Network Management 14 Flashcards
Effective network management leads to
Improved QoS, reduced operating costs and increased revenue. Goal is to make operations more efficient.
What is network management
The management of functions such as operation, administration, maintenance, and provisioning of systems on a network using various activities, methods, procedures, and tools.
Operation deals with procedures that allow for the smooth running of the network
Administration involves keeping track of the assignment and utilization of devices on the network
Maintenance involves repairing and upgrading network components and taking necessary measures to ensure that devices are running optimally
Provisioning assigns resources to support a service.
What is SNMP
Simple Network Management Protocol
An application layer protocol used to collect information from network devices for diagnostic and maintenance purposes.
Includes two components. Management systems and agent software.
Three versions. SNMPv1. Original
SNMPv2 added several protocol operations and initial security measures
SNMPv3 added security features and remote configuration capabilities. Authentication, privacy, and access control
What are network monitoring tools
Can capture traffic, analyze it, create logs, alert you to events you define, monitor different interfaces, such as routers, switches, and servers, indicate areas of traffic congestion, help you construct baselines, determine upgrade and forecast needs, and generate reports for management.
What are throughput testers
Are software tools that can be used to measure network throughput and capacity.
They send large data packets from one destination to another and measure the time taken to transfer the packets. Throughout is the. Calculated by dividing the packet size by the time taken.
Name some common connectivity utilities used to troubleshoot connectivity issues
Ping, pathping, tracert, netstat
Name the three functional categories of network monitoring tools
Status monitoring. Used to gather data related to the status of the network. Tools include ping and nslookup commands
Traffic monitoring. Used to gather data related to the traffic generated in a network. Ping and iptrace in Unix commands can be used as a traffic monitoring tool.
Route monitoring. Used to trace taken by packets and detect routing delays. Tools include tracert and arp commands.
Network traffic analysis includes
Identification of the inbound and outbound protocols
Checking whether the protocols acknowledge each other.
Identifying if ports are open and closed
Checking the traffic that pass through a firewall
Checking throughout, threshold limits and overall network performance
Tracing packets on a network
Studying network utilization
What is port filtering
A technique of selectively enabling or disabling TCP and UDP ports on computers or network devices.
It ensures that no traffic except the protocol that the admin has chosen to allow can pass through an open port. Works by examining the packets header, source address, destination address, and port number.
What is traffic filtering
A method that allows only legitimate traffic through to the network
It blocks unwanted traffic minimizing valuable resource consumption. Traffic is filtered based On Rules that accept or deny based on the source or destination IP address.
Firewalls and servers are most commonly use this method.
Activities performed by the network diagnostic tools are
Monitor end to end application respnse time
Analyze network traffic
Manage device performance
Monitor and alert availability, Bandwidth utilization, and health of devices
Provide network diagnostics for troubleshooting and resolving issues
Offer network discovery tools that facilitate IP address management, port mapping and ping sweeps.
What is port mapping
Translates address of packets to a new address. The translated packets are then routed based on the routing table.
What is ping sweep
Establishes a range of IP addresses to locate active hosts within a given range. Can be performed by using tools such as fping and map.
What is a system performance monitor
A software tool that monitors the state of services or daemons, processes and resources on a system.
They track one or more counters which are individual statistics about the operation of different objects on the systems. When a counter value reaches a given threshold it indicates that the object of the counter may be functioning outside acceptable limits.
What is the top utility
Most Linux Unix systems provide a cpu usage monitoring tool call too as part of their default installation. Can provide either a static snapshot or a real time display of the processes currently running on a given cpu.
What is a log file
A record of actions and events performed on an operating system. Three common log files. System, general, and history files
Describe system log files
Often predetermined by the os itself and are a record of events logged by the os
Describe general log files
A type of system logs that contain information about device changes, installation or I installation of device drivers and any other system changes
Describe history log files
Record information such as type of log, the time of event occurrence, the name of the user who was logged on at the time of the event, keywords any id numbers and what category the event belongs to
What is syslog
A term used to define the process of logging program messages or data logs. Includes the software or OS that generates, reads, and analyzes log files.