Hierarchical performance management using OAM MIB in ATM networks

The integration of Management Information Bases (MIBs) is one of the challenges of integrated network management. This is made more difficult by the existence of many different ways for structuring the MIB and defining managed objects. This paper addresses the issue of integrating GDMO-based MIBs created on the basis of different Management Information Models (MIMs). Three MIMs (NMF Library Release 1. 1, ITU-T M. 3100 and ETSI GOM) are analyzed with the help of a simple network configuration, and some MIM comparison criteria are proposed. The criteria can be used to assess the dificulty of integrating MIBs based on those models.

We propose a methodology for utilizing network management systems for the early detection of distributed denial of service (DDoS) attacks. Although there are quite a large number of events that are prior to an attack (e.g. suspicious log-ons, start of processes, addition of new files, sudden shifts in traffic, etc.), in this work we depend solely on information from MIB (management information base) traffic variables collected from the systems participating in the attack. Three types of DDoS attacks were effected on a research test bed, and MIB variables were recorded. Using these datasets, we show how there are indeed MIB-based precursors of DDoS attacks that render it possible to detect them before the target is shut down. Most importantly, we describe how the relevant MIB variables at the attacker can be extracted automatically using statistical tests for causality. It is shown that statistical tests applied in the time series of MIB traffic at the target and the attacker are effective in extracting the correct variables for monitoring in the attacker machine. Following the extraction of these key variables at the attacker, it is shown that an anomaly detection scheme, based on a simple model of the normal rate of change of the key MIBs can be used to determine statistical signatures of attacking behavior. These observations suggest the possibility of an entirely automated procedure centered on network management systems for detecting precursors of distributed denial of service attacks, and responding to them.

Today few organizations have a thorough understanding of what is on their networks at any given time. This study tries to develop Computer and Network Asset Manager (CNAM) that is a network management application which helps large enterprises, and Small medium enterprises (SMEs) service providers, manage their data centers and IT infrastructure efficiently and cost effectively. CANM collects information on all hardware components of the network instruments that are on the network. In this project, a real-time network monitoring method is suggested for dynamic information to reduce the complexity and cost based on network management. In the proposed method, a Simple Network Management Protocol (SNMP) is first used to collect data for start interaction between equipment in the specific data center, to gather these data SNMP would need to request it from Management Information Base (MIB) that served as a database for stored information. Furthermore, to ensure data authenticity in the management station that fetches real-time data periodically from equipment, network engineer would have to manually key-in static information into CNAM when it was first launched. The SNMP would then pick up on this stored static information and automatically began collecting real-time data; this feature will be developed with the help of Model View Controller (MVC) pattern that is a software pattern for implementing user interfaces. It allows users to have interaction with the CNAM as well as input the related data. The object oriented approach shall be used to implement SNMP and MIB which represents system management information. Web Based Enterprise Management (WBEM) is required in order to transfer protocol like SNMP, as well as to enter the actual data manually for further authenticity with the real time data. This study would hopefully encourage companies to try an interactive solution for problem in managing their equipment in the data center.

The paper presents Interact-DDM (interact - domestic device management), a solution that integrates domestic devices with traditional computer networks. The architecture proposal is based on TCP/IP network management standards: SNMP protocol and management information bases (MIB). The centralized management operation has been enhanced with additional capabilities integrated on the agents. The design has been performed permitting a very flexible device definition and dynamic configuration. This is achieved by the meta-definition of devices in the system MIB. A laboratory experiment has been deployed to check and validate the design proposed, where multiple configurations have been tested, and the design modularity has been proved.

A consistency constraint exists between two objects in a network management information base (MIB) if a change in value of one object will cause a change in another. Based on the definition of common knowledge, such constraints can be classified by the time needed to maintain them and the probability of correctly maintaining them. The practical issues of how to build an MIB with a set of objects and consistency constraints are discussed. Various kinds of consistency constraints and their relations with common knowledge are described. Also introduced is the concept of a consistency hierarchy, which presents a gateway between consistency constraints and the management protocols that would actually maintain the consistency between network entities. Building a network management information model using consistency constraints is considered. >

Key areas of agreement and disagreement in the network management community are presented using the evolving open systems interconnection network management architecture as an informal guide. A key observation is that the open-networking community has apparently settled on a management model that places management information base (MIB) on each network node and manages these MIBs remotely with application level protocols. Various network systems based on this model are examined, along with some systems that use alternative management architectures.< <ETX xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">&gt;</ETX>

The Remote network-MONitoring (RMON) standard is a valuable addition to the Simple Network Management Protocol (SNMP), providing network managers with important global network information. Unlike SNMP agents, RMON agents operate in promiscuous mode and process all packets traversing the local net. The RMON management information base (MIB) supplements the SNMP MIB-II standard MIB. We present common network problems that cannot be solved using existing MIB-II or RMON objects. To solve these problems, we develop extensions to the RMON matrix group to gather network layer statistics that result in a view of packet traffic beyond the local network. Our extensions increase the ability to analyze and solve network configuration problems and perform troubleshooting. We demonstrate our results by implementing and analyzing two “live” internetworking problems. Data collected from these experiments showed that network traffic patterns can be isolated by individual subnets, thus more easily identifying sources of congestion.

Wireless Sensor Networks (WSNs) have attracted significant research interest in recent years because of their suitability to a wide range of real world applications. The envisioned Internet Protocol (IP) support for WSNs requires interoperability with existing management solutions, like Simple Network Management Protocol (SNMP), in order to provide remote management functionality and assure the correct operation of the WSN. It is essential to provide a network management system that is interoperable with standard network management solutions, customizable, and extensible to various WSN applications. In this paper we present work in progress on our EmNetS Network Management Protocol (EMP), a lightweight and SNMP-compliant IP-based WSN (IP-WSN) management solution. We present detailed operational architecture and a Management Information Base (MIB) which is extensible to IP-WSN applications. We also present implementation details and preliminary results from our laboratory testbed.

Two alternative customer network management (CNM) access configurations for the user's network management station to access a public carrier's CNM system using the simple network management protocol (SNMP) are described. In addition, a management information base containing UNI management information is developed along with CNM service capabilities that enable permanent virtual connection (PVC) service users to manage their access to and use of the B-ISDN transport network and services. The CNM service capabilities support proactive management tools that alert PVC service users to developing problems in their communications network of which the B-ISDN network and services are parts and enable users to take corrective action to avoid a network collapse.< <ETX xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">&gt;</ETX>

To develop a network management system (NMS) more easily, the authors developed an application programming interface (API) for configuring network devices. Because this API is used in a Java development environment, an NMS can be developed by utilizing the API and other commonly available Java libraries. It is thus possible to easily develop an NMS that is highly compatible with other IT systems. And operations that are generated from the API and that are exchanged between the NMS and network devices are based on NETCONF, which is standardized by the Internet Engineering Task Force (IETF) as a next-generation network-configuration protocol. Adopting a standardized technology ensures that the NMS developed by using the API can manage network devices provided from multi-vendors in a unified manner. Furthermore, the configuration items exchanged over NETCONF are specified in an object-oriented design. They are therefore easier to manage than such items in the Management Information Base (MIB), which is defined as data to be managed by the Simple Network Management Protocol (SNMP). We actually developed several NMSs by using the API. Evaluation of these NMSs showed that, in terms of configuration time and development time, the NMS developed by using the API performed as well as NMSs developed by using a command line interface (CLI) and SNMP. The NMS developed by using the API showed feasibility to achieve “autonomic network management” and “high interoperability with IT systems.”

SUMMARYIn this paper, we propose a new network management protocol to address the unique challenges of managing cognitive radio ad hoc networks that have distributed, multihop architectures with dynamic spectrum availability. We focus on performance management for these networks, and address the problem of network congestion for secondary users, because of its significant impact on data throughput. Specifically, we define a performance metric, the average congestion level of the network, and derive it analytically as a function of the primary users’ activities and the secondary users’ strategy. For practical implementation, we further propose a cluster‐based management architecture that utilizes a designated central manager and cluster heads that function as distributed managers. The cluster heads collect information from multiple layers of the protocol stack using new MIB (management information base) variables to capture the characteristics of cognitive radio ad hoc networks, such as the location‐dependent spectrum availability. The objective of the management action is to utilize a network‐level view of the congestion situation in the network by directing the secondary users to select the highest‐quality links available and avoid congested clusters. This hierarchical networkmanagement design allows us to take advantage of its scalability to achieve near‐real‐time management. Numerical results demonstrate the effectiveness of the proposed scheme. Copyright © 2013 John Wiley &amp; Sons, Ltd.

SHAMAN (Spreadsheet-based Hierarchical Architecture for MANagement) is a novel management framework developed at the University of Delaware; it extends the traditional flat SNMP (simple network management protocol) management model to a hierarchical architecture. Effective management of battlefield networks requires such a hierarchical management architecture wherein managers can dynamically delegate management tasks to intermediate managers. The SHAMAN framework includes a spreadsheet-based intermediate manager with a scripting language and MIB (management information base), a polling subsystem and an event model; a prototype implementation of the system is available (see http://www.cis.udel.edu//spl sim/shaman). Our research has explored several applications of the SHAMAN system to tactical battlefield networks for the US Army. Described applications include a location management application, an application to reconfigure the dynamically changing topology of tactical internets, and another application to interface with OPNET simulations of battlefield networks.

Security policy and security techniques have long been major research topics, but little work has been reported on management of distributed security applications other than Intrusion Detection Systems (IDS). We believe management of secure applications will see dramatic growth as adequate tools become available. This paper reviews security management issues and suggests management objects for use by Simple Network Management Protocol (SNMP) tools to collect, log, and display events and alert operators to possible trouble. We focus on the issues of adapting the necessary status and control mechanisms (management infrastructure and agents) to accommodate security management needs. To make a complete security Management Information Base (MIB), additional MIB modules must be defined for firewalls (packet filtering and proxy servers), security audit trails and IDS management parameters. Security firewalls and IDS applications are assessed for management via SNMP and are proposed as future case studies. The Packet Filter Information Protocol (PFIP) is presented as a method to allow propagation of packet filter information among compatible firewall hosts and routers in an IP-based network. We use a scenario of corporate firewalls to assess concepts of correctness, sufficiency and completeness. The properties of SNMP, version 2 that support secure management operations are reviewed and we propose further work toward an SNMP-based Security Management prototype.KeywordsFirewallsManagement Information Base (MIB)Network ManagementSNMPPacket Filter Information Protocol (PFIP)Security Application ManagementSecurity Management.

This paper presents Virtual-Machines-MIB, a MIB (Management Information Base) directed to virtual machines management through SNMP (Simple Network Management Protocol). Virtual-Machines-MIB aims to define a standard interface of virtual machines management, allowing the management of several virtual machines monitors, like Xen, KVM and VMWare, with a common SNMP management tool. Different from previous virtual machines management MIBs, which allows the manager to perform only monitoring operations, Virtual-Machines-MIB allows to perform control operations, like create, delete, restart, turn on, pause and shut down virtual machines. It is also possible to use the proposed solution to change a virtual machine's name, amount of RAM, virtual CPU's and virtual storage drives. Practical results are presented using ordinary SNMP management tools performing KVM and Xen management. To do this, SNMP agents which support Virtual-Machines-MIB were developed and installed on KVM and Xen hosts. These SNMP agents are based on NET-SNMP public domain's agent, that was extended to support Virtual-Machines-MIB using libvirt API.

The past decade has seen the rapid development of the Internet in many areas. Nowadays, the internet is used widely in every organization. People also have internet usage 24 hours a day. Hence, it is important to monitor the working situation of network equipment all day long. This research is applied Internet of Things and Cloud Computing technology to monitor the operation of computer network devices by monitoring the network condition to be stable, secure, check the operation of the network, record working status and send alerting the administrator. In large scale networks, various problems are often encountered, such as when the server is unavailable due to too many users or when there are network users too much will cause the network to be slow or may not work. For example, which the device may be overused or some error occurs. This proposed platform can analyze problems that may occur in the future, will help reduce costs and damage that will occur when damaged or unusable. Also, it can also analyze the data to reduce the risk that may affect the network. It will be able to use various information to improve network performance, allows administrators to check managing network systems at the same time, multiple machines, and all over. In this testbed experiment, there are a total of 8 network equipment involved. Each device has approximately 48 interfaces, with each interface having an average 5 value. Therefore, the amount of traffic on the network shown is enormous. Researcher studies how to be sure that all data displayed in the system is accurate and reliable. In the process of retrieving the value, the OIDs (Object Identifier) in the MIB (Management Information Base). Hierarchy of each device have different values depending on the model, model type and brand of the device. How to be sure that the value retrieved is displayed as the correct value? Because if the OID value is incorrect, the value received will also be incorrect. The interpretation of the system administrator is also wrong. Another issue is that the values stored in the MIB Database are stored in raw ASCII format. When sending values to a machine that acts as an SNMP manager, the file is in binary format which is an unreadable value. Therefore, in this research, the interpretation of the value obtained must be correctly interpreted is a readable value and is in the unit of the correct value display. In this experiment, using the Raspberry Pi 3 board.