Measurement modules: Difference between revisions

From Allegro Network Multimeter Manual
Jump to navigation Jump to search
Access restrictions were established for this page. If you see this message, you have no access to this page.
No edit summary
No edit summary
Line 2: Line 2:
you can find a list of modules and a short description, see the specific module for detailed documentation.  
you can find a list of modules and a short description, see the specific module for detailed documentation.  


*'''Generic'''
== Generic modules ==
# [[Capture module]]
# [[Path measurement]]
# [[Packet ring buffer]]
# [[PCAP]]
#[[Incidents]]


*'''L2 - Ethernet layer'''
* [[Capture_module|Capture module]]
#[[MAC module]]
:The capture module lists all running captures which have been started interactively in any other module.
#[[QoS module]]
:It also allows for starting new captures with specific filters.
#[[Packet size module]]
#[[ARP module]]
#[[VLAN module]]
#[[MAC protocols module]]
#[[STP module]]
#[[MPLS module]]
#[[LLDP module]]
#[[PPPoE module]]
#[[Burst analysis]]


* '''L3 - IP'''
* [[Path_measurement|Path measurement]]
#[[IP module]]
:This module allows to measure packet loss and latency between two multimeter installation.
#[[Geolocation statistics]]
#[[DHCP module]]
#[[DNS module]]
#[[NetBIOS module]]
#[[ICMP module]]
#[[Multicast statistics]]


* '''L4 - Transport'''
* [[Packet_ring_buffer|Packet ring buffer]]
#[[Connections module]]
:The ring buffer feature allows to create a buffer of fixed size on an external storage device to which all processed packets will be recorded. If the fixed size buffer is full then the oldest packets in the buffer will be replaced with new packets in a round robin fashion.
#[[TCP module]]
#[[Layer 4 server ports module]]
#[[IPSec module]]


* ''' L7 - Application'''
* [[PCAP#Pcap_analysis_module|Pcap analysis module]]
#[[SSL module]]
:The pcap analysis module allows analyzing pcap files by sending them to the device. After analyzing the pcap, the web interface shows all the metadata as if the packets are live traffic at the time of the pcap recording.
#[[HTTP module]]
#[[L7 module]]
#[[Response time analysis]]
#[[SMB statistics]]
#[[SIP module]]
#[[NTP module]]
#[[PTP module]]
#[[Profinet module]]
#[[OPC-UA module]]
#[[RTP statistics]]


* '''[[Measurement modules(Summary)]]'''
* [[Incidents#Incidents_module|Incidents module]]
:The Incidents module allows for notifications to be created when certain network incidents are detected.
 
== L2 - Ethernet layer ==
 
* [[MAC_module|MAC module]]
:The MAC module gathers information about all seen MAC addresses, including the used protocols, traffic, communication peers and MAC/IP mappings.
 
* [[QoS module]]
 
* [[Packet_size_module|Packet size module]]
:The packet size module accounts the size of all packets (layer 2 with CRC) and provides a packet size distribution.
 
* [[ARP_module|ARP module]]
:The ARP module monitors ARP packets for tracking MAC addresses and announced IP addresses
 
* [[VLAN_module|VLAN module]]
:The VLAN module accounts traffic per VLAN tag seen on the network.
 
* [[MAC_protocols_module|MAC protocols module]]
:The MAC protocols module accounts traffic of all different MAC protocols.
 
* [[STP_module|STP module]]
:The stp module analysis STP traffic and shows a history of the seen root bridges with their configuration.
 
* [[MPLS_module|MPLS module]]
:The MPLS module shows information about all seen MPLS labels (single label and double stacked).
 
* [[LLDP_module|LLDP module]]
:The LLDP module extracts information from LLDP messages (Link Layer Discovery Protocol) and correlates this information to the respective MAC and IP addresses.
 
* [[PPPoE module]]
 
:The PPPoE module shows all PPPoE sessions and traffic within a certain session.
 
* [[Burst_analysis|Burst analysis]]
:The Burst analysis module measures throughput per interface or MAC address and displays utilization graphs for fast recognition of bursts.
 
== L3 - IP layer ==
 
* [[IP_module|IP module]]
:The IP module gathers information about all seen IPv4 and IPv6 addresses, including the used protocol, traffic, communication peers, and connection.
 
* [[QoS_module|QoS module]]
:The QoS module processes and displays traffic with QoS tags for IP DSCP on layer 3 and VLAN PCP and MPLS TC on layer 2.
 
* [[Geolocation_statistics|Geolocation statistics]]
:The Network Multimeter uses a geolocation library to identify countries for IP addresses. The country information are shown in other modules, but this web page lists all countries and their corresponding amount of traffic. It also shows detailed statistics per country including all IP addresses seen for that country.
 
* [[DHCP_module|DHCP module]]
:The DHCP module tracks requests and answers for dynamic IP assignments in networks.
 
* [[DNS_module|DNS module]]
:DNS name resolving is done passively by processing all DNS requests and response seen by the system.
:This module lists all IP addresses and names known by system. These information are used by other modules to lookup names.
 
* [[NetBIOS_module|NetBIOS module]]
:The NetBIOS module monitors NetBIOS packets for tracking announced host names for IP addresses.
 
* [[ICMP_module|ICMP module]]
:The ICMP module shows information about ICMP traffic and certain packet types.
 
* [[Multicast_statistics|Multicast statistics]]
:The multicast module analyzes IGMP traffic and shows detailed information about multicast groups and members.
 
== L4 - Transport layer ==
 
* [[Connections_module|Connections module]]
:The connections module gives access to a list of connections of all IPs aggregated together based on chose sort and filter parameters.
 
* [[TCP_module|TCP module]]
:The TCP module measures the TCP handshake time for connection setup. It allows to identify slow responding servers in the network.
 
* [[Layer_4_server_ports_module|Layer 4 server ports module]]
:The Layer 4 server ports module measures traffic per TCP and UDP server port.
 
* [[IPSec_module|IPSec module]]
:The IPSec module shows information about IPSec ESP traffic and sequence counter correctness.
 
 
== L7 - Application layer ==
 
 
* [[SSL_module|SSL module]]
:The SSL module keeps track of SSL server names and common names in SSL/TLS encrypted traffic. It allows to get the name resolved even if no DNS has been seen.
 
* [[HTTP_module|HTTP module]]
:The HTTP module keeps track of HTTP host names requested in HTTP connections. It allows to get the name resolved even if no DNS has been seen and to see which virtual host are handled by a given server.
 
* [[L7_module|L7 module]]
:The L7 module gathers information about all supported layer 7 protocols. This includes information on how much traffic for each protocol was seen for each IPv4 and IPv6 address.
 
* [[Response_time_analysis|Response time analysis]]
:The Response time analysis module allows to define own protocol request and response pattern and measure the response time and request/response loss.
 
* [[SMB_statistics|SMB statistics]]
:The SMB module gathers information about all SMB servers handling unencrypted traffic. It shows which shares have been accessed and which files together with detailed per file statistics.
 
* [[SIP_module|SIP module]]
:The SIP statistics includes all SIP calls and their associated metadata.
 
* [[NTP_module|NTP module]]
:The NTP module shows detailed information about used servers of the Network Time Protocol and their corresponding clients in the network.
 
* [[PTP_module|PTP module]]
:The PTP module stores the PTP members and their associated metadata like the PTP version.
 
* [[Profinet_module|Profinet module]]
:The Profinet module analysis Profinet RT cyclic and acyclic traffic and shows details about all devices and their communication relations.
 
* [[OPC-UA_module|OPC-UA module]]
:The OPC-UA module shows information about OPC-UA binary protocol traffic and performs reponse time measurement.
 
* [[RTP_statistics|RTP statistics]]
:The RTP module shows detailed information about used RTP codecs.

Revision as of 14:34, 4 May 2020

The Allegro Network Multimeter provides a variety of network measurement modules for different use cases. Here you can find a list of modules and a short description, see the specific module for detailed documentation.

Generic modules

The capture module lists all running captures which have been started interactively in any other module.
It also allows for starting new captures with specific filters.
This module allows to measure packet loss and latency between two multimeter installation.
The ring buffer feature allows to create a buffer of fixed size on an external storage device to which all processed packets will be recorded. If the fixed size buffer is full then the oldest packets in the buffer will be replaced with new packets in a round robin fashion.
The pcap analysis module allows analyzing pcap files by sending them to the device. After analyzing the pcap, the web interface shows all the metadata as if the packets are live traffic at the time of the pcap recording.
The Incidents module allows for notifications to be created when certain network incidents are detected.

L2 - Ethernet layer

The MAC module gathers information about all seen MAC addresses, including the used protocols, traffic, communication peers and MAC/IP mappings.
The packet size module accounts the size of all packets (layer 2 with CRC) and provides a packet size distribution.
The ARP module monitors ARP packets for tracking MAC addresses and announced IP addresses
The VLAN module accounts traffic per VLAN tag seen on the network.
The MAC protocols module accounts traffic of all different MAC protocols.
The stp module analysis STP traffic and shows a history of the seen root bridges with their configuration.
The MPLS module shows information about all seen MPLS labels (single label and double stacked).
The LLDP module extracts information from LLDP messages (Link Layer Discovery Protocol) and correlates this information to the respective MAC and IP addresses.
The PPPoE module shows all PPPoE sessions and traffic within a certain session.
The Burst analysis module measures throughput per interface or MAC address and displays utilization graphs for fast recognition of bursts.

L3 - IP layer

The IP module gathers information about all seen IPv4 and IPv6 addresses, including the used protocol, traffic, communication peers, and connection.
The QoS module processes and displays traffic with QoS tags for IP DSCP on layer 3 and VLAN PCP and MPLS TC on layer 2.
The Network Multimeter uses a geolocation library to identify countries for IP addresses. The country information are shown in other modules, but this web page lists all countries and their corresponding amount of traffic. It also shows detailed statistics per country including all IP addresses seen for that country.
The DHCP module tracks requests and answers for dynamic IP assignments in networks.
DNS name resolving is done passively by processing all DNS requests and response seen by the system.
This module lists all IP addresses and names known by system. These information are used by other modules to lookup names.
The NetBIOS module monitors NetBIOS packets for tracking announced host names for IP addresses.
The ICMP module shows information about ICMP traffic and certain packet types.
The multicast module analyzes IGMP traffic and shows detailed information about multicast groups and members.

L4 - Transport layer

The connections module gives access to a list of connections of all IPs aggregated together based on chose sort and filter parameters.
The TCP module measures the TCP handshake time for connection setup. It allows to identify slow responding servers in the network.
The Layer 4 server ports module measures traffic per TCP and UDP server port.
The IPSec module shows information about IPSec ESP traffic and sequence counter correctness.


L7 - Application layer

The SSL module keeps track of SSL server names and common names in SSL/TLS encrypted traffic. It allows to get the name resolved even if no DNS has been seen.
The HTTP module keeps track of HTTP host names requested in HTTP connections. It allows to get the name resolved even if no DNS has been seen and to see which virtual host are handled by a given server.
The L7 module gathers information about all supported layer 7 protocols. This includes information on how much traffic for each protocol was seen for each IPv4 and IPv6 address.
The Response time analysis module allows to define own protocol request and response pattern and measure the response time and request/response loss.
The SMB module gathers information about all SMB servers handling unencrypted traffic. It shows which shares have been accessed and which files together with detailed per file statistics.
The SIP statistics includes all SIP calls and their associated metadata.
The NTP module shows detailed information about used servers of the Network Time Protocol and their corresponding clients in the network.
The PTP module stores the PTP members and their associated metadata like the PTP version.
The Profinet module analysis Profinet RT cyclic and acyclic traffic and shows details about all devices and their communication relations.
The OPC-UA module shows information about OPC-UA binary protocol traffic and performs reponse time measurement.
The RTP module shows detailed information about used RTP codecs.