RFC 1470
FYI on a Network Management Tool Catalog: Tools for Monitoring and Debugging TCP/IP Internets and Interconnected Devices
FYI on a Network Management Tool Catalog โจ
Tools for Monitoring and Debugging TCP/IP Internets and Interconnected Devices ๐
Okay bestie, here's the deets ๐ This is an FYI from the Network Working Group, labeled RFC 1470, and it was published in June 1993. The editors are R. Enger (ANS) and J. Reynolds (ISI) ๐ It's an informational doc, not a standard. It obsoletes RFC 1147, which is the older version of this same catalog ๐ฆ
Status of this Memo ๐ธ
This memo gives info to the Internet community. It is not a standard, so nothing here is a spec you have to follow ๐ซถ Anyone can share it freely, no cap.
Abstract ๐ง
The whole point of this FYI is to update FYI 2, which is RFC 1147 [1]. That older doc gave practical info to site admins and network managers. This RFC lists the new and updated tools. ๐
If you have more descriptions to add, send them to noctools-entries@merit.edu โจ More are always welcome!
Introduction ๐
Okay so, here's the thing: a static doc can't keep up with the latest tools or with fresh updates to the older catalog entries ๐ญ That's why the NOCtools catalog lives online, on the Internet and on Usenet. Iconic, right? ๐
news comp.networks.noctools
ftp wuarchive.wustl.edu:/doc/noctools
Publishing takes time, so some entries in this catalog might be outdated ๐ Please check the online version for the latest info, periodt.
The index in this document matches what's currently in the online docs ๐
The NOCtools2 Working Group of the Internet Engineering Task Force (IETF) put together this revised catalog. Future revisions will go into the online NOCtools catalog. You're encouraged to send in new or revised entries, which get published almost right away โญ
Caveat Emptor! The IETF does not endorse any of these tools. For the most part, nobody here tested them or checked their descriptions ๐ Most commercial tool descriptions came straight from the vendors, so read with a grain of salt.
Acknowledgements ๐ซถ
This catalog is the work of the NOCTools2 Working Group, which sits in the User Services Area of the IETF. Huge thanks to Chris Myers, Darren Kinley, Gary Malkin, Mohamed Ellozy, and Mike Patton for their especially notable contributions ๐๐ฅ
Current Postings ๐ฆ
You can grab the current NOCtools catalog through anonymous FTP from wuarchive.wustl.edu. Each entry is its own file, and they all live in the directory /doc/noctools ๐
Keyword Definitions ๐
okay bestie, the keywords are always listed in a predefined order ๐ sorted first by the general category they fall into, and then alphabetically โจ the categories that have been defined for management tool keywords are:
- the general management area a tool relates to, or the tool's functional role;
- the network resources or components that get managed;
- the mechanisms or methods a tool uses to do its job;
- the operating system and hardware environment of a tool; and
- the characteristics of a tool as a hardware product or software release.
the keywords for describing a tool's general management area or functional role are:
Alarm: a reporting/logging tool that can trigger on specific events within a network. ๐จAnalyzer: a traffic monitor that reconstructs and interprets protocol messages that span several packets. ๐Benchmark: a tool used to evaluate the performance of network components. ๐Control: a tool that can change the state or status of a remote network resource. ๐๏ธDebugger: a tool that, by generating arbitrary packets and monitoring traffic, can drive a remote network component to various states and record its responses. ๐Generator: a traffic generation tool. โกManager: a distributed network management system or system component. ๐Map: a tool that can discover and report a system's topology or configuration. ๐บ๏ธReference: a tool for documenting MIB structure or system configuration. ๐Routing: a packet route discovery tool. ๐งญSecurity: a tool for analyzing or reducing threats to security. ๐ก๏ธStatus: a tool that remotely tracks the status of network components. ๐Traffic: a tool that monitors packet flow. ๐
the keywords for identifying the network resources or components a tool manages are:
Bridge: a tool for controlling or monitoring LAN bridges. ๐CHAOS: a tool for controlling or monitoring implementations of the CHAOS protocol suite or network components that use it.DECnet: a tool for controlling or monitoring implementations of the DECnet protocol suite or network components that use it.DNS: a Domain Name System debugging tool.Ethernet: a tool for controlling or monitoring network components on ethernet LANs. ๐FDDI: a tool for controlling or monitoring network components on FDDI LANs or WANs.IP: a tool for controlling or monitoring implementations of the TCP/IP protocol suite or network components that use it. ๐OSI: a tool for controlling or monitoring implementations of the OSI protocol suite or network components that use it.NFS: a Network File System debugging tool.Ring: a tool for controlling or monitoring network components on Token Ring LANs. ๐SMTP: an SMTP debugging tool. ๐งStar: a tool for controlling or monitoring network components on StarLANs. โญ
the keywords for describing a tool's mechanism are:
CMIS: a network management system or component based on CMIS/CMIP, the Common Management Information System and Protocol.Curses: a tool that uses the "curses" tty interface package. ๐ฅ๏ธEavesdrop: a tool that silently monitors communications media (e.g., by putting an ethernet interface into "promiscuous" mode). ๐NMS: the tool is a component of or queries a Network Management System.Ping: a tool that sends packet probes such as ICMP echo messages; to help distinguish tools, we do not consider NMS queries or protocol spoofing (see below) as probes. ๐Proprietary: a distributed tool that uses proprietary communications techniques to link its components. ๐RMON: a tool which employs the RMON extensions to SNMP.SNMP: a network management system or component based on SNMP, the Simple Network Management Protocol.Spoof: a tool that tests operation of remote protocol modules by peer-level message exchange. ๐ญX: a tool that uses X-Windows. ๐ช
the keywords for describing a tool's operating environment are:
DOS: a tool that runs under MS-DOS. ๐พHP: a tool that runs on Hewlett-Packard systems.Macintosh: a tool that runs on Macintosh personal computers. ๐OS/2: a tool that runs under the OS/2 operating system.Standalone: an integrated hardware/software tool that requires only a network interface for operation. ๐ฆSun: a tool that runs on Sun Microsystems platforms. (binary distribution built for use on a Sun.) โ๏ธUNIX: a tool that runs under 4.xBSD UNIX or related OS. ๐งVMS: a tool that runs under DEC's VMS operating system.
the keywords for describing a tool's characteristics as a hardware or software acquisition are:
Free: a tool is available at no charge, though other restrictions may apply (tools that are part of an OS distribution but not otherwise available are not listed as "free"). ๐Library: a tool packaged with either an Application Programming Interface (API) or object-level subroutines that may be loaded with programs. ๐Sourcelib: a collection of source code (subroutines) upon which developers may construct other tools. ๐งฑ
Tools Indexed by Keywords ๐๏ธ
okay so this is the index of the most up-to-date catalog entries, sorted by keyword ๐ you can get it through these:
news comp.networks.noctools.tools
ftp wuarchive.wustl.edu:/doc/noctool
this index can be used to find the tools with a particular attribute: tools are listed under each keyword that characterizes them. the keywords and the subordinate lists of tools under them are in alphabetical order, so it's super easy to scroll and find your girl ๐ฆ
Alarm
-----
CMIP Library
Dual Manager
Eagle
EMANATE
EtherMeter
LanProbe
LANWatch
MONET
NetMetrix Load Monitor
NetMetrix Protocol Analyzer
NETMON for Windows
NETscout
NOCOL
SNMP Libraries and Utilities from Empire Technologies
SNMP Libraries and Utilities from SNMP Research
snmpd from Empire Technologies
SpiderMonitor
XNETMON from SNMP Research
xnetmon from Wellfleet
Analyzer
--------
LANVista
LANWatch
NetMetrix Protocol Analyzer
NETscout
PacketView
Sniffer
SpiderMonitor
Benchmark
---------
hammer & anvil
iozone
LADDIS
LANVista
nhfsstone
SPIMS
spray
ttcp
XNETMON from SNMP Research
CMIS
----
CMIP library
Generic Managed System
MIB Browser
Control
-------
CMIP Library
Dual Manager
Eagle
MIB Manager from Empire Technologies
MONET
NETMON for Windows
proxyd
SNMP Libraries and Utilities from Empire Technologies
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System
snmpd from Empire Technologies
TokenVIEW
XNETMON from SNMP Research
Debugger
--------
Ethernet Box II
LANVista
NetMetrix Traffic Generator
ping from UCB
SPIMS
XNETMON from SNMP Research
Generator
---------
hammer & anvil
LADDIS
LANVista
NetMetrix Traffic Generator
nhfsstone
ping
ping from UCB
Sniffer
SpiderMonitor
spray
TTCP
Manager
-------
Beholder
CMIP Library
CMU SNMP Distribution
decaddrs by Wellfleet
Dual Manager
EMANATE
Ethernet Box II
getone by Wellfleet
Interactive Network Map
LanProbe
LANVista
MIB Manager from Empire Technologies
MONET
NetLabs CMOT Agent
NetLabs SNMP Agent
NETMON for Windows
NETscout
NNStat
NOCOL
OverVIEW
SAS/CPE for Open Systems Software
SNMP Development Kit
SNMP Libraries and Utilities from Empire Technologies
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System
snmpd from Empire Technologies
tokenview
Tricklet
Wollongong-Manager
XNETMON from SNMP Research
XNETMON from Wellfleet
xnetperfmon
Map
---
decaddrs by Wellfleet
Dual Manager
etherhostprobe
EtherMeter
Interactive Network Map
LanProbe
NETMON for Windows
Network Integrator I
NPRV
SNMP Libraries and Utilities from SNMP Research
XNETMON by SNMP Research
XNETMON by Wellfleet
Reference
---------
EMANATE
ethernet-codes
HyperMIB
MIB Manager from Empire Technologies
XNETMON
Routing
-------
arp
decaddrs by Wellfleet
etherhostprobe
getone by Wellfleet
hopcheck
MONET
net_monitor
NETMON for Windows
netstat
NPRV
ping from UCB
query
traceroute
Security
--------
Computer Security Checklist
Dual Manager
Eagle
EMANATE
LAN Patrol
SNMP Libraries and Utilities from SNMP Research
XNETMON by SNMP Research
xnetperfmon
Status
------
Beholder
CMIP Library
CMU SNMP
DiG
dnsstats
doc
Dual Manager
EMANATE
fping
getone by Wellfleet
host
Internet Rover
lamers
LanProbe
mconnect
MONET
net_monitor
Netlabs CMOT Agent
Netlabs SNMP Agent
NETscout
NNStat
NOCOL
NPRV
OverVIEW
ping
ping from UCB
proxyd from SNMP Research
SAS/CPE
SNMP Development Kit
SNMP Libraries and Utilities from Empire Technologies
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System
PSI SNMP
snmpd from Empire Technologies
snmpd from SNMP Research
TokenVIEW
Tricklet
vrfy
XNETMON by SNMP Research
xnetmon by Wellfleet
xnetperfmon
xup
Traffic
-------
etherfind
EtherMeter
Ethernet Box II
EtherView
getethers
LAN Patrol
LanProbe
LANVista
LANWatch
ENTM
MONET
NetMetrix Load Monitor
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
NETMON by Mitre
NETscout
netwatch
Network Integrator I
nfswatch
nhfsstone
NNStat
ositrace
PacketView
Sniffer
SpiderMonitor
spray
tcpdump
tcplogger
trpt
ttcp
XNETMON by SNMP Research
Bridge
------
decaddrs by Wellfleet
EMANATE
MIB Manager from Empire Technologies
MONET
proxyd by SNMP Research
SAS/CPE
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System
snmpd from SNMP Research
XNETMON from SNMP Research
CHAOS
-----
Interactive Network Map
LANWatch
Okay bestie, we're back in the index and it's a LOT ๐ญ๐ซถ Here's the rest of the keyword lineup, every tool filed under its keyword, exactly as it's written:
DECnet
------
decaddrs by Wellfleet
LANVista
LANWatch
MONET
net_monitor
NetMetrix Protocol Analyzer
NETMON for Windows
NETscout
Sniffer
SNMP Libraries and Utilities from SNMP Research
SpiderMonitor
XNETMON from SNMP Research
xnetperfmon from SNMP Research
DNS
---
DiG
dnsstats
doc
lamers
LANWatch
NetMetrix Protocol Analyzer
NOCOL
Ethernet
--------
arp
Beholder
Eagle
EMANATE
etherfind
etherhostprobe
EtherMeter
Ethernet Box II
ethernet-codes
EtherView
getethers
LAN Patrol
LanProbe
LANVista
LANWatch
ENTM
Interactive Network Map
MONET
NetMetrix Load Monitor
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
NETMON for Windows
NETscout
netwatch
Network Integrator I
nfswatch
NNStat
PacketView
proxyd from SNMP Research
SAS/CPE
Sniffer
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
snmpd from SNMP Research
SpiderMonitor
tcpdump
XNETMON from SNMP Research
xnetperfmon from SNMP Research
FDDI
----
EMANATE
ethernet-codes
NetMetrix Load Monitor
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
nfswatch
SAS/CPE
SNMP Libraries and utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
snmpd from SNMP Research
XNETMON from SNMP Research
IP
--
arp
CMU SNMP
Dual Manager
Eagle
EMANATE
etherfind
etherhostprobe
EtherView
fping
getone from Wellfleet
hammer & anvil
hopcheck
Internet Rover
LanProbe
LANVista
LANWatch
ENTM
Interactive Network Map
MIB Manager from Empire Technologies
MONET
net_monitor
Netlabs CMOT Agent
Netlabs SNMP Agent
NetMetrix Load Monitor
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
NETMON by Mitre
NETMON for Windows
NETscout
netstat
netwatch
nfswatch
nhfsstone
NNStat
NOCOL
NPRV
OverVIEW
PacketView
ping
ping from UCB
proxyd from SNMP Research
query
SAS/CPE
SNMP Development Kit
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
PSI SNMP
snmpd from Empire Technologies
snmpd from SNMP Research
PSI SNMP
SpiderMonitor
SPIMS
spray
tcpdump
tcplogger
traceroute
trpt
ttcp
XNETMON from SNMP Research
xnetmon from Wellfleet
xnetperfmon from SNMP Research
OSI
---
CMIP Library
Dual Manager
EMANATE
LANVista
LANWatch
Netlabs CMOT Agent
NetMetrix Protocol Analyzer
NETMON for Windows
NETscout
NOCOL
ositrace
proxyd from SNMP Research
SAS/CPE
Sniffer
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
snmpd from SNMP Research
SpiderMonitor
SPIMS
XNETMON from SNMP Research
xnetperfmon from SNMP Research
NFS
---
etherfind
EtherView
iozone
LADDIS
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NETscout
nfswatch
nhfsstone
Sniffer
tcpdump
Ring
----
Eagle
EMANATE
Interactive Network Map
LANVista
LANWatch
NetMetrix Load Monitor
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
NETMON by Mitre
NETMON for Windows
NETscout
netwatch
PacketView
proxyd from SNMP Research
Sniffer
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
snmpd from SNMP Research
TokenVIEW
XNETMON from SNMP Research
xnetperfmon from SNMP Research
SMTP
----
host
Internet Rover
LANWatch
mconnect
NetMetrix Protocol Analyzer
Sniffer
vrfy
Star
----
EMANATE
Interactive Network Map
LAN Patrol
LANWatch
NETMON for Windows
NETscout
proxyd from SNMP Research
Sniffer
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
snmpd from SNMP Research
XNETMON from SNMP Research
xnetperfmon from SNMP Research
Curses
------
Eagle
Internet Rover
net_monitor
nfswatch
NOCOL
PSI SNMP
Eavesdrop
---------
etherfind
Ethernet Box II
EtherView
LAN Patrol
LANVista
LANWatch
ENTM
NetMetrix Load Monitor
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NetNetrix Traffic Generator
NETMON from Mitre
NETscout
netwatch
nfswatch
NNStat
OSITRACE
PacketView
Sniffer
SpiderMonitor
tcplogger
trpt
NMS
---
CMU SNMP
decaddrs from Wellfleet
Dual Manager
EMANATE
EtherMeter
Ethernet Box II
getone from Wellfleet
Interactive Network Map
MONET
Netlabs CMOT Agent
Netlabs SNMP Agent
NETMON for Windows
NETscout
NNStat
NOCOL
OverVIEW
proxyd from SNMP Research
SNMP Development Kit
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
PSI SNMP
snmpd from Empire Technologies
snmpd from SNMP Research
TokenVIEW
XNETMON from SNMP Research
xnetmon from Wellfleet
xnetperfmon from SNMP Research
Ping
----
etherhostprobe
fping
getethers
hopcheck
Interactive Network Map
Internet Rover
LANWatch
net_monitor
NOCOL
NPRV
ping
ping from UCB
spray
traceroute
ttcp
XNETMON from SNMP Research
xup
Proprietary
-----------
Eagle
EtherMeter
Ethernet Box II
LanProbe
LANVista
TokenVIEW
RMON
----
Beholder
SNMP
----
Beholder
CMU SNMP
decaddrs from Wellfleet
Dual Manager
EMANATE
getone from Wellfleet
Interactive Network Map
MIB Manager from Empire Technologies
MONET
Netlabs SNMP Agent
NetMetrix Load Monitor
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
NETMON for Windows
NETscout
NOCOL
OverVIEW
proxyd from SNMP Research
SNMP Development Kit
SNMP Libraries and utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
PSI SNMP
snmpd from Empire Technologies
snmpd from SNMP Research
Wollongong-Manager
XNETMON from SNMP Research
xnetmon from Wellfleet
xnetperfmon from SNMP Research
Spoof
-----
DiG
doc
Internet Rover
host
LADDIS
mconnect
nhfsstone
NOCOL
query
SPIMS
vrfy
X
-
Dual Manager
Interactive Network Map
MIB Manager from Empire Technologies
NetMetrix Load Monitor
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
SAS/CPE
PSI SNMP
XNETMON from SNMP Research
xnetperfmon from SNMP Research
xup
DEC
---
Wollongong-Manager
DOS
---
Computer Security Checklist
Ethernet Box II
hammer & anvil
hopcheck
iozone
LAN Patrol
LANVista
netmon
NETMON for Windows
netwatch
OverVIEW
PacketView
ping
SAS/CPE
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
snmpd from SNMP Research
TokenVIEW
Wollongong-Manager
xnetperfmon from SNMP Research
HP
--
iozone
SAS/CPE
xup
Macintosh
---------
HyperMIB
OS/2
----
Beholder
Tricklet
Standalone
----------
LANVista
Sniffer
SNMP Packaged Agent System from SNMP Research
SpiderMonitor
Sun
---
Avatar SunSNMPD
Wollongong Manager
UNIX
----
arp
CMIP Library
CMU SNMP
decaddrs from Wellfleet
DiG
doc
dnsstats
Eagle
etherfind
etherhostprobe
EtherView
fping
getethers
getone from Wellfleet
host
Interactive Network Map
Internet Rover
iozone
LADDIS
lamers
mconnect
MIB Manager from Empire Technologies
MONET
net_monitor
Dual Manager
NetMetrix Load Monitor
NetMetrix NFS Monitor
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
NETMON from Mitre
NETscout
netstat
Network Integrator I
nfswatch
nhfsstone
NNStat
NOCOL
OSITRACE
ping
ping from UCB
proxyd from SNMP Research
query
SAS/CPE
SNMP Development Kit
SNMP Libraries and Utilities from Empire Technologies
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
PSI SNMP
snmpd from Empire Technologies
snmpd from SNMP Research
SPIMS
spray
tcpdump
tcplogger
traceroute
Tricklet
trpt
ttcp
vrfy
XNETMON from SNMP Research
xnetmon from Wellfleet
xnetperfmon from SNMP Research
VMS
---
arp
ENTM
fping
net_monitor
netstat
NPRV
ping
SNMP Libraries and Utilities from SNMP Research
tcpdump
traceroute
ttcp
xnetperfmon from SNMP Research
Free
----
arp
Beholder
CMIP Library
CMU SNMP Distribution
DiG
dnsstats
doc
ENTM
fping
getethers
hammer & anvil
hopcheck
host
Interactive Network Map
Internet Rover
iozone
lamers
net_monitor
netmon from Mitre
netstat
netwatch
nfswatch
nhfsstone
NNStat
NOCOL
NPRV
OSITRACE
PING
ping from UCB
query
SNMP Development Kit
tcpdump
tcplogger
traceroute
Tricklet
trpt
ttcp
vrfy
Library
-------
CMIP Library
CMU SNMP
Dual Manager
NetMetrix Protocol Analyzer
NetMetrix Traffic Generator
proxyd from SNMP Research
SAS/CPE
Sourcelib
---------
Beholder
CMIP Library
CMU SNMP
EMANATE
HyperMIB
Interactive Network Map
Internet Rover
LANWatch
MIB Manager from Empire Technologies
net_monitor
NETMON for Windows
NOCOL
proxyd from SNMP Research
SNMP Development Kit
SNMP Libraries and Utilities from Empire Technologies
SNMP Libraries and Utilities from SNMP Research
SNMP Packaged Agent System from SNMP Research
snmpd from SNMP Research
SpiderMonitor
Tricklet
XNETMON from SNMP Research
xnetperfmon from SNMP Research
Tool Descriptions ๐
Okay so this bit is basically a glow-up catalogue of short tool descriptions for managing TCP/IP internets ๐ฆ Everything's sorted alphabetically by tool name, and every entry follows the same template, so once you've read one you can read them all ๐
Right after a tool's NAME come its KEYWORDS. These are terse little labels for what a tool is for or what it's like. For the full story you go to the ABSTRACT, which is the detailed purpose and characteristics bit. The MECHANISM section explains how the tool actually works, and CAVEATS is where the warnings live, so please don't skip it ๐ BUGS covers known bugs or how to report new ones, and LIMITATIONS spells out what the tool can't do. Then there's HARDWARE REQUIRED and SOFTWARE REQUIRED, which describe the environment the tool needs, and finally AVAILABILITY points you to vendors, online repositories, or other places to get it ๐ง
Real talk: when tool names clash, the vendor name gets added too ๐ MITRE and SNMP Research both sent in an updated description of a tool called "NETMON", but these were built independently, they do different things, and they run in different environments. So MITRE's one is listed asNETMON_MITRE, and SNMP Research's is listed asNETMON_WINDOWS_SNMP_RESEARCH. Two NETMONs, zero drama ๐
Here's our first entry, the very first one in the catalogue โจ
Internet Tool Catalog ARP
NAME
arp ๐ธ
KEYWORDS
routing; ethernet, IP;; UNIX, VMS; free. ๐
ABSTRACT
Okay so arp lets you peek at and even modify the internet-to-ethernet address translation tables that ARP uses, and ARP is the address resolution protocol ๐ฆ It's giving "look but also touch" ๐
MECHANISM
The arp program goes straight into operating system memory to read the ARP data structures. That's the whole trick, and honestly it's iconic ๐ญ๐ฅ
CAVEATS: None. Nothing to flag here, bestie ๐
BUGS: None known. โจ
LIMITATIONS: Only the super user can modify ARP entries. ๐
HARDWARE REQUIRED: No restrictions. ๐ธ
SOFTWARE REQUIRED: BSD UNIX or related OS, or VMS. ๐ฆ
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
Available via anonymous FTP from uunet.uu.net, in the directory bsd-sources/src/etc. It comes with 4.xBSD UNIX and related operating systems. For VMS, it's part of the TGV MultiNet IP software package, and also shows up in Wollongong's WIN/TCP and Process Software Corporation's TCPware for VMS. Iconic spread ๐
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
This entry is maintained by the NOCtools editors. Send email to noctools-request@merit.edu. ๐
Internet Tool Catalog AVATAR-SNMP-TOOLKIT
NAME
SNMP Application Development Toolkit โจ
KEYWORDS
manager;;SNMP;;sourcelib.
ABSTRACT
snmpapi is an API toolkit for building SNMP applications and agents. It's simple and very fast, so it works for any type of application, and it's especially giving for embedded systems like bridges or routers. There's an example MIB II agent for Sun Sparcstations included. snmpapi is distributed in source form only. ๐
MECHANISM
snmpapi is a library of C functions. ๐ง
CAVEATS
None. ๐
BUGS
None known. โจ
LIMITATIONS
None. ๐ซถ
HARDWARE REQUIRED
No restrictions. ๐ธ
AVAILABILITY
Available now. For more information, send e-mail to info@avatar.com. ๐ฆ
Internet Tool Catalog AVATAR-SUNSNMPD
NAME
sundnmpd
KEYWORDS
manager;;snmp;sun;.
ABSTRACT
sunsnmpd is a fully supported SNMP agent with MIB II support for Sun Sparcstations running SunOS 4.1 or higher. It supports both SNMP GET and SET operations. Full main-character energy ๐
MECHANISM
sundnmpd is a daemon process that starts up at boot time from the rc.local file. It uses /dev/kmem to access kernel structures.
The original spells itsundnmpdin the MECHANISM field, notsunsnmpd, so I kept it exactly that way ๐
CAVEATS
None. ๐
BUGS
None known. โจ
LIMITATIONS
Must be started by a super user. ๐
HARDWARE REQUIRED
Sun Sparcstations. ๐ธ
AVAILABILITY
Available now. Site licensing only. For more information, send e-mail to info@avatar.com. ๐
Internet Tool Catalog ChameLAN-100
NAME
ChameLAN 100
KEYWORDS
analyzer, benchmark, debugger, generator, map,
reference, status, traffic; bridge, DECnet, ethernet,
FDDI, IP, OSI, NFS, ring; eavesdrop, SNMP, X;
standalone, UNIX.
ABSTRACT
Tekelec's ChameLAN 100 is a portable diagnostic system for monitoring and simulating FDDI, Ethernet and Token Ring networks, all at once. Analyzing protocols across multiple topologies, including mixed topologies running at the same time, is a key feature of the product family. Tekelec's proprietary FDDI hardware gives you complete real-time analysis of networks and network components at the full ring bandwidth of 125 Mbps. It connects passively to the network, captures 100 percent of the data, measures performance and isolates real-time problems. Absolutely iconic ๐ฅ
The simulation option gives you full-bandwidth load generation, so you can create and simulate any network condition. You can inject errors and malformed frames. A set of confidence tests makes it easy to evaluate new equipment. The ring map feature displays network topology and the status of all nodes via the SMT process. ๐บ๏ธ
Monitoring FDDI, Ethernet and Token Ring lets you: view network status in real time; view network, node, or node pair statistics; capture frames; control capture using trigger and filter capabilities; view real-time statistics; view captured frames in decoded format; and view the last frame transmitted by each station. ๐
The following Real-Time Network Statistics for FDDI, Ethernet and Token Ring networks are displayed: frame rate, runts, byte rate, jabbers, CRC/align errors, and collisions. ๐
Product developers can use the ChameLAN 100 to observe and control various events, which helps them debug their FDDI, Ethernet and Token Ring products. End users can do real-time monitoring to test and diagnose problems that come up while developing, installing or managing FDDI, Ethernet and Token Ring networks and network products. They can also use it to help install and maintain Ethernet and Token Ring networks. To isolate specific trouble spots, the ChameLAN 100 uses filtering and triggering techniques for data capture. Higher-level protocol decode covers the TCP/IP, OSI and DECnet protocol suites. Protocol decode of IPX, SNMP, XTP, and AppleTalk is also supported. More protocol decodes are still in development. The ChameLAN 100 family also offers a Protocol Management Development System (PMDS) that lets users develop custom protocol decode suites. ๐ง
The FDDI, Ethernet and Token Ring hardware interfaces have independent processing power. Real-time data is monitored unobtrusively at full bandwidth, without affecting network activity. Real-time data can also be saved to a 120MB or optional 200MB hard disk drive for later analysis. FDDI data is captured at 125 megabits per second (Mbps), Ethernet at 10 Mbps, and Token Ring at 4 or 16 Mbps. ๐ฆ
MECHANISM
This portable, standalone unit brings together the power of UNIX, X-Windows and Motif. Its UNIX-based programming interface makes it easy to develop customized monitoring and simulation applications. The ChameLAN 100 can connect to the network at any location using standard equipment. Standard graphical Motif/X-Windows and TCP/IP allow remote control through Ethernet and 10Base T interfaces. Tekelec also offers a rackmounted model, the ChameLAN 100-X. Both models can be controlled remotely from a Sun Workstation. ๐
CAVEATS
none. ๐
BUGS
none known. โจ
LIMITATIONS
none reported. ๐ซถ
HARDWARE REQUIRED
None. The ChameLAN 100 is a self-contained unit and includes its own interface cards. It installs into a network with standard interface connectors. ๐ธ
SOFTWARE REQUIRED
None. ๐ฆ
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
The ChameLAN 100 product family is available commercially. For more information or a free demo, call or write:
1.800.tek.elec
Tekelec
26580 West Agoura Road
Calabasas, CA 91302
Phone: 818.880.5656
Fax: 818.880.6993
The ChameLAN 100 is listed on the GSA schedule. ๐ผ
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
Todd Koch, Public Relations Specialist, 818.880.7718, Internet: todd.koch@tekelec.com ๐
Internet Tool Catalog CMU_SNMP
NAME
The CMU SNMP Distribution โจ
KEYWORDS
manager, status; IP; NMS, SNMP; UNIX; free, sourcelib.
ABSTRACT
The CMU SNMP Distribution includes source code for an SNMP agent, several SNMP client applications, an ASN.1 library, and supporting documentation.
The agent compiles into about 10 KB of 68000 code. The distribution includes a full agent that runs on a Kinetics FastPath2/3/4 and is built into the KIP appletalk/ethernet gateway. The machine-independent portions of this agent also run on CMU's IBM PC/AT based router. ๐ฅ๏ธ
The applications are designed to be genuinely useful in the real world. Information is collected and presented in a useful format, which makes it suitable for everyday status monitoring. Input and output are interpreted symbolically. You can use the tools without referencing the RFCs. Main-character energy ๐
MECHANISM
SNMP. ๐ง
CAVEATS
None. ๐
BUGS
None reported. Send bug reports to sw0l+snmp@andrew.cmu.edu. ("sw0l" is "ess double-you zero ell.") ๐
LIMITATIONS
None reported. ๐ซถ
HARDWARE REQUIRED
The KIP gateway agent runs on a Kinetics FastPath2/3/4. Otherwise, no restrictions. ๐ธ
SOFTWARE REQUIRED
The code was written with efficiency and portability in mind. The applications compile and run on the following systems: IBM PC/RT running ACIS Release 3, Sun3/50 running SUNOS 3.5, and the DEC microVax running Ultrix 2.2. They're expected to run on any system with a Berkeley socket interface. ๐ฆ
AVAILABILITY
This distribution is copyrighted by CMU, but it may be used and sold without permission. Consult the copyright notices for further information. The distribution is available by anonymous FTP from the host lancaster.andrew.cmu.edu (128.2.13.21) as the files pub/cmu-snmp.9.tar and pub/kip-snmp.9.tar. The former includes the libraries and the applications, and the latter is the KIP SNMP agent. ๐
Please direct questions, comments, and bug reports to sw0l+snmp@andrew.cmu.edu. ("sw0l" is "ess double-you zero ell.") If you pick up this package, please send a note to the above address, so you can be notified of future enhancements, changes and additions to the set of applications (several are planned). ๐
Internet Tool Catalog COMPUTER-SECURITY-CHECKLIST
NAME
Computer Security Checklist ๐
KEYWORDS security; DOS. ๐
Okay bestie, this one is a computer security checklist with main character energy ๐ It has 858 computer security questions split into thirteen sections ๐ The program asks you the questions and saves your answers, and once you finish a section you can generate a report from the questions and your answers โจ
The questions have weights for how important they are, and the report generator can sort them by weight, so the biggest issues get tackled first ๐ Iconic, no notes ๐
MECHANISM: The questions show up on the screen and you answer with a single keystroke ๐ฆ When you reach the end of one of the thirteen sections, your answers get written to a disk file. Then the question file and the answer file get merged to make the report file ๐ธ
CAVEATS: None. ๐ซถ
BUGS: None known. ๐
LIMITATIONS: None reported. โจ
HARDWARE REQUIRED: No restrictions. ๐
SOFTWARE REQUIRED: DOS operating system. ๐พ
AVAILABILITY: It's a commercial product, available from:
C.D., Ltd.
P.O. Box 58363
Seattle, WA 98138
(206) 243-8700
CMIP-LIBRARY ๐ง
NAME: CMIP Library
KEYWORDS: manager; osi; cmis; unix; free, sourcelib.
ABSTRACT: Okay so the CMIP Library implements the functionality of the Common Management Information Service/Protocol, following the full international standards (ISO 9595, ISO 9596) published in 1990. It's designed to work with the ISODE package, and it can act as a building block for making CMIP-based agent and manager applications ๐
MECHANISM: The CMIP library uses ISO ROS, ACSE and ASN.1 presentation, as implemented in ISODE, to provide its service ๐ฅ
CAVEATS: None. ๐
BUGS: None known. ๐
LIMITATIONS: None known. ๐
HARDWARE REQUIRED: Has been tested on SUN 3 and SUN 4 architectures. ๐ฅ๏ธ
SOFTWARE REQUIRED: The ISODE protocol suite, BSD UNIX. ๐
AVAILABILITY: The CMIP library and the related management tools built on top of it, known as OSIMIS (OSI Management Information Service), are publicly available from University College London, England, via FTP and FTAM. To get info about a copy, send email to osimis-request@cs.ucl.ac.uk or call +44 71 380 7366 ๐ฆ
DECADDRS ๐ธ
NAME: decaddrs, decaroute, decnroute, xnsroutes, bridgetab
KEYWORDS: manager, map, routing; bridge, DECnet; NMS, SNMP; UNIX.
ABSTRACT: These commands display private MIB information from Wellfleet systems, and they're giving real detective energy ๐ต๏ธโโ๏ธ They retrieve and format values of one or several MIB variables from the Wellfleet Communications private enterprise MIB, using SNMP (RFC1098). They're mainly used to examine the non-IP modules (DECnet, XNS, and Bridging) of a Wellfleet system ๐
decaddrs shows the DECnet configuration of a Wellfleet system acting as a DECnet router, including the static parameters for each DECnet interface. decaroute and decnroute display the DECnet inter-area and intra-area routing tables (that is, area routes and node routes) ๐ง xnsroutes displays the routes known to a Wellfleet system acting as an XNS router. bridgetab displays the bridge forwarding table, with the disposition of traffic arriving from or directed to each station known to the Wellfleet bridge module ๐
All of these commands take an IP address as the argument and can specify an SNMP community for the retrieval. One SNMP query is performed for each row of the table. Also, the Wellfleet system has to be operating as an IP router for SNMP to be accessible ๐ซถ Don't skip that part, it matters!
MECHANISM: Management information is exchanged by use of SNMP. ๐ก
CAVEATS: None. ๐
BUGS: None known. ๐
LIMITATIONS: None reported. โจ
HARDWARE REQUIRED: Distributed and supported for Sun 3 systems. ๐ฅ๏ธ
SOFTWARE REQUIRED: Distributed and supported for SunOS 3.5 and 4.x. ๐
AVAILABILITY: Commercial product of:
Wellfleet Communications, Inc.
12 DeAngelo Drive
Bedford, MA 01730-2204
(617) 275-2400
DIG ๐ฆ
NAME: DiG
KEYWORDS: status; DNS; spoof; UNIX; free.
ABSTRACT: DiG (domain information groper) is a command line tool that queries DNS servers in either interactive or batch mode. It was developed to be more convenient and flexible than nslookup for gathering performance data and testing DNS servers ๐
MECHANISM: Dig is built on a slightly modified version of the bind resolver (release 4.8). ๐ง
CAVEATS: none. ๐
BUGS: None known. ๐
LIMITATIONS: None reported. โจ
HARDWARE REQUIRED: No restrictions. ๐
SOFTWARE REQUIRED: BSD UNIX. ๐พ
AVAILABILITY: DiG is available via anonymous FTP from venera.isi.edu in pub/dig.2.0.tar.Z ๐ธ
EMANATE_SNMP_RESEARCH ๐
NAME: EMANATE: Enhanced MANagement Agent Through Extensions from SNMP Research.
KEYWORDS: alarm, control, manager, reference, security, status; bridge, Ethernet, FDDI, IP, OSI, ring, star; NMS, SNMP; sourcelib.
ABSTRACT: The EMANATE system gives you a run-time extensible SNMP agent that reconfigures an agent's MIB on the fly, without having to recompile, relink, or restart the agent. An EMANATE capable SNMP agent can support zero, one, or many subagents, and it can dynamically reconfigure to connect or disconnect those subagents' MIBs ๐ง
The EMANATE system is made of several logically independent components and subsystems:
- Master SNMP agent, which contains an API to communicate with subagents.
- Subagents, which implement various MIBS.
- Subagent Developer's Kit, which contains tools to help implement subagents.
- EMANATE libraries, which provide the API for the subagent.
MECHANISM: A concise API allows a standard means of communication between the master and subagents. System dependent mechanisms are employed for transfer of information between the master and subagents. ๐ฅ
CAVEATS: None. ๐
BUGS: None known. ๐
LIMITATIONS: None reported. โจ
HARDWARE REQUIRED: Multiple platforms, including PCs, workstations, hosts, and servers, are supported. Contact SNMP Research for more details. ๐ฅ๏ธ
SOFTWARE REQUIRED: C compiler. ๐
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL: This is a commercial product, available under license from:
SNMP Research
3001 Kimberlin Heights Road
Knoxville, TN 37920-9716
Attn: John Southwood, Sales and Marketing
(615) 573-1434 (Voice) (615) 573-9197 (FAX)
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY: users@seymour1.cs.utk.edu ๐
ETHERFIND_SUN ๐
NAME: etherfind
KEYWORDS: traffic; ethernet, IP, NFS; eavesdrop; UNIX.
ABSTRACT: Etherfind examines the packets that traverse a network interface, and outputs a text file describing the traffic. Each line of text in the file describes a single packet, with values such as protocol type, length, source, and destination ๐ Etherfind can print out all packet traffic on the ethernet, or just the traffic for the local host. You can filter further by protocol: IP, ARP, RARP, ICMP, UDP, ND, or TCP. Filtering can also be done based on source and destination addresses, and on TCP and UDP port numbers ๐ฆ
MECHANISM: In usual operations, and by default, etherfind puts the interface in promiscuous mode. In 4.3BSD UNIX and related OSs, it uses a Network Interface Tap (NIT) to obtain a copy of traffic on an ethernet interface ๐ง
CAVEATS: None. ๐
BUGS: None known. ๐
LIMITATIONS: Minimal protocol information is printed. It can only be run by the super user. The syntax is painful ๐ญ
HARDWARE REQUIRED: Ethernet. ๐ฅ๏ธ
SOFTWARE REQUIRED: SunOS. ๐
AVAILABILITY: Executable included in the Sun OS "Networking Tools and Programs" software installation option ๐พ
ETHERNET-CODES ๐
NAME: ethernet-codes
KEYWORDS: reference; ethernet, fddi; ; ; ;
ABSTRACT: Mike Patton of MIT LCS has compiled a very comprehensive list of the IEEE numbers used on Ethernet and FDDI (with some permutation). This file contains collected information on the various codes used on IEEE 802.3 and EtherNet. There are three "pages": type codes, vendor codes, and the uses of multicast (including broadcast) addresses ๐
MECHANISM: FTP the file and use it like a secret decoder ring. ๐๏ธโจ
CAVEATS โจ
Okay bestie, real talk: this info came from collected wisdom, so there are definitely gonna be omissions ๐
BUGS ๐
Mike is so open to feedback ๐ซถ He welcomes any further additions, and you can send them to his special mailbox:
MAP=EtherNet-codes@LCS.MIT.Edu
LIMITATIONS ๐
See caveats, ofc.
HARDWARE REQUIRED ๐ป
No restrictions ๐
SOFTWARE REQUIRED ๐ง
Also no restrictions ๐
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐ฆ
The file is stored as flat, non-compressed ASCII text, which is so simple it's iconic ๐ญ You can FTP it from ftp.lcs.mit.edu, then retrieve the file at /pub/map/EtherNet-codes.
To submit additions or get more help, email:
MAP=EtherNet-codes@LCS.MIT.Edu
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐ฌ
This entry is maintained by the NOCtools editors. Email noctools-request@merit.edu for changes.
Internet Tool Catalog: GENERIC-MANAGED-SYSTEM ๐
NAME
Generic Managed System ๐
KEYWORDS
manager; osi; cmis; unix; free, sourcelib
ABSTRACT
Okay, the Generic Managed System (GMS) is giving foundation energy ๐๏ธ It implements all the functions that would be common to any OSI managed system. That includes parsing CMIS requests, selecting managed objects according to the scoping and filtering rules, handling notifications and event forwarding discriminators, and more. The whole point is that implementors use the GMS as a base for their own managed object implementations, and a support environment is provided to help with that โจ
MECHANISM
The GMS uses the UCL CMIP library plus a library of C++ objects representing common managed objects and attribute types ๐ฅ
CAVEATS
The system is still experimental ๐งช It's subject to change and isn't yet well documented, so go in with open eyes ๐
BUGS
See above ๐
LIMITATIONS
None known ๐ธ
HARDWARE REQUIRED
It has been tested on SUN 3 and SUN 4 architectures ๐
SOFTWARE REQUIRED
The ISODE protocol suite, BSD UNIX, the UCL CMIP Library, and GNU C++ (g++) ๐ง
AVAILABILITY
The CMIP library and the related management tools built on it, known as OSIMIS (OSI Management Information Service), are publicly available from University College London in England. You can get them via FTP and FTAM. For more info, email osimis-request@cs.ucl.ac.uk or call +44 71 380 7366 ๐
Internet Tool Catalog: GETETHERS ๐ฆ
NAME
getethers ๐ท
KEYWORDS
Traffic; Ethernet; Ping; UNIX; Free
ABSTRACT
Getethers is the ultimate ethernet scanner ๐ It runs through all addresses on an ethernet segment (a.b.c.1 to a.b.c.254) and pings each one, then figures out the ethernet address for each host. The result is a list of hostname/ethernet address pairs for all hosts on the local nework (yes, that's how the original spells it ๐). The list comes out in plain ASCII, in the file format for the Excelan Lanalyzer, or in the file format for the Network General Sniffer. The plain ASCII version can optionally include the vendor name of each system's ethernet card, which helps you figure out who unknown systems are ๐ต๏ธโโ๏ธ
MECHANISM
Getethers uses a raw IP socket to send ICMP echo requests and receive ICMP echo replies. Then it looks at the kernel ARP table to find the ethernet address of each system that responded ๐
CAVEATS
It assumes the ethernet it's looking at is either a Class C IP network, or part of a Class B IP network that's subnetted with a netmask of 255.255.255.0. This is easy to change, but it's compiled in, so heads up ๐
BUGS
None known โจ
LIMITATIONS
None ๐
HARDWARE REQUIRED
It has been tested on Sun-3 and Sun-4 (SPARC) systems under SunOS 4.1.x, and on DEC VAXes under 4.3BSD ๐ฅ๏ธ
SOFTWARE REQUIRED
It runs under SunOS 4.x and 4.3BSD. It should be easy to port to any other Berkeley-like system ๐ง It needs raw sockets and the ioctl calls to get at the ARP table.
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐
It's public domain and freely distributable, which is so generous ๐ซถ You can get it via anonymous FTP from harbor.ecn.purdue.edu, and it's also been posted to comp.sources.unix. The current version is Version 1.4 from May 1992.
Contact point:
Dave Curry
Purdue University
Engineering Computer Network
1285 Electrical Engineering Bldg.
West Lafayette, IN 47907-1285
davy@ecn.purdue.edu
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
Dave Curry, at the address above ๐
Internet Tool Catalog: GETONE_WELLFLEET ๐
NAME
getone, getmany, getroute, getarp, getaddr, getif, getid.
KEYWORDS
manager, routing, status; IP; NMS, SNMP; UNIX.
ABSTRACT
These commands retrieve and format values for display, whether that's one or several MIB variables (RFC1066) using SNMP (RFC1098) ๐ getone and getmany grab arbitrary MIB variables. getroute, getarp, getaddr, and getif retrieve and display tabular info like routing tables, the ARP table, and interface configuration. getid shows the system name, identification, and boot time ๐ง
Here's the vibe for getone:
getone <target> <mibvariable>
It retrieves and displays the value of the MIB variable you designate from the target system you specify. You can also specify the SNMP community name for the retrieval. getmany works the same way but for groups of MIB variables instead of single values. It shows the name, value, and data type of each variable ๐
getroute returns info from the ipRoutingTable MIB structure and displays it in an accessible format. getarp behaves similarly for the address translation table, getaddr does the same for the ipAddressTable, and getif displays info from the interfaces table, supplemented with info from the ipAddressTable ๐ธ
getid displays the system name, identification, ipForwarding state, and the boot time and date โฐ All of these take a system name or IP address as an argument, and they can specify an SNMP community for the retrieval. One SNMP query is performed for each row of the table, so it's a whole vibe ๐
MECHANISM
Queries SNMP agent(s) ๐ฆ
CAVEATS
None ๐
BUGS
None known ๐ท
LIMITATIONS
None reported โจ
HARDWARE REQUIRED
Distributed and supported for Sun 3 systems ๐ฅ๏ธ
SOFTWARE REQUIRED
Distributed and supported for SunOS 3.5 and 4.x ๐ง
AVAILABILITY
It's a commercial product of:
Wellfleet Communications, Inc.
12 DeAngelo Drive
Bedford, MA 01730-2204
(617) 275-2400
Internet Tool Catalog: HAMMER_ANVIL ๐จ
NAME
hammer & anvil ๐ฅ
KEYWORDS
benchmark, generator; IP; DOS; free.
ABSTRACT
Hammer and Anvil are the benchmarking programs for IP routers, and they're seriously iconic ๐ Using them, gateways have been tested for per-packet delay, router-generated traffic overhead, maximum sustained throughput, and so on ๐
MECHANISM
Tests are performed on a gateway in an isolated testbed ๐งช Hammer generates packets at controlled rates. It can set the length and interpacket interval of a packet stream. Anvil counts packet arrivals โจ
CAVEATS
Hammer should not be run on a live network ๐ซ Be careful, bestie!
BUGS
None reported ๐ธ
LIMITATIONS
Early versions of hammer couldn't produce inter-packet intervals shorter than 55 usec โฑ๏ธ
HARDWARE REQUIRED
Hammer runs on a PC/AT or compatible, and anvil requires a PC or clone. Both use a Micom Interlan NI5210 for the LAN interface ๐ป
SOFTWARE REQUIRED
MS-DOS ๐พ
AVAILABILITY
Hammer and anvil are copyrighted, though free ๐ Copies are available from pub/eutil on husc6.harvard.edu.
Internet Tool Catalog: HOPCHECK ๐ง
NAME
hopcheck ๐ฆ
KEYWORDS
routing; IP; ping; DOS; free.
ABSTRACT
Hopcheck lists the gateways traversed by packets sent from the hopcheck-resident PC to a destination ๐บ๏ธ It uses the same mechanism as traceroute, but it's for IBM PC compatibles with ethernet connections. Hopcheck is part of a larger TCP/IP package called ka9q, which is for use with packet radio ๐ป Ka9q can coexist on a PC with other TCP/IP packages, such as FTP Inc's PC/TCP, but it must be used independently of those other packages. Ka9q was written by Phil Karn, and Hopcheck was added by Katie Stevens, dkstevens@ucdavis.edu ๐ Unlike traceroute, which requires a UNIX kernel mod, hopcheck runs on the standard, unmodified ka9q release ๐ฅ
MECHANISM
See the description in traceroute ๐
CAVEATS
See the description in traceroute ๐
BUGS
None known ๐ท
HARDWARE REQUIRED
IBM PC compatible with an ethernet network interface card. The ethernet card is supported through the FTP spec packet driver ๐ป
SOFTWARE REQUIRED
DOS ๐พ
AVAILABILITY
It's free for radio amateurs and educational institutions ๐ Everyone else should contact Phil Karn at karn@ka9q.bellcore.com. It's available via anonymous FTP at ucdavis.edu, in the directory "dist/nethop" ๐ซถ
Internet Tool Catalog: INTERNET_ROVER ๐
NAME
Internet Rover โญ
KEYWORDS
status; IP, SMTP; curses, ping, spoof; UNIX; free, sourcelib.
Okay so the Internet Rover entry is up first, and it's giving prototype network monitor vibes ๐ฆ It's built out of multiple protocol "modules" that test network functionality, and it has two main pieces: the data collector and the problem display ๐
The data collector runs a series of network tests and keeps a list of problems with the network ๐ฅ Then you can have tons of display processes all showing that same list, which is honestly so useful in a multi-operator NOC ๐
The display task uses curses, so lots of terminal types can show the problem file, whether it's local or from a remote site โจ Full source is included ๐ซถ The data collector is easy to configure and extend, and extra protocol modules and shell script extensions are very welcome ๐ธ
MECHANISM
Okay the config file is where the magic starts ๐ง It holds a list of nodes, their addresses, a NodeUp? protocol test (ping in most cases), and then a list of further tests to run if the node is actually up ๐ There are modules for TELNET, FTP, and SMTP already ๐
If the config has a test that isn't recognized, it just assumes a generic test and checks whether a filename exists ๐ So users can write scripts that create a file when something's wrong, and the data collector only has to check if that file is there to know there's a problem. Iconic, no notes ๐
CAVEATS
None. ๐
BUGS
None known. โจ
LIMITATIONS
Bestie, this tool can't take action based on test results yet ๐ญ It's meant for a multi-operator setup and just displays a list of what's wrong with the net ๐
HARDWARE REQUIRED
This software is known to run on Suns and IBM RTs ๐
SOFTWARE REQUIRED
Curses, 4.xBSD UNIX socket programming libraries, BSD ping ๐ธ
AVAILABILITY
Full source is available via anonymous FTP from merit.edu (35.1.1.42) in the ~ftp/pub/inetrover directory ๐ฆ The source and executables are public domain and can be freely distributed for non-commercial use ๐ It's unsupported, but bug reports and fixes can be sent to wbn@merit.edu ๐
Internet Tool Catalog ยท IOZONE โจ
NAME
iozone ๐
KEYWORDS
benchmark; nfs;; dos,hp,unix,vmx; free. ๐
ABSTRACT
Okay so IOZONE is software for checking how well a system does sequential file I/O ๐ฅ It can be a handy reference for comparing against results from files accessed over NFS, Andrew, and so on ๐
MECHANISM
This test writes an X MEGABYTE sequential file in Y byte chunks, then rewinds it and reads it back ๐ฆ [The size of the file should be big enough to factor out the effect of any disk cache.] Then IOZONE deletes the temp file ๐งน You can change X and Y with options โจ The auto test runs IOZONE over and over with record sizes from 512 to 8192 bytes (adjustable) and file sizes from 1 to 16 megabytes (adjustable), and then it makes a table of results ๐ Main character energy ngl ๐
CAVEATS
The file gets written (filling any cache buffers) and then read ๐ญ If the cache is >= X MB, then most if not all reads come straight from the cache ๐ But if it's less than or equal to .5X MB, then NONE of the reads will come from the cache ๐ That's because after the write, a .5X MB cache holds the upper .5 MB of the test file, but the reads start from the beginning of the file, which is data that's no longer cached ๐ซ
For this to be a fair test, the length of the test file has to be AT LEAST 2X the amount of disk cache memory on your system ๐ If not, you're really just testing how fast your CPU can read blocks out of the cache, which is not a fair test โ
BUGS
None known at this time. ๐ธ
LIMITATIONS
IOZONE doesn't normally test the raw I/O speed of your disk or system-em ๐ It tests the speed of sequential I/O to actual files ๐ So the measurement factors in how efficient your machine's file system, operating system, C compiler, and C runtime library are ๐ง What it gives you is the number of bytes per second your system can read or write to a file โจ
HARDWARE REQUIRED
This program has been ported and tested on the following computer operating systems ๐
Vendor Operating System Notes on compiling IOzone
-----------------------------------------------------------------------
Apollo Domain/OS no cc switches -- BSD domain
AT&T UNIX System V R4
AT&T 6386WGS AT&T UNIX 5.3.2 define SYSTYPE_SYSV
Generic AT&T UNIX System V R3 may need cc -DSVR3
Convergent Unisys/AT&T SVR3 cc -DCONVERGENT -o iozone iozone.c
Digital Equipment ULTRIX V4.1
Digital Equipment VAX/VMS V5.4 see below **
Digital Equipment VAX/VMS (POSIX)
Hewlett-Packard HP-UX 7.05
IBM AIX Ver. 3 rel. 1
Interactive UNIX System V R3
Microsoft MS-DOS 3.3 tested Borland, Microsoft C
MIPS RISCos 4.52
NeXt NeXt OS 2.x
OSF OSF/1
Portable! POSIX 1003.1-1988 may need to define _POSIX_SOURCE
QNX QNX 4.0
SCO UNIX System V/386 3.2.2
SCO XENIX 2.3
SCO XENIX 3.2
Silicon Graphics UNIX cc -DSGI -o iozone iozone.c
Sony Microsystems UNIX same as MIPS
Sun Microsystems SUNOS 4.1.1
Tandem Computers GUARDIAN 90 1. call the source file IOZONEC
2. C/IN IOZONEC/IOZONE;RUNNABLE
3. RUN IOZONE
Tandem Computers Non-Stop UX
Lowkey the VMS folks have a special step ๐ For VMS, you define iozone as a foreign command with this DCL command ๐
$IOZONE :== $SYS$DISK:[]IOZONE.EXE
This lets you pass command line arguments to IOZONE ๐
SOFTWARE REQUIRED
OS as shown in the hardware listing above ๐ป
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
Author: Bill Norcott, 1060 Hyde Avenue, San Jose, CA 95129, norcott_bill@tandem.com ๐
Availability: This tool has been posted to comp.sources.misc ๐ฎ It's available from the usual archive sites, and you can find the program using ARCHIE or other servers ๐
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
This entry is maintained by the noctools editors ๐ซถ Send email to noctools-request@merit.edu ๐
Internet Tool Catalog ยท LADDIS ๐ฆ
NAME
LADDIS ๐ธ
KEYWORDS
benchmark, generator; NFS; spoof; unix; free. ๐
ABSTRACT
"LADDIS: A Multi-Vendor and Vendor-Neutral SPEC NFS Benchmark", Bruce Nelson, LADDIS Group & Auspex Systems. ๐
Over the past 24 months, engineers from Legato, Auspex, Data General, DEC, Interphase, and Sun (LADDIS) met regularly to create the LADDIS NFS benchmark ๐ค It's meant to be an unbiased, standard, vendor-independent, scalable NFS performance test ๐ฅ
The whole point of LADDIS is to give users a credible and undisputed test of NFS performance, and to give vendors a publishable standard performance measure that customers can use for load planning, system configuration, and equipment buying decisions ๐ To that end, LADDIS is being adopted by SPEC (the System Performance Evaluation Cooperative, creators of SPECmarks) as the first member of SPEC's System-level File Server (SFS) benchmark suite โจ
"In particular, we have had unexpected interest from some router vendors in using LADDIS to both rate and stress-test IP routers. This is because LADDIS can send back-to-back full-size packet trains, and because it can generate a 90%-Ethernet util on simulated "real" NFS workloads, just like routers encounter in the real world. But LADDIS is for local Ethernet or FDDI nets only, not WAN." ๐
MECHANISM
Generates NFS requests and measures responsiveness of the server ๐
CAVEATS
"LADDIS is not released yet by SPEC, although a free beta version, quite stable, is available now as PRE-LADDIS. So you might want to put PRE-LADDIS in your listing, noting that full LADDIS availability from SPEC is expected by the end of 1992." โณ
BUGS
The licensee is requested to direct beta test comments via electronic mail to: "spec-preladdis-comments@riscee.pko.dec.com" ๐
This alias will forward all comments to the SPECSFS mailing list (which includes the LADDIS Group) ๐ฌ
LIMITATIONS
LADDIS is for local Ethernet or FDDI nets only, not WAN ๐ โโ๏ธ
HARDWAE REQUIRED
A host with LAN connectivity. Presumably, a host with enough horsepower to generate an adequate work load ๐ช
SOFTWARE REQUIRED
LADDIS is a sophisticated Unix-based NFS traffic generator program ๐ง
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
Here's the email header, bestie ๐ง
Date: Mon, 10 Feb 92 13:12:20 PST
From: bnelson (Bruce Nelson)
Dear Person:
The SPEC PRE-LADDIS beta test process became operational on Monday, February 3, 1992 ๐ This email describes the process as announced during the LADDIS Group's presentation at UniForum '92 and also at Interop '91 ๐ค The content of the beta test license and the license request process are consistent with the proposals approved by the SPEC Steering Committee at the January 1992 meeting in Milpitas, California ๐
The SPEC PRE-LADDIS beta test will consist of one beta test version of PRE-LADDIS distributed ONLY by electronic mail ๐ The SPEC PRE-LADDIS Beta test software is licensed by SPEC, not by the LADDIS Group ๐ซถ
- Email your request to
spec-preladdis-beta-test@riscee.pko.dec.comwith the subject lineRequest SPEC PRE-LADDIS Beta Test License. ๐ - Print a hardcopy of the license and sign it. โ๏ธ
- Attach a cover letter on your company letterhead asking for the PRE-LADDIS Beta Test Kit. ๐
- Send the signed license and cover letter by U.S. Mail to:
SPEC PRE-LADDIS Beta Test
c/o NCGA, 2722 Merrilee Drive, Suite 200
Fairfax, VA 22031
Once you've done all four steps, the SPEC PRE-LADDIS beta test kit gets emailed to you from riscee.pko.dec.com. โจ Send your beta test comments to spec-preladdis-comments@riscee.pko.dec.com. That alias forwards everything to the SPECSFS mailing list, which includes the LADDIS Group. ๐ฆ
PRE-LADDIS is ONLY available through email, and ONLY through the process in steps 1-4 above. If you don't have internet email (which is unlikely if you're reading THIS email ๐ญ), you have to arrange delivery through some email-capable part of your organization, NOT through LADDIS members like Auspex, DEC, Sun, etc.
Contact Point for Changes to This Catalog Entry ๐ฎ
This entry is maintained by the NOCtools editors. Send E-mail to noctools-request@merit.edu. ๐
LAN_PATROL ๐
Internet Tool Catalog
NAME LAN Patrol
KEYWORDS security, traffic; ethernet, star; eavesdrop; DOS.
ABSTRACT LAN Patrol is a full-featured network analyzer that gives you the essential info for effective fault and performance management. ๐ Network managers can easily monitor user activity, find traffic overloads, plan for growth, test cable, uncover intruders, balance network services, and so on. It uses state of the art data collection techniques to monitor all activity on a network, so you get an accurate picture of how it's performing. ๐
LAN Patrol's reports can be saved as ASCII files to disk, and imported into spreadsheet or database programs for further analysis. ๐ธ
MECHANISM The LAN Patrol interface driver programs a standard interface card to capture all traffic on a network segment. The driver runs from the background of a standard PC, maintaining statistics for each station on the network. You can view the info on the PC's screen, or as a user-defined report output either to file or printer. ๐จ๏ธ
CAVEATS None. Normal operation is completely passive, which makes LAN Patrol transparent to the network. ๐ซถ
BUGS None known.
LIMITATIONS LAN Patrol can monitor up to 10,000 packets/sec on an AT class PC, and it's limited to monitoring a maximum of 1024 stations for intervals of up to 30 days. ๐
Because LAN Patrol operates at the physical level, it will only see traffic for the segment it's installed on. It cannot see traffic across bridges. ๐
HARDWARE REQUIRED
- Computer: IBM PC/XT/AT, PS/2 Model 30, or compatible. Requires 512K memory and a hard drive or double-sided disk drive.
- Display: Color or monochrome text. Color display allows color-coding of traffic information. ๐
- Ethernet, StarLAN, LattisNet, or StarLAN 10 network interface card.
SOFTWARE REQUIRED PC DOS, MS-DOS version 3.1 or greater. ๐ป
AVAILABILITY LAN Patrol can be purchased through network dealers, or directly from:
Legend Software, Inc.
Phone: (201) 227-8771
FAX: (201) 906-1151
LANVista ๐ฆ
Internet Tool Catalog
NAME LANVista
KEYWORDS analyzer, benchmark, debugger, generator, manager, traffic; DECnet, Ethernet, IP, OSI, Ring; Eavesdrop, Proprietary; DOS, Standalone.
ABSTRACT CXR/Digilog's LANVista family of protocol and statistical analyzers gives you the tools to troubleshoot an Ethernet and Token Ring 4/16Mbps network. ๐ง You can capture frames to RAM and or disk, generate traffic for stress testing, test your network cable for fault isolation, and decode all 7 layers of many popular protocol stacks. The 100 family offers exceptional price/performance and a wide range of options. Combined with an integrated upgrade path to the fully distributed LANVista 200 system, the 100 line is a reasonably priced entry into LAN management and protocol analysis. ๐
All LANVista models are fully operable under Microsoft Windows. Under Windows, LANVista can run in the background, gathering data and alarms while other tasks get done. Displayed data can be easily cut from LANVista and pasted into other Windows applications such as Excel, Lotus 1-2-3, Harvard Graphics, etc. ๐ช
The versatile LANVista family can also be remotely controlled through PC Anywhere, Commute, Carbon Copy, or other PC remote control packages. This enables "co-pilot" mode, which lets an operator at the central site guide and train a remote operator through network management or analysis tasks. ๐ง
All LANVista models provide features vital to effective network management and troubleshooting. Basic capabilities include:
- Network database
- Statistics based on the entire network and on a node basis
- Token Ring functional address statistics
- Bridged traffic statistics
- Protocol statistics
- Logging of statistics to a printer or file of user definable alarms
- Hardware Pre-Capture filtering
- Post capture filtering
- Playback of captured data
- Traffic simulation
- On-line context sensitive Help
Protocol Interpreters used for decoding network traffic supported by LANVista include: TCP/IP, DECnet, Banyan Vines, XNS/MS-Net, AppleTalk, IBM Token Ring, Novell, 3Com 3+ Open, SNMP and OSI. ๐
MECHANISM LANVista comes in three forms. There's a kit version, which is a plug-in PC card plus Master software. There's a self-contained unit that packages the kit version in a portable PC. And there's a Distributed system. The distributed system lets slave units placed anywhere in the world be controlled from a single central location, for centralized management of an enterprise network. ๐
LANVista's PC cards provide a physical interface to the LAN and frame preprocessing power. The Master software controls the PC card, and handles the display and processing of the information gathered from the network. โญ
CAVEATS Optimal performance of LANVista's master software is achieved with DOS 5.0 by utilizing RAMDRIVE.SYS, SMARTDRV.SYS and High memory. โ ๏ธ
BUGS None Known.
LIMITATIONS None Known.
HARDWARE REQUIRED IBM PC AT, 386, 486 or compatible. ๐
SOFTWARE REQUIRED DOS
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL LANVista is available worldwide. For info on a local sales representative, contact:
CXR/DIGILOG
900 Business Center Drive
Horsham, PA 19044
Phone 1-800-DIGILOG
FAX: 215-956-0108
GSA schedule pricing is honored. ๐ธ
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY CXR/DIGILOG Help Desk 1-800-DIGILOG. Send email to: lanvista@digilog.uucp ๐ง
LANPROBE ๐ฐ๏ธ
Internet Tool Catalog
NAME LanProbe -- the HP 4990S LanProbe Distributed Analysis System.
KEYWORDS alarm, manager, map, status, traffic; ethernet; eavesdrop, NMS; proprietary.
ABSTRACT The LanProbe distributed monitoring system does remote and local monitoring of ethernet LANs in a protocol and vendor independent manner. ๐
LanProbe discovers each active node on a segment and displays it on a map with its adapter card vendor name, ethernet address, and IP address. You can add extra info about the nodes, like equipment type and physical location, into the database yourself. ๐บ๏ธ
When the NodeLocator option is used, data on the actual location of nodes gets entered automatically, and the map becomes an accurate representation of the physical layout of the segment. ๐ซ After that, when a new node is installed and becomes active, or when a node is moved or becomes inactive, the change is detected and shown on the map in real time. โก The system also gives the network manager precise cable fault information, displayed on the map. ๐ฅ
Traffic statistics are gathered and displayed, and can be exported in (comma delimited) CSV format for further analysis. Alerts can be set on user defined thresholds. ๐
Trace provides a remote protocol analyzer capability with decodes for common protocols. ๐ต๏ธโโ๏ธ
Significant events (like power failure, cable breaks, new node on network, broadcast IP source address seen, etc.) are tracked in a log that is uploaded to ProbeView periodically. ๐
ProbeView generates reports that can be manipulated by MSDOS based word processors, spreadsheets, and DBMS. ๐
MECHANISM
okay so the setup is one or more LanProbe segment monitors plus ProbeView software, running under Microsoft Windows ๐ฅ๏ธ The LanProbe segment monitor plugs into the end of an ethernet segment and watches all the traffic. You can connect it directly to thin or thick coax, or go through an external transceiver for fiber optic or twisted pair cabling. Segment data gets sent to a workstation running ProbeView over RS-232, ethernet, or a modem connection.
ProbeView runs on a PC/AT class workstation and turns network info into graphical displays. Very pretty, very useful ๐โจ
The HP4992A NodeLocator option attaches to the opposite end of the cable from the HP4991A LanProbe segment monitor. It automatically finds where nodes sit on ethernet networks that use coaxial cabling schemes. locating nodes automatically is so iconic ๐ซถ
CAVEATS
None. ๐
BUGS
None known. ๐ธ
LIMITATIONS
None reported. โจ
HARDWARE REQUIRED
- HP 4991A LanProbe segment monitor
- HP 4992A NodeLocator (for optional capabilities)
- 80386 based PC capable of running MS-Windows
SOFTWARE REQUIRED
- HP 4990A ProbeView
- MSDOS 3.0 or higher and Microsoft Windows/286 2.1.
AVAILABILITY
It's a commercial product, available from:
Hewlett-Packard Company
P.O. Box 10301,
Palo Alto, CA 94303-0890
Internet Tool Catalog LANWATCH
NAME
LANWatch ๐ฆ
KEYWORDS
alarm, analyzer, traffic; CHAOS, DECnet, DNS, ethernet,
IP, OSI, ring, SMTP, star; eavesdrop; DOS; library,
sourcelib.
ABSTRACT
LANWatch 2.0 is an inexpensive, powerful and flexible network analyzer that runs under DOS on personal computers. It needs no hardware modifications to either the host or the network, which is so main character energy ๐ It's an invaluable tool for installing, troubleshooting, and monitoring local area networks, and for developing and debugging new protocols.
Network managers can inspect traffic patterns and packet errors to isolate performance problems and bottlenecks. Protocol developers can use it to inspect and verify proper protocol handling. Since LANWatch is software-only and installs easily on existing PCs, technicians and field service engineers can carry it in their briefcase for network analysis at remote sites. ๐ผ
LANWatch has two operating modes: Display and Examine. In Display Mode, it traces network traffic by showing captured packets in real time. Examine Mode lets you scroll back through stored packets and inspect them in detail. ๐
To pick a subset of packets for display, storage or retrieval, there's an extensive set of built-in filters. The filters collect only the packets you care about, so you don't have to sort through all the traffic to find specific ones. The built-in filters are alarm, trigger, capture, load, save and search. Each can be controlled separately to match on source or destination address, protocol, or packet contents at the hardware and transport layers. LANWatch also includes enough source code that you can modify the existing filters and parsers or add new ones. ๐ ๏ธ
The LANWatch distribution includes executables and source for several post-processors: a TCP protocol analyzer, a node-by-node traffic analyzer and a dump file listing tool. ๐
MECHANISM
It uses many common PC network interfaces by placing them in promiscuous mode and capturing traffic.
CAVEATS
Most PC network interfaces won't capture 100% of the traffic on a fully-loaded network. The ones that miss stuff mostly miss back-to-back packets. ๐
BUGS
None known. ๐
LIMITATIONS
LANWatch can't analyze what it doesn't see (see Caveats). Fair enough ๐
HARDWARE REQUIRED
LANWatch requires a PC or PS/2 with a supported network interface card.
SOFTWARE REQUIRED
LANWatch runs in DOS. Modifying the supplied source code, or creating additional filters and parsers, requires Microsoft C 5.1.
AVAILABILITY
LANWatch is commercially available from FTP Software, Incorporated, 26 Princess Street, Wakefield, MA, 01880 (617 246-0900). ๐ง
Internet Tool Catalog LLL_ENTM
NAME
ENTM -- Ethernet Traffic Monitor ๐
KEYWORDS
traffic; ethernet, IP; eavesdrop; VMS; free.
ABSTRACT
ENTM is a screen-oriented utility that runs under VAX/VMS. It monitors local ethernet traffic and displays either a real time or cumulative histogram. That histogram shows a percent breakdown of traffic by ethernet protocol type. You can report the info based on packet count or byte count. It also reports the percent of broadcast, multicast and approximate lost packets. The screen display updates every three seconds, and you can also view a real time, sliding history window showing ethernet traffic patterns for the last five minutes. โฑ๏ธ
ENTM can also report IP traffic statistics by packet count or byte count. The IP histograms reflect information collected at the TCP and UDP port level, including ICMP type/code combinations. You can sort both the ethernet and IP histograms by ASCII protocol/port name or by percent-value. Every screen display can be saved to a file for printing later. ๐จ๏ธ
MECHANISM
This utility simply places the ethernet controller in promiscuous mode and monitors the local area network traffic. It preallocates 10 receive buffers and tries to keep 22 reads pending on the ethernet device.
CAVEATS
Putting the ethernet controller in promiscuous mode may severely slow down a VAX system. Depending on how fast the VAX is and how much traffic is on the local ethernet, a large amount of CPU time may get spent on the Interrupt Stack. Running this code on any production system during operational hours is discouraged. โ ๏ธ
Please don't run this on production during operational hours. Seriously. ๐
BUGS
Due to a bug in the VAX/VMS ethernet/802 device driver, IEEE 802 format packets may not always be detected. A simple test is performed to "guess" which packets are in IEEE 802 format (DSAP equal to SSAP). So some DSAP/SSAP pairs may be reported as an ethernet type, while valid ethernet types may be reported as IEEE 802 packets. ๐คทโโ๏ธ
In some hardware configurations, placing an ethernet controller in promiscuous mode with automatic-restart enabled will hang the controller. The VAX 8650 hangs running this code, while the uVAX IIs and uVAX IIIs do not.
Please report any additional bugs to the author at:
Allen Sturtevant
National Magnetic Fusion Energy Computer Center
Lawrence Livermore National Laboratory
P.O. Box 808; L-561
Livermore, CA 94550
Phone : (415) 422-8266
E-Mail: sturtevant@ccc.nmfecc.gov
LIMITATIONS
The user is required to have PHY_IO, TMPMBX and NETMBX privileges. When activated, the program first checks that the user process has enough quotas remaining (BYTLM, BIOLM, ASTLM and PAGFLQUO) to run successfully without entering an involuntary wait state. Some quotas need a fairly generous setting. ๐ง
The contents of IEEE 802 packets are not examined. Only the presence of IEEE 802 packets on the wire is reported.
The count of lost packets is approximated. If, after each read completes on the ethernet device, the utility detects that it has no reads pending on that device, the lost packet counter goes up by one.
When the total number of bytes processed exceeds 7fffffff hex, all counters are automatically reset to zero.
HARDWARE REQUIRED
A DEC ethernet controller.
SOFTWARE REQUIRED
VAX/VMS version V5.1+.
AVAILABILITY
For executables only, FTP to the ANONYMOUS account (password GUEST) on CCC.NMFECC.GOV and GET the following files:
[ANONYMOUS.PROGRAMS.ENTM]ENTM.DOC (ASCII text)
[ANONYMOUS.PROGRAMS.ENTM]ENTM.EXE (binary)
[ANONYMOUS.PROGRAMS.ENTM]EN_TYPES.DAT (ASCII text)
[ANONYMOUS.PROGRAMS.ENTM]IP_TYPES.DAT (ASCII text)
Internet Tool Catalog Interactive Network Map
NAME
map -- Interactive Network Map ๐บ๏ธ
KEYWORDS
manager, map; CHAOS, ethernet, IP, ring, star; NMS,
ping, SNMP, X; UNIX; free, sourcelib.
ABSTRACT
Map draws a map of network connectivity and lets you interactively examine information about various components, including whether hosts can be reached over the network. ๐
The program comes with complete source and is written in a modular way, so adding different protocol stacks, displays, or hardcopy devices is relatively easy. That's one reason the initial version supports at least two of each. Contributions of additional drivers in any of these areas are very welcome, and so is porting to additional platforms. ๐ซถ
MECHANISM
Net components get pinged using ICMP echo and, optionally, CHAOS status requests and SNMP "gets." The program initializes itself from static data stored in the file system, so it doesn't need to access the network to get running (unless the static files are network mounted).
CAVEATS
As of publication, the tool is in beta release. ๐งช
Okay bestie, the MAP entry is wrapping up with bugs, hardware, and where to get it ๐บ๏ธโจ
BUGS ๐ Several minor nits are documented in the distribution files. If you find a bug, email it to Bug-Map@LCS.MIT.Edu, pls and ty ๐
LIMITATIONS โ ๏ธ Check the distribution file for an in-depth look at what the system can and can't do ๐
HARDWARE REQUIRED ๐ฅ๏ธ You need an X display to see the map interactively ๐ Non-graphical interaction still works in non-display mode ๐ซถ For hardcopy, you need a PostScript or Tektronix 4692 printer ๐จ๏ธ
SOFTWARE REQUIRED ๐ป You need BSD UNIX or a related OS ๐ง IP/ICMP is required, but CHAOS/STATUS and SNMP are optional ๐ฆ X-Windows is required for interactive display of the map ๐ช
AVAILABILITY ๐ The program is Copyright MIT, and it's free to use and distribute for non-commercial purposes under its license ๐ Grab it by anonymous FTP from host FTP.LCS.MIT.Edu, in the directory nets ๐ The full distribution is map.tar.Z, and some short docs are in there too, as well as in the distribution itself ๐ The ones you'll want most are ReadMe and Intro ๐
To join the email forum that talks about the software, or to ask other admin questions, send a request to MAP-Request@LCS.MIT.Edu ๐
๐ง Internet Tool Catalog: MCONNECT
NAME mconnect ๐
KEYWORDS status; SMTP; spoof; UNIX. ๐ท๏ธ
ABSTRACT Mconnect lets you have an interactive session with a remote mailer ๐ฌ When mail delivery is acting up, you can connect to the remote mailer and type SMTP commands straight at it ๐ต๏ธโโ๏ธ Super useful for debugging ๐ฅ
MECHANISM It opens a TCP connection to remote SMTP on port 25 ๐ช It also gives you local line buffering and editing, and that's the whole difference between mconnect and a TELNET to port 25 โจ
CAVEATS None. ๐ซง
BUGS None known. โ
LIMITATIONS Honestly, mconnect isn't a huge upgrade over using a TELNET connection to port 25 ๐
HARDWARE REQUIRED No restrictions ๐
SOFTWARE REQUIRED BSD UNIX or a related OS ๐ก
AVAILABILITY It's available with 4.xBSD UNIX and related operating systems ๐ธ
๐ง Internet Tool Catalog: MIB-BROWSER
NAME MIB Browser ๐
KEYWORDS manager; osi; cmis, x; unix; free, sourcelib. ๐ท๏ธ
ABSTRACT The MIB Browser is an X Windows HCI tool that lets you "browse" through the objects in a Management Information Base (MIB) ๐๏ธ It's generic, which is the iconic part: it can connect to a CMIS agent without knowing anything in advance about the MIB's structure in that agent ๐ง
MECHANISM CMIP is used to transfer the values of attributes between the managed system and the browser ๐
CAVEATS None. ๐ซถ
BUGS If the agent terminates unexpectedly, the browser can crash ๐ (ISODE bug!) ๐ญ
HARDWARE REQUIRED A Unix workstation, tested on SUN 3 and SUN 4 architectures ๐ฅ๏ธ
SOFTWARE REQUIRED The ISODE protocol suite, BSD UNIX, X Windows, GNU C++ (g++), and Interviews (2.6) ๐งฉ
AVAILABILITY The CMIP library and the related management tools built on it, known as OSIMIS (OSI Management Information Service), are publicly available from University College London, England ๐ฌ๐ง You can get them via FTP and FTAM ๐ก For info about getting a copy, email osimis-request@cs.ucl.ac.uk or call +44 71 380 7366 ๐
๐ง Internet Tool Catalog: MONET
NAME MONET is the Hughes LAN Systems SNMP Network Management Center (formerly the Hughes LAN Systems 9100) software product, and it runs on a Sun SPARCStation hardware platform ๐ง๐
KEYWORDS control, graphics, network topology,manager, routing, status, traffic; bridge, configuration, performance, alarm management, relational database, mib parser for RDBMS, intelligent hub management, DECnet, ethernet, IP; NMS, SNMP; UNIX. ๐ท๏ธ๐
ABSTRACT Monet lets you manage and control SNMP-based networking products from any vendor, including Hughes LAN Systems products ๐๏ธ
A comprehensive relational database manages the data and makes it easy to access and control resources across the whole network ๐๏ธ
Monet also offers multivendor management through its advanced Mib master MIB parser ๐งฉ It parses enterprise MIBs (ASN.1 format per RFC1212) directly into the RDBMS so Monet's apps can use them ๐ซถ
Major features include:
- Remote access with X: You get the X/Motif user interface, so you can reach all the applications remotely ๐ฑ๏ธ
- Database Management: It stores and retrieves the info you need to administer and configure the network ๐๏ธ You can use it to:
- Store and recall configuration data for all devices.
- Provide availability history for devices.
- Assign new internet addresses.
- Provide administrative information such as physical location of devices, responsible person, maintenance history, asset data, hardware/software versions, etc.
- Full-function SQL interface.
- User-customizable RDBMS report generation.
- Graphics and Network Mapping: The Graphics module shows the nodes in the network as "dynamic" icons on heirarchical maps ๐บ๏ธ The network is represented by these maps ๐ There's a library of device icons, cities, and geographical maps, and you also get a graphics editor to customize them or make new icons and maps ๐จ You can select a device's icon to:
- Register/deregister the device,
- Access the open alarms and acknowledge faults for the selected device,
- Ping the device to determine accessibility,
- Draw graphs of any of the device's numeric MIB objects, either the real-time values as retrieved or the history values previously stored in the RDBMS by the Performance Manager ๐,
- Telnet to the device,
- Customize the graphical dynamics (color, fill, rotation, etc.) of the device's icon by linking them to the values of the device's MIB objects ๐
- Configuration Management:
- Retrieves configuration information from SNMP devices.
- Stores device parameters in the RDBMS. Common sets of parameters used for multiple devices, or for multiple ports on a device, are stored only once ๐ง
- Configures devices from the parameters stored in the RDBMS, including those for TCP/IP, DECnet, and any other protocol or feature configurable via SNMP โ๏ธ
- Polls devices to compare their current parameter values with the database and produces reports of the discrepancies ๐
- Collects data about the state of the network.
- Learns the parameters of the devices in the network and populates the database.
- Performance Management:
- Displays local network traffic graphically, by packet size, protocol, network utilization, sources and destinations of packets, etc. ๐
- Schedules jobs to retrieve MIB values of a device and store them in the RDBMS for review or summary reporting later โฐ
- Lets you set high/low thresholds on retrieved values, with alarms generated when thresholds are exceeded ๐จ
- Fault Management:
- Provides availability monitoring and indicates potential problems.
- Creates alarms from received SNMP traps, and from other internally-generated conditions.
- Records alarms in the alarm log in the RDBMS.
- Lists alarms for a selected set of devices, according to various filter conditions.
- Lists possible causes and suggested actions for the alarms.
- New alarms show up as a flashing icon, with an optional audio alert ๐
- Visual indication of alarms bubbles up the network map hierarchy ๐ซง
- Cumulative reports can be produced ๐
- Utilities Function:
- View and/or terminate current NMC processes.
- Access database maintenance utilities ๐ ๏ธ
MECHANISM SNMP. ๐ก
CAVEATS None reported. โจ
BUGS None known. โ
LIMITATIONS The maximum number of nodes that can be monitored is 18,000 ๐คฏ That can include Hosts, Terminal Servers, PCs, Routers, and Bridges ๐ข
HARDWARE REQUIRED The host for the NMC software is a Sun 4 desktop workstation ๐ฅ๏ธ The recommended minimum is the Sun IPX Color workstation, with a 1/4" SCSI tape drive ๐ผ
SOFTWARE REQUIRED MONET V5.0, provided on 1/4" tape format, runs on the Sun 4.1.1 Operating System ๐
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL MONET is a commercial product of the following company ๐ผ
Hughes LAN Systems Inc.
1225 Charleston Road
Mountain View, CA 94043
Phone: (415) 966-7300
Fax: (415) 960-3738
RCA Telex: 276572
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY kishoret@msgate.hls.com ๐ง kzm@hls.com ๐ง
๐ง Internet Tool Catalog: NET_MONITOR
NAME net_monitor ๐ฆ
KEYWORDS: routing, status; DECnet, IP; curses, ping; UNIX, VMS; free, sourcelib. ๐
ABSTRACT ๐ฅ okay so net_monitor uses ICMP echo (and DECnet reachability info on VAX/VMS) to keep an eye on your network. The monitoring is super simplistic, but it has been genuinely useful, no cap. It periodically checks whether hosts are reachable and shows the results in a full-screen display. It groups hosts into common sets. If every host in a set goes unreachable, it makes a LOT of racket with bells ๐๐ญ, because it assumes some shared piece of hardware supporting that set has died. The test frequency, the hosts to test, and the groupings are all controlled by one single configuration file ๐.
The idea came from the PC/IP monitor facility, but net_monitor is an entirely different program with different functionality. Not a copy, bestie ๐ .
MECHANISM โจ Reachability is tested with ICMP echo for TCP/IP hosts, and with DECnet reachability info on VAX/VMS. A DECnet node counts as reachable if it shows up in the list of hosts from a show network command run on a routing node ๐ฆ.
CAVEATS ๐ธ This thing is most useful when it runs in a window on a workstation, not on a terminal hooked up to a host. It could be useful ported to a PC (looks easy using FTP Software's programming libraries), but nobody has done it yet. Curses is very slow and CPU hungry on VMS, but it has been run in a window on a VAXstation 2000 ๐ป. Just don't try running it on a terminal connected to an 11/750. Trust me ๐.
BUGS ๐ None known.
LIMITATIONS ๐ง This tool is not meant to replace a more comprehensive network management facility, like the one that comes with SNMP.
HARDWARE REQUIRED ๐ A host with a network connection.
SOFTWARE REQUIRED ๐ Curses, the 4.xBSD UNIX socket programming libraries (a limited set), and some flavor of TCP/IP that supports the ICMP echo request (ping). It has run on VAX/VMS with WIN/TCP and on several flavors of 4BSD UNIX, including SunOS 3.2, 4.0, and 4.3BSD. It could be ported to any platform with a BSD-style programming library that has an ICMP echo request facility and curses.
AVAILABILITY ๐ฌ Send your requests to the author:
Dale Smith
Asst Dir of Network Services
University of Oregon
Computing Center
Eugene, OR 97403-1211
Internet: dsmith@oregon.uoregon.edu.
BITNET: dsmith@oregon.bitnet
UUCP: ...hp-pcd!uoregon!dsmith
Voice: (503)686-4394
With the source code, you get a makefile for pretty much any UNIX box, plus a VMS makefile that works with the make distributed with PMDF. There's also a VMS DCL command file for VMS sites that don't have "make." ๐ ๏ธ
The author will try to fix bugs, but no support is promised. The tool is copyrighted, but free (for now) ๐.
Netlabs CMOT Agent (NETLABS_CMOT_AGENT) ๐ฆ
NAME โจ Netlabs CMOT Agent
KEYWORDS manager, status; IP, OSI; NMS.
ABSTRACT ๐ Netlabs' CMOT code debuted at Interop 89. It comes with an Extensible MIB, so users can add new MIB variables. It currently supports all the MIB variables in RFC 1095 through the data types in RFC 1065, plus the emerging MIB-II, which is still in the experimental stage. Benchmarked at 100 Management Operations per Second (MOPS) on a 1-MIPS machine. Iconic performance, honestly ๐ฅ.
MECHANISM ๐ The Netlabs CMOT agent controls and monitors network resources using CMOT message exchanges.
CAVEATS ๐ธ None.
BUGS ๐ None known.
LIMITATIONS ๐ซถ None reported.
HARDWARE REQUIRED ๐ Portable to most hardware.
SOFTWARE REQUIRED ๐ Portable to most operating systems.
AVAILABILITY ๐ฌ Commercially available from:
Netlabs Inc
11693 Chenault Street Ste 348
Los Angeles CA 90049
(213) 476-4070
lam@netlabs.com (Anne Lam)
Dual Manager (NETLABS_DUAL_MANAGER) ๐
NAME โจ Dual Manager
KEYWORDS alarm, control, manager, map, security, status; IP, OSI; NMS, SNMP, X; UNIX; library.
ABSTRACT ๐ Netlabs' Dual Manager manages TCP/IP networks using both SNMP and CMOT protocols. You can start that management either through the X-Windows user interface (both Motif and Openlook) or through OSI Network Management (CMIP) commands. It covers configuration, fault, security, and performance management. The map management features are extensive, including scanned maps in the background ๐บ๏ธ. It has simple mechanisms for extending the MIB and assigning specific lists of objects to specific network elements, so you can manage every vendor's MIB extensions ๐ง. It also has an optional relational DBMS for storing and retrieving MIB and alarm information. And finally, the Dual Manager is an open platform, with several Application Programming Interfaces (APIs) so users can extend its functionality. Very main character energy โจ.
The Dual Manager is expected to work as a TCP/IP "branch manager" under DEC's EMA, AT&T's UNMA, and other OSI-conformant enterprise management architectures ๐.
MECHANISM ๐ฆ The Netlabs Dual Manager controls and monitors network resources using both CMOT and SNMP message exchanges.
CAVEATS ๐ธ None.
BUGS ๐ None known.
LIMITATIONS ๐ซถ None reported.
HARDWARE REQUIRED ๐ป Runs on Sun/3 and Sun/4s.
SOFTWARE REQUIRED ๐ฅ Available on System V or SCO Open Desktop environments. Uses X-Windows for the user interface.
AVAILABILITY ๐ฌ Commercially available from:
Netlabs Inc
11693 Chenault Street Ste 348
Los Angeles CA 90049
(213) 476-4070
lam@netlabs.com (Anne Lam)
Netlabs SNMP Agent (NETLABS_SNMP_AGENT) ๐
NAME โจ Netlabs SNMP Agent.
KEYWORDS manager, status; IP; NMS, SNMP.
ABSTRACT ๐ท Netlabs' SNMP code debuted at Interop 89, where it showed interoperation with several implementations on the show floor ๐ค. It comes with an Extensible MIB, so users can add new MIB variables. It currently supports all the MIB variables in RFC 1066 through the data types in RFC 1065, plus the emerging MIB-II, which is still experimental. Benchmarked at 200 Management Operations per Second (MOPS) on a 1-MIPS machine. Absolutely unhinged speed, in a good way ๐.
MECHANISM ๐ The Netlabs SNMP agent controls and monitors network resources using SNMP message exchanges.
CAVEATS ๐ธ None.
BUGS ๐ None known.
LIMITATIONS ๐ซถ None reported.
HARDWARE REQUIRED ๐ Portable to most hardware.
SOFTWARE REQUIRED ๐ Portable to most operating systems.
AVAILABILITY ๐ฌ Commercially available from:
Netlabs Inc
11693 Chenault Street Ste 348
Los Angeles CA 90049
(213) 476-4070
lam@netlabs.com (Anne Lam)
NetMetrix Load Monitor (NetMetrix-Load-Monitor) ๐ง
NAME โจ NetMetrix Load Monitor
KEYWORDS alarm,traffic; Ethernet, FDDI, IP, Ring; Eavesdrop, SNMP, X; UNIX;
ABSTRACT ๐ฆ The NetMetrix Load Monitor is a distributed client-server monitoring tool for ethernet, token ring, and FDDI networks. It has a unique "dual" architecture that is compatible with both RMON and X windows ๐ช. RMON gives you interoperability and an enterprise-wide view, while X windows enables much more powerful, intelligent applications at remote segments and saves network bandwidth ๐ .
The Load Monitor gives you extensive traffic statistics. It looks at load by time interval, source node, destination node, application, protocol, or packet size. The powerful ZOOM feature allows extensive correlational analysis, shown in a wide variety of graphs and tables ๐.
You can answer questions like: Which sources generate most of the load when the network is most heavily loaded, and where is that load going? Which source/destination pairs generate the most traffic over the day? Where should bridges and routers go to optimally partition the network? How much load do applications like the X Windows protocol put on the network, and who generates that load when it peaks? ๐ค
A floating license lets you access the software tool anywhere you need it ๐.
MECHANISM ๐ฅ NetMetrix puts the network interface into promiscuous mode to capture packets ๐.
CAVEATS ๐ธ none.
BUGS ๐ none known.
LIMITATIONS ๐ซถ none.
HARDWARE REQUIRED ๐ป SPARC system
SOFTWARE REQUIRED ๐ SunOS 4.0 or higher
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐ฌ NetMetrix is available from:
Sales Department
Metrix Network Systems, Inc.
One Tara Boulevard
Nashua, New Hampshire 03062
telephone: 603-888-7000
fax: 603-891-2796
email: info@metrix.com
Government agencies, please note that NetMetrix is on the GSA schedule ๐๏ธโจ.
Contact Point for Changes to This Catalog Entry ๐
Norma Shepperd
Marketing Administrator
603-888-7000
norma@metrix.com
Internet Tool Catalog ๐ฆ NetMetrix-NFS-Monitor
NAME โจ
NetMetrix NFS Monitor
KEYWORDS ๐
traffic; Ethernet, FDDI, NFS, Ring; Eavesdrop, SNMP, X; UNIX
ABSTRACT ๐ธ
okay so the NetMetrix NFS Monitor is a distributed network monitoring tool that tracks and graphs NFS load, response time, retransmits, rejects, and errors. you can slice that data by server, client, NFS procedure, or time interval. it also breaks down server activity by file system and client activity by user, which is so organized ๐ญ
the ZOOM feature is literally iconic ๐ it lets you correlate monitoring variables, so you can see client/server relationships, compare server performance, and evaluate NFS performance enhancement strategies.
a floating license plus the X Window protocol lets you monitor remote ethernet, token ring, and FDDI segments from one central enterprise-wide display. main character energy ๐
MECHANISM ๐ง
NetMetrix flips the network interface into promiscuous mode so it can capture packets.
CAVEATS ๐
none.
BUGS ๐
none known.
LIMITATIONS ๐
none.
HARDWARE REQUIRED ๐
SPARC system
SOFTWARE REQUIRED ๐
SunOS 4.0 or higher
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐ฎ
NetMetrix is available from:
Sales Department
Metrix Network Systems, Inc.
One Tara Boulevard
Nashua, New Hampshire 03062
telephone: 603-888-7000
fax: 603-891-2796
email: info@metrix.com
Government agencies, pay attention: NetMetrix is on the GSA schedule ๐ซถ
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐
Norma Shepperd
Marketing Administrator
603-888-7000
norma@metrix.com
Internet Tool Catalog ๐ฆ NetMetrix-Protocol-Analyzer
NAME โจ
NetMetrix Protocol Analyzer
KEYWORDS ๐
alarm, analyzer, traffic; DECnet, DNS, Ethernet, FDDI, IP, OSI, NFS, Ring, SMTP; Eavesdrop, SNMP, X; UNIX; Library
ABSTRACT ๐ธ
the NetMetrix Protocol Analyzer is a distributed client-server monitoring tool for ethernet, token ring, and FDDI networks. its unique "dual" architecture is compatible with both RMON and X windows, and that's the whole vibe ๐ฅ RMON gives you interoperability, while X windows enables way more powerful, intelligent applications at remote segments and saves network bandwidth.
you can decode and display packets while they're being captured ๐ there are extensive filters to sift through packets before or after trace capture. the capture filter can be set by source, destination between hosts, protocol, packet size, pattern match, or a complete expression using an extensive filter expression language. so many options, I'm obsessed ๐ญ
full 7-layer packet decodes are available for all major protocols, including DECnet, Appletalk, Novell, XNS, SNA, BANYAN, OSI, and TCP/IP. the decodes for the TCP/IP stack cover all the major protocols, including NFS, YP, DNS, SNMP, OSPF, etc. literally ate ๐ฐ
request and reply packets get matched ๐ฆ packets can be displayed in summary, detail, or hex, with multiple views so you can see packet dialogues side by side.
there's a complete developers' kit for custom decodes, which is giving "build your own era" ๐ง
a floating license gives you easy access to the software tool anywhere you need it ๐
MECHANISM ๐ง
NetMetrix flips the network interface into promiscuous mode so it can capture packets.
CAVEATS ๐
none.
BUGS ๐
none known.
LIMITATIONS ๐
none.
HARDWARE REQUIRED ๐
SPARC system
SOFTWARE REQUIRED ๐
SunOS 4.0 or higher
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐ฎ
NetMetrix is available from:
Sales Department
Metrix Network Systems, Inc.
One Tara Boulevard
Nashua, New Hampshire 03062
telephone: 603-888-7000
fax: 603-891-2796
email: info@metrix.com
Government agencies, pay attention: NetMetrix is on the GSA schedule ๐ซถ
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐
Norma Shepperd
Marketing Administrator
603-888-7000
norma@metrix.com
Internet Tool Catalog ๐ฆ NetMetrix-Traffic-Generator
NAME โจ
NetMetrix Traffic Generator
KEYWORDS ๐
Debugger, Generator, Traffic; Ethernet, FDDI, IP, Ring; Eavesdrop, SNMP, X; UNIX; Library
ABSTRACT ๐ธ
the NetMetrix Traffic Generator is a distributed software tool that lets you simulate network load or test packet dialogues between nodes on your ethernet, token ring, or FDDI segments. it can also test and validate management station alarms, routers, bridges, hubs, etc. so it's basically a stress-test queen ๐
there's an easy-to-use programming interface that gives you complete flexibility over variables like bandwidth, packet sequence, and conditional responses. ngl that's so satisfying ๐ง
a floating license and the X Window System protocol let you test remote ethernet, token ring, and FDDI segments from one central console ๐ซถ
MECHANISM ๐ง
NetMetrix flips the network interface into promiscuous mode so it can capture packets.
CAVEATS ๐
None.
BUGS ๐
none known.
LIMITATIONS ๐
none.
HARDWARE REQUIRED ๐
SPARC system
SOFTWARE REQUIRED ๐
SunOS 4.0 or higher
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐ฎ
NetMetrix is available from:
Sales Department
Metrix Network Systems, Inc.
One Tara Boulevard
Nashua, New Hampshire 03062
telephone: 603-888-7000
fax: 603-891-2796
email: info@metrix.com
Government agencies, pay attention: NetMetrix is on the GSA schedule ๐ซถ
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐
Norma Shepperd
Marketing Administrator
603-888-7000
norma@metrix.com
Internet Tool Catalog ๐ฆ NETMON_MITRE
NAME โจ
NETMON and iptrace
KEYWORDS ๐
traffic; IP; eavesdrop; UNIX; free.
ABSTRACT ๐ธ
NETMON is a facility that sends networking events from the BSD UNIX operating system to a user-level network monitoring or management program. iptrace is a program that plugs into NETMON and logs TCP-IP traffic for performance measurement and gateway monitoring. it's easy to build other NETMON-based tools using iptrace as a model, so you can literally copy the homework ๐
NETMON lives in the 4.3BSD UNIX kernel. it's independent of hardware-specific code in UNIX, and it's transparent to protocol and network type, with no internal assumptions about the network protocols being recorded. it gets installed in BSD-like kernels by adding a standard function call (probe) to a few points in the input and output routines of the protocols you want to log. ๐ง
NETMON is analogous to Sun Microsystems' NIT, but its interface tap function is extended by recording more context information. apart from the timestamp, the installer of the probes chooses what gets recorded. the NETMON probes added to the BSD IP code in the distribution include, as context: input and output queue lengths, identification of the network interface, and event codes labeling packet discards. (the NETMON distribution is geared toward measuring the performance of BSD networking protocols in an IP gateway ๐ )
NETMON is designed to sit inside the monitored system with minimal interference to network processing. the estimated and measured overhead is around five percent of packet processing, which is honestly low-key impressive ๐ฅ
the user-level tool "iptrace" comes with NETMON. this program logs IP traffic, either at the IP level only, or as it passes through the network interface drivers as well. as a separate function, iptrace produces a host traffic matrix output. its third type of output is abbreviated sampling, where only a preset number of packets from each new host pair is logged. all three output types can be configured dynamically, in any combination ๐ฆ
OSITRACE, another logging tool with a NETMON interface, is available separately, and it's documented in its own entry in this catalog.
MECHANISM ๐ง
access to the information NETMON logs goes through a UNIX special file, /dev/netmon. user reads are blocked until the buffer reaches a configurable level of fullness.
several other NETMON parameters can be tuned at compile time. a diagnostic program, netmonstat, is included in the distribution.
CAVEATS ๐
None.
BUGS ๐
Bug reports and questions should be addressed to:
ie-tools@gateway.mitre.org
Requests to join this mailing list:
ie-tools-request@gateway.mitre.org
Questions and suggestions can also be directed to:
Allison Mankin (703)883-7907
mankin@gateway.mitre.org
LIMITATIONS ๐
A NETMON interface for tcpdump and other UNIX protocol analyzers is not included, but it is simple to write. NETMON probes for a promiscuous ethernet interface are similarly not included.
HARDWARE REQUIRED ๐
No restrictions.
SOFTWARE REQUIRED ๐
BSD UNIX-like network protocols, or the ability to install the BSD publicly available network protocols in the system to be monitored.
AVAILABILITY ๐ฆ
Okay bestie, you can snag the NETMON distribution through anonymous FTP from aelred-3.ie.org, in either pub/netmon.tar or pub/netmon.tar.Z ๐. There's also a short user's and installation guide called NETMON.doc in the same spot ๐. It's provided "as is" ๐คทโโ๏ธ and requires retention of a copyright text in code derived from it. It's copyrighted by the MITRE-Washington Networking Center ๐.
Internet Tool Catalog โจ NETMON_WINDOWS_SNMP_RESEARCH
NAME ๐
NETMON for Windows -- an SNMP-based network management tool that runs under Microsoft Windows 3.0 from SNMP Research.
KEYWORDS ๐ท๏ธ
alarm, control, manager, map, routing;
DECnet, Ethernet, IP, OSI, ring, star;
NMS, SNMP;
DOS;
sourcelib.
ABSTRACT ๐
The NETMON application is a powerful network management station that runs on a low-cost DOS platform ๐ . Its network management tools for configuration, performance, security, and fault management have been used successfully with a wide assortment of wide- and local-area-network topologies and medias ๐. Multiprotocol devices are supported, including those using TCP/IP, DECnet, and OSI protocols ๐ฆ.
Some features of NETMON's network management tools include: โจ
- Fault management tool displays a map of the network configuration with node and link state indicated in one of several colors to indicate current status ๐ธ;
- Configuration management tool may be used to edit the network management information base stored in the NMS to reflect changes occurring in the network ๐ง;
- Graphs and tabular tools for use in fault and performance management ๐;
- Mechanisms by which additional variables, such as vendor-specific variables, may be added ๐ง;
- Alarms may be enabled to alert the operator of events occurring in the network ๐จ;
- Events are logged to disk ๐พ;
- Output data may be transferred via flat files for additional report generation by a variety of statistical packages ๐.
The NETMON application comes complete with source code, including a powerful set of portable libraries for generating and parsing SNMP messages. It's giving full toolkit energy ๐งฐ๐.
MECHANISM โ๏ธ
The NETMON for Windows application is based on the Simple Network Management Protocol (SNMP). Polling is performed via the powerful SNMP get-next operator and the SNMP get operator ๐. Trap-directed polling is used to regulate the focus and intensity of the polling ๐ฏ.
CAVEATS ๐
None.
BUGS ๐
None known.
LIMITATIONS ๐ซถ
None reported.
HARDWARE REQUIRED ๐ป
The minimum system is a IBM 386 computer, or compatible, with hard disk drive.
SOFTWARE REQUIRED ๐
DOS 5.0 or later, Windows 3.0 in 386 mode, and TCP/IP kernel software from FTP Software.
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐
This is a commercial product, available under license from:
SNMP Research
3001 Kimberlin Heights Road
Knoxville, TN 37920-9716
Attn: John Southwood, Sales and Marketing
(615) 573-1434 (Voice) (615) 573-9197 (FAX)
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐ฌ
users@seymour1.cs.utk.edu
Internet Tool Catalog โจ NETscout
NAME ๐ฆ
NETscout(tm)
KEYWORDS ๐ท๏ธ
Alarm, Analyzer, Manager, Status, Traffic;
DECnet, Ethernet, IP, OSI, NFS, Ring, Star, Eavesdrop;
NMS, SNMP;
UNIX;
ABSTRACT ๐
The NETscout family of distributed LAN Analyzer devices is intended to give network users a comprehensive capability to identify and isolate fault conditions in data communications networks ๐. NETscout can collect wide-ranging statistical data, display selectively captured and fully decoded network traffic, set user-defined alarm conditions, and get real-time updates from all segments of a widely dispersed internetwork from a centralized SNMP-compatible network management console ๐ .
The NETscout family is based on standards, so operation may be realized in heterogeneous networks, which constitute a multi-protocol, multi-topology, multi-vendor environment ๐. The fundamental standards it's built on are the Simple Network Management Protocol (SNMP), which defines the protocol for all inter-communications between NETscout devices, and the Remote Monitoring Management Information Base (RMON-MIB), which defines the type of information that is gathered and made available to the user for each network segment ๐.
NETscout clients provide a full array of monitoring and analysis features, including intelligent seven level decoding of all major protocol stacks ๐ง :
DOD including TCP/IP XNS Novell
DECNET including LAT ISO APPLETALK
IBM Token Ring Vines NETBIOS/SMB
SNMP including RMON-MIB SUN-NFS SMT
NETscout agents support all nine groups of the RMON-MIB standard ๐. They can work with any SNMP-based network management system and currently support Ethernet and Token Ring ๐ซถ.
MECHANISM โ๏ธ
NETscout is split into two distinct subcategories. The first is the "Client," which is the user console where operational commands are issued and where all results and diagnostic information are displayed ๐ฅ๏ธ. In a NETscout topology, it's feasible to have multiple clients active at the same time within a single network ๐ฏโโ๏ธ. The second category is the "Agent," a hardware/software device attached to a specific network segment. It gathers statistical information for that segment and provides a window into that segment, where network traffic may be observed and gathered for more detailed user analysis ๐ญ. A typical network will have multiple segments and multiple agents, up to the point of having one agent for each logical network segment ๐ง.
NETscout Model 9210 is a software package which, when combined in a Sun SPARCstation with SunNet Manager running under Open Windows, implements the NETscout client function โ. SunNet Manager provides the background operational tools for client operation, while the NETscout software provides application-specific functions related to RMON-MIB support, as well as all software necessary to perform the protocol decode function. SunNet Manager also implements a network map file, which includes a topographical display of the entire network and is the mechanism for selecting network elements to perform operations ๐บ๏ธ.
NETscout Model 9215 is a software package that operates in conjunction with SunNet Manager and implements the statistics monitoring function only ๐. That is, it does not include the protocol decode function or the mechanism to retrieve actual data from a remote agent. It does, however, include complete statistics gathering and event and alarm generation ๐ฆ.
Frontier NETscout Models 9510 and 9515, and Model 9610 and 9615, are agent software packages that implement selected network diagnostic functions when loaded into a Sun SPARCstation (9510, 9515) or a SynOptics LattisNet Hub (9610, 9615), respectively, which is connected to an Ethernet network segment using conventional network interface hardware ๐. Models 9510 and 9610 support all nine RMON-MIB groups, including "filters" and "packet capture," and thus provide for complete protocol monitoring and decode when used with a client equipped with protocol decode software ๐. Models 9515 and 9615 include support for seven RMON-MIB groups, which excludes "filters" and "data capture," and therefore perform network monitoring only through collection and presentation of network statistics, events, and alarms ๐ก. All models also support the MIB2 system and interface groups ๐ธ.
Frontier NETscout Models 9520 and 9525, and Model 9620 and 9625, are agent software packages that are identical in function to their respective models described above, except that they are for use on Token Ring segments ๐.
CAVEATS โ ๏ธ
The RMON-MIB standard for Token Ring applications has not yet been formally released and is not approved. NETscout products correspond to the latest draft for Token Ring functions and will be updated as required to conform to the standard as it is approved.
BUGS ๐
None known.
LIMITATIONS ๐ซถ
None reported.
HARDWARE REQUIRED ๐ป
Sun SPARCstation or LattisNet Hub, depending upon Model number.
SOFTWARE REQUIRED ๐
Sun OS 4.1.1 for client and agent, SunNet Manager for client.
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐
NETscout products are available commercially. For information regarding your local representative, contact:
Frontier Software Development, Inc.
1501 Main Street
Tewksbury, MA 01876
Phone: 508-851-8872
Fax: 508-851-6956
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐ฌ
Marketing
Frontier Software
Internet Tool Catalog โจ NETSTAT
NAME ๐ง
netstat
KEYWORDS ๐ท๏ธ
routing; IP; UNIX, VMS; free.
Okay bestie, so we're picking up with Netstat ๐ and then we're going full tour of the Internet Tool Catalog ๐ฆ
ABSTRACT
Netstat is a program that digs into the network data structures living inside the kernel, then shows you the results as plain ASCII text in your terminal ๐ปโจ It can give you reports on the routing table, TCP connections, TCP and UDP "listens", and protocol memory management. So many receipts ๐งพ๐ธ
MECHANISM
Netstat reads operating system memory to pull out the kernel routing tables. Lowkey the whole trick ๐ง
CAVEATS
Kernel data structures can change while netstat is running, so the snapshot you see might shift on you mid-read ๐
BUGS
None known. Iconic โจ
LIMITATIONS
None reported. ๐
HARDWARE REQUIRED
No restrictions. Literally runs on whatever ๐ซถ
SOFTWARE REQUIRED
BSD UNIX or a related OS, or VMS ๐ฆ
AVAILABILITY
You can grab it by anonymous FTP from uunet.uu.net, in the directory bsd-sources/src/ucb. It's available with 4.xBSD UNIX and related operating systems. For VMS, it comes as part of the TGV MultiNet IP software package, and also in Wollongong's WIN/TCP ๐
Network Integrator I ๐ง
KEYWORDS
map, traffic; ethernet; UNIX.
ABSTRACT
This tool monitors traffic on network segments ๐ฅ Everything gets dumped either into a log file or, if you want to watch live, into a command tool window. Every bit of data is time-stamped by date and time, and logging can keep going for up to 24 hours. Main character energy for real ๐
The tool is super flexible about how it collects and presents data. You can specify traffic filters by header values of numerous protocols, including the ones used by Apple, DEC, Sun, HP, and Apollo. It can monitor bandwidth utilization, plus actual load and peak throughput. It can also analyze a network's topology and record where all the operational nodes on a network are located ๐บ๏ธ๐
Data can be displayed in six separate formats of bar graphs ๐ There are also several routines for making statistical summaries of the data it collected.
MECHANISM
The tools work through RPC and XDR calls ๐
CAVEATS
Although the tool adds only a little traffic to a network, generating statistics from captured files takes a significant portion of a workstation's CPU. Heads up, bestie ๐
BUGS
None known. โจ
LIMITATIONS
You must be root to run the monitor ๐ There doesn't seem to be a limit to the number of nodes, since it monitors by segments. The only major limitation is how much disk space a user can commit to the log files. You can control the size of the log files through the tool's parameters, which is so helpful ๐ซถ
HARDWARE REQUIRED
Sun3 or Sun4 โ๏ธ
SOFTWARE REQUIRED
4.0BSD UNIX or greater, or a related OS ๐ธ
AVAILABILITY
It's copyrighted and commercially available from Network Integrators, (408) 927-0412 ๐
NFSwatch ๐ฆ
NAME
nfswatch
KEYWORDS
Traffic; Ethernet, IP, NFS; Curses, Eavesdrop; UNIX; Free
ABSTRACT
Nfswatch monitors all incoming ethernet traffic to an NFS file server and sorts it into several categories ๐ The number and percentage of packets received in each category shows up on screen in a continuously updated display. So satisfying to watch ๐
By default, nfswatch monitors all packets destined for the local host over a single network interface. You can pick a specific interface to monitor, or all interfaces at once. NFS traffic to the local host, to a remote host, from a specific host, between two hosts, or all NFS traffic on the network can be monitored. Choices, choices ๐
Categories of packets monitored and counted include:
ND Read,ND Write,NFS Read,NFS Write,NFS MountYellow Pages (NIS),RPC Authorization,Other RPCTCP,UDP,ICMP,RIP,ARP,RARPEthernet Broadcast, andOther
Packets are also tallied by file system or by file (specific files can be watched as an option), by NFS procedure name (RPC call), or by NFS client hostname ๐ง
There are facilities for taking "snapshots" of the screen, and for saving data to a log file for later analysis. The analysis tool is included too ๐ธ
MECHANISM
Nfswatch uses the Network Interface Tap, nit(4) under SunOS 4.x, and the Packet Filter, packetfilter(4), under Ultrix 4.x, to put the ethernet interface into promiscuous mode. It filters out NFS packets and decodes the file handles to work out how to count each packet. Big brain moves ๐ง โจ
CAVEATS
The NFS file handle is a non-standard (server private) piece of data, so nfswatch must be modified to understand the file handles used by various implementations. Right now it knows about the SunOS 4.x and Ultrix file handle formats ๐
BUGS
It does not monitor FDDI interfaces. (It should be a simple change, but neither author has access to a system with FDDI interfaces for testing ๐ญ)
LIMITATIONS
Up to 256 exported file systems and 256 individual files can be monitored at any time ๐
Only NFS requests are counted. The NFS traffic that a server generates in response to those packets is not counted ๐
HARDWARE REQUIRED
Any Ultrix system (VAX or DEC RISC hardware) ๐ฅ๏ธ
SOFTWARE REQUIRED
Ultrix release 4.0 or later. For Ultrix 4.1, it may require the patched if_ln.o kernel module, which you can get from Digital's Customer Support Center ๐
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
It's copyrighted, but freely distributable. You can get it by anonymous FTP from harbor.ecn.purdue.edu, ftp.erg.sri.com, and gatekeeper.dec.com, plus numerous other sites around the Internet. The current version is Version 3.0 from January 1991 ๐ฆ
Contact points:
Dave Curry Jeff Mogul
Purdue University Digital Equipment Corp.
Engineering Computer Network Western Research Laboratory
1285 Electrical Engineering Bldg. 100 Hamilton Avenue
West Lafayette, IN 47907-1285 Palo Alto, CA 94301
davy@ecn.purdue.edu mogul@decwrl.dec.com
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
Dave Curry (see address above) ๐
NHFSSTONE ๐
NAME
nhfsstone
KEYWORDS
benchmark, generator; NFS; spoof; UNIX; free.
ABSTRACT
Nhfsstone (pronounced n-f-s-stone, the "h" is silent ๐คซ) is an NFS benchmarking program. It's used on an NFS client to generate an artificial load with a particular mix of NFS operations. It reports the server's average response time in milliseconds per call, and the load in calls per second. The nhfsstone distribution also includes a script, "nhfsnums", that converts test results into plot(5) format so they can be graphed using graph(1) and other tools ๐
MECHANISM
Nhfsstone is an NFS traffic generator. It adjusts its calling patterns based on the client's kernel NFS statistics and the elapsed time. Load can be generated over a given time or over a given number of NFS calls ๐ง
CAVEATS
Nhfsstone will compete for system resources with other applications ๐
BUGS
None known. โจ
LIMITATIONS
None reported. ๐
HARDWARE REQUIRED
No restrictions. ๐ซถ
SOFTWARE REQUIRED
4.xBSD-based UNIX ๐ฆ
AVAILABILITY
It's available by anonymous FTP from bugs.cs.wisc.edu. Alternatively, Legato Systems will provide the program free of charge, if certain conditions are met. To request it, send your name and both your email and U.S. mail addresses to:
Legato Systems, Inc.
Nhfsstone
260 Sheridan Avenue
Palo Alto, California 94306
There's a mailing list for regular information and bug fixes: nhfsstone@legato.com or uunet!legato.com!nhfsstone. To join the list, use nhfsstone-request@legato.com or uunet!legato.com!nhfsstone-request ๐
NNStat ๐
NAME
NNStat
KEYWORDS
manager, status, traffic; ethernet, IP; eavesdrop, NMS; UNIX; free.
ABSTRACT
NNStat is a collection of programs that gives you internet statistic collecting capability ๐ Its strategy is to collect traffic statistics via a promiscuous ethernet tap on the local networks, rather than instrumenting the gateways. If all traffic entering or leaving a network (or a set of networks) goes across a local ethernet, then stationing a statistic gathering agent on each local network lets you build a profile of network traffic. A global manager retrieves the statistical data from the local agents ๐
A program called "statspy" does the data gathering. Basically, statspy reads all packets on an ethernet interface and records all the information of interest. It works out what's of interest by examining each packet and checking whether the source or destination IP address is one being monitored (typically a gateway address). If it is, the contents of the packet are examined to see if they match further criteria ๐
A program called "collect" does the global data collection. It periodically polls the various statspy processes in the domain of interest to retrieve locally logged statistical data ๐ง
The NNSTAT distribution comes with several sample awk programs that process the logged output of the collect program ๐
MECHANISM ๐ฆ
Okay so the local agents (statspy processes) quietly collect raw traffic data through a promiscuous ethernet tap ๐. Then a global manager (the "collect" process) swoops in and grabs the statistical, filtered, or otherwise reduced data from those local agents ๐
.
CAVEATS โจ
None. ๐ซถ
BUGS ๐
Bug fixes, extensions, and other pointers get discussed in the electronic mail forum called bytecounters ๐ฌ. To join, send a request to bytecounters-request@venera.isi.edu. Forum exchanges are archived in the file bytecounters/bytecounters.mail, which you can grab through anonymous FTP from venera.isi.edu ๐ธ.
LIMITATIONS ๐ง
NNStat presumes a topology of one or more long haul networks gatewayed to local ethernets ๐.
A kernel mod is required to run with SunOS4. These mods are described in the bytecounters archive ๐ง.
HARDWARE REQUIRED ๐ป
You need an ethernet interface, plus a Sun 3, Sun 4 (SPARC), or PC RT workstation ๐.
SOFTWARE REQUIRED ๐
The distribution is for BSD UNIX, but it could easily be adapted to any UNIX with promiscuous ethernet support ๐.
AVAILABILITY ๐ฆ
The distribution is available via anonymous FTP from venera.isi.edu, in the file pub/NNStat.tar.Z. The documentation is in pub/NNStat.userdoc.ms.Z ๐.
NOCOL(8) ๐
NAME ๐
nocol - network monitoring tools for an IP network
SYNOPSIS ๐
This is an overview of the NOCOL software.
DESCRIPTION ๐
NOCOL (Network Operations Center On-Line) is a collection of network monitoring programs that run on Unix systems ๐ฅ๏ธ. The software is made up of a bunch of monitoring agents that poll various parameters from any system and put them in a format suitable for post-processing. The post-processors can be a display agent, an automated troubleshooting program, an event logging program, and so on โจ.
Right now there are monitors for reachability, SNMP traps, data throughput rate, and nameservers, and they're all in use ๐. Adding more monitoring agents is easy, and they'll get added as necessary. A display agent, nocol(1), using curses has already been built. Work on an "intelligent" module is in progress for event logging and some automatic troubleshooting ๐ค.
All data collected by the monitoring agents follows a fixed (non-readable) format. Each data entry is called an event in NOCOL, and each event has certain flags and a severity attached to it ๐ฉ. The display agent, nocol(1), shows the output of these monitoring agents depending on the severity of the event. You can have multiple displays running simultaneously, and they all process the same set of monitored data ๐ฏ.
There are four severity levels for an event: CRITICAL, ERROR, WARNING and INFO ๐จ. Each monitoring agent controls the severity level independently, and whether it raises or sets an event's severity to any level depends on the logic built into that monitoring agent ๐ง .
For example, if a site is unreachable via ping, pingmon(8) gives it a severity of WARNING. If the site is still unreachable after some time, that severity gets elevated to CRITICAL ๐. With trapmon(8), an SNMP trap message of "EGP neighbor lost" is directly assigned a severity of CRITICAL, while a "Warm Start" trap is assigned a severity of WARNING ๐ฌ.
The display agent (and any other data post-processors) uses this event severity to decide whether to display the event, troubleshoot it, or log it, depending on the display severity level the user selected ๐ฏ.
The software is super flexible and makes enhancements and development take a minimum amount of effort ๐ . The display module processes all the files in the data directory and displays them one after another. This means new monitoring programs can just start generating data in the data directory, and the display module will automatically start showing the new data ๐ช. The monitoring tools can be changed, and the only thing that has to stay common across all the modules is the EVENT data structure ๐ซถ.
CURRENT MODULES ๐งฉ
NOCOL currently consists of the following modules:
nocol
This one simply displays the data collected by the monitoring agents. It uses the curses screen management system to support a wide variety of terminal types ๐ผ๏ธ. An event gets displayed when:
- The severity level of the event is higher than the severity level set in the display.
- The display filter (if set) matches some string in the event line.
The display can run in the regular 80 column mode or the extended 132 column mode. Critical events show up in reverse video (if the terminal type supports it) โก. There are also extras like showing informational messages in part of the window, automatic window resizing, and operator acknowledgement via a bell when a new event goes critical ๐.
ippingmon
This one monitors the reachability of a site via "ICMP" ping packets (ICMP was preferred over SNMP for many obvious reasons ๐). It can use the default output from the system's ping program, but an accompanying program, multiping, can ping multiple IP sites at the same time. That makes it the better pick for monitoring a big list of sites ๐โโ๏ธ. A site is marked unreachable if a certain number of packets is lost, and its severity level goes up each time it tests unreachable ๐.
osipingmon
This one is similar to the ippingmon module, but it uses the OSI ping program instead. There's no multiple ping program for OSI sites yet ๐ฅฒ. The only requirement is that the system's ping program output matches the typical BSD IP ping program's output.
nsmon
This one monitors the nameservers (named) on a list of specified hosts. It periodically sends an SOA query for the default domain. If the queried nameservers can't resolve the query, the site gets bumped up to CRITICAL status ๐.
tpmon
This one monitors the throughput (kbits per second) to a list of hosts ๐ถ. The program connects to the discard socket on the remote machine (using a STREAM socket) and sends large packets for a small amount of time to evaluate the effective throughput. If the throughput drops below a certain threshold (set in the configuration file), it elevates a site to WARNING level โ ๏ธ.
trapmon
This one converts all SNMP traps into a format that NOCOL can display. The severity of the various traps is preset, and it can be changed at compilation time ๐ ๏ธ.
PLATFORM ๐ฅ๏ธ
Any Unix system with the curses screen management library and IP (Internet Protocol) programming facility works ๐. It has been tested on Sun Sparc 4.1.1, Ultrix, and NeXT systems. Porting to other platforms might need minor adjustments depending on the vagaries of the different vendors (mostly in the include files) ๐.
AVAILABILITY ๐
NOCOL was developed at JvNCnet and has been used to monitor the JvNCnet wide area network since 1989 ๐. It's available via anonymous FTP from ftp.jvnc.net under pub/jvncnet-packages/nocol.tar.Z. The system running at JvNCet can be viewed by logging into the host nocol.jvnc.net with username nocol. Use rlogin instead of telnet, since it handles X window terminal types way better ๐ช.
To be added to the NOCOL mailing list (for future updates and bug fixes), send a message to nocol-users-request@jvnc.net with your email address ๐.
FUTURE DEVELOPMENTS ๐ฎ
Possible future enhancements are:
- Event logging.
- Adding an automated troubleshooting mechanism for when a site's severity level reaches a particular level ๐ค.
- SNMP monitors to watch the state of certain variables (interface errors, packet rate, route state changes) ๐.
AUTHOR โ๏ธ
The software was developed at JvNCnet over a period of time. The overall design and initial development was done by Vikas Aggarwal and Sze-Ying Wuu ๐. Additional development is being done and coordinated by Vikas Aggarwal (vikas@jvnc.net). Copyright 1992 JvNCnet. (See the file COPYRIGHT for full details ๐.)
SEE ALSO ๐
nocol(1) nocol(3) tpmon(8) tsmon(8) nsmon(8) ๐
NPRV ๐ฆ
NAME ๐ซ
NPRV -- IP Node/Protocol Reachability Verifier
KEYWORDS ๐ท๏ธ
map, routing, status; IP; ping; VMS; free.
ABSTRACT ๐
NPRV is a full-screen, keypad-oriented utility that runs under VAX/VMS ๐ฅ๏ธ. It lets you quickly scan through a user-defined list of IP addresses (or domain names) and verify a node's reachability ๐. Reachability is determined by performing an ICMP echo, a UDP echo, and a TCP echo at alternating three second intervals โฑ๏ธ. The total number of packets sent and received gets displayed, along with the minimum, average, and maximum round-trip times (in milliseconds) for each type of echo ๐.
There's also a "trace route" function that works out the path from the local system to the remote host ๐ค๏ธ. Once all of the trace route information has filled the screen, you can write a "snapshot" of the screen to a text file ๐ธ. When you exit the utility, those text files can be used to generate a logical network map showing how hosts and gateways are interconnected ๐บ๏ธโจ.
Okay bestie, here's how the ICMP echo works ๐ฆ It's done by sending ICMP ECHO REQUEST packets ๐. The UDP and TCP echoes work by connecting to the UDP/TCP echo ports (port number 7) ๐. Trace route info gets pieced together by sending alternating ICMP ECHO REQUEST packets and UDP packets with very large destination UDP port numbers (in two passes) ๐ง. Each packet starts with a TTL (time to live) of 1, so this should make the first routing gateway send back an ICMP TIME EXCEEDED error ๐ธ. Then every packet goes out with a TTL of 2, so the second routing gateway should send back that same error, then 3, and so on ๐ . This keeps going until an ICMP ECHO REPLY or UDP PORT UNREACHABLE comes back ๐. That means the remote host was reached and the trace route info is complete โจ.
CAVEATS
This utility sends one echo packet per second (ICMP, UDP or TCP), plus one trace route packet per second ๐ซถ. If a trace route packet comes back in less than one second, another one gets sent in 100 milliseconds ๐ญ. This could cause a significant amount of contention on the local network ๐.
BUGS
None known ๐. If you find any bugs, please report them to the author at:
Allen Sturtevant
National Magnetic Fusion Energy Computer Center
Lawrence Livermore National Laboratory
P.O. Box 808; L-561
Livermore, CA 94550
Phone : (415) 422-8266
E-Mail: sturtevant@ccc.nmfecc.gov
LIMITATIONS
The user is required to have SYSPRV privilege to perform the ICMP Echo and trace route functions ๐. The utility will still run with this privilege disabled, but only the UDP Echo and TCP Echo info will show up ๐. It's written in C, but unfortunately it can't be easily ported over to UNIX, since it uses a lot of VMS system calls and all screen I/O is done with the VMS Screen Management Routines ๐ฉ.
HARDWARE REQUIRED
Any network interface supported by TGV Incorporated's MultiNet software ๐.
SOFTWARE REQUIRED
VAX/VMS V5.1+ and TGV Incorporated's MultiNet version 2.0 ๐.
AVAILABILITY
For executables only, FTP to the ANONYMOUS account (password GUEST) on CCC.NMFECC.GOV (128.55.128.30) and GET these files ๐ง:
[ANONYMOUS.PROGRAMS.NPRV]NPRV.DOC (ASCII text)
[ANONYMOUS.PROGRAMS.NPRV]NPRV.EXE (binary)
[ANONYMOUS.PROGRAMS.NPRV]SAMPLE.IPA (ASCII text)
Internet Tool Catalog โจ NSLOOKUP
NAME
nslookup
KEYWORDS
status; DNS, BIND; UNIX, VMS; free.
ABSTRACT
Nslookup is an interactive program for querying Internet Domain Name System (DNS) servers ๐. It's basically a user-friendly front end to the BIND "resolver" library routines ๐.
This program is useful for converting a hostname into an IP address (and vice versa) ๐, determining the name servers for a domain, listing the contents of a domain, displaying any type of DNS record (like MX, CNAME, SOA, etc.) ๐ฆ, and diagnosing name server problems ๐ง.
By default, nslookup queries the default name server, but you can specify a different server on the command line or from a configuration file โจ. You can also specify different values for the options that control the resolver routines ๐ .
MECHANISM
The program formats, sends and receives DNS (RFC 1034) queries ๐จ.
CAVEATS
None.
BUGS
None known.
LIMITATIONS
None known.
HARDWARE REQUIRED
No restrictions ๐.
SOFTWARE REQUIRED
BSD UNIX or related OS, or VMS ๐.
AVAILABILITY
NSLookup is included in the BIND distribution ๐ซถ. It's available via anonymous FTP from uunet.uu.net, in the directory /networking/ip/dns/bind ๐ง. It's available with 4.xBSD UNIX and related operating systems too. For VMS, it's available as part of the TGV MultiNet IP software package, as well as Wollongong's WIN/TCP ๐ธ.
Internet Tool Catalog โจ OSITRACE
NAME
OSITRACE
KEYWORDS
traffic; OSI; eavesdrop; UNIX; free.
ABSTRACT
OSITRACE is a network performance tool that displays info about ISO TP4 connections ๐. One line of output shows up for each packet, with the time, source, destination, length, packet type, sequence number, credit, and any optional parameters in the packet ๐ . There are lots of options to control the output of OSITRACE ๐.
To get packets to analyze, OSITRACE uses Sun Microsystems' Network Interface Tap (NIT) in SunOS 3.4, 3.5, and 4.0.X ๐. OSITRACE may also get data from the NETMON utility, which is described as another tool entry ๐ฆ.
On Sun systems, OSITRACE is easy to install: OSI kernel support isn't needed, and neither is any other form of OSI software support ๐ซถ.
MECHANISM
This tool was designed so code to process different protocol suites can be easily added ๐ง. That means OSITRACE can also trace the DOD TCP protocols ๐.
CAVEATS
None.
BUGS
Bug reports and questions should be sent to the list below ๐ฌ:
ie-tools@gateway.mitre.org
To request to join this mailing list:
ie-tools-request@gateway.mitre.org
Questions and suggestions can also go to Greg Hollingsworth:
Greg Hollingsworth, gregh@gateway.mitre.org
LIMITATIONS
None reported ๐.
HARDWARE REQUIRED
No restriction ๐.
SOFTWARE REQUIRED
SunOS 3.4, 3.5, or 4.0.X, or BSD UNIX-like network protocols with NETMON installed ๐.
AVAILABILITY
OSITRACE is copyrighted by the MITRE-Washington Networking Center, but it's freely distributed "as is" ๐. It requires keeping a copyright text in any code derived from it ๐. The distribution is available by anonymous FTP in pub/pdutrace.tar or pub/pdutrace.tar.Z from aelred-3.ie.org ๐ง.
Internet Tool Catalog โจ OVERVIEW
NAME
OverVIEW
KEYWORDS
manager, status; IP; NMS, SNMP; DOS.
ABSTRACT
Network and internet monitor; Performance monitor; Fully Graphic user interface; Event logging; TFTP boot server
MECHANISM
OverVIEW uses SNMP to query routers, gateways and hosts ๐ฅ๏ธ. It also supports SGMP and PING, and it's committed to CMIP/CMOT ๐. The SNMP queries allow dynamic determination of configuration and state โจ. Sets of related queries allow monitoring of congestion and faults ๐ฅ. The hardware and software are sold as an integrated package ๐.
CAVEATS
None.
BUGS
None known.
LIMITATIONS
256 nodes, 256 nets ๐ธ.
HARDWARE REQUIRED
80286, 640K, EGA, mouse ๐ฑ๏ธ.
SOFTWARE REQUIRED
MS-DOS, OverVIEW, Network kernel, Mouse driver, SNMP agents for monitored devices ๐ .
AVAILABILITY
It's a fully supported product of Proteon, Inc. For more info, contact:
Proteon, Inc. Phone: (508) 898-2800
2 Technology Drive Fax: (508) 366-8901
Westborough, MA 01581 Telex: 928124
Internet Tool Catalog โจ PING
NAME
ping
KEYWORDS
generator, status; IP; ping; DOS, UNIX, VMS; free.
ABSTRACT
Ping is perhaps the most basic tool for internet management ๐. It verifies that a remote IP implementation and the networks and interfaces in between are functional ๐. It can be used to measure round trip delay โฑ๏ธ. Lots of versions of the ping program exist ๐ฆ.
MECHANISM
Ping is based on the ICMP ECHO_REQUEST message ๐จ.
CAVEATS
If run repeatedly, ping could generate high system loads ๐ฌ.
BUGS
None known.
LIMITATIONS
PC/TCP's ping is the only implementation known to support both loose and strict source routing ๐งญ. Some ping implementations support the ICMP "record route" feature, but its usefulness for debugging routes is limited, because many gateways don't correctly implement it ๐.
HARDWARE REQUIRED
No restrictions ๐.
SOFTWARE REQUIRED
None โจ.
AVAILABILITY
Ping is widely included in TCP/IP distributions ๐. Public domain versions of ping are available via anonymous FTP from uunet.uu.net, in the directory bsd-sources/src/etc, and from venera.isi.edu, in the directory pub ๐ง.
Internet Tool Catalog โจ PROCESS-TCPWARE-SNMP
NAME
SNMP agent
KEYWORDS
alarm, manager, status, traffic; IP; SNMP; VMS;.
ABSTRACT
The SNMP agent listens for and responds to network management requests sent from SNMP-conforming network management stations ๐. It also sends SNMP traps, under specific conditions, to identified trap receivers ๐. SNMP communities and generation of traps are fully configurable โ๏ธ. The SNMP agent supports all MIB-II variables except the EGP group ๐.
MECHANISM
Network management variables are made available for inspection and/or alteration by means of the Simple Network Management Protocol (SNMP) ๐ซถ.
CAVEATS
None.
BUGS
No known bugs ๐.
LIMITATIONS
It doesn't yet give sites the ability to add extra MIB definitions ๐.
HARDWARE REQUIRED
Supported VAX processors ๐ฅ๏ธ.
SOFTWARE REQUIRED
VMS V4 or later ๐ .
AVAILABILITY ๐
Okay so the SNMP agent comes built into TCPware for VMS, which is a commercial product you license from Process Software Corporation ๐
Process Software Corporation
959 Concord Street
Framingham, MA 01701
+1 800 722 7770, +1 508 879 6994 (voice)
+1 508 879-0042 (FAX) TELEX 517891
sales@process.com
Internet Tool Catalog โจ PROXYD
NAME
proxyd -- SNMP proxy agent daemons from SNMP Research. ๐ฆ
KEYWORDS
control, management, status;
bridge, Ethernet, IP, OSI, ring, star;
NMS, SNMP;
UNIX;
library, sourcelib.
ABSTRACT
Okay, SNMP proxy agents are literally the MVP ๐ They let you monitor and control network elements that you otherwise couldn't reach with SNMP, like a network bridge that speaks some proprietary management protocol ๐ They can also shield real SNMP agents from a bunch of redundant management agents by using caches. And they're great for building fancy MIB access policies. Iconic.
Here's what the proxy agent daemon does, step by step:
- listens for SNMP queries and commands from logically remote network management stations,
- translates and retransmits those as appropriate network management queries or cache lookups,
- listens for and parses the responses,
- translates the responses into SNMP responses, and
- returns those responses as SNMP messages to the network management station that originated the transaction.
It also sends SNMP traps out to whoever's listed as a trap receiver ๐ Adding more vendor-specific variables is supposed to be really easy, which is so thoughtful of them ๐ธ And the whole thing ships with source code, a strong set of portable libraries for building and parsing SNMP messages, and a bunch of command line utilities. ๐
MECHANISM
Network management variables can be inspected and/or changed using the Simple Network Management Protocol (SNMP). โญ
CAVEATS
None. ๐ง
BUGS
None known. ๐
LIMITATIONS
This is basically a template for people who want to write their own proxy applications ๐
Only a few of the many LanBridge 100 variables are supported, so don't expect the whole set yet ๐
HARDWARE REQUIRED
System from Sun Microsystems, Incorporated. โ๏ธ
SOFTWARE REQUIRED
Sun OS 3.5 or 4.x ๐ป
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
This is a commercial product you license from SNMP Research. Ask for John Southwood in Sales and Marketing ๐
SNMP Research
3001 Kimberlin Heights Road
Knoxville, TN 37920-9716
Attn: John Southwood, Sales and Marketing
(615) 573-1434 (Voice) (615) 573-9197 (FAX)
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
users@seymour1.cs.utk.edu ๐ฎ
Internet Tool Catalog โจ PROXYD_SNMP_RESEARCH
NAME
proxyd -- SNMP proxy agent daemons from SNMP Research. ๐ฆ
KEYWORDS
control, management, status;
bridge, Ethernet, IP, OSI, ring, star;
NMS, SNMP;
UNIX;
library, sourcelib.
ABSTRACT
Okay, SNMP proxy agents are literally the MVP ๐ They let you monitor and control network elements that you otherwise couldn't reach with SNMP, like a network bridge that speaks some proprietary management protocol ๐ They can also shield real SNMP agents from a bunch of redundant management agents by using caches. And they're great for building fancy MIB access policies. Iconic.
Here's what the proxy agent daemon does, step by step:
- listens for SNMP queries and commands from logically remote network management stations,
- translates and retransmits those as appropriate network management queries or cache lookups,
- listens for and parses the responses,
- translates the responses into SNMP responses, and
- returns those responses as SNMP messages to the network management station that originated the transaction.
It also sends SNMP traps out to whoever's listed as a trap receiver ๐ Adding more vendor-specific variables is supposed to be really easy, which is so thoughtful of them ๐ธ And the whole thing ships with source code, a strong set of portable libraries for building and parsing SNMP messages, and a bunch of command line utilities. ๐
MECHANISM
Network management variables can be inspected and/or changed using the Simple Network Management Protocol (SNMP). โญ
CAVEATS
None. ๐ง
BUGS
None known. ๐
LIMITATIONS
This is basically a template for people who want to write their own proxy applications ๐
Only a few of the many LanBridge 100 variables are supported, so don't expect the whole set yet ๐
HARDWARE REQUIRED
System from Sun Microsystems, Incorporated. โ๏ธ
SOFTWARE REQUIRED
Sun OS 3.5 or 4.x ๐ป
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
This is a commercial product you license from SNMP Research. Ask for John Southwood in Sales and Marketing ๐
SNMP Research
3001 Kimberlin Heights Road
Knoxville, TN 37920-9716
Attn: John Southwood, Sales and Marketing
(615) 573-1434 (Voice) (615) 573-9197 (FAX)
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
users@seymour1.cs.utk.edu ๐ฎ
Internet Tool Catalog โจ QUERY
NAME
query, ripquery ๐
KEYWORDS
routing; IP; spoof; UNIX; free. ๐
ABSTRACT
Query lets you remotely peek at a gateway's routing tables. Bestie, that's giving debugging energy ๐ต๏ธโโ๏ธ
MECHANISM
Query formats and sends a RIP request or POLL command to a destination gateway. ๐จ
CAVEATS
Query is meant for debugging gateways, not for network management. For network management, SNMP is the preferred protocol, so don't get it twisted ๐ โโ๏ธ
BUGS
None known. ๐ธ
LIMITATIONS
The polled gateway must run RIP. No RIP, no party ๐
HARDWARE REQUIRED
No restriction. Literally anything goes ๐
SOFTWARE REQUIRED
4.3BSD UNIX or related OS. ๐ก
AVAILABILITY
Query comes with the routed and gated distributions ๐ฆ
Routed is available by anonymous FTP from uunet.uu.net, in the file bsd-sources/src/network/routed.tar.Z.
Gated is available by anonymous FTP from devvax.tn.cornell.edu. The distribution files live in the directory pub/gated. ๐ฆ
Internet Tool Catalog โจ SAS-CPE
NAME
SAS/CPE(tm) for Open Systems Software ๐
KEYWORDS
manager, status;
bridge, ethernet, FDDI, IP, OSI, NFS;
X;
DOS, HP, UNIX;
library.
ABSTRACT
SAS/CPE(tm) for Open Systems software is an integrated system for analyzing and presenting computer performance and resource utilization data. It's giving data nerd dream ๐ค Here's what it can do:
- Processes raw computer and network performance data into detail-level SAS data sets.
- Converts and validates logged data values into forms that are more useful for display and analysis (e.g., I/O counts are converted to I/O rates per second).
- Includes numerous sample reports on performance data processed by SAS/CPE software.
- Reduces logged performance data into daily, weekly, monthly or yearly summarized values.
- Gives you a menu-driven interface for creating and managing multiple performance data bases.
- Gives you a menu-driven report designing interface that lets users with no programming knowledge create and manage custom reports from their performance data base. No SAS coding is needed for this interface, so it's giving accessible ๐ซถ
MECHANISM
SAS/CPE for Open Systems processes and reports data from SNMP and other proprietary monitoring protocols, as well as du and accounting. ๐
CAVEATS
The product is currently in alpha testing, so it's still baking ๐ฐ
BUGS
None known. ๐ธ
LIMITATIONS
None reported. โจ
HARDWARE REQUIRED
HP, SUN or IBM Workstation ๐ฅ๏ธ
SOFTWARE REQUIRED
The SAS(r) System Base Software, SAS/GRAPH Software and SAS/CPE for Open System Software ๐งฉ
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
SAS/CPE for Open Systems Software is available from:
SAS Institute Inc.
SAS Campus Drive
Cary, NC 27513
Phone 919-677-8000
FAX 919-677-8123
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
Send email to snodjs@mvs.sas.com. ๐
Internet Tool Catalog โจ SNIFFER
NAME
Sniffer ๐ถ
KEYWORDS
analyzer, generator, traffic;
DECnet, ethernet, IP, NFS, OSI, ring, SMTP, star;
eavesdrop;
standalone.
ABSTRACT
The Network General Sniffer is a protocol analyzer for LAN diagnostics, monitoring, traffic generation, and troubleshooting. It's basically a whole toolkit ๐งฐ It can capture every packet on a network and decode all seven layers of the OSI protocol model, which is seriously impressive ๐ญ๐ฅ
Capture frame selection works through several different filters:
- protocol content at lower levels,
- node addresses,
- pattern matching (up to 8 logically-related patterns of 32 bytes each), and
- destination class.
And if the built-in protocol interpretation isn't enough, you can write your own customized protocol interpreters and link them to the Sniffer software. Main character energy ๐๐ฆ
Okay so the Sniffer is giving main character energy ๐ฆ It shows you network traffic and performance stats in real time, in whatever format you pick, and it translates numeric station addresses into symbolic names or manufacturer ID names ๐ It tracks frames accepted, Kbytes accepted, and buffer use, and every network version adds its own extra counters for its own stuff. Activity can be shown as frames/second, Kbytes/second, or per cent of network bandwidth utilization ๐
Data collection can go to a printer or get saved to disk as a print-file or a spread-sheet ๐ธ
The protocol suites it understands are giving full buffet ๐ Banyan Vines, IBM Token-Ring, Novell Netware, XNS/MS-Net (3Com 3+), DECnet, TCP/IP (including SNMP and applications-layer protocols like FTP, SMTP, and TELNET), X Windows (for X version 11), NFS, and a bunch of SUN proprietary protocols (including mount, pmap, RPC, and YP) ๐ซถ The LANs it supports are ethernet, Token-ring (4Mb and 16Mb versions), ARCNET, StarLAN, IBM PC Network (Broadband), and Apple Localtalk Network ๐
Internet Tool Catalog: Sniffer
MECHANISM
Okay the Sniffer is a self-contained, portable protocol analyzer, so all it needs is AC line power and a connection to a network and it's ready to go ๐ง It's normally passive (unless it's in Traffic Generator mode), and it captures images of all or just selected frames into a working buffer so you can analyze and display them right away โจ
It's a standalone device, and it comes in two platforms: one for single network topologies and one for multi-network topologies ๐ Both include Sniffer core software, a modified network interface card (or multiple cards), and optional protocol interpreter suites ๐
All Sniffer functions can be controlled remotely from a modem-connected PC, and its output can be imported into database or spreadsheet packages ๐
CAVEATS
In normal use the Sniffer is passive, so it won't adversely effect network performance ๐ Performance degradation will show up, obvi, if the Sniffer is set to Traffic Generator mode and connected to an active network ๐
BUGS
None known. ๐ซถ
LIMITATIONS
None reported. ๐ธ
HARDWARE REQUIRED
None. The Sniffer is a self-contained unit and includes its own interface card, and it installs into a network the same way any normal workstation would ๐ฆ
SOFTWARE REQUIRED
None. ๐
AVAILABILITY
The Sniffer is available commercially. For info on your local rep, call or write:
Network General Corporation
4200 Bohannon Drive
Menlo Park, CA 94025
Phone: 415-688-2700
Fax: 415-321-0855
For government agencies buying it, the Sniffer is included on the GSA schedule ๐
Internet Tool Catalog: SNMP_DEVELOPMENT_KIT
NAME
The SNMP Development Kit
KEYWORDS
manager, status; IP; NMS, SNMP; UNIX; free, sourcelib.
ABSTRACT
The SNMP Development Kit is C Language source code for a programming library that makes it easier to access the management services of SNMP (RFC 1098) ๐ง It also includes sources for a few simple client apps whose main job is to show you how to use the library โจ The example clients query remote SNMP agents in a bunch of modes, and they can generate or collect SNMP traps ๐ฅ There's also code for an example SNMP agent that supports a subset of the Internet MIB (RFC 1066) ๐
MECHANISM
The Development Kit helps you build SNMP-based management apps, both clients and agents ๐ The example apps run SNMP management operations based on the values of command line arguments ๐
CAVEATS
None. ๐ธ
BUGS
Fixed in the next release. ๐
LIMITATIONS
None reported. ๐ซถ
HARDWARE REQUIRED
The SNMP library source code is highly portable and runs on a wide range of platforms ๐ฆ
SOFTWARE REQUIRED
The SNMP library source code has almost no operating system dependencies and runs in a wide range of environments ๐ Some parts of the example SNMP agent code are specific to the 4.3BSD implementation of the UNIX system for the DEC MicroVAX ๐
AVAILABILITY
The Development Kit is available via anonymous FTP from host allspice.lcs.mit.edu ๐ The copyright is held by the Massachusetts Institute of Technology, and the Kit is distributed without charge under the terms in its code and documentation โจ The distribution is a UNIX tar file ๐ง
Bug reports, questions, suggestions, or complaints can be emailed to snmp-dk@ptt.lcs.mit.edu, but no response in any form is guaranteed ๐ UUCP mail distribution can be arranged by contacting the same address ๐ Requests for hard-copy docs or copies of the distribution on magnetic media are never honored ๐
Internet Tool Catalog: SNMP_Libraries_SNMP_RESEARCH
NAME
SNMP Libraries and Utilities from SNMP Research.
KEYWORDS
alarm, control, manager, map, security, status;
bridge, DECnet, Ethernet, FDDI, IP, OSI, ring, star;
NMS, SNMP;
DOS, UNIX, VMS;
sourcelib.
ABSTRACT
These SNMP Libraries and Utilities serve two purposes ๐ซถ
- to act as building blocks for the construction of SNMP-based agent and manager applications; and
- to act as network management tools for network fire fighting and report generation.
The libraries do the ASN.1 parsing and generation for both network management station apps and network management agent apps ๐ฅ They hide the details of ASN.1 parsing and generation from application writers, so those writers don't need to be experts in it ๐ They're super robust with lots of error checking built in ๐ The several command line utilities cover retrieving one or many variables, retrieving tables, or effecting commands by setting remote network management variables ๐ธ
MECHANISM
The parsing is done with recursive descent methods ๐ง Messages are passed via the Simple Network Management Protocol (SNMP) ๐
CAVEATS
None. ๐
BUGS
None known. ๐ฆ
LIMITATIONS
The monitored and managed nodes must implement SNMP over UDP per RFC 1157, or they must be reachable via a proxy agent ๐
HARDWARE REQUIRED
This software has been ported to tons of platforms, including workstations, general-purpose timesharing systems, and embedded hardware in intelligent network devices such as repeaters, bridges, and routers ๐
SOFTWARE REQUIRED
C compiler, TCP/IP library. ๐
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
This is a commercial product available under license from:
SNMP Research
3001 Kimberlin Heights Road
Knoxville, TN 37920-9716
Attn: John Southwood, Sales and Marketing
(615) 573-1434 (Voice) (615) 573-9197 (FAX)
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
users@seymour1.cs.utk.edu ๐
Internet Tool Catalog: SNMP_PACKAGED_AGENT_SNMP_RESEARCH
NAME
SNMP Packaged Agent System -- an SNMP host/gateway agent daemon including a complete protocol stack and runtime environment required to support an SNMP Agent from SNMP Research.
KEYWORDS
control, manager, status;
bridge, Ethernet, FDDI, IP, OSI, ring, star;
NMS, SNMP;
DOS, standalone, UNIX;
sourcelib.
ABSTRACT
The snmpd agent daemon listens for and responds to network management queries and commands from logically remote network management stations ๐ง It also emits SNMP traps to identified trap receivers โจ The daemon is designed to make adding vendor-specific variables a straightforward task ๐
The snmpd app comes complete with source code, including a powerful set of portable libraries for generating and parsing SNMP messages, plus a set of command line utilities ๐
The Packaged Agent System is built for hardware manufacturers who aren't experienced with the TCP/IP protocol suite ๐ซถ It includes a lightweight, non-preemptive scheduler/tasking system for faster execution and less impact on slow CPUs ๐ฅ The development environment is either MS DOS or UNIX ๐
MECHANISM
Network management variables are made available for inspection and/or alteration through the Simple Network Management Protocol (SNMP) ๐ฆ
CAVEATS
None. ๐ธ
BUGS
None known. ๐
LIMITATIONS
None reported. ๐
HARDWARE REQUIRED
The Motorola 68XXX and the Intel 8088 and X86 platforms are fully supported ๐ Other platforms can be supported too, so contact SNMP Research for details ๐
This software has been ported to tons of platforms, including workstations, general-purpose timesharing systems, and embedded hardware in intelligent network devices such as repeaters, bridges, and routers ๐
SOFTWARE REQUIRED
C compiler. ๐
Internet Tool Catalog โจ SNMPD_SNMP_RESEARCH
Okay so first things first, bestie, if you want this one you have to go through the people who own it ๐ผ
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
This is a commercial product available under license
from:
SNMP Research
3001 Kimberlin Heights Road
Knoxville, TN 37920-9716
Attn: John Southwood, Sales and Marketing
(615) 573-1434 (Voice) (615) 573-9197 (FAX)
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
users@seymour1.cs.utk.edu
NAME
snmpd is an SNMP host/gateway agent daemon from SNMP Research. ๐
KEYWORDS
control, mananger, status;
bridge, Ethernet, FDDI, IP, OSI, ring, star;
NMS, SNMP;
DOS, UNIX;
sourcelib.
ABSTRACT
So the snmpd agent daemon just sits there listening for and answering network management queries and commands from management stations that are logically remote from it ๐ It also sends SNMP traps out to the trap receivers you've identified. ๐
The agent is built so that adding more vendor-specific variables is a straight-forward task, which is honestly so iconic of it. ๐ It also comes with the full source code, a powerful set of portable libraries for generating and parsing SNMP messages, and a set of command line utilities. ๐งฐ
MECHANISM
Network management variables are made available for inspection and/or alteration by means of the Simple Network Management Protocol (SNMP). ๐ฆ
CAVEATS
None. โจ
BUGS
None known. ๐ธ
LIMITATIONS
Only operating system variables available without source code modifications to the operating system and device device drivers are supported. ๐
HARDWARE REQUIRED
This software has been ported to numerous platforms including workstations, general-purpose timesharing systems, and embedded hardware in intelligent network devices such as repeaters, bridges, and routers. It's literally everywhere, periodt ๐
SOFTWARE REQUIRED
C compiler. ๐งโ๐ป
Internet Tool Catalog โจ SPIDERMONITOR
NAME
SpiderMonitor P220, K220 and SpiderAnalyzer P320, K320 ๐ท๏ธ
KEYWORDS
alarm, analyzer, generator, traffic; DECnet, ethernet,
IP, OSI; eavesdrop; standalone; sourcelib.
ABSTRACT
Okay, the SpiderMonitor and SpiderAnalyzer are protocol analyzers for ethernet LAN diagnostics, monitoring, traffic generation, and troubleshooting. ๐ The SpiderMonitor can capture every single packet on a network and decode the first four layers of the OSI protocol model, which is lowkey amazing. The SpiderAnalyzer gets extra software that lets it decode the higher protocol layers. ๐
It understands these protocol suites: TCP/IP (including SNMP and applications-layer protocols), OSI, XNS, DECnet and IPX. ๐งฉ You can write your own decodes in 'C' with the Microsoft version 5.0 'C' compiler, and a decode guide comes with it so you're not left guessing. ๐
The SpiderAnalyzer supports multiple filters at the same time for capturing packets using predefined patterns and error states. ๐ฏ Filter patterns can also trigger on NOT matching 1 or more filters, an alarm, or a specified time. โฐ
The SpiderAnalyzer can also use TDR (Time Domain Reflectometry) to find media faults, open or short circuits, or transceiver faults. โก It can transmit OSI, XNS, and Xerox link-level echo packets to user-specified stations, and it performs loop round tests. ๐
In traffic generation mode, the SpiderAnalyzer can generate packets at random intervals of random lengths, or any combination of random or fixed interval or length. ๐ฒ It can also make packets with CRC errors, packets that are too short, or packets that are too long. Chaotic, but in a useful way ๐ญ
Output from the SpiderMonitor/Analyzer can be imported to database or spreadsheet packages. ๐
MECHANISM
The SpiderMonitor and Spider Analyzer are available as stand-alone, IBM PC compatible packages based upon a Compaq III portable system, or as plug-in boards for any IBM XT/AT compatible machine. ๐ป The model 220 (SpiderMonitor) systems provide a functional base suited for most network management needs. The model 320 (SpiderAnalyzer) systems provide extended functionality in the development mode and traffic generation mode, as well as more filtering capabilities than the 220 models. ๐
CAVEATS
Traffic generation will congest an operational ethernet. Don't do this on a network people are actually using ๐จ
BUGS
None known. ๐
LIMITATIONS
Monitoring of up to 1024 stations and buffering of up to 1500 packets. The model 220 provides for 3 filters with a filter depth of 46 bytes. The model 320 provides for 4 filters and a second level of filtering with a filter depth of 64 bytes. ๐
HARDWARE REQUIRED
PX20s are self contained, but the KX20s require an IBM PC/XT-AT compatible machine with 5 megabytes of hard disk storage and the spare slot into which the board kit is plugged. ๐ฅ๏ธ
SOFTWARE REQUIRED
None. The SpiderAnalyzer requires the Microsoft 'C' Compiler, Version 5.0, for writing user defined decodes. ๐ง
AVAILABILITY
The SpiderMonitor/Analyzer is available commercially. For information on your local representative, call or write:
Spider Systems, Inc.
12 New England Executive Park
Burlington, MA 01803
Telephone: 617-270-3510
FAX: 617-270-9818
Internet Tool Catalog โจ SPIMS
NAME
SPIMS -- the Swedish Institute of Computer Science
(SICS) Protocol Implementation Measurement
System tool.
KEYWORDS
benchmark, debugger; IP, OSI; spoof; UNIX. ๐งช
ABSTRACT
SPIMS is used to measure the performance of protocol and "protocol-like" services, including response time (two-way delay), throughput, and the time to open and close connections. โฑ๏ธ It's been used to:
- benchmark alternative protocol implementations, ๐
- observe how performance varies when parameters in specific implementations have been varied (i.e., to tune parameters). ๐๏ธ
SPIMS currently has interfaces to the DoD Internet Protocols: UDP, TCP, FTP, SunRPC, and the OSI protocols from the ISODE 4.0 distribution package: FTAM, ROSE, ISO TP0, and to Sunlink 5.2 ISO TP4, as well as Stanford's VMTP. ๐ There's also a rudimentary set of benchmarks, stubs for new protocol interfaces, and a user manual. ๐
For an example of the use of SPIMS to tune protocols, see:
Nordmark & Cheriton, "Experiences from VMTP: How
to achieve low response time," IFIP WG6.1/6.4:
Protocols for High-Speed Networks, May 1989,
Zurich. To be published.
For an example of how SPIMS can be used to benchmark protocols, see:
Gunningberg, Bjorkman, Nordmark, Sjodin, Pink &
Stromqvist "Application Protocols and Performance
Benchmarks", IEEE Communications Magazine, June
1989, Vol. 27, No.6, pp 30-36.
Sjodin, Gunningberg, Nordmark, & Pink, "Towards
Protocol Benchmarks', IFIP WG6.1/6.4 Protocols
for High-Speed Networks, May 1989, Zurich, pp
57-67
MECHANISM
SPIMS runs as user processes and uses a TCP connection for measurement set-up. ๐งต Measurements take place between processes over the measured protocol. SPIMS generates messages and transfers them via the measured protocol service according to a user-supplied specification. It has a unique measurement specification language used to describe a measurement session. That language has constructs for different application types (e.g., bulk data transfer), for specifying frequency and sequence of messages, for distribution over message sizes, and for combining basic specifications. ๐ง These specifications are independent of both protocols and protocol implementations, so they can be used for benchmarking. For more details on the internals of SPIMS, see:
Nordmark & Gunningberg, "SPIMS: A Tool for Protocol
Implementation Performance Measurements" Proc. of 13:th
Conf. on Local Computer Networks, Minneapolis 1989, pp
222-229.
CAVEATS
None. โจ
BUGS
None known. ๐ซถ
LIMITATIONS
None reported. ๐
HARDWARE REQUIRED
No restrictions. ๐ท
SOFTWARE REQUIRED
SPIMS is implemented on UNIX, including SunOS 4., 4.3BSD UNIX, DN (UNIX System V, with extensions) and Ultrix 2.0/3.0. It requires a TCP connection for measurement set-up. No kernel modifications or any modifications to measured protocols are required. ๐ฅ
Okay bestie, SPIMS is not public domain ๐
โโ๏ธ and it's covered by licenses, so using it means you accept those terms and conditions ๐. The licenses come in the distribution package, but you can also grab them plus the SPIMS cover letter over Internet FTP without downloading the whole software. The procedure is the same as the university FTP one below, and the file you want is pub/spims-dist/licenses.tar.Z โจ
There are two distribution classes, depending on who's asking ๐
- Universities and non-profit organizations. The SPIMS source code is free of charge for you ๐ซถ There are two ways to get it:
- FTP. If you have an Internet FTP connection, use anonymous FTP to
sics.se[192.16.123.90] and retrievepub/spims-dist/dist910304.tar.Z(a .6MB compressed tar image) in BINARY mode. Log in as useranonymous, and at the password prompt, enter your complete electronic mail address ๐ - On a Sun 1/4-inch cartridge tape. Mailing one costs a handling fee of US$150.00, so submit a bank check with your request. Do not send tapes or envelopes ๐ โโ๏ธ
- FTP. If you have an Internet FTP connection, use anonymous FTP to
- Commercial organizations. You've got two choices here: a license for commercial use, or a license for internal research only with zero commercial use whatsoever ๐ผ
- For internal research use only: The SPIMS source code is a one-time fee of US$500.00. If you're interested in the research prototype, contact them by e-mail and briefly explain why you qualify for non-commercial use. Once approved, you'll get permission to obtain a copy from the same distribution source as the universities ๐ฌ
- Commercial use: A commercial version of SPIMS will eventually be distributed and supported by a commercial partner ๐ In the meantime, they'll distribute the research prototype (source code) to interested organizations, without any guaranty or support. Contact SICS for more info ๐
For more about the research prototype distribution and a commercial license, reach out to:
Swedish Institute of Computer Science
Att: Birgitta Klingenberg
P.O. Box 1263
S-164 28 Kista
SWEDEN
e-address: spims@sics.se
Phone: +46-8-7521500, Fax: +46-8-7517230
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐ฎ
Got a change for this catalog entry? Ask for Bengt Ahlgren at the Swedish Institute of Computer Science ๐ฆ
Bengt Ahlgren
Swedish Institute of Computer Science
Box 1263
S-164 28 KISTA, SWEDEN
Email: bengta@sics.se
Tel: +46 8 752 1562 (direct)
or +46 8 752 1500
Fax: +46 8 751 7230
Internet Tool Catalog ยท SPRAY_SUN ๐ธ
NAME spray
KEYWORDS benchmark, generator; IP; ping; UNIX.
ABSTRACT Spray is a traffic generator ๐ฅ It blasts out RPC or UDP packets, or ICMP Echo Requests, at a remote procedure call application on the destination host. After a set number of packets have gone out, it asks that remote application how many made it through. On a LAN, the gap between packets sent and packets received is the stuff the destination host had to drop because its queue got too long. So you can get a throughput measure relative to system speed and network load ๐
MECHANISM See above.
CAVEATS Spray can congest a network. ๐จ
BUGS None known.
LIMITATIONS None reported.
HARDWARE REQUIRED No restrictions.
SOFTWARE REQUIRED SunOS
AVAILABILITY Supplied with SunOS.
Internet Tool Catalog ยท TCPDUMP ๐ฆ
NAME tcpdump
KEYWORDS traffic; ethernet, IP, NFS; UNIX, VMS; free.
ABSTRACT Tcpdump can interpret and print headers for ethernet, IP, ICMP, TCP, UDP, NFS, ND, ARP/RARP, and AppleTalk ๐ It has proven super useful for examining and evaluating the retransmission and window management operations of TCP implementations, so if you're into TCP drama, this is your tool ๐
MECHANISM Much like etherfind, tcpdump writes a log file of the frames traversing an ethernet interface. Each output line includes the time a packet is received, the type of packet, and various values from its header ๐ฐ๏ธ
CAVEATS None.
BUGS None known.
LIMITATIONS The public domain version requires a kernel patch for SunOS. TCPware for VMS currently interprets headers for IP, TCP, UDP, and ICMP only ๐
HARDWARE REQUIRED Any Ultrix system (VAX or DEC RISC hardware)
SOFTWARE REQUIRED Ultrix release 4.0 or later. For Ultrix 4.1, you may need the patched "if_ln.o" kernel module, which is available from Digital's Customer Support Center ๐ ๏ธ
AVAILABILITY It's available via anonymous FTP from ftp.ee.lbl.gov, though it's subject to copyright restrictions. The source and documentation are in compressed tar format, in the file tcpdump.tar.Z. You can also grab it from spam.itstd.sri.com, in the directory pub. For VMS hosts with DEC ethernet controllers, it's part of the TGV MultiNet IP software package and TCPware for VMS from Process Software Corporation ๐
Internet Tool Catalog ยท TCPLOGGER ๐ง
NAME tcplogger
KEYWORDS traffic; IP; eavesdrop; UNIX; free.
ABSTRACT Tcplogger is a set of modifications to the 4.3BSD UNIX source code, plus a big library of post-processing software ๐ It records timestamped info from TCP and IP packets sent and received on a specified connection. For each TCP packet, it records things like sequence number, acknowledgement sequence number, packet size, and header flags. For an IP packet, it records header length, packet length, and TTL values. Customized use of the TCP option field lets you detect lost or duplicate packets ๐
MECHANISM The routines of 4.3BSD UNIX in the netinet directory were modified to append information to a log in memory. A user process reads the log continuously and writes it to a file. A TCP option was added to start logging a connection. A lot of post-processing software has been written to analyze the data ๐ง
CAVEATS None.
BUGS None known.
LIMITATIONS To get a log at both ends of the connection, the modified kernel should be running on both hosts ๐ซฃ
All connections are logged in a single file, but there's software included to filter out the record of a single connection.
HARDWARE REQUIRED No restrictions.
SOFTWARE REQUIRED 4.3BSD UNIX (as modified for this tool).
AVAILABILITY Free, although you need a 4.3BSD license. Contact Olafur Gudmundsson (ogud@cs.umd.edu) ๐
Internet Tool Catalog ยท TOKENVIEW_PROTEON ๐
NAME TokenVIEW
KEYWORDS control, manager, status; ring; NMS, proprietary; DOS.
ABSTRACT TokenVIEW is a network management tool for 4/16 Mbit IEEE 802.5 Token Ring networks ๐ฅ It monitors active nodes and ring errors, and it maintains a database of nodes, wire centers, and their connections. A separate network management ring lets you remotely configure wire centers ๐
MECHANISM A separate network management ring, used with Proteon Intelligent Wire Centers, lets you read and modify wire center configuration info from one remote workstation. A log of network events, paired with a database of nodes, wire centers, and their connections, makes it way easier to track and correct network errors ๐ต๏ธโโ๏ธ It requires an "E" series PROM, which is sold with the package.
CAVEATS Currently, only ISA bus cards support the required E series PROM โ ๏ธ
BUGS None known.
LIMITATIONS 256 nodes, 1 net.
HARDWARE REQUIRED 512K RAM, CGA or better, hard disk, mouse supported.
SOFTWARE REQUIRED MS-DOS, optional mouse driver
AVAILABILITY This is a fully supported product of Proteon, Inc. It was previously sold as Advanced Network Manager (ANM). For more info, contact:
Proteon, Inc. Phone: (508) 898-2800
2 Technology Drive Fax: (508) 366-8901
Westborough, MA 01581 Telex: 928124
Internet Tool Catalog ยท TRACEROUTE ๐บ๏ธ
NAME traceroute
KEYWORDS routing; IP; ping; UNIX, VMS; free.
ABSTRACT ๐ฆ
Okay bestie, so traceroute is the tool that figures out the path your packets take from source to destination ๐บ๏ธโจ It's the backup plan for when the IP record route option just can't cut it. That happens when intermediate gateways quietly discard packets, when the route is too long for the datagram's capacity, or when some middle IP implementation doesn't support record route at all ๐ It also reports round trip delays between the source and each intermediate gateway, so you can tell which gateway is adding how much to the end-to-end delay. Iconic ๐ญ
Enhanced versions of traceroute let you specify loose source routes for datagrams ๐ง That means you can investigate the return path from remote machines back to your local host. The way that's giving detective energy ๐๐
MECHANISM ๐ธ
Traceroute depends on the ICMP TIME_EXCEEDED error reporting mechanism ๐ When a gateway gets an IP packet whose time-to-live value is 0, it sends an ICMP packet back to the host that generated the packet. So you send packets toward a destination with a TTL of 0, and the next hop shows up as the source of the ICMP TIME EXCEEDED message. Then you increment the TTL field, and the later hops reveal themselves one by one ๐ช
Each packet gets time stamped as it goes out โฑ๏ธ That time stamp comes back inside the ICMP packet, so the round trip delay can be calculated. Math and tea ๐ต
CAVEATS ๐
Some IP implementations forward packets with a TTL of 0, so those hops escape identification ๐ Others use the TTL field from the arriving packet as the TTL for the ICMP error reply, which slows down identification. Annoying, not gonna lie ๐ค
Sending datagrams with the source route option can make some gateways crash ๐ It is considered poor form to repeat this behavior. Be a good girl and don't do it ๐ซถ
BUGS ๐
None known. Honestly iconic ๐
LIMITATIONS ๐ง๏ธ
Most versions of UNIX have errors in the raw IP code, so the standard version of traceroute needs kernel mods to work ๐ฉ There's a version that runs without kernel mods under SunOS 3.5 (see below), but it only operates over an ethernet interface. Lowkey a bummer, but it's a start ๐ฅฒ
HARDWARE REQUIRED ๐
No restrictions. Literally any hardware ๐
SOFTWARE REQUIRED ๐
BSD UNIX or related OS, or VMS ๐
AVAILABILITY ๐
Traceroute is available by anonymous FTP from ftp.ee.lbl.gov, in the file traceroute.tar.Z. It's also available from uc.msc.umn.edu โจ
There's a version of traceroute that supports Loose Source Record Route, along with the source code of the required kernel modifications and a Makefile for installing them ๐ ๏ธ You can grab it via anonymous FTP from zerkalo.harvard.edu, in directory pub, file traceroute_pkg.tar.Z.
There's also a version of traceroute that runs under SunOS 3.5 and does NOT require kernel mods ๐ธ Get it via anonymous FTP from dopey.cs.unc.edu, in file ~ftp/pub/traceroute.tar.Z.
For VMS, traceroute is available as part of the TGV MultiNet IP software package ๐
Internet Tool Catalog ยท TRPT
NAME ๐
TRPT -- transliterate protocol trace ๐ฆ
KEYWORDS ๐
traffic; IP; eavesdrop; UNIX; free.
ABSTRACT โจ
TRPT displays a trace of TCP socket events ๐ When you don't supply any options, TRPT prints all the trace records found in a system, grouped by TCP connection protocol control block (PCB). Main character energy ๐
Here's an example of TRPT output ๐ง
38241 ESTABLISHED:input
[e0531003..e0531203)@6cc5b402(win=4000)<ACK> -> ESTA-
BLISHED
38241 ESTABLISHED:user RCVD -> ESTABLISHED
38266 ESTABLISHED:output
6cc5b402@e0531203(win=4000)<ACK> -> ESTABLISHED
38331 ESTABLISHED:input
[e0531203..e0531403)@6cc5b402(win=4000)<ACK,FIN,PUSH>
-> CLOSE_WAIT
38331 CLOSE_WAIT:output
6cc5b402@e0531404(win=3dff)<ACK> -> CLOSE_WAIT
38331 CLOSE_WAIT:user RCVD -> CLOSE_WAIT
38343 LAST_ACK:output
6cc5b402@e0531404(win=4000)<ACK,FIN> -> LAST_ACK
38343 CLOSE_WAIT:user DISCONNECT -> LAST_ACK
38343 LAST_ACK:user DETACH -> LAST_ACK
MECHANISM ๐ท
TRPT goes through the buffer of TCP trace records that gets created when a TCP socket is marked for debugging ๐
CAVEATS ๐
Before you use TRPT, an analyst should take steps to isolate the problem connection and find the address of its protocol control blocks ๐ซถ
BUGS ๐
None reported ๐
LIMITATIONS ๐ง๏ธ
A socket must have the debugging option set for TRPT to operate ๐ญ Another problem is that TRPT's output format is difficult, periodt ๐
HARDWARE REQUIRED ๐
No restrictions ๐
SOFTWARE REQUIRED ๐
BSD UNIX or related OS โญ
AVAILABILITY ๐
TRPT comes included with BSD and SunOS distributions ๐ You can also grab it via anonymous FTP from uunet.uu.net, in file bsd-sources/src/etc/trpt.tar.Z.
Internet Tool Catalog ยท TTCP
NAME ๐
TTCP ๐ฆ
KEYWORDS ๐
benchmark, generator; IP; ping; UNIX, VMS; free.
ABSTRACT โจ
TTCP is a traffic generator for testing end-to-end throughput ๐ It's really good for evaluating TCP/IP implementations, so it's giving performance-test queen ๐
MECHANISM ๐ธ
Cooperating processes get started on two hosts ๐ง They open a TCP connection and transfer a high volume of data. Then delay and throughput get calculated. Quick math, big results ๐
CAVEATS ๐
It will greatly increase system load ๐ฉ Fair warning, bestie ๐ซถ
BUGS ๐
None known ๐
LIMITATIONS ๐ง๏ธ
None reported โจ
HARDWARE REQUIRED ๐
No restrictions ๐
SOFTWARE REQUIRED ๐
BSD UNIX or related OS, or VMS ๐ธ
AVAILABILITY ๐
Source for BSD UNIX is available via anonymous FTP from vgr.brl.mil, in file ftp/pub/ttcp.c, and from sgi.com, in file sgi/src/ttcp.c ๐ A version of TTCP has also been submitted to the USENET news group comp.sources.unix.
For VMS, ttcp.c is included in the MultiNet Programmer's Kit, which is a standard feature of the TGV MultiNet IP software package ๐
Internet Tool Catalog ยท UNISYS-PARAMAX
NAME ๐
Paramax Network Security Server ๐
KEYWORDS ๐
alarm, control, manager, security, status; ethernet, FDDI, IP; X; UNIX.
ABSTRACT โจ
The Paramax Network Security Server (NSS) is a security officer's tool for centralized security management of TCP/IP-based networks ๐ก๏ธ It collects, stores online, maintains, and correlates audit data from hosts, workstations, servers, and network devices. Smart, organised, iconic ๐
Through the X window based user interface, a security officer can review and analyze this audit data at the NSS ๐ They can also select and request filtered portions of host audit data, and receive and analyze security alerts from across the network ๐จ
The NSS supports centralized access control of network resources through its ability to create and update user and host access permissions data ๐ The user access permissions data identifies the network addresses each user is permitted to access. The host access permissions data identifies the network addresses between which communication is permitted. Basically a bouncer with a clipboard ๐
The NSS also supports centralized management of user authentication data (user IDs and passwords) and other user data for use by hosts, workstations, and servers in the network ๐ซถ It generates pseudo-random pronounceable passwords for the security officer to select and assign to users. Pronounceable passwords?? Iconic, actually ๐คญ
The NSS deadman timer locks the NSS screen or logs the security officer off the NSS after periods of inactivity ๐ด A biometric authentication device is optional for rigorous fingerprint authentication of users at the NSS, and logins to the NSS itself are permitted only at the console ๐ Right now the NSS provides centralized security management for a System High Network, and it's being upgraded for a Compartmented Mode environment ๐ Glow up era โจ
MECHANISM ๐ธ
The NSS uses the Audit Information Transfer Protocol (AITP) for transferring security alerts and audit data ๐ก AITP is NOT proprietary, and the specification is available from the address listed below ๐ Access to the NSS audit database is provided via the Structured Query Language (SQL) ๐๏ธ
CAVEATS ๐
None ๐ฅฐ
BUGS ๐
None known ๐
LIMITATIONS ๐ง๏ธ
None reported โจ
HARDWARE REQUIRED ๐
Hardware required is a Sun 4 (SPARCStation) with a color monitor, at least 600 MB disk, and a 150 MB 1/4" cartridge tape drive ๐ฅ๏ธ
SOFTWARE REQUIRED ๐
SunOS Version 4.1.1 running the Sun OpenWindows X windowing environment and the SYBASE Relational Data Base Management System ๐ฟ
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐ฎ
It's commercially available from:
Paramax Systems Corporation
5151 Camino Ruiz
Camarillo, California 93011-6004
805-987-6811
Peter Vazzana
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐
Paramax Systems Corporation
5151 Camino Ruiz
Camarillo, California 93011-6004
805-987-6811
Nina Lewis <nina@cam.paramax.com>
Internet Tool Catalog ยท WOLLONGONG-MANAGER
NAME ๐
Management Station, Release 3.0 ๐ฅ๏ธ
KEYWORDS ๐
manager; ; snmp, x; sun, dec, dos;.
Okay bestie, we're picking up mid-entry with the Management Station, and it is giving main character energy ๐ โจ
Management Station is a network management software product that supports SNMP ๐ฅ๏ธ. Release 3.0 brings in a distributed network management architecture, which is a glow-up because it helps fix the scalability and reliability problems you get when one cpu tries to handle every single SNMP management task ๐ญ. There are also a bunch of applications, and every one of them is user-configurable ๐. Here's the lineup:
General Info
X Windows, 11.4 based, implemented with the OSF/Motif 1.1.1 toolkit. Every configuration file gets an X Windows interface ๐ฆ. Most applications have a "verbose" mode so you can watch the SNMP PDU traffic go by ๐. You get on-line help and Reference manual pages, and it's ANSI C compliant ๐.
Network Management Daemon
This daemon handles device discovery, trap/alarm management, and fault monitoring for the network map ๐บ๏ธ. It talks to other distributed daemons and any connected stations over SNMP/TCP. It's configured through the Manager MIB, and it also includes the SMUX MIB (RFC 1227) ๐ง. It can send info to INGRES, Oracle, or Sybase through an ESQL interface ๐.
The user-defined actions are:
- send alarm to map
- send info to flat file
- execute ESQL command
- call any UNIX system command
- forward traps and filter user-defined alarms
User-defined alarms can use any boolean expression, and MIB variable expressions can be combined with AND/OR statements ๐ฅ.
MIB Compiler
It's an ASN.1 MIB compiler with an X Windows interface ๐ธ. It accepts RFC 1155 and 1212 format, and most vendor-specific MIBs plus proposed Internet standard MIBs are already included ๐.
Network Map
This is a comprehensive network monitoring map with a click and drag interface, plus hierarchical and virtual views ๐ฆ. It comes with toolkit and preferences applications, along with device discovery ๐. Device resolution uses the /etc/hosts file, NIS, or DNS ๐. You also get background pixmapping, a user-definable menu bar, and network manager and console operator modes controlled by UNIX group permissions ๐. You can run multiple maps without any limitation โจ.
MIB Form and MIB Form Editor
These are User-designed, X-based SNMP applications ๐ . They give MIB variables an alias and interpret the returned values, and they support GET NEXT and SET ๐. You get user-defined polling and multi-device [agent] capability, and everything gets configured through the X interface ๐ซถ.
MIB Chart and MIB Chart Editor
You can pick a strip chart, a packed strip chart, or bar graphs ๐. The polling interval is user-specified, and you can chart MIB variable(s) or MIB expressions that use arithmetic operands ๐งฎ. You can plot the actual value, the delta, or the delta/interval, and you can plot multiple MIB expressions from multiple agents at the same time ๐คฏ. It's an X Windows interface, with pause polling and grid options ๐.
MIB Tool
This is an X Windows application for general viewing and 'walking' of MIB trees ๐ณ. It has GET NEXT and SET options, a window for viewing RFC 1212 MIB definitions, and a command line interface option โญ.
Application Programming Interface
There's a complete set of APIs so developers can write SNMP applications in character mode or X Windows ๐งโโ๏ธ๐.
MECHANISM
Management Station uses SNMP and ICMP Echo Request to monitor and control SNMP Agents ๐ฐ๏ธ. The network management daemon implements Wollongong's Manager MIB, SNMP over TCP, and the SMUX protocol ๐.
CAVEATS
none. Iconic, no notes ๐ .
BUGS
See Product Release Notice ๐.
LIMITATIONS
The limits on the number of management agents and network management daemons aren't known at this time ๐คทโโ๏ธ.
HARDWARE REQUIRED
- Sun SPARC workstations and servers
- DEC DECstations and DECsystems
- Motorola MPC (Delta 8000 series)
- 3/486 PC and PC-compatible
You'll want 16 MB RAM and n20 MB free disk space for installation ๐พ. A color monitor is strongly recommended ๐.
SOFTWARE REQUIRED
- SunOS 4.1-1 or greater & OpenWindows 2.0 or greater (SUN)
- X Windows, 11.4 or greater
- RISC ULTRIX 4.1 or greater (DEC)
- R32V2 (Motorola)
- Open Desktop 1.1 or greater (3/486)
It's provided on a 1/4" cartridge, TK-50, or 3 1/2" diskettes, depending on what you have, in cpio format ๐.
AVAILABILITY
It's a commercial product from:
The Wollongong Group, Inc.
1129 San Antonio Rd
Palo Alto, CA. 94303
ph.: (800) 962 - 8649 (in California)
(800) 872 - 8649 (outside California)
fax: (415) 962 - 0286
Internet Tool Catalog โ XNETDB โจ
NAME
Xnetdb ๐ฆ
KEYWORDS
database, manager, map, monitoring, status; IP; Ping, SNMP, Unix, X; free.
ABSTRACT
Xnetdb is a network monitoring tool built on X Windows and SNMP, and it also has integrated database and statistic viewing capabilities ๐. It figures out and displays the status of the routers and circuits you tell it to monitor, by querying the designated sites and showing the results ๐. It can also check the status of certain designated SNMP variables, like a default route for an important router ๐ฃ๏ธ. The database side is a vibe too: it can show extra info about a site or circuit, such as the equipment at the site, the contact person(s) for the site, and other useful stuff ๐. And finally, it can gather designated statistical info about a circuit and display it whenever you ask ๐.
MECHANISM
Xnetdb uses SNMP or ping to monitor the things it's configured to watch ๐. It builds a network map on its display dynamically by querying entities and getting their IP addresses and subnet masks ๐บ๏ธ. A configuration file tells xnetdb which IP hosts you want to monitor ๐.
CAVEATS
While "ping" can be used to monitor hosts, you get more useful results with SNMP ๐ .
BUGS
Bugs and other assorted topics are discussed on the xnetdb mailing list ๐. To join, send a note to "xnetdb-request@oar.net".
LIMITATIONS
None ๐.
HARDWARE REQUIRED
No restrictions ๐ธ.
SOFTWARE REQUIRED
Most any variety of UNIX plus X-Windows and/or OpenWindows ๐ง.
AVAILABILITY
It's available by anonymous ftp from ftp.oar.net (currently 131.187.1.102) in the directory /pub/src ๐. Sites without direct IP access can get special arrangements by sending a note to "xnetdb-request@oar.net" ๐. The licensing restrictions are minimal, and they're detailed inside the package ๐.
Internet Tool Catalog โ XNETMON_SNMP_RESEARCH ๐
NAME
XNETMON -- an X windows based SNMP network management station from SNMP Research ๐ฅ๏ธโจ.
KEYWORDS
alarm, benchmark, control, debugger, manager, map, reference, security, status, traffic; bridge, DECnet, Ethernet, FDDI, IP, OSI, ring, star; NMS, Ping, SNMP, X; UNIX; Sourcelib.
ABSTRACT
XNETMON is a powerful network management station built on the X window system ๐ช. Its network management tools cover configuration, performance, security, and fault management, and they've been used successfully with a wide range of wide- and local-area-network topologies and media ๐. It supports multiprotocol devices, including those using TCP/IP, DECnet, and OSI protocols ๐งฉ.
Some features of XNETMON's network management tools are:
- A fault management tool that displays a map of the network configuration, with node and link state shown in one of several colors to indicate current status ๐ฆ
- A configuration management tool that can be used to edit the network management information base stored in the NMS, so it matches changes happening in the network ๐ ๏ธ
- Graphs and tabular tools for fault and performance management (e.g. XNETPERFMON) ๐
- Mechanisms for adding more variables, such as vendor-specific variables ๐งฉ
- Alarms that can be enabled to alert the operator about events happening in the network ๐
- Events that are logged to disk ๐พ
- Output data that can be transferred via flat files for additional report generation by a variety of statistical packages ๐
The XNETMON application comes complete with source code, including a powerful set of portable libraries for generating and parsing SNMP messages ๐.
MECHANISM
XNETMON is based on the Simple Network Management Protocol (SNMP) ๐ฐ๏ธ. Polling is done with the powerful SNMP get-next operator and the SNMP get operator ๐. Trap-directed polling is used to regulate the focus and intensity of the polling ๐ฏ.
CAVEATS
None ๐.
BUGS
None known ๐ธ.
LIMITATIONS
Monitored and managed nodes must implement SNMP over UDP per RFC 1157, or they must be reachable via a proxy agent ๐ง.
HARDWARE REQUIRED
An X windows workstation with a UDP socket library ๐ฅ๏ธ. Monochrome is acceptable, but color is far superior ๐.
SOFTWARE REQUIRED
X windows version 11 release 4 or later, or MOTIF ๐ป.
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL
It's a commercial product, available under license from:
SNMP Research
3001 Kimberlin Heights Road
Knoxville, TN 37920-9716
Attn: John Southwood, Sales and Marketing
(615) 573-1434 (Voice) (615) 573-9197 (FAX)
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY
users@seymour1.cs.utk.edu ๐ฎ
Internet Tool Catalog โ XNETMON_WELLFLEET ๐ง
NAME
xnetmon, xpmon ๐ฆ
KEYWORDS
alarm, manager, map, status; IP; NMS, SNMP; UNIX. ๐
Okay bestie, this is the XNETMON entry and it's giving network status realness ๐ Xnetmon and xpmon are the two tools that show you how SNMP-capable network elements are doing, and they both use SNMP (RFC1098) to grab the data. Xnetmon draws a schematic network map that shows which elements are up or down ๐บ๏ธ and xpmon draws a pen plot style graph of how any arbitrary MIB object (RFC1066) changes over time ๐
MECHANISM ๐ฅ
Xnetmon polls network elements for the status of their interfaces, and you get to control the polling interval โฑ๏ธ Pop-up windows that show the values of any MIB variable run on their own separate polls ๐ช When Xnetmon gets an SNMP trap from a network element, it immediately re-polls that element and all of its adjacent elements so the status is up to date, no cap ๐ The layout of the network map is statically configured.
Xpmon keeps polling (with SNMP) the designated network element for the value of the designated MIB variable, on the interval the user picks. The change in the variable gets plotted on the strip chart, and the strip chart regularly adjusts its scale to the current maximum value on the graph ๐
CAVEATS โ ๏ธ
Polling intervals should be chosen with care so as not to affect system performance adversely. Bestie, pick your intervals carefully or your system's performance could take a hit ๐
BUGS, LIMITATIONS AND REQUIREMENTS ๐ธ
- BUGS: None known. ๐
- LIMITATIONS: None reported. โจ
- HARDWARE REQUIRED: Distributed and supported for Sun-3 systems.
- SOFTWARE REQUIRED: SunOS 3.5 or 4.x; X11, release 2 or 3.
AVAILABILITY ๐
Commercial product of:
Wellfleet Communications, Inc.
12 DeAngelo Drive
Bedford, MA 01730-2204
(617) 275-2400
Internet Tool Catalog XNETPERFMON_SNMP_RESEARCH ๐ฆ
NAME ๐
xnetperfmon -- a graphical network performance and fault management tool from SNMP Research.
KEYWORDS ๐ง
manager, security, status;
DECnet, Ethernet, IP, OSI, ring, star;
NMS, SNMP, X;
DOS, UNIX, VMS;
sourcelib.
ABSTRACT ๐
Xnetperfmon is a XNETMON tool, and it's the one that makes plots of SNMP variables in graphical displays ๐ผ๏ธ The manager can easily customize the labels, the step size, the update interval, and which variables get plotted, so you can make graphs for fault and performance management ๐ Scales automatically adjust whenever a point to be plotted would go off scale. Iconic ๐
MECHANISM ๐
The xnetperfmon application talks to remote agents or proxy agents through the Simple Network Management Protocol (SNMP) ๐ก
CAVEATS โ ๏ธ
All plots for a single invocation of xnetperfmon must be for variables provided by a single network management agent. However, you can have multiple invocations of xnetperfmon active on one display at the same time, or use proxy agents to summarize information at a common point ๐ซถ
BUGS AND LIMITATIONS ๐
- BUGS: None known.
- LIMITATIONS: None reported.
HARDWARE REQUIRED โจ
Systems supporting X windows.
SOFTWARE REQUIRED ๐
XNETMON from SNMP Research and X Version 11 release 4 or later (option MOTIF)
AVAILABILITY AND CONTACT POINT FOR INFORMATION ABOUT THIS TOOL ๐
This is a commercial product, available under license from:
SNMP Research
3001 Kimberlin Heights Road
Knoxville, TN 37920-9716
Attn: John Southwood, Sales and Marketing
(615) 573-1434 (Voice) (615) 573-9197 (FAX)
CONTACT POINT FOR CHANGES TO THIS CATALOG ENTRY ๐
users@seymour1.cs.utk.edu
Internet Tool Catalog XUP_HP ๐ธ
NAME ๐
xup
KEYWORDS ๐ง
status; ping, X; HP.
ABSTRACT โจ
Xup uses the X-Windows to display the status of an "interesting" set of hosts. Main character energy ๐
MECHANISM ๐ฅ
Xup uses ping to determine host status.
CAVEATS โ ๏ธ
Polling for status increases network load. Bestie, that's a lot of pings ๐ญ
BUGS AND LIMITATIONS ๐
- BUGS: None known.
- LIMITATIONS: None reported.
HARDWARE REQUIRED ๐
Runs only on HP series 300 and 800 workstations.
SOFTWARE REQUIRED ๐ป
Version 10 of X-Windows.
AVAILABILITY ๐
A standard command for the HP 300 & 800 Workstations.
Appendix: "No-Writeups" ๐ฆ
This section is for tools that we know exist but haven't been fully cataloged yet ๐ If anyone wants to write up an entry for one of these tools, please contact: noctools-request@merit.edu
Each mention is separated by a <form-feed> for improved readability. If you actually plan to print out this section of the catalog, you should probably strip out the <ff> ๐จ๏ธ
tuecho.c ๐
/*
* Send / receive TCP or UDP echos in any of a number of bizzare ways.
*
* Joel P. Bion, March 1990
* Copyright (c) 1990 cisco Systems. All rights reserved.
*
* This "tuecho" program is distributed in the hope that it will be
* useful, but WITHOUT ANY WARRANTY; without even the implied warranty
* of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
*
* Prompts as:
* Host: -- host to send echos to -- can be name or a.b.c.d --
* Enter protocol (0 = UDP, 1 = TCP) [0]: -- UDP or TCP
* Size of data portion (bytes) [100]: -- bytes in data, excluding
* headers -- Number of bursts [5]: -- number of bursts of packets to
* send -- Packets per burst [1]: -- packets per burst, all sent AT
* ONCE -- Timeout (seconds) [2]: -- how long to wait for data
* Pause interval (seconds) [0]: -- Pause interval between bursts of
* frames
* Type of pattern (specify = 0, increment = 1) [1]:
* -- if 0 specified, allow you to specify a 16bit pattern
-- as four hex digits (see below). If 1, will create a
-- "incrementing", cycling pattern from 0x0000 -> 0xffff
-- ->.
* Enter pattern (hex value) [abcd]: -- if "0" specified above
*/
Availability:
ftp.uu.net:/networking/cisco/tuecho.c
ftp.cisco.com:tuecho.c
SPY ๐
An NFS monitoring/tracing tool ๐ต๏ธโโ๏ธ
Availability:
A postscript file describing SPY is located on
ftp.uu.net:/networking/ip/nfs/spy.ps.Z
NFSTRACE ๐ง
Okay so this is the rpcspy/nfstrace package, and it's described in detail in the paper "NFS Tracing by Passive Network Monitoring", which came out at the January, 1992 USENIX conference ๐
To run it, you'll need either a DEC machine running ULTRIX (with the packetfilter installed in the kernel) or a Sun running SunOS 4.x (with NIT). Or you'll need to do a bit of hacking ๐
The package is a little different from the version in the paper:
- The handle->name translation facility has been removed. It's just too fragile to include in the general release. If you need it, contact the author directly and they'll be happy to mail you the code ๐
- The output format is a wee-bit different. โจ
- The IBM-RT Enet filter version is also not included, since the author seems to be the only person in the world running it. RTs are really too slow for this anyway ๐
To configure the package, edit the makefile in the obvious (to the author, at least) way.
Note that not all versions of SunOS NIT have working versions of the packet timestamp mechanism. Try to set the -DSTAMPS option in the makefile, and if that doesn't work, take it out ๐ซ
If you're actually going to use this to gather traces, the author would love to hear from you! Send email, and share your results or traces if your organization allows it. The author maintains a mailing list of users for updates and more, so send mail to be added to it ๐
Happy tracing ๐ฆ
Matt Blaze
Department of Computer Science
Princeton University
35 Olden Street
Princeton, NJ 08544
mab@cs.princeton.edu
609-258-3946
Availability:
ftp.uu.net:/networking/ip/nfs/nfstrace.shar (or check archie)
LAMER ๐
# Lame delegation notifier
# Author: Bryan Beecher
# Last Modified: 6/25/92
#
# To make use of this software, you need to be running the
# University of Michigan release of BIND 4.8.3, or any version
# of named that supports the LAME_DELEGATION patches posted to
# USENET. The U-M release is available via anonymous ftp from
# terminator.cc.umich.edu:/unix/dns/bind4.8.3.tar.Z.
#
# You must also have a copy of query(1) and host(1). These
# are also available via anonymous ftp in the aforementioned
# place.
# -------------------------------------------------------------
# -------------------------------------------------------------
# handle arguments
# -------------------------------------------------------------
# -d <day>
# This flag is used to append a dot-day suffix to the LOGFILE.
# Handy where log files are kept around for the last week
# and contain a day suffix.
#
# -f <logfile>
# Change the LOGFILE value altogether.
#
# -w
# Count up all of the DNS statistics for the whole week.
#
# -v
# Be verbose.
#
# -t
# Test mode. Do not send mail to the lame delegation
# hostmasters.
Availability:
ftp.uu.net:/networking/ip/dns/lamer.tar.Z (or check archie)
HOST ๐ธ
host - look up host names using domain server
SYNOPSIS
host [-v] [-a] [-t querytype] [options] name [server]
host [-v] [-a] [-t querytype] [options] -l domain [server]
host [-v] [options] -H [-D] [-E] [-G] domain
host [-v] [options] -C domain
host [-v] [options] -A host
DESCRIPTION
host looks up information about Internet hosts or domains, and it's iconic at it ๐ It gets this information from a set of interconnected servers spread across the world. By default, it simply converts between host names and Internet addresses. But with the -t, -a and -v options, it can find all of the information about hosts or domains that the domain nameserver maintains ๐
/*
* Extensively modified by E. Wassenaar, Nikhef-H, <e07@nikhef.nl>
*
* The officially maintained source of this program is available
* via anonymous ftp from machine 'ftp.nikhef.nl' [192.16.199.1]
* in the directory '/pub/network' as 'host.tar.Z'
*
* Also available in this directory are patched versions of the
* BIND 4.8.3 nameserver and resolver library which you may need
* to fully exploit the features of this program, although they
* are not mandatory. See the file 'README_FIRST' for details.
*
* You are kindly requested to report bugs and make suggestions
* for improvements to the author at the given email address,
* and to not re-distribute your own modifications to others.
*/
/*
* New features
*
* - Major overhaul of the whole code.
* - Very rigid error checking, with more verbose error messages.
* - Zone listing section completely rewritten.
* - It is now possible to do recursive listings into subdomains.
* - Maintain resource record statistics during zone listings.
* - Maintain count of hosts during zone listings.
* - Exploit multiple server addresses if available.
* - Option to exploit only primary server for zone transfers.
* - Option to exclude info from names that do not reside in a domain.
* - Implement timeout handling during connect and read.
* - Write resource record output to optional logfile.
* - Special MB tracing by recursively expanding MR and MG records.
* - Special mode to check SOA records at each nameserver for domain.
* - Special mode to check inverse mappings of host addresses.
* - Code is extensively documented.
*/
Okay, so this is the new features list, and it's giving "major glow-up" ๐ฆโจ Every single one of these is a whole upgrade, so let's go through the vibes.
PINGs
Okay, bestie, there are literally so many versions of PING out there ๐ญ๐ Every implementation has its own little pile of extra features, so here are a few that are totally worth a peek ๐
ftp.cc.berkeley.edu:pub/ping: this one has duplicate packet detection, Record Route, the ability to specify a data pattern for packets, flood pinging, an interval option, Multicast support, etc. ๐ซถnikhefh.nikhef.nl:/pub/network/rping.tar.Z:rpingis basically PING's cooler cousin ๐ It only sends a single probe packet to test whether a destination is reachable. As an option it uses the loose source routing facility to show the roundtrip route the packet took ๐บ๏ธ Multiple addresses of remote hosts get tried until one responds, and as an option, each of multiple addresses can be probed unconditionally. It also has a patch for making loose source routing work if you're on a SUN with an OMNINET ethernet controller ๐
VRFY
vrfy.tar.Z (Version 921021)
Okay, vrfy is giving "email detective" ๐๐ In its simplest form you hand it an address like user@domain, and it figures out the MX hosts for domain, then issues the SMTP command VRFY at the primary MX host (or all of them, if you ask nicely). If there are no MX hosts, it goes to domain itself. Without domain, it goes to localhost.
It gets even more iconic from there: it can recursively expand forward files or mailing lists, and it can detect mail forwarding loops ๐ Full-blown RFC822 address specifications are understood (main character energy, no cap). Syntax checking can happen locally or remotely, and there are options to use alternative protocol suites if you need them, plus lots of verbose output if you want to see everything ๐ง There are obvious limitations, but honestly on average it works pretty well ๐ Needless to say, you need internet access (nameserver and SMTP) for this one ๐ See the man page and the extensive documentation in the source for further details.
Please send comments and suggestions to Eric Wassenaar <e07@nikhef.nl>
If you want to receive notification of updates, please send an email with the keyword "subscribe" in the subject or the body to the address <net-dist-request@nikhef.nl>
Available as:
nikhefh.nikhef.nl:/pub/network/vrfy.tar.Z
XNETLOAD
The synopsis, as a man page would have it:
NAME
xnetload - ethernet load average display for X
SYNOPSIS
xnetload[-toolkitoption ...] [-scale integer]
[-update seconds] [-hl color] [-highlight color]
[-jumpscroll pixels] [-label string] [-nolabel] host
Okay, so xnetload is a little display that shows the ethernet load average for a specified host ๐ The graph is scaled from 0% to 100%, where 0% means 0mbs and 100% means 10mbs. It updates periodically, and it's giving very "watching the traffic roll in" energy ๐ Quick heads-up, though: the host you point it at must be running rpc.etherd โ ๏ธ
DESCRIPTION
The xnetload program displays a periodically updating histogram
of the ethernet load average for the specified host. The resulting
graph is scaled as 0% to 100%, where 0% corresponds to 0mbs and
100% corresponds to 10mbs. NOTE: The specified host must be
running rpc.etherd.
This program has been run using X11R4 and X11R5, under the following operating systems:
- SUNOS 4.1.0
- SUNOS 4.1.1
- ULTRIX V4.2
- IRIX 3.3.2
Assuming the Imake templates and Rules are in order and in the proper place on your system, these programs should compile and link straightforward by running the following sequence:
xmkmf
make
Then, as root, issue the following:
make install
make install.man
Then, on your host system (or on any other system you can rlogin or rsh into), start the etherd daemon with the following (must be root):
/usr/etc/rpc.etherd le0 &
where le0 is the mnemonic for the primary ethernet interface ๐
To start the xnetload program, the following command line is suggested:
./xnetload -hl red host &
where host is the name of any reachable network node (including LOCALHOST) that is running the etherd daemon. A small xload window should appear on your local display with nine horizontal lines. The label:
"Ethernet Load %"
should appear in the upper left hand corner, just below any additional title bars or other decorations provided by your window manager ๐ If the program comes up without the nine lines, or without the "Ethernet Load" label, then either your resource file is not properly installed in the appropriate app-defaults directory, or you may have picked up the wrong xnetload image. Try re-running make install as root, or be sure to include the ./ in front of the command name.
If it's not working, don't panic ๐ญ Check the resource file location and the image you picked up first. Then re-runmake installas root, or add the./in front of the command name. Good luck, bestie! ๐ซถ
The following changes have been made to this directory since R3:
- Now use Athena StripChart widget.
- Understands WM_DELETE_WINDOW.
- 3-26-92 Modified from xload to xnetload by Roger Smith, Sterling Software at NASA-Ames Research Center, Mountain View, Calif. rsmith@proteus.arc.nasa.gov
Available as:
ftp proteus.arc.nasa.gov:pub/XEnetload.tar.Z (or check archie)
NETTEST
NAME
nettest, nettestd - Performs client and server functions for
timing data throughput
SYNOPSIS
Okay, so nettest and nettestd are the client and server pair that time data throughput across different IPC methods โฑ๏ธ๐จ For TCP and OSI connections, nettest makes a connection with nettestd, then does count writes of size bytes, followed by count reads of size bytes. For UDP, nettest performs only writes, and reads are not performed. If you're using UDP, nettestd reads the data packets and prints a message for each data packet it receives ๐จ The number and size of the reads and writes may not line up with the number and size of the actual data packets that get transferred, since that depends on the protocol you choose ๐คทโโ๏ธ And if you append an optional k (or K) to the size, count, or bufsize value, the number gets multiplied by 1024 ๐งฎ
This source for nettest and nettestd is provided on an "as is" basis. Cray Research does not provide any support for this code (unless you are a customer who has purchased the UNICOS operating system).
They will gladly take bug reports for nettest/nettestd. Suggested fixes are preferred to just bug reports ๐
Changes to allow nettest/nettestd to run on other architectures are also welcomed. They will try to incorporate bugfixes and update the publicly available code, but they can make no guarantees.
For copyright information, see the notice in each source file.
Send bug-reports and fixes to:
E-mail: dab@cray.com
U.S. Mail: David Borman
Cray Research, Inc.
655F Lone Oak Drive
Eagan, MN 55121
Notes:
- The -b option to nettestd has not been tested...
- The ISO code should work on a 4.4BSD system, but the gethostinfo() routine is specific to UNICOS...
Available as:
ftp sgi.com:/sgi/src/nettest
ETHERCK
etherck is a simple program that displays Sun ethernet statistics ๐ If you're seeing a high percentage of input errors due to "out of buffers", you can run the iepatch script to patch a kernel that uses the Intel ethernet chip (ie) ๐ ๏ธ A back of the envelope calculation shows that a .25% input error rate gives about a 10% degradation of NFS performance if 8k packets are being used. Yikes ๐ฌ
In their environment at Legato, patching the ie buffer allocation made the input error rate drop more than 2 orders of magnitude ๐ This was after they had applied other networking fixes (for example, using Prestoserve, and going from thin wire to twisted pair) and pushed a higher load on the server ๐ช
Note that both etherck and iepatch must be run by root (or you can make etherck setgid kmem) ๐
Available as:
send EMAIL to: request@legato.com
with a Subject line: send unsupported etherck
The following is part of the 'help' file from the Legato Email Server:
This message comes to you from the request server at Legato.COM,
request@Legato.COM. It received a message from you asking for help.
The request server is a mail-response program. That means that you
mail it a request, and it mails back the response.
The request server is a very dumb program. It does not have much
error checking. If you don't send it the commands that it
understands, it will just answer "I don't understand you".
The request server has 4 commands. Each command must be the first
word on a line. The request server reads your entire message before
it does anything, so you can have several different commands in a
single message. The request server treats the "Subject:" header line
just like any other line of the message. You can use any combination
of upper and lower case letters in the commands.
The request server's files are organized into a series of directories
and subdirectories. Each directory has an index, and each
subdirectory has an index. The top-level index gives you an overview
of what is in the subdirectories, and the index for each subdirectory
tells you what is in it.
The server has 4 commands:
"help" command: The command "help" or "send help" causes the server to
send you the help file. You already know this, of course,
because you are reading the help file. No other commands are
honored in a message that asks for help (the server figures
that you had better read the help message before you do
anything else).
SEND a request to Legato to get the rest of the help file!
NETCK
netck is a shar file that contains the sources to build "netck", a network checker that uses the rstat(3R) protocol to gather and print statistics from machines on the network ๐ It's super useful for figuring out which parts of which machines could be potential NFS bottlenecks ๐ To get this file, send email to the request server with the command send unsupported netck.
Available as:
same as ETHERCK (send email To: request@legato.com; subject: HELP)
References
[1] Stine, R., Editor, "FYI on a Network Management Tool Catalog:
Tools for Monitoring and Debugging TCP/IP Internets and
Interconnected Devices", FYI 2, RFC 1147, Sparta, Inc., April
1990.
Security Considerations
Security issues are not discussed in this memo. ๐ณ This one's a plot twist, and the wording is exact, so take it seriously. ๐
Authors' Addresses
Robert M. Enger
Advanced Network and Services
1875 Campus Commons Drive, Suite 220
Reston, VA. 22091-1552
Phone: 703-758-7722
EMail: enger@reston.ans.net
Joyce K. Reynolds
Information Sciences Institute
University of Southern California
4676 Admiralty Way
Marina del Rey, CA 90292
Phone: (310) 822-1511
Email: JKREY@ISI.EDU
๐ฆ where this page comes from
- ietf: rfc1470 1993-06
- ๐ girlified by claude-haiku-5-5 on : a language model's rewrite of the original, under its terms