Session 13 NM Tools Adapted from Network Management: Principles and Practice © Mani Subramanian 2000 and solely used for Network Management course at Universitas Bina Nusantara

NOC Tool Categories (RFC 1470) Network Management Tools Mechanism Operating Environment Acquisition Resources / Components Functional Examples : Alarm Manager Security Traffic Examples: Bridge Ethernet IP NFS NMS Ping SNMP X DOS Windows NT Sun Unix Free Library Sourcelib Developed by IETF Working Group on NOC Tools Update available via news:comp.networks.noctools ftp://wuarchive.wustl.edu/doc/noctools

BERT (Bit Error Rate Test) Modem B Loop Back Physical layer monitoring tool Generates and detects bits Bit error rate (BER) is calculated by comparing the transmitted pattern with received pattern Loop back is a feature of the modem BER can be measured for a modem or two modems and the link in between

Network Software Tools Status monitoring tools Traffic monitoring tools Route monitoring tools

Network Management Tools SNMP command tools MIB Walk snmpsniff

SNMP Command Tools snmptest snmpget snmpgetnext snmpset snmptrap snmpwalk snmpnetstat Test tool is an interactive tool to get values of several managed objects, one at a time. Get, Get-next and Set are the SNMP commands that we learned under SNMP architecture / messages. Execution of these will return an SNMP Response message. SNMPWalk uses snmpgetnext to trace the entire MIB. Network status command is used to test the status of network connections of a host.

Network Status Command: snmpnetstat host community Useful for finding status of network connections % snmpnetstat noc5 public Active Internet Connections Proto Recv-Q Send-Q Local Address Foreign Address (state) tcp 0 0 *.* *.* CLOSED tcp 0 0 localhost.46626 localhost.3456 ESTABLISHED tcp 0 0 localhost.46626 localhost.3712 ESTABLISHED tcp 0 0 localhost.46626 localhost.3968 ESTABLISHED tcp 0 0 localhost.46626 localhost.4224 ESTABLISHED tcp 0 0 localhost.3456 localhost.46626 ESTABLISHED tcp 0 0 localhost.3712 localhost.46626 ESTABLISHED tcp 0 0 localhost.3968 localhost.46626 ESTABLISHED tcp 0 0 localhost.4224 localhost.46626 ESTABLISHED tcp 0 0 noc5.41472 noc5.4480 ESTABLISHED tcp 0 0 noc5.41472 noc5.4736 ESTABLISHED tcp 0 0 noc5.4480 noc5.41472 ESTABLISHED tcp 0 0 noc5.4736 noc5.41472 ESTABLISHED

SNMP Browser Command: snmpwalk host community [variable name] Uses Get Next Command Presents MIB Tree

Protocol Analyzer PROTOCOL ANALYZER Data Capture Device LAN Raw data transferred on Modem / WAN or LAN Link Analyzes data packets on any transmission line including LAN Measurements made locally or remotely Probe (data capture device) captures data and transfers to the protocol analyzer (no storage) Data link between probe and protocol analyzer either dial-up or dedicated link or LAN Protocol analyzer analyzes data at all protocol levels

MRTG Multi Router Traffic Grouper (Oeticker and Rand) www.ee.ethz.ch/stats/mrtg/ Generates graphic presentation of traffic on Web Daily view Weekly view Monthly view Yearly view

Enterprise Management Management of data transport IBM Netview, Sun Solstice, HP OpenView, Cabletron Spectrum Systems management CA Unicenter and Tivoli TME Network and systems management Partnerships Telecommunications management TMN, Operations systems Service management and policy management

NMS Components Hardware Operating System Core Application Services Vendor Specific NMS Services Common SNMP Services Core Application Services Operating System Hardware

NMS Components Component Service Example Hardware Processor Sun Sparc Monitor HP 9000 Mouse and Keyboard PC Communications Operating system OS services UNIX LINUX / FreeBSD Solaris MS Windows 95 / 98 / NT Core application Display OpenView GUI SunNet Manager services Database Solstice Enterprise Manager Report generation MS Windows Communication services Common SNMP SNMPv1 messages OpenView Network Node Manager services SNMPv2 messages MIB management Basic SNMP Applica -tions IBM NetView SunNet Manager 3rd party NMS API Solstice Enterprise Manager Vendor - specific MIB management CiscoWorks NMS services SNMP applications Transcend Config. management Physical entity display

Multi-NMS Configuration Managed Network Elements Vendor 2 NMS Vendor 1 Vendor 3 Configuration Manager of Managers Fault Performance

Network Configuration Configure agents Configure management systems Community administration parameters Community name MIB view Trap targets Auto-discovery : Scope

Network Monitoring By polling By traps Failure indicated by pinging or traps Ping frequency optimized for network load vs. quickness of detection Trap messages: linkdown, linkUp, coldStart, warmStart, etc. Network topology discovered by auto-discovery Monitoring done at multiple levels - “drilling”

Commercial NMS Enterprise NMS Hewlett-Packard OpenView Sun SunNet Manager IBM Netview Low End NMS SNMPc System & Network Management Computer Associates Unicenter TNG Tivoli TME / Netview

Commercial NMS Low End NMS Enterprise NMS Centralized Distributed System and Network Management

HP OpenView Network Node Manager Auto-discovery and mapping Drill-down views Fault monitoring Event monitoring MIB Browser SNMP tools Traffic monitoring 3rd party integration OpenView is Hewlett-Packard’s platform for Network Management Many NMSs use OpenView Platform: CiscoWorks, etc Drill-down Map Hierarchy

HP OpenView Platform Open, modular, and distributed architecture GUI Management Applications API Services Managed Objects Open, modular, and distributed architecture Object oriented design, Open API-based architecture

OpenView Distributed Platform Postmaster CMIP SNMP TCP/IP Routing Event Services APIs Management Applications Communications Infrastructure Network Postmaster integrates all management services multiple protocol stacks: SNMP, CMIP, TCP/IP Routing enables distributed message routing Event services control event and alarm messages Management services interface with management applications via APIs

Distributed OpenView NNMs Enterprise Network Site A Site B Site C OpenView NNM Collection Station A Collection Station B Collection Station C Management Station An enterprise network managed by multiple NMSs Collection stations could be regular NNMs or entry-NNMs (100 nodes) Filtered information sent to MoM (top level NNM) reduces traffic MoM integrates and presents enterprise data