SNMP - Simple Network Management Protocol - Developed in 1988 - DE facto standard for internetwork management - Simple Network Management Protocol - Monitor and/or configure devices on the network - polling - receiving traps - composed of two main components - Manager - console admin uses to perform networm management functions - Agent - interface to actual device being managed - Terminology - managed device - Agents - Network management system - Nagios - OPSView - HP openview - Graphing tools (MRTG, Cacti) - MIB - Management Information Base - hierarchical collection of information that can be monitored by SNMP Manager. - Get/Response system - Management software requests information - changes config on remote agent - Agent intitiates traffic if threshold is reached (trap) - Agent - software running on device being monitored - install - external - Polling - Querying an agent (router,server, switch) - Network Management Station will poll agents - Trap - initiated from agent to NMS - alert usually when something has happened - NMS will perform some action - MIB - management Information base - database of objects - defines all types of status and statistical information - MIB's can be custom - All agents implement MBI-II - provides general TCP/IP management information. - Transport Protocol - uses UDP - low overhead - Port 161 for sending/receiving requests - Port 162 for trap - Communities - SNMPv1 and SNMPv2, SNMPv3 - establish "trust" between manager and agent - three community types - readh-only (default-public) - read-write (default- private) - TRAP SMI and OID Root Node | | /|\ / | \ / | \ ccitt(0) iso(1) joint(2) \ org(3) \ dod(6) \ internet(1) \ internet(1) / / \ \ \ directory(1) mgmt(2) experimental(3) private(4) SNMPv2(6) - some important OIDs - 1.3.6.1.4.1.2 IBM - 1.3.6.1.4.1.9 Cisco - 1.3.6.1.4.1.11 - Hewlett-Packard Company - 1.3.6.1.4.1.23 - Novel - SNMP Operations - get - get-next - get-bulk (SNMPv2 and 3) - set - set-response - trap - notification (SNMPv2 and SNMPv3) - info (SNMPv2 and SNMPv3) - report (SNMPv2 and SNMPv3) - configuring Agents - sysContact - sysLocation - sysName - Read-only and Read-write community name - trap destination Assignment: How Performance Monitoring works in Windows?