Network Troubleshooting - Part 1

Network Troubleshooting and
Problem Identification- Part 1

Tips to identify Network Performance
&Traffic issues

© 2012, SolarWinds Worldwide, LLC. All rights reserved.

1

Agenda

Network Troubleshooting & Problem Identification

» 1. Troubleshooting Network Performance issues
a. Baseline Network Performance
b. Collect Network Device Performance Metrics
c. Switch/Router CPU utilization
d. Switch/Router Memory utilization
e. Interface/Bandwidth utilization

» 2. Troubleshooting Bandwidth and Traffic
a. NetFlow
b. Applications
c. Protocols
d. Top Talkers

» 3. How SolarWinds can help?

NETWORK TROUBLESHOOTING AND PROBLEM IDENTIFICATION
2

1. Troubleshooting Network Performance Issues

» “Slow Network Environment” becoming a very common phrase

» Slow environment performance is often first—and often incorrectly—
attributed to the network

» Hence, rapid identification and problem isolation is critical to the
administrator’s workload

3

1 a. Baseline Network Performance

» Baseline your network

» Compare current performance
• Against baseline
• Against vendor best practices
• Against service level agreements

» Reference networking and equipment forums

4

1 b. Collect Network Device Performance Metrics

» Helps to quickly identify the source of a problem.

» Using Simple Network Management Protocol (SNMP),
we can measure the performance conditions that are
specific to that device.

CPU Load & Memory utilization from
SolarWinds NPM
» You can monitor these device statistics using a
commercially available network monitoring software
products.

5

1 c. Switch/Router CPU Utilization
» Common symptoms of high CPU utilization within your switch
or router include:
 High percentages in the show process cpu command output
 Input queue drops
 Slow performance
 Services such as Telnet, console response, ping response, or updates fail
 High buffer failures
» Use the show process
cpu (for Cisco routers)
command to check if
CPU utilization is high
due to interrupts or
processes.

Cisco provides two great documents on Troubleshooting High CPU
Utilization and Troubleshooting High CPU Utilization Caused by
Interrupts.
6

1 d. Switch/Router Memory Utilization

» For Cisco routers, the symptoms of memory allocation failure include, but
are not limited to:

 The console or log message: "%SYS-2-MALLOCFAIL: Memory allocation of 1028
bytes failed from 0x6015EC84, Pool Processor, alignment 0"
 Refused Telnet sessions
 The show processor memory command is displayed no matter what command
you type on a console
 No output from some show commands
 "Low on memory" messages
 The console message "Unable to create EXEC - no memory or too many
processes"
 Router hanging, no console response.

7

1 d. Switch/Router Memory Utilization (Contd.)

» Possible causes of memory failure include:
• In Processor Memory ("Pool Processor" on all platforms)
• Memory Size Does not Support the Cisco IOS Software Image
• Memory Leak Bug
• Large Quantity of Memory Used for Normal or Abnormal Processes
• Memory Fragmentation Problem or Bug
• Memory Allocation Failure at Process = <interrupt level>

» In Packet Memory
• Not Enough Shared Memory for the Interfaces
• Buffer Leak Bug
• Router Running Low on Fast Memory

» For additional detail and troubleshooting steps for Cisco routers, see
Troubleshooting Memory Problems.
8

1 e. Interface/ Bandwidth Utilization

» Monitor the overall bandwidth utilization to
determine problems.

» Open source or free tools simplify the process of
gathering bandwidth utilization data and present
it in an easy-to-consume graphical format.

» SolarWinds free Real-Time Bandwidth Analyzer
is a commercially developed free tool that
displays network device interface utilization.
» If you determine that you have a problem then
you will want to get detailed information about
the interface on your router.
» On Cisco routers, you can view the information
about a particular interface using the “show
interface” command:

9

2. Troubleshooting Bandwidth and Traffic

» Bandwidth monitoring and traffic analysis helps to identify the network
needs and uses of servers and their hosted applications and also delivers
hard data that objectively verifies the ability of the network to meet
stated Service Level Agreements (SLAs).

» Traditional packet-based monitoring tools enable peering into individual
packets to determine their contents, the transactions between systems,
and the details of communications being passed along that network.

» Flow analysis provides insight into the flow of traffic within the network,
specifically the who and what of traffic consumption.

10

2. Troubleshooting Bandwidth and Traffic (Contd.)

» To help you understand the differences in perspective here, let’s take a
look at common ways used to measure traffic on a network:

» Protocol analyzers
 Analyzes conversations between devices on the network
 Gives detailed view of individual transactions between two devices and the
specific data being transferred between them.

» Hardware probes and distributed analyzers
 Can be positioned all across the network for the gathering of information and
it provides the whole-system perspective

» Traffic flow analyzers
 Leverages the data flow capture capabilities of the network device

11

2 a. NetFlow

» NetFlow is a network traffic monitor protocol developed by Cisco Systems for
collecting IP traffic information.

» Alternative flow technologies
 Juniper (Jflow); 3Com/HP, Dell and Netgear (s-flow);
 Huawei (NetStream); Alcatel-Lucent (Cflow); Ericsson (Rflow)

» SolarWinds NetFlow Traffic Analyzer (NTA) collects traffic data, correlates it into a
useable format, and then presents it to the user in a web based interface.

» NetFlow-based traffic monitoring characterizes traffic and provides a holistic view
into bandwidth utilization and WAN traffic, supports CBQoS validation and
performance monitoring.

12

2 a. NetFlow (Contd.)

» Configuring NetFlow on a Cisco router is a very straightforward and easy process.

» You can use a free tool such as SolarWinds NetFlow Configurator or you can
manually configure using the following steps:

13

2 a. NetFlow (Contd.)

» For statistics from the NetFlow data export, use the show ip flow export
command in user EXEC or privileged EXEC mode.

» Commercially available flow analysis and bandwidth monitor products simplify
the process of enabling NetFlow and display the raw numbers into easy-to-
interpret charts and tables.

14

2 b. Applications

» Applications on a network that
consume more than its fair share of
network bandwidth, impacts the
network capacity.

» Using effective flow analysis tools,
one can easily view the traffic and
usage patterns across the entire
network to identify problems.

15

2 c. Protocols

» Unlike packet-based tools, flow analysis
tools helps identify:
 Source
 Destination
 Protocol of streams across the
network.

» It crafts the effective network policies to
stream protocols while preventing the
ones that negatively impact the network
functionality.

16

2 d. Top Talkers

» The Top Talkers feature of NetFlow can be useful for analyzing and
troubleshooting network traffic in any one of the following ways:

 Security by viewing a list of the top talkers to see if traffic patterns are
consistent with Denial of Service (DoS) attacks
 Load balancing through the identification of the most heavily used
parts of your network
 General traffic study and planning for your network.

17

3. How SolarWinds can help?

» SolarWinds award-winning network management software
makes it easy to:
 Discover and map network devices
 Monitor network performance
 Analyze network traffic
 Manage and back up network configurations
 Track IP addresses
 Find rogue devices, and much more.

18

3 a. SolarWinds Network Performance Monitor

» SolarWinds Network Performance Monitor (NPM) makes it easy to quickly
detect, diagnose, and resolve performance issues and delivers real-time views
and dashboards that enable you to visually track network performance at a
glance.
• Simplifies detection, diagnosis, &
resolution of network issues – before
outages occur
• Tracks response time, availability, &
uptime of routers, switches, & other
SNMP-enabled devices
• Shows performance statistics in real
time via dynamic, drillable network
maps Includes out-of-the-box
dashboards, alerts, reports, & expert
guidance on what to monitor & how
• Automatically discovers SNMP-
enabled network devices & typically
deploys in less than an hour

19

3 b. SolarWinds NetFlow Traffic Analyzer

» SolarWinds NetFlow Traffic Analyzer (NTA) enables you to capture data from
continuous streams of network traffic and convert those raw numbers into
easy-to-interpret charts and tables that quantify exactly how the corporate
network is being used, by whom and for what purpose.

• Monitors network bandwidth & traffic
patterns down to the interface level
• Identifies which users, applications, &
protocols are consuming the most
bandwidth
• Highlights the IP addresses of top
talkers
• Analyzes Cisco® NetFlow, Juniper® J-
Flow, IPFIX, sFlow®, & Huawei
NetStream™

20

Helpful Resources
We invite you to learn more about SolarWinds Network Management Software

SolarWinds NPM Overview

Explore the FEATURES
of SolarWinds NPM
• Network Fault, Availability & Performance
Monitoring
• Network Device Discovery, Mapping
• Alerting, Reporting & Intuitive Dashboards

--- Click any of the links above ---
21

Thank You!

22

Network Troubleshooting - Part 1

More Related Content

What's hot (20)

Viewers also liked (20)

Similar to Network Troubleshooting - Part 1 (20)

More from SolarWinds (20)

Recently uploaded (20)

Network Troubleshooting - Part 1