topic Other traffic at 75% Crushing the optimization, Acceleration and in Application Networking

Other traffic at 75% Crushing the optimization, Acceleration and Bandwidth

Dan Loring — Tue, 02 Aug 2011 13:04:53 GMT

Other traffic at 75% Crushing the optimization, Acceleration and Bandwidth. Is there a way through the CM to see what the other traffic is? Any thoughts or ideas?

Other traffic at 75% Crushing the optimization, Acceleration and

Dan Loring — Tue, 02 Aug 2011 16:26:34 GMT

Does anyone know what traffic Symantec Endpoint Protection updates would be categorized as?

Other traffic at 75% Crushing the optimization, Acceleration and

Bhavin Yadav — Wed, 03 Aug 2011 19:18:52 GMT

Hi Dan,

From the link below, it looks like Symantec uses various ports over TCP and UDP sessions. WAAS will not optimize any UDP traffic but will optimize TCP traffic using TFO with DRE and LZ. There is a default policy in place with default config. The policy id is 131 in ver WAAS 4.4.x code.

Link to Symantec document:

http://www.symantec.com/business/support/endpointsecurity/evaluation_guide.pdf

Now to classify "Other Traffic" , you may want to create a policy and apply it to the sessions you see under current connections on CM. The "Other Traffic" is the traffic that is not classifed by CM using any policy.

Hope this helps.

Regards.

PS: Please mark this as Answered, if this answers your question.

Other traffic at 75% Crushing the optimization, Acceleration and

Dan Loring — Thu, 04 Aug 2011 12:56:04 GMT

Bhavin,

Great info! Thanks. I was curious though when I go into the CM I do not see the option for current sessions, or the ability to create policies. We are on 4.2.3c build 1. using WCCP.

Other traffic at 75% Crushing the optimization, Acceleration and

Bhavin Yadav — Thu, 04 Aug 2011 19:14:08 GMT

Hi Dan,

You really do not need to create a policy but rather you need application definition. Here are the steps.

Creating an Application Definition

The first step in creating an application policy is to set up an application definition that identifies general information about the application, such as the application name and whether you want the WAAS Central Manager to collect statistics about the application. After creating the application definition, you assign it to a device or device group. You can create up to 255 application definitions on your WAAS system.

The Link:

http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v441/configuration/guide/policy.html#wp1042389

One the application definition is created for the traffic you want to identify, it will start displaying statistics under the application definition name.

Hope this helps.

Regards.

PS: Please mark this as Answered, if this answers your question.

Other traffic at 75% Crushing the optimization, Acceleration and

Dan Loring — Thu, 04 Aug 2011 20:02:35 GMT

Thanks for the great info, these devices are only about 5% of my job so it is tough to know all this, so thanks again for the help.

Cheers,

Dan

Other traffic at 75% Crushing the optimization, Acceleration and

Dan Loring — Thu, 04 Aug 2011 20:19:40 GMT

One additional question you mentioned the default policy id is 131 in ver WAAS 4.4.x code, we are running 4.2.x and our basic policy id 131 is set to Console, Telnets, Passthrough.

Do we need to upgrade to 4.4.x to get that default policy mentioned earlier?

Other traffic at 75% Crushing the optimization, Acceleration and

Bhavin Yadav — Thu, 04 Aug 2011 20:21:51 GMT

Hi Dan,

This number might be different if you are running different version or if you have customized policies.

Just search for Symantec on that page (using Ctrl+F) and you will most probably find a policy with name - Symantec. If you don't see that, it might have been removed / deleted earlier.

Regards.

Other traffic at 75% Crushing the optimization, Acceleration and

Dan Loring — Thu, 04 Aug 2011 20:31:00 GMT

okay, I found it, and it is already being optimized. Back to the drawing board. Can you recomend a board out here that I could post questions about sniffing to see what traffic is causing this?

Thanks,

Dan

Re: Other traffic at 75% Crushing the optimization, Acceleration

Bhavin Yadav — Thu, 04 Aug 2011 20:43:07 GMT

Yes, you can upload attachments here. Please take a snapshot and attach it as jpg.

Regards.

Re: Other traffic at 75% Crushing the optimization, Acceleration

Dan Loring — Mon, 08 Aug 2011 13:13:41 GMT

One of our remote sites was crawling this morning from 8:00 am to 8:30 am. So I took a picture of the traffic and attached. You can see the other is at 84% and reduction % of traffic drops to 0% when this happens, essentially shutting down that site for business.

Other traffic at 75% Crushing the optimization, Acceleration and

Bhavin Yadav — Mon, 08 Aug 2011 20:57:02 GMT

Hi Dan,

We got to find out what this "Other" traffic is. We can only look into it if we have some information in our hands like - source port, source / destination ip address, etc. WAAS will not keep history of connections so the only way to identify is to look at the live connections when it encounters issue.

Regards.

Other traffic at 75% Crushing the optimization, Acceleration and

Dan Loring — Tue, 09 Aug 2011 12:27:21 GMT

Ok, so I would assume the best way to do this would be through the Connection Statistics option in the CM, or is there a better way threough a CLI command on the wave device?

Other traffic at 75% Crushing the optimization, Acceleration and

Bhavin Yadav — Tue, 09 Aug 2011 17:06:37 GMT

Hi Dan,

More than the CM GUI, I will trust the CLI output as that is real time output. Please use SSH client that can redirect your CLI output to a text file for later review.

Once your telnet / ssh client is configured to redirect the CLI output to text file, use following CLI command:

term len 0

sh stat connection

term len 24

Above command will generate output of all live connections on WAE and will dump it to text file. Now you can browse thru this text file and find out who is the culprit. You will see all the fields like source ip address, source port, destination IP address, optimized / pass-thru / if optimized, is it using HTTP/CIFS/any other AOs and percentage optimized.

From this, you can then create an application classifier and start naming that traffic.

Hope this helps.

Regards.