Network Vision Software. Database Audit and Analysis for. Network Vision Inc. Newburyport, MA

Transcription

1 Network Vision Software Database Audit and Analysis for Network Vision Inc. Newburyport, MA Maintenance Technician Report ivbackup_2013_0612_1009_915.pdf This is a sample Diagnostic report from a network in which several issues were created to test the capability of the Diagnostic system. It contains Duplicate IP, Device moves, and a large file transfer. This report is based on the database, ivbackup_2013_0612_1009_915.zzz Report generated on Jun 12, 2013 version

2 1 Analysis Summary 1 Analysis Summary Introduction This Maintenance Report is intended to provide insight and guidance on the issues captured in the IntraVUE Database. Data will be organized in sections to highlight key parts and help simplify support. The maintenance report will contain sections to: Provide details on the version and running time of the IntraVUE system List of Networks configured List of Devices in each Network Configuration Review to provide suggestions to improve the configuration and reporting of IntraVUE Network Analysis reviewing key parameters to identify devices having issues and make suggestions The report uses database data from various periods but is focused on data from the last 30 days. If a potential problem is identified it will also contain details on a course of action to be taken. In addition the report will contain links to obtain additional text information as well as video links for additional support. [email protected] Phone: page 3

3 1 Analysis Summary Time used for this report: First event: :24:52.0 Last event: :50:04.0 First scanner data time: :30 Last scanner data time: :50 Number of days from first event to last scanner time: 1 Last Version of Intravue: 2.1.0e13 Product Key: 3ALZ2-XX03E-DA999-D Node count limit: 256 page 4

4 2. Table of Networks 2. Table of Networks The following table will list each network contained in the IntraVUE database. Each network contained in this list will be individually analyzed for issues occurring on the network. It is important when configuring IntraVUE that Local Area Networks (LANs and VLANS) be configured as separate IntraVUE networks with names that help identify each. List of IntraVUE networks Network Name Count Top Parent Manufacturing Network Licensed for 256, total found 57 page 5

5 3. Network Analysis: Manufacturing Network 1 3. Manufacturing Network General Network Details: Manufacturing Network 1 The Top Parent of this network is List of network scan ranges: From To Summary of Connection and Verification States: Known & New & Not Total Verified Verified Connected Disconnected Totals page 6

6 3. Manufacturing Network 1 NOTE: The connection and verification status are as of the time the database was saved, Sep 13, NOTE: All devices should be verified. This will provide important details and better maintenance on device additions and moves. W W C = Connection Status Connected Disconected Wireless Connected Wireless Disconnected W - wireless access point V = Verified Status Known and Verified New or not Verified Device Move or conflict with new location verified Move or conflict with new location not verified w - wireless device Device Information: IP Address C V Mac Address Device Name Location Name Vendor Name C 07 AC 00 stswshc1.st3483 CISCO SYSTEMS INC C 29 3C 97 2A vm-ub710svr Unknown VMware Inc C On-Time Plant R1, Row 7, rig Westermo Teleindustri AB C 29 6A 72 AD VMware Inc B 00 C1 8B AGSNVIVOSTRO Dell Inc C A0 8A JIM-2-1-DEV VMware Inc B 1E Artila Electronics Co A Ethernet Direct F0 AD 4E CD Globalscale Technologies C 29 B7 34 B6 DEKI-HAYES VMware Inc A F Ethernet Direct switch Conference Room Ethernet Direct C0 A8 E1 47 2B ED Wireless ED Wireless GVC CORPORATION F8 7B 7A 97 DA 9A Motorola Mobility Inc A A0 90 EC 44 Dell Inc C 29 F6 E8 B3 VM2-XPPRO VMware Inc A D0 FL HUB AGENT Office Rack, Row 4, PHOENIX CONTACT middle GMBH & C 29 FB 55 2C NVI-G9CSA3TISQJ VMware Inc C 29 AE 7B C0 Andover HVAC VMware Inc C 29 DF B2 AA UB606LAMP VMware Inc AC C0 A4 F4 C8 ASWALES-HP Enclosure 403 Hewlett-Packard Company C 29 CF E9 B1 VM-SVCCONTRACTS Enclosure 402 VMware Inc. page 7

7 3. Manufacturing Network A A0 2F 4E 51 SUZANNE Enclosure 401 Dell Inc C CF VMware Inc B9 BA 98 dim1100.i-vue.com Unknown (edit Intel Corporate /etc/snmp/snmpd.conf) E7 F4 E1 F3 7C Apple Inc C 29 7C 3B 04 VM-JIM- VMware Inc EB 69 D2 FA 69 MARKSACER-PC Quanta computer Inc BF AD 31 AGSDIM3000 Intel Corporation DE A Drive 234 Enclosure 384 WAGO Kontakttechnik GmbH AA 9D BF 65 Phaser 6180DN-9DBF65 XEROX CORPORATION Operator Station Enclosure 367 SIEMENS AG A Ethernet Direct A ED 1628 Switch 2 Behind Jim Ethernet Direct A AE PRONET GMBH D oldlinux Andy_Swales_Desk 3COM CORPORATION F 6C 23 Intel Corporate C UB810IMAP2 VMware Inc C 29 BA 8F 0F bugzilla164.i-vue.com Unknown (edit VMware Inc. /etc/snmp/snmpd.conf) C D 0E QUICKBOOKS-XP VMware Inc F 6B C9 NVI-W2KPRO-JIM Intel Corporate A A0 2F JIM-PC Enclosure 405 Dell Inc E C 3Com SuperStack II 3Com 3COM EUROPE LTD. Switch C 85 C3 dell switch 171 scannerbench DELL INC DELL INC ED ControLogix Enclosure 392 Newport Electronics E 82 MARVELL SEMICONDUCTOR F0 AD 4E 00 7A B1 MYWIFIPLUG Globalscale Technologies A0 3D D3 OPTO C 6C 22 MICE MM2 NVI Lab Hirschmann Automation and AF 00 B1 00 N-Tron test switch Mobile, AL N-TRON Corporation BD 2B 2A 99 ipcop_nvi Enclosure 407 BELKIN COMPONENTS C0 3D 00 BF 3A CS-IV MINI 4.0 WIESEMANN & THEIS GMBH C 31 A1 05 C0 Cisco_Switch Cisco Cisco A A0 90 EC C6 INTERNALSERVER Dell Inc A F4 0A D9 80 cisco2950switch Enclosure 211B Cisco Systems C D 66 Fiery Printer Office ELECTRONICS FOR IMAGING F FA 80 stswshd1.st3483 Cisco Systems page 8

8 3. Manufacturing Network Configuration Review This section will analyze the database to identify general configuration issues that may improve IntraVUE's ability to provide better diagnostics. Any issues will appear as a 'Warning' and will include an 'Action Required' for proper deployment and to take full advantage of the IntraVUE diagnostics. Good. 95 per cent of the devices in this network are Admin Verified. Good. Less than 5% of the devices in this network do not have names assigned. Good: no unresolved node Good: No auto-inserted nodes having a managed switch as a child. Good: There are less than 5 devices in this network that are unverified, disconnected devices. WARNING: There are 2 red filled nodes in this network. Red filled nodes represent the original location of a device that has been admin verified and configured not to move. They are red filled to force your attention to them. Device Move. If a verified device is moved from the verified location a red filled box indicates the old, verified location and a tan filled box will represent the new location. ACTION REQUIRED. Move the device back and the red box will turn back blue, otherwise delete the red box and verify the new location. Duplicate IP or conflict. Duplicate IPs will make a device appear in two locations based on the two different macs of the devices with the same IP. The red filled and tan filled boxes show you the locations of the conflict. ACTION REQUIRED. Change the IP of one of the devices. Switch Move. Switches connected to (both) redundant routers have their packets take multiple paths, see 'trunking' under Help. Switches connected in a spanning tree ring that changes will cause red boxes at the verified positions of the ring, for those switches that change. ACTION REQUIRED: Edit the trunkingdefs.txt file in the case of redundant routers; Either delete the red boxes or cause the ring to return to its original configuration for spanning tree changes. page 9

9 3. Manufacturing Network General Network Details: Manufacturing Network Connection Issues Devices with connections issues: Reporting devices that have the highest connection problems (ping failures). You may want to check the connections, wire, and port speed settings to minimize or eliminate these issues In the future, connection issues may be broken into classes such as consistent and intermittant. Devices with Ping Failures 30 Day 60 Hour 6 Hour IP Address Device Name 2 hr counts 10 min counts 1 min counts Com SuperStack II Switch MICE MM ControLogix CS-IV MINI N-Tron test switch Cisco_Switch cisco2950switch oldlinux Operator Station FL HUB AGENT stswshd1.st Drive Devices with Disconnection Events: Reporting devices that have the highest disconnect events (EXCEPT 'auto-connect' devices). Devices with Disconnections IP Address Device Name Last 30 Days page 10 Last 60 Hours Last 6 Hours

10 3. Manufacturing Network CS-IV MINI Device Issues Note: In the future, connection issues may be broken into classes such as consistent and intermittant. IP Address Name Threshold Avg Max Minutes Over Conseq. Over Cisco_Switch cisco2950switch oldlinux CS-IV MINI Device Moves: Reporting devices which moved in the last 30 days which are admin verified and not enabled for automatic moves. Configuration Note: If any of these devices are allowed to move, the IntraVUE administrator should check the Auto Connect checkbox in Device Configuration :48:59.0 Device moved from :2 to : :51:20.0 Device moved from :21 to : :51:36.0 Device moved from :2 to : :54:31.0 Device moved from :49 to : Drive :45:50.0 Device moved from to : oldlinux :41:44.0 Device moved from :3 to :2 Ping Response time issues: Reporting devices having periods in which the ping response threshold is exceeded for 2 or more consecutive minutes in the last 6 hours of scanning. Reported devices could be overloaded or having internal issues. They may be devices which should have their thresholds increased from the default, like wireless devices. page 11

11 3. Manufacturing Network Addressing Issues Changed MAC addresses (potential duplicate IPs): These devices had changes in their MAC address in the last 30 days which might indicate a duplicate IP address. If this device has also been reported in the 'Device Moves' section, it is VERY likely to be a duplicate ip address. WARNING: IP has move and mac change events and is probably a duplicate IP :47:32.0 Device changed mac from f0:ad:4e:00:21:23 to f0:ad:4e:00:20:cd :50:51.0 Device changed mac from f0:ad:4e:00:20:cd to f0:ad:4e:00:21: :50:52.0 Device changed mac from f0:ad:4e:00:21:23 to f0:ad:4e:00:20:cd Changed IP Addresses (potential duplicate MAC addresses): These devices had changes in their IP address in the last 30 days which might indicate a duplicate MAC address. Good: There are no IP change events indicating changes in MAC addresses Broadcast Issues Switches with 'Lost' SNMP. Reporting switches having lost SNMP events in the last 30 days. GOOD. There are no switches with lost SNMP events. Devices with bad SNMP: These devices incorrectly report their speed value resulting in bandwidth percentages that exceed 100%. GOOD: There were no SNMP device reporting bad 'speed' settings Potential broadcast storms in last month: Reporting times when at least one device has more than 50.0% transmit bandwidth and at least 3 other devices have greater than 50.0% receive bandwidth (Switches excluded). page 12

12 GOOD: No broadcast storms detected 3. Manufacturing Network 1 Point to Point traffic: The following end devices had simultaneous bursts in trasmitted and received traffic that exceeded 40% bandwidth in the last 60 hours. This could be a large file transfer between these two devices. Between :17 and :22 Transmit Receive dim1100.i-vue.com n/a Auto Inserted Node (port 6 of ) Between :53 and :55 Transmit Receive dim1100.i-vue.com n/a Auto Inserted Node (port 6 of ) page 13