1. Monitoring a Large-Scale Network: Selecting the Right Tool Sayadur Rahman United International University & Network Manager, Financial Service

2. Outline Sample Network Topology Network Monitoring Tools ◦ Cacti ◦ WhatsUpGold ◦ NetFlow Comparisons among NMS tools

3. Sample Topology for Monitoring

4. Traffic Flow

5. Cacti: Graphical Monitoring Solution Cacti is a complete open source network graphing solution based on RRDTool's data storage and graphing functionality. Cacti uses template for creating customizable graph based on defined data source Frontend of Cacti is PHP driven and use MySQL as database

6. Cacti Features  Performance Monitoring  Device Health Monitoring  Robust Interface Graph  Trend Analysis  Capacity Planning  Long Term Data Storage  Template Based Graph Generation

7. Monitoring CPU Utilization CPU Core-Router CPU Core-Firewall CPU Border-Router

8. CPU Utilization Trend Daily Usage Weekly Average Monthly Average

9. Internet Utilization Trend Daily Usage Weekly Usage

10. WhatsUpGold Network Performance Monitor IPSWITCH WhatsUpGold is a powerful network monitoring software that quickly detects, diagnoses and resolves network performance problems & outages.

11. WhatsUpGold NPM Feature  Network Availability & Performance Monitoring  Intelligent Network Alerting based on Statistical Network Thresholds & Baselines  Hardware Health Monitoring  Dynamic and Customizable Network Mapping  Network Capacity Planning  Automated Web-based Network Device Discovery

12. Top Interface Utilization

13. Top Nodes Response Time

14. Top Nodes CPU Load

15. Top Nodes Memory Utilization

16. Network Traffic Analysis using NetFlow Analyzer

17. NetFlow Features  Reports on Network Bandwidth usage  Traffic  Applications, Conversations, Port, Protocol  User monitoring  Application monitoring  Network planning and trend analysis  Traffic engineering  Accounting and billing  Security monitoring and network forensic

18. NetFlow in the Network

19. Traffic Analysis

20. What is an IP Flow? Each packet that is forwarded within a router or switch is examined for a set of IP packet attributes. Traditionally, an IP Flow is based on a set of 7 IP packet attributes. IP Packet attributes used by NetFlow: IP source address IP destination address Source port Destination port Layer 3 protocol type Class of Service Router or switch interface

21. NetFlow Analyzer Report

22. NetFlow Report: Top Application

23. NetFlow Report: Top Source

24. NetFlow Report: Top Destination

25. NetFlow Report: Top Conversation

26. Common NMS Feature and Functionality  Performance Monitoring  Fault Management  Security Monitoring  Network Mapping  Trend Analysis  Capacity Planning  Configuration Management  Change Management  Accounting Management  Alert / Notification  Syslog/ Trap

27. NMS Comparison NMS Business Size Deployment User Interface Feature/ Service Licensing Inter operability Platform Data Storage Price Cacti Mid-Large Enterprise Client- Server Graphical UI Performance Trend Analysis Capacity Planning Open Source (GPL) Yes - Plugin Linux Unix Windows RRDTool MySQL Free WhatsUp Gold Mid-Large Enterprise Client- Server Graphical UI Console Performance Trend Analysis Capacity Planning Topology Map Dashboard Alert, Syslog/Trap Commercial Yes, with native Packages WindowsMS SQL Medium Price NetFlow Analyzer Mid-Large Enterprise Client- Server Graphical UI Traffic Analysis Capacity Planning Dashboard Network Forensic Alert Commercial Yes, with native Packages Windows Linux MS SQL MySQL Medium Price

28. Q & A