This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
OAUNETMON: OAUNETMON: A Network Traffic A Network Traffic Monitoring Monitoring ToolTool
Outline of the PresentationOutline of the Presentation
• IntroductionIntroduction
• The Obafemi Awolowo University The Obafemi Awolowo University Network (OAUNet).Network (OAUNet).
• Design/Architecture of OAUNETMON.Design/Architecture of OAUNETMON.
• Some screen shots of OAUNETMON.Some screen shots of OAUNETMON.
• ConclusionsConclusions
The Obafemi Awolowo The Obafemi Awolowo University Ile-Ife, NigeriaUniversity Ile-Ife, Nigeria
• 250km North-East of Lagos 250km North-East of Lagos
• 20,000 students, 13 faculties and 2 colleges 20,000 students, 13 faculties and 2 colleges
• Campus network: TCP/IP protocol and LINUX Campus network: TCP/IP protocol and LINUX operating system. operating system.
• Wireless spread spectrum radio technique for Wireless spread spectrum radio technique for linking buildings linking buildings
• Over 600 individual account users, within a year Over 600 individual account users, within a year of operation. of operation.
• Capacity building component provided critical Capacity building component provided critical mass of competent Technical Staffmass of competent Technical Staff
The Obafemi Awolowo The Obafemi Awolowo University. Network (OAUNet).University. Network (OAUNet).
• Was born out of a collaboration between Was born out of a collaboration between International Centre for Theoretical Physics International Centre for Theoretical Physics (ICTP), Trieste Italy and Obafemi Awolowo (ICTP), Trieste Italy and Obafemi Awolowo University (OAU) Ile-Ife Nigeria (1996).University (OAU) Ile-Ife Nigeria (1996).
• Started with 3 subnets now over 14 subnets Started with 3 subnets now over 14 subnets and 9 cyber cafes.and 9 cyber cafes.
• Full Internet connectivity ie 256 Kbps Uplink Full Internet connectivity ie 256 Kbps Uplink and 512 Kbps Downlink bustable to 1Mbps.and 512 Kbps Downlink bustable to 1Mbps.
OAUNET - Main Network OAUNET - Main Network DiagramDiagram
• Web-based network monitor and Web-based network monitor and analysis systemanalysis system
• Capable of Handling Large log filesCapable of Handling Large log files• Capable of monitoring Fast Ethernet or Capable of monitoring Fast Ethernet or
switched network.switched network.• Capable of analyzing Proxy logs (squid Capable of analyzing Proxy logs (squid
access log flies)access log flies)
Design ConsiderationDesign Consideration
• Powerful user interface – web interfacePowerful user interface – web interface• Guaranteed packet capturing – uses gigabit Guaranteed packet capturing – uses gigabit
interface for data captureinterface for data capture• Classification of all protocol information – Classification of all protocol information –
ability to classify and display all possible ability to classify and display all possible protocol in each layerprotocol in each layer
• Security – Access are restricted only to those Security – Access are restricted only to those with valid username and password.with valid username and password.
• Viewing of real-time and historical data – Viewing of real-time and historical data – shows online real-time status data and shows online real-time status data and accumulated historical status data easilyaccumulated historical status data easily
Equipment required for the Equipment required for the setting up OAUNETMONsetting up OAUNETMON• Pentium iv 2.0Ghz CPUPentium iv 2.0Ghz CPU
• Linux Operating System ( Mandrake 10.1)Linux Operating System ( Mandrake 10.1)
Architecture of OAUNETMONArchitecture of OAUNETMON
Perl wrapper script
Routine Run_MRTGRoutine Run_MRTG
Routine Run_WebalizerRoutine Run_Webalizer
Daily GraphDaily Graph
Weekly and Monthly GraphWeekly and Monthly Graph
Hosts ListingHosts Listing
Host Usage GraphHost Usage Graph
Hosts Usage Cont…Hosts Usage Cont…
Protocol ListingProtocol Listing
Protocol Usage GraphProtocol Usage Graph
Protocol Usage Cont…Protocol Usage Cont…
Webalizer Webalizer
WebalizerWebalizer
Daily UsageDaily Usage
Hourly UsageHourly Usage
KB transferred KB transferred
Proxy Log AnalysisProxy Log Analysis
• OAUNETMON also carryout proxy log OAUNETMON also carryout proxy log analysis on squid access loganalysis on squid access log
Some Bandwidth optimization Some Bandwidth optimization TechniqueTechnique• CBQCBQ• HTBHTB• MirroringMirroring• FirewallFirewall
– FilteringFiltering• Deny, Reject, Redirect …based on firewall rulesDeny, Reject, Redirect …based on firewall rules
• SQUIDSQUID– Web cachingWeb caching– Access control listAccess control list– AuthenticationAuthentication– Delay poolsDelay pools
• it is possible to limit internet traffic in a reasonable way depending on so-called 'magic words', existing in any given URL For example, a magic word could be '.mp3', '.exe' or '.avi', etc.
• Install MrtgInstall Mrtg• Install WebalizerInstall Webalizer• IptrafIptraf• Install ApacheInstall Apache• Replace your back bone switch with a Gigabit Switch that Replace your back bone switch with a Gigabit Switch that
can support Port mirroring can support Port mirroring • Download all files fromDownload all files from
• Experimental design goals such as Experimental design goals such as extracting highly detailed information extracting highly detailed information without adversely affecting network without adversely affecting network performance (speed) is archived performance (speed) is archived through a process of extracting the through a process of extracting the required information from IP packet required information from IP packet without considering the contents. The without considering the contents. The scripts are available at scripts are available at http://http://www.ictp.it/~abionaowww.ictp.it/~abionao . .
• We wish to acknowledge the support We wish to acknowledge the support of the Abdus Salam International of the Abdus Salam International Centre for Theoretical Physics (ICTP) Centre for Theoretical Physics (ICTP) for the donation of the equipment for the donation of the equipment used for this study.used for this study.