Learning IT, Working IT and Test IT

Part 1. Collect data with Windows Performance Monitor Step 1. 1. Open Performance Monitor with Run as Administrator 2. in the left pane, click Data Collector Sets. 3. In the right Pane, right-click User Defined -> NEW -> Data Collector Set . 4. In the Create new Data Collector Set , enter a name. 5. Select Create manually(Advanced) . 7. Under Create data logs, select Performance counter , and click Next. Step 2. 1. set the sample interval to 30 seconds and Add. 2. Select Performance counter from below list. - Logical Disk  Current Disk Queue Length Disk Read Bytes/sec Disk Write Bytes/sec - Memory % Committed Bytes in Use Available Mbytes - Process :select counter for below process % Processor Time Private Bytes for below process Total hyperd (Data engine) redis-server (Cache server) run-backgrounder (Backgrounder) run-dataserver (Data server) run-vizqlserver (VizQL Server) - Processor Information %Processor Time % Processor Utili...

[Problem] Windows Virtual Machine in  VMWARE   which has set up with 8 vCPU only shows 2 core.  [Instruction] Power off the virtual machine. In Virtual Hardware, Enter the number of CPUs. (ex. 8) Click the VM  Options  tab. in the Advanced options section,  Click Edit Configuration in Configuration Parameters. Add  cpuid.coresPerSocket  in the  Name  column. Enter a value (try 2, 4, or 8) in the  Value  column. (ex. 4) Note : Ensure that the number of vCPUs is divisible by the number of    cpuid.coresPerSocket  in the virtual machine. That is, when you divide the number of vCPUs by the number of  cpuid.coresPerSocket , it must return an integer value. For example,  if your virtual machine is created with 8 vCPUs, coresPerSocket   can only be 1, 2, 4, or 8.

[Introduction] How to use TSHARK to capture the network packet for deeper analysis. [Preperation] Install Wireshark package. sudo yum install wireshark -y [Instruction] + List network interface to capture the network packet from sudo tshark -D 1. eth0 2. nflog 3. nfqueue 4. any 5. lo (Loopback) + Run tshark with options to capture. -i : interface. number or interface name -f : filter -w: write file sudo tshark -i 1 -f "host 10.x.x.x" -w output.pcap sudo tshark -i wlan0 -f "src port 53" -w output.pcap + To read PCAP with tshark sudo tshark -r output.pcap