Triometric Analyzer real user monitoring log  
CONTACT | SITE MAP
   HOME    |    HOW IT WORKS    |    PRODUCTS    |    CASE STUDIES    |    RESOURCES    |    COMPANY    
How it Works Flash Animation | How it Works Text
Triometric Analyzer real user monitoring logo   page heading: How Triometric Real User Monitoring Works Triometric real user monitoring technology diagram
 

 
How does real user packet capture compare with other performance measurement approaches?

Other methods of measuring Web application user behaviour and performance have disadvantages not present with real user passive packet capture. capture.

Client-side monitoring: Measurement software is installed into the client system. The software watches transactions, measures response times and periodically reports to a central management system. The advantage of this approach is accuracy. There are two primary drawbacks: the resources needed for monitoring and reporting to the central system impact on other processes on the client; and the technique is completely unsuitable for a large user base on the public Internet.

On-server monitoring: This technique is used by some Citrix monitoring providers. Measurement software is installed into the Citrix server. As with client-side monitoring, the advantage is accuracy, but the drawback is its negative impact on server performance.

Log file analysis: Servers maintain logs of their activity. When analyzed, these reveal some of the information passive packet capture yields, but not all: for example, log files can't show how fast the server delivers content to users, which is one of the most important performance metrics. Log file analysis also tends to be very time consuming, and maintaining the logs takes a great deal of storage.

Remote agent monitoring: Usually outsourced, it does not monitor real users. Instead it uses a remote appliance to simulate clients, transmitting scripted requests to the server on a regular basis. Response time is measured, but since the remote appliances tend to be located near Internet hubs, research shows the time is not representative of response time experienced by real clients.

It is also unable to discern problems and errors experienced by real users, since the scripted transactions are only an approximation of the actual pattern of real user activity and for reasons of cost can't begin to sample all possible user actions.

Finally, comprehensive monitoring using this technique adds significant load to the server, adversely affecting performance and the experience of real users.

Javascript tagging: A snippet of javascript is placed in each Web page. The javascript allows the client system to send messages back to a central server every time the page is viewed. This allows the user's path through the application to be traced, but does not give response time information.

In addition, research indicates up to 10% of Web users on the public Internet may disable javascript in their browsers, and these users will not be recorded.

Even where users allow tagging to operate, its records of use can be inaccurate: if the user aborts the transaction before the script downloads, there is no record of the page request; similarly, if the javascript downloads and then the user experiences an error, the record wrongly indicates a problem-free transaction.

The javascript can also be difficult and time-consuming to insert, and many implementations are outsourced, so that all performance data is held by a third party.


How does Triometric Analyzer real user monitoring work?

The Triometric Analyzer monitors real users of your Web applications and websites and analyzes usage, errors and performance. The monitoring technology is made up of two basic units, the Monitor and the Management station / Reporter.

The Triometric Monitor uses passive packet capture to view HTTP and SSL packets and dynamically decrypts SSL-encrypted packets. This advanced protocol analysis allows an in-depth reading of information in the IP, TCP, SSL and HTTP protocols.

Each packet is analyzed in real time and tracked with reference to its transaction. When a transaction completes, the monitor writes a log record.

Periodically, the monitor connects to the management station and transfers the most recent set of statistics.

What is passive packet capture?

Passive packet capture is the gold standard for real user monitoring. Triometric pioneered the use of this technique in the Web application context and has more experience with it than any other provider. 'Passive' means monitoring is carried out unobtrusively, without adding load to network or servers. 'Packet capture' means the software picks up real network traffic and analyzes real users to arrive at its results.

What does Triometric Analyzer measure?

Real user transactions are captured 'on the wire'. Measurements include:

  • Errors: application errors, protocol errors, Triometric-defined errors and aborted transactions
  • User behaviour: application objects, time and volume of use, location
  • Response time: end-to-end across the network, and from server to network
  • Content: bytes and packets sent and received by the servers
  • Traffic volumes: users and visits; pages and objects served

The information is analyzed and related to the time period of the transaction, the URL requested, location, access method and individual user ID of the user, and the server, server group and domain involved.

Where is Triometric Analyzer installed?

The Triometric Analyzer is made up of three software components:

  • Triometric Monitor performs the packet monitoring and response time measurement.
  • Triometric Management Station collates the information produced by the monitor
  • Triometric Reporter generates and presents reports

The Monitor is installed either on the same LAN as the Web servers or on a nearby LAN. The Management Station and Reporter are installed in any location that allows IP connectivity to the Monitor. Technical and business personnel view Triometric reports by connecting to the Reporter with a standard Web browser. A wide range of reports are included as standard, and technical users can customize queries and drill down to details of individual real users and transactions.

What happens if the Web application or website is very large?

In busy enterprise and e-commerce applications, traffic crosses the network at extremely high speed, supported by powerful server farms and very high speed communications links.

One of the most important design principles of Triometric Analyzer is to cater for very high-volume sites and Web applications, achieved through:

  • Early packet-filtering
  • Multi-process software architecture
  • Data structures and algorithms to ensure that each packet is analyzed as quickly as possible
  • Avoiding long-term storage of packets

Triometric Analyzer has been successfully deployed with applications receiving more than 100 million transactions per day. However, for super-large capacity sites and applications, multiple monitors can be installed: measurements are collated and processed as if from a single monitor.

©Copyright 1997 - 2008 | Triometric | All Rights Reserved | return to the top