1 / 74

Chapter 8 Overview

Chapter 8 Overview. RMON1 is a MIB Also known as RMON Recall that mib-2 gives info on devices RMONs provide network info RMON1 provides info at link (MAC) layer RMON2 is discussed in chapter 9 Info at network layer and above. Textbook LAN. Probe 1 and probe 2 are RMON probes

mimi
Download Presentation

Chapter 8 Overview

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Chapter 8 Overview • RMON1 is a MIB • Also known as RMON • Recall that mib-2 gives info on devices • RMONs provide network info • RMON1 provides info at link (MAC) layer • RMON2 is discussed in chapter 9 • Info at network layer and above Chapter 8  Remote Monitoring (RMON1) 1

  2. Textbook LAN • Probe 1 and probe 2 are RMON probes • Probe 2 is RMON1 only • Probes capture packets in promiscuous mode Chapter 8  Remote Monitoring (RMON1) 2

  3. RMON1 MIB Groups • We’ll consider the following groups • Statistics group, History group, • Alarm group, Host group, • HostTopN group, Matrix group • Filter group, Capture group, • and Event group Chapter 8  Remote Monitoring (RMON1) 3

  4. Statistics Group • Overall statistics Chapter 8  Remote Monitoring (RMON1) 4

  5. History Group Chapter 8  Remote Monitoring (RMON1) 5

  6. Alarm Group Chapter 8  Remote Monitoring (RMON1) 6

  7. Host Group Chapter 8  Remote Monitoring (RMON1) 7

  8. HostTopN Group Chapter 8  Remote Monitoring (RMON1) 8

  9. Matrix Group Chapter 8  Remote Monitoring (RMON1) 9

  10. Filter Group Chapter 8  Remote Monitoring (RMON1) 10

  11. Capture Group Chapter 8  Remote Monitoring (RMON1) 11

  12. Event Group Chapter 8  Remote Monitoring (RMON1) 12

  13. Statistics Group • Simplest RMON1 group • “Counts” all packets detected • Increment counts Chapter 8  Remote Monitoring (RMON1) 13

  14. Control Objects and Tables • Control objects in RMON1 and RMON2 • Specify how data is collected • And whether probe or mgmt station decides • Mgmt station looks at control objects to see if data being collected as desired • Mgmt station can modify control objects • Probe-created control objects generally should not be changed Chapter 8  Remote Monitoring (RMON1) 14

  15. Control Objects and Tables • Suppose mgmt station wants to collect data from a particular subnet • It could create a new row in etherStatsTable • Instead, could use control objects so that only the desired data is collected • Saves storage on the probe • Use SetRequest to set control object values Chapter 8  Remote Monitoring (RMON1) 15

  16. etherStatsTable Control Objects Chapter 8  Remote Monitoring (RMON1) 16

  17. MeterWare • Summary view • Probe 2 info Chapter 8  Remote Monitoring (RMON1) 17

  18. RMON1 on Probe 2 • Object values • Click “Statistics” Chapter 8  Remote Monitoring (RMON1) 18

  19. etherStatsTable Control Objects • Probe 2 has one interface, so only one row • etherStatsOwner = monitor • Agent created and “owns” this row • etherStatsStatus = valid • Agent will store collected data • etherStatsDataSource = ifIndex.1 • Identifier of mib-2 for probe interface to 192.192.192.240 • etherStatsIndex = 1 • First row in table Chapter 8  Remote Monitoring (RMON1) 19

  20. etherStatsTable Control Objects • View  select row and start collecting stats • Add  add another row • Modify  edit current row • Delete  delete a row • Help  get help (duh!) Chapter 8  Remote Monitoring (RMON1) 20

  21. History Group • A record of what happens over defined sampling intervals • Similar to Statistics Group • Main difference is sampling intervals • History Group includes • etherHistoryTable • historyControlTable Chapter 8  Remote Monitoring (RMON1) 21

  22. History Group • MIB browser view Chapter 8  Remote Monitoring (RMON1) 22

  23. historyControlTable • Column objects Chapter 8  Remote Monitoring (RMON1) 23

  24. historyControlTable • One row for each historyControlInterval • In this case, 30 and 1800 seconds • 120 “buckets” (intervals) for each • So 240 rows in etherHistoryTable Chapter 8  Remote Monitoring (RMON1) 24

  25. historyControlTable Chapter 8  Remote Monitoring (RMON1) 25

  26. etherHistoryTable • Recall, 240 rows in etherHistoryTable Chapter 8  Remote Monitoring (RMON1) 26

  27. etherHistoryTable and historyControlTable Chapter 8  Remote Monitoring (RMON1) 27

  28. Sample History Report • 30 second history report Chapter 8  Remote Monitoring (RMON1) 28

  29. Host Group • Statistics per host • Note statistics and history groups do not relate their stats to hosts • 4 tables: hostControlTable, hostTable, hostTimeTable, hostControl2Table (RMON2) Chapter 8  Remote Monitoring (RMON1) 29

  30. hostControlTable • hostCotrolTableSize • Number of hosts detected so far • hostControlLastDeleteTime • Last “reset” time Chapter 8  Remote Monitoring (RMON1) 30

  31. hostControlTable Chapter 8  Remote Monitoring (RMON1) 31

  32. hostTable • Index object, MAC address pairs • Host address is index object • Index object has address in decimal Chapter 8  Remote Monitoring (RMON1) 32

  33. hostTimeTable • Same objects as hostTable • Different index object • hostTimeCreationOrder, not hostAddress • So that new hosts easily distinguished • Also hostTimeIndex Chapter 8  Remote Monitoring (RMON1) 33

  34. Too Many Hosts? • If too many hosts, probe uses hostTimeCreationOrder to drop hosts • Drop those that have not been used for longest • hostTimeCreationOrder is in hostTimeTable • To be sure it uses valid object identifier, mgmt station checks hostControlLastDeleted • In hostControlTable Chapter 8  Remote Monitoring (RMON1) 34

  35. hostTable Example • Hosts detected on probe 2 subnet Chapter 8  Remote Monitoring (RMON1) 35

  36. HostTopN Group • Rate of change of hostTable info • Sorta like History for specific Host • For each row of hostTopNControlTable • N rows in hostTopNTable (N is configurable) Chapter 8  Remote Monitoring (RMON1) 36

  37. hostTopNControlTable Chapter 8  Remote Monitoring (RMON1) 37

  38. hostTopNControlTable • Index is generated by the probe • Unique for each distribution created Chapter 8  Remote Monitoring (RMON1) 38

  39. hostTopNTable • Note that it’s measuring the change Chapter 8  Remote Monitoring (RMON1) 39

  40. HostTopN in MeterWare • Distribution of top 5 hosts • Based on “in-packets” rate  Addresses of hosts with largest number of in-packets Chapter 8  Remote Monitoring (RMON1) 40

  41. HostTopN Addresses • This is not the same as view on previous slide Chapter 8  Remote Monitoring (RMON1) 41

  42. Matrix Group • Host-to-host statistics • Like a 2-d version of Host Chapter 8  Remote Monitoring (RMON1) 42

  43. Matrix Control Tables Chapter 8  Remote Monitoring (RMON1) 43

  44. Matrix Control Tables • matrixControlTable • Same objects as hostControlTable • matrixSDTable and matrixDSTable • Only difference is order of index objects • Source to destination vs destination to source? • If matrixSDTable is A to B, then corresponding matrixDSTable is B to A Chapter 8  Remote Monitoring (RMON1) 44

  45. Matrix Control Tables • matrixSDTable • matrixDSTable Chapter 8  Remote Monitoring (RMON1) 45

  46. Matrix in MeterWare Chapter 8  Remote Monitoring (RMON1) 46

  47. Filter and Capture Groups • These groups usually used together • Capture Group • How probe captures frame • How info is sent from buffer on probe to buffer on mgmt station • Filter Group • To select types of frames to capture • Used to conserve space in buffers Chapter 8  Remote Monitoring (RMON1) 47

  48. Capture Group • Capture group objects Chapter 8  Remote Monitoring (RMON1) 48

  49. Capture Group • bufferControlTable Chapter 8  Remote Monitoring (RMON1) 49

  50. Capture Group • captureBufferTable Chapter 8  Remote Monitoring (RMON1) 50

More Related