Hi Brian,
? can be tied with two main issues:
- User cannot be extracted because connection was not set correctly (Exceptions)
- Sniffer missed login packets or session context
The second issue can appear because:
- STAP has been started or restarted when session existed (there is no way to identify user) - if restart was not planned - investigate it!
- Sniffer has been restarted - you should investigate the reason, mostly related to resource shortage on collector level
------------------------------
Zbigniew Szmigiero
IBM
Warsaw
------------------------------