All language subtitles for 7. Network Monitoring

It on sexual merit take a look to the network monitoring.

Let's start with the CS log.

Since love is a standard for message logging and used for system management and security audit thing

as well as generally informational analyzes and debugging messages each message is labeled with a facility

called indicating the Sofaer type generating the message and is signed with the label.

Let's go ahead with this just looks.

Who are the labels.

The meaning of several labels are other than the emergency and debugging are related to the application.

For example if the purpose of the system is to process transactions to update customer account balance

information and error in the files there should be a sign the error label.

However an error occurring in an attempt to display the zip code of the customer may be assigned an

error or even warning level.

This server processes which handles the message usually includes all lower levels.

That is if messages are separated by individual so were the warning and three will be included in the

notice info and the debark process.

For example as you can see in here we have some sever levels.

For example the emergency level became an example such as Cisco Ayas software could not be load.

For example an alert level message can be temperature is too high.

For example a critical error message.

I'm certain the clinical sorta level example can be unable to allocate the memory and something like

that as a concern here.

And here is the format office slug message in the first fields that refers to the time stamp.

This is showing as when the log message was created simply.

The second thing shows us this facility.

Third shows the Square-D low end the another field shows us the MNM Monique.

Which means what is going on on the link link is going up.

Which means that's going to down or that is going to OP and then weird Grimsey interface changed state

too.

That's the main log message.

So let's go with this this looks so worse this looks so helps to collect blocks and warnings to a central

Sisler point.

Network administrators can easily never get the large amount of data compiled in a cyst locked server

and to display the Sisler message you can use.

The show log command and you can see the all logs that are created in our rather.

Or maybe switch by typing the show look command let's go with the S&P simple management protocol as

an MP is an Internet standard protocol for collecting and organizing information about managed to eyes

on IP networks and for modifying that information to change the way its behavior.

US is that topical to support as an MP include cable modems rather Swades servers workstations printers

and more.

As an MP is widely used in network management for network monitoring.

As an MP expose's management data in the form of variables on the managed systems organize in a managed

information base MIB which describe the system status and the configuration these variables can them

be remotely queried and in some circumstances many plated by managing applications.

It's an imperfect process consists of some steps.

The first step that we're going to take a look is get request get request is use to get the value of

a specific MIB and there is a manager to Agent message.

The second thing is the get response message.

Yes.

Yes your response is used to retrieve the next value of the MIB where I bowl.

And then third is this search request search request that is used to change the value of where we're

able or list of where eyeballs and Edge.

Let's go ahead with the agent to manage your message which are to get response and the trap yet response

is to receive notification message form agent manager and trap our losen agent to not manager of important

winds wire and also state that as an MP message we have three thirds of the SMP as an MP version.

One is the initial implementation of the SMP protocol.

It's an MP version 2 Rees's version 1 and includes improvements in the areas of performance security

and the confidentiality.

And as an MP version 3 primally as the security and the remote configuration enhancements to the SMP

Let's go ahead with the SMP committee street term they said and become world string is like a user ID

or password that allows access to others or other devices statistics if to come in the string is correct

that the worst response with the requested information is to commit a string is not correct.

The D-y simply discards the request and does not response it is an empty command the string is used

in essence it rewards one and the SMP version to Emyr two thirds of it.

As an MP the strings the first thing is the read only.

That means you can access the method but you cannot make any change.

The second type is the redirect.

That means you can access and modify the meet and go figure that's an origin.

3 What we're doing is we're just defining an access list and here as you can see I Pax's the standard

and the access list name and we're defining the IP address that we are going to permit then we're using

the SMP server commands.

It's an IP so we'll just monitor.

I also include and we are defining the administrators group and we're defining the rights of the group

as you can see here and then we are defining as single user in here as you can see in here.

To air Friday a Senate version 3 configuration we can use the show as an MP group command.

Let's go ahead with the net flow.

Now let flow is an embedded instrumentation within Cisco software to characterize network operation

with ability into the network isn't indispensable to for I.T. professionals in response to new requirements

and the procedures network operators are finding it's critical to understand how the network is behaving

including application and the network usage network per day to day and utilization of network services.

The impact of chase to the network network and family and the security will notabilities and the long

term compliance issues.

And let's go ahead how we can cover you with the net FULDE configured the network we are using the IP

flow of commands and we're tapping the direction is it's going to be an ingress or egress then we are

defining our IP for export Wurzels or the destination will is as you can see in here we're finding the

full of configuration we are using to show IP for export commands and we can also use the show IP cash

flow command.