How I may help
LinkedIn Profile Email me!
Call me using Skype client on your machine

Network Performance Monitoring

Here I compare and contrast how to analyze network performane using both Microsoft Windows and Unix/Linux machines using counters and other tools for performance profilinggo to another page on this site testinggo to another page on this site and tuninggo to another page on this site


Topics this page:

  • Measured Objects
  • Picking a Monitor
  • Network Monitor
  • Network Sniffers
  • Links
  • Your comments???

    RSS XML feed for load testers RSS preview for load testers Site Map List all pages on this site 
    About this site About this site 
    Go to first topic Go to Bottom of this page

    System Analysis Utilities downloads Top/ Computers/ Performance_and_Capacity

    Set screen Measured Objects


      U: prefixes UNIX rstatd daemon counters.
      W: prefixes Windows Perfmon counters.
      S: prefixes SiteScope counters.

      Counters.chm file from the Windows 2000 Resource Kit.
      Counters.hlp file from the Windows NT Workstation 4.0 Resource Kit.

    Go to Top of this page.
    Previous topic this page
    Next topic this page
    Set screen Object Potential
    Subset Total Threshold for Action Potential

    Network (Ethernet) Interface

    Collisions N: Collisions rate (of packets) per second detected on the wire. - Reduce # of machines on subnet or use higher bandwidth network
    Utilization Rate in Bytes/sec W: Current Bandwidth (theoretical bits per second)
    /8 bits/byte
    W: Bytes Received/sec W: Bytes Total/sec (including framing characters) -
    W: Bytes Sent/sec
    Utilization & Error Rate in Packets/sec N: Incoming packets rate per sec.
    W: Packets Received/sec
    N: Incoming packets errors rate per sec.while receiving Ethernet packets. W: Packets Received Unicast/sec +
    W: Packets Received Non-Unicast/sec
    Good Packets in/sec -
    N: Outgoing packets rate per second.
    W: Packets Sent/sec
    - W: Packets sent Unicast/sec +
    W: Packets Sent Non-Unicast/sec
    Good Packets out/sec -
    Error Count W: Packets Received Errors
    W: Packets Received Discarded
    W: Packets Received Unknown
    > 1 Adjust network buffers
    W: Packets Outbound Errors
    W: Packets Outbound Discarded
    Delay W: Output Queue Length > 2

    Go to Top of this page.
    Previous topic this page
    Next topic this page

      Set screen Picking Network Monitor

      To determine if the number of network buffers need to be set higher, watch the number of error-free packets the system is dropping obtained by subtracting from the total packet throughput the sum of Packets Outbound Discarded and Packets Received Discarded.

      Counters Packets Outbound Errors and Packets Received Errors indicate network card hardware problems.

      Don't rely on the Current Bandwidth counter because it shows theoretical rather than actual bandwidth.

      A reasonable limit for an Ethernet network is %Network Use less than 30 percent. A higher value means you need to speed up the network or reduce the amount of traffic.

      Use the %Broadcast Frames and %Multicast Frames counters to view the percentages of broadcast and multicast traffic. Network cards pass broadcast and multicast frames to a higher-level software component before they act on or discard them. This extra activity results in additional CPU use.

      As the requesting computer connects to find the server computer's network address, it generates broadcast traffic. Frame traffic increases as the server transfers the files.

      Similarly, don't use the Output Queue Length counter because it's always zero, since transmission requests are not handled by the network card but by network device interface specification (NDIS) software.


    Go to Top of this page.
    Previous topic this page
    Next topic this page

      Set screen Network Monitor

      To add Network Segment counters, you must install the Network Monitor Agent.

      Microsoft provides two versions of NetMon. Install the promiscuous version of Netmon from Microsoft's Systems Management Server (SMS) 1.2 and 2.0+ product to capture packets on all NICs on the same network subnet hub.

      Otherwise, the network card typically rejects network traffic intended for other network cards.

      Traffic through a switch (rather than a hub) may not be captured this way.

      1. Install Network Monitor from Control Panel > Add/Remove Programs > Add/Remove Windows Components > Management And Monitoring Tools This puts netmon.exe and its dlls in the %windows%\system32\netmon folder.
      2. Apply patch from MS Security Bulletin MS00-83 to patch the buffer overrun vulnerability from malicious malformed data.
      3. Invoke Netmon from a command prompt or
        Start > Programs > Administrative Tools
      4. By default capture files are saved with the .cap file suffix in the My Captures folder under the My Documents folder of the current user.

      Netmon filter specifications are stored in the NetMon\Captures subdirectory. Netmon allows filtering by protocol, TCP/IP address, and data pattern.

      This activity drains the resources of the computer you're analyzing, limit Network Segment monitoring. Monitoring Network Segment counters increases CPU use. As these counters process network traffic, they use additional system resources.


    Go to Top of this page.
    Previous topic this page
    Next topic this page

    Set screen Network Sniffers

    • Open Source WinPcap (installed as System protocol Driver NPF at the same level of tcpip.sys is visible in msinfo32.exe System Information panel, Software Environment). It exports primitive compatible with Unix capture library libpcap

      So, to unload it:

       net stop npf

      • HTTP Analyzer ($149) specializes on analyzing HTTP/S traffic via an IE Add-on or stand-alone program. Its creator, IE Inspector, also offers IE WebDeveloper and AxScripter for debugging ActiveX scripts.
      • Visual Networks' Visual UpTime
      • libpcap tcpdump
      • NAI's SnifferT
      • SnifferT Pro,
      • NetXrayT,
      • Sun snoop and atmsnoop,
      • Shomiti/Finisar Surveyor,
      • AIX's iptrace,
      • Novell's LANalyzer,
      • RADCOM's WAN/LAN Analyzer,
      • HP-UX nettl,
      • i4btrace from the ISDN4BSD project,
      • Cisco Secure IDS iplog,
      • pppd log (pppdump-format),
      • AG Group's/WildPacket's EtherPeek/TokenPeek/AiroPeek,

    Go to Top of this page.
    Previous topic this page
    Next topic this page

    Portions ©Copyright 1996-2011 Wilson Mar. All rights reserved. | Privacy Policy |

    Related Topics:
    Rational Robot 
    Free Training! 
    Tech Support 

    How I may help

    Send a message with your email client program

    Your rating of this page:
    Low High

    Your first name:

    Your family name:

    Your location (city, country):

    Your Email address: 

      Top of Page Go to top of page

    Thank you!