the ensuing description provides embodiments only , and is not intended to limit the scope , applicability , or configuration of the claims . rather , the ensuing description will provide those skilled in the art with an enabling description for implementing the embodiments . it being understood that various changes may be made in the function and arrangement of elements without departing from the spirit and scope of the appended claims . fig1 depicts a communication system 100 according to an embodiment of the present disclosure . the communication system 100 may include an enterprise network 104 that is in communication , via a ( typically untrusted or unsecure or public ) communication network 108 , with one or more external communication devices 112 . the external communication devices 112 are generally referred to as “ external ” because they are either not under the direct control of the enterprise administering the enterprise network 104 or have a decreased level of trust with the enterprise network 104 as compared with communication devices 136 that are within the enterprise network 104 . exemplary types of external communication devices 112 include , without limitation , cellular phones , smartphones , laptops , personal computers ( pcs ), personal digital assistants ( pdas ), digital phones , analog phones , and the like . the communication network 108 may be packet - switched and / or circuit - switched . an illustrative communication network 108 includes , without limitation , a wide area network ( wan ), such as the internet , a public switched telephone network ( pstn ), a plain old telephone service ( pots ) network , a cellular communications network , an ip multimedia subsystem ( ims ) network , a sip network , a voice over ip ( voip ) network , or combinations thereof . in one configuration , the communication network 108 is a public network supporting the tcp / ip suite of protocols . the enterprise network 104 may include a boundary device 116 , a communication server 120 including a session monitoring module 124 and a gsid module 128 , one or more internal communication devices 136 , a conference service 132 , one or more other servers 140 , and an enterprise database 144 , all of which are interconnected by a ( trusted or secure or private ) local area network ( lan ) 148 . some or all of the functions depicted in fig1 may be co - hosted and / or co - resident on a single server . the depiction of components in fig1 is generally intended to be a logical depiction of the components of the system 100 . it should be appreciated that an enterprise network 104 may comprise multiple lans 148 connected via a wan , such as the communication network 108 . a single enterprise communication network 104 is depicted and described herein for ease of understanding and simplicity and in no way is intended to limit embodiments of the present invention to a single enterprise network 104 . the lan 148 can be secured from intrusion by untrusted parties by a gateway and / or firewall located between the lan 148 and communication network 108 . in some embodiments the boundary device 116 may include the functionality of the gateway and / or firewall . in some embodiments , a separate gateway or firewall may be provided between the boundary device 116 and the communication network 108 . the communications server 120 can include a private branch exchange ( pbx ), an enterprise switch , an enterprise server , combinations thereof , or other type of telecommunications system switch or server . the communication server 120 is preferably configured to execute telecommunication functions such as the suite of applications made available via avaya aura ™ platform of avaya , inc ., including communication manager ™, avaya aura communication manager ™, avaya ip office ™, communication manager branch ™, session manager ™, system manager ™, multivantage express ™, and combinations thereof . although only a single communications server 120 is depicted in fig1 , two or more communications servers 120 may be provided in a single enterprise network 104 or across multiple separate lans 148 owned and operated by a single enterprise , but separated by communication network 108 . in configurations where an enterprise or an enterprise network 104 includes two or more communications servers 120 , each server 120 may comprise similar functionality , but may be provisioned for providing its features to only a subset of all enterprise users . in particular , a first communications server 120 may be authoritative for and service a first subset of enterprise users whereas a second communications server 120 may be authoritative for and service a second subset of enterprise users , where the first and second subsets of users generally do not share a common user . accordingly , in some embodiments , the network boundary device 116 may be provided with a table or set of tables that comprise the information which maps a user to their authoritative communication server 120 . additionally , multiple servers 120 can support a common user community . for example , in geo - redundant and other applications where users aren &# 39 ; t necessarily bound to a single application server , there may be a cluster of equivalent servers where a user can be serviced by any server in the cluster . in accordance with at least some embodiments of the present invention , the mapping of user identities within a communication request does not necessarily have to occur at the network boundary device 116 . for instance , the mapping between an authoritative server and a user may occur “ behind ” the network boundary device 116 within the enterprise network 104 . in some embodiments , the network boundary device may include functionality similar to a session border controller ( sbc ), a firewall , gateway , or any other device that provides security and / or translation capabilities . in some embodiments , network boundary device 116 is responsible for initially routing communications within the enterprise network 104 to the communications server 120 responsible for servicing a particular user involved in the communication . for example , if a first enterprise user is being called by an external communication device 112 , then the network boundary device 116 may initially receive the inbound call , determine that the call is directed toward the first enterprise user , identify the authoritative communications server 120 for the first enterprise user , and route the inbound call to the authoritative communications server 120 . likewise , communications between internal enterprise users ( e . g ., internal communication devices 136 ) may first be serviced by the originating user &# 39 ; s authoritative communications server 120 during the origination phase of communications set - up . after the origination phase is complete , the authoritative communications server 120 of the terminating ( or called ) user may be invoked to complete the termination phase of communications set - up . in some embodiments , the communications server 120 for the originating and terminating user may be the same , but this is not necessarily required . in situations where more than two enterprise users are involved in a communication session , authoritative communications servers 120 for each of the involved users may be employed without departing from the scope of the present invention . additionally , the authoritative communications servers 120 for each user may be in the same enterprise network 104 or in different enterprise networks 104 , which are owned by a common enterprise but are separated by the communication network 108 . each communications server 120 may include a session monitoring module 124 and gsid module 128 . the session monitoring module 124 may comprise the ability to monitor exchanges made during a communication session to determine which , if any , seemingly separate communication sessions are actually combined and , therefore , should be associated with one another by the gsid module 128 . more specifically , the session monitoring module 124 may be configured to monitor media and / or control packets transmitted between communication devices or between the conference service 132 and a communication device . in particular , the session monitoring module 124 may be configured to analyze communications for one or more of a refer - to header , invite - join r - uri , invite - replace r - uri , contact header , call - info header , av - ouri parameter , attachments , and other proprietary headers and parameters of a message . if a message , message header , media packet , or the like is detected to include some indication that the analyzed communication session should be associated with another different communication session , the session monitoring module 124 can further analyze the message component that indicated the association to identify how to search for the associated communication session . after the session monitoring module 124 has successfully identified the other communication session with which the analyzed session should be associated , the session monitoring module 124 invokes the gsid module 128 . the gsid module 128 may be configured to adjust instruct any communication component ( e . g ., communication device 112 , 136 , communication server 120 , conference service 132 , etc .) that is involved in one or both of the associated communication sessions to adjust message parameters or properties ( e . g ., message contents , message headers , parameters of message headers ) to reflect the association between the two communication sessions . in some embodiments , the gsid module 128 may be configured to instruct the entities involved in the communication sessions to adjust a so - called gsid header or parameter of a gsid header ( hereinafter referred to as a gsid for ease of discussion ) so that the gsid of one communication session references both communication sessions . in other words , a modified gsid is created for both sessions that have been identified as being associated with one another . the modified gsid contained in a message identifies both the session with which the message is transmitted as well as the associated session . this modified gsid enables an interested party to create more detailed and accurate communication history logs and troubleshoot potential problems in the communication system 100 . the conference service 132 may provide conferencing abilities to various communication devices both within and external to the enterprise network 104 . while the communication devices 112 , 136 may natively support some conferencing capabilities ( e . g ., having mixers capable of conferencing a small number of communication devices ), the conference service 132 may comprise the ability to conference a larger number of communication devices in a conference . in some embodiments , the resources of the conference service 132 include , without limitation , one or more mixers , filters , etc . the conference service 132 can support communication sessions of any media type or multiple media types such as voice , video , web conferencing , combinations thereof , etc . the conference service 132 may be initially included in the communication session by having each participant of the communication session access a particular bridge or common meeting destination by entering a predetermined address ( e . g ., telephone number , url , etc .) and then entering one or more pass - codes ( e . g ., host code , participant codes , etc .). alternatively , or in addition , a communication session between two or more communication devices 112 , 136 may be moved to the conference service 132 during the communication session in an ad - hoc fashion to support a greater number of communication devices or to support different media types during the conference . advantageously , when a communication session is transferred mid - session to the conference service 132 , the session monitoring module 124 is capable of detecting the transfer and determining that the communication session at the conference service 132 is associated with the communication session that was established and transferred to the conference service 132 . accordingly , the gsid module 128 is instructed to decorate one or more content - bearing portions of message transmitted during the communication session at the conference service 132 to reflect the session &# 39 ; s association with the previous session . the decoration can occur by altering one or more values of a gsid in the communication session . the other servers 140 may comprise email servers , voicemail servers , calendaring servers , conferencing servers , presence servers , and other types of servers known to provide particular services to client devices . in some embodiments , the other servers 140 may also be considered application servers , which provide one or more applications for use in a communication session . the internal communication devices 136 can be similar or identical to the external communication devices 112 , except they are provisioned , and often owned , by the enterprise . exemplary types of communication devices 112 , 136 include , without limitation , any capable phone , softphone and / or digital telephone . examples of suitable telephones include the 1600 ™, 2400 ™, 4600 ™, 5400 ™, 5600 ™, 9600 ™, 9620 ™, 9630 ™, 9640 ™, 9640g ™, 9650 ™, and quick edition ™ telephones , ip wireless telephones ( such as avaya inc .&# 39 ; s ip dect ™ phones ), video phones ( such as avaya inc .&# 39 ; s videophone ™), and softphones of avaya , inc . the enterprise database 144 includes enterprise subscriber information , such as name , job title , electronic address information ( e . g ., telephone number , email address , instant messaging handle , direct dial extension , and the like ), subscriber contact lists ( e . g ., contact name and electronic address information ), other employee records , and the like . the various servers and components depicted in fig1 may be implemented separately ( i . e ., on different servers ) or together ( i . e ., on a single server ). in particular , two or more depicted components ( e . g ., communication server 120 and conference service 132 ) may be implemented on a single server without departing from the scope of the present invention . thus , a single device may provide the functionality of several components depicted separately in fig1 . as another example , the boundary device 116 and communication server 120 may be implemented on a single device . with reference now to fig2 , a first communication flow will be described in accordance with embodiments of the present disclosure . the first communication flow begins with a first communication session 212 between a first communication device operated by a first user ( e . g ., alice 204 ) and a second communication device operated by a second user ( e . g ., bob 208 ). the first communication session 212 may have a first gsid ( e . g ., 0001 ) assigned thereto by the gsid module 128 . the first gsid may be included in one or more message transmitted during the first communication session 212 . specifically , the first gsid may be included in any content - bearing portion or portion ( s ) of a message such as a header , sub - header , footer , payload , and combinations thereof . the communication flow continues when a first communication event 216 occurs . the first communication event 216 in this illustrative example includes alice 204 establishing a connection with a third communication device operated by a third user ( e . g ., carol 220 ). the communication session established between alice 204 and carol 220 may be considered a second communication session 224 and may , therefore , have a second gsid ( e . g ., 0002 ) assigned thereto . similar to the first gsid , the second gsid may be carried or represented in one , some or all messages transmitted during the second communication session 224 . furthermore , the second gsid may be assigned by the gsid module 128 of the communication server 120 upon detecting establishment of the second communication session 224 . at this point , alice 204 may be in a position to conference bob 208 and carol 220 into a single conference via a second communication event 228 . it should be appreciated that the conferencing of alice 204 , bob 208 , and carol 220 can be accomplished in a variety of ways . in some embodiments , the conferencing of the participants may occur locally ( e . g ., at one of the communication devices of the participants ) or the conferencing may be facilitated by a conferencing service 132 . the occurrence of either the first or second communication events 216 , 228 may be detected by the session monitoring module 124 . the first or second communication event 216 , 228 may correspond to any transmission of information that indicates the first communication session 212 is associated with the second communication session 224 . the session monitoring module 124 may then invoke the gsid module 128 , which instructs one , some , or all of the communication devices and / or any conferencing service 132 involved in either communication session 212 , 224 to generate a modified gsid . as an example , the gsid of the first communication session 212 may be modified to refer to the original gsid of the first communication session 212 , the original gsid of the second communication session 224 , as well as a reason why the first association has been made . in some embodiments , the reason information may correspond to a description of the communication event that triggered the session monitoring module 124 to invoke the gsid module 128 . in some embodiments , the reason information may correspond to a non - technical description of the association between the communication sessions ( e . g ., “ conference event ”). it should be appreciated that other reasons may be inserted in the modified gsid . it should also be appreciated that the reason information does not necessarily need to be included in the modified gsid . rather , the modified gsid may simply include the identification of the gsids originally assigned to each communication session ( e . g ., 0001 + 0002 ). referring now to fig3 , a second communication flow will be described in accordance with embodiments of the present disclosure . the second communication flow begins with a first communication session 312 between a first communication device operated by a first user ( e . g ., alice 304 ) and a second communication device operated by a second user ( e . g ., bob 308 ). the first communication session 312 may have a first gsid ( e . g ., 0001 ) assigned thereto by the gsid module 128 . the first gsid may be included in one or more message transmitted during the first communication session 312 . specifically , the first gsid may be included in any content - bearing portion or portion ( s ) of a message such as a header , sub - header , footer , payload , and combinations thereof . the communication flow continues when a first communication event 316 occurs . the first communication event 316 in this illustrative example includes alice 304 establishing a connection with a third communication device operated by a third user ( e . g ., carol 320 ). the communication session established between alice 304 and carol 320 may be considered a second communication session 324 and may , therefore , have a second gsid ( e . g ., 0002 ) assigned thereto . similar to the first gsid , the second gsid may be carried or represented in one , some or all messages transmitted during the second communication session 324 . furthermore , the second gsid may be assigned by the gsid module 128 of the communication server 120 upon detecting establishment of the second communication session 324 . at this point , alice 304 may be in a position to transfer bob 308 to carol 320 ( or vice versa ) via a second communication event 328 . it should be appreciated that the transfer event may be a single event or multiple events without departing from the scope of the present disclosure . the occurrence of either the first or second communication events 316 , 328 may be detected by the session monitoring module 124 . the first or second communication event 316 , 328 may correspond to any transmission of information that indicates the association of the third communication session 332 with one or both of the first and second communication sessions 312 , 324 . the connection between bob 308 and carol 320 may be viewed as a third communication session 332 and , therefore , may have a third gsid assigned thereto by the gsid module 128 . the third gsid may correspond to a third number that is substantially unique among other communication sessions ( e . g ., 0003 ) or the third gsid may be a combination of the first and second gsid ( e . g ., 0002 + 0001 ). furthermore , the third gsid may comprise reason information that describes the association of the third communication session 332 with one or both of the first and second communication sessions 312 , 324 . as can be seen in fig3 , the associations between the first communication session 312 and second communication session 324 may also be reflected in the gsids of those sessions . these updated gsids may be maintained in connection with the first and / or second communication session . a third communication event or series of events 336 may then occur whereby the sessions between alice 304 and bob 308 and alice 304 and carol 320 are dropped . at this point , the only communication session remaining is the third communication session 332 between bob 308 and carol 320 . referring now to fig4 , a first communication method will be described in accordance with embodiments of the present disclosure . the method begins when activity regarding a first session is detected at the communication server 120 ( step 404 ). the communication server 120 may also be configured to determine the type or nature of activity that was detected with respect to the first session ( step 408 ). in particular , the communication server 120 may be configured to determine whether the detected activity corresponds to the detection of a new session ( e . g ., either the first session is a new session or a new session has been detected in association with the first session ) or the detection of a session ending ( e . g ., either the first session has ended or a session associated with the first session has ended ). if the detected activity corresponds to a session - ending activity , then the gsid information associated with the first communication session ( and any other associated session ) can be logged or otherwise stored in a communication database so that it is available at a later time if needed ( step 412 ). in some embodiments , the gsid information can be stored in the enterprise database 144 or as call history information for one , some , or all of the participants involved in the first communication session or its associated communication session . if the detected activity corresponds to a session - beginning activity , then the new communication session ( e . g ., either the first communication session or an associated communication session ) has a gsid assigned thereto . in some embodiments , the communication server 120 is configured to monitor communications within the communication system 100 and specifically within the enterprise network 104 to determine if the first session is associated with another session by detecting one or more indicators within the first session or within other sessions that refer to the first session to show the first session is associated with the previously - established session . alternatively , or in addition , the search for associated sessions may occur after the first session is established . specifically , the session monitoring module 124 may analyze messages exchanged during the first communication session and during subsequent communication sessions to determine if any later - established communication session should be associated with the first communication session . accordingly , although step 408 depicts the detection of a “ new ” session , it may be the case that the detected session was already in progress prior to the first communication session , but the association with the first communication session is what makes the associated communication session appear “ new ” with respect to the first communication session . if at step 408 the first session is determined to be associated with another communication session , then the method continues with the session monitoring module 124 invoking the gsid module 128 to determine the nature of the association between the first communication session and the associated session ( step 416 ). the gsid module 128 then instructs one or more devices involved in the first session and / or associated session to update their gsid information to reflect the association between the first session and the associated session ( step 420 ). this can be accomplished in a variety of ways and the modification of gsid information can occur at any communication endpoint or intermediate device ( e . g ., server , switch , router , etc .) involved in the communication sessions . the steps depicted in connection with fig4 may be performed every time any activity regarding a session is detected or it may only be performed when certain predetermined activities are detected . with reference now to fig5 , another communication method will be described in accordance with embodiments of the present disclosure . the method begins when a first message from a first communication session is received ( step 504 ). the first message may be received at the communication server 120 , a communication device 112 , 136 , or any other device in the media or signaling path of the first communication session . accordingly , the first message may correspond to a message containing media content ( e . g ., one or more of an rtp packet , http packet , voip packet , etc . ), a message containing call - control content , or a message used to negotiate and establish the first communication session ( e . g ., a sip message , an h . 323 message , etc .). the method continues with the gsid module 128 assigning a first gsid to the first communication session ( step 508 ). once the first gsid is assigned to the first communication session , each transmission of information during the first communication session may either include or make reference to the first gsid . it is possible , however , to only having selected messages in the first communication session include or make reference to the first gsid . the first gsid , in some embodiments , is globally unique among gsids assigned by the gsid module 128 . in some embodiments , every gsid assigned by the gsid module 128 to a communication session is substantially unique . in some embodiments , every gsid assigned by the gsid module 128 at least unique within the universe of gsids assigned to communication sessions in the enterprise network 104 . the method continues when a second message from a second communication session is received ( step 512 ). the second message may be received at the communication server 120 , a communication device 112 , 136 , or any other device in the media or signaling path of the second communication session . in some embodiments , the device that receives the second message is the same device that receives the first message . in some embodiments , the device that receives both messages is a communication server . in some embodiments , different communication servers 120 may receive the messages . in some embodiments , the device that receives the second message is not in the media or signaling path of the first communication session . in some embodiments , the device that receives the second message is in at least one of the media and signaling path of the first communication session . upon receiving the second message , the gsid module 128 is invoked to assign a second gsid to the second communication session ( step 516 ). once the second gsid is assigned to the second communication session , each transmission of information during the second communication session may either include or make reference to the second gsid . it is possible , however , to only having selected messages in the second communication session include or make reference to the second gsid . the method continues when it is determined that the first and second communication sessions are associated with one another ( step 520 ). this determination may be made by the session monitoring module 124 either during the establishment of the second communication session or after the second communication session is already established . furthermore , this determination may be made by analyzing message transmitted during the first session , messages transmitted during the second session , or a combination of messages transmitted during the first and second sessions . further still , the first communication session does not necessarily have to use the same media type as the second communication session . for example , one session may be a voice - based session and the other session may be a web - based session . when the session monitoring module 124 has determined that the first and second sessions are associated , the method continues with the session monitoring module 124 invoking the gsid module 128 to alter the first and / or second gsid to describe the association between the first and second communication sessions ( step 524 ). in some embodiments , the first gsid assigned to the first communication session may be altered to refer to the second gsid . this altered gsid can be referred to as an altered first gsid or a third gsid . in some embodiments , the second gsid assigned to the second communication session may be altered to refer to the first gsid . this altered gsid can be referred to as an altered second gsid , a third gsid ( e . g ., the same as the altered first gsid ), or a fourth gsid . in some embodiments , one or both of the first and second gsid are altered to include reason information that describes why the first communication session was associated with the second communication session . it should be appreciated that while embodiments of the present disclosure have been described in connection with a particular communication system architecture , embodiments of the present disclosure are not so limited . in particular , those skilled in the communication arts will appreciate that some or all of the concepts described herein may be utilized in any communication system that has the need to identify or troubleshoot communication sessions , especially where the topology of such sessions is likely to be modified . furthermore , in the foregoing description , for the purposes of illustration , methods were described in a particular order . it should be appreciated that in alternate embodiments , the methods may be performed in a different order than that described . it should also be appreciated that the methods described above may be performed by hardware components or may be embodied in sequences of machine - executable instructions , which may be used to cause a machine , such as a general - purpose or special - purpose processor ( gpu or cpu ) or logic circuits programmed with the instructions to perform the methods ( fpga ). these machine - executable instructions may be stored on one or more machine readable mediums , such as cd - roms or other type of optical disks , floppy diskettes , roms , rams , eproms , eeproms , magnetic or optical cards , flash memory , or other types of machine - readable mediums suitable for storing electronic instructions . alternatively , the methods may be performed by a combination of hardware and software . specific details were given in the description to provide a thorough understanding of the embodiments . however , it will be understood by one of ordinary skill in the art that the embodiments may be practiced without these specific details . for example , circuits may be shown in block diagrams in order not to obscure the embodiments in unnecessary detail . in other instances , well - known circuits , processes , algorithms , structures , and techniques may be shown without unnecessary detail in order to avoid obscuring the embodiments . also , it is noted that the embodiments were described as a process which is depicted as a flowchart , a flow diagram , a data flow diagram , a structure diagram , or a block diagram . although a flowchart may describe the operations as a sequential process , many of the operations can be performed in parallel or concurrently . in addition , the order of the operations may be re - arranged . a process is terminated when its operations are completed , but could have additional steps not included in the figure . a process may correspond to a method , a function , a procedure , a subroutine , a subprogram , etc . when a process corresponds to a function , its termination corresponds to a return of the function to the calling function or the main function . furthermore , embodiments may be implemented by hardware , software , firmware , middleware , microcode , hardware description languages , or any combination thereof . when implemented in software , firmware , middleware or microcode , the program code or code segments to perform the necessary tasks may be stored in a machine readable medium such as storage medium . a processor ( s ) may perform the necessary tasks . a code segment may represent a procedure , a function , a subprogram , a program , a routine , a subroutine , a module , a software package , a class , or any combination of instructions , data structures , or program statements . a code segment may be coupled to another code segment or a hardware circuit by passing and / or receiving information , data , arguments , parameters , or memory contents . information , arguments , parameters , data , etc . may be passed , forwarded , or transmitted via any suitable means including memory sharing , message passing , token passing , network transmission , etc . while illustrative embodiments of the disclosure have been described in detail herein , it is to be understood that the inventive concepts may be otherwise variously embodied and employed , and that the appended claims are intended to be construed to include such variations , except as limited by the prior art .