Monitoring and analyzing audio, video, and multimedia traffic on the network

Transcription

1 Monitoring and analyzing audio, video, and multimedia traffic on the network Slavko Gajin AMRES Academic Network of Serbia AMRES Academic Network of Serbia RCUB - Belgrade University Computer Center ETF Faculty of Electrical Engineering

2 Motivation Real-time voice, video and multimedia traffic increased usage business, education, entertainment... requires appropriate bandwidth, small latency/jitter/packet / t loss sensitive to other traffic users do not tolerate poor and unstable quality Solution QoS settings! Problems Performance of multiple real-time sessions in the same QoS class - Quality of Experience (QoE) Consistent policy in multi-domain environment (GEANT, NREN) VPN/Tunnel over public Internet, MPLS, IPS Lack of provisioning, testing and monitoring tools Performance monitoring the weakest point Where the problems occur on the path?

3 Medianet Developed by Cisco Intelligent network optimized for rich media Enhances the ability of the network to send, deliver and optimize rich media Brings media awareness to network devices and endpoints To provide a better experience to the end user Automatically adapt to dynamically changing network conditions Services Quality of Experience Session Control Content Virtualization Mobility Security Management Monitoring

4 Medianet Media Monitoring Provide much improved visibility into application health and performance measure Accelerate troubleshooting ti of media applications Set of features on routers, switches and endpoints Media Services Interface (MSI) IP SLA Video Operation (IPSLA VO) Mediatrace Performance Monitor

5 Media Services Interface (MSI) Agent built into cisco applications Provides a window to the user experience at the end point Applications and endpoints are aware of medianet MSI SDK provides a set of APIs enabling applications to use medianet network services autoconfiguration media monitoring

6 IP SLA Video Operation (IPSLA VO) Announced in April, 2011 Ability to generate realistic end-to-end RTP stream Media application profiles Usage defines traffic characteristics such as: bit rate, burst sizes, inter-packet-gaps, etc. configured by user available for download Simulate real application traffic after a major maintenance Stress test prior to an important event Identify and proactively resolve rich media problems across the network

7 Mediatrace Command line utility on cisco devices Traceroute sends IP/UDP traffic to remote point collects ICMP responds discovers and reports L3 path Mediatrace collects and reports hop-by-hop media performance statistics discovers and reports L3/L2 path any IP flow, not only for voice/video does not need to be enabled on every hop Firstly released in IOS 15.1(3)T 1(3)T for the ISR platforms

8 Mediatrace R2#mediatrace poll session 1... Mediatrace Hop Number: 0 (host=r2, ttl=255) Metrics Collection Status: Success Reachability Address: Ingress Interface: None Egress Interface: Tu1 Metrics Collected: Flow Sampling Start Timestamp: 13:09:21 Loss of measurement confidence: FALSE Media Stop Event Occurred: FALSE IP Packet Drop Count (pkts): 0 IP Byte Count (KB): IP Packet Count (pkts): IP Byte Rate (Bps): Packet Drop Reason: 0 IP DSCP: 40 IP TTL: 63 IP Protocol: 17 Media Byte Rate Average (Bps): Media Byte Count (KB): Media Packet Count (pkts): RTP Interarrival Jitter Average (usec): 4303 RTP Packets Lost (pkts): 0 RTP Packets Expected (pkts): RTP Packet Lost Event Count: 0 RTP Loss Percent (%): 0.00 Mediatrace Hop Number: 1 (host=r3, ttl=254)...

9 Mediascope Tool for visualization of mediatrace data Data collected by Web Services Management Agent (WSMA) Open source under the BSD license developed by Cisco! Step 1 - Choose and login to router Step 2 Choose the flow on the router

10 Mediascope Step 3 - Choose the parameters to plot (Packet Count) to size (CPU utilization) Step 4 - Choose the actions (set color if Packet Loss > 5)

11 Mediascope Step 5 show the graph Step 6 choose and compare the samples in time

12 Performance Monitor Network device s ability to analyze and measure media flows (voice, video and data traffic) to react on certain threshold - SNMP TRAP, Syslog to export measured data Flexible NetFlow to report to the users CLI, mediatrace, SNMP MIBs How it work? perates at the protocol level - RTP and TCP analyzes timestamps t and sequence numbers updates several parameters counters, status, events reports/exports it to the user

13 Performance Monitor NetFlow Fields Volume IP Packets Count IP Octets Count Media Stream Packets Count Media Stream Octets Count Rate Mean Media Bit Rate Media Packet Rate Measured Rate Media Rate Variation Loss Packet Loss Count Packets Expected Count Fraction Lost Loss Event Count Packet Drops Delay Round Trip Time (RTT) Inter-arrival Jitter max Inter-arrival Jitter min Inter-arrival Jitter mean

14 Performance Monitor Configuration Flow record What to match and what to collect Predefined RTP and TCP record, or configured by user: flow record type performance-monitor record-name match ipv4 source address match ipv4 destination address match ipv4 protocol match... collect counter bytes collect counter packets collect... Flow Exporter Where to export netflow data flow exporter exp-name destination ip-address transport t udp 2055 template data timeout 10

15 Performance Monitor Configuration Flow monitor Joins flow record and flow exporter flow monitor type performance-monitor monitor-name record record-name exporter exp-name cache timeout active 60

16 Performance Monitor Configuration Class Determines which flow traffic to monitor class-map match-all class1 match protocol rtp audio class-map match-all class2 match dscp cs5 match access-group name acl-name ip access-list extended acl-name permit ip host any

17 Performance Monitor Configuration Policy Includes Classes and Flow Monitors Sets alarms and actions policy-map type performance-monitor map-name class class-name flow monitor monitor-name react 1 rtp-jitter-average threshold value gt alarm severity alert action syslog

18 Performance Monitor Configuration Interface Enables Policy on the interface (input, output) interface FastEthernet0/0 service-policy type performance-monitor input policy-name service-policy type performance-monitor output policy-name

19 NetFlow based Medianet Software Comparing to traditional NetFlow software: should be exported from all devices/interfaces along the paths produces much smaller amount of exported data Cisco pushes the software vendors through Cisco Developer Network program (CDN) Scrutinizer medianet module, only visualizes medianet data ICmyNet.Media new application for medianet performance monitoring under development in partnership with Cisco under CDP

20 ICmyNet.Media features Support newly added Netflow fields Report statistics for a flow from each node on the path Display and analyze non-performance Monitoring statistics IP, time, in/out interfaces, DSCP, set thresholds Application recognition based on a variety of parameters User customizable src/dst IP address, port numbers, DSCP Maintain historical data time charts User tools to display and organize data filter, sort, top N and other reports User tool to display SNMP MIB data Support for generated alarms SNMP trap, syslog Base lining on the statistics Determine normal conditions and troubled conditions Configure Performance Monitoring on a network device

21 ICmyNet.Media Raw Data View

22 ICmyNet.Media Conversation View

23 ICmyNet.Media Router View

24 ICmyNet.Media Setting Applications

25 Network monitoring Correlate and analyze data from different modules: Medianet data (media flows) Traditional netflow data (all flows) SNMP monitoring data (throughput, CPU, memory) SNMP discovered data IP addresses, names, topology, status Logs syslog, traps Configuration ICmyNet toolset.flow.media.is.mon.config.mib.log.dns

26 Questions