36
IPv6 mrtg 流流流流 中中中中 中中中中 中中中 中中 100 中 11 中

I pv6 mrtg_20111025

Embed Size (px)

DESCRIPTION

IPv6_mrtg

Citation preview

Page 1: I pv6 mrtg_20111025

IPv6 mrtg 流量監測

中央大學 電算中心 楊素秋

民國 100 年 11 月

copy2009 Susan Yang Computer Center National Central University

OUTLINE

1 IPv6 Network

2 SNMPMIBs and IPv6

3 Cisco router 之 IPv6 MIB OID

4 區網 IPv6 mrtg 流量監看 5 結語

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network

Different types of networksDual stack IPv6 amp IPv4 networks

IPv6 only networks (few of them)

Important to keep in mindDual stack is not for ever

One IP stack should be removedhellip one day

No reasons for network admins to face twice the amount of work1048708

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

桃園區網 IPv6 建置實做啟動 IPv6 routing

設定 DNSv6

設定 DHCPv6

啟動 6to4 tunneling

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

TANET Backbone

TYRC 6509(IPv4v6)

NCU 7609(IPv4v6)

TPRC 6509(IPv4v6)

MOE-R1(IPv4)

sun1ncuedutw (DNS)20012883001131

audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6

2002a319fe021163252542

19288991 (Relay Router)(2002c05863011)

MOE 6509IPv4v6

NTU 7609(IPv4v6)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

Is IPv6 ready Hardware

bull RouterSwitchbull Firewallbull Wireless APbull End system

Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 addressbull Linux

ndash Defaut enable IPv4IPv6ndash Can configure tun6to4

raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7

ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically

bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw

bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable

mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone

ndash IPv6 enable Media Server

bull Ipv6pku6educn amp other mms links

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 2: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

OUTLINE

1 IPv6 Network

2 SNMPMIBs and IPv6

3 Cisco router 之 IPv6 MIB OID

4 區網 IPv6 mrtg 流量監看 5 結語

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network

Different types of networksDual stack IPv6 amp IPv4 networks

IPv6 only networks (few of them)

Important to keep in mindDual stack is not for ever

One IP stack should be removedhellip one day

No reasons for network admins to face twice the amount of work1048708

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

桃園區網 IPv6 建置實做啟動 IPv6 routing

設定 DNSv6

設定 DHCPv6

啟動 6to4 tunneling

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

TANET Backbone

TYRC 6509(IPv4v6)

NCU 7609(IPv4v6)

TPRC 6509(IPv4v6)

MOE-R1(IPv4)

sun1ncuedutw (DNS)20012883001131

audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6

2002a319fe021163252542

19288991 (Relay Router)(2002c05863011)

MOE 6509IPv4v6

NTU 7609(IPv4v6)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

Is IPv6 ready Hardware

bull RouterSwitchbull Firewallbull Wireless APbull End system

Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 addressbull Linux

ndash Defaut enable IPv4IPv6ndash Can configure tun6to4

raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7

ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically

bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw

bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable

mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone

ndash IPv6 enable Media Server

bull Ipv6pku6educn amp other mms links

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 3: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network

Different types of networksDual stack IPv6 amp IPv4 networks

IPv6 only networks (few of them)

Important to keep in mindDual stack is not for ever

One IP stack should be removedhellip one day

No reasons for network admins to face twice the amount of work1048708

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

桃園區網 IPv6 建置實做啟動 IPv6 routing

設定 DNSv6

設定 DHCPv6

啟動 6to4 tunneling

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

TANET Backbone

TYRC 6509(IPv4v6)

NCU 7609(IPv4v6)

TPRC 6509(IPv4v6)

MOE-R1(IPv4)

sun1ncuedutw (DNS)20012883001131

audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6

2002a319fe021163252542

19288991 (Relay Router)(2002c05863011)

MOE 6509IPv4v6

NTU 7609(IPv4v6)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

Is IPv6 ready Hardware

bull RouterSwitchbull Firewallbull Wireless APbull End system

Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 addressbull Linux

ndash Defaut enable IPv4IPv6ndash Can configure tun6to4

raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7

ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically

bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw

bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable

mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone

ndash IPv6 enable Media Server

bull Ipv6pku6educn amp other mms links

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 4: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

桃園區網 IPv6 建置實做啟動 IPv6 routing

設定 DNSv6

設定 DHCPv6

啟動 6to4 tunneling

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

TANET Backbone

TYRC 6509(IPv4v6)

NCU 7609(IPv4v6)

TPRC 6509(IPv4v6)

MOE-R1(IPv4)

sun1ncuedutw (DNS)20012883001131

audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6

2002a319fe021163252542

19288991 (Relay Router)(2002c05863011)

MOE 6509IPv4v6

NTU 7609(IPv4v6)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

Is IPv6 ready Hardware

bull RouterSwitchbull Firewallbull Wireless APbull End system

Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 addressbull Linux

ndash Defaut enable IPv4IPv6ndash Can configure tun6to4

raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7

ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically

bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw

bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable

mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone

ndash IPv6 enable Media Server

bull Ipv6pku6educn amp other mms links

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 5: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

TANET Backbone

TYRC 6509(IPv4v6)

NCU 7609(IPv4v6)

TPRC 6509(IPv4v6)

MOE-R1(IPv4)

sun1ncuedutw (DNS)20012883001131

audptycedutw (IPv6 Test)2001288300016323048fffe2ee5a6

2002a319fe021163252542

19288991 (Relay Router)(2002c05863011)

MOE 6509IPv4v6

NTU 7609(IPv4v6)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

Is IPv6 ready Hardware

bull RouterSwitchbull Firewallbull Wireless APbull End system

Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 addressbull Linux

ndash Defaut enable IPv4IPv6ndash Can configure tun6to4

raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7

ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically

bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw

bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable

mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone

ndash IPv6 enable Media Server

bull Ipv6pku6educn amp other mms links

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 6: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

Is IPv6 ready Hardware

bull RouterSwitchbull Firewallbull Wireless APbull End system

Applicationbull httpd SMTP DNS ssh ftp news whois ntpbull VoIP multimedia streaming Printing Chat Mysql

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 addressbull Linux

ndash Defaut enable IPv4IPv6ndash Can configure tun6to4

raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7

ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically

bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw

bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable

mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone

ndash IPv6 enable Media Server

bull Ipv6pku6educn amp other mms links

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 7: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 addressbull Linux

ndash Defaut enable IPv4IPv6ndash Can configure tun6to4

raquo etcsysconfignetwork-scriptsifup-ipv6bull Windows 7

ndash Defaut enable IPv4IPv6ndash Defaut enable Teredo tunnelingndash Configure tun6to4 automatically

bull Windows XPndash Ipv6 install (tun6to4)ndash Configure IPv6 Manually (netsh gt)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw

bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable

mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone

ndash IPv6 enable Media Server

bull Ipv6pku6educn amp other mms links

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 8: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

IPv6 測試網站 (www server)audptycedutw showroomtwnicnettw

bull Show the remoteclient ipv6 addressndash IPv4IPv6 enablendash Tun6to4 enable

mrtgv6tanetedutwbull MRTG traffic monitoring for TANET backbone

ndash IPv6 enable Media Server

bull Ipv6pku6educn amp other mms links

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 9: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 10: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

1 建構 IPv6 Network (cont)

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 11: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

SNMP and IPv6Cisco

bull SNMP over IPv6 is available in 120(27)Sbull More features available from 120(30)Sbull Will become available in 123(14)T

Juniper Hitachi 6windbull SNMP over IPv6 is available

   2 SNMPMIBs and IPv6

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 12: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

2 SNMPMIBs and IPv6 (cont)

IPv6 MIBs statusMIBs are essential for the network

management

SNMP-based applications are widely usedbull but others exist too (NetFlow XMLhellip)

SNMP rely upon MIBs hellipbull Need to have MIBs to collect IPv6information

Cisco router MIB IP-MIB IPv6-MIB

RFC4293 hellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 13: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB

Get some ipv6 traffic param

show interface accountingrdquo GigabitEthernet28 國立中央大學 Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764

GigabitEthernet29 TYC-to-CYCU (14013500) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 14: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

IP-MIBoid iso (1) org (3) dod (6) internet (1) mgmt (2) mib-2 (1) ip (4) ipTrafficStats (31)

(6509 router Not implement)

ipIfStatsEntry 13612143131ldquoipIfStatsIPVersion 136121431311ldquoipIfStatsIfIndex 136121431312hellipipIfStatsInOctets 136121431315ipIfStatsHCInOctets 136121431316 hellipipIfStatsOutOctets 1361214313132ipIfStatsHCOutOctets 1361214313133

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 15: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

   3 Cisco router 之 IPv6 MIB (cont)

IPV6-MIBoid(6509 router Not implement)

ipv6IfEntry 13612155151ipv6IfIndex 136121551511ipv6IfDescr 136121551512ipv6IfIdentifier 136121551516hellipipv6IfStatsEntry 13612155161ipv6IfStatsInReceives 136121551611ldquohellipipv6IfStatsOutForwDatagrams 1361215516110ipv6IfStatsOutRequests 1361215516111ldquohellip

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 16: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

RFC4293 ( rfc-2011)(6509 router Not implement)

IpIfStatsEntry = ipIfStatsIPVersion InetVersion ipIfStatsIfIndex InterfaceIndex ipIfStatsInReceives Counter32 ipIfStatsHCInReceives Counter64 ipIfStatsInOctets Counter32 ipIfStatsHCInOctets Counter64 ipIfStatsInHdrErrors Counter32 ipIfStatsInNoRoutes Counter32 ipIfStatsInAddrErrors Counter32 hellip ipIfStatsOutOctets Counter32 ipIfStatsHCOutOctets Counter64 hellip ipIfStatsRefreshRate Unsigned32

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 17: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

OLD-CISCO-INTERFACES-MIBoid (Cisco-SMI or SNMPV2-SMI)locIfipInPkts 1361419221142locIfipOutPkts 1361419221143locIfipInOctets 1361419221144locIfipOutOctets 1361419221145

------------------------------------------SNMPv2-SMIenterprises922114582 = Counter32 2223932009SNMPv2-SMIenterprises922114583 = Counter32 2411945666SNMPv2-SMIenterprises922114584 = Counter32 0SNMPv2-SMIenterprises922114585 = Counter32 2121510125SNMPv2-SMIenterprises922114586 = Counter32 3949812438SNMPv2-SMIenterprises922114587 = Counter32 497226196SNMPv2-SMIenterprises922114588 = Counter32 0SNMPv2-SMIenterprises922114589 = Counter32 2595499782SNMPv2-SMIenterprises922114590 = Counter32 1402998647

SNMPv2-SMIenterprises9221145110 = Counter32 0SNMPv2-SMIenterprises9221145111 = Counter32 83559617SNMPv2-SMIenterprises9221145112 = Counter32 2700879959

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 18: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

3 Cisco router 之 IPv6 MIB (cont)

CISCO-SWITCH-ENGINE-MIB

iso (1) org (3) dod (6) internet (1) private (4) enterprises (1) cisco (9) ciscoMgmt (9) ciscoSwitchEngineMIB (97)

cseMIBObjects (1) cseL3Objects (4)

-- cseL3Objects (4)+ -- cseL3StatsTable (1)- -- cseL3VlanStatsTable (2)| - -- cseL3VlanStatsEntry (1) object Details| | -- cseL3VlanIndex (1)| | -- cseL3VlanInPkts (2)| | -- cseL3VlanInOctets (3)| | -- cseL3VlanOutPkts (4)| | -- cseL3VlanOutOctets (5)| | -- cseL3VlanInUnicastPkts (6)| | -- cseL3VlanInUnicastOctets (7)| | -- cseL3VlanOutUnicastPkts (8)| | -- cseL3VlanOutUnicastOctets (9)

|

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 19: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

SNMPv2-SMIenterprises9997141111006 = Counter32 3540473092SNMPv2-SMIenterprises9997141112006 = Counter32 1649206378SNMPv2-SMIenterprises9997141113021 = Counter32 3278444802SNMPv2-SMIenterprises9997141114008 = Counter32 2865104007SNMPv2-SMIenterprises9997141115006 = Counter32 1692158510SNMPv2-SMIenterprises9997141121006 = Counter64 7828674924853378SNMPv2-SMIenterprises9997141122006 = Counter64 5894807785811313SNMPv2-SMIenterprises9997141123021 = Counter64 109506806884008SNMPv2-SMIenterprises9997141124008 = Counter64 5713000850624076SNMPv2-SMIenterprises9997141125006 = Counter64 1415152122007054SNMPv2-SMIenterprises9997141131006 = Counter32 0SNMPv2-SMIenterprises9997141132006 = Counter32 0SNMPv2-SMIenterprises9997141133021 = Counter32 0SNMPv2-SMIenterprises9997141134008 = Counter32 0SNMPv2-SMIenterprises9997141135006 = Counter32 0SNMPv2-SMIenterprises9997141141006 = Counter32 0SNMPv2-SMIenterprises9997141142006 = Counter32 0SNMPv2-SMIenterprises9997141143021 = Counter32 0SNMPv2-SMIenterprises9997141144008 = Counter32 0SNMPv2-SMIenterprises9997141145006 = Counter32 0SNMPv2-SMIenterprises9997141151006 = Gauge32 130943SNMPv2-SMIenterprises9997141152006 = Gauge32 76630SNMPv2-SMIenterprises9997141153021 = Gauge32 106838SNMPv2-SMIenterprises9997141154008 = Gauge32 130944SNMPv2-SMIenterprises9997141155006 = Gauge32 2

3 Cisco router 之 IPv6 MIB (cont)

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 20: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看

Extract interface traffic (with Expect)

Connect to router

CLI commandbull Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

Mrtg traffic monitoring

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 21: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

A Extract traffic (through expect)

binbashRSYNC=usrbinrsyncLOCALPATH=homeyangVAR=$(expect -cspawn telnet 20372xxexpect Usernamesend ldquotest123rexpect Passwordsend ldquotest123ncurexpect $send show interface account rsend rdquo rrdquosend rdquo rrdquoExpect ndashtimeout 1ldquo)Echo ldquo$VARrdquo

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 22: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

TYRC IPv6 traffic

Giga 28 ( 中央大學 ) NCU

Giga 29 ( 中原大學 ) CYCU

Giga 215 ( 萬能科大 ) VNU

Giga 31 ( 開南大學 ) KNU

Giga 32 ( 索尼電信 ) Sonet (IPv6 addr 240480400102264)

Giga 36 ( 清雲科大 ) CYU

Vlan 10 區網主幹

Vlan 11 縣網中心 ( 中華電信 )

Vlan 12 高中職主幹

Vlan 16 TANET_IPv6

Vlan 21 縣網中心 ( 亞太 )

Vlan 31 縣網中心 ( 中華電信 )

Vlan 350 ISP 電信業界

Vlan 227 區網測試網

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 23: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileReader fileReader = new FileReader(Data10211200) String patternStr = Tunnel|FastEthernet|GigabitEthernet|Vlan String patternStr_ipv6 = IPv6 Scanner scan = new Scanner(fileReader)get user input while (scanhasNext()) String passwordStr = scannextLine() Pattern p = Patterncompile(patternStr) Pattern p6 = Patterncompile(patternStr_ipv6) Matcher m = pmatcher(passwordStr) Matcher m6 = p6matcher(passwordStr) if ( mfind()) if_index=passwordStr stat_if = true if ( m6find()) ip_traffic=passwordStr stat_ipv6=true if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5]) stat_if = false stat_ipv6 = false

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 24: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Interface_ID InputOctets OutOctets-----------------------------------------------------------------Vlan10 20509776220 829193654452Vlan11 4266841630 371246825404Vlan12 169620231 25007101534Vlan16 184232151670 1405461604259Vlan21 235144926 29029034Vlan31 44247533065 1681292557522Vlan227 274562953 48790185465Vlan350 255545589 770282374Vlan1412 6032228 38751256Gigabitt28 9653687956 4316870814743Gigabit29 5554 26619570Gigabit211 1323101265 1105750541193Gigabitt215 31513818 4299670725Gigabitt31 105892439 38049219071Gigabit32 33287808 69682180Gigabit36 293889430 440506626293Gigabitt77 132738532 27774817831Fast948 12864 29033660Tunnel2002 1848864657481 1250252945233

a) Extract Traffic Counters (2011-10-21 1100 )

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 25: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

if ( stat_if ampamp stat_ipv6 ) temp_if = if_indexsplit(s+) Systemoutprintln( if_index) Systemoutprintln( temp_if)

temp_ipv6 = ip_trafficsplit(s+) Systemoutprintln( ip_traffic) Systemoutprintln( temp_if)

outwrite( temp_if[0] + + temp_ipv6[3] + + temp_ipv6[5] + n) Systemoutprintln( temp_if[0] + + temp_ipv6[2] + + temp_ipv6[3]) stat_if = false stat_ipv6 = false

query1 = insert into counter (ip in_counter out_countertime) values () preparedStatement1 = connectionprepareStatement(query1) preparedStatement1setString(1temp_if[0]) preparedStatement1setString(2temp_ipv6[3]) preparedStatement1setString(3 temp_ipv6[5]) javasqlDate sqlDate = new javasqlDate(new javautilDate()getTime()) preparedStatement1setString(4cur_time) preparedStatement1executeUpdate()

end_if_ipv6 end_while scanclose() outclose()

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 26: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

b) Extract Traffic Counters to database

ID Interface Input Output Date----------------------------------------------------------------------| 741 | Vlan10 | 20571164866 | 829200762932 | 10241850 || 742 | Vlan11 | 4272996247 | 377461803123 | 10241850 || 743 | Vlan12 | 183440033 | 25548984550 | 10241850 || 744 | Vlan16 | 184913813451 | 1414980825672 | 10241850 || 745 | Vlan21 | 237832956 | 29306814 | 10241850 || 746 | Vlan31 | 44251484788 | 1732140191214 | 10241850 || 747 | Vlan227 | 276781227 | 49016205422 | 10241850 || 748 | Vlan350 | 258482708 | 774947781 | 10241850 || 749 | Vlan1412 | 6108980 | 39152930 | 10241850 || 750 | GigabitEthernet28 | 9654431653 | 4413250509581 | 10241850 || 751 | GigabitEthernet29 | 5554 | 26896840 | 10241850 || 752 | GigabitEthernet211 | 1327541852 | 1128645499515 | 10241850 || 753 | GigabitEthernet215 | 31830084 | 4501406597 | 10241850 || 754 | GigabitEthernet31 | 256466203 | 39515807937 | 10241850 || 755 | GigabitEthernet32 | 33287808 | 69682180 | 10241850 || 756 | GigabitEthernet36 | 301228108 | 464918940437 | 10241850 || 757 | GigabitEthernet316 | TANet | IPv6 | 10241850 || 758 | GigabitEthernet77 | 132925744 | 27775934890 | 10241850 || 759 | FastEthernet948 | 12864 | 29311100 | 10241850 || 760 | Tunnel2002 | 1848864657481 | 1250252945233 | 10241850 || 761 | Vlan10 | 20571286162 | 829200776832 | 10241900 || 762 | Vlan11 | 4273009579 | 377475816328 | 10241900 || 763 | Vlan12 | 183472973 | 25549085768 | 10241900 || 764 | Vlan16 | 184915135286 | 1415000279212 | 10241900 ||

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 27: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

DisplayRecord the traffic

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 28: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Mrtg traffic graph Install Mrtg

bull Download Mrtg-2172bull Install libgd2

ndash apt-get -y install libgd2-xpm-dev build-essentialbull Install Mrtg-2172

Configure mrtgcfg

Configure crontab bull Per 10-minutes

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 29: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

FileName smurfconf Created by hellipWorkDir optapache-tomcat-6032webappsROOTsmurfOptions[_] growright nopercentLanguage UTF-8

Target[smurf_km]1361212211165amp1361212211765publicxx20372xxSetEnv[smurf_km] MRTG_INT_DESCR= 金門縣網 MaxBytes[smurf_km] 125000000Title[smurf_km] IP Packets TANET_KmPageTop[smurf_km] ltH3gtIP Packets TANET- 金門縣網 GE 37ltH3gtYLegend[smurf_km] IP Packet Count

Target[smurf_mts]1361212211166amp1361212211766publicxx20372xxSetEnv[smurf_mts] MRTG_INT_DESCR= 連江縣網 MaxBytes[smurf_mts] 125000000Title[smurf_mts] IP Packets TANET_MTSPageTop[smurf_mts] ltH3gtIP Packets TANet-- 連江縣網 GE 38ltH3gtYLegend[smurf_mts] IP Packet Count

Mrtgconf 例

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 30: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

Multi Router Traffic Grapher -- Sample Configuration File Global configurationWorkDir optapache-tomcat-6020webappsROOTmrtgWriteExpires YesLanguage utf8Title[^] Traffic Analysis for IPv6 links

Target[giga28] `homemrtg-2172binmrtgipv6_28sh`MaxBytes[giga28] 10000000000Options[giga28] growright nopercentYLegend[giga28] Bits per secondShortLegend[giga28]LegendO[giga28] ampnbsp IPv6 OutputLegendI[giga28] ampnbsp IPv6 InputTitle[giga28] IPv6 Traffic for GigabitEther 28 linkPageTop[giga28] ltH1gt GigabitEther 28ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 28ltTDgtltTRgt ltTABLEgt

Target[giga29] `homemrtg-2172binmrtgipv6_29sh`MaxBytes[giga29] 10000000000Options[giga29] growright nopercentYLegend[giga29] Bits per secondShortLegend[giga29]LegendO[giga29] ampnbsp IPv6 OutputLegendI[giga29] ampnbsp IPv6 InputTitle[giga29] IPv6 Traffic for GigabitEther 29 linkPageTop[giga29] ltH1gt GigabitEther 29ltH1gt ltTABLEgt ltTRgtltTDgtSystemltTDgt ltTDgtTYRC GigabitEther 29ltTDgtltTRgt ltTABLEgt

mrtgcfg

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 31: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

mrtgipv6_28shbinbash 提供 ipv6 inoctetoutoctet to mrtg configure

y=`date +Y`d=`date +mdH`m=`date +M`m=`expr $m 10`d=$d$m0

1 ipv6 inoctetoutoctecho `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $3`echo `cat homeExpectIPv6$d | grep GigabitEthernet28 |awk print $4` 2 UpTime amp interface name UPtime=`usrbinuptime | awk print $3 $4 $5` echo $UPtime echo GigabitEthernet28

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 32: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)

m h dom mon dow command0 12 usrsbinntpdate -s ntp2usnonavymil gt devnull amp Probe IPv6 Traffic from TYRC router 10 homeExpectexpectsh gtgt homeExpectlog_ Extract IPv6 inOctetoutOctet counter for each interfaces10 homeExpectrunsh gtgt homeExpectlogsexpect Cron execute mrtg 8-5810 env LANG=C homemrtg-2172binmrtg homemrtg-2172binmrtgcfg

crontab

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 33: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

4 區網 IPv6 mrtg 流量監看 (cont)httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 34: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

SNMP MIB for IPv6 TrafficVenderrsquos network products

IOS version of the product

Venderrsquos SNMP MIB search serviceCisco SNMP Object Navigator

bull httptoolsciscocomSupportSNMPdoBrowseOIDdoobjectInput=1361419997+amptranslate=TranslateampsubmitValue=SUBMITampsubmitClicked=true

5 結語

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 35: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

5 結語 (cont)

Extract interface traffic (with Expect)

Connect to router (with Expect)bull CLI command

ndash Show interface accounting

Extract IPv4IPv6 traffic

Appfuse DisplayRecord the traffic

IPv6 mrtg traffic monitoring httpayangtycedutwmrtg

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1
Page 36: I pv6 mrtg_20111025

copy2009 Susan Yang Computer Center National Central University

感謝你的耐心聆聽

QampA

  • Slide 1