User Guide for Cisco Network Analysis Module Traffic Analyzer, 3.5
Index
Downloads: This chapterpdf (PDF - 541.0KB) The complete bookPDF (PDF - 9.19MB) | Feedback

Index

Table Of Contents

A - B - C - D - E - F - G - H - I - L - M - N - O - P - R - S - T - U - V - W -

Index

A

accounts in NAM Traffic Manager, managing 1-7

address filters, using to capture settings 6-7

administration (see system administration) 2-1

Alarm

EMail addresses 3-63

alarms, viewing 7-1

alarm logs, overview 7-1

NAM log, viewing 7-1

switch log, viewing 7-2

alarm thresholds, setting 3-52

NAM MIB thresholds 3-53

creating 3-54

deleting 3-56

editing 3-56

NAM MIB variables, selecting 3-53

switch thresholds 3-59

creating 3-59

deleting 3-61

editing 3-61

syslog, setting up 3-58

voice thresholds 3-56

application data, viewing 4-8

application protocols, capturing data for 4-10, 4-14

detail

by protocol 4-9, 4-13

cumulative 4-18

packets and bytes collected

by protocol 4-9, 4-13

cumulative 4-12, 4-17

real-time data in graphical format 4-10, 4-14

reports

Application report, creating 5-4

Application table reports 4-11, 4-15

tables and charts useful in

Applications Cumulative Data table 4-12, 4-17

Applications Current Rates table 4-9, 4-13

TopN Applications chart 4-11, 4-15

Application Response Time report

creating 5-4

Applications Cumulative Data table, using 4-12, 4-17

details 4-18

packets and bytes collected 4-12, 4-17

Applications Current Rates table, using 4-9, 4-13

application protocol data, capturing 4-10, 4-14

details for specific protocol, viewing 4-9, 4-13

real-time data, viewing 4-10, 4-14

reports 4-11, 4-15

audience for this document xviii

Audit trail 2-21

B

browser response time and display, troubleshooting A-13

C

Capture Analysis

drill down 6-14

Capture data

storage 2-16

Capture Files

Analyze button 6-14

capturing data 6-1

application protocols 4-10, 4-14

capture buffer

displaying data in 1-8

downloading to a file 6-13

capture settings, configuring 6-3

using a custom filter 6-9

using an address filter 6-7

using a protocol filter 6-8

client/server response time 4-69

custom capture filters, setting up 6-18

creating 6-18

deleting 6-21

editing 6-21

custom decode filters, setting up 6-22

creating 6-22

deleting 6-26

editing 6-25

host conversations 4-41

network hosts current rates 4-33

packet decode information, viewing 6-9

protocol decode information, viewing 6-13

response time 4-69

server detail 4-67

server response time 4-67

cautions

regarding

local database web users, deleting all A-2

NAM community strings, deleting 2-13

switch string and read-write community string matching 3-24

significance of xviii

Client/Server Response Time table, using 4-68

data, capturing 4-69

detail 4-69

reports 4-70

Client/Server Response Time Top N chart, using 4-70

collection (see data collection, setting up) 1-6

common navigation and control elements (table) 1-4

community switch strings, setting and viewing 3-24

configuring NAM Traffic Analyzer 3-1

community switch strings, setting and viewing 3-24

data collection, setting up 3-32

core data, collecting 3-32

DiffServe profile, setting up 3-38

DSMON data, monitoring 3-37

response time data, monitoring 3-35

voice data, collecting 3-34

data sources, setting up 3-7

router parameters, viewing 3-6

traffic, directing for spanning 3-7

creating a SPAN session 3-9

custom NetFlow data sources, creating 3-19

deleting a SPAN session 3-12

editing a SPAN session 3-11

listening mode, using 3-21

NDE collection types (table) 3-9

NetFlow, configuring on devices 3-13

NetFlow devices, managing 3-17

NetFlow interfaces, understanding 3-12

NetFlow records, understanding 3-12

SPAN sources (table) 3-8

traffic directing methods (table) 3-8

VACL, configuring on LAN VLANs 3-16

VACL, configuring on WAN interfaces 3-16

Continuous capture 6-5

conversations data, viewing 4-39

cumulative data for each host conversation 4-43

packets and bytes collected for MAC station conversations 4-44

packets and bytes for each host conversation 4-40

capturing data on 4-41

detail 4-41

real-time traffic statistics in graphical format 4-41

reports 4-42

packets and bytes for top n host conversations 4-42

tables and charts useful in

MAC Conversations Top N chart 4-45

MAC Station Conversations Cumulative Data table 4-47

Network Host Conversations Cumulative Data table 4-43

Network Host Conversations Top N chart 4-42

Viewing the Network Host Conversations Current Rates table 4-40

core data, collecting 3-32

Core monitoring

router 3-33

switch 3-33

creating

basic reports 5-4

custom capture filters 6-18

custom decode filters 6-22

custom NetFlow data sources 3-19

data source, deleting 3-21

data source information, verifying 3-21

data sources, editing 3-21

interfaces, selecting 3-20

NetFlow device, selecting 3-20

custom reports 5-20

NAM Traffic Analyzer accounts 1-7

NAM traps 3-62

NetFlow devices 3-17

protocol 3-43

SPAN sessions 3-9

switch thresholds 3-59

Custom capture filter

creating 6-18

custom capture filters

managing

creating 6-18

deleting 6-21

editing 6-21

setting up 6-18

using 6-9

Custom captures 6-18

custom decode filters, managing

creating 6-22

deleting 6-26

editing 6-25

setting up 6-22

Custom filters 6-18

Custom report

editing 5-21

Custom reports 5-20

creating a new folder 5-21

deleting 5-22

moving to a different folder 5-22

viewing 5-22

D

data collection

overview 4-2

setting up 3-32

core data collection 3-32

DiffServe profile data 3-38

DSMON data 3-37

response time data 3-35

voice data 3-34

data mismatches, troubleshooting A-16

Data source

core monitoring 3-33

data sources, overview 4-2

multiple collections, configuring 4-3

NDE flow-masks, and V8 aggregation caches 4-5

protocol autodiscovery 4-4

data sources, setting up 3-7

deleting

basic reports 5-20

custom capture filters 6-21

custom decode filters 6-26

custom NetFlow data sources 3-21

custom reports 5-22

DiffServe profiles 3-39, 3-47

NAM MIB thresholds 3-56

NAM Traffic Analyzer accounts 1-7

NAM traps 3-63

NetFlow devices 3-18

protocols 3-45

SPAN sessions 3-12

switch thresholds 3-61

diagnostic error messages (see troubleshooting) A-14

diagnostics, generating 2-21

configuration information, monitoring and capturing 2-23

system alerts, capturing 2-24

system alerts, viewing 2-21

Diagnostics Tech Support window (illustration) 2-25

Differentiated Services report

creating 5-4

DiffServ Application Statistics Cumulative Data table, using 4-60

DiffServ Application Statistics Current Rates table, using 4-57

application conversation details 4-58

real-time statistics in graphical format 4-58

reports 4-59

DiffServ Application Statistics Top N chart, using 4-59

DiffServ data, viewing 4-54

application conversation details 4-58

host conversation detail 4-62

real-time data for specific hosts 4-62

real-time traffic for specific aggregation groups 4-55

real-time traffic for specific application protocols 4-58

reports

application statistics 4-59

host statistics 4-63

traffic statistics 4-56

tables and charts useful in

DiffServ Application Statistics Cumulative Data table 4-60

DiffServ Application Statistics Current Rates table 4-57

DiffServ Application Statistics Top N chart 4-59

DiffServ Host Statistics Cumulative Data table 4-64

DiffServ Host Statistics Current Rates table 4-61

DiffServ Host Statistics Top N chart 4-63

DiffServ Traffic Statistics Cumulative Data table 4-57

DiffServ Traffic Statistics Current Rates table 4-54

DiffServ Traffic Top N chart 4-56

DiffServe profile, managing

creating 3-38, 3-46

deleting 3-39, 3-47

editing 3-38, 3-46

setting up 3-38

DiffServ Host Statistics Cumulative Data table, using 4-64

DiffServ Host Statistics Current Rates table, using 4-61

host conversation details 4-62

real-time data in graphical format 4-62

reports 4-63

DiffServ Host Statistics Top N chart, using 4-63

DiffServ Traffic Statistics Cumulative Data table, using 4-57

DiffServ Traffic Statistics Current Rates table, using 4-54

DiffServ Traffic Statistics table, using

real-time traffic statistics in graphical format 4-55

reports 4-56

DiffServ Traffic Statistics Top N chart, using 4-56

directing traffic for spanning 3-7

custom NetFlow data sources, creating 3-19

data source, deleting 3-21

data source, editing 3-21

data sourcedeleting 3-21

data source information, verifying 3-21

interfaces, selecting 3-20

NetFlow device, selecting 3-20

listening mode, using 3-21

methods (table) 3-8

NDE collection types (table) 3-9

NetFlow, configuring on devices 3-13

devices running Catalyst OS 3-14

devices running Cisco IOS 3-13

devices supporting multi-layer switching cache 3-14

devices supporting NDE export 3-15

devices supporting NDE v8 aggregations 3-14

devices supporting vi aggregations 3-14

NAMs in a device slot 3-15

NetFlow devices, managing 3-17

creating 3-17

deleting 3-18

editing 3-18

testing 3-19

SPAN session

creating 3-9

deleting 3-12

editing 3-11

SPAN sources (table) 3-8

VACL, configuring on LAN VLANs 3-16

VACL, configuring on WAN interfaces 3-16

displaying

alarms 1-9

capture buffer data 1-8

network traffic data 1-8

reports 1-8

documentation

audience for this xviii

typographical conventions in xviii

typographical conventions used in xviii

Drill-Down button 6-14

DSMON data collection, setting up 3-37

E

editing

custom capture filters 6-21

custom decode filters 6-25

custom reports 5-21

DiffServe profiles 3-38, 3-46

NAM MIB thresholds 3-56

NAM Traffic Analyzer accounts 1-7

NAM traps 3-62

NetFlow devices 3-18

protocols 3-44

SPAN sessions 3-11

switch thresholds 3-61

EMail alarms 3-63

Enabling

audit trail 3-65

error messages (see troubleshooting) A-14

F

Filtering

audit trail 2-22

folders, moving custom reports between 5-22

G

global preferences, setting 3-63

GUI for NAM Traffic Analyzer, navigating 1-2

H

H.323

voice alarms 3-57

voice monitoring 3-35

hardware, NAM installation, and

Catalyst 6000 and 6500 series switches 1-1

Cisco 2600, 3660, and 3700 series routers 1-1

help

(see also troubleshooting) A-1

diagnostics, generating for technical assistance 2-21

configuration information, monitoring and capturing 2-23

system alerts, capturing 2-24

system alerts, viewing 2-21

historical network traffic data, storing and retrieving 1-8

host data, viewing 4-31

cumulative data on each host 4-35

cumulative MAC station data 4-38

data for a specific host, capturing 4-33

data on top n MAC stations 4-37

detail 4-32

Host Conversation report

creating 5-4

network hosts table reports 4-34

real-time statistics in graphical format 4-34

tables and charts useful in

MAC Stations Current Rates table 4-36

MAC Stations Top N chart 4-37

Network Hosts Cumulative Data table 4-35

Network Hosts Current Rates table 4-32

Network Hosts Top N chart 4-34

hostname resolution, troubleshooting A-14

HTTP/security certificates, troubleshooting A-16

I

image upgrades, troubleshooting A-12

interface data, viewing

detail 4-78

Interface Stats Current Rates table, using 4-73, 4-87

Interface Top N chart, using 4-76

IP host name resolution, and slow response time, troubleshooting 3-64

L

LastN Calls table, displaying call detail from 4-24

listening mode (NAM), using 3-21

Log

MPLS Import 3-31

logins

troubleshooting A-3

M

MAC station conversations, monitoring

cumulative 4-47

current rates 4-44

top n 4-45

MAC stations, monitoring data on

cumulative 4-38

current rates 4-36

top n 4-37

MGCP

voice alarms 3-57

voice monitoring 3-35

MGCP gateways, how represented 4-23

monitoring data 4-1

application 4-8

packets and bytes for each application protocol 4-9, 4-13

real-time data in graphical format 4-10, 4-14

reports 4-11, 4-15

data collection, overview 4-2

data sources, overview 4-2

multiple collections, configuring 4-3

NDE flow-masks, and V8 aggregation caches 4-5

protocol autodiscovery 4-4

DSMON 3-37

host 4-31

cumulative data on 4-35

MAC stations 4-37

Monitor Overview charts, viewing 4-6

response time 3-35

data collections, creating 3-35

data collections, deleting 3-37

data collections, editing 3-36

voice 4-18

active calls 4-29

known phones 4-23

voice protocol overview 4-21

Monitor Overview charts, viewing 4-6

MPLS Import log 3-31

MPLS traffic statistics 4-91

N

NAM

community strings, working with 2-12

creating 2-12

deleting 2-13

listening mode, using 3-21

MIB alarm thresholds

creating 3-54

deleting 3-56

editing 3-56

setting 3-53

MIB alarm variables, selecting 3-53

SNMP system groups, setting and viewing 2-11

switch date/time synchronization, and, troubleshooting A-14

system time, setting 2-13

configuring with an NTP server 2-14

synchronizing with switch or router 2-14

traps

creating 3-62

deleting 3-63

editing 3-62

setting 3-62

versions 3-7

Nameservers, and slow response time, troubleshooting 3-64

navigation and control elements 1-3

NDE flow-masks, and V8 aggregation caches 4-5

NetFlow

configuring on devices 3-13

Catalyst OS 3-14

Cisco IOS 3-13

multi-layer switching cache 3-14

NAMs in a device slot 3-15

NDE export 3-15

NDE v8 aggregations 3-14

data sources, managing

creating 3-19

deleting 3-21

editing 3-21

interfaces, selecting 3-20

NetFlow device, selecting 3-20

source information, verifying 3-21

devices, managing 3-17

creating 3-17

deleting 3-18

editing 3-18

testing 3-19

interfaces, understanding 3-12

monitoring problems, troubleshooting A-8

records, understanding 3-12

network host data charts and tables, using

Network Host Conversations Cumulative Data table, using 4-43

Network Host Current Rates 4-34

data for a specific host, capturing 4-33

detail 4-32

real-time statistics in graphical format 4-34

Network Host Top N chart 4-34

network parameters, setting and viewing 2-10

network traffic data, storing and retrieving 1-8

NM-NAM devices

NAM version supported 3-7

Router Parameters option, and 1-6

VLAN data, and 1-8

O

overview of NAM Traffic Analyzer 1-1

alarm logs 7-1

data collection 4-2

data sources 4-2

GUI 1-2

navigation and control elements 1-3

user interface components 1-3

P

packet captures, troubleshooting A-5

passwords, recovering 2-2

patches, troubleshooting A-12

port statistics data, viewing 4-71, 4-79

cumulative data 4-77, 4-89

detail 4-73, 4-88

real-time data in graphical format 4-74

reports 4-74

tables and charts useful in

Interface Stats Current Rates table 4-73, 4-87

Port Stats Current Rates table 4-71

Port Stats Top N chart 4-74, 4-88

Top N Interface Stats chart 4-76

port statistics issues, troubleshooting A-7

Port Stats Current Rates table, using 4-71

detail 4-73, 4-88

real-time data in graphical format 4-74

reports 4-74

Port Stats Top N chart, using 4-74, 4-88

cumulative data 4-77, 4-89

detail 4-78

protocol data, capturing

client/server data 4-69

server data 4-67

protocol directory

managing

creating protocols 3-43

deleting protocols 3-45

editing protocols 3-44

setting up 3-42

protocol filters, in capturing settings 6-8

protocol support, troubleshooting A-17

R

real-time data displays, setting up 1-7

recovering passwords 2-2

renaming a report 5-20

Report details

viewing 5-17

Report export

editing 5-24

scheduling 5-22

Reports

deleting 5-20

disabling 5-20

error conditions 5-18

Top N 5-18

reports

accessing 1-8

creating 5-1

basic 5-4

custom 5-20

custom

creating 5-20

deleting 5-22

editing 5-21

moving between folders 5-22

viewing 5-22

deleting

basic 5-20

custom 5-22

managing basic report types 5-1

creating 5-4

deleting 5-20

disabling 5-19

enabling 5-19

renaming 5-20

table of, viewing 5-16

troubleshooting A-11

viewing 5-1

custom reports 5-22

response time data, viewing 4-65

detail

client/server 4-69

server 4-66

reports

client/server 4-70

server 4-67

tables and charts useful in

Client/Server Response Time table 4-68

Client/Server Response Time Top N chart 4-70

Server Response Time table 4-66

Server Response Time Top N chart 4-67

response time data collections, managing

creating 3-35

deleting 3-37

editing 3-36

setting up 3-35

RMON

log table, viewing 7-2

router parameters viewing 3-6

S

SCCP

voice alarms 3-57

voice monitoring 3-35

Scheduled reports 5-22

Server Response Time table, using 4-66

data, capturing 4-67

detail 4-66

reports 4-67

Server Response Time Top N chart, using 4-67

setting

alarm thresholds 3-52

NAM MIB thresholds 3-53

switch thresholds 3-59

syslog 3-58

voice thresholds 3-56

community switch strings 3-24

NAM SNMP system groups 2-11

network parameters 2-10

SIP

voice alarms 3-57

voice monitoring 3-35

SNMP

troubleshooting A-17

SPAN

issues related to, troubleshooting A-4

sessions

creating 3-9

deleting 3-12

editing 3-11

spanning, directing traffic for 3-7

custom NetFlow data sources, creating 3-19

data source, deleting 3-21

data source, editing 3-21

data source information, verifying 3-21

interfaces, selecting 3-20

NetFlow device, selecting 3-20

listening mode, using 3-21

methods (table) 3-8

NDE collection types (table) 3-9

NetFlow, configuring on devices 3-13

Catalyst OS 3-14

Cisco IOS 3-13

multi-layer switching cache 3-14

NAMs in a device slot 3-15

NDE export 3-15

NDE v8 aggregations 3-14

NetFlow devices, managing 3-17

creating 3-17

deleting 3-18

editing 3-18

testing 3-19

SPAN session

creating 3-9

deleting 3-12

editing 3-11

SPAN sources (table) 3-8

VACL, configuring

on LAN VLANs 3-16

on WAN interfaces 3-16

spanning, troubleshooting A-5

Statistics

viewing VRF/VC 4-92

switch

alarm and port statistics issues, troubleshooting A-7

alarm thresholds

creating 3-59

deleting 3-61

editing 3-61

setting 3-59

NAM date/time synchronization issues, and, troubleshooting A-14

Switch Port report

creating 5-4

syslog alarm threshold, setting up 3-58

system administration 2-1

diagnostics, generating for technical assistance 2-21

overview of system administration tasks 2-9

NAM community strings, working with 2-12

NAM SNMP system group, setting and viewing 2-11

NAM system time, setting 2-13

network parameters, setting and viewing 2-10

system resources, viewing 2-9

overview of user administration tasks 2-1

passwords, recovering 2-2

predefined NAM user accounts, changing 2-2

TACACS+ authentication and authorization, establishing 2-5

TACACS+ server, configuring to support NAM 2-6

user privileges (table) 2-2

users, creating new 2-3

users, deleting 2-5

users, editing 2-4

user sessions table, viewing 2-8

system resources, viewing 2-9

System alerts 2-21

system alerts

capturing 2-24

viewing 2-21

System Config Log 5-19

System event log

viewing 5-19

System events 5-19

T

TAC (Technical Assistance Center)

(see also troubleshooting) A-1

TACACS+

authentication and authorization, establishing 2-5

server, configuring to support NAM 2-6

secret key, requirements for 2-7

technical assistance, obtaining

(see also troubleshooting) A-1

diagnostics, generating for 2-21

configuration information, monitoring and capturing 2-23

system alerts, capturing 2-24

system alerts, viewing 2-21

testing NetFlow devices 3-19

TopN Applications chart, using 4-11, 4-15

Top N report 5-18

troubleshooting A-1

data mismatch issues A-16

diagnostic error message issues A-14

host name resolution issues A-14

HTTPS/security certificate issues A-16

image upgrade and patch issues A-12

login issues A-3

NAM and switch date/time synchronization issues A-14

NetFlow monitoring problems A-8

packet capturing and spanning issues A-5

protocol support issues A-17

reporting issues A-11

slow response times 3-64

SNMP issues A-17

SPAN-related issues A-4

switch, cannot communicate with 3-24

switch alarm and port statistics issues A-7

username and password issues A-2

caution regarding deleting all local database web users A-2

voice monitoring issues A-18

web browser response time and display issues A-13

typographical conventions used in this document xviii

U

user

administration (see system administration) 2-1

privileges (table) 2-2

sessions table, viewing 2-8

Users Table (illustration) 2-3

username and password issues, troubleshooting A-2

V

V8 aggregation caches, and NDE flow-masks 4-5

VACL, configuring

on LAN VLANs 3-16

on WAN interfaces 3-16

VC statistics 4-92

verifying NetFlow data source information 3-21

versions of Catalyst 6500 NAM 3-7

Viewing

MPLS traffic statistics 4-91

viewing

active call data 4-29

application data 4-8

capturing, for a specific protocol 4-10, 4-14

detail for a specific protocol 4-18

packets and bytes collected 4-12, 4-17

real-time data in graphical format 4-10, 4-14

reports 4-11, 4-15

community switch strings 3-24

conversations data 4-39

packest and bytes for each host conversation 4-40

custom reports 5-22

DiffServ data 4-54

host conversation details 4-62

host statistics 4-63

real-time data in graphical format 4-62

real-time traffic statistics in graphical format 4-55

reports 4-56

host data 4-31

collected during last time interval 4-32

cumulative MAC stations data 4-38

for a specific host, capturing 4-33

MAC stations current rates 4-36

real-time statistics in graphical format 4-34

reports 4-34

Monitor Overview charts 4-6

NAM log 7-1

NAM MIB alarm details 3-55

NAM SNMP system groups 2-11

network parameters 2-10

packets and bytes collected for top n MAC station conversations 4-45

packets and bytes for each MAC station conversation 4-47

port statistics data 4-71, 4-79

cumulative 4-77, 4-89

detail 4-73, 4-88

real-time data in graphical format 4-74

reports 4-74

response time data 4-65

client/server 4-70

client/server detail 4-69

server 4-67

server detail 4-66

RMON log table 7-2

router parameters 3-6

switch

log 7-2

system alerts 2-21

system resources 2-9

user sessions table 2-8

VLAN data 4-48

collected for the top n VLAN IDs, in graphical format 4-49

cumulative data for each VLAN ID 4-50

reports 4-49

user priority distributions in graphical format 4-52

user priority distributions per data source 4-51, 4-53

voice data 4-18

active calls 4-29

known phones 4-23

voice protocol overview 4-21

Viewing audit trail 2-21

Virtual circuits 3-26

VLAN data, viewing 4-48

cumulative data for each VLAN ID 4-50

reports 4-49

tables and charts useful in

VLAN Priority (COS) Statistics Cumulative Data table 4-53

VLAN Priority (COS) Statistics Current Rates table 4-51

VLAN Priority (COS) Statistics Top N chart 4-52

VLAN Traffic Statistics Cumulative Data table 4-50

VLAN Traffic Statistics Current Rates table 4-48

VLAN Traffic Statistics Top N chart 4-49

user priority distributions in graphical format 4-52

user priority distributions per data source

cumulative 4-53

current rates 4-51

VLAN Priority (COS) Statistics

Cumulative Data Table, using 4-53

Current Rates table, using 4-51

Top N chart, using 4-52

VLAN report

creating 5-4

VLAN Traffic Statistics

Cumulative Data table, using 4-50

Current Rates table, using 4-48

Top N chart, using 4-49

Voice alarms 3-57

voice alarm thresholds, setting 3-56

voice data

collecting 3-34

viewing 4-18

active calls 4-29

known phones 4-23

voice protocol overview 4-21

Voice monitoring 3-34

voice monitoring, troubleshooting A-18

VPN routing/forwarding table 3-26

VRF statistics 4-92

W

WAN interfaces 3-24

WS-SVC-NAM-1 3-7

WS-SVC-NAM-2 3-7