1
|
|
2
|
- Establish network benchmarks
- Install Network Monitor Driver
- Install, configure, and use Network Monitor, including setting up
filters and triggers
- Install and configure SNMP service
|
3
|
- Use System Monitor to monitor a network
- Troubleshoot and tune a network
|
4
|
- Networks are dynamic with changing patterns of activity and rapid growth
toward more high-bandwidth demand
- Monitoring a network is important to be able to distinguish between
problems due to the network and problems due to servers connected to the
network
|
5
|
- Plan to obtain network benchmarks to help with problem diagnosis and
planning, such as:
- Slow, average, and peak network activity in relation to the work
patterns of an organization
- Network activity that is related to specific protocols
- Network activity that is related to specific servers and host computers
|
6
|
- Network activity that is related to workstations
- Network activity on individual subnets or portions of a larger network
- Network traffic related to WAN transmissions
- Network traffic created by particular software
|
7
|
- Network monitoring and management tools in Windows 2000 include:
- Network Monitor Driver
- Network Monitor
- SNMP service
- System Monitor
|
8
|
- Network Monitor Driver: Enables a Microsoft-based server or workstation
NIC to gather network performance data for assessment by the Microsoft
Network Monitor
- Network Monitor: A Windows NT and Windows 2000 network monitoring tool
that can capture and display network performance data
|
9
|
|
10
|
- To install Network Monitor Driver:
- Open the Network and Dial-Up Connections tool
- Right-click Local Area Connection
- Click Properties
- Click Install
- Double-click Protocol
- Double-click Network Monitor Driver
|
11
|
|
12
|
- Network Monitor tracks information such as:
- Percent network utilization
- Frames and bytes transported per second
- Network station statistics
- Statistics captured for a specific interval of time
- Transmissions per second
|
13
|
- Broadcast, unicast, and multicast information
- NIC statistics
- Error data
- Addresses of network stations
- Other network computers running Network Monitor and Network Monitor
Driver
|
14
|
- The general steps to install Network Monitor are:
- Open the Add/Remove Programs tool
- Double-click the component, Management and Monitoring Tools
- Check Network Monitor Tools
|
15
|
|
16
|
- The general steps for starting a capture session in network monitor are:
- Start Network Monitor from the Administrative Tools menu
- Select the network to monitor
- Click the Capture button to start capturing information
- Click the Stop Capture button to stop capturing information
|
17
|
|
18
|
- As is true of other monitoring tools, Network Monitor can create an
extra load on a server
|
19
|
- Data captured in Network Monitor is displayed interactively in four
window panes, but can be customized to show only one, two, or three
panes
|
20
|
|
21
|
- After data is captured, you can view a line-by-line capture summary
report by clicking the Stop and View Capture button
|
22
|
|
23
|
|
24
|
|
25
|
- Use the Find button in the capture summary display to find specific
information
|
26
|
|
27
|
- Network Monitor has a built-in ability to configure a filter
- Filter: A capacity in network monitoring software that enables a
network or server administrator to view only designated protocols,
network events, network nodes, or other specialized views of the
network
|
28
|
- To create a filter in network monitor:
- Click the Edit Capture Filter button and click OK
- Set the specific parameters by double-clicking any of: SAP/ETYPE,
Address Pairs, and Pattern Matches
- Click OK
- Continue Capturing data
|
29
|
|
30
|
|
31
|
- Server Access Point (SAP): A service access point, which specifies the
network process that should accept a frame at the destination, such as
TCP/IP
- Ethertype (ETYPE): A property of an Ethernet frame that includes a
specialized two-byte code used for particular vendor functions
|
32
|
- Besides filtering, Network Monitor supports using capture triggers
- Capture trigger: Used as a way to have Network Monitor perform a
specific function when a predefined situation occurs, such as stopping
a capture of network data when the capture buffer is 50% full
|
33
|
|
34
|
- Check the Graph pane for a quick
assessment of performance statistics for:
- % Network Utilization
- Frames Per Second
- Bytes Per Second
- Broadcasts Per Second
- Multicasts Per Second
|
35
|
- Use Network Monitor to diagnose problems such as:
- A NIC creating a broadcast storm
- Inefficient multimedia applications
- Problems with bridges, switches, and routers
- Problems with particular a workstation
- An overloaded server
|
36
|
- A broadcast storm is a situation in which one or more devices, such as a
failing NIC, are saturating the network with traffic
- Use the Network Monitor Broadcasts Per Second statistic to help
determine if there is a broadcast storm and then check the Session and
Station panes for the device(s) sending the broadcast(s)
|
37
|
- Network Monitor can create problems when it is used by network intruders
or unauthorized users
- You can view all of the Network Monitor users by clicking the Tools menu
and then clicking Identify Network Monitor users
|
38
|
|
39
|
- The Simple Network Management Protocol (SNMP) is used to gather
standardized network performance information and to control network
devices
|
40
|
- SNMP uses two kinds of network stations:
- Network Management Station (NMS): Monitors and manages devices
configured with SNMP and collects information
- Agent: Any device configured for SNMP from which an NMS can collect
data – SNMP agents include servers, workstations, routers, switches,
and hubs
|
41
|
- The following systems can be managed through SNMP:
- Windows 2000 and NT servers
- Windows 2000 and NT workstations
- WINS servers
- DHCP servers
- IIS servers
- Microsoft RAS and IAS servers
|
42
|
- To install SNMP:
- Open the Add/Remove Programs tool
- Click Add/Remove Windows Components
- Double-click Management and Monitoring tools
- Check Simple Network Management
Protocol and click OK
- Click Next and then click Finish
|
43
|
- After installing SNMP, configure one or more community names for
security
- Community name: In SNMP communications, a password used by network
agents and the network management station so that their communications
cannot be easily intercepted by an unauthorized workstation or device
|
44
|
|
45
|
- SNMP enables you to configure a trap
- Trap: A specific situation or event detected by SNMP that a network
administrator may want to be warned about or to track via a network
management station, such as when a network device is unexpectedly down
or offline
|
46
|
- If a trap that you set does not work, make sure that the SNMP Trap
Service is started and set to start automatically in Windows 2000 Server
|
47
|
- System Monitor contains a wide range of objects for monitoring a network
- Some objects only appear in System Monitor if you have a particular
protocol installed
|
48
|
|
49
|
|
50
|
|
51
|
|
52
|
- System Monitor can be used to monitor the NIC at the server to make sure
that it is working properly
- System Monitor is also used to monitor for network problems at the
server and between the server and network devices
|
53
|
|
54
|
|
55
|
|
56
|
|
57
|
|
58
|
|
59
|
|
60
|
|
61
|
|
62
|
|
63
|
|
64
|
|
65
|
- Keep NIC drivers updated
- Replace slow NICs
- Tune the network access order
- Implement TCP/IP exclusively, if possible
- Purchase servers that are equipped to keep up with the server load
|
66
|
- Monitor for excessive BPDU broadcasts
- Monitor the network for saturation from broadcast storms
- Replace aging, slower network devices with newer, faster devices
- Use multimedia applications that support multicasting
- Upgrade bandwidth to match the load
|
67
|
- Monitoring a network is as important as monitoring a server
- Establish network benchmarks to help in preventing and diagnosing
problems
- Install the Network Monitor Driver and Network Monitor together to
enable network monitoring from Windows 2000 Server
|
68
|
- Install Microsoft SNMP service to take advantage of SNMP-based network
management station monitoring
- Use the System Monitor’s network-related objects, counters, and
instances for in-depth network monitoring, particularly of protocols
|