1. Chapter 15: Network Monitoring and Tuning

2. Learning Objectives Establish network benchmarks
Install Network Monitor Driver
Install, configure, and use Network Monitor, including setting up filters and triggers
Install and configure SNMP service

3. Learning Objectives (continued)
Use System Monitor to monitor a network
Troubleshoot and tune a network

4. Network Monitoring
Networks are dynamic with changing patterns of activity and rapid growth toward more high-bandwidth demand
Monitoring a network is important to be able to distinguish between problems due to the network and problems due to servers connected to the network

5. Network Benchmarks
Plan to obtain network benchmarks to help with problem diagnosis and planning, such as:
Slow, average, and peak network activity in relation to the work patterns of an organization
Network activity that is related to specific protocols
Network activity that is related to specific servers and host computers

6. Network Benchmarks (continued)
Network activity that is related to workstations
Network activity on individual subnets or portions of a larger network
Network traffic related to WAN transmissions
Network traffic created by particular software

7. Windows 2000 Network Monitoring Tools
Network monitoring and management tools in Windows 2000 include:
Network Monitor Driver
Network Monitor
SNMP service
System Monitor

8. Network Monitor Driver and Network Monitor
Network Monitor Driver: Enables a Microsoft-based server or workstation NIC to gather network performance data for assessment by the Microsoft Network Monitor
Network Monitor: A Windows NT and Windows 2000 network monitoring tool that can capture and display network performance data

9. Server Activities to Monitor
Figure 15-1
Using Network Monitor
Driver to gather network
performance information
on two separate networks

10. Installing Network Monitor Driver
To install Network Monitor Driver:
Open the Network and Dial-Up Connections tool
Right-click Local Area Connection
Click Properties
Click Install
Double-click Protocol
Double-click Network Monitor Driver

11. Installing Network Monitor Driver (continued)
Figure Installing Network Monitor Driver

12. Using Network Monitor Network Monitor tracks information such as:
Percent network utilization
Frames and bytes transported per second
Network station statistics
Statistics captured for a specific interval of time
Transmissions per second

13. Using Network Monitor (continued)
Broadcast, unicast, and multicast information
NIC statistics
Error data
Addresses of network stations
Other network computers running Network Monitor and Network Monitor Driver

14. Installing Network Monitor
The general steps to install Network Monitor are:
Open the Add/Remove Programs tool
Double-click the component, Management and Monitoring Tools
Check Network Monitor Tools

15. Installing Network Monitor (continued)
Figure Installing Network Monitor tools

16. Starting Network Monitor
The general steps for starting a capture session in network monitor are:
Start Network Monitor from the Administrative Tools menu
Select the network to monitor
Click the Capture button to start capturing information
Click the Stop Capture button to stop capturing information

17. Capturing Network Data
Total pane
Graph pane
Session pane
Station pane
Figure Network Monitor capturing data

18. Monitoring Tip
As is true of other monitoring tools, Network Monitor can create an extra load on a server

19. Network Monitor Display
Data captured in Network Monitor is displayed interactively in four window panes, but can be customized to show only one, two, or three panes

20. Network Monitor Panes

21. Viewing a Line-by-Line Report
After data is captured, you can view a line-by-line capture summary report by clicking the Stop and View Capture button

22. Viewing a Line-by-Line Report
Figure Viewing capture summary data

23. Capture Summary Window Information
Table Capture Summary Window Information

24. Capture Summary Window Information (continued)

25. Troubleshooting Tip
Check the Graph pane for a quick assessment of performance statistics for:
% Network Utilization
Frames Per Second
Bytes Per Second
Broadcasts Per Second
Multicasts Per Second

26. Diagnosing Common Problems
Use Network Monitor to diagnose problems such as:
A NIC creating a broadcast storm
Inefficient multimedia applications
Problems with bridges, switches, and routers
Problems with particular a workstation
An overloaded server

27. Finding a Broadcast Storm
A broadcast storm is a situation in which one or more devices, such as a failing NIC, are saturating the network with traffic
Use the Network Monitor Broadcasts Per Second statistic to help determine if there is a broadcast storm and then check the Session and Station panes for the device(s) sending the broadcast(s)

28. Locating Unauthorized Network Monitor Users
Network Monitor can create problems when it is used by network intruders or unauthorized users
You can view all of the Network Monitor users by clicking the Tools menu and then clicking Identify Network Monitor users

29. Viewing Network Monitor Users
Figure Identifying all Network Monitor users

30. SNMP
The Simple Network Management Protocol (SNMP) is used to gather standardized network performance information and to control network devices

31. SNMP Stations SNMP uses two kinds of network stations:
Network Management Station (NMS): Monitors and manages devices configured with SNMP and collects information
Agent: Any device configured for SNMP from which an NMS can collect data – SNMP agents include servers, workstations, routers, switches, and hubs

32. Microsoft Systems Compatible with SNMP
The following systems can be managed through SNMP:
Windows 2000 and NT servers
Windows 2000 and NT workstations
WINS servers
DHCP servers
IIS servers
Microsoft RAS and IAS servers

33. Installing SNMP To install SNMP: Open the Add/Remove Programs tool
Click Add/Remove Windows Components
Double-click Management and Monitoring tools
Check Simple Network Management Protocol and click OK
Click Next and then click Finish

34. Configuring SNMP
After installing SNMP, configure one or more community names for security
Community name: In SNMP communications, a password used by network agents and the network management station so that their communications cannot be easily intercepted by an unauthorized workstation or device

35. Configuring SNMP (continued)
Figure Configuring the community name

36. SNMP Trap SNMP enables you to configure a trap
Trap: A specific situation or event detected by SNMP that a network administrator may want to be warned about or to track via a network management station, such as when a network device is unexpectedly down or offline

37. Monitoring a Network with System Monitor
System Monitor contains a wide range of objects for monitoring a network
Some objects only appear in System Monitor if you have a particular protocol installed

38. System Monitor Network Monitoring Objects
Table System Monitor Network Monitoring Objects

39. System Monitor Network Monitoring Objects (continued)

40. System Monitor Network Monitoring Objects (continued)

41. System Monitor Network Monitoring Objects (continued)

42. Monitoring NICs, Servers, and Network Devices
System Monitor can be used to monitor the NIC at the server to make sure that it is working properly
System Monitor is also used to monitor for network problems at the server and between the server and network devices

43. Using System Monitor Objects to Monitor the NIC, Server, and Network Devices
Table Using System Monitor Objects and Counters to Monitor the NIC, Server, and Network Devices

44. Using System Monitor Objects to Monitor the NIC, Server, and Network Devices (continued)

45. Using System Monitor Objects to Monitor the NIC, Server, and Network Devices (continued)

46. Using System Monitor Objects and Counters to Monitor Protocols
Table Using System Monitor Objects and Counters to Monitor Protocols

47. Using System Monitor Objects and Counters to Monitor Protocols (continued)

48. Using System Monitor Objects and Counters to Monitor Server and Network Bottlenecks
Table Using System Monitor Objects and Counters to Monitor Server and Network Bottlenecks

49. Using System Monitor Objects and Counters to Monitor Server and Network Bottlenecks (continued)

50. Using System Monitor Objects and Counters to Monitor a Web Server
Table Using System Monitor Objects to Monitor a Web Server

51. Using System Monitor Objects and Counters to Monitor a Web Server (continued)

52. Using System Monitor Objects and Counters to Monitor a Web Server (continued)

53. Using System Monitor Objects and Counters to Monitor SMTP Services

54. Using System Monitor Objects and Counters to Monitor SMTP Services (continued)

55. Network Tuning Tips Keep NIC drivers updated Replace slow NICs
Tune the network access order
Implement TCP/IP exclusively, if possible
Purchase servers that are equipped to keep up with the server load

56. Network Tuning Tips (continued)
Monitor for excessive BPDU broadcasts
Monitor the network for saturation from broadcast storms
Replace aging, slower network devices with newer, faster devices
Use multimedia applications that support multicasting
Upgrade bandwidth to match the load

57. Chapter Summary
Monitoring a network is as important as monitoring a server
Establish network benchmarks to help in preventing and diagnosing problems
Install the Network Monitor Driver and Network Monitor together to enable network monitoring from Windows 2000 Server

58. Chapter Summary
Install Microsoft SNMP service to take advantage of SNMP-based network management station monitoring
Use the System Monitor’s network-related objects, counters, and instances for in-depth network monitoring, particularly of protocols