Using UTIL_TCP to record Network Traffic

Can I use UTIL_TCP to listen to and then record UDP packets on TCP/IP?
I have a number of sensors, servos and controllers communicating with UDP on a TCP/IP network. I need to record data/payload inside the packets into a database.

Just for clarity, when you are talking about an "external C program", are you referring to a separately compiled executable that happens to interact with the Oracle database? Or a C external procedure (i.e. a C DLL whose interface is exposed to Oracle as a stored procedure)?
I don't know whether it simplifies your environment and/or improves performance or not (that will depend on a variety of factors), but assuming you have a separate executable, you might consider trying out Oracle's external procedure functionality. You could also, assuming your Oracle database is on Windows (which I assume from the C# reference), look into Oracle's .Net stored procedure functionality, which is basically equivalent on the .Net side to Java stored procedures.
Again, it's not obvious to me that there would be performance benefits from having this code in the database to begin with, but if there are reasons to expect this is faster, it's architecturally possible.
Justin

Similar Messages

I need a clarification : Can I use EJBs instead of helper classes for better performance and less network traffic?

My application was designed based on MVC Architecture. But I made some changes to HMV base on my requirements. Servlet invoke helper classes, helper class uses EJBs to communicate with the database. Jsps also uses EJBs to backtrack the results.
I have two EJBs(Stateless), one Servlet, nearly 70 helperclasses, and nearly 800 jsps. Servlet acts as Controler and all database transactions done through EJBs only. Helper classes are having business logic. Based on the request relevant helper classed is invoked by the Servlet, and all database transactions are done through EJBs. Session scope is 'Page' only.
Now I am planning to use EJBs(for business logic) instead on Helper Classes. But before going to do that I need some clarification regarding Network traffic and for better usage of Container resources.
Please suggest me which method (is Helper classes or Using EJBs) is perferable
1) to get better performance and.
2) for less network traffic
3) for better container resource utilization
I thought if I use EJBs, then the network traffic will increase. Because every time it make a remote call to EJBs.
Please give detailed explanation.
thank you,
sudheer

Please suggest me which method (is Helper classes or Using EJBs) is perferable :
1) to get better performance
EJB's have quite a lot of overhead associated with them to support transactions and remoteability. A non-EJB helper class will almost always outperform an EJB. Often considerably. If you plan on making your 70 helper classes EJB's you should expect to see a dramatic decrease in maximum throughput.
2) for less network traffic
There should be no difference. Both architectures will probably make the exact same JDBC calls from the RDBMS's perspective. And since the EJB's and JSP's are co-located there won't be any other additional overhead there either. (You are co-locating your JSP's and EJB's, aren't you?)
3) for better container resource utilization
Again, the EJB version will consume a lot more container resources.

Can I use the timestamp of a Network published global variable to reduce network traffic?

I would like to use a couple of network-published global variables that will contain large clusters of data. I want to host them on one device but read them from several - consider a distributed control system. The data will update very infrequently, but, when it does, I want all my HMIs to know quickly. I can have all the HMIs just read the data 4x/second (that would be fast enough) but I was wondering if there is a more elegant solution (still using global variables). If I read only the timestamp 4x/second from each of the HMIs, compare it to the last read, and then poll the whole variable only if the timestamps are different, will that require less resources than just grabbing the whole variable every time? In other words, does reading the timestamp use the same amount of resources as reading the whole variable?
With really simple code, assuming the "Setup Data" cluster is quite large, does....
...get me any advantage over...
Solved!
Go to Solution.

mark3545 wrote:
So that means they are already doing what I want anyway, right? If the reader only gets updated when the writer changes it, I can poll it as often as I want without increasing traffic, correct?
That is correct.
There are only two ways to tell somebody thanks: Kudos and Marked Solutions
Unofficial Forum Rules and Guidelines

Client/Server network traffic.

I don't know if here is the right forum to ask it, but let's go on.
Nowadays we a system on Forms 4.5/windows/Oracle 8.0
We have some clients machines linked to the server by a Frame-Relay link and we use Windows 2000 Terminal Server to reduce the network traffic.
Well, we are gonna update to Forms 6i/Oracle 8i.
I would like to know if Forms Server can be a good option to Windows 2000 Terminal Server.
If I haven't been clear with my question I'll can do it again. I'm new on Forms 6i and I've just installed it to test (It hasn't been working yet....)
Thanks in advance
Ronaldo.

This could provoke quite a discussion.
"If your client are on slow links you may, for example query 10,000 rows of data. "
Generally, forms shouldn't be pulling back tens of thousands of rows from the database. Your user is unlikely to page through that much, so either you want a summary (which is best calculated on the database server and the summary results dragged across the network) or you are paging through records in the tens, not tens of thousands. (Look at the 'Number of recods buffered' property in your base table blocks. Bet it's one or two digits, not five!)
"The information that is transmitted to the client is basically screen draw information - and this will be alot less than the 10,000 rows you were querying before. "
As above. In client/server you shouldn't have been bringing stuff from the database down to the client that wasn't going to be on the screen anyway, especially if you had a slow network.
Depending on how your application is written, it could well peform a lot worse on the web than in client server. Rather than having the client do a fair share of the work, it's now got to keep talking to the application server to get anything done.
For example, because navigation triggers don't allow the use of restricted built-ins, rather than putting code in a 'post-text-item/when-validate-item' trigger on the relevant item, it gets put in a form level 'when-new-item-instance' trigger. It's a bit untidy in client/server but workable. Put it on the web, and every time the user tabs between fields, the form has to go off to the application server to fire the when-new-item-intance trigger to tell it what to do next.
Another 'speed-bump' is if you have any synchronize bits (eg in a post-query trigger, or as part of a "I'm 10% complete" information messages in long running loops). These will also generate network traffic between the app server and form.
While web server does have advantages, I wouldn't be selling it on it's performance improvements.

Cisco ASA rely HTTP port to HTTPS without using CNAME DNS-record

Hi all,
could anyone tell me Is it possible to configure ASA so when customer rely http://domain.com Cisco ASA rely to https://domain.com (it's similar with CName function of domain record).
P.S. resource of domain.com located behind ASA and DNS A-record rely on public ASA ip address
Thank you.

What version ASA are you running?
If the server has both static public and private IPs you could use NAT to redirect HTTP traffic to HTTPS based on IP.
object network PUBLIC_IP
host 1.1.1.1
object network REAL_IP
host 2.2.2.2
nat (inside,outside) static PUBLIC_IP http https
Keep in mind that you will also need a NAT statement that maintains https to the server.
Please remember to select a correct answer and rate helpful posts

Share network traffic between 2 parallel wireless bridges - What kit?

Dear All,
I'm a technology professional, but mainly in electronic design rather than high end networking. Hence my request for your advice.
I wish to specify some items of kit that I can ask a networking professional to fit and configure to solve my particular application.
I would like to use (and already have in place) two parallel wireless bridges between 2 buildings. One is on 2.4GHz and the other is on 5GHz. In my simple testing so far (of each link in turn), they both work brilliantly. So far, these are in place just for test purposes, but soon I will be required to make the system "live".
The reason I'm doing this is to split network traffic over both links (to possibly get enhanced bandwidth) but to mainly build in redundancy should one link fail.
What kit is required to do this (apart from the 4 access points configured as bridges)?
I imagine I may need a load balancing device(s) or possibly something more suitable for this task.
I'd like the solution to be very transparent to the rest of the system, I'd like it to "look" like it's a simple wireless bridge (but really it's a highly robust dual bridge). I hope my waffle makes sense.
Any thoughts?
Best regards,
L.O.

You can certainly copy the addresses from one machine to the other - the contact files are held in user/Library/Application Support/AddressBook. Copy all files into the same respective location on the other machine (they will overwrite any existing contacts).
If you want the address books kept in sync, take a look at SyncTogether or SeeCard Rendezvous.
Matt

Server admin not showing network traffic graph

This topic was posted a while ago with no solution, and it has been [archived|http://discussions.apple.com/thread.jspa?messageID=6953359]. I have just experienced the same problem with Leopard Server Admin (SA). It seems to be a problem on the server, not in the client admin, since it occurs both when I use SA on the server itself and a client, and deleting client prefs. has not helped. I'm presuming that there is a corrupted database or prefs. file for this graph.
All the other SA graphs show just fine. Fixing permissions has not helped, either.
Anyone have any idea where to look on the server? Thanks.
Message was edited by: Trevor Jacques

I'm pretty sure I have since I have a few Mac Mini's on the network with their home directory residing on the server and my Windows users are sharing a few daily use files on the server including a MYOB data file, also our intranet web site is hosting on the same server, not to mention I have 3 print queues there and all the outgoing mails from both of our all-in-one scan to email machines are using the same server. All of these services and users are using their computer as if nothing is wrong, so I have to assume that there is network traffic unless server admin interprets the term "network traffic" differently.

How do I time out my thread if there is no network traffic

How do I time out my thread if there is no network traffic for a given time? I have the following code listening for data:
StringBuffer requestLine = new StringBuffer();
int c;
while(true) {
    c = in.read();
    if(c == '\r' || c == '\n') {//Not sure here???
        break;
    requestLine.append((char)c);
}But how do I time this out if there has been no traffic for lets say 5 minutes?

Have you redefined 'in'?
If it's a raw socket connection, you can use the Socket.setSoTimeout method before you open the connection to specify how long it should hold it open if there is no data available.

Unknown network traffic / router traffic monitoring

So I got a new PC with windows 7 on it, and I installed this gadget that monitors network traffic, and it shows a lot of traffic that my local PC isn't showing, so I am thinking there is something running on the LAN that I can't see. I was looking to find a live, better program to monitor the actiontec router, for traffic. anyone know of anything that can maybe show me who is using all the bandwidth on my network?
i have found software for Linksys, but nothing for the Actiontec.
Thanks,
Quasimodem
Fios in Florida
Solved!
Go to Solution.

Keep in mind that when looking at Wireshark (sniffer) software there are different types of traffic:
Unicast
Broadcast
Multicast
Unicast is traffic between two devices. You will see the traffic between the PC with wireshark and another device on your local network such as a printer, another PC or the Router. You should not see traffic between another PC and the Internet for example. Using a phone as an example some calls you and the conversation is between you and the person on the other end of the phone. This is unicast traffic. Using defaults of the actiontec, IP address seen will be 192.168.1.1 for the router and 192.168.1.2-99 for devices on your network. If you have the TV service, 192.168.1.100-1xx is used for the cable boxes.
Broadcast traffic is traffic sent to all devices. Its not directed toward a particular PC but rather usually looking for information. In a sniffer trace you will see broadcast traffic. Going back to the phone example, someone makes an announcement on an overhead intercom system that is broadcast traffic. Broadcast traffic will be seen as 192.168.255.255
Multicast traffic is traffic from one device for many devices. Usually used in video feeds. Using the phone system as an example someone wishes to tell a group of people something so instead of calling each person up and telling them each person who wants the information joins a conference bridge. Anyone is allowed to listen but only those that wish to get the information receive it. Generally how multicast works. Multicast traffic will be seen as IP address 224.x.x.x or something of the sorts where the address will be 2xx.x.x.x.
I hope this makes sense. Probably more information than you needed but at least it will help you understand what wireshark is telling you.

SAP DMS - SAP ECC network traffic

Hi all,
I have the following situation:
The SAP ECC servers are hosted outside my company and we are planning to install a SAP DMS server.
We have 2 options: host the SAP DMS outside or install SAP DMS in our datacenter.
When the SAP user attaches or reads a file to/from SAP DMS, how is the network traffic ?
Is there any traffic fom SAP ECC to SAP DMS or the file goes to/from DMS from/to end-user ?
How SAP DMS impacts my WAN ?
Best Regards,
Leonardo.

Leonardo, I have done some research / trouble shooting and architectural changes to raise the upload / download speeds, there are several dependencies like Network, Application, hardware etc but to your question:
First of all, DMS is a core functionality of ECC and utilizes both ECC for execution and Content Servers (recommended for Obvious performance reasons) for Data Storage. For your case I recommend that you host Content Server at the Data Center (assuming you have no other option) and have a Cache Server installed Onsite. (This requires minimal maintenance). When the user uploads a file the traffic is high as the entire File needs to be transferred to the data center, on the other hand Cache server (if installed onsite) considerably reduces the retrieval time.
Again having said above there are several other parameters that could affect your upload / download speeds.
Hope you'll find this useful, let me know if you have further questions.
regards
C

CPU 100%, network traffic light

My setup:
Xserve G4, 2 Gb RAM
OSX Server 10.4.11
In recent days, the server CPU is maxed out as shown by the graphs in Server Admin. Our network traffic is fairly light as shown by the graph.
I run:
top -o cpu
Processes: 71 total, 7 running, 64 sleeping... 197 threads 08:35:30
Load Avg: 7.69, 6.83, 6.10 CPU usage: 82.6% user, 17.4% sys, 0.0% idle
SharedLibs: num = 134, resident = 22.1M code, 3.04M data, 6.75M LinkEdit
MemRegions: num = 9369, resident = 270M + 6.72M private, 44.1M shared
PhysMem: 113M wired, 141M active, 824M inactive, 1.05G used, 711M free
VM: 4.36G + 85.0M 26950(0) pageins, 0(0) pageouts
PID COMMAND %CPU TIME #TH #PRTS #MREGS RPRVT RSHRD RSIZE VSIZE
15923 httpd 19.2% 0:01.98 1 12 249 6.91M+ 19.5M 11.7M+ 72.4M+
15867 httpd 18.0% 0:05.45 1 12 275 14.0M+ 19.4M 18.8M+ 79.4M+
15926 httpd 17.5% 0:01.57 1 12 247 6.38M+ 19.5M 11.0M+ 71.9M+
15922 httpd 17.4% 0:02.01 1 12 257 9.51M+ 19.5M 14.3M+ 74.9M+
15870 httpd 9.9% 0:13.47 1 12 275 13.8M+ 19.5M 18.7M+ 79.1M+
15917 top 7.6% 0:05.40 1 26 22 1.17M 448K 1.59M 27.0M
15871 httpd 7.4% 0:13.82 1 12 274 13.8M+ 19.5M 18.8M+ 79.1M+
269 mysqld 1.5% 2:47:51 29 150 134 29.6M- 5.48M 33.3M- 132M-
0 kernel_tas 0.4% 5:11.65 43 2 2532 19.4M 0K 96.5M 1.11G
106 lookupd 0.1% 1:27.48 6 44 53 4.23M+ 1020K 4.98M+ 33.6M+
102 SecurityAg 0.1% 1:34.08 1 69 99 1.76M 7.10M 8.66M 116M
48 memberd 0.0% 1:20.43 3 22 24 268K 412K 628K 27.7M
15650 sshd 0.0% 0:00.42 1 11 42 108K 1.62M 496K 30.0M
38 netinfod 0.0% 0:21.80 1 14 22 208K 524K 572K 26.9M
63 WindowServ 0.0% 0:14.16 2 67 56 588K 4.97M 5.02M 92.2M
52 notifyd 0.0% 0:10.16 2 79 21 204K 416K 468K 27.2M
120 ntpd 0.0% 0:04.63 1 11 19 192K 608K 412K 27.1M
298 httpd 0.0% 0:06.42 1 10 229 104K 19.5M 7.00M 79.8M
272 serialnumb 0.0% 0:00.96 3 27 32 308K 800K 1.08M 28.3M
15921 httpd 0.0% 0:01.17 1 12 277 14.3M 19.5M 18.6M 79.9M
15920 httpd 0.0% 0:01.19 1 13 277 14.3M 19.5M 18.7M 79.9M
15919 httpd 0.0% 0:01.23 1 12 274 13.8M 19.5M 18.3M 79.2M
15918 httpd 0.0% 0:01.44 1 13 229 1.66M 19.5M 6.32M 67.1M
15900 httpd 0.0% 0:06.63 1 12 277 14.4M 19.5M 19.2M 79.9M
15881 trivial-re 0.0% 0:00.01 1 16 19 200K 512K 760K 26.7M
15869 httpd 0.0% 0:11.61 1 12 275 13.9M 19.5M 18.6M 79.4M
15868 httpd 0.0% 0:09.79 1 12 274 13.8M 19.5M 18.9M 79.1M
15852 servermgrd 0.0% 0:01.47 4 61 169 4.30M 3.86M 7.28M 46.4M
15824 pickup 0.0% 0:00.01 1 16 20 204K 500K 700K 26.7M
15651 bash 0.0% 0:00.04 1 14 17 200K 896K 820K 27.2M
15643 sshd 0.0% 0:00.12 1 18 43 128K 1.62M 1.36M 30.1M
348 slpd 0.0% 0:00.40 6 31 34 260K 908K 968K 30.2M
305 httpd 0.0% 66:38.29 1 13 237 3.14M 19.4M 9.52M 68.3M
304 httpd 0.0% 66:09.95 1 13 278 15.1M 19.4M 21.0M 80.3M
303 httpd 0.0% 68:59.73 1 13 234 3.17M 19.4M 9.29M 68.3M
302 httpd 0.0% 66:02.83 1 13 281 15.3M 19.4M 20.8M 80.0M
301 httpd 0.0% 68:12.51 1 13 281 15.6M 19.4M 21.4M 81.0M
300 rotatelogs 0.0% 0:00.02 1 14 18 136K 380K 360K 26.6M
299 rotatelogs 0.0% 0:04.57 1 14 18 140K 380K 364K 26.6M
285 mds 0.0% 0:00.05 6 71 46 556K 1.37M 1.88M 40.8M
217 sh 0.0% 0:00.04 1 14 18 188K 812K 720K 27.2M
207 getty 0.0% 0:00.00 1 14 18 112K 388K 332K 26.6M
164 crashrepor 0.0% 0:00.00 1 17 18 120K 384K 200K 26.6M
150 automount 0.0% 0:00.02 3 40 30 312K 932K 1.05M 28.7M
146 automount 0.0% 0:00.03 3 42 34 312K 968K 1.09M 29.0M
143 rpc.lockd 0.0% 0:00.00 1 10 18 108K 432K 192K 26.7M
134 nfsiod 0.0% 0:00.00 5 30 25 128K 376K 180K 28.6M
101 authorizat 0.0% 0:00.05 1 31 27 368K 940K 1.21M 27.4M
98 mcxd 0.0% 0:02.21 1 41 39 608K 1.26M 2.23M 69.1M
95 loginwindo 0.0% 0:00.25 3 101 90 904K 2.04M 3.25M 102M
Not sure where to start diagnosing this issu

Camelot,
Thanks again for your response!
Camelot wrote:
You shouldn't need to do that - what happens when you try?
Safari can't connect to the server "localhost".
The only thing I can think of off-hand that would cause this is if mod_status was disabled (which you might have done thinking you didn't need it). It would be a good idea to re-enable this, even if only short-term, to get an idea of what's going on.
mod_status is not listed in Web > Modules
Not sure if it will help significantly but I did enable the query cache for MySQL.
The query cache will generally help reduce load on the database server, but only if there's sufficient RAM on the server to cache the queries and results. The real question is how mush RAM is your system using? If it's out of memory then enabling the query cache can be detrimental.
For that matter, do your sites seem slow? Is your only concern the relatively high CPU load? or are pages loading slowly, too?
The pages are taking exceptionally long to load.
The 1.7 Gb Ram...Yes, it's a config of 512-512-512-256.
Swapping that 256MB for a 512MB seems like a no-brainer, no matter what else you do. It'll cost you $20 from OWC.
You're right...no brainer. Will do
Was wondering if a permissions issue could create the problems I'm having with Apache?
Unlikely. If apache didn't have permission to serve a file it would throw an error page back pretty quickly. I can't see this is the cause, but a quick look at apache's error log will tell you if there are any permission issues.
The site was running well this morning but as bloggers logged into Wordpress and general traffic picked up, the CPU load ramped up to 100% and pages are now loading very slowly.

Impact of NI-PSP on network traffic?

Hi,
We are planning a large-scale automation project and are looking to widely use Shared Variables. What concerns should we have about the impact on network traffic? Should the LabVIEW-based systems exist on their own subnet? Are there any special network switch hardware that is recommended? For instance, Rockwell Automation systems use UDP and recommend switches capable of IGMP Snooping. Are any such network hardware features recommeded for a system based on LabVIEW Shared Variables? Thank you.
Chris White
ThinkG Consulting LLC

Chris,
I am not aware of any recommended out of the ordinary network hardware for use with NI-PSP. There have been issues on machines that have more than one network interface enabled, and this is not a supported configuration, as noted in the LabVIEW DSC Readme:
"Network-published shared variables do not function properly if multiple network
adapters are enabled on the same computer."
NI-PSP is built on UDP and any firewalls that block certain UDP ports can be a problem. How external network traffic affects NI-PSP and vice versa is a pretty arbitrary question that obviously depends on how much external traffic you have and how much NI-PSP traffic you have, which depends on the number of shared variables, the number of subscribers and publishers, and the update rates of these variables, as well as whether variables are bound to I/O servers. UDP is a lossy protocol so extremely heavy traffic could cause some packets to be missed.
Hope this answers your questions!
Doug M
Applications Engineer
National Instruments
For those unfamiliar with NBC's The Office, my icon is NOT a picture of me

Weird - Activity Monitor Network Traffic vs iStat Traffic

With no applications running on my MacBook Pro, the Network tab of the Activity monitor is showing 'Data received/sec" toggling every second or so between 1.38 KB/s and 2.75 KB/s. It's showing the same numbers for 'Data sent/sec' as well. I can't figure out what is causing this network traffic. But if it's real, it's adding up to about 5 GB a month of bandwidth usage. My cap is only 60 GB so it's significant.
But when I use iStat or the Net Monitor app to monitor throughput, they show 0.0 traffic when the system is idle. Also, since last night Activity Monitor shows 322 MB data received and 99 MB data sent. While iStat shows 239 MB received and 16 MB sent.
So which is correct? Does Activity Monitor also include traffic that is internal to my network? Or do I have a phantom bandwidth hog somewhere?
Thanks for any insight to the weirdness.
Jim

The switches at home and at work generally corroborate the activity shown by tcpdump / atMonitor / MenuMeters, not the continuous data flow shown by Activity Monitor. The MacBook Air I'm sitting at right now shows similar discrepancies, with traffic totals in Activity Monitor about 40x higher than those shown with the other tools and a steady and inexplicable (and by other means invisible) 29-34 KB/sec of both sent & received traffic. tcpdump shows periods of network silence between 2-15 seconds in length (in between DNS lookups; netbios syncs; ntp queries; ipp messages; http, pop, and imap messages; etc. happening in bursts as one would expect).
Changing Activity Monitor to refresh every half second shows the mystery traffic as a burst of 112 KB sent & received every two seconds--and no, that's not the same throughput as the 29-34 KB seen at 2-second refresh intervals. When I set refresh to every 5 seconds, the mystery throughput drops to 22 KB / sec. As the throughput varies depending on refresh interval, I wonder if I'm seeing internal loopback queries (or something of that sort) contributing to the totals. Is it possible that the mystery traffic is of AM's own creation, and only exists within the machine and is not actually sent on the network?
Lest we digress further into general network troubleshooting techniques, let me restate the question, perhaps a bit more clearly: has anyone else seen this traffic-volume discrepancy between the Activity Monitor's Network tab and other network monitoring tools, and does anyone have an explanation for it?

Is there anyway to monitor network traffic on the newer Time Capsules, similar to the SNMP monitoring previously?

Is there anyway to monitor network traffic on the newer Time Capsules, similar to the SNMP monitoring previously?

Can I use a real router and still have the Time Capsule for backups etc?
Yes, that is what Bridge Mode is for. Just connect the Time Capsule to a LAN <--> Ethernet port on your "main" router.

Very high network traffic to printer

I am seeing very high network traffic between my Mac (iMac, running Mavericks) and my printer, a Canon MP640, connected via Ethernet. This is when the printer is idle. According to Little Snitch, the traffic is on the order of about 50 kB/s! The network traffic comes from mDNSresponder, and is directed to canonmp640.local; it is using UDP port 5353, which seems to be the mDNS port (again, according to Little Snitch). The traffic of course goes away if the printer is off, but it needs to remain on because it is being used as a printer for other computers/devices around the house.
Is this amount of network traffic for an idle printer normal? Anyone has any idea how to stop it from doing that? I even captured some of that traffic using Little Snitch, but nothing that provided any insight to me...
Thanks in advance for any help or suggestion!

mDNSresponder is the Bonjour agent. Perhaps your printer is connecting as a Bonjour printer. See Disable Bonjour by turning off mDNSResponder - OS X Daily and OS X: How to disable Bonjour service advertising without .... I would also do a little Google search on "mdnsresponder." Also, you may want to contact Canon tech support.

Using UTIL_TCP to record Network Traffic

Similar Messages

Maybe you are looking for