Monitoring network traffic of Cisco 2950 switch and Cisco 1600 router Group 4 Ishan Shah (CIN: ) Jyotsna Mishra (CIN: ) Parth Chavda (CIN: )
Network Architecture
SNMP ●SNMP is a protocol that allows remote monitoring and local management of items on the network including Router, Host, Switches which we have used in our network architecture. ●Comprised of agents and managers ○Agents - process running on each managed node collecting information about the devices it is running on ○Manager - process running on a management workstation that requests information about devices on the network
Client Pull & Server Push ●SNMP is a “client pull” model The management system (client) “pulls” data from the agent (server). ●SNMP is a “server push” model The agent (server) “pushes” out a trap message to a (client) management system.
SNMP & The OSI Model 7 Application Layer- Management and Agent APIs SNMP 6 Presentation Layer- ASN.1 and BER 5 Session Layer- RPC and NET BIOS 4 Transport Layer- TCP and UDP 3 Network Layer- IP and IPX 2 Data Link Layer -Ethernet, Token Ring, FDDI 1 Physical Layer
Ports & UDP ●SNMP uses User Datagram Protocol (UDP) as the transport mechanism for SNMP messages ●Like FTP, SNMP uses two well-known ports to operate: ○UDP Port SNMP Messages ○UDP Port SNMP Trap Messages
Cacti - Graphical Monitoring Application ●Cacti is an open-source, web-based network monitoring and graphing tool designed as a front-end application for the open-source, industry-standard data logging tool RRDtool. ●Cacti allows a user to poll services at predetermined intervals and graph the resulting data. ●Generally used to graph time-series data of metrics such as CPU load and network bandwidth utilization. ●A common usage is to monitor network traffic by polling a network switch or router interface via Simple Network Management Protocol (SNMP).
Screenshots - Configuring SNMP for Switch
Screenshots - Cacti Login
Screenshots - Cacti Home
Screenshots - Adding Device(Switch)
Screenshots - Network Traffic in Cacti(Switch)
Screenshots - Traffic in Wireshark(Switch) ●Request
Screenshots - Network Traffic in Wireshark(Switch) ●Response
Screenshots - Graph I (Switch I)
Screenshots - Graph II (Switch I)
Screenshots - Graph III (Switch I)
Screenshots - Graph IV (Switch I)
Screenshots - Graph I (Switch II)
Screenshots - Graph II (Switch II)
Screenshots - Graph III (Switch II)
Screenshots - Graph IV (Switch II)
Screenshots - Graph V (Switch II)
Screenshots - Graph VI (Switch II)
Screenshots - Graph VII (Switch II)
Screenshots - Graph VIII (Switch II)
Screenshots - Configuring SNMP for Router
Screenshots - Adding Device(Router)
Screenshots - Network Traffic in Wireshark(Router) ●Request
Screenshots - Traffic in Wireshark(Router) ●Response
Screenshots - Graph I (Router)
Screenshots - Graph II (Router)
Screenshots - Graph III (Router)
References Cacti.net Google.com Cisco.com Wireshark.org Postgresql.org
Thank You