I have anywhere from 1 to 9 for a value of my tcp.misseddata_gaps. The increment that PAM is collecting data stats is every 5 minutes. Are those numbers high? Should there be any dropped packets at all? Thanks in advance!
Eric Hanson -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jacob Langseth Sent: Tuesday, January 06, 2004 3:37 PM To: Teti Lawrence Cc: [EMAIL PROTECTED] Subject: Re: [ISSForum] network sensor 7 performance Teti Lawrence scribed: > > Robert Graham wrote: > > "In other words, the SensorStatistic value of "tcp.nodataacks" should be > always zero." > > I am using RSNS 7.0 on Nokia sensors. I do not see a "tcp.nodataacks" in the > details of my SensorStatistics. I do see a "tcp.drops", which seems to > always be zero. Why the difference? The SensorStatistics documentation should include a detailed description of each stat that is logged in the event. "tcp.drops" is the total number of TCP sessions not tracked by PAM, due to a lack of sensor resources. This statistic is not related to packet loss. The statistic which Robert is referring to is now called "tcp.misseddata_gaps". ( Fwiw, this statistic has changed its name over a couple of xpu's, as the logic behind it has become more refined. It started as a simple statistic that tracked the total number of acknowledgements seen on the wire for which no corresponding data was received by the sensor. This statistic suffered from the problem that once one tcp segment was missed by the sensor, the statistic would be incremeneted for all subsequent acks on the connection (as the acks acknowledge missed data). This logic did not yield as meaningful of a statistic as we had hoped. So, the logic was refined to track the total number of tcp gaps, rather than the total number of missed data acks, seen on each tcp connection. The name of the statistic was updated accordingly. ) Hope this helps, Jacob -- Jacob Langseth <[EMAIL PROTECTED]> _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
