网络安全与防护课程迟恩宇实训指导1.20OMNI协议分析软件使用1.pptVIP

* * * * * 1. The presence of Multiple “Spanning Tree Topology Change” indications from the Expert 2. The presence of several variations on Spanning Tree Multicast address * 1. Selecting Physical Address display and sorting by Multicast Packets revels that 3 MAC addresses are the most significant contributors of Multicast Packets. 2. Investigation revels that these are 3 Switches within the Network topology. * 1. The presence of 802.1 Spanning Tree Protocol as the most significant protocol combined with the numerous Expert indications of Spanning Tree Topology Change points towards something amiss in the Switch mesh. * 1. Examination of The Peer Map and turning off all protocols except 802.1 Spanning Tree reveals the presence of not one, but two different Spanning Tree Multicast Groups. One group appears to be originating from the Cisco Switches and the other appears to be originating form the 3Com Switches. * * * * * * * * * 在 OmniPeek 看到的现象 #4 Analysis of the Peer Map reveals not 1, but 2 Spanning Tree Multicast Domains with 2 Root Switches! 结论与处理办法 察看细节的通讯发现 网络里面存在两种不同的Spanning Tree算法 CISCO IEEE 802.1d Spanning Tree Algorithm 3Com specific Spanning Tree Algorithm 这导致了Spanning Tree Rood计算出现问题 检验这一问题的存在 CISCO Switches 使用 IEEE 802.1d Spanning Tree Algorithm Several 3Com Switches 选用了 3Com specific Spanning Tree Algorithm 修改 3Com 交换机使用标准的802.1d 网络服务质量恢复 案例学习 案例2 应用性能的问题 网络概况 察看网络包传输 Detailed Packet Analysis, while accurate is very time-consuming Problems are reported within a specific conversation or flow 察看专家系统界面 工程师可以从OmniPeek里获得真正的 Application Response Time (ART) 分析能力 网络相应很快，然而应用响应却很慢 察看 PacketVisualizer Actual problem query reveals the source of the issue! 察看应用层信息 工程师进一步研究了死锁的条件和网络的状况 可视化地定位了问题核心在于应用而非网络 死锁问题是应用层的问题 信息被提交给数据库管理员和应用开发人员 共同合作调优了程序，避免了死锁现象的发生。 工程师进一步监控这些通讯发现性能得到了根本性的改善 每年省下了相当于上百万元的投资 问题定位与解决办法 Network is Technology * Who we are * * * * * * * * * * * * * * * * * * * * * OMNI 网络流量分析与故障诊断系统 计算机网络安全技术与实施 关于WildPackets 专业经验 WildPackets为网络提