Network Vision Software Database Audit and Analysis for Network Vision Inc. Newburyport, MA Maintenance Technician Report ivbackup_2013_0612_1009_915.pdf This is a sample Diagnostic report from a network in which several issues were created to test the capability of the Diagnostic system. It contains Duplicate IP, Device moves, and a large file transfer. This report is based on the database, ivbackup_2013_0612_1009_915.zzz Report generated on Jun 12, 2013 version 130227
1 Analysis Summary 1 Analysis Summary Introduction This Maintenance Report is intended to provide insight and guidance on the issues captured in the IntraVUE Database. Data will be organized in sections to highlight key parts and help simplify support. The maintenance report will contain sections to: - - - - - Provide details on the version and running time of the IntraVUE system List of Networks configured List of Devices in each Network Configuration Review to provide suggestions to improve the configuration and reporting of IntraVUE Network Analysis reviewing key parameters to identify devices having issues and make suggestions The report uses database data from various periods but is focused on data from the last 30 days. If a potential problem is identified it will also contain details on a course of action to be taken. In addition the report will contain links to obtain additional text information as well as video links for additional support. Email: help@intravue.net Phone: +1 978-499-7800 page 3
1 Analysis Summary Time used for this report: First event: 2011-09-13 08:24:52.0 Last event: 2011-09-13 17:50:04.0 First scanner data time: 2011-09-13 08:30 Last scanner data time: 2011-09-13 17:50 Number of days from first event to last scanner time: 1 Last Version of Intravue: 2.1.0e13 Product Key: 3ALZ2-XX03E-DA999-D3859-98967 Node count limit: 256 page 4
2. Table of Networks 2. Table of Networks The following table will list each network contained in the IntraVUE database. Each network contained in this list will be individually analyzed for issues occurring on the network. It is important when configuring IntraVUE that Local Area Networks (LANs and VLANS) be configured as separate IntraVUE networks with names that help identify each. List of IntraVUE networks Network Name Count Top Parent Manufacturing Network 1 57 10.1.1.96 Licensed for 256, total found 57 page 5
3. Network Analysis: Manufacturing Network 1 3. Manufacturing Network 1 3.1. General Network Details: Manufacturing Network 1 The Top Parent of this network is 10.1.1.96 List of network scan ranges: From To 10.1.1.0 10.1.1.255 192.168.200.174 192.168.200.174 10.1.50.0 10.1.50.15 Summary of Connection and Verification States: Known & New & Not Total Verified Verified Connected 52 2 54 Disconnected 1 2 3 Totals 53 4 57 page 6
3. Manufacturing Network 1 NOTE: The connection and verification status are as of the time the database was saved, Sep 13, 2011. NOTE: All devices should be verified. This will provide important details and better maintenance on device additions and moves. W W C = Connection Status Connected Disconected Wireless Connected Wireless Disconnected W - wireless access point V = Verified Status Known and Verified New or not Verified Device Move or conflict with new location verified Move or conflict with new location not verified w - wireless device Device Information: IP Address C V Mac Address Device Name Location Name Vendor Name 10.1.1.1 00 00 0C 07 AC 00 stswshc1.st3483 CISCO SYSTEMS INC. 10.1.1.2 00 0C 29 3C 97 2A vm-ub710svr Unknown VMware Inc. 10.1.1.15 00 07 7C 00 02 12 On-Time Plant R1, Row 7, rig Westermo Teleindustri AB 10.1.1.20 00 0C 29 6A 72 AD VMware Inc. 10.1.1.38 00 21 9B 00 C1 8B AGSNVIVOSTRO Dell Inc 10.1.1.40 00 0C 29 44 A0 8A JIM-2-1-DEV VMware Inc. 10.1.1.41 00 13 48 00 6B 1E Artila Electronics Co. 10.1.1.42 00 18 A9 00 01 55 Ethernet Direct 10.1.1.49 F0 AD 4E 00 20 CD Globalscale Technologies 10.1.1.55 00 0C 29 B7 34 B6 DEKI-HAYES VMware Inc. 10.1.1.56 00 18 A9 00 06 6F Ethernet Direct switch Conference Room Ethernet Direct 10.1.1.57 00 C0 A8 E1 47 2B ED Wireless ED Wireless GVC CORPORATION 10.1.1.58 F8 7B 7A 97 DA 9A Motorola Mobility Inc. 10.1.1.65 00 1A A0 90 EC 44 Dell Inc 10.1.1.67 00 0C 29 F6 E8 B3 VM2-XPPRO VMware Inc. 10.1.1.70 00 A0 45 00 22 D0 FL HUB AGENT Office Rack, Row 4, PHOENIX CONTACT middle GMBH & 10.1.1.74 00 0C 29 FB 55 2C NVI-G9CSA3TISQJ VMware Inc. 10.1.1.75 00 0C 29 AE 7B C0 Andover HVAC VMware Inc. 10.1.1.81 00 0C 29 DF B2 AA UB606LAMP VMware Inc. 10.1.1.84 78 AC C0 A4 F4 C8 ASWALES-HP Enclosure 403 Hewlett-Packard Company 10.1.1.85 00 0C 29 CF E9 B1 VM-SVCCONTRACTS Enclosure 402 VMware Inc. page 7
3. Manufacturing Network 1 10.1.1.88 00 1A A0 2F 4E 51 SUZANNE Enclosure 401 Dell Inc 10.1.1.89 00 0C 29 30 36 CF VMware Inc. 10.1.1.92 00 13 20 B9 BA 98 dim1100.i-vue.com Unknown (edit Intel Corporate /etc/snmp/snmpd.conf) 10.1.1.93 18 E7 F4 E1 F3 7C Apple Inc. 10.1.1.94 00 0C 29 7C 3B 04 VM-JIM-EMAIL VMware Inc. 10.1.1.96 60 EB 69 D2 FA 69 MARKSACER-PC Quanta computer Inc. 10.1.1.98 00 11 11 BF AD 31 AGSDIM3000 Intel Corporation 10.1.1.106 00 30 DE 00 15 1A Drive 234 Enclosure 384 WAGO Kontakttechnik GmbH 10.1.1.110 00 00 AA 9D BF 65 Phaser 6180DN-9DBF65 XEROX CORPORATION 10.1.1.121 08 00 06 01 00 00 Operator Station Enclosure 367 SIEMENS AG 10.1.1.136 00 18 A9 00 06 29 Ethernet Direct 10.1.1.137 00 18 A9 00 04 86 ED 1628 Switch 2 Behind Jim Ethernet Direct 10.1.1.150 00 20 4A 61 30 AE PRONET GMBH 10.1.1.160 00 50 04 14 01 9D oldlinux Andy_Swales_Desk 3COM CORPORATION 10.1.1.161 00 13 20 8F 6C 23 Intel Corporate 10.1.1.163 00 0C 29 19 01 53 UB810IMAP2 VMware Inc. 10.1.1.164 00 0C 29 BA 8F 0F bugzilla164.i-vue.com Unknown (edit VMware Inc. /etc/snmp/snmpd.conf) 10.1.1.165 00 0C 29 77 6D 0E QUICKBOOKS-XP VMware Inc. 10.1.1.168 00 13 20 8F 6B C9 NVI-W2KPRO-JIM Intel Corporate 10.1.1.169 00 1A A0 2F 52 93 JIM-PC Enclosure 405 Dell Inc 10.1.1.170 08 00 4E 37 36 8C 3Com SuperStack II 3Com 3COM EUROPE LTD. Switch 10.1.1.171 00 11 43 8C 85 C3 dell switch 171 scannerbench DELL INC. 10.1.1.173 00 11 43 92 59 01 DELL INC. 10.1.1.181 00 03 34 00 04 ED ControLogix Enclosure 392 Newport Electronics 10.1.1.190 00 50 43 01 5E 82 MARVELL SEMICONDUCTOR 10.1.1.191 F0 AD 4E 00 7A B1 MYWIFIPLUG Globalscale Technologies 10.1.1.200 00 A0 3D 00 53 D3 OPTO-22 10.1.1.203 00 80 63 0C 6C 22 MICE MM2 NVI Lab Hirschmann Automation and 10.1.1.221 00 07 AF 00 B1 00 N-Tron test switch Mobile, AL 36609 N-TRON Corporation 10.1.1.230 00 30 BD 2B 2A 99 ipcop_nvi Enclosure 407 BELKIN COMPONENTS 10.1.1.234 00 C0 3D 00 BF 3A CS-IV MINI 4.0 WIESEMANN & THEIS GMBH 10.1.1.244 00 0C 31 A1 05 C0 Cisco_Switch Cisco Cisco 10.1.1.250 00 1A A0 90 EC C6 INTERNALSERVER Dell Inc 10.1.1.252 00 0A F4 0A D9 80 cisco2950switch Enclosure 211B Cisco Systems 10.1.1.254 00 C0 85 36 9D 66 Fiery Printer Office ELECTRONICS FOR IMAGING 192.168.200.174 00 0F 90 84 FA 80 stswshd1.st3483 Cisco Systems page 8
3. Manufacturing Network 1 3.2. Configuration Review This section will analyze the database to identify general configuration issues that may improve IntraVUE's ability to provide better diagnostics. Any issues will appear as a 'Warning' and will include an 'Action Required' for proper deployment and to take full advantage of the IntraVUE diagnostics. Good. 95 per cent of the devices in this network are Admin Verified. Good. Less than 5% of the devices in this network do not have names assigned. Good: no unresolved node Good: No auto-inserted nodes having a managed switch as a child. Good: There are less than 5 devices in this network that are unverified, disconnected devices. WARNING: There are 2 red filled nodes in this network. Red filled nodes represent the original location of a device that has been admin verified and configured not to move. They are red filled to force your attention to them. Device Move. If a verified device is moved from the verified location a red filled box indicates the old, verified location and a tan filled box will represent the new location. ACTION REQUIRED. Move the device back and the red box will turn back blue, otherwise delete the red box and verify the new location. Duplicate IP or conflict. Duplicate IPs will make a device appear in two locations based on the two different macs of the devices with the same IP. The red filled and tan filled boxes show you the locations of the conflict. ACTION REQUIRED. Change the IP of one of the devices. Switch Move. Switches connected to (both) redundant routers have their packets take multiple paths, see 'trunking' under Help. Switches connected in a spanning tree ring that changes will cause red boxes at the verified positions of the ring, for those switches that change. ACTION REQUIRED: Edit the trunkingdefs.txt file in the case of redundant routers; Either delete the red boxes or cause the ring to return to its original configuration for spanning tree changes. page 9
3. Manufacturing Network 1 3.3. General Network Details: Manufacturing Network 1 3.3.1. Connection Issues Devices with connections issues: Reporting devices that have the highest connection problems (ping failures). You may want to check the connections, wire, and port speed settings to minimize or eliminate these issues In the future, connection issues may be broken into classes such as consistent and intermittant. Devices with Ping Failures 30 Day 60 Hour 6 Hour IP Address Device Name 2 hr counts 10 min counts 1 min counts 10.1.1.170 3Com SuperStack II Switch 56 10.1.1.203 MICE MM2 49 10.1.1.181 ControLogix 34 10.1.1.234 CS-IV MINI 4.0 33 10.1.1.221 N-Tron test switch 33 10.1.1.93 31 10.1.1.150 14 10.1.1.244 Cisco_Switch 12 10.1.1.252 cisco2950switch 10 10.1.1.160 oldlinux 9 10.1.1.58 8 10.1.1.121 Operator Station 5 10.1.1.70 FL HUB AGENT 5 192.168.200.174 stswshd1.st3483 5 10.1.1.106 Drive 234 4 10.1.1.136 4 Devices with Disconnection Events: Reporting devices that have the highest disconnect events (EXCEPT 'auto-connect' devices). Devices with Disconnections IP Address Device Name Last 30 Days page 10 Last 60 Hours Last 6 Hours
3. Manufacturing Network 1 10.1.1.58 4 10.1.1.234 CS-IV MINI 4.0 3 3.3.2. Device Issues Note: In the future, connection issues may be broken into classes such as consistent and intermittant. IP Address Name Threshold Avg Max Minutes Over Conseq. Over 10.1.1.244 Cisco_Switch 30.0 16.3 158.3 359 73 14 10.1.1.252 cisco2950switch 30.0 17.3 191.4 359 83 18 10.1.1.58 30.0 7.5 935.7 285 18 14 10.1.1.160 oldlinux 30.0 6.2 191.3 359 25 2 10.1.1.136 30.0 9.1 84.1 359 45 4 10.1.1.234 CS-IV MINI 4.0 30.0 16.2 260.4 359 62 11 Device Moves: Reporting devices which moved in the last 30 days which are admin verified and not enabled for automatic moves. Configuration Note: If any of these devices are allowed to move, the IntraVUE administrator should check the Auto Connect checkbox in Device Configuration. 10.1.1.49 2011-09-13 09:48:59.0 Device 10.1.1.49 moved from 10.1.1.136:2 to 192.168.200.174:21 2011-09-13 09:51:20.0 Device 10.1.1.49 moved from 192.168.200.174:21 to 10.1.1.136:2 2011-09-13 16:51:36.0 Device 10.1.1.49 moved from 10.1.1.136:2 to 10.1.1.171:49 2011-09-13 16:54:31.0 Device 10.1.1.49 moved from 10.1.1.171:49 to 192.168.200.174:21 10.1.1.106 Drive 234 2011-09-13 08:45:50.0 Device 10.1.1.106 moved from 10.1.1.96 to 10.1.1.244:9 10.1.1.160 oldlinux 2011-09-13 08:41:44.0 Device 10.1.1.160 moved from 10.1.1.252:3 to 10.1.1.252:2 Ping Response time issues: Reporting devices having periods in which the ping response threshold is exceeded for 2 or more consecutive minutes in the last 6 hours of scanning. Reported devices could be overloaded or having internal issues. They may be devices which should have their thresholds increased from the default, like wireless devices. page 11
3. Manufacturing Network 1 3.3.3. Addressing Issues Changed MAC addresses (potential duplicate IPs): These devices had changes in their MAC address in the last 30 days which might indicate a duplicate IP address. If this device has also been reported in the 'Device Moves' section, it is VERY likely to be a duplicate ip address. WARNING: IP 10.1.1.49 has move and mac change events and is probably a duplicate IP. 10.1.1.49 2011-09-13 09:47:32.0 Device 10.1.1.49 changed mac from f0:ad:4e:00:21:23 to f0:ad:4e:00:20:cd 2011-09-13 09:50:51.0 Device 10.1.1.49 changed mac from f0:ad:4e:00:20:cd to f0:ad:4e:00:21:23 2011-09-13 16:50:52.0 Device 10.1.1.49 changed mac from f0:ad:4e:00:21:23 to f0:ad:4e:00:20:cd Changed IP Addresses (potential duplicate MAC addresses): These devices had changes in their IP address in the last 30 days which might indicate a duplicate MAC address. Good: There are no IP change events indicating changes in MAC addresses. 3.3.4. Broadcast Issues Switches with 'Lost' SNMP. Reporting switches having lost SNMP events in the last 30 days. GOOD. There are no switches with lost SNMP events. Devices with bad SNMP: These devices incorrectly report their speed value resulting in bandwidth percentages that exceed 100%. GOOD: There were no SNMP device reporting bad 'speed' settings Potential broadcast storms in last month: Reporting times when at least one device has more than 50.0% transmit bandwidth and at least 3 other devices have greater than 50.0% receive bandwidth (Switches excluded). page 12
GOOD: No broadcast storms detected 3. Manufacturing Network 1 Point to Point traffic: The following end devices had simultaneous bursts in trasmitted and received traffic that exceeded 40% bandwidth in the last 60 hours. This could be a large file transfer between these two devices. Between 2011-09-13 16:17 and 2011-09-13 16:22 Transmit Receive 10.1.1.92 dim1100.i-vue.com 69.6 1.8 n/a Auto Inserted Node (port 6 of 10.1.1.136) 1.7 70.6 Between 2011-09-13 16:53 and 2011-09-13 16:55 Transmit Receive 10.1.1.92 dim1100.i-vue.com 76.4 1.9 n/a Auto Inserted Node (port 6 of 10.1.1.136) 1.9 77.4 page 13