000034889 - RSA ECAT high CPU utilization with Google Hangout

Document created by RSA Customer Support Employee on Mar 16, 2017Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000034889
Applies ToRSA Product Set: NetWitness Endpoint
RSA Product/Service Type: NetWitness Endpoint
RSA Version/Condition: 4.1.2.0, 4.1.1.1, 4.2.0.0
Platform: Windows
 
IssueWhen running older versions of the Netwitness Endpoint agent on a machine with Google Hangout's the user mode agent is noted to cause a spike in CPU while a video call is active on the same machine. This causes increased consumption of resources and possibly added latency in the video call.
CauseSome of the ECAT monitors, especially the TDI monitor, take up about 94% of the added load(around 10% increased CPU utilization on average) while the video is active to try and track the increased network traffic the video pushes onto the network. This causes unnecessary overhead.
ResolutionCode changes were incorporated into both 4.2.0.2 and 4.2.0.4 to resolve this issue, but the final optimizations were made in 4.2.0.4. So when looking for a resolution:
Upgrade to 4.2.0.4

Attachments

    Outcomes