GIMS Tutorial - GEC 12 Packet Capture for GENI

1. GIMS Tutorial - GEC 12Packet Capture for GENI Charles Thomas & Dongchan Kim UniversityofWisconsin - Madison cthomas@wisc.edu dkim24@wisc.edu

2. GIMS Tutorial • Follow along (cut and paste commands): http://gims.wail.wisc.edu/docs/Tutorial.html • Start your VirtualBox Tutorial image.

3. Tutorial Outline Introduction to GIMS. Setting up for using GIMS. Creating a capture filter. Creating an RSpec. Creating a slice and starting the experiment

4. Tutorial Outline (Cont.) Tour of the monitoring GUI tools. Pause/Restart traffic capture. Stop and teardown the experiment. Post-experiment data analysis. System capabilities. Future directions / Q&A

5. What is GIMS? GENI Instrumentation and Measurement Systems Collaboration between University of Wisconsin (Barford), Colgate University (Sommers) and Boston University (Crovella) High-speed packet capture system integrated with ProtoGENI. Infrastructure could be modified to support other types of instrumentation.

6. GIMS Architecture • ProtoGENI Scripts • Allow us to control the capture system. • GIMS Backend • Coordinates communication. • MySQL Database • Capture Device • Daemon & hardware • Web-based GUIs • Device and configuration control, real-time monitoring, experiment results.

8. GIMS Database • MySQL • Stores information about: • Experiments • Capture Devices • Experiment/Device pairings • Device Configurations • Experiment Results • Device Statistics

10. ‘capd’, the GIMS Capture Daemon XML/RPC control structures Supports a wide variety of hardware. libpcap support Flow aggregation based on IPFIX CryptoPan anonymization Sampling (every N, randomized) Remote storage (SSH, Amazon S3)

12. ProtoGENI Scripts

13. Current Functionality • CreateSliver • Create new experiment • Load config into device • Start capture • StopSliver • Pause capture • StartSliver • Restart capture after pause • DeleteSlice • Shutdown capture activities and cleanup.

15. Installing the ProtoGENI Scripts

16. M2crypto > sudo apt-get install python-m2crypto

17. Test Scripts > wget http://www.emulab.net/downloads/protogeni-tests.tar.gz

18. Test Scripts >mkdir test_scripts; >tar xzf protogeni-tests.tar.gz –C test_scripts;

19. Emulab Account Click ‘Request Account’ button on http://www.schooner.wail.wisc.edu

20. Emulab Account Choose the corresponding option

21. Emulab Account Fill out the form

22. Emulab Account Click the ‘Submit’ button when done

23. SSL Certificate Click ‘Login’ button

24. SSL Certificate Login with your account

25. SSL Certificate Click ‘Generate SSL Cert’ in the left column

26. SSL Certificate Type the PassPhrase for your certificate and Emulab Password

27. SSL Certificate Click ‘Download’ to save your SSL Certificate

28. SSL Certificate Save the SSL Certificate as ‘$HOME/.ssl/encrypted.pem’

29. SSL Certificate Create a ‘$HOME/.ssl/password’ file containing the PassPhrase for your certificate

30. SSH Key > cd $HOME/.ssl; ssh-keygen –f protogeni-key

31. SSH Key Click ‘Edit SSH Keys’ on the Emulab login page

32. SSH Key Add the public key and Emulab password at the bottom of the web page

33. SSH Key The keys added to your account

34. Creating a Capture Filter http://gims.wail.wisc.edu/cgi-bin/GIMSControl.cgi

36. Setup Capture Filter • Config Name: GEC12_<name> • Source IP address: 10.1.1.3 • Destination IP address: 10.1.1.2 • Source port number: 48060 • Destination port number: 5001 • Protocol: UDP

37. Setup Capture Filter (Cont.) • SSH User: gimsusr • SSH Host: ops.schooner.wail.wisc.edu • SSH Port: 22 • SSH Path: /proj/GEC12/data • SSH Private Key: foo • Rollover Interval: 1 minute • Sampling: everyN • Param: 5

38. Creating an Rspec For Your Experiment cd ~geni/Tutorials/GIMS/ cp GimsMSNProduction.rspec GEC12.rspec vi GEC12.rspec

40. Save as “GEC12.rspec” When you’re done editing, simply type “ZZ”

41. cd ~geni/Tutorials/GIMS ls -l ./registerslice.py -n <slicename> ./createsliver.py -m https://gims.wail.wisc.edu/protogeni/xmlrpc/cm -d -n <slicename> GEC12.rspec Creating a Slice and Starting the Experiment

42. GIMS Monitoring Tools • gimsd - Device monitor • LogViewer.cgi • Results.cgi

43. Sits in a loop looking for running experiments. • If it finds any, queries the capture device via SNMP to get information on the device status (Only queries each device once.), storing results in DB. • Calls ‘GetExperimentStats’ for each running experiment and stores the results in the database. • Runs every 15 seconds (configurable). ‘gimsd’ - The GIMS Hardware Monitoring Daemon

48. ./sliveraction.py -m https://gims.wail.wisc.edu/protogeni/xmlrpc/cm -d -n <slicename> stop ./sliveraction.py -m https://gims.wail.wisc.edu/protogeni/xmlrpc/cm -d -n <slicename> start Pause/Restart Capture

49. Stopping and Tearing Down the Experiment ./deleteslice.py -m https://gims.wail.wisc.edu/protogeni/xmlrpc/cm -d -n <slicename>

50. Post-Experiment Analysis