Gebruiksaanwijzing /service van het product 5 van de fabrikant Cisco Systems
Ga naar pagina of 230
Americas Headquarters Cisco Systems, In c. 170 West Tasman Drive San Jose, CA 951 34-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553-NETS (638 7) Fax: 408 527-0883 Cisco Netw ork Anal ysis Module (NAM) T raf fic Analyz er User Guide, 5.
THE SPECIFICATION S AND INFORMATION REGARDING TH E PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITH OUT NOTICE. ALL STATEMENTS , INFORMATION, AND RECOMMENDATI ONS IN THI S MANUAL ARE BE LIEVED TO BE A CCURATE BUT ARE PRESENTED WI THOUT WARRANTY OF ANY KIND, EX PRESS OR IMPLIED.
iii User Guide for the Cisco Network Analysi s Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 CONTENTS About This Guide xi CHAPTER 1 Overview 1-1 Introducing NAM Traffic Analyzer 5.
Contents iv User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Cisco WAAS NAM Virtual Service Blade 1-20 CHAPTER 2 Setting Up The NAM Traffic Analyzer 2-1 Defaul.
Contents v User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 Setting RTP Strea m Thresholds 2-45 Setting Voice Signaling Thresholds 2-46 Setting NDE Interface Th.
Contents vi User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 URL-based Applicatio ns 2-71 Example 2-72 Editing a URL-Based Application 2-73 Deleting a UR L-bas.
Contents vii User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 Filtering a URL Collection List 3-14 Host Conversations 3-15 Network Conversation 3-15 Top Applica.
Contents viii User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 RTP Conversatio n 3-42 CHAPTER 4 Capturing and Decoding Packet D ata 4-1 Sessions 4-2 Viewing Ca.
Contents ix User Guide for the Cisco Network Analysis Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 Capture Data Storage 5-8 Creating NFS Storage Locations 5-9 Editing NFS Storage Locations 5-10 Crea.
Contents x User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Understanding Traffic Patterns at the Network Layer 6-4 Understanding Traffic pattern s for DiffSer.
xi User Guide for the Cisco Network Analysi s Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 About This Guide This guide describes ho w to use Cisco Netw ork An alysis Module T raf f ic Analyzer 5.
xii User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 About This Guide Audience This guide is designed for net work administrato rs who are responsible for setting up and configu ring Network Analy sis Modules (N AMs) to monitor traf fic and diag nose emergin g problems on netw ork segments.
xiii User Guide for the Cisco Network Analysi s Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 About This Guide Obtaining Documentation and Submitting a Service Request For info rmation on obtaining d.
xiv User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 About This Guide.
CH A P T E R 1-1 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 1 Overview This chapter pro vides information about the Cisco Netw ork Analysis Module T raff ic Analyzer , Release 5.0 and describes the ne w features and ho w to navigate the int erface.
1-2 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Introducing NAM Tr affic Analyzer 5.0 Cisco N AM includes an embedded, we b-based T ra.
1-3 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Introducing NAM Traffic Analyzer 5.0 a set of subnets specified by an address prefix and ma sk, or using other criter ia such as a remote de vice data source (for e xample, remote W AE device and se gment information).
1-4 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Introducing NAM Tr affic Analyzer 5.0 W ith NAM 5.0, t he NBI is expanded to inclu de a Re presentational State T ransfer (REST) web service for conf iguration, and retrie val of data pertainin g to sites.
1-5 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Overview of the NAM Platforms SNMP v3 Support -- NAM to Router/Switch Support Simple Network Management Prot ocol V ersion 3 (SNMPv3) is an interoperable stand ards-based protocol for network m anagement.
1-6 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Logging In Logging In Log into the N AM by using the username and password that the N AM installer provided you, and cl ick the Login b utton.
1-7 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Navigating the User In terface Monitor : See “summary” vie ws that allow you to vie w network traf fic, appli cation performance, site performance, and alarms at a glance.
1-8 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Navigating the User Interface Context Menus On most charts that appear on the dashboards , you can left-click on a colored bar of data to get a context menu, with which you can get mor e detailed information about that it em.
1-9 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Navigating the User In terface Interactive Report On most Monitoring and Analyze scr e.
1-10 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Navigating the User Interface Mouse-Over for Details When in Chart vie w , you can mouseo ver the ch art to get more detailed i nformation about what occurred at a specific time.
1-11 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Navigating the User In terface Sort Grid When looking at informati on in Grid vie w , you can sort the information b y clicking the heading of any column.
1-12 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Understanding How the NAM Wo rks Abov e the Statistics leg end is a dropdo wn selector , which allo ws you to choose which of the metrics sho wn in the “ov e r -time” chart you would lik e reflected in the Statistics legend.
1-13 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Understanding How the NAM Works • Adv anced T roubleshooting. The N AM provides rob u st capture a nd decode capabilities for packet traces that can be triggered or termin ated based on user-d efined thresh olds.
1-14 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Understanding How the NAM Wo rks • Understanding Ho w the NAM Uses NDE, page 1-15 .
1-15 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Understanding How the NAM Works A V A CL can provide access control for all packets that are bridged wi thin a VL AN or that are routed into or out of a VLAN or , with Release 12.
1-16 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Understanding How the NAM Wo rks T o use an NDE data source for the N AM, you must conf igure the remote de vice to export the NDE packets.
1-17 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Configuration Overview Configuration Overview Ta b l e 1-3 . “Confi guration Ov erview” le ads you through the basic confi guration steps you can follo w for the N AM T raff ic Analyz er 5.
1-18 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Configuration Overview V e rify that V o ice/RTP Stream T raffi c is being gathered After the N AM T raff ic An alyzer is started, V oic e/R TP stream traffic will automatically start being monitored.
1-19 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overview Configuration Overview Configuring and Viewing Data Some of the N AM 5.
1-20 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 1 Overvi ew Configuration Overview Cisco WAAS NAM Virtual Service Blade T o set up the N AM T raff ic Analyzer , Release 5.
CH A P T E R 2-1 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 2 Setting Up The NAM Traffic Analyzer This chapter pro vides information about functions th at will begin automati cally , and other setup tasks you will need to perform for N AM T raff ic Analyz er Release 5.
2-2 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Default Functions Application Response Time Metrics The N A.
2-3 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Traffic Usage Statistics The N AM T raff ic Analyzer provides traf fic statistic s brok en out by ap plication, host, con versation, VLAN, and DSCP code point.
2-4 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Before you can monitor data, y ou must direct specif ic traff ic flo wing through a switch to t he N AM for monitoring purposes.
2-5 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Ta b l e 2-3 , Acti ve SP AN Sessions Dialog , describes the fields on the SP AN Sessions screen. Note IOS supports only two SP AN sessions, but each SP AN session can ha ve more than one destination.
2-6 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Note Deleting or editing a SP AN session that has multiple SP AN destinations will af fect all SP AN destination s.
2-7 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Step 2 Click the Cre ate bu tt o n. The Create SP AN Session Dialog displays (the f ields are described in Ta b l e 2-5 , Create SP AN Session Dialog ).
2-8 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Editing a SPAN Session Y ou can only edit SP AN sessions that have been directed to the N AM.
2-9 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Deleting a SPAN Session Note This section does not apply t o NME-N AM de vices. Note Deletin g a SP AN session th at has multipl e SP AN destinations will af fect all destinations.
2-10 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic The fields are e xplained in Ta b l e 2-7 , N AM Data Sources .
2-11 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic • Deleting ERSP AN Data Sources Using the W eb G.
2-12 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic The N AM will now automatically create a ERSP AN da ta source for each device that sends ERSP AN packets to it.
2-13 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Creating ERSPAN Data Sources Using the CLI T o man.
2-14 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Step 7 Enter ? to see all the command optio ns av ailable, as in the example below: root@172-20-104-107.
2-15 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Step 3 Click the Delete b utton along the bottom of the windo w . Deleting ERSPAN Data Sources Using the CLI T o delete a ERSP AN data source usin g the CLI, use the follo wing steps.
2-16 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Step 4 Use the no device command to delete the de vice: root@172-20-104-107.cisco.com# no device 1 Sucessfully deleted device 1 root@172-20-104-107.
2-17 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic • aa.bb .cc.dd is the IP address defi ned at the destination Y ou can no w connect to the N AM to monitor and cap ture traf fic of the Data Port 2 data source.
2-18 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Cat6509(config)# vlan access-map wan 100 Cat6509(c.
2-19 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic As a consumer , the N AM can receiv e NetFlow packets on its management port from devices such as Cisco routers and switches.
2-20 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Figur e 2-2 Sample NetFlow Netw or k Ta b l e 2-8 , Reporting Flo w Records lists the reported flo ws if NetFlo w is enabled on interface a.
2-21 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic For Devices Running Cisco IOS Step 1 Select the interface on which you wish to turn on routed flow cache.
2-22 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic • protocol-port • prefix Step 2 Enable the aggregation cache. Prompt(config-flow-cache)# enable Step 3 Export the flo w entries in the aggr egation cache to N AM UDP port 3000.
2-23 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Step 4 Click the Submit b utton. Enabling Auto-Creation of NetFlow Da ta Sources Using the CLI Configuration of the auto-create feature is also possible using the N AM CLI.
2-24 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Step 6 (Optional) If you kno w the specific v alue of the Engine ID on the de vice you would like to mo nitor , check the “Engine” check box, and enter the value of the Engine ID.
2-25 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Creating NetFlow Data Sources Using the CLI T o manually config ure a NetFlow data sour ce on the N AM using the CLI, for example if the auto-creation feature is turned of f, use the follo wing steps.
2-26 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic V3 SECURITY LEVEL : No authentication, no privacy V3 AUTHENTICATION : MD5 V3 AUTH PASSPHRASE : V3 PRIVACY : DES V3 PRIV PASSPHRASE : root@172-20-104-107.
2-27 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Step 13 Ty p e exit to come out of the subcommand mode and create the data sour ce: root@172-20-104-107.
2-28 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic root@172-20-104-107.cisco.com# Step 2 Use the no data-source command to de lete the dat a source: root@172-20-104-107.
2-29 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic If the de vice is sending Net Flow V ersion 9 (V9) and the N AM has received t he NDE templates, then a V9 T emplates button appears belo w the De vice System Information windo w .
2-30 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic For more inf ormation about W AAS and configuring the W AAS components, see the document: Cisco W ide Ar ea Application Services Conf iguration Guide , OL-16376-01 http://www .
2-31 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Y ou can also conf igure a data source to use Expo rt Passthrough data. F or more information about configuring W AAS data source s, see Editing W AAS Data Source s, page 2-34 .
2-32 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Deployment Scenarios Ta b l e 2-12 , W AAS Data Source Conf igurations lists six dif fe rent deployment scenarios you might consider to monitor the optimized traf fic on your W AAS network.
2-33 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Y ou must then co nfigu re the W AAS segments you wa nt to monitor as W AAS data sources: Cli ent, Client W AN, Server W AN, and/or Server .
2-34 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Traffic Editing WAAS Data Sources The N AM uses W AAS data sources to monitor traf fic coll ected from dif ferent W AAS segments: Client, Client W AN, Server W AN, and Server .
2-35 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Traffic Auto Create of New WAAS Devices If you ha ve num e.
2-36 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Alarms The default inspects the entire p acket. The second option inspects a ll segments e xcept the ISL portion of the packet.
2-37 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Alarms Note Y ou could see two alarms for the same occurrence if both the source and the destination are in the same site.
2-38 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Alarms T o conf igure e-mail alarm actions: Step 1 Choose Setup > Alarms > Actions . The Alarm Action page displays an y configured actions.
2-39 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Alarms Step 1 Choose Setup > Alarms > Actions . The Alarm Action table displays an y configured Alarms.
2-40 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Alarms Y ou can set up alarm thresholds b y defin ing threshold condition s for monitored v ariables on the NAM T raff ic Analyzer .
2-41 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Alarms Note If you lea ve a selection blank , it means that that parameter will no t be considered. If you select “ Any”, it will use an y of the selections for that parameter , if encountered.
2-42 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Alarms Note If you lea ve a selection blank , it means that that parameter will no t be considered. If you select “ Any”, it will use an y of the selections for that parameter , if encountered.
2-43 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Alarms Note If you lea ve a selection blank , it means that that parameter will no t be considered. If you select “ Any”, it will use an y of the selections for that parameter , if encountered.
2-44 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Alarms Note If you lea ve a selection blank , it means that that parameter will no t be considered. If you select “ Any”, it will use an y of the selections for that parameter , if encountered.
2-45 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Alarms Note If you lea ve a selection blank , it means that that parameter will no t be considered. If you select “ Any”, it will use an y of the selections for that parameter , if encountered.
2-46 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Alarms Note If you lea ve a selection blank , it means that that parameter will no t be considered. If you select “ Any”, it will use an y of the selections for that parameter , if encountered.
2-47 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Alarms Step 2 Click the Cre ate but ton and choose V oice Signaling tab. Step 3 The V oice Signaling Alarm Threshold Conf iguration windo w displays.
2-48 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Alarms Note If you lea ve a selection blank , it means that that parameter will no t be considered. If you select “ Any”, it will use an y of the selections for that parameter , if encountered.
2-49 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Data Export User Scenario If you want t he N AM to notify .
2-50 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Data Export NetFlo w collects traff ic statistics by monitoring packets that flow t hrough the de vice and storing the statistics in the NetFlo w table.
2-51 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Data Export Figur e 2-6 NetFlow Expor ts Screen Already defined NetFlow Exports will be li sted on the screen.
2-52 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Data Export Export Record Ty p e The record types supporte.
2-53 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Data Export Step 4 Click the Submit b utton t o sav e the co nfiguration, or cl ick the Reset button to clear the f ields, or click the Cancel button to e x it the screen without conf iguration.
2-54 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Data Export Note W ith N AM Traf fic Analyzer 5.0, you ca n only configure one e-mail address. Step 6 Choose the deli very option (HTML or CSV).
2-55 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Managed Device Custom Export Y ou can enable Custom Expor t to send response time data to an ex ternal reporting console su ch as NetQoS SuperAgent.
2-56 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Managed Device Note For the WS-SVC-N AM-1 and WS-SVC-N AM-2 pl atforms, SNMPv3 is not requi red.
2-57 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Managed Device Step 2 Click the T est Connectivity b utton to perform an SNMP t est. Click Close when f inished.
2-58 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Network If NB AR Protocol Discov ery is en abled, the NB AR Interfaces window lists kno w n interfaces b y name and type.
2-59 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Network The site definition is very flexible and c an accommoda te various scenarios. The site definition is u sed not only for vie wing of data, bu t for data export and data retention as well.
2-60 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Network Specifying a Site Using Multiple Rules Y ou can def ine a site using a combination o f multiple rules described abo ve.
2-61 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Network The f ields on this sc reen are descri bed in Ta b l e 2-27 , Sites Screen . Defining a Site The “Def inition Rules” section on page 2-59 gi ves sp ecific i nformation ab out v arious sc enarios.
2-62 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Network See Figure 2-7 for an e xample. Figur e 2-7 Site Configuration Screen The fields are def ined below in Ta b l e 2-28 , Site Configu ration Screen Fields .
2-63 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Network Step 4 Click the Submit b utton. Note The “Unassigned” site (with a de sc ription of “Unclassified hosts” ) includes any that do not match any of your si te conf igurations.
2-64 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Network NDE Interface Capacity After you ha ve set up NetF.
2-65 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Network These topics help you set up and manage the DSCP g.
2-66 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Classification Step 4 Click Submit to sa ve your changes, or cl ick Reset to cancel. Editing a DSCP Group T o edit a DSCP gr oup: Step 1 Choose Setup > N etwork > DSCP Gr oups .
2-67 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Classification The N AM enables the selection of the "better" application identifier , wh erein "better" is def ined as the deeper inspection to be used for ap plication classification.
2-68 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Classification Ta b l e 2-33 , Applications describes the f ields on the Applications setup page.
2-69 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Classification This allo ws you to configure appl ications consis tently across mult iple N A Ms, so that the same user-created application is exported with the same v alue.
2-70 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Classification T o edit an ap plication: Step 1 Choose Setup > Classification > A pplications . Step 2 Select the applicatio n to edit, and click Edit .
2-71 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Classification Editing an Application Group T o edit an ap plication group: Step 1 Choose Setup > Classif ication > Applicat ion Groups .
2-72 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Classification Step 1 Choose Setup > Classif ication > URL-based Appl ications . Step 2 Click Cr eate .
2-73 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Classification See Figure 2-9 for an example of creating a URL-based application.
2-74 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Monitoring Encapsulations Using Encapsulati on gi ves you incr eased flexib ility when trying to mo nitor (such as counting or grouping) dif ferent types of application traf fic.
2-75 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Monitoring • URL, page 2-78 • W AAS Monitored Servers,.
2-76 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Monitoring The aggreg ation interv als determine ho w much da ta can be stored in the N A M database. See Ta b l e 2-3 5 , Data Reten tion for information about data retention.
2-77 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Monitoring Step 5 Accept the default set tings or change the sett ings to the v alues you want to monitor . Click Submit to sav e your changes, or click Reset to cancel.
2-78 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Monitoring Note T o report jitter and packet lo ss for the SCCP protocol, you must enable CDR on Cisco Unif ied CallManager .
2-79 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Monitoring • Disabling a URL Coll ection Enabling a URL Collection T o enable a URL collection: Step 1 Choose Setup > Monitoring > URL.
2-80 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Monitoring : Step 4 Check the Recycle Entries check box to recycle entries.
2-81 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Analyzer Monitoring Disabling a URL Collection T o disable a URL collec tion: Step 1 Choose Setup > Monitoring > URL Collection .
2-82 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 2 Setting Up The NAM Traffic Ana lyzer Monitoring The Add W AAS Server(s) dialog box displays . Step 4 Enter the server IP address in the Serv er Address fiel d.
CH A P T E R 3-1 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 3 Monitoring and Analysis The Cisco N AM T raff ic Analyzer R elease 5.0 introduces a redesigned interface and user experience, with more intuiti ve workflo ws and interactiv e reporting capabilities.
3-2 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Navigation Navigation Context Menus On most of the dashboards, you can left-cl ick on the colored bar of data to get a context men u, with which you can get more detai led information about one parti cular application.
3-3 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Navigation • Maximum interv al for up to 1 hour is supported for the.
3-4 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Traffic Summary Traffic Summary The T raff ic Summary Dashboard all ows.
3-5 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Response Time Summary T o see a chart in table format, use the “V iew as Char t / V iew as Grid” toggle b utton on the bottom right corner of the chart.
3-6 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Site Summary Note T o change from bytes to bits, choose Administration > System > Prefer ences and change the “Data d isplayed in ” selection.
3-7 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Alarm Summary Note Y ou could see a count of two alarms for the same occurre nce if: - both the source and th e destination are in the same site i n the T op N Site - Host Pair chart.
3-8 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Analyzing Traffic Analyzing Traffic The charts av ailable under the “ Analyze” me nu show statistics that occur o ver time.
3-9 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Analyzi ng Traffic Y ou can use the Zoom/P an feature, in which you can drag the be ginning or end to change the time interv al, as sho wn belo w .
3-10 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Analyzing Traffic Host The Host T raff ic Analysis Screen will sho w you at a qui ck glance the i nput and outpu t of a particula r host ov er time.
3-11 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Analyzi ng Traffic NDE Interface Traffic Analysis The NDE Interface Ana lysis page enables you to view da ta collected for indi vidual interfaces on a switch or router that is e xporting Netflo w packets to the N AM.
3-12 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Analyzing Traffic • T op N Applications - Egress • To p N H o s t .
3-13 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Analyzi ng Traffic Figur e 3-5 DSCP Gr oup T raffic Over Time On this.
3-14 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Analyzing Traffic URL Hits Y ou can analyze the URLs collect ed by the NAM (for setup, see URL, page 2-78 ) .
3-15 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Analyzi ng Traffic Host Conversations If you choose Analyze > T r .
3-16 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Analyzing Traffic Applications Ov er T ime, as shown in Figure 3- 7 , will show you all of the applications that ha ve been running for the time p eriod interv al.
3-17 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis WAN Optimization Application Traffic By Host When you choose Analyze .
3-18 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis WAN Optimization Application Performance Analysis T o analyze the W AAS traff ic, c hoose Analyze > W AN Optimization > A pplication Perf ormance Analysis .
3-19 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Response Time Response Time The N AM T raf fic Analyzer monitors TCP .
3-20 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Response Ti me Figur e 3-1 1 T ransaction Time versus Response Time Measurements Ta b l e 3-7 lists and describes the AR T metrics measured b y N AM 5.
3-21 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Response Time Number of unresponsi ve connections Number o f TCP conn.
3-22 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Response Ti me Application Response T ime Metrics are a vailabl e on the response Response T i me Summary Dashboard ( Monitor > Response Time Summary ), which allo ws you to see a “summary” vie w of the data.
3-23 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Response Time Note If you do not specify any ap plication, the chart wil l sho w the network time instead of tr ansaction time.
3-24 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Response Ti me Ta b l e 3-8 , Server Appl ication Responses Metrics , pro vides definitions of each f ield of the Server Application Responses windo w .
3-25 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Response Time Note N AM uses the TCP three-way handshake to calcu late network delay .
3-26 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Response Ti me Note N AM uses the TCP three-way handshake to calcu late network delay .
3-27 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Response Time Client-Server Application Transactions The Client-Serve.
3-28 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Response Ti me Note N AM uses the TCP three-way handshake to calcu late network delay .
3-29 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Managed Device T o view the Client-Server Netw ork Responses windo w , choose Analyze > Response Ti me > Detailed V iew s > Client-Server Network Responses .
3-30 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Managed Device • Health, page 3-3 1 • NB AR, page 3-37 Interface Interfaces Stats Table T o view packet distrib ution details on the interfaces, choose An alyze > Managed Device > Interfa ce .
3-31 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Managed Device Interface Statistics Over Time When you select an interface in the Interface Stats T abl e, the statistics for that interf ace will be graphed in the area below , as shown in Figure 3-13 .
3-32 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Managed Device Chassis Health The Chassis Health windo w displays two real-time grap hs: CP U usage and Backplane U tilization.
3-33 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Managed Device Crossbar Switching Fabric This option sho ws the Crossbar Switching F abric information.
3-34 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Managed Device Ternary Content Addressable Memory Informatio n Sho ws the T ernary Content Addressable Memory ( TCAM) usage informatio n.
3-35 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Managed Device Router Health If your de vice is a router , the Router.
3-36 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Managed Device Router Information The Router Informat ion windo w displays rout er information. Ta b l e 3-20 lists and describes the f ields of the Router Informat ion windo w .
3-37 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Media NBAR Y ou can use the N AM Tr af fic An alyzer to vie w Network Based Application Recognit ion (NB AR) data.
3-38 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Media RTP Streams Purpose The R TP Streams w indo w shows y ou three pieces of information: RTP Stream Information • Source IP Address and Port: IP ad dress and UDP port of the originator o f the R TP stream.
3-39 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Media RTP Stream Stats Details This table shows the per-interval stats calculated by N AM at each interval. The columns of the tables are: • Report T ime: time when the stats were calcul ated.
3-40 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Media • V oice Call Statistics : Number of calls per signali ng protocol (SCC P , SIP , MGCP , and H.323) at each interv al during the selected in terval .
3-41 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Media If you click on a call ro w in the table, in the R TP Streams for the Select ed Call display at the bottom of the page you will see all streams that are associated with the call.
3-42 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Media Y ou can see more detailed in formation about each R TP stream by selectin g the R TP stream and clicking on the RT P S t r e a m D e t a i l s bu tton.
3-43 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monitoring and An alysis Media SSRC Synchronization sour ce number as it appear in the R TP he.
3-44 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 3 Monito ring and Analysis Media.
CH A P T E R 4-1 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 4 Capturing and Decoding Packet Data The Capture feature of the NAM T raff ic Analyzer allo .
4-2 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Sessions Figur e 4-1 Quic k Captur e Sessions The purpose of.
4-3 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Session s Figur e 4-2 NAM Captur e Sessions This section co.
4-4 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Sessions Ta b l e 4-2 , Buttons in th e Capture Session Operations Windo w describes the operations that you can perform from the Capture Sessi ons window .
4-5 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Session s Figur e 4-3 Configure Captur e Sessi on Window Step 3 Enter information in t he Capture Settings Fields ( Ta b l e 4-3 ) as ap propriate.
4-6 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Sessions Ta b l e 4-4 lists the hardware platforms N AM 5.0supports and their maximum session si ze. This is the maximum capture memory b uffer size for all capture session s together , not individ ually .
4-7 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Session s When capturing to multip le files, a suff ix is added to the f ile name.
4-8 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Sessions Creating a Software Filter Y ou can def ine a softw.
4-9 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Session s Ta b l e 4-5 Softwar e Filter Dialog Bo x Field Description Usage Notes Name Enter a name of the ne w filter .
4-10 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Sessions Destination Address / Mask Destination address of the packets. • F or IP , IPIP4, GRE.IP , or GTP .
4-11 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Session s Note The parameters described in the table abov e are independently ev aluated by the N AM.
4-12 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Sessions • T o cancel the changes, click Cancel .
4-13 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Session s The list is also shown in Figure 4-5 . Figur e 4-5 Hardw are Filt er T ype Step 5 Data fields will then appear that correspond with th e type of hardw are filt er you selected.
4-14 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Sessions Step 7 Click Submit . IP T o configure an IP hardw are filter: Step 1 Enter a Filter N ame. Step 2 From the T ype drop-down menu , choose IP .
4-15 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Files • Enter a Mask of up to four b ytes (eight hex charact ers). Step 7 Repeat Step 6 for up to four payload dat a segments.
4-16 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Files • Name: • Size: • Date: • State: • Location: If you are using a Cisco 2200 Ser ies appliance, the N AM will create a xxx.
4-17 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Files Note Capture files on the NAM 2200 Series appliances ar e stored in nati ve N AM format. Y ou can con vert the capture file format to .
4-18 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Files The Error Scan screen is sho w n in Figure 4-6 . Figur e 4-6 Er ror Scan Scr een The fields are described in Ta b l e 4-8 .
4-19 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Files Step 2 Choose a capture file from the list of captures.
4-20 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Viewing Packet D ecode Information Step 3 Click the Delete b utton.
4-21 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Viewing Packet Decode Information Ta b l e 4-10 describes the columns displayed in the pack et browser pane.
4-22 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Viewing Packet D ecode Information – Destinatio n allows y ou to specify the destinati on address, or lea ve it bl ank if not applicab le.
4-23 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Viewing Packet Decode Information • T o adjust the s ize of an y of the panes , click and drag the pane frame up or do wn.
4-24 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Viewing Packet D ecode Information Ta b l e 4-1 1 Custom Decode Filter Dialog Bo x Field Description Usage Notes Filter Name The name of the capture filter .
4-25 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Viewing Packet Decode Information Step 4 Do one of the foll ow ing: • T o create the fi lter , click Submit .
4-26 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Viewing Packet D ecode Information Examples of Custom Decode Filter Expressions • T o match SNMP packets from 111.
4-27 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and D ecoding Packet Data Viewing Packet Decode Information Step 4 Do one of the foll ow ing: • T o apply the ch anges, clic k Submit .
4-28 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 4 Capturing and Decoding Packe t Data Viewing Packet D ecode Information.
CH A P T E R 5-1 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 5 User and System Administration This chapter pr ovides infor mation about performing u s er and system administration tasks and generating diagnostic informat ion for obt aining technical assistance.
5-2 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration System Admi nistration Resources Choose Administration > System > Resources to vie w the System Overvie w windo w .
5-3 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration System Ad ministra tion Note N AM 5.0 does not supp ort using IPv6 for the n etwork parameter IP add ress. Step 3 Do one of the foll ow ing: • T o sav e the changes, click Submit .
5-4 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration System Admi nistration T o view and set the N AM SNMP Agent: Step 1 Choose Administration > System > SNMP Agent .
5-5 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration System Ad ministra tion Deleting NAM Community Strings T o delete the N AM community strings: Step 1 Choose Administration > System > SNMP Agent .
5-6 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration System Admi nistration • Cisco 2200 Series appliances ca n get their time from a local CLI clock set command.
5-7 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration System Ad ministra tion Step 6 Do one of the foll ow ing: • T o sav e the changes click Submit . • T o leav e the configuration unchanged, choose Reset .
5-8 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration System Admi nistration Step 7 Click Submit to sa ve your mo difications, or click Reset to clear the dialog of any characters you entered or restore the pre vious settings.
5-9 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration System Ad ministra tion • Creating iSCSI Storage Locations, pa.
5-10 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration System Admi nistration Step 4 Click Submit to create the NFS storage location. Othe rwise click Reset to remo ve your entr ies or Cancel to cancel the chan ge.
5-11 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration System Ad ministra tion Creating iSCSI Storage Locations The follo wing procedure describes ho w to create an iSCSI storage l ocation for storing N AM capture data.
5-12 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration System Admi nistration Step 4 Click Submit to change the iSCSI storage lo cation parameters. Otherwise click Re set to remov e your entries or Cancel to cancel the change.
5-13 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration System Ad ministra tion Step 2 Click the Cre ate bu tt o n. Step 3 In the “Community” f i eld, enter the community stri ng set in the N AM Thresholds.
5-14 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration Diagnostics Diagnostics The Diagnostics option of the Administration menu pro vides tools to aid in tro ubleshooting.
5-15 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration Diagnostics • User ID • T ime stamp • IP address (in case of remote web access) • Acti vity description T o access the audit trail window: Step 1 Choose Administration > Diagnostics > A udit T rail .
5-16 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration User Administration User Administration The User Administration.
5-17 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration User Administration For info rmation on resetting t he N AM pas.
5-18 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration User Administration Usernames and passwords cannot exceed 32 characters and can be alphanumeri c.
5-19 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration User Administration Step 2 Select the username. Step 3 Click Delete . Note If you delete user acco unts while users are logged in , they remain logged in and retain their pri vileges.
5-20 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration User Administration Step 3 Do one of the foll ow ing: • T o sav e the changes, click Submit . • T o cancel, clic k Reset .
5-21 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 5 User and System Administration User Administration Adding a NAM User or User Group T o add a N AM user or user group: Step 1 Click User Setup . Step 2 Enter the user login name.
5-22 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 5 User a nd System Administration User Administration Current User Sessions The Current User Sessions table is a record of the users who are logged into the application.
CH A P T E R 6-1 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 6 NAM Traffic Analyzer 5.0 Usage Scenarios This chapte r describes usag e scenarios for t he Ci sco Network Analysis Module T raff ic Analyzer, Release 5.
6-2 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 6 NAM Traffic Analyzer 5.0 Usage Scenarios Deployment Deployment Deploying NAMs in the Branch A N AM T raff ic Analyz er deployed in the b ranch will provide a de tailed view of the traff ic traversing to and from the branch.
6-3 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 6 NAM Traffic Analyzer 5.0 Usage Scenarios Deployment See related content Data Export , NetFlow , page 2-49 . Autodiscovery Capabilities of NAM If you ar e an e xisting N AM 4.
6-4 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 6 NAM Traffic Analyzer 5.0 Usage Scenarios Monitoring Integrating NAM with LMS The N AM Traf fic Analyz er GUI can be placed on the LMS (LAN Management Suite) 4.
6-5 User Guide for the Cisco Netwo rk Analysis Module (NAM) Tra ffic Analyzer, 5.0 OL-22617-01 Chapter 6 NAM Traffic Analyzer 5.0 Usage Scenarios Troubleshooting Using NAM to Evaluate Application-Leve.
6-6 User Guide for the Cisco Network Analysis Mod ule (NAM) Traffic Analyzer, 5.0 OL-22617-01 Chapter 6 NAM Traffic Analyzer 5.0 Usage Scenarios Troublesho oting If the alarm is for an Application Res.
A-1 User Guide for the Cisco Network Analysis Module Traffic Analyzer, 4.1 OL-19530-02 APPENDIX A Troubleshooting This appendix addresses some co mmon issues you might encounter wh ile using N AM Traf fic Analyzer 5.
A-2 User Guide for the Cisco Network A nalysis Mod ule Traffic Analyzer, 4.1 OL-19530-02 Appendix A Troublesho oting Error Messages Error Messages Q. I’m waiting fo r the graphical data to populat e on a dashboard. What does this red er ror “Request Error -- Please T ry Again” mean? A.
A-3 User Guide for the Cisco Network An alysis Module Traffic Analyzer, 4.1 OL-19530-02 Appendix A Troubleshooting NAM Behavior • Does a ping to N AM mgmt IP address work? • What is the module status on Sup/router? show modules CLI NAM Behavior Q.
A-4 User Guide for the Cisco Network A nalysis Mod ule Traffic Analyzer, 4.1 OL-19530-02 Appendix A Troublesho oting WAAS Troubleshooting.
B-1 User Guide for the Cisco Network Analysis Module Traffic Analyzer, 5.0 OL-22617-01 APPENDIX B Supported MIB Objects Supported MIBs Ta b l e B - 1 lists the MIB objects supported by the superv isor engine and the N AM.
B-2 User Guide for the Cisco Network A nalysis Mod ule Traffic Analyzer, 5.0 OL-22617-01 Appendix B Sup ported MIB Objects Supported MIBs Supervisor Engine ...mib-2(1).rmon(16).tok enRing(10 ).ringStation ControlT able(1) ...mib-2(1).rmon(16).tok enRing(10 ).
B-3 User Guide for the Cisco Network An alysis Module Traffic Analyzer, 5.0 OL-22617-01 Appendix B Supported MIB Objects Supported M IBs Supervisor Engine ...cisco(9).workgroup(5).cis coStackMIB(1).ciscoStatck MIBConformance(31).cisc oStati cMIBGroups(20.
B-4 User Guide for the Cisco Network A nalysis Mod ule Traffic Analyzer, 5.0 OL-22617-01 Appendix B Sup ported MIB Objects Supported MIBs.
IN-1 User Guide for the Cisco Network Analysi s Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 INDEX A administration (see system administr ation) 5-1 alarm thresholds, setting NAM thresholds 2-39 del.
Index IN-2 User Guide for the Cisco Network Analys is Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 protocol 2-68 SPAN sessions 2-6 Custom captu res 4-8 custom display filt ers, managing creating 4-2.
Index IN-3 User Guide for the Cisco Network Analysi s Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 sending data directly t o NAM 2-17 External reporting console 2-55 F Filtering audit trail 5-15 IP .
Index IN-4 User Guide for the Cisco Network Analys is Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 NetFlow configuring on devices 2-20 Cisco IOS 2-21 multi-layer switching cache 2-21 NAMs in a devic.
Index IN-5 User Guide for the Cisco Network Analysi s Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 methods (table) 2-4 NetFlow, configu ring on devices 2-20 Cisco IOS 2-21 multi-layer switching cach.
Index IN-6 User Guide for the Cisco Network Analys is Module (NAM) Traffic Analyzer, 5.0 OL-22617-01 V VACL 1-14, 2-17 VLAN access control list 1-14, 2-17 VACL, configuring on LAN VLANs 2-18 on WAN in.
Een belangrijk punt na aankoop van elk apparaat Cisco Systems 5 (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen Cisco Systems 5 heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens Cisco Systems 5 vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding Cisco Systems 5 leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over Cisco Systems 5 krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van Cisco Systems 5 bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de Cisco Systems 5 kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met Cisco Systems 5 . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
