Discovery Application Mapping for UNIX

To perform the mapping that establishes application relationships, Discovery must be able to detect TCP connections.

The best way to accomplish this is to run the lsof command on target machines. However, this command is not available by default on Solaris and AIX machines. To return TCP connection information on these machines, Discovery uses custom shell scripts. For Solaris, the shell script runs the pfiles command to query each process. The pfiles command causes momentary pauses in the processes it queries on Solaris target machines. These pauses can last from a few milliseconds to a few seconds, during which no other processing can occur. To avoid pausing process threads, the ServiceNow ITSA Suite disables active connection probes for Solaris machines in the base system, but can be configured to use these if the pauses are not an issue. For AIX machines, Discovery is configured to use the active connection probe for AIX targets. However, the user that executes the shell script on AIX machines might require additional privileges to execute commands, such as kdb, employed in the script.

On Linux machines, Discovery uses the lsof command (installed by default on Linux) to detect TCP connections. The Linux classification probe triggers the Linux - Active Connections probe, which uses lsof to discover application relationships and does not produce any pauses. The lsof command is the recommended method of returning active TCP connections and can be installed on Solaris and AIX target machines to eliminate any issues produced by the shell script.

Note: Discovery of active connections on HP-UX is not supported.