Well, prepare to be shocked. Aternity, at least the version we purchased, won't breakdown anything inside app or db, but will breakdown everything else, end to end. Have learned we have another tool - OpNet, which can get into the app. Have also learned that the session data provided by our team is from Tomcat log, not CA PPM cmn_session tables - therefore, the data file is recording end-to-end. Therefore, confident that the variance is not from the DB, but somewhere between user and DB.
Have review planned for Monday - should be able to identify, with Aternity, whether variation is from outside or inside app - then, if inside, we will throw OpNet at it. If outside app, will take it off the possible root cause list...
Only possible hiccup might be that Tomcat records all user activity, while Aternity is only monitoring specified resources and specified pages - the net might not be broad enough in Aternity to capture the variation seen in Tomcat data. If not, will have to consider adding more resources to the tracking list.