network analysis tips and tricks with omnipeek
DESCRIPTION
An un-patched system that was compromised. Users trying to connect to a box that’s not there. Traps being sent out on an issue that’s ignored by the monitoring system. Do any of these issues sound familiar? These are the types of issues our professional service engineers find and address on a daily basis. With a corporate history spanning 23 years, and hundreds of person-years of customer-facing network analysis and troubleshooting experience, it’s clear that we’ve come across more than a few problems along the way. It’s time for us to share. In this web seminar our team of customer-facing engineers will highlight some of their favorite problems, including how they uncovered the problem, what they recommended to solve it, and how they verified that the proposed solution was successful. Please join us for this highly informative, real-world demonstration of what really goes wrong in enterprise networks. And be sure to bring your questions! In this web seminar, we will cover: Common and not so common problems seen on today's networks Tips for identifying common problems Tricks for addressing common problems What you will learn: How common problems get missed by standard monitoring systems Why deep packet inspection succeeds when other solutions fail How to find, fix, and verify common, and not so common, network problemsTRANSCRIPT
www.wildpackets.com © WildPackets, Inc.
Show us your tweets! Use today’s webinar hashtag:
#wp_tipstricks with any questions, comments, or feedback.
Follow us @wildpackets
Jay Botelho
Director of Product Management
Follow me @jaybotelho
Network Analysis
Tips and Tricks
Joe Habib
Director of Professional Services
© WildPackets, Inc. #wp_tipstricks
Administration
• All callers are on mute ‒ If you have problems, please let us know via the Chat window
• There will be Q&A ‒ Feel free to type a question at any time
• Slides and recording will be available ‒ Notification within 48 hours via a follow-up email
2
© WildPackets, Inc. #wp_tipstricks
Agenda
• Introduction
• Tips and Tricks ‒ Know what your key services are doing
‒ Identify all protocols and who is using them
‒ Keep an eye on protocol “tells”
‒ Know where you are connected
‒ How to approach WLAN analysis
‒ Customizing OmniPeek using Protospecs
‒ Focus (select related), Understand (Experts), See (Visual Expert)
• WildPackets Corporate Overview
• WildPackets Product Line Overview
3
www.wildpackets.com © WildPackets, Inc.
Tips and Tricks
Focus (select related), Understand
(Experts), See (Visual Expert)
www.wildpackets.com © WildPackets, Inc.
Tips and Tricks
Understanding Your Key Services
www.wildpackets.com © WildPackets, Inc.
Tips and Tricks
Identify All Protocols and Who Is
Using Them
www.wildpackets.com © WildPackets, Inc.
Tips and Tricks
How to Approach WLAN Analysis
www.wildpackets.com © WildPackets, Inc.
Tips and Tricks
Customizing OmniPeek Using
Protospecs
www.wildpackets.com © WildPackets, Inc.
Q&A
Show us your tweets! Use today’s webinar hashtag:
#wp_tipstricks with any questions, comments, or feedback.
Follow us @wildpackets
Follow us on SlideShare! Check out today’s slides on SlideShare
www.slideshare.net/wildpackets
www.wildpackets.com © WildPackets, Inc.
WildPackets Corporate Overview
Optimizing Network and Application Performance
© WildPackets, Inc. #wp_tipstricks
Corporate Background
• Experts in network monitoring, analysis, and troubleshooting
‒ Founded: 1990 / Headquarters: Walnut Creek, CA
‒ Offices throughout the US, EMEA, and APAC
• Customers spanning leading edge organizations
‒ Mid-market and enterprise lines of business
‒ Financial, manufacturing, ISPs, major federal agencies,
state and local governments, universities
‒ Over 7,000 customers / 60+ countries / 80% of Fortune 1,000
• Award-winning solutions that improve network performance
‒ Internet Telephony, Network Magazine, Network Computing awards
‒ United States Patent 5,787,253 issued July 28, 1998 • “Apparatus and Method of Analyzing Internet Activity”
© WildPackets, Inc. #wp_tipstricks
Why Our Customers Need Us
• VoIP, video, cloud, virtualization, and key business
applications are saturating critical network services
• Evolving network technologies create discontinuities ‒ 1 Gig 10 Gig 40 Gig 100 Gig networks
‒ Wireless, BYOD initiatives
• Users and business can not tolerate network
problems for mission critical services
Increasing demand for better real-time network visibility,
network analytics, network forensics, and DPI
© WildPackets, Inc. #wp_tipstricks
How We Create Value
We provide innovative, industry-leading, real-time
network performance management solutions
‒ Easy-to-use, easy-to-learn user interface
‒ Uniquely extensible solutions
‒ Wireless network leadership
‒ Detailed analytics related to network applications
‒ Fastest network traffic capture appliance in its class
‒ Technical superiority at competitive price point
WildPackets has continually advanced its solution to meet the needs of its
customers
© WildPackets, Inc. #wp_tipstricks
ROOT-CAUSE ANALYSIS
OmniPeek network analyzer performs deep packet inspection
and can reconstruct all network activity, including e-mail and
IM, as well as analyze VoIP and video traffic quality.
UNDERSTAND END-USER PERFORMANCE TimeLine and Omnipliance network recorders monitor
and analyze performance across critical network
segments, virtual environments, and remote sites.
NETWORK HEALTH
WatchPoint can manage and report on key
device performance and availability across
the entire network, from anywhere on the network.
GLOBAL
DISTRIBUTED
DPI
Unprecedented Network Visibility
© WildPackets, Inc. #wp_tipstricks
A History of Innovation
2003 Distributed real-time
troubleshooting
2001 • First 802.11
wireless analyzer
• First network
analyzer with
automated expert
analysis
2005 Combined distributed
network and VoIP
network analysis
2008 Enterprise-wide
Monitoring and Reporting
2009 Innovative dashboard
with drill-down for VoIP
and video
2012 • Capture, record, and
analyze from 40G
network segments
• First wireless network
analyzer to support
801.11ac, k, r, u, v, w
2011 • Total visibility with
zero packet loss
• First wireless
network analyzer to
support capture and
analysis of 802.11n
3-stream wireless
2010 First to achieve 11 Gbps
sustained capture-to-disk
www.wildpackets.com © WildPackets, Inc.
Product Line Overview
© WildPackets, Inc. #wp_tipstricks
OmniPeek Enterprise Packet Capture, Decode and Analysis
• Ethernet,1/10 Gigabit, 802.11, and voice and video over IP
• Portable capture and OmniEngine console
• Aggregate analysis data across multiple capture points
Omnipliance / TimeLine Distributed Enterprise Network Forensics
• High-performance packet capture and real-time analysis
• Stream-to-disk for forensics analysis
• Integrated OmniAdapter network analysis cards up to 40G
WatchPoint Centralized Enterprise Network Monitoring Appliance
• Aggregation and graphical display of network data
• WildPackets OmniEngines
• NetFlow and sFlow
Omni Distributed Analysis Platform
© WildPackets, Inc. #wp_tipstricks
Omni Distributed Analysis Platform Software and Turnkey Solutions
• Enterprise monitoring and reporting
‒ WatchPoint Server
‒ OmniFlow, NetFlow, and sFlow Collectors
• Software probes and network recorders
‒ Omnipliance network recorders – Edge, Core
‒ TimeLine network recorders
‒ OmniAdapter analysis cards
• Distributed analysis software
‒ OmniPeek – Enterprise, Professional, Basic, Connect
‒ OmniEngine – Enterprise, Desktop, OmniVirtual
• Portable solutions
‒ OmniPeek network analyzer
‒ Omnipliance Portable
© WildPackets, Inc. #wp_tipstricks
Key New Features in v7
• 40G network support
• Analyze issues from end to end:
Multi-Segment Analysis (MSA)
• Collect data from non-technical end users:
OmniPeek Remote Assistant (ORA)
• Single, interactive dashboard for
utilization, top talkers, top protocols,
latency, Experts, flows, and wireless
signal strength
• New wireless specifications
‒ 802.11ac 802.11k
‒ 802.11r 802.11u
‒ 802.11v 802.11w
© WildPackets, Inc. #wp_tipstricks
OmniPeek Network Analyzer
• Distributed analysis manager
‒ Connect to and configure distributed OmniEngines, Omnipliances,
and TimeLines
• Comprehensive dashboards present network traffic in real-time
‒ Vital statistics and graphs display trends on network and application
performance
‒ Visual peer-map shows conversations and protocols
‒ Intuitive drill-down for root-cause analysis of performance bottlenecks
• Visual Expert diagnosis speeds problem resolution
‒ Packet and payload visualizers provide business-centric views
• Automated analytics and problem detection 24/7
‒ Easily create filters, triggers, scripting, advanced alarms, and alerts
© WildPackets, Inc. #wp_tipstricks
Omnipliance Network Recorders
• Captures and analyzes all network traffic 24x7
‒ Runs WildPackets OmniEngine software probe
‒ Generates vital statistics on network and application performance
‒ Intuitive root-cause analysis of performance bottlenecks
• Expert analysis speeds problem resolution
‒ Fault analysis, statistical analysis, and independent notification
• Multiple issue digital forensics
‒ Real-time and post capture data mining for compliance and troubleshooting
• Intelligent data transport
‒ Network data analyzed locally
‒ Detailed analysis passed to OmniPeek on demand
‒ Summary statistics sent to WatchPoint for long term trending and reporting
‒ Efficient use of network bandwidth
• User-extensible platform
‒ Plug-in architecture and SDK
© WildPackets, Inc. #wp_tipstricks
TimeLine Network Recorder
• Continuous network recording and comprehensive
real-time statistical display — simultaneously ‒ 12Gbps sustained capture with zero packet loss
‒ Network statistics display in TimeLine visualization format
• Rapid, intuitive forensics search and retrieval ‒ Historical network traffic analysis and quick data rewinding
‒ Several pre-defined forensics search templates making
searches easy and fast
• A natural extension to the WildPackets product line
• Turnkey bundled solution ‒ Appliance + OmniEngine, OmniAdapter, OmniPeek Connect
© WildPackets, Inc. #wp_tipstricks
Price/Performance Solutions for Every Application
Portable Edge Core TimeLine
Ruggedized
Troubleshooting
Small Networks
Remote Offices
Datacenter Workhorse
Easily Expandable
Enterprise, Highly-
Utilized Networks
Aluminum chassis / 17” LCD 1U rack mountable chassis 3U rack mountable chassis 3U rack mountable chassis
Dual 2.13 GHz Quad-Core Intel
Xeon L5630 "Westmere"
Quad-Core Intel Xeon X3460
2.80Ghz
Dual Intel Xeon Quad Core
E5530 2.4GHz
Dual Intel Xeon Quad Core
X5560 2.8GHz
24GB RAM 4GB RAM 6GB RAM 18GB RAM
2 PCI-E Slots 2 PCI-E Slots 4 PCI-E Slots 4 PCI-E Slots
2 Built-in Ethernet Ports 2 Built-in Ethernet Ports 2 Built-in Ethernet Ports 2 Built-in Ethernet Ports
6TB SATA storage capacity 1TB SATA storage capacity 8/16TB SATA
storage capacity
8/16/32/48TB SATA
storage capacity
4.5Gbps CTD 1.1Gbps CTD 3Gbps CTD 12Gbps CTD
WildPackets Network Recorders
© WildPackets, Inc. #wp_tipstricks
Centralized Monitoring for Distributed Enterprise Networks
• High-level, aggregated
view of all network
segments
– Monitor per campus, per
region, per country
• Wide range of network
data
– NetFlow, sFlow, OmniFlow
• Web-based, customizable
network dashboards
• Flexible detailed reports
• Direct link to detailed,
packet-based analysis
WatchPoint
© WildPackets, Inc. #wp_tipstricks
Comprehensive Support and Services
Standard Support
Maintenance and upgrades
Telephone and email contacts
Knowledgebase
MyPeek Portal
Premier Support
24 x 7 x 365
Dedicated escalation manager
2 customer contacts per site
Plug-in reconfiguration assistance
WildPackets Training Academy
Public, web-based, and on-site classes
Complete curriculum: technology and product focused
Practical applications and labs covering network analysis,
wireless, VoIP monitoring and advanced troubleshooting
Consulting and Custom Development Services
Deployment, configuration, and assessment engagement
Systems integration and testing
Application integration, driver, decode, interface development
© WildPackets, Inc. #wp_tipstricks
WildPackets Key Differentiators
• Visual Expert intelligence with intuitive drill-down
‒ Let computer do the hard work, and return results, real-time
‒ Packet /payload visualization is faster than packet-per-packet diagnostics
‒ Experts and analytics can be memorized and automated
• Automated capture analytics
‒ Filters, triggers, scripting, and advanced alarming system combine to provide
automated network problem detection 24x7
• Multiple issue network forensics
‒ Can be tracked by one or more people simultaneously
‒ Real-time or post capture
• User-extensible platform
‒ Plug-in architecture and SDK
• Aggregated network views and reporting
‒ NetFlow, sFlow, and OmniFlow
© WildPackets, Inc. #wp_tipstricks
24x7 Network Monitoring,
Analysis, and Troubleshooting
www.wildpackets.com © WildPackets, Inc.
Thank You!
WildPackets, Inc.
1340 Treat Boulevard, Suite 500
Walnut Creek, CA 94597
(925) 937-3200