HP NC320m - PCI Express Gigabit Server Adapter User manual

HP ProLiant Essentials
Intelligent Networking Pack Windows Edition
User Guide
Part Number 381655-00J
March 2007 (Ninth Edition)

© Copyright 2007 Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express
warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP
shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from HP required for possession, use or copying. Consistent with FAR 12.211 and 12.212,
Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S.
Government under vendor’s standard commercial license.
Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. Windows Server 2003 is a trademark of Microsoft
Corporation.
Audience assumptions
This document is for the person who installs, administers, and troubleshoots servers and storage systems.
HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards
in products with hazardous energy levels.

Contents 3
Contents
Overview..................................................................................................................................... 4
HP ProLiant Essentials Intelligent Networking Pack Introduction........................................................................ 4
Intelligent Networking Pack licenses................................................................................................... 5
Using Virus Throttle ..................................................................................................................... 12
How Virus Throttle works.......................................................................................................................... 12
Installing Virus Throttle for Windows .......................................................................................................... 12
Monitoring Virus Throttle status.................................................................................................................. 13
Virus Throttle Status and Configuration Utility .............................................................................................. 16
Launching the Virus Throttle Status and Configuration Utility................................................................ 16
Configuring Virus Throttle parameters............................................................................................... 17
Using advanced networking features............................................................................................. 21
Configuring advanced features ................................................................................................................. 21
Configuring a Dual Channel team ................................................................................................... 23
Advanced Pack redundancy features ......................................................................................................... 25
Configuring Active Path Failover...................................................................................................... 27
Configuring Fast Path Failover......................................................................................................... 28
Configuring Router Path Failover ..................................................................................................... 29
Advanced Redundancy tab team members information....................................................................... 29
Configuring VLAN IDs.................................................................................................................... 30
Using discovery protocol ............................................................................................................. 32
About Cisco Discovery Protocol and Link Layer Discovery Protocol................................................................. 32
Configuring Discovery Protocols ...................................................................................................... 33
IGMP support............................................................................................................................. 35
Introduction to IGMP................................................................................................................................ 35
Troubleshooting.......................................................................................................................... 36
Potential solutions for INP configuration problems........................................................................................ 36
Installing an Intelligent Networking Pack license ................................................................................ 36
Using Virus Throttle........................................................................................................................ 37
Configuring advanced networking features....................................................................................... 37
Configuring Discovery Protocol ....................................................................................................... 39
Acronyms and abbreviations........................................................................................................ 41
Index......................................................................................................................................... 43

Overview 4
Overview
In this section
HP ProLiant Essentials Intelligent Networking Pack Introduction ...................................................................... 4
HP ProLiant Essentials Intelligent Networking Pack
Introduction
The HP ProLiant Essentials Intelligent Networking Pack-Windows Edition is part of the ProLiant Essentials
software family and is integrated with HP Systems Insight Manager (SIM), SmartStart, and HP
Management agents.
The Intelligent Networking Pack (INP) provides advanced capabilities that allow servers to proactively
adapt to networking infrastructure problems thus improving server availability and network performance.
The Intelligent Networking Pack Windows Edition includes:
•Virus Throttle—a network packet-filtering feature that helps slow down the spread of viruses on your
system. Virus Throttle monitors all outbound connection requests and counts the number of unique
connections. It detects abnormal ("virus-like") behavior in the requests, and slows down excessive
connection requests to new hosts until you can determine if they are viral in nature and take action
•Advanced redundancy and teaming capabilities, including:
oActive Path Failover—an advanced redundancy feature that allows a ProLiant server to detect
blocked paths and to redirect data along an unblocked path to the core network.
oFast Path Failover—an advanced redundancy feature that allows a ProLiant server to use the
quickest path to the core network (or the root bridge).
oRouter Path Failover—an advanced redundancy feature that allows a ProLiant server to detect a
blocked path to a router and to redirect packets along an unblocked path to a router.
oDual Channel Load Balancing—a special type of teaming that allows the creation of two teams,
called groups, inside of a single team. Each group is assigned one or more teamed ports and
can be connected to a different switch to provide switch fault tolerance. Full inbound and
outbound load balancing is provided across both groups. Should any group completely fail,
caused by a failure of all teamed ports in the group or by a failure of the group's switch, the
team remains available through the other group. Two types of Dual Channel Load Balancing
teams can be configured: Switch-assisted Dual Channel Load Balancing teams and 802.3ad
Dynamic Dual Channel Load Balancing teams.
oDual Channel Network Fault Tolerance—a special type of teaming that allows the creation of two
teams, called groups, inside of a single team. All team members within each group are
dynamically placed into a port-trunk/channel by dynamic Link Aggregation Control Protocol
(LACP) agreement with the switch. A failure of a team member to synchronize joining a port-trunk
or channel with the switch is treated as an error and that team member is considered failed.
Dynamic Dual Channel Network Fault Tolerance (NFT) provides the safety of additional backup
links between the server and hub/switch. Dynamic Dual Channel NFT is implemented with one
channel team providing a primary adapter and another channel team providing a secondary,

Overview 5
backup adapter. During normal operations, if the adapters in the primary team fail, a link to one
of the adapters in the secondary, backup team automatically takes over. Four types of Dual
Channel NFT teams can be configured: Switch-assisted Dual Channel NFT teams, Switch-assisted
Dual Channel NFT and Preference Order teams, 802.3ad Dynamic Dual Channel NFT teams,
and 802.3ad Dynamic Dual Channel NFT and Preference Order teams.
NOTE: Dual Channel Network Fault Tolerance teaming capabilities are not supported on
systems running Windows® 2000.
•Cisco Discovery Protocol (CDP) support—a media- and protocol-independent network protocol that is
used to obtain protocol addresses of neighboring devices and discover the platform and other
information of those devices.
•Link Layer Discovery Protocol (LLDP) support—a media- and protocol-independent network protocol
that is used to obtain protocol addresses of neighboring devices and discover the platform and other
information of those devices.
•Internet Group Management Protocol (IGMP) support—IGMP is a session-layer (Layer-3) protocol
used to establish membership in a Multicast group. It can register a router to receive specific
multicast traffic.
The INP features are included with the networking software (release 7.71 and higher). To enable the INP
features, an INP license must be installed on the system. This user guide describes how to install these
licenses on your system and how to configure the features.
For the latest driver, firmware, and documentation updates, go to HP Networking website
(http://h18004.www1.hp.com/products/servers/networking/index.html).
Intelligent Networking Pack licenses
Each server requires a separate INP license. When installed on the system, the license is "attached" to the
server and cannot be revoked. The license will stay with that server for the life of the server. The license is
associated with the server's serial number, so a change in the server's name or IP address will not
invalidate the license. One INP license enables all INP features on the server.
Four categories of INP licenses are available. Each license offers full, unlimited functionality.
•Single license pack—Authorizes one licensed seat.
•Flexible Quantity license pack—Authorizes the set number of licensed seats ordered.
•Activation Key Agreement license pack—Allows you to authorize additional licensed seats under the
terms of a signed and implemented Activation Key Agreement (AKA) only.
•Demo—Allows you to evaluate the features for a set number of seats and a set number of days
Installing an Intelligent Networking Pack license
INP-Windows Edition licenses can be installed through the following:
•HP ProLiant Essentials Network License Manager, which can be launched through one of the
following:
oHP Network Configuration Utility (NCU) (release 7.71 and higher)
oHP Virus Throttle for Windows Utility installation
•HP ProLiant Essentials Network License Manager (nalicense)

Overview 6
•HP ProLiant Essentials Network License Manager (vtlicense)
•HP Systems Insight Manager (SIM) License Manager Utility
Windows operating system requirements
Both the NCU and Virus Throttle utility require that the HP ProLiant system be running
Microsoft®Windows® 2000, Microsoft Windows Server 2003, or Microsoft Windows Server 2003 x64.
Launching the license manager through the Network Configuration Utility
If the NCU software (release 7.71 and higher) is installed on your server, click License Manager on the
NCU Main window to display the License Manager.
If the NCU software is not installed on your server, complete the following steps:
1. Go to the HP website (http://www.hp.com).
2. Click Software & Driver Downloads from the left menu bar.
3. Type the product name in the For product box and press Enter. For example, type NC370T.
4. Select your Operating System software.
5. Click HP ProLiant Networking Software.
6. Click download and save the HP SoftPaq (sp#####.exe) file to a directory on your hard drive. The
SoftPaq file is a self-extracting executable with a file name based on the SoftPaq number.
7. Click the SoftPaq file to extract the files and then open the cmponent.htm file.
8. Click the Network Teaming and Configuration link.
9. Install the component according to the directions. When the NCU is installed, the NCU tray icon
appears on the task bar of the Windows desktop.

Overview 7
10. Click the NCU tray icon to display the NCU Main window.
11. Click License Manager to display the ProLiant Essentials Network License Manager. For information
on installing licenses refer to "About ProLiant Essentials Network License Manager (on page 8)."
Launching the license manager through the Virus Throttle installation
When you first install Virus Throttle the utility looks for a valid INP license on the system. If it does not find
one, it automatically launches the ProLiant Essentials Network License Manager for you to enter a license
key.
To install Virus Throttle and launch the ProLiant Essentials Network License Manager complete the
following steps:
1. Go to the HP website (http://www.hp.com).
2. Click Software & Driver Downloads from the left menu bar.
3. Type the product name in the For product box and press Enter. For example, type NC370T.
4. Select your Operating System software.
5. Click HP ProLiant Networking Software.
6. Click download and save the HP SoftPaq (sp#####.exe) file to a directory on your hard drive. The
SoftPaq file is a self-extracting executable with a file name based on the SoftPaq number.
7. Click the SoftPaq file to extract the files and then open the cmponent.htm file.

Overview 8
8. Click the HP Virus Throttle link. If the utility does not identify a valid INP license on the system, the
following message displays:
9. Click Yes to display the ProLiant Essentials Network License Manager. For information on installing
licenses refer to "About ProLiant Essentials Network License Manager (on page 8)."
NOTE: After the INP license is installed on the system, the Virus Throttle installation
automatically continues.
For additional information on Virus Throttle, refer to "Using Virus Throttle (on page 12)."
About ProLiant Essentials Network License Manager
The ProLiant Essentials Network License Manager allows you to enter new INP-Windows Edition licenses
as well as view the status of other ProLiant Essentials licenses on your system.

Overview 9
The Currently installed licenses window displays the following information:
•Product Name—the name of the licensed networking product.
•Type—The license type.
oSingle license pack—Authorizes one seat. Depending upon the type of product a seat may be a
single server (INP) or a single port (iSCSI Pack).
oFlexible quantity license pack—Authorizes a set number of seats ordered.
oActivation Key Agreements (AKA) license pack—For use with signed and implemented (AKAs).
Allows you to activate additional seats under the terms of an existing AKA.
oDemo (For evaluation purposes only)—This trial license is provided for a set number of seats and
a set number of days.
•Seats Max—The total number of seats authorized for use by this key.
•Seats Used—The number of seats that are currently used.
•Days Max (Demo key only)—The total number of days authorized for use by this key.
•Days Left (Demo key only)—The number of days remaining for the license.
•License Key—The 25-digit license key string.
The Licensable devices window displays all devices that can be enabled. To enable or disable ports go to
the NCU.
•Licensed and Unlicensed Devices—Enabled ports are displayed with a solid adapter icon and
disabled ports are displayed with a faded adapter icon.
•Non-port based licenses—When a non-port based license is selected in the Currently installed
licenses list, the Licensable devices list is disabled.
•License seat unavailable—If all seats for a given license have been used, a licensed port of the same
type must be disabled to make a license seat available to a different port or an additional license of
the same product type with additional seats must be installed.
The following controls are available:
•Install License(s)—Opens the Install ProLiant Essentials License Key(s) dialog box.
•Export Licenses—Allows you to export currently installed licenses into a formatted license key file so
that you can easily move multiple licenses from one system to another.
•Close—Removes the License Manager dialog box from the screen.
•Help—Launches the License Manager Help file.
To install a license:
You can install single or multiple license keys in the ProLiant Essentials Network License Manager window.
To install a single license key:

Overview 10
1. From the ProLiant Essentials Network License Manager window, click Install License(s)… to display
the Install ProLiant Essentials License Key(s) dialog box.
2. Select the Install a single license key option and enter the license key string. You may also copy the
license key from another source and paste it into the boxes.
3. Click Install. The license is displayed in the Currently installed licenses window.
To install multiple license keys from a key file:
1. From the ProLiant Essentials Network License Manager window, click Install License(s)….
2. Select the Install license keys from a file option and click Open License Key File....
3. Select the [filename].key file and click Open. A list of keys available for installation appears.
4. Select the license keys to install by clicking the check boxes. Selecting Invert selection reverses all
check box selections.
5. Click Install.
NOTE: HP recommends that you retain the license key for future reference. The key is needed
for technical support and future upgrades.
To export a license:
1. Click Export Licenses. The Save As dialog box appears.
2. Enter a license key filename called [filename].key and click Save. A text file is created.
3. Click Close. The NCU Main window appears.
Installing licenses using the nalicense
The HP ProLiant Essentials Network License Manager (nalicense), which ships with the NCU, is a
Windows based command line utility and can be run at the command line of a Command Prompt
window or from a Windows command file.
The nalicense command validates that the license is a proper INP license and if it is valid it adds it to
the system. The nalicense command can also be used to display valid licenses on the system.
For information about the utility, refer to the HP ProLiant Essentials Network License Manager for
Windows User Guide located on the HP website (http://www.hp.com).

Overview 11
Installing licenses using vtlicense
The HP ProLiant Essentials Network License Manager (vtlicense), which ships with Virus Throttle, is a
Windows-based command line utility that is run at a command line of a Command Prompt window or
from a Windows command file.
The vtlicense command validates an INP license and then adds it to the system if it is valid. The
vtlicense command also displays licenses currently installed on the system.
Installing licenses through HP Systems Insight Manager License Manager
HP recommends you use the SIM License Manager for concurrently installing and monitoring INP licenses
on multiple servers. For information about SIM, go to the HP website (http://www.hp.com/go/hpsim).

Using Virus Throttle 12
Using Virus Throttle
In this section
How Virus Throttle works......................................................................................................................... 12
Installing Virus Throttle for Windows......................................................................................................... 12
Monitoring Virus Throttle status ................................................................................................................ 13
Virus Throttle Status and Configuration Utility............................................................................................. 16
How Virus Throttle works
Viruses typically spread by connecting to as many different machines as possible. Virus Throttle is a
network packet-filtering feature that monitors all outbound connection requests. Virus Throttle helps to stop
the spread of viruses on your system by detecting abnormal "virus like" behavior in the requests. It slows
down excessive connection requests to new hosts until you can determine if they are viral in nature and
take action.
Virus Throttle allows the network infrastructure to stay up and running by slowing traffic on systems that
exhibit high connection rates and frequent connections to new hosts.
When you install Virus Throttle on your system, the Virus Throttle network NDIS filter driver is inserted into
all existing protocol-to-miniport bindings and all network traffic passes through it. Virus Throttle provides
TCP and UDP support. The driver maintains a delay queue of connection requests for each instance of the
network protocol stack and a list of known hosts that have established connections.
The driver examines all outbound connection requests and determines if the request is for a known host. If
known, the request is passed down the protocol stack as a normal request. If unknown, the request is
added to the delay queue. Periodically, the delay queue is examined and the oldest request is removed
and passed down the protocol stack.
High and low water marks or pre-set thresholds are maintained for the delay queue and are used to
determine when "virus-like" behavior is occurring or has stopped.
•High water mark—When the rate of connection requests exceeds the rate of the driver removing
them from the delay queue, a high water mark in the queue is exceeded and the driver indicates
"virus-like" activity.
•Low water mark—When the rate of connection requests drops so that the number of queue entries
fall below a low water mark, the driver indicates that the "virus-like" activity has stopped.
When "virus-like" activity is detected or has stopped, Virus Throttle sends a Windows Management
Instrumentation (WMI) event notification to the administrator. If HP Management agents are installed and
configured correctly, a Simple Network Management Protocol (SNMP) trap warning is also sent to the
administrator.
Installing Virus Throttle for Windows
To install Virus Throttle for Windows using the HP component pack executable file:
1. Go to the HP website (http://www.hp.com).

Using Virus Throttle 13
2. Click Software & Driver Downloads from the left menu bar.
3. Type the product name in the For product box and press Enter. For example, type NC370T.
4. Select an operating system.
5. Click HP Virus Throttle for Windows to download the HP Virus Throttle component pack
(cp######.exe) file. The component pack file is a self-extracting executable with a file name based
on the component pack number.
6. Click the component pack executable file and follow the directions on the screen to install Virus
Throttle.
When installation is complete, the Virus Throttle tray icon appears in the Windows taskbar on the
desktop. This icon is used to open the Virus Throttle Status and Configuration Utility.
To Install Virus Throttle for Windows using the HP cmponent.htm file:
1. Go to the HP website (http://www.hp.com).
2. Click Software & Driver Downloads from the left menu bar.
3. Type the product name in the For product box and press Enter. For example, type NC370T.
4. Select your Operating System software.
5. Click HP ProLiant Networking Software.
6. Click download and save the HP SoftPaq (sp#####.exe) file to a directory on your hard drive. The
SoftPaq file is a self-extracting executable with a file name based on the SoftPaq number.
7. Click the SoftPaq file to extract the files and then open the cmponent.htm file.
8. Click the HP Virus Throttle link. If a valid INP license is identified on the system, Virus Throttle
installation continues. If the utility does not identify a valid INP license on the system, the following
message appears:
9. Click Yes to install a license key. The ProLiant Essentials Network License Manager appears. Refer to
"About ProLiant Essentials Network License Manager (on page 8)." After you install a license key on
the system, the Virus Throttle installation continues automatically.
When installation is complete, the Virus Throttle tray icon appears in the Windows taskbar on the
desktop. This icon is used to open the Virus Throttle Status and Configuration Utility.
Monitoring Virus Throttle status
The Status tab displays overall status, statistics, and delay queue information that has been captured since
the Virus Throttle filter drivers were initialized. The filter drivers are initialized upon reboot and when any

Using Virus Throttle 14
configuration parameter is changed. Statistics and delay queue information can be viewed on the Status
tab in either Aggregate (summary for all active instances of the Virus Throttle filter driver) or Individual
(per instance) mode. The default setting is the Aggregate mode.
•Status. Displays the current state and the number of interfaces with virus-like activity since the Virus
Throttle filter drivers were initialized. The filter drivers are initialized upon reboot and when any
configuration parameter is changed.
oNo Virus-like activity is occurring. No virus-like activity is currently detected and none has been
detected since the filter drivers were initialized.
oVirus-like activity is not occurring, but has occurred in the past. No virus-like activity is currently
detected, but virus-like activity has been detected since the filter drivers were initialized.
oVirus-like activity is currently occurring! Virus-like activity is currently detected by at least one
instance of the filter drivers.
oNumber of TCP Interfaces with Virus-Like Activity. The number of TCP interfaces that are currently
displaying virus-like activity.
•Number of UDP Interfaces with Virus-Like Activity. The number of UDP interfaces that are currently
displaying virus-like activity.
•TCP Statistics. Displays statistics on an aggregate or per-instance basis since the filter drivers were
initialized.
oConnection Establishing TCP Packets. Number of connection TCP packets seen since filter driver
initialization.
oTCP Packets Passed Without Delay. Number of connection TCP packets that were passed without
a delay because the target was a known host since filter driver initialization.

Using Virus Throttle 15
oTCP Packets Placed on Queue. Number of connection TCP packets queued since filter driver
initialization.
oTCP Packets Removed from Queue. Number of connection TCP packets removed from the delay
queue since filter driver initialization.
oCurrently Queued TCP Packets. Number of connection TCP packets currently on the delay queue.
oTCP Packets Dropped Due to Queue Overflow. Number of TCP packets that were dropped due to
the delay queue being full since filter driver initialization.
oMaximum TCP Packets on Queue. Maximum number of TCP packets on the queue since filter
driver initialization.
•Times TCP Virus-like Activity Seen. Number of times virus-like activity was detected since filter driver
initialization.
•UDP Statistics. Displays statistics on an aggregate or per-instance basis since the filter drivers were
initialized.
oConnection Establishing UDP Packets. Number of UDP connection packets seen since filter driver
initialization.
oUDP Packets Passed Without Delay. Number of UDP connection packets that were passed without
a delay because the target was a known host since filter driver initialization.
oUDP Packets Placed on Queue. Number of UDP connection packets queued since filter driver
initialization.
oUDP Packets Removed from Queue. Number of UDP connection packets removed from the delay
queue since filter driver initialization.
oCurrently Queued UDP Packets. Number of UDP connection packets currently on the delay
queue.
oUDP Packets Dropped Due to Queue Overflow. Number of UDP packets that were dropped due
to the delay queue being full since filter driver initialization.
oMaximum UDP Packets on Queue. Maximum number of UDP packets on the queue since filter
driver initialization.
•Times UDP Virus-like Activity Seen. Number of times UDP virus-like activity was detected since filter
driver initialization.
•Information. Displays the current queue settings.
oTCP Delay Queue Size. The maximum number of TCP connection requests in the delay queue for
each instance.
oTCP Delay Queue High Water Mark. The number of TCP connection requests in the delay queue
where virus-like activity is indicated.
oTCP Delay Queue Low Water Mark. The number of TCP connection requests in the delay queue
below which virus-like activity is no longer indicated.
oUDP Delay Queue Size. The maximum number of UDP connection requests in the delay queue for
each instance.
oUDP Delay Queue High Water Mark. The number of UDP connection requests in the delay queue
where virus-like activity is indicated.
oUDP Delay Queue Low Water Mark. The number of UDP connection requests in the delay queue
below which virus-like activity is no longer indicated.
Controls

Using Virus Throttle 16
•Statistics Display Mode. Sets the type of values to be displayed.
oAggregate. Displays a summary of all instances since driver initialization.
oIndividual. Displays values on a per-instance basis.
•License Manager. Opens the License Manager dialog box allowing you to add or view HP ProLiant
Essentials Network pack licenses.
•OK. Processes all changes made in the current session and closes the Virus Throttle Status and
Configuration Utility.
•Cancel. Cancels any selections made in the current session and closes the Virus Throttle Status and
Configuration Utility.
•Help. Launches the context-sensitive Help file.
Virus Throttle Status and Configuration Utility
The HP Virus Throttle Status and Configuration Utility allows you to view the status of "virus-like" activity
and to configure parameters for the Virus Throttle filter driver.
When you first install Virus Throttle, the parameters for the filter driver are set to default settings. Any
changes that you make to the Virus Throttle filter driver parameters are made to all active instances of the
Virus Throttle filter driver.
When a new server adapter is installed on the system or a new team or VLAN is created, the Virus
Throttle filter driver parameters for that interface are set to the default settings.
Each time the Virus Throttle Status and Configuration Utility is launched it looks for inconsistencies in the
parameters for all the active instances of the filter driver. If one or more of the instances has inconsistent
parameters, you are prompted to update the settings. For example, if the default parameters are changed
and then a new adapter is added, the parameters on the adapter will be inconsistent until the utility is run.
Launching the Virus Throttle Status and Configuration Utility
To launch the Virus Throttle Status and Configuration Utility complete the following steps:
1. Close the NCU (if it is open) because both utilities cannot be running at the same time.
2. Double-click the Virus Throttle tray icon located in the Windows taskbar. The Virus Throttle Status
and Configuration Utility verifies that the settings for all active instances of the filter driver are the
same.

Using Virus Throttle 17
If no inconsistencies are detected in the filter driver parameters, the Status tab appears. The Status
tab shows overall status, statistics, and delay queue information. Refer to "Monitoring Virus Throttle
status."
If inconsistencies are found, the following message appears.
3. Click OK to display the Configuration tab. Update the current settings for all active instances of the
filter driver as needed. Refer to "Configuring Virus Throttle parameters (on page 17)."
Configuring Virus Throttle parameters
The Configuration tab shows the current delay queue and host settings and allows you to configure them
for all active instances of the Virus Throttle filter driver. Parameters cannot be set for individual instances
of the filter driver.
You can configure the following parameters:
•Delay Queue Size. Controls the maximum number of delayed TCP or UDP connection requests in the
queue for each instance of the filter driver. Requests over the queue size are dropped. The default
setting is 200 delayed connection requests. The valid range is 1-1000.

Using Virus Throttle 18
•Delay Queue High Water Mark. Controls the number of TCP or UDP connection requests in the delay
queue at which "virus-like" activity is considered to be occurring for each instance of the filter driver.
The default setting is 160 connection requests. The valid range is 1-Delay Queue Size.
•Delay Queue Low Water Mark. Controls the number of TCP or UDP connection requests in the delay
queue below which "virus-like" activity is considered to have stopped. The default setting is 100
connection requests. The valid range is 1-High Water Mark.
•Delay Period. Controls the rate at which TCP or UDP connection requests are removed from the
delay queue and passed down the protocol network stack. The default is 1 second. The valid range
is 1-10 seconds.
•Host Working Set Size. Controls the number of known machines to which TCP or UDP connections
are established without delay. When a new connection is made, the oldest member of the working
set is replaced with the new host. The default setting is 5 hosts. The valid range is 1-100.
•Address Lifetime (UDP). Number of timer intervals that an address will remain in the working set after
the last outbound UDP packet was sent to that address.
•Address Hint Lifetime (UDP). Number of timer intervals that an address is kept in the working set after
the last inbound UDP packet was received from that address.
•Max Slack (UDP).Maximum number of times new hosts are added to the working set per each timer
interval before adding to the delay queue.
The following controls are available:
•Restore Defaults—Restores all values to their default values.
•OK—Processes all changes made in the current session and closes the Virus Throttle Status and
Configuration Utility.
•Cancel—Cancels any selections made in the current session and closes the Virus Throttle Status and
Configuration Utility.
•Help. Launches the context-sensitive Help file.
How to configure Virus Throttle parameters
1. From the Configuration tab, modify the parameters as needed.
TCP and UDP options provide a selection for which protocol configuration settings are used.

Using Virus Throttle 19
The Keep Proportions option provides a way to keep the high and low water mark values at a preset
percentage of the delay queue size for TCP and UDP outbound connection request. When Keep
Proportions is not selected, the delay queue high and low water mark values can be changed.
When Keep Proportions is selected, the delay queue high and low water mark values cannot be
changed, and are automatically preset at 80% of the delay queue size for the high water mark and
50% of the delay queue size for the low water mark.
2. Click OK to save the settings. If you click Cancel and inconsistent settings needed to be changed, the
following message appears.
If you click Yes to this message, the utility closes and the inconsistent settings remain. If you click No,
to this message the Configuration tab appears again.

Using Virus Throttle 20
3. When you click OK to process your changes, an informational message appears warning about a
network interruption. Click Yes to start and stop the Virus Throttle instances so the new parameters
can be read from the registry.
4. After the configuration is completed, a successful message appears. Click OK to close the Virus
Throttle Status and Configuration Utility.