760 likes | 942 Vues
Chapter 8 Overview. RMON1 is a MIB Also known as RMON Recall that mib-2 gives info on devices RMONs provide network info RMON1 provides info at link (MAC) layer RMON2 is discussed in chapter 9 Info at network layer and above. Textbook LAN. Probe 1 and probe 2 are RMON probes
E N D
Chapter 8 Overview • RMON1 is a MIB • Also known as RMON • Recall that mib-2 gives info on devices • RMONs provide network info • RMON1 provides info at link (MAC) layer • RMON2 is discussed in chapter 9 • Info at network layer and above Chapter 8 Remote Monitoring (RMON1) 1
Textbook LAN • Probe 1 and probe 2 are RMON probes • Probe 2 is RMON1 only • Probes capture packets in promiscuous mode Chapter 8 Remote Monitoring (RMON1) 2
RMON1 MIB Groups • We’ll consider the following groups • Statistics group, History group, • Alarm group, Host group, • HostTopN group, Matrix group • Filter group, Capture group, • and Event group Chapter 8 Remote Monitoring (RMON1) 3
Statistics Group • Overall statistics Chapter 8 Remote Monitoring (RMON1) 4
History Group Chapter 8 Remote Monitoring (RMON1) 5
Alarm Group Chapter 8 Remote Monitoring (RMON1) 6
Host Group Chapter 8 Remote Monitoring (RMON1) 7
HostTopN Group Chapter 8 Remote Monitoring (RMON1) 8
Matrix Group Chapter 8 Remote Monitoring (RMON1) 9
Filter Group Chapter 8 Remote Monitoring (RMON1) 10
Capture Group Chapter 8 Remote Monitoring (RMON1) 11
Event Group Chapter 8 Remote Monitoring (RMON1) 12
Statistics Group • Simplest RMON1 group • “Counts” all packets detected • Increment counts Chapter 8 Remote Monitoring (RMON1) 13
Control Objects and Tables • Control objects in RMON1 and RMON2 • Specify how data is collected • And whether probe or mgmt station decides • Mgmt station looks at control objects to see if data being collected as desired • Mgmt station can modify control objects • Probe-created control objects generally should not be changed Chapter 8 Remote Monitoring (RMON1) 14
Control Objects and Tables • Suppose mgmt station wants to collect data from a particular subnet • It could create a new row in etherStatsTable • Instead, could use control objects so that only the desired data is collected • Saves storage on the probe • Use SetRequest to set control object values Chapter 8 Remote Monitoring (RMON1) 15
etherStatsTable Control Objects Chapter 8 Remote Monitoring (RMON1) 16
MeterWare • Summary view • Probe 2 info Chapter 8 Remote Monitoring (RMON1) 17
RMON1 on Probe 2 • Object values • Click “Statistics” Chapter 8 Remote Monitoring (RMON1) 18
etherStatsTable Control Objects • Probe 2 has one interface, so only one row • etherStatsOwner = monitor • Agent created and “owns” this row • etherStatsStatus = valid • Agent will store collected data • etherStatsDataSource = ifIndex.1 • Identifier of mib-2 for probe interface to 192.192.192.240 • etherStatsIndex = 1 • First row in table Chapter 8 Remote Monitoring (RMON1) 19
etherStatsTable Control Objects • View select row and start collecting stats • Add add another row • Modify edit current row • Delete delete a row • Help get help (duh!) Chapter 8 Remote Monitoring (RMON1) 20
History Group • A record of what happens over defined sampling intervals • Similar to Statistics Group • Main difference is sampling intervals • History Group includes • etherHistoryTable • historyControlTable Chapter 8 Remote Monitoring (RMON1) 21
History Group • MIB browser view Chapter 8 Remote Monitoring (RMON1) 22
historyControlTable • Column objects Chapter 8 Remote Monitoring (RMON1) 23
historyControlTable • One row for each historyControlInterval • In this case, 30 and 1800 seconds • 120 “buckets” (intervals) for each • So 240 rows in etherHistoryTable Chapter 8 Remote Monitoring (RMON1) 24
historyControlTable Chapter 8 Remote Monitoring (RMON1) 25
etherHistoryTable • Recall, 240 rows in etherHistoryTable Chapter 8 Remote Monitoring (RMON1) 26
etherHistoryTable and historyControlTable Chapter 8 Remote Monitoring (RMON1) 27
Sample History Report • 30 second history report Chapter 8 Remote Monitoring (RMON1) 28
Host Group • Statistics per host • Note statistics and history groups do not relate their stats to hosts • 4 tables: hostControlTable, hostTable, hostTimeTable, hostControl2Table (RMON2) Chapter 8 Remote Monitoring (RMON1) 29
hostControlTable • hostCotrolTableSize • Number of hosts detected so far • hostControlLastDeleteTime • Last “reset” time Chapter 8 Remote Monitoring (RMON1) 30
hostControlTable Chapter 8 Remote Monitoring (RMON1) 31
hostTable • Index object, MAC address pairs • Host address is index object • Index object has address in decimal Chapter 8 Remote Monitoring (RMON1) 32
hostTimeTable • Same objects as hostTable • Different index object • hostTimeCreationOrder, not hostAddress • So that new hosts easily distinguished • Also hostTimeIndex Chapter 8 Remote Monitoring (RMON1) 33
Too Many Hosts? • If too many hosts, probe uses hostTimeCreationOrder to drop hosts • Drop those that have not been used for longest • hostTimeCreationOrder is in hostTimeTable • To be sure it uses valid object identifier, mgmt station checks hostControlLastDeleted • In hostControlTable Chapter 8 Remote Monitoring (RMON1) 34
hostTable Example • Hosts detected on probe 2 subnet Chapter 8 Remote Monitoring (RMON1) 35
HostTopN Group • Rate of change of hostTable info • Sorta like History for specific Host • For each row of hostTopNControlTable • N rows in hostTopNTable (N is configurable) Chapter 8 Remote Monitoring (RMON1) 36
hostTopNControlTable Chapter 8 Remote Monitoring (RMON1) 37
hostTopNControlTable • Index is generated by the probe • Unique for each distribution created Chapter 8 Remote Monitoring (RMON1) 38
hostTopNTable • Note that it’s measuring the change Chapter 8 Remote Monitoring (RMON1) 39
HostTopN in MeterWare • Distribution of top 5 hosts • Based on “in-packets” rate Addresses of hosts with largest number of in-packets Chapter 8 Remote Monitoring (RMON1) 40
HostTopN Addresses • This is not the same as view on previous slide Chapter 8 Remote Monitoring (RMON1) 41
Matrix Group • Host-to-host statistics • Like a 2-d version of Host Chapter 8 Remote Monitoring (RMON1) 42
Matrix Control Tables Chapter 8 Remote Monitoring (RMON1) 43
Matrix Control Tables • matrixControlTable • Same objects as hostControlTable • matrixSDTable and matrixDSTable • Only difference is order of index objects • Source to destination vs destination to source? • If matrixSDTable is A to B, then corresponding matrixDSTable is B to A Chapter 8 Remote Monitoring (RMON1) 44
Matrix Control Tables • matrixSDTable • matrixDSTable Chapter 8 Remote Monitoring (RMON1) 45
Matrix in MeterWare Chapter 8 Remote Monitoring (RMON1) 46
Filter and Capture Groups • These groups usually used together • Capture Group • How probe captures frame • How info is sent from buffer on probe to buffer on mgmt station • Filter Group • To select types of frames to capture • Used to conserve space in buffers Chapter 8 Remote Monitoring (RMON1) 47
Capture Group • Capture group objects Chapter 8 Remote Monitoring (RMON1) 48
Capture Group • bufferControlTable Chapter 8 Remote Monitoring (RMON1) 49
Capture Group • captureBufferTable Chapter 8 Remote Monitoring (RMON1) 50