diagnose_drops
Identify packet drop sources and bottlenecks in network sensors by analyzing NIC, Zeek, and Suricata layers to determine root causes and leading indicators.
Instructions
Run a comprehensive diagnostic battery against a sensor to identify where drops are occurring and why. Returns drop sources by layer (NIC/Zeek/Suricata), bottleneck classification, and leading indicators.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| sensor | No | Sensor hostname | |
| from | No | Start time (epoch or relative like now-1h) | |
| to | No | End time (epoch or relative like now) |