• Forums
    • Public Forums
      • Community Connect
      • Dynatrace
        • Dynatrace Open Q&A
      • Application Monitoring & UEM
        • AppMon & UEM Open Q&A
      • Network Application Monitoring
        • NAM Open Q&A
  • Home
  • Public Forums
  • Network Application Monitoring
  • NAM Open Q&A
avatar image
Question by Babar Q. · Dec 04, 2016 at 12:45 PM · nam nam probe

TCP Sessions with Missing Packets

Hello Everyone,

We have a situation that one of our AMD is missing the TCP sessions near about 5% and after reviewed we found that few software services created to monitor the applications have 100% missing sessions.

AMD is performing well without any drop packets or running out any other resources.

What could be the issue?

Below screenshots are reference to my question.

Regards,

Babar

tcp-sessions-with-missing-packets.png (9.7 KiB)
missing-sessions.png (13.0 KiB)
Comment

People who like this

0 Show 0
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

3 Replies

  • Sort: 
  • Most voted
  • Newest
  • Oldest
avatar image

Answer by Ulf T. · Dec 05, 2016 at 02:59 PM

Hey Babar - Now I had time to look a little more on you screen - your AMD is also sampling - never good!

https://answers.dynatrace.com/questions/151490/und...

Is it overloaded?

Comment

People who like this

0 Show 1 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image Babar Q. · Dec 05, 2016 at 05:42 PM 0
Share

Hello Ulf,

As per our understanding AMD is not under performing, therefore, I took below screenshots for your understanding, might be we are missing something or overlooked.

AMD Health

AMD Settings

Interface Utilization

Packet Distribution (Driver Level)

Regards,

Babar

amd-stat.png (10.9 KiB)
dh1-amd.png (13.1 KiB)
inter-util.png (13.6 KiB)
pckt-dist-driver-level.png (21.3 KiB)
avatar image

Answer by Ulf T. · Dec 05, 2016 at 01:43 PM

So - most likely the SPAN is the source of your problem. I've posted a couple of times before but it's worth repeating - SPAN has very limited value in a production environment. Your best bet for success is have a target port that is much higher in speed than your source ports, and still you can fail :-) so that's why you should use a TAP instead. http://www.lovemytool.com/blog/2007/08/span-ports-...

In the manual (assuming you are on 12.4)

https://community.dynatrace.com/community/display/...

Comment

People who like this

0 Show 1 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image Babar Q. · Dec 05, 2016 at 02:12 PM 0
Share

Hello Ulf,

We have AMD Version: 12.3.8.6 and the below two screenshots are taken from the two different AMDs. The weird thing is that only the application traffic is missing 100% on the DH-1 side and the partially missing traffic for the same application(s) on the DH-2.

One more observation that the configured analyzer is HTTP which is showing 100% missing session in DH-1 AMD but for the Unknown TCP there is no missing session.

The same application in the DH-2 AMD is partially missing the traffic and that is also for the HTTP analyzer.

DH-1 Aggregator

DH-2 Aggregator

Regards,

Babar

dh-1-aggregator.png (32.1 KiB)
dh-2-aggregator.png (29.4 KiB)
avatar image

Answer by Ulf T. · Dec 05, 2016 at 10:44 AM

It's most likely depending on how you capture the packets to your AMD. How is it done today?

,

Very likely it's your feed. How are the packets captured and directed to the the AMD?

Comment

People who like this

0 Show 1 · Share
10 |2000000 characters needed characters left characters exceeded
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 10 attachments (including images) can be used with a maximum of 50.0 MiB each and 250.0 MiB total.

avatar image Babar Q. · Dec 05, 2016 at 12:47 PM 0
Share

Hello Ulf,

Thank you for your reply.

We have a span from core switches to Aggregators and then to AMDs.

Below screenshot is a reference for the analyzer and missing sessions.

Regards,

Babar

total-missing-sessions.png (31.5 KiB)

How to get started

First steps in the forum
Read Community User Guide
Best practices of using forum

NAM 2019 SP5 is available


Check the RHEL support added in the latest NAM service pack.

Learn more

LIVE WEBINAR

"Performance Clinic - Monitoring as a Self Service with Dynatrace"


JANUARY 15, 3:00 PM GMT / 10:00 AM ET

Register here

Follow this Question

Answers Answers and Comments

16 People are following this question.

avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image

Related Questions

kernel upgrade on AMD : is there an impact ?

Exclude Exception Class

Protocol SCADA E104

DB2 database gives millions of Cursor execution operations?

Has the AMD command "rcmd show ssldecr status xxx.xxx.xxx.xxx" changed in DCRUM May 2017 version?

Forum Tags

esm siebel Dynatrace Managed license nam probe wan citrix dna rest api configuration mq alerting NAM 2018 dashboard dcrumadvisory reports css nam universal decode database mobileapp RUM ads sap nam console scripting nam server sequence transactions nam 2019 upgrade
  • Forums
  • Public Forums
    • Community Connect
    • Dynatrace
      • Dynatrace Open Q&A
    • Application Monitoring & UEM
      • AppMon & UEM Open Q&A
    • Network Application Monitoring
      • NAM Open Q&A