Infinistream socket table

LET OP, ARTIKEL IS NIET VOLLEDIG

Summary

In situations that the summary pane of a monitor show data, but drilling down towards the session pane results in "No data available" you might run into overloaded database tables. This article shows how to verify if the Infinistream is suffering from this problem.

 

Procedure

Verification

Log into the Infinistream and launch a localconsole session:

# isbin
# ./localconsole

Now, enter command-line mode by typing 11 and proceed with the following command:

% get dump tables

Search for the lines skt_trans and skt_table. The last column of these lines show if drops were seen.

Altering the table configuration

The first step is altering the file .afm_mode. This file is located in /opt/Netscout/rtm/bin

# isbin
# vi .afm_mode

 

Check the configuration of the socket table:

% get skt

Three parameters can be adjusted:

1. age interval
2. table size
3. tran_count

The default value for age interval is 180 seconds. Reduce the ageout interval in the skt tables (from localconsole CLI) - since modern transactions should be completed very quickly, having an 180-second limit is well beyond the range of what would be considered a "timeout", so having the "ageout" limit of 180-seconds means we store too many entries that should expire from this table. Reducing this ageout value means the table will be cleared faster to allow for more/newer entries to be created.

% set skt 12 age_interval 30

The maximum table size and transaction count depend on the amount of RAM that is installed in the Infinistream. Entering an unrealistic low value will result in a response that informs us about the maximum value for this specific system.

% set skt 12 table 5
% set skt 12 trab_count 5

Now, the maximum value will become visible on the screen.

As a best practice we will configure 50% of the maximum value.

Increase the size of the socket table to allow for more traffic:

% set skt 12 table 16000000
% set skt 12 tran_count 16000000