橡c10-1.PDF

Size: px

Start display at page:

Download "橡c10-1.PDF"

あいとりゅうとう
7 years ago
Views:

2 3 GPL,Opensource TCP-Wapper SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 4 1 IRI 2 ITNet 3 SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 2

3 5 6 NFS NIS UNIX

4 7 Unix 8

5 9 10

6 Kbps BASE-TX/FX,ATM,GigabitEther,FDDI OSPF

7 13 14 BGP

8 15 In Band Out Band 16

9 17 18

10 19 20

11 21 PC 22 CPU

12 23 24

13 25 Configuration Management Performance Management Fault Management Security Management Accounting Management 26 IP MIB_ROM1,2 SNMP Agent MIB SNMP Agent Syslog ILMI NTP NTP Get, GetNext, Set, GetBulk NTP MIB SNMP Agent Syslog SNMP Manager Response, SNMP Traps Syslog Message MIB SNMP Agent Syslog IP SNMP Traps/RMON Syslog Network Time Protocol Neighbor Discovery ILMI

14 27 Loopback0 SNMP IP public ReadOnly pr1v8 ReadWrite ( private 28 ( line vty 0 4 and enable passwords)

15 Cisco IOS12.*S,Juniper JUNOS Expect ** over SSH PDU SNMP Syslog SNMP tcpdump

16 31 32

17 33 NMS Perl Tcl/Tk Web VLAN 34

18 35 36 Perl tcl/tk

19 37 38 Exploring Expect : A Tcl-Based Toolkit for Automating Interactive Programs (Nutshell Handbook) by Don Libes, (December 1994) O'Reilly & Associates; ISBN:

20 39 Tcl(Tool Command Language) Tnm Tkined Building Network Management Tools with Tcl/Tk -- Dave Zeltserman, Gerard Puoplo:(April 15, 1998) (April 15, 1998) Prentice Hall; ISBN:

21 41 42 ping RTT(Round Trip Time) NTP(Network Time Protcol) FAQ SLA (PC) DoS LongPacket--> ShortPacket-->

22 43 UDP 161 PDU(Protocol Data Units) 44 SNMP / MIB

23 45 SNMP MIB MIB 46 GetRequest GetNextRequest GetResponse SetRequest Trap

24 47 SNMP 48 Poling SNMP SNMP UDP 162

25 49 50 MeterMIB NeTraMet NeMac

26 51

27 C10 : /12/15 2 1

28 3 1 Client Base Server Base Server-Client Base Client Base 2

29 Server Base polling ICMP, dns, smtp, pop3, http,... 3

30 Server-Client base probe program server probe SNMP probe Windows9X/NT, NetWare, MacOS,... 8 ICMP Polling - Polling 1 ICMP echo TCP Port Polling 4

31 9 SNMP Polling - Polling 2 SNMP daemon HP OpenView 10 Local Event Trap - Event Trap (CPU,disk,process) Process Log file Remote Event Trap syslog SNMP trap 5

32 11 Pager Call! i-mode ... ISP AP ISP

33 PC 14 2 PC... Web Browser 7

34 WEB Pager Call! WEB ( ) 16 WEB 8

35 17 Polling Base Big Brother, NOCOL, SPONG, mon, Angel, NetSaint, Scotty, Trap Base Syslog + Swatch Snmptrapd(UCD, CMU), MRTG, PyNG, RRDTools+(Remstat,Cricket,ORCA,NRG), 18 Big Brother SPONG Angel NOCOL mon Polling base 9

36 19 - Big Brother WEB Base Server-Client ICMP/TCP ping, smtp, http, pop3,dns,ftp.telnet, ssh,... CPU, disk, processes, logs,. NT/NetWare 20 Big Brother 10

37 21 - Big Brother 22 Big Brother - 11

38 23 Big Brother - 24 Big Brother - 12

39 25 Big Brother

27 28 Big Brother - bb-hosts $ cat bb-hosts # # THE BIG BROTHER HOSTS FILE # 192.168.0.10 kansi1.foo.co.jp # BBPAGER BBNET BBDISPLAY http://kansi1/ group-compress <H3><I>foo.co.jp Servers</I></H3> 192.

40 27 28 Big Brother - bb-hosts $ cat bb-hosts # # THE BIG BROTHER HOSTS FILE # kansi1.foo.co.jp # BBPAGER BBNET BBDISPLAY group-compress <H3><I>foo.co.jp Servers</I></H3> ns1.foo.co.jp # dns ssh mail.foo.co.jp # dns smtp pop3 ssh # telnet ssh ftp # router interface entry group-compress <H3><I>Router Interface</I></H3> gw1.foo.co.jp gw2.foo.co.jp tok-yok-ma30.wan.foo.co.jp tok-osa-dr15.wan.foo.co.jp $ 14

41 29 Big Brother - bbwarnrule $ cat bbwarnrules.cfg # bbwarnrules.cfg # # Rules are written in the following format: # hosts;exhosts;services;exservices;day;time;recipients # hosts: match on these hosts (* is a wildcard for all hosts) # exhosts: exclude these hosts # services: match on these services (* is wildcard for all hosts) # exservices: exclude these services # day: 0-6 (sunday-saturday) # time: # recipients: address, numeric pager, sms number ns1.* mail.*;;*;;*;*;server-admin@foo.co.jp *;;*;;*;*;admin@foo.co.jp unmatched-*;;*;;*;*;root@localhost $ 30 - SPONG WEB Base Server-Client Big Brother! ICMP/TCP smtp, http, ping, pop,dns,ftp.telnet,... CPU, disk, processes, logs,. 15

42 31 - SPONG. 32 SPONG - 16

43 33 SPONG - log log 1 34 SPONG - log log 2 17

35 SPONG - log log 3 36 SPONG - spong.hosts %HUMANS = ( 'admin' => { name => 'Engineer', email => 'admin@foo.co.jp' }, tomoharu => { name => TOMOHARU, email => tomoharu@foo.co.jp }, 'yahagi' => { name => 'YAHAGI', email => 'yahagi@foo.

44 35 SPONG - log log 3 36 SPONG - spong.hosts %HUMANS = ( 'admin' => { name => 'Engineer', => 'admin@foo.co.jp' }, tomoharu => { name => TOMOHARU, => tomoharu@foo.co.jp }, 'yahagi' => { name => 'YAHAGI', => 'yahagi@foo.co.jp' }, ); %HOSTS = ( kanshi.foo.co.jp' => { services => 'pop smtp', contact => admin', group => 'unix' }, ns.foo.co.jp' => { services => 'pop telnet', contact => admin', group => 'unix' }, regist.foo.co.jp' => { services => 'dns telnet', contact => admin', group => 'unix, down => [ '*:04:00-05:00' ] }, => { services => 'ftp telnet http', contact => tomoharu', group => 'unix' }, 'mail.foo.co.jp' => { services => 'pop smtp telnet', contact => admin', group => 'unix' }, 'gw1.foo.co.jp' => { services => '', contact => 'yahagi', group => router' }, 'gw2.foo.co.jp' => { services => '', contact => 'yahagi', group => router' }, ); 18

45 37 SPONG - spong.group %GROUPS = ( all => { name => All Systems, summary => all hosts monitored by spong" }, unix => { name => "Unix - All", summary => "All Unix Systems and Servers", members => [ kanshi.foo.co.jp, ns.foo.co.jp, regist.foo.co.jp, mail.foo.co.jp ] }, router => { name => ROUTER, summary => router group, members => [ gw1.foo.co.jp, gw2.foo.co.jp ] } ); Angel WEB Base Server ICMP/TCP smtp, http, ping, pop,nntp,dns,... CPU, disk,... Perl Check_tcp, Check_ping, Check_load, Check_disk http URL 19

39 Angel - 40 Angel - hosts.conf $ cat hosts.conf # # Check server # ns:check_ping:ns.foo.co.jp!100!200!5!15:ping:alertred!alertyellow!alertblack mail:check_ping:mail.foo.co.jp!100!200!5!15:ping:alertred!alertyellow!alertblack mail:check_tcp:mail.

46 39 Angel - 40 Angel - hosts.conf $ cat hosts.conf # # Check server # ns:check_ping:ns.foo.co.jp!100!200!5!15:ping:alertred!alertyellow!alertblack mail:check_ping:mail.foo.co.jp!100!200!5!15:ping:alertred!alertyellow!alertblack mail:check_tcp:mail.foo.co.jp!80:smtp:alertred!alertyellow!alertblack www:check_ping: www:check_tcp: www:check_tcp: # # Check the gateway routers # gw1:check_ping: !100!200!5!15:ping:alertred!alertyellow!alertblack gw2:check_ping: !100!200!5!15:ping:alertred!alertyellow!alertblack $ 20

47 41 - NOCOL WEB Base ICMP/TCP SNMP CMU-SNMP Package UPS telnet login expect auto-pilot 42 - NOCOL Ping, Ethernet load, radius, ntp, bgp peer, rpc portmapper, tcp ports, syslog mesg, ups battery, snmp variables, OSI ping, dns, mailq, unix host perf, data throughput,. 21

43 NOCOL - 44 NOCOL apcmon-confg armon-confg bgpmon-confg bpmon-confg etherload-confg hostmon-confg ippingmon-confg modemmon-confg noclogd-confg notifier-confg

48 43 NOCOL - 44 NOCOL apcmon-confg armon-confg bgpmon-confg bpmon-confg etherload-confg hostmon-confg ippingmon-confg modemmon-confg noclogd-confg notifier-confg novellmon-confg nsmon-confg ntpmon-confg pm3dmmon-confg pm3t1e1mon-confg portmon-confg radiusmon-confg rpcpingmon-confg snmpmon-client-confg snmpmon-confg syslogmon-confg tpmon-confg 22

49 45 - mon WEB Base ICMP/TCP SNMP (UCD-SNMP Package Base) Ping, SMTP, telnet, ftp, nntp, http, pop3m imap, tcp ports, disk space, snmp variables, ldap, dns, modems Big Brother/SPONG 46 mon - 23

50 47 watch servers service ping interval 5m monitor fping.monitor period wd {Mon-Fri} hr {7am-10pm} alert mail.alert alertevery 1h period wd {Sat-Sun} alert mail.alert service telnet interval 10m monitor telnet.monitor period wd {Mon-Fri} hr {7am-10pm} alertevery 1h alertafter 2 30m alert mail.alert root@localhost mon - mon.cf cf hostgroup mail mailhost # alertdir = /usr/lib/mon/alert.d mondir = /usr/lib/mon/mon.d maxprocs = 20 histlength = 100 randstart = 60s # # define groups of hosts to monitor # hostgroup servers localhost 48 Spong 24

51 49 Syslog+SWATCH Trap base Swatch: the simple WATCH dog snmptrapd UCD-SNMP Package CMU-SNMP Package 50 SWATCH syslog loghost 25

52 51 SWATCH config $ cat ~/swatchrc # Swatch configuration file for constant monitoring # Bad login attempts watchfor = /LOGIN FAILURES/ echo bell=3 exec="finger $10 mail -s LOGIN-FAILURE:$10 admin@foo.co.jp # System crashes and halts and reboots watchfor = /panic halt/ echo bell # mail=admin@foo.co.jp:yahagi@foo.co.jp exec= echo $0 mail -s SYSTEM-HALT pager@foo.co.jp $ $ swatch --config-file=~/swatchrc --tail-file=/var/log/messages 52 UCD-SNMP Package Unix SNMP Package snmpd, snmptrapd, snmpbulkwalk, snmpget, snmpset, snmptest, snmpusm, snmpcheck, snmpgetnext, snmpstatus, snmptranslate, snmpwalk, snmpdelta, snmpnetstat, snmptable, snmptrap 26

53 53 UCD-SNMP snmptrapd SNMP trap event daemon trap event Trap Trap event Trap Snmptrapd.conf traphandle <OID> <action> <parameters.> traphandle default <action> <parameters.> 54 snmptrapd.conf.conf # SNMP Trap : Cold Start traphandle /usr/bin/mail -s "coldstart Trap" admin@foo.co.jp # SNMP Trap : Warm Start traphandle /usr/bin/mail -s "warmstart Trap" admin@foo.co.jp # SNMP Trap : Link Down traphandle /usr/bin/mail -s "linkdown Trap" admin@foo.co.jp # SNMP Trap : Link Up traphandle /usr/bin/mail -s "linkup Trap" admin@foo.co.jp # SNMP Trap : Authentication Failure traphandle /usr/bin/mail -s "authfail Trap" admin@foo.co.jp # SNMP Trap : Other traphandle default /usr/bin/mail -s "Other Traps" yahagi@foo.co.jp 27

54 snmptrapd - cisco snmp config 55 access-list 30 permit snmp-server contact admin@foo.co.jp snmp-server location YOKOHAMA-IW99 snmp-server community himitsu RO 30 snmp-server enable traps config snmp-server host NAISHO tty config envmon snmp 56 snmptrapd - From: log-admin <root@log.foo.co.jp> To: admin@foo.co.jp Date: Mon, 1 Nov :01: (JST) Subject: linkdown Trap nspixp2-gw.foo.co.jp system.sysuptime 24:10:03:09.12.iso.org.dod.internet.snmpV2.snmpModules.snmpMIB.snmpMIBObjects.snmpTrap.snm ptrapoid.iso.org.dod.internet.snmpv2.snmpmodules.snmpmib.snmpmibobjects.snm ptraps.linkdown interfaces.iftable.ifentry.ifindex.1 1 interfaces.iftable.ifentry.ifdescr.1 "Fddi1/0/0" interfaces.iftable.ifentry.iftype.1 Fddi enterprises "administratively down".iso.org.dod.internet.snmpv2.snmpmodules.snmpmib.snmpmibobjects.snmptrap.snm ptrapenterprise enterprises

55 MRTG (Multi Router Traffic Grapher) 57 PyNG (the Python Network Grapher) 58 MRTG ( ) MRTG : Multi Router Traffic Grapher 29

56 59 MRTG Unix WindowsNT SNMP Package WEB index 60 MRTG - cfgmaker mrtg cfgmaker <community>@<target> > mrtg.cfg <community> : snmp community string <target> : target address or hostname $ cfgmaker himitsu@ix-gw.foo.co.jp > ix-gw.cfg community target ifinoctets/ ifoutoctets syscontact/location WorkDir: 30

57 61 MRTG - cfgmaker # Add a WorkDir: /some/path line to this file ###################################################################### # Description: Cisco Internetwork Operating System Software IOS (tm) GS... # Contact: admin@foo.co.jp # System Name: ix-gw.foo.co.jp # Location: PA, CA, US #... Target[ix-fddi.foo.co.jp]: 1:himitsu@ MaxBytes[ix-fddi.foo.co.jp]: Title[ix-fddi.foo.co.jp]: ix-gw.foo.co.jp (ix-fddi.foo.co.jp): Fddi1/0/0 PageTop[ix-fddi.foo.co.jp]: <H1>Traffic Analysis for Fddi1/0/0 </H1> <TABLE> <TR><TD>System:</TD><TD>ix-gw.foo.co.jp in Otemachi 5F</TD></TR> <TR><TD>Maintainer:</TD><TD></TD></TR> <TR><TD>Interface:</TD><TD>Fddi1/0 (1)</TD></TR> <TR><TD>IP:</TD><TD>ix-fddi.foo.co.jp ( )</TD></TR> <TR><TD>Max Speed:</TD> <TD>12.5 MBytes/s (fddi)</td></tr> </TABLE> 62 MRTG cron (default : 5 ) # crontab -l 0,5,10,15,20,25,30,35,40,45,50,55 * * * /usr/local/sbin/mrtg /usr/local/etc/ix-foo.cfg # config Target 31

58 63 MRTG - Target Keyword: Target - Target[gw1-3]: 3:himitsu@gw1.foo.co.jp Target[gw1-err-3]: ifinerrors.3&ifouterrors.3:himitsu@gw1.foo.co.jp Target[gw1-if-1]: -/ :himitsu@gw1.foo.co.jp Target[gw1-pingloss]: `/usr/local/bin/check_loss.sh gw1` SNMP 64 MRTG - Target :SNMP 1 SNMP Target[<target name>]: <target kind>:<community>@<address> <target name> : <target kind> : <community> : community string <address> : 32

59 65 MRTG - Target :SNMP 2 SNMP Port (ifindex ) SNMP OID / SNMP MIB symbol Interface Address 66 MRTG - Target :SNMP 3 Port (ifindex ) SNMP Client Port (ifindex) ifinoctets ifoutoctets 1 Target[gw1-3]: 3:himitsu@gw1.foo.co.jp gw1.foo.co.jp ifindex=3 Interface ifinoctets/ifoutoctets 2 Target[gw1-3]: -3:himitsu@gw1.foo.co.jp 1 In/Out 33

60 67 MRTG - Target :SNMP 4 SNMP OID / SNMP MIB symbol SNMP OID(Object ID) MIB symbol "&" 3 Target[gw1-err-3]: ifinerrors.3&ifouterrors.3:himitsu@gw1.foo.co.jp gw1.foo.co.jp ifindex=3 Interface ifinerrors/ifouterrors 4 Target[gw1-err-3]: & :himitsu@gw1.foo.co.jp OID 68 - MIB Group RFC-1213 MIB-2 iso(1).org(3).dod(6).internet(1).mgmnt(2).mib(1). 1: system 2: interfaces 3: at 4: ip IP 5: icmp ICMP 6: tcp TCP 7: udp UDP 11: snmp SNMP 34

61 - SNMP OID/MIB Symbols [interfaces.iftable.ifentry] group : ifindex : ifdescr : iftype : ifinoctets : ifoutoctets : ifinucastpkts : ifoutucastpkts : ifindiscards : ifoutdiscards : ifinerrors : IfOutErrors 69 MRTG - Target :SNMP 5 Interface Address 1 Port (ifindex) loopback tunnel Interface SNMP ifindex 70 numbered ifinoctets ifoutoctets 35

62 71 MRTG - Target :SNMP 6 Interface Address 2 5 Target[gw1-if-1]: / :himitsu@gw1.foo.co.jp gw1.foo.co.jp Interface ifinoctets/ifoutoctets 6 Target[gw1-if-1]: -/ :himitsu@gw1.foo.co.jp 5 In/Out 72 MRTG - Target :SNMP 7 Interface addres OID/MIB symbol 7 Target[gw1-if-1-disc]: ifindiscards/ & ifoutdiscards/ :himitsu@gw1.foo.co.jp gw1.foo.co.jp Interface ifindiscards/ifoutdiscards 8 Target[gw1-if-1-disc]: / & / :himitsu@gw1.foo.co.jp 7 OID 36

63 MRTG - Target : 73 Target[<target name>]: `<command>` <target name> : <command> : ` : incoming bytes outgoing bytes target uptime target 74 MRTG SNMP packet loss ping # ping -f -c 100 ftp.foo.co.jp PING ftp.foo.co.jp ( ): 56 data bytes. --- ftp.foo.co.jp ping statistics packets transmitted, 95 packets received, 5% packet loss round-trip min/avg/max/stddev = 0.161/0.164/0.221/0.006 ms # -f : flood mode (supervisor only option). 37

64 75 MRTG - check_loss.shsh ping packet loss 100 packets transmitted, 95 packets received, 5% packet loss # cat /usr/local/bin/check_loss.sh #!/bin/sh /sbin/ping -f -c 100 $1 /usr/bin/sed 's/%//g' /usr/bin/awk /packet loss/ { printf("%d n%d n", $7, $7) } echo 0 ; echo $0 $* # /usr/local/bin/check_loss2.sh ftp.foo.co.jp /usr/local/bin/check_loss.sh ftp.foo.co.jp # 76 MRTG - ping-loss. loss.cfg # cat ping-loss.cfg WorkDir: /usr/local/etc/www/mrtg/ping-loss Target[pingloss-ftp]: `/usr/local/bin/check_loss.sh ftp.foo.co.jp` Title[pingloss-ftp]: ftp.foo.co.jp - pingloss MaxBytes[pingloss-ftp]: 100 PageTop[pingloss-ftp]: <H1> ftp.foo.co.jp - pingloss </H1> YLegend[pingloss-ftp]: packet loss(%) ShortLegend[pingloss-ftp]: % LegendI[pingloss-ftp]: loss: LegendO[pingloss-ftp]: loss: Legend1[pingloss-ftp]: packet loss Legend2[pingloss-ftp]: packet loss Legend3[pingloss-ftp]: Maximal 5 Minute packet loss Legend4[pingloss-ftp]: Maximal 5 Minute packet loss Options[pingloss-ftp]: noinfo, growright, gauge, nopercent # 38

65 77 MRTG - 78 MRTG TIPS In/Out ifinoctets/ifoutoctets Octet bps bit Options[hoge] bits Maxbytes[hoge] 1/8 Interface address 39

66 79 NetSaint RRDTools MRTG3(?) 80 - NetSaint WEB Base version Web Base ICMP/TCP ping, smtp, http, pop3,dns,ftp.telnet, Plugin MRTG plugin remote server management plugin... 40

67 81 NetSaint - Summary 82 NetSaint - Detail 41

68 83 NetSaint - Object Map - RRDTools RRDTools :Round Robin Database Tools MRTG Tobi Oetiker MRTG MRTG RRDTools MRTG WEB FrontEnd Program Remstat, ORCA, Cricket, NRG,

69 85 RRDTools RRDTools

70 87 RRDTools+NRG 88 RRDTools+Remstat1 44

71 89 RRDTools+Remstat2 90 Ref: InternetWeek99 Always under-construction (^^; 45

75 TIPS - SNMP 2: 7 SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom TIPS - SNMP 3: Interface 8 SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 4

76 TIPS - SNMP 4: ifindex 9 SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom TIPS - SNMP 5: UCD-SNMP SNMP $ snmpwalk himitsu 1 $ snmpwalk himitsu 2 $ snmpwalk himitsu ifdescr $ snmpwalk himitsu iftype $ snmptranslate -n -R ifindiscards $ snmptranslate -R ifindiscards $ snmptranslate -n -f -d -R ifindiscards 10 SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 5

77 TIPS - MRTG1 ( ) 11 SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom TIPS - MRTG2 MRTG CPU Load1 $ /usr/local/etc/mrtg/cpu.sh #!/bin/csh top -d 2 grep 'CPU states' awk '{ print $(NF-1) }' cut -f1 -d"." awk '{ a=100-$1 ; print $1 " n" a " n" }' uptime awk '{print $3 " " $4; }' cut -f1 -d"," hostname $ /usr/local/etc/mrtg/cpu.sh :19 myhost.foo.co.jp $ 12 shell shell SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 6

78 SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom TIPS - MRTG3 MRTG CPU Load2 mrtg.cfg idle/active CPU Target[cpu]: `/usr/local/etc/mrtg/cpu.sh` MaxBytes[cpu]: 80 AbsMax[cpu]: 100 Options[cpu]: gauge, nopercent Title[cpu]: CPU State PageTop[cpu]: <h1>cpu State</h1> YLegend[cpu]: CPU State ShortLegend[cpu]: % LegendI[cpu]: Idle: LegendO[cpu]: Active: Legend1[cpu]: Current Idle Legend2[cpu]: Current Active Legend3[cpu]: Peak Idle Legend4[cpu]: Peak Active SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 7

79 C10 : 1 : /URL Copyright 1999 Internet Research Institute Copyright 1999 Intelligent Telecom 2 1 UNIX MAGAZINE Unix Communication Notes OPEN DESIGN No.10 Software Design trafshow, MRTG, ntop SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 1

80 3 SNMP 2 "Snmp, Snmpv2, Snmpv3, and Rmon 1 and 2" -- William Stallings; 3rd edition (January 1999) Addison-Wesley Pub Co; ISBN: ; "Practical Guide to SNMPv3 and Network Management, A" -- David Zeltserman, Dave Zeltserman; (May 4, 1999) Prentice Hall; ISBN: SNMP - - William Stallings Addison-Wesley Publiching Company; ISBN SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 4 Communication Traffic Project Distributed Benchmark System SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 2

81 5 Network Management re/pubdomain.html ou/snmpdocs/tutorial1.html SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 6 URL Angel Network Monitor Big Brother Expect IPTraf MRTG SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 3

82 7 mon NeTraMet URL e.note.html NetSaint nocol ntop SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 8 RRDTool URL Frontend - CRICKET Frontend - NRG webtools/rrdtool/frontends/nrg.html Frontend - ORCA Frontend - Remstats SPONG SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 4

83 9 Scotty URL SWATCH statscout Treno Experimental TCP Implementations UCD-SNMP SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 10 General network management portal URL URL Another good network management portal m&Mint= &FFV=1 The Simple Times times/issues/ SNMP FAQ snmp-faq/part1/faq.html SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom 5

84 11 URL Sample Cisco device security configs Cisco device SNMP configuration tips SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom IETF NANOG JANOG CAIDA cflowd,rrd etc LBNL's Network Research Group SATO/Internet Research Institute Copyright 1999 Shigeki YAHAGI/Intelligent Telecom tcpdump, libpcap, arpwatch, traceroute, pathchar Solaris Freeware Project Fresh Meat - Linux Software Index

橡yahagi.PDF

橡yahagi.PDF 2 1 4 2 5 6 3 7 8 4 9 10 Traffic 5 11 12 6 13 14 $ multiping -t -c 10 www.apple.com www.bose.com PING www.apple.com (17.254.0.91) (17.254.0.91): 56 data bytes PING bose.com (146.115.60.42) (146.115.60.42):

橡c10-1.PDF

橡c10-1.PDF