TCPv6 Segments Sent Per Second

Microsoft.Windows.Server.10.0.TCPv6.SegmentsSentPerSec (UnitMonitor)

Monitors the TCPv6\Segments Sent/sec performance counter.

Knowledge Base article:

Summary

This monitor traces through the quantity of segments sent via TCPv6 per second (but excluding those containing only retransmitted bytes). When the quantity of sent segments exceeds the threshold for the TCPv6\Segments Sent/sec performance counter, the monitor is switched to warning state.

Causes

A sudden increase of the quantity of sent segments may indicate a security breach.

Resolutions

Take actions to eliminate security weak points.

Element properties:

TargetMicrosoft.Windows.Server.10.0.OperatingSystem
Parent MonitorSystem.Health.PerformanceState
CategoryPerformanceHealth
EnabledFalse
Instance NameTCPv6
Counter NameSegments Sent/sec
Frequency300
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeSystem.Performance.ConsecutiveSamplesThreshold
RemotableTrue
AccessibilityPublic
Alert Message
TCPv6 Segments Sent Per Second is too high
The threshold for the TCPv6\Segments Sent/sec performance counter has been exceeded.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.Server.10.0.TCPv6.SegmentsSentPerSec" Accessibility="Public" Enabled="false" Target="ServervNext!Microsoft.Windows.Server.10.0.OperatingSystem" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="SystemPerf!System.Performance.ConsecutiveSamplesThreshold" ConfirmDelivery="false">
<Category>PerformanceHealth</Category>
<AlertSettings AlertMessage="Microsoft.Windows.Server.10.0.TCPv6.SegmentsSentPerSec.AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Warning</AlertSeverity>
<AlertParameters/>
</AlertSettings>
<OperationalStates>
<OperationalState ID="OverThreshold" MonitorTypeStateID="ConditionTrue" HealthState="Warning"/>
<OperationalState ID="UnderThreshold" MonitorTypeStateID="ConditionFalse" HealthState="Success"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>Segments Sent/sec</CounterName>
<ObjectName>TCPv6</ObjectName>
<InstanceName/>
<Frequency>300</Frequency>
<Threshold>100</Threshold>
<Direction>greaterequal</Direction>
<NumSamples>12</NumSamples>
</Configuration>
</UnitMonitor>