Such code elements may both be displayed on a user interface simultaneously using different display techniques.

[0027] Other embodiments may display one of the code elements linked by an edge. Some such embodiments may present a user interface that may allow a user to select between the two code elements. In one such example, a user interface may be presented that queries the user to select an upstream or downstream element when the relationship has a notion of directionality. In another example, a user interface may merely show the individual lines of code associated with each node, then permit the user to select the line of code for further investigation and display.

[0028] The graph may contain information derived from static and dynamic analysis of an application. Static analysis may identify blocks of code as well as some relationships, such as a call tree or flow control relationships between code elements. Dynamic analysis may identify blocks of code by analyzing the code in an instrumented environment to detect blocks of code and how the code interacts during execution. Some embodiments may identify messages passed between code elements, function calls made from one code element to another, or other relationships.

[0029] The graph may display summarized or other observations about the execution of the code. For example, a tracer may gather data about each code element, such as the amount of processor or memory resources consumed, the amount of garbage collection performed, number of cache misses, or any of many different performance metrics.

[0030] The graph may be displayed with some representation of performance metrics. For example, a code element may be displayed with a symbol, size, color, or other variation that may indicate a performance metric. In a simple example, the size of a symbol displaying a node may indicate the processing time consumed by the element. In another example, the width of an edge may represent the amount of data passed between code elements or the number of messages passed.

[0031] Breakpoints Set Through an Interactive Graph.

[0032] An interactive graph may serve as an input tool to select code elements from which breakpoints may be set. Objects relating to a selected code element may be displayed and a breakpoint may be created from one or more of the objects. In some cases, the breakpoints may be applied to the selected code element or to an object such that the breakpoint may be satisfied with a different code element.

[0033] The interactive graph may display code elements and relationships between code elements, and may visually illustrate the operation of an application. The graph may be updated in real time or near real time, and may show performance related metrics using various visual effects. A user may interact with the graph to identify specific code elements that may be of interest, then select the code elements to create a breakpoint.

[0034] Performance and other tracer data may be displayed with the selected code elements. Such data may include metrics, statistics, and other information relating to the specific code element. Such metrics may be, for example, resource consumption statistics for memory, processor, network, or other resources, comparisons between the selected code elements and other code elements, or other data. In some cases, the metrics may include parameters that may be incorporated into a breakpoint.

[0035] Because the graph may contain performance related data, a user may observe the operations and performance of an application prior to selecting where to insert a breakpoint. The combination of performance data and relationship structure of the application may greatly assist a user in selecting a meaningful location for a breakpoint. The relationship structure may help the user understand the application flow, as well as identify dependencies and bottlenecks that may not be readily apparent from the source code. The performance data may identify those application elements that may be performing above or below expectations. The combination of both the relationship structure and the performance data may be much more efficient and meaningful than other methods for identifying locations for breakpoints.

[0036] Selecting Relationships as an Input

[0037] A relationship between code elements may be selected from an interactive graph representing code elements as nodes and relationships between code elements as edges. The relationship may represent many different types of relationships, from function calls to shared memory objects. Once selected, the relationship may be used to set breakpoints, monitor communications across the relationship, increase or decrease tracing activities, or other operations.

[0038] The relationship may be a message passing type of relationship, some of which may merely pass acknowledgements while others may include data objects, code elements, or other information. Some message passing relationships may be express messages, which may be managed with queues and other message passing components. Other message passing relationships may be implied messages, where program flow, data, or other elements may be passed from one code element to another.

[0039] The relationship may be a shared memory relationship, which may represent memory objects that may be written by one code element and read by another code element. Such a relationship may be identified when the first code element may take a write lock on the memory object and the second code element may be placed in a waiting state until the write lock may be released.

[0040] A breakpoint may be set using information related to the relationship. For example, the breakpoint may be set for messages passed across the selected relationship, such as when messages exceed a certain size, frequency, or contain certain parameters or parameter values.

[0041] Highlighting Objects in an Animated Graph Depicting an Executing Application.

[0042] Objects may be highlighted in an animated graph depicting an application being executed. The graph may contain nodes representing code elements and edges representing relationships between the code elements. The highlighted objects may represent data elements, requests, processes, or other objects that may traverse from one code element to another.

[0043] The highlighted objects may visually depict how certain components may progress through an application. The highlights may visually link the code elements together so that an application programmer may understand the flow of the application with respect to a particular object.

[0044] In one use scenario, an application that may process web requests may be visualized. An incoming request may be identified and highlighted and may be operated upon by several different code elements. The graph depicting the application may have a highlighted visual element, such as a bright circle, placed on a node representing the code element that receives the request. As the request is processed by subsequent code elements, the graph may show the highlighted bright circle traversing various relationships to be processed by other code elements. The request may be processed by multiple code elements, and the highlighted bright circle may be depicted over each of the code elements in succession.

[0045] The highlighted objects may represent a single data element, a group of data elements, or any other object that may be passed from one code element to another. In some cases, the highlighted object may be an executable code element that may be passed as a callback or other mechanism.

[0046] Callbacks may be executable code that may be passed as an argument to other code, which may be expected to execute the argument at a convenient time. An immediate invocation may be performed in the case of a synchronous callback, while asynchronous callbacks may be performed at some later time. Many languages may support callbacks, including C, C++, Pascal, JavaScript, Lua, Python, Perl, PHP, Ruby, C#, Visual Basic, Smalltalk, and other languages. In some cases, callbacks may be expressly defined and implemented, while in other cases callbacks may be simulated or have constructs that may behave as callbacks. Callbacks may be implemented in object oriented languages, functional languages, imperative languages, and other language types.

[0047] The animation of a graph may include playback controls that may pause, rewind, play, fast forward, and step through the sequence of code elements that an object may encounter. In many applications, the real time speed of execution is much faster than a human may be able to comprehend. A human user may be able to slow down or step through a sequence of operations so that the user can better understand how the application processes the highlighted object.

[0048] Combining and Expanding Elements on a Graph Representing an Application

[0049] A graph representing code elements and relationships between code elements of an application may be filtered to combine a group of elements to represent the group of elements as a single element on the graph. The graph may have interactive elements by which a user may select nodes to manipulate, and through which a filter may be applied.

[0050] The filters may operate as a transformation, translation, or other operation to prepare the graph data prior to rendering. The filters may include consolidating multiple nodes into a single node, expanding a single node into multiple nodes, applying highlights or other visual cues to the graph elements, adding performance data modifiers to graph elements, and other transformations and operations.

[0051] The filters may enable many different manipulations to be applied to tracer data. In many cases, a data stream may be transmitted to a rendering engine and the filters may be applied prior to rendering. Such cases may allow tracer data to be transmitted and stored in their entirety, while allowing customized views of the data to be shown to a user.

[0052] The term “filter” as used in this specification and claims refers to any transformation of data prior to display. A filter may remove data, concatenate data, summarize data, or perform other manipulations. In some cases, a filter may combine one data stream with another. A filter may also analyze the data in various manners, and apply highlights or other tags to the data so that a rendering engine may render a graph with different features. The term “filter” is meant to include any type of transformation that may be applied to data and is not meant to be limiting to a transformation where certain data may be excluded from a data stream.

[0053] The graph may have interactive elements by which various filters may be applied. The interactive elements may include selecting nodes, edges, or groups of nodes and edges to which a filter may be applied. In some cases, a legend or other interactive element may serve as a mechanism to identify groups of nodes to which filters may be applied.

[0054] When a filter is applied, some embodiments may apply different highlighting or other visual differentiations. Such highlighting may indicate that filters or transformations had been applied to the highlighted elements.

[0055] Throughout this specification and claims, the terms “profiler”, “tracer”, and “instrumentation” are used interchangeably. These terms refer to any mechanism that may collect data when an application is executed. In a classic definition, “instrumentation” may refer to stubs, hooks, or other data collection mechanisms that may be inserted into executable code and thereby change the executable code, whereas “profiler” or “tracer” may classically refer to data collection mechanisms that may not change the executable code. The use of any of these terms and their derivatives may implicate or imply the other. For example, data collection using a “tracer” may be performed using non-contact data collection in the classic sense of a “tracer” as well as data collection using the classic definition of “instrumentation” where the executable code may be changed. Similarly, data collected through “instrumentation” may include data collection using non-contact data collection mechanisms.

[0056] Further, data collected through “profiling”, “tracing”, and “instrumentation” may include any type of data that may be collected, including performance related data such as processing times, throughput, performance counters, and the like. The collected data may include function names, parameters passed, memory object names and contents, messages passed, message contents, registry settings, register contents, error flags, interrupts, or any other parameter or other collectable data regarding an application being traced.

[0057] Throughout this specification and claims, the term “execution environment” may be used to refer to any type of supporting software used to execute an application. An example of an execution environment is an operating system. In some illustrations, an “execution environment” may be shown separately from an operating system. This may be to illustrate a virtual machine, such as a process virtual machine, that provides various support functions for an application. In other embodiments, a virtual machine may be a system virtual machine that may include its own internal operating system and may simulate an entire computer system. Throughout this specification and claims, the term “execution environment” includes operating systems and other systems that may or may not have readily identifiable “virtual machines” or other supporting software.

[0058] Throughout this specification, like reference numbers signify the same elements throughout the description of the figures.

[0059] In the specification and claims, references to “a processor” include multiple processors. In some cases, a process that may be performed by “a processor” may be actually performed by multiple processors on the same device or on different devices. For the purposes of this specification and claims, any reference to “a processor” shall include multiple processors which may be on the same device or different devices, unless expressly specified otherwise.

[0060] When elements are referred to as being “connected” or “coupled,” the elements can be directly connected or coupled together or one or more intervening elements may also be present. In contrast, when elements are referred to as being “directly connected” or “directly coupled,” there are no intervening elements present.

[0061] The subject matter may be embodied as devices, systems, methods, and/or computer program products. Accordingly, some or all of the subject matter may be embodied in hardware and/or in software (including firmware, resident software, micro-code, state machines, gate arrays, etc.) Furthermore, the subject matter may take the form of a computer program product on a computer-usable or computer-readable storage medium having computer-usable or computer-readable program code embodied in the medium for use by or in connection with an instruction execution system. In the context of this document, a computer-usable or computer-readable medium may be any medium that can contain, store, communicate, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device.

[0062] The computer-usable or computer-readable medium may be, for example but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, device, or propagation medium. By way of example, and not limitation, computer readable media may comprise computer storage media and communication media.

[0063] Computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can accessed by an instruction execution system. Note that the computer-usable or computer-readable medium could be paper or another suitable medium upon which the program is printed, as the program can be electronically captured, via, for instance, optical scanning of the paper or other medium, then compiled, interpreted, of otherwise processed in a suitable manner, if necessary, and then stored in a computer memory.

[0064] When the subject matter is embodied in the general context of computer-executable instructions, the embodiment may comprise program modules, executed by one or more systems, computers, or other devices. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. Typically, the functionality of the program modules may be combined or distributed as desired in various embodiments.

[0065] FIG. 1 is a diagram of an embodiment 100 showing an example user interface with an interactive graph and application code representing a selected code element. A user may navigate the source code of an application by interacting with the graph, which may cause a window or other viewing mechanism to display the source code and other information.

[0066] The graph may show individual code elements and the relationships between code elements. In many embodiments, performance metrics may be displayed as part of the graph, and the performance metrics may help a programmer identify areas of code for inspection. For example, performance bottlenecks, poorly executing code, or other conditions may be highlighted by visually representing performance data through the graph elements, and a programmer may identify a code element based on the performance data for further analysis.

[0067] Embodiment 100 illustrates a user interface 102 that may contain a title bar 104, close window button 106, and other elements of a user interface window as an example user interface.

[0068] A graph 108 may be displayed within the user interface 102. The graph may represent code elements and the relationships between code elements in an application. The code elements may be represented as nodes 110 and the relationships between code elements may be represented as edges 112. In some cases, code elements without relationships between code elements may be included, and such code elements may be presented as a single node element that may be unconnected to other code elements

[0069] The graph 108 may represent an application, where each code element may be some unit of executable code that may be processed by a processor. In some cases, a code element may be a function, process, thread, subroutine, or some other block or group of executable code. In some cases, the code elements may be natural partitions or groupings that may be created by a programmer, such as function definitions or other such grouping.

[0070] In other cases, one or more of the code elements may be arbitrarily defined or grouped, such as an embodiment where some number of lines of executable code may be treated as a code element. In one such example, each group of 10 lines of code may be identified as a code element. Other embodiments may have other mechanisms for identifying natural or arbitrary code elements.

[0071] The graph 108 may display both static and dynamic data regarding an application. Static data may be any information that may be gathered through static code analysis, which may include control flow graphs, executable code elements, some relationships between code elements, or other information.

[0072] Dynamic data may be any information that may be gathered through tracing or monitoring of the application as the application executes. Dynamic data may include code element definitions, relationships between code elements, as well as performance metrics, operational statistics, or other measured or gathered data.

[0073] The graph 108 may present performance and operational data using visual representations of the data. For example, the size of an icon on a particular node may indicate a measurement of processing time, memory, or other resource that a code element may have consumed. In another example, the thickness, color, length, animation, or other visual characteristic of an edge may represent various performance factors, such as the amount of data transmitted, the number of messages passed, or other factors.

[0074] The graph 108 may include results from offline or other analyses. For example, an analysis may be performed over a large number of data observations to identify specific nodes and edges that represent problem areas of an application. One such example may be bottleneck analysis that may identify a specific code element that may be causing a processing slowdown. Such results may be displayed on the graph 108 by highlighting the graph, enlarging the affected nodes, animating the nodes and edges, or some other visual cue.

[0075] Real time data may be displayed on a graph 108. The real time data may include performance metrics that may be gathered during ongoing execution of the application, including displaying which code elements have been executed recently or the performance measured for one or more code elements.

[0076] A user may interact with the graph 108 to select an element 112. The user may select the element 112 using a cursor, touchscreen, or other input mechanism. In some embodiments, when hovering over the selected element 112 or selecting the selected element 112 may cause a label 114 to be displayed. The label 114 may include some information, such as library name, function name, or other identifier for the code element.

[0077] After selecting the element 112, a code editing window 116 may be presented on the user interface 102. The code editing window 116 may be a window having a close window button 118, scroll bar 122, and other elements. In some cases, the code editing window 116 may float over the graph 108 and a user may be able to move or relocate the code editing window 116.

[0078] Application code 120 may be displayed in the code editing window 116. The application code 120 may be displayed with line numbers 124, and a code element 126 may be highlighted.

[0079] The application code 120 may be the source code representation of the application being tested. In languages with compiled code, the source code may have been compiled prior to execution. In languages with interpreted code, the source code may be consumed directly by a virtual machine, just in time compiler, or other mechanism.

[0080] In some applications, the code editing window 116 may be part of an integrated development environment, which may include compilers, debugging mechanisms, execution management mechanisms, and other components. An integrated development environment may be a suite of tools through which a programmer may develop, test, and deploy an application.

[0081] A highlighted code element 126 may be shown in the code editing window 116. The highlighted code element 126 may represent the portion of the application represented by the selected element 112. In some cases, the highlighted code element 126 may illustrate a subset of many lines of code represented by the selected element 112. One example may highlight the first line of many lines of code represented by the selected element 112. In other cases, the highlighted code element 126 may identify all of the code represented by the selected element 112.

[0082] A data display 130 may contain various additional information that may be useful for a programmer. In some cases, the data display 130 may include parameter values for memory objects used by the application. In some cases, the data display 130 may include performance data gathered from a tracer, which sometimes may be summary data or statistics.

[0083] FIG. 2 illustrates an embodiment 200 showing a single device with an interactive graph for navigating application code. Embodiment 200 is merely one example of an architecture where a graph may be rendered on a display, and a user may select nodes or edges of the graph to display portions of the underlying source code for the application.

[0084] The diagram of FIG. 2 illustrates functional components of a system. In some cases, the component may be a hardware component, a software component, or a combination of hardware and software. Some of the components may be application level software, while other components may be execution environment level components. In some cases, the connection of one component to another may be a close connection where two or more components are operating on a single hardware platform. In other cases, the connections may be made over network connections spanning long distances. Each embodiment may use different hardware, software, and interconnection architectures to achieve the functions described.

[0085] Embodiment 200 illustrates a device 202 that may have a hardware platform 204 and various software components. The device 202 as illustrated represents a conventional computing device, although other embodiments may have different configurations, architectures, or components.

[0086] In many embodiments, the device 202 may be a server computer. In some embodiments, the device 202 may still also be a desktop computer, laptop computer, netbook computer, tablet or slate computer, wireless handset, cellular telephone, game console or any other type of computing device.

[0087] The hardware platform 204 may include a processor 208, random access memory 210, and nonvolatile storage 212. The hardware platform 204 may also include a user interface 214 and network interface 216.

[0088] The random access memory 210 may be storage that contains data objects and executable code that can be quickly accessed by the processors 208. In many embodiments, the random access memory 210 may have a high-speed bus connecting the memory 210 to the processors 208.

[0089] The nonvolatile storage 212 may be storage that persists after the device 202 is shut down. The nonvolatile storage 212 may be any type of storage device, including hard disk, solid state memory devices, magnetic tape, optical storage, or other type of storage. The nonvolatile storage 212 may be read only or read/write capable. In some embodiments, the nonvolatile storage 212 may be cloud based, network storage, or other storage that may be accessed over a network connection.

[0090] The user interface 214 may be any type of hardware capable of displaying output and receiving input from a user. In many cases, the output display may be a graphical display monitor, although output devices may include lights and other visual output, audio output, kinetic actuator output, as well as other output devices. Conventional input devices may include keyboards and pointing devices such as a mouse, stylus, trackball, or other pointing device. Other input devices may include various sensors, including biometric input devices, audio and video input devices, and other sensors.

[0091] The network interface 216 may be any type of connection to another computer. In many embodiments, the network interface 216 may be a wired Ethernet connection. Other embodiments may include wired or wireless connections over various communication protocols.

[0092] The software components 206 may include an operating system 218 on which various software components and services may operate. An operating system may provide an abstraction layer between executing routines and the hardware components 204, and may include various routines and functions that communicate directly with various hardware components.

[0093] An execution environment 220 may manage the execution of an application 222. The operations of the application 222 may be captured by a tracer 224, which may generate tracer data 226. The tracer data 226 may identify code elements and relationships between the code elements, which a renderer 228 may use to produce a graph 230. The graph 230 may be displayed on an interactive display device, such as a touchscreen device, a monitor and pointer device, or other physical user interface.

[0094] In some embodiments, the graph 230 may be created in whole or in part from data derived from source code 232. A static code analyzer 234 may generate a control flow graph 236 from which the renderer 228 may present the graph 230.

[0095] In some embodiments, the graph 230 may contain data that may be derived from static sources, as well as data from dynamic or tracing sources. For example, a graph 230 may contain a control flow graph on which tracing data may be overlaid to depict various performance or other dynamic data. Dynamic data may be any data that may be derived from measuring the operations of an application during execution, whereas static data may be derived from the source code 232 or other representation of the application without having to execute the application.

[0096] A user input analyzer 238 may receive selections or other user input from the graph 230. The selections may identify specific code elements through the selection of one or more nodes, specific relationships through the selection of one or more edges, or other user input. In some cases, the selections may be made by picking displayed objects in the graph in an interactive manner. In some cases, other user interface mechanisms may be used to select objects represented by the graph. Such other user interface mechanisms may include command line interfaces or other mechanisms that may select objects.

[0097] When a selection for a specific node may be received by the user input analyzer 238, a code display 242 may be presented on a user interface, and the code display 242 may display source code 240 that corresponds with the selection on the graph 230.

[0098] A selection on the graph 230 may be correlated with a line number or other component in source code 240 through a source code mapping 241. The source code mapping 241 may contain hints, links, or other information that may map source code to the code elements represented by a node on the graph 230. In many programming environments, source code may be compiled or interpreted in different manners to yield executable code.

[0099] For example, source code may be compiled into intermediate code, which may be compiled with a just in time compiler into executable code, which may be interpreted in a process virtual machine. In each step through the execution phase, the compilers, interpreters, or other components may update the source code mapping 241. Other embodiments may have other mechanisms to determine the appropriate source code for a given code element represented by a node on the graph 230.

[0100] The graph 230 and other elements may be part of an integrated development environment. An integrated development environment may be a single application or group of tools through which a developer may create, edit, compile, debug, test, and execute an application. In some cases, an integrated development environment may be a suite of applications and components that may operate as a cohesive, single application. In other cases, such a system may have distinct applications or components. An integrated development environment may include an editor 244 and compiler 246, as well as other components, such as a debugger, execution environment 220 and other components.

[0101] Some embodiments may incorporate an editor 244 with the code display 242. In such an embodiment, the code display 242 may be presented using an editor 244, so that the user may be able to edit the code directly upon being displayed.

[0102] In some cases, a programmer may use independent applications for developing applications. In such cases, the editor 244, compiler 246, and other components may be distinct applications that may be invoked using command line interfaces, graphical user interfaces, or other mechanisms.

[0103] FIG. 3 illustrates an embodiment 300 showing multiple devices that may generate an interactive graph for navigating application code. Embodiment 300 is merely one example of an architecture where some of the functions of embodiments 100 and 200 may be delivered across a network by disparate devices.

[0104] The diagram of FIG. 3 illustrates functional components of a system. In some cases, the component may be a hardware component, a software component, or a combination of hardware and software. Some of the components may be application level software, while other components may be execution environment level components. In some cases, the connection of one component to another may be a close connection where two or more components are operating on a single hardware platform. In other cases, the connections may be made over network connections spanning long distances. Each embodiment may use different hardware, software, and interconnection architectures to achieve the functions described.

[0105] Embodiment 300 may represent one example where multiple devices may deliver an interactive graph to a development environment. Once the graph is presented, a user may interact with the graph to navigate through the application code.

[0106] Embodiment 300 may be similar in function to embodiment 200, but may illustrate an architecture where other devices may perform various functions. By having a dispersed architecture, certain devices may perform only a subset of the operations that may be performed by the single device in embodiment 200. Such an architecture may allow computationally expensive operations to be placed on devices with different capabilities, for example.

[0107] Embodiment 300 may also be able to create a graph that represents an application executing on multiple devices. A set of execution systems 302 may contain a hardware platform 304, which may be similar to the hardware platform 204 of embodiment 200. Each hardware platform 304 may support an execution environment 306, where an application 308 may execute and a tracer 310 may collect various tracer data, including performance data.

[0108] Many applications may execute on multiple devices. Some such applications may execute multiple instances of the application 308 in parallel, where the instances may be identical or nearly identical to each other. In other cases, some of the applications 308 may be different and may operate in serial or have some other process flow.

[0109] A network 312 may connect the various devices in embodiment 300. The network 312 may be any type of communication network by which devices may be connected.

[0110] A data collection system 314 may collect and process tracer data. The data collection system 314 may receive data from the tracer 310 and store the data in a database. The data collection system 314 may perform some processing of the data in some cases.

[0111] The data collection system 314 may have a hardware platform 316, which may be similar to the hardware platform 204 of embodiment 200. A data collector 318 may receive and store tracer data 320 from the various tracers 310. Some embodiments may include a real time analyzer 322 which may process the tracer data 320 to generate real time information about the application 308. Such real time information may be displayed on a graph representing the application 308.

[0112] An offline analysis system 324 may analyze source code or other representations of the application 308 to generate some or all of a graph representing the application 308. The offline analysis system 324 may execute on a hardware platform 326, which may be similar to the hardware platform 204 of embodiment 200.

[0113] The offline analysis system 324 may perform two different types of offline analysis. The term offline analysis is merely a convention to differentiate between the real time or near real time analysis and data that may be provided by the data collection system 314. In some cases, the operations of the offline analysis system 324 may be performed in real time or near real time.

[0114] Offline tracer analysis 328 may be a function that performs in depth analyses of the tracer data 320. Such analyses may include correlation of multiple tracer runs, summaries of tracer data, or other analyses that may or may not be able to be performed in real time or near real time.

[0115] A static code analyzer 330 may analyze the source code 332 to create a control flow graph or other representation of the application 308. Such a representation may be displayed as part of an interactive graph from which a user may navigate the application and its source code.

[0116] A rendering system 334 may gather information relating to an interactive graph and create an image or other representation that may be displayed on a user's device. The rendering system 334 may have a hardware platform 336, which may be similar to the hardware platform 204 of embodiment 200, as well as a graph constructor 338 and a renderer 340.

[0117] The graph constructor 338 may gather data from various sources and may construct a graph which the renderer 340 may generate as an image. The graph constructor 338 may gather such data from the offline analysis system 324 as well as the data collection system 314. In some embodiments, the graph may be constructed from offline data analysis only, while in other embodiments, the graph may be constructed from only from data collected through tracing.

[0118] A development system 342 may represent a user's device where a graph may be displayed and application code may be navigated. In some embodiments, the development system 342 may include an integrated development environment 346.

[0119] The development system 342 may have a hardware platform 344, which may be similar to the hardware platform 204 of embodiment 200. Several applications may execute on the hardware platform 344. In some cases, the various applications may be components of an integrated development environment 346, while in other cases, the applications may be independent applications that may or may not be integrated with other applications.

[0120] The applications may include a graph display 348, which may display a graph image created by the renderer 340. In some cases, the graph display 348 may include real time data, including performance data that may be generated by a real time analyzer 322. When a user interacts with the graph display 348, a code display 350 may be presented that may include source code 352 represented by a selected graph element. The applications may also include an editor 354 and compiler 356.

[0121] A communications engine 351 may gather data from the various sources so that a graph may be rendered. In some cases, the communications engine 351 may cause the graph constructor 338 to retrieve data from the static code analyzer 330, the offline tracer analysis 328, and the real time analyzer 322 so that the renderer 340 may create a graph image.

[0122] FIG. 4 is a flowchart illustration of an embodiment 400 showing a method for displaying a graph and selecting and presenting code in response to a selection from the graph. Embodiment 300 may illustrate a method that may be performed by the device 202 of embodiment 200 or the collective devices of embodiment 300.

[0123] Other embodiments may use different sequencing, additional or fewer steps, and different nomenclature or terminology to accomplish similar functions. In some embodiments, various operations or set of operations may be performed in parallel with other operations, either in a synchronous or asynchronous manner. The steps selected here were chosen to illustrate some principles of operations in a simplified form.

[0124] Embodiment 400 may illustrate a method that includes static analysis 402, dynamic analysis 404, rendering 406, and code selection 408. The method represented one method for navigating an application code through a visual representation of the application as a graph, which may have nodes representing code elements and edges representing relationships between the code elements.

[0125] The graph may be generated from static analysis 402, dynamic analysis 404, or a combination of both, depending on the application.

[0126] The static analysis 402 may include receiving source code in block 410 and performing static code analysis in block 412 to generate a control flow graph or other representation of the application. A control flow graph may identify blocks of executable code and the relationships between them. Such relationships may include function calls or other relationships that may be expressed in the source code or may be derived from the source code.

[0127] The dynamic analysis 404 may include receiving the source code in block 414, preparing the source code for execution in block 416, and executing the application in block 418 from which the source code may be monitored in block 420 to generate tracer data. The dynamic analysis 404 may identify code elements and relationships between code elements by observing the actual behavior of the code during execution.

[0128] The dynamic analysis 404 may include the operations to trace the application. In many cases, an application may be compiled or otherwise processed when being prepared for execution in block 416. During execution in block 418, a tracer may be configured to gather various metrics about the application, which may include identifying code elements and relationships between code elements.

[0129] A graph generated from static code analysis may be different from a graph generated by dynamic analysis. In general, static code analysis may identify multiple relationships that may not actually be exercised during execution under normal circumstances or loading. In contrast, the dynamic analysis may generate a graph that represents the actual portions of the application that were exercised.

[0130] In many cases, the dynamic analysis 404 may include gathering performance data in block 424. The performance data may be added to a graph to help the user understand where performance bottlenecks may occur and other performance related information.

[0131] The rendering 406 may include identifying code elements in block 426 and relationships may be identified in block 428. In some embodiments, the code elements and relationships may be identified using static code analysis, whereas other embodiments may identify code elements and relationships using dynamic analysis or a combination of static or dynamic analysis.

[0132] The graph may be rendered in block 430 once the code elements and relationships are identified. In some embodiments, performance data may be received in block 432 and the graph may be updated with performance data in block 434.

[0133] When performance data are available, if no selection has been received in block 436, the process may loop back to block 430 to render the graph with updated performance data. Such a loop may update the graph with real time or near real time performance data.

[0134] When a selection is made in block 436, a code element may be identified in block 438. The code element may correspond with an element selected from the graph, which may be one or more nodes or edges of the graph. A link to the source code from the selected element may be determined in block 440 and the source code may be displayed in block 442. Any related data elements may be identified in block 444 and may be displayed in block 446.

[0135] If a user does not elect to edit the source code in block 448, the process may loop back to block 430 to update the graph with performance data.

[0136] If the user elects to edit the source code in block 448, the code may be updated in block 450, recompiled in block 452, and the execution may be restarted in block 454. The process may return to blocks 410 and 414 to generate a new graph.

[0137] FIG. 5 is a diagram illustration of an example embodiment 500 where a breakpoint may be created from a selection. Embodiment 500 illustrates an example user interface that may contain a list of objects associated with a selected element from a graph. From the list of objects, a breakpoint may be created and launched.

[0138] The example of embodiment 500 may be merely one example of a user interface through which a breakpoint may be set. Other embodiments may use many different user interface components to display information about objects related to a selection and to define and deploy a breakpoint. The example of embodiment 500 is merely one such embodiment.

[0139] A user interface 502 may contain a graph 504 that may have interactive elements. The graph 504 may represent an application with nodes representing code elements and edges representing relationships between the code elements. The graph 504 may be displayed with interactive elements such that a user may be able to select a node or edge and interact with source code, data objects, or other elements related to the selected element.

[0140] Node 506 is illustrated as being selected. In many cases, a highlighted visual effect may indicate that the node 506 is selected. Such a visual effect may be a visual halo, different color or size, animated blinking or movement, or some other effect.

[0141] An object window 508 may be presented in response to the selection of node 506. The object window may include various objects related to the node, and in the example of embodiment 500, those objects may be object 510, which may be a variable X with a value of 495, and an object 512 “customer_name” with a value of “John Doe”.

[0142] In the example of embodiment 500, the object 512 is a selected object 514. Based on the selected object 514, a breakpoint window 516 may be presented. The breakpoint window 516 may include a user interface where a user may create an expression that defines a breakpoint condition. Once defined, the breakpoint may be stored and the execution may continue. When the breakpoint is satisfied, the execution may pause and allow the user to explore the state of the application at that point.

[0143] In a typical deployment, a user may select object 512 and may be presented with a menu. The menu may be a drop down menu or pop up menu that may include options for browsing object values, viewing source code, setting breakpoints, or other options.

[0144] FIG. 6 is a diagram illustration of an example embodiment 600 where objects may be explored by selecting an edge on a graph representing an application. Embodiment 600 is merely one example of a user interface 602 where a user may select an edge and interact with objects relating to the edge.

[0145] The graph 604 may represent an application, where each node may represent a code element and the edges may represent relationships between the code elements. The relationships may be any type of relationship, including observed relationships such as function calls, shared memory objects, or other relationships that may be inferred or expressed from tracer data. In other cases, the relationships may include relationships that may be derived from static code analysis, such as control flow elements.

[0146] When an edge 606 is selected, a user may be presented with several options for how to interact with the edge 606. The options may include viewing data objects, viewing performance elements, setting breakpoints, viewing source code, and other options. In the example of embodiment 600, a statistics window 608 may show some observed statistics as well as objects or data associated with the relationship.

[0147] Two statistics 610 and 612 may be examples of observed performance data that may be presented. In the example of embodiment 600, the edge 606 may represent a relationship where messages and data may be passed between two code elements. The statistics 610 and 612 may show the data volume passed between the code elements as well as the message volume or number of messages passed.

[0148] The statistics window 608 may include a set of objects passed between the code elements. The objects 614, 616, and 618 may include “customer_name”, “customer_address”, and “last_login”. By selecting object 614, a data window 620 may be presented that show the values of the parameter “customer_name”. The values may be the data associated with “customer_name” that was passed along the relationship represented by edge 606.

[0149] Embodiment 600 is merely one example of the interaction that a user may have with a relationship in an interactive graph. Based on the selection of the relationship, a breakpoint may be created that pauses execution when a condition is fulfilled regarding the relationship. For example, a breakpoint condition may be set to trigger when any data are passed across the relationship, when the performance observations cross a specific threshold, or some other factor.

[0150] FIG. 7 is a flowchart illustration of an embodiment 700 showing a method for setting breakpoints from interactions with a graph that illustrates an application. Embodiment 700 may be an example of a breakpoint that may be created from the user interactions of selecting a node as in embodiment 500 or selecting an edge as in embodiment 600 for a graph that illustrates an application.

[0151] Other embodiments may use different sequencing, additional or fewer steps, and different nomenclature or terminology to accomplish similar functions. In some embodiments, various operations or set of operations may be performed in parallel with other operations, either in a synchronous or asynchronous manner. The steps selected here were chosen to illustrate some principles of operations in a simplified form.

[0152] In block 702, graph data may be collected that represents code elements and relationships between code elements. In some embodiments, the graph data may include all code elements and all known relationships for a given application. In other embodiments, the graph data may include recently used code elements and relationships, which may be a subset of the complete corpus of code elements and relationships.

[0153] A graph may be displayed in block 704. In many cases, the graph may have various interactive elements, where a user may be able to select and interact with a node, edge, groups of nodes or edges, or other elements. In some cases, the user may be able to pick specific elements directly from the graph, such as with a cursor or touchscreen interface. Such a selection may be received in block 706. The selection may be a node or edge on the graph.

[0154] A code object related to the selected element may be identified in block 708. The code object may be any memory object, code element, data, metadata, performance metric, or other item that may be associated with the code element.

[0155] When a node may be selected in block 706, objects relating to the corresponding code element may be identified. Such objects may include the source code, memory objects and other data accessed by the code element, as well as performance observations, such as time spent processing, memory usage, CPU usage, garbage collection performed, cache misses, or other observations.

[0156] When an edge may be selected in block 706, the objects relating to the corresponding relationship may be identified. Such objects may include the parameters and protocols passed across the relationship, the data values of those parameters, as well as performance observations which may include number of communications across the relationship, data values passed, amount of data passed, and other observations.

[0157] When an edge may be selected in block 706, some embodiments may include objects related to the sending and receiving code elements for a selected relationship. In such embodiments, the objects retrieved may include all of the objects related to the relationship as well as all of the objects related to both code elements within the relationship. Some such embodiments may filter the objects when displaying the objects such that only a subset of objects are displayed.

[0158] The identified objects or a subset of the identified objects may be displayed in block 710.

[0159] A breakpoint may be received in block 712. In many cases, a user interface may assist a user in creating a breakpoint using one or more of the objects identified in block 708. Such a user interface may include selection mechanisms where a user may be able to pick an object and set a parameter threshold or some other expression relating to the object, and then the expression may be set as a breakpoint. In some embodiments, a user interface may allow a user to create a complex expression that may reference one or more of the various objects to set as a breakpoint.

[0160] The breakpoint may be set in block 714. In many embodiments, setting a breakpoint may involve transmitting the breakpoint condition to a tracer or other component, where the component may monitor the execution and evaluate the breakpoint condition to determine when to pause execution. In some embodiments, the monitoring component may be part of an execution environment.

[0161] By setting a breakpoint, execution may continue in block 716 until a breakpoint may be satisfied in block 718. Once the breakpoint is satisfied in block 718, execution may be paused in block 720.

[0162] The term satisfying the breakpoint in block 718 may be any mechanism by which the breakpoint conditions may be met. In some cases, the breakpoint may be defined in a negative manner, such that execution may continue so long as the breakpoint condition is not met. In other cases, the breakpoint may be defined in a positive manner, such that execution may continue as long as the breakpoint condition is met.

[0163] Once the execution has paused in block 720, the code element in which the breakpoint was satisfied may be identified in block 722. In some cases, a breakpoint may be set by interacting with one node or edge representing one code element or a pair of code elements, and a breakpoint may be satisfied by a third code element. The code objects related to the code element in which the breakpoint was satisfied may be identified in block 724 and displayed in block 726.

[0164] Once the objects are displayed, a user may interact with the objects to inspect and query the objects while the application is in a paused state. Once such examination has been completed, the user may elect to continue execution in block 728. The user may elect to continue execution with the same breakpoint in block 732 and the process may loop back to block 716 after resetting the breakpoint. The user may also elect to remove the breakpoint in block 732, and the breakpoint may be removed in block 734 and loop back to block 702. In block 728, the user may also elect not to continue, where the execution may stop in block 730.

[0165] FIGS. 8A, 8B, and 8C are diagram illustrations of a graph at a first time period 802, a second time period 804, and a third time period 806, respectively. The sequence of time periods 802, 804, and 806 represent the progression of a highlighted code object that may traverse a graph. Each step in the sequence of illustrated time periods 802, 804, and 806 may represent multiple time steps and sequences, and the illustration of time periods 802, 804, and 806 are selected to display certain sequences in abbreviated form.

[0166] An object may be highlighted as the object or related objects traverse through the graph. An object may be a memory object that may be passed from one code element to another. In some cases, the code element may be transformed at each code element and emitted as a different object.

[0167] In another embodiment, the object may be a processing pointer or execution pointer and the highlighting may illustrate a sequence of code elements that may be executed as part of the application.

[0168] The sequence of execution may be presented on a graph by highlighting code elements in sequence. In some cases, the relationships on a graph may also be highlighted. Some embodiments may use animation to show the execution flow using movement of highlights or objects traversing the graph in sequence.

[0169] Some embodiments may show directional movement of an object across the graph using arrows, arrowheads, or other directional indicators. One such directional indicator may illustrate an object, such as a circle or other shape that may traverse from one code element to another in animated form.

[0170] The highlighting may allow a user to examine how the object interacts with each code element. In some embodiments, the progression of an object through the graph may be performed on a step by step basis, where the advancement of an object may be paused at each relationship so that the user may be able to interact with the nodes and edges to examine various data objects.

[0171] The traversal of an object through the graph may be shown in real time in some embodiments, depending on the application. In some cases, the application may process objects so quickly that the human eye may not be capable of seeing the traversal or the graph may not be updated fast enough. In such cases, the traversal of the object through the graph may be shown at a slower playback speed. In some such cases, the playback may be performed using historical or stored data which may or may not be gathered in real time.

[0172] At the first time period 802, an object may start at node 808 and traverse to node 810 and then to node 812. Such a traversal may reflect the condition where an object was processed at node 808, then the object or its effects were processed by nodes 810 and 812 in sequence.

[0173] In some embodiments, the starting object may change, be transformed, or otherwise produce downstream effects. In such cases, the output of a code element may be tracked and illustrated as highlighted elements on the graph. For example, an incoming request may include a data element that may be processed by several code elements. The data element may change and the processing may cause other code elements to begin processing. Such changes or effects may be identified and highlighted on the graph as an aftereffect of the original object being monitored.

[0174] In some embodiments, the highlighting in the sequence of graphs may reflect the location or operations performed on a specific memory object. In such embodiments, the code element that may consume the memory object may be highlighted as the memory object traverses the application.

[0175] In the second time period 804, the sequence of execution or processing may go from node 812 to node 814 to node 816 and back to node 812. The sequence illustrated in period 804 may reflect a loop of execution control. In some cases, the loop may be performed many times while following an object.

[0176] In the third time period 806, the sequence of execution may go from node 812 to nodes 814 and 816 in parallel, then to node 818 and 820 in series. The example of time period 806 may illustrate where a single object being tracked at node 812 may cause two or more code elements to be executed in parallel. The parallel operations may then converge in node 818.

[0177] FIG. 9 is a flowchart illustration of an embodiment 900 showing a method for highlighting a graph for movement of an object through a graph. The operations of embodiment 900 may produce highlights across a graph such as those illustrated in the time periods 802, 804, and 806.

[0178] Other embodiments may use different sequencing, additional or fewer steps, and different nomenclature or terminology to accomplish similar functions. In some embodiments, various operations or set of operations may be performed in parallel with other operations, either in a synchronous or asynchronous manner. The steps selected here were chosen to illustrate some principles of operations in a simplified form.

[0179] Embodiment 900 may illustrate a method for displaying highlights on a graph, where the highlights may represent an object and its effects that may flow through an application. In some cases, embodiment 900 may be presented using live data, which may be gathered and displayed in real time or near real time. In other cases, embodiment 900 may be presented using stored or historical data that may be gathered during one time period and replayed at a later time period.

[0180] When the displayed data may be real time or near real time data, the operations of an application may be slowed down for viewing. In some cases, each step of a sequence that may update the graph may be paused to allow a user to visualize the transition from a previous state. Such an embodiment may pause the sequence at each step and continue with a user input. Such an embodiment may continue with the user pressing ‘return’ or some other mechanism to advance the sequence. In some embodiments, the sequence may pause for a period of time, such as 0.25 seconds, 0.5 seconds, one second, two seconds, or some other time, then continue to the nest step in the sequence.

[0181] Graph data representing the code elements and relationships of the code elements of an application may be received in block 902. A graph may be displayed in block 904.

[0182] An object to be tracked may be received in block 906. In many embodiments, the object may be selected through a user interface. In some cases, the object may be selected by interacting with a graph and identifying an object through a user interface which may display one or more objects that may be tracked. In some cases, the object may be identified through a programmatic interface.

[0183] The location of the objects to be tracked may be identified in block 908. The location may refer to a node or edge on the graph. In some cases, a single object or tracking condition may result in multiple nodes or edges being highlighted.

[0184] The highlights may be displayed on the graph in block 910.

[0185] If an input to advance to the next time interval has not been received in block 912, the display may be paused in block 914 and the process may loop back to block 912. Once a condition to proceed to the next time interval has been met in block 912, the process may continue.

[0186] In block 916, the next locations for highlighting may be identified. In some cases, the next location may be a plurality of locations. One example of such a case may be a condition where multiple processes or threads may be launched as a result of processing a first code element.

[0187] For each location in block 918, if the location is not new in block 920, the process may loop back to block 918.

[0188] If the location is a new location in block 920, a highlight may be created in block 922 for the relationship connecting an old location to a new location. The highlight may have a directional indicator, such as a graduated color, arrow, arrowhead, moving animation, or some other indicator.

[0189] Embodiment 900 illustrates a method where an older location may have a deprecated highlight, which is created in block 924. The deprecated highlight may be less intense such that a user may be able to visualize the movement of an object or its effects from an old location to a new location. After one time step in a deprecated state, the highlight may be removed for a location two generations old in block 926.

[0190] After processing each new location in block 918, the graph may be updated with the changes to the highlighting in block 928. The process may return to block 910 to display the graph with highlights.

[0191] FIG. 10 is a diagram illustration of an embodiment 1000 showing a distributed system with an interactive graph. Embodiment 1000 is an example of the components that may be deployed to collect and display tracer data, and to use filter to modify the visual representation of the data.

[0192] Embodiment 1000 illustrates two different mechanisms for deploying filters that may change a displayed graph. In one mechanism, filters may be applied just prior to rendering a graph. In another mechanism, filters may be applied by a tracer to transform raw tracer data from which a graph may be rendered. Various embodiments may deploy one or both mechanisms for applying filters to the tracer data.

[0193] While an application 1002 executes, a tracer 1004 may collect tracer data 1006. The tracer data 1006 may identify code elements and relationships between the code elements.

[0194] A dispatcher 1008 may transmit the tracer data across a network 1010 to a device 1030. The device 1030 may be a standalone computer or other device with the processing capabilities to render and display a graph, along with user interface components to manipulate the graph.

[0195] The device 1030 may have a receiver 1012 that may receive the tracer data 1006. A filter 1014 may transform the data prior to a renderer 1016 which may generate a graph 1020 that may be shown on a display 1018.

[0196] A user interface 1022 may collect input from a user from which a navigation manager 1024 may create, modify, and deploy filters 1014. The filters may cause the tracer data 1006 to be rendered using different groupings, transformations, or other manipulations.

[0197] In some cases, the navigation manager 1024 may cause certain filters to be applied by the tracer 1004. The navigation manager 1024 may receive input that may change how the tracer 1004 collects data, then create a filter that may express such changes. The filters may include adding or removing data elements in the tracer data 1006, increasing or decreasing tracer frequency, causing the tracer 1004 to perform data manipulations and transformations, or other changes.

[0198] Some filters may be transmitted by a dispatcher 1026 across the network 1010 to a receiver 1028, which may pass the changes to the tracer 1004. The filters may be applied at the tracer 1004 to change the tracer data 1006 for subsequent tracing operations. The effects of such transformations may be subsequently viewed on the graph 1020.

[0199] FIGS. 11A and 11B are diagram illustrations of user interfaces showing graphs 1102 and 1104, respectively. The sequence of graphs 1102 and 1104 illustrate a user experience where a filter may be applied to combine a group of graph elements into a single node.

[0200] The graph 1102 represents an application with two groups of code elements. One group of code elements may be members of “hello_world”, while other code elements may be members of “disk_library”. Nodes 1106, 1108, 1110, 1112, and 1114 are illustrated as being members of “disk_library”, and each node are illustrated as shaded to represent their group membership.

[0201] Node 1114 is illustrated as being selected and may have a halo or other visual highlighting applied. When node 1114 is selected, a user interface 1116 may be presented to the user.

[0202] The user interface 1116 may include many different filters, transformations, or other operations that may be performed. In many cases, such operations may use the selected node 1114 as an input to a selected operation. In the example of graph 1102, options may include combining nodes together, expanding the selected node into multiple nodes, viewing source code, displaying memory objects, and displaying performance data. These options are mere examples which may or may not be included on various embodiments. In some cases, additional operations may be present.

[0203] In the example of graph 1102, a selection 1118 may indicate that the user selects to combine nodes similar to the selected node 1114.

[0204] In graph 1104, the nodes 1106, 1108, 1110, 1112, and 1114 are illustrated as combined into node 1130. Graph 1104 illustrates the results of applying a combination filter to the data of graph 1102, where the combination filter combines all similar nodes into a single node.

[0205] Another user interface mechanism may be a legend 1120, which may show groups 1122 and 1124 as the “hello_world” and “disk_library” groups. The shading of the groups shown in the legend may correspond to the shading applied to the various nodes in the graph.

[0206] The legend 1120 may operate as a user interface mechanism by making combine and expand operations available through icons 1126 and 1128. Such icons may be toggled to switch between combined and expanded modes.

[0207] When the “disk_library” group of nodes are combined in graph 1104, the edges connecting various nodes to the combined node 1130 may be highlighted. In the example of graph 1104, edges 1132, 1134, and 1136 may be illustrated as dashed or have some other visual differentiation over other edges. Such highlighting may indicate that one, two, or more relationships may be represented by the highlighted edges.

[0208] The legend 1138 may illustrate groups 1140 and 1142 with icons 1144 and 1146. The icon 1144 may illustrate that the group is illustrated as combined, and may be toggled to change back to the graph 1102.

[0209] FIG. 12 is a flowchart illustration of an embodiment 1200 showing a method for creating and applying filters to a displayed graph. Embodiment 1200 may illustrate one method that may accomplish the transformation illustrated in FIGS. 11A and 11B, as well as one method performed by the components of embodiment 1000.

[0210] Other embodiments may use different sequencing, additional or fewer steps, and different nomenclature or terminology to accomplish similar functions. In some embodiments, various operations or set of operations may be performed in parallel with other operations, either in a synchronous or asynchronous manner. The steps selected here were chosen to illustrate some principles of operations in a simplified form.

[0211] Graph data representing code elements and relationships between code elements may be received in block 1202 and a graph may be displayed from the data in block 1204. When no selection may be made to the graph in block 1206, the process may loop back to block 1202 to display updated graph data. In the example of embodiment 1200, the graph may reflect real time or near real time updates which may be collected from a tracer.

[0212] When a selection may be made in block 1206, the updates may pause in block 1208. The selected object may be highlighted in block 1210 and a menu may be presented in block 1212. A user may select an operation from the menu in block 1214. If the operation does not change a filter in block 1216, the operation may be performed in block 1218. In previous examples, some of the operations may include displaying source code for a selected element, displaying performance data related to the selected element, setting a breakpoint, or some other operation.

[0213] When the selection is a change to a filter in block 1216, the filter definition may be received in block 1220. The filter definition may be a predefined change to a filter which may be merely selected by a user. In some cases, a user may enter data, create expressions, or provide some other filter definition.

[0214] The filter may be applied to a graph renderer in block 1222 and the process may loop back to block 1202. In some cases, the filter may be transmitted to a tracer or other data source so that the effects of the filter may be viewed on the graph in block 1204.

[0215] The foregoing description of the subject matter has been presented for purposes of illustration and description. It is not intended to be exhaustive or to limit the subject matter to the precise form disclosed, and other modifications and variations may be possible in light of the above teachings. The embodiment was chosen and described in order to best explain the principles of the invention and its practical application to thereby enable others skilled in the art to best utilize the invention in various embodiments and various modifications as are suited to the particular use contemplated. It is intended that the appended claims be construed to include other alternative embodiments except insofar as limited by the prior art.