Specifications

© 2006 Cisco Systems, Inc.
All rights reserved.
Product Features 2-11
NAM / Traffic Analyzer v3.5 Tutorial
© 2006 Cisco Systems, Inc. All rights reserved.
Product Features 2-11
NAM / Traffic Analyzer v3.5 Tutorial
NAM-1/2 Hardware Overview
Architecture
NAM-1/2 Hardware Overview
Architecture
SNMP Agent
Monitor Interface for NDE
and ERSPAN
MIBs
Web Server
Cisco
Catalyst
Switch
Mini RMON
per interface
Data from Spanned
or VACL Sources
NAM
H
T
T
P
/
S
Web
Browser
Poll Process
Data from
NDE Sources
(NetFlow
Data
Export)
Note: The NAM-2 can support two
simultaneous SPAN/VACL sessions
Note: The NAM-2 can support two
simultaneous SPAN/VACL sessions
SNMP Agent
SNMP
Monitor Interface for
SPAN/VACL
RMON Process
Data from
ERSPAN
Sources
NAM-1/2 Architecture
How does data flow through the various processes in the NAM? Data enters the NAM for analysis via one of
three internal interfaces on the NAM (two for monitoring), the monitor interface for NDE, the monitor interface
for SPAN/VACL ( two of these on the NAM-2), and the host switch SNMP agent. The data, received in frame
format, is parsed by the RMON process on the NAM and stored in the RMON, SMON, and other MIBs
loaded onto the NAM. The polling process grabs data from these MIBs as well as the mini-RMON MIB on the
Cisco Catalyst switch and performs the data analysis and presentation functions that generate the graphical
tables and charts that you see. The Web server responds to Hypertext Transfer Protocol (HTTP) requests
from a client’s Web browser and presents the traffic reports and the configuration menus. Together, these
functions constitute the embedded “Traffic Analyzer.” This tutorial is based on integrated NAM Traffic
Analyzer Software v3.5.
As the figure above illustrates, the SNMP agent in both the NAM and the Cisco Catalyst switch will also
respond to SNMP queries from third-party network management systems for MIB data that the NAM and
Cisco Catalyst switch stores.