Export to PDFThis is an old revision of the document!
Table of Contents
Preporuke za analizu mrežnog saobraćaja pomoću Netflow protokola
Dokument sadrži preporuke za pripremu (konfiguraciju) uređaja kao i metode koje se koriste prilikom prikupljanja Netflow podataka u cilju efikasnog uvida u strukturu i karakteristike mrežnog saobraćaja.
| AMRES BPD no | 104 | |
|---|---|---|
| Tematska grupa/Working group | Nadgledanje mreže/Network management | |
| Kategorija dokumenta/Category | Preporuka/Recommendation | |
| Naslov originala | Preporuke za analizu mrežnog saobraćaja pomoću Netflow protokola | |
| Originalna verzija/datum | Revizija 1 (dokumenta od 24. oktobara 2009.)/ 2. februar 2011. | |
| Originalna verzija dokumenta na srpskom jeziku | ||
| Title | Recommendations for Network Traffic Analysis Using the NetFlow Protocol | |
| Version/date | Revision 1 (of the document dated 24 October 2009)/ 2 February 2011 | |
| English version | ||
Rezime
Cilj ovog dokumenta je da predstavi postupke koji se koriste za analizu saobraćaja u mreži, čime se postiže jasan uvid u strukturu saobraćaja i efikasno otkrivanje eventualnih problema i anomalija. Prvo su predstavljene tehnologije za analizu mrežnog saobraćaja, kao i njihove prednosti i mane. Zatim su detaljno obrađene preporuke za analizu mrežnog saobraćaja zasnovanu na statistici prikupljenoj preko NetFlow protokola. Preporuke obuhvataju primere ispravnog konfigurisanja NetFlow protokola na mrežnim uređajima kao i primere indirektnog korišćenja NetFlow protokola u situacijama kada ga mrežni uređaji ne podržavaju. Dokument obuhvata i pregled korišćenja ICmyNet.Flow sistema za analizu NetFlow statistike, koji se koristi kao jedan od Network Management sistema ne samo u Akademskoj mreži Srbije već i u drugim NREN ovima.
Summary
The purpose of this document is to provide an insight into basic NMS (Network Management System) activities, along with recommendations for administrators of campus and/or local networks intending to apply the NMS tools within their networks.
The document begins with a discussion of network topology. Changes in topology are recommended based on the idea that a majority of NMS activities should be conducted through the management segment of the network. The discussion focuses on two alternatives: the management network and the production network may either be separated physically (out-band management segment) or they may share the same physical infrastructure (the VLAN segment of the network).
The document further identifies the three components that should, as a minimum, be covered by a Network Management System. They are the configuration management and log management, along with the already recognised Network Monitoring component implemented using one of the NMS software packages.
Finally, the document briefly describes the most frequently used management protocols and their application in different environments and on different types of devices within a network (such as network devices, servers, UPS devices and A/C), provided they do not jeopardise the security of the network.
