fluke networks network performance monitoring application performance analyzer jim davis regional...

Fluke Networks

Network Performance MonitoringApplication Performance Analyzer

Jim Davis

Regional Sales Director

Fluke Networks

2www.networks.pe

Who Is Danaher?

$18B Science & Technology Company

3www.networks.pe

Where Sits Fluke Networks?

Focused on network test & analysis and service assurance & protection

Four segment leaders with great brands, innovative products and

strong customers

Communication Test Platform

Operating Company

Leader in local area network analysis & media testing

Served Market Size: ~$1.5B & Market Growth: ~5%

We know networks.

Danaher named #1 by 2011 Test & Measurement World Magazine

Market Size: $12B &Growth: 5-7%

Sales: $3.4B

Test & Measurement

Group

Strong Peers in the #1 T&M Company in the World

Test & Measurement

Group

Communication Test Platform

Operating Company

4www.networks.pe

Fluke NetworksPrivate Network Owners… Network & IT Managers

Network and application performance monitoring

Offering more ways to look at your networks than anyone else Providing unique views into your networks you can’t get anywhere else Delivering the right tools to every level of your network support organization

Data Communications InstallersCopper and fiber premise cable certification and diagnostic instruments

Communication Service ProvidersTelco line technician tools and DSL line test instruments

Private Network Owners… Network Techs & EngrsPortable network analysis and tools for all local network mediums

Outfitting Network Pros & Heroes At Every

5www.networks.pe

What Our Customers Are Asking For:• Quantifying application performance from the users’ perspective• Assigning problem ownership and prioritizing based on impact• Facilitating collaborative troubleshooting among disparate support groups• Managing multi-tiered application performance• Quantify performance improvements from change• Becoming aware of potential problems before users complain• Troubleshooting problems that are not occurring right now (back-in-time analysis) • Management reporting to show delivery of expected service levels

Information collected from Voice of the Customer activities representing over 200 interviews worldwide

6www.networks.pe

DATA CENTER

WANREMOTE

SITE

Authenticate

Call Manager

Secure WEB

CITRIX

App Delivery Controller

App Delivery Controller

APP

APP

APP

SQL Cluster

Oracle ClusterCore Switch

BranchUser

Firewall

Firewall

RemoteUser

Call Signaling

Success/Fail?

WHERE DO YOU BEGIN?

Carrier Core

MobileUser

Internet

Branch Router PE Router

PE Router

Is the firewall blocking

something?

Is the user load being properly distributed?

Is the application

server responding?

Are logs showing

any errors?

Is it the XenApp tier or a

backend issue?

Is the web server over-

loaded?

Did they authenticate successfully?

The Network is Slow!

Is the firewall blocking

something?

Is the sitecongested?

Could be a carrier problem?

The Problem

Maybe QoS/CoS is

mis-configured?

7www.networks.pe

Analyzer is only as good as the analyst

• We can have lots of tools looking at data in a network, but this data is only good if we know how to read it.

8www.networks.pe

9www.networks.pe

10www.networks.pe

Introducing: TruView

A Unified Network and Application Performance Troubleshooting Appliance That Solves Problems FAST!

Simple• Racked to reporting in <30 minutes• Auto-discovery and configuration• Intuitive web interface

Intelligent• Self-learning baselines• Time correlated views• Guided workflows

Complete• Monitoring & Troubleshooting• Enterprise Scalability• 5-in-1 Tools

11www.networks.pe

Branch Office #2

Subnet #1 Subnet #2

How is TruView Deployed?

11

Branch Office #1

Subnet #1 Subnet #2

Internet

WAN

Web Servers App Servers DB Servers Media Servers

DNS / ADServers

SPAN / TAP

Flow Export

SNMP Poll

Remote / Mobile Users

TruView

Application Performance Views(A closer look)

13www.networks.pe

A Typical Multi-tier Business Application

HTTPS HTTP Oracle SQL

DHCPServer

Single Sign-onServer

Web Servers Application Servers Database Servers

End User Router Firewall Load Balancer Switch Switch Switch

Internet orIntranet

Challenges in Application Services Delivery:• Many points of failure

• Many different protocols• Geographically diverse

• Many groups are responsible for the infrastructure• May involve either custom or 3rd party applications

14www.networks.pe

User Server

TCP SYN (80)

SYN ACK

ACK

HTTP GET #1

Response #1

ACK for Response #2

HTTP GET #2

Flo

w

Application Response Time

Initial Network Round Trip TimeServer Connect Time

Response #2Response #3

Response #4

Response #5

ACK for Response #5

Tran

sact

ion

#1

Tran

sact

ion

#2

Flow Termination Criteria:• TCP FIN

• TCP Reset (2min)• Built in Timeout

(30min)

Data Transfer Time

Application Response Time

Data Transfer Time

Response #1

Response #2

Response #3

Response #4

ACK for Response #4 Network Round-Trip TimeFIN

FIN ACK

ACK

TCP Response Time Measurement

15www.networks.pe

TCP Packets Web Packets DB Packets2

00

Mill

ise

con

ds

Client Web DB

Encompassed Transactions

17www.networks.pe

Instant Transaction Report

End User Response Time Breakdown for individual client/server transactions

Usage metrics such as bytessent and received as well aspackets sent and received

Client/Server transaction detail(Request/Response)

18www.networks.pe

Trends

Techniques for Network Monitoring

20www.networks.pe

Using Probes for monitoring

SELECTSELECT

T1

E1

56kDS3

OC3

Remote Locations Headquarters

Data Center

Management Data

Web-Based GUI

SELECTSELECT

SELECTSELECT

Operations Center

SELECTSELECT

SELECTSELECT

SELECTSELECT

SELECTSELECT

WAN

WAPMS WIC

WAPMS

SELECTSELECT

SELECTSELECT DS3

T1SELECTSELECT

21www.networks.pe

Using SNMP – MRTG, Cacti, Nagio, etc.

What are they up to?

22www.networks.pe

SNMP is also good to track CPU usage and errored frames – CRC

23www.networks.pe

Using Netflow/IPFIX

24www.networks.pe

Drill-down in HTTP with Netflow/IPFIX

25www.networks.pe

From a Real Network

26www.networks.pe

MPLS – How much bandwidth per Type of Service?

27www.networks.pe

What applications are in a give class of service?

28www.networks.pe

All VoIP in my expensive $$ class of service - good

29www.networks.pe

Who is the top talker?

30www.networks.pe

Enable NetFlow

Traffic

Collector/Reporter(Netflow Tracker)

NetFlowExport

Packets

Web GUI

Defined by seven unique keys:

• Source IP address• Destination IP address• Source port• Destination port• Layer 3 protocol type• TOS byte (DSCP)• Input logical interface

(ifIndex)

What is a Flow ?

Netflow Tracker for Security

“I heard about this virus that runs on port…”

32www.networks.pe

Here we see the Source Address Distribution report

33www.networks.pe

This was over a 6 hour period.422,684 separate addresses

34www.networks.pe

Drilling down we can see who they were speaking with…

35www.networks.pe

Let’s drill down some more to see what they are saying: “Port 445”?

36www.networks.pe

Not sure what this traffic is, but it could be…

37www.networks.pe

Here’s another security example…

38www.networks.pe

Who is 198.104.150.149 and why are they the 3rd highest address for HTTP traffic?

39www.networks.pe

This page does not look appropriate!

40www.networks.pe

And another security example – Ping Sweep?

41www.networks.pe

By an Access Point? – “That’s a feature”

TruView

Unified Network and Application Performance and Troubleshooting

43www.networks.pe

Introducing: TruView

A Unified Network and Application Performance Troubleshooting Appliance That Solves Problems FAST!

Simple• Racked to reporting in <30 minutes• Auto-discovery and configuration• Intuitive web interface

Intelligent• Self-learning baselines• Time correlated views• Guided workflows

Complete• Monitoring & Troubleshooting• Enterprise Scalability• 5-in-1 Tools

44www.networks.pe 44

Monitoring and Alerting:• Dashboards and dynamic thresholds

• End-user experience reporting• All users, all transactions, all the time

Triage:• Determine scope and impact

• Isolate to Network, Server, or App• Drill-down into specific domain

Troubleshooting:• Leverage rich forensic data

• Drill into individual transactions• Event re-construction & replay

3 Clicks To Fix!

1

2

3

45www.networks.pe

“When we looked at the market leaders in the space, we determined that Visual not only had the best product for monitoring end-to-end performance, but its roadmap showed the organization is going in the right direction.”

- MSC Home Terminal Logistics

Global Performance Monitoring

46www.networks.pe

“There has been a paradigm shift within our department as we have moved from ‘It’s not my problem’ to what is the problem and how do we solve it. Instead of guessing where the problem is, Visual can pinpoint the impacted area.”

- Brussels Metro Transport Co.

Application Monitoring & Troubleshooting

47www.networks.pe

“We knew that our applications were slow and bandwidth was saturated, but we were unable to pinpoint the location. We put Visual on our network and it actually told us what was going on. Not only where the delay was coming from, but

identified what the problems were.“ - Integrated

Services Construction Specialties

Network Monitoring & Troubleshooting

48www.networks.pe

VoIP Monitoring & Troubleshooting

“With the implementation of Visual, we can actually find the impacting issue whether it is the network, application development or server performance. It used to take days to pinpoint and solve problems, but now we can isolates issues

in minutes or hours.“ - Global Call Center

49www.networks.pe

Branch Office #2

Subnet #1 Subnet #2

How is TruView Deployed?

49

Branch Office #1

Subnet #1 Subnet #2

Internet

WAN

Web Servers App Servers DB Servers Media Servers

DNS / ADServers

SPAN / TAP

Flow Export

SNMP Poll

Remote / Mobile Users

TruView

50www.networks.pe

Providing Our Customers What They Are Asking For:

• Quantifying application performance from the users’ perspective• Assigning problem ownership and prioritizing based on impact• Facilitating collaborative troubleshooting among disparate support groups• Quantify performance improvements from change• Managing multi-tiered application performance• Becoming aware of potential problems before users complain• Troubleshooting problems that are not occurring right now (back-in-time analysis) • Management reporting to show delivery of expected service levels

Information collected from Voice of the Customer activities representing over 200 interviews worldwide

Jim DavisSales Director Latin America

Jim.Davis2@FlukeNetworks.com

http://es.FlukeNetworks.com

Alvaro CayoRep. Fluke Networks en PERU

Alvaro.Cayo@Networks.pe

http://Networks.pe

Obrigado, Gracias, Thank you