Transcript MRTG - KFUPM Faculty List

Network Management
Tools Presentations
Monday, September 25th , 2006, 3:30 PM
CSE 552 – Network Management
Fall 2006 (Term 061)
Assignment 2
Schedule of Presentations
Speaker
Tool
Saeed A. Bawazir
CyberGauge
Majeed Al-Saleh
Nagios
Wael Hamri
Missilesoft Network
Configuration Management 4.57
Mohammed Akhlaq
PRTG Traffic Grapher
Amgad Mosleh
MRTG
CyberGauge
Network Management Tool
By
Saeed Bawazir
CSE 552
Agenda



Overview of CyberGauge Network
Management Tool
Uses of the Tool and Examples
Conclusion
Overview




Windows-based Application Neon Software, Inc
Monitor switches, routers, hubs, servers…. Etc.
SNMP and MIB II
Automatically create:




utilization graphs
daily, weekly, and monthly quality of service (QoS),
Receive alerts for both non-responsive devices and
traffic thresholds
Monitor 5, 10, 20 or 100 devices
How it works

sends an SNMP query over network to router's MIB

Several SNMP queries were sent to the router to compile
a list of the network interfaces present on that router,
along with each interface's maximum speed and its type.

another SNMP query was sent to obtain the router's
name, type, location, how long the router had been
running, and the person responsible for maintaining the
router.

determine how much bandwidth was consumed during
the Monitoring Rate interval, and calculates the
percentage of the total bandwidth available
Input
Output
Output
Uses of the Tool and Examples
Uses of the Tool (Device
Information)

CyberGauge Provides the
troubleshooter:




Name, Type & Location of network device
Uptime
Number of interfaces.(useable/unuseable)
Party responsible for device
Uses of the Tool (Interface
Information)

For each interface:






Interface name
VLAN
IP address
Type of network connection (Ethernet,..)
Max. speed (not actual)
Status
Uses of the Tool
By CyberGauge: CCSE Primary Switch
Device & Interfaces Information
Uses of the Tool (Performance
Management)

Monitor Network Connectivity:



Throughput
Link Utilization
Statistics Collection
Examples (CCSE – ITC)
Interfaces Statistics
Examples (CCSE – ITC)
CyberGauge: IN/OUT Throughput for Up Link CCSE-ITC
MRTG: IN/OUT Throughput for Up Link CCSE-ITC
Several Interfaces Can be Monitored
Examples (Report Generation –
CCSE Interface)


Report can also be generated as the device
and interface is specified.
Sample Test for an interface in CCSE Switch:
Date
09/21/06
09/21/06
09/21/06
09/21/06
09/21/06
09/21/06
09/21/06
09/21/06
09/21/06
09/21/06
09/21/06
Time
10:33:28
10:33:43
10:33:58
10:34:13
10:34:28
10:34:43
10:34:58
10:35:13
10:35:28
10:35:43
10:35:58
IN (Kbps)
242.3
226.4
131.7
174.7
69.7
212.3
273.8
326.2
169.1
213.7
625.8
OUT (Kbps)
84.3
62.2
46.7
35.9
118.4
26.6
124.4
62.4
129.5
50.2
35.2
Conclusion

CyberGauge…

Utility for monitoring bandwidth
information from any SNMP-based device
Answer critical questions:

·How much of my Internet bandwidth am I
currently using?
·Are slowdowns in Internet access related to
increased use of my Internet connection?
·Am I getting the bandwidth promised by
my Internet Service Provider (ISP)?
Nagios
as a network management tool
Presented by
Majeed A. Al-Saleh
September 25th, 2006
Outline
•
•
•
•
•
Introduction
What Nagios can monitor?
Important feature
Sample Screens illustrations
More About Nagios
What is Nagios?
Nagios is a popular open source monitoring tools with a
reported 660,000 downloads worldwide.
Client Server News, 20-24 June 2005, Issue 601
•
•
•
•
host and service monitor
runs under the Linux operating system
send notifications in a variety of different ways
web based reports
What Nagios can monitor?
• network services (SMTP, POP3, HTTP, NNTP, PING, etc.)
• host resources (processor load, disk and memory usage,
running processes, log files, etc.)
• environmental factors such as temperature
Two important
controls
Simple authorization
scheme
Support
Redundant
monitoring servers
Sample
Screens
illustration
Nagios home page
Tactical Overview
Configuration screen
Status map
Status overview
Status Summary
Service Details
Alerts History
Performance information
Service state trends
More About Nagios
Http://www.nagios.org
Thank you
missilesoft Network
4.6 Configuration Management
CSE 552
Network Management
Wael Hamri
Agenda
Introduction 
Software features 
Conclusion 
Introduction
A network toolkit, includes a 
set of network utilities:
Confiner network 
Diagnose network 
monitor network 
Software features
IP Manager
IP Information, Netstat
Ping, Trace Route
WhoIs
Socket to Process Mapper
Bandwidth Monitor
Asterisk Password Recovery
Process Manager
Task Manager
Service Manager










Network Config
Network Diagnose
Network Diagnose
Network Monitor
System Utility
Conclusion
A network toolkit, includes a set of network 
utilities:
Network Configuring
Network Diagnosing
Network Monitoring 
System Utility 
PRTG
(Paessler Router Traffic Grapher)
Muhammad Akhlaq
[email protected]
Contents

What is PRTG?








Using PRTG



Available Views
What else can be done?
Examples







System Requirements
How it works?
Base Features
User Interface
Reports
Notifications
Installation
Adding a Standard Traffic Sensor
Viewing a detailed graph
Viewing data in table format
Adding a graph or table
Adding a report
Editing a sensor
Conclusions
What is PRTG?


An easy to use Windows software for
monitoring network & bandwidth usage
as well as various other network parameters
like memory and CPU utilization.
Provides system administrators with live
readings and periodical usage trends of
leased lines, routers, firewalls, servers, and
many other network devices.
PRTG’s main screen with graphs of selected sensors
System Requirements






Windows 2000/XP/2003
64 MB RAM (128 MB and more
recommended)
20 MB disk space for installation
TCP/IP Network Connection
IE 6.0+ or FireFox 1.0+
Protocols enabled on devices
How it works?

Supports the three most common methods of
data acquisition:



SNMP (Simple Network Management Protocol) to
access traffic counters or other readings from
SNMP enabled devices (most common)
Packet Sniffing to look at incoming/outgoing
network packets that pass through a network card
of a compute.
NetFlow for analyzing Cisco NetFlow packets sent
by Cisco routers
Base Features





Supports data acquisition via SNMP, packet
sniffing, or Netflow
Classifies network traffic by IP address,
protocol, and other parameters
Easy installation & use on Windows
2000/XP/2003
Capable of monitoring up to several thousand
sensors
Works with most switches, routers, firewalls,
and other network devices from Cisco, HP,
3Com, Linksys, Nortel, etc., & with various
other devices (e.g. Windows PCs or network
printers).
User Interface




Monitoring data can be accessed via a
Windows GUI and/or a web based front
end
Integrated web server for remote access
(no external web server necessary)
Results are shown in various graphs &
tables
Graphs are always generated on-the-fly for
live reporting
Reports




Configurable reports (graphs and data tables)
in HTML, Excel, TIFF, RTF or PDF format
Daily, monthly, and yearly reports can be
exported via email or saved to file
x% percentile calculation for any value,
any interval, and any time frame
Includes a billing system for bandwidth
based billing
Notifications

For each sensor, individual email
notifications can be configured for :



Errors (e.g. device is not reachable)
Reaching traffic limits (e.g. more than x
MB transferred per day or month)
Reaching traffic or usage thresholds (e.g.
more than 700kbit bandwidth for more
than one hour)
Installation


Installation wizard is similar to ordinary
windows programs.
Click on the ‘next’ button for default
values of installation.
Cont…
Cont…
Cont…
Cont…
Cont…
PRTG’s main screen
(having no sensor added yet)
Using PRTG


When we run PRTG for the first time, it
does not have any sensor to read. We
need to add sensors so that it can collect
data accordingly…
After we have added some sensors,
the main window looks like the window
on following slide…
(Example on “adding a sensor” is given on some next slides)
PRTG’s main screen
(having many sensors added)
Available Views

There are six different views
that you can select by clicking
on corresponding icons on the
left pan. They are:
1.
2.
3.
4.
5.
6.
Data
Events
Sensors
Custom
Reports
Browser
1. Data View

This view shows the collected data
of one or mores sensors in one graph.
Cont…
We can see
multiple
graph view
(Right)
Or
Single
graph view
(Left)
Cont…
Or we can see
table view by
double clicking a
graph and then
selecting Table
tab in the
window that
appears
2. Events View

PRTG records an event every time a
sensor shows an error
3. Sensors View

This view shows the list of sensors
only without any graphs or data tables
4. Custom View

The Custom
view enables
you to set up
a custom
layout of
panels,
graphs, and
tables.
5. Reports View

You can define / execute any number
of reports based on the collected data.
6. Web Browser View
This view
enables you to
access the
web
interface of
PRTG. The
usage is the
same as
Internet
Explorer.

What else can be done?









Export data tables and graphs
Customize graphs and tables view
Add and edit sensors
Automatic Network Discovery
Add customized graphs / tables
Use web interface
Generate reports
Specify thresholds
Etc…
Examples

This example show how to add a
Standard Traffic Sensor in PRTG and
monitor it…
1. Adding a Standard Traffic Sensor
To do so, click
on Edit menu
and select Add
Sensor…….
The following
wizard will
appear…
Cont…
Cont…
Cont…
Cont…
Cont…
PRTG’s main screen
2. Viewing a detailed graph
Double click on
any graph … the
lowest one in
this example …
It will show
detailed
window…
Having different
tabs….
3. Viewing data in table format
Table 24 Hour
tab shows this
view…
4. Adding a graph or table
Customizing
the view by
adding a graph
or table…
Click on the
Customize view
and then on
Add… It runs a
wizard
Cont…
Cont…
Cont…
For new graph
Cont…
For new table
Cont…
Customized
graph
Cont…
Customized
table
5. Adding a report
In Reports
view click on
Add report
6. Editing a sensor
Double click
on any
sensor in
the Data
view or
Sensors
view in main
window
Cont…

You can add comments, specify settings
for this sensor, billing, notifications for
error/threshold/volume/limit and
protocol settings…
Conclusions




PRTG provides GUI that is very easy to install
and use.
A graphical view of the network and
bandwidth usage provides better monitoring
of networks.
It helps us easily identify network
bottlenecks.
We can assure better quality of service and
helps plan better network for future needs.
King Fahad University of Petroleum and Minerals
College of Computer Science & Engineering
Computer Engineering Department
Network Management
By
Amgad Mohammed Moslih
ID# 208503
Examiner: Dr.Sqalli
Term 061




Is software for monitoring the traffic load on network
links. It allows the user to see traffic load on a
network over time in graphical form.
MRTG is written in perl and works on Unix/Linux as
well as Windows and even Netware systems.
MRTG is free software licensed under the Gnu GPL.
It was originally developed by Tobias Oetiker and
Dave Rand to monitor router traffic, but has
developed into a tool that can create graphs and
statistics for almost anything.

Prerequisites
1- A current copy of Perl. For Example ActivePerl from
http://www.activestate.com/Products/Download/Download.plex?id=ActivePerl
2- The latest version of MRTG from
http://oss.oetiker.ch/mrtg/pub
•
Installing In Windows

Unzip MRTG to C:\mrtg-2.14.6
Next Install Perl. You might want to make sure that the Perl
binary directory is listed in your system path.
Configure MRTG
Type: perl mrtg




MRTG uses the Simple Network Management Protocol
(SNMP) to send requests with two object identifiers (OIDs)
to a device. The device, which must be SNMP-enabled, will
have a management information base (MIBs) to lookup the
OID's specified. After collecting the information it will send
back the raw data encapsulated in an SNMP protocol.

MRTG records this data in a log on the client along with
previously recorded data for the device. The software then
creates an HTML document from the logs, containing a list
of graphs detailing traffic for the selected device.









Measures 2 values (I for Input, O for Output) per target.
Gets its data via an SNMP agent, or through the output of a command line.
Typically collects data every five minutes (it can be configured to collect data less
frequently).
Creates an HTML page per target that features 4 graphs (GIF or PNG images).
Results are plotted vs time into day, week, month and year graphs, with the I plotted
as a full green area, and the O as a blue line.
Automatically scales the Y axis of the graphs to show the most detail.
Adds calculated Max, Average and Current values for both I and O to the target's
HTML page.
Can also send warning emails if targets have values above a certain threshold.
MRTG is not limited to monitoring traffic, though. It is possible to monitor any
SNMP variable you choose. You can even use an external program to gather the
data which should be monitored via MRTG. People are using MRTG, to monitor
things such as System Load, Login Sessions, Modem availability and more. MRTG
even allows you to accumulate two or more data sources into a single graph.
Target[10.10.10.1.2]: 24:[email protected]
MaxBytes[10.10.10.1.2]: 1250000
Title[10.10.10.1.2]: LC-Bridge (): ulink0
PageTop[10.10.10.1.2]: <H1>Traffic Analysis for ulink0</H1>
<TABLE>
<TR><TD>System:</TD><TD>LC-Bridge inAndover</TD></TR>
<TR><TD>Maintainer:</TD><TD>Administrator</TD></TR>
<TR><TD>Interface:</TD><TD>ulink0(24)</TD></TR>
<TR><TD>IP:</TD><TD>()</TD></TR>
<TR><TD>Max Speed:</TD>
<TD>1250.0 kBytes/s (ethernetCsmacd)</TD></TR>
</TABLE>
Simple Setup: The configuration is done
through simple ASCII text files. An additional tool helps creating an initial
version of the configuration file, tailored to a certain router.
• Easy Maintenance: Because the logfiles are
automatically consolidated on every run and therefore do not grow in size, the
system can work unattended for months without running out of disk space.
• Friendliness: The HTML pages created by MRTG are easy to understand
and give a good visual representation of the network load, providing a
sound basis for decisions about upgrading network links.
• Integrated Solution: MRTG performs all the tasks required for traffic
monitoring. No external database or SNMP packages are required to make
it work.
•
•
Performance: MRTG-2 can not monitor more than
about 600
router ports in a 5-minute interval.
•
Flexibility: While MRTG-2 is quite configurable in general, this
seems to make the users especially aware of the areas where
configurability is limited, in particular when using the program to
monitor time-series data other than network traffic. about 600 router
ports in a 5-minute

SNMP Data Gathering
improving SNMP data gathering performance is to issue several SNMP requests in
parallel. This works around network latency as well as problems with routers that
answer SNMP requests slowly.

Graphs on Demand
Because the generation of graphs is quite expensive, it is not sensible to update
thousands of GIF images on a regular basis. It is more efficient to generate the graphs
when a user wants to see them.

HTML Generation
In MRTG-2 the look of the generated HTML pages was tuned using a large number of
configuration options. MRTG-3 will work with template files and therefore make the
design of HTML pages both simpler and more flexible.

Configuration
While MRTG-2 was a monolithic program, version 3 will be a set of Perl modules which can be
assembled into custom monitoring applications. The user can decide which modules to use.
?
Thank You for Listening