In the scenario where high dropped rate are observed at NIC of AMD, would disable of autodiscovered software service make room/make way/make bandwidth for the NIC to accept more 'legitimate' traffic ('legitimate' in the sense that, more traffic packet that are meant to define as software service by me) before it starts to drop packet?
Solved! Go to Solution.
Generally there would be no difference at the NIC level. It has to receive packets anyway.
If you use custom driver, then monitoring user defined only software services enables filtering in the driver, so drops on the driver level and in the AMD analysis should decrease. Bu only when custom driver is in use.
Auto discovery needs to process all packets to categorize them, but this analysis is very lightweight compared to user defined software services. The only catch may be that you have all decode licenses and auto discovery already initializes deep analysis. For example, if you have a TDS decode license and lots of databases traffic, each auto-discovered DB server would be analyzed to categorize query types. Even without individual query monitoring (for which a user-defined software service is needed), this already taxes AMD fair enough. So watch out what licenses are enabled and if you don't need this type of discovery-based query categorization - change default analyzer for discovered servers of specific kind (like SQL, for example) to generic TCP.
Comparably, some of the user-defined analyses may be resource intensive, Look into what AMD is configured to do with e.g. HTTP traffic, this may be the culprit if over-analysis of everything is configured (e.g. regex for the word "error" across all response content everywhere).
Hope this helps