Session 07
RMON
MJ07/0704
Adapted from Network Management: Principles and Practice © Mani Subramanian 2000 and solely used for Network
Management course at Universitas Bina Nusantara
1
RMON Components
Data
Analyzer
SNMP
Traffic
Router
BACKBONE
NETWORK
Router
SNMP
Traffic
RMON
Probe
LAN
• RMON Probe
• Data gatherer - a physical device
• Data analyzer
• Processor that analyzes data
• RMON Remote Network Monitoring
• Standards-based network management protocol
• Allows network information to be gathered at a single workstation
• Defines additional MIBs to provide a richer set of data about network usage
MJ07/0704
2
Network with RMONs
Remote FDDI LAN
Router with
RMON
FDDI Probe
Bridge
FDDI
Backbone Network
Router
Local LAN
Router
Remote
Token Ring LAN
NMS
Ethernet
Probe
Token Ring
Probe
MJ07/0704
3
RMON Benefits
• Monitors and analyzes locally and relays data;
less load on the network
• Needs no direct visibility by NMS; more reliable
information
• Permits monitoring on a more frequent basis and
hence faster fault diagnosis
• Increases productivity for administrators
MJ07/0704
4
RMON MIB
rmon (mib-2 16)
statistics (1)
history (2)
alarm (3)
host (4)
hostTopN (5)
matrix (6)
filter (7)
capture (8)
event (9)
rmonConformance (20)
probeConfig (19)
usrHistory (18)
a1Matrix (17)
a1Host (16)
n1Matrix (15)
n1Host (14)
addressMap (13)
protocolDist (12)
protocolDir (11)
RMON2
RMON1
Token Ring (10)
RMON1 Extension
MJ07/0704
5
RMON MIB
• RMON1: Ethernet RMON groups
• rmon 1 - rmon 9
• RMON1: Extension: Token ring extension
• rmon 10
• RMON2: Higher layers (3-7) groups
• rmon 11 - rmon 20
MJ07/0704
6
RMON Groups and Functions
Token Ring Statistics
Token Ring
Statistics
Token Ring
History
History
Control
Ethernet
History
History
Control
Ethernet Statistics
Ethernet
Statistics
Remotely
Monitored
Network
Host and Conversation Statistics
Data
Gathering
Host
Statistics
HostTopN
Statistics
Matrix
Statistics
Network
Manager
Filter Group
MJ07/0704
Packet
Filtering
Channel
Filtering
Alarm
Generation
Event
Generation
Packet
Capture
7
RMON Groups and Functions
• Probe gathers data
• Functions
• Statistics on Ethernet, token ring, and
hosts / conversations
• Filter group filters data prior to capture
of data
• Generation of alarms and events
MJ07/0704
8
RMON1 MIB Groups & Tables
MJ07/0704
Group
Statistics
OID
rmon 1
Function
Link level statistics
History
rmon 2
Periodic statistical data
collection and storage
for later retrieval
Alarm
rmon 3
Host
rmon 4
Generates events when
the data sample
gathered crosses preestablished thresholds
Gathers statistical data
on hosts
HostTopN
rmon 5
Computes the top N
hosts on the respective
categories of statistics
gathered
Tables
-etherStatsTable
-etherStats2Table
-historyControlTable
-etherHistoryTable
-historyControl2Table
-etherHistory2Table
-alarmTable
-hostControlTable
-hostTable
-hostTimeTable
-hostControl2Table
-hostTopNcontrolTable
9
RMON1 MIB Groups & Tables
MJ07/0704
Group
Matrix
OID
rmon 6
Function
Statistics on traffic
between pair of hosts
Filter
rmon 7
Filter function that
enables capture of
desired parameters
Tables
-matrixControlTable
-matrixSDTable
-matrixDSTable
-matrixControl2Table
-filterTable
-channelTable
-filter2Table
-channel2Table
-buffercontrolTable
-captureBufferTable
Packet rmon 8
Capture
Packet capture capability
to gather packets after
they flow through a
channel
Event
rmon 9
Controls the generation of -eventTable
events and notifications
Token
Ring
rmon 10
10
RMON1 MIB Groups & Tables
• Ten groups divided into three categories
• Statistics groups (rmon 1, 2, 4, 5, 6, and 10)
• Event reporting groups (rmon 3 and 9)
• Filter and packet capture groups(rmon 7 and 8)
• Groups with “2” in the name are enhancements
with RMON2
MJ07/0704
11
Control and Data Tables
dataTable
dataEntry
controlTable
controlEntry
control
Index
control
Index
control
control
DataSource TableSize
control
control
DataSource TableSize
control
Owner
control
Owner
control
Status
control
Status
control
Other
control
Other
data
Index
data
AddlIndex
data
Other
data
Index
data
AddlIndex
data
Other
data
Index
data
AddlIndex
data
Other
data
Index
data
AddlIndex
data
Other
• Control table used to set the instances of data rows in the data table
• Values of data index and control index are the same
MJ07/0704
12
Host Top N Group Example
HostTopN
Host 1
Host 2
Host 3
Host 4
Host 5
Host 6
Host 7
Host 8
Host 9
Host 10
0
100
200
300
400
Giga Octets
MJ07/0704
13
Filter Group
filterTable
filterEntry
channelTable
Filter
Index
channelEntry
channel
Index =1
channel
Index = 2
MJ07/0704
channel
IfIndex
=1
channel
IfIndex
channel
Accept
Type
channel
Accept
Type
channel
Other
Data
Channel
Control Parameters
channel
Other
Data
Channel
Control Parameters
=1
filter
Channel
Index
=1
Filter
Index
=2
filter
Channel
Index
=1
Filter
Index
=3
filter
Channel
Index
=2
Filter
Index
=4
filter
Channel
Index
=2
Filter
Parameters
Filter
Parameters
Filter
Parameters
Filter
Parameters
14
Filter Group
• Filter group used to capture packets defined by
logical expressions
• Channel is a stream of data captured based on a
logical expression
• Filter table allows packets to be filtered with an
arbitrary filter expression
• A row in the channel table associated with
multiple rows in the filter table
MJ07/0704
15
Packet Capture Group
Channel
Table
Filter
Table
(many
for
each
channel)
Capture
Buffer
Table
(One
entry
per
Channel)
• Packet capture group is a post-filter group
• Buffer control table used to select channels
• Captured data stored in the capture buffer table
MJ07/0704
16
RMON2
• Applicable to Layers 3 and above
• Functions similar to RMON1
• Enhancement to RMON1
• Defined conformance and compliance
MJ07/0704
17
RMON2 MIB
Group
Protocol
Directory
Protocol
Distribution
Address
Map
OID
rmon 11
Function
Inventory of protocols
Tables
protocolDirTable
rmon 12
protocolDistControlTable
protocolDistStatsTable
addressMapControlTable
addressMapTable
Network
Layer Host
rmon 14
Relative statistics on
octets and packets
Mac address to
network address on the
interfaces
Traffic data from and to
each host
MJ07/0704
rmon 13
n1HostControlTable
n1HostTable
18
RMON2 MIB
Group
Application
Layer Matrix
OID
Function
rmon 17 Traffic data by
protocol between
pairs of hosts
User History
Collection
rmon 18 User-specified
historical data on
alarms and
statistics
Probe
rmon 19 Configuration of
Configuration
probe parameters
Tables
a1MatrixSDTable
a1MatrixDSTable
a1MatrixTopNControlTable
a1MatrixTopNTable
usrHistoryControlTable
usrHistoryObjectTable
usrHistoryTable
serialConfigTable
netConfigTable
trapDestTable
serialConnectionTable
RMON
rmon 20 RMON2 MIB
Conformance
Compliances and
Compliance Groups
MJ07/0704
19
RMON TR Extension Groups
• Two statistics groups and associated history groups
• MAC layer (Statistics group) collects TR parameters
• Promiscuous Statistics group collects packets
promiscuously on sizes and types of packets
• Three groups associated with the stations
• Routing group gathers on routing
MJ07/0704
20
ATM RMON
Application
Layer
Upper Layer Protocols
RMON-2
(RFC 2021, 2074)
Ethernet
RMON
(RFC 1757)
Token Ring
RMON
(RFC 1513)
IETF MIBs
MJ07/0704
Network Layer
'Base' Layer
ATM Protocol IDs for
RMON-2
(Additions to RFC 2074)
Switch
Extensions
for RMON
ATM
RMON
Additional MIBs
21
ATM RMON
• ATM Forum extended RMON to ATM
• Switch extensions and ATM RMON define objects at
the base layer
• ATM protocol IDs for RMON2 define additional
objects at the higher levels
• ATM devices require cell-based measurements and
statistics
• Probe should be able to handle high speed
MJ07/0704
22
ATM Probe Location
ATM
Switch
RMON
Probe
(a) External Probe with copy
ATM Switch
with internal
RMON Probe
ATM
Switch
RMON
Probe
(b) Internal Probe with copy
ATM
Switch
ATM
Switch
RMON
Probe
(c) Internal Probe without copy
MJ07/0704
(d) External Probe without copy
23
ATM Probe Location
• Stand-alone probe in (a) copies the cells
• Embedded version in (b) reports data, but has no
access to switch fabric
• Internal probe (c) similar to (b) with access to switch
• Stand-alone probe (d) taps network-to-network
interface between two ATM switches
• (a) and (b) require duplex circuits, steering of traffic,
and design modification
• Embedded designs (c) and (d) require no modification
MJ07/0704
24
ATM RMON MIB Groups
Group
OID
Function
portSelect atmRmonMIBObjects1 Port Selection
atmStats
atmHost
atmRmonMIBObjects2 Basic Statistics
atmRmonMIBObjects3 ATM per-host
statistics
atmMatrix atmRmonMIBObjects4 ATM per-circuit
statistics
MJ07/0704
Tables
portSelGrpTable
portSelTable
atmStatsControlTable
atmStatsTable
atmHostControlTable
atmHostTable
atmMatrixControlTable
atmMatrixSDTable
atmMatrixDSTable
atmMatrixTopNControlTable
atmMatrixTopNTable
25
ATM RMON MIB Groups
• ATM RMON MIB contains four groups
• portSelect group selects ports
• atmStats collects basic statistics based on port
selection
• atmHost gathers statistics based on host traffic
• atmMatrix group collects conversation traffic
and ranks the top-N entries
MJ07/0704
26