This shows you the differences between two versions of the page.
amres_cbp_wiki:amres_bpd_104 [2012/04/03 11:16] ivke |
amres_cbp_wiki:amres_bpd_104 [2012/04/03 11:32] (current) ivke |
||
---|---|---|---|
Line 7: | Line 7: | ||
^Kategorija dokumenta/Category | Preporuka/Recommendation | | ^Kategorija dokumenta/Category | Preporuka/Recommendation | | ||
^Naslov originala ^ **Preporuke za analizu mrežnog saobraćaja pomoću Netflow protokola** | | ^Naslov originala ^ **Preporuke za analizu mrežnog saobraćaja pomoću Netflow protokola** | | ||
- | ^Originalna verzija/datum | Revizija 1 (dokumenta od 24. oktobara 2009.)/ 2. februar 2011. | | + | ^Originalna verzija/datum | Revizija 1 (dokumenta od 14. oktobara 2011.)/ 3. april 2012. | |
^Originalna verzija dokumenta na srpskom jeziku | {{:amres_cbp_wiki:bpd_srpski_preporuke_za_analizu_mreznog_saobracaja_pomocu_netflow_protokola.pdf|PDF}}| | ^Originalna verzija dokumenta na srpskom jeziku | {{:amres_cbp_wiki:bpd_srpski_preporuke_za_analizu_mreznog_saobracaja_pomocu_netflow_protokola.pdf|PDF}}| | ||
^Title ^**Recommendations for Network Traffic Analysis Using the NetFlow Protocol** | | ^Title ^**Recommendations for Network Traffic Analysis Using the NetFlow Protocol** | | ||
- | ^Version/date |Revision 1 (of the document dated 24 October 2009)/ 2 February 2011 | | + | ^Version/date |Revision 1 (of the document dated 14 October 2011)/ 3 April 2012 | |
^English version | {{:amres_cbp_wiki:geantcampus_gn3-na3-t4-abpd104.pdf|PDF}}| | ^English version | {{:amres_cbp_wiki:geantcampus_gn3-na3-t4-abpd104.pdf|PDF}}| | ||
^ ||^ | ^ ||^ | ||
Line 23: | Line 23: | ||
===== Summary ====== | ===== Summary ====== | ||
- | The purpose of this document is to provide an insight into basic NMS (Network Management System) activities, along with recommendations for administrators of campus and/or local networks intending to apply the NMS tools within their networks. | + | This document presents the procedures used for network traffic analysis, which provide a clear overview of the |
- | + | structure of traffic and enable the efficient detection of potential problems and irregularities. | |
- | The document begins with a discussion of network topology. Changes in topology are recommended based on the idea that a majority of NMS activities should be conducted through the management segment of the network. The discussion focuses on two alternatives: the management network and the production network may either be separated physically (out-band management segment) or they may share the same physical infrastructure (the VLAN segment of the network). | + | The document first presents the technologies applied in network traffic analysis, including their advantages and |
- | + | shortcomings. It then turns to detailed recommendations for traffic analysis based on statistics obtained through | |
- | The document further identifies the three components that should, as a minimum, be covered by a Network Management System. They are the configuration management and log management, along with the already recognised Network Monitoring component implemented using one of the NMS software packages. | + | the NetFlow protocol. The recommendations include examples of the correct configuration of the NetFlow |
- | + | protocol on network devices, as well as examples of the indirect implementation of the NetFlow protocol in | |
- | Finally, the document briefly describes the most frequently used management protocols and their application in different environments and on different types of devices within a network (such as network devices, servers, UPS devices and A/C), provided they do not jeopardise the security of the network. | + | situations where network devices do not support it. |
+ | The document also includes an overview of the implementation of the ICmyNet.Flow system for analysing the | ||
+ | NetFlow statistics, which is used as a Network Management System in the Academic Network of Serbia and in | ||
+ | other NRENs. | ||