Measurement modules: Difference between revisions
Jump to navigation
Jump to search
Access restrictions were established for this page. If you see this message, you have no access to this page.
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
The Allegro Network Multimeter provides a | The Allegro Network Multimeter provides a number of network measurement modules for different use cases. Here | ||
you can find a list of modules and a short description | you can find a list of modules and a short description and see the specific module for detailed documentation. | ||
== Generic modules == | == Generic modules == | ||
* [[Capture_module|Capture module]] | * [[Capture_module|Capture module]] | ||
:The | :The Capture module lists all running captures which were started interactively in any other module. | ||
:It also allows for starting new captures with specific filters. | :It also allows for starting new captures with specific filters. | ||
* [[Path_measurement|Path measurement]] | * [[Path_measurement|Path measurement]] | ||
:This module allows to measure packet loss and latency between two | :This module allows you to measure packet loss and latency between two Multimeter installations. | ||
* [[Packet_ring_buffer|Packet ring buffer]] | * [[Packet_ring_buffer|Packet ring buffer]] | ||
:The ring buffer feature allows to create a buffer of fixed size on an external storage device to which all processed packets will be recorded. If the fixed size buffer is full | :The packet ring buffer feature allows you to create a buffer of fixed size on an external storage device to which all processed packets will be recorded. If the fixed size buffer is full, the oldest packets in the buffer will be replaced with new packets in a round-robin fashion. | ||
* [[PCAP#Pcap_analysis_module|Pcap analysis module]] | * [[PCAP#Pcap_analysis_module|Pcap analysis module]] | ||
:The pcap analysis module allows | :The pcap analysis module allows for the analysis of pcap files by sending them to the appliance. After analyzing a pcap, the web interface displays all the metadata as if the packets are live traffic at the time of the pcap recording. | ||
* [[Incidents#Incidents_module|Incidents module]] | * [[Incidents#Incidents_module|Incidents module]] | ||
:The Incidents module allows for notifications to be created when | :The Incidents module allows for notifications to be created when specific network incidents are detected. | ||
== L2 - Ethernet | == L2 - Ethernet Layer == | ||
* [[MAC_module|MAC module]] | * [[MAC_module|MAC module]] | ||
:The MAC module gathers information about all | :The MAC module gathers information about all captured MAC addresses, including the protocols used, traffic, communication peers and MAC/IP mappings. | ||
* [[QoS module]] | * [[QoS module]] | ||
* [[Packet_size_module|Packet size module]] | * [[Packet_size_module|Packet size module]] | ||
:The packet size module accounts the size of all packets ( | :The packet size module accounts the size of all packets (Layer 2 with CRC) and shows packet size distribution. | ||
* [[ARP_module|ARP module]] | * [[ARP_module|ARP module]] | ||
:The ARP module monitors ARP packets for tracking MAC addresses and announced IP addresses | :The ARP module monitors ARP packets for tracking MAC addresses and announced IP addresses. | ||
* [[VLAN_module|VLAN module]] | * [[VLAN_module|VLAN module]] | ||
| Line 40: | Line 40: | ||
* [[STP_module|STP module]] | * [[STP_module|STP module]] | ||
:The stp module | :The stp module analyzes STP traffic and shows a history of the identified root Bridges with their configurations. | ||
* [[MPLS_module|MPLS module]] | * [[MPLS_module|MPLS module]] | ||
:The MPLS module | :The MPLS module displays information about all identified MPLS labels (single label and double-stacked). | ||
* [[LLDP_module|LLDP module]] | * [[LLDP_module|LLDP module]] | ||
:The LLDP module extracts information from LLDP | :The LLDP module extracts information from LLDP (Link Layer Discovery Protocol) messages and correlates this information to the respective MAC and IP addresses. | ||
* [[PPPoE module]] | * [[PPPoE module]] | ||
:The PPPoE module displays all PPPoE sessions and traffic within a specific session. | |||
:The PPPoE module | |||
* [[Burst_analysis|Burst analysis]] | * [[Burst_analysis|Burst analysis]] | ||
:The Burst analysis module measures throughput per interface or MAC address and displays utilization graphs for fast recognition | :The Burst analysis module measures throughput per interface or MAC address and displays utilization graphs for fast burst recognition. | ||
== L3 - IP Layer == | |||
* [[IP_module|IP module]] | * [[IP_module|IP module]] | ||
:The IP module gathers information about all | :The IP module gathers information about all captured IPv4 and IPv6 addresses including the protocol used, traffic, communication peers, and connection. | ||
* [[QoS_module|QoS module]] | * [[QoS_module|QoS module]] | ||
:The QoS module processes and displays traffic with QoS tags for IP DSCP on | :The QoS module processes and displays traffic with QoS tags for IP DSCP on Layer 3 and VLAN PCP and MPLS TC on Layer 2. | ||
* [[Geolocation_statistics|Geolocation statistics]] | * [[Geolocation_statistics|Geolocation statistics]] | ||
:The Network Multimeter uses a geolocation library to identify | :The Network Multimeter uses a geolocation library to identify the IP addresses of individual countries. The country information is shown in other modules; however, this web page lists all countries and their corresponding amount of traffic. It also shows detailed statistics per country including all IP addresses seen for that country. | ||
* [[DHCP_module|DHCP module]] | * [[DHCP_module|DHCP module]] | ||
:The DHCP module tracks requests and | :The DHCP module tracks requests and responses for dynamic IP assignments in networks. | ||
* [[DNS_module|DNS module]] | * [[DNS_module|DNS module]] | ||
:DNS name resolving is | :DNS name resolving is handled passively by processing all DNS requests and responses captured by the system. | ||
:This module lists all IP addresses and names known by system. | :This module lists all IP addresses and names known by the system. This information is used by other modules to look up names. | ||
* [[NetBIOS_module|NetBIOS module]] | * [[NetBIOS_module|NetBIOS module]] | ||
| Line 77: | Line 75: | ||
* [[ICMP_module|ICMP module]] | * [[ICMP_module|ICMP module]] | ||
:The ICMP module shows information about ICMP traffic and | :The ICMP module shows information about ICMP traffic and specific packet types. | ||
* [[Multicast_statistics|Multicast statistics]] | * [[Multicast_statistics|Multicast statistics]] | ||
:The multicast module analyzes IGMP traffic and | :The multicast module analyzes IGMP traffic and displays detailed information on multicast groups and members. | ||
== L4 - Transport | == L4 - Transport Layer == | ||
* [[Connections_module|Connections module]] | * [[Connections_module|Connections module]] | ||
:The connections module | :The connections module provides access to a list of connections of all IPs aggregated together based on selected sort and filter parameters. | ||
* [[TCP_module|TCP module]] | * [[TCP_module|TCP module]] | ||
:The TCP module measures the TCP handshake time for connection setup. It allows to identify slow responding servers in | :The TCP module measures the TCP handshake time for connection setup. It allows you to identify slow responding servers in a network. | ||
* [[Layer_4_server_ports_module|Layer 4 server ports module]] | * [[Layer_4_server_ports_module|Layer 4 server ports module]] | ||
| Line 97: | Line 95: | ||
== L7 - Application | == L7 - Application Layer == | ||
* [[SSL_module|SSL module]] | * [[SSL_module|SSL module]] | ||
:The SSL module keeps track of SSL server names and common names in SSL/TLS encrypted traffic. It | :The SSL module keeps track of SSL server names and common names in SSL/TLS encrypted traffic. It enables you to get the name resolved even if no DNS has been seen. | ||
* [[HTTP_module|HTTP module]] | * [[HTTP_module|HTTP module]] | ||
:The HTTP module keeps track of HTTP host names requested in HTTP connections. It allows to get the name resolved even if no DNS has been seen and to see which virtual host | :The HTTP module keeps track of HTTP host names requested in HTTP connections. It allows you to get the name resolved even if no DNS has been seen and to see which virtual host is handled by a given server. | ||
* [[L7_module|L7 module]] | * [[L7_module|L7 module]] | ||
:The L7 module gathers information about all supported | :The L7 module gathers information about all supported Layer 7 protocols. This includes information on how much traffic was seen for each protocol for each IPv4 and IPv6 address. | ||
* [[Response_time_analysis|Response time analysis]] | * [[Response_time_analysis|Response time analysis]] | ||
:The | :The response-time analysis module allows you to define your own protocol request and response pattern and measure the response time and request/response loss. | ||
* [[SMB_statistics|SMB statistics]] | * [[SMB_statistics|SMB statistics]] | ||
| Line 119: | Line 117: | ||
* [[NTP_module|NTP module]] | * [[NTP_module|NTP module]] | ||
:The NTP module shows detailed information about | :The NTP module shows detailed information about Network Time Protocol servers selected and their corresponding network clients. | ||
* [[PTP_module|PTP module]] | * [[PTP_module|PTP module]] | ||
| Line 125: | Line 123: | ||
* [[Profinet_module|Profinet module]] | * [[Profinet_module|Profinet module]] | ||
:The Profinet module | :The Profinet module analyzes Profinet RT cyclic and acyclic traffic and displays details on all devices and their communication relationships. | ||
* [[OPC-UA_module|OPC-UA module]] | * [[OPC-UA_module|OPC-UA module]] | ||
:The OPC-UA module | :The OPC-UA module displays information about OPC-UA binary protocol traffic and performs response-time measurement. | ||
* [[RTP_statistics|RTP statistics]] | * [[RTP_statistics|RTP statistics]] | ||
:The RTP module shows detailed information about | :The RTP module shows detailed information about RTP codecs used. | ||
Revision as of 14:26, 13 May 2020
The Allegro Network Multimeter provides a number of network measurement modules for different use cases. Here you can find a list of modules and a short description and see the specific module for detailed documentation.
Generic modules
- The Capture module lists all running captures which were started interactively in any other module.
- It also allows for starting new captures with specific filters.
- This module allows you to measure packet loss and latency between two Multimeter installations.
- The packet ring buffer feature allows you to create a buffer of fixed size on an external storage device to which all processed packets will be recorded. If the fixed size buffer is full, the oldest packets in the buffer will be replaced with new packets in a round-robin fashion.
- The pcap analysis module allows for the analysis of pcap files by sending them to the appliance. After analyzing a pcap, the web interface displays all the metadata as if the packets are live traffic at the time of the pcap recording.
- The Incidents module allows for notifications to be created when specific network incidents are detected.
L2 - Ethernet Layer
- The MAC module gathers information about all captured MAC addresses, including the protocols used, traffic, communication peers and MAC/IP mappings.
- The packet size module accounts the size of all packets (Layer 2 with CRC) and shows packet size distribution.
- The ARP module monitors ARP packets for tracking MAC addresses and announced IP addresses.
- The VLAN module accounts traffic per VLAN tag seen on the network.
- The MAC protocols module accounts traffic of all different MAC protocols.
- The stp module analyzes STP traffic and shows a history of the identified root Bridges with their configurations.
- The MPLS module displays information about all identified MPLS labels (single label and double-stacked).
- The LLDP module extracts information from LLDP (Link Layer Discovery Protocol) messages and correlates this information to the respective MAC and IP addresses.
- The PPPoE module displays all PPPoE sessions and traffic within a specific session.
- The Burst analysis module measures throughput per interface or MAC address and displays utilization graphs for fast burst recognition.
L3 - IP Layer
- The IP module gathers information about all captured IPv4 and IPv6 addresses including the protocol used, traffic, communication peers, and connection.
- The QoS module processes and displays traffic with QoS tags for IP DSCP on Layer 3 and VLAN PCP and MPLS TC on Layer 2.
- The Network Multimeter uses a geolocation library to identify the IP addresses of individual countries. The country information is shown in other modules; however, this web page lists all countries and their corresponding amount of traffic. It also shows detailed statistics per country including all IP addresses seen for that country.
- The DHCP module tracks requests and responses for dynamic IP assignments in networks.
- DNS name resolving is handled passively by processing all DNS requests and responses captured by the system.
- This module lists all IP addresses and names known by the system. This information is used by other modules to look up names.
- The NetBIOS module monitors NetBIOS packets for tracking announced host names for IP addresses.
- The ICMP module shows information about ICMP traffic and specific packet types.
- The multicast module analyzes IGMP traffic and displays detailed information on multicast groups and members.
L4 - Transport Layer
- The connections module provides access to a list of connections of all IPs aggregated together based on selected sort and filter parameters.
- The TCP module measures the TCP handshake time for connection setup. It allows you to identify slow responding servers in a network.
- The Layer 4 server ports module measures traffic per TCP and UDP server port.
- The IPSec module shows information about IPSec ESP traffic and sequence counter correctness.
L7 - Application Layer
- The SSL module keeps track of SSL server names and common names in SSL/TLS encrypted traffic. It enables you to get the name resolved even if no DNS has been seen.
- The HTTP module keeps track of HTTP host names requested in HTTP connections. It allows you to get the name resolved even if no DNS has been seen and to see which virtual host is handled by a given server.
- The L7 module gathers information about all supported Layer 7 protocols. This includes information on how much traffic was seen for each protocol for each IPv4 and IPv6 address.
- The response-time analysis module allows you to define your own protocol request and response pattern and measure the response time and request/response loss.
- The SMB module gathers information about all SMB servers handling unencrypted traffic. It shows which shares have been accessed and which files together with detailed per file statistics.
- The SIP statistics includes all SIP calls and their associated metadata.
- The NTP module shows detailed information about Network Time Protocol servers selected and their corresponding network clients.
- The PTP module stores the PTP members and their associated metadata like the PTP version.
- The Profinet module analyzes Profinet RT cyclic and acyclic traffic and displays details on all devices and their communication relationships.
- The OPC-UA module displays information about OPC-UA binary protocol traffic and performs response-time measurement.
- The RTP module shows detailed information about RTP codecs used.