Packets Dropped/sec over TCP

Microsoft.LS.2010.Monitoring.UnitMonitor.ThresholdPC.AVEdge_TCP_PACKETS_DROPPED_SEC (UnitMonitor)

Knowledge Base article:

Summary

The per-second rate of packets over TCP dropped by the relay.

Causes

This error occurs when an unexpectedly high rate of TCP packets is received at the A/V Edge Server causing some packets to be discarded. This could be the result of system overload or an indication of an attempt to misuse the A/V Edge Server.

Resolutions

Check that the profile of network traffic to the A/V Edge Server is in line with expected usage. If the traffic exceeds 250 Mbps per interface then increase the receive and transmit buffer size on the associate Network Interface Cards to three times the default values. If the cause is general system overload then increase capacity of the deployed A/V Edge Server function. A network level trace can be used to determine if there is unusual amount of traffic originating from a single source. If the situation persists then enable tracing to check the network source of sessions exceeding the bandwidth limits to allow further troubleshooting of the cause.

Element properties:

TargetMicrosoft.LS.2010.Component.AVEdge
Parent MonitorSystem.Health.PerformanceState
CategoryPerformanceHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.LS.2010.Performance.Double.ConsecutiveThresholdMonitor
RemotableTrue
AccessibilityPublic
Alert Message
The per-second rate of packets over TCP dropped by the relay.
Perf Object Name: LS:A/V Edge - 01 - TCP Counters
Perf Counter Name: A/V Edge - 030 - Packets Dropped/sec
Perf Counter Value: {0}

Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.LS.2010.Monitoring.UnitMonitor.ThresholdPC.AVEdge_TCP_PACKETS_DROPPED_SEC" Accessibility="Public" Enabled="true" Target="Microsoft.LS.2010.Component.AVEdge" ParentMonitorID="Health!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="Microsoft.LS.2010.Performance.Double.ConsecutiveThresholdMonitor" ConfirmDelivery="false">
<Category>PerformanceHealth</Category>
<AlertSettings AlertMessage="Alert_The_per_second_rate_of_packets_over_TCP_dropped_by_the_relay.">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Error</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/SampleValue$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="Microsoft.LS.2010.Monitoring.UnitMonitor.ThresholdPC.AVEdge_TCP_PACKETS_DROPPED_SEC_OverThreshold" MonitorTypeStateID="OverThreshold" HealthState="Error"/>
<OperationalState ID="Microsoft.LS.2010.Monitoring.UnitMonitor.ThresholdPC.AVEdge_TCP_PACKETS_DROPPED_SEC_UnderThreshold" MonitorTypeStateID="UnderThreshold" HealthState="Success"/>
<OperationalState ID="Microsoft.LS.2010.Monitoring.UnitMonitor.ThresholdPC.AVEdge_TCP_PACKETS_DROPPED_SEC_UnderThresholdOverThreshold" MonitorTypeStateID="UnderThresholdOverThreshold" HealthState="Warning"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>A/V Edge - 030 - Packets Dropped/sec</CounterName>
<ObjectName>LS:A/V Edge - 01 - TCP Counters</ObjectName>
<InstanceName/>
<AllInstances>true</AllInstances>
<Frequency>60</Frequency>
<WarningThreshold>300</WarningThreshold>
<ErrorThreshold>400</ErrorThreshold>
<NumSamples>2</NumSamples>
</Configuration>
</UnitMonitor>