Using BigTop

After launching BigTop for the first time you will be presented with the Main Window, as described in The Main Window, and a System Window, as described in The System Window, for the local machine. This chapter gives an overview of how you can use the controls and graphs in these two windows to examine how your system is being used. In addition, it covers some of the ways that you can customize the display to make it fit your needs.

The Main Window

The Main Window, illustrated in Figure 1-1, gives a brief overview of all monitored machines and allows you to open up System Windows for any systems that you would like to investigate in more detail. Normally this window is open at all times while you are using BigTop, but if you close it then you can return it to the screen at any time by using the Window→Network Monitor (Command-1) menu command.

Figure 1-1  Main Window
Main Window

Managing Systems and Groups

By default, there is only a single machine (the local system) listed in the Systems Table, which occupies the right part of the main window. You can add additional machines to monitor by pressing the Add System... button at the bottom of the window and then using the sheet (see Figure 1-2) that appears.

Figure 1-2  Add System Dialog
Add System Dialog

Using the menu at the left end of the sheet, you can choose to add one or more systems to the list in three different ways:

  • Address— You can select individual machines connected via the Internet by typing in their IP addresses into the blank, either numerically or by name. Machines on the local network should generally be connected using their short names used for Apple file sharing (such as “dogboy.local”) instead of their full Internet names (such as “dogboy.mycompany.com”), as this method will work even if the local computers have temporary IP addresses acquired via a DHCP server. You may also choose a different IP port number using the text box to the right, if the default value of 47497 is blocked by your firewall.

  • Range— You can select an entire range of numeric IP addresses to monitor. This is an excellent way to add an entire cluster of machines at once. As with the individual address option, you may also choose a different IP port number using the text box to the right, if the default value of 47497 is blocked by your firewall.

  • File— You can select a text file containing a list of Internet addresses (name or number), one address per line. You can enter the name of the file manually in the text box, or press the “Select” button that appears at the right end of the sheet to This is a fast and effective way of adding a common set of computers. Alternate ports may be selected using the standard Internet notation of adding :<port number> to the end of each address.

Any machine that is added must have the /usr/libexec/statsCollector daemon running, as this daemon is responsible for actually doing the underlying statistics collection and shoveling data through the network to any copies of BigTop that are listening. BigTop will automatically start this daemon when the application is started, allowing both the local copy of BigTop and any remote systems to monitor that computer. You should note, however, that on systems where you cannot run BigTop — such as headless servers — you will need to start this daemon manually. The -p <port #> option should be used to set the port number if the default of 47497 is blocked.

The Systems Table alone is great if you just want to examine a few systems. For larger collections of computers, however, you may need more organization. The Groups Table, which occupies the left half of the main window, gives you a way to manage logical collections of machines on your network without continually adding and deleting those systems from the Systems Table. By default, BigTop shows you all of the machines being monitored (the “All” group). You can add groups to the Groups Table by selecting the Add Group button at the bottom of the window. Double-click on the new group in the Groups Table to edit the name. After creating a group, you can add machines to it by selecting the main (“All”) list and then dragging and dropping systems from the Systems Table to the group name. You can delete groups by selecting them in the Groups Table and selecting Edit→Delete (Delete).

The Systems Summary Table

The Systems Table lists all of the monitored machines (one per row) with a summary icon for each subsystem, allowing you to get a quick overview of the status of many machines at once:

  • CPU— This gives an indication about the % of time that the processor(s) are active.

  • Disk— This indicates the total number of bytes read from and written to disk per second.

  • Kernel— The gives an indication of the number of kernel-managed threads currently executing on the system.

  • Network— This indicates the total number of bytes coming in from and going out to the active network interfaces on this computer each second.

  • Memory— This gives an indication about the % of the main memory that has been allocated.

  • Processes— This gives an indication of the total number of processes.

Three additional types of statistics may be displayed or hidden by selecting the View→Show/Hide Advanced Statistics (Command-Shift-M):

  • Load— This gives an indication of average system load (number of active, non-blocked threads) on the system.

  • Swap— This indicates the % of available disk space that can be used for virtual memory page swapping has already been allocated.

  • VM— This gives an indication of the number of page faults that are occurring per second on the system.

The availability of some kinds of advanced statistics depends on the version of the operating system running on the machine being monitored.

The state of each sub-system is summarized with an icon:

  • DisconnectedDisconnected

  • LowLow Utilization

  • MediumMedium Utilization

  • HighHigh Utilization

The exact meaning of these various icons can be controlled using the “Alert Levels” editing function, as explained in Alert Levels Editor Window.

The System Window

Each monitored system can be examined in detail by double-clicking its row in the Systems Table to bring up a Figure 1-3.

Figure 1-3  System Window
System Window

The system window shows a graph of the selected subsystem’s performance metrics over time. By selecting different options from the Subsystem List at the left side of the window, you can choose to examine a variety of different types of system statistics, most of which correspond to summary icons in the Main Window:

Four additional types of statistics may be displayed or hidden by selecting the View→Show/Hide Advanced Statistics (Command-Shift-M):

In addition, there are several other, more minor ways that you can choose to modify this display using the other controls scattered around the periphery of the window:

  1. Process Popup Menu— By default, statistics are shown for the entire system. You can zero in on a specific application’s behavior by selecting it from this menu. The same set of performance metrics may not be available for both the system-wide and per-process views.

  2. Sample Rate and Buffer Size— By default, performance data is sampled every two seconds and the last sixty seconds worth of samples are displayed. However, these two values can be changed locally with the two text boxes in the bottom-left part of the window, or globally in the preferences (see Sampling Preferences).

  3. Stop Button— If you are done examining a system with BigTop, you can stop the statsCollector daemon on that system with the Stop button. Note that once you press this button, you will need to restart BigTop on the system in order to restart the daemon.

  4. Clear Button— This clears the buffer used to display data in the graph. You may want to use it after BigTop has been running for awhile.