Managing Incident Responses › How Incident Responses Work › Trace Route Investigations

Trace Route Investigations

Use a trace route investigation to record the path and each hop between the monitoring device and end-points to monitor latency and routing issues, and optionally, SNMP poll each router for its performance information.

Assign a trace route investigation to a network incident response. If the server that hosts the application is monitored by a CA Standard Monitor, the management console launches this investigation from the monitoring device. Otherwise, the management console launches the investigation from the management console.

During a network incident, the management console will begin a Trace Route investigation from the monitoring device and attempt to reach a device on the network subnet with the incident. If the subnet is a /24 or is more specific, an IP address in the subnet is used as a target; the management console must have collected response time data for this address. If the subnet is less specific than a /24, the management console picks an address in the subnet range using another method. If within the Trace Route action properties, the option "Investigate Routers via SNMP" is enabled, then the trace route is performed first, and afterwards, the list of network devices in the route is used for SNMP investigation. If the management console discovers a valid SNMP profile, the management console queries the device for its performance information, which is included in the investigation results.

When configured to run a TCP trace route, the TCP trace route uses the TCP port of the applications being monitored for outbound traffic and ICMP TTL Expired messages for the return to isolate the router along the path that killed the outbound packet.

A management console administrator can also launch or schedule this investigation from the Incidents page.

A trace route investigation produces a report about paths, hops, delay, and usage.

Optionally, you can configure a trace route investigation to launch a Performance via SNMP investigation of device and performance interface statistics for each device in the path.

To SNMP poll each hop along the path, you do not need to add network devices to the management console, however, to SNMP poll a server or network device, you must define a valid SNMP profile. A performance via SNMP investigation produces a report about device performance and interface statistics.

To SNMP poll each hop along the path, if you have not defined a network device in the management console with a valid SNMP profile, the management console attempts to discover a valid SNMP profile on each network device. Alternatively, you can use another CA product to SNMP poll your devices for performance information.