SNAPP SNMP Network Analysis and Presentation Package

1
SNAPPSNMP Network Analysis and Presentation
Package

• Presented to the Measurement Working Group
• At Internet2 Joint Techs Meeting
• By
• Luke Fowler
• Indiana University TransPAC REU

This work supported by the National Science
Foundation (NSF ANI-9730201)
2

• Overview of SNAPP
• Fast collection of any data available via SNMP
• Uses Tobi Oetikers RRDtool for data storage
• Web frontend with account based access system
• XML based configuration file
• Custom view groupings, custom graphing
• Basic threshold reporting

3

• The Data Collector
• Persistent C program
• Makes use of the NET-SNMP and RRD libraries
• Multi-threaded to support different collection
  intervals
• Can map IP address or other characteristics to
  SNMP instance number (ipAdEntIfIndex, ifName,
  ifAlias, etc.)

4

• The Web Front end
• Web based, written in Perl/CGI
• Session support, logins can persist between
  browser sessions, for up to one month
• Support for different access levels for normal
  users, and administrators.
• based on group membership, admins can be allowed
  to administer a subset of the active collections
• Collections and users may be members of a single
  group, or of multiple groups

5
SNAPP Some Screenshots
6
Collection Classes

• Each collection is associated with a collection
  class
• A collection class specifies which SNMP OIDs
  should be collected
• The collection class also specifies which values
  are shown on default graphs, and what
  characteristics default graphs will have (color,
  line type, graph-math, etc.)
• The class also specifies at what interval data
  should be collected
• Instance mapping is setup through the collection
  class
• Connection class includes support for graph
  math by way of RRD RPN (reverse polish notation)
  statements. (e.g. convert bytes per second
  obtained from inHCOutOctets to bits per second by
  multiplying by 8)
• Threshold reporting levels are specified in the
  collection class, and can be overridden on a
  per-link basis

7
Adding a New Collection

• To Add a new collection
• Select a collection class (which specifies OIDs,
  collection interval, default thresholds, RRA
  parameters, etc.)
• Select connection-specific parameters (SNMP
  hostname, community string, group access,
  threshold overrides, etc.)
• An RRD file will be created, the config file will
  be updated, and the collector will be reset,
  making your new collection active.

8
Custom Views

• Allows users to group a set of graphs together
  (e.g. all collections on a single router)
• Default graphs for custom view members are shown
  together on a single page
• Can create custom views based on groups (dynamic
  when group membership changes, the view is
  updated) and by individual collections
• Anyone can see and make use of any custom view,
  administrators can edit or remove views.

9
Custom Graphing

• Allows custom graphs to be generated based on
  start and end date
• Allows graphs to be generated from a specified
  number of minutes in the past to the present
• Allows a use to select what SNMP data sources
  they wish to display on a graph

10
Archiving Collections

• When a collection is no longer active, it may be
  archived
• Archived collections go into a special archive
  area, and disappear from the master listing. The
  collector stops collecting on archived
  collections.
• Default views for archived graphs show the last
  day/week/month/year of collection
• Custom graphing features are available for
  collections in the archived area

11
Threshold Reporting

• Can monitor for SNMP variables which fall above
  or below a user-defined threshold for any ten
  minute period in the previous 24 hours
• Thresholds can be specified on a per-OID basis in
  the collection class, and can be overridden on a
  per-collection basis
• Report reminds administrators of any suspended
  collections
• Administrators who have indicated that they wish
  to receive threshold reports are sent reports via
  E-mail once a day

12

• SNAPP is currently collecting on all the TransPAC
  and Internet2/Abilene links
• Were collecting traffic (bits and packets per
  second), errors, and router statistics
  (temperature, CPU load, memory usage)
• Demo at http//trails.uits.indiana.edu/snapp/
• Get SNAPP next week at http//loadrunner.uits.iu.e
  du/dist/
• SNAPP mailing list snapp-users-l_at_listserv.indiana
  .edu (subscribe link on distribution page)