Specifications

© 2006 Cisco Systems, Inc.
All rights reserved.
Introduction 1-28
NAM / Traffic Analyzer v3.5 Tutorial
© 2006 Cisco Systems, Inc. All rights reserved.
Introduction 1-28
NAM / Traffic Analyzer v3.5 Tutorial
Traffic Analyzer Software
Differentiated-Services Monitoring (DS-MON)
Traffic Analyzer Software
Differentiated-Services Monitoring (DS-MON)
NAM-Embedded Traffic Analyzer
DSMON
MIB
DSMON
MIB
FTP
FTP
SNMP
ICMP
http
FTP
SNMP
Ethernet Header
Ethernet Header
IP Header
IP Header
TCP Header
TCP Header
Ethernet
Ethernet
FTP Data
FTP Data
(DSCP0)
(
(DSCP0
)
)
(DSCP0) (DSCP24)(DSCP24)
(DSCP26)
(DSCP40)
DiffServ monitoring can be used to:
Validate planning assumptions
and QoS allocations
Detect incorrectly marked or
unauthorized traffic
DiffServ monitoring can be used to:
Validate planning assumptions
and QoS allocations
Detect incorrectly marked or
unauthorized traffic
DiffServ Monitoring
The NAM also incorporates Differentiated Services (DiffServ) monitoring by implementing DSMON, a
DiffServ monitoring specification. An extension of the RMON methodology, DSMON looks into the IP header
of every packet to identify the DiffServ code point that defines how DiffServ, enabled on devices, should
handle a packet. Couple this ability with RMON packet analysis and you can see how the NAM can give you
the same host, application, and conversation pair statistics for every DiffServ code point (DSCP) it observes.
In essence, the NAM aggregates statistics by DSCP and it also supports grouping of DSCPs into classes of
service that map onto the QoS policies that you have implemented. This enables you to fully customize how
the NAM reports DiffServ statistics so that it matches your environment.
Using the NAM DiffServ monitoring capabilities, you can identify which hosts, conversations, and
applications participate in each grouping of DiffServ classes. You can use this information to validate and
tune your planning assumptions and QoS allocations. You can also use it to detect incorrectly marked or
unauthorized traffic.