Retired Document
Important: This document may not represent best practices for current development. Links to downloads and other resources may no longer be valid.
Using BigTop
After launching BigTop for the first time you will be presented with the Main Window, as described in The Main Window, and a System Window, as described in The System Window, for the local machine. This chapter gives an overview of how you can use the controls and graphs in these two windows to examine how your system is being used. In addition, it covers some of the ways that you can customize the display to make it fit your needs.
The Main Window
The Main Window, illustrated in Figure 1-1, gives a brief overview of all monitored machines and allows you to open up System Windows for any systems that you would like to investigate in more detail. Normally this window is open at all times while you are using BigTop, but if you close it then you can return it to the screen at any time by using the Window→Network Monitor (Command-1) menu command.

Managing Systems and Groups
By default, there is only a single machine (the local system) listed in the Systems Table, which occupies the right part of the main window. You can add additional machines to monitor by pressing the Add System... button at the bottom of the window and then using the sheet (see Figure 1-2) that appears.

Using the menu at the left end of the sheet, you can choose to add one or more systems to the list in three different ways:
Address— You can select individual machines connected via the Internet by typing in their IP addresses into the blank, either numerically or by name. Machines on the local network should generally be connected using their short names used for Apple file sharing (such as “dogboy.local”) instead of their full Internet names (such as “dogboy.mycompany.com”), as this method will work even if the local computers have temporary IP addresses acquired via a DHCP server. You may also choose a different IP port number using the text box to the right, if the default value of 47497 is blocked by your firewall.
Range— You can select an entire range of numeric IP addresses to monitor. This is an excellent way to add an entire cluster of machines at once. As with the individual address option, you may also choose a different IP port number using the text box to the right, if the default value of 47497 is blocked by your firewall.
File— You can select a text file containing a list of Internet addresses (name or number), one address per line. You can enter the name of the file manually in the text box, or press the “Select” button that appears at the right end of the sheet to This is a fast and effective way of adding a common set of computers. Alternate ports may be selected using the standard Internet notation of adding
:<port number>
to the end of each address.
Any machine that is added must have the /usr/libexec/statsCollector
daemon running, as this daemon is responsible for actually doing the underlying statistics collection and shoveling data through the network to any copies of BigTop that are listening. BigTop will automatically start this daemon when the application is started, allowing both the local copy of BigTop and any remote systems to monitor that computer. You should note, however, that on systems where you cannot run BigTop — such as headless servers — you will need to start this daemon manually. The -p <port #>
option should be used to set the port number if the default of 47497 is blocked.
The Systems Table alone is great if you just want to examine a few systems. For larger collections of computers, however, you may need more organization. The Groups Table, which occupies the left half of the main window, gives you a way to manage logical collections of machines on your network without continually adding and deleting those systems from the Systems Table. By default, BigTop shows you all of the machines being monitored (the “All” group). You can add groups to the Groups Table by selecting the Add Group button at the bottom of the window. Double-click on the new group in the Groups Table to edit the name. After creating a group, you can add machines to it by selecting the main (“All”) list and then dragging and dropping systems from the Systems Table to the group name. You can delete groups by selecting them in the Groups Table and selecting Edit→Delete (Delete).
The Systems Summary Table
The Systems Table lists all of the monitored machines (one per row) with a summary icon for each subsystem, allowing you to get a quick overview of the status of many machines at once:
CPU— This gives an indication about the % of time that the processor(s) are active.
Disk— This indicates the total number of bytes read from and written to disk per second.
Kernel— The gives an indication of the number of kernel-managed threads currently executing on the system.
Network— This indicates the total number of bytes coming in from and going out to the active network interfaces on this computer each second.
Memory— This gives an indication about the % of the main memory that has been allocated.
Processes— This gives an indication of the total number of processes.
Three additional types of statistics may be displayed or hidden by selecting the View→Show/Hide Advanced Statistics (Command-Shift-M):
Load— This gives an indication of average system load (number of active, non-blocked threads) on the system.
Swap— This indicates the % of available disk space that can be used for virtual memory page swapping has already been allocated.
VM— This gives an indication of the number of page faults that are occurring per second on the system.
The availability of some kinds of advanced statistics depends on the version of the operating system running on the machine being monitored.
The state of each sub-system is summarized with an icon:
Disconnected
Low Utilization
Medium Utilization
High Utilization
The exact meaning of these various icons can be controlled using the “Alert Levels” editing function, as explained in Alert Levels Editor Window.
The System Window
Each monitored system can be examined in detail by double-clicking its row in the Systems Table to bring up a Figure 1-3.

The system window shows a graph of the selected subsystem’s performance metrics over time. By selecting different options from the Subsystem List at the left side of the window, you can choose to examine a variety of different types of system statistics, most of which correspond to summary icons in the Main Window:
CPU— This shows the breakdown in CPU utilization between user, system, and idle time.
Disk— This indicates the total number of bytes read from and written to disk per second.
Kernel Resources— The shows the number of kernel-managed threads currently executing on the system.
Network— This indicates the total number of bytes coming in from and going out to the active network interfaces on this computer each second.
Physical Memory— This shows how the main memory is being used, showing the major types of memory breakdowns used by Mac OS X:
Resident Memory— This read-write part of main memory is allocated to single processes on a page-by-page basis, privately, and can be paged off to disk, if necessary.
Shared Resident Memory— This read-only section of main memory is allocated to multiple processes at once on a page-by-page basis, and can be paged off to disk if necessary.
Private Resident Memory— This is the size of the private, paged “resident memory” plus all private memory allocated to the OS at startup time for core kernel functions, which is never paged. Normally, this will just be a fixed offset above the Resident Memory line.
Idle Memory— You can determine the amount of idle memory by subtracting the Shared Resident Memory and Private Resident Memory figures from the total amount of main memory in the system.
Processes— This shows the total number of processes, and breaks these down into active and sleeping processes.
Four additional types of statistics may be displayed or hidden by selecting the View→Show/Hide Advanced Statistics (Command-Shift-M):
Load— This displays average system load (number of active, non-blocked threads) over the past minute, five minutes, and fifteen minutes.
Shared Libraries— This displays the memory size devoted to code, data, and LinkEdit information associated with the currently loaded Mac OS X dynamically-linked shared libraries. There is no equivalent for this entry among the icons in the main window.
Swap— This displays the amount of used and remaining disk space that can be used for virtual memory page swapping.
VM Faults— This displays the total number of virtual memory page faults per second and breaks them down into the various kinds possible with Mac OS X:
Page Ins— The desired page was not resident in memory, and had to be brought in from disk.
Page Outs— A page had to be forced out of memory to disk in order to free up space. These faults are usually accompanied by one of another type that indicates the kind of space needed.
Zero-Fill Faults— A new page of blank, uninitialized memory was allocated.
Copy-on-Write Faults— A read-only page shared among two or more processes was written by one of the sharers, forcing the OS to make a private, read-write copy of the page for that process.
Page Cache Reactivations— The desired page was present in memory, but not listed in the system page tables. The OS just needed to add the entry back into the page tables before letting the process continue.
In addition, there are several other, more minor ways that you can choose to modify this display using the other controls scattered around the periphery of the window:
Process Popup Menu— By default, statistics are shown for the entire system. You can zero in on a specific application’s behavior by selecting it from this menu. The same set of performance metrics may not be available for both the system-wide and per-process views.
Sample Rate and Buffer Size— By default, performance data is sampled every two seconds and the last sixty seconds worth of samples are displayed. However, these two values can be changed locally with the two text boxes in the bottom-left part of the window, or globally in the preferences (see Sampling Preferences).
Stop Button— If you are done examining a system with BigTop, you can stop the
statsCollector
daemon on that system with the Stop button. Note that once you press this button, you will need to restart BigTop on the system in order to restart the daemon.Clear Button— This clears the buffer used to display data in the graph. You may want to use it after BigTop has been running for awhile.
Copyright © 2012 Apple Inc. All Rights Reserved. Terms of Use | Privacy Policy | Updated: 2012-07-23