Network path performance details are provided on a number of charts on the Network Timeline page - each chart representing a separate metric. By default, they show information from the last hour, but the timeline can easily be modified. Depending on the timeline selected, either all data points or an amalgamation of data points are shown. The charts are plotted in real-time so no page refresh is required. All charts have common annotations that you should be aware of. In addition to on-screen charts, this information can be downloaded as a report.
View network path performance details
To view network path performance details:
- Navigate to Delivery > Network Paths.
- To filter the paths, in the Go to a path… search area (top left of page under the AppNeta logo), enter a search string.
- The matching paths are listed below the search area.
- Click the network path you are interested in. The Network Timeline page is displayed.
- To view in a separate tab, use CTRL+click (Windows) or Command+click (macOS).
- Click the Performance tab. The network path performance details are displayed. The panels on this page include:
The Route chart shows the latest routes taken by TCP, UDP, and ICMP packets from the source Monitoring Point to the target. Hover over the nodes to display detailed hop information. You can also view route details for the network path by using the Routes pane.
Note: Only ICMP routes are available for m20, m22, m30, r40, and r400 Monitoring Points.
The timeline is used to filter the data displayed on the charts below it. By default, it is set to the last hour but this can be changed in a few ways:
- Choose a pre-defined time period (top left of pane).
- Specify the time period directly (top right of pane).
- Use the slider to specify the beginning and end of the time range (bottom of pane).
- You can also zoom by clicking a start time and dragging to the end time (or end time to start time) in any chart.
By default, the timeline is based on the user time zone. You can change this to the source Monitoring Point time zone by checking the Source Monitoring Point Time Zone checkbox.
The Events chart provides a summary of the types of events that have occurred on the network path during the specified time period.
Circle position on the x-axis indicates the time that the events occurred. Circle size indicates the number of events of a given type. Circle color indicates the event type as follows:
|Violation||Path performance surpassed an alert condition threshold.|
|Clear||Path performance returned to acceptable parameters.|
|Diagnostic Test||A diagnostic test completed.|
|Network Change||A network (BGP Autonomous System) along the path changed.|
|Route Change||The path route changed.|
|Packet Capture||A packet capture related to this path started, stopped, failed, or completed.|
|ISP Change||ISP detection is based on the first WAN hop. This hop has changed.|
|Monitoring Point||Source Monitoring Point availability changed from available to unavailable (or unavailable to available).|
|Connection Change||Connection type changed (e.g. from wired to wireless).|
Hovering over a circle shows the associated events. For some event types (for example, Diagnostic Tests and Route Changes), clicking on a circle enables you to reveal event detail by clicking a “View” link). You can also see network path event details by viewing the event logs.
The Capacity chart shows the total, utilized, and available capacity measured on the network path during the specified time period. In addition, it shows the provisioned capacity (yellow horizontal line) either measured or set on the network path. For more information, see Capacity.
On Container-based Monitoring Points (CMPs) capacity measurements can be influenced by networking on the host, kernel version on the host, other containers sharing the host.
Data Loss chart
The Data Loss chart shows the percentage data loss (loss of simulated data packets) measured on the network path during the specified time period. Each data point is calculated as a rolling average of the last five samples during normal sampling (once per minute by default) and the last ten samples during escalated sampling (once every ten seconds). Escalated mode occurs when an alert threshold is violated. For more information, see Data and voice loss.
Data Jitter chart
The Data Jitter chart shows the data jitter (data packet delay variation) measured on the network path during the specified time period. For more information, see Data and voice jitter.
The Latency chart shows the latency (calculated as 1/2 RTT) measured on the network path during the specified time period. For more information, see Round-trip time (RTT) and Latency.
Round-Trip Time chart
The Round-Trip Time chart shows the average round-trip time (RTT) measured on the network path during the specified time period. For more information, see Round-trip time (RTT) and Latency.
Voice Loss chart
The Voice Loss chart shows the percentage voice loss (loss of simulated voice packets) measured on the network path during the specified time period. Each data point is calculated as a rolling average of the last five samples during normal sampling (once per minute by default) and the last ten samples during escalated sampling (once every ten seconds). Escalated mode occurs when an alert threshold is violated. For more information, see Data and voice loss.
Voice Jitter chart
The Voice Jitter chart shows the voice jitter (simulated voice packet delay variation) measured on the network path during the specified time period. For more information, see Data and voice jitter.
The MOS chart shows the Mean Opinion Score measured on the network path during the specified time period. For more information, see Mean Opinion Score (MOS).
Connection type panel
The Connection type panel provides information about the network interface the path uses to connect to its target. For wireless interfaces this includes:
- Protocol - the wireless protocol used.
- SSID - the Service Set Identifier (SSID) (wireless network name) being used. SSID changes indicate a change of location (for example, home to Starbucks).
- BSSID - the Basic Service Set Identifier (BSSID) of the wireless access point being used. An access point will have a different BSSID for each network served (per protocol/channel). BSSID changes indicate shifts from one wireless network to another (for example, 5G to 2.4G).
- Channel - the wireless channel being used.
- Encryption - the type of encryption being used.
Hover over the Wireless chart to see the values at a particular point in time.
This feature is available for Windows NMP with EMP 13.2.1 and later software.
The Wireless charts provide several performance metrics about the wireless interface used by the network path. These include:
- Signal Quality - the wireless signal quality as a percentage.
- Link Speed - the bandwidth available on the wireless interface when the client has the channel. It does not indicate actual data flow. It is the most comprehensive indicator of all factors affecting raw bit rate of your wireless connection.
- RSSI - the Received Signal Strength Indication (RSSI) is a measurement of the power present in the received radio signal.
- -30dBm and higher - Extremely strong signal.
- -50dBm and higher - Good signal.
- -70dBm and higher - Weak signal. Likely lower link speeds.
- Below -70dBm - Client will look for other channels/bands.
- Noise - (not available on Windows workstations) the noise level indicates the amount of background noise in the received radio signal.
- Airtime - (only available on access points that support 802.11k) the percentage of time allocated to wireless transmissions for all stations on the connected wireless network, as reported by the Access Point. Airtime is a measure of how heavily utilized the wireless network is. Airtime congestion is a major cause of slow wifi even when the link speed is high. As a rough guide:
- > 70% - Saturated.
- > 50% - Heavily loaded. Not suitable for voice/video traffic.
- > 30% - Busy.
- < 30% - Lightly used.
- Retransmit - (only available for wireless drivers that support it) the percentage of frames sent that needed to be retransmitted one or more times before succeeding.
- Stations - (only available on access points that support 802.11k) the number of devices currently connected to the wireless network.
Interpretation and considerations:
- When signal quality and RSSI are in the upper ranges but performance issues persist, consider other causes like congestion (due to too many other clients, one or more clients dominating bandwidth (for example, streaming Netflix), slower clients, older/slower access point).
- When signal quality and RSSI are in the lower ranges, move workstation closer to the wireless access point or connect it to a wired network.
- Also, consider that protocol and band have a huge bearing on performance:
- 802.11b/g use 2.4G band only.
- 802.11n can use 2.4G and 5G bands.
- 802.11ac uses 5G only and up to 160MHz bandwidth.
- 2.4G has longer range than 5G.
- 2.4G penetrates walls better.
- 2.4G has fewer channels - more radio frequency congestion.
- 2.4G uses slower protocols - worse airtime congestion.
- 5G supports much higher bandwidth and link speeds.
- Wireless metrics are available for 31 days.
- Max/Min and Average charts are displayed when data is rolled up.
This feature is available for Windows NMP with EMP 13.2.2 and later software.
The Host charts provide several performance metrics about the host the Monitoring Point software is installed on. These are helpful when troubleshooting performance issues specific to a given user.
Host metrics include:
- CPU - the CPU utilization on the host.
- Memory - the memory utilization on the host.
- Top Processes - the processes using the most CPU resources at a given time. Select a point on the CPU or Memory charts to display the Top Processes list.
Interpretation and considerations:
- In order to collect host metrics, your Monitoring Point must be deployed within your APM organization and be online.
- Max/Min and Average charts are displayed when data is rolled up.
All timeline charts except the Events chart have the same hover and click actions.
- No interaction - Data for the most recent data point is displayed in the lower left of the chart.
- Hover over a data point - Associated data is displayed in the lower left of the chart.
- Click a data point - Associated data is displayed in a box in the upper right of the chart.
When reviewing the network path performance charts, there are several annotations you should be aware of. In most cases you can hover over the annotation to see more detail:
- Black vertical line - indicates an attribute essential to monitoring has changed (for example, source, target, target type, instrumentation, QoS, alert profile) or the sequencer process on the Monitoring Point was restarted.
- Black horizontal line - indicates a condition threshold.
- Yellow horizontal line - indicates the provisioned capacity. It only appears on the Capacity chart.
- Red chart - indicates that path performance violated a condition threshold.
- The area of the chart beyond the threshold and the threshold line are colored red. If the performance becomes acceptable again, the threshold line remains red until the evaluation period completes. At this point the violation clears. See Alert evaluation periods for more details.
- Black chart - means that the Monitoring Point can’t reach the path target.
- This could either be because the target doesn’t respond to ICMP, or because the source Monitoring Point could not resolve the target hostname. It is commonly the case that users have set Monitoring Points as end points, but have not met this prerequisite.
- Grey chart - means that APM has not heard from the Monitoring Point.
- This is expected if the Monitoring Point is known to be offline. Otherwise, check status.appneta.com to determine if there is an issue with APM.
- Monitoring Points can cache up to 2 hours of data locally, and back-fill the charts when they reconnect.
- It may take up to 30 minutes for the grey to resolve once the issue preventing the Monitoring Point from connecting is resolved. This is because, once the Monitoring Point is offline for an extended period of time, it only tries reconnecting every half hour.
- White box with dashed lines - means that monitoring is disabled on the path.
The provisioned capacity of a network path is indicated by a horizontal yellow line on the network path’s Capacity chart. It shows either the highest total capacity seen during the specified time range, or the capacity you expect (and have set) based on the service level agreement (SLA) with your ISP.
You should leave provisioned capacity unset when the end-to-end capacity of the network path is not guaranteed by your SLA. While the link speed to your ISP might be guaranteed, everything beyond your ISP on the public internet is not. If the provisioned capacity is not set, the yellow line indicates the total capacity of the path as measured using Continuous Path Analysis (CPA). In general, the value should be constant. If it does change, it could be the result of a route change or a configuration change by an ISP.
You should set the provisioned capacity when the end-to-end capacity of the network path is guaranteed by your SLA. In this case, the total capacity measured should not be below the specified provisioned capacity for an extended period. When the provisioned capacity is set, the yellow line indicates the configured value.
Provisioned capacity is set using the icon on a network path’s Capacity chart.
To set the provisioned capacity on a network path:
- Navigate to Delivery > Network Paths.
- Click the network path you are interested in.
- On the Capacity chart, click the icon.
- In the Provisioned Capacity field, specify the capacity guaranteed by your ISP.
- (Optional) In the Capacity Cost($) field, specify the cost of the path.
- Click Apply. The provisioned capacity is set.