How to monitor lua parsers in NetWitness Decoders

Issue

Customer sometimes wants to monitor statistics of lua parsers including custom lua parsers for performance reason in packet or log decoder. In this case, this script may help the customer to identify decoder's performance issue like packet drop which was caused by custom lua parser.

This script can gather the following statistics for each lua parser once you configured “detailed.stats=yes” under /decoder/parsers/config in Explore. (You can add more statistics by modifying the script if necessary)

• Memory Usage
• Meta Callback Counts
• Port Callback Counts
• Token Callback

Tasks

Ensure that you carefully read instructions below before you run this script.

Usage and Caution

1. You must run the script in Decoder machine using "nohup" command in the background and use "kill" command to stop the script.

2. Default collection interval is 60 seconds, and you can adjust it as you want by modifying "INTERVAL" variable inside the script.
3. The output is stored as /root/parsers_stats.txt and you can adjust it as you want by modifying "OUTPUT_DIR" variable inside the script.

Sample Output

Product Details

RSA Product Set: NetWitness Platform
RSA Product/Service Type: Core Appliance
RSA Version/Condition: 11.x
Platform: CentOS

Approval Reviewer Queue

Technical approval queue