Home
  •  

TCPv4 Segments Received Per Second

Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec (UnitMonitor)

Monitors the TCPv4\Segments Received/sec performance counter.

Knowledge Base article:

Summary

This monitor traces through the quantity of segments received via TCPv4 per second. When the quantity of received segments exceeds the threshold for the TCPv4\Segments Received/sec performance counter, the monitor is switched to warning state.

Causes

A sudden increase of the quantity of received segments indicates network overload or security breaches.

Resolutions

Investigate the factors leading to network overload and resolve the revealed issues. Take actions to eliminate security weak points.

Element properties:

TargetMicrosoft.Windows.Server.10.0.OperatingSystem
Parent MonitorSystem.Health.PerformanceState
CategoryPerformanceHealth
EnabledFalse
Instance NameTCPv4
Counter NameSegments Received/sec
Frequency300
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeSystem.Performance.ConsecutiveSamplesThreshold
RemotableTrue
AccessibilityPublic
Alert Message
TCPv4 Segments Received Per Second is too high
The threshold for the TCPv4\Segments Received/sec performance counter has been exceeded.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec" Accessibility="Public" Enabled="false" Target="ServervNext!Microsoft.Windows.Server.10.0.OperatingSystem" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="SystemPerf!System.Performance.ConsecutiveSamplesThreshold" ConfirmDelivery="false">

  <Category>PerformanceHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec.AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Warning</AlertSeverity>

    <AlertParameters/>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="OverThreshold" MonitorTypeStateID="ConditionTrue" HealthState="Warning"/>

    <OperationalState ID="UnderThreshold" MonitorTypeStateID="ConditionFalse" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <CounterName>Segments Received/sec</CounterName>

    <ObjectName>TCPv4</ObjectName>

    <InstanceName/>

    <Frequency>300</Frequency>

    <Threshold>100</Threshold>

    <Direction>greaterequal</Direction>

    <NumSamples>12</NumSamples>

  </Configuration>

</UnitMonitor>