Index

Table Of Contents

A - B - C - D - E - F - G - H - I - L - M - N - O - P - R - S - T - U - V - W -

Index

A

access log, viewing 2-10

accounts in NAM Traffic Manager, managing 1-8

address filters, using to capture settings 6-6

administration (see system administration) 2-1

alarm capture triggers, working with 6-5

alarms, viewing 7-1

alarm logs, overview 7-1

NAM log, viewing 7-1

switch log, viewing 7-2

alarm thresholds, setting 3-42

NAM MIB thresholds 3-43

creating 3-44

deleting 3-48

editing 3-47

NAM MIB variables, selecting 3-44

switch thresholds 3-50

creating 3-51

deleting 3-53

editing 3-53

syslog, setting up 3-49

voice thresholds 3-48

application data, viewing 4-12

application protocols, capturing data for 4-14

detail

by protocol 4-14

cumulative 4-18

packets and bytes collected

by protocol 4-13

cumulative 4-17

real-time data in graphical format 4-15

reports

Application report, creating 5-3

Application report parameters, selecting 5-7

Application table reports 4-15

tables and charts useful in

Applications Cumulative Data table 4-17

Applications Current Rates table 4-13

TopN Applications chart 4-16

Application Response Time report

creating 5-3

parameters for, selecting 5-12

Applications Cumulative Data table, using 4-17

details 4-18

packets and bytes collected 4-17

Applications Current Rates table, using 4-13

application protocol data, capturing 4-14

details for specific protocol, viewing 4-14

real-time data, viewing 4-15

reports 4-15

audience for this document xi

B

browser response time and display, troubleshooting A-20

C

capturing data 6-1

application protocols 4-14

capture buffer

displaying data in 1-10

downloading to a file 6-13

capture settings, configuring 6-2

alarm capture triggers, working with 6-5

using a custom filter 6-9

using an address filter 6-6

using a protocol filter 6-9

client/server response time 4-83

custom capture filters, setting up 6-16

creating 6-17

deleting 6-22

editing 6-21

custom decode filters, setting up 6-22

creating 6-22

deleting 6-28

editing 6-27

host conversations 4-44

network hosts current rates 4-33

packet decode information, viewing 6-10

protocol decode information, viewing 6-12

response time 4-83

server detail 4-80

server response time 4-80

cautions

regarding

local database web users, deleting all A-2

NAM community strings, deleting 2-18

switch string and read-write community string matching 3-27

significance of xii

Cisco.com, accessing xiv

Client/Server Response Time table, using 4-82

data, capturing 4-83

detail 4-83

reports 4-83

Client/Server Response Time Top N chart, using 4-84

collection (see data collection, setting up) 1-7

common navigation and control elements (table) 1-4

community switch strings, setting and viewing 3-27

configuring NAM Traffic Analyzer 3-1

community switch strings, setting and viewing 3-27

data collection, setting up 3-28

core data, collecting 3-28

DiffServe profile, setting up 3-36

DSMON data, monitoring 3-35

response time data, monitoring 3-32

voice data, collecting 3-31

data sources, setting up 3-3

router parameters, viewing 3-2

SNMP, testing on a switch or router 3-3

switch parameters, viewing 3-1

traffic, directing for spanning 3-3

creating a SPAN session 3-7

custom NetFlow data sources, creating 3-22

deleting a SPAN session 3-11

editing a SPAN session 3-9

listening mode, using 3-25

NDE collection types (table) 3-6

NetFlow, configuring on devices 3-13

NetFlow devices, managing 3-19

NetFlow interfaces, understanding 3-11

NetFlow records, understanding 3-12

SPAN sources (table) 3-5

traffic directing methods (table) 3-4

VACL, configuring on LAN VLANs 3-18

VACL, configuring on WAN interfaces 3-17

conversations data, viewing 4-42

cumulative data for each host conversation 4-48

packets and bytes collected for MAC station conversations 4-49

packets and bytes for each host conversation 4-42

capturing data on 4-44

detail 4-44

real-time traffic statistics in graphical format 4-45

reports 4-45

packets and bytes for top n host conversations 4-46

tables and charts useful in

MAC Conversations Top N chart 4-50

MAC Station Conversations Cumulative Data table 4-52

Network Host Conversations Cumulative Data table 4-48

Network Host Conversations Top N chart 4-46

Viewing the Network Host Conversations Current Rates table 4-42

core data, collecting 3-28

creating

basic reports 5-3

custom capture filters 6-17

custom decode filters 6-22

custom NetFlow data sources 3-22

data source, deleting 3-25

data source information, verifying 3-24

data sources, editing 3-24

interfaces, selecting 3-23

NetFlow device, selecting 3-23

custom reports 5-18

NAM Traffic Analyzer accounts 1-8

NAM traps 3-54

NetFlow devices 3-19

protocol 3-39

SPAN sessions 3-7

switch thresholds 3-51

custom capture filters

managing

creating 6-17

deleting 6-22

editing 6-21

setting up 6-16

using 6-9

custom decode filters, managing

creating 6-22

deleting 6-28

editing 6-27

setting up 6-22

D

data collection

overview 4-2

setting up 3-28

core data collection 3-28

DiffServe profile data 3-36

DSMON data 3-35

response time data 3-32

voice data 3-31

data mismatches, troubleshooting A-24

data sources, overview 4-2

multiple collections, configuring 4-3

NDE flow-masks, and V8 aggregation caches 4-6

protocol autodiscovery 4-6

data sources, setting up 3-3

deleting

basic reports 5-15

custom capture filters 6-22

custom decode filters 6-28

custom NetFlow data sources 3-25

custom reports 5-20

DiffServe profiles 3-38

NAM MIB thresholds 3-48

NAM Traffic Analyzer accounts 1-8

NAM traps 3-55

NetFlow devices 3-21

protocols 3-42

SPAN sessions 3-11

switch thresholds 3-53

diagnostic error messages (see troubleshooting) A-22

diagnostics, generating 2-19

configuration information, monitoring and capturing 2-20

system alerts, capturing 2-22

system alerts, viewing 2-20

Diagnostics Tech Support window (illustration) 2-23

Differentiated Services report

creating 5-3

parameters for, selecting 5-11

DiffServ Application Statistics Cumulative Data table, using 4-71

DiffServ Application Statistics Current Rates table, using 4-67

application conversation details 4-68

real-time statistics in graphical format 4-68

reports 4-69

DiffServ Application Statistics Top N chart, using 4-70

DiffServ data, viewing 4-62

application conversation details 4-68

host conversation detail 4-73

real-time data for specific hosts 4-74

real-time traffic for specific aggregation groups 4-64

real-time traffic for specific application protocols 4-68

reports

application statistics 4-69

host statistics 4-75

traffic statistics 4-64

tables and charts useful in

DiffServ Application Statistics Cumulative Data table 4-71

DiffServ Application Statistics Current Rates table 4-67

DiffServ Application Statistics Top N chart 4-70

DiffServ Host Statistics Cumulative Data table 4-77

DiffServ Host Statistics Current Rates table 4-72

DiffServ Host Statistics Top N chart 4-75

DiffServ Traffic Statistics Cumulative Data table 4-66

DiffServ Traffic Statistics Current Rates table 4-63

DiffServ Traffic Top N chart 4-65

DiffServe profile, managing

creating 3-37

deleting 3-38

editing 3-38

setting up 3-36

DiffServ Host Statistics Cumulative Data table, using 4-77

DiffServ Host Statistics Current Rates table, using 4-72

host conversation details 4-73

real-time data in graphical format 4-74

reports 4-75

DiffServ Host Statistics Top N chart, using 4-75

DiffServ Traffic Statistics Cumulative Data table, using 4-66

DiffServ Traffic Statistics Current Rates table, using 4-63

DiffServ Traffic Statistics table, using

real-time traffic statistics in graphical format 4-64

reports 4-64

DiffServ Traffic Statistics Top N chart, using 4-65

directing traffic for spanning 3-3

custom NetFlow data sources, creating 3-22

data source, deleting 3-25

data source, editing 3-24

data sourcedeleting 3-25

data source information, verifying 3-24

interfaces, selecting 3-23

NetFlow device, selecting 3-23

listening mode, using 3-25

methods (table) 3-4

NDE collection types (table) 3-6

NetFlow, configuring on devices 3-13

devices running Catalyst OS 3-15

devices running Cisco IOS 3-14

devices supporting multi-layer switching cache 3-14

devices supporting NDE export 3-16

devices supporting NDE v8 aggregations 3-15

devices supporting vi aggregations 3-15

NAMs in a device slot 3-16

NetFlow devices, managing 3-19

creating 3-19

deleting 3-21

editing 3-20

testing 3-21

SPAN session

creating 3-7

deleting 3-11

editing 3-9

SPAN sources (table) 3-5

VACL, configuring on LAN VLANs 3-18

VACL, configuring on WAN interfaces 3-17

displaying

alarms 1-10

capture buffer data 1-10

network traffic data 1-9

reports 1-9

documentation xii

audience for this xi

feedback, submitting electronically xv

obtaining xiv

CD-ROM xiv

Cisco.com xiv

ordering xv

other Cisco publications and information xviii

typographical conventions in xi

typographical conventions used in xi

DSMON data collection, setting up 3-35

E

editing

custom capture filters 6-21

custom decode filters 6-27

custom reports 5-19

DiffServe profiles 3-38

NAM MIB thresholds 3-47

NAM Traffic Analyzer accounts 1-8

NAM traps 3-55

NetFlow devices 3-20

protocols 3-41

SPAN sessions 3-9

switch thresholds 3-53

error messages (see troubleshooting) A-22

F

folders, moving custom reports between 5-20

G

global preferences, setting 3-55

GUI for NAM Traffic Analyzer, navigating 1-2

H

hardware, NAM installation, and

Catalyst 6000 and 6500 series switches 1-1

Cisco 2600, 3660, and 3700 series routers 1-1

RMON licenses for Catalyst 6000 and 6500 3-31

help xvi

(see also troubleshooting) A-1

Cisco.com xvi

diagnostics, generating for technical assistance 2-19

configuration information, monitoring and capturing 2-20

system alerts, capturing 2-22

system alerts, viewing 2-20

TAC xvi

Escalation Center xviii

website xvii

historical network traffic data, storing and retrieving 1-9

host data, viewing 4-30

cumulative data on each host 4-36

cumulative MAC station data 4-40

data for a specific host, capturing 4-33

data on top n MAC stations 4-39

detail 4-32

Host Conversation report

creating 5-3

parameters for, selecting 5-9

network hosts table reports 4-34

real-time statistics in graphical format 4-33

tables and charts useful in

MAC Stations Current Rates table 4-37

MAC Stations Top N chart 4-39

Network Hosts Cumulative Data table 4-36

Network Hosts Current Rates table 4-31

Network Hosts Top N chart 4-35

hostname resolution, troubleshooting A-22

HTTP/security certificates, troubleshooting A-25

I

image upgrades, troubleshooting A-17

interface data, viewing

detail 4-95

Interface Stats Current Rates table, using 4-87

Interface Top N chart, using 4-91

IP host name resolution, and slow response time, troubleshooting 3-56

L

LastN Calls table, displaying call detail from 4-23

listening mode (NAM), using 3-25

logins

record of, viewing 2-10

troubleshooting A-3

M

MAC station conversations, monitoring

cumulative 4-52

current rates 4-49

top n 4-50

MAC stations, monitoring data on

cumulative 4-40

current rates 4-37

top n 4-39

MGCP gateways, how represented 4-21

monitoring data 4-1

application 4-12

packets and bytes for each application protocol 4-13

real-time data in graphical format 4-15

reports 4-15

data collection, overview 4-2

data sources, overview 4-2

multiple collections, configuring 4-3

NDE flow-masks, and V8 aggregation caches 4-6

protocol autodiscovery 4-6

DSMON 3-35

host 4-30

cumulative data on 4-36

MAC stations 4-39

Monitor Overview charts, viewing 4-9

response time 3-32

data collections, creating 3-33

data collections, deleting 3-35

data collections, editing 3-34

voice 4-19

active calls 4-28

known phones 4-21

voice protocol overview 4-19

Monitor Overview charts, viewing 4-9

N

NAM

community strings, working with 2-16

creating 2-16

deleting 2-17

listening mode, using 3-25

MIB alarm thresholds

creating 3-44

deleting 3-48

editing 3-47

setting 3-43

MIB alarm variables, selecting 3-44

SNMP system groups, setting and viewing 2-15

switch date/time synchronization, and, troubleshooting A-21

system time, setting 2-18

configuring with an NTP server 2-19

synchronizing with switch or router 2-19

traps

creating 3-54

deleting 3-55

editing 3-55

setting 3-53

versions 3-3

Nameservers, and slow response time, troubleshooting 3-56

navigation and control elements 1-4

NDE flow-masks, and V8 aggregation caches 4-6

NetFlow

configuring on devices 3-13

Catalyst OS 3-15

Cisco IOS 3-14

multi-layer switching cache 3-14

NAMs in a device slot 3-16

NDE export 3-16

NDE v8 aggregations 3-15

data sources, managing

creating 3-22

deleting 3-25

editing 3-24

interfaces, selecting 3-23

NetFlow device, selecting 3-23

source information, verifying 3-24

devices, managing 3-19

creating 3-19

deleting 3-21

editing 3-20

testing 3-21

interfaces, understanding 3-11

monitoring problems, troubleshooting A-11

records, understanding 3-12

network host data charts and tables, using

Network Host Conversations Cumulative Data table, using 4-48

Network Host Current Rates 4-34

data for a specific host, capturing 4-33

detail 4-32

real-time statistics in graphical format 4-33

Network Host Top N chart 4-35

network parameters, setting and viewing 2-13

network traffic data, storing and retrieving 1-9

NM-NAM devices

Interface Stats option, and 1-9

NAM version supported 3-3

Router Parameters option, and 1-7

VLAN data, and 1-9

O

overview of NAM Traffic Analyzer 1-1

alarm logs 7-1

data collection 4-2

data sources 4-2

GUI 1-2

navigation and control elements 1-4

user interface components 1-3

P

packet captures, troubleshooting A-6

passwords, recovering 2-2

patches, troubleshooting A-17

port statistics data, viewing 4-85

cumulative data 4-93

detail 4-88

real-time data in graphical format 4-88

reports 4-89

tables and charts useful in

Interface Stats Current Rates table 4-87

Port Stats Current Rates table 4-85

Port Stats Top N chart 4-89

Top N Interface Stats chart 4-91

port statistics issues, troubleshooting A-9

Port Stats Current Rates table, using 4-85

detail 4-88

real-time data in graphical format 4-88

reports 4-89

Port Stats Top N chart, using 4-89

cumulative data 4-93

detail 4-95

protocol data, capturing

client/server data 4-83

server data 4-80

protocol directory

managing

creating protocols 3-39

deleting protocols 3-42

editing protocols 3-41

setting up 3-38

protocol filters, in capturing settings 6-9

protocol support, troubleshooting A-27

R

real-time data displays, setting up 1-8

recovering passwords 2-2

renaming a report 5-3

reports

accessing 1-9

creating 5-1

basic 5-3

custom 5-18

custom

creating 5-18

deleting 5-20

editing 5-19

moving between folders 5-20

viewing 5-20

deleting

basic 5-15

custom 5-20

managing basic report types 5-1

creating 5-3

deleting 5-15

disabling 5-3

enabling 5-3

renaming 5-3

table of, viewing 5-2

viewing 5-15

parameters for, selecting

Application report 5-7

Application Response Time report 5-12

Differentiated Services report 5-11

Host Conversation report 5-9

Host report 5-8

Interface Statistics report 5-14

Switch Port report 5-13

VLAN report 5-10

troubleshooting A-16

viewing 5-1

basic reports 5-15

custom reports 5-20

response time data, viewing 4-78

detail

client/server 4-83

server 4-80

reports

client/server 4-83

server 4-80

tables and charts useful in

Client/Server Response Time table 4-82

Client/Server Response Time Top N chart 4-84

Server Response Time table 4-79

Server Response Time Top N chart 4-81

response time data collections, managing

creating 3-33

deleting 3-35

editing 3-34

setting up 3-32

RMON

agent licenses, and Catalyst series NAMs 3-31

log table, viewing 7-2

router parameters viewing 3-2

S

Server Response Time table, using 4-79

data, capturing 4-80

detail 4-80

reports 4-80

Server Response Time Top N chart, using 4-81

setting

alarm thresholds 3-42

NAM MIB thresholds 3-43

switch thresholds 3-50

syslog 3-49

voice thresholds 3-48

community switch strings 3-27

NAM SNMP system groups 2-15

network parameters 2-13

SNMP

testing on a switch or router 3-3

troubleshooting A-26

SPAN

issues related to, troubleshooting A-10

sessions

creating 3-7

deleting 3-11

editing 3-9

spanning, directing traffic for 3-3

custom NetFlow data sources, creating 3-22

data source, deleting 3-25

data source, editing 3-24

data source information, verifying 3-24

interfaces, selecting 3-23

NetFlow device, selecting 3-23

listening mode, using 3-25

methods (table) 3-4

NDE collection types (table) 3-6

NetFlow, configuring on devices 3-13

Catalyst OS 3-15

Cisco IOS 3-14

multi-layer switching cache 3-14

NAMs in a device slot 3-16

NDE export 3-16

NDE v8 aggregations 3-15

NetFlow devices, managing 3-19

creating 3-19

deleting 3-21

editing 3-20

testing 3-21

SPAN session

creating 3-7

deleting 3-11

editing 3-9

SPAN sources (table) 3-5

VACL, configuring

on LAN VLANs 3-18

on WAN interfaces 3-17

spanning, troubleshooting A-6

switch

alarm and port statistics issues, troubleshooting A-9

alarm thresholds

creating 3-51

deleting 3-53

editing 3-53

setting 3-50

NAM date/time synchronization issues, and, troubleshooting A-21

parameters, viewing 3-1

Switch Port report

creating 5-3

parameters for, selecting 5-13, 5-14

syslog alarm threshold, setting up 3-49

system administration 2-1

diagnostics, generating for technical assistance 2-19

overview of system administration tasks 2-12

NAM community strings, working with 2-16

NAM SNMP system group, setting and viewing 2-15

NAM system time, setting 2-18

network parameters, setting and viewing 2-13

system resources, viewing 2-12

overview of user administration tasks 2-1

access log, viewing 2-10

passwords, recovering 2-2

predefined NAM user accounts, changing 2-3

TACACS+ authentication and authorization, establishing 2-6

TACACS+ server, configuring to support NAM 2-8

user privileges (table) 2-2

users, creating new 2-3

users, deleting 2-5

users, editing 2-5

user sessions table, viewing 2-11

system resources, viewing 2-12

system alerts

capturing 2-22

viewing 2-20

T

TAC (Technical Assistance Center) xvi

(see also troubleshooting) A-1

Escalation Center xviii

website xvii

TACACS+

authentication and authorization, establishing 2-6

server, configuring to support NAM 2-8

secret key, requirements for 2-8

technical assistance, obtaining

(see also troubleshooting) A-1

diagnostics, generating for 2-19

configuration information, monitoring and capturing 2-20

system alerts, capturing 2-22

system alerts, viewing 2-20

technical support xvi

Cisco.com xvi

TAC xvi

Escalation Center xviii

website xvii

testing NetFlow devices 3-21

TopN Applications chart, using 4-16

troubleshooting A-1

data mismatch issues A-24

diagnostic error message issues A-22

host name resolution issues A-22

HTTPS/security certificate issues A-25

image upgrade and patch issues A-17

login issues A-3

NAM and switch date/time synchronization issues A-21

NetFlow monitoring problems A-11

packet capturing and spanning issues A-6

protocol support issues A-27

reporting issues A-16

slow response times 3-56

SNMP issues A-26

SPAN-related issues A-10

switch, cannot communicate with 3-27

switch alarm and port statistics issues A-9

username and password issues A-2

caution regarding deleting all local database web users A-2

voice monitoring issues A-28

web browser response time and display issues A-20

typographical conventions used in this document xi

U

user

administration (see system administration) 2-1

login record, viewing 2-10

privileges (table) 2-2

sessions table, viewing 2-11

Users Table (illustration) 2-3

username and password issues, troubleshooting A-2

V

V8 aggregation caches, and NDE flow-masks 4-6

VACL, configuring

on LAN VLANs 3-18

on WAN interfaces 3-17

verifying NetFlow data source information 3-24

versions of Catalyst 6500 NAM 3-3

viewing

access log 2-10

active call data 4-28

application data 4-12

capturing, for a specific protocol 4-14

detail for a specific protocol 4-18

packets and bytes collected 4-17

real-time data in graphical format 4-15

reports 4-15

basic reports 5-15

community switch strings 3-27

conversations data 4-42

packest and bytes for each host conversation 4-42

custom reports 5-20

DiffServ data 4-62

host conversation details 4-73

host statistics 4-75

real-time data in graphical format 4-74

real-time traffic statistics in graphical format 4-64

reports 4-64

host data 4-30

collected during last time interval 4-31

cumulative MAC stations data 4-40

for a specific host, capturing 4-33

MAC stations current rates 4-37

real-time statistics in graphical format 4-33

reports 4-34

Monitor Overview charts 4-9

NAM log 7-1

NAM MIB alarm details 3-47

NAM SNMP system groups 2-15

network parameters 2-13

packets and bytes collected for top n MAC station conversations 4-50

packets and bytes for each MAC station conversation 4-52

port statistics data 4-85

cumulative 4-93

detail 4-88

real-time data in graphical format 4-88

reports 4-89

response time data 4-78

client/server 4-83

client/server detail 4-83

server 4-80

server detail 4-80

RMON log table 7-2

router parameters 3-2

switch

log 7-2

parameters 3-1

system alerts 2-20

system resources 2-12

user sessions table 2-11

VLAN data 4-53

collected for the top n VLAN IDs, in graphical format 4-56

cumulative data for each VLAN ID 4-57

reports 4-55

user priority distributions in graphical format 4-59

user priority distributions per data source 4-58, 4-61

voice data 4-19

active calls 4-28

known phones 4-21

voice protocol overview 4-19

VLAN data, viewing 4-53

cumulative data for each VLAN ID 4-57

reports 4-55

tables and charts useful in

VLAN Priority (COS) Statistics Cumulative Data table 4-61

VLAN Priority (COS) Statistics Current Rates table 4-58

VLAN Priority (COS) Statistics Top N chart 4-59

VLAN Traffic Statistics Cumulative Data table 4-57

VLAN Traffic Statistics Current Rates table 4-54

VLAN Traffic Statistics Top N chart 4-56

user priority distributions in graphical format 4-59

user priority distributions per data source

cumulative 4-61

current rates 4-58

VLAN Priority (COS) Statistics

Cumulative Data Table, using 4-61

Current Rates table, using 4-58

Top N chart, using 4-59

VLAN report

creating 5-3

parameters for, selecting 5-10

VLAN Traffic Statistics

Cumulative Data table, using 4-57

Current Rates table, using 4-54

Top N chart, using 4-56

voice alarm thresholds, setting 3-48

voice data

collecting 3-31

viewing 4-19

active calls 4-28

known phones 4-21

voice protocol overview 4-19

voice monitoring, troubleshooting A-28

W

WS-SVC-NAM-1 3-3

WS-SVC-NAM-2 3-3

WS-X6380-NAM 3-3