1. MJ07/07041 Session 07 RMON Adapted from Network Management: Principles and Practice © Mani Subramanian 2000 and solely used for Network Management course at Universitas Bina Nusantara

2. MJ07/07042 RMON Components RMON Probe Data gatherer - a physical device Data analyzer Processor that analyzes data RMON Remote Network Monitoring Standards-based network management protocol Allows network information to be gathered at a single workstation Defines additional MIBs to provide a richer set of data about network usage Data Analyzer RMON Probe BACKBONE NETWORK SNMP Traffic SNMP Traffic LAN Router

3. MJ07/07043 Network with RMONs FDDI Backbone Network Remote Token Ring LAN NMS Router Bridge Token Ring Probe Ethernet Probe Local LAN Router with RMON Router Remote FDDI LAN FDDI Probe

4. MJ07/07044 RMON Benefits Monitors and analyzes locally and relays data; less load on the network Needs no direct visibility by NMS; more reliable information Permits monitoring on a more frequent basis and hence faster fault diagnosis Increases productivity for administrators

5. MJ07/07045 RMON MIB rmonConformance (20) probeConfig (19) usrHistory (18) rmon (mib-2 16) statistics (1) history (2) alarm (3) host (4) hostTopN (5) matrix (6) filter (7) capture (8) event (9) a1Matrix (17) a1Host (16) n1Matrix (15) n1Host (14) addressMap (13) protocolDist (12) protocolDir (11) Token Ring (10) RMON1 Extension RMON1RMON2

6. MJ07/07046 RMON1: Ethernet RMON groups rmon 1 - rmon 9 RMON1: Extension: Token ring extension rmon 10 RMON2: Higher layers (3-7) groups rmon 11 - rmon 20 RMON MIB

7. MJ07/07047 RMON Groups and Functions Host and Conversation Statistics Token Ring Statistics Ethernet Statistics Filter Group Remotely Monitored Network Data Gathering Packet Filtering Channel Filtering Packet Capture Network Manager Alarm Generation Event Generation Host Statistics HostTopN Statistics Ethernet Statistics Ethernet History Token Ring Statistics Token Ring History Matrix Statistics History Control History Control

8. MJ07/07048 Probe gathers data Functions Statistics on Ethernet, token ring, and hosts / conversations Filter group filters data prior to capture of data Generation of alarms and events RMON Groups and Functions

9. MJ07/07049 RMON1 MIB Groups & Tables

10. MJ07/070410 RMON1 MIB Groups & Tables

11. MJ07/070411 Ten groups divided into three categories Statistics groups (rmon 1, 2, 4, 5, 6, and 10) Event reporting groups (rmon 3 and 9) Filter and packet capture groups(rmon 7 and 8) Groups with “2” in the name are enhancements with RMON2 RMON1 MIB Groups & Tables

12. MJ07/070412 Control and Data Tables data Index data Index control TableSize controlTable controlEntry control Owner control Status dataEntry data AddlIndex control DataSource control Other control TableSize control Owner control Status control DataSource control Other data Other data AddlIndex data Other data Index data AddlIndex data Other data Index data AddlIndex data Other dataTable control Index control Index Control table used to set the instances of data rows in the data table Values of data index and control index are the same

13. MJ07/070413 Host Top N Group Example HostTopN 0100200300400 Host 10 Host 9 Host 8 Host 7 Host 6 Host 5 Host 4 Host 3 Host 2 Host 1 Giga Octets

14. MJ07/070414 Filter Group filter Channel Index = 2 Filter Index = 2 Filter Index = 1 channel Index =1 channelTable channelEntry channel IfIndex = 1 channel Accept Type filterEntry filter Channel Index = 1 channel Data Control channel Index = 2 channel IfIndex channel Accept Type channel Data Control Filter Parameters filter Channel Index = 1 Filter Parameters Filter Index = 3 Filter Parameters Filter Index = 4 filter Channel Index = 2 Filter Parameters filterTable Other Channel Parameters Other Channel Parameters

15. MJ07/070415 Filter group used to capture packets defined by logical expressions Channel is a stream of data captured based on a logical expression Filter table allows packets to be filtered with an arbitrary filter expression A row in the channel table associated with multiple rows in the filter table Filter Group

16. MJ07/070416 Packet Capture Group Capture Buffer Table (One entry per Channel) Filter Table (many for each channel) Channel Table Packet capture group is a post-filter group Buffer control table used to select channels Captured data stored in the capture buffer table

17. MJ07/070417 RMON2 Applicable to Layers 3 and above Functions similar to RMON1 Enhancement to RMON1 Defined conformance and compliance

18. MJ07/070418 RMON2 MIB GroupOIDFunctionTables Protocol Directory rmon 11Inventory of protocolsprotocolDirTable Protocol Distribution rmon 12Relative statistics on octets and packets protocolDistControlTable protocolDistStatsTable Address Map rmon 13Mac address to network address on the interfaces addressMapControlTable addressMapTable Network Layer Host rmon 14Traffic data from and to each host n1HostControlTable n1HostTable

19. MJ07/070419 RMON2 MIB GroupOIDFunctionTables Application Layer Matrix rmon 17Traffic data by protocol between pairs of hosts a1MatrixSDTable a1MatrixDSTable a1MatrixTopNControlTable a1MatrixTopNTable User History Collection rmon 18User-specified historical data on alarms and statistics usrHistoryControlTable usrHistoryObjectTable usrHistoryTable Probe Configuration rmon 19Configuration of probe parameters serialConfigTable netConfigTable trapDestTable serialConnectionTable RMON Conformance rmon 20RMON2 MIB Compliances and Compliance Groups

20. MJ07/070420 RMON TR Extension Groups Two statistics groups and associated history groups MAC layer (Statistics group) collects TR parameters Promiscuous Statistics group collects packets promiscuously on sizes and types of packets Three groups associated with the stations Routing group gathers on routing

21. MJ07/070421 ATM RMON Upper Layer Protocols RMON-2 (RFC 2021, 2074) Ethernet RMON (RFC 1757) Token Ring RMON (RFC 1513) ATM Protocol IDs for RMON-2 (Additions to RFC 2074) Switch Extensions for RMON ATM RMON 'Base' Layer Network Layer Application Layer IETF MIBsAdditional MIBs

22. MJ07/070422 ATM Forum extended RMON to ATM Switch extensions and ATM RMON define objects at the base layer ATM protocol IDs for RMON2 define additional objects at the higher levels ATM devices require cell-based measurements and statistics Probe should be able to handle high speed ATM RMON

23. MJ07/070423 ATM Probe Location ATM Switch RMON Probe RMON Probe ATM Switch (a) External Probe with copy(b) Internal Probe with copy ATM Switch with internal RMON Probe ATM Switch ATM Switch RMON Probe (d) External Probe without copy (c) Internal Probe without copy

24. MJ07/070424 Stand-alone probe in (a) copies the cells Embedded version in (b) reports data, but has no access to switch fabric Internal probe (c) similar to (b) with access to switch Stand-alone probe (d) taps network-to-network interface between two ATM switches (a) and (b) require duplex circuits, steering of traffic, and design modification Embedded designs (c) and (d) require no modification ATM Probe Location

25. MJ07/070425 ATM RMON MIB Groups GroupOIDFunctionTables portSelectatmRmonMIBObjects1Port SelectionportSelGrpTable portSelTable atmStatsatmRmonMIBObjects2Basic StatisticsatmStatsControlTable atmStatsTable atmHostatmRmonMIBObjects3ATM per-host statistics atmHostControlTable atmHostTable atmMatrixatmRmonMIBObjects4ATM per-circuit statistics atmMatrixControlTable atmMatrixSDTable atmMatrixDSTable atmMatrixTopNControlTable atmMatrixTopNTable

26. MJ07/070426 ATM RMON MIB contains four groups portSelect group selects ports atmStats collects basic statistics based on port selection atmHost gathers statistics based on host traffic atmMatrix group collects conversation traffic and ranks the top-N entries ATM RMON MIB Groups