Detailed network path information for a variety of metrics is presented in the performance charts. Additional detail is available both for events and for routes.

Network path performance

Network path performance details are provided on a number of charts - each chart representing a separate metric. By default, they show information from the last hour, but the timeline can easily be modified. Depending on the timeline selected, either all data points or an amalgamation of data points are shown. The charts are plotted in real-time so no page refresh is required. All charts have common annotations that you should be aware of. In addition to on-screen charts, this information can be downloaded as a report.

View network path performance details

To view network path performance details:

  1. Navigate to Delivery > Network Paths.
  2. Click the network path you are interested in or, in the Go to a path… search area (top left of page under the AppNeta logo), enter a search string.
    • The matching paths are listed below the search area.
  3. Click the Performance tab.

Route chart

The Route chart shows the latest routes taken by TCP, UDP, and ICMP packets from the source monitoring point to the target. Hover over the nodes to display detailed hop information. You can also view route details for the network path by using the Route Analysis tab.

Note: Only ICMP routes are available for m20, m22, m30, r40, and r400 monitoring points.

Timeline

The timeline is used to filter the data displayed on the charts below it. By default, it is set to the last hour but this can be changed in a few ways:

  • Choose a pre-defined time period (top left of pane).
  • Specify the time period directly (top right of pane).
  • Use the slider to specify the beginning and end of the time range (bottom of pane).
  • You can also zoom by clicking a start time and dragging to the end time (or end time to start time) in any chart.

By default, the timeline is based on the user timezone. You can change this to the source monitoring point timezone by checking the Source Monitoring Point Time Zone checkbox.

Events chart

The Events chart provides a summary of the types of events that have occurred on the network path during the specified time period.

screenshot-events.jpg

Circle position on the x-axis indicates the time that the events occurred. Circle size indicates the number of events of a given type. Circle color indicates the event type as follows:

Event type Indicator Description
Condition violation Path performance surpassed an alert condition threshold.
Condition clear Path performance returned to acceptable parameters.
Availability Source monitoring point availability changed from available to unavailable (or unavailable to available).
Diagnostic test A diagnostic test completed.
Network change A network (BGP Autonomous System) along the path changed.
Route change The path route changed.
Packet capture A packet capture related to this path started, stopped, failed, or completed.
ISP change ISP detection is based on the first WAN hop. This hop has changed.

Hovering over a circle shows the associated events. For some event types (for example, Diagnostic Tests and Route Changes), clicking on a circle enables you to reveal event detail by clicking a “View” link). You can also see network path event details by viewing the event logs.

Capacity chart

The Capacity chart shows the total, utilized, and available capacity measured on the network path during the specified time period. In addition, it shows the provisioned capacity (yellow horizontal line) either measured or set on the network path. For more information, see Capacity.

Data Loss chart

The Data Loss chart shows the percentage data loss (loss of simulated data packets) measured on the network path during the specified time period. Each data point is calculated as a rolling average of the last five samples during normal sampling (once per minute by default) and the last ten samples during escalated sampling (once every ten seconds). Escalated mode occurs when an alert threshold is violated. For more information, see Data and voice loss.

Data Jitter chart

The Data Jitter chart shows the data jitter (data packet delay variation) measured on the network path during the specified time period. For more information, see Data and voice jitter.

Latency chart

The Latency chart shows the latency (calculated as 1/2 RTT) measured on the network path during the specified time period. For more information, see Round-trip time (RTT) and Latency.

Round-Trip Time chart

The Round-Trip Time chart shows the round-trip time (RTT) measured on the network path during the specified time period. For more information, see Round-trip time (RTT) and Latency.

Voice Loss chart

The Voice Loss chart shows the percentage voice loss (loss of simulated voice packets) measured on the network path during the specified time period. Each data point is calculated as a rolling average of the last five samples during normal sampling (once per minute by default) and the last ten samples during escalated sampling (once every ten seconds). Escalated mode occurs when an alert threshold is violated. For more information, see Data and voice loss.

Voice Jitter chart

The Voice Jitter chart shows the voice jitter (simulated voice packet delay variation) measured on the network path during the specified time period. For more information, see Data and voice jitter.

MOS chart

The MOS chart shows the Mean Opinion Score measured on the network path during the specified time period. For more information, see Mean Opinion Score (MOS).

Chart annotations

When reviewing the network path performance charts, there are several annotations you should be aware of. In most cases you can hover over the annotation to see more detail:

  • Black vertical line - indicates an attribute essential to monitoring has changed (for example, source, target, target type, instrumentation, QoS, alert profile) or the sequencer process on the monitoring point was restarted.
  • Black horizontal line - indicates a condition threshold.
  • Yellow horizontal line - indicates the provisioned capacity. It only appears on the Capacity chart.
  • Red chart - indicates that path performance violated a condition threshold.
    • The area of the chart beyond the threshold and the threshold line are colored red. If the performance becomes acceptable again, the threshold line remains red until the evaluation period completes. At this point the violation clears. See Alert evaluation periods for more details.
  • Black chart - means that the monitoring point can’t reach the path target.
    • This could either be because the target doesn’t respond to ICMP, or because the source monitoring point could not resolve the target hostname. It is commonly the case that users have set monitoring points as end points, but have not met this prerequisite.
  • Grey chart - means that APM has not heard from the monitoring point.
    • This is expected if the monitoring point is known to be offline. Otherwise, check status.appneta.com to determine if there is an issue with APM.
    • Monitoring points can cache up to 2 hours of data locally, and back-fill the charts when they reconnect.
    • It may take up to 30 minutes for the grey to resolve once the issue preventing the monitoring point from connecting is resolved. This is because, once the monitoring point is offline for an extended period of time, it only tries reconnecting every half hour.
  • White box with dashed lines - means that monitoring is disabled on the path.

Provisioned capacity

The provisioned capacity of a network path is indicated by a horizontal yellow line on the network path’s Capacity chart. It shows either the highest total capacity seen during the specified time range, or the capacity you expect (and have set) based on the service level agreement (SLA) with your ISP.

You should leave provisioned capacity unset when the end-to-end capacity of the network path is not guaranteed by your SLA. While the link speed to your ISP might be guaranteed, everything beyond your ISP on the public internet is not. If the provisioned capacity is not set, the yellow line indicates the total capacity of the path as measured using Continuous Path Analysis (CPA). In general, the value should be constant. If it does change, it could be the result of a route change or a configuration change by an ISP.

You should set the provisioned capacity when the end-to-end capacity of the network path is guaranteed by your SLA. In this case, the total capacity measured should not be below the specified provisioned capacity for an extended period. When the provisioned capacity is set, the yellow line indicates the configured value.

Provisioned capacity is set using the icon on a network path’s Capacity chart.

screenshot-provisioned-capacity.jpg

To set the provisioned capacity on a network path:

  1. Navigate to Delivery > Network Paths.
  2. Click the network path you are interested in.
  3. On the Capacity chart, click the icon.
  4. In the Provisioned Capacity field, specify the capacity guaranteed by your ISP.
  5. (Optional) In the Capacity Cost($) field, specify the cost of the path.
  6. Click Apply.
    • The provisioned capacity is set.

Network path events

A network path event is an indicator that something about a path has changed. Events include: condition violation and clear, monitoring point availability changes, diagnostic test completions, network changes, route changes, packet captures, and ISP changes.

All events for all paths in an organization are logged and retained for seven days. If you have email notifications enabled, you will receive an email notification for events you are interested in. In addition, you can see a summary of all events on the Events chart.

You can view logged event details for all network paths in an organization or for a specific network path.

Condition violation and clear events (for most event types) are triggered based on alert profiles. For these events, it is useful to understand some of the boundary conditions affecting them and how alert evaluation periods work.

View network path event details for all network paths

To view network path event details for the past seven days on all network paths:

  1. Navigate to Delivery > Events.
    • The network path events page for all network paths is displayed.
    • Network path status is indicated by the status icon in the left-most column. Note: This status is the current status, not the status of the path at the time of the event.

View network path event details for a specific network path

To view network path event details for the past seven days on a specific network path:

  1. Navigate to Delivery > Network Paths.
  2. Click the network path you are interested in.
  3. Click the Events tab.
    • The network path events page for the selected network path is displayed.

Alerts - things to know

There are a few things that are useful to know about how alerts work:

  • If an alert profile time range expires while a condition is in violation, the condition is cleared and a ‘threshold suppressed’ entry is added to the event log.
  • Violations that occur while a monitoring point is disconnected from APM don’t raise an event until the connection is restored.

Alert evaluation periods

In general, a condition is violated when it is outside a configured limit for a specified period of time and is cleared when it returns to an acceptable value for another period of time. The time periods specified for a given condition (the evaluation periods) are used to confirm that the condition is persistent for that time before declaring a violation or clear event.

The following diagram shows how this works. In this case the evaluation period is five minutes. The condition is violated twice but the first time it was not violated long enough to trigger an alert. The second violation did last for more than five minutes so an alert was triggered.

pv-alert-eval.png

Network path routes

As part of Continuous Path Analysis (CPA), APM regularly traces the physical route for each network path, hop-by-hop, from source to target. The most recently measured route for the selected path can be seen on the Routes chart. Further details can be found on the Path Route Analysis page. To see historical routing information for more than one path you can use the Routes pane.

Note that the granularity of measurements is approximately every five minutes so routes may change more than what is shown.

View network path route details

To view network path route details:

  1. Navigate to Delivery > Network Paths.
  2. Click the network path you are interested in.
  3. Click the Route Analysis tab.
    • The Path Route Analysis page is displayed.
      • Most Recent Unique Routes - provides a summary of the most recent unique routes.
      • Route Details - provides details on the route selected in the Most Recent Unique Routes pane.
      • Route History - shows the last 100 route changes. Routes marked with black arrows reflect the route selected in the Most Recent Unique Routes pane.

View network path route details for multiple paths

The Routes pane provides a way to view traceroutes taken by multiple paths in a single view and to see how the routes taken by packets on those paths change over time.

To view network path route details for multiple paths:

  1. Navigate to Delivery > Network Paths.
  2. Search for or filter the paths you are interested in.
    • Search/filter results of 20 or fewer paths is required.
  3. Click the Show Routes button.
    • The Routes pane is displayed.
    • Actions on the page include:
    • Page contents include:
      • Hops - Selecting Hops shows the hops traversed by traceroutes from source to target for all filtered paths in the selected time range.
        • Click a hop to lock the hop data in the data bar. Once locked:
          • Click the filter icon () to create a hop filter (all routes that have that hop in common).
          • In the data bar, select up to two labels to associate with the hop.
        • Click the hop again, click the unlock icon (), or click whitespace outside the diagram to unlock the data bar.
      • Networks - Selecting Networks shows the private networks, public networks, and interexchanges traversed by traceroutes from source to target for all filtered paths in the selected time range.
        • Objects inferred as belonging to the private corporate network show the network name with an asterisk (*) to indicate that the network has been inferred.
        • Click a network to lock the network data in the data bar. Once locked:
          • Click the filter icon () to create a network filter (all routes that have that network in common).
        • Click the network again, click the unlock icon (), or click whitespace outside the diagram to unlock the data bar.
        • Click to see the hops within a network.
        • Click to collapse the hops within a network.
      • Export - Click Export to export information about the filtered routes to a text file.
      • Protocol - Select a Protocol to show traceroutes taken by ICMP, UDP, or TCP. Auto shows the protocol used by Continuous Path Analysis (CPA) for each path. For single-ended paths this is ICMP. For dual-ended paths this is UDP.
      • Date & Time and Range - Specify a time range using the Date & Time and Range selectors. Move the cursor on the time bar to see traceroutes active at the selected time within the time range.
      • Every network path takes a traceroute measurement approximately every five minutes to detect the hops traversed between the path’s source and target.
      • Traceroutes active at the selected time are shown in black. All other traceroutes observed within the selected time range are shown in grey.
      • Icons include:
        • Hop - A point on the traceroute at which routing occurs.
        • Source - The origin of traceroutes on a path.
        • Target - The destination of traceroutes on a path. Note that a path can have many targets when the target is a domain name.
        • Source/target - An IP address that is both a source and a target of traceroutes.
        • Incomplete hop - The last hop on a traceroute that does not reach its target.
        • Unknown hop - A hop where IP address information is not available (hop did not respond to traceroute requests).

Filter by hop

To view all routes that pass through a given hop on the Routes pane:

  1. Select Hops.
  2. Click the hop you are interested in.
  3. Click the filter icon ().
    • Only routes that pass through the selected hop are shown.
    • The filter is displayed at the top left of the pane.

Filter by network

To view all routes that pass through a given network on the Routes pane:

  1. Select Networks.
  2. Click the network you are interested in.
  3. Click the filter icon ().
    • Only routes that pass through the selected network are shown.
    • The filter is displayed at the top left of the pane.

Filter by protocol

To view routes taken by packets of a specific protocol:

  1. Select either Hops or Networks.
  2. In the Protocol field, select the protocol to filter on.
    • Auto shows the protocol used by Continuous Path Analysis (CPA) for each path. For single-ended paths this is ICMP. For dual-ended paths this is UDP.

Expand/collapse a network

You can see all the hops within a network by expanding the network and dismiss them by collapsing it.

To expand or collapse a network:

  1. Select Networks.
  2. Double-click the network icon or click to the left of a network name to expand the network.
  3. Click to the left of a network name to collapse the network.

Edit your corporate network name

The Network view groups hops into networks based on their BGP Autonomous System (AS) number or their presence in PeeringDB (for InterExchange Networks). However, most paths originate from Enterprise Monitoring Points on private addresses inside the corporate network so the first few hops cannot be grouped by AS.

To simplify the Network view, all hops between sources and the first public IP address are grouped into a single “Corporate” network. By default, the corporate network is named after your Organization in APM, but an Organization Admin can customize this label by updating the Corporate Network field on the Configure an Organization page.

Label a hop

You can label a hop with up to two labels from data in the Routes pane data bar.

To label a hop:

  1. Select Hops.
  2. Click the hop you want to label.
  3. In the data bar, select the hop data you want to show on the diagram.

Export route information

You can export a text file of hop data for all active (black) traceroutes for a given point in time.

To export route information:

  1. Click Export.
    • A dialog showing the data to be exported appears.
  2. Click Export.
    • A text file containing the hop data is downloaded to your computer.
Call Support: 800-664-4401
Contact Us