Administrator Handbook | Table of contents |
The host object of the LoriotPro directory represent any IP network connected device, it could be a simple workstation, a server, a printer but also a router, a switch, an IP telephone, etc. A host object is used to define all SNMP related configuration for a specific hosts and it is also used to attach relative management task, graph, threshold manager, active view or any LoriotPro plug-in.
The host term was used initially to define a system hosting applications in either Unix or computing environment. Later on, hosts became connected to networks and started to use a common communication protocol (TCP/IP).
From a more technical vision, each time a device has an IP address, LoriotPro needs a host object for managing it. Routers have multiple IP addresses (sometimes servers too) and thus are viewed by LoriotPro has multiple hosts in each corresponding IP subnet. At first, the host concept of LoriotPro seems complex but it provides a unique way of SNMP polling of any single IP address.
The host object creation has already been explained in the previous chapter. The insertion of a host is made either manually from menu option or by the Discover process. When adding a new host in the tree only few parameters are available to the user to simplify the insert operation. However, as host parameters are abundant another window allows an advanced setup.
By default, a host is created under a container object of Network type. A network object represents an IP subnet and a host is usually attached to a network. However, a host object could be attached to a container, which is not of network type, and therefore administrators could create a more organizational than topological view.
Remark: The software accepts to create or move a host in a container network object that does not fit with the host real IP network.
This paragraph will explain how to create a host with a concrete example.
Example: In this example, the host Server_Data with 10.33.10.129 IP address will be inserted in the Server Container of 'Organization Unit' type. This host has an SNMP agent with the public string as SNMP read community.
The organization unit is first created.
Organization unit Server creation
Now it is possible to insert a new host object. To do that, we choose to use the contextual menu.
Select Insert Object>Host
Or the main menu
Directory>Insert Object>Host
Host Insertion from the main menu
The following window appears and asks you few parameters.
The IP address of the Server_data host is known and we could fill up the other fields
The following table gives explanations on parameters of the insert host window.
Table of the host properties
Parameter |
Functions |
IP Address |
The following table gives explanation on parameter of the insert host window. |
Community RO |
The Community string uses to access the devices SNMP object in read only mode |
Community RW |
The Community string uses to access the devices SNMP object in read or write mode |
Name |
The host name uses by LoriotPro. Remark : The Discover process performs a setup of this parameter by using either the SNMP Sysname object or the Netbios Name or the DNS name. |
Polling in Seconds |
This parameter defines the interval in seconds between two SNMP requests. This polling allows LoriotPro to determines if the device is still alive. Remark : It is preferable to not use values lower than 5 seconds. The following two parameters are used in association. |
Snmp Polling |
If this option is checked. The software performs a SNMP polling at the interval previously specified. |
Ping Polling |
If this option is checked a ping (echo request) is sent to the host at regular intervals specified in seconds. Remark: The SNMP polling is prioritized on the ping polling. If both are activated simultaneously, a valid SNMP polling will discard any ping polling. If the SNMP polling is unsuccessful then the ping polling will start. It may happen that a SNMP agent in a host fails to answer but the host is still working for all of its other applications. The status color will differ according to the current polling type. |
This host is a router (Next Hop) |
This option should be checked is this host pertains to a router. Remark: This option is justified when using filter with the Discover process. A full chapter explains how works the Discover process |
Add this host in an existing Directory tree |
If this option is checked the host will be automatically insert in the container network that fits with the host IP address. Remark: This option works only if the network container is already created. |
Enable the Discover process scanning to scan this host |
If this option is checked, the Discover process filter uses it. The discovering from a set of targeted hosts is possible and allows a sort of vector distance discover. Remark: Look at the Discover process chapter for more details. |
Snmp V2c |
If this option is checked, LoriotPro will use the SNMP version 2 protocol to communicate with the host. |
Snmp V3 |
If you choose the SNMP version 3, you will access a new configuration window.
|
Ping |
Perform a ping (ICMP echo request) on the host |
Ping Snmp |
Perform a immediate SNMP request to the host and check that it answers on the get SysName command
|
Help |
Display the html help. |
Quit |
Quit |
When all these parameters are set, click the Add Host button.
An information window confirms you that the 10.33.10.129 has been inserted in the Directory. You could repeat the whole operation for a new host without leaving the configuration window. When it is finished press Quit.
Host Server_data inserted in the Directory
You could see then the Server_data object inserted in the Directory tree
To access the advanced configuration options you should use the host property option from the menu, form the host tool bar or form the Directory tool bar.
Or from the contextual menu.
Host Properties contextual Menu
Directory>Object Properties
Object Properties option of the Directory Menu
The configuration window that appears, applies to the current selected object anyhow this object has been selected.
From the Host Tools Bar
Use the property icon
You access the following advanced configuration setup screen.
Advanced host configuration window
The global parameter of a host are described hereafter:
Parametres |
Functions |
||||||||||||||||
SNMP Agent IP Addr |
This parameter is not configurable; it just shows you the host current IP address. |
||||||||||||||||
|
These two icons select the next or previous host in the Directory. |
||||||||||||||||
Is Alias Of |
In some cases, it is necessary to have several configurations for the same host. The most common is when a host has multiple SNMP active profiles. LoriotPro can manage only one profile per SNMP agent. If your host has more than one agent, you could create a virtual host and declare it as an alias of the real one. Remark : A next chapter discuss about this option. |
||||||||||||||||
Info |
This button gives a short explanation on aliases. |
||||||||||||||||
RO Community |
The Community string used to access the devices SNMP object in read only mode. |
||||||||||||||||
RW Community |
The Community string used to access the devices SNMP object in read or write mode. |
||||||||||||||||
Name |
The host name use by LoriotPro. Remark :The Discover process performs a setup of this parameter by using either the SNMP Sysname object or the Netbios Name or the DNS name. |
||||||||||||||||
DNS Name Résolution |
This function is used to gather the DNS name. Remark: A DNS server address should be specified in the window configuration before installing LoriotPro and host names should be configured in your domain to have a successful answer.
|
||||||||||||||||
|
LoriotPro support several version of the SNMP protocol. You should know what is the higher version supported by the host agent before selection. By default, host support the version 1 of the SNMP protocol. If your host supports multiple versions, define aliases to use it all simultaneously. Warning: The SNMP v3 is not working with an alias host. Use the real IP address only and create alias that will handle version 2c and 1. |
||||||||||||||||
Set V3 |
If your host support version 3 you can set parameters here. Warning: LoriotPro does not implement the totality of the protocol version 3. Cryptography is not supported due to International export restrictions. If you select v3 the following window appears:
Remark:LoriotPro supports only two SNMP v3 modes:
You can check the proper working of the host agent by clicking the Init key button. A window should appears with a successful message or the error message .
A GestNext is realized to confirm the v3 protocol sequence.
Bad answer the host is unknown.
After validation of the v3 parameter you can confirm them.
|
||||||||||||||||
Snmp Port |
This is the UDP port used by the host to receive SNMP request. The standard port used is 161. |
||||||||||||||||
Mac Address |
If the Discover process gets the physical address (MAC) of the host, it should be displayed here. Remark: You can manually set the address. You have to edit the defaut.ses file and use the keyword mac_address followed by the MAC address. The syntax of the MAC address is made of 6 blocs of 2 hexadecimal digits separated by double dots. Example : host ::= ">10.33.10.130"
{ Warning: Before modifying the file perform a copy of it. |
||||||||||||||||
Double click action |
You could associate an executable file to the host object. This one will be automatically started when you will do a double click on the host icon. The software uses the short cut process to take your parameter. For example, if you want to start a telnet you build the command line in the command line field and by using the tool buttons.
This button discards the command line Remark: It is possible to associate multiple command lines to a host by using the 'short cut' tasks. |
||||||||||||||||
Router ID |
Not used. |
||||||||||||||||
Level |
Give the number of hops (routers) between the selected host and the host use by the Discover process. |
||||||||||||||||
Learned From |
If the host has been discovered by the Discover process, the IP address of the host, which has provided the information, is displayed. Actually, host information gather by the Discover process could be second hand information. |
||||||||||||||||
Go to Learned |
Display the properties of the host which was used by the discover process to find the current host. |
||||||||||||||||
SysName |
The SNMP SysName value if founded by request. |
||||||||||||||||
SysObjID |
The SNMP SysObjID is founded by SNMP request.
ST : Not used IS: is the SysServices SNMP |
||||||||||||||||
Status |
The current status |
||||||||||||||||
This host is a router interface IP address |
This option should be checked is this host (interface) pertains to a router. Remark : This option is justified when using filters with the Discover process. A full chapter explains how works the Discover process. |
||||||||||||||||
Enable the Discover process to scan this host |
If this option is checked the host will be automatically insert in the container network that fits with the host IP address. |
||||||||||||||||
|
The change Icon button allows you to change the associated icon. LoriotPro uses icons coming from the icons.ini file located in the /bin directory which is chosen by design regarding the SNMP SysObjID value. File : Icons.ini cisco25 icons/c2500.ico In this example of a icons.ini file, the SysobjID of the host start by the cisco25 string, thus the software will assign the c2500.ico located in the icon directory. To change it, click on the icon button
The software suggests you the icons.ini file by default. If you choose no, you will be able to select a file.
Workstation icons Router and switch icons
After your selection, the icon appears in the host window
Example of new icon on the Map.
|
Administrators could define 3 parameters for each host. These parameters are character strings that helps to characterize the host. These values could be use in the search tool to locate the host on various criteria.
Example:
Table of the host parameter
Parameter |
Functions |
User 1 : |
Use this parameter to save the character string number 1 called user 1. Example : Department name |
User 2 : |
Use this parameter to save the character string number 2 called user 2. Example : Department location |
User 3 : |
Use this parameter to save the character string number 2 called user 2. Example : Department floor |
Example |
Simple Reference
complex reference Insertion of an URL link in user 1
|
This user parameters are very useful to find any object in the Directory on in a map.
Search in the Directory on a user parameter
In our example, the search key used is BAT23, obtained directly by a single click on the User 2 button. If the key is found, the software will display the first host of the Directory fulfilling the condition.
Warning: If multiple hosts have the same key, only the first host will be display. The User search keys do not use the Directory structure but an internal list where hosts are ordered by creation date.
Remark : The User 1 key is visible in the Health Control center.
Display of the User 1 field in the HCC.
Only user 1 and user 2 parameters are visible from a Web navigator.
On the main function of LoriotPro is to monitor devices, in other terms to send cyclic requests to host and maintain an up to date display of their status. The cyclic request or polling is fully configurable and conditional.
snmp polling and icmp polling parameters
Table of polling parameters
Parameters |
Functions |
||||||||||
Polling interval(s) |
This parameter defines the interval in seconds between two SNMP requests. This polling allows LoriotPro to determine if the device is still alive. Remark: It is preferable to not use values lower than 5 seconds. The following two parameters are used in association. |
||||||||||
Snmp Polling |
If this option is checked. The software performs a SNMP polling at the interval previously specified. |
||||||||||
Ping Polling |
If this option is checked, a Ping (ICMP echo request) is send to the host at specified interval in seconds. Remark:The SNMP polling is prioritized on the ping polling. If both are activated simultaneously, a valid SNMP polling will discard any ping polling. If the SNMP polling is unsuccessful then the ping polling will start. It may happen that a SNMP agent in a host fails to answer but the host is still working for all of its other applications. The status color will differ according to the current polling type. |
||||||||||
Polled if actif |
LoriotPro will first check that the IP address of this intermediate host is alive before polling. If it is not active, the polling is stopped and a message is sent to the event manager process. The process of polling restarts as soon as the intermediate host comes to live. This feature avoids unnecessary polling traffic to a remote site if an intermediate link or router is down. Remark: The IP address of the intermediate host should exist in the Directory. |
||||||||||
Polled if not Actif |
LoriotPro will first check that the IP address of this intermediate host is not alive before polling. If it is not active, the polling is stopped and a message is sent to the event manager process. The process of polling restarts as soon as the intermediate host fails to answer. This feature allows to check a backup link when the main link is down. Remark: The IP address of the intermediate host should exist in the Directory. |
||||||||||
Load Polling Script |
By default LoriotPro performs polling on the SNMP standard object SysName. However, it is possible do built specific request containing a set of MIB objects. The MIB Scripter tool allow you to build your own script that will be used by the polling process. Example: To access the MIB scripter from the main menu Tools> MIB Scripter Remark: The use of the MIB scripter is explained in a next chapter. The Scripter creates files with a .sci extension that contains a list of SNMP object to collect. When you click on the button a selection window appears with all available sci files.
Select for example the system.sci file, then click Open.
The OID SNMP object list collected each 15 seconds is shown in the field 'Script polling' |
||||||||||
Clear Polling Script |
Discard all requests in the upper window |
||||||||||
Gen Html Gen CSV |
It is possible to save the results of your SNMP request in html formatted files or CSV. The software creates automatically the files: ou File name building
Example poll_10.33.10.121_Feb_10_2002.csv Files are stored in the log directory of the LoriotPro software.
File are updated in append mode at after each request. Fichier : CSVSun Feb 10 10:32:31 2002;1013333551;forwarding;255;542;0;0;96;0;0;330;830;86;80; Sun Feb 10 10:32:37 2002;1013333557;forwarding;255;545;0;0;97;0;0;332;834;86;80; Sun Feb 10 10:32:43 2002;1013333563;forwarding;255;546;0;0;97;0;0;333;836;86;80; The first field contains the date of the request Day month day number hour year ; Following field contains the request results with « ; » separations. When you select any of this options, you can view this
files remotely with your WEB navigator and the http function of LoriotPro.
A csv button is displayed in the directory window giving you a direct
access to these files. |
LoriotPro uses a high-performance, asynchronous poller. The polling is performed for each host at a defined rate that is independent of poll response times. LoriotPro poller achieves this using two asynchronous threads: one that sends polls and one that receives polls. Therefore, while the send and receive threads operate asynchronously, slow response times or excessive timeouts do not affect the polling rate.
Five statuses are defined to display the level of connectivity.
When a host fails to respond, its icon in the directory and maps switch
to the Yellow state. If the maximum failure retry count is exceeded
before
a successful
ICMP poll occurs, the host switch to the red state.
A host stays in the red state while it fails to respond to an ICMP/SNMP poll.
The dafault setting are:
The time graph below displays the basic sequence of evolution of a host icon color. Default values are used.
From this behavior and from the default value we can deduce that:
A host icon become yellow after 2 successives snmp ping failure. The host is unreachable since at least 2 minutes but not more than 3 minutes
A host icon become yellow after 4 successives snmp ping failure. The host is unreachable since at least 4 minutes but not more than 5 minutes.
Advanced Polling - Application Monitoring and auditing
The Advanced Polling tab of the host property dialog box allows defining a set of networking application to monitor. Networking applications (client/server) are any type of application (File server, Database Server, messaging server, etc.) that are listening for client connections over a TCP port.
Remark: The monitoring method used by Loriotpro (TCP connection) does no guaranty that when this polling is working the monitored application if fully operational. However, a networking application that does not accept new TCP connection is in no doubt unavailable for all its clients.
Before monitoring an application with LoriotPro, it is necessary to identify the TCP ports on which this application is working. In simple cases only one port needs to be monitor but sometimes multiples ports have to be added to the list.
The Advanced Polling tab displays a table of the current monitored application and their current working status. The status colors are the same as the ones used by the PING/SNMP polling.
Example of configuration for monitoring a FTP file server
To add a new application to monitor in the list, click on the Add button
The following dialog box is displayed:
The minimum configuration steps are:
Common application TCP ports are available in the configuration dialog box. In the following list you will find the most frequently used.
Application |
Protocol |
Listenning TCP Port |
File Server |
FTP (File Transfert Protocol) |
21 |
TFTP Trivial File Transfer |
69 |
|
Microsoft Server |
MS-RPC (appels de procédure distants (RPC). |
135 |
Netbios-ns NETBIOS Name Service |
137 |
|
netbios-dgm - NETBIOS Datagram Service |
138 |
|
netbios-ssn - NETBIOS Session Service |
139 |
|
WEB Server |
HTTP (Hyper Text Transfert protocol) |
80 |
|
HHTPS – HTTP sécurisé |
443 |
Messaging Server |
SMTP (Simple Mail Transfert Protocol) |
25 |
SMTP/SSL |
465 |
|
POP3 – (Post Office Protocol – Version 3) |
110 |
|
POP3/SSL (Secure Sockets Layer) |
995 |
|
IMAP4 ((Internet Message Access Protocol) |
143 |
|
IMAP4/SSL (Secure Sockets Layer) |
993 |
|
Lotus Notes |
1352 |
|
X.400 |
102 |
|
Database Server |
MS SQL (Microsoft SQL Server) |
1433 |
My SQL Server |
3306 |
|
Serveur Oracle |
1521 |
|
|
Postgres SQL |
5432 |
Name Resolution server |
DNS – Domain Name Service |
53 |
Address resolution server |
BootP (Bootstrap Protocol Server) |
67 |
Directory server |
LDAP Lightweight Directory Access Protocol), |
389 |
LDAP/SSL - (Secure Sockets Layer) |
636 |
|
Microsoft-ds (Directory Services) |
445 |
|
VIDEO server |
H.323 (Vidéo) (ITU-T H.323 définit la conférence multimédia) |
1720 |
Audio server |
conférence audio |
1731 |
Monitoring server |
Agent - SNMP Simple Network Management Protocol |
161 |
Some options are available at this configuration step.
The SLA Collect check box enables the gathering of data for the calculation of the quality of service level. Responses to the requests sent by the TCP polling process will be stored in history files. The history files can be used later on to create QOS reports with the SLA Report Center plugin or with the SLA scripting functions
Sending of an alarm (Loriotpro Event) on successful or unsuccessful connection.
Here under a working configuration with 3 monitored application
Example of case of non response from the SQL Database server, the Service status is red.
Example of configuration with an alarm (Loriotpro events) when the host application is not responding to the TCP polling
The event received in the event log window.
The Advanced Polling defined in the host property use a LoriotPro plugin named Advanced TCP/Audit Polling. For each monitored application declared in the list a new plugin is installed under the HOST object in the directory tree. (See example below)
A click on the Graph Icon displays a windows with the last 100 polling request results.
Advanced Polling - Auditing (Scripting)
To perform monitoring based on script programs refers to Monitoring and auditing with scritping
During plannified maintenance period, unwanted events and alarms could arise. To avoid that it is possible to disable the polling process and the sending of events during this period. Only one period could be excluded.
Select the Repair tab of the host properties to manage the repair time.
Specify the date and hour of the beginning and ending time.
Check the Enable box to activate the function.
Check the Disable Polling during period to stop the polling process for this host.
Check the Disable Event Action During Period to stop sending the events of this host to the event manager.
The events/graph tab display the current status for this host.
The Counter graph displays the successful pourcentage of the last 100 polling requests.
The line graph displays the average, min and max response time for the last 100 polling requests.
The Events Button open the Event browser and allow you to see the filtered events for this host.
The Get SNMP status performs a simple get on the Sysname object.
What is SLA ? Service-level agreements (SLAs) are contracts between a service or network provider and customers or a direction of information system and users. The agreement defines the services provided, the metrics associated with these services, acceptable and unacceptable service levels, liabilities on the part of the service provider and the customer, and actions to be taken in specific circumstances.
The Service Level Agreement option of the Standard Edition of LoriotPro performs a simple collecte of the metrics that give the availibility (rechability) and performance (response time) of a host.
Activation of SLA collection is accessible from the SLA tab.
The measurement is performed by the global polling process and collected data are stored in a hierarchical directory structure.
LoriotPro uses the SLA directory as root of all collected data. The time stamp is used to create unique file per day.
In our example LoriotPro is installed in :a
C:\Program Files\LUTEUS\LoriotPro V4\
The SLA directory is :
C:\Program Files\LUTEUS\LoriotPro V4\bin\SLA.
In this directory we find at the first level the LoriotPro ID. Multiple LoriotPro working as SLA agent collectors will be able to agregate SLA data in the same directory. The ID is linked to the LoriotPro licence, in the example 000 1001 1002 et 1003 are various LoriotPro manager.
The next level is the IP address of the host on which we are collecting SLA data.
The next level is the file with the collected data.
The file name is strutured to allow a fast retrieval of data. There is one file per day and per host. The format is text.
Year_Month_Day.txt
Year on 4 digits
Month on 2 digits
Day on 2 digits
A line in the file is composed of 3 fields
timestamp;type of polling; (Response time of status message)
1110629680;1;start
1110629680;2;start
1110629697;2;16
1110629714;2;15
1110629733;2;0
1110629750;2;0
1110629767;2;0
1110629783;2;0
1110629800;2;0
1110629817;2;15
1110629833;2;0
Field 1
The first field gives the time stamp of the polling. The polling interval can be deduce from multiple succesive polling timestamp.
Field 2
The field 2 gives detail on the type of polling.
1 | icmp |
2 | snmp |
3 | tcp |
4 | udp |
5 | url |
The dafault polling process can icmp and snmp polling. 1 and 2 values can appears in the file.
Field 3
This field gives either the SLA value (response in ms) or status messages.
start | The SLA collecte is activated |
stop | The SLA collecte is deactivated |
stop_polling | The polling process is stopped |
start_polling | The polling process is running |
Stop_repair | Stop of a maintenance period |
Start_repair | Start of a maintenance period |
Stop_loriot | LoriotPro stop |
Start_loriot | LoriotPro start |
-1 | The host doesn't answer |
xxxxx... | An interger value : The response time in milli secondes. |
The advance tab is use to set experimental option. This very new feature to LoriotPro version V4 have not yet been tested in large scale network.
3 options are available :
Dynamic Name Option - This option update the the IP address of a host dynamically. This option works with the DDNS to IP resolver Plug-in
Router Graph Interface - This option adds the direct display of the interface bandwidth us on router interface.
Socket parameter - Socket parameter allows you to tune the default polling time out and retry count of the plug-in(s) attached to this host. Remarks, the value set here may be overwritten by some plug-in configuration.
The Dynamic name option is requires if your host has a dynamic IP address. This is the case of most ADSL router for their Internet connexion. This option is use jointly with the DDNS to IP resolver Plug-in service plug-in. The Dynamic DNS to IP resolver service plug-in of LoriotPro allows you to monitor host with dynamic IP address. The plug-in updates the host IP address regularly by checking its current IP address from a DNS.
To activate this feature simply enter the host name issued from a dynamic DNS and check the activate box.
and check that the DDNS to IP resolver Plug-in is running.
The router graph interface option add plugin graph and direct utilization value in the router tree.
A double click on the Graph line open the current MRTG graph.
The socket parameter allows you to change the default value assigne to any snmp get request. All plug-in attached to this host use the default values assigned in the kernel. If you change the value all the plug-in will be affected except if this plug-in overwrites the default values.
With the "Advanced" tab of the properties of a host, it is possible to enable the sending of an event when any event related to this host is recieved.
in our example of configuration above any Event received for this host an event 200000 will be generated.
The level 4 will display the event in red (see event levels)
In the event log there is a 300 event for the RV100 host that generated the event 200000.
www.loriotpro.com |
|