Packet data retention

From COMCERT Wiki
Jump to: navigation, search

Introduction

The packet retention period is depending on the size of the packet store's partition size, the applications recording settings and the packet rate.

Typically, two thirds of the available storage space is allocated during installation for the packet store's partition.

Packets are stored in a first-in-first-out kind of way.

Each interface on the InfiniStream/vStream (i.e., Monitored Element) has a dedicated packet store, all sharing the same partition thus competing for the same capacity.

It is not possible to increase the size of the partition without deleting all the packets.

 

Solution

In the console under SYSTEM INFORMATION, expand the section Health and select the module Instrumentation Health from the list.

 

NGSModuleIH.png

 

 

Click the name of the InfiniStream you wish to investigate.

 

IHPacketRecording.png

 

 

On the left, select Store and in the right-top corner, you may select the viewing period from 24h til 31d.

On the bottom-half of the screen you see the Packet Recording trend, ASR (session details) trend and ASI (metadata) trend.

The top of the vertical axis represents the size of the respective strore location.  In this example, the size of the packet store is about 70GB.  When the store is almost full, the oldest packets will be removed (FIFO).