Previous Topic: Refused Sessions


Packet Load

The Packet Load sensor looks for changes in the number of bytes per packet that goes to a particular server. Applications that run on servers typically have a fairly constant ratio between the number of packets they receive in requests for their service and the packet volume. This sensor looks for anomalous changes in that ratio.

Troubleshooting a Packet Load Alert

In WAN applications, you want to have as much data in each packet as the maximum transmission unit (MTU) allows. Applications that have less data in the packets have to wait longer to get data across the network. Analyze whether the application is loading the packets fully to send to remote users.

An alert may indicate varying implementation of the clients or it may indicate that unexpected clients are trying to subvert the server.