Protocol Analyzer Capture and Triage

What this topic teaches

Protocol Analyzer Capture and Triage turns PCIe/CXL theory into production-grade review decisions. Analyzers decode TLP/DLLP/LTSSM events with timestamps for cross-layer correlation. Effective triage chains analyzer traces with register dumps, firmware logs, and workload reproducers.

The main objective is to identify where the first loss starts in the memory service path, prove it with reproducible traces, and close with the smallest owner-controlled fix.

Senior PCIe/CXL work is less about isolated register tuning and more about cross-layer causality: traffic shape, TLP legality, credit accounting, LTSSM stability, PHY margin, and field reliability must agree before signoff.

Senior-engineer framing question

When Time-to-root-cause, capture trigger accuracy, and trace completeness score regresses, can you prove whether the first failure is locality collapse, timing-window pressure, scheduler fairness loss, lane-margin drift, or reliability policy overhead?

PCIe/CXL PROTOCOL STACK - Protocol Analyzer Capture and Triage

[Application / Driver]
        |
        v
[Transaction Layer]  TLP headers, routing, ordering, completions
        |
        v
[Data Link Layer]    seq/ack, LCRC, replay buffer
        |
        v
[Physical Layer]     encoding, scrambling, LTSSM, lanes
        |
        v
[Link Partner]

Focus: link physical state changes to service-level latency and bandwidth outcomes
Metric tracked: Time-to-root-cause, capture trigger accuracy, and trace completeness score

Architecture and timing visuals

Draw the mechanism before tuning knobs. These visuals are optimized for design reviews, bring-up triage, and interview whiteboards.

Analyzer trigger workflow

ANALYZER TRIAGE

trigger on AER/NAK/LTSSM change
  -> capture TLP/DLLP window
  -> correlate register dump
  -> reproduce with workload slice

Array hierarchy context

PCIe TOPOLOGY MAP - Protocol Analyzer Capture and Triage

[Root Complex]
    |
    +-- Root Port 0 ---- [Switch] ---- [Endpoint A]
    |                      |
    |                      +---- [Endpoint B]
    +-- Root Port 1 ---- [CXL Type 3 Expander]

BDF routing + bridge windows + HDM decode define reachability.

Command timing context

LTSSM TIMELINE - Protocol Analyzer Capture and Triage

time --->  t0      t1       t2        t3       t4
state      Detect  Polling  Config    L0       Recovery
ordered    -       TS1      TS2       TLP/DLLP TS1/TS2
service    down    train    align     active   retrain

Key checks:
- Detect -> Polling timeout
- Config completion before L0
- Recovery trigger correlation with errors

Controller queue context

CREDIT FLOW VIEW - Protocol Analyzer Capture and Triage

VC0 posted credits:     [####------] 4/10 available
VC0 non-posted credits: [######----] 6/10 available
VC0 completion credits: [###-------] 3/10 available

Stall signature:
- posted credit exhaustion -> write TLP backpressure
- completion credit exhaustion -> read latency cliff

Ownership layers

OWNERSHIP LAYERS - Protocol Analyzer Capture and Triage

layer              owner
-----------------  ----------------
protocol/RTL       silicon debug owner
PHY/SI             PHY + SI/PI owner
firmware/OS        FW + driver owner
validation         compliance + post-silicon

Evidence to collect before changing knobs

Fast closure comes from complete evidence packets, not from isolated counter wins. Every recommendation should carry a metric, artifact, owner, and rollback-safe validation plan.

• Primary metric: Time-to-root-cause, capture trigger accuracy, and trace completeness score.

• Primary artifact: Analyzer trace bundle, trigger config, and triage decision tree.

• Owners to include: silicon debug owner, validation owner, driver owner, bring-up engineer.

• One reproducible failing traffic slice plus one stable comparator capture.

• One command legality timeline that isolates first failing transition.

• One margin or reliability packet when PHY or RAS behavior is implicated.

Bandwidth-latency operating lens

BANDWIDTH/LATENCY CURVE - Protocol Analyzer Capture and Triage

throughput
    ^
    |     ****  (peak Gen5 x16)
    |   **    **
    |  *        *  <- tail latency inflation
    +----------------> offered load

Metric: Time-to-root-cause, capture trigger accuracy, and trace completeness score

Root-cause decision tree

ROOT CAUSE TREE - Protocol Analyzer Capture and Triage

symptom: Time-to-root-cause, capture trigger accuracy, and trace completeness score
  |-- LTSSM / PHY margin
  |-- credit / ordering stall
  |-- coherency / HDM config
  |-- RAS / poison handling
  |-- enumeration / resource conflict

Key takeaways

• Prove first failing transition before touching broad tuning policies.

• Tie command-level behavior to application-visible QoS outcomes.

• Close with accountable owner, rollback criteria, and corner validation.

Common pitfalls

• Optimizing average GB/s while p99 latency and fairness degrade.

• Comparing traces without fixed firmware, timing profile, and thermal tags.

• Declaring closure without reliability and retrain robustness checks.

PCIe/CXL deep dive

Debug and compliance turn protocol knowledge into reproducible signoff with analyzer discipline and regression gates.

Concept diagram

DEBUG CLOSURE LOOP

trigger capture -> hypothesis -> bounded fix -> compliance/perf replay

Metric graph

TRIAGE TIME SHARE

LTSSM/PHY           ██████
TLP/credit          ████
enumeration         ███

Reports and artifacts

• analyzer trace bundle

• LTSSM heatmap

• compliance matrix

• performance tuning changelog

Mini case study

Compliance pass at room temperature missed Gen5 EQ regression that appeared only in thermal chamber replay.

Debug branches

• Use error-qualified analyzer triggers

• Replay compliance subset on PHY/FW changes

• Tune MPS/MRRS against production traffic mix

Senior review question

Ask: which latency, bandwidth, and reliability evidence proves this PCIe/CXL topic is closed under real traffic?

Key takeaways

• Always tie controller and PHY counter shifts to application latency and throughput outcomes.

• Lock firmware timing profile, thermal condition, and DIMM state before comparing PCIe/CXL captures.

Common pitfalls

• Chasing peak bandwidth while ignoring p99 latency and fairness tails.

• Changing timing guardbands without separating SI noise from scheduling issues.

• Declaring closure without reliability gates, fault injection, and regression replay.