MIB for the UDP-Lite Protocol

Publisher PD

Multifaceted Faculty Network Design and Management: Practice and Experience Report

We report on our experience on multidimensional aspects of our faculty's network design and management, including some unique aspects such as campus-wide VLANs and ghosting, security and monitoring, switching and routing, and others. We outline a historical perspective on certain research, design, and development decisions and discuss the network topology, its scalability, and management in detail; the services our network provides, and its evolution. We overview the security aspects of the management as well as data management and automation and the use of the data by other members of the IT group in the faculty.Comment: 19 pages, 11 figures, TOC and index; a short version presented at C3S2E'11; v6: more proofreading, index, TOC, reference

A Monitoring System for the BaBar INFN Computing Cluster

Monitoring large clusters is a challenging problem. It is necessary to observe a large quantity of devices with a reasonably short delay between consecutive observations. The set of monitored devices may include PCs, network switches, tape libraries and other equipments. The monitoring activity should not impact the performances of the system. In this paper we present PerfMC, a monitoring system for large clusters. PerfMC is driven by an XML configuration file, and uses the Simple Network Management Protocol (SNMP) for data collection. SNMP is a standard protocol implemented by many networked equipments, so the tool can be used to monitor a wide range of devices. System administrators can display informations on the status of each device by connecting to a WEB server embedded in PerfMC. The WEB server can produce graphs showing the value of different monitored quantities as a function of time; it can also produce arbitrary XML pages by applying XSL Transformations to an internal XML representation of the cluster's status. XSL Transformations may be used to produce HTML pages which can be displayed by ordinary WEB browsers. PerfMC aims at being relatively easy to configure and operate, and highly efficient. It is currently being used to monitor the Italian Reprocessing farm for the BaBar experiment, which is made of about 200 dual-CPU Linux machines.Comment: Talk from the 2003 Computing in High Energy and Nuclear Physics (CHEP03), La Jolla, Ca, USA, March 2003, 10 pages, LaTeX, 4 eps figures. PSN MOET00

Monitoring platform for the UBI network infrastructure

Network monitoring is a crucial IT process, which consists of monitoring network devices such as routers, switches, firewalls and servers for performance and fault issues. A good functioning network if vital for an organization, but unfortunately, network outages and performance issues are a part of every organization’s network. Faults, being hardware or human originated, may appear at any time and can give rise to sometimes critical situations. For this reason, network devices should be monitored continuously in a proactive way to prevent these network failures and downtimes. Identifying traffic bottlenecks, faulty components, low performance and other types of issues in an early stage minimizes or even eliminates bigger problems that can occur later on. Efficient proactive monitoring can help prevent network outage and should be implemented by every network administrator. Adopting a secure, low bandwidth consumption and compatible protocol is a good practice when implementing a monitoring solution. One such protocol is the Simple Network Management Protocol (SNMP) and provides a message format for communication between the SNMP managers and agents; it is also supported by most of the present day network devices and servers. The main goal of research described in this dissertation is the study of the various existing freeware SNMP monitoring platforms in the market today and the implementation of the one best suited for the university’s network. The solution would have to be compatible with the university’s multivendor device network and be scalable enough to permit future growth. It should also have a good alerting system to provide a pro-active approach to resolving issues. Implementation, evaluation and conclusions of the best suited monitoring solution are presented during the course of this study

UNIT4 - Platform : SNMP Provider

UNIT4 és una multinacional dedicada a la indústria del software per a la gestió empresarial; el departament d'Investigació i Desenvolupament desenvolupa i utilitza la plataforma karat per desplegar els seus productes i serveis. L'objectiu d'aquest Projecte va ser la publicació d'informació administrativa de la plataforma karat per tal de gestionar els servidors karat utilitzant eines de mercat de tercers, que suporten estàndards de gestió de xarxes o d'aplicacions com el Simple Network Management Protocol o les Java Management eXtensions. Una aplicació Java va ser desenvolupada per aconseguir l'objectiu i complir amb els requeriments del Projecte, utilitzant una metodologia iterativa àgil i proveint no un, sinó dos serveis estàndard de gestió per a la plataforma. Servidors karat ja poden ser administrats per la majoria dels sistemes comercials de gestió de xarxes dels nostres dies.UNIT4 es una multinacional dedicada la industria del software para la gestión empresarial; el departamento de Investigación y Desarrollo desarrolla y utiliza la plataforma karat para desplegar sus productos y servicios. El objetivo de este Proyecto era publicar información administrativa de la plataforma karat para gestionar servidores karat utilizando herramientas de mercado de terceros, que soporten estándares de gestión de redes o aplicaciones como el Simple Network Management Protocol o las Java Management eXtensions. Un aplicación Java fue desarrollada para alcanzar el objetivo y cumplir con los requerimientos del Proyecto, usando una metodología iterativa ágil y proveyendo no uno, sino dos servicios estándar de gestión para la plataforma. Servidores karat ahora pueden ser gestionados por la mayoría de los sistemas comerciales de administración de redes de nuestros días.UNIT4 is a multinational dedicated to the software industry for business management; the Research and Development department develops and uses the karat platform to deploy their products and services. The objective of this Project was to publish management information from the karat platform in order to administrate karat servers using third party market tools, which support network or application management standards like the Simple Network Management Protocol or Java Management eXtensions. A Java Application was developed to achieve the objective and meet the requirements of the Project, using an iterative agile methodology and providing not one, but two standard management services for the whole platform. Karat servers can now be administered by most of the commercial network management systems of our days

An SNMP-based audio distribution service architecture

Dissertação de mestrado em Engenharia de Redes e Serviços TelemáticosThe constant growth of integration and popularity of “Internet of Things” devices is affecting home automation systems, where new technologies were introduced, in the recent years for this particular sector. These automation systems integrate devices that can be anywhere in the house, connected to a home network, either through a wire or wireless connection. A home automation system can be used to control air conditioning, lighting, pool control systems, home-entertainment systems and much more. Within the field of home-entertainment systems, the best known technologies are the Digital Living Network Alliance and the Digital Audio Access Protocol, which provide interoperability to allow sharing of digital media content between devices across a home network. However, these technologies have the disadvantage of being proprietary, maintaining restrict documentation access, complex architectures and concepts and not optimal to specific purposes, like audio distribution. The main goal of this project was to prove that is possible to use standardized protocols, such as the Simple Network Manager Protocol and open source tools in order to develop a music distribution service that allows the implementation of similar features than the ones already existing proprietary technologies. As such, the implementation prototype system allows a user to manage and play audio from a music collection that is stored in a single home audio server. The system architecture enables audio streaming between the server and the various devices in the same local network. Further more, the music collection, can integrate virtual audio files that are available from external music sources, like iTunes, etc.O constante crescimento de integração e popularidade da “Internet das coisas” tem atualmente afetado sistemas de domótica, onde cada vez mais tecnologias têm vindo a ser desenvolvidas nos últimos anos para este sector em particular. Estes sistemas de domótica integram dispositivos que podem estar em qualquer parte de uma casa, ligados à rede seja através de um cabo ou por wireless. Um sistema de domótica pode ser usado para controlar: ar condicionado, iluminação, sistemas de controlo de piscinas, sistemas de entretenimento, entre outros. Na área de sistemas de entretenimento, as tecnologias mais conhecidas são Digital Living Network Alliance e Digital Audio Access Protocol, que fornecem interoperabilidade de modo a permitir a partilha de conteúdos digitais multimédia entre dispositivos que se encontram na mesma rede local. Contudo, possuem a desvantagem de serem tecnologias proprietárias, com documentação e manuais restritos, arquiteturas e conceitos complexos, e não otimizados para fins específicos, tal distribuição de áudio. O principal objetivo deste projeto foi provar que é possível usar protocolos normalizados, como o Simple Network Manager Protocol e ferramentas open source de forma a desenvolver um serviço de distribuição de música que permite a implementação de funcionalidades semelhantes às tecnologias proprietárias já existentes. Assim, o protótipo implementado permite a um utilizador gerir e reproduzir áudio de uma coleção de música que se esteja armazenada num servidor de áudio domestico. A arquitetura permite streaming de áudio entre o servidor e os diferentes dispositivos que se encontram na mesma rede local. Consequentemente, a coleção de música pode integrar ficheiros de áudio visuais que estejam acessíveis através de fontes externas de música, como por exemplo: iTunes, etc

An Iterative and Toolchain-Based Approach to Automate Scanning and Mapping Computer Networks

As today's organizational computer networks are ever evolving and becoming more and more complex, finding potential vulnerabilities and conducting security audits has become a crucial element in securing these networks. The first step in auditing a network is reconnaissance by mapping it to get a comprehensive overview over its structure. The growing complexity, however, makes this task increasingly effortful, even more as mapping (instead of plain scanning), presently, still involves a lot of manual work. Therefore, the concept proposed in this paper automates the scanning and mapping of unknown and non-cooperative computer networks in order to find security weaknesses or verify access controls. It further helps to conduct audits by allowing comparing documented with actual networks and finding unauthorized network devices, as well as evaluating access control methods by conducting delta scans. It uses a novel approach of augmenting data from iteratively chained existing scanning tools with context, using genuine analytics modules to allow assessing a network's topology instead of just generating a list of scanned devices. It further contains a visualization model that provides a clear, lucid topology map and a special graph for comparative analysis. The goal is to provide maximum insight with a minimum of a priori knowledge.Comment: 7 pages, 6 figure

Secure Configuration and Management of Linux Systems using a Network Service Orchestrator.

Manual management of the configuration of network devices and computing devices (hosts) is an error-prone task. Centralized automation of these tasks can lower the costs of management, but can also introduce unknown or unanticipated security risks. Misconfiguration (deliberate (by outsiders) or inadvertent (by insiders)) can expose a system to significant risks. Centralized network management has seen significant progress in recent years, resulting in model-driven approaches that are clearly superior to previous "craft" methods. Host management has seen less development. The tools available have developed in separate task-specific ways. This thesis explores two aspects of the configuration management problem for hosts: (1) implementing host management using the model-driven (network) management tools; (2) establishing the relative security of traditional methods and the above proposal for model driven host management. It is shown that the model-driven approach is feasible, and the security of the model driven approach is significantly higher than that of existing approaches