Page tree

The Traffic capture statistics page shows full information about the traffic captured by the Real User Collector:

Note

The Real User Analyzer displays graphs about data received from the Collectors to which it is connected, but the Analyzer component does not provide traffic statistics since traffic is captured only by the Collector.

To view traffic capture statistics

  1. To find out how the Real User Collector processes monitored traffic, in the Real User Collector, go to Administration > Device status, and then click Traffic capture statistics.
  2. If the Security user has enabled the Automatic page reload service on the Administration > Security settings > Services page, you can start or terminate the countdown for when data on the page refreshes by using the Start and Stop buttons.
  3. To force data flow statistics to refresh, click Reload now.

In addition to the captured traffic, the Collector Home page shows the excluded traffic. The traffic between a Real User Cloud Probe and a Collector is also captured, but it is categorized as excluded. Each Cloud Probe has a default traffic filter rule to discard that traffic.

Traffic section

The Traffic section of the Traffic capture statistics page shows summary information about traffic that the Collector received during the last minute. If a Collector receives data from multiple Cloud Probes, the traffic summary information is combined from all of the connected Cloud Probes. 

General traffic information

LabelDescription
Traffic column
FramesNumber of Ethernet frames the device received in the last minute
Screened trafficPercentage of traffic removed because of IP-based traffic inclusion and exclusion policies
IP trafficPercentage of unfiltered traffic that had IP packets
TCP trafficPercentage of unfiltered traffic that had TCP packets
Encrypted trafficPercentage of TCP traffic that used HTTPS
HTTP trafficPercentage of TCP traffic that used HTTP
Last Akamai receipt
Date and time the device received the last combined Akamai Edge Logging receipt
TCP sessions column
TotalTotal number of TCP sessions observed in the last minute
EncryptedPercentage of TCP sessions that were encrypted in the last minute
ResetPercentage of sessions that were reset by the server or client

SSL section

The SSL section of the Traffic capture statistics page shows summary information about SSL traffic the Collector collected and about observed SSL sessions in the last minute.

SSL traffic information

LabelDescription
SSL traffic column
SSL recordsTotal number of SSL records the device collected in the last minute
HandshakesPercentage of SSL records whose type was handshake
Cipher negotiationPercentage of SSL records whose type was change cipher spec
AlertsPercentage of SSL records whose type was alert
Data transferPercentage of SSL records whose type was application data
SSL sessions column
TotalTotal number of SSL sessions observed in the last minute
NewPercentage of SSL sessions that were new and stored in cache
RestoredPercentage of SSL sessions that were restored from cache
FailedPercentage of SSL sessions that produced an error while attempting to restore from cache

Capture rate

The Capture rate section of the Traffic capture statistics page shows summary information about SSL traffic the Collector collected and about observed SSL sessions during the last minute.

Capture rate traffic information

LabelDescription
Capture rate at the originAverage rate of HTTP hits served from the origin, observed on the wire
Capture rate of Akamai cached objectsAverage rate of HTTP hits cached by Akamai, observed on the wire
Total capture rateAverage rate of HTTP hits (both origin-served and Akamai-cached), observed in hits per second
Broken Percentage of hits that could not be processed because of missing or malformed packets
DroppedPercentage of hits that could not be processed because of limits to the amount of traffic the Collector can process. Dropped hits do not contribute to sampled traffic.
ProcessedPercentage of hits the device successfully processed

SYN/ACK ratio

The SYN/ACK ratio section of the Traffic capture statistics page shows summary information about the three-way handshake present in every TCP session.

SYN/ACK ratio traffic information

LabelDescription
Overall ratioPercentage of requests that do not have the full three-way TCP handshake
SYN, no SYN-ACKPercentage of requests with a SYN that were not followed by a SYN-ACK
SYN-ACK, no client ACKPercentage of requests with a SYN-ACK that were not followed by an ACK

Related topics

Validating traffic capture on a Collector

Sizing Real User Collector instances Open link