pinger: navigating the web site and mining the data les cottrell slac workshop at the university of...

PingER: Navigating the web site and mining the data

Les CottrellSLAC

Workshop at the University of Malaya (UM), Kuala Lumpur, June 24-25, 2013

Agenda• Navigating the PingER web site

• Accessing and viewing analyzed data

• Downloading and mining with Excel etc.

• Managing the system

PingER home site• Set bookmark at

http://www-wanmon.slac.stanford.edu/cgi-wrap/pingtable.p

• Prefer Chrome or Firefox, mostly works with MSIE

• Public face ofPingER

http://www-iepm.slac.stanford.edu/pinger



Home site menu bar: Introduction• Provides:

– Upper level information– An IEEE publication – Technical details– Etc.

Home page: Visualizations• Click on African

Internet Weather

• Congestion wave

• Monitoring sites/ participants

• Hosts per country by region

Access to PingER site map• Provides site map &

• Geographical deployment maps

PingER site map

PingER site map

http://www-iepm.slac.stanford.edu/pinger/site.html

8

Home page Icons access

• Pingtable: workhorse of PingER analysis

• Summary table of country to country connections

• Google map of PingER hosts

• Google Explorer

• Motion Metrics Bubble chart

9

Pingtable• This is the workhorse• www.slac.stanford.edu/cgi-wrap/pingtable.pl

UNIMASWorkshop, Sarawak, Dec 2012

HelpTable Form

10

Pingtable: Help


Technical assistance on metrics meanings

etc,

Help on table content etc.,

Coloring by thresholds

What to click on

11

Host labeling

• Host labeled <country>.<site>.. (most important 1st). – Assist in sorting etc.


12

Pingtable: Scroll right for host names etc.

• Get Internet host name, TLD and region for each host pair


13

Pingtable: Form selection

eGY Africa 2012Workshop, Nairobi Oct 2012

14

Pingtable: Metric selection

• Pull down to select from Avg RTT, jitter (ipdv), loss, throughput, MOS etc.


15

Pingtable: Select tick (time window)


• Pull down to select: hourly, daily, monthly, yearly etc.

16

Pingtable: Select From (Monitor(s))


• Pull down to select monitoring node(s): single monitoring host or all monitors in a country or region etc.

17

Pingtable: Select To (monitored host or site)


• Pull down to select To node(s): single monitored host/site or all hosts/sites in a country or region etc.

18

Aggregate all hosts in a site


• Pull down to select whether to aggregate all hosts in a site into one measurement

19

Select packet size


20

Pingtable: Select host type


• Pull down to select type of hosts to display: All, Monitoring, Beacons, Remote

21

Pingtable: other choices

• Change dataset: no longer any other choices

• Data points: removes pairs with little data

• Filter: Removes known anomalous data


22

Pingtable: Load selected data


• Click on Load into table and wait while data loads and display is rendered

23

Pingtable: Active links


24

Pingtable: Sorting

• Click on column heading:– Sorts by host name, host type (? Monitor|Beacon|

remote), metric value, TLD, Region


25

Pingtable ?• Click ? for more info

– Details on hosts, – Latest raw data,

• Format (see http://www-iepm.slac.stanford.edu/pinger/tools/retrievedata.html#rawdataformat)

– Summarized data


26

Pingtable (?): More information on pair • Select ‘From’ as EDU.SLAC.STANFORD.N3 &

Load into Table

• Click on ?

• Provides info from database on hosts, e.g.:– Lat/lon, location, web site, comments etc.


27

Pingtable: Rawdata

• Useful for seeing exactly when a host disappears or is reachable again by PingER , e.g. in case of events such as loss of Internet connectivity due to earthquakes, cable cuts, uprisings


28

Pingtable(?): Summarized data

• Provides summary statistics (min, avg, median max) for all chosen remote hosts seen from monitor, for 100 &1000 Byte pings

• Plus the slope of Bytes vs. RTT


Latest summarized data from (pinger.slac.stanford.edu): click here

29

Graphs of usage (via ?)

• Time series plot of RTT & Loss last 7 days including today so far from MY.UNIMAS.N4(pinger.unimas.my) to MY.UMT.EDU.N1(www.umt.edu.my):

click here, add csv file.


100% loss =unreachable

30

Graphs of RTT• Valuable if do not have Smokeping graphs, e.g.

for non SLAC monitors

• One day I will fix the tick marks.

• Also add csv file and cut and paste into Excel for more elegant plots


31

Pingtable: (?) Dynamic on demand traceoute

• Uses traceroute server available at most PingER monitors

• Click on


Current traceroute using http://www-wanmon.slac.stanford.edu/cgi-bin/nph-traceroute.pl?target=www.uda.ad

32

Traceroutes• Measured once per day


33

Traceroutes: Form

• Can select 3 days to view concurrently to look for important changes• Also can select the remote host• Currently only available for SLAC monitoring host


34

Traceroute: format


Traceroute for First selected datewww-wanmon.slac.stanford.edu_to_www.uda.ad_2012_11_30 1 rtr-servcore1-serv01-webserv.slac.stanford.edu (134.79.197.130) 0.452 ms2 rtr-core2-p2p-servcore1.slac.stanford.edu (134.79.252.162) 0.336 ms3 rtr-border1-p2p-core2.slac.stanford.edu (134.79.252.137) 0.388 ms4 slac-mr2-p2p-rtr-border1.slac.stanford.edu (192.68.191.245) 0.284 ms5 sunnsdn2-ip-slacmr2.es.net (134.55.217.2) 0.622 ms6 sunncr1-sunnsdn2.es.net (134.55.209.98) 0.714 ms7 eqxsjrt1-te-sunncr1.es.net (134.55.38.146) 1.138 ms8 *9 xe-4-1-0.par72.ip4.tinet.net (89.149.181.146) 151.131 ms10 interoute-gw.ip4.tinet.net (77.67.75.238) 209.653 ms11 ae1-0.mad-001-score-1-re1.interoute.net (89.202.161.21) 178.515 ms12 ae0-0.mad-001-score-2-re0.interoute.net (89.202.161.18) 178.086 ms13 ae1-0.bcn-002-score-1-re1.interoute.net (217.118.118.237) 178.303 ms14 (195.81.193.146) 176.546 ms15 *16 *

Traceroute for First selected datewww-wanmon.slac.stanford.edu_to_www.uda.ad_2012_11_30 1 rtr-servcore1-serv01-webserv.slac.stanford.edu (134.79.197.130) 0.452 ms2 rtr-core2-p2p-servcore1.slac.stanford.edu (134.79.252.162) 0.336 ms3 rtr-border1-p2p-core2.slac.stanford.edu (134.79.252.137) 0.388 ms4 slac-mr2-p2p-rtr-border1.slac.stanford.edu (192.68.191.245) 0.284 ms5 sunnsdn2-ip-slacmr2.es.net (134.55.217.2) 0.622 ms6 sunncr1-sunnsdn2.es.net (134.55.209.98) 0.714 ms7 eqxsjrt1-te-sunncr1.es.net (134.55.38.146) 1.138 ms8 *9 xe-4-1-0.par72.ip4.tinet.net (89.149.181.146) 151.131 ms10 interoute-gw.ip4.tinet.net (77.67.75.238) 209.653 ms11 ae1-0.mad-001-score-1-re1.interoute.net (89.202.161.21) 178.515 ms12 ae0-0.mad-001-score-2-re0.interoute.net (89.202.161.18) 178.086 ms13 ae1-0.bcn-002-score-1-re1.interoute.net (217.118.118.237) 178.303 ms14 (195.81.193.146) 176.546 ms15 *16 *

35

More Traceroutes

• Background information on traceroute servers– http://www.slac.stanford.edu/comp/net/wan-mon/

traceroute-srv.html

• List of servers by country:– http://www.traceroute.org/


36

PingER traceroute servers API• Most PingER installations have traceroute

servers.

• Perl API and web accessible xml file for database can be found by accessing file http://www-iepm.slac.stanford.edu/pinger/pingerworld/nodes.cf, see comment at start– This can be used to find out about PingER hosts &

in particular PingER traceroute servers

37

Pingtable: Smokeping• Click on the SLAC monitoring host in a line

– Not available for other monitors


38

Pingtable: Smokeping graph • Background is colored for loss (see legend)

– Black not reachable– Red 50%-90% loss– Magenta 20%-40% loss– Orange 5%-10% loss– Light yellow 0%-5% loss– Cyan 0% loss


39

Pingtable: Smokeping


Blue line average RTT, Smoke=jitterX axis in GMTY axis in seconds (m = msec)Start and end times given in legendSummary statistics given in legend

40

Pingtable: Smokeping graph Form

• Allows time window selection (also icons)• Size of graph, manual scaling• Colors for losses


41

Pingtable:Summary table• At the bottom provides:

– Summary stats (min, median, 95%, # pairs, etc.) for each time interval for chosen metric

– Can click on columns heading to download statistic


42

Pingtable.pl extract summary• Summary table at end (e.g. access via wget)

- Buried in the output from pingtable.pl is a comment line containing the summary data, forma (… = more of same)t:–––Each line of data is separated by a comma (,) –within a line each token is separated by a +. –The lines in turn are those from the 'Summary for Sites' table at the bottom of pingtable.pl output.–The first line gives the date, the second the min, the 3rd the 25%, the 4th the average, the 5th (i.e. \$lines[4]) line the median etc.–If there is no data for a token then there is an adjacent ++.

43

Download Pingtable data

• First choose some simple, interesting data:

• Select From = Malaysia

• Select To = Malaysia

• Metric = Average RTT

• Tick-type = last 60 days


44

Pingtable: Downloading data & further analysis

• Click here


This report is also provided in downloadable tab-separated-value (.tsv) format for use with Excel.

Firefox: box pops up, choose save. It should be in Downloads. Can try Start and Search for it

MSIE: box pops up, choose ‘save as’ and save on the desktop

Chrome: Appears at bottom left of browser window. Drag it to desktop

45

Open downloaded file with Excel

• Right click the pingtable.pl icon (probably on desktop).

• Choose “Open with” => “Choose Microsoft Excel”.

• Open the file


Dots = no data

46

Preamble to Excel analysis

• Insert the URL where in a newline at the start

• Delete columns A & C

• Select all (e.g. click on top left hand corner of table)

• Click on Replace in Home menu

• Replace all cells with only a period with a null

• Fix the date: take the Left most add in Excel format, the take the cell in next column to the right set =left one -1 and replicate right


47

Draw chart

• Select relevant data (e.g. a2:bf13)

• Click on Scatter chart under Insert Tab

• Now it’s a matter of improving the format to better understand the data


48

Icons access

• Table of country to country connections

• Maps of metric performance by Country

• Maps of number of PingER hosts by country

• Google map of PingER hosts

• Motion Metrics Bubble chartUNIMAS

Workshop, Sarawak, Dec 2012

49

PingER Summary Table• URL= www.slac.stanford.edu/cgi-wrap/table.pl

• Patience takes a long time


Help

Choose area aggregation

Metric

Month

50

Drilling down• Colors represent quality

• Click on headings & values to drill down to pingtable


51

Pinger Host per country

• URL: www-iepm.slac.stanford.edu/pinger/geomaps/pinger-node-count-geomap.html

• Scroll down for other regions• Mouseover country for node count


Can choose monitors or all nodes

52

Map

• Map– See monitors, beacons, remotes– Select metric, src, dst, draw colored lines

connecting, colors = metric value– Graphs of metric and pinger hosts per country

• Does not work in MSIE


53

Map• URL:

www.slac.stanford.edu/wan-mon/viper/pinger-coverage-gmap.html


Help

More information

54

Map help


55

Map More information• Mainly for developers


56

Map: choose Monitors


Selected only Monitors

57

Map: Beacons

• Beacons are remote hosts monitored by all monitors


Selected only Monitors

58

Map: Remote hosts


Selected only remotes

59

Map: Controls


60

Map: Locate Pakistan


61

Map: Locate Kota Samarahan


UMIMAS

62

Map: Locate UNIMAS


UNIMAS

63

Map: plot monitored links


64

Map plot time series last 365 days


Mouseover points to

get coordinates

Click on graph

65

Demo and Video• Interactive demonstrations of the data mining

capabilities of public data sources provided by organizations such as the UN and ITU coupled with monitoring data from PingER

• http://www-iepm.slac.stanford.edu/pinger/explorer.html

Summer Joint TechsStanford, July 2012

66

Video of motion metric bubble charts

• URL: – www-iepm.slac.stanford.edu/pinger/motion chart/

• 5.5 minutes


67

Managing• Site map

– Introductions

• Meta database– Oracle database => Perl require script and

pinger.xml files

• Data gathering status• Measurements:

– Run from cronjob each 30 mins

• Spotting anomalies, hosts with same IP addr, hosts with missing information (country, lat/lon

• Finding hosts• Finding location


68

Problems• Hosts change IP address

– Maybe v frequent, e.g. a cluster or slowly as host with same name is replaced with a new host with new IP address.

• Hosts not where you think they are

• No packet loss how to calculate Throughput ~ 1460(bytes)*8(bits)/(RTT*sqrt(loss))

• Throughput approx. only good for TCP Reno– OS’ such as Windows, Linux now allow other

congestion control algorithms


69

Joining• We need several monitoring hosts in Malaysia

and S.E. Asia

• Remove any UNIMAScaused anomalies

• Detailed study of MalayE2E Internet performance

• Trilateration researchplatform

• From PingER home pagepull down joining and get started


70

Joining – Remote Hosts • Only monitored

• No need to do anything

• Host has to respond to pings & be reliable– Lightly or consistently loaded

• Finding hosts – Contacts– Developed HostSearcher


71

HostSearcher.pl• Gets list of <1000 hosts in TLD from Google

– Options to only select www or .edu etc.

• Checks if pingable

• Uses GeoIPTools (www.geoiptools.com) to get location

• Manually go to web site – Look for street address, city etc., (contacts)

• If well known site try latitude & longitude finder– http://www.satsig.net/maps/lat-long-finder.htm

• Choose based on how representative it is – Proximity to other hosts etc. UNIMAS

Workshop, Sarawak, Dec 2012

72

Monitoring Hosts

• 80 working monitors worldwide

• Invitation letter for monitoring sites– www-iepm.slac.stanford.edu/pinger/letters/invite-monitor.doc– Describes PingER & its goals– Gives information on public access to results– Provides requirements of monitoring host– Tells how to get started (download and install)


73

Monitoring Host requirements• Responds to pings, known location, contact

• In DNS

• Linux and usual utilities (dig, mail, make Perl +XML::Simple

• Web server (e.g. Apache)

• Lightly loaded


74

First install Reverse Traceroute server


• Self contained Perl CGI for web server – Supports IPv4 & IPv6

• Instructions:– www.slac.stanford.edu/comp/net/wan-mon/Pinger2/

install2.html– Appears at: http://ip_name/cgi-bin/traceroute.pl

• E.g. http://pinger.cern.ch/cgi-bin/traceroute.pl

• Responds to requests for traceroutes from traceroute server to a target host

• Also a ping and tracepath server• Installed at most PingER monitor sites

– www-wanmon.slac.stanford.edu/cgi-wrap/reflector.cgi?PE=set&function=landmarks

75

Also is a ping server

• icfamon.dl.ac.uk/cgi-bin/traceroute.pl?target=www.cern.ch&function=ping

• Used by TULIP trilateration research project– Locate a target by pinging from multiple landmarks– Use the RTT to estimate distance– Use trilateration to locate target– See

www.slac.stanford.edu/comp/net/wan-mon/tulip/


76

Install PingER2 measurement engine


• Install: www.slac.stanford.edu/comp/net/wan-mon/Pinger2/

Joint Techs: I2 & ESnet,Stanford

Internet10 ping request packets each 30 mins

RemoteHost(typicallyweb server)

>ping host

Ping response packets

Measure Round Trip Time & Loss

Uses ubiquitous ping

Monitor Host Caches data

On

ce a Day

Repositories

NUST

77

Status of Monitoring hosts

• See http://www-iepm.slac.stanford.edu/monitoring/checkdata/Data successfully

gathered

Data partially gathered

Host not pingable

today

No data gathered

78

Trilateration for User Location of an IP Host (TULIP)

• Want to verify where a IP node is located– Tools such as GeoIPTools work reasonably well for

end host (names and IP addresses)– Usually (www.satsig.net/maps/lat-long-finder.htm)

usually works for well known sites– For tracing routes however unless the name of a

router gives it away they are usually identified (e.g. by GeoIPtools) as being at the corporate HQ of the router owner (e.g. Qwest, Level3, the NREN etc.)


79

TULIP

• Based on using ping to measure RTT from a landmark (e.g. a PingER monitor) to target

• Today most of the RTT is based on how far the signal has to go over the backbone

• Distance = d(km)=RTT(ms)*100km/ms– Speed of light in vacuum = c=300km/sec– In fibre or copper cable=(2/3)c= 200km/sec– For round trip =(1/2)*(2/3)c= 100km/sec


80

• Can use these distance measured from multiple nearby landmarks to use trilateration to estimate the location of the target.

• Challenges:– The fibre path is not direct

• Globally or locally

– There are no nearby landmarks


pinger: navigating the web site and mining the data les cottrell slac workshop at the university of...

Documents

internet host

host pairunimasworkshop

host names

host labelinghost

host typeunimasworkshop

single monitoring host

type of hosts

pinger web siteaccessing