Skip to main content

Monitoring a Whisperer

If the Self Monitoring UI includes a full tab to monitor Whisperer: Whisperers Status, the Whisperer Status tab allows to see in a glance the current status of the Whisperer, as well as key metrics.

Status page

Identification

StatusIdentification.png

FieldDescription
OwnerUser or Team who created the Whisperer
NameWhisperer name
IdInternal id (random)
VersionVersion of the Whisperer instance(s) deployed. May show several.
InstancvesLink to the status page of each current instances and latest ones.

Instances status page

WhispererInstances.png

Latest status

Latest status.png

FieldDescription
Required stateAs specified in configuration
StateLast known state of the Whisperer
HostHostname / POD name of the Host under capture
ContainerName of Whisperer container
Started onWhen Whisperer session last started (last time when no instances were started / recording or stopped)
Last seenLast status update of an instance
CPU usageSum of CPU usage of all instances
Memory useSum of RAM usage of all instances

Latest session

Shows information on latest recording session.

Latest session.png

FieldDescription
Started onLast time Whisperer started recording
UploadUpload speed in last 20s
Packets loadPackets parsing load in last 20s
Tcp session loadTCP sessions tracking load in last 20s
Total uploadedTotal volume uploaded
PacketsCount of packets:
  • captured - by pcap,
  • filtered - the one we keep,
  • dropped - the ones pcap dropped because of overload,
  • overflow - the one the Whisperer dropped because of overload
Tcp sessionsCount of sessions tracked and overflow.

Backoffice access

Backoffice access.png

Gives statistics on the quality of communication between the Whisperer and Spider backend.

For each API called:

  • The average response time for last 20ms, and globally since the session start
  • The 90 percentile of response time for last 20ms
  • The count of calls
    • In success - green
    • In error - red

Overall capture settings

Overall capture metrics.png

Gives cumulated statistics since the creation of the Whisperer...
Big numbers!

Attachments tab

The attachment tab lists all attachments configured for this Whisperer.

AttachmentsTab.png

You know:

  • Who created the attachment
  • On what Controller
  • Its status
  • Its target
  • The list of current containers observed, if any

You can:

  • Create another attachment
  • Detach an existing attachment

Hosts tab

On the Hosts tab of the Whisperer details, you may access to all Hosts records captured, uploaded or manually set for this Whisperer.
If you select many Whisperers, you will see a combination of all Hosts records.

These are the records used to display the host names on the UI.

HostsTab.png

ColumnDescription
IP addressIP of the host
TypeSERVER, CLIENT or BOTH (empty)
DNS nameFQDN as resolved by the DNS
First seenTime it was first seen
Last seenTime it was last seen
Custom nameCustom name, either set by the Whisperer as parsing time or set manually on the UI

This tab allows you to export the Hosts records to be able to import them back in an UPLOAD Whisperer.

tip

You may set the Custom name of any Host directly from this tab, by setting it in the Custom name column.