I don't quite get the point of your question. Traffic diagnostics doesn't refer to VLANs at any moment. What it does is purely showing potential source of problems with traffic quality. The screenshot shows an AMD that actually has no traffic quality issues with one minor exception - for four servers (as in the table) the AMD detected quite high retransmission rate. This is not a problem in general, as it happens in the networks. This table in the Traffic diagnostics page makes more sense when it's connected with a high level of packet duplicates, as explained under the table.
Thanks for replying,
I want to show network team the issue using "real traffic" with retransmissions packets from the server.
Strange thing is that the server with all the retransmits can not be found with "rcon tcpdump" tool.
This server is on a vlan filtered out on AMD, that should be no problem. But I noticed that filtered-out vlans on AMD, wil show in CAS with statistics. Is this expected behavoir?
Yes, it seems a bit strange at first sight. AMD should have seen and report on the same data. I'll talk to developers whether this is a situation they'd would like to investigate.
Regarding the filtered out server seen on this report, this might be OK. What do you mean by filtering out? How and where did you filter out the VLAN with this server? Can you share your configuration settings or a screenshots that shows it?
Not if I understand correctly - your concern is that the CAS displays data from particular VLANs, but you cannot capture packets from those VLANs using rcon tcpdump?
Are you using any filter for recording the capture? If yes, then you need to explicitly specify that you wish to capture VLAN packets in the filter.
So instead of using e.g.:
tcpdump 0 "/tmp/capture.pcap" "host 184.108.40.206"
You need to use:
tcpdump 0 "/tmp/capture.pcap" "vlan and host 220.127.116.11"
another advice -- I suggest you started using Smart Packet Capture rather than tcpdump. It has no such limitations as tcpdump does. In addition, soon it will become the only supported method of capturing traffic traces on AMD. Amongst other benefits -- traffic traces can be nicely sliced and diced with Trace Trimmer within CAS, so you don't have to use any 3rd party tools.
No, it works out of the box, assuming you have a license for SPC (aka Network Forensics). Once a trace file is captured, it's available in CAS (Tools > Packet data mining tasks). Then, when you expand a capture item, you can download it or open with Trace Trimmer.