View
384
Download
6
Category
Preview:
DESCRIPTION
IPv6_mrtg
Citation preview
IPv6 mrtg 流量監測
中央大學 電算中心 楊素秋
民國 100 年 11 月
copy2009 Susan Yang Computer Center National Central University
OUTLINE
1 IPv6 Network
2 SNMPMIBs and IPv6
3 Cisco router 之 IPv6 MIB OID
4 區網 IPv6 mrtg 流量監看 5 結語
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network
Different types of networksDual stack IPv6 amp IPv4 networks
IPv6 only networks (few of them)
Important to keep in mindDual stack is not for ever
One IP stack should be removedhellip one day
No reasons for network admins to face twice the amount of work1048708
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
桃園區網 IPv6 建置實做啟動 IPv6 routing
設定 DNSv6
設定 DHCPv6
啟動 6to4 tunneling
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
TANET Backbone
TYRC 6509(IPv4v6)
NCU 7609(IPv4v6)
TPRC 6509(IPv4v6)
MOE-R1(IPv4)
sun1ncuedutw (DNS)20012883001131
audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6
2002a319fe021163252542
19288991 (Relay Router)(2002c05863011)
MOE 6509IPv4v6
NTU 7609(IPv4v6)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
Is IPv6 ready Hardware
bull RouterSwitchbull Firewallbull Wireless APbull End system
Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 addressbull Linux
ndash Defaut enable IPv4IPv6ndash Can configure tun6to4
raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7
ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically
bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw
bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable
mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone
ndash IPv6 enable Media Server
bull Ipv6pku6educn amp other mms links
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
OUTLINE
1 IPv6 Network
2 SNMPMIBs and IPv6
3 Cisco router 之 IPv6 MIB OID
4 區網 IPv6 mrtg 流量監看 5 結語
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network
Different types of networksDual stack IPv6 amp IPv4 networks
IPv6 only networks (few of them)
Important to keep in mindDual stack is not for ever
One IP stack should be removedhellip one day
No reasons for network admins to face twice the amount of work1048708
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
桃園區網 IPv6 建置實做啟動 IPv6 routing
設定 DNSv6
設定 DHCPv6
啟動 6to4 tunneling
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
TANET Backbone
TYRC 6509(IPv4v6)
NCU 7609(IPv4v6)
TPRC 6509(IPv4v6)
MOE-R1(IPv4)
sun1ncuedutw (DNS)20012883001131
audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6
2002a319fe021163252542
19288991 (Relay Router)(2002c05863011)
MOE 6509IPv4v6
NTU 7609(IPv4v6)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
Is IPv6 ready Hardware
bull RouterSwitchbull Firewallbull Wireless APbull End system
Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 addressbull Linux
ndash Defaut enable IPv4IPv6ndash Can configure tun6to4
raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7
ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically
bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw
bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable
mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone
ndash IPv6 enable Media Server
bull Ipv6pku6educn amp other mms links
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network
Different types of networksDual stack IPv6 amp IPv4 networks
IPv6 only networks (few of them)
Important to keep in mindDual stack is not for ever
One IP stack should be removedhellip one day
No reasons for network admins to face twice the amount of work1048708
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
桃園區網 IPv6 建置實做啟動 IPv6 routing
設定 DNSv6
設定 DHCPv6
啟動 6to4 tunneling
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
TANET Backbone
TYRC 6509(IPv4v6)
NCU 7609(IPv4v6)
TPRC 6509(IPv4v6)
MOE-R1(IPv4)
sun1ncuedutw (DNS)20012883001131
audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6
2002a319fe021163252542
19288991 (Relay Router)(2002c05863011)
MOE 6509IPv4v6
NTU 7609(IPv4v6)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
Is IPv6 ready Hardware
bull RouterSwitchbull Firewallbull Wireless APbull End system
Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 addressbull Linux
ndash Defaut enable IPv4IPv6ndash Can configure tun6to4
raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7
ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically
bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw
bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable
mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone
ndash IPv6 enable Media Server
bull Ipv6pku6educn amp other mms links
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
桃園區網 IPv6 建置實做啟動 IPv6 routing
設定 DNSv6
設定 DHCPv6
啟動 6to4 tunneling
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
TANET Backbone
TYRC 6509(IPv4v6)
NCU 7609(IPv4v6)
TPRC 6509(IPv4v6)
MOE-R1(IPv4)
sun1ncuedutw (DNS)20012883001131
audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6
2002a319fe021163252542
19288991 (Relay Router)(2002c05863011)
MOE 6509IPv4v6
NTU 7609(IPv4v6)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
Is IPv6 ready Hardware
bull RouterSwitchbull Firewallbull Wireless APbull End system
Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 addressbull Linux
ndash Defaut enable IPv4IPv6ndash Can configure tun6to4
raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7
ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically
bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw
bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable
mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone
ndash IPv6 enable Media Server
bull Ipv6pku6educn amp other mms links
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
TANET Backbone
TYRC 6509(IPv4v6)
NCU 7609(IPv4v6)
TPRC 6509(IPv4v6)
MOE-R1(IPv4)
sun1ncuedutw (DNS)20012883001131
audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6
2002a319fe021163252542
19288991 (Relay Router)(2002c05863011)
MOE 6509IPv4v6
NTU 7609(IPv4v6)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
Is IPv6 ready Hardware
bull RouterSwitchbull Firewallbull Wireless APbull End system
Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 addressbull Linux
ndash Defaut enable IPv4IPv6ndash Can configure tun6to4
raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7
ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically
bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw
bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable
mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone
ndash IPv6 enable Media Server
bull Ipv6pku6educn amp other mms links
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
Is IPv6 ready Hardware
bull RouterSwitchbull Firewallbull Wireless APbull End system
Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 addressbull Linux
ndash Defaut enable IPv4IPv6ndash Can configure tun6to4
raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7
ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically
bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw
bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable
mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone
ndash IPv6 enable Media Server
bull Ipv6pku6educn amp other mms links
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 addressbull Linux
ndash Defaut enable IPv4IPv6ndash Can configure tun6to4
raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7
ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically
bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw
bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable
mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone
ndash IPv6 enable Media Server
bull Ipv6pku6educn amp other mms links
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw
bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable
mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone
ndash IPv6 enable Media Server
bull Ipv6pku6educn amp other mms links
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
1 建構 IPv6 Network (cont)
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
SNMP and IPv6Cisco
bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T
Juniper Hitachi 6windbull SNMP over IPv6 is available
2 SNMPMIBs and IPv6
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
2 SNMPMIBs and IPv6 (cont)
IPv6 MIBs statusMIBs are essential for the network
management
SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)
SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information
Cisco router MIB IP-MIB IPv6-MIB
RFC4293 hellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB
Get some ipv6 traffic param
show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764
GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)
(6509 router Not implement)
ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
IPV6-MIBoid(6509 router Not implement)
ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
RFC4293 ( rfc-2011)(6509 router Not implement)
IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145
------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647
SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
3 Cisco router 之 IPv6 MIB (cont)
CISCO-SWITCH-ENGINE-MIB
iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)
cseMIBObjects (1) cseL3Objects (4)
-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)
|
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2
3 Cisco router 之 IPv6 MIB (cont)
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看
Extract interface traffic (with Expect)
Connect to router
CLI commandbull Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
Mrtg traffic monitoring
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
A Extract traffic (through expect)
binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
TYRC IPv6 traffic
Giga 28 ( 中央大學 ) NCU
Giga 29 ( 中原大學 ) CYCU
Giga 215 ( 萬能科大 ) VNU
Giga 31 ( 開南大學 ) KNU
Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)
Giga 36 ( 清雲科大 ) CYU
Vlan 10 區網主幹
Vlan 11 縣網中心 ( 中華電信 )
Vlan 12 高中職主幹
Vlan 16 TANET_IPv6
Vlan 21 縣網中心 ( 亞太 )
Vlan 31 縣網中心 ( 中華電信 )
Vlan 350 ISP 電信業界
Vlan 227 區網測試網
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233
a) Extract Traffic Counters (2011-10-21 1100 )
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)
temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)
outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false
query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()
end_if_ipv6 end_while scanclose() outclose()
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
b) Extract Traffic Counters to database
ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
DisplayRecord the traffic
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Mrtg traffic graph Install Mrtg
bull Download Mrtg-2172bull Install libgd2
ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172
Configure mrtgcfg
Configure crontab bull Per 10-minutes
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8
Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count
Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count
Mrtgconf 例
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links
Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt
Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt
mrtgcfg
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure
y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0
1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)
m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg
crontab
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
SNMP MIB for IPv6 TrafficVenderrsquos network products
IOS version of the product
Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator
bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true
5 結語
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
5 結語 (cont)
Extract interface traffic (with Expect)
Connect to router (with Expect)bull CLI command
ndash Show interface accounting
Extract IPv4IPv6 traffic
Appfuse DisplayRecord the traffic
IPv6 mrtg traffic monitoring httpayangtycedutwmrtg
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
copy2009 Susan Yang Computer Center National Central University
感謝你的耐心聆聽
QampA
Recommended