Question & Answer
Question
How can you configure Microsoft® Network Monitor to capture network traffic in order to troubleshoot IBM® Rational® ClearCase® performance problems?
Cause
ClearCase is a NETWORK INTENSIVE tool based on a client/server architecture. This means that lots of information (i.e., packets) travel on your network to allow ClearCase to communicate between the different hosts in its environment (VOB, View, License, Registry, PDC, WINS, DNS and client machines).
Often times problems on the network will be discovered through the general use of ClearCase, thus it becomes important to be able to locate the cause of the problem on the network to fix ClearCase performance. One tool that can be used to help troubleshoot network problems is the Microsoft Network Monitor tool.
Network Monitor is a component of the Windows Server operating systems and Microsoft Systems Management Server (SMS) that lets you monitor network traffic as it crosses the wire. By using Network Monitor, you can monitor network traffic in real time or capture and store packets for later analysis. You can use the information that Network Monitor captures to troubleshoot ClearCase performance problems on LANs, WANs, and virtually any device that uses TCP/IP to communicate.
Note: If you are unable to use Microsoft Network Monitor in your environment, refer to the link for Using Wireshark under Related Information below.
Network Monitor has three primary uses:
- Troubleshooting network connectivity.
- Assessing network performance.
- Troubleshooting beaconing hardware devices.
Answer
This technote describes:
1. How to use the stand alone version of Network Monitor
2. How to install and use the Windows Server version of Network Monitor
The below write up is a good example to follow to set up Network Monitor to capture a network trace between 2 or more computers; however, it is by no means the only way to use Network Monitor to gather information.
IMPORTANT NOTE: Be sure to know which version of Network Monitor you are using (the stand alone version that comes with Microsoft Systems Management Server OR the version that comes with Server Edition). The reason is that the server version will only be able to capture data from its own machine and will not be able to capture data from other machines.
To tell which version of Network Monitor you have, open Network Monitor > select Tools > and click Resolve Addresses From Names....
If it is the Server version the following pop up window will appear:
TOOL UNAVAILABLE
This command is only available in the version of Network Monitor provided with Microsoft Systems Management Server.
----------------------------------------------------------
----------------------------------------------------------
Network Monitor version 4.00.351 - MSMS version
Table of Contents
STAND-ALONE VERSION
SERVER VERSION
- Installing Server version
- Setup Dedicated Capture Mode
- Edit Filters
- Increase Buffer
- Capturing data
- Saving data
STAND-ALONE VERSION
I. Set up to capture in Dedicated Capture Mode (dedicated capture mode frees more resources for capturing data)
1. Go to the Capture menu, click Dedicated Capture Mode. (If a check mark appears next to this command, the command is activated.)
Note: When you use dedicated capture mode, capture statistics are not displayed or refreshed as frames are copied to the capture buffer, and the Network Monitor window is minimized.
Note: Computers involved should consist of Client machines, PDC, Registry Server, License Server, VOB & View Servers and any remote storage locations.
- Go to the Tools menu, click Resolve Addresses From Name…
- Type in the name of the computer you want the address of and click Run Query
- After address is displayed - click Keep Names
- Repeat steps 2 and 3 until all computer names have been added to the list
- Click Done
- Press F8 (or on the Capture menu, click Filter)
- Click Edit Line (to add selected computers instead of the default *ANY <-> *ANY)
- Defaults: INCLUDE should be checked and Direction goes Both ways is highlighted!
- Station 1: choose the computer with type IP address of the client (problem) computer
- Station 2: choose the computer with type IP address of the server/destination computer, (PDC, Registry Server, License Server, VOB & View Servers and any remote storage locations)
- Repeat steps 5 & 6 until all computers in question are added to filter
- Click OK
IV. Increase the buffer parameters
Note: Network Monitor has a finite buffer that you have to set before beginning your trace. The default is 1 MB, which is about 4 minutes (depending on traffic). To make matters worse, rather than having the buffer be circular, Network Monitor drops all data it receives after its buffer is full.
To increase the buffer size:
- Go to Capture > Buffer Settings
- Change the Buffer Size to an appropriately higher value. For example: Since 1.0 MB equals approximately 4 minutes of capture output, if it takes 6 minutes to reproduce the problem, then set the buffer to 2.0 MB.
- Click OK
- Press F10 (or on the Capture menu, click Start)
- During the capture, the following options are available in the Dedicated Capture Mode status box:
- To stop the capture, click Stop
- To stop the capture and view the frames, click Stop and View
- To pause the capture, click Pause
- To continue a paused capture, click Continue
- To resume capturing in Normal mode, click Dedicated Capture Mode on the Capture menu to clear the check mark that indicates the option is active
3. Recreate the problem on the client machine
Hint:
- Run CREDS to capture PDC information
- Run cleartool lsvob to capture registry server information
- Run clearlicense to capture license server information
- Ping the computers in question by name
- Run cleartool commands., i.e. describe VOB, checkout, mkelem
4. Click Stop
VI. Save the captured frames to a capture file or text file
- On the File menu, click Save As
- Specify the directory and drive where you want to store the file
- Type the file name (name of the company)
- Be sure the .cap is the file extension
SERVER VERSION
Installing Server version of Network Monitor on Windows:
Note: If you are having issues with your Server machine that runs the PDC, License, Registry, View/VOB Server and you need a network trace, install the Server version of Network Monitor:
- Right click on Network Neighborhood go to Properties
- Click the SERVICES tab and click ADD (Network Services)
- Highlight NETWORK MONITOR TOOLS AGENT and click OK
- Put the NT Server CD in the CDROM or place the path to the NT/i386 directory on the network and click Continue
- After installation click OK
- Restart
Using Network Monitor on Server:
I. Set up to capture in Dedicated Capture Mode
1. Go to the Capture menu, click Dedicated Capture Mode.
II. Edit Filter (if necessary)
Note: By default the Server edition of Network Monitor can only capture data going to or coming from its own system!
- Press F8 (or on the Capture menu, click Filter)
- Click Edit Line (only if you want a one way arrow from the server. Default= Server machine <-> *ANY)
- Highlight the desired direction arrow
- Click OK
- Click OK
III. Increase the buffer parameters
Note: Network Monitor has a finite buffer that you have to set before beginning your trace. The default is 1 MB, which is about 4 minutes (depending on traffic). To make matters worse, rather than having the buffer be circular, Network Monitor drops all data it receives after its buffer is full.
To increase the buffer size:
- Go to Capture > Buffer Settings
- Change the Buffer Size to an appropriately higher value For example: Since 1.0 MB equals approximately 4 minutes of capture output, if it takes 6 minutes to reproduce the problem, then set the buffer to 2.0 MB.
- Click OK
- Press F10 (or on the Capture menu, click Start)
- Recreate the problem on the client machine
- Click Stop
V. Save the captured frames to a capture file or text file
- On the File menu, click Save As
- Specify the directory and drive where you want to store the file
- Type the file name (name of the company)
- Be sure the .cap is the file extension
Review the related links for more information on Network Monitor.
Related Information
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21148891