Home

FYI on a Network Management Tool Catalog: Tools for Monitoring

1. is complete Page 120 June 1993 RFC 1470 NOCTools2 Working Group FYI Network Management Tool Catalog June 1993 CAVEA BUGS D This utility sends one echo packet per second ICMP UDP or TCP as well as sending out one trace rout packet per second If a transmitted trace route packet is returned in less than one second another trace route packet is sent in 100 milliseconds This could cause a significant amount of contention on the local network None known Please report any discovered bugs to the author at Allen Sturtevant National Magnetic Fusion Energy Computer Center Lawrence Livermore National Laboratory P O Box 808 L 561 Livermore CA 94550 Phone 415 422 8266 E Mail sturtevant ccc nmfecc gov LIMITATIONS The user is required to have SYSPRV privilege to per form the ICMP Echo and trace route functions The utility will still run with this privilege disabled but only the UDP Echo and TCP Echo information will be displayed This utility is written in C but unfor tunately it cannot be easily ported over to UNIX since many VMS system calls are used and all screen I O is done using the VMS Screen Management Routines HARDWARE REQUIRED Any network interface supported by TGV Incorporated s MultiNet software SOFTWARE REQUIRED VAX VMS V5 1
2. NETMON resides in the 4 3BSD UNIX kernel It is independent of hardware specific code in UNIX It is transparent to protocol and network type having no internal assumptions about the network protocols being recorded It is installed in BSD like kernels by adding a standard function call probe to a few points in the input and output routines of the protocols to be logged ETMON is analogous to Sun Microsystems NIT but the nterface tap function is extended by recording more ontext information Aside from the timestamp the choice of information recorded is up to the installer of the probes The NETMON probes added to the BSD IP code supplied with the distribution include as context input and output queue lengths identification of the network interface and event codes labeling packet dis cards The NETMON distribution is geared towards measuring the performance of BSD networking protocols in an IP gateway QHZ NETMON is designed so that it can reside within the monitored system with minimal interference to the net work processing The estimated and measured overhead is around five percent of packet processing The user level tool iptrace is provided with NETMON This program logs IP traffic either at IP level only or as it passes through the network interface drivers as well As a separate function iptrace produces a host traffic m
3. addresses are translated to urer ID names Network frames accepted Kbytes Each network version has tivities specific to that is expressed as nd or per cen of network ffer may be ou r print file o tput to printer r spread sheet by the Sniffer include ng Novell Netware XNS MS IP including SNMP and ls such as FTP SMTP and version 11 NFS and several including mount pmap RPC and YP Supported LANs i 4Mb and 16Mb versions A work Broadband and Appl NOCTools2 Working Group nclude ethernet Token ring RCNET StarLAN IBM PC Net e Localtalk Network F Ei Page 136 RFC 1470 FYI Network Management Tool Catalog June 1993 MECHANISM The Sniffer is a self contained portable protocol analyzer that require only AC line power and connection to a network to operate Normally passive except when EA Traffic Generator mode it captures images of all or of selected frames in a working buffer ready for immediate analysis and display The Sniffer is a standalone device Two platforms are available one for use with single network topologies the other for use with multi network topologies Both include Sniffer core software a modified network interface card or multiple cards and optional proto col interpreter suites All Sniffer functions may be remotely controlled from a modem connected PC Output from the Sniffe
4. Some features of NETMON s network management tools include o Fault management tool displays a map of the network configuration with node and link state indicated in one of several colors to indicate current status o Configuration management tool may be used to edit the network management information base stored in the NMS to reflect changes occurring in the network o Graphs and tabular tools for use in fault and performance management o Mechanisms by which additional variables such as vendor specific variables may be added o Alarms may be enabled to alert the operator of events occurring in the network o Events are logged to disk o Output data may be transferred via flat files for additional report generation by a variety of statistical packages The NETMON application comes complete with source code including a powerful set of portable libraries for generating and parsing SNMP messages NOCTools2 Working Group Page 101 RFC 1470 FYI Network Management Tool Catalog June 1993 MECHANISM The NETMON for Windows application is based on the Simple Network Management Protocol SNMP Polling is performed via the powerful SNMP get next operator and the SNMP get operator Trap directed polling is used to regulate the focus and intensity of the polling CAVEATS None BUGS None known LIMITATIONS None reported HARDWARE REQUIRED The minimum syste
5. information on VAX VMS to monitor a network The mon itoring is very simplistic but has proved useful It periodically tests whether hosts are reachable and reports the results in a full screen display It groups hosts together in common sets If all hosts in a set become unreachable it makes a lot of racket with bells since it assumes that this means that some com mon piece of hardware that supports that set has failed The periodicity of the tests hosts to test and groupings of hosts are controlled with a single configuration file The idea for this program came from the PC IP monitor facility but is an entirely different program with different functionality MECHANISM Reachability is tested using ICMP echo facilities for TCP IP hosts and DECnet reachability information on VAX VMS A DECnet node is considered reachable if it appears in the list of hosts in a show network com mand issued on a routing node CAVEATS BUGS This facility has been found to be most useful when run in a window on a workstation rather than on a terminal connected to a host It could be useful if ported to a PC looks easy using FTP Software s programming libraries but this has not been done Curses is very slow and cpu intensive on VMS but the tool has been run in a window on a VAXstation 2000 Just don t try to run it on a terminal connected to a 11 750 None known NOCTools2 Working Group Page
6. CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY users seymourl cs utk edu NOCTools2 Working Group Page 130 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog PROXYD_SNMP_RESEARCH NAM KEYWORDS ABSTRACT proxyd SNMP proxy agent daemons from SNMP Research control management status bridge Ethernet IP OSI ring star NMS SNMP UNIX library sourcelib SNMP proxy agents may be used to permit the monitoring and controlling of network elements which are otherwise not addressable using the SNMP management protocol e g a network bridge that implements a proprietary management protocol Similarly SNMP proxy agents may be used to protect SNMP agents from redundant network management agents through the use of caches Finally SNMP proxy agents may be used to implement elaborate MIB access policies The proxy agent daemon listens for SNMP queries and commands from logically remote network management stations translates and retransmits those as appropriate network management queries or cache lookups listens for and parses the responses translates the responses into SNMP responses and returns those responses as SNMP messages to the network management station that originated the transaction The proxy agent daemon also emits SNMP traps to identified trap receivers The proxy agent daemon is designed to make the
7. H he RMON MIB standard for Token Ring applications has not yet beenformally released and is not approved NETscout products correspond to the latest draft for Token Ring functions and will be updated as required to conform to the standard as it is approved BUGS None known LIMITATIONS None reported HARDWARE REQUIRED Sun SPARCstation or LattisNet Hub depending upon Model number SOFTWAR T REQUIRED Sun OS 4 1 1 for client and agent SunNet Manager for client NOCTools2 Working Group Page 105 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL NETscout products are available commercially For information regarding your local representative contact Frontier Software Development Inc 1501 Main Street Tewksbury MA 01876 Phone 508 851 8872 Fax 508 851 6956 CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Marketing Frontier Software NOCTools2 Working Group Page 106 RFC 1470 FYI Network Management Tool Catalog Internet Tool C NAME netstat KEYWORDS routing I ABSTRACT format at listens MECHANISM CAVEATS atalog P UNIX VMS free and protocol memory management June 1993 NETSTAT Netstat is a program that accesses network related data structures within the kernel the terminal then provides an ASCII Netstat
8. NAME Netlabs CMOT Agent KEYWORDS manager status IP OSI NMS ABSTRACT Netlabs CMOT code debuted in Interop 89 The CMOT code comes with an Extensible MIB which allows users to add new MIB variables The code currently supports all the MIB variables in RFC 1095 via the data types in RFC 1065 as well as the emerging MIB II which is currently in experimental stage The CMOT has been benchmarked at 100 Management Operations per Second MOPS for a 1 MIPS machine MECHANISM The Netlabs CMOT agent supports the control and moni toring of network resources by use of CMOT message exchanges CAVEATS None BUGS None known LIMITATIONS None reported HARDWARE REQUIRED Portable to most hardware SOFTWARE REQUIRED Portable to most operating systems AVAILABILITY Commercially available from Netlabs Inc 11693 Chenault Street Ste 348 Los Angeles CA 90049 213 476 4070 lam netlabs com Anne Lam NOCTools2 Working Group Page 86 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NETLABS_DUAL_MANAGER NAME Dual Manager KEYWORDS alarm control manager map security status IP OSI NMS SNMP X UNIX library ABSTRACT Netlabs Dual Manager provides management of TCP IP networks using both SNMP and CMOT protoocls Such management can be initiated either through the X Windows user interface both
9. Extensively modified by E The officially maintained source o via anonymous ftp from machine ft in the directory pub network as Also availabl Wassenaar Nikhef H lt e07 nikhef nl gt f this program is available p nikhef nl 192 16 199 1 host tar 2 e in this directory are patched versions of the BIND 4 8 3 nameserver and resolver library which you may need to fully exploit the features of t are not mandatory See the file SR his program EFADME_FIRST although they for details You are kindly requested to report for improvements to the author at and to not re distribute your own New features he whole code with Major overhaul of t Very rigid error checking bugs and make suggestions the given email address modifications to others more verbose error messages rewritten Zone listing section completely It is now possible to do recursi ve listings into subdomains Maintain resource record statist Maintain count of hosts during z Exploit multiple server addresse Option to exploit only primary s Option to exclude info from name NOCTools2 Working Group ics during zone listings one listings s if available erver for zone transfers s that do not reside in a domain Page 182 RFC 1470 FYI Network Management Tool Catalog June 1993 Implement timeout handling during connect and read Bs W
10. CONTACT POINT FOR CHANGES TO NOCTools2 Working Group nd Marketing 573 9197 FAX THIS CATALOG ENTRY users seymourl cs utk edu Page 146 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog SPIDERMONITOR NAME SpiderMonitor P220 K220 and SpiderAnalyzer P320 K320 KEYWORDS alarm analyzer generator traffic DECnet ethernet IP OSI eavesdrop standalone sourcelib ABSTRACT The SpiderMonitor and SpiderAnalyzer are protocol analyzers for performing ethernet LAN diagnostics mon itoring traffic generation and troubleshooting The SpiderMonitor has the capability of capturing every packet on a network and of decoding the first four layers of the OSI protocol model The SpiderAnalyzer has additional software for decoding higher protocol layers Protocol suites understood TCP IP including SNMP and applications layer protocols OSI XNS DEC net and IPX User definable decodes can be written in C with the Microsoft version 5 0 C compiler A decode guide is provided The SpiderAnalyzer supports multiple simultaneous filters for capturing packets using predefined patterns and error states Filter patterns can also trigger on NOT matching 1 or more filters an alarm or a speci fied time The SpiderAnalyzer can also employ TDR Time Domain Reflectometry to find media faults open or short cir cuits or transceiver faults It can t
11. NISM This tool has been designed in such a way that code to process different protocol suites may be easily added As such OSITRACE also has the ability to trace the DOD TCP protocols CAVEA BUGS LIMIT NOCTools2 Worki Bug reports and questions should be addressed to ie tools gateway mitre org Requests to join this mailing list ie tools request gateway mitre org Questions and suggestions can also be directed to Greg Hollingsworth gregh gateway mitre org ATIONS None reported ng Group Page 124 RFC 1470 FYI Network Management Tool Catalog June 1993 HARDWARE REQUIRED No restriction SOFTWARE REQUIRED SunOS 3 4 3 5 or 4 0 X or BSD UNIX like network pro tocols with NETMON installed AVAILABILITY OSITRACE is copyrighted by the MITRE Washington Net working Center but freely distributed as is It re quires retention of a copyright text in code derived from it The distribution is available by anonymous FTP in pub pdutrace tar or pub pdutrace tar Z from aelred 3 ie org NOCTools2 Working Group Page 125 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog OVERVIEW NAME OverVIEW KEYWORDS manager status IP NMS SNMP DOS ABSTRACT Network and internet monitor Performance monitor Fully Graphic user interface server MECHANISM OverVIEW uses SNMP to query routers hosts
12. None known LIMITATIONS None reported NOCTools2 Working Group Page 143 RFC 1470 FYI Network Management Tool Catalog HARDWAR T REQUIRED June 1993 The Motorola 68XXX and the Intel 8088 and X86 supported Other platforms can be supported Contact SNMP Research for details platforms are fully This software has been ported to numerous platforms ns general purpose timesharing systems and embedded hardware in intelligent network aters bridges and routers including workstatio devices such as repe SOFTWARE REQUIRED C compiler AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL This is a commercial from under licens product availabl SNMP Research 3001 Kimberl in Heights Road Knoxville TN 37920 9716 Southwood Sales and Marketing Attn John 615 573 14 CONTACT POINT FOR CHANGES TO THIS CATALOG 34 Voice 615 users seymourl cs utk edu NOCTools2 Working Group ENTRY 573 9197 FAX Page 144 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog SNMPD_SNMP_RESEARCH NAME snmpd an SNMP host gateway agent daemon from SNMP Research KEYWORDS control mananger status bridge Ethernet FDDI IP OSI ring star NMS SNMP DOS UNIX sourcelib ABSTRACT The snmpd agent daemon listens for and responds to network management queries and comma
13. BUGS None reported NOCTools2 Working Group Page 161 RFC 1470 FYI Network Management Tool Catalog June 1993 LIMITATIONS A socket must have the debugging option set for TRPT to operate Another problem is that the output format of TRPT is difficult HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED BSD UNIX or related OS AVAILABILITY Included with BSD and SunOS distributions Available via anonymous FTP from uunet uu net in file bsd sources src etc trpt tar 2Z NOCTools2 Working Group Page 162 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog TTCP NAME TTCP KEYWORDS benchmark generator IP ping UNIX VMS free ABSTRACT TTCP is a traffic generator that can be used for test ing end to end throughput It is good for evaluating TCP IP implementations MECHANISM Cooperating processes are started on two hosts The open a TCP connection and transfer a high volume of data Delay and throughput are calculated CAVEATS Will greatly increase system load BUGS None known LIMITATIONS None reported HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED BSD UNIX or related OS or VMS AVAILABILITY Source for BSD UNIX is available via anonymous FTP from vgr brl mil in file ftp pub ttcp c and from sgi com in file sgi src ttcp c A version of TTCP has also been submitted to the USENET news g
14. HARDWAR T REQUIRED SPARC system SOFTWARE REQUIRED SunOS 4 0 or higher AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL NetMetrix is available from Sales Department Metrix Network Systems Inc One Tara Boulevard Nashua New Hampshire 03062 telephone 603 888 7000 fax 603 891 2796 email info metrix com Government agencies please note that NetMetrix is on the GSA schedule CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Norma Shepperd Marketing Administrator 603 888 7000 norma metrix com NOCTools2 Working Group Page 95 RFC 1470 Internet NAME KEYWORDS ABSTRACT MECHANIS FYI Network Management Tool Catalog June 1993 Tool Catalog NetMetrix Traffic Generator NetMetrix Traffic Generator Debugger Generator Traffic Ethernet FDDI IP Ring Eavesdrop SNMP X UNIX Library The NetMetrix Traffic Generator is a distributed software tool which allows you to simulate network load or test packet dialogues between nodes on your ethernet token ring or FDDI segments The Traffic Generator can also be used to test and validate management station alarms routers bridges hubs etc An easy to use programming interface provides complete flexibility over variables such as bandwidth packet sequence and conditional responses A floating license and the X Window System protocol allows testing of remot
15. Network Working Group R Enger Request for Comments 1470 ANS FYI 2 J Reynolds Obsoletes 1147 TSE Editors June 1993 FYI on a Network Management Tool Catalog Tools for Monitoring and Debugging TCP IP Internets and Interconnected Devices Status of this Memo This memo provides information for the Internet community It does not specify an Internet standard Distribution of this memo is unlimited Abstract The goal of this FYI memo is to provide an update to FYI 2 RFC 1147 1 which provided practical information to site administrators and network managers New and or updated tools are listed in this RFC Additonal descriptions are welcome and should be sent to noctools ntries merit edu Introduction A static document cannot incorporate references to the latest tools nor recent revisions to the older catalog entries To provide a more timely and responsive information source the NOCtools catalog is available on line via the Internet and Usenet news comp networks noctools ftp wuarchive wustl edu doc noctools Because of publication delays and other factors some of the entries in this catalog may be out of date The reader is urged to consult the on line service to obtain the most up to date information The index provided in this document reflects the current contents of the on line documentation The NOCtools2 Working Group of the Internet Engineering Task Force IETF h
16. tcplogger traceroute Tricklet NOCTools2 Working Group Page 27 RFC 1470 FYI Network Management Tool Catalog June 1993 trpt ttcp vrfy Library CMIP Library CMU SNMP Dual Manager NetMetrix Protocol Analyzer NetMetrix Traffic Generator proxyd from SNMP Research SAS CP GI Sourcelib Beholder CMIP Library CMU SNMP EMANATE HyperMIB Interactive Network Map Internet Rover LANWatch MIB Manager from Empire Technologies net_monitor NETMON for Windows NOCOL proxyd from SNMP Research S S S NMP Development Kit NMP Libraries and Utilities from Empire Technologies NMP Libraries and Utilities from SNMP Research SNMP Packaged Agent System from SNMP Research snmpd from SNMP Research SpiderMonitor Tricklet XNETMON from SNMP Research xnetperfmon from SNMP Research Tool Descriptions This section is an updated collection of brief descriptions of tools for managing TCP IP internets Thes ntries are in alphabetical order by tool name The entries all follow a standard format Immediately after the NAME of a tool are its associated KEYWORDS Keywords are terse descriptions of the purposes or attributes of a tool A more NOCTools2 Working Group Page 28 RFC 1470 FYI Network Management Tool Catalog June 1993 detailed description of a tool s purpose and cha in the ABSTRACT section The MECHANISM section racteristics is gi
17. Netlabs Inc 11693 Chenault Street Ste 348 Los Angeles CA 90049 213 476 4070 lam netlabs com Anne Lam NOCTools2 Working Group Page 88 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NETLABS_SNMP_AGENT NAME Netlabs SNMP Agent KEYWORDS manager status IP NMS SNMP ABSTRACT Netlabs SNMP code debuted in Interop 89 where it showed interoperation of the code with several imple mentat an Ext ions on the show floor The SNMP code comes with ensible MIB which allows users to add new MIB variables The code currently supports all the MIB variables in RFC 1066 via the data types in RFC 1065 as wel experi 200 Ma l as the emerging MIB II which is currently in mental stage The SNMP has been benchmarked at nagement Operations per Second MOPS for a 1 MIPS machine MECHANISM The Ne toring exchan CAVEATS None BUGS None k LIMITATIONS tlabs SNMP agent supports the control and moni of network resources by use of SNMP message ges nown None reported HARDWARE REQUIRED Portab le to most hardware SOFTWARE REQUIRED Portable to most operating systems AVAILABILITY Commercially available from Netlabs Inc 11693 Chenault Street Ste 348 Los Angeles CA 90049 213 476 4070 lam netlabs com Anne Lam NOCTools2 Working Group Page 89 RFC 1470 FYI Network Manag
18. information about a circuit and display it on demand MECHANISM Xnetdb uses SNMP or ping to monitor things which its configured to monitor It dynamically builds a network map on its display by querying entities and obtaining IP addresses and subnet masks A configuration file tells xnetdb which IP hosts you want to monitor CAVEATS While ping can be used to monitor hosts more useful results are obtained using SNMP BUGS Bugs and other assorted topics are discussed on the xnetdb mailing list To join send a note to xnetdb request oar net LIMITATIONS None HARDWARE REQUIRED No restrictions NOCTools2 Working Group Page 169 RFC 1470 FYI Network Management Tool Catalog June 1993 SOFTWARE REQUIRED Most any variety of UNIX plus X Windows and or OpenWindows AVAILABILITY Available via anonymous ftp from ftp oar net currently 131 187 1 102 in the directory pub src Special arrangements can be made for sites without direct IP access by sending a note to xnetdb request oar net There are minimal licensing restrictions these are detailed within the package NOCTools2 Working Group Page 170 RFC 1470 Internet NAME KEYWORDS ABSTRACT FYI Network Management Tool Catalog June 1993 Tool Catalog XNETMON_SNMP_RESEARCH XNETMON an X windows based SNMP network management station from SNMP Research alarm ben
19. 84 RFC 1470 FYI Network Management Tool Catalog June 1993 LIMITATIONS This tool is not meant to be a replacement for a more comprehensive network management facility such as is provided with SNMP Eal HARDWARE REQUIRED A host with a network connection SOFTWARE REQUIRED Curses 4 xBSD UNIX socket programming libraries lim ited set and some flavor of TCP IP that supports ICMP echo request ping It has been run on VAX VMS run ning WIN TCP and several flavors of 4BSD UNIX includ ing SunOS 3 2 4 0 and 4 3BSD It could be ported to any platform that provides a BSD style programming li brary with an ICMP echo request facility and curses AVAILABILITY Requests should be sent to the author Dale Smith Asst Dir of Network Services University of Oregon Computing Center Eugene OR 97403 1211 Internet dsmith oregon uoregon edu BITNET dsmith oregon bitnet UUCP hp pcd uoregon dsmith Voice 503 686 4394 With the source code a makefile is provided for most any UNIX box and a VMS makefile compatible with the make distributed with PMDF A VMS DCL command file is also provided for use by those VMS sites without make The author will attempt to fix bugs but no support is promised The tool is copyrighted but free for now NOCTools2 Working Group Page 85 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NETLABS_CMOT_AGENT
20. CONTACT POINT FOR CHANGES TO THIS CATALOG users seymourl cs utk edu NOCTools2 Working Group ENTRY Bir John Southwood Sales and Marketing FAX Page 45 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog ETHERFIND_SUN NAME etherfind KEYWORDS traffic ethernet IP NFS eavesdrop UNIX ABSTRACT Etherfind examines the packets that traverse a network interface and outputs a text file describing the traffic In the file a single line of text describes a single packet it contains values such as protocol type length source and destination Etherfind can print out all packet traffic on the ethernet or traffic for the local host Further packet filtering can be done on the basis of protocol IP ARP RARP ICMP UDP ND TCP and filtering can also be done based on the source destination addresses as well as TCP and UDP port numbers MECHANISM In usual operations and by default etherfind puts the interface in promiscuous mode In 4 3BSD UNIX and related OSs it uses a Network Interface Tap NIT to obtain a copy of traffic on an ethernet interfac CAVEATS None BUGS None known LIMITATIONS Minimal protocol information is printed Can only be run by the super user The syntax is painful HARDWARE REQUIRED Ethernet SOFTWARE REQUIRED SunoOs AVAILABILITY Executable included in Sun OS Netwo
21. Ethernet and Protocol as well as mixed is a key feature of Tekelec s proprietary FDDI analysis of full ring It passively connects to the network and captures 100 percent of the data measures performance and isolates real time problems The simulation option offers full bandwidth load generation that allows you to create and simulate any network condition errors and misformed frames confidence tests al equipment A set of It gives you the ability to inject low simple evaluation of new A ring map feature displays network topology and status of all nodes via the SMT process Monitoring of FDDI Ethernet and Token Ring allows the user to view network status in real time view network node or node pair statistics capture frames control capture using trigger and filter capabilities view real tim frames in decoded format and view the transmitted by each station rate runts collisions byte rate jabbers statistics view captured last frame The following Real Time Network Statistics of FDDI Ethernet and Token Ring networks is displayed CRC align errors frame and Product developers can use the ChameLAN 100 to observe NOCTools2 Working Group Page 33 RFC 1470 FYI Network Management Tool Catalog June 1993 and control various events to help debug their FDDI Ethernet and Token Ring products End users can perform real time monitoring to tes
22. June 1993 NETCK netck is a shar file that contains the sources to build netck a network checker that uses the rstat 3R protocol to gather and print statistics from machines on the network netck is useful to help understand what part of what machines are potential NFS bottlenecks To get this file send email to the request server with the command send unsupported netck Availability same as ETHERCK send email To request legato com subject HELP NOCTools2 Working Group Page 191 RFC 1470 FYI Network Management Tool Catalog June 1993 References 1 Stine R Editor FYI on a Network Management Tool Catalog Tools for Monitoring and Debugging TCP IP Internets and Interconnected Devices FYI 2 RFC 1147 Sparta Inc April 1990 Security Considerations Security issues are not discussed in this memo Authors Addresses Robert M Enger Advanced Network and Services 1875 Campus Commons Drive Suite 220 Reston VA 22091 1552 Phone 703 758 7722 EMail enger reston ans net Joyce K Reynolds Information Sciences Institute University of Southern California 4676 Admiralty Way Marina del Rey CA 90292 Phone 310 822 1511 Email JKREY ISI EDU NOCTools2 Working Group Page 192
23. Motif and Openlook or through OSI Network Management CMIP commands The Dual Manager provides for configuration fault secu rity and performance management It provides extensive map management features including scanned maps in the background It provides simple mechanisms to extend the MIB and assign specific lists of objects to specific network elements thereby providing for the management of all vendors specific MIB extensions It provides an optional relational DBMS for storing and retrieving MIB and alarm information Finally the Dual Manager is an open platform in that it provides several Application Programming Interfaces APIs for users to extend the functionality of the Dual Manager The Dual Manager is expected to work as a TCP IP branch manager under DEC s EMA AT amp T s UNMA and other OSI conformant enterprise management architectures MECHANISM The Netlabs Dual Manager supports the control and moni toring of network resources by use of both CMOT and SNMP message exchanges CAVEATS None BUGS None known LIMITATIONS None reported HARDWARE REQUIRED Runs on Sun 3 and Sun 4s NOCTools2 Working Group Page 87 RFC 1470 FYI Network Management Tool Catalog June 1993 SOFTWARE REQUIRED Available on System V or SCO Open Desktop environments Uses X Windows for the user interfac AVAILABILITY Commercially available from
24. NOCTools2 Working Group Page 31 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog AVATAR SUNSNMPD NAME sunsnmpd KEYWORDS manager snmp sun ABSTRACT sunsnmpd is a fully supported SNMP agent with MIB II support for Sun Sparscations running SunOS 4 1 or higher sunsnmpd supports both SNMP GET and SET operations MECHANISM sundnmpd is a daemon process which starts up at boot time from the rc local file It uses dev kmem to access kernel structures CAVEATS None BUGS None known LIMITATIONS Must be started by a super user HARDWARE REQUIRED Sun Sparcstations AVAILABILITY Available now Site licensing only For more information send e mail to info avatar com NOCTools2 Working Group Page 32 RFC 1470 FYI Network Management Tool Catalog Internet Tool Catalog June 1993 ChameLAN 100 NAME ChameLAN 100 KEYWORDS analyzer benchmark debugger generator map reference status traffic bridge DECnet ethernet FDDI IP OSI NFS ring eavesdrop SNMP X standalone UNIX ABSTRACT for monitoring and simulation of FDDI Token Ring networks simultaneously analysis of multiple topologies topoloies simultaneously the product family hardware guarantees complete real tim networks and network components at the bandwidth of 125 Mbps Tekelec s ChameLAN 100 is a portable diagnostic system
25. SOFTWAR T REQUIRED BSD UNIX or related OS or VMS NOCTools2 Working Group Page 122 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY NSLookup is included in the BIND distribution Available via anonymous FTP from uunet uu net in directory networking ip dns bind Available with 4 xBSD UNIX and related operating systems For VMS available as part of TGV MultiNet IP software package as well as Wollongong s WIN TCP NOCTools2 Working Group Page 123 RFC 1470 Inter NAME KEYWO FYI Network Management Tool Catalog June 1993 GI net Tool Catalog OSITRAC OSITRACI GI RDS traffic OSI eavesdrop UNIX free ABSTRACT MECHA OSITRACE is a network performance tool that displays information about ISO TP4 connections One line of output is displayed for each packet indicating the time source destination length packet type sequence number credit and any optional parameters contained in the packet Numerous options are avail able to control the output of OSITRACE To obtain packets to analyze OSITRACE uses Sun Microsystems Network Interface Tap NIT in SunOS 3 4 3 5 and 4 0 X OSITRACE may also obtain data from the NETMON utility which is described as another tool entry In Sun systems OSITRACE may be easily installed OSI kernel support is not needed nor is any other form of OSI software support
26. Working Group Page 15 RFC 1470 FYI Network Management Tool Catalog Interactive Network Map LANWatch decaddrs by Wellfleet LANVista LANWatch MONET net_monitor NetMetrix Protocol Analyzer ETMON for Windows ETscout niffer NMP Libraries and Utilities from SNMP Research piderMonitor NETMON from SNMP Research netperfmon from SNMP Research N N S S S X X DNS DiG dnsstats doc lamers LANWatch NetMetrix Protocol Analyzer NOCOL EMANATE etherfind herhostprobe therMeter thernet Box II thernet codes therView getethers LAN Patrol LanProbe LANVista LANWatch oO ct fl El zal NOCTools2 Working Group June 1993 Page 16 RFC 1470 FYI Network Management Tool Catalog ZH EY Z Z H lt FS ES T etrix Load Monitor etrix NFS Monitor e e ooo oO585 Eee ORS MON for Windows scout twatch Network Integrator I nfswatch NNStat PacketView I ae a le A 5 f a OME teractive Network Map trix Protocol Analyzer trix Traffic Generator proxyd from SNMP Research SAS CP Sniffer GI SNMP Libraries and Utilities from SNMP Research SNMP Packaged Agent System from SNMP Research snmpd from SNMP Research SpiderMonitor tcpdump XNETMON from SNMP Research xnetperfmon from SNMP Research FDDI EMANATE thernet codes NetMetrix Load Monitor NetMetrix NFS Monitor n
27. addition of dif ferent protocols stacks displays or hardcopy devices relatively easy This is one of the reasons why the initial version supports at least two of each Contri butions of additional drivers in any of these areas will be welcome as well as porting to additional plat forms MECHANISM Net components are pinged by use of ICMP echo and optionally CHAOS status requests and SNMP gets The program initializes itself from static data stored in the file system and therefore does not need to access the network in order to get running unless the static files are network mounted CAVEATS As of publication the tool is in beta release BUGS Several minor nits documented in distribution files Bug discoveries should be reported by email to Bug Map LCS MIT Edu LIMITATIONS See distribution file for an indepth discussion of sys tem capabilities and potential ct HARDWARE REQUIRED An X display is needed for interactive display of the map non graphical interaction is available in non display mode For hardcopy output a PostScript or Tek NOCTools2 Working Group Page 76 RFC 1470 FYI Network Management Tool Catalog June 1993 tronix 4692 printer is required SOFTWARE REQUIRED BSD UNIX or related OS IP ICMP is required CHAOS STATUS and SNMP can be used but are optional X Windows is required for interactive display of the
28. an Internet FTP connection without getting the whole software The retrieval procedure is identical to the below university distribution via FTP The file to retrieve is pub spims dist licenses tar Z There are two different distribution classes depending on requesting organization Universities and non profit organizations To these organizations SPIMS source code is distributed free of charge There are two ways to get the software Li ETP If you have an Internet FTP connection you can use anonymous FTP to sics se 192 16 123 90 and retrieve the fil pub spims dist dist910304 tar 2Z this is a 6MB compressed tar image in BINARY mode Log in as user anonymous and at the password prompt use your complete electronic mail address 2 On a Sun 1 4 inch cartridge tape For mailing a handling fee of US 150 00 will be charged Submit a bank check with the request Do not send tapes or envelopes 2 Commercial organizations These organizations can chose between a license for commercial use or a license for internal research only and no commercial use whatsoever For internal research use only The SPIMS source code is distributed for a one time fee of USS500 00 Organizations interested in the research prototype need to contact us via e mail and briefly motivate why they qualify non commercial use for the NOCTools2 Working Group Page 151 RFC 1470 FYI Network Managem
29. and where all results and diagnostic information are displayed In a NETscout topology it is feasible to have multiple clients active simultaneously within a single network The second category is the Agent a hardware software device which is attached to a specific network segment and which gathers statistical information for that segment as well as providing a window into that segment where network traffic may be observed and gathered for more detailed user analysis A typical network will have multiple segments and multiple agents up to the point of having one agent for each logical network segment ETscout Model 9210 is a software package which when ombined in a Sun SPARCStation in conjunction with unNet Manager running under Open Windows implements he NETscout client function SunNet Manager provides he background operational tools for client operation hile the NETscout software provides pplication specific functions related to RMON MIB upport as well as all software necessary to erform the protocol decode function unNet Manager also implements a network map file hich includes a topographical display of the entire network and is the mechanism for selecting network elements to perform operations ZeEwnNvneasgttnasgym NETscout Model 9215 is a software package that operates in conjunction with SunNet Manager and i T mplements the s
30. breakdown of traffic by ethernet pro tocol type The information in the display can be reported based on packet count or byte count The per cent of broadcast multicast and approximate lost pack ets is reported as well The screen display is updated every three seconds Additionally a real time slid ing history window may be displayed showing ethernet traffic patterns for the last five minutes ENTM can also report IP traffic statistics by packet count or byte count The IP histograms reflect infor mation collected at the TCP and UDP port level includ ing ICMP type code combinations Both the ethernet and IP histograms may be sorted by ASCII protocol port name or by percent value All screen displays can be saved in a file for printing later MECHANISM This utility simply places th thernet controller in promiscuous mode and monitors the local area network traffic It preallocates 10 receive buffers and attempts to keep 22 reads pending on th thernet dev ice CAVEATS BUGS Placing the ethernet controller in promiscuous mode may severly slow down a VAX system Depending on the speed of the VAX system and the amount of traffic on the lo cal ethernet a large amount of CPU time may be spent on the Interrupt Stack Running this code on any pro duction system during operational hours is discouraged Due to a bug in the VAX VMS ethernet 802 device driver IEEE 802 format packets ma
31. can provide reports on the routing table TCP connections TCP and UDP Netstat accesses operating system memory to read the kernel routing tables Kernel data structures can change while netstat is run ning BUGS None known LIMITATIONS None repor ted HARDWARE REQUIR ED No restric tions SOFTWARE REQUIR ED BSD UNIX o AVAILABILITY r related OS or VMS Available via anonymous FTP from uunet uu net in directory bsd sources src ucb UNIX and r as part of Wollongong NOCTools2 Working Group elated operating systems For VMS TGV MultiNet IP software package s WIN TCP avail as wel Available with 4 xBSD lable ll as Page 107 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NETWORK_INTEGRATOR NAME Network Integrator I KEYWORDS map traffic ethernet UNIX ABSTRACT This tool monitors traffic on network segments All information is dumped to either a log file or for real time viewing to a command tool window Data is time stamped according to date and time Logging can continue for up to 24 hours The tool is flexible in data collection and presenta tion Traffic filters can be specified according to header values of numerous protocols including those used by Apple DEC Sun HP and Apollo Bandwidth utilization can be monitored as well as actual load and peak throughput Additi
32. charge though other restric tions may apply tools that are part of an OS distribu tion but not otherwise available are not listed as WELEE ny Library a tool packaged with either an Application Programming Interface API or object level subroutines that may be loaded with programs Sourcelib a collection of source code subroutines upon which developers may construct other tools NOCTools2 Working Group Page 9 RFC 1470 Tools In FYI Network Management Tool Catalog June 1993 dexed by Keywords Following is an index of the most up to date catalog entries sorted by ke ne fE This attri them in al yword which is avail able via ws comp networks noctools tools p wuarchive wust l edu doc noctool index can be used to locate the tools with a particular bute tools are listed under ach keyword that characterizes The keywords and the subordinate lists of tools under them are phabetical order LanPr LANWa MONET NetMe NetMe MO sc COL P T p mp ide ETM xnetm KNNDNNAA A ZAABAOHE Z0 5 LANVi LANWa obe tch trix Load Monitor N for Windows out Libraries and Util trix Protocol Analyzer lities from Libraries and Util from Empire 1 rMonitor lities from Technologies ON from SNMP Research on from Wellfleet sta tch NetMetrix Protocol Analyzer NETsc Pa
33. charge according to the terms set forth in its code and documentation The distribution takes the form of a UNIX tar file Bug reports questions suggestions or complaints may be mailed electronically to snmp dk ptt lcs mit edu although no response in any form is guaranteed Dis tribution via UUCP mail may be arranged by contacting the same address Requests for hard copy documentation or copies of the distribution on magnetic media are never honored NOCTools2 Working Group Page 140 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog SNMP_Libraries_SNMP_RE T n EARCH NAME SNMP Libraries and Utilities from SNMP Research KEYWORDS alarm control manager map security status bridge DECnet Ethernet FDDI IP OSI ring star NMS SNMP DOS UNIX VMS sourcelib ABSTRACT The SNMP Libraries and Utilities serve two purposes 1 to act as building blocks for the construction of SNMP based agent and manager applications and 2 to act as network management tools for network fire fighting and report generation The libraries perform ASN 1 parsing and generation tasks for both network management station applications and network management agent applications These libraries hide the details of ASN 1 parsing and generation from application writers and make it unnecessary for them to be expert in these areas The libraries are very robust w
34. compatible SOFTWAR DOS T REQUIRED AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ANVista is available worldwide For information on a local sales representative contact CXR DIGILOG 900 Business Center Drive Horsham PA 19044 Phone 1 800 DIGILOG FAX 215 956 0108 GSA schedule pricing is honored NOCTools2 Working Group Page 67 RFC 1470 FYI Network Management Tool Catalog June 1993 CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY CXR DIGILOG Help Desk 1 800 DIGILOG Send email to lanvista digilog uucp NOCTools2 Working Group Page 68 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog LANPROBE NAME LanProbe the HP 4990S LanProbe Distributed Analysis System KEYWORDS alarm manager map status traffic ethernet aves drop NMS proprietary ABSTRACT The LanProbe distributed monitoring system performs remote and local monitoring of ethernet LANs in a pro tocol and vendor independent manner LanProbe discovers each active node on a segment and displays it on a map with its adapter card vendor name ethernet address and IP address Additional informa tion about the nodes such as equipment type and physi cal location can be entered in to the data base by the user When the NodeLocator option is used data on the actual location of nodes is automatically entered and the map beco
35. is a tool to verify email addresses and mailing lists In its simplest form it takes an address user domain figures out the MX hosts for domain and issues the SMTP command VRFY at the primary MX host optionally all or at domain itself if no MX hosts exist Without domain it goes to localhost More complex capabilities are recursively expanding forward files or mailing lists and detecting mail forwarding loops Full blown RFC822 address specifications are understood Syntax checking can be carried out either locally or remotely Various options are provided to exploit alternative protocol suites if necessary and to print many forms of verbose output Obvious limitations exist but on average it works pretty well Needless to say you need internet nameserver and SMTP access See the man page and the extensive documentation in the source for further details Please send comments and suggestions to Eric Wassenaar lt e07 nikhef nl gt If you want to receive notification of updates please send an email with the keyword subscribe in the subject or the body to the address lt net dist request nikhef nl gt available as nikhefh nikhef nl pub network vrfy tar Z NOCTools2 Working Group Page 185 RFC 1470 FYI Network Management Tool Catalog June 1993 XNETLOAD NAM GI xnetload ethernet load average display for X SYNOPSIS xnetload toolkitoption scale integer up
36. is retrieved from the local agents by a global manager A program called Statspy performs the data gathering function Essentially statspy reads all packets on an thernet interface and records all information of interest Information of interest is gathered by exa mining each packet and determining if the source or destination IP address is one that is being monitored typically a gateway address If so then the contents of th packet ar xamined to see if they match further criteria Ap tio in sta rog Ha the tis ram called collect performs global data collec It periodically polls various statspy processes domain of interest to retrieve locally logged tical data The NNSTAT distribution comes with several sample awk pro pro MECHANIS Loc dat gra gra M al av ms which process the logged output of the collect m agents statspy processes collect raw traffic ia a promiscuous ethernet tap Statistical fil tered or otherwise reduced data is retrieved from the loc ces al s agents by a global manager the collect pro NOCTools2 Working Group Page 114 RFC 1470 FYI Network Management Tool Catalog June 1993 CAVEATS None BUGS Bug fixes extensions and other pointers are discussed in the electronic mail forum bytecounters To join send a request to bytecounters request venera isi edu Forum exchanges are archived in t
37. map AVAILABILITY The program is Copyright MIT It is available via anonymous FTP with a license making it free to use and dis FTP dis tribute for non commercial purposes FTP to host LCS MIT Edu directory nets The complete tribution is in map tar Z and some short documentation files are there as well as in the dis To tribution Of most interest are ReadMe and Intro be added to the email forum that discusses the software or for other administrative details senda request to MAP Request LCS MIT Edu NOCTools2 Working Group Page 77 RFC 1470 FYI Network Management Tool Catalog Internet Tool Catalog June 1993 MCONNECT E NAME mconnect KEYWORDS status SMTP spoof UNIX ABSTRACT Mconnect allows an interactive session with a remote mailer Mail delivery problems can be diagnosed by connecting to the remote mailer and issuing SMTP com mands directly MECHANISM Opens a TCP connection to remote SMTP on port 25 Pro vides local line buffering and editing which is the distinction between mconnect and a TELNET to port 25 CAVEATS None BUGS None known LIMITATIONS Mconnect is not a large improvement over using a TELNET connection to port 25 HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED BSD UNIX or related OS AVAILABILITY Available with 4 xBSD UNIX and related
38. operating sys tems NOCTools2 Working Group Page 78 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog MIB BROWSER NAME MIB Browser KEYWORDS manager osi cmis x unix free sourcelib ABSTRACT The MIB Browser is an X Windows HCI tool that allows you to browse through the objects in a Management Information Base MIB The browser is generic in that it can connect to a CMIS agent without having any prior knowledge of the structure of the MIB in the agent MECHANISM CMIP is used to transfer the values of attributes between the managed system and the browser CAVEATS None BUGS Unexpected termination of the agent can cause browser to crash ISODE bug HARDWARE REQUIRED Unix workstation has been tested on SUN 3 and SUN 4 architectures SOFTWARE REQUIR ED gt t AVAILABILI TY The ISODE protocol suite BSD UNIX X Windows GNU C Interviews 2 6 The CMIP library and related management tools built upon it known as OSIMIS OSI Management Information Service are publicly available from University College London England via FTP and FTAM To obtain information regarding a copy send email to osimis request cs ucl ac uk or call 44 71 380 7366 NOCTools2 Working Group Page 79 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog MONET NAM
39. supports it Additional features like displaying informational messages in a part of the window automatic resizing window sizes operator acknowledgement via a bell when a new event goes critical are also available ippingmon which monitors the reachability of a site via ICMP ping packets ICMP was preferred over SNMP for many obvious reasons This program can use the default out put from the system s ping program but an accompanying program multiping can ping multiple IP sites at the NOCTools2 Working Group Page 117 RFC 1470 FYI Network Management Tool Catalog June 1993 same time and is preferable for monitoring a large list of sites A site is marked unreachable if a certain number of packets is lost and the severity level is increased each time that the site tests unreachable osipingmon which is similar to the ippingmon module but uses the OSI ping program instead No multiple ping program for OSI sites has been developed at this time The only requirement is that the system s ping program output match the typical BSD IP ping program s output nsmon which monitors the nameservers named on the list of specified hosts It periodically sends an SOA query for the default domain and if the queried nameservers cannot resolve the query then the site is elevated to CRITICAL status tpmon For monitoring the throughput kbits per second to a list of hosts The program conn
40. termined by performing an ICMP echo echo at alternating three second tal number of packets sent and ayed as well as the minimum average trip times in milliseconds for each itionally a trace route function termine the path from the local sys host Once all of the trace rout lled the screen a Snapshot of the ten to a text file Upon exiting the t files can be used to generate a logical network map showing host and gateway intercon nectivity MECHANISM The ICMP echo is p packets The UDP necting to the UDP trace route inform erformed by sending ICMP ECHO REQUEST and TCP echoes are performed by TCP echo ports port number 7 ation is compiled by sending al nating ICMP ECHO R EQUEST packets and UDP packets with very large destina passes Each pac time to live of gateway Then eac This should cause generated by the s packet is sent wit cess continues unt UNREACHABLE is rec remote host has be information NOCTools2 Working Group EXCEEDED error to be generated by the tion UDP port numbers in two ket is initially sent with a TTL 1 This should cause an ICMP TIME first routing h packet is sent with a TTL of 2 an ICMP TIME EXCEEDED error to be econd routing gateway Then each h a TTL of 3 and so on This pro il an ICMP ECHO REPLY or UDP PORT eived This indicates that the en reached and that the trace rout
41. thernet token ring and FDDI segments from a central console M NetMetrix turns the network interface into promiscuous mode to capture packets CAVEATS none BUGS none known LIMITATIONS none HARDWARE REQUIRED SPARC system SOFTWARE REQUIRED NOCTools2 Working Group SunOS 4 0 or higher Page 96 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL NetMetrix is available from Sales Department Metrix Network Systems Inc One Tara Boulevard Nashua New Hampshire 03062 telephone 603 888 7000 fax 603 891 2796 email info metrix com Government agencies please note that NetMetrix is on the GSA schedule CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Norma Shepperd Marketing Administrator 603 888 7000 norma metrix com NOCTools2 Working Group Page 97 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NETMON_MITR GI NAME NETMON and iptrace KEYWORDS traffic IP eavesdrop UNIX free ABSTRACT NETMON is a facility to enable communication of net working events from the BSD UNIX operating system to a user level network monitoring or management program Iptrace is a program interfacing to NETMON which logs TCP IP traffic for performance measurement and gateway monitoring It is easy to build other NETMON based tools using iptrace as a model
42. via anonymous ftp in the aforementioned place handle arguments d lt day gt This flag is used to append a dot day suffix to the LOGFILE Handy where log files are kept around for the last week and contain a day suffix GI f lt logfile gt Change the LOGFILE value altogether W Count up all of the DNS statistics for the whole week V Be verbose t Test mode Do not send mail to the lame delegation hostmasters Availability ftp uu net networking ip dns lamer tar Z or check archie NOCTools2 Working Group Page 181 RFC 1470 FYI Network Management Tool Catalog June 1993 HOST host look up host names using domain server SYNOPSIS host v a t querytype options name server host v a t querytype options 1 domain server host v options H D E G domain host v options C domain host v options A host DESCRIPTION host looks for information about Internet hosts or domains It gets this information from a set of interconnected servers that are spread across the world By default it simply converts between host names and Internet addresses However with the t a and v options it can be used to find all of the information about hosts or domains that is maintained by the domain nameserver FF F FF F FF FF FF F FH OF
43. 1098 Sources are also included for a few simple client applications whose main pu use of the library Examp1 rpose is to il lustrate the e client appl remote SNMP agents in a va riety of modes lications query and generate or collect SNMP traps Code for an example SNMP agent NOCTools2 Working Group that supports a subset of the Internet MIB RFC 1066 is also included MECHANISM The Development Kit facilitates development of SNMP based management applications both clients and agents Example applications execute SNMP management operations according to the values of command line arguments CAVEATS None BUGS Fixed in the next releas LIMITATIONS None reported HARDWARE REQUIRED The SNMP library source code is highly portable and runs on a wide range of platforms SOFTWARE REQUIRED The SNMP library source code has almost no operating system dependencies and runs in a wide range of environments Certain portions of the example SNMP agent code are specific to the 4 3BSD implementation of the UNIX system for the DEC MicroVAX Page 139 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY The Development Kit is available via anonymous FTP from host allspice lcs mit edu The copyright for the Development Kit is held by the Massachusetts Institute of Technology and the Kit is distributed without
44. 2 thernet or a modem connection ProbeView software which runs on a PC AT class works tation presents network information in graphical displays The HP4992A NodeLocator option attaches to the opposite end of the cable from the HP4991A LanProbe segment mon itor It automatically locates the position of nodes on th thernet networks using coaxial cabling schemes CAVEATS BUGS None None known LIMITATIONS None reported HARDWARE REQUIRED P 4991A LanProbe segment monitor HP 4992A NodeLocator for optional capabilities 80386 based PC capable of running MS Windows SOFTWARE REQUIRED HP 4990A ProbeView MSDOS 3 0 or higher and Microsoft Windows 286 2 1 AVAILABILITY A commercial product available from Hewlett Packard Company P O Box 10301 Palo Alto CA 94303 0890 NOCTools2 Working Group Page 70 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog LANWATCH NAME LANWatch KEYWORDS alarm analyzer traffic CHAOS DECnet DNS ethernet IP OSI ring SMTP star eavesdrop DOS library sourcelib ABSTRACT LANWatch 2 0 is an inexpensive powerful and flexible network analyzer that runs under DOS on personal com puters and requires no hardware modifications to either the host or the network LANWatch is an invaluable tool for installing troubleshooting and monitoring local area networks and for developin
45. AME Sniffer KEYWORDS analyzer generator traff NFS OSI ring SMTP star ABSTRACT The Network General Sniffe performing LAN diagnostics tion and troubleshooting analyzer has the capabilit on a network and of decodi OSI protocol model Captu on several different filte levels node addresses pa logically related patterns tination class Users may interpretation capability their own customized proto them to the Sniffer softwa The Sniffer displays netwo performance statistics in Tool Catalog June 1993 SNIFF ic DECnet eavesdrop ethernet IP standalone L r is a protocol analyzer for monitoring traffic genera The Sniffer protocol y of capturing every packet ng all seven layers of the re frame selection is based rs protocol content at lower ttern matching up to 8 of 32 bytes each and des extend the protocol of the Sniffer by writing col interpreters and linking re r rk traffic information and real time in user selectabl formats Numeric station symbolic names or manufact activities measured includ accepted and buffer use additional counters for ac network Network activity frames second Kbytes seco bandwidth utilization Data collection by the Sni or stored to disk in eithe format Protocol suites understood Banyan Vines IBM Token Ri Net 3Com 3 DECnet TCP applications layer protoco TELNET X Windows for X SUN proprietary protocols
46. Also supports SGMP CMIP CMOT Event logging TFTP boot gateways and PING and is committed to The SNMP queries allow dynamic determina tion of configuration and state Sets of related queries allows monitoring of congestion and faults The package CAVEATS BUGS None known LIMITATIONS 256 nodes 256 nets HARDWARE REQUIRED 80286 640K EGA mouse SOFTWARE REQUIRED MS DOS agents for monitored devices OverVIEW Network kernel hardware and software are sold as an integrated Mouse driver SNMP AVAILABILITY Fully supported product of Proteon Inc For more information contact Proteon Inc Phone 508 898 2800 2 Technology Drive Fax 508 366 8901 Westborough MA 01581 Telex 928124 NOCTools2 Working Group Page 126 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog PING NAME ping KEYWORDS generator status IP ping DOS UNIX VMS free ABSTRACT Ping is perhaps the most basic tool for internet management It verifies that a remote IP implementa tion and the intervening networks and interfaces are functional It can be used to measure round trip delay Numerous versions of the ping program exist MECHANISM Ping is based on the ICMP ECHO_REQUEST message CAVEATS If run repeatedly ping could generate high system loads BUGS None known LIMITATIONS PC TCP s p
47. C not by the LADDIS Group NOCTools2 Working Group Page 62 RFC 1470 FYI Network Management Tool Catalog June 1993 To obtain the PRE LADDIS Beta test software an individual must 1 Request the SPEC PRE LADDIS beta test License by electronic mail to spec preladdis beta test riscee pko dec com with a subject line of Request SPEC PRE LADDIS Beta Test License 2 Print a hardcopy of the license and sign 3 Attach a cover letter written on the individual s company letterhead requesting the PRE LADDIS Beta Test Kit 4 U S Mail the signed license and cover letter to SPEC PRE LADDIS Beta Test c o NCGA 2722 Merril Drive Suite 200 Fairfax VA 22031 After completing these steps the SPEC PRE LADDIS beta test kit will be emailed to the requestor from riscee pko dec com The licens is requested to direct beta test comments via electronic mail to spec preladdis comments riscee pko dec com This alias will forward all comments to the SPECSFS mailing list which includes the LADDIS Group Note that PRE LADDIS is ONLY available through electronic mail and ONLY through the process listed above in steps 1 4 If you do not have internet email available to you which is unlikely if you are receiving THIS email you must arrange delivery of PRE LADDIS through some email capable part of your organizati
48. D CONTACT POINT FOR INFORMATION ABOUT THIS TOOL Commercially available from Paramax Systems Corporation 5151 Camino Ruiz Camarillo California 93011 6004 805 987 6811 Peter Vazzana CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Paramax Systems Corporation 5151 Camino Ruiz Camarillo California 93011 6004 805 987 6811 Nina Lewis lt nina cam paramax com gt NOCTools2 Working Group Page 165 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog WOLLONGONG MANAGER NAME Management Station Release 3 0 KEYWORDS manager snmp xX sun dec dos ABSTRACT Management Station is a network management software product that supports SNMP Release 3 0 implements a distributed network management architecture that helps solve the scalability and reliability limitations of using a single cpu for all SNMP management tasks Additionally there are many applications provided that are all user configurable The following applications and their functionality is listed below General Info X Windows 11 4 based implemented with OSF Motif 1 1 1 toolkit X Windows interface for all configuration files Most applications have verbose mode for display of SNMP PDU traffic On line help and Reference manual pages ANSI C compliant Network Management Daemon Responsible for device discovery trap alarm management and fault monitoring for the net
49. E MONET the Hughes LAN Systems SNMP Network Management Center formerly the Hughes LAN Systems 9100 software product runs on a Sun SPARCStation hardware platform KEYWORDS control graphics network topology manager routing status traffic bridge configuration performance alarm management relational database mib parser for RDBMS intelligent hub management DECnet ethernet IP NMS SNMP UNIX ABSTRACT Monet provides the capability to manage and control SNMP based networking products from any vendor including those from Hughes LAN Systems A comprehensive relational database manages the data and ensures easy access and control of resources throughout the network Monet provides multivendor management through its advanced Mib master MIB parser that allows the parsing of enterprise MIBs ASN 1 format per RFC1212 directly into the RDBMS for use by Monet s applications Major features include Remote access with X Use of the X Motif user interface enabling remote access to the all applications Database Management Stores and retrieves the information required to administer and configure the network It can be used to Store and recall configuration data for all devices Provide availability history for devices Assign new internet addresses Provide administrative information such as physical location of devices responsible person maintenance history asset data hardware softw
50. EQUIRED No restrictions SOFTWAR T REQUIRED BSD UNIX or related OS or VMS AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL Available via anonymous FTP from uunet uu net in directory bsd sources src etc Available with 4 xBSD UNIX and related operating systems For VMS available as part of TGV MultiNet IP software package as well as Wollongong s WIN TCP and Process Software Corporation s TCPware for VMS CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY This entry maintained by the NOCtools editors Send email to noctools request merit edu NOCTools2 Working Group Page 30 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog AVATAR SNMP TOOLKIT NAME SNMP Application Development Toolkit KEYWORDS manager SNMP sourcelib ABSTRACT snmpapi is an api toolkit for developing SNMP applications and agents The toolkit is simple and very fast that can be used for any type of application It is very well suited for embedded systems such as bridges or routers An example MIB II agent for Sun Sparcstations is provided snmpapi is distributed in source form only MECHANISM snmpapi is a library of C functions CAVEATS None BUGS None known LIMITATIONS None HARDWARE REQUIRED No restrictions AVAILABILITY Available now For more information send e mail to info avatar com
51. LITY Hammer and anvil are copyrighted though free Copies are available from pub eutil on husc 6 harvard edu NOCTools2 Working Group Page 54 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NAME hopcheck KEYWORDS routing IP ABSTRACT HOPCHECK E ping DOS free Hopcheck is a tool that lists the gateways traversed by packets sent from the hopcheck resident PC to a desti nation Hopcheck uses the same mechanism as traceroute but is for use on IBM PC compatibles that have ethernet connections age that is radio Ka9q packages suc Hopchec known as independently of othe Phil Karn k is part of a larger TCP IP pack ka9q that is for use with packet can coexist on a PC with other TCP IP h as FTP Inc s PC TCP but must be used r packages Ka9q was written by Hopcheck was added by Katie Stevens dkstevens ucdavis edu Unlike traceroute which requires a UNIX kernel mod hopcheck will run on the standard unmodified ka9q release MECHANISM CAVEATS See the description in traceroute See the description in traceroute BUGS None known HARDWARE REQUIRED IBM PC compatible with ethernet network interface card ethernet card supported through FTP spec packet driver SOFTWARE REQUIRED DOS AVAILABILITY Free for radio amateurs and educational institutions others should contact Phil K
52. LOPMENTS email address Possible future enhancements are 1 Event logging 2 Addition of an automated troubleshooting mechanism when a site severity level level reaches a particular 3 SNMP monitors to watch the state of certain vari ables interface errors packet rate route state changes AUTHOR The software was developed at JvNCnet over a period of time The overall design and initial development was done by Vikas Aggarwal and Sze Ying Wuu Additional development is being done and coordinated by Vikas Aggarwal vikas jvnc net the file COPYRIGHT for full Copyright 1992 JvNCnet S details n T iF ALSO nocol 1 nocol 3 tpmon 8 NOCTools2 Working Group tsmon 8 nsmon 8 Page 119 RFC 1470 FYI Internet Tool Catalog Network Management Tool Catalog NPRV NAM NPRV IP Node Protocol Reachability Verifier KEYWORDS map routing status IP ping VMS free ABSTRACT NPRV is a full scr runs under VAX VMS through a user def names reachability is de UDP echo and a TCP intervals The to received are displ and maximum round type of echo Add is performed to de tem to the remote information has fi screen can be writ utility these tex and verify a node s reachability n keypad oriented utility that It allows the user to quickly scan ined list of IP addresses or domain The node s
53. LanProbe mconnect MONET net_monitor Netlabs CMOT Agent Netlabs SNMP Agent NETscout NNStat NOCOL NPRV OverVIEW ping ping from UCB proxyd from SNMP Res SAS CPE SNMP Development Kit SNMP Libraries and U SNMP Libraries and U SNMP Packaged Agent PSI SNMP snmpd from Empire Te snmpd from SNMP Rese TokenVIEW Tricklet vrfy XNETMON by SNMP Rese xnetmon by Wellfleet xnetperfmon xup by Wellfleet NOCTools2 Working Group Network Management earch tilities from Empire Technologies tilities from SNMP System chnologies arch arch Tool Catalog Research June 1993 Page 14 RFC 1470 FYI Network Management Tool Catalog June 1993 ct herfind herMeter hernet Box II herView getethers LAN Patrol LanProbe LANVista LANWatch ct HH mo ct ct Metrix Load Monitor Metrix NFS Monitor Metrix Protocol Analyzer Metrix Traffic Generator MON by Mitre 22 22 Z Z netwatch Network Integrator I nfswatch nhfsstone NNStat ositrace PacketView Sniffer SpiderMonitor spray tcpdump tcplogger trpt EECH XNETMON by SNMP Research decaddrs by Wellfleet EMANATE MIB Manager from Empire Technologies MONET proxyd by SNMP Research SAS CPE SNMP Libraries and Utilities from SNMP Research SNMP Packaged Agent System snmpd from SNMP Research XNETMON from SNMP Research NOCTools2
54. Library GNU C g AVAILABILITY The CMIP library and related management tools built upon it known as OSIMIS OSI Management Information Service are publicly available from University College London England via FTP and FTAM To obtain information regarding a copy send email to osimis request cs ucl ac uk or call 44 71 380 7366 NOCTools2 Working Group Page 49 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog GETETHERS NAME getethers KEYWORDS Traffic Ethernet Ping UNIX Free ABSTRACT Getethers runs through all addresses on an ethernet segment a b c 1 to a b c 254 and pings each address and then determines th thernet address for that host It produces a list in either plain ASCII the file format for the Excelan Lanalyzer or the file format for the Network General Sniffer of hostname ethernet address pairs for all hosts on the local nework The plain ASCII list optionally includes the vendor name of the ethernet card in each system to aid in the determination of the identity of unknown systems MECHANISM Getethers uses a raw IP socket to generate ICMP echo requests and receive ICMP echo replies and then xamines the kernel ARP table to determine th ethernet address of each responding system CAVEATS Assumes that the ethernet it is looking at is either a Class C IP network or part of a Class B IP netw
55. OCTools2 Working Group ed UNIX Page 112 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY Available via anonymous FTP from bugs cs wisc edu Alternatively Legato Systems will provide the program free of charge if certain conditions are met Send name and both email and U S mail addresses to Legato Systems Inc Nhfsstone 260 Sheridan Avenue Palo Alto California 94306 A mailing list is maintained for regular information and bug fixes nhfsstone legato com or uunet legato com nhfsstone To join the list nhfsstone request legato com or uunet legato com nhfsstone request NOCTools2 Working Group Page 113 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NNSTAT NAME NNS KEYWORDS UNI ABSTRACT A NNS 1 s s BE a t w net tat X tat ern ate tis wor manager status traffic ethernet IP eavesdrop NMS free is a collection of programs that provides an et statistic collecting capability The NNStat gy for statistic collection is to collect traffic tics via a promiscuous ethernet tap on the local ks versus instrumenting the gateways If all traffic entering or leaving a network or set of net wor sta ks tis traverses a local ethernet then by stationing a tic gathering agent on each local network a pro file of network traffic can be gathered Statistical data
56. OCTools2 Working Group Page 110 RFC 1470 FYI Network Management Tool Catalog June 1993 CAVEATS Because the NFS file handle is a non standard server private piece of data nfswatch must be modified to understand file handles used by various implementations It currently knows about the SunOS 4 x and Ultrix file handle formats BUGS Does not monitor FDDI interfaces It should be a simple change but neither author has access to a system with FDDI interfaces for testing LIMITATIONS Up to 256 exported file systems and 256 individual files can be monitored at any time Only NFS requests are counted the NFS traffic generated by a server in response to those packets is not counted HARDWARE REQUIRED Any Ultrix system VAX or DEC RISC hardware SOFTWARE REQUIRED Ultrix release 4 0 or later For Ultrix 4 1 may require the patched if_ln o kernel module available from Digital s Customer Support Center AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL Copyrighted but freely distributable Available via anonymous FTP from harbor ecn purdue edu ftp erg sri com and gatekeeper dec com as well as numerous other sites around the Internet The current version is Version 3 0 from January 1991 Contact points Dave Curry Jeff Mogul Purdue University Digital Equipment Corp Engineering Computer Network Western Research Laboratory 1285 Electrical Enginee
57. ON for Windows NETscout proxyd from SNMP Research S S S s niffer NMP Libraries and Utilities from SNMP Research NMP Packaged Agent System from SNMP Research nmpd from SNMP Research NOCTools2 Working Group Page 20 RFC 1470 FYI Network Management Tool Catalog June 1993 XNETMON from SNMP Research xnetperfmon from SNMP Research Curses Eagle Internet Rover net_monitor nfswatch NOCOL PSI SNMP Eavesdrop etherfind thernet Box II therView AN Patrol LANVista ANWatch E Z H Z tMetrix Load Monitor tMetrix NFS Monitor tMetrix Protocol Analyzer tNetrix Traffic Generator MON from Mitre scout twatch fswatch NStat OSITRACE PacketView Sniffer SpiderMonitor tcplogger trpt ooo oO FE oO PAA pe ey A A ea ENE NMS CMU SNMP decaddrs from Wellfleet Dual Manager EMANATE therMeter thernet Box II getone from Wellfleet Interactive Network Map MONET w m NOCTools2 Working Group Page 21 RFC 1470 FYI Network Management Tool Catalog June 1993 Netlabs CMOT Agent Netlabs SNMP Agent NETMON for Windows NETscout NNStat NOCOL OverVIEW proxyd from SNMP Research SNMP Development Kit SNMP Libraries and Utilities from SNMP Research SNMP Packaged Agent System from SNMP Research PSI SNMP snmpd from Empire Technologies snmpd from SNMP Research TokenVIEW XNETMON from SNMP Research xnetmon from We
58. P Distribution includes source code for an SNMP agent several SNMP client applications an ASN 1 library and supporting documentation The agent compiles into about 10 KB of 68000 code The distribution includes a full agent that runs ona Kinetics FastPath2 3 4 and is built into the KIP appletalk ethernet gateway The machine independent portions of this agent also run on CMU s IBM PC AT based router The applications are designed to be useful in the real world Information is collected and presented ina useful format and is suitable for everyday status monitoring Input and output are interpreted symbolically The tools can be used without referencing the RFCs MECHANISM SNMP CAVEATS None BUGS None reported Send bug reports to sw0l snmp andrew cmu edu swOl is ess double you zero ell LIMITATIONS None reported HARDWARE REQUIRED The KIP gateway agent runs on a Kinetics FastPath2 3 4 Otherwise no restrictions SOFTWARE REQUIRED The code was written with efficiency and portability in mind The applications compile and run on the follow NOCTools2 Working Group Page 36 FYI Network Management Tool Catalog June 1993 ing systems IBM PC RT running ACIS Release 3 Sun3 50 running SUNOS 3 5 and the DEC microVax running Ultrix 2 2 They ar xpected to run on any system with a Berkeley socket interface AVAILABILITY This distribution is copy
59. Page 52 RFC 1470 FYI Network Management Tool Catalog June 1993 LIMITATIONS None reported HARDWARE REQUIRED Distributed and supported for Sun 3 systems SOFTWARE REQUIRED Distributed and supported for SunOS 3 5 and 4 x AVAILABILITY Commercial product of Wellfleet Communications Inc 12 DeAngelo Drive Bedford MA 01730 2204 617 275 2400 NOCTools2 Working Group Page 53 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog HAMMER_ANVIL NAME hammer amp anvil KEYWORDS benchmark generator IP DOS free ABSTRACT Hammer and Anvil are the benchmarking programs for IP routers Using these tools gateways have been tested for per packet delay router generated traffic over head maximum sustained throughput etc MECHANISM Tests are performed on a gateway in an isolated testbed Hammer generates packets at controlled rates It can set the length and interpacket interval of a packet stream Anvil counts packet arrivals CAVEATS BUGS Hammer should not be run on a live network None reported LIMITATIONS HARDWARE REQUIRED Early versions of hammer could not produce inter packet intervals shorter than 55 usec Hammer runs on a PC AT or compatible and anvil requires a PC or clone Both use a Micom Interlan NI5210 for LAN interface SOFTWARE REQUIRED MS DOS AVAILABI
60. SNMP Libraries and Utilities from SNMP Libraries and Utilities from SNMP Packaged Agent System snmpd from Empire Technologies tokenview Tricklet Wollongong Manager XNETMON from SNMP Research XNETMON from Wellfleet xnetperfmon T MONET e e cd ct ct ct e Map decaddrs by Wellfleet Dual Manager NOCTools2 Working Group B Manager from Empire Technologies Empire Technologies SNMP Research June 1993 Page 12 RFC 1470 FYI Network Management Tool Catalog June 1993 etherhostprobe EtherMeter Interactive Network Map LanProbe NETMON for Windows Network Integrator I NPRV SNMP Libraries and Utilities from SNMP Research XNETMON by SNMP Research XNETMON by Wellfleet Reference EMANATE thernet codes HyperMIB MIB Manager from Empire Technologies XNETMON Routing arp decaddrs by Wellfleet etherhostprobe getone by Wellfleet hopcheck MONET net_monitor NETMON for Windows netstat NPRV ping from UCB query traceroute Security Computer Security Checklist Dual Manager Eagle EMANATE LAN Patrol SNMP Libraries and Utilities from SNMP Research XNETMON by SNMP Research xnetperfmon NOCTools2 Working Group Page 13 RFC 1470 FYI Status Beholder CMIP Library CMU SNMP DiG dnsstats doc Dual Manager EMANATE fping geton host Internet Rover lamers
61. T MECHANIS CAVEATS BUGS FYI Network Management Tool Catalog June 1993 T n Tool Catalog SNMP_PACKAGED_AGENT_SNMP_RESEARCH SNMP Packaged Agent System an SNMP host gateway agent daemon including a complete protocol stack and runtime environment required to support an SNMP Agent from SNMP Research control manager status bridge Ethernet FDDI IP OSI ring star NMS SNMP DOS standalone UNIX sourcelib The snmpd agent daemon listens for and responds to network management queries and commands from logically remote network management stations The agent daemon also emits SNMP traps to identified trap receivers The agent daemon is designed to make the addition of additional vendor specific variables a straight forward task The snmpd application comes complete with source code including a powerful set of portable libraries for generating and parsing SNMP messages and a set of command line utilities The Packaged Agent System is designed to aid the hardware manufacturer who is not experienced with the TCP IP protocol suite A lightweight non preemptive scheduler tasking system for faster execution and less impact on slow CPUs is included in the package Development environment is either MS DOS or UNIX M Network management variables are made available for inspection and or alteration by means of the Simple Network Management Protocol SNMP None
62. T o iozone iozone c see below tested Borland Microsoft C may need to define _POSIX_SOURC 2 2 cc DSGI o iozone iozone c same as MIPS 1 call the source file IOZON GI H Q 2 C IN IOZONEC IOZON 3 RUN IOZONE command via this DCL command EXE NOCTools2 Working Group RFC 1470 FYI Network Management Tool Catalog June 1993 this lets you pass the command line arguments to IOZON SOFTWARE REQUIRED GI OS as shown in the hardware listing above AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL Author Availability This tool has been posted to comp sources misc Bill Norcott 1060 Hyde Avenue San Jose CA 95129 norcott_bill tandem com It is available from the usual archive sites Program can be located using ARCHIE or other serve rs CONTACT POINT FOR CHANGES TO THIS CATALOG This entry is maintained by the noctools editors Send email to noctools request merit edu NOCTools2 Working Group ENTRY Page 60 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog LADDIS NAME LADDIS KEYWORDS benchmark generator NFS spoof unix free ABSTRACT LADDIS A Multi Vendor and Vendor Neutral SPEC NFS Benchmark Bruce Nelson LADDIS Group amp Auspex Systems Over the past 24 months engineers from Legato Auspex Data General DEC In
63. TL for the ICMP error reply which delays identification Sending datagrams with the source route option will cause some gateways to crash It is considered poor form to repeat this behavior NOCTools2 Working Group Page 159 RFC 1470 FYI Network Management Tool Catalog June 1993 BUGS None known LIMITATIONS Most versions of UNIX have errors in the raw IP code that require kernel mods for the standard version of traceroute to work A version of traceroute exists that runs without kernel mods under SunOS 3 5 see below but it only operates over an ethernet inter face HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED BSD UNIX or related OS or VMS AVAILABILITY Available by anonymous FTP from ftp ee lbl gov in file traceroute tar Z It is also available from uc msc umn edu A version of traceroute that supports Loose Source Record Route along with the source code of the required kernel modifications and a Makefile for installing them is available via anonymous FTP from zerkalo harvard edu in directory pub file traceroute_pkg tar 2Z A version of traceroute that runs under SunOS 3 5 and does NOT require kernel mods is available via anonymous FTP from dopey cs unc edu in file ftp pub traceroute tar Z For VMS traceroute is available as part of TGV Mul tiNet IP software package NOCTools2 Working Group Page 160 RFC 1470 FYI Network Management Tool Ca
64. Tool Catalog June 1993 The keywords used to describe the general management area or functional role of a tool are Alarm a reporting logging tool that can trigger on specific events within a network Analyzer a traffic monitor that reconstructs and interprets pro tocol messages that span several packets Benchmark a tool used to evaluate the performance of network com ponents Control a tool that can change the state or status of a remote network resource Debugger a tool that by generating arbitrary packets and moni toring traffic can drive a remote network component to various states and record its responses Generator a traffic generation tool Manager a distributed network management system or system com ponent Map a tool that can discover and report a system s topology or configuration Reference a tool for documenting MIB structure or system confi guration Routing a packet route discovery tool Security a tool for analyzing or reducing threats to security Status a tool that remotely tracks the status of network com ponents NOCTools2 Working Group Page 6 RFC 1470 FYI Network Management Tool Catalog June 1993 Traffic a tool that monitors packet flow The keywords used to identify the network resources or components that a tool manages are Bridge a tool for controlling or monitoring LAN bridges CHAOS a tool for controlling
65. UGS LIMIT S None Normal operation is completely passive making LAN Patrol transparent to the network None known ATIONS LAN Patrol can monitor up to 10 000 packets sec on an AT class PC and is limited to monitoring a maximum of 1024 stations for intervals of up to 30 days Because LAN Patrol operates at the physical level it will only see traffic for the segment on which it is installed it cannot see traffic across bridges NOCTools2 Working Group Page 64 RFC 1470 FYI Network Management Tool Catalog June 1993 HARDWARE REQUIRED Computer IBM PC XT AT PS 2 Model 30 or compatible Requires 512K memory and a hard drive or double sided disk drive Display Color or monochrome text Color display allows color coding of traffic information Ethernet StarLAN LattisNet or StarLAN 10 network interface card SOFTWARE REQUIRED PC DOS MS DOS version 3 1 or greater AVAILABILITY LAN Patrol many be purchased through network dealers or directly from Legend Software Inc Phone 201 227 8771 FAX 201 906 1151 NOCTools2 Working Group Page 65 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog LANVista NAME LANVista KEYWORDS analyzer benchmark debugger generator manager traffic DECnet Ethernet IP OSI Ring Eavesdrop Proprietary DOS Standalone ABSTRACT CXR Digilog s LANVista family of pro
66. acket length and TTL values are recorded Customized use of the TCP option field allows the detection of lost or duplicate pack ets MECHANISM CAV BUGS Routines of 4 3BSD UNIX in the netinet directory have been modified to append information to a log in memory The log is read continuously by a user process and written to a file A TCP option has been added to start the logging of a connection Lots of post processing software has been written to analyze the data EATS None None known LIMITATIONS To get a log at both ends of the connection the modi fied kernel should be run at both the hosts All connections are logged in a single file but software is provided to filter out the record of a sin gle connection HARDWARE REQUIRED No restrictions NOCTools2 Working Group Page 156 RFC 1470 FYI Ne SOFTWARE R EQUIR ED 4 3BSD UNIX AVAILABILITY Free although a 4 3BSD licens twork Management Tool Catalog as modified for this tool Olafur Gudmundsson ogud cs umd edu NOCTools2 Working Group is required June 1993 Contact Page 157 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog TOKENVIEW_PROTEON NAME TokenVIEW KEYWORDS control manager status ring NMS proprietary DOS ABSTRACT Network Management tool for 4 16 Mbit IEEE 802 5 Tok
67. addition of additional vendor specific variables a straight forward task The proxy application comes complete with source code including a powerful set of portable libraries for generating and parsing SNMP messages and a set of command line utilities MECHANISM Network management variables are made available for inspection and or alteration by means of the Simple Network Management Protocol SNMP NOCTools2 Working Group Page 131 RFC 1470 FYI Network Management Tool Catalog June 1993 CAVEATS None BUGS None known LIMITATIONS This application is a template for proxy application writers Only a few of the many LanBridge 100 variables are supported HARDWARE REQUIRED System from Sun Microsystems Incorporated SOFTWARE REQUIRED Sun OS 3 5 or 4 x AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL This is a commercial product available under licens from SNMP Research 3001 Kimberlin Heights Road Knoxville TN 37920 9716 Attn John Southwood Sales and Marketing 615 573 1434 Voice 615 573 9197 FAX CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY users seymourl cs utk edu NOCTools2 Working Group Page 132 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog QUERY NAME query ripquery KEYWORDS routing IP spoof UNIX free ABSTRACT Query allows remote viewing of a gateway s routing tabl
68. amically reconfigures an agent s MIB without having to recompile relink or restart the agent An EMANATE capable SNMP agent can support zero one or many subagents and dynamically reconfigure to connect or disconnect those subagents MIBs The EMANATE system consists of several logically independent components and subsystems o Master SNMP agent which contains an API to communicate with subagents o Subagents which implement various MIBS o Subagent Developer s Kit which contains tools to assist in the implementation of subagents o EMANATE libraries which provide the API for the subagent MECHANISM A concise API allows a standard means of communication between the master and subagents System dependent mechanisms are employed for transfer of information between the master and subagents CAVEATS None BUGS None known LIMITATIONS None reported NOCTools2 Working Group Page 44 RFC 1470 FYI Network Management Tool Catalog HARDWAR T REQUIRED Multiple platforms including PC s work June 1993 stations hosts and servers are supported Contact SNMP Research for more details SOFTWAR T REQUIRED C compiler AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL from SNMP Research 3001 Kimberlin Heights Road Knoxville TN 37920 9716 A This is a commercial product availabl under licens 615 573 1434 Voice 615 573 9197
69. and TGV Incorporated s MultiNet version 233 0 AVAILABILITY For executables only FTP to the ANONYMOUS account password GUEST on CCC NMFECC GOV 128 55 128 30 and GET the following files ANONYMOUS PROGRAMS NPRV NPRV DOC ASCII text ANONYMOUS PROGRAMS NPRV NPRV EXE binary ANONYMOUS PROGRAMS NPRV SAMPLE IPA ASCII text Page 121 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NSLOOKUP NAME nslookup KEYWORDS status DNS BIND UNIX VMS free ABSTRACT Nslookup is an interactive program for querying Internet Domain Name System DNS servers It is essentially a user friendly front end to the BIND resolver library routines This program is useful for converting a hostname into an IP address and vice versa determining the name servers for a domain listing E D he contents of a domain displaying any type of NS record such as MX CNAME SOA etc diagnosing name server problems By default nslookup will query the default name server but you can specify a different server on the command line or from a configuration file You can also specify different values for the options that control the resolver routines MECHANISM The program formats sends and receives DNS RFC 1034 queries CAVEATS None BUGS None known LIMITATIONS None known HARDWAR T REQUIRED No restrictions
70. are versions etc Full function SQL interface User customizable RDBMS report generation NOCTools2 Working Group Page 80 FYI Network Management Tool Catalog June 1993 Graphics and Network Mapping The Graphics modul nables the user to view the nodes in the network as dynamic icons in heirarchical maps The network is represented by these heirarchical maps Though there is a library of device icons cities and geographical maps included the user has access to a graphics editor that allows customizing and the creation of new icons and maps A Device s icon may be selected to Register deregister the device Access the open alarms and acknowledge faults for the selected device Ping the device to determine accessibility Draw graphs of any of the device s numeric MIB objects either the values as retrieved in real time or the history values previously stored in the RDBMS by the Performance Manager Telnet to the device Customize the graphical dynamics color fill rotation etc of the device s icon by associating them to the values of the device s MIB objects Configuration Management Retrieves configuration information from SNMP devices Stores device parameters in the RDBMS with common sets of parameters used for multiple devices or for multiple ports on a device stored only once in the RDBMS C D onfigures devices from the parameters sto
71. arn karn ka9q bellcore com Available via anonymous FTP at ucdavis edu in the directory dist nethop NOCTools2 Working Group Page 55 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog INTERNET ROVER NAME Internet Rover KEYWORDS status IP SMTP curses ping spoof UNIX free sourcelib ABSTRACT Internet Rover is a prototype network monitor that uses multiple protocol modules to test network functional ity This package consists of two primary pieces of code the data collector and the problem display There is one data collector that performs a series of network tests and maintains a list of problems with the network There can be many display processes all displaying the current list of problems which is useful in a multi operator NOC The display task uses curses allowing many terminal types to display the problem fil ither locally or from a remote site Full source is provided The data collector is easily configured and extensible Contri butions such as additional protocol modules and shell script extensions are welcome MECHANISM A configuration file contains a list of nodes addresses NodeUp protocol test ping in most cases and a list of further tests to be performed if the node is in fact up Modules are included to test TELNET FTP and SMTP If the configuration contains a test that isn t recognized a generic
72. ary of lt summary of MECHANISM lt high FYI name gt word Al gt word Cl gt El gt word leve level lt high lt high level CAVEATS lt any lt any lt any BUGS lt any lt any lt any LIMITATIONS lt any lt any lt any warnings warnings warnings warnings warnings warnings warnings warnings warnings HARDWARE RE OU IRED lt lt lt NOCTools2 Workin g Group Network lt keyword A2 gt lt keyword B1 gt lt keyword B2 gt lt keyword C2 gt lt keyword D1 gt lt keyword D2 gt lt keyword the tool the tool the tool technical technical technical Or or Or or or or or Or or Management Tool Catalog E2 gt detail detail detail cautions gt cautions gt cautions gt cautions gt cautions gt cautions gt cautions gt cautions gt cautions gt June 1993 lt keyword An gt lt keyword Bn gt pee lt keyword Cn gt lt keyword Dn gt pee lt kKeyword E lll ll lll lll 111 A s of how it works gt s of how it works gt s of how it works gt list any hardware requirements gt list any hardware requirements gt list any hardware requirements gt Page 4 RFC 1470 FYI Network Management Tool Catalog June 1993 SOFTWARE REQUIRED lt list any software requirements gt lt l
73. as compiled this revised catalog Future revisions will be incorporated into the on line NOCtools catalog The reader is encouraged to submit new or revised entries for near immediate electronic publication NOCTools2 Working Group Page 1 RFC 1470 FYI Network Management Tool Catalog June 1993 The tools described in this catalog are in no way endorsed by the IETF For the most part we have neither evaluated the tools in this catalog nor validated their descriptions Most of the descriptions of commercial tools have been provided by vendors Caveat Emptor Acknowledgements This catalog is the result of work on the part of the NOCTools2 Working Group of the User Services Area of the IETF The following individuals made especially notable contributions Chris Myers Darren Kinley Gary Malkin Mohamed Ellozy and Mike Patton Current Postings The current contents of the NOCtools catalog may be retrieved via anonymous FTP from wuarchive wustl edu Th ntries are stored as individual files in the directory doc noctools No Writeups Appendix This section contains references to tools which are known to exist but which have not been fully cataloged If anyone wishes to author an entry for one of these tools please contact us at noctools request merit edu Keep in mind that if these or other tools are included in the future they will be available in the on line version of the ca
74. atrix output Its third type of output NOCTools2 Working Group Page 98 RFC 1470 FYI Network Management Tool Catalog June 1993 is abbreviated sampling in which only a pre set number of packets from each new host pair is logged The three output types are configured dynamically in any combination OSITRACE another logging tool with a NETMON interface is available separately and documented in a separate entry in this catalog MECHANISM Access to the information logged by NETMON is through a UNIX special file dev netmon User reads are blocked until the buffer reaches a configurable level of full ness Several other parameters of NETMON can be tuned at com pile time A diagnostic program netmonstat is included in the distribution CAVEATS None BUGS Bug reports and questions should be addressed to ile tools gateway mitre org Requests to join this mailing list le tools request gateway mitre org Questions and suggestions can also be directed to Allison Mankin 703 883 7907 mankin gateway mitre org LIMITATIONS A NETMON interface for tcpdump and other UNIX protocol analyzers is not included but it is simple to write NETMON probes for a promiscuous ethernet interface ar Similarly not included HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED BSD UNIX like network protocols or the ability to nstall the BSD publicly availab
75. bility for sites to add extra MIB definitions HARDWAR T REQUIRED Supported VAX processors SOFTWARE REQUIRED VMS V4 or later AVAILABILITY The SNMP agent is included in TCPware for VMS a commercial product available under license from Process Software Corporation 959 Concord Street Framingham MA 01701 1 800 722 7770 1 508 879 6994 voice 1 508 879 0042 FAX TELEX 517891 sales process com NOCTools2 Working Group Page 128 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog PROXYD NAM KEYWORDS ABSTRACT proxyd SNMP proxy agent daemons from SNMP Research control management status bridge Ethernet IP OSI ring star NMS SNMP UNIX library sourcelib SNMP proxy agents may be used to permit the monitoring and controlling of network elements which are otherwise not addressable using the SNMP management protocol e g a network bridge that implements a proprietary management protocol Similarly SNMP proxy agents may be used to protect SNMP agents from redundant network management agents through the use of caches Finally SNMP proxy agents may be used to implement elaborate MIB access policies The proxy agent daemon listens for SNMP queries and commands from logically remote network management stations translates and retransmits those as appropriate network management queries or cache
76. c to UNICOS Availability ftp sgi com sgi src nettest NOCTools2 Working Group Page 188 RFC 1470 FYI Network Management Tool Catalog June 1993 ETHERCK etherck is a simple program that displays Sun ethernet statistics If you have a high percents of input errors that are due to out of buffers then you can run the iepatch script to patch a kernel that uses the Intel ethernet chip ie A back of the envelope calculation shows that a 25 input error rate gives about a 10 degradation of NFS performance if 8k packets are being used In our environment at Legato patching the ie buffer allocation made the input error rate drop more than 2 orders of magnitude This was after we had applied other networking fixes e g using Prestoserve going from thin wire to twisted pair and pushed a higher load on the server Note that both etherck and iepatch must be run by root or you can make etherck setgid kmem Availability send EMAIL to request legato com with a Subject line send unsupported etherck he following is part of the help file from the Legato Email Server his message comes to you from the request server at Legato COM request Legato COM It received a message from you asking for help he request server is a mail response program That means that you mail it a request and it mails back the response he request server is a very dumb program It does not have
77. chmark control debugger manager map reference security status traffic bridge DECnet Ethernet FDDI IP OSI ring star NMS Ping SNMP X UNIX Sourcelib The XNETMON application implements a powerful network management station based on the X window system XNETMON s network management tools for configuration performance security and fault management have been used successfully with a wide assortment of wide and local area network topologies and medias Multiprotocol devices are supported including those using TCP IP DECnet and OSI protocols Some features of XNETMON s network management tools include o Fault management tool displays a map of the network configuration with node and link state indicated in one of several colors to indicate current status o Configuration management tool may be used to edit the network management information base stored in the NMS to reflect changes occurring in the network o Graphs and tabular tools for use in fault and performance management e g XNETPERFMON o Mechanisms by which additional variables such as vendor specific variables may be added o Alarms may be enabled to alert the operator of events occurring in the network o Events are logged to disk o Output data may be transferred via flat files for additional report generation by a variety of statistical packages The XNETMON application comes co
78. cify a 16bit pattern as four hex digits see below If 1 will create a incrementing cycling pattern from 0x0000 gt Oxffff gt Enter pattern hex value abcd if 0 specified above Ai Availability ftp uu net networking cisco tuecho c ftp cisco com tuecho c NOCTools2 Working Group Page 178 RFC 1470 FYI Network Management Tool Catalog June 1993 SPY An NFS monitoring tracing tool Availability A postscript file describing SPY is located on ftp uu net networking ip nfs spy ps Z NOCTools2 Working Group Page 179 RFC 1470 FYI Network Management Tool Catalog June 1993 NFS RACE This is the rpcspy nfstrace package It is described in detail in the paper NFS Tracing by Passive Network Monitoring which appeared in the January 1992 USENIX conference You ll need either a DEC machine running ULTRIX with the packetfilter installed in the kernel or a Sun running SunOS 4 x with NIT Or you ll need to do a bit of hacking The package differs slightly from the version in the paper The handle gt name translation facility has been removed It s just too fragile to include in the general release If you need it contact me directly and I 1ll1 be happy to mail you the code The output format is a wee bit different The IBM RT Enet filter version is also not included since I seem to be the only person in the world running
79. cke Sniff Spide NOCTools out tView er rMonitor 2 Working Group Empire Technologies SNMP Research Page 10 RFC 1470 FYI Network Management Tool Catalog Benchmark hammer amp anvil iozone LADDIS LANVista hfsstone CMIS CMIP library Generic Managed System MIB Browser CONERO CMIP Library Dual Manager Eagle MONET ETMON for Windows roxyd Libraries and Util Libraries and Util ar ES ine kenVIEW KHANNNTD Z OB 2 ee Z Debugger Ethernet Box II LANVista ping from UCB SPIMS NETMON from SNMP Research lities from lities from P Packaged Agent System mpd from Empire Technologies ETMON from SNMP Research NetMetrix Traffic Generator XNETMON from SNMP Research Generator hammer amp anvil LADDIS LANVista NOCTools2 Working Group MIB Manager from Empire Technologies Empire Technologies SNMP Research June 1993 Page 11 RFC 1470 FYI Network Management Tool Catalog NetMetrix Traffic Generator nhfsstone ping ping from UCB Sniffer SpiderMonitor spray TTCP Beholder CMIP Library CMU SNMP Distribution decaddrs by Wellfleet Dual Manager EMANATE Ethernet Box II getone by Wellfleet Interactive Network Map LanProbe LANVista Labs CMOT Agen Labs SNMP Agen MON for Windows scout NStat NOCOL OverVIEW SAS CPE for Open Systems Software SNMP Development Kit
80. codes To submit additions or obtain further assistance send email to MAP EtherNet codes LCS MIT Edu CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY This entry maintained by the NOCtools editors Send email to noctools request merit edu NOCTools2 Working Group Page 48 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog GENERIC MANAGED SYSTEM NAME Generic Managed System KEYWORDS manager osi cmis unix free sourcelib ABSTRACT The Generic Managed System GMS implements the functions that would be common to any OSI managed system These include the parseing of CMIS requests selection of managed objects according to the scoping and filtering rules handling of notifications and event forwarding discriminators etc The intention is that the implementors should use the GMS as a basis for their own managed object implementations A support environment is provided to assist with this MECHANISM The GMS uses the UCL CMIP library plus a library of C objects representing common managed objects and attribute types CAVEATS The system is still experimental is subject to change and is not yet well documented BUGS See above LIMITATIONS None known HARDWAR T REQUIRED Has been tested on SUN 3 and SUN 4 architectures SOFTWARE REQUIRED The ISODE protocol suite BSD UNIX UCL CMIP
81. date seconds hl color highlight color jumpscroll pixels label string nolabel host DESCRIPTION The xnetload program displays a periodically updating histo gram of the ethernet load average for the specified host The resulting graph is scaled as 0 to 100 where corresponds to Ombs and 100 corresponds to 10mbs NOTE The specified host must be running rpc etherd Flo oe This program has been run using X11R4 and X11R5 under the following operating systems SUNOS 4 1 0 SUNOS 4 1 1 ULTRIX V4 2 IRIX 3 3 2 Assuming the Imake templates and Rules are in order and in the proper place on your system these programs should compile and link straightforward by running the following sequence xmkmf make Then as root issue the following make install make install man Then on your host system or on any other system you can rlogin or rsh into start the etherd daemon with the following must be root usr etc rpc etherd led amp where le0 is the mnemonic for the primary ethernet interfac To start the xnetload program the following command line is suggested xnetload hl red host amp NOCTools2 Working Group Page 186 RFC 1470 FYI Netwo where host is the name of LOCALHOST that is running t rk Management Tool Catalog June 1993 any reachable network node including he etherd daemon A small xload window display with nine horizontal lines The sh
82. e Common Management Information Service Protocol as in the full international standards ISO 9595 ISO 9596 published in 1990 It is designed to work with the ISODE package and can act as a building block for the construction of CMIP based agent and manager applications MECHANISM The CMIP library uses ISO ROS ACSE and ASN 1 presentation as implemented in ISODE to provide its service CAVEATS BUGS None None known LIMITATIONS None known HARDWAR T 7 EQUIRED Has been tested on SUN 3 and SUN 4 architectures SOFTWAR T REQUIRED n r9 The ISODE protocol suite BSD UNIX AVAILABILITY he CMIP library and related management tools built upon it known as OSIMIS OSI Management Information Service are publicly available from University College London England via FTP and FTAM To obtain information regarding a copy send email to osimis request cs ucl ac uk or call 44 71 380 7366 NOCTools2 Working Group Page 40 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog DECADDRS NAME decaddrs decaroute decnroute xnsroutes bridgetab KEYWORDS manager map routing bridge DECnet NMS SNMP UNIX ABSTRACT These commands display private MIB information from Wellfleet systems They retrieve and format for display values of one or several MIB variables from the Wellfl
83. ects to the discard socket on the remote machine using a STREAM socket and sends large packets for a small amount of time to evaluate th ffective throughput It elevates a site to WARNING level if the throughput drops below a certain threshold set in the configuration file trapmon Converts all SNMP traps into a format suitable for displaying using NOCOL The severity of the various traps is preset and can be changed during compilation time PLATFORM Any Unix system with the curses screen management library and IP Internet Protocol programming facility It has been tested on Sun Sparc 4 1 1 Ultrix and NeXT systems Porting to other platforms might require minor adjustments depending on the vagaries of the different vendors mostly in the include files AVAILABILITY NOCOL was developed at JvNCnet and has been in use for monitoring the JvNCnet wide area network since 1989 It is available via anonymous FTP from ftp jvne net under pub jvncnet packages nocol tar Z The system running at NOCTools2 Working Group Page 118 RFC 1470 FYI Network Management Tool Catalog June 1993 JvNCet can be viewed by logging into the host nocol jvne net with username nocol an rlogin instead of telnet will handle your X window terminal types better To be added to the NOCOL mailing list for future updates and bug fixes send a message to nocol users request jvnce net with your FUTURE DEVE
84. ed interval then plotted on the strip rly adjusts its scale to he graph osen with care so as not dversely Sun 3 systems 2 Or 3 Page 173 RFC 1470 FYI Network Management Tool Catalog AVAILABILITY Commercial product of Wellfleet Communications Inc 12 DeAngelo Drive Bedford MA 01730 2204 617 275 2400 NOCTools2 Working Group June 1993 Page 174 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog XNETPERFMON_SNMP_RESEARCH NAME xnetperfmon a graphical network performance and fault management tool from SNMP Research KEYWORDS manager security status DECnet Ethernet IP OSI ring star NMS SNMP X DOS UNIX VMS sourcelib ABSTRACT Xnetperfmon is a XNETMON tool used to produce plots of SNMP variables in graphical displays The manager may easily customize the labels step size update interval and variables to be plotted to produce graphs for fault and performance management Scales automatically adjust whenever a point to be plotted would go off scale MECHANISM The xnetperfmon application communicates with remote agents or proxy agents via the Simple Network Management Protocol SNMP CAVEATS All plots for a single invocation of xnetperfmon must be for variables provided by a single network management agent However multiple invocations of xnetperfmon may be active on a single display simul
85. ed to I O rates per second Numerous sample reports on performance data processed by SAS CPE software Reduction of logged performance data into daily monthly or yearly summarized values Menu driven interface to the creation and management of multiple performance data bases Menu driven report designing interface that allows users with no programming knowledge to create and manage custom reports from their performance data base No SAS coding is needed for this interface weekly MECHANISM CAVEATS SAS CPE for Open Systems processes and reports data from SNMP and other proprietary monitoring protocols as well as du and accounting The product is currently in alpha testing BUGS None known LIMITATIONS None reported NOCTools2 Working Group Page 134 RFC 1470 FYI Network Management Tool Catalog June 1993 T HARDWARE REQUIRED HP SUN or IBM Workstation SOFTWARE REQUIRED The SAS r System Base Software SAS GRAPH Software and SAS CPE for Open System Software AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL SAS CPE for Open Systems Software is available from SAS Institute Inc SAS Campus Drive Cary NC 27513 Phone 919 677 8000 FAX 919 677 8123 CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Send email to snodjs mvs sas com NOCTools2 Working Group Page 135 FYI Network Management Internet Tool Catalog N
86. eet Communications private enterprise MIB using the SNMP RFC1098 In particular these tools are used to examine the non IP modules DECnet XNS and Bridg ing of a Wellfleet system Decaddrs displays the DECnet configuration of a Wellfleet system acting as a DECnet router showing the static parameters associated with each DECnet inter face Decaroute and decnroute display the DECnet inter area and intra area routing tables that is area routes and node routes Xnsroutes displays routes known to a Wellfleet system acting as an XNS router Bridgetab displays the bridge forwarding table with the disposition of traffic arriving from or directed to each station known to the Wellfleet bridge module All these commands take an IP address as the argument and can specify an SNMP community for the retrieval One SNMP query is performed for each row of the table Note that the Wellfleet system must be operating as an IP router for the SNMP to be accessible MECHANISM Management information is exchanged by use of SNMP CAVEATS T None BUGS None known LIMITATIONS None reported HARDWARE REQUIRED Distributed and supported for Sun 3 systems NOCTools2 Working Group Page 41 RFC 1470 FYI Ne twork Management Tool Catalog June 1993 SOFTWARE R EQUIR ED Distributed and supported for SunOS 3 5 and 4 x AVAILABILITY Commercia
87. ement Tool Catalog June 1993 Internet Tool Catalog NetMetrix Load Monitor NAME NetMetrix Load Monitor KEYWORDS alarm traffic Ethernet FDDI IP Ring Eavesdrop SNMP X UNIX ABSTRACT The NetMetrix Load Monitor is a distributed client server monitoring tool for ethernet token ring and FDDI networks A unique dual architecture provides compatibility with both RMON and X windows RMON allows interoperability and an enterprise wid view while X windows enables much more powerful intelligent applications at remote segments and saves network bandwidth The Load Monitor provides extensive traffic statistics It looks at load by time interval source node destination node application protocol or packet size A powerful ZOOM feature allows extensive correlational analysis which is displayed in a wide variety of graphs and tables You can answer questions such as Which sources are generating most of the load on the network when it is most heavily loaded and where is this load going Which source destination pairs generate the most traffic over the day Where should bridges and routers be located to optimally partition the network How much load do applications like the X Windows protocol put on the network and who is generating that load when it is the greatest A floating license allows easy access to the software tool anywhere you need it MECHANISM NetMetrix turns the network i
88. en Ring Networks Monitors active nodes and ring errors Maintains database of nodes wire centers and their connections Separate network management ring allows remote configuration of wire centers T MECHANISM A separate network management ring used with Proteon Intelligent Wire Centers allows wire center configura tion information to be read and modified from a single remote workstation A log of network events used with a database contain nodes wire centers and their con nections facilitates tracking and correction of net work errors Requires an E series PROM sold with package CAVEATS Currently only ISA bus cards support the required series PROM zal BUGS None known LIMITATIONS 256 nodes 1 net HARDWARE REQUIRED 512K RAM CGA or better hard disk mouse supported SOFTWARE REQUIRED MS DOS optional mouse driver AVAILABILITY Fully supported product of Proteon Inc Previously sold as Advanced Network Manager ANM For more in formation contact Proteon Inc Phone 508 898 2800 2 Technology Drive Fax 508 366 8901 Westborough MA 01581 Telex 928124 NOCTools2 Working Group Page 158 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog TRACEROUTE NAME traceroute KEYWORDS routing IP ping UNIX VMS free ABSTRACT Traceroute is a tool that allows the route taken by packet
89. en it does count writes of size bytes followed by count reads of size bytes For UDP the nettest program performs only writes reads are not per formed The nettestd program if used with UDP connections reads the data packets and prints a message for each data packet it receives The number and size of the reads and writes may not correlate with the number and size of the actual data packets that are transferred it depends on the protocol that is chosen If you append an optional k or K to the size count or bufsize value the number specified is multiplied by 1024 This source for nettest and nettestd are provided on an as is basis Cray Research does not provide any support for this code unless you are a customer who has purchased the UNICOS operating system We will gladly take bug reports for nettest nettestd Suggested fixes are prefered to just bug reports Changes to allow nettest nettestd to run on other architectures are also welcomed We will try to incorporate bugfixes and update the publicly available code but we can make no guarantees For copyright information see the notice in each source file Send bug reports fixes to E mail dab cray com U S Mail David Borman Cray Research Inc 655F Lone Oak Drive Eagan MN 55121 Notes 1 The b option to nettestd has not been tested 2 The ISO code should work on a 4 4BSD system but the gethostinfo routine is specifi
90. ent Tool Catalog June 1993 For more research prototype They will thereafter get a permission to obtain a copy from the same distribution source as for universities Commercial use A commercial version of SPIMS will eventually be distributed and supported by a commercial partner niIn the meantime we will distribute the research prototype source code to interested organizations without any guaranty or support Contact SICS for further information information about the research prototype distribution and about a commercial license contact Swedish Institute of Computer Science Att Birgitta Klingenberg P O Box 1263 S 164 28 Kista SWEDEN e address spims sics se Phone 46 8 7521500 Fax 46 8 7517230 CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Bengt Ahlgren Swedish Box 1263 S 164 28 Email Tel or Fax NOCTools2 Working Group Institute of Computer Science KISTA SWEDEN bengta sics se 46 8 752 1562 direct 46 8 752 1500 46 8 751 7230 Page 152 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog SPRAY_SUN NAME spray KEYWORDS benchmark generator IP ping UNIX ABSTRACT Spray is a traffic generation tool that generates RPC or UDP packets or ICMP Echo Requests The packets ar sent to a remote procedure call application at the des tination host The count of received pack
91. es MECHANISM Query formats and sends a RIP request or POLL command to a destination gateway CAVEATS Query is intended to be used a a tool for debugging gateways not for network management SNMP is the pre ferred protocol for network management BUGS None known LIMITATIONS The polled gateway must run RIP HARDWARE REQUIRED No restriction SOFTWARE REQUIRED 4 3BSD UNIX or related OS AVAILABILITY Available with routed and gated distributions Routed may be obtained via anonymous FTP from uunet uu net in file bsd sources src network routed tar Z Gated may be obtained via anonymous FTP from devvax tn cornell edu Distribution files are in directory pub gated NOCTools2 Working Group Page 133 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog SAS CPE NAME SAS CPE tm for Open Systems Software KEYWORDS manager status bridge ethernet FDDI IP OSI NES X DOS HP UNIX library ABSTRACT SAS CPE tm for Open Systems software is an integrated system designed to facilitate the analysis and presentation of computer performance and resource utilization data SAS CPE software features include Processing of raw computer and network performance data into detail level SAS data sets Conversion and validation of logged data values to forms more useful for display and analysis e g I O counts are convert
92. ets is retrieved from the remote application after a certain number of packets have been transmitted The differ ence in packets received versus packets sent represents on a LAN the packets that the destination host had to drop due to increasing queue length A measure of throughput relative to system speed and network load can thus be obtained MECHANISM See above CAVEATS Spray can congest a network BUGS None known LIMITATIONS None reported HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED SunOS AVAILABILITY Supplied with Sunos NOCTools2 Working Group Page 153 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog TCPDUMP NAME tcpdump KEYWORDS traffic ethernet IP NFS UNIX VMS free ABSTRACT Tcpdump can interpret and print headers for the follow ing protocols ethernet IP ICMP TCP UDP NES ND ARP RARP AppleTalk Tcpdump has proven useful for examining and evaluating the retransmission and window management operations of TCP implementations MECHANISM Much like etherfind tcpdump writes a log file of the frames traversing an ethernet interface Each output line includes the time a packet is received the typ of packet and various values from its header CAVEATS BUGS None known LIMITATIONS Public domain version requires a kernel patch for SunOS TCPware for VMS curre
93. for display values of one or several MIB variables RFC1066 using the SNMP RFC1098 Getone and getmany retrieve arbitrary MIB variables getroute getarp getaddr and getif retrieve and display tabular information routing tables ARP table getid retrieves and displays system name tion and boot time interface configuration etc and identifica Getone lt target gt lt mibvariable gt retrieves and displays the value of the designated MIB variable from the specified target system The SNMP community name to be used for the retrieval can also be specified Getmany works similarly for groups of MIB variables rather than individual values The name of each variable its returns value and its data type is displayed Getrout information from the ipRoutingTable MIB structure displaying the retrieved information in an accessible format Getarp behaves similarly for the address translation table getaddr for the ipAddressTable and getif displays information from the interfaces table supplemented with information from the ipAddressTable Getid displays the system name identification ipFor warding state and the boot time and date All take a system name or IP address as an argument and can specify an SNMP community for the retrieval One SNMP query is performed for each row of the table MECHANISM Queries SNMP agent s CAVEATS None BUGS None known
94. fswatch SAS CPE NetMetrix Protocol Analyzer NetMetrix Traffic Generator SNMP Libraries and utilities from SNMP Research SNMP Packaged Agent System from SNMP Research snmpd from SNMP Research XNETMON from SNMP Research IP arp CMU SNMP Dual Manager Eagle EMANATE etherfind NOCTools2 Working Group June 1993 Page 17 RFC 1470 FYI Network Management Tool Catalog June 1993 etherhostprobe EtherView fping getone from Wellfleet hammer amp anvil hopcheck Internet Rover LanProbe LANVista LANWatch ENTM Interactive Network Map MIB Manager from Empire Technologies NET lt a O et_monitor etlabs CMOT Agen etlabs SNMP Agent e e e Erti tMetrix Load Monitor tMetrix Protocol Analyzer tMetrix Traffic Generator MON by Mitre MON for Windows scout netstat netwatch nfswatch nhfsstone NNStat NOCOL NPRV OverVIEW PacketView ping ping from UCB proxyd from SNMP Research query SAS CPE SNMP Development Kit SNMP Libraries and Utilities from SNMP Research SNMP Packaged Agent System from SNMP Research PSI SNMP snmpd from Empire Technologies snmpd from SNMP Research PSI SNMP SpiderMonitor SPIMS spray tcpdump ERN A A A A AA CEI E pal NOCTools2 Working Group Page 18 RFC 1470 FYI Network Management Tool Catalog June 1993 tcplogger traceroute trpt ttcp XNETMON from SNMP Research xnet
95. full LADDIS availability from SPEC is expected by the end of 1992 BUGS The licens is requested to direct beta test comments via electronicmail to spec preladdis comments riscee pko dec com This alias will forward all comments to the SPECSFS mailing list which includes the LADDIS Group LIMITATIONS LADDIS is for local Ethernet or FDDI nets only not WAN HARDWAE REQUIRED A host with LAN connectivity Presumably a host with enough horsepower to generate an adequate work load CJ m SOF TWARI REQUIRED generator program LADDIS is a sophisticated Unix based NFS traffic AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL Date Mon 10 Feb 92 13 12 20 PST From bnelson Bruce Nelson Dear Person The SPEC PRE LADDIS beta test process operational on Monday February 3 19 became 92 This email describes the process as announced during the LADDIS Group s presentation at UniForum 92 and also at Interop 91 The content of t he beta test license and the license request process are consistent with the proposals approved by the SP Committee at the January 1992 meeting California EC Steering in Milpitas The SPEC PRE LADDIS beta test will consist of one beta test version of PRE LADDIS distributed ONLY by electronic mail The SPEC PRE LADDIS Beta test software is licensed by SPE
96. functional address statistics Bridged traffic statistics Protocol statistics logging of statistics to a printer or file of user definable alarms Hardware Pre Capture filtering Post capture filtering Playback of captured data Traffic simulation and On line context NOCTools2 Working Group Page 66 RFC 1470 FYI Network Management Tool Catalog June 1993 sensitive Help Protocol Interpreters used for decoding network traffic supported by LANVista include TCP IP DECnet Banyan Vines XNS MS Net AppleTalk IBM Token Ring Novell 3Com 3 Open SNMP and OSI MECHANISM LANVista is available in three forms A kit version which consists of a plug in PC card and Master software a self contained unit that packages the kit version in a portable PC and a Distributed system The LANVista distributed system allows slave units placed anywhere in the world to be controlled from a single central location for centralized management of an enterprise network LANVista s PC cards provides a physical interface to the LAN and frame preprocessing power The Master software controls the PC card and the display and processing of information gathered from the network CAVEATS Optimal performance of LANVista s master software is achieved with DOS 5 0 by utilizing RAMDRIVE SYS SMARTDRV SYS and High memory BUGS None Known LIMITATIONS None Known HARDWARE REQUIRED IBM PC AT 386 486 or
97. g and debugging new protocols Network managers using LANWatch can inspect network traffic patterns and packet errors to isolate performance problems and bottlenecks Protocol developers can use LANWatch to inspect and verify proper protocol handling Since LANWatch is a software only package which installs easily in existing PCs network technicians and field servic ngineers can carry LANWatch in their briefcase for convenient network analysis at remote sites LANWatch has two operating modes Display and Examine In Display Mode LANWatch traces network traffic by displaying captured packets in real time Examine Mode allows you to scroll back through stored packets to inspect them in detail To select a subset of packets for display storage or retrieval there is an exten sive set of built in filters Using filters LANWatch collects only packets of interest saving the user from having to sort through all network traffic to isolate specific packets The built in filters include alarm trigger capture load save and search They can be controlled separately to match on source or destination address protocol or packet contents at the hardware and transport layers LANWatch also includes suffi cient source code so users can modify the existing filters and parsers or add new ones The LANWatch distribution includes executables and source for several post processors a TCP protoco
98. ge 116 RFC 1470 FYI Network Management Tool Catalog June 1993 assigned a severity of WARNING The display agent and other data post processors would use this event severity to decide whether to display it or troubleshoot log it depending on the user selected display severity level The software is very flexible and allows enhancements and development with a minimum amount of effort The display module processes all the files present in the data directory and displays them sequentially This allows new monitoring programs to simply start generating data in the data directory and the display module will automatically start displaying the new data The monitoring tools can be changed and the only element that has to remain common between all the modules is the EVENT data structure CURRENT MODULES NOCOL presently consists of the following modules nocol which simply displays the data collected by the monitoring agents It uses the curses screen management system to support a wide variety of terminal types The criterion for displaying an event is 1 Severity level of the event is higher than the severity level set in the display 2 The display filter if set matches some string in the event line The display can be in regular 80 column mode or in extended 132 column mode Critical events are displayed in reverse video if the terminal type
99. gly recommended SOFTWARE REQUIRED SunOS 4 1 1 or greater amp OpenWindows 2 0 or greater SUN X Windows 11 4 or greater RISC ULTRIX 4 1 or greater DEC R32V2 Motorola Open Desktop 1 1 or greater 3 486 Provided on 1 4 cartridge TK 50 or 3 1 2 diskettes as appropriate in cpio format AVAILABILITY A commercial product of The Wollongong Group Inc 1129 San Antonio Rd Palo Alto CA 94303 ph 800 962 8649 in California 800 872 8649 outside California fax 415 962 0286 NOCTools2 Working Group Page 168 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog XNETDB NAME Xnetdb KEYWORDS database manager map monitoring status IP Ping SNMP Unix X free ABSTRACT Xnetdb is a network monitoring tool based on X Windows and SNMP which also has integrated database and statistic viewing capabilities Xnetdb will determine and display the status of routers and circuits it has been told to monitor by querying the designated sites and displaying the result It can also query the status of certain designated SNMP variables such as a default route for an important router Additionally it also has integrated database functionality in that it can display additional information about a site or circuit such as the equipment at the site the contact person s for the site and other useful information Finally it can gather designated statistical
100. he file bytecounters bytecounters mail available via anonymous FTP from venera isi edu LIMITATIONS NNStat presumes a topology of one or more long haul networks gatewayed to local ethernets A kernel mod required to run with SunOS4 These mods are described in the bytecounters archive HARDWARE REQUIRED Ethernet interface Sun 3 Sun 4 SPARC or PC RT workstation SOFTWARE REQUIRED Distribution is for BSD UNIX could easily be adapted to any UNIX with promiscuous ethernet support AVAILABILITY Distribution is available via anonymous FTP from venera isi edu in file pub NNStat tar Z Documenta tion is in pub NNStat userdoc ms Z NOCTools2 Working Group Page 115 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NOCOL 8 NAME nocol network monitoring tools for an IP network SYNOPSIS This is an overview of the NOCOL software DESCRIPTION NOCOL Network Operations Center On Line is a collection of network monitoring programs that run on Unix systems The software consists of a number of monitoring agents that poll various parameters from any system and put it in a format suitable for post processing The post processors can be a display agent an automated troubleshooting program an event logging program etc Presently monitors for tracking reachability SNMP traps data throughput rate and nameservers have been developed and are i
101. ing ter depth of 64 bytes E REQUIR ED PX20s are self contained the KX20s require an IBM PC XT AT compatible machine with 5 megabytes of hard disk storage and the spare slot into which the board ki SOF TWARI No Co AVAILAB t is plugged E REQUIRED n Th mpi J ILI Le TY r SpiderAnalyzer requires the Microsoft C Version 5 0 for writing user defined decodes The SpiderMonitor Analyzer is available commercially For information on your local representative call or write Spider Systems Inc 12 New England Executive Park Burlington MA 01803 Telephone 617 270 3510 FAX NOCTools2 Working Group 617 270 9818 Page 148 June 1993 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog SPIMS NAME SPIMS the Swedish Institute of Computer Science SICS Protocol Implementation Measurement System tool KEYWORDS benchmark debugger IP OSI spoof UNIX ABSTRACT SPIMS is used to measure the performance of protocol and protocol like services including response time two way delay throughput and the time to open and close connections It has been used to o benchmark alternative protocol implementations fe observe how performance varies when parameters in specific implementations have been varied i e to tune parameters SPIMS currently has interfaces to the DoD In
102. ing is the only implementation known support both loose and strict source routing Though some ping implementations support the ICMP record route feature the usefulness of this option for debugging routes is limited by the fact that many gateways do not correctly implement it m HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED None AVAILABILITY Ping is widely included in TCP IP distributions Pub lic domain versions of ping are available via anonymous FTP from uunet uu net in directory bsd sources src etc and from venera isi edu in directory pub NOCTools2 Working Group Page 127 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog PROCESS TCPWARE SNMP NAME SNMP agent KEYWORDS alarm manager status traffic IP SNMP VMS ABSTRACT The SNMP agent listens for and responds to network management requests sent from SNMP conforming network management stations The SNMP agent also sends SNMP traps under specific conditions to identified trap receivers SNMP communities and generation of traps are fully configurable The SNMP agent supports all MIB II variables except the EGP group MECHANISM Network management variables are made available for inspection and or alteration by means of the Simple Network Management Protocol SNMP CAVEATS None BUGS No known bugs LIMITATIONS Does not yet provide the a
103. ist any software requirements gt lt list any software requirements gt AVAILABILITY AND lt How to acquire the tool gt CONTACT POINT FOR INFORMATION ABOUT THIS TOOL lt Location Contact Info to access obtain tool gt CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY lt Contact info for person responsible for catalog entry gt DATE OF MOST REC ENT UPDATE TO THIS CATALOG ENTRY lt YYMMDD gt Keywords This catalog uses keywords for terse characterizations of the tools Keywords are abbreviated attributes of a tool or its use To allow cross comparison of tools uniform keyword definitions have been developed and are given below Following the definitions there is an index of catalog entries by keyword Keyword Definitions The keywords are always listed in a prefined order sorted first by the general category into which they fall and then alphabetically The categories that have been defined for management tool keywords the general management area to which a tool relates or a tool s functional role the network resources or components that are managed the mechanisms or methods a tool uses to perform its functions the operating system and hardware environment of a tool and the characteristics of a tool as a hardware product or software release NOCTools2 Working Group Page 5 RFC 1470 FYI Network Management
104. it RTs are really too slow for this anyway To configure the package edit the makefile in the obvious to me at least way Note that the not all versions of SunOS NIT have working versions of the packet timestamp mechanism Try to set the DSTAMPS option in the makefile and if that doesn t work take it out If you are actually going to use this to gather traces I d like to hear from you Please send email and share your results traces if your organization will allow it I maintain a mailing list of users for updates etc Send me mail to be added to it Happy tracing Matt Blaze Department of Computer Science Princeton University 35 Olden Street Princeton NJ 08544 mab cs princeton edu 609 258 3946 Availability ftp uu net networking ip nfs nfstrace shar or check archie NOCTools2 Working Group Page 180 RFC 14 JAM 70 FYI Network Management Tool Catalog June 1993 ER Lame delegation notifier Author Bryan Beecher Last Modified 6 25 92 To make use of this software you need to be running the University of Michigan release of BIND 4 8 3 or any version of named that supports the LAME DELEGATION patches posted to USENET The U M release is available via anonymous ftp from terminator cc umich edu unix dns bind4 8 3 tar 2Z You must also have a copy of query 1 and host 1 These are also available
105. ith considerable error checking designed in The several command line utilities include applications for retrieving one or many variables retrieving tables or effecting commands via the setting of remote network management variables MECHANISM The parsing is performed via recursive descent methods Messages are passed via the Simple Network Management Protocol SNMP CAVEATS None BUGS None known LIMITATIONS The monitored and managed nodes must implement the SNMP over UDP per RFC 1157 or must be reachable via a proxy agent NOCTools2 Working Group Page 141 RFC 1470 FYI Network Management Tool Catalog HARDWAR T REQUIRED June 1993 This software has been ported to numerous platforms including workstations general purpose timesharing systems and embedded hardware in intelligent network devices such as repeaters bridges and routers SOFTWARE REQUIRED C compiler TCP IP library AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT 1 THIS TOOL This is a commercial product availabl from SNMP Research 3001 Kimberlin Heights Road Knoxville TN 37920 9716 under licens Attn John Southwood Sales and Marketing 615 573 1434 Voice 615 CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY users seymourl cs utk edu NOCTools2 Working Group 573 9197 FAX Page 142 RFC 1470 Internet NAME KEYWORDS ABSTRAC
106. l analyzer a node by node traffic analyzer and a dump file listing tool NOCTools2 Working Group Page 71 RFC 1470 FY MECHANISM Uses in pr CAVEATS Most traff back BUGS None LIMITATION LANWa Cavea I Network Management Tool Catalog June 1993 many common PC network interfaces by placing them omiscuous mode and capturing traffic PC network interfaces will not capture 100 of the ic on a fully loaded network primarily missing to back packets KNOWN S tch can t analyze what it doesn t see see tS HARDWARE R LANWa inter EQUIRED tch requires a PC or PS 2 with a supported network face card SOFTWARE R LANWa sourc parse AVAILABILI LANWa EQUIRED tch runs in DOS Modification of the supplied e code or creation of additional filters and rs requires Microsoft C 5 1 TY tch is commercially available from FTP Software Incorporated 26 Princess Street Wakefield MA 01880 617 246 0900 NOCTools2 Working Group Page 72 RFC 1470 NOCTools2 Working Group FYI Network Management Tool Catalog June 1993 Internet Tool Catalog LLL_ENTM NAME ENTM Ethernet Traffic Monitor KEYWORDS traffic ethernet IP eavesdrop VMS free ABSTRACT ENTM is a screen oriented utility that runs under VAX VMS It monitors local ethernet traffic and displays either a real time or cumulative histogram showing a percent
107. l product of wellfleet Communications Inc 617 NOCTools2 Working Group 12 DeAngelo Drive Bedford MA 01730 2204 275 2400 Page 42 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog DIG NAME DiG KEYWORDS status DNS spoof UNIX free ABSTRACT DiG domain information groper is a command line tool which queries DNS servers in either an interactive or a batch mode It was developed to be more convenient flexible than nslookup for gathering perfor mance data and testing DNS servers MECHANISM Dig is built on a slightly modified version of the bind resolver release 4 8 CAVEATS none BUGS None known LIMITATIONS None reported HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED BSD UNIX AVAILABILITY DiG is available via anonymous FTP from venera isi edu in pub dig 2 0 tar 2Z NOCTools2 Working Group Page 43 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog EMANATE _SNMP_RESEARCH NAME EMANATE Enhanced MANagement Agent Through Extensions from SNMP Research KEYWORDS alarm control manager reference security status bridge Ethernet FDDI IP OSI ring star NMS SNMP sourcelib ABSTRACT The EMANATE system provides a run tim xtensible SNMP agent that dyn
108. le network protocols in the system to be monitored H NOCTools2 Working Group Page 99 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY The NETMON distribution is available by anonymous FTP in pub netmon tar or pub netmon tar Z from aelred 3 ie org A short user s and installation guide NETMON doc is available in the same location The NE T I MON distribution is provided as is and requires etention of a copyright text in code derived from it t is copyrighted by the MITRE Washington Networking Center NOCTools2 Working Group Page 100 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NETMON_WINDOWS_SNMP_RESEARCH NAME NETMON for Windows an SNMP based network management tool that runs under Microsoft Windows 3 0 from SNMP Research KEYWORDS alarm control manager map routing DECnet Ethernet IP OSI ring star NMS SNMP DOS sourcelib ABSTRACT The NETMON application implements a powerful network management station based on a low cost DOS platform NETMON s network management tools for configuration performance security and fault management have been used successfully with a wide assortment of wide and local area network topologies and medias Multiprotocol devices are supported including those using TCP IP DECnet and OSI protocols
109. llfleet xnetperfmon from SNMP Research Ping etherhostprobe fping getethers hopcheck Interactive Network Map Internet Rover LANWatch net_monitor NOCOL NPRV ping ping from UCB spray traceroute ttcp XNETMON from SNMP Research xup Eagle EtherMeter Ethernet Box II LanProbe LANVista TokenVIEW NOCTools2 Working Group Page 22 RFC 1470 FYI Network Management Tool Catalog RMON Beholder SNMP Beholder CMU SNMP decaddrs from Wellfleet Dual Manager EMANATE getone from Wellfleet Interactive Network Map MIB Manager from Empire Technologies MONET Netlabs SNMP Agent NetMetrix Load Monitor NetMetrix NFS Monitor NetMetrix Protocol Analyzer NetMetrix Traffic Generator NETMON for Windows NETscout NOCOL OverVIEW proxyd from SNMP Research SNMP Development Kit SNMP Libraries and utilities from SNMP Research SNMP Packaged Agent System from SNMP Research PSI SNMP snmpd from Empire Technologies snmpd from SNMP Research Wollongong Manager XNETMON from SNMP Research xnetmon from Wellfleet xnetperfmon from SNMP Research doc Internet Rover host LADDIS mconnect nhfsstone NOCOL query SPIMS NOCTools2 Working Group June 1993 Page 23 RFC 1470 FYI Network Management Tool Catalog June 1993 vrfy X Dual Manager Interactive Network Map MIB Manager from Empire Technologie
110. lookups listens for and parses the responses translates the responses into SNMP responses and returns those responses as SNMP messages to the network management station that originated the transaction The proxy agent daemon also emits SNMP traps to identified trap receivers The proxy agent daemon is designed to make the addition of additional vendor specific variables a straight forward task The proxy application comes complete with source code including a powerful set of portable libraries for generating and parsing SNMP messages and a set of command line utilities MECHANISM Network management variables are made available for inspection and or alteration by means of the Simple Network Management Protocol SNMP NOCTools2 Working Group Page 129 RFC 1470 FYI Network Management Tool Catalog June 1993 CAVEATS None BUGS None known LIMITATIONS This application is a template for proxy application writers Only a few of the many LanBridge 100 variables are supported HARDWARE REQUIRED System from Sun Microsystems Incorporated SOFTWARE REQUIRED Sun OS 3 5 or 4 x AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL This is a commercial product available under licens from SNMP Research 3001 Kimberlin Heights Road Knoxville TN 37920 9716 Attn John Southwood Sales and Marketing 615 573 1434 Voice 615 573 9197 FAX
111. m is a IBM 386 computer or compatible with hard disk drive SOFTWARE REQUIRED DOS 5 0 or later Windows 3 0 in 386 mode and TCP IP kernel software from FTP Software AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL This is a commercial product available under licens from SNMP Research 3001 Kimberlin Heights Road Knoxville TN 37920 9716 Attn John Southwood Sales and Marketing 615 573 1434 Voice 615 573 9197 FAX CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY users seymourl cs utk edu NOCTools2 Working Group Page 102 RFC 1470 FYI Network Managem Internet Tool Catalog NAME NETscout tm KEYWORDS Alarm Analyzer Manag DECnet Ethernet IP NMS SNMP UNIX ABSTRACT devices are intended t comprehensive capabili conditions in data com NETscout has the capab statistical data tod fully decoded network alarm conditions and from all segments of a from a centralized SNM console ent Tool Catalog er Status Traffic OSI NFS Ring Star O provide network use ty to identify and is munications networks ility to collect wide June 1993 NETscout Eavesdrop The NETscout family of distributed LAN Analyzer rs witha olate fault ranging isplay selectively captured and traffic to set user defined to obtain real time updates rnetwork widely dispersed int P com
112. mes an accurate representation of the physical lay out of the segment Thereafter when a new node is installed and becomes active or when a node is moved or becomes inactive the change is detected and shown on the map in real time The system also provides the network manager with precise cable fault information displayed on the map Traffic statistics are gathered and displayed and can be exported in comma delimited CSV format for further analysis Alerts can be set on user defined thres holds Trace provides a remote protocol analyzer capability with decodes for common protocols Significant events like power failure cable breaks new node on network broadcast IP source address seen etc are tracked in a log that is uploaded to Pro beView periodically ProbeView generates reports that can be manipulated by MSDOS based word processors spreadsheets and DBMS NOCTools2 Working Group Page 69 RFC 1470 FYI Network Management Tool Catalog June 1993 MECHANISM The system consists of one or more LanProbe segment monitors and ProbeView software running under Microsoft Windows The LanProbe segment monitor attaches to the end of an ethernet segment and monitors all traffic Attachment can be direct to a thin or thick coax cable or via an external transceiver to fiber optic or twist ed pair cabling Network data relating to the segment is transferred to a workstation running ProbeView via RS 23
113. mon from Wellfleet xnetperfmon from SNMP Research OSI CMIP Library Dual Manager EMANATE LANVista LANWatch Netlabs CMOT Agent NetMetrix Protocol Analyzer NETMON for Windows NETscout N o OCOL sitrace proxyd from SNMP Research SAS CPE Sniffer SNMP Libraries and Utilities from SNMP Research SNMP Packaged Agent System from SNMP Research snmpd from SNMP Research SpiderMonitor SPIMS XNETMON from SNMP Research xnetperfmon from SNMP Research 7 NES etherfind EtherView iozone LADDIS NetMetrix NFS Monitor NetMetrix Protocol Analyzer NETscout nfswatch nhfsstone Sniffer tcpdump NOCTools2 Working Group Page 19 RFC 1470 FYI Network Management Tool Catalog June 1993 Ring Eagle EMANATE Interactive Network Map LANVista LANWatch NetMetrix Load Monitor NetMetrix NFS Monitor NetMetrix Protocol Analyzer NetMetrix Traffic Generator NETMON by Mitre NETMON for Windows NETscout netwatch PacketView proxyd from SNMP Research Sniffer SNMP Libraries and Utilities from SNMP Research NMP Packaged Agent System from SNMP Research SNMF snmpd from SNMP Research TokenVIEW X x NETMON from SNMP Research etperfmon from SNMP Research host Internet Rover LANWatch mconnect NetMetrix Protocol Analyzer Sniffer vrfy Star EMANATE Interactive Network Map LAN Patrol LANWatch NETM
114. mplete with source code including a powerful set of portable libraries for generating and parsing SNMP messages NOCTools2 Working Group Page 171 RFC 1470 FYI Network Management Tool Catalog June 1993 MECHANISM XNETMON is based on the Simple Network Management Protocol SNMP Polling is performed via the powerful SNMP get next operator and the SNMP get operator Trap directed polling is used to regulate focus and intensity of the polling CAVEATS None BUGS None known LIMITATIONS Monitored and managed nodes must implement the SNMP over UDP per RFC 1157 or must be reachable via a proxy agent HARDWARE REQUIRED X windows workstation with UDP socket library Monochrome is acceptable but color is far superior SOFTWAR T REQUIRED X windows version 11 release 4 or later or MOTIF AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL This is a commercial product available under licens from SNMP Research 3001 Kimberlin Heights Road Knoxville TN 37920 9716 Attn John Southwood Sales and Marketing 615 573 1434 Voice 615 573 9197 FAX CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY users seymourl cs utk edu NOCTools2 Working Group Page 172 RFC 1470 FYI Network Management Too Internet Tool Catalog NAME xnetmon xpmon KEYWORDS alarm manager map status I ABSTRACT Xnetmon and xpmon provide grap perf
115. much error checking If you don t send it the commands that it understands it will just answer I don t understand you The request server has 4 commands Each command must be the first word on a line The request server reads your entire message befor it does anything so you can have several different commands in a single message The request server treats the Subject header line just like any other line of the message You can use any combination of upper and lower case letters in the commands The request server s files are organized into a series of directories and subdirectories Each directory has an index and each subdirectory has an index The top level index gives you an overview of what is in the subdirectories and the index for each subdirectory tells you what is in it NOCTools2 Working Group Page 189 RFC 1470 FYI Network Management Tool Catalog June 1993 The server has 4 help command send you because honored that you commands The command help or send help causes the server to the help file You already know this of course you are reading the help file No other commands are in a message that asks for help the server figures had better read the help message before you do anything else SEND a request to Legato to get the rest of the help file NOCTools2 Working Group Page 190 RFC 1470 FYI Network Management Tool Catalog
116. n use Addition of more monitoring agents is easy and they will be added as necessary A display agent nocol 1l using curses has already been developed Work on an intelligent module is currently in progress for event logging and some automatic troubleshooting All data collected by the monitoring agents follows a fixed non readable format Each data entry is termed an event in NOCOL and each event has certain flags and severity associated with it The display agent nocol 1 displays the output of these monitoring agents depending on the severity of the event 17 There can be multiple displays running simultanously and all process the same set of monitored data There are four levels of severity associated with an event CRITICAL ERROR WARNING and INFO The severity level is controlled independently by the monitoring agents and the decision to raise or set an event s severity to any level depends on the logic imbedded in the monitoring agent As an example for the pingmon 8 monitor if a site is unreachable via ping it would be assigned a severity of WARNING by pingmon which would then elevate to CRITICAL if the site is still unreachable after some time In the case of trapmon 8 an SNMP trap message of EGP neighbor lost would be directly assigned a severity level of CRITICAL while an Warm Start trap is NOCTools2 Working Group Pa
117. nds from logically remote network management stations The agent daemon also emits SNMP traps to identified trap receivers The agent daemon is architected to make the addition of additional vendor specific variables a straight forward task The snmpd application comes complete with source code including a powerful set of portable libraries for generating and parsing SNMP messages and a set of command line utilities MECHANISM Network management variables are made available for inspection and or alteration by means of the Simple Network Management Protocol SNMP CAVEATS None BUGS None known LIMITATIONS Only operating system variables available without source code modifications to the operating system and device device drivers are supported HARDWAR a2 REQUIRED This software has been ported to numerous platforms including workstations general purpose timesharing systems and embedded hardware in intelligent network devices such as repeaters bridges and routers NOCTools2 Working Group Page 145 RFC 1470 FYI Network Management Tool Catalog SOFTWAR T REQUIRED C compiler June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL This is a commercial from under licens product availabl SNMP Research 3001 Kimberlin Heights Road Knoxville TN 37920 9716 Attn John Southwood Sales a 615 573 1434 Voice 615
118. nterface into promiscuous mode to capture packets CAVEATS none BUGS none known NOCTools2 Working Group Page 90 RFC 1470 FYI Network Management Tool Catalog June 1993 LIMITATIONS none HARDWARE REQUIRED SPARC system SOFTWARE REQUIRED SunOS 4 0 or higher AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL NetMetrix is available from Sales Department Metrix Network Systems Inc One Tara Boulevard Nashua New Hampshire 03062 telephone 603 888 7000 fax 603 891 2796 email info metrix com Government agencies please note that NetMetrix is on the GSA schedule CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Norma Shepperd Marketing Administrator 603 888 7000 norma metrix com NOCTools2 Working Group Page 91 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NetMetrix NFS Monitor NAME NetMetrix NFS Monitor KEYWORDS traffic Ethernet FDDI NFS Ring Eavesdrop SNMP X UNIX ABSTRACT The NetMetrix NFS Monitor is a distributed network monitoring tool which monitors and graphs NFS load response time retransmits rejects and errors by server client NFS procedure or time interval Breakdown server activity by file system and client activity by user A powerful ZOOM feature lets you correlate monitoring variables You can s client server relationships compare ser
119. ntly interprets headers for IP TCP UDP and ICMP only HARDWARE REQUIRED Any Ultrix system VAX or DEC RISC hardware SOFTWARE REQUIRED Ultrix release 4 0 or later For Ultrix 4 1 may require the patched if_ln o kernel module available from Digital s Customer Support Center NOCTools2 Working Group Page 154 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY Available though subject to copyright restrictions via anonymous FTP from ftp ee lbl gov The source and documentation for the tool is in compressed tar format in file tcpdump tar Z Also available from spam itstd sri com in directory pub For VMS hosts with DEC ethernet controllers available as part of TGV MultiNet IP software package and TCPware for VMS from Process Software Corporation NOCTools2 Working Group Page 155 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog TCPLOGGER NAM tcplogger KEYWORDS traffic IP eavesdrop UNIX free ABSTRACT Tcplogger consists of modifications to the 4 3BSD UNIX source code and a large library of post processing software Tcplogger records timestamped information from TCP and IP packets that are sent and received on a specified connection For each TCP packet information such as sequence number acknowledgement sequenc number packet size and header flags is recorded For an IP packet header length p
120. on not through LADDIS members like Auspex DEC Sun etc CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY This entry is maintained by the NOCtools editors Send E mail to noctools request merit edu NOCTools2 Working Group Page 63 RFC 1470 Inter NAME KEYWO ABSTR MECHA FYI Network Management Tool Catalog June 1993 net Tool Catalog LAN_PATROL LAN Patrol RDS security traffic ethernet star eavesdrop DOS ACT LAN Patrol is a full featured network analyzer that provides essential information for effective fault and performance management It allows network managers to easily monitor user activity find traffic overloads plan for growth test cable uncover intruders balance network services and so on LAN Patrol uses state of the art data collection techniques to monitor all activity on a network giving an accurate picture of how it is performing LAN Patrol s reports can be saved as ASCII files to disk and imported into spreadsheet or database pro grams for further analysis NISM The LAN Patrol interface driver programs a standard interface card to capture all traffic on a network seg m s ent The driver operates from the background of a tandard PC maintaining statistics for each station on the network The information can be viewed on the PC s screen or as a user defined report output either to file or printer CAVEA B
121. onally the Network Integrator can analyze a network s topology and record the location of all operational nodes on a network Data can be displayed in six separate formats of bar graphs In addition there are several routines for producing statistical summaries of the data collected MECHANISM The tools work through RPC and XDR calls CAVEATS Although the tool adds only little traffic to a net work generation of statistics from captured files requires a significant portion of a workstation s CPU BUGS None known LIMITATIONS Must be root to run monitor There does not seem to be a limit to the number of nodes since it monitors by segments The only major limitation is the amount of disk space that a user can commit to the log files The size of the log files however can be controlled through the tool s parameters NOCTools2 Working Group Page 108 RFC 1470 FYI Network Management Tool Catalog HARDWARE REQ UIRED Sun3 or Sun4 SOFTWARE REQ UIRED 4 0BSD AVAILABILITY Copyrig Network UNIX or greater or related OS hted commercially available from Integrators 408 927 0412 NOCTools2 Working Group June 1993 Page 109 RFC 1470 Internet NAME KEYWORDS ABSTRACT MECHANIS FYI Network Management Tool Catalog June 1993 Tool Catalog NF Swatch nfswatch Traffic Ethernet IP NFS Cu
122. or monitoring implementations of the CHAOS protocol suite or network components that use ita DECnet a tool for controlling or monitoring implementations of the DECnet protocol suite or network components that use it DNS a Domain Name System debugging tool Ethernet a tool for controlling on ethernet LANs or monitoring network components FDDI a tool for controlling on FDDI LANs or WANs or monitoring network components IP a tool for controlling or monitoring implementations of the TCP IP protocol use it suite or network components that OSI a tool for control Lling or monitoring implementations of the OSI protocol Tts suite or network components that use NFS a Network File System debugging tool Ring a tool for controlling or monitoring network components on Token Ring LANs NOCTools2 Working Group Page 7 RFC 1470 FYI Network Management Tool Catalog June 1993 SMTP an SMTP debugging tool Star a tool for controlling or monitoring network components on StarLANs The keywords used to describe a tool s mechanism are CMIS a network management system or component based on CMIS CMIP the Common Management Information System and Protocol Curses a tool that uses the curses tty interface package Eavesdrop a tool that silently monitors communications media e g by putting an ethernet interface into promiscu ous mode NMS the tool is a com
123. ork that is subnetted with a netmask of 255 255 255 0 This is easy to change but it s compiled in BUGS None known LIMITATIONS None T HARDWAR REQUIRED Has been tested on Sun 3 and Sun 4 SPARC systems under SunOS 4 1 x DEC VAXes under 4 3BSD SOFTWARE REQUIRED Runs under SunOS 4 x and 4 3BSD should be easy to port to any other Berkeley like system Requires raw sockets and the ioctl calls to get at the ARP table NOCTools2 Working Group Page 50 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL Public domain and freely distributable Available via anonymous FTP from harbor ecn purdue edu also has been posted to comp sources unix The current version is Version 1 4 from May 1992 Contact point Dave Curry Purdue University Engineering Computer Network 1285 Electrical Engineering Bldg West Lafayette IN 47907 1285 davy ecn purdue edu CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Dave Curry see address above NOCTools2 Working Group Page 51 RFC 1470 NOCTools2 Working Group FYI Network Management Tool Catalog June 1993 Internet Tool Catalog GETONE_WELLFLEET NAME getone getmany getroute getarp getaddr getif getid KEYWORDS manager routing status IP NMS SNMP UNIX ABSTRACT These commands retrieve and format
124. ormance and status of SNMP ments Xnetmon presents a sch representing the up down statu xpmon draws a pen plot style g time of any arbitrary MIB obje mon and xpmon use the SNMP RF status and performance data MECHANISM CAVEATS BUGS Xnetmon polls network elements 1 Catalog June 1993 XNETMON_WELLFLEET P NMS SNMP UNIX hical representation of capable network ele ematic network map s of network elements raph of the change over ct RFC1066 Both xnet C1098 for retrieving for the status of their interfaces on a controllable p windows displaying the values supported by separate polls received from a network elemen olling interval Pop up of any MIB variable are When SNMP traps are t that element and all adjacent elements are immediat heir status The layout of t ally configured Xpmon repea he designated network element ly re polled to update he network map is stati tedly polls using SNMP for the value of the he change in the variable is hart he cur The strip chart regula rent maximum value on t c t designated MIB variable on th T E Polling intervals should be ch to affect system performance a None known LIMITATIONS HARDWARE None reported REQUIRED Distributed and supported for SOFTWARE REQUIRED SunOS 3 5 or 4 x X11 release NOCTools2 Working Group user specifi
125. ould appear on your local label Ethernet Load should appear in the upper 1 title bars or other decorati program comes up without the label then either your reso appropriate app defaults dir xnetload image Try re runn include the in front of Good Luck The following changes have b eft hand corner just below any additional ons provided by your window manager If the nine lines or without the Ethernet Load urce file is not properly installed in the ectory or you may have picked up the wrong ing make install as root or be sure to the command name o Now use Athena Strip n made to this directory since R3 Chart widget o Understands WM_DELET E_WINDOW o 3 26 92 Modified fro Sterling Software at Mountain View Calif Availability ftp proteus arc nasa NOCTools2 Working Group m xload to xnetload by Roger Smith NASA Ames Research Center rsmith proteus arc nasa gov gov pub XEnetload tar Z or check archie Page 187 RFC 1470 FYI Network Management Tool Catalog June 1993 NETTEST nettest nettestd Performs client and server functions for timing data throughput The nettest and nettestd commands invoke client and server programs that are used for timing data throughput of various methods of interprocess communication For TCP and OSI con nections the nettest program establishes a connection with the nettestd program and th
126. packets is approximated If after each read completes on th thernet device the utility detects that it has no reads pending on that device the lost packet counter is incremented by one When the total number of bytes processed exceeds 7fffffff hex all counters are automatically reset to zero HARDWARE REQUIRED A DEC ethernet controller SOFTWARE REQUIRED VAX VMS version V5 1 Page 74 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY For executables only password ing files ANONYMOUS ANONYMOUS ANONYMOUS ANONYMOUS NOCTools2 Working Group GUEST on CCC NMF PROGRAMS PROGRAMS PROGRAMS PROGRAMS F TP to the ENTM ENTM DOC ENTM ENTM EXE ENTM EN_TYPES DA ENTM IP_TYPES DA ANONYMOUS account ECC GOV and GET the follow ASCII text binary ASCII text ASCII text sin ee a Page 75 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog Interactive Network Map NAME map Interactive Network Map KEYWORDS manager map CHAOS ethernet IP ring star NMS ping SNMP X UNIX free sourcelib ABSTRACT Map draws a map of network connectivity and allows interactive examination of information about various components including whether hosts can be reached over the network The program is supplied with complete source and is written in a modular fashion to make
127. patible network management The NETscout family is based on standards so that operation may be realized in heterogeneous networks ti protocol multi topology which constitute a mul multi vendor environme upon which NETscout is nt The fundamental based are the Simple standards Network Management Protocol SNMP which defines the protocol ations between NETscout devices and the Remote Monitoring Management Information Base for all inter communic RMON MIB which defi user for each network and analysis features nes the type of information segment which is to be gathered and made available to the NETscout clients provide a full array of monitoring level decoding of all majorprotocol stacks DOD including TCP IP DECNET including LAT IBM Token Ring NOCTools2 Working Group SNMP including RMON MIB SUN NFS SMT including intelligent seven XNS Novell ISO APPLETALK Vines NETBIOS SMB NETscout agents support all nine groups of the RMON MIB standard NETscout agents can work with any SNMP based network management system and currently Page 103 RFC 1470 FYI Network Management Tool Catalog June 1993 thernet and Token Ring Eal support MECHANISM The operation of the NETscout family is divided into two distinct subcategories The first is the Client which is the user console from which operational commands are issued
128. ponent of or queries a Network Manage ment System Ping a tool that sends packet probes such as ICMP echo mes sages to help distinguish tools we do not consider NMS queries or protocol spoofing see below as probes Proprietary a distributed tool that uses proprietary communications techniques to link its components RMON a tool which employs the RMON extensions to SNMP SNMP a network management system or component based on SNMP the Simple Network Management Protocol Spoof a tool that tests operation of remote protocol modules by peer level messag xchange X a tool that uses X Windows NOCTools2 Working Group Page 8 RFC 1470 FYI Network Management Tool Catalog June 1993 The keywords used to describe a tool s operating environment are DOS a tool that runs under MS DOS HP a tool that runs on Hewlett Packard systems Macintosh a tool that runs on Macintosh personal computers OS 2 a tool that runs under the OS 2 operating system Standalone an integrated hardware software tool that requires only a network interface for operation Sun a tool that runs on Sun Microsystems platforms binary distribution built for use on a Sun UNIX a tool that runs under 4 xBSD UNIX or related OS VMS a tool that runs under DEC s VMS operating system The keywords used to describe a tool s characteristics as a hardware or software acquisition are Free a tool is available at no
129. questions are weighted as to their importance the report generator can sort the questions by weight This way the most important issues can be tackled After answering the questions in one of the the user can generate a report from The thirteen physical rsonnel security systems develop rity awareness and training prac data and rocessing and operations security r prevention environmental secu recovery security and The questions are displayed on the screen and the user is prompted for a single keystroke reply When the end of one of the thirteen sections is reached the answers are written to a disk file answer fil The question file and the ar CAV EATS None BUGS None known LIMITATIONS None reported HARDWARE REQUIR No restric ED tions NOCTools2 Working Group merged to create the report file Page 38 RFC 1470 FYI Ne twork Management Tool Catalog SOFTWARE R EQUIR ED DOS operating system AVAILABILITY A commercial product available from Ca Dey P O Box 58363 Seattle WA 98138 206 NOCTools2 Working Group Ltd 243 8700 June 1993 Page 39 RFC 1470 Internet NAME FYI Network Management Tool Catalog June 1993 Tool Catalog CMIP LIBRARY CMIP Library KEYWORDS manager osi cmis unix free sourcelib ABSTRACT The CMIP Library implements the functionality of th
130. r Metrix Protocol Analyzer Metrix Traffic Generator Chechen ct MON from Mitre NN A ota A ey 5o je OHE Ne nf nh NO OSs pi pi pr qu SAS CP scout tstat twork Integrator I swatch fsstone NNStat COL ITRACI ng ng from UCB oxyd from SNMP Research ery GI GI SNMP Development Kit SNMP Libraries and Utilities from Empire Technologies SNMP Libraries and Utilities from SNMP Research SNMP Packaged Agent System from SNMP Research PS sn sn SP sp EC tc Er Tr EE tt V XN xn xn I SNMP mpd from Empire Technologies mpd from SNMP Research IMS ray pdump plogger aceroute icklet pt cp fy ETMON from SNMP Research etmon from Wellfleet etperfmon from SNMP Research VMS ar EN NOCTo P TM ols2 Working Group June 1993 Page 26 RFC 1470 FYI Network Management Tool Catalog June 1993 fping net_monitor netstat NPRV ping SNMP Libraries and Utilities from SNMP Research tcpdump traceroute ttcp xnetperfmon from SNMP Research Free arp Beholder CMIP Library CMU SNMP Distribution DiG dnsstats doc ENTM fping getethers hammer amp anvil hopcheck host Interactive Network Map Internet Rover iozone lamers net_monitor netmon from Mitre netstat netwatch nfswatch nhfsstone NNStat NOCOL NPRV OSITRACE PING ping from UCB query SNMP Development Kit tcpdump
131. r can be imported to database or spreadsheet packages CAVEATS BUGS In normal use the Sniffer is a passive device and so will not adversely effect network performance Perfor mance degradation will be observed of course if the Sniffer is set to Traffic Generator mode and connected to an active network None known LIMITATIONS None reported HARDWARE REQUIRED SOF TWARI None The Sniffer is a self contained unit and includes its own interface card It installs intoa network as would any normal workstation J REQUIRED None NOCTools2 Working Group Page 137 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY The Sniffer is available commercially For information on your local representative call or write Network General Corporation 4200 Bohannon Drive Menlo Park CA 94025 Phone 415 688 2700 Fax 415 321 0855 For acquisition by government agencies the Sniffer is included on the GSA schedule NOCTools2 Working Group Page 138 RFC 1470 FYI Network Management Tool Catalog June 1993 SNMP_DEVELOPMENT_KIT Internet Tool Catalog NAME The SNMP Development Kit KEYWORDS manager status IP NMS SNMP UNIX free sourcelib ABSTRACT The SNMP Development Kit comprises C Language source code for a programming library that facilitates access to the management services of the SNMP RFC
132. r use by hosts workstations and servers in the network It generates pseudo random pronounceable passwords for selection and assignment to users by the security officer The NSS deadman timer locks the NSS screen or logs the security officer off the NSS after periods of inactivity A biometric authentication device is optional for rigorous fingerprint authentication of users at the NSS and logins to the NSS itself are permitted only at the console The NSS currently provides centralized security management for a System High Network It is being upgraded for a Compartmented Mode environment NOCTools2 Working Group Page 164 RFC 1470 FYI Network Management Tool Catalog June 1993 MECHANISM The NSS uses the Audit Information Transfer Protocol AITP for the transfer of security alerts and audit data AITP is NOT proprietary and the specification is available from the address listed below Access to the NSS audit database is provided via the Structured Query Language SQL CAVEATS None BUGS None known LIMITATIONS None reported HARDWARE REQUIRED Hardware required is a Sun 4 SPARCStation with a color monitor at least 600 MB disk and 150 MB 1 4 cartridge tape drive SOFTWARE REQUIRED SunOS Version 4 1 1 running the Sun OpenWindows X windowing environment and the SYBASE Relational Data Base Management System AVAILABILITY AN
133. ransmit OSI XNS and Xerox link level echo packets to user specified stations performs loop round tests In traffic generation mode the SpiderAnalyzer has the ability to generate packets at random intervals of ran dom lengths or any combination of random or fixed interval or length generation of packets with CRC errors or packets that are too short or packets that are too long Output from the SpiderMonitor Analyzer can be imported to database or spreadsheet packages NOCTools2 Working Group Page 147 RFC 1470 MECHANTI FYI SM Network Management Tool Catalog The SpiderMonitor and Spider Analyzer are available as stand alone IBM PC compatible packages based upon a Compaq III portable system or as a plug in boards for any IBM XT AT compatible machine The model 220 Spi derMonitor systems provide a functional base suited for most network management needs The model 320 Spi derAnalyzer systems provide extended functionality in the development mode and traffic generation mode as well more filtering capabilities than the 220 models CAVEATS ne BUGS Es Traffic generation will congest an operational ether None known LIMITATIONS Monitoring of up to 1024 stations and buffering of up to 1500 packets The model 220 provides for 3 filters wi th a fil vides for wi HARDWAR EH a fi ter depth of 46 bytes The model 320 pro 4 filters and a second level of filter
134. red in he RDBMS including those relating to TCP IP ECnet and any other protocol feature configurable via SNMP Polls devices to compare their current parameter values with those in the database and produce reports of the discrepancies Collect data about the state of the network Learn the parameters of the devices in the network and populate the database Performance Management Displays local network traffic graphically by packet size protocol network utilization sources and destinations of packets etc Provides for the scheduling of jobs to retrieve NOCTools2 Working Group Page 81 RFC 1470 MECHANT CAVEATS BUGS LIMITAT FYI Network Management Tool Catalog June 1993 MIB values of a device and store them in the RDBMS for review or summary reporting at a later time Allows high low thresholds to be set on retrieved values with alarms generated when thresholds are exceeded Fault Management Provides availability monitoring and indicates potential problems Creates alarms from received SNMP traps and from other internally generated conditions Records alarms in the alarm log in the RDBMS Lists alarms for selected set of devices according to various filter conditions Possible causes and suggested actions for the alarms are listed New alarms are indicated by a flashing icon and optional audio alert Visual indication of alarms bubble
135. righted by CMU but may be used and sold without permission right notices for further information The distribu tion is available by anonymous FTP from the host lancaster andrew cmu edu 128 2 13 21 as the files pub cmu snmp 9 tar and pub kip snmp 9 tar The former includes the libraries and the applications and the latter is the KIP SNMP agent Please direct questions comments sw0l snmp andrew cmu edu swO1l Consult the copy and bug reports to is ess double you zero ell If you pick up this package please send a note to the above address so that you may be notified of future enhancements changes and additions to the set of applications several are planned NOCTools2 Working Group Page 37 RFC 1470 FYI Internet Tool Catalog NAME Network Management Tool Ca talog June 1993 COMPUTER S ECURITY CHECKLIST Computer Security Checklist EYWORDS security DOS ABSTRACT This program consists of 858 computer security ques tions divided up in thirteen sections The program presents the questions to the user and records their responses thirteen sections the questions and the user s answers sections are access security ment security tices program security p ergonomics and erro rity pe secu first MECHANISM telecommunications security organizational and management security and backup and The
136. ring Bldg 100 Hamilton Avenue West Lafayette IN 47907 1285 Palo Alto CA 94301 davy ecn purdue edu mogul decwrl dec com CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Dave Curry see address above NOCTools2 Working Group Page 111 RFC 1470 FYI Network Management Internet Tool Catalog NAME nhfsstone KEYWORDS benchmark generator ABSTRACT Nhfsstone client to generate an artificial Tool Catalog June 1993 NHFSSTON GI NFS spoof UNIX free pronounced n f s stone t is an NFS benchmarking program It he h is silent is used on an NFS load with a particular mix of NFS operations It reports t time of the server in milliseconds per call and the load in calls per second The nhfss includes a script results into plot nhfsnums 5 format so that using graph 1 and other tools MECHANISM he average respons tone distribution that converts test they can be graphed Nhfsstone is an NFS traffic generator It adjusts its calling patterns based on the client s kernel NFS statistics and th lapsed tim Load can be generated over a given time or number of NFS calls CAVEATS Nhfsstone will compete for system resources with other applicatio BUGS None known LIMITATIONS None repor ns ted ED HARDWARE REQUIR No restric tions SOFTWARE REQUIR ED 4 xBSD bas N
137. rite resource record output to optional logfile Special MB tracing by recursively expanding MR and MG records Special mode to check SOA records at each nameserver for domain x Special mode to check inverse mappings of host addresses Code is extensively documented a7 NOCTools2 Working Group Page 183 RFC 1470 FYI Network Management Tool Catalog June 1993 PINGs Many many versions of the PING program exist Each implementation has its own set of additional features Here are a few more PINGs that are worth taking a look at Version on ftp cc berkeley edu pub ping This version has duplicate packet detection Record Route ability to specify data pattern for packets flood pinging an interval option Multicast support etc Version on nikhefh nikhef nl pub network rping tar Z rping is just like ping but only a single probe packet is sent to test the reachability of a destination As an option the loose source routing facility is used to show the roundtrip route the packet has taken Multiple addresses of remote hosts are tried until one responds As an option each of multiple addresses can be probed unconditionally Contains a patch for making loose source routing work in case you have a SUN with an OMNINET ethernet controller NOCTools2 Working Group Page 184 RFC 1470 FYI Network Management Tool Catalog June 1993 VREY vrfy tar 2Z Version 921021 vrfy
138. rking Tools and Programs software installation option NOCTools2 Working Group Page 46 RFC 1470 FYI Network Management Tool Cat Internet Tool Catalog NAME thernet codes KEYWORDS reference ethernet fddi f T T ABSTRACT codes and the uses of multicast broadcast addresses MECHANISM alog June 1993 ETHERNET CODES Mike Patton of MIT LCS has compiled a very comprehensive list of the IEEE numbers used on Ethernet and FDDI with some permutation This file contains collected information on the various codes used on IEEE 802 3 and EtherNet There are thr pages type codes vendor including CAVEATS FTP the file and use it like a secret decoder ring Since this information is from collected wisdom there are certainly omissions BUGS Mike welcomes any further additions They can be sent to a special mailbox that he has set up MAP EtherNet codes LCS MI LIMITATIONS See caveats Ea HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED No restrictions NOCTools2 Working Group Edu Page 47 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL The file is stored as flat non compressed ASCII text It can be FTP ed from ftp lcs mit edu Retreive the fil pub map EtherNet
139. roup comp sources unix For VMS ttcp c is included in the MultiNet Programmer s Kit a standard feature of TGV MultiNet IP software package NOCTools2 Working Group Page 163 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog UNISYS PARAMAX NAME ABSTRACT Paramax Network Security Server KEYWORDS alarm control manager security status ethernet FDDI IP X UNIX The Paramax Network Security Server NSS is a security officer s tool for centralized security management of TCP IP based networks The NSS provides capability for collection on line storage maintenance and correlation of audit data from hosts workstations servers and network devices Through the X window based user interface a security officer can review and analyze this audit data at the NSS select and request filtered portions of host audit data and receive and analyze security alerts from across the network The NSS supports centralized access control of network resources through its capability to create and update user and host access permissions data The user access permissions data identifies network addresses that each user is permitted to access The host access permissions data identifies network addresses between which communication is permitted The NSS supports centralized management of user authentication data user IDs and passwords and other user data fo
140. rses Eavesdrop UNIX Free Nfswatch monitors all incoming ethernet traffic to an NFS file server and divides it into several categories The number and percentage of packets received in each category is displayed on the screen in a continuously updated display By default nfswatch monitors all packets destined for the local host over a single network interface Options are provided to specify the specific interface to be monitored or all interfaces at once NFS traffic to the local host to a remote host froma specific host between two hosts or all NFS traffic on the network may be monitored Categories of packets monitored and counted include ND Read ND Write NFS Read NFS Write NFS Mount Yellow Pages NIS RPC Authorization Other RPC TCP UDP ICMP RIP ARP RARP Ethernet Broadcast and Other Packets are also tallied either by file system or file specific files may be watched as an option NFS procedure name RPC call or NFS client hostname Facilities for taking snapshots of the screen as well as saving data to a log file for later analysis the analysis tool is included are also available M Nfswatch uses the Network Interface Tap nit 4 under SunOS 4 x and the Packet Filter packetfilter 4 under Ultrix 4 x to place th thernet interface into promiscuous mode It filters out NFS packets and decodes the file handles in order to determine how to count the packet N
141. s NetMetrix Load Monitor NetMetrix NFS Monitor NetMetrix Protocol Analyzer NetMetrix Traffic Generator SAS CPE PSI SNMP XNETMON from SNMP Research xnetperfmon from SNMP Research xup DEG Wollongong Manager DOS Computer Security Checklist Ethernet Box II hammer amp anvil hopcheck iozone LAN Patrol LANVista netmon NETMON for Windows netwatch OverVIEW PacketView ping SAS CPE SNMP Libraries and Utilities from SNMP Research SNMP Packaged Agent System from SNMP Research snmpd from SNMP Research TokenVIEW Wollongong Manager xnetperfmon from SNMP Research F NOCTools2 Working Group Page 24 RFC 1470 FYI Network Management Tool Catalog June 1993 HP iozone SAS CPI xup GI Macintosh HyperMIB OS 2 Beholder Tricklet Standalone LANVista Sniffer SNMP Packaged Agent System from SNMP Research SpiderMonitor Sun Avatar SunSNMPD Wollongong Manager UNIX arp CMIP Library CMU SNMP decaddrs from Wellfleet DiG doc dnsstats Eagle etherfind etherhostprobe EtherView fping getethers getone from Wellfleet host Interactive Network Map Internet Rover ilozone LADDIS NOCTools2 Working Group Page 25 RFC 1 la mc lt lt D iw w L O e u e e e e 470 FYI Network Management Tool Catalog mers onnect B Manager from Empire Technologies NET t_monitor l Manager Metrix Load Monitor Metrix NFS Monito
142. s from source to destination to be discovered It can be used for situations where the IP record route option would fail such as intermediate gateways dis carding packets routes that exceed the capacity of an datagram or intermediate IP implementations that don t support record route Round trip delays between the source and intermediate gateways are also reported allowing the determination of individual gateways con tribution to end to end delay Enhanced versions of traceroute have been developed that allow specification of loose source routes for datagrams This allows one to investigate the return path from remote machines back to the local host MECHANISM Traceroute relies on the ICMP TIME EXCEEDED error reporting mechanism When an IP packet is received by an gateway with a time to live value of 0 an ICMP packet is sent to the host which generated the packet By sending packets to a destination with a TTL of 0 the next hop can be identified as the source of the ICMP TIME EXCEEDED message By incrementing the TTL field the subsequent hops can be identified Each packet sent out is also time stamped The time stamp is returned as part of the ICMP packet so a round trip delay can be calculated T CAVEATS Some IP implementations forward packets with a TTL of 0 thus escaping identification Others use the TTL field in the arriving packet as the T
143. s up the network map heirarchy Cumulative reports can be produced Utilities Function View and or terminate current NMC processes Access to database maintenance utilities SM SNMP None reported None known IONS Maximum number of nodes that can be monitored is 18 000 This can include Hosts Terminal Servers PCs Routers and Bridges HARDWARE REQUIRED The host for the NMC software is a Sun 4 desktop works tation Recommended minimum hardware is the Sun IPX Color workstation with a 1 4 SCSI tape drive SOFTWARE REQUIRED NOCTools2 Worki MONET V5 0 which is provided on 1 4 tape format runs on the Sun 4 1 1 Operating System ng Group Page 82 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL A commercial product of Hughes LAN Systems Inc 1225 Charleston Road Mountain View CA 94043 Phone 415 966 7300 Fax 415 960 3738 RCA Telex 276572 CONTACT POINT FOR CHANGES TO THIS CATALOG kishoret msgate hls com kzm hls com NOCTools2 Working Group ENTRY Page 83 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog NET_MONITOR NAME net_monitor KEYWORDS routing status DECnet IP curses ping UNIX VMS free sourcelib ABSTRACT Net_monitor uses ICMP echo and DECnet reachability
144. ssed via NFS Andrew etc MECHANISM This test writes a X MEGABYTE sequential file in Y byte chunks then rewinds it and reads it back The size of the file should be big enough to factor out the effect of any disk cache Finally IOZONE deletes the temporary file Options allow one to vary X and Y In addition auto test runs IOZONE repeatedly using record sizes from 512 to 8192 bytes adjustable and file sizes from 1 to 16 megabytes adjustable It creates a table of results CAVEATS The file is written filling any cache buffers and then read If the cache is gt X MB then most if not all the reads will be satisfied from the cache However if it is less than or equal to 5X MB then NONE of the reads will be satisfied from the cache This is becase after the file is written a 5X MB cache will contain the upper 5 MB of the test file but we will start reading from the beginning of the file data which is no longer in the cache In order for this to be a fair test the length of the test file must be AT LEAST 2X the amount of disk cache memory for your system If not you are really testing the speed at which your CPU can read blocks out of the cache not a fair test BUGS none known at this time NOCTools2 Working Group Page 58 RFC 1470 LIMITATIONS Network Management Tool Catalog June 1993 IOZONE does not normally test the ra
145. t and diagnose problems that may occur when developing installing or managing FDDI Ethernet and Token Ring networks and network products End users can use the ChameLAN 100 to aid in the installation and maintenance of Ethernet and Token Ring networks To isolate specific network trouble spots the ChameLAN 100 uses filtering and triggering techniques for data capture Higher level protocol decode includes TCP IP OSI and DECnet protocol suites Protocol decode of IPX SNMP XTP and AppleTalk are also supported Development of additional protocol decodes is also under development The ChameLAN 100 family also offers a Protocol Management Development System PMDS that enables users to develop custom protocol decode suites The FDDI Ethernet and Token Ring hardware interfaces feature independent processing power Real time data is monitored unobtrusively at full bandwidth without affecting network activity Real time data may also be saved to a 120MB or optional 200MB hard disk drive for later analysis FDDI data is captured at 125 megabits per second Mbps Ethernet at 10 Mbps and Token Ring at 4 or 16 Mbps MECHANISM This portable standalone unit incorporates the power of UNIX X Windows and Motif Its UNIX based programming interface facilitates development of customized monitoring and simulation applications The ChameLAN 100 may connect to the network a
146. t any location using standard equipment Standard graphical Motif X Windows and TCP IP allow remote control through Ethernet and 10Base T interfaces Tekelec also offers a rackmounted model ChameLAN 100 X Both models can be controlled via a Sun Workstation remotely CAVEATS none BUGS none known NOCTools2 Working Group Page 34 RFC 1470 FYI Network Management Tool Catalog June 1993 LIMITATIONS none reported HARDWARE F REQUIRED None The ChameLAN 100 is a self contained unit and includes its own interface cards It installs into a network with standard interface connectors SOFTWARE F REQUIRED None AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL CONTACT The ChameLAN 100 product famil y is available commercially For more information or a free demo call or write 1 800 tek elec Tekelec 26580 West Agoura Road Calabasas CA 91302 Phone 818 880 5656 Fax 818 880 6993 The ChameLAN 100 is listed on the GSA schedule POINT FOR CHANGES TO THIS CATALOG ENTRY Todd Koch Public Relations Specialist 818 880 7718 Internet todd koch tekelec com NOCTools2 Working Group Page 35 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog CMU_SNMP NAME The CMU SNMP Distribution KEYWORDS manager status IP NMS SNMP UNIX free sourcelib ABSTRACT The CMU SNM
147. t specification language there are constructs for different application types e g bulk data transfer for specifying frequency and sequence of messages for dis tribution over message sizes and for combining basic specifications These specifications are independent of both protocols and protocol implementations and can be used for benchmarking For more details on the internals of SPIMS see Nordmark amp Gunningberg SPIMS A Tool for Protocol Implementation Performance Measurements Proc of 13 th n Local Computer Networks Minneapolis 1989 pp Conf o ZLZ2 2D 9 CAVEATS None BUGS LIMITATION S None known None reported HARDWARE REQUIRED No restrictions SOFTWARE REQUIRED SPIMS is implemented on UNIX including SunOS 4 4 3BSD UNIX DN UNIX System V with extensions and Ultrix 2 0 3 0 It requires a TCP connection for meas urement set up No kernel modifications or any modifi cations to measured protocols are required NOCTools2 Working Group Page 150 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL SPIMS is not in the public domain and the software is covered by licenses Use of the SPIMS software represents acceptance of the terms and conditions of the licenses The licenses ar nclosed in the distribution package Licenses and SPIMS cover letter can also be obtained via
148. talog Each mention is separated by a lt form feed gt for improved readability If you intend to actually print out this section of the catalog then you should probably strip out the lt ff gt How to Submit Update an Entry 1 review the template included below to determine what information you will need to collect 2 review the keywords to see what your indexing options are 3 assemble update catalog entry to include results of 1 and 2 4 Submit your entry using either of the following two methods a Post your submission to comp internet noctools submissions b Email your submission to noctools entries merit edu New entries will be circulated automatically upon reception As time permits the NOCtools editors will review recent submissions and incorporate them into the master indexes Enquiries regarding the NOCTools2 Working Group Page 2 RFC 1470 FYI Network Management Tool Catalog June 1993 status of a submission should be E Mailed to noctools request merit edu m l Those submitting an entry to the catalog should insure that any mail addresses provided are correct and functional Either the catalog editors or prospective users of your tool may wish to reach you NOCTools2 Working Group Page 3 RFC 1470 W EMPLATE NAM GI lt tool KEYWORDS lt key lt key lt key ABSTRACT lt summary of lt summ
149. talog June 1993 Internet Tool Catalog TRPT NAME TRPT transliterate protocol trace KEYWORDS traffic IP eavesdrop UNIX free ABSTRACT TRPT displays a trace of a TCP socket events When no options are supplied TRPT prints all the trace records found in a system grouped according to TCP connection protocol control block PCB An example of TRPT output is 38241 ESTABLISHED input e 0531003 e0531203 6cc5b402 win 4000 lt ACK gt gt ESTA BLISHED 38241 ESTABLISHED user RCVD gt ESTABLISHED 38266 ESTABLISHED output 6cc5b402 e0531203 win 4000 lt ACK gt gt ESTABLISHED T 38331 ESTABLISHED input e0531203 e0531403 6cc5b402 win 4000 lt ACK FIN PUSH gt gt CLOSE_WAIT 38331 CLOSE_WAIT output 6cc5b402 e0531404 win 3dff lt ACK gt gt CLOSE_WAIT 38331 CLOSE_WAIT user RCVD gt CLOSE_WAI 38343 LAST_ACK output T 6cc5b402 e0531404 win 4000 lt ACK FIN gt gt LAST_ACK 38343 CLOSE_WAIT user DISCONNECT gt LAST_ACK 38343 LAST_ACK user DETACH gt LAST_ACK MECHANISM CAVEATS RPT interrogates the buffer of TCP trace records that is created when a CP socket is marked for debugging Prior to using TRPT an analyst should take steps to isolate the problem connection and find the address of its protocol control blocks
150. taneously or proxy agents may be used to summarize information at a common point BUGS None known LIMITATIONS None reported HARDWAR T REQUIRED Systems supporting X windows SOFTWAR T REQUIRED XNETMON from SNMP Research and X Version 11 release 4 or later option MOTIF NOCTools2 Working Group Page 175 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL This is a commercial product available under licens from SNMP Research 3001 Kimberlin Heights Road Knoxville TN 37920 9716 Attn John Southwood Sales and Marketing 615 573 1434 Voice 615 573 9197 FAX CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY users seymourl cs utk edu NOCTools2 Working Group Page 176 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog XUP_HP NAME xup KEYWORDS status ping X HP ABSTRACT Xup uses the X Windows to display the status of an interesting set of hosts MECHANISM Xup uses ping to determine host status CAVEATS Polling for status increases network load BUGS None known LIMITATIONS None reported HARDWARE REQUIRED Runs only on HP series 300 and 800 workstations SOFTWARE REQUIRED Version 10 of X Windows AVAILABILITY A standard command for the HP 300 amp 800 Workstations NOCTools2 Working Gro
151. tatistics monitoring function only hat is it does not include the protocol decode function or the mechanism to retrieve actual data from a remote agent It does however include complete statistics gathering and event and alarm generation Frontier NETscout Models 9510 and 9515 and Model 9610 and 9615 are agent software packages that implement selected network diagnostic functions when loaded into a Sun SPARCStation 9510 9515 or a SynOptics LattisNet Hub 9610 9615 respectively which is NOCTools2 Working Group Page 104 RFC 1470 FYI Network Management Tool Catalog June 1993 connected to an Ethernet network segment using conventional network interface hardware Models 9510 and 9610 support all nine RMON MIB groups including filters and packet capture and thus provide for complete protocol monitoring and decode when used with a client equipped with protocol decode software Models 9515 an 9615 include support for seven RMON MIB groups which excludes filters and data capture and therefore perform network monitoring only through collection and presentation of network statistics events and alarms All models also support the MIB2 system and interface groups Frontier NETscout Models 9520 and 9525 and Model 9620 and 9625 are agent software packages that are identical in function to their respective models described above except that they are for use on Token Ring segments CAVEATS
152. ternet Pro tocols UDP TCP FTP SunRPC the OSI protocols from the ISODE 4 0 distribution package FTAM ROSE ISO TPO and to Sunlink 5 2 ISO TP4 as well as Stanford s VMTP Also available are a rudimentary set of benchmarks stubs for new protocol interfaces and a user manual For an example of the use of SPIMS to tune protocols see Nordmark amp Cheriton Experiences from VMTIP How to achieve low response time IFIP WG6 1 6 4 Protocols for High Speed Networks May 1989 Zurich To be published For an example of how SPIMS can be used to benchmark protocols see Gunningberg Bjorkman Nordmark Sjodin Pink amp Stromqvist Application Protocols and Performance Benchmarks IEEE Communications Magazine June 1989 Vol 27 No 6 pp 30 36 Sjodin Gunningberg Nordmark amp Pink Towards Protocol Benchmarks IFIP WG6 1 6 4 Protocols for High Speed Networks May 1989 Zurich pp 57 67 NOCTools2 Working Group Page 149 RFC 1470 FYI MECHANISM Network Management Tool Catalog June 1993 SPIMS runs as user processes and uses a TCP connection for measurement set up Measurements take place between processes over the measured protocol SPIMS generates messages and transfers them via the measured protocol service according to a user supplied specifi cation language that is used to specify a measurement session In the SPIMS has a unique measuremen
153. terphase and Sun LADDIS met regularly to create the LADDIS NFS benchmark an unbiased standard vendor independent scalable NFS performance test The purpose of the LADDIS benchmark is to give users a credible and undisputed test of NFS performance and to give vendors a publishable standard performance measure that customers can use for load planning system configuration and equipment buying decisions Toward this end the LADDIS benchmark is being adopted by SPEC the System Performance Evaluation Cooperative creators of SPECmarks as the first member of SPEC s System level File Server SFS benchmark suite In particular we have had unexpected interest from some router vendors in using LADDIS to both rate and stress test IP routers This is because LADDIS can send back to back full size packet trains and because it can generate a 90 Ethernet util on simulated real NFS workloads just like routers encounter in the real world But LADDIS is for local Ethernet or FDDI nets only not WAN MECHANISM Generates NFS requests and measures responsiveness of the server NOCTools2 Working Group Page 61 RFC 1470 FYI Network Management Tool Catalog June 1993 CAVEATS LADDIS is not released yet by SPEC although a free beta version quite stable is available now as PRE LADDIS So you might want to put PRE LADDIS in your listing noting that
154. test is assumed anda filename is checked for existence This way users can create scripts that create a file if there is a prob lem and the data collector simply checks the existence of that file to determine if there is problem CAVEATS BUGS None known NOCTools2 Working Group Page 56 RFC 1470 FYI Network Management Tool Catalog June 1993 LIMITATIONS This tool does not yet have the capability to perform actions based on the result of the test Rather it is intended for a multi operator environment and simply displays a list of what is wrong with the net HARDWARE REQUIRED This software is known to run on Suns and IBM RTs SOFTWARE REQUIRED Curses 4 xBSD UNIX socket programming libraries BSD ping AVAILABILITY Full source available via anonymous FTP from merit edu 35 1 1 42 in the ftp pub inetrover directory Source and executables are public domain and can be freely distributed for non commercial use This pack age is unsupported but bug reports and fixes may be sent to wbn merit edu NOCTools2 Working Group Page 57 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog IOZON GI NAME iozone KEYWORDS benchmark nfs dos hp unix vmx free ABSTRACT Software to assess the sequential file I O capability of a system May be useful as reference to compare against results obtained when files are acce
155. thernet token ring and FDDI networks A unique dual architecture provides compatibility with both RMON and X windows RMON allows interoperability while X windows enables much more powerful intelligent applications at remote segments and saves network bandwidth With the Protocol Analyzer you can decode and display packets as they are being captured Extensive filters let you sift through packets either before or after trace capture The capture filter may be specified by source destination between hosts protocol packet size pattern match or by a complete expression using an extensive filter expression language Full 7 layer packet decodes are available for all major protocols including DECnet Appletalk Novell XNS SNA BANYAN OSI and TCP IP The decodes for the TCP IP stack have all major protocols including NFS YP DNS SNMP OSPF etc Request and reply packets are matched Packets can be displayed in summary detail or hex with multiple views to see packet dialogues side by side A complete developers kit is available for custom decodes A floating license allows easy acess to the software tool anywhere you need it M NetMetrix turns the network interface into promiscuous mode to capture packets NOCTools2 Working Group Page 94 RFC 1470 FYI Network Management Tool Catalog June 1993 CAVEATS none BUGS none known LIMITATIONS none
156. tocol and statistical analyzers provide the tools to troubleshoot an Ethernet and Token Ring 4 16Mbps network LANVista lets you capture frames to RAM and or disk generate traffic for stress testing test your network cable for fault isolation and decode all 7 layers of many popular protocol stacks LANVista s 100 family offers exceptional price performance and a wide range of options Combined with an integrated upgrade path to the fully distributed LANVista 200 system the 100 line provides a reasonably priced entry into LAN management and protocol analysis All LANVista models are fully operable under Microsoft Windows Under Windows LANVista can be operated in the background gathering data and alarms as other tasks are completed Displayed data may easily be cut from LANVista and pasted into other Windows applications such as Excel Lotus 1 2 3 Harvard Graphics etc The versatile LANVista family can also be remotely controlled through the use of PC Anywhere Commute Carbon Copy or other PC remote control packages This feature allows the use of co pilot mode which enables an operator at the central site to guide and train a remote operator through network management or analysis tasks All LANVista models provide features vital to effective network management and troubleshooting Basic capabilities include Network database statistics based on the entire network and on a node basis Token Ring
157. up Page 177 RFC 1470 FYI Network Management Tool Catalog June 1993 Appendix No Writeups This section contains references to tools which are known to exist but which have not been fully cataloged If anyone wishes to author an entry for one of these tools please contact noctools request merit edu Each mention is separated by a lt form feed gt for improved readability If you intend to actually print out this section of the catalog then you should probably strip out the lt ff gt tuecho c FF F F FF FF F F F F FF F F F OF Send receive TCP or UDP echos in any of a number of bizzare ways Joel P Bion March 1990 Copyright c 1990 cisco Systems All rights reserved This tuecho program is distributed in the hope that it will be useful but WITHOUT ANY WARRANTY without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE Prompts as Host host to send echos to can be name or a b c d Enter protocol 0 UDP 1 TCP 0 UDP or TCP Size of data portion bytes 100 bytes in data excluding headers Number of bursts 5 number of bursts of packets to send Packets per burst 1 packets per burst all sent AT ONCE Timeout seconds 2 how long to wait for data Pause interval seconds 0 Pause interval between bursts of frames Type of pattern specify 0 increment 1 1 if 0 specified allow you to spe
158. ured via X interface MIB Chart and MIB Chart Editor Choice of strip chart packed strip chart or bar graphs User specified polling interval MIB variable s or MIB expressions using arithmetic operands Plot actual value delta or delta interval Plot multiple MIB expressions from multiple agents Simultaneously X Windows interface Pause polling and grid options MIB Tool X Windows application for the general viewing and walking of MIB trees GET NEXT and SET options Window for viewing RFC 1212 MIB definitions Command line interface option Application Programming Interface Complete set of APIs for developers to write SNMP applications in character mode or X Windows ECHANISM Management Station uses SNMP and ICMP Echo Request to monitor and control SNMP Agents Network management daemon implements Wollongong s Manager MIB SNMP over TCP and the SMUX protocol NOCTools2 Working Group Page 167 RFC 1470 FYI Network Management Tool Catalog June 1993 CAVEATS none BUGS See Product Release Notice LIMITATIONS Limitations on number of management agents and network management daemons not known at this time HARDWARE REQUIRED Sun SPARC workstations and servers DEC DECStations and DECsystems Motorola MPC Delta 8000 series 3 486 PC and PC compatible 16 MB RAM n20 MB free disk space for installation Color monitor stron
159. ven describes how a tool works In CAVEATS warnings about tool use are given In BUGS known bugs or bug report procedures ar the boundaries of a tool s capabilities given LIMITATIONS describes HARDWARE REQUIRED and SOFTWARE REQUIRED relate the operational environment a tool needs Finally in AVAILABILITY pointers to vendors or other sources for a tool are given online repositories Where tool names conflict the vendor name is used as well For example MITRE and SNMP Research each submitted an updated description of a tool called NETMON independently developed are functional and the tool from SNMP Research as NE NOCTools2 Working Group F These tools were ly different and run in different environments MITRE s tool is listed as NETMON_MITRE MON_WINDOWS_SNMP_RESEARCH Page 29 RFC 1470 FYI Network Management Tool Catalog June 1993 Internet Tool Catalog ARP NAME arp KEYWORDS routing ethernet IP UNIX VMS free ABSTRACT Arp displays and can modify th internet to ethernet address translations tables used by ARP the address resolution protocol MECHANISM The arp program accesses operating system memory to read the ARP data structures CAVEATS None BUGS None known LIMITATIONS Only the super user can modify ARP entries HARDWAR T R
160. ver performance evaluate NFS performance enhancement strategies A floating license and the X Window protocol allows monitoring of remot thernet token ring and FDDI segments from a central enterprise wide display MECHANISM NetMetrix turns the network interface into promiscuous mode to capture packets CAVEATS none BUGS none known LIMITATIONS none HARDWARE REQUIRED SPARC system SOFTWARE REQUIRED SunOS 4 0 or higher NOCTools2 Working Group Page 92 RFC 1470 FYI Network Management Tool Catalog June 1993 AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL NetMetrix is available from Sales Department Metrix Network Systems Inc One Tara Boulevard Nashua New Hampshire 03062 telephone 603 888 7000 fax 603 891 2796 email info metrix com Government agencies please note that NetMetrix is on the GSA schedule CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY Norma Shepperd Marketing Administrator 603 888 7000 norma metrix com NOCTools2 Working Group Page 93 RFC 1470 Internet NAME Ne KEYWORDS ABSTRACT MECHANIS FYI Network Management Tool Catalog June 1993 Tool Catalog NetMetrix Protocol Analyzer tMetrix Protocol Analyzer alarm analyzer traffic DECnet DNS Ethernet FDDI IP OSI NFS Ring SMTP Eavesdrop SNMP X UNIX Library The NetMetrix Protocol Analyzer is a distributed client server monitoring tool for e
161. w I O speed of your disk or system em It tests the speed of sequential I O to actual files Therefore this measurement factors in the efficiency of you compiler and C runtime library machines fil system operating system C It produces a measurement which is the number of bytes per second that your system can read or write to a file HARDWARE EQUIRED This program has been ported and tested on the following computer operating systems Vendor Operating System Notes on compiling IOzone Apollo Domain OS no cc switches BSD domain AT amp UNIX System V R4 AT amp T 6386WGS AT amp T UNIX 5 3 2 define SYSTYPE_SYSV Generic AT amp T Convergent Digital Equipment Digital Equipment Digital Equipment Hewlett Packard IBM Interactive Microsoft MIPS Next OSF Portable QNX SCO SCO SCO Silicon Graphics Sony Microsystems Sun Microsystems Tandem Computers Tandem Computers xx for VMS define SIOZONE UNIX System V R3 Unisys AT amp T SVR3 ULTRIX V4 1 VAX VMS V5 4 VAX VMS POSIX HP UX 7 05 AIX Ver 3 rel UNIX System V R3 MS DOS 3 3 RISCos 4 52 NeXt OS 2 x OSF 1 QNX 4 0 ENIX 2 3 ENIX 3 2 IX IX UNOS 4 1 1 UARDIAN 90 N N QnGQGaGK KG Non Stop UX iozone as a foreign SSYSSDISK IOZONE POSIX 1003 1 1988 NIX System V 386 3 may need cc DSVR3 cc DCONVERGEN
162. work map Connection with other distributed daemons and any connected stations is accomplished with SNMP TCP Configured via Manager MIB also incorporates SMUX MIB RFC 1227 Sends any information to INGRES Oracle or Sybase via an ESQL interface User defined actions include send alarm to map send info to flat file execute ESQL command call any UNIX system command forward traps and filter user defined alarms User defined alarms can use any boolean expression and MIB variable expressions can be combined with AND OR statements MIB Compiler ASN 1 MIB compiler with X Windows interface Accepts RFC 1155 and 1212 format Most vendor specific MIBs and proposed Internet standard MIBs already included NOCTools2 Working Group Page 166 RFC 1470 FYI Network Management Tool Catalog June 1993 Network Map Comprehensive network monitoring map with click and drag interface hiearchical and virtual views Toolkit and preferences applications device discovery Uses etc hosts file NIS or DNS for device resolution Background pixmapping capability user definable menu bar network manager and console operator modes via UNIX group permissions Multiple map use without limitation MIB Form and MIB Form Editor User designed X based SNMP applications Alias for MIB variables and interprets returned values GET NEXT and SET capability User defined polling and multi device agent capability Config
163. y not always be detected A simple test is performed to guess which packets are Page 73 RFC 1470 FYI Network Management Tool Catalog June 1993 in IEEE 802 format DSAP equal to SSAP Thus some DSAP SSAP pairs may be reported as an ethernet type while valid ethernet types may be reported as IEEE 802 packets In some hardware configurations placing an ethernet controller in promiscuous mode with automatic restart enabled will hang the controller running this code not Our VAX 8650 hangs while our uVAX IIs and uVAX IIIs do Please report any additional b Allen Sturtevant National Magnetic Fusion Lawrence Livermor ugs to the author at Energy Computer Center NOCTools2 Working Group National Laboratory P O Box 808 L 561 Livermore CA 94550 Phone 415 422 8266 E Mail sturtevant ccc nmfecc gov LIMITATIONS The user is required to have PHY_IO privileges that the user process as enough quotas remaining BYTLM BIOLM ASTLM and PAGFLQUO the program without state The contents of IE TMPMBX and NETMBX When activated the program first checks to successfully run entering into an involuntary wait Some quotas require a fairly generous setting T E 802 packets are not examined Only the presence of IEEE 802 packets on the wire is reported The count of lost

FYI on a Network Management Tool Catalog: Tools for Monitoring

Contents

Download Pdf Manuals

Related Search

Related Contents