Chapter 12 NM Tools and Systems Network Management

Chapter 12 NM Tools and Systems Network Management: Principles and Practice © Mani Subramanian 2000 12 -1

Chapter 12 Tools Catalog Notes • Developed by IETF Working Group on NOCTools • Update available via • news: comp. networks. noctools • ftp: //wuarchive. wustl. edu/doc/noctools Network Management: Principles and Practice © Mani Subramanian 2000 12 -2

Chapter 12 BERT Notes • Physical layer monitoring tool • Generates and detects bits • Bit error rate (BER) is calculated by comparing the transmitted pattern with received pattern • Loop back is a feature of the modem • BER can be measured for a modem or two modems and the link in between Network Management: Principles and Practice © Mani Subramanian 2000 12 -3

Chapter 12 BERT in HFC / LAN Environment Notes • Smart. Bits used in LAN environment • Used for error measurement at physical and data layers • Source and destination addresses - MAC / IPin software • Enables measurement of modems in a shared medium environment Network Management: Principles and Practice © Mani Subramanian 2000 12 -4

Chapter 12 Cable Modem Error Rate Notes • Noise can be injected at various points in the transmission and error rates can be measured • Noise in upstream is very sensitive to noise because of low frequency band • Notice the sharp curve before loss of sync at high error rate • Modem goes out of sync within a db range. Network Management: Principles and Practice © Mani Subramanian 2000 12 -5

Chapter 12 Network Software Tools • Status monitoring tools • Traffic monitoring tools • Route monitoring tools Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -6

Chapter 12 Status Monitoring Tools Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -7

Chapter 12 if. Config • Used to assign/read an address to/of an interface • Option -a is to display all interfaces • Notice two interface loop-back (lo 0) and Ethernet (hme 0) Notes Example: Network Management: Principles and Practice © Mani Subramanian 2000 12 -8

Chapter 12 Ping • Most basic tool for internet management • Based on ICMP ECHO_REQUEST message • Available on all TCP/IP stacks • Useful for measuring connectivity • Useful for measuring packet loss • Can do auto-discovery of TCP/IP equipped stations on single segment Notes Example: % ping 205. 152. 8. 138 PING 205. 152. 8. 138 (205. 152. 8. 138): 56 data bytes 64 bytes from 205. 152. 8. 138: icmp_seq=0 ttl=17 time=14. 8 ms 64 bytes from 205. 152. 8. 138: icmp_seq=1 ttl=17 time=20. 2 ms 64 bytes from 205. 152. 8. 138: icmp_seq=2 ttl=17 time=15. 7 ms 64 bytes from 205. 152. 8. 138: icmp_seq=3 ttl=17 time=21. 6 ms 64 bytes from 205. 152. 8. 138: icmp_seq=4 ttl=17 time=20. 0 ms --- 205. 152. 8. 138 ping statistics --5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 14. 8/18. 4/21. 6 ms Network Management: Principles and Practice © Mani Subramanian 2000 12 -9

Chapter 12 nslookup • An interactive program for querying Internet Domain Name System servers • Converts a hostname into an IP address and vice versa querying DNS • Useful to identify the subnet a host or node belongs to • Lists contents of a domain, displaying DNS record • Available with BSD UNIX; FTP from uunet. uu. net • Available in Windows NT Notes Example: Network Management: Principles and Practice © Mani Subramanian 2000 12 -10

Chapter 12 Domain Name Groper: dig Used to gather lots of information on hosts from DNS Notes Example: noc 2% dig noc 2 ; <<>> Di. G 2. 2 <<>> noc 2 ; ; res options: init recurs defnam dnsrch ; ; got answer: ; ; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6 ; ; flags: qr aa rd ra; Ques: 1, Ans: 0, Auth: 1, Addit: 0 ; ; QUESTIONS: ; ; noc 2, type = A, class = IN ; ; AUTHORITY RECORDS: . 86400 SOA A. ROOT-SERVERS. NET. hostmaster. INTERNIC. NET. ( 1998091500 ; serial 1800 ; refresh (30 mins) 900 ; retry (15 mins) 604800 ; expire (7 days) 86400 ) ; minimum (1 day) ; ; Total query time: 141 msec ; ; FROM: noc 2. btc. gatech. edu to SERVER: default -- 199. 77. 147. 28 ; ; WHEN: Wed Sep 16 21: 42: 11 1998 ; ; MSG SIZE sent: 22 rcvd: 95 Network Management: Principles and Practice © Mani Subramanian 2000 12 -11

Chapter 12 Host • Command: host • Displays host names using DNS • Available from ftp. nikhef. nl: /pub/network/host. tar. Z Notes Example: % host -a sun 4 -gw. cc. gatech. edu Trying null domain rcode = 0 (Success), ancount=1 The following answer is not authoritative: sun 4 -gw. cc. gatech. edu 85851 IN A 130. 207. 111. 100 Network Management: Principles and Practice © Mani Subramanian 2000 12 -12

Chapter 12 Traffic Monitoring Tools Notes • ping and bing used to measure the propagation characteristics of the transmission path • etherfind, snoop, and tcpdump puts the network interface in promiscuous mode and logs the data Network Management: Principles and Practice © Mani Subramanian 2000 12 -13

Chapter 12 Packet Loss Measurement • Command: ping • Many options available • Implementation varies from system to system Notes Example: Network Management: Principles and Practice © Mani Subramanian 2000 12 -14

Chapter 12 bing • Used to determine throughput of a link • Uses icmp_echo utility • Knowing packet size and delay, calculates bandwidth • bing L 1 and L 2 and the difference yields the bandwidth of link L 1 -L 2 • Bandwidth of link L 1 -L 2 could be higher than the intermediate links. Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -15

Chapter 12 snoop • Puts a network interface in promiscuous mode • Logs data on • Protocol type • Length • Source address • Destination address • Reading of user data limited to superuser Notes Example: Options: -d for device interface and -c for counts Network Management: Principles and Practice © Mani Subramanian 2000 12 -16

Chapter 12 tcpdump • Command: tcpdump • Interprets and prints headers for: Ethernet IP ICMP TCP UDP NFS ND ARP Appletalk • Useful for examining and evaluating the TCP based traffic • Available in UNIX system; FTP from ftp. ee. lbl. gov Notes Example: SNMP message Network Management: Principles and Practice © Mani Subramanian 2000 12 -17

Chapter 12 Network Routing Tools Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -18

Chapter 12 Network Status netstat -a UDP Local Address State ----------*. route Idle *. * Unbound *. sunrpc Idle *. * Unbound *. 32771 Idle *. 32773 Idle TCP Local Address Remote Address Swind Send-Q Rwind Recv-Q State -------------------- ------*. * 0 0 IDLE *. sunrpc *. * 0 0 LISTEN *. 39136 *. * 0 0 IDLE *. 32771 *. * 0 0 LISTEN *. 32772 *. * 0 0 LISTEN *. ftp *. * 0 0 LISTEN *. telnet *. * 0 0 LISTEN Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -19

Chapter 12 Route Tracing • Command: traceroute (UNIX) / tracert (MS TIME-EXCEED error report • Available in most UNIX OS • Windows) • ICMP Also available from uc. msc. unm. edu • Discovers route taken by packets from source to destination • Useful for diagnosing route failures • Useful for detecting bottleneck nodes Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -20

Chapter 12 Trace Route Sample 1 Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -21

Chapter 12 Trace Route Sample 2 Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -22

Chapter 12 Network Management Tools • SNMP command tools • MIB Walk • snmpsniff Notes • Many tools available on public domain. See http: //www. btc. gatech. edu/net/management Network Management: Principles and Practice © Mani Subramanian 2000 12 -23

Chapter 12 SNMP Command Tools • snmptest • snmpgetnext • snmpset • snmptrap • snmpwalk • snmpnetstat Notes • Test tool is an interactive tool to get values of several managed objects, one at a time. • Get, Get-next and Set are the SNMP commands that we learned under SNMP architecture / messages. Execution of these will return an SNMP Response message. • SNMPWalk uses snmpgetnext to trace the entire MIB. • Network status command is used to test the status of network connections of a host. Network Management: Principles and Practice © Mani Subramanian 2000 12 -24

Chapter 12 SNMP Get Command % snmpget noc 5. btc. gatech. edu public system. sys. Descr. 0 = OCTET STRING: "Sun. OS noc 5 5. 6 Generic_105181 -03 sun 4 u" Notes • Note that the value 0 at the end of the object id indicates that it is a single valued scalar. Network Management: Principles and Practice © Mani Subramanian 2000 12 -25

Chapter 12 SNMP Get Next Command % snmpgetnext noc 5. btc. gatech. edu public interfaces. if. Table. if. Entry. if. Index. 1 interfaces. if. Table. if. Entry. if. Index. 2 = INTEGER: 2 Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -26

Chapter 12 SNMP Set Command • Command: snmpset host community Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -27

Chapter 12 Network Status • Command: snmpnetstat host community • Useful for finding status of network connections % snmpnetstat noc 5 public Active Internet Connections Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp 0 0 *. * CLOSED tcp 0 0 localhost. 46626 localhost. 3456 ESTABLISHED tcp 0 0 localhost. 46626 localhost. 3712 ESTABLISHED tcp 0 0 localhost. 46626 localhost. 3968 ESTABLISHED tcp 0 0 localhost. 46626 localhost. 4224 ESTABLISHED tcp 0 0 localhost. 3456 localhost. 46626 ESTABLISHED tcp 0 0 localhost. 3712 localhost. 46626 ESTABLISHED tcp 0 0 localhost. 3968 localhost. 46626 ESTABLISHED tcp 0 0 localhost. 4224 localhost. 46626 ESTABLISHED tcp 0 0 noc 5. 41472 noc 5. 4480 ESTABLISHED tcp 0 0 noc 5. 41472 noc 5. 4736 ESTABLISHED tcp 0 0 noc 5. 4480 noc 5. 41472 ESTABLISHED tcp 0 0 noc 5. 4736 noc 5. 41472 ESTABLISHED Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -28

Chapter 12 SNMP Browser • Command: snmpwalk host community [variable name] • Uses Get Next Command • Presents MIB Tree Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -29

Chapter 12 SNMP Sniff • snmpsniff -I interface • A tool in Linux / Free. BSD environment • Puts the interface in promiscuous mode and captures snmp PDUs. • Similar to tcpdump Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -30

Chapter 12 Protocol Analyzer Notes • Analyzes data packets on any transmission line including LAN • Measurements made locally or remotely • Probe (data capture device) captures data and transfers to the protocol analyzer (no storage) • Data link between probe and protocol analyzer either dial-up or dedicated link or LAN • Protocol analyzer analyzes data at all protocol levels Network Management: Principles and Practice © Mani Subramanian 2000 12 -31

Chapter 12 RMON Probe Notes • Network Associates Sniffer • Stand-alone and Networked • HP Net. Metrix / HP Open. View • Communication between probe and analyzer is using SNMP • Data gathered and stored for an extended period of time and analyzed later • Used for gathering traffic statistics and used for configuration management for performance tuning Network Management: Principles and Practice © Mani Subramanian 2000 12 -32

Chapter 12 Network Monitoring with RMON Probe Network Management: Principles and Practice © Mani Subramanian 2000 12 -33

Chapter 12 Network Statistics • Protocol Analyzers • RMON Probe / Protocol analyzer • MRTG (Multi router traffic grouper) • Home-grown program using tcpdump Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -34

Chapter 12 Traffic Load: Source Network Management: Principles and Practice © Mani Subramanian 2000 12 -35

Chapter 12 Traffic Load: Destination Network Management: Principles and Practice © Mani Subramanian 2000 12 -36

Chapter 12 Traffic Load: Conversation Network Management: Principles and Practice © Mani Subramanian 2000 12 -37

Chapter 12 Protocol Distribution Network Management: Principles and Practice © Mani Subramanian 2000 12 -38

Chapter 12 MRTG • Multi Router Traffic Grouper (Oeticker and Rand) • www. ee. ethz. ch/stats/mrtg/ • Generates graphic presentation of traffic on Web • Daily view • Weekly view • Monthly view • Yearly view Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -39

Chapter 12 Enterprise Management • Management of data transport • IBM Netview, Sun Solstice, HP Open. View, Cabletron Spectrum • Systems management • CA Unicenter and Tivoli TME • Network and systems management • Partnerships • Telecommunications management • TMN, Operations systems • Service management and policy management Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -40

Chapter 12 NMS Components Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -41

Chapter 12 NMS Components Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -42

Chapter 12 Multi-NMS Configuration Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -43

Chapter 12 Network Configuration • Configure agents • Configure management systems • Community administration parameters • Community name • MIB view • Trap targets • Auto-discovery : Scope Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -44

Chapter 12 Network Monitoring • By polling • By traps • Failure indicated by pinging or traps • Ping frequency optimized for network load vs. quickness of detection • trap messages: linkdown, link. Up, cold. Start, warm. Start, etc. • Network topology discovered by auto-discovery • Monitoring done at multiple levels - “drilling” Notes Network Management: Principles and Practice © Mani Subramanian 2000 12 -45

Chapter 12 Global View Network Management: Principles and Practice © Mani Subramanian 2000 12 -46

Chapter 12 Domain View Network Management: Principles and Practice © Mani Subramanian 2000 12 -47

Chapter 12 Interfaces View Network Management: Principles and Practice © Mani Subramanian 2000 12 -48

Chapter 12 Segment View Network Management: Principles and Practice © Mani Subramanian 2000 12 -49

Chapter 12 Commercial NMS & System Solutions • Low End NMS • Enterprise NMS • Centralized • Distributed • System and Network Management Notes • Enterprise NMS • Hewlett-Packard Open. View • Sun. Net Manager • IBM Netview • Cabletron Spectrum Enterprise Manager • Low End NMS • SNMPc • System & Network Management • Computer Associates Unicenter TNG • Tivoli TME / Netview • Big Brother • Spong Network Management: Principles and Practice © Mani Subramanian 2000 12 -50

Chapter 12 HP Open. View Network Node Manager • Auto-discovery and mapping • Drill-down views • Fault monitoring • Event monitoring • MIB Browser • SNMP tools • Traffic monitoring • 3 rd party integration Notes • Open. View is Hewlett-Packard’s platform for Network Management • Many NMSs use Open. View Platform: Cisco. Works, CA TNG, Transcend • NNM is HP NMS on Open. View • Drill-down Map Hierarchy Network Management: Principles and Practice © Mani Subramanian 2000 12 -51

Chapter 12 HP Open. View Platform Notes • Open, modular, and distributed architecture • Object oriented design; TNM can be implemented • Open API-based architecture • Easy vendor-specific NMS integration by 3 rd party Network Management: Principles and Practice © Mani Subramanian 2000 12 -52

Chapter 12 Open. View Distributed Platform Notes • Postmaster integrates all management services - multiple protocol stacks: SNMP, CMIP, TCP/IP • Routing enables distributed message routing • Event services control event and alarm messages • Management services interface with management applications via APIs Network Management: Principles and Practice © Mani Subramanian 2000 12 -53

Chapter 12 Distributed Open. View NNMs Notes • An enterprise network managed by multiple NMSs • Collection stations could be regular NNMs or entry-NNMs (100 nodes) • Filtered information sent to Mo. M (top level NNM) reduces traffic • Mo. M integrates and presents enterprise data Network Management: Principles and Practice © Mani Subramanian 2000 12 -54

Chapter 12 Cabletron Spectrum Notes • Distributed architecture • Presentation only on Spectro. GRAPH • Spectro. SERVER and Spectro. GRAPH can reside in a single processor • Spectro. GRAPH could be switched between Spectro. SERVERs Network Management: Principles and Practice © Mani Subramanian 2000 12 -55