Layer 4-7 Real-World Test Solution. Agilent Network Tester N5557A/N4192A

Similar documents
Next Generation IPv6 Network Security a Practical Approach Is Your Firewall Ready for Voice over IPv6?

Evaluating IPv6 Firewalls & Verifying Firewall Security Performance

The Next Generation in Automated Oscilloscope Test

CT LANforge-FIRE VoIP Call Generator

Network Simulation Traffic, Paths and Impairment

Agilent 4338B Milliohm Meter

IxLoad - Layer 4-7 Performance Testing of Content Aware Devices and Networks

Agilent Television Power Consumption Testing. Application Note

IxLoad: Testing Microsoft IPTV

diversifeye Application Note

Agilent N2X SIP Protocol Emulation Software

How To Use A Cisco Wvvvdns4400N Wireless-N Gigabit Security Router For Small Businesses

Spirent Avalanche AVALANCHE LOAD TESTING APPLIANCE

EdgeMarc 4508T4/4508T4W Converged Networking Router

TP-LINK. 24-Port Gigabit L2 Managed Switch with 4 SFP Slots. Overview. Datasheet TL-SG

Validate the performance and security of IPS/IDS, Firewall and Proxy - January 2009

Cisco WRVS4400N Wireless-N Gigabit Security Router: Cisco Small Business Routers

TP-LINK. 24-Port 10/100Mbps + 4-Port Gigabit L2 Managed Switch. Overview. Datasheet TL-SL5428E.

EXpert Test Tools PLATFORM SOFTWARE TOOLS FOR TESTING IP-BASED SERVICES

TP-LINK 24-Port Gigabit L2 Managed Switch with 4 SFP Slots

Cisco RV180 VPN Router

Application Delivery Testing at 100Gbps and Beyond

Cisco IPS 4200 Series Sensors

Agilent U2000 Series USB Power Sensors

Observer Analysis Advantages

TP-LINK L2 Managed Switch

SonicWALL Clean VPN. Protect applications with granular access control based on user identity and device identity/integrity

CT LANforge WiFIRE Chromebook a/b/g/n WiFi Traffic Generator with 128 Virtual STA Interfaces

Agilent N5970A Interactive Functional Test Software: Installation and Getting Started

TP-LINK. 24-Port 10/100Mbps + 4-Port Gigabit L2 Managed Switch. Overview. Datasheet TL-SL

Agilent Technologies Performing Pre-VoIP Network Assessments. Application Note 1402

IxLoad: Advanced VoIP

Gigabit Multi-Homing VPN Security Router

The Cisco ASA 5500 as a Superior Firewall Solution

Benefits. Product Overview. There is nothing more important than our customers. DATASHEET

Cisco RV 120W Wireless-N VPN Firewall

Agilent Mobile WiMAX R&D Test Set Solutions: Software and Technical Support Contract

APV9650. Application Delivery Controller

TP-LINK. Gigabit L2 Managed Switch. Overview. Datasheet TL-SG3216 / TL-SG

PCI Express Probes for Agilent E2960B PCI Express Analysis Systems

itvsense Probe M-301/M-304

Improving Web Application Firewall Testing (WAF) for better Deployment in Production Networks January 2009 OWASP Israel

Agilent Automotive Power Window Regulator Testing. Application Note

Agilent N2X Layer 2 MPLS VPN Emulation Software

Ixia Director TM. Powerful, All-in-One Smart Filtering with Ultra-High Port Density. Efficient Monitoring Access DATA SHEET

Agilent MATLAB Data Analysis Software Packages for Agilent Oscilloscopes

Product Overview. Product Family. Product Features. Powerful intrusion detection and monitoring capacity

Agilent E5063A ENA Series Network Analyzer

Cisco RV110W Wireless-N VPN Firewall

PCI Express 1.0 (2.5 GT/s) Protocol Test

Cisco RV110W Wireless-N VPN Firewall

TP-LINK. 24-Port Gigabit Smart PoE Switch with 4 Combo SFP Slots. Overview. Datasheet TL-SG2424P.

10 Port L2 Managed Gigabit Ethernet Switch with 2 Open SFP Slots - Rack Mountable

Cisco RV082 Dual WAN VPN Router Cisco Small Business Routers

Cisco RV215W Wireless-N VPN Router

Per-Flow Queuing Allot's Approach to Bandwidth Management

Increase Simplicity and Improve Reliability with VPLS on the MX Series Routers

CT LANforge-FIRE VoIP Call Generator

Agilent U2000 Series USB Power Sensors

NLoad Balancing Stackable Switch

Benefits. Product Overview. There is nothing more important than our customers. DATASHEET

How To Set Up A Cisco Rv110W Wireless N Vpn Network Device With A Wireless Network (Wired) And A Wireless Nvv (Wireless) Network (Wireline) For A Small Business (Small Business) Or Remote Worker

Gigabit Content Security Router

What is the difference between an equivalent time sampling oscilloscope and a real-time oscilloscope?

Application Service Testing Enabling scalable delivery of layer 4-7 services

Delivering Network Performance and Capacity. The most important thing we build is trust

CISCO IOS IP SERVICE LEVEL AGREEMENT

Chapter 1 Personal Computer Hardware hours

Datasheet. Advanced Network Routers. Models: ERPro-8, ER-8, ERPoe-5, ERLite-3. Sophisticated Routing Features

Troubleshooting LANs with Wirespeed Packet Capture and Expert Analysis

Keysight Technologies Connecting Data Acquisition Systems to a Wireless Network

UNIFIED PERFORMANCE MANAGEMENT

Internet Protocol: IP packet headers. vendredi 18 octobre 13

The Triple Play Analysis Suite - VoIP. Key Features. Standard VoIP Protocol G.711 SIP RTP / RTCP. Ethernet / PPP. XDSL, Metro Ethernet

CaptIO Policy-Based Security Device

TP-LINK. 24-Port Gigabit L2 Managed PoE Switch with 4 Combo SFP Slots. Overview. Datasheet TL-SG3424P.

How To Configure The Fortigate Cluster Protocol In A Cluster Of Three (Fcfc) On A Microsoft Ipo (For A Powerpoint) On An Ipo 2.5 (For An Ipos 2.2.5)

Central Office Testing of Network Services

Cisco SR 520-T1 Secure Router

Enabling a Converged World. Testing Multiplay Networks

IxLoad-Attack: Network Security Testing

QuickSpecs. Models. Features and benefits Configuration. HP VCX x3250m2 IP Telecommuting Module. HP VCX x3250m2 IP Telecommuting Module Overview

TP-LINK. 24-Port Gigabit Smart Switch with 4 SFP Slots. Overview. Datasheet T1600G-28TS (TL-SG2424)

SSVVP SIP School VVoIP Professional Certification

COMPUTER NETWORK TECHNOLOGY (300)

Cisco Bandwidth Quality Manager 3.1

Course Overview: Learn the essential skills needed to set up, configure, support, and troubleshoot your TCP/IP-based network.

X-Series Signal Analysis. Future-ready instruments Consistent measurement framework Broadest set of applications and software

Load Balance Router R258V

Cisco Small Business Managed Switches

Oracle Enterprise Operations Monitor

Agilent 87421A/87422A Power Supply

FortiGate-3950B Scores 95/100 on BreakingPoint Resiliency Score (Security, Performance, & Stability)

24-Port 10/100Mbps + 4-Port Gigabit L2 Managed Switch TL-SL5428E

Testing VoIP on MPLS Networks

Architecture de Réseaux et Dimensionnement du Trafic

EDA Training Programs. Catalog of Course Descriptions

Agilent OSS access7 Signaling Meter

Cisco ACE 4710 Application Control Engine

Advanced Network Security Testing. Michael Jack

Transcription:

Agilent Network Tester Layer 4-7 Real-World Test Solution N5557A/N4192A Technical Data Sheet Most powerful and flexible solution for testing the real-world performance and stress resilience of network security, Triple Play and applicationaware devices.

Key Features Over 20 supported protocols for unprecedented test realism: HTTP, HTTPS, FTP, SMTP, POP3, DNS, Telnet, RTSP, RTP, IGMP, Transport Stream, SIP, H.323, MGCP, SNMP, NFS, CIFS, ICMP, Traceroute, NNTP, Jabber, DHCP Integrated network access protocols: IPSec VPN, PPPoE, DHCP, 802.1x, VLANs Comprehensive P2P security and traffic management testing: Gnutella, BitTorrent, FastTrack/ Kazaa, edonkey/emule DoS Attacks, network exploits, Virus and Worm simulation for validation of stress resilience limits under malicious load Stateful and intelligent Capture/Replay to simulate proprietary protocols and playback problematic traffic Comprehensive end-to-end (E2E) test capability for performance analysis of geographically distributed network systems Real and scalable VoIP, VoD and IPTV traffic to simulate Triple-Play service subscribers Granular MOS and MDI scores and realtime voice and video decoding for instant insight into Triple Play quality of experience Unique Transaction Variability feature allows to create multi-protocol traffic mixes indistinguishable from real user traffic Intuitive and user-friendly GUI saves hours of test design and reduces chances of human error State-of-the-art statistics based Application Mix Real-World Test Library saves hundreds of hours of test development High-performance high port density 3rd-Generation hardware simulates millions of subscribers generating Gigabits of real-world traffic Modular and distributed architecture delivers linear and virtually unlimited scalability Comprehensive IPv6 and IPSecv6 support enables testing of nextgeneration IPv6 devices and networks Product Overview The Agilent Network Tester is the most powerful and flexible solution for testing the real-world performance and stress resilience of network security and application-aware devices and networks. Network Equipment Manufacturers, Service Providers and Network Operators use Network Tester to analyze application-aware device realworld performance characteristics under peak levels of load and stress expected in real network environments. This allows test engineers to confidently assess equipment s ability to perform without disrupting service or compromising quality of user experience. Network Tester achieves unparalleled testing realism by using real Internet Data, VoIP, VoD and IPTV traffic in realistic protocol and transaction distributions combined with malicious attacks and exploits to subject the devices to complex traffic conditions indistinguishable from real-world network environments. Coupled with the ability to simulate proprietary protocols such as Peer-to-Peer, IM and On-line Gaming, Network Tester provides for the most comprehensive Layer 4-7 performance and stress resilience testing system on the market. Network Tester key application areas include network security, traffic management and content networking. Typical devices-under-test include Firewalls; Intrusion Detection and Prevention Systems; Virus and Spam SMPT POP3 HTTPS HTTP RSTP Clients DoS Clients (Optional) Agilent NetworkTester H.323 call SIP call DoS DUT Firewall, IPS, B-RAS VoIP, H.323,SIP Web, Mail, RTSP Filters; Content Switches and Servers; SSL Accelerators; Load Balancers and IPsec VPN Gateways. As security enforcement and other applicationaware features are integrated into Service/Edge Routers, B-RASs and IP DSLAMs, Network Tester provides perfect match to L4-7 performance and stress testing requirements of those network elements. Network Tester is specifically designed to test integrated devices where point test solutions fall short. POP3 SMPT Servers RTSP H.323 HTTPS answer HTTP H.323 answer Agilent NetworkTester Figure 1. Network Tester accelerates development and deployment of network security and application-aware devices. 2

Product Features Broadest in industry range of native application protocols over 100% standard compliant TCP/IP stack Due to protocol-specific enforcement and processing features, different application protocols have different performance characteristics on network security and other applicationaware devices. As real-world traffic is always a rich mix of different protocols and application transactions, the realworld traffic profile - its protocol and transaction distribution will ultimately determine the overall real-world performance and stress resilience limits of an application-aware device. Consequently, the only reliable way to measure application-aware device real-world performance and scalability is to subject it to a mix of protocols and transactions that it is expected to process in a real deployment environment. Agilent Network Tester, with it s broadest in industry range of natively supported application protocols, both on client and server sides, embraces the concept of real-world testing and allows to precisely simulate any complex network environment. Multi-protocol realistic traffic mixes that follow percentage distributions by generated throughput, transaction rates, transactions executed, bytes transferred or concurrent connections can be created within minutes using Network Tester Client Profile and Throttling features. The unique Network Tester Transaction Variability feature allows to easily create controlled and realistic transaction, protocol options and user behavior distributions within traffic of each protocol. All application traffic is generated with 100% standard compliant TCP/ IP stack that supports full range of TCP/IP features such as slow start, retransmissions and congestion avoidance. All that ensures that measurements performed with Network Tester reflect the device or system under test realworld performance, scalability and stress resilience limits with highest degree of precision, realism and reliability. Integrated network access protocols and VLAN support Modern application-aware devices often support variety of network access technologies such as PPPoE or Virtual Private Networks (VPNs), DHCP dynamic IP address allocation or authentication. Network Tester integrated range of access protocols such as IPsec, IPsecv6 (IPsec for IPv6), DHCP, PPPoE and 802.1x allows for comprehensive testing of performance and scalability of remote access, VPN and authentication solutions. Test scenarios such as IPsec VPN or PPPoE tunnel establishment rate, tunnel capacity and real-world application throughput over established tunnels can be created easily and within minutes. VLAN support is also fully integrated, enabling easy configuration of up to 4096 VLANs for rapid testing of virtual firewalls and VLAN-capable devices without the need for scripting. Testing Under Load and Negative Testing Considering the overwhelming pressure of DoS attacks and other malicious exploits that security and other network devices are subjected to in real-world network environments, it is no longer sufficient to simply determine how much of the legitimate traffic a device can process. Rather, considering a given intensity of malicious traffic that the device will have to drop or reject, it is vital to determine how much of the legitimate mission critical traffic it will still be able to process without compromising network stability or affecting user experience. Network Tester fully supports this critical testing concept, commonly referred to as Testing Under Malicious Load. Figure 2. Network Tester offers broadest in industry range of application protocols combined with malicious attacks and traffic impairments 3

Network Tester provides a broad range of malicious traffic generation capabilities that include TCP, UDP, raw IP and ICMP based DoS attacks, port scans and other exploits. DoS attacks and exploits can be interleaved in a controlled distribution with the legitimate and realistic application traffic. Network Tester also maintains a unique library of approximately 30,000 Virus/Worm signatures that can be embedded into legitimate protocol transactions, such as HTTP, SMTP or POP3, to simulate infected data payload. As a result, Network Tester provides instant insight into any applicationaware device real-world performance under malicious load as well as measures security products critical defense performance characteristics such as Threat Detection Rate (TDR) or Threat Blocking Rate (TBR). Network Tester Packet Disruptor feature allows to measure the impact of malformed packets or incorrectly formed sequences on device or system real-world traffic performance. Filters can be configured that will drop, fragment, resequence, replay or corrupt any percentage of transmitted packets on any destination IP address or port number. Packet Disruptor also enables simulation of sophisticated packet fragmentation attacks to validate application-aware device robustness and attack resilience. Geographically distributed end-to-end (E2E) tests Service Providers and Enterprise network operators deploy complex network infrastructures that span wide geographical areas and provide connectivity and network services to their clients. These network infrastructures are comprised of multiple devices that must work together seamlessly to enable high speed data delivery, guarantee robust security and ensure high quality of service. Agilent Network Tester built-in comprehensive E2E test capability allows to validate real-world performance and scalability of distributed network infrastructures, ensure seamless device interoperability and guarantee network and service resilience to stress and malicious attacks. Network Tester traffic modules can be placed in geographically remote locations at network boundaries to simulate POPs (Points of Presence) with thousands of remote network clients. Other traffic modules can be placed at network core or opposite network boundaries to simulate content server farms or remote application peers. Real transactions of any or all of over 20 applications protocols supported by Network Tester can be generated between the remote locations to simulate real-world traffic over complete network infrastructure. Network access protocols such as IPSec or PPPoE can be configured to simulate remote access scenarios. DoS attacks and network exploits can also be seamlessly injected to simulate real world conditions and validate network and service performance under malicious load. A single test controller in convenient location, connected to traffic modules over routed IP networks, can be used to design and execute the distributed test scenarios as well as collect and analyze the realtime test data. Over 150 network performance and QoE stats can be collected and analyzed in real time providing holistic picture of distributed network system performance, robustness and scalability. Using a choice of remote synchronization or synchronization with local high Stratum Internet Time Servers Network Tester traffic modules can perform high precision delay and jitter measurements over wide area networks. Figure 3. Use Network Tester to analyze performance of complete distributed network infrastructures. 4

100% Triple-Play ready - VoIP, VoD, IPTV and Internet Data on one interface Modern application-aware devices secure, manage, load-balance or otherwise process traffic from voice, video and data applications simultaneously. With its 100% standard compliant and fully featured support for SIP, H.323, MGCP, RTSP, RTP and IGMP protocols Network Tester can measure the impact of network security, traffic management or other application-aware device functionality on real-world Triple-Play traffic performance and Quality of Experience. Network Tester can generate high volumes of real VoIP calls using H.323, SIP and MGCP protocols at extremely high call rates, using a variety of codecs, with all calls streaming real WAV data. Large numbers of real VoD video streams can be added to the Triple- Play traffic mix using RTSP protocol over TCP or UDP transports. Fully featured IGMP support enables simulating IPTV and data streaming service subscribers changing channels and receiving multicast video feeds. In presence of diverse application traffic, DoS attacks and malicious exploits, Network Tester allows to validate security, robustness, realworld performance and scalability of Triple-Play devices and networks with high degree of precision and reliability. Realtime Triple Play Quality of Experience (QoE) analysis Network Tester for the first time in industry combines real-world application traffic generation with comprehensive passive analysis features. Network Tester uses integrated Agilent Triple Play Analyzer, state of the art protocol and QoE analysis tool to monitor test traffic and provide realtime insight into all aspects of VoIP, VoD, IPTV and data services performance and quality, all from the end user perspective. Triple Play Analyzer, running on Network Tester controller, calculates and tracks voice and video MOS and MDI scores in realtime on per call and per stream basis as well as performs deep packet and protocol analysis. This also includes unique ability to decode, view and listen to any voice and video stream in test traffic in realtime for instant service quality assessment. As part of network infrastructure deployment, Service Providers test complex network systems comprised of multiple elements working together to enable delivery of Triple Play services. Traditionally such tests are performed with an active test instrument that generates traffic via network infrastructure and collects measurements on its interfaces i.e. at the test bed boundary. This approach while sufficient for validation of a complete system performance or QoE, provides little insight into degradation effects imposed by the individual system components. In order to analyze performance effects of individual components, additional tests must be run for each network element. Agilent Network Tester, with its unique ability to combine intrusive testing with passive analysis, for the first time allows to decouple traffic generation from performance and QoE measurements. Network Tester, while generating realistic mixes of application traffic, uses the integrated Agilent Triple Play Analyzer for independent data collection, performance and QoE analysis in multiple arbitrary chosen points of the network i.e. around each critical network device the system consists of. This unique approach provides instant and holistic insight into performance and QoE of the complete network system, as well as into degradatory effects of every component all in one test scenario. This translates into orders of magnitude reduction of test time and efforts and allows to bring Triple Play services on line in shortest time possible. Figure 4. Network Tester combines real world traffic generation with state of the art QoE analysis. 5

Stateful and intelligent Capture/Replay To test device s ability to secure or prioritize proprietary protocols and measure performance, Network Tester provides capability to import and simulate traffic from practically any application. Network Tester Capture/Replay feature allows for capturing bidirectional traffic from live applications using the built-in industry-standard Ethereal tool and statefully replaying it while scaling it up to thousands of concurrently operating users. Replayed traffic can be combined with over 20 natively supported VoIP, streaming video, IPTV or data protocols as well as DoS attacks to form complex and realistic traffic mixes. Network Tester Capture/Replay feature also allows to record large volumes of real-world traffic that trigger errors or anomalous conditions in the network and replay it in the lab conditions. This enables the reproduction of network anomalies in a controlled environment and provides insight necessary for swift problem resolution. Unique Transaction Variability Feature Unique and powerful Network Tester Transaction Variability feature allows to rapidly create complex and realistic protocol, transaction size and application parameter distributions as well as load and user behavior patterns without any need for scripting. Every test parameter or parameter of any supported protocol and application can be associated with an array of values (Named List) that can be traversed during test run-time in a random, sequential or indexed fashion. For example, a Named List containing hundreds of URLs with percentage weights can be used in HTTP traffic to simulate realistic distribution of Web sites or documents being accessed. Similarly, a Named List containing VoIP codecs can be used to establish calls using multiple codecs in realistic statistical distribution. Variables (Named Attributes) can be associated with any protocol, application or test parameter and used in multiple places throughout the test scenario (Test Plan). For example a Named Attribute containing a router IP address may be used across multiple protocols, clients and servers to define the correct test-bed topology. In order to change the topology, the Named Attribute will only need to be changed once and the new value will be propagated across all places in the Test Plan where this router IP address is used. Transaction Variability feature includes support for a number of functions that can generate random or functionally distributed values from the defined range. For example a delay between HTTP GET operations can be randomly set between 5 and 15 seconds, resulting in the average of 10. Also, aggregate maximal throughput generated by a number of users can be plotted for the test duration to include smooth ramp-ups and ramp-downs as well as abrupt spikes to create a realistic load distribution over time. Figure 5. Integrated Agilent Triple Play Analyzer provides realtime insight into VoIP, VoD and IPTV quality of experience 6

Intuitive and user-friendly test design and execution environment The Network Tester graphical user interface NetPressure provides a powerful and intuitive multi-user environment for test design, test execution and real-time and off-line results analysis. Complex and realistic multi-protocol traffic mixes can be created in minutes and executed by thousands of virtual users according to easily defined load generation profiles. Over 150 performance metrics such as application throughput, transaction rates, response times, concurrent connections, packet latency, jitter and loss can be monitored in real-time in graphical and numeric formats as well as saved for off-line analysis. Powerful NetPressure Reporting Tool can be used to analyze results of multiple test runs simultaneously providing regression analysis data and generating graphical HTML reports. Most of the test parameters can be changed during test run time, taking immediate effect. This provides instant insight into performance impact of different traffic characteristics, such as application transaction size, destination ports or even protocol versions. Legitimate or malicious traffic intensity can be throttled at will during the test, enabling finer analysis of device under test performance limits. Multiple users can execute tests simultaneously logging to the controller remotely from their work places. Network Tester NetPressure graphical user interface is designed to be extremely intuitive, ergonomic and user-friendly, require minimal learning curve to operate even in complex test environments and ultimately save hundreds of hours of test design time. High performance 3rd generation Network Tester hardware Network Tester 3rd generation hardware N4192A provides industry leading traffic generation performance, capacity and port density in a slim 1U form factor. Network Tester is capable of generating multiple Gigabit line rates of diverse application traffic, simulate millions of virtual users, establish thousands of VoIP calls and VoD video streams, completely eliminating the need and hassles associated with an expensive collection of PCs. High-performance Network Tester N4192A modules can be stacked together delivering linear scalability and generating loads that are capable of saturating the largest and most powerful modern devices and networks. Network Tester N4192A modules are equipped with four Gigabit Ethernet test interfaces. Two of the interfaces are RJ-45 based 1000Base-T and 2 are SFP based and can accommodate for either 1000Base-T or 1000Base-SX interfaces. Any combination of SFPs can be used to test different devices without need for interconnecting switches or converters. Each Network Tester N4192A module can be configured to provide client or server side test functionality. Client or server modules can be used individually to test client or server content delivery performance or together to test traffic forwarding devices, such as firewalls, loadbalancers or VPN gateways. This further reduces test bed cost, complexity and footprint. Components of Test Plans such as traffic profiles, test interface definitions or virtual client network configurations can be saved and reused in different Test Plans, greatly reducing test development time. Figure 6. Create realistic traffic profiles using Network Tester Named Lists, Named Attributes and Functions. 7

Comprehensive IPv6 support As the IPv4 address space is running out, modern network devices and networks are transiting to use the IPv6 protocol. Performance and scalability of security and other application-aware devices with IPv4 traffic is not representative of these devices characteristics in IPv6. New and sophisticated DoS attacks exploit the IPv6 protocol features. Testing is vitally important to ensure smooth transition to IPv6 as well as IPv6 devices and networks security, robustness and performance. Network Tester leads the IPv6 security and L4-7 testing market with broadest native IPv6 application range, IPSecv6 VPN support and comprehensive IPv6 DoS attack generation capabilities. Real-world stateful application traffic can be generated over both IPv4 and IPv6 simultaneously and in controlled distributions to simulate IPv4->IPv6 transition environments. Malicious and DoS IPv6 traffic can be added to the profile to validate future IPv6 network s security and resilience to threats. Powerful test automation Network Tester powerful, flexible and user-friendly graphical user interface eliminates any need for developing scripts even for most complex realistic test scenarios. Basic test automation, repeating loops, access of third-party device from within the test environment (possibly to load a different configuration or security policy) can all be implemented with NetPressure graphical controls without resorting to scripting. For cases when basic automation is not sufficient, Network Tester provides powerful Tcl/Tk API for integration into most complex and sophisticated regression test environments. With Network Tester API, only a few lines of code are necessary to load and run any Test Plans that were previously created using the graphical user interface. Test results can be printed out or saved into a file with standard Tcl functions. This is, by far, the easiest way to automate the testing process. Alternatively, access to complete set of API functions allows for granular control and automation of complex test scenarios and building sophisticated test suites. Tk part of the API library even allows for creating customized high-level graphical user interfaces to existing tests or automated suites. Remote automation allows integrating Network Tester into any third-party distributed test system. For example, an external PC or Unix workstation running Tcl can control Network Tester test execution via its Tcl API. Test debugging with Stateful Transaction Spy To assist in test design, debugging and analysis, Network Tester provides the capability to capture, decode, and view any test traffic packets in their sequence of arrival. With the integrated industry-standard Ethereal tool, Network Tester state-aware Stateful Transaction Spy feature allows for detailed analysis and troubleshooting of any connection or application session - in real-time, without waiting for tests to complete. The Stateful Transaction Spy feature greatly speeds up your test design and troubleshooting, provides real-time in-depth test monitoring capability, and helps to rapidly find and resolve problems with sophisticated tests running in complex network topologies. Figure 7. NetPressure provides powerful, flexible and user-friendly environment: design, manage and run complex and realistic tests all through graphical user interface. 8

Network Tester Peer-to-Peer Protocol Library Peer-to-Peer (P2P) File Sharing applications such as Kazaa and edonkey have recently gained tremendous popularity. Traffic generated by these applications may consume significant portions of bandwidth in some networks. Due to its proprietary nature, usage patterns and high bandwidth requirements, P2P File Sharing applications present serious network security and bandwidth management challenges that cannot be addressed without testing. P2P Protocol Library included with Network Tester enables comprehensive performance and stress resilience testing of P2P-aware security and traffic management devices. The P2P Protocol Library is based on Capture/ Replay technology and includes support for the following popular applications: Gnutella, BitTorrent, FastTrack/ Kazaa, edonkey/emule P2P traffic generated with Network Tester P2P Protocol Library can be easily interleaved with traffic of any of 20 natively supported data, voice or video protocols to measure the P2P operation impact on real-world application performance and QoE. Agilent Application Mix Real-World Test Library Development of realistic test methodology and test procedures is a complex and lengthy process that includes live network monitoring, statistical analysis and implementation on the testing tool. This process can incur manpower costs comparable with the price of the test instrument. Agilent Application Mix Test Library, included with Network Tester, is a unique repository of state-of-the-art ready-to-run tests that allow for measuring the performance, scalability and stress resilience limits of application-aware devices under conditions indistinguishable from real-world networks. Application Mix test methodology uses realistic mixes of data, voice and video application traffic in protocol, transaction and parameters distributions based on extensive statistical analysis of traffic patterns measured in live networks. Application Mix Test Library comes as ready-to-run, well-documented Network Tester Test Plans that save hundreds of man-hours of test design and development. HTTP HTTPS SMTP POP3 VIDEO VoIP Figure 9. Application Mix Test Library provides statistic based real-world traffic profiles. Figure 8. Stateful Transaction Spy monitors the state of each executed application transaction in real time. 9

Technical Specifications N4192A Performance and Traffic Generation Capacity Stateful application traffic Appr 4 Gbps Concurrent TCP connections 1,000,000 HTTP transaction rate Over 70,000 HTTPS transaction rate Over 7,000 Concurrent VoIP calls Over 10,000 VoIP call establishment rate Over 7,000 Concurrent IPSec tunnels Appr 5,000 Network Access Protocols The following Access protocols are supported. Protocol IPv4 IPv6 Comments 802.1x Yes No Client only DHCP, DHCPv6 Yes No Client only Broadcast and Relay modes IPSec, IPSecv6 Yes Yes Client only For further information please refer IPsec Test Software Technical Datasheet PPPoE Yes No Client only Encapsulation The following VLAN encapsulation features are supported. Protocol IPv4 IPv6 Comments 802.1Q/VLAN Yes Yes Client and Service support for all protocols except NFS and SAMBA Utility The following utility protocols are supported. Support for VLAN range definition per client profile 4,096 VLANs per port Ping (ICMP) Yes No Client only Traceroute Yes No Client only Transport The following transport protocols are supported. Protocol IPv4 IPv6 Comments TCP Yes Yes UDP Yes Yes Application protocols The following application protocols are supported. Protocol IPv4 IPv6 Comments Attack Bricks Yes Yes Client only IP, ICMP, UDP and TCP attacks Sample test plans for DoS attacks using these attack bricks are supplied. DNS, DNSv6 Yes No Client and service FTP Yes Yes Client and service Active and Passive modes H.323 Yes Yes Client (for client-to-client emulation) For further information please refer to the N4195A VoIP Test Software Technical Datasheet HTTP Yes Yes Client and Service HTTPS Yes Yes Client and Service Secure modes supported: SSLv2, SSLv3, TLSv1 IGMP Yes Yes Client only IM (Jabber) Yes No Client and Service MGCP Yes Yes Client and Service NFS Yes No Client only NNTP Yes Yes Client only POP3 Yes Yes Client and Service RTP Yes Yes Client (send, receive, and bidirectional for client-to-client emulation) RTCP emulation optional; configurable rate 10

RTSP Yes No Client and Service MPEG/Transport Stream MPEG-II, MPEG-III, MPEG4, MOV and other hinted media files Yes Yes Client and Service simulation SAMBA/CIFS Yes No Client only SIP Yes Yes Client (for client-to-client emulation) For further information please refer to the N4195A VoIP Test Software Technical Datasheet SMTP Yes Yes Client and Service SNMP Yes Yes Client only SNMPv1, SNMPv2c Telnet Yes Yes Client only Measurement statistics collected during a test can be displayed numerically, graphically or saved to a CSV file. Application statistics refer to the application protocol traffic - for example, for the HTTPGet Protocol Brick, application transfers/second refers to HTTP GETs/second. See VoIP data sheet for VoIP-specific statistics General Statistics The following application protocols are supported. Statistic Aspects Units Application Transfer Rate Session Rate Total sessions Access Rate (network access bricks) Transfers/sec Sessions/sec Sessions Access/sec 11 Total accesses (network access bricks) L4-7 throughput Total errors Concurrent connections Timing Statistics Access Kilobytes/sec Megabits/sec Megabytes/sec Errors Statistic Aspects Units Response time (min, max, avg) Access connect time (min, max, avg) DNS time (min, max, avg) Connect time (min, max, avg) Authorization time (min, max, avg) Transfer time (clients) (min, max, avg) Transfer time (servers) (min, max, avg) Disconnect time (min, max, avg) Access destroy time (min, max, avg) Connections

Interface Statistics Statistic Aspects Units Interface throughput (Total Mb/s) Interface throughput (Mb/s received) Interface throughput (Mb/s transmitted) Interface throughput (Total packets/s) Interface throughput (Packets/s received) Interface throughput (Packets/s transmitted) Interface errors Interface collisions Megabits/sec Megabits/sec Megabits/sec Packets/sec Packets/sec Packets/sec Errors Collisions Packet Statistics Statistic Aspects Units Packet Jitter Time (Avg, Min, Max) Packet Delay Time (Avg) Packet Inc Out of Order Rate Packets Total Lost Packets Total Out of Order Join Time, (Avg, Min, Max) Join Time, (Avg, Min, Max) Packets/sec Packets/sec Packets Packets 12

System Configuration N4192A Traffic Module Hardware Management port USB utility ports Mode configuration Front Panel Indicators One system controller with NetPressure application software. One management LAN switch One to 32 modules per system with a laptop controller; up to 64 modules per system with a rackmount controller Four port module with: 2 x RL45 based 10/100/1000 BASE-T electrical Ethernet test interfaces and 2 x SFP based 10/100/1000 BASE-T electrical Ethernet or 2 x SFP based 1000BASE-SX optical Ethernet (SC connector) test interfaces 10/100/1000 BASE-T electrical Ethernet (RJ45 connector) interface Console port for recovery and diagnostics (cable provided) Two USB2.0 ports for remote storage and CD- ROM devices Client/Server mode selectable LCD for module identification, status and diagnostics indication. Link and activity indicators for electrical test ports and management port. Power and disk drive indicators Controller PC Portable laptop controller Rack-mount system controller Hi performance rack-mount system controller Supports 1 user Supports 3 concurrent users and integrated Triple Play Analyzer (TPA) Supports 5 concurrent users Rack-mount system controllers support remote access. 8-Port Ethernet Switch Ports 8 Type Fast Ethernet 24-Port Ethernet Switch (Included with laptop and rackmount system controllers) (Included with high performance rackmount system controller) Ports 24 Height 1U Type Fast Ethernet Rackmountable Yes; kit not included N4192 Traffic Generation Module Physical Specifications Dimensions AC Voltage Frequency Power Consumption 19 rack mountable 1U high (Mounting kit provided) Width 443 mm Depth 465 mm Height 44 mm 100 to 240V auto-sensing power supply 50/60 Hz 350 W maximum Operating temperature range 5-40 degrees Celsius Operating humidity range 20% to 90% RH Storage temperature range -20-70 degrees Celsius Storage humidity range 20% to 90% RH CSA CE ISM 1-A FCC Part 15 Class A UL United States & Canada 13

Configuration Please see the Network Tester Configuration and Ordering Guide for more information. Product Numbers N4192A Network Tester 4 test port 10/100/1000 Base-T and 1000Base- SX Ethernet Traffic Module Stackable 4-port multi-rate traffic generation module. Includes NetPressure software license for this module. N4188A - NetPressure Base Software NetPressure base software that provides all test functionality and protocol support except VoIP, IPsec and IPv6, for which additional licenses have to be included. N4193A NetPressure IPv6 Software License Adds IPv6 protocol emulation to the Network Tester system. N4194A Network Tester IPSec Software License for IPv4/v6 Adds IPsec protocol emulation to the Network Tester system. When combined with the IPv6 software license, IPsecv6 is also provided. N4195A Network Tester VoIP Software License Adds VoIP protocol emulation to the Network Tester system. When combined with the IPv6 software license, VoIPv6 is also provided. When combined with the IPsec software license, VoIPsec (VoIP over IPsec) is also provided. When combined with both the IPv6 and IPsecv6 software licenses, VoIPsecv6 (VoIP over IPsecv6) is also provided. N5543C Laptop controller with O/S loaded for Network Tester Includes controller PC, system software and system management Ethernet switch. N5544B Rackmount controller with O/S loaded for Network Tester Includes controller PC, system software, system management Ethernet switch and optional flat panel display.. N5545B High performance rackmount controller with O/S loaded for Network Tester Includes controller PC, system software, system management Ethernet switch and optional flat panel display. N5557A Network Tester Test Solution System bundle includes NetPressure software, choice of controller and hardware modules, user documentation and software media. Additional software licenses and software support options can be added. J6900A-001 Triple Play Analyzer Base Software Adds integrated Agilent Triple Play Analyzer for realtime performance, protocol and QoE analysis, troubleshooting and traffic monitoring. For detailed information on Triple Play Analyzer please visit www.agilent.com/find/tpa. J6900A-002 Triple Play Analyzer Video QoE License Enables Agilent Triple Play Analyzer realtime video QoE analysis. For detailed information on Triple Play Analyzer and video QoE measurements please visit www.agilent.com/find/tpa. J6900A-002 Triple Play Analyzer Video QoE License Enables Agilent Triple Play Analyzer realtime voice QoE analysis. For detailed information on Triple Play Analyzer and voice QoE measurements please visit www.agilent.com/find/tpa. Figure 10. Stack of Agilent Network Testers 14

Agilent s NetworkTester Solution Agilent s NetworkTester solution offers a powerful and versatile test platform to address the evolving test needs of connection and content aware devices and networks. NetworkTester provides Network Equipment Manufacturers, Public Network Operators and Private Enterprise Network Managers with the industry s leading solution for multi-protocol, multi-port traffic emulation for performance analysis of today s L4-7 networking devices. Warranty and Support Hardware Warranty Agilent warrants all NetworkTester hardware against defects in materials and workmanship for a period of 1 year from the date of delivery. Agilent further warrants that the NetworkTester will conform to specifications. During the warranty period, Agilent will, at its option, repair or replace the defective hardware. Services provided under this warranty will normally require return of the hardware to Agilent. Software Updates With the purchase of any new system controller Agilent will provide 1 year of complimentary software updates. At the end of the first year you can enroll into the Software Enhancement Service (SES) for continuing software product enhancements. Support Technical support is available throughout the support life of the product. Support is available to verify that the equipment works properly, to help with product operation, and to provide basic measurement assistance for the use of the specified capabilities, at no extra cost, upon request. Ordering Information To order and configure the test solution, consult your local Agilent field engineer. Software Warranty Agilent warrants all NetworkTester software for a period of 90 days. Agilent warrants that the software will not fail to execute its programming instructions due to defects in materials and workmanship when properly installed and used on the hardware designated by Agilent. This warranty only covers physical defects in the media, whereby the media is replaced at no charge during the warranty period. 15

www.agilent.com/find/networktester Remove all doubt Our repair and calibration services will get your equipment back to you, performing like new, when promised. You will get full value out of your Agilent equipment throughout its lifetime. Your equipment will be serviced by Agilent-trained technicians using the latest factory calibration procedures, automated repair diagnostics and genuine parts. You will always have the utmost confidence in your measurements. Agilent offers a wide range of additional expert test and measurement services for your equipment, including initial start-up assistance, onsite education and training, as well as design, system integration, and project management. For more information on repair and calibration services, go to: www.agilent.com/find/removealldoubt www.agilent.com For more information on Agilent Technologies products, applications or services, please contact your local Agilent offi ce. The complete list is available at: www.agilent.com/find/contactus Americas Canada (877) 894-4414 Latin America 305 269 7500 United States (800) 829-4444 Asia Pacific Australia 1 800 629 485 China 800 810 0189 Hong Kong 800 938 693 India 1 800 112 929 Japan 0120 (421) 345 Korea 080 769 0800 Malaysia 1 800 888 848 Singapore 1 800 375 8100 Taiwan 0800 047 866 Thailand 1 800 226 008 Europe & Middle East Austria 0820 87 44 11 Belgium 32 (0) 2 404 93 40 Denmark 45 70 13 15 15 Finland 358 (0) 10 855 2100 France 0825 010 700* *0.125 /minute Germany 01805 24 6333** **0.14 /minute Ireland 1890 924 204 Israel 972-3-9288-504/544 Italy 39 02 92 60 8484 Netherlands 31 (0) 20 547 2111 Spain 34 (91) 631 3300 Sweden 0200-88 22 55 Switzerland 0800 80 53 53 United Kingdom 44 (0) 118 9276201 Other European Countries: www.agilent.com/find/contactus Revised: March 27, 2008 Product specifications and descriptions in this document subject to change without notice. Agilent Technologies, Inc. 2007, 2008 Printed in USA, May 2, 2008 5989-6060EN