TNPFA 4.1.1 Installation and User Guide - e IBM Tivoli Composite ...

More documents

Recommendations

Info

If only one port is registered with a service, this registered service is used; if both ports are registered, the service registered with the smaller port number is used; if no port is registered, the smaller port number is used and assigned to the unclassified service. See the /etc/tnpfa/services file for configuration. Application The application aspect component provides a breakdown of traffic with respect to groups of application protocols. For example, the MAIL application is a grouping of typical application protocols used to send and receive e-mail (that is, smtp, imap, pop3, and so on). See the /etc/tnpfa/applications file for configuration. Interface The interface aspect component provides a breakdown of traffic with respect to the interfaces which are used to forward the traffic at the switches and routers exporting flow information records. See the /etc/tnpfa/interfaces file for configuration. ASN The ASN (Autonomous System Number) aspect provides a breakdown of traffic with respect to the Autonomous Systems to which the source and destination IP addresses belong. An ASN is used in the Internet as a globally unique number for identifying IP networks which are treated with a common routing policy. See the /etc/tnpfa/asn file for configuration. Local/Remote A domain can be defined as being local or remote. You can differentiate between traffic within a local administrative domain, and traffic entering and leaving a local administrative domain. The Other domain is always considered to be remote. Sent/Received Traffic aspects in tables and graphs are presented separately for sent and received traffic. The rules if packets are accounted as sent or received vary between aspects. The following table shows these rules. Aspect Sent if packets are... Received if packets are... Host Sent by source host Received by destination host Domain Sent by source domain Received by destination domain Traffic Type Sent by local domain and Received by local or remote domain Protocol and ICMP Sent by local domain and Received by local or remote domain Service Type Sent by local domain and Received by local or remote domain Sent by remote domain and Received by local domain Sent by remote domain and Received by local domain Sent by remote domain and Received by local domain Port Sent by this port Received by this port Application Sent by local domain and Received by local or remote domain Sent by remote domain and Received by local domain Interface Sent by out interface Received by in interface Autonomous System (AS) Sent by source AS Received by destination AS 94 IBM Tivoli Netcool Performance Flow Analyzer: Installation and User Guide
Site For illustration, consider two local domains D1 with ip1 and D2 with ip2 as well as two remote domains D3 with ip3 and D4 with ip4. In , the colour of the arrows show which flows are considered as sent and which flows are considered as received. For some aspects, traffic volume is accounted twice, as sent and as received. The traffic volume (that is, transmitted bytes, packets) is accounted for the destination host as received and for the source host as sent. Double accounting is done for aspect components host, domain, port, interface, and autonomous system. Graphs and tables for these aspect components add up to 200% in total. Traffic between hosts within the same domain is tagged received if data is received by a server (as determined from the service port) and sent otherwise. Sites are used to separate traffic information between administrative domains. A single Tivoli Netcool Performance Flow Analyzer installation can be configured for multiple administrative domains with potentially overlapping (private) address spaces and individual configurations. Flow information packets (for example, Netflow, IPFIX) are collected and analyzed for a particular site if the corresponding exporter is registered with the site. Traffic View The user interface provides sliding views into the traffic information database. Such traffic views cover the last 60 minutes, the last 24 hours, the last 31 days, and so on. Traffic views differ from traffic reports as they constantly change due to the sliding time periods. Example for sent and received traffic with local and remote domains Traffic Report The user interface provides pre-generated traffic reports for fixed time periods, such as for every full hour as well as for every calendar day, month, and so on. Pre-generated traffic reports can be accessed immediately. A special form of traffic report is a zoom report. A zoom report is dynamically generated by the user given a time period and a filter to zoom into certain traffic aspects (for example, protocol, host, or subnet). Copyright IBM Corp. 2004, 2010 95
Page 2 and 3:
Note: Before using this information
Page 4 and 5:
iv IBM Tivoli Netcool Performance F
Page 6 and 7:
How this guide is organised This gu
Page 8 and 9:
4 IBM Tivoli Netcool Performance Fl
Page 10 and 11:
1.1 Reporting Traffic usage reports
Page 12 and 13:
8 IBM Tivoli Netcool Performance Fl
Page 14 and 15:
Operating System Version Platform S
Page 16 and 17:
1. Uninstall Tivoli Netcool Perform
Page 18 and 19:
addsite [] : Add new site delsite [
Page 20 and 21:
3.1.6 Updating the license Figure 3
Page 22 and 23:
3.1.7 Creating a user account Figur
Page 24 and 25:
3.3 Memory management Tivoli Netcoo
Page 26 and 27:
The same data is added to the corre
Page 28 and 29:
24 IBM Tivoli Netcool Performance F
Page 30 and 31:
To enable the user to configure the
Page 32 and 33:
Figure 4-3 Site configuration > Adv
Page 34 and 35:
Figure 4-5 Site configuration > Col
Page 36 and 37:
4.2.1 Tivoli Netcool Performance Fl
Page 38 and 39:
Figure 4-8 Site configuration > New
Page 40 and 41:
4.4 User management To generate a n
Page 42 and 43:
Figure 4-13 Site configuration > Us
Page 44 and 45:
Tivoli Netcool Performance Flow Ana
Page 46 and 47:
# 12ab "Example Code" 00 "Echo Repl
Page 48 and 49: 44 IBM Tivoli Netcool Performance F
Page 50 and 51: Figure 5-4 Analyzer > hourly overvi
Page 52 and 53: 5.2 Aspect views Traffic views are
Page 54 and 55: Figure 5-6 Analyzer > Application v
Page 56 and 57: Figure 5-8 Analyzer > Protocol view
Page 58 and 59: Figure 5-10 Analyzer > Port view (l
Page 60 and 61: Figure 5-12 Analyzer > TOS view (se
Page 62 and 63: Figure 5-14 Analyzer > ICMP (select
Page 64 and 65: Figure 5-16 Analyzer > Flow view 60
Page 66 and 67: Figure 5-18 Analyzer > Flow view (l
Page 68 and 69: Figure 5-20 Analyzer > Octets per p
Page 70 and 71: Figure 5-22 Analyzer > Exporter & A
Page 76 and 77: When a report has just been created
Page 80 and 81: Figure 8-1 Status > System informat
Page 82 and 83: Figure 8-3 Status > Flow state 78 I
Page 86 and 87: Problem: SCTP is not visible in net
Page 88 and 89: Collect the product-specific inform
Page 92 and 93: This example shows that the custome
Page 94 and 95: Licensees of this program who wish
show all

TNPFA 4.1.1 Installation and User Guide - e IBM Tivoli Composite ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?