RE: WAN Monitoring tool

From: Kenneth Wygand (KWygand@customonline.com)
Date: Tue May 25 2004 - 15:17:37 GMT-3

Next message: Warren Chuck Contr JCIET/J6: "RE: WAN Monitoring tool"
Previous message: Vazman@aol.com: "Re: WAN Monitoring tool"
Maybe in reply to: Sam Joseph: "WAN Monitoring tool"
Next in thread: Warren Chuck Contr JCIET/J6: "RE: WAN Monitoring tool"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This is a multi-part message in MIME format.

------_=_NextPart_001_01C44284.8F31FA30
Content-Type: multipart/alternative;
boundary="----_=_NextPart_002_01C44284.8F31FA30"

------_=_NextPart_002_01C44284.8F31FA30
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Warren,

=20

They are in the provided link:

=20

http://www.vermeer.org/display_doc.php?doc_id=3D6

=20

Kenneth E. Wygand=20
Systems Engineer, Project Services

CISSP #37102, CCNP, CCDP, ACSP, Cisco IPT Design Specialist, MCP, CNA,
Network+, A+
Custom Computer Specialists, Inc.=20

"I am not really smart. I just stick with problems longer."
-Albert Einstein

=20

Custom Computer Specialists, Inc.

"Celebrating 25 Years of Excellence"

=20

-----Original Message-----
From: Warren Chuck Contr JCIET/J6 [mailto:charles.warren@eglin.af.mil]=20
Sent: Tuesday, May 25, 2004 2:15 PM
To: 'Carlos G Mendioroz'; Clay Maney
Cc: Anthony Pace; Kenneth Wygand; Sam Joseph; ccielab@groupstudy.com
Subject: RE: WAN Monitoring tool

=20

anyone have the nbar_mib....Cisco's web/ftp for mibs is non-functional.

> -----Original Message-----=20
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of

> Carlos G Mendioroz=20
> Sent: May 25, 2004 12:33 PM=20
> To: Clay Maney=20
> Cc: Anthony Pace; Kenneth Wygand; Sam Joseph; ccielab@groupstudy.com=20
> Subject: Re: WAN Monitoring tool=20
>=20
>=20
> Sure you can do.=20
> NBAR has a full MIB and MRTG can graph ANY MIB variable.=20
> Also, you can use CBWFQ with NBAR configuration and graph=20
> offered versus=20
> accepted traffic.=20
>=20
> Also, there's another way of tackling the issue using netflow=20
> info. You=20
> make the router export netflow information to a netflow=20
> server, and then=20
> generate info from that. Dave Plonka's flowscan tool and some plugins=20
> for it make a nice work in that arena.=20
>=20
> Clay Maney wrote:=20
>=20
> > I did a quick google search and came across an example of someone=20
> > using MRTG to graph NBAR information.=20
> >=20
> > I haven't tried it, but it looks comprehensive:=20
> >=20
> > http://www.vermeer.org/display_doc.php?doc_id=3D6=20
> >=20
> > Clay=20
> >=20
> > On Tue, May 25, 2004 at 08:51:37AM -0700, Anthony Pace wrote:=20
> >=20
> >>NBAR will break down the traffic on the router with respect to=20
> >>application (it even goes beyond the port and into the=20
> content) but I=20
> >>can't find a tool to create a graphical representation. You=20
> have to look=20
> >>at the counters. Does anyone know a way around this?=20
> >>=20
> >>Solarwinds is a very easy-to-use and comprehensive=20
> monitoring tool. It is=20
> >>a suite of tools for bandwidth, CPU, uptime, etc...=20
> >>=20
> >>=20
> >>Anthony Pace CCIE 10349=20
> >>=20
> >>=20
> >>=20
> >>On Tue, 25 May 2004 11:43:33 -0400, "Kenneth Wygand"=20
> >><KWygand@customonline.com> said:=20
> >>=20
> >>>I've used PRTG in the past and it works great! However, it=20
> only shows=20
> >>>you circuit utilization. Suppose I wanted to see not only=20
> _HOW MUCH_=20
> >>>traffic is going over the circuit, but _WHAT_ is going=20
> over the circuit.=20
> >>>It would be nice to filter this information based on=20
> source IP address,=20
> >>>etc. but sometimes this level of detail is not necessary. Suppose,=20
> >>>however, that I wanted to see if all of the traffic on an=20
> OC3 circuit=20
> >>>was FTP or Internet Radio? I believe Netflow switching is=20
> a component of=20
> >>>doing the trick, but can you gather basic information=20
> simply from CLI=20
> >>>commands? Can you dump log files to a syslog server? Or=20
> do you need an=20
> >>>actual management suite application, such as Ciscoworks=20
> with the WAN/QoS=20
> >>>functionality?=20
> >>>=20
> >>>Does anyone have any recommendations?=20
> >>>=20
> >>>Kenneth E. Wygand=20
> >>>Systems Engineer, Project Services=20
> >>>CISSP #37102, CCNP, CCDP, ACSP, Cisco IPT Design=20
> Specialist, MCP, CNA,=20
> >>>Network+, A+=20
> >>>Custom Computer Specialists, Inc.=20
> >>>"The only unattainable goal is the one not attempted."=20
> >>>-Anonymous=20
> >>>=20
> >>>-----Original Message-----=20
> >>>From: Clay Maney [mailto:clay@pronettech.com]=20
> >>>Sent: Tuesday, May 25, 2004 11:29 AM=20
> >>>To: Kenneth Wygand=20
> >>>Cc: Sam Joseph; ccielab@groupstudy.com=20
> >>>Subject: Re: WAN Monitoring tool=20
> >>>=20
> >>>I responded directly and forgot to respond to the group with this:=20
> >>>=20
> >>>On top of the MRTG/PRTG type tools, there's also one that=20
> I sometimes=20
> >>>use for immediate (non-historical) snmp bandwidth graphing=20
> called STG.=20
> >>>The only downside is that it only runs on Windows. It is *very*=20
> >>>straightforward if you need some quick info and polls the interface

> >>>once per second by default.=20
> >>>=20
> >>>You can get it here: http://leonidvm.chat.ru/=20
> >>>=20
> >>>Clay=20
> >>>=20
> >>>On Tue, May 25, 2004 at 10:22:11AM -0400, Kenneth Wygand wrote:=20
> >>>=20
> >>>>MRTG (Unix) or PRTG (x86 Windows Variant)=20
> >>>>=20
> >>>>PRTG:=20
> >>>>http://www.paessler.com=20
> >>>>=20
> >>>>Kenneth E. Wygand=20
> >>>>Systems Engineer, Project Services=20
> >>>>CISSP #37102, CCNP, CCDP, ACSP, Cisco IPT Design=20
> Specialist, MCP, CNA,=20
> >>>>Network+, A+=20
> >>>>Custom Computer Specialists, Inc.=20
> >>>>"The only unattainable goal is the one not attempted."=20
> >>>>-Anonymous=20
> >>>>=20
> >>>>-----Original Message-----=20
> >>>>From: nobody@groupstudy.com=20
> [mailto:nobody@groupstudy.com] On Behalf=20
> >>>=20
> >>>Of=20
> >>>=20
> >>>>Sam Joseph=20
> >>>>Sent: Monday, May 24, 2004 11:06 PM=20
> >>>>To: ccielab@groupstudy.com=20
> >>>>Subject: WAN Monitoring tool=20
> >>>>=20
> >>>>Dear Group,=20
> >>>>=20
> >>>>What are best methods of monitoring the frame-relay=20
> between two sites=20
> >>>>other=20
> >>>>than beleiving what my ISP says?. I feel the circuit is nearing=20
> >>>>saturation.=20
> >>>>I did some ping tests when i get complaints from users,=20
> the ping time=20
> >>>=20
> >>>is=20
> >>>=20
> >>>>terrible. The ping time is anywhere between 1000 msec=20
> .... to time=20
> >>>>outs.Looked at the Interface Queue on the router (3810) and that=20
> >>>>doesn't=20
> >>>>look better either.=20
> >>>>=20
> >>>>I would like to monitor this circuit with a better tool?. Any=20
> >>>=20
> >>>ideas????=20
> >>>=20
> >>>>Thanks in Advance,=20
> >>>>=20
> >>>>---Sam.=20
> >>>>=20
> >>>>_________________________________________________________________=20
> >>>>FREE pop-up blocking with the new MSN Toolbar get it now!=20
> >>>>http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/=20
> >>>>=20
> >>>>=20
> >>>=20
> >>>___________________________________________________________=20
> ____________=20
> >>>=20
> >>>>Please help support GroupStudy by purchasing your study materials=20
> >>>=20
> >>>from:=20
> >>>=20
> >>>>http://shop.groupstudy.com=20
> >>>>=20
> >>>>Subscription information may be found at:=20
> >>>>http://www.groupstudy.com/list/CCIELab.html=20
> >>>>=20
> >>>>=20
> >>>=20
> >>>___________________________________________________________=20
> ____________=20
> >>>=20
> >>>>Please help support GroupStudy by purchasing your study materials=20
> >>>=20
> >>>from:=20
> >>>=20
> >>>>http://shop.groupstudy.com=20
> >>>>=20
> >>>>Subscription information may be found at:=20
> >>>>http://www.groupstudy.com/list/CCIELab.html=20
> >>>=20
> >>>___________________________________________________________=20
> ____________=20
> >>>Please help support GroupStudy by purchasing your study=20
> materials from:=20
> >>>http://shop.groupstudy.com=20
> >>>=20
> >>>Subscription information may be found at:=20
> >>>http://www.groupstudy.com/list/CCIELab.html=20
> >>=20
> >>--=20
> >> Anthony Pace=20
> >> anthonypace@fastmail.fm=20
> >>=20
> >>--=20
> >>http://www.fastmail.fm - The way an email service should be=20
> >=20
> >=20
> >=20
> ______________________________________________________________=20
> _________=20
> > Please help support GroupStudy by purchasing your study=20
> materials from:=20
> > http://shop.groupstudy.com=20
> >=20
> > Subscription information may be found at:=20
> > http://www.groupstudy.com/list/CCIELab.html=20
> >=20
>=20
> --=20
> Carlos G Mendioroz <tron@huapi.ba.ar> LW7 EQI Argentina=20
>=20
> ______________________________________________________________=20
> _________=20
> Please help support GroupStudy by purchasing your study=20
> materials from:=20
> http://shop.groupstudy.com=20
>=20
> Subscription information may be found at:=20
> http://www.groupstudy.com/list/CCIELab.html=20
>=20

------_=_NextPart_002_01C44284.8F31FA30
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html>

</head>

Warren,

They are in the provided =
link:

<a href=3D"http://www.vermeer.org/display_doc.php?doc_id=3D6"
target=3D"_blank">http://www.vermeer.org/display_doc.php?doc_id=3D6></=
span>

<div>

Kenneth E. =
Wygand 
Systems Engineer, Project =
Services

CISSP #37102, =
CCNP, CCDP,
ACSP, Cisco IPT Design Specialist, MCP, CNA, Network+, =
A+ 
Custom Computer Specialists, Inc.

"I am not really smart. I just =
stick
with problems longer." 
-Albert Einstein

Custom Computer
Specialists, Inc.

=
"Celebrating
25 Years of Excellence"

</div>

-----Original =
Message----- 
From: Warren Chuck Contr =
JCIET/J6
[mailto:charles.warren@eglin.af.mil] 
Sent: Tuesday, May 25, =
2004 2:15
PM 
To: 'Carlos G Mendioroz'; =
Clay
Maney 
Cc: Anthony Pace; Kenneth =
Wygand;
Sam Joseph; ccielab@groupstudy.com 
Subject: RE: WAN =
Monitoring tool

anyone have the nbar_mib....Cisco's web/ftp =
for mibs
is non-functional.

> -----Original Message----- =
 
> From: =
nobody@groupstudy.com [<a
href=3D"mailto:nobody@groupstudy.com">mailto:nobody@groupstudy.com</a>]On=
Behalf
Of 
> Carlos G =
Mendioroz
 
> Sent: May 25, 2004 =
12:33 PM
 
> To: Clay =
Maney 
> Cc: Anthony Pace; =
Kenneth
Wygand; Sam Joseph; ccielab@groupstudy.com 
> Subject: Re: WAN =
Monitoring
tool 
> 
> 
> Sure you can =
do.
 
> NBAR has a full MIB =
and MRTG
can graph ANY MIB variable. 
> Also, you can use =
CBWFQ with
NBAR configuration and graph 
> offered versus =
 
> accepted =
traffic.
 
> 
> Also, there's =
another way of
tackling the issue using netflow 
> info. You =
 
> make the router =
export netflow
information to a netflow 
> server, and then =
 
> generate info from =
that. Dave
Plonka's flowscan tool and some plugins 
> for it make a nice =
work in
that arena. 
> 
> Clay Maney =
wrote:
 
> 
> > I did a quick =
google
search and came across an example of someone 
> > using MRTG to =
graph NBAR
information. 
> > =
 
> > I haven't =
tried it, but
it looks comprehensive: 
> > =
 
> > <a
href=3D"http://www.vermeer.org/display_doc.php?doc_id=3D6" =
target=3D"_blank">http://www.vermeer.org/display_doc.php?doc_id=3D6></=
span>
 
> > =
 
> > =
Clay 
> > =
 
> > On Tue, May =
25, 2004 at
08:51:37AM -0700, Anthony Pace wrote: 
> > =
 
> >>NBAR will =
break down
the traffic on the router with respect to 
> >>application =
(it even
goes beyond the port and into the 
> content) but =
I 
> >>can't find =
a tool to
create a graphical representation. You 
> have to =
look 
> >>at the =
counters. Does
anyone know a way around this? 
> =
>> 
> >>Solarwinds =
is a very
easy-to-use and comprehensive 
> monitoring tool. It =
is
 
> >>a suite of =
tools for
bandwidth, CPU, uptime, etc... 
> =
>> 
> =
>> 
> >>Anthony =
Pace CCIE
10349 
> =
>> 
> =
>> 
> =
>> 
> >>On Tue, 25 =
May 2004
11:43:33 -0400, "Kenneth Wygand" 
>
>><KWygand@customonline.com> said: 
> =
>> 
> >>>I've =
used PRTG in
the past and it works great! However, it 
> only =
shows 
> >>>you =
circuit
utilization. Suppose I wanted to see not only 
> _HOW =
MUCH_ 
> >>>traffic =
is going
over the circuit, but _WHAT_ is going 
> over the =
circuit.
 
> >>>It =
would be nice
to filter this information based on 
> source IP =
address,
 
> >>>etc. =
but sometimes
this level of detail is not necessary. Suppose, 
> =
>>>however, that I
wanted to see if all of the traffic on an 
> OC3 =
circuit 
> >>>was FTP =
or
Internet Radio? I believe Netflow switching is 
> a component =
of 
> >>>doing =
the trick,
but can you gather basic information 
> simply from =
CLI 
> =
>>>commands? 
Can you dump log files to a syslog server?  Or 
> do you need =
an 
> >>>actual =
management
suite application, such as Ciscoworks 
> with the =
WAN/QoS
 
> =
>>>functionality?
 
> =
>>> 
> >>>Does =
anyone have
any recommendations? 
> =
>>> 
> >>>Kenneth =
E. Wygand 
> >>>Systems =
Engineer,
Project Services 
> >>>CISSP =
#37102,
CCNP, CCDP, ACSP, Cisco IPT Design 
> Specialist, MCP, =
CNA,
 
> =
>>>Network+, A+
 
> >>>Custom =
Computer
Specialists, Inc. 
> =
>>>"The only
unattainable goal is the one not attempted." 
> =
>>>-Anonymous
 
> =
>>> 
> =
>>>-----Original
Message----- 
> >>>From: =
Clay Maney [<a
href=3D"mailto:clay@pronettech.com">mailto:clay@pronettech.com</a>] =
 
> >>>Sent: =
Tuesday, May
25, 2004 11:29 AM 
> >>>To: =
Kenneth Wygand
 
> >>>Cc: Sam =
Joseph;
ccielab@groupstudy.com 
> =
>>>Subject: Re: WAN
Monitoring tool 
> =
>>> 
> >>>I =
responded
directly and forgot to respond to the group with this: =
 
> =
>>> 
> >>>On top =
of the
MRTG/PRTG type tools, there's also one that 
> I =
sometimes 
> >>>use for =
immediate
(non-historical) snmp bandwidth graphing 
> called =
STG. 
> >>>The =
only downside
is that it only runs on Windows.  It is *very* 
> =
>>>straightforward if
you need some quick info and polls the interface 
> >>>once =
per second by
default. 
> =
>>> 
> >>>You can =
get it
here: <a href=3D"http://leonidvm.chat.ru/" =
target=3D"_blank">http://leonidvm.chat.ru/>
 
> =
>>> 
> =
>>>Clay
 
> =
>>> 
> >>>On Tue, =
May 25,
2004 at 10:22:11AM -0400, Kenneth Wygand wrote: 
> =
>>> 
> =
>>>>MRTG (Unix) or
PRTG (x86 Windows Variant) 
> =
>>>>
 
> =
>>>>PRTG:
 
> >>>><a
href=3D"http://www.paessler.com" =
target=3D"_blank">http://www.paessler.com>
 
> =
>>>>
 
> =
>>>>Kenneth E.
Wygand 
> =
>>>>Systems
Engineer, Project Services 
> =
>>>>CISSP #37102,
CCNP, CCDP, ACSP, Cisco IPT Design 
> Specialist, MCP, =
CNA,
 
> =
>>>>Network+, A+
 
> =
>>>>Custom
Computer Specialists, Inc. 
> =
>>>>"The only
unattainable goal is the one not attempted." 
> =
>>>>-Anonymous
 
> =
>>>>
 
> =
>>>>-----Original
Message----- 
> =
>>>>From:
nobody@groupstudy.com 
> [<a
href=3D"mailto:nobody@groupstudy.com">mailto:nobody@groupstudy.com</a>] =
On Behalf
 
> =
>>> 
> =
>>>Of 
> =
>>> 
> >>>>Sam =
Joseph
 
> =
>>>>Sent: Monday,
May 24, 2004 11:06 PM 
> >>>>To:
ccielab@groupstudy.com 
> =
>>>>Subject: WAN
Monitoring tool 
> =
>>>>
 
> =
>>>>Dear Group,
 
> =
>>>>
 
> =
>>>>What are best
methods of monitoring the frame-relay 
> between two =
sites
 
> =
>>>>other 
> =
>>>>than beleiving
what my ISP says?. I feel the circuit is nearing 
> =
>>>>saturation. 
> >>>>I =
did some
ping tests when i get complaints from users, 
> the ping =
time 
> =
>>> 
> =
>>>is 
> =
>>> 
> =
>>>>terrible. The
ping time is anywhere between 1000 msec 
> .... to time =
 
> =
>>>>outs.Looked at
the Interface Queue on the router (3810)  and that =
 
> =
>>>>doesn't 
> =
>>>>look better
either. 
> =
>>>>
 
> >>>>I =
would like
to monitor this circuit with a better tool?. Any 
> =
>>> 
> =
>>>ideas????
 
> =
>>> 
> =
>>>>Thanks in
Advance, 
> =
>>>>
 
> =
>>>>---Sam.
 
> =
>>>>
 
>
>>>>_________________________________________________________=
________
 
> =
>>>>FREE pop-up
blocking with the new MSN Toolbar  get it now! 
> >>>><a
href=3D"http://toolbar.msn.click-url.com/go/onm00200415ave/direct/01/"
target=3D"_blank">http://toolbar.msn.click-url.com/go/onm00200415ave/dire=
ct/01/</a>
 
> =
>>>>
 
> =
>>>>
 
> =
>>> 
>
>>>___________________________________________________________</=
span>
 
> =
____________ 
> =
>>> 
> =
>>>>Please help
support GroupStudy by purchasing your study materials 
> =
>>> 
> =
>>>from:
 
> =
>>> 
> >>>><a
href=3D"http://shop.groupstudy.com" =
target=3D"_blank">http://shop.groupstudy.com>
 
> =
>>>>
 
> =
>>>>Subscription
information may be found at: 
> >>>><a
href=3D"http://www.groupstudy.com/list/CCIELab.html" =
target=3D"_blank">http://www.groupstudy.com/list/CCIELab.html><=
/font>
 
> =
>>>>
 
> =
>>>>
 
> =
>>> 
>
>>>___________________________________________________________</=
span>
 
> =
____________ 
> =
>>> 
> =
>>>>Please help
support GroupStudy by purchasing your study materials 
> =
>>> 
> =
>>>from:
 
> =
>>> 
> >>>><a
href=3D"http://shop.groupstudy.com" =
target=3D"_blank">http://shop.groupstudy.com>
 
> =
>>>>
 
> =
>>>>Subscription
information may be found at: 
> >>>><a
href=3D"http://www.groupstudy.com/list/CCIELab.html" =
target=3D"_blank">http://www.groupstudy.com/list/CCIELab.html><=
/font>
 
> =
>>> 
>
>>>___________________________________________________________</=
span>
 
> =
____________ 
> >>>Please =
help
support GroupStudy by purchasing your study 
> materials =
from: 
> >>><a
href=3D"http://shop.groupstudy.com" =
target=3D"_blank">http://shop.groupstudy.com>
 
> =
>>> 
> =
>>>Subscription
information may be found at: 
> >>><a
href=3D"http://www.groupstudy.com/list/CCIELab.html" =
target=3D"_blank">http://www.groupstudy.com/list/CCIELab.html><=
/font>
 
> =
>> 
> >>-- =
 
> >>  =
Anthony Pace
 
> >> 
anthonypace@fastmail.fm 
> =
>> 
> >>-- =
 
> >><a
href=3D"http://www.fastmail.fm" =
target=3D"_blank">http://www.fastmail.fm> - The
way an email service should be 
> > =
 
> > =
 
> > =
 
> =

Next message: Warren Chuck Contr JCIET/J6: "RE: WAN Monitoring tool"
Previous message: Vazman@aol.com: "Re: WAN Monitoring tool"
Maybe in reply to: Sam Joseph: "WAN Monitoring tool"
Next in thread: Warren Chuck Contr JCIET/J6: "RE: WAN Monitoring tool"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Wed Jun 02 2004 - 11:12:16 GMT-3