Topic Options
#1988 - 12/27/07 06:37 PM False positives?
BWB8771 Offline


Registered: 12/27/07
Posts: 9
Can anyone else repeat this with the same results?

Configure PingPlotter Pro to query/monitor a WinXP machine on TCP port 23.

Do you get packet-loss, or does your graph simply indicate latency?

Via Wireshark, I see PPro send a SYN to port 23 on the XP machine, then I see a RST as a response. This would seem to be a false positive.

Is this "statefulness" beyond the scope of PPro?

Top
#1989 - 12/27/07 06:50 PM Re: False positives? [Re: BWB8771]
Pete Ness Offline



Registered: 08/30/99
Posts: 1106
Loc: Boise, Idaho
PingPlotter does *not* look for the state of a TCP conversation. Our goal is to measure the network latency between the tracing machine and the target device, and if that target device responds in any way, we measure that latency. Getting a RST, a SYNACK, a NAK, or anything else back from that machine is something we measure as a success, and we record the latency.

PingPlotter is not optimized to measure the latency of a full TCP conversation - or the TCP service. It tries to measure at the network level, not the service level. We do have a plugin that will open a TCP conversation, measure the latency, and record that latency, but that doesn't record any intermediate hop information, and it's not really the design goal of PingPlotter. If you want to measure latency of the network service, this will do it, though - send an email to support@pingplotter.com and let us know that you're after this add-in.

- Pete

Top
#1990 - 01/02/08 05:10 PM Re: False positives? [Re: Pete Ness]
BWB8771 Offline


Registered: 12/27/07
Posts: 9
Thanks for the clarification, Pete.

Is that plugin something you could post in the Extensions forum here?

Top

Search

Who's Online
0 registered (), 21 Guests and 2 Spiders online.
Key: Admin, Global Mod, Mod