Window Server Monitoring

8/9/2019 Window Server Monitoring

1/40

Window Server Monitors


2/40

About Server Monitoring

Server Monitoring

Process to monitor server's system.

Fundamentally concerned with observing how aserver reacts to the operating load placed uponit or during various types of performancetesting


3/40

Purpose of ServerMonitoring

Server Health hec!

"ottlenec! #denti$cation

apacity Planning


4/40

%ools &sed

Multiple licensed and open source tool eist togenerate load and retrieve server statistics.

"elow tools are used by us for the monitoring

purpose HP (oad )unner

#"M )P%

"oth () and )P% in turn draws information fromwindows native tool performance monitor andrepresent data * measurements in their ownmanner


5/40

Windows "uilt+#n %ools

Windows has two built+in tools to !eep tab of systemresources,

)esource Monitor See which programs and*or services are consuming windows system

resources. "uilds on %as! Manager by adding more detail in one easy+to+use

interface.

Provides -uic! summary of overall P& dis! networ! and memoryutili/ation

Performance Monitor lets you eamine a large number of counters for system

processes*services

Presents performance data in real time or through the collection ofdata inside log $les that can be reviewed as needed.

ollects performance data based on counters which aremeasurements of system activity or the current system state.


6/40

What0s there in Server

Hardware omponents

P&

Hard 1is!

)AM 2etwor! #nterface ontroller

Window server performance can be altered by alteringthese hardware components

3S

Software that manages computer hardware andsoftware resources and provides common services forcomputer programs.

Windows separates application+oriented softwarefrom 3S software.


7/40


8/40

4now First

4ernel

4ernel 5 Hardware

Modes


9/40

4ernel

Kernel

Most used and most fundamental components of the 3S.

omputer program that manages input*output re-uestsfrom software and translates them into data processinginstructions for the central processing unit and otherelectronic components of a computer.

Privileged mode or kernel mode.

3S software runs in this mode

software has access to system data and to the hardware.

User Mode

%he remaining software runs in user mode has limitedaccess to system data.


10/40

4ernel 5 Hardware

%he !ernel's primary function is to mediate accessto the computer's resources


11/40

Agenda

"asics of server monitored components

Memory

P&

1#S4

2etwor! #nterface

1i6erent counters related to each component


12/40

Memory


13/40

4now First

7irtual Memory

Paging

Page Faults Page Pooling


14/40

7irtual Memory

3ptimi/ation techniqueimplemented by theoperating system

&nli!e )AM doesn0t physically eist onmemory chip

Functions with the help of paging

Allows an application program the impressionthat it has more memory than actually eists.

Hence allows the use of programs that aretoo big to physically $t in memory.

Allow for multitas!ing 9 multiple programsrunning at once.


15/40

7irtual Memory+#ncludes

ReservedMemory

Set of contiguousaddresses thatthe 7MM set

aside for aprocess 2ot count against

the process'smemory -uotauntil it is used.

Committedmemory

7MM saves spacefor process inPage$le.sys in

case it needs tobe written todis!.

ommit limit isthe amount ofmemory that canbe committed

withoutepanding thepaging $le.

#f dis! space isavailable thepaging $le canepand and thecommit limit willbe increased.

AvailableMemory

Availablememory includesfree memory

/eroed memoryand memory onthe standby listwhich has beenremoved from aprocess's wor!ingset but might be

reclaimed.


16/40

Paging


17/40

Paging

Whenever the 3.S. needs a :bloc!0 of memory that0s not in )AM the 7MMta!es a bloc! from the real memory that hasn0t been used recently writesit to the paging $le and then reads the bloc! of memory that the 3.S.needs from the paging $le. %he 7MM then ta!es the bloc! of memory fromthe paging $le and moves it into the real memory 9 in place of the old

bloc!.

1ata can be stored in the paging $le on the hard dis! but it is not usableuntil that data is brought into the )AM.


18/40

Paging

Paging File

7MM creates a $le on the hard dis!that holds the etra memory that is

needed by the 3.S%he paging $le combined with the)AM accounts for all of the memory.

Pages

"loc!s of memory that are swappedare called pages.


19/40

Page Fault

Page fault occurs when a program re-uests apage of code or data is not in its wor!ing set

A hard page fault occurs when the re-uested page

must be retrieved from dis!. Hard faults cause paging;ecessive is called thrashing


20/40

Page Pooling

Pool )esources

When a machine boots up the Memory Managercreates two dynamically si/ed memory pools that!ernel+mode components use to allocate system

memory. Paged Pool

Paged Pool is eactly what its name implies + it can bepaged out

2on Paged Pool

%he 2on Paged Pool cannot be paged out. 1rivers use the 2on Paged Pool for many of their

re-uirements because they can be accessed at any#nterrupt )e-uest (evel ;#)=(


21/40

Memory ounters

emoryounter


22/40

Processor


23/40

4now First

Processor

Process 5 %hreads

Some More %erms


24/40

Processor

hip* logic circuitry that responds to andprocesses the basic instructions that drive acomputer.

"asic system instructions may include processingmouse and !eyboard input and runningapplications.

Processors are associated with the operatingsystem and user programs support at least twomodes of eecution +privileged 5 user mode


25/40

Process 5 %hreads

Process >ecuting instance of an application.

A collection of one or more threads and associated systemresources such as memory open $les and devices.

A process has a virtual address space eecutable code

open handles to system ob?ects a security contet auni-ue process identi$er environment variables a priorityclass minimum and maimum wor!ing set si/es and atleast one thread of eecution.


26/40


27/40


28/40

Some more %erms

Multitas!ing

%hreads aren't allowed to run until done.#nstead precious time with the processor isallowed for a pre+set amount of time called

a time slice and then the thread is @pre+empted@ to allow other threads to run.

Scheduling

%he system scheduler controls multitas!ing

by determining which of the competingthreads receives the net processor timeslice. %he scheduler determines whichthread runs net using scheduling priorities.


29/40

%hread Priority

%hreads are scheduled to run based ontheir scheduling priority. >ach thread is assigned ascheduling priority. %he priority levels range from /ero;lowest priority< to B ;highest priority


30/40

ontet Switches

%he scheduler maintains a -ueue of eecutablethreads for each priority level. %hese are !nownas ready threads. When a processor becomes available the system performs

a context switchas below,

Save the contet of the thread that ?ust $nished eecuting.

Place the thread that ?ust $nished eecuting at the end ofthe -ueue for its priority.

Find the highest priority -ueue that contains ready threads.

%he most common reasons for a contet switch are, %he time slice has elapsed.

A thread with a higher priority has become ready to run.

A running thread needs to wait.


31/40

Privileged Mode 7s &serMode Privileged or !ernel mode

Processing mode that allows code to have directaccess to all hardware and memory in thesystem.

#*3 operations and other system services run inprivileged ;!ernel< mode

&ser mode

&ser applications run in user mode. &nless they are graphics+intensive or #*3+

intensive ;such as $le and print services


32/40

Processor ounters

C Processor %imeD%otal #nstance Percentage of elapsed time a P& is busy eecuting a non idle

thread ;An indicator or processor activity


33/40

Processor ounters

SystemJontet Switches *sec. 3ccurs when higher priority threads preempts lower priority

threads that are currently running and can indicate when toomany threads are competing for processor time.

#f much processor utili/ation is not seen and very low levels of contetswitching are seen it could indicate that threads are bloc!ed

As a general rule contet switching rates of less than "%&&& persecondper processor are not worth worrying about. #f contetswitching rates e'ceed ("%&&& per secondper processor then thereis a constraint.


34/40

1#S4


35/40

4now First

)isk storageis a general category of storagemechanisms where data are recorded by variouselectronic magnetic optical or mechanicalchanges to a surface layer of one or more rotating

disks.

)isk drive is a device implementing such astorage mechanism and is usually distinguishedfrom the dis! medium

1i6erent types li!e H11 F11


36/40

4now First

Physical 1is!

Actual physical H11

ollection of dis! partitions used to store all serverdata

(ogical 7olume

(ogical 1is! refers to a 7olume that has been

created on that dis!.

Presents a user with a contiguous address spaceKthat is a logical volume simulates one largecontiguous storage space by using regions ofdi6erent dis!s

A logical volume manages physical volumes by


37/40

1is! ounters

Perfmon has two ob?ects related to dis!performance,

*he Physical )isk performance ob+ect Monitors dis! drives on the computer.

#denti$es the instances representing the physicalhardware

ounters are the sum of the access to all

partitions on the physical instance.

*he ,ogical )isk Performance ob+ect Monitors logical partitions.

Performance monitor identi$es logical dis!s by

their drive letter or mount point.


38/40

1is! ounters

1is! ounter


39/40

=ui/ %ime


40/40

)eferences

http,**blogs.technet.com*

http,**www.tenou!.com*Module%.html

http,**msdn.microsoft.com*
http://blogs.technet.com/http://www.tenouk.com/ModuleT.htmlhttp://msdn.microsoft.com/http://msdn.microsoft.com/http://msdn.microsoft.com/http://msdn.microsoft.com/http://www.tenouk.com/ModuleT.htmlhttp://www.tenouk.com/ModuleT.htmlhttp://blogs.technet.com/http://blogs.technet.com/

Window Server Monitoring

Documents