Troubleshooting Asymmetric Routing Issues with EndaceFabric
Asymmetric connections are where the request packets of a conversation follow a different path to the response packets. This can be the result of a deliberate configuration or it can occur as the result of a misconfiguration or an equipment failure - such as in the situation where there is load-balancing between two network elements and one is intermittently failing or overwhelmed with traffic.
In networks where multiple paths are available between hosts, network performance issues can be harder to solve than when only a single path is available. Not least because the tools that network analysts rely on are typically not capable of reassembling flows from multiple locations.
Continuous packet capture provides the evidence to allow analysts to quickly and accurately discover the cause of network problems, but finding all of the packets that make up a troublesome connection can be a challenge. Not so with EndaceFabric™. Our centralized visualization tool makes use of the EndaceFabric's distributed architecture to search for, retrieve and display all relevant packet data, without the operator needing to figure out where the packets crossed the network.
EndaceVision
EndaceVision™ is a browser-based Visual Traffic Analysis and Forensics application included on every EndaceProbe™ Analytics Platform and in InvestigationManager™ the rapid-search and data-mining tool that lets you find "needle-in-the-haystack" packets-of-interest across months of distributed Network History in seconds, no matter where or when the incident occurred.
EndaceVision lets you filter recorded traffic based on a wide range of parameters including link name, application classification, IP address, MAC address, port number, time stamp and many more options.
EndaceProbes also provide built-in Deep Packet Inspection (DPI) which classifies captured traffic by application. This makes it easy to analyze traffic by application to see precisely what's happening on your network.
Troubleshooting Asymmetric Routing Issues With EndaceVision
Using EndaceVision, you can isolate packets-of-interest from one or more EndaceProbes for the period that you are interested in. By applying filters you can drill into particular hosts or specific protocols to identify the specific packets you want to examine.
Packets can be decoded directly using the onboard Wireshark without requiring a download. Alternatively they can be downloaded as standard pcaps, or enhanced ERF format files with added Provenance™ data.
Yes I'd Like a Demo
How about a Demo?
Interested in finding out how EndaceProbes and EndaceVision can deliver the concrete evidence you need to troubleshoot network and application performance problems quickly and accurately?
