Network Monitoring

Course Teacher:
Md. Obaidur Rahman, Ph.D
Associate Professor
Department of Computer Science and Engineering (CSE),
Dhaka University of Engineering & Technology (DUET), Gazipur.

Course ID: CNC507

Course Title: Network Planning, Management and Admin.
Department of Computer Science & Engineering (CSE),
Independent University, Bangladesh (IUB).
Lecture Acknowledgement

Professor Choong Seon Hong, Ph.D.

Networking Lab,
Kyung Hee University, Republic of Korea.

2 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Network Monitoring
Access to monitored information
How to define monitoring information?, and how to get that
information from a resource to a manager?
Design of monitoring mechanisms
How best to obtain information from resources
Application of monitored information
How the monitored information is used in various
management functional areas

3 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Network Monitoring Information
Information type
Static : Infrequent changing information.
Ex) Port ID, Number of Ports
Not frequently changed

Dynamic : State information.

Ex) state of protocol machine or the transmission of packet

Statistical : Derived from dynamic information.

Ex) average number of packets transmitted

4 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Network Monitoring Information (contd)
Organization of a management information base by Mazumdar and Lazar(1991)

Call_Blocked Packed_Loss
Statistical DB
Time_Delay Throughput

Abstraction of state
and event variables

State_Variable
Dynamic DB
Event_Variable

Sensor activation and

data collection

Sensor DB
Switch_Server
Buffer Source Status_Sensor
Station _info Server Derived_Status_sensor
Switch_Buffer Event_Sensor
Switch_Source
Configuration DB
Static DB

5 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Network Monitoring Configurations
Monitoring application: visible to user such as
performance monitoring, fault monitoring and accounting
monitoring
Manager function: Having basic monitoring function
Agent function: Gathering and recording management
information from one or more elements, and
communicate with monitor
Managed objects: Management information that
represents resources and their activities
Monitoring agent: Generating summaries and statistical
analyses of management information

6 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Polling and Event Reporting
Information is collected and stored by agents and it is used by
multiple managers
Two techniques to make the information
Polling: Request-response interaction between a manager and agent
Querying any agent and requesting the values of various information
elements
Agent responding with information from its MIB
Event reporting: Initiative with the agent and the manager with the
role of a listener
Giving current status of agent to manager
Pre-configurable reporting period or settable by manger
Generating a report when a significant event (ex, a change of state or an
unusual event (ex., fault)
More efficient than polling for monitoring object whose states or values
change relatively infrequently

7 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance Monitoring
Performance Indicators
Absolute prerequisite for the management of telecom network :
measuring the performance of the network, or performance
monitoring
Difficulties to choose appropriate indicators because of following:
there are too many indicators in use
the meanings of most indicators are not yet clearly understood
some indicators are introduced and supported some manufacturers only
most indicators are not suitable for comparison with each other
frequently, the indicators are accurately measured but incorrectly
interpreted
in many cases, the calculation of indicators takes too much time, and the
final results can hardly be used for controlling the environments
Service-oriented measures (availability, response time, accuracy)
and Efficiency-oriented measures (throughput, utilization)

8 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Availability: Percentage of time that a network
system component, or application is available for a user
A = MTBF / MTBF + MTTR, where MTBF : mean time between failures,
MTTR : mean time to repair
Availability of serial and parallel connections

A A A2 0.98 x 0.98 = 0.96

Serial

2A - A2 1- 0.98 = 0.02 : one unavailability

A 0.02 x 002 =0.0004 :
both unavailability
Parallel 1-0.004 = 0.9996:
availability of combined unit
9 CNC507: Network Planning, Management and Admin.
Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Response Time:
Several studies show that a computer and a user interacts at a
pace that neither has to wait on the other
productivity increases significantly
the cost of work drops
quality tends to improve
Up to two seconds: It was acceptable for most interactive
applications
User response time: The time span between the moment a
user receives a complete reply to one command and enters
the next command - referred to as think time
System response time: The time span between the moment
the user enters a command and the moment a complete
response is displayed

10 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Elements related to response time
Inbound terminal delay: The delay in getting an inquiry from
terminal to the communications line
Inbound queuing time: The time required for processing by the
controller
Inbound service time: The time to transmit the communications
link and nodes (controller to hosts front-end processor)
Processor delay: the time for processing in the front-end
processor, the host processor, the disk driver and so on
Outbound queuing time: The time a reply spends at a port in the
front-end processor waiting to be dispatched to the network.
Outbound service time: The time to transmit the
communications facility from the hosts front-end processor to the
controller.
Outbound terminal delay: Primarily due to line speed

11 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Elements of response time
TI = inbound terminal delay
WI = inbound queueing time
SI = inbound service time
CPU =CPU processing delay
WO = outbound queueing delay
SO = outbound service time
TO = outbound terminal delay

Network interface SI
Server
(e.g., bridge)
TO

PC
Network
WI
WO
TI
SO CPU

12 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Accuracy
Accurate transmission of data between user and host or between two hosts
Using error-correction mechanisms in protocol such as the data link and
transport protocols
Generally not user concern
Rejection rate: The percentage of time the network cannot transfer
information because of a lack of resources and performance
> 2% indicates significant problems

Throughput
An application-oriented measure
The number of transactions of a given type for a certain period of time
The number of customer sessions of a given application during a certain
period of time
The number of calls for a circuit-switched environment

13 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Goodput
The probability or the rate of successfully received packets
with no packet loss
Utilization
A more fine-grained measure than throughput
Determining the percentage of time that a resource is in use
over a given period of time
To search for potential bottlenecks and areas of congestion
Usually increasing exponentially as the utilization of a resource
increases

14 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Collecting Utilization Data
On a bridge or router
packet forwarding rate
percentage of dropped frames (on each interface)
number of packets in a queue
processor load
On a file server
processor load
disk access rate
NIC utilization

15 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Network Management System
A simple tool
provide real-time information about network devices and links
preferably in graphical form such as a line or bar graph
A more complex tool
setting thresholds can trigger a subsequent action
Utilization
(%)

60

50

40
Threshold for alarm: 60%
Rearm alarm at 40%

Time(sec)
16 CNC507: Network Planning, Management and Admin.
Independent University, Bangladesh (IUB)
Performance monitoring (contd)
Thresholds have a priority (low, medium, high)
Graphing historical data
line graph:examining trends in data such as utilization
bar graph: comparing values
pie graph: demonstration the percentage of values
100 Memory used (Kbytes)
Packets passed (K)
21%
35% IP Appletalk
Utilization
(%) 5% OSI

4% 29%
unknown DECnet
Time (seconds) 1/98 2/98 3/98
6% SNA
Line graph Bar graph Pie graph

17 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance monitoring (contd)
An Advanced tool
Examining the historical data
receive the state of the network and performance problems
retrieve information from the database
analyze the state of the network
Threshold value
60

Predicted utilization

Utilization
(%)
Computed actual utilization

30 60 90 120 150 180 Time (days)

18 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance Management
Simulating the network
Analyze future performance and determine what configuration can
produce the greatest performance
Build the network model
how the simulation should calculate each component
how it should react to the simulation
Queuing analysis

Dispatching
Waiting line discipline
(queue) Departure
Server

Waiting time Service time

in the queue Utilization

Waiting time in the queuing system

19 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Performance Management
predicting response time, rejection rate and availability
Sufficient input
Simulate traffic

Limit of experience

12 sec
Actual response time

Response time
8 sec

4 sec Projected response time

0.2 0.4 0.6 0.8 system load (utilization)

20 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Fault Management
Problems of Fault Monitoring
Fault observation
unobservable faults (e.g. the existence of deadlock)
partially observable faults (e.g. failure of some low-level protocol in an
attached device)
uncertainty in observation (e.g. Lack of response)
Fault diagnosis
multiple potential causes
too many related observation
interference between diagnosis and local recovery
absence of automated testing tools

21 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Fault Management
Propagation of failure to higher layers
Application failure

Transport failure

Data link failure

Client Server

Transmission
break
Router
Router

Mux Mux

22 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Fault Management
Examples of test that a fault monitoring should have
connectivity test
data integrity test
protocol integrity test
data saturation test
connection saturation test
response time test
loopback test
function test
diagnosis test

23 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Accounting Management
Accounting monitoring
Keep track of users usage of network resources
Resources
communication facilities: LANs, WANs, leased lines, dial-up lines, and PBX
systems
computer hardware: workstations and servers
software and systems: applications and utility software in servers, a data
center, and end user sites
services: includes all commercial communications and information
services available to network users
Accounting data
user identification
receiver
number of packets
resources used
time stamps & priority level

24 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Accounting Management
Determining network resource usage
total number of transaction
number of logins
total number of packets
total number of bytes (reflecting bandwidth)
billing on output
bytes received
Email
Acknowledgment
Security level

25 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Accounting Management
Accomplishing Accounting Management
Gathering data about the utilization of network resources
Using metrics to help set usage quotas
Billing users for their network use
Metrics and Quotas
SNMP
RFC 1272 Internet Accounting Background
define services to be metered and usage reporting
define the types of information necessary at various layers
Metrics work with quotas
Billing
One-time installation fee
Monthly fee
Fee based on amount of network resources consumed

26 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Accounting Management
Network management system
A simple tool
monitor for metrics that exceed quotas
report that data
A more complex tool
perform network billing
determine where to poll for billing information
An advanced tool
forecast the need for network resources
establish reasonable metrics and quotas
predict their billing costs
Reporting
real-time display:the current value of a metric
text reports: historical accounting and billing information

27 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)
Thank You !!

28 CNC507: Network Planning, Management and Admin.

Independent University, Bangladesh (IUB)