Multi-Port Monitor filters include a packet-slicing option that lets you selectively discard parts of a frame as it is captured.
Packet slicing is typically deployed when data volumes are high and the data of interest is in the packet headers. The packet payload is not typically needed for CA Application Delivery Analysis monitoring. Packet slicing reduces Multi-Port Monitor load and uses fewer resources for storing capture files.
The "All Traffic — headers only" filter specifies that all types of packets are captured and sliced to retain only their headers. The filter slices a packet to the size of the frame through the header, plus one byte of payload. Unless you add a filter or edit this filter, packet slicing is applied to all new logical port definitions on new installations. This filter maximizes Multi-Port Monitor performance while still capturing all data needed for monitoring with CA Application Delivery Analysis.
The network adapter that is installed on the Multi-Port Monitor appliance offers options for slicing packets, including fixed-length truncation and dynamic, per-protocol truncation. The capture card performs two types of slicing:
The frame size is truncated to a maximum specified length that you can set in bytes.
The frame size is truncated to a maximum length after the header is included, for example, the full TCP header plus 8 bytes of payload. The card considers encapsulations or TCP options when calculating the place where payload data is discarded.
|
Copyright © 2015 CA Technologies.
All rights reserved.
|
|