Feature list
Table
of contents
Table of contents
LoriotPro
Overall characteristics
Functional
Technical
License
and versioning
Graphical
User Interface Characteristics
Directory
of network and system resources
Host
Management
Host
with dynamic IP address support
Router
Management
Router
Tree
Active
View Box
Router
troubleshooting - Trace Route Discover
Router
troubleshooting - InterNetwork path route
Cisco
Router troubleshooting – Cisco ISDN Stats
Cisco
Router troubleshooting – Cisco ISDN call collector
Cisco
Router troubleshooting – Cisco IOS configuration surveyor
Ethernet
Switch management
Spanning
Tree Monitoring
IP
Network topology discovering
The
Discover process
IP
Scanner
Netbios
Name Resolver
Trace
Route Discover
Connectivity
and availability monitoring (polling)
The
Health Control Center
Monitoring
networks, systems and applications
Monitor
network applications
System
process monitoring - Process Surveyor
Topology
Map and Active View
InterNetwork
Map and subMap
Miniature
Map (MiniMap)
Directory
Map
Active
View
Performance
management, load measurement
Linear
real time Graphic
Trend
Graphic
Vumeter Graphic
MIB
management
MIB
Database and MIB tree
SNMP
walker
Advanced
SNMP Query)
Event
and SNMP Trap management
Event
management
Trap (SNMP
v1) et Notification (SNMP v2c) management
Trap
simulator
Reporting
WEB
Remote Access
Interface
with DataBase
Monitor availability and performance of any type
of IP connected hardware and software, workstation, printer, routers,
switches, servers, UPS, OS, applications.
Display the current availability status through
visual and graphical representation.
Monitor smart infrastructures (video camera, information
appliances, and sensor devices)
Discover, manage and classify connected hardware
and software resources. Perform inventory and reporting.
Set functional conditions and thresholds that
generate events. Gather, filter and store those events, alerts,
alarms and messages. Alert and notify administrators of critical
network and system status.
Designed for NOC (Network Operation Center) with
multi windows capabilities
Performance and load measurement, rendered in
real time graph, trend graph, counter and gauge graph.
Help administrator to locate the origins of failures
and provide him diagnostic and analytical tool.
Provide resource consumption accounting tool for
ISDN links

Network, system and IP infrastructure monitoring
using IP and SNMP protocols.
LoriotPro is fully compatible with SNMP version 1 and 2c, and partially
compatible with version 3.
Only SNMP v3 authentication is supported
in HMAC-MD5-96.
Works under and designed for Microsoft Windows
2000 and XP pro. Works in single user mode.
LoriotPro can be used in a hierarchical and/or
distributed monitoring mode.
Software in English.
Documentation in English.
Remote access by WEB navigator (HTML, Java) and
multi user mode with user access control.
Can be start as a Windows application or a Windows service.
High- technology based on indexed files. LoriotPro is a standalone application
and does not require any external application like WEB server, Database etc.
LoriotPro does not work in client/server mode (exception of the remote access).
The WEB Server for the remote access in build
in and external WBE server are not required.
LoriotPro is installed and can start to monitor your network in less than 10
minutes.
The LoriotPro Plug-in technology provides scalability and adaptability. Plug-in
offers several advantages, they are loaded on demand sparing memory consumption
and they are open to external development.
Automatic discovering of network topology, IP
infrastructure, hosts and systems.
LoriotPro can be self monitored by an external Watchdog
Interfaced to a SMTP server for E-mail.
Interfaced with SYSLOG Unix server.
Software written in C++ language, using Windows Threading technology.

Since the version 4, LoriotPro is available in
4 editions.
LoriotPro Extended Edition offers complementary functions (Plug-in) with advanced
features (RRD support, SLA …)
By default LoriotPro is available in evaluation mode. By default the evaluation
period is one month from the date of installation. The activation of the
product is realized by a software key.
LoriotPro SE or EE is not limited on the number of IP nodes that it can monitor
and manage.
LoriotPro license in Standard or Extended edition is not time limited.
Luteus releases one major version par year in average.
A major version is considered as a new product and is not an upgrade. The configuration
of an old version can be migrated to a new major installed version.
Minor versions are frequently available and provide
new features and bug corrections (3 to 4 per year in average).
A minor version is installed on a major version of the same level.

Graphical and object oriented local Console in
multi windows environment. Independent detachable and resizable
windows.
WEB interface Remote console (Internet Explorer).
Menu and contextual menu, customizable menu options.
Fixed and floating tool bars.
Customizable interface look.

The directory contains the resources of your information
system. Each of them has attached parameters that will be use by
LoriotPro to monitor them.
The directory database is displayed as a hierarchical
tree. It will be entirely up to you to organize the tree structure.
LoriotPro organize it by network during the discover process.
A resource is a node or a leaf object in the tree. Nodes
can be country, organization, organization unit, network, host
and task (Plug-in)
The tree is dynamic, each node own a color status
that is updated by the poller process.
You can have only one tree loaded, but you can
save multiple tree structure in file and call them on demand.
The correlation of the status between father and
child nodes is dynamic. The father has always the same status than
its worst child status
Insert and export of directory branch is allowed.
Branch(es) and object(s) can be moved individually
or by group with the Directory Organizer tool.
Settings (for example SNMP community) of a group
of hosts can be change in bulk. (Bulk configuration tool)

The host object is the “corner stone” of
the LoriotPro Directory . This object is used every where in the
software each time a SNMP request is performed.
The HOST terminology comes from the UNIX world
and defines any physical entity, a workstation, a server, a router,
a printer, that is connected to the network and has an IP address.
A LoriotPro Host has a unique IP address.
A router or a Multi-Homed server is considered
as multiple hosts by LoriotPro. One host is available as an object
of the directory for each physical or logical interface of the
router having an IP address.
Each host as a set of properties:
- A name (initially learned from DNS, Netbios,
SNMP)
- Its SNMP type (host, server, hub, switch ..)
- One IP address
- One IP address alias
- Read SNMP community
- Read/Write SNMP community
- An icon type (assign by default but can be
user define)
- The SNMP UDP listen port
- The host agent SNMP version (v1, v2c, v3)
- The action of a mouse double click on the directory
host object
- 3 user defined string that can be use by the
search engine to locate the host.
- The router or multi-homed system to which this
host pertains (when applicable)
- The permission flag that lets the discover
process to use this host.
- The polling interval.
- The polling mode (IP ping or SNMP ping).
- Polling script.
- Unanswered polling threshold of the status
4 (red)
- Unanswered polling threshold of the status
3 (yellow)
- One maintenance period exclusion
- Dynamic address resolution of DHCP-DDNS host.
- SLA collection
Performance information: Graphic of the last 100
polling with round trip time value and in percentage.

Support of host with dynamic IP address. This
function requires a DHCP-DDNS environment
The router tree displays the router devices and
their interfaces. Any device that is acting as an IP router can
be added to the tree.
The tree displays for each router interface the
current load in %. The calculation is based on the incoming and
outgoing traffic.
Icons can open a Telnet or a WEB access on a router.
Locate the router on the InterNetwork map.

Display a virtual view of a host/router device
including all discovered interface.
The Trace Route Discover tool performs a text
and graphical continuous Trace Route. (By default limited to 10
cycles).
Provide current, maximum, minimum average Round
Trip Time (RFC 1393).
Display a graphical real time graph (limited to
30 hops)
Resolve intermediate hops names with DNS.
Can export new discovered entries to the Directory.
Discover the routing path of IP packets between
two IP addresses. Displays network and router interface used by
an IP packet traveling from one host to another host (unicast packet).
Graph the path on an InterNetwork Map.
Use router routing tables. (required a full SNMP
aware network).

This program exploits the log files generated
by the Cisco ISDN call collector
Provide for each source/destination peer:
- the number of calls and their duration
- the average duration per call
- the call with has the maximum duration
- the sum of the duration of all the incoming
outgoing calls
- the sum of the previous sum
This statistic could be done per day, or on a
range of days
Filters could be applied to select for example
a specific destination.
Statistic files can be saved and compressed.
Results are immediately displayed but could be
saved in a report in html format for further reading.

Cisco Router troubleshooting – Cisco ISDN call collector
Perform a regular reading of ISDN calls performed
by a CISCO router.
Collect and store the call history table of a
Cisco router in log file (CSV or HTML format).
Display the current active calls and the closed
calls of the last 15 minutes.
The log contains the call duration, the calling
and called number, interface number, destination Name, disconnect
cause, connection and disconnection time.
Require the Cisco-Call-History.mib support.
The Cisco IOS surveyor program follows the current
level of the configuration of your Cisco routers.
If perform a save of the current configuration
to the TFTP server when change occurs
Warn you by an alarm when a TFTP is performed
Settable polling interval

The monitoring of Ethernet switch working in Spanning
Tree can be monitor by the Spanning Tree Bridge Map program.
Standard supported: RFC 1493
Display a MAP of the switches, ports and links
with the Spanning Tree support enable are displayed.
The color of Uplinks and ports depends of their
status.
(disable, blocking, learning, listening, forwarding,
broken)
Support of multi-instance spanning tree (VLAN)
for switches following the Cisco standard.

At first startup, a LoriotPro wizard can help
you to discover all the information system (IP resources) and populate
the directory and the Maps.
The Wizard uses the LoriotPro system settings
and two complementary programs, the Discover Process and the IP
Scanner.
The Discover Process can run in background mode. The
running interval is settable.
For each discovered host, a host name, the IP
address, the IP mask, the MAC address, the SNMP capabilities are
recorded in the Directory database.
Host name can be learned from SNMP (sysname),
DNS or Netbios name.
Based on an advanced discover algorithm that uses
IP ping and SNMP access. Settable discover limit in number of router
hops (by default 5).
Discover networks from the first SNMP seed router
or from a remote SNMP seed router.
Discover hosts by IP subnet by reading router
routing and ARP table.
Automatically distribute hosts in the right network
Directory container
Assign the default setting to discovered hosts.
Including: Polling parameters, SNMP communities,
SNMP version.
Alert you when a new host or network is discovered
(event number 1 and 2).
Can send Syslog messages on new discovered host.

Discover hosts and network by IP range scanning.
Discover SNMP V1 and V2c host with settable RO
and RW community.
Populate the Directory and the Map with discovered
hosts. DNS name resolution
Assign default settings to the new discovered
hosts.
The Netbios Name Resolver can help you to add
Microsoft or Netbios aware resource in the Directory and on the
Map
The Trace Route Discover can discover network
and host by performing an IP Trace Route (RFC 1393).
Host and network discover along the route can
be added to the directory and Maps.

Connectivity and availability monitoring (polling)
Monitoring, the main role of LoriotPro is done
by a polling process running in background. It is continuously
checking the connectivity and the availability of the monitored
IP hosts.
LoriotPro uses a high-performance, asynchronous
poller. The polling is performed for each host at a defined rate
that is independent of poll response times. LoriotPro poller achieves
that by using two asynchronous threads: one that sends polls and
one that receives polls. Because the send and receive threads operate
asynchronously, slow response times or excessive timeouts do not
affect the polling rate.
Five statuses are defined to display the level
of connectivity.
Status 0 Purple Host is
not in the polling list
Status 1 Blue Host
is answering to ICMP Ping
Status 2 Green Host is
answering to a SNMP request
Status 3 Yellow Host is
temporary not responding
Status 4 Red Host
is not longer answering
When the element fails to respond, it moves to
the Yellow state. If the maximum failure retry count is exceeded
before a successful ICMP poll occurs, the element moves to the
red state.
The poller does not poll the element again until
the next scheduled polling cycle.
An element stays in the Red state until it fails
to respond to an ICMP/SNMP poll.
SNMP polling uses the mandatory MIB2 sysname object.
Polling can also be performed on a set of SNMP
object defined in a script
Individual setting of the polling interval for
each IP host
Update the directory tree and maps with current
status
Conditional send of SYSLOG message on status
changes.
Per host:
- Configurable polling interval (By default 60
seconds, minimum 5 seconds)
- Configurable red status threshold (unreachable
host) (4 by default)
- Configurable yellow status (temporary unreachable
host)
- One configurable maintenance operation for
polling and event exclusion
- Conditional polling based on a secondary host
unreachable status (red).
- Conditional polling based on a secondary host
reachable status (blue or green).
Saving of the polling results in files (HTML or
CSV) including round trip delay. These values are used for SLA
reports.

The Health Control Center
The Health Control Center allows you to display
in few mouse clicks directory objects filtered by type and current
availability status.
Monitor hundreds of host status and performance
of SNMP object with Bulk Threshold Control.
Trigger action(s) when a value threshold is reached.
Compare value on string or integer types.
Trigger on state change and on level.

Monitor servers and applications with the "Bulk
TCP Control”.
Use TCP port and simulate client connection (WEB,
FTP, TELNET…
Set up hundreds of monitoring probe in few mouse
clicks.
Send event that can trigger action when status
change (TCP port up or down)
Detect port status and status change. (level Up
and Down)
Monitor process status of operating system.
Require an Operating system (Windows, Linux, Unix …)
with the Host Ressource MIB support (rfc 2790).
Send event that can trigger action when status
change
Detect any new created process and generate event/alarm
Detect any missing process and generate event/alarm

Graphical and hierarchical view and navigation
of IP networks in bitmap mode
The InterNetwork Map provides real-time, visual
state of IP connections, router and IP sub networks. If a router
fails, an interface becomes unreachable, the administrator is instantly
alerted by a visual representation of the status in red.
Sub map displays all IP hosts located in an IP
sub network and their current status.
Statuses are update in real time by a background
polling process.
Display IP networks and IP hosts with various
icons helping you to identify what is the type of the device.
The background of the InterNetwork map can be
customized with a static country map (in EMF format)
Moving of any elements of the map is a simple
drag and drop, the saving of the element new position is automatic.
The status of a network icon in the interNetwork
map reflects the worst host status located in this IP sub network.
Elements on the Map can be displayed with their
IP address or by their directory name.
Search for a network element and for an area on
the map can be realized from the search tool bar. The finding element
is also selected in the directory tree.

The MiniMap displays a small view of the global
Internetwork Map.
The MiniMap is dynamic, object colors reflect
their current availability status.
A mouse click in the MiniMap pops up the InterNetwork
Map and locates the selected object in it.
A directory Map displays one level of the directory
as Map and icons.
The hierarchical navigation between maps follows
the directory tree structure.
Directory Map object colors reflect their current
availability status.
Active Views are graphic representation of infrastructures,
networks, applications, logical schema or hardware devices.
Active Views are designed by you in editing mode,
after creation Active Views are used in monitor mode.
Active View contains dynamic and static objects.
An Active View object is a single graphic element
that could be as simple as a line, a rectangle or a circle but
it can also be a complex clipart.
Colors of dynamic objects reflect a status or
a level of one element of your network and system infrastructure.
The background color of a dynamic object can be
linked to:
- The availability status of a host
- The value of a single SNMP object (for example
the current cpu utilization)
- The counter value of received Traps with a
specific type
- The counter value of received events with a
specific type
- The counter value of received Traps by a specific
host
- The counter value of received events by a specific
host
- The counter value of a matched event filter
- The counter value of a matched Trap filter
Object of counter type displays a direct value.
For each dynamic object a set of filter rules
can defined the object color and generate an event.
Collected values are compared with mathematical
expressions:
- Equal
- Superior
- Inferior
- Different
- Superior or equal
- Inferior or equal
- Contains character string
Set of rules can be saved as a profile and reused
in any Active View.
Dynamic object are refresh at polling interval.
The minimum polling interval frequency is 15 seconds.
Each Active View object can have its own contextual
menu. Contextual menu are extremely modular and can be extend in
edit mode.
The contextual menu options can :
- call and display another ActiveView or a Plug-in
- run a Dos or windows executable program or
script
- open a WEB page hyperlink
- run LoriotPro tool (Direct Plugin)
- display a SNMP table
- display report LoriotPro
- run a LoriotPro script
- display another ActiveView (modale mode)
- change the value of a SNMP object with a SNMP
SET command
- reset the counter value of received events
with a specific type
- reset the counter value of received Traps by
a specific host
- reset the counter value of received events
by a specific host
- reset the counter value of a matched event
filter
- reset the counter value of a matched Trap filter
A large library of ClipArt (EMF format) is provided
and helps you to built realistic view.
Use standard vector graphic format EMF and WMF
compatible with Microsoft Visio, Adobe Illustrator. Import of ClipArt
from Visio or Adobe possible.
The edit mode provides a rich design environment.
- Standard shape creation, rectangle line, circle,
filled or empty.
- Shape alignment and multi selection drag and
drop
- Connection between object
- Calc management
- Spacing
- Zoom from 10 to 400
- Font type, size and color
- Line type width and color

Linear Graph displays in real time the value of
two SNMP objects.
Ideal for monitoring fast changing value, interface
traffic, cpu load, error rate …
Setup options are :
- Selection of two SNMP object
- SNMP Counter of gauge Variables supported
- Memorize and display the maximum value
- Dynamic Y scale
- Minimum and maximum of the Y scale
- Dynamic X scale relative to polling period
- Polling interval of 5 seconds minimum
- Customized colors
SNMP object selection by wizard offering a graphical
display of the MIB tree and the SNMP index selector.

Graph the trend of two SNMP objects. Objects should
be of counter or gauge type.
Based on MRTG concept and use of rateup.
Provide a list of profile for most common managed
object (network interface, cpu, disk, tcp connection, frame relay
error etc.).
SNMP object selection by wizard offering a graphical
display of the MIB tree and the SNMP index selector.
Display options :
- Display two SNMP object on the graph.
- Display peak value
- SNMP Counter of gauge Variables supported
- Conversion from bytes to bits and bits to bytes
- Dynamic Y scale
- 5 minutes minimum plotting interval (trend)
- Customized colors
- Customized graphic size
- Customized legend
- Customized Y legend
- Display limit values
- Customized report
The report displays 4 graphics:
- Daily graph (A sample each 5 minutes – average)
- Weekly graph (A sample each 30 minutes – average)
- Monthly graph (A sample each 2 hours – average)
- Yearly graph (A sample each 24 hours – average)
Fixed database size avoiding management needs
(type MRTG)

Vumeter Graphic
Graphical display of a single SNMP object in a Vumeter
look
Setup options are :
- Selection of one SNMP object
- SNMP Counter of gauge Variables supported
- Polling interval of 5 seconds minimum
- Customized skins
- Send Event on threshold value
SNMP object selection by wizard offering a graphical
display of the MIB tree and the SNMP index selector.

MIB management
MIB, management Information Base, are files containing
the list of SNMP management objects dedicated to a specific technology
or a product.
LoriotPro support all SMI v1 and V2 compliant
MIB files. SMI standard defines the syntax and structure of a MIB
file.
LoriotPro can compile Mib files and creates a
structured internal database that is displayed as a tree, the MIB
tree.
Everywhere in LoriotPro SNMP objects can be called
by their short name (example: sysname) or composed name when duplicate
object are defined (example: RFC1213-MIB:sysname )
Standard and proprietary MIB are supported.
A node name in the MIB tree can be composed of :
- Object name only (example : sysname)
- The Object number and the object name (example :
(0005) sysname )
- The MIB file name and the object name (example :
RFC1213-MIB:sysname )
- All information (example : (0005) RFC1213-MIB:sysname
)
Duplicate name supported. Proprietary object
name are sometimes duplicate. Duplicate names are detected at compilation
time.
The MIB tree has two display modes, hidden and
unhidden. In hidden mode branches an objects in the tree can be
hidden from view. A simple view of commonly used objects can be
defined to allow fast tree navigation.
Search based on object name can be performed in
the tree or in a branch of the tree.
Object contextual menu provides access to functions
and tools (Graphic, GET SNMP, Table display, object description...

The SNMP walker function discovers what MIB files
are supported by a host and which SNMP object are implemented.
The list of responding SNMP object is displayed
as well as the list of MIB file where they are defined.
The scan of all child object of the MIB of is
performed starting
The Advanced
SNMP Query tool is a diagnostic tool for SNMP
V1 and V2.
Create any type of SNMP request.
Available SNMP request: GET, GET NEXT, GET TABLE,
SET, GET BULK
parameter: IP destination, Port Destination, Community,
SNMP version, SET value type (Object_ID, Octet_String, Interger,
IP, Counter, Hex_Octet_String, Gauge,TimeTick)
Include a SNMP protocol analyzer, with SNMP decode
and hexa dump

Events are messages sent by LoriotPro to inform
the network and system administrator of an anomaly or a modification
in an operational environment.
The Events have a proprietary format.
They are created by LoriotPro and its various
plug-in. it can be for example:
- when a the value of an SNMP object rises a
threshold
- when the string value of an SNMP is equal to
up or down
- when a status of a directory object change.
- When a process is started or stopped
Each event type has a unique number. New events
can be defined at will.
Event are received in the Global Event Windows, a
time sequential list of the last 10000 received events.
All received event are saved in flat log files
(csv format) time stamped, one each 24 hours.
The log file can be browse with the event browser
program. Search conditions can be specified when browsing event
log file.
The search conditions available in the event log
browser are:
Date range
Level (severity)
Event number
2 arbitrary strings
located in the message with OR/AND expression
A database interface can be set (ODBC) to save
the events in an SQL table. Query tool under LoriotPro console
and Remote console are provided to perform later search in this
table.
An event has the following fields :
- Date and time
- LoriotPro manager name that created the event
- A unique event type number
- The host name linked to this event
- A description of the event
Each event can be sent with a level that can be
use for example as a severity level.
There are ten possible levels. A level defines
a different line color and icon in the Event list.
Event in the Event list can be acknowledged individually
or by group
An acknowledged event is still visible in the
event list but is grayed.
Event in the event list can be deleted individually
or by group
A deleted event is not longer visible in the event
list. However, it is never deleted from the event log file.
A mouse double click on an event pops up a window
with details.
Each event type (number) has a counter. This counter
memorizes the number of event of this type received since Loriotpro
startup.
The repetitive events can be hidden from the event
list. The counter of displayed event of a specific type can be
reset.
A window display the current counter values:
- Counter of events received for each event type
(number)
- Counter of events displayed in the event list for
each event number
- Counter of events hidden from the event list for
each event number
- Counter of events submitted to a filter
- Counter of events that match a filter
- Counter of events that match a filter since
the last counter reset
Events can be filtered and trigger action(s).
A single filter can trigger multiple actions.
Filters are defined in a list, on event reception,
all matched filters trigger subsequent action(s).
Filter are manually created or by using a wizard.
Any received event can be used by the wizard to define a filter
in few mouse clicks.
A filter can be set on :
- IP address ( a host)
- IP address mask (a network selection)
- A first character string in the message description
field
- A second character string in the message description
field
- A logical OR/AND between those two strings
Filter can trigger action of type:
- Play sound (wave file format)
- Run Windows program
- Run DOS program
- Send Syslog message (RFC 3164)
- Route to custom window
- no action
- route to another LoriotPro
- send E-mail
Command line parameters can be provided to program
:
- IP address of the LoriotPro manager that created
this event
- host name in the directory
- IP address
- Event level (severity)
- date and time
- message description
Each filter has an associated counter of the events
that have matched.
The counter can be used to specify the action
conditions, action is performed:
- each time that the filter is matched
- the first time that the filter is matched
- only the n time that the filter is matched
- after n times that the filter is matched and
for all subsequent match
- when the filter is matched n times over a defined
period
- every n times that the filter is matched

SNMP Trap or Notification in SNMP version 2 are
messages sent by SNMP agents installed in the monitored devices
(routers, server, workstation, printer …) to inform the management
console of a software anomaly, a hardware failure, a rising threshold.
LoriotPro has a Trap receiver (a server listening
on UDP port 162) allowing him to receive any SNMP v1 Trap or SNMP
V2c Notification.
We will use the term Trap indifferently for Trap
and Inform.
A trap is identified by it SNMP OID (OID – Object
IDentifier). When the MIB file with the Trap object is present
on LoriotPro (compiled) the incoming Trap is fully decoded.
Incoming Traps are displayed in table list in
a dedicated window. The top of the list contains the more recent
Traps. The list is limited in length.
All received Traps are saved in flat log files
(csv format) time stamped, one each 24 hours.
A Trap in the Traps manager list has the following
fields:
- receive date and time ,
- name and IP address of the host that has sent
this Trap,
- the Trap Object ID (SNMP OID) in text
format when MIB installed else in numerical format
- the Trap Type (Authentication, LinkUp, LinkDown,
Enterprise, V2c, V3 …)
- the Trap specific number when it’s an « Enterprise » Trap
- the 10 optional description field of the Trap
(defined in the MIB)
- A unique number that identify this Trap in
LoriotPro
Traps in the Trap list can be acknowledged individually
or by group
An acknowledged Trap is still visible in the event
list but is grayed.
Event in the event list can be deleted individually
or by group
A deleted Trap is not longer visible in the Trap
list. However, it is never deleted from the Trap log file.
A mouse double click on a Trap pops up a new window
with all trap fields.
Each Trap type (number) has a counter. This counter
memorizes the number of Traps of this type received since Loriotpro
startup.
A list of Trap counters allow you to see :
- The Trap reference and its SNMP OID in text
format (when MIB installed)
- The total number of received Traps in the Trap
manager
- The total number of trap filters matched and
actions performed since the last counter reset
- The description of the action
Traps can be filtered and trigger action(s).
A single Trap filter can trigger multiple actions.
Filters are defined in a list. On Trap reception,
all matched filters from the list, trigger subsequent actions.
Filter are manually created or by using a wizard.
Any received traps can be used by the wizard to define a filter
in few mouse clicks.
A Trap filter can be set on :
- Trap/Notification type (Standard V1, ENterprise V1, Notification V2c
et V3),
- Trap name (pour les Notifications V2c et V3 et les Trap Enterprise V1),
- Trap number (uniquement pour
les Trap Enterprise V1),
- IP address ( a host)
- IP address mask (a network selection)
- SNMP community
- character strings located anywhere in the 10
optional Trap fields
A Trap can be forwarded as an Event to LoriotPro with
settable options:
- the event number
- message text
- event level
Trap Filter can trigger action of type:
- Play sound (wave file)
- Run Windows program
- Run DOS program
- Send Syslog message (RFC 3164)
- send E-mail
- Forward as an Event to any LoriotPro
- Re-routed as a Trap to another SNMP Manager
Command line parameters can be provided to program
:
- Trap reference
- Trap name
- IP address of the LoriotPro manager that created
this event
- host name in the directory
- IP address Date and time at which the host
sent the Trap
- Date and Time at which LoriotPro received the
trap
- Proxy name
- Proxy IP address
- The 10 Trap optional fields (description message)
Each filter has an associated counter of the Traps
filter that has matched.
The counter can be used to specify the action
conditions, action can be performed:
- each time that the filter is matched
- the first time that the filter is matched
- only the n time that the filter is matched
- after n times that the filter is matched and
for all subsequent match
- when the filter is matched n times over a defined
period
- every n times that the filter is matched

The Trap Simulator creates fake Traps and sends
it to LoriotPro itself or to another Trap server. The Trap Simulator
is very useful for checking that Trap filters are well set and
correctly trigger their actions.
Standard V1 Trap (ColdStart, WarmStart, LinkDown,
LinkUp, Authentication Failure) can be sent in few mouse clicks
All Traps ( V1 Enterprise or V2 notification)
are listed in a window and can be selected and sent.
The source IP address of the Trap is simulated.
The SNMP community of the Trap is simulated
The 10 optional fields of the Trap can be forged individually.

Reporting tools displays SNMP collected data into
user friendly reports
LoriotPro uses standard HTML format for report
creation and layout.
A reporting module produces report on schedule.
Full sets of predefined reports to be retrieve and displays immediately.
A MIB to report file converter creates detailed
reports in few seconds
A powerful html tag based scripting language give you the possibility to develop
your own reports and customize them for your SNMP devices.
Reports are accessible on the LoriotPro console and on the LoriotPro WEB remote
console.
By setting user access rights on reports you define
who have access to reports from the LoriotPro WEB remote console.

The WEB Remote Access allows a remote user to
access the LoriotPro console from a standard WEB navigator.
Like on the Windows console the Host status (object
colors) are dynamic. However the update of the status is slower
than on the console.
Remote users are limited to visualization they
cannot configure or change the LoriotPro’s settings. They
cannot perform any management tasks on SNMP host.
The WEB interface gives a read only access to
:
- The directory tree
- The event log files
- The trap log files
- The Internetwork Map
- The SQL Database (require PHP support)
- Most of the plug-in attached to hosts
- Active View
- Trend View
- Interface load (MRTG graph)
The Database access allows queries on the host
table, network table, event table and Netflow table.
Remote access can be secured by host or user.
The host access control is realized on the IP
address of the host
The User access control is realized on an internal
user database.
Each user define in the database has an access
level. Each object in the directory has also an access level. If
a user has a higher access level than an object of the directory
tree he can see it and use it.
Access to Map, event log and trap log are also
controlled.

Interface with DataBase
LoriotPro provides an interface with SQL/ODBC
database
LoriotPro is able to save in SQL table the following
information:
- Events
- hosts registered in the directory (by a manual
import)
- network registered in the directory (by a manual
import)
- Cisco Netflow information collected by the
Netflow Collector plug-in
A query tool (Windows interface) with sorting
options is provided to perform query on this database.
Access to the Database from the LoriotPro WEB
remote console is available. The Remote access requires the support
of PHP4 scripting language.
A query Tool (WEB interface) is provided to perform
query on the Database.
Sorting options are available on the Netflow Query
interface.

|