NetScout nGenius Real-Time Monitor 1.3 Release Notes -...

NetScout® Systems, Inc.Westford, MA 01886

Telephone: 978.614.4000Fax: 978.614.4004

Web: http://www.netscout.com

NetScout nGenius Real-Time Monitor 1.3 Release Notes

Contents78-13357-01

Notice of Restricted Rights:

Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR §52.227-19 and subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS §252.227-7013. The information in this manual is subject to change without notice.

NetScout� is a registered trademark of NetScout Systems, Inc. All other brand names, company identifiers, trademarks, service trademarks, registered trademarks and registered service marks mentioned in this document or NetScout’s license agreement are properties of their respective owners, and protected as such against unlawful use or distribution.

NetScout Real-Time Monitor 1.3 Release Notes78-13357-01Copyright 2001 NetScout Systems, Inc. Printed in the USA.All rights reserved.

ContentsIntroduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Obtaining a License Activation Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1Probe Firmware Compatibilities with RTM v1.3 . . . . . . . . . . . . . . . . . . . . . . . . 1Setting NSM-in-Use Flag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Using a Proxy Server with RTM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2Using Real-Time Monitor with Third-Party Products . . . . . . . . . . . . . . . . . . . . . 2

Summary of New Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4nGenius Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Traffic Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Packet Analyzer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Improved Functionality . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Traffic Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

System Requirements and Compatibilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8nGenius Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Windows Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9UNIX Platforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10Real-Time Monitor Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Real-Time Monitor CD Contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12Documentation Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13nGenius Community Web Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13Corrected Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Packet Analyzer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14Traffic Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16nGenius Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17nGenius Server Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Known Issues and Workarounds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Packet Analyzer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Traffic Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19nGenius Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

v

Special Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24Synchronizing Passwords After Reinitializing Database . . . . . . . . . . . . . . . . . 24Accessing nGenius Servers Outside Firewalls . . . . . . . . . . . . . . . . . . . . . . . . 25Viewing VLAN Data Link Layer Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Real-Time Monitor v1.3 Physical Interface Limits . . . . . . . . . . . . . . . . . . . . . 26Relative Time Property for ASLA Monthly Reports . . . . . . . . . . . . . . . . . . . . . 27NSM Convert Zip File Message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Migrating the Real-Time Monitor v1.2 Database to v1.3 . . . . . . . . . . . . . . . . 27Roving with NAMs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28Applications Using RMI Port 1099 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28Using Online Help with Windows 2000 Client . . . . . . . . . . . . . . . . . . . . . . . . 28

Contact Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

vi

nGenius Real-Time Monitor 1.3Release Notes

IntroductionThis document describes the new functionality and enhancements found in nGenius Real-Time Monitor (RTM) v1.3. Only the release notes, installation guide, and online Help files have been updated for this release.

Before You BeginBefore you install RTM v1.3, you should be aware of the following information.

Obtaining a License Activation KeyBefore upgrading from RTM v1.2 to v1.3, you must obtain a license activation key from the NetScout Support web site. For more information, refer to the Obtaining License Activation Keys section in the Real-Time Monitor Installation Guide.

Probe Firmware Compatibilities with RTM v1.3With RTM v1.3, the Voice over Internet Protocol (VoIP) option is not compatible with NetScout Probe (NSP) v4.5.4, 4.7, or 5.0 firmware. The VoIP option is compatible with NSP v5.1 firmware in RTM v1.3.

-1

Setting NSM-in-Use FlagIf you install RTM v1.3 on a system where TrafficDirector has already been installed, the configuration settings for that particular machine will be controlled by RTM. To allow TrafficDirector to maintain control over the configuration settings, you must add the following line to the serverprivate.properties file:

stealth.nsminuse=true

Using a Proxy Server with RTMIf you are using a proxy server, then you must disable the Use Browser Settings option in the Java plug-in. If this option is not disabled, it will take the browser a long time to display the RTM interface.

To disable this option:

On Windows:

1 Select Start > Settings > Control Panel.

2 Click the Java Plug-in icon.

3 Click Proxies.

4 Select the Use Browser Settings checkbox to clear the checkmark. A checkmark indicates that the option is selected.

5 Click Apply.

On UNIX:

1 Navigate to <Java Plug-in install directory>/bin/control_panel.

2 Click Proxies.

3 Select the Use Browser Settings checkbox to clear the checkmark. A checkmark indicates that the option is selected.

4 Click Apply.

Using Real-Time Monitor with Third-Party ProductsBy default, RTM uses port number 8080 for client HTTP connection. If you are installing RTM on a system where a third-party product has already been installed, verify that this product does not use the same port number as RTM. If another product uses the same port number as RTM, conflicts will arise using RTM and the other third-party product will not operate properly.

You can change the RTM port number during the installation process or after installation by doing the following:

-2 Before You Begin

On Windows:

1 Navigate to the <nGenius>/bin directory.

2 Open the webstart.bat file.

3 Modify the NSAPACHEPORT variable to an unused port number.

4 Save and close the file.

On UNIX:


2 Open the start1 file.

3 Modify the NSAPACHEPORT variable to an unused port number.


After changing the port number, you must specify this new number in the URL when initially launching RTM.

-3

Summary of New FeaturesThe following new features have been implemented into RTM v1.3.

nGenius ServerPacket-Over-SONET (POS) Support - This feature allows you to add POS probes to the nGenius Server, configure and monitor traffic on devices, and decipher the following error types:

• Coding violation

• CRC/Align

• Loss of signal

• Out-of-frame

Monitoring Server and Database Processes - The new Watchdog application continuously monitors the state of the server java and database engine processes. Running in the background, it checks the status of both processes every 15 minutes.

If Watchdog detects a failure, it generates diagnostic data and stores it in a folder in the <nGenius>/log directory on the nGenius Server. The Watchdog application then launchs a script that notifies users of the event. Watchdog generates log files called “watchdogdebuglog-<day_of_week>.txt”.

System Performance Improvements - On the nGenius Server, overall system performance increased significantly by using the following techniques:

• Use of prioritized queuing which ensures that messages sent to the nGenius client systems have a higher priority than nGenius Server polling or logging activities

• Revamped Traffic Monitor architecture and improved use of database indexing which results in faster database queries of historical views

• Use of Java Runtime Environment (JRE) v1.3.1 which provides a higher performance runtime environment for nGenius Server and client machines. JRE v1.3.0 is still supported for CiscoWorks2000 customers.

Traffic MonitorVital Broadcast and Unicast Signs - This feature allows you to view the critical data (multicast, broadcast, and unicast) which identifies the factors that impact utilization of a monitored network segment for Short- and Long-term Usage views. Select Show > Vital Signs to enable this feature.

-4 Summary of New Features

Packet-Over-SONET (POS) Interfaces - This feature allows you to view POS error statistics in the Data Link view.

Data Capture - This feature allows you to access data capture and packet decode with Traffic Monitor.

Spanned Switch Interface Utilization - The algorithm that RTM uses to calculate utilization on spanned switch interfaces has changed to the basis of the speed of the source interface, instead of the destination interface.

For the Catalyst 5000 switch, significant differences should not occur as a result of this change. With an external probe or Catalyst 6000 NAM, however, the following significant differences should occur:

• If you span one port, then the speed used for utilization is the speed of the port.

• If you span multiple ports, then the speed used for utilization is the sum of all ports.

• If you span one or more Virtual Local Area Networks (VLANs), then the nGenius system does not display utilization amounts.

• If you span a Fast Ethernet Channel (FEC), then the nGenius system does not display utilization for the Datalink layer. However, for the Network and Application layers, the nGenius system uses the sum of the speed of their member ports to calculate utilization.

Packet AnalyzerProtocol Decodes - Protocol decode supports the following protocols:

• Skinny

• MGCP

• L2TP

• IPv6CP

• PPP and the following child protocols: PAP, LEX, SDTP, BAP, LQP, LCP, EAP, CHAP, MLP, MPPC, IPXCP, ECP, NBFCP, ATCP, BACP, XNSCP, SCDP, OSINLCP, LEXCP, CCP, BCP, IPCP, PPPoE, PPTP, DNCP, BVCP, SNACP

Packet-Over-SONET (POS) Decodes - POS decode support includes the following Decode window improvements:

• Save data capture files to your desktop

• View relative and delta time in decode window

• After applying a filter, you can reset the display to revert to a previous filter

-5

Saving Data Capture Files Locally - After uploading a data capture file from the probe, the file is automatically saved on the nGenius Server and displayed in the Files tab. You can also save this file on your local system for quick access.

To save the file locally:

1 Click the Files tab on the Packet Analyzer window.

2 Right-click on the file you want to save to your local system.

3 Select Local Save As.

4 Select the location on your local system where you want to store the file.

5 Click Save.

This feature is also available through the toolbar icon.

Viewing Decode Data in Relative/Delta Time in Decode Window - This new feature allows you to view decode data in absolute, delta, and relative time by activating checkboxes in the Decode menu selection on the main Packet Analyzer window. To view decode data in relative time, select Decode > Relative Time.

Resetting the Filter - After applying a filter, you can reset the display to revert to a previous filter or no filter (default) by clicking the Unset toolbar button in the Decode window.

DNS Name Resolution - DNS name resolution is now provided in all applicable views in Packet Analyzer.

Search Capability - You can now search for a specific frame in a captured file. To access the Search dialog box, click on the Search button in the main toolbar, select = decode 7 search, or press the Alt+F3 speed key. You can search based on the following criteria:

• Address - Search the captured file for frames containing a specific source or destination address in IP or MAC format.

• Protocol - Search the captured file for frames containing the specified protocol

• Frame Size - Search frames of a particular size or within a specific range.

Search Again - To repeat recent searches without redefining the criteria, you can click the Search Again icon in the main toolbar, select Decode > Search Again, or press the F3 speed key.

Shared Default Captured File Save As Type - In the Data Capture view, the private default captured file save as type has been changed to shared and it is now the default setting. To change the private default option, modify the client.properties file and specify the following parameter:

PA.capturedFile.saveType=private

-6 Summary of New Features

Detail and Hex Window Sharing Bytes - When selecting a node in the Detail window, the bytes that correspond to the specified node are now highlighted in the Hex window.

New Speed Keys - Several new speed keys are provided as follows:

Home - Go to first frame

End - Go to last frame

F7 - Go to previous frame

F8 - Go to next frame

F2 - Set the relative mark in Frame Summary view

F4 - Zoom in/zoom out for Frame Summary, Detail view, or Hex view

Alt F3 - Search a frame

F3 - Search a frame again based on defined search criteria

Display Option - By selecting the Display Option menu item, you can now select and deselect the columns to view in the Decode window.

Relative Mark - This feature allows you to set a reference point on a specific frame in the Frame Summary table. The cumulative bytes and relative time columns in the table display the date in relation to the selected frame. If these two columns are hidden, then they automatically display when the relative mark is set.

Tabbing in the View - You can now use the Tab key and Speed key to move between panels in the Decode view. You can also maximize one panel by pressing the F4 key and restore it by pressing F4 again.

Improved FunctionalityThe following improvements have been made to existing functionality with RTM v1.3.

Traffic MonitorDisplaying Two Decimal Point Values in Graphs - All Traffic Monitor views now display values in two decimal places.

All Hosts View Displays Additonal Information - The All Hosts view for RMON2 protocols now displays host name, vendor ID, and port number for the UDP_other and TCP_other domain.

Zoom In/Out of Graph Segments - Graph segments can now be expanded to view more detailed data.

-7

ed

System Requirements and CompatibilitiesWith RTM v1.3, NetScout Systems has revamped the system requirements and compatibilities to prepare for the future integration of Capacity Planner for Probes on nGenius Server with Real-Time Monitor. These changes are included in this section.

You can use RTM v1.3 with TrafficDirector and CiscoWorks2000. However, NetScout Systems recommends installing the nGenius Server on a dedicated system with a dedicated static IP address and not installing it on the same machine which is running TrafficDirector or CiscoWorks2000.

Note that RTM v1.3 supports up to 50 physical probe interfaces and 10,000 switch ports. For more information, refer to the Real-Time Monitor Installation Guide.

nGenius ServerTable 1 lists the memory recommendations for Windows and UNIX servers.

Windows PlatformsTable 2 lists the recommended specifications for RTM Windows servers.

Table 1 Memory Recommendations

Operating System Number of InterfacesRecommendedMemory Size

Windows 2000 or Windows NT

50 physical interfaces and 1000 virtual interfaces

2 GB

UNIX 50 physical interfaces and 1000 virtual interfaces

4 GB

Table 2 RTM Windows Server Recommendations

Item Recommendation

Operating System • Microsoft Windows NT 4.0 Server or Workstation with service pack 5.0 or 6.0a (English or Japanese)

• Microsoft Windows 2000 Professional, Server, or AdvancServer with service pack 2 (English or Japanese)

CPU Dual Pentium III 750 MHz.

-8 System Requirements and Compatibilities

o

ng

to

UNIX PlatformsTable 3 lists the recommended specifications for RTM UNIX servers.

Memory Recommended memory size varies (refer to Table 1)

Hard disk For optimum RTM performance, distribute storage across twphysical drives, as follows:

• Disk 0: for operating system

• Disk 1: for nGenius installation (Sybase)

Note: To calculate precise disk size recommendations for your environment, consult your NetScout Application Engineer (AE).

Minimum IDE disk 7200-RPM EIDE disk drive ATA-66/100.

Minimum SCSI disk 10,000-RPM (good) or 15,000-RPM (better) Ultra 160 rotatidisk drive with 160 MB/sec controller.

Network adapter 10/100 Ethernet adapter.

File system For installations on Windows platforms, you should use the NTFS-formatted hard disk (instead of FAT) to ensure the appropriate security. For instructions on converting from FATNTFS, refer to the Microsoft Windows NT documentation.

Note: You can convert from FAT to NTFS at any time.

IP address Dedicated (static) IP address.

Media device CD-ROM drive for reading RTM software.

Other requirements • Administrator access

• A pointing device, such as a mouse

Table 3 RTM UNIX Server Recommendations

Item Recommendation

Operating system • Sun Solaris 2.6, 7, or 8 (English or Japanese)

• HP-UX 11.0

• IBM-AIX 4.3.3

CPU Two-CPU 500 MHz (or higher).

Table 2 RTM Windows Server Recommendations (Continued)

Item Recommendation

-9

o

is

Real-Time Monitor ClientsTable 4 lists the recommendations for RTM clients.

Memory Recommended memory size varies (refer to Table 1)

Hard disk For optimum RTM performance, distribute storage across twphysical drives, as follows:

• Disk 0: for operating system

• Disk 1: for nGenius installation (Sybase)

Note: To determine disk space requirements suitable for your environment, consult your NetScout Application Engineer (AE).

Minimum disk 10,000 RPM SCSI disk with 160 MB/sec controller.

Network adapter 10/100 Ethernet adapter.

IP address Dedicated (static) IP address.

Media device CD-ROM drive for reading RTM software.

Other requirements • Root user privileges

• A pointing device, such as a mouse

Table 4 RTM Client Recommendations

Item Recommendation

Operating systems • Solaris 2.6, 7, or 8 (English or Japanese)

• HP-UX 11.0

• IBM-AIX 4.3.3

• Microsoft Windows NT 4.0 Server or Workstation with service pack 5 or 6.0a (English or Japanese)

• Microsoft Windows 2000 Professional, Server, or Advanced Server with service pack 2 (English or Japanese)

CPU Recommended processor speed is 350 MHz. A faster processor is desirable.

Memory Recommended memory size is 256 MB. Additional memory desirable.

Table 3 RTM UNIX Server Recommendations (Continued)

Item Recommendation

-10 System Requirements and Compatibilities

r

t

Real-Time Monitor CD ContentsTable 5 lists the contents of the three RTM v1.3 CDs. Install the CDs in the order shown in the table. For more information, refer to the Real-Time Monitor Installation Guide.

Hard disk Recommended free disk space is 100 MB. Additional disk space is desirable.

Web browsers RTM clients need one of the following browsers:

• Netscape 4.75 or later (except Netscape 6.0)

• Internet Explorer 5.5 or later

• Japanese only: Netscape 4.7 or earlier

You must install the Java plug-in and JRE on the client system.

Desktop display settings Recommended desktop area resolution is 1024 x 768. Higheresolution is desirable. For Windows platforms, the requiredcolor palette is True Color.

Other requirements A pointing device, such as a mouse.

Java Plug-ins For Solaris client machines: The Java Plug-in is available without charge at: http://java.sun.com/j2se/1.3/jre/

For HP-UX systems only: The Java Plug-in is available withoucharge at: http://www.hp.com/products1/unix/java/

For more information, refer to the Real-Time Monitor Installation Guide.

Table 5 RTM v1.3 CDs

CD Contents

nGenius Real-Time Monitor Packet Analyzer, Traffic Monitor, and nGenius Server

NetScout Manager Plus Import Utility

Patch Check Utility

Table 4 RTM Client Recommendations (Continued)

Item Recommendation

-11

h

te

r.

r.

,

Related DocumentationTable 6 lists the hardcopy documents and online Help files that support RTM v1.3. For hardware information, refer to the relevant NetScout probe documentation that ships with your device.

nGenius Real-Time Monitor Packet Analyzer Decode Engine

Packet Analyzer Decode Engine

nGenius Real-Time Monitor Third-party Applications (optional)

Netscape

Internet Explorer

Adobe Acrobat

Java Runtime Environment (JRE)

Note: The CD contains a separate directory for eacplatform. For Solaris and Windows platforms, both Japanese and English versions of the browsers, Adobe Acrobat, and the JRE are included in separasubdirectories. For HP-UX and IBM-AIX, some versions can be obtained only from the manufacture

Table 6 Hardcopy Documents and Online Help Files

Document Description

Real-Time Monitor Installation Guide This guide explains how to setup and install RTM.

Real-Time Monitor Configuration Guide This guide covers configuring the nGenius Server.

Getting Started with Traffic Monitor This guide helps you start using Traffic Monito

Getting Started with Packet Analyzer This guide helps you start using Packet Analyzer.

Online Help This set of online Help files provides comprehensive information on understandingconfiguring, and using the nGenius Real-TimeMonitor.

Table 5 RTM v1.3 CDs

CD Contents

-12 Related Documentation

h

h

>

Documentation IssuesTable 7 lists syntax errors found in the Real-Time Monitor Configuration Guide.

nGenius Community Web SiteThe nGenius Community Web site contains the latest version of the RTM documentation in PDF format.

To access the web site:

1 Open your web browser

2 Enter the http://www.netscout.com/ngeniuscomm web address

3 Select Help > Online documentation

4 Click the link to the nGenius Web site

To view the online documentation, you must have Adobe Acrobat Reader installed on your system. If you need to install the application, you can do so by doing one of the following:

• Run the Adobe Acrobat Reader setup program located on the RTM third-party CD.

Table 7 Syntax Errors in RTM Configuration Guide

Location Change

PDF version (page 43) Step 5

Current: <nGenius install directory>/bin/nGeniusImport.s

Change to: <nGenius install directory>\bin\nGeniusImport.bat

Current: <nGenius install directory>\bin\nGeniusImport.s

Change to: <nGenius install directory>/bin/nGeniusImport.bat


Current: Start > Programs > nGenius Server > Stop or Start

Change to: Start > Programs > NetScout nGenius Server Stop nGenius Server or Start nGenius Server


Current: “Run the Conversion Relearn”

Change to: “Choose the Run Conversion Relearn”

-13

r

• Download the Adobe Acrobat Reader setup program from the Adobe Web site.

Corrected ProblemsThe tables in this section list the bugs fixed since the last release of RTM.

Packet AnalyzerTable 8 lists the corrected problems for Packet Analyzer.

Table 8 Corrected Problems for Packet Analyzer

Defect Problem Solution

2652 In Decode window, filename and frame number were not referenced when printing hex data and filename was not referenced when printing detail data.

nGenius now prints data correctly.

2733 Copying previously captured files was slow.

nGenius now copies previously captured files faster.

3709 Post capture filtered data was not printing correctly.

nGenius now prints correct data

3734 After decoding a file, the copy decode was not working correctly.

Copy decode now works properly.

3828 Packet decode was not decoding packets beyond the first layer, when the packets were captured on a frame relay interface with raw header capture “on”.

Packet Analyzer now looks ahead foseveral bytes to determine upper layer protocol.

3860 Java Virtual Machine (JVM) terminates abnormally when performing large DNS loads.

Increased the DNS cache size to address this issue.

-14 Corrected Problems

h ll

ta

3919 When uploading was performed using the Sniffer and NetScout format, there was a significant difference in absolute time in the Summary window in Packet Analyzer.

nGenius now stores additional timestamp information for encodingDOS time format fields in Sniffer

3934 RTM v1.2 decoded packets that had complete Layer 2 headers even if later portions of the packets were damaged or truncated.

Because the decode display showed the Frame Too Short error message for packets which were smaller than the slice size, it was difficult to determine the actual frames which were damaged or truncated within the Layer 2 header information.

In the Frame Summary view in Packet Analyzer, the column that shows the frame status/error was labeled as Status instead of Error.

For the frame, this column now displays the status information whicwas received from the device. Also aFrame Too Short errors have been fixed.

3959 Cannot capture packets on channelized probes where the interface number is greater than 1942

Packet captures can now be performed when the interface number is greater than 1942 on channelized probes

3967 When packets were captured on a Frame Relay interface with raw header capture “on,” packet decode was not decoding the packets beyond the TCP/UDP layer.

As a result, decode was unable to determine correctly the various Frame Relay header information and proceed to the next layer.

nGenius can now properly decode these packets

4057 Receive errors when decoding compressed packets

Corrected the calculation of UDP da

Table 8 Corrected Problems for Packet Analyzer (Continued)


-15

d

Traffic MonitorTable 9 lists the corrected problems for Traffic Monitor.

4105 DNS packets captured on a Frame Relay interface were not getting decoded above the IP layer.

As a result, the IP packets were being decoded incorrectly and Packet Analyzer was not able to recognize correctly the upper layer protocols.

nGenius now decodes all layers of NAM files.

4135 Unable to capture more than 32MB of data.

Buffer size was increased to 32KB-64MB.

4286 nGenius displays “Frame too short” error message on frames captured on a WAN interface (with raw header “off”) for TCP packets.

This problem has been resolved.

4485 ATM packets (LAN emulation) were not getting decoded correctly, when the encapsulation was null and the probe had raw header capture on.

ATM decode logic has been modifieto check for null encapsulation andproceed with decoding.

Table 9 Corrected Problems for Traffic Monitor


4010 Traffic Monitor views are not displaying data consistently across interfaces.

Traffic Monitor views now display data consistently.

Table 8 Corrected Problems for Packet Analyzer (Continued)



n r, .

r

nGenius ServerTable 10 lists the corrected problems for nGenius Server.

Table 10 Corrected Problems for nGenius Server


3900 Interface speeds display as negative values in Device Detail.

Device Details now displays the correct values.

3964 nGenius Real-Time Monitor displays exception messages when adding a Cisco Catalyst 6000 switch with the MSM module into the Server.

RTM now learns all ports on the Catalyst 6000 MSM module withoutexceptions.

4430 User accounts that were created without a password cannot change their password.

Users can now change their password.

4561 nGenius Server hangs with 100% CPU utilization and displays the "Connection reset by peer, datagram peek failed" message continuously.

This problem has been resolved.

4568 Server Administration screen does not display ports that are not connected.

nGenius Server now displays ports on the Server Administration screeeven if the speed is 0. Traffic Monitohowever, does not display the ports

4596 HTTP tunneling does not work across the firewall in certain conditions.

This problem has been resolved. Foadditional information on HTTP tunneling, refer to the Real-Time Monitor Installation Guide.

4767 The nGenius Server polls inactive devices.

The nGenius Server no longer pollsinactive devices.

4856 Unable to contact or login remotely to probes over time.

RTM no longer loses contact with probes.

-17

r

nGenius Server DatabaseTable 12 lists the corrected problems for the nGenius Server database.

Table 11 Corrected Problems for nGenius Server Database


3984 Deleting a large number of aging records from the database terminates the dbsrv7 process.

RTM now deletes records in manageable sized blocks.

4078 dbinit generates Not Enough Memory error message when attempting to initialize the database.

Sybase Adaptive Server Anywhere foSolaris 7.0.2 solved the problem.


for ile

n

le

er,

Known Issues and WorkaroundsThe tables in this section list the known problems and workarounds for RTM v1.3. For additional information, visit the NetScout technical support knowledgebase which contains related documents, tips, FAQs, and suggested workarounds.

Packet AnalyzerTable 12 lists the known issues and workarounds for Packet Analyzer.

Traffic MonitorTable 13 lists the known issues and workarounds for Traffic Monitor.

Table 12 Known Issues and Workarounds for Packet Analyzer


5085 After performing a data capture and launching the Decode view, when you select another captured file to decode, the Decode view displays the old file.

Select Refresh before launching the Decode view the new file. The selected fthen opens in the Decode view.

Table 13 Known Issues and Workarounds for Traffic Monitor


4698 Network Layer and Application Layer views show traffic on the wrong roved switch VLAN interface.

From the nGenius Server, Cat5K roved three switch VLANs (Cisco_3, Cisco_4, and Cisco_5) to another Cat5k. The result was 10% HTTP traffic on one of the ports on Cisco_3. However, the Network and Application Layer views showed traffic on the Cisco_5 VLAN interface.

Perform a MIB walk to view the protocol statistics coming in for the VLAN Cisco_5.

This problem is a knowCisco switch device limitation with a workabsolution.

4706 The Network and Application Layer selections on a roved switch port on a Cisco Catalyst 5000 NAM switch do not always get enabled.

From the nGenius Servremove the roved portsfrom the Span window and re-rove the switch ports

-19

s

in d

.

le

nGenius ServerTable 14 lists the known issues and workarounds for nGenius Server.

4988 From All Applications or All Protocols, select a protocol and drill down to All Hosts/Conversations. The entire host/conv table is displayed instead of the hosts or conversations for the selected protocols.

There is no known solution available at thitime.

5067 RTM v1.3 does not support utilization for the following switched VLAN interfaces:

- TopN DL/NL/AL Hosts

- TopN DL/NL/AL Conversations

- TopN Protocols

- TopN Applications

- DL/NL/AL Host Usage

- DL/NL/AL Conversations Usage

Note that zero (0) is displayed for some views.

Do not select utilizationthe Show menu (insteabit rate, byte rate, and packet rate)

Table 14 Known Issues and Workarounds for nGenius Server


2392 After clearing the ExtendedRMON and RMON configuration date from the Cisco Catalyst 5000 switch and rebooting the switch, not all ports are relearned in the nGenius server.

Select the switch that does not display all the ports andclick Relearn.

3911 nGenius Server does not support NOV-NETB on the Catalyst 6000 NAM switch.

Use NOV_NETB instead of NOV-NETB.

4017 nGenius displays aCC Runtime Error message on HP/UX when attempting to initialize the database.

The error message does notaffect the operation of the program and can be ignored

4089 nGenius Server displays errors when executing “./dbinit.sh" from bin directory

Delete the <nGenius>/bin/stealth.db fiand run dbinit.sh.

Table 13 Known Issues and Workarounds for Traffic Monitor


-20 Known Issues and Workarounds

e

o

o

u

e

4320 nGenius Server displays event log errors on Windows NT systems

These errors do not affect thnGenius services and can beignored.

4467 When installing RTM on any system, it is possible to complete the installation by clicking Done without adding the licensing information

It is important that the licensing information is entered in order to use RTM.Do not complete the installation until all licensinginformation is entered.

For more information, refer tthe Real-Time Monitor Installation Guide.

4689 Switch VLAN shows incorrect port membership.

Delete and relearn switch.

4704 The speed of an external rove probe does not add up to the sum of all roved switch ports.

There is no known solution available at this time.

4872 nGenius Server does not change 6K NAM community strings when user changes switch.

If you use the Details panel tchange the read or write community string for a Catalyst 6000 switch, and yoare using a Network AnalysisModule (NAM) with that switch, then make sure thatyou click Relearn for that switch after changing the community strings.

Otherwise, nGenius Real-TimMonitor will still use the old community strings for the NAM. Note that community strings for the NAM must always match those being used for the switch.

Table 14 Known Issues and Workarounds for nGenius Server (Continued)


-21

o

k

5030 Unable to login to nGenius Server that is installed on a Japanese Sun Solaris system using a Japanese Windows NT client.

Verify that the international version of the Java plug-in (JRE v1.3.1) is installed on the nGenius client.

For more information, refer tthe Real-Time Monitor Installation Guide.

5079 Receive Storing Exception and none of the switch VLANs get learned when try to add the Cat2948g switch.


5099 Stopping and starting the nGenius Server does not always stop or start all processes.

After stopping the nGenius Server, wait a couple of minutes to allow the stop orstart services to fully complete.

5111 An error reading protocol message appears when some Cisco switches were added into RTM v1.3.


5135 On the Cat5k NAM switch, you cannot span a giga-bit switch port.

This is a known Cisco switchlimitation.

5145 The Relearn Conversion does not relearn any NSM imported switches.


5151 If you have a RTM v1.2 database greater than 2 gigabit in size, then you should back up this database to another partition prior to upgrading to RTM v1.3.

To use the dbbackup utility, type the following commandin a DOS window.

C:\RTM1.2\database>dbbacup -c “uid=netscout, pwd=database_password, dbf=stealth.db” E:\Database_BAK

5169 If you change the DCLI speed in the nGenius Server, then the speed change does not get updated in the Traffic Monitor and Packet Analyzer windows unless you relearn the probe.




-22 Known Issues and Workarounds

ill

5194 After relearning the Cat5K NAM switch and Cat6K NAM switch, access spanned VLAN or FEC generates exception errors in Packet Analyzer

After making changes to theswitch, do not relearn. Or, drdown to Packet Analyzer fromTraffic Monitor

Not available

Due to a Cat5K NAM switch limitation, you cannot span more than one giga-bit switch port from a nGenius Server

This is a known device limitation.

Not available

Launching a second nGenius module from CiscoWorks2000 results in the first module shutting down.

In the following example, the second nGenius module launched (Traffic Monitor) unexpectedly shuts down the first module (Server Administration):

1 Log in to CiscoWorks 2000

2 Select Management Connection > Connections > nGenius

3 Click an nGenius module (for example, Server Administration)

4 Log in to nGenius

5 Click another nGenius module (for example, Traffic Monitor)

At this point, the Server Administration process that you started in Step 3 unexpectedly shuts down.

Access additional nGenius modules from other modulesalready running.

Not available

Unable to create data capture session in Cat6509 switch running CatOS v6.2 software and receive "No Channels Available" error message

When all channels are beingused for the RTM interface, there will be no channels available for creating a datacapture session on a device.This is a known limitation.



-23

M er.

Special Considerations

Synchronizing Passwords After Reinitializing Database

If you change the database password, the new password is recorded in the db.properties file. When this occurs, the database password in the existing db.properties file does not match the new password in the enhanced or modified dbinit file. This mismatch of password names creates problems when attempting to reinitialize the database.

To change the password in the db.properties file after you have reinitialized the database:


2 Verify the password currently being used in the dbinit file as follows:

– Open the dbinit.bat or dbinit.sh file.

– Search for the dbisql parameter and verify the password name.

– Close the file.

3 Open the db.properties file.

4 Enter the password found in the dbinit file.


Not available

CiscoWorks2000 supports multi-homed servers but nGenius does not support multiple NICs on the same server

This is a known limitation.

Not available

Previously used secured usernames should not be used with RTM v1.3

This is a known limitation.

Not available

In the CiscoWorks2000 bundle system (Windows only), when both RTM and CSPM reporting (only support Windows OS) are installed, then one will not start properly because they both use HTTP port 8080 as the default.

Change the default for each product. or do not install RTand CSPM on the same serv



-24 Special Considerations

Accessing nGenius Servers Outside FirewallsWhen Network Address Translation (NAT) is being used in a monitored network environment, nGenius clients that reside outside of a firewall cannot connect to the nGenius Server that is installed and running inside the firewall.

To allow nGenius clients on either side of a firewall to properly connect to the nGenius Server, you must modify the client.properties and serverprivate.properties files as shown in the steps in this section.

For example, the IP address of the machine where RTM has been installed is 10.24.1.2 which resides inside the firewall. The host name of this machine is MyHostName. The IP address of 38.24.1.2 is the translated IP address of the nGenius Server which is viewed from outside the firewall.

To access an nGenius Server which resides outside of a firewall:

1 In the client.properties file, change the serveraddress to the hostname (instead of the internal IP address). For example, change “serveraddress=10.24.1.2” to “serveraddress=MyHostName”.

2 In the serverprivate.properties file, change the serveraddress to the hostname. For example, change “serveraddress=10.24.1.2” to “serveraddress=MyHostName”.

3 In the serverprivate.properties file, change the java.rmi.server.hostname so that it uses the hostname (instead of the IP Address where RTM was installed). For example, change “java.rmi.server.hostname=10.24.1.2” to “java.rmi.server.hostname=MyHostName”.

4 For all client PCs, edit the host table so that it includes the mapped nGenius server IP address. This specific IP address is the mapped IP address outside of the firewall in the monitored network configuration. While the actual host_name is the host name of the machine where the nGenius server has been installed. For example, on Windows NT systems add "38.24.1.2 MyHostName" into the Winnt\System32\Drivers\etc\hosts file. While for UNIX systems, add "38.24.1.2 MyHostName" into the /etc/hosts file.

-25

Viewing VLAN Data Link Layer StatisticsnGenius Real-Time Monitor derives data link layer statistics for VLANs from their member ports. As a result, the statistics you see for the VLAN are for the selected switch only. The statistics only count the packets passed within the switch and those passed in or out of the switch through the trunk. The statistics do not reflect the whole trunk.

For example, consider two switches each containing three user ports. Switch A has user ports C, D, E, and Switch B has user ports X, Y, Z. All six ports are members of VLAN 1.

In this case, when you select VLAN 1 under Switch B and launch the data link layer statistics, RTM aggregates the data link layer statistics in the following way:

Packets sent from C to D: counted 2 times

Packets sent from C to Z: counted once

Packets sent from X to Z: not counted

Real-Time Monitor v1.3 Physical Interface LimitsnGenius Real-Time Monitor now limits the number of physical interfaces that you can add to the nGenius Server. You can add up to 50 active probe physical interfaces and up to 10,000 active switch ports.

If you are upgrading from RTM v1.2, or if you are importing devices from TrafficDirector or CiscoWorks and have more than 50 physical interfaces, then you can use your existing devices with RTM v1.3. However, if you attempt to add more devices at this point, you will receive an error message that prevents you from adding devices. If this occurs, NetScout Systems recommends contacting NetScout Customer Support for help.

For more information, refer to System Requirements and Compatibilities.


Relative Time Property for ASLA Monthly ReportsThe new Relative Time property enables ASLA monthly reports to be generated from the beginning of the previous month (false) or from 30 days prior to the published or scheduled time (true). The syntax for this new property is shown below:

#Use relative time for monthly reports:

asla.param.month.relative=false(default)

For example, if the property is set to false and the current date is May 15th, then a generated monthly report would include data from April 1st through April 30th. Alternatively, if the property is set to true and the current date is May 15th, then a generated monthly report would include include data from April 15th through May 15th. Currently, nGenius Real-Time Monitor ages ART data after 30 days.

The reason for adding this property is that with current aging the only proper time to use an absolute time (false) is when a report is published or scheduled on the first of a month. In cases where a report is generated with an absolute time after the first of the month, you would not be able to get a complete month of data.

NSM Convert Zip File MessageWhen using the NSM Convert utility, you may encounter the following error message:

error creating zipfile: java.util.zip.zipException:ZIP file must have at least one entry

As a result, the database at this point does not contain any entries.

Migrating the Real-Time Monitor v1.2 Database to v1.3

To properly prepare to migrate the RTM v1.2 database to v1.3, you should back up your database first. When migrating to v1.3, there is a strong possibility that your database size could increase up to 15%, due to the schema indexing and new tables added to the database.

-27

Roving with NAMsWhen two ports are roved to one external probe, or Cisco Catalyst 6000 Network Address Module (NAM), the collected data for both ports is shown as aggregated data. The collected data is not separated by port. With roving or spanning, if you attempt to rove two ports to one external probe (or 6K NAM), then the probe (or NAM) aggregates or combines the data from both ports.

For example, consider spanning port A and port B to an external probe. To begin, port A counts 100 packets of data while port B counts 400 packets of data . If you then click on port A in Traffic Monitor, you will see a total of 500 packets of data (labeled multiple) to indicate its origin (aggregated data from both ports).

Applications Using RMI Port 1099If nGenius Real-Time Monitor is installed on a system, where no other applications are using RMI port 1099, then port 1099 will be used by RTM. If another application attempts to bind to port 1099 while nGenius is using this port, then the application will fail to bind to port 1099 and the nGenius Server will continue working properly. However, if the nGenius Server is not running when another application binds to port 1099, then the application will continue working successfully while the nGenius Server will not be able to start.

You can change the RMI port that nGenius Real-Time Monitor uses by manually editing the /bin/serverprivateproperties and /html/client.properties files and change the RMIRegistryPort=1099 to 1100 (or the next available TCP port).

Using Online Help with Windows 2000 ClientWhen using RTM v1.3 online help on a Windows 2000 client system and Internet Explorer web browser, you may encounter an error message which can be ignored. It does not adversely affect the operation of the help system in any way.


Contact Information

Contacting NetScout Systems

Customer SupportTelephone: In the US, call 888-357-7667; outside the US, call 978-614-4000. Phone support hours are 8 a.m. to 8 p.m. (EST). When calling, know the following: — Type of network platform — Software and firmware versions — Probe model number — License number and your organization’s nameEmail: [email protected]

SalesCall 800-357-7666 for the sales office nearest your location.

E-ServicesWeb Site Address: www.netscout.com/supportFrom the Support page, log in using your account password (or follow the instructions to create a new account) to access the following pages:Online Support Center — For FAQs and known issuesSoftware Downloads — (MasterCare Contract holders) Fordownloads, patches, updates, and customer-specific informationDocumentation — For NetScout product documentation (pdf format).

TrainingFor end-user and partners training information, and online course listings, access the web site Training link.

-29

http://www.netscout.com/support

-30 Contact Information

Date post:	28-Jul-2020
Category:	Documents
Upload:	others
View:	1 times
Download:	0 times