Session 07 RMON MJ07/0704 Adapted from Network Management: Principles and Practice © Mani Subramanian 2000 and solely used for Network Management course at Universitas Bina Nusantara 1 RMON Components Data Analyzer SNMP Traffic Router BACKBONE NETWORK Router SNMP Traffic RMON Probe LAN • RMON Probe • Data gatherer - a physical device • Data analyzer • Processor that analyzes data • RMON Remote Network Monitoring • Standards-based network management protocol • Allows network information to be gathered at a single workstation • Defines additional MIBs to provide a richer set of data about network usage MJ07/0704 2 Network with RMONs Remote FDDI LAN Router with RMON FDDI Probe Bridge FDDI Backbone Network Router Local LAN Router Remote Token Ring LAN NMS Ethernet Probe Token Ring Probe MJ07/0704 3 RMON Benefits • Monitors and analyzes locally and relays data; less load on the network • Needs no direct visibility by NMS; more reliable information • Permits monitoring on a more frequent basis and hence faster fault diagnosis • Increases productivity for administrators MJ07/0704 4 RMON MIB rmon (mib-2 16) statistics (1) history (2) alarm (3) host (4) hostTopN (5) matrix (6) filter (7) capture (8) event (9) rmonConformance (20) probeConfig (19) usrHistory (18) a1Matrix (17) a1Host (16) n1Matrix (15) n1Host (14) addressMap (13) protocolDist (12) protocolDir (11) RMON2 RMON1 Token Ring (10) RMON1 Extension MJ07/0704 5 RMON MIB • RMON1: Ethernet RMON groups • rmon 1 - rmon 9 • RMON1: Extension: Token ring extension • rmon 10 • RMON2: Higher layers (3-7) groups • rmon 11 - rmon 20 MJ07/0704 6 RMON Groups and Functions Token Ring Statistics Token Ring Statistics Token Ring History History Control Ethernet History History Control Ethernet Statistics Ethernet Statistics Remotely Monitored Network Host and Conversation Statistics Data Gathering Host Statistics HostTopN Statistics Matrix Statistics Network Manager Filter Group MJ07/0704 Packet Filtering Channel Filtering Alarm Generation Event Generation Packet Capture 7 RMON Groups and Functions • Probe gathers data • Functions • Statistics on Ethernet, token ring, and hosts / conversations • Filter group filters data prior to capture of data • Generation of alarms and events MJ07/0704 8 RMON1 MIB Groups & Tables MJ07/0704 Group Statistics OID rmon 1 Function Link level statistics History rmon 2 Periodic statistical data collection and storage for later retrieval Alarm rmon 3 Host rmon 4 Generates events when the data sample gathered crosses preestablished thresholds Gathers statistical data on hosts HostTopN rmon 5 Computes the top N hosts on the respective categories of statistics gathered Tables -etherStatsTable -etherStats2Table -historyControlTable -etherHistoryTable -historyControl2Table -etherHistory2Table -alarmTable -hostControlTable -hostTable -hostTimeTable -hostControl2Table -hostTopNcontrolTable 9 RMON1 MIB Groups & Tables MJ07/0704 Group Matrix OID rmon 6 Function Statistics on traffic between pair of hosts Filter rmon 7 Filter function that enables capture of desired parameters Tables -matrixControlTable -matrixSDTable -matrixDSTable -matrixControl2Table -filterTable -channelTable -filter2Table -channel2Table -buffercontrolTable -captureBufferTable Packet rmon 8 Capture Packet capture capability to gather packets after they flow through a channel Event rmon 9 Controls the generation of -eventTable events and notifications Token Ring rmon 10 10 RMON1 MIB Groups & Tables • Ten groups divided into three categories • Statistics groups (rmon 1, 2, 4, 5, 6, and 10) • Event reporting groups (rmon 3 and 9) • Filter and packet capture groups(rmon 7 and 8) • Groups with “2” in the name are enhancements with RMON2 MJ07/0704 11 Control and Data Tables dataTable dataEntry controlTable controlEntry control Index control Index control control DataSource TableSize control control DataSource TableSize control Owner control Owner control Status control Status control Other control Other data Index data AddlIndex data Other data Index data AddlIndex data Other data Index data AddlIndex data Other data Index data AddlIndex data Other • Control table used to set the instances of data rows in the data table • Values of data index and control index are the same MJ07/0704 12 Host Top N Group Example HostTopN Host 1 Host 2 Host 3 Host 4 Host 5 Host 6 Host 7 Host 8 Host 9 Host 10 0 100 200 300 400 Giga Octets MJ07/0704 13 Filter Group filterTable filterEntry channelTable Filter Index channelEntry channel Index =1 channel Index = 2 MJ07/0704 channel IfIndex =1 channel IfIndex channel Accept Type channel Accept Type channel Other Data Channel Control Parameters channel Other Data Channel Control Parameters =1 filter Channel Index =1 Filter Index =2 filter Channel Index =1 Filter Index =3 filter Channel Index =2 Filter Index =4 filter Channel Index =2 Filter Parameters Filter Parameters Filter Parameters Filter Parameters 14 Filter Group • Filter group used to capture packets defined by logical expressions • Channel is a stream of data captured based on a logical expression • Filter table allows packets to be filtered with an arbitrary filter expression • A row in the channel table associated with multiple rows in the filter table MJ07/0704 15 Packet Capture Group Channel Table Filter Table (many for each channel) Capture Buffer Table (One entry per Channel) • Packet capture group is a post-filter group • Buffer control table used to select channels • Captured data stored in the capture buffer table MJ07/0704 16 RMON2 • Applicable to Layers 3 and above • Functions similar to RMON1 • Enhancement to RMON1 • Defined conformance and compliance MJ07/0704 17 RMON2 MIB Group Protocol Directory Protocol Distribution Address Map OID rmon 11 Function Inventory of protocols Tables protocolDirTable rmon 12 protocolDistControlTable protocolDistStatsTable addressMapControlTable addressMapTable Network Layer Host rmon 14 Relative statistics on octets and packets Mac address to network address on the interfaces Traffic data from and to each host MJ07/0704 rmon 13 n1HostControlTable n1HostTable 18 RMON2 MIB Group Application Layer Matrix OID Function rmon 17 Traffic data by protocol between pairs of hosts User History Collection rmon 18 User-specified historical data on alarms and statistics Probe rmon 19 Configuration of Configuration probe parameters Tables a1MatrixSDTable a1MatrixDSTable a1MatrixTopNControlTable a1MatrixTopNTable usrHistoryControlTable usrHistoryObjectTable usrHistoryTable serialConfigTable netConfigTable trapDestTable serialConnectionTable RMON rmon 20 RMON2 MIB Conformance Compliances and Compliance Groups MJ07/0704 19 RMON TR Extension Groups • Two statistics groups and associated history groups • MAC layer (Statistics group) collects TR parameters • Promiscuous Statistics group collects packets promiscuously on sizes and types of packets • Three groups associated with the stations • Routing group gathers on routing MJ07/0704 20 ATM RMON Application Layer Upper Layer Protocols RMON-2 (RFC 2021, 2074) Ethernet RMON (RFC 1757) Token Ring RMON (RFC 1513) IETF MIBs MJ07/0704 Network Layer 'Base' Layer ATM Protocol IDs for RMON-2 (Additions to RFC 2074) Switch Extensions for RMON ATM RMON Additional MIBs 21 ATM RMON • ATM Forum extended RMON to ATM • Switch extensions and ATM RMON define objects at the base layer • ATM protocol IDs for RMON2 define additional objects at the higher levels • ATM devices require cell-based measurements and statistics • Probe should be able to handle high speed MJ07/0704 22 ATM Probe Location ATM Switch RMON Probe (a) External Probe with copy ATM Switch with internal RMON Probe ATM Switch RMON Probe (b) Internal Probe with copy ATM Switch ATM Switch RMON Probe (c) Internal Probe without copy MJ07/0704 (d) External Probe without copy 23 ATM Probe Location • Stand-alone probe in (a) copies the cells • Embedded version in (b) reports data, but has no access to switch fabric • Internal probe (c) similar to (b) with access to switch • Stand-alone probe (d) taps network-to-network interface between two ATM switches • (a) and (b) require duplex circuits, steering of traffic, and design modification • Embedded designs (c) and (d) require no modification MJ07/0704 24 ATM RMON MIB Groups Group OID Function portSelect atmRmonMIBObjects1 Port Selection atmStats atmHost atmRmonMIBObjects2 Basic Statistics atmRmonMIBObjects3 ATM per-host statistics atmMatrix atmRmonMIBObjects4 ATM per-circuit statistics MJ07/0704 Tables portSelGrpTable portSelTable atmStatsControlTable atmStatsTable atmHostControlTable atmHostTable atmMatrixControlTable atmMatrixSDTable atmMatrixDSTable atmMatrixTopNControlTable atmMatrixTopNTable 25 ATM RMON MIB Groups • ATM RMON MIB contains four groups • portSelect group selects ports • atmStats collects basic statistics based on port selection • atmHost gathers statistics based on host traffic • atmMatrix group collects conversation traffic and ranks the top-N entries MJ07/0704 26