How to find a slow server!

[ner.d]

After you get NER Running, mirror a port to one of your vlans say the 12 vlan or the 12 network how ever you call it....
ON Cisco use the "Monitor session" number, source or destination, interface or vlan command

In NER, Click on network interfaces, admin, Declare new network or host.
Add the network as a whole i.e. name - 12network - 192.168.12.0 mask 255.255.255.0

Click on Monitor, select the network card on the mirrored 12 vlan. Click Add new monitoring task.
Below is my task, empty fields are not shown...
Monitoring type: Response time
Verification on last 15 mn
Match only this network: 12netowork
No monitoring will be done on this group: Devices on vlan12 to ignore <-------- i have a few devices in this group that are ignored.
Threshold above which an alert is sent: 30 ms
List of recipients where to send Email alerts: you@your.org
Time duration where no more than 1 Email alert will be sent by this task: 15 mn

This will send an email every 15 minutes of the servers that were slow in the last 15 minutes.

If you have a single server that is normally faster than 30ms but is heavily used and might be sluggish at 10ms create another alert for just that server...
Good stuff