Using Network Tracing

One of the diagnostic features Yellowbrick provides is network tracing to assist in troubleshooting network issues. When enabled on an appliance, the network tracing feature captures data packets sent and received on the network interface port, including header, timestamp, source, and destination information. Note that the network tracing feature is disabled by default. Files produced by network tracing are all in pcap format and stored on the disk in /tmp/network_trace.

For more specific captures, filters are applied to network tracing. Captures can target packets on the SQL port, bulk ports, or a combination of SQL and bulk. Within the context of network tracing, SQL refers to SQL queries and responses and bulk refers to bulk loads, unloads, restores, and backups. Note that applying both results in two captures: one for bulk and one for SQL. Network tracing can be further modified by setting either the capture size or the duration of the trace. For appliances using Phonehome, enabling the Phonehome network tracing option uploads the captured files directly to the Phonehome servers while also continuing to store them locally.

For a list of all network trace commands, see config network.