cc/td/doc/product/rtrmgmt/sw_ntman/cwsimain/cwsi2/cwsiug2
hometocprevnextglossaryfeedbacksearchhelp
PDF

Table of Contents

Overview

Overview

TrafficDirector network management software is an application in the CiscoWorks for Switched Internetworks (CWSI) suite of network management applications. CWSI applications enable you to configure, monitor, and manage a switched internetwork. CWSI includes the following applications:

TrafficDirector is described here. For information about getting started with CWSI and the other CWSI applications refer to the following:


Note To install CWSI, refer to the CD booklet Installing CWSI in the CD-ROM package.

Purpose

TrafficDirector is an application that enables you to monitor and record information about network usage, events, and trends. TrafficDirector helps you identify and isolate a wide variety of fault conditions in data communication networks.

TrafficDirector consists of a centralized, SNMP-compatible network management console and data-gathering agents located at various points on a network. TrafficDirector collects statistical data, displays selectively captured and fully decoded network traffic, sets user-defined alarm conditions, and gets real-time updates from all segments of a widely dispersed enterprise network.

TrafficDirector is based on two standards that let it operate in a multitopology, multivendor environment:

TrafficDirector has four main functions:

You use TrafficDirector as a starting point to issue commands to probes and other RMON agents to gather and analyze network information. You also use TrafficDirector to configure agents, domains, filters, SQL database aging, and perform other administrative tasks. TrafficDirector contains real-time monitoring applications that enable you to monitor and analyze network activity. You can have multiple TrafficDirector programs running simultaneously within a single network, even working with the same probe or other RMON agent.

You can use TrafficDirector in a switched environment with WAN Frame Relay circuits, or with LAN traffic. You can also install domains on switches and Frame Relay agents using the Configuration Manager application, and accurately monitor traffic through these devices using the Domain Discovery and Domain History applications.

TrafficDirector controls network data acquisition and analysis by first configuring SwitchProbes, then retrieving and analyzing network data from the probes. TrafficDirector gives you full control over what network data the probes gather, as well as how to analyze and display this data (Figure 1-1).


Figure 1-1: Network Segment with SwitchProbe Attached



SwitchProbes

SwitchProbes are enhanced RMON probes that you attach to a specific network segment. When a SwitchProbe is attached to a network segment, it becomes a node on the network. The probe "hears" all transmissions on the segment, regardless of how it is addressed. The SwitchProbe gathers statistical information for that segment and provides a window into the segment that you use to observe and analyze network data. A typical network has multiple segments and multiple agents. Normally, one agent is attached to each network segment.

SwitchProbes communicate with TrafficDirector managers using SNMP either in-band (using the same network facilities as all other network nodes) or out-of-band (using a communications medium that is separate from the network).

TrafficDirector supports probes for Ethernet, Fast Ethernet, Token Ring, Fiber Distributed Data Interface (FDDI), Copper Distributed Data Interface (CDDI), High Speed Serial Interface (HSSI), and WANs. For more information about different probe models and their uses, see the publication SwitchProbe User Guide.


Note See Table 6-1 for a list of switch models supported by TrafficDirector.

TrafficDirector Protocol Model

There is a correlation between TrafficDirector network protocol models and the standard OSI model (Figure 1-2).


Figure 1-2: Example of a TrafficDirector Protocol Interpreter Suite



TrafficDirector contains a set of filters that isolates an individual protocol from other network traffic. A second filtering process (domains) separates components of the protocol stack for each supported protocol. For example, using Data Capture and a filter that passes IBM traffic, you can select only IBM traffic in a segment. You can then use Protocol Decode to separate each packet (or frame) into its component layers and decode each layer according to the selected protocol (Figure 1-3).


Figure 1-3: Extracting and Decoding IBM Traffic from a Network Segment



RMON-MIB

An RMON-MIB group is a related set of variables used with RMON functions, such as monitoring and collecting certain types of data, setting alarms, and event trapping. RMON goes beyond SNMP by providing useful tools for network monitoring. The basic RMON-MIB groups for Ethernet and Token Ring networks are as follows:

RMON2

With the TrafficDirector RMON2 functionality, you can monitor traffic at the network and application layers. This functionality includes getting statistics for all hosts accessing a specific segment, no matter where they are located or how the network is connected.

With RMON2, RMON groups map into all the major network layer protocols, including IP, IPX, DECnet, Appletalk, VINES, and OSI. You can also monitor application layer traffic, including network applications such as Notes, Telnet, Microsoft Mail, and Sybase. You can use TrafficDirector to monitor and troubleshoot key application layer traffic within the enterprise network.

Protocol Analysis

TrafficDirector agents selectively gather network traffic as frames from any operational segment protocol, node, or conversation. Agents store this information in an internal file and send the file to TrafficDirector when requested. The TrafficDirector Protocol Decode application reads the data file and breaks each captured packet into individual protocols. You can then display or print either the raw data (in byte form) or the full seven-layer decode (Figure 1-4).


Figure 1-4: Protocol Decode Function



Table 1-1 lists the protocols that the TrafficDirector Protocol Decode software supports.


Table  1-1: Supported Protocols
Ethernet IEEE 8023 IEEE 8025 IEEE 8022
APPDSP APPAEP APPARP APPASP
APPLDDP APPAFP APPATP APPSDDP
APPRTMP APPLAP APPPAP APPZIP
DECDAP APPNBP CLNS DECCTERM
DECLAT DECDRP DECFOUND DECMOPRC
DECSMB DECLDATA DECMOPDL DECSCP
DODFTP DECNICE DECNSP DODICMP
DODGGP DODARP DODDNS DODSMB
DODIP DODNTDAT DODNTNAM DODSMTP
DODNTB DODTCP DODRARP DODTLNT
NOVERRP DODTFTP DODUDP ES-IS
NOVIPX IBMSMB ISO-Presentation FTAM
SNAPS ISO-Session NOVRIP IBMNETB
SNARHREQ NCP SNARU NOVECHO
SUNNFS NOVSPX SNATH SNAFM
SUNYP SNARHRES SUNMOUNT SNMP
TP 0/2/4 SNAXID VINEMAIL SUNPMAP
VINESARP SUNRPC VINESIP VINESRTP
VINESMM VINESICP VINESIPC VINESSPP
X400 VINESST XNSERRP XNSPEXP
XNSRIP XNSECHO XNSIPX XNSSPX
XNSSMB

Basic Procedures

You perform most TrafficDirector functions in the TrafficDirector main window. You can also use the main window to add agents and agent groups to TrafficDirector, and to edit agents that you have already added. TrafficDirector does not recognize an agent until you have added it using the main window functions.

Window Conventions

Most TrafficDirector application windows contain menu bars with lists of choices. Beneath each menu bar is a shortcut toolbar with icons you can use to print or update the window contents, delete one or more items from the window and, in some windows, open or edit a file. Clicking on these buttons either starts a single action or displays another list of choices. Application windows contain displays of graphical network data and list boxes containing data related to the window function.

When you enter information in TrafficDirector windows, keep the following restrictions in mind:

Mouse Conventions

You perform most mouse selections with the left mouse button. The procedures described here are based on using a three-button mouse. If you are using a two-button mouse, click the right and left mouse buttons at the same time to simulate the function of the middle mouse button.

Keyboard Conventions

Table 1-2 lists "hot key" sequences you can use with TrafficDirector.


Table  1-2: Keyboard Combinations
Key Combination Result
[Ctrl]+[P] Launch the print window.
[Alt]+[F4] Close the active window.
[Alt]+[F1] Launch the Agent Information window for a selected agent.
[F2] Refresh the information displayed in a real-time monitoring application.

Displaying Agent Information

You can display system information and interface configuration information for a selected agent directly from most applications described here. You can quickly access agent information in one of the following ways:

The Agent Information window (Figure 1-5) opens.


Figure 1-5: Agent Information Window



Exiting TrafficDirector and Application Windows

You can exit TrafficDirector or any application at any time. When you do, TrafficDirector saves all the changes you made, such as adding agents, agent groups, or switches, and installing domains. To exit TrafficDirector, select File>Exit or press Alt-F4.

hometocprevnextglossaryfeedbacksearchhelp
Copyright 1989-1997 © Cisco Systems Inc.