Embedding RMON in large LAN switches

A remote network monitoring management (RMON) agent monitors all traffic on a network segment. In a switched LAN, the only device where all traffic can be seen is the LAN switch. Thus, the most appropriate place to insert an RMON probe is in the LAN switch. In this article issues in implementing var...

Full description

Saved in:
Bibliographic Details
Published in:IEEE network 1999-01, Vol.13 (1), p.63-72
Main Authors: Stelzer, E.E., Gonsalves, T.A.
Format: Article
Language:English
Subjects:
Analytical models
Bandwidth
Costs
Data structures
Engines
Fabrics
Filtering
Filtration
Local area networks
Memory management
Network management systems
Networks
Sensitivity analysis
Switches
Switching theory
Traffic engineering
Traffic flow
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:A remote network monitoring management (RMON) agent monitors all traffic on a network segment. In a switched LAN, the only device where all traffic can be seen is the LAN switch. Thus, the most appropriate place to insert an RMON probe is in the LAN switch. In this article issues in implementing various RMON groups in a LAN switch are studied, and some approaches are proposed. The centralized solution turns out to be impractical because it is prohibitively expensive. A distributed design is presented that is suitable for implementation on multiprocessor switches. A simple analytical model is used to compare the alternatives. We investigate empirically the cost of performing typical filtering operations in an operational network. This shows that reverse filtering is often much more computationally efficient than forward filtering. We show that the distributed design can provide full RMON capability on all ports simultaneously at affordable cost.
ISSN:0890-8044
1558-156X
DOI:10.1109/65.750451