User Guide for Cisco Network Analysis Module Traffic Analyzer, 3.6
Index
Downloads: This chapterpdf (PDF - 739.0KB) The complete bookPDF (PDF - 9.33MB) | Feedback

Index

Table Of Contents

A - B - C - D - E - F - G - H - I - L - M - N - O - P - R - S - T - U - V - W -

Index

A

accounts in NAM Traffic Manager, managing 1-6

address filters, using to capture settings 6-7

administration (see system administration) 2-1

Alarm

EMail addresses 3-65

alarms, viewing 7-1

alarm logs, overview 7-1

NAM log, viewing 7-1

switch log, viewing 7-2

alarm thresholds, setting 3-55

NAM MIB thresholds 3-55

creating 3-56

deleting 3-59

editing 3-58

NAM MIB variables, selecting 3-56

switch thresholds 3-61

creating 3-61

deleting 3-64

editing 3-63

syslog, setting up 3-60

voice thresholds 3-59

All button 3-6

application data, viewing 4-14

application protocols, capturing data for 4-10, 4-16

detail

by protocol 4-10, 4-15

cumulative 4-14

packets and bytes collected

by protocol 4-9, 4-14

cumulative 4-13, 4-17

real-time data in graphical format 4-11, 4-16

reports

Application report, creating 5-4

Application table reports 4-11, 4-16

tables and charts useful in

Applications Cumulative Data table 4-13, 4-17

Applications Current Rates table 4-9, 4-14

TopN Applications chart 4-11, 4-16

Application Response Time report

creating 5-4

Applications Cumulative Data table, using 4-13, 4-17

details 4-14

packets and bytes collected 4-13, 4-17

Applications Current Rates table, using 4-9, 4-14

application protocol data, capturing 4-10, 4-16

details for specific protocol, viewing 4-10, 4-15

real-time data, viewing 4-11, 4-16

reports 4-11, 4-16

ART 4-72

audience for this document xiv

Audit trail 2-22

B

browser response time and display, troubleshooting A-13

C

Capture Analysis

drill down 6-14

Capture data

storage 2-16

Capture Files

Analyze button 6-14

capturing data 6-1

application protocols 4-10, 4-16

capture buffer

displaying data in 1-8

downloading to a file 6-13

capture settings, configuring 6-3

using a custom filter 6-9

using an address filter 6-7

using a protocol filter 6-8

client/server response time 4-80, 4-83

custom capture filters, setting up 6-18

creating 6-18

deleting 6-21

editing 6-21

custom decode filters, setting up 6-22

creating 6-22

deleting 6-26

editing 6-25

host conversations 4-44

network hosts current rates 4-36

packet decode information, viewing 6-9

protocol decode information, viewing 6-13

response time 4-80, 4-83

server detail 4-77

server response time 4-77

cautions

regarding

local database web users, deleting all A-2

NAM community strings, deleting 2-13

switch string and read-write community string matching 3-26

significance of xiv

Client/Server Response Time table, using 4-79

data, capturing 4-80, 4-83

detail 4-80, 4-83

reports 4-81, 4-84

Client/Server Response Time Top N chart, using 4-81

collection (see data collection, setting up) 1-6

common navigation and control elements (table) 1-4

community switch strings, setting and viewing 3-26

configuring NAM Traffic Analyzer 3-1

community switch strings, setting and viewing 3-26

data collection, setting up 3-34

core data, collecting 3-34

DiffServe profile, setting up 3-40

DSMON data, monitoring 3-39

response time data, monitoring 3-38

voice data, collecting 3-37

data sources, setting up 3-8

router parameters, viewing 3-7

traffic, directing for spanning 3-8

creating a SPAN session 3-11

custom NetFlow data sources, creating 3-21

deleting a SPAN session 3-13

editing a SPAN session 3-13

listening mode, using 3-23

NDE collection types (table) 3-10

NetFlow, configuring on devices 3-15

NetFlow devices, managing 3-19

NetFlow interfaces, understanding 3-14

NetFlow records, understanding 3-14

SPAN sources (table) 3-10

traffic directing methods (table) 3-9

VACL, configuring on LAN VLANs 3-18

VACL, configuring on WAN interfaces 3-17

Continuous capture 6-5

conversations data, viewing 4-42

cumulative data for each host conversation 4-46

packets and bytes collected for MAC station conversations 4-49

packets and bytes for each host conversation 4-43

capturing data on 4-44

detail 4-44

real-time traffic statistics in graphical format 4-44

reports 4-45

packets and bytes for top n host conversations 4-45

tables and charts useful in

MAC Conversations Top N chart 4-49

MAC Station Conversations Cumulative Data table 4-51

Network Host Conversations Cumulative Data table 4-46

Network Host Conversations Top N chart 4-45

Viewing the Network Host Conversations Current Rates table 4-43

core data, collecting 3-34

Core monitoring

router 3-35

switch 3-35

creating

basic reports 5-4

custom capture filters 6-18

custom decode filters 6-22

custom NetFlow data sources 3-21

data source, deleting 3-23

data source information, verifying 3-22

data sources, editing 3-23

interfaces, selecting 3-22

NetFlow device, selecting 3-22

custom reports 5-19

NAM Traffic Analyzer accounts 1-6

NAM traps 3-64

NetFlow devices 3-19

protocol 3-45

SPAN sessions 3-11

switch thresholds 3-61

Custom capture filter

creating 6-18

custom capture filters

managing

creating 6-18

deleting 6-21

editing 6-21

setting up 6-18

using 6-9

Custom captures 6-18

custom decode filters, managing

creating 6-22

deleting 6-26

editing 6-25

setting up 6-22

Custom filters 6-18

Custom report

editing 5-20

Custom reports 5-19

creating a new folder 5-20

deleting 5-21

moving to a different folder 5-21

viewing 5-21

D

data collection

overview 4-2

setting up 3-34

core data collection 3-34

DiffServe profile data 3-40

DSMON data 3-39

response time data 3-38

voice data 3-37

Data Expired 5-18

data mismatches, troubleshooting A-16

Data Pending 5-18

Data source

core monitoring 3-35

persistence 4-9

datasources

maximum supported 3-27

data sources, overview 4-2

multiple collections, configuring 4-2

NDE flow-masks, and V8 aggregation caches 4-5

protocol autodiscovery 4-4

data sources, setting up 3-8

deleting

basic reports 5-19

custom capture filters 6-21

custom decode filters 6-26

custom NetFlow data sources 3-23

custom reports 5-21

DiffServe profiles 3-41, 3-50

NAM MIB thresholds 3-59

NAM Traffic Analyzer accounts 1-6

NAM traps 3-65

NetFlow devices 3-20

protocols 3-48

SPAN sessions 3-13

switch thresholds 3-64

diagnostic error messages (see troubleshooting) A-14

diagnostics, generating 2-21

configuration information, monitoring and capturing 2-23

system alerts, capturing 2-25

system alerts, viewing 2-21

Diagnostics Tech Support window (illustration) 2-25

Differentiated Services report

creating 5-4

DiffServ Application Statistics Cumulative Data table, using 4-64

DiffServ Application Statistics Current Rates table, using 4-61

application conversation details 4-62

real-time statistics in graphical format 4-62

reports 4-63

DiffServ Application Statistics Top N chart, using 4-63

DiffServ data, viewing 4-57

application conversation details 4-62

host conversation detail 4-66

real-time data for specific hosts 4-66

real-time traffic for specific aggregation groups 4-59

real-time traffic for specific application protocols 4-62

reports

application statistics 4-63

host statistics 4-67

traffic statistics 4-59

tables and charts useful in

DiffServ Application Statistics Cumulative Data table 4-64

DiffServ Application Statistics Current Rates table 4-61

DiffServ Application Statistics Top N chart 4-63

DiffServ Host Statistics Cumulative Data table 4-68

DiffServ Host Statistics Current Rates table 4-65

DiffServ Host Statistics Top N chart 4-67

DiffServ Traffic Statistics Cumulative Data table 4-61

DiffServ Traffic Statistics Current Rates table 4-58

DiffServ Traffic Top N chart 4-59

DiffServe profile, managing

creating 3-40, 3-49

deleting 3-41, 3-50

editing 3-41, 3-49

setting up 3-40

DiffServ Host Statistics Cumulative Data table, using 4-68

DiffServ Host Statistics Current Rates table, using 4-65

host conversation details 4-66

real-time data in graphical format 4-66

reports 4-67

DiffServ Host Statistics Top N chart, using 4-67

DiffServ Traffic Statistics Cumulative Data table, using 4-61

DiffServ Traffic Statistics Current Rates table, using 4-58

DiffServ Traffic Statistics table, using

real-time traffic statistics in graphical format 4-59

reports 4-59

DiffServ Traffic Statistics Top N chart, using 4-59

directing traffic for spanning 3-8

custom NetFlow data sources, creating 3-21

data source, deleting 3-23

data source, editing 3-23

data sourcedeleting 3-23

data source information, verifying 3-22

interfaces, selecting 3-22

NetFlow device, selecting 3-22

listening mode, using 3-23

methods (table) 3-9

NDE collection types (table) 3-10

NetFlow, configuring on devices 3-15

devices running Catalyst OS 3-16

devices running Cisco IOS 3-15

devices supporting multi-layer switching cache 3-15

devices supporting NDE export 3-17

devices supporting NDE v8 aggregations 3-16

devices supporting vi aggregations 3-16

NAMs in a device slot 3-17

NetFlow devices, managing 3-19

creating 3-19

deleting 3-20

editing 3-19

testing 3-20

SPAN session

creating 3-11

deleting 3-13

editing 3-13

SPAN sources (table) 3-10

VACL, configuring on LAN VLANs 3-18

VACL, configuring on WAN interfaces 3-17

displaying

alarms 1-8

capture buffer data 1-8

network traffic data 1-8

reports 1-8

documentation

audience for this xiv

typographical conventions in xiv

typographical conventions used in xiv

Drill-Down button 6-14

DSMON data collection, setting up 3-39

E

editing

custom capture filters 6-21

custom decode filters 6-25

custom reports 5-20

DiffServe profiles 3-41, 3-49

NAM MIB thresholds 3-58

NAM Traffic Analyzer accounts 1-6

NAM traps 3-64

NetFlow devices 3-19

protocols 3-47

SPAN sessions 3-13

switch thresholds 3-63

EMail alarms 3-65

Enabling

audit trail 3-67

error messages (see troubleshooting) A-14

F

Filtering

audit trail 2-23

folders, moving custom reports between 5-21

G

global preferences, setting 3-65

GUI for NAM Traffic Analyzer, navigating 1-2

H

H.323

voice alarms 3-59

voice monitoring 3-37

hardware, NAM installation, and

Catalyst 6000 and 6500 series switches 1-1

Cisco 2600, 3660, and 3700 series routers 1-1

help

(see also troubleshooting) A-1

diagnostics, generating for technical assistance 2-21

configuration information, monitoring and capturing 2-23

system alerts, capturing 2-25

system alerts, viewing 2-21

historical network traffic data, storing and retrieving 1-8

host data, viewing 4-34

cumulative data on each host 4-38

cumulative MAC station data 4-41

data for a specific host, capturing 4-36

data on top n MAC stations 4-40

detail 4-35

Host Conversation report

creating 5-4

network hosts table reports 4-37

real-time statistics in graphical format 4-36

tables and charts useful in

MAC Stations Current Rates table 4-39

MAC Stations Top N chart 4-40

Network Hosts Cumulative Data table 4-38

Network Hosts Current Rates table 4-34

Network Hosts Top N chart 4-37

hostname resolution, troubleshooting A-14

HTTP/security certificates, troubleshooting A-16

I

image upgrades, troubleshooting A-12

interface data, viewing

detail 4-93

Interface Stats Current Rates table, using 4-87, 4-102

Interface Top N chart, using 4-90

IP host name resolution, and slow response time, troubleshooting 3-66

L

LastN Calls table, displaying call detail from 4-27

listening mode (NAM), using 3-23

Log

MPLS Import 3-33

logins

troubleshooting A-3

M

MAC station conversations, monitoring

cumulative 4-51

current rates 4-49

top n 4-49

MAC stations, monitoring data on

cumulative 4-41

current rates 4-39

top n 4-40

MGCP

voice alarms 3-59

voice monitoring 3-37

MGCP gateways, how represented 4-25

Monitoring

Application response times 4-72

monitoring data 4-1

application 4-14

packets and bytes for each application protocol 4-9, 4-14

real-time data in graphical format 4-11, 4-16

reports 4-11, 4-16

data collection, overview 4-2

data sources, overview 4-2

multiple collections, configuring 4-2

NDE flow-masks, and V8 aggregation caches 4-5

protocol autodiscovery 4-4

DSMON 3-39

host 4-34

cumulative data on 4-38

MAC stations 4-40

Monitor Overview charts, viewing 4-6

response time 3-38

data collections, creating 3-38

data collections, deleting 3-39

data collections, editing 3-39

voice 4-18

active calls 4-32

known phones 4-25

voice protocol overview 4-23

Monitor Overview charts, viewing 4-6

MPLS Import log 3-33

MPLS-tagged traffic 3-9

MPLS traffic statistics 4-106

N

NAM

community strings, working with 2-12

creating 2-12

deleting 2-13

listening mode, using 3-23

MIB alarm thresholds

creating 3-56

deleting 3-59

editing 3-58

setting 3-55

MIB alarm variables, selecting 3-56

SNMP system groups, setting and viewing 2-11

switch date/time synchronization, and, troubleshooting A-14

system time, setting 2-13

configuring with an NTP server 2-14

synchronizing with switch or router 2-14

traps

creating 3-64

deleting 3-65

editing 3-64

setting 3-64

versions 3-8

Nameservers, and slow response time, troubleshooting 3-66

navigation and control elements 1-3

NDE flow-masks, and V8 aggregation caches 4-5

NetFlow

configuring on devices 3-15

Catalyst OS 3-16

Cisco IOS 3-15

multi-layer switching cache 3-15

NAMs in a device slot 3-17

NDE export 3-17

NDE v8 aggregations 3-16

data sources, managing

creating 3-21

deleting 3-23

editing 3-23

interfaces, selecting 3-22

NetFlow device, selecting 3-22

source information, verifying 3-22

devices, managing 3-19

creating 3-19

deleting 3-20

editing 3-19

testing 3-20

interfaces, understanding 3-14

monitoring problems, troubleshooting A-8

records, understanding 3-14

NetFlow Data Export 3-9

network host data charts and tables, using

Network Host Conversations Cumulative Data table, using 4-46

Network Host Current Rates 4-37

data for a specific host, capturing 4-36

detail 4-35

real-time statistics in graphical format 4-36

Network Host Top N chart 4-37

network parameters, setting and viewing 2-10

network traffic data, storing and retrieving 1-8

NFS Server

Configuring for capture data storage 2-17

NM-NAM devices

NAM version supported 3-8

Router Parameters option, and 1-6

VLAN data, and 1-7

No Activity 5-18

Not Monitored 5-18

O

overview of NAM Traffic Analyzer 1-1

alarm logs 7-1

data collection 4-2

data sources 4-2

GUI 1-2

navigation and control elements 1-3

user interface components 1-3

P

packet captures, troubleshooting A-5

passwords, recovering 2-2

patches, troubleshooting A-12

Port Name 3-6

Port names 3-4, 3-6, 3-8, 3-26, 4-86, 4-88, 4-91

port statistics data, viewing 4-85, 4-94

cumulative data 4-91, 4-104

detail 4-88, 4-103

real-time data in graphical format 4-88

reports 4-88

tables and charts useful in

Interface Stats Current Rates table 4-87, 4-102

Port Stats Current Rates table 4-85

Port Stats Top N chart 4-89, 4-103

Top N Interface Stats chart 4-90

port statistics issues, troubleshooting A-7

Port Stats Current Rates table, using 4-85

detail 4-88, 4-103

real-time data in graphical format 4-88

reports 4-88

Port Stats Top N chart, using 4-89, 4-103

cumulative data 4-91, 4-104

detail 4-93

protocol data, capturing

client/server data 4-80, 4-83

server data 4-77

protocol directory

managing

creating protocols 3-45

deleting protocols 3-48

editing protocols 3-47

setting up 3-44

protocol filters, in capturing settings 6-8

protocol support, troubleshooting A-17

R

real-time data displays, setting up 1-7

recovering passwords 2-2

Refresh button 3-6

Creating SPAN session 3-12

renaming a report 5-19

Report details

viewing 5-16

Report export

editing 5-23

scheduling 5-21

Reports

deleting 5-19

disabling 5-19

error conditions 5-17

Top N 5-17

reports

accessing 1-8

creating 5-1

basic 5-4

custom 5-19

custom

creating 5-19

deleting 5-21

editing 5-20

moving between folders 5-21

viewing 5-21

deleting

basic 5-19

custom 5-21

managing basic report types 5-2

creating 5-4

deleting 5-19

disabling 5-18

enabling 5-18

renaming 5-19

table of, viewing 5-16

troubleshooting A-11

viewing 5-1

custom reports 5-21

response time data, viewing 4-70

detail

client/server 4-80, 4-83

server 4-76

reports

client/server 4-81, 4-84

server 4-74, 4-77

tables and charts useful in

Client/Server Response Time table 4-79

Client/Server Response Time Top N chart 4-81

Server Response Time Top N chart 4-77

response time data collections, managing

creating 3-38

deleting 3-39

editing 3-39

setting up 3-38

RMON

log table, viewing 7-2

router parameters viewing 3-7

S

SCCP

voice alarms 3-59

voice monitoring 3-37

Scheduled reports 5-21

Server Response Time table, using

data, capturing 4-77

detail 4-76

reports 4-74, 4-77

Server Response Time Top N chart, using 4-77

setting

alarm thresholds 3-55

NAM MIB thresholds 3-55

switch thresholds 3-61

syslog 3-60

voice thresholds 3-59

community switch strings 3-26

NAM SNMP system groups 2-11

network parameters 2-10

SIP

voice alarms 3-59

voice monitoring 3-37

SNMP

troubleshooting A-17

SPAN

issues related to, troubleshooting A-4

sessions

creating 3-11

deleting 3-13

editing 3-13

spanning, directing traffic for 3-8

custom NetFlow data sources, creating 3-21

data source, deleting 3-23

data source, editing 3-23

data source information, verifying 3-22

interfaces, selecting 3-22

NetFlow device, selecting 3-22

listening mode, using 3-23

methods (table) 3-9

NDE collection types (table) 3-10

NetFlow, configuring on devices 3-15

Catalyst OS 3-16

Cisco IOS 3-15

multi-layer switching cache 3-15

NAMs in a device slot 3-17

NDE export 3-17

NDE v8 aggregations 3-16

NetFlow devices, managing 3-19

creating 3-19

deleting 3-20

editing 3-19

testing 3-20

SPAN session

creating 3-11

deleting 3-13

editing 3-13

SPAN sources (table) 3-10

VACL, configuring

on LAN VLANs 3-18

on WAN interfaces 3-17

spanning, troubleshooting A-5

Statistics

viewing VRF/VC 4-107

switch

alarm and port statistics issues, troubleshooting A-7

alarm thresholds

creating 3-61

deleting 3-64

editing 3-63

setting 3-61

NAM date/time synchronization issues, and, troubleshooting A-14

Switch Port report

creating 5-4

Switch Remote SPAN 3-9

Switch SPAN 3-9

syslog alarm threshold, setting up 3-60

system administration 2-1

diagnostics, generating for technical assistance 2-21

overview of system administration tasks 2-9

NAM community strings, working with 2-12

NAM SNMP system group, setting and viewing 2-11

NAM system time, setting 2-13

network parameters, setting and viewing 2-10

system resources, viewing 2-9

overview of user administration tasks 2-1

passwords, recovering 2-2

predefined NAM user accounts, changing 2-3

TACACS+ authentication and authorization, establishing 2-5

TACACS+ server, configuring to support NAM 2-6

user privileges (table) 2-2

users, creating new 2-3

users, deleting 2-5

users, editing 2-4

user sessions table, viewing 2-8

system resources, viewing 2-9

System alerts 2-21

system alerts

capturing 2-25

viewing 2-21

System Config Log 5-18

System event log

viewing 5-18

System events 5-18

T

TAC (Technical Assistance Center)

(see also troubleshooting) A-1

TACACS+

authentication and authorization, establishing 2-5

server, configuring to support NAM 2-6

secret key, requirements for 2-7

technical assistance, obtaining

(see also troubleshooting) A-1

diagnostics, generating for 2-21

configuration information, monitoring and capturing 2-23

system alerts, capturing 2-25

system alerts, viewing 2-21

testing NetFlow devices 3-20

TopN Applications chart, using 4-11, 4-16

Top N report 5-17

troubleshooting A-1

data mismatch issues A-16

diagnostic error message issues A-14

host name resolution issues A-14

HTTPS/security certificate issues A-16

image upgrade and patch issues A-12

login issues A-3

NAM and switch date/time synchronization issues A-14

NetFlow monitoring problems A-8

packet capturing and spanning issues A-5

protocol support issues A-17

reporting issues A-11

slow response times 3-66

SNMP issues A-17

SPAN-related issues A-4

switch, cannot communicate with 3-26

switch alarm and port statistics issues A-7

username and password issues A-2

caution regarding deleting all local database web users A-2

voice monitoring issues A-18

web browser response time and display issues A-13

typographical conventions used in this document xiv

U

user

administration (see system administration) 2-1

privileges (table) 2-2

sessions table, viewing 2-8

Users Table (illustration) 2-3

username and password issues, troubleshooting A-2

V

V8 aggregation caches, and NDE flow-masks 4-5

VACL, configuring

on LAN VLANs 3-18

on WAN interfaces 3-17

VC statistics 4-107

verifying NetFlow data source information 3-22

versions of Catalyst 6500 NAM 3-8

Viewing

MPLS traffic statistics 4-106

viewing

active call data 4-32

application data 4-14

capturing, for a specific protocol 4-10, 4-16

detail for a specific protocol 4-14

packets and bytes collected 4-13, 4-17

real-time data in graphical format 4-11, 4-16

reports 4-11, 4-16

community switch strings 3-26

conversations data 4-42

packest and bytes for each host conversation 4-43

custom reports 5-21

DiffServ data 4-57

host conversation details 4-66

host statistics 4-67

real-time data in graphical format 4-66

real-time traffic statistics in graphical format 4-59

reports 4-59

host data 4-34

collected during last time interval 4-34

cumulative MAC stations data 4-41

for a specific host, capturing 4-36

MAC stations current rates 4-39

real-time statistics in graphical format 4-36

reports 4-37

Monitor Overview charts 4-6

NAM log 7-1

NAM MIB alarm details 3-58

NAM SNMP system groups 2-11

network parameters 2-10

packets and bytes collected for top n MAC station conversations 4-49

packets and bytes for each MAC station conversation 4-51

port statistics data 4-85, 4-94

cumulative 4-91, 4-104

detail 4-88, 4-103

real-time data in graphical format 4-88

reports 4-88

response time data 4-70

client/server 4-81, 4-84

client/server detail 4-80, 4-83

server 4-74, 4-77

server detail 4-76

RMON log table 7-2

router parameters 3-7

switch

log 7-2

system alerts 2-21

system resources 2-9

user sessions table 2-8

VLAN data 4-51

collected for the top n VLAN IDs, in graphical format 4-53

cumulative data for each VLAN ID 4-54

reports 4-53

user priority distributions in graphical format 4-56

user priority distributions per data source 4-55, 4-57

voice data 4-18

active calls 4-32

known phones 4-25

voice protocol overview 4-23

Viewing audit trail 2-22

Virtual circuits 3-28

VLAN data, viewing 4-51

cumulative data for each VLAN ID 4-54

reports 4-53

tables and charts useful in

VLAN Priority (COS) Statistics Cumulative Data table 4-57

VLAN Priority (COS) Statistics Current Rates table 4-55

VLAN Priority (COS) Statistics Top N chart 4-56

VLAN Traffic Statistics Cumulative Data table 4-54

VLAN Traffic Statistics Current Rates table 4-52

VLAN Traffic Statistics Top N chart 4-53

user priority distributions in graphical format 4-56

user priority distributions per data source

cumulative 4-57

current rates 4-55

VLAN Priority (COS) Statistics

Cumulative Data Table, using 4-57

Current Rates table, using 4-55

Top N chart, using 4-56

VLAN report

creating 5-4

VLAN Traffic Statistics

Cumulative Data table, using 4-54

Current Rates table, using 4-52

Top N chart, using 4-53

Voice alarms 3-59

voice alarm thresholds, setting 3-59

voice data

collecting 3-37

viewing 4-18

active calls 4-32

known phones 4-25

voice protocol overview 4-23

Voice monitoring 3-37

voice monitoring, troubleshooting A-18

VPN routing/forwarding table 3-28

VRF statistics 4-107

W

WAN interfaces 3-27

WS-SVC-NAM-1 3-8

WS-SVC-NAM-2 3-8