Please enable JavaScript.
Coggle requires JavaScript to display documents.
DSNM - 03 Network Monitoring - Coggle Diagram
DSNM - 03
Network Monitoring
Definition
Types
Active
Process
Mesure performance
Gather Statistics
Generate test packets
Characteristics
Test packets may be blocked by FWR
For Performance
Extra Traffic on network --> May distort it's behavior
Usage
Traffic Charactorization
Intrusion Detection
Passive
Ethernet
Network Utilization
Peak utilization
Average utilization
Current utilization
Broadcast
Multicast
Waste Bandwidth
Degrade Performance
Should not exceed 5 - 10 %
Collision Rate
Errors
Collisions
Short Frames
Shorter than 64 Bytes
Collisions
Faulty NIC
Topology errors
Bad FCS
Faulty NIC
Corrupted Drivers
Bad Cabling
Faulty Hub
Noise
Ghosts
Energy / Noise
No SFD
Causes
Earth loops
Electrical Interference
Wiring
At least 72 bytes (including preamble)
Not Passed by NIC
Short Frames
Long Frames
Ghosts
Long Frame
Longer than 1518 bytes
Traffic
Monitor
Number of Nodes / Users
Protocols
Broadcast / Multicast / Unicast
Conversions
Errors
Protocols
Overhead Protocols
ARP
DNS
ICMP
LDAP
Routing
RIP
EIGRP
OSPF
SNMP