Remote Network Monitoring RMON Sukiswo sukiswokyahoo com Manajemen

Remote Network Monitoring (RMON) Sukiswo sukiswok@yahoo. com Manajemen Jaringan, Sukiswo ST, MT 1

Table of Contents 4 Basic Concepts 4 RMON Goals 4 RMON MIB Table Management 4 RMON MIB Groups 4 RMON 2 Manajemen Jaringan, Sukiswo ST, MT 2

RMON Basic Concepts 4 Defines a Remote MONitoring (RMON) MIB that supplements MIB-II – with MIB-II, the manager can obtain information on individual devices only – with RMON MIB, the manager can obtain information on the LAN as a whole 4 called network monitors, analyzers or probes Manajemen Jaringan, Sukiswo ST, MT 3

RMON Basic Concepts 4 Extends the SNMP functionality without changing the protocol 4 Allows the monitoring of remote networks (internetwork management) 4 MAC-layer (layer 2 in OSI) monitoring Manajemen Jaringan, Sukiswo ST, MT 4

RMON RFCs Manajemen Jaringan, Sukiswo ST, MT 5

RMON Goals 4 Monitoring subnetwork-wide behavior 4 Reducing the burden on agents and managers 4 Continuous off-line monitoring in the presence of failures (in network or manager) Manajemen Jaringan, Sukiswo ST, MT 6

RMON Goals 4 Proactive monitoring – perform some of the manager functions (e. g. , diagnostics) 4 Problem detection and reporting 4 Provide value-added (analyzed) data 4 Support multiple managers Manajemen Jaringan, Sukiswo ST, MT 7

Example Configuration for Remote Monitoring Management console with RMON probe Ethernet Router Local management console with RMON probe Central Site Router Ethernet PC with RMON probe Bridge FDDI backbone Router with RMON probe Ethernet Token Ring LAN Manajemen Jaringan, Sukiswo ST, MT PC with RMON probe 8

Example of RMON probe with two interfaces agent a agent b agent c Interface 1 Subnetwork X RMON probe Interface 2 Subnetwork Y agent d agent e Manajemen Jaringan, Sukiswo ST, MT 9

Control of Remote Monitors 4 RMON MIB contains features that support extensive control from NMS – Configuration control – Action Invocation 4 RMON MIB is organized into a number of functional groups 4 Each group may contain one or more control tables and one or more data tables 4 Control table (typically read-write) contains parameters that describe the data in a data table (typically read-only) Manajemen Jaringan, Sukiswo ST, MT 10

Configuration Control 4 At configuration time, NMS sets the appropriate control parameters to configure the remote monitor to collect the desired data – the parameters are set by adding a new row to the control table or by modifying an existing row – a control table may contain objects that specify the source of data to be collected, the type of data, the collection timing, etc. Manajemen Jaringan, Sukiswo ST, MT 11

Configuration Control 4 To modify or disable a particular data collection function: – it is necessary first to invalidate the control row – this causes the deletion of that row and the deletion of all associated rows in data tables – NMS can create a new control row with the modified parameters Manajemen Jaringan, Sukiswo ST, MT 12

RMON MIB Table Mgmt (1) 4 The RMON specification includes a set of textual conventions and procedural rules for row addition and deletion 4 Textual conventions Owner. String : : = Display. String Entry. Status : : = INTEGER { valid (1), create. Request (2), under. Creation (3), invalid (4) } Manajemen Jaringan, Sukiswo ST, MT 13

RMON MIB Table Mgmt (2) 4 Row Addition – is achieved by using the SNMP Set. Request PDU which includes instance objects and their values 4 Row Deletion – is achieved by setting the status object for that row to invalid 4 Row Modification – is achieved by first invalidating the row and then adding the row with new object instance values Manajemen Jaringan, Sukiswo ST, MT 14

Example Control & Data Tables rm 1 Control. Table rml. Control. Index rml. Control. Parameter rml. Control. Owner rml. Control. Status 1 5 monitor valid (1) 2 26 manager alpha valid (1) 3 19 manager beta valid (1) rm 1 Data. Table rml. Data. Control. Index rml. Data. Value 1 1 46 2 1 96 2 2 85 2 3 77 2 4 27 2 5 92 3 1 86 3 2 26 Manajemen Jaringan, Sukiswo ST, MT 15

Transitions of Entry. Status State nonexistent create Request performed by manager under Creation valid invalid performed by agent Manajemen Jaringan, Sukiswo ST, MT 16

RMON MIB rmon (mib-2 16) statistics (1) history (2) alarm (3) host (4) host. Top. N (5) matrix (6) filter (7) capture (8) event (9) token. Ring (10) Manajemen Jaringan, Sukiswo ST, MT 17

RMON MIB Groups 1. statistics: maintains MAC-level utilization and error stats 2. history: records periodic statistical samples from the stats group 3. alarm: allows NMS to set sampling interval & alarm threshold 4. host: contains counters for traffic from hosts on the subnetwork 5. host. Top. N: contains sorted host stats that top a list based on some parameter in the host table Manajemen Jaringan, Sukiswo ST, MT 18

RMON MIB Groups 6. matrix: shows utilization and error stats in matrix for host pairs 7. filter: allows the monitor to observe packets that match a filter 8. capture: specifies how data is sent to NMS 9. event: specifies events to be generated by the RMON probe 10. token. Ring: maintains stats & config info for token ring subnet Manajemen Jaringan, Sukiswo ST, MT 19

RMON MIB 2 4 RMON MIB monitors MAC-level subnet traffic 4 RMON MIB 2 can monitor traffic of packets at layers 3 to 7 of the OSI Reference Model 4 Provides Network-layer Visibility – can distinguish between local LAN and remote LAN traffic Manajemen Jaringan, Sukiswo ST, MT 20

RMON MIB 2 4 Provides Application-layer Visibility – can analyze traffic to and from hosts for particular applications – can determine which applications are putting the load on the net 4 RMON MIB 2 is basically an extension of RMON MIB Manajemen Jaringan, Sukiswo ST, MT 21

RMON MIB 2 rmon (mib-2 16) statistics (1) history (2) alarm (3) host (4) protocol. Dir (11) protocol. Dist (12) address. Map (13) host. Top. N (5) nl. Host (14) matrix (6) nl. Matrix (15) filter (7) al. Host (16) capture (8) al. Matrix (17) event (9) usr. History (18) token. Ring (10) probe. Config (19) RMON 1 Manajemen Jaringan, Sukiswo ST, MT RMON 2 22

RMON MIB 2 Groups 11. protocol. Dir: a master directory of all of the protocols that the probe can interpret 12. protocol. Dist: aggregate stats on the amount of traffic generated by each protocol, per LAN segment 13. address. Map: contains MAC and port addresses of the devices 14. nl. Host: network layer traffic stats per host 15. nl. Matrix: network layer traffic stats per pairs of hosts Manajemen Jaringan, Sukiswo ST, MT 23

RMON MIB 2 Groups 16. al. Host: application layer traffic stats per host 17. al. Matrix: application layer traffic stats per pairs of hosts 18. user. History: periodically samples and logs user-defined data 19. probe. Config: defines standard configuration parameters for RMON probes Manajemen Jaringan, Sukiswo ST, MT 24

Summary 4 RMON extends the SNMP functionality without changing the protocol 4 RMON can monitor information on a whole subnetwork 4 RMON is used extensively in analyzing network traffic for problem detection and network planning 4 RMON 2 allows monitoring of traffic at layers 3 to 7 in the OSI Model 4 RMON 2 can be used to analyze network traffic more accurately even to the application level 4 Read Chapters 8, 9 and 10 Manajemen Jaringan, Sukiswo ST, MT 25