Download
chapter 8 overview n.
Skip this Video
Loading SlideShow in 5 Seconds..
Chapter 8 Overview PowerPoint Presentation
Download Presentation
Chapter 8 Overview

Chapter 8 Overview

119 Views Download Presentation
Download Presentation

Chapter 8 Overview

- - - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript

  1. Chapter 8 Overview • RMON1 is a MIB • Also known as RMON • Recall that mib-2 gives info on devices • RMONs provide network info • RMON1 provides info at link (MAC) layer • RMON2 is discussed in chapter 9 • Info at network layer and above Chapter 8  Remote Monitoring (RMON1) 1

  2. Textbook LAN • Probe 1 and probe 2 are RMON probes • Probe 2 is RMON1 only • Probes capture packets in promiscuous mode Chapter 8  Remote Monitoring (RMON1) 2

  3. RMON1 MIB Groups • We’ll consider the following groups • Statistics group, History group, • Alarm group, Host group, • HostTopN group, Matrix group • Filter group, Capture group, • and Event group Chapter 8  Remote Monitoring (RMON1) 3

  4. Statistics Group • Overall statistics Chapter 8  Remote Monitoring (RMON1) 4

  5. History Group Chapter 8  Remote Monitoring (RMON1) 5

  6. Alarm Group Chapter 8  Remote Monitoring (RMON1) 6

  7. Host Group Chapter 8  Remote Monitoring (RMON1) 7

  8. HostTopN Group Chapter 8  Remote Monitoring (RMON1) 8

  9. Matrix Group Chapter 8  Remote Monitoring (RMON1) 9

  10. Filter Group Chapter 8  Remote Monitoring (RMON1) 10

  11. Capture Group Chapter 8  Remote Monitoring (RMON1) 11

  12. Event Group Chapter 8  Remote Monitoring (RMON1) 12

  13. Statistics Group • Simplest RMON1 group • “Counts” all packets detected • Increment counts Chapter 8  Remote Monitoring (RMON1) 13

  14. Control Objects and Tables • Control objects in RMON1 and RMON2 • Specify how data is collected • And whether probe or mgmt station decides • Mgmt station looks at control objects to see if data being collected as desired • Mgmt station can modify control objects • Probe-created control objects generally should not be changed Chapter 8  Remote Monitoring (RMON1) 14

  15. Control Objects and Tables • Suppose mgmt station wants to collect data from a particular subnet • It could create a new row in etherStatsTable • Instead, could use control objects so that only the desired data is collected • Saves storage on the probe • Use SetRequest to set control object values Chapter 8  Remote Monitoring (RMON1) 15

  16. etherStatsTable Control Objects Chapter 8  Remote Monitoring (RMON1) 16

  17. MeterWare • Summary view • Probe 2 info Chapter 8  Remote Monitoring (RMON1) 17

  18. RMON1 on Probe 2 • Object values • Click “Statistics” Chapter 8  Remote Monitoring (RMON1) 18

  19. etherStatsTable Control Objects • Probe 2 has one interface, so only one row • etherStatsOwner = monitor • Agent created and “owns” this row • etherStatsStatus = valid • Agent will store collected data • etherStatsDataSource = ifIndex.1 • Identifier of mib-2 for probe interface to 192.192.192.240 • etherStatsIndex = 1 • First row in table Chapter 8  Remote Monitoring (RMON1) 19

  20. etherStatsTable Control Objects • View  select row and start collecting stats • Add  add another row • Modify  edit current row • Delete  delete a row • Help  get help (duh!) Chapter 8  Remote Monitoring (RMON1) 20

  21. History Group • A record of what happens over defined sampling intervals • Similar to Statistics Group • Main difference is sampling intervals • History Group includes • etherHistoryTable • historyControlTable Chapter 8  Remote Monitoring (RMON1) 21

  22. History Group • MIB browser view Chapter 8  Remote Monitoring (RMON1) 22

  23. historyControlTable • Column objects Chapter 8  Remote Monitoring (RMON1) 23

  24. historyControlTable • One row for each historyControlInterval • In this case, 30 and 1800 seconds • 120 “buckets” (intervals) for each • So 240 rows in etherHistoryTable Chapter 8  Remote Monitoring (RMON1) 24

  25. historyControlTable Chapter 8  Remote Monitoring (RMON1) 25

  26. etherHistoryTable • Recall, 240 rows in etherHistoryTable Chapter 8  Remote Monitoring (RMON1) 26

  27. etherHistoryTable and historyControlTable Chapter 8  Remote Monitoring (RMON1) 27

  28. Sample History Report • 30 second history report Chapter 8  Remote Monitoring (RMON1) 28

  29. Host Group • Statistics per host • Note statistics and history groups do not relate their stats to hosts • 4 tables: hostControlTable, hostTable, hostTimeTable, hostControl2Table (RMON2) Chapter 8  Remote Monitoring (RMON1) 29

  30. hostControlTable • hostCotrolTableSize • Number of hosts detected so far • hostControlLastDeleteTime • Last “reset” time Chapter 8  Remote Monitoring (RMON1) 30

  31. hostControlTable Chapter 8  Remote Monitoring (RMON1) 31

  32. hostTable • Index object, MAC address pairs • Host address is index object • Index object has address in decimal Chapter 8  Remote Monitoring (RMON1) 32

  33. hostTimeTable • Same objects as hostTable • Different index object • hostTimeCreationOrder, not hostAddress • So that new hosts easily distinguished • Also hostTimeIndex Chapter 8  Remote Monitoring (RMON1) 33

  34. Too Many Hosts? • If too many hosts, probe uses hostTimeCreationOrder to drop hosts • Drop those that have not been used for longest • hostTimeCreationOrder is in hostTimeTable • To be sure it uses valid object identifier, mgmt station checks hostControlLastDeleted • In hostControlTable Chapter 8  Remote Monitoring (RMON1) 34

  35. hostTable Example • Hosts detected on probe 2 subnet Chapter 8  Remote Monitoring (RMON1) 35

  36. HostTopN Group • Rate of change of hostTable info • Sorta like History for specific Host • For each row of hostTopNControlTable • N rows in hostTopNTable (N is configurable) Chapter 8  Remote Monitoring (RMON1) 36

  37. hostTopNControlTable Chapter 8  Remote Monitoring (RMON1) 37

  38. hostTopNControlTable • Index is generated by the probe • Unique for each distribution created Chapter 8  Remote Monitoring (RMON1) 38

  39. hostTopNTable • Note that it’s measuring the change Chapter 8  Remote Monitoring (RMON1) 39

  40. HostTopN in MeterWare • Distribution of top 5 hosts • Based on “in-packets” rate  Addresses of hosts with largest number of in-packets Chapter 8  Remote Monitoring (RMON1) 40

  41. HostTopN Addresses • This is not the same as view on previous slide Chapter 8  Remote Monitoring (RMON1) 41

  42. Matrix Group • Host-to-host statistics • Like a 2-d version of Host Chapter 8  Remote Monitoring (RMON1) 42

  43. Matrix Control Tables Chapter 8  Remote Monitoring (RMON1) 43

  44. Matrix Control Tables • matrixControlTable • Same objects as hostControlTable • matrixSDTable and matrixDSTable • Only difference is order of index objects • Source to destination vs destination to source? • If matrixSDTable is A to B, then corresponding matrixDSTable is B to A Chapter 8  Remote Monitoring (RMON1) 44

  45. Matrix Control Tables • matrixSDTable • matrixDSTable Chapter 8  Remote Monitoring (RMON1) 45

  46. Matrix in MeterWare Chapter 8  Remote Monitoring (RMON1) 46

  47. Filter and Capture Groups • These groups usually used together • Capture Group • How probe captures frame • How info is sent from buffer on probe to buffer on mgmt station • Filter Group • To select types of frames to capture • Used to conserve space in buffers Chapter 8  Remote Monitoring (RMON1) 47

  48. Capture Group • Capture group objects Chapter 8  Remote Monitoring (RMON1) 48

  49. Capture Group • bufferControlTable Chapter 8  Remote Monitoring (RMON1) 49

  50. Capture Group • captureBufferTable Chapter 8  Remote Monitoring (RMON1) 50