HP Transcend Traffix Manager manual

180INDEX

detecting unauthorized machine access 73					device aggregation				23
general rules 78					events	20, 36, 71
network supplier support 165					graphs	20, 65
network traffic					grouping devices in the Map 39
typical 36					launching Traffix Manager after the first time					49
network traffic rules					launching Traffix Manager for the first time					25,
configuring events 71					26
monitoring critical connections			75		main window			27
monitoring critical devices	74				reporting		20, 89
monitoring long term trends		77			RMON standards 37
monitoring network resource usage				74	RMON-2		21, 37
monitoring network trends		75
monitoring protocol usage		78
monitoring protocol usage		78			P
monitoring server devices	78				P
monitoring WAN and backbone links				79	polling for data collection 27, 54
typical network traffic levels		36			predefined attributes				40
networking, related documentation			14		predefined event rules				72
new user					predefined groupings				43
getting started with Traffix Manager				23	DNS 43
Number of Devices dialog box		59			MAC and Type			44

Type and Network 43

Vendor and MAC

44

O

printing reports

95

Object List

program structure

description 28

attribute lookup

145

viewing groups and devices

29

programs

object status key

58

dblookup

142

objects

fileattrs 140

adding connections between

60

SubnetsDB

133

adding connections to and from

60

protocols

definition

28

applications and favorites

61

displaying connections between

60

deregistering with agents

63

displaying connections to and from

60

filtering display of Map

61

displaying information about

58

monitoring usage

78

displaying object name

58

notes on user-defined protocols 63

displaying object status

58

registering with agents

63

hiding all connections in the Map

61

selecting for an event rule

76

identifying using MAC address

157

user-defined

62

identifying using NL address

157

locating in Map 59

R

removing all connections

60

removing all connections from 61

raw report data

removing connections between

60

overview

93

removing connections to and from

60

troubleshooting

117

searching for

59

recommended RMON table sizes 154

selecting and deselecting in the main

registering user-defined protocols with agents 63

window

59

related documentation

statistics

59

networking

14

zooming to in Map

59

remote access

37

online technical services

163

remote monitoring 37

Output Monitor dialog box

96

remote server

50

overviews

removing all traffic connections in the Map 61

collector

35

Image 180

HP Transcend Traffix Manager manual Detecting unauthorized machine access

Contents

User Guide 3Com Corporation 5400 Bayfront Plaza Santa Clara, California Contents Part II HOW Traffix Manager Works Collecting Data Displaying Connections To and From Objects Overview Predefined Event Rules Viewing Events Report Types Using the SubnetsDB File How Subnet Grouping Works 3Com Agents Supported Interface Types Monitoring Network Segments Using RMON-1 Agents Online Technical Services 163 World Wide Web SiteSnmp Tables used by Traffix Manager Page Where to find specific information About this GuideDocumentation If you are looking for Turn to Appendix a Conventions List conventions that are used throughout this guideText Conventions Icon Description Terminology Used This GuideRelated Documents Comments MiscellaneousPddtechpubscomments@3com.com Year Compliance3Com Year 2000 Web Getting Started with Traffix Manager Page Traffix Manager Overview Traffix Manager Overview How Does Traffix Manager Work? Traffix Manager Gathers Data from the Network Strategy for New Users Traffix Manager Overview Installing Rmon Transcend NCS Network Administration Guide forLaunching Traffix Manager For the First Time Agents on Your Launching Traffix ManagerServer Client Launching the Traffix Manager Client Managerwindow Traffix Manager Main Window Main Window ReferenceGrouping devices Minus sign next to the group Menu Option Function Display Collection EventsReports Help Traffix Manager Main Window Menu Options HOW Traffix Manager Works Page Collecting Data How TraffixManager Processes Collected Data Collected Data is added to a Relational Database Rmon Overview How Traffix MAP OverviewThis chapter contains the following sections Geographical location Attributes Be familiar with the concepts of attributes and groupingsPredefined attributes you can change these or add your own Unknown, or unassigned Installdir Groupings Assigning MAC AddressesRecords an entry for both devices and both devices appear Device a with the MAC address of the router Groupings Deselect Collapse Redundant Grouping Select this grouping Groupings Groupings dialog box III Running Traffix ManagerPage Launching Traffix Manager After the First Time Launching a TraffixManager Client After the first time. It contains the following sections There are two access levels for running the client Configuring Agents for Data Collection Interfaces Configuring Agents for Data Collection Community Access Levels Adding and Editing AgentsLevel Description Viewing Agent Statistics Polling for Data CollectionPolling Agents Over a WAN Link Suspending and Resuming Data Collection Manually Finding Agents for Data Collection Configuring Agents for Data Collection Displaying Network Traffic Main Window Loading NetworkTraffic Data You make these selections in the Load Traffic dialog box Working with Objects in the MainWindow Displaying Network Group StatisticsSelecting Them Objects From ObjectsDescription of Display Buttons Protocols Applications Favorites Displaying Network Traffic in the Main Window RMON-2 Limitations Displaying Network Traffic in the Main Window Displaying Traffic in Graphs Information about selected items Using the Graph Panel Using the Launch Graph Dialog BoxItems in the Map Launch Graph dialog box Using the Launch Graph Dialog Box Displaying Traffic in Graphs Using Event Rules Using Event Rules Examples of Event Rules Monitor Network Resource Usage Monitor Critical Devices Monitor Critical Connections Monitor Network Trends Specifying Devices Selecting Protocols Specifying the Time Filter Specifying SensitivitySpotting General Long Term Trends Monitoring Which Devices Are Using a Server Maintaining Network SecurityEnforcing Corporate Policy About Network Usage Monitoring Protocol Usage Monitoring WAN Links and Backbone Detecting Unauthorized ServersMonitoring Congestion on WAN Links Detecting Network Misuse Using Event Rules Viewing Events Viewing Events You use the Event List to display information about events By severity Filter dialog box By event rule Do not summarizePrint Viewing Managing SelectedEvents Configuring Traffix Manager to Forward Events as Snmp Traps Configuring an Open Management Platform OMPClick Add Forwarding Events as Snmp Traps Viewing Events Overview of Reporting During a specified period Reports Daily Reports Time Line for Daily Report Generation Weekly Reports Monthly Reports Report Manager has three main areas Report Manager Managing Reports Scheduling Reports Running Ad HocReports Managing Raw Data Managing Reports Change the lifetime of that raw report data or output Strategy for ReportingTraffix Manager Use Graphs to Identify Key Components Quickly Effects of Grouping On Reports Report Types Connection Activity Report Charts Report Section Chart TitleReport Device Activity Group Activity There are three ways you can report on groupsExternal Traffic flowing into or out of the group only Internal Traffic flowing within the group only Segment Activity Report Charts Unusual error totals. These baselines are calculated Top N Connections Received over the report period Top N Connections Report Charts Top N Connections Report Charts Top N Devices Report Charts Top Devices Remainder are grouped as other Device History Top N Groups Report Charts Top N Groups Percentage of errors Top N Segments Report ChartsTop N Segments Segments report Top N Segments Report Charts Utilization Appendices and Index Page Troubleshooting Traffix Manager TroubleshootingRunning Traffix Manager, and their solutions Contains descriptions of problems you might encounter when Reporting features of Traffix Manager Diagnosing Traffix Manager ProblemsReports If Browser is not in your path message is displayed Internal traffic Error could not Appendix a Troubleshooting Traffix Manager Traffix Control Panel This appendix contains Database These applications help you to manage and organize a numberNetwork over time Provides the following applications for managing databases Database Maintenance Clean databases Repair databases Optimize databases Install\traffix\config Upgrading Traffix Manager Deinstalling Traffix To deinstall Traffix Manager 2.0 for NT Manager Appendix B Database Management Using Traffix Control Panel Default Aggregating DevicesAggregation Local Domain Specification Selecting the Default Aggregation Action Setting a Maximum Device Limit Com Using the Subnetsdb File UsingSubnetsDB File File can be edited and reapplied at any time Class Description How Subnet Grouping Works Appendix D Using the Subnetsdb File Automatic Attribute Assignment Overview Contents User-defined Attributes Configuration File Mylookup fileattrs.exe c\my data\data.txt True Using the fileattrs Program PerformingAttribute Assignment True Appendix E Automatic Attribute Assignment Lookup2 Lookup2 Companies dblookup.exe c\data\companies.mdb Installdir\TraffixServer\examples All example programs are included There is one version in Visual Basic and one in C Simple attribute lookup process in C Example Programs Name Language Description Library functions available FunctionDescription Function Description GetAttribute Appendix E Automatic Attribute Assignment Supported RMON-2 Devices Types Appendix F Supported RMON-2 Devices Configuring 3COM DownloadingFirmware to 3Com Standalone Agents RMON-2 Agents RMON-1 Table Sizes RMON-2 Table SizesPage Appendix G Configuring 3COM Standalone RMON-2 Agents Manager Monitors Dhcp DevicesWhat Effect Do Dhcp Devices Have Chapter H Dhcp Using RMON-1 Agents Using RMON-1Monitoring Network Segments Appendix I Using RMON-1 Agents Retrieval Snmp Tables used by Traffix ManagerMandatory Comments ProtoDist For protocol distribution reports only Services ServicesTechnical Support Online Technical Access by Analog Modem Username anonymousHours a day, 7 days a week Country Data Rate Telephone Number Access by Digital Modem 847 262408 727 Europe, South Africa, and Middle East Country Telephone Number Asia, Pacific Rim Country Telephone Number Fax Number Page Glossary Glossary Glossary Glossary Glossary Tree See Object List Index Numbers Community names definition 53 overview Dhcp 153 Html Detecting unauthorized machine access RMON-2 Snmp User Authorization dialog box 50 User Guide Structure Index 3Com Corporation Limited Warranty Limitation of Liability