Tech Talk: Learn What Flow Analysis Tells Us About Network Usage at CA World 2016
0 likes469 views
The document summarizes a presentation about analyzing network traffic at CA World 2016 using CA Network Flow Analysis. It discusses how CA Network Flow Analysis was used last year to monitor traffic from the CA World show floor and identify top bandwidth consumers like AppleTV, SharePoint, and Outlook. This year, the speaker plans to again monitor show floor traffic, compare it to last year's data, and share insights during the session. The presentation provides an overview of CA Network Flow Analysis and Cisco Application Visibility and Control (AVC) capabilities for deep network traffic analysis.
Tech Talk: Learn What Flow Analysis Tells Us About Network Usage at CA World 2016
- 2. 2 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD © 2016 CA. All rights reserved. All trademarks referenced herein belong to their respective companies. The content provided in this CA World 2016 presentation is intended for informational purposes only and does not form any type of warranty. The information provided by a CA partner and/or CA customer has not been reviewed for accuracy by CA. For Informational Purposes Only Terms of this Presentation
- 3. 3 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD Abstract CA Network Flow Analysis provides deep visibility into the composition of network traffic to help technical staff deliver optimal application performance and validate data. Insight into who’s using the network and what they’re doing can be extremely useful for those who are responsible for network performance and resolving issues that impact business services. At last year’s CA World, we quietly monitored the traffic from the show floor to the outside world and were a bit surprised to see how much traffic and bandwidth were being consumed by AppleTV, SharePoint and Outlook. This year, we plan to monitor the show floor traffic again, compare it to last year’s data and share the insight with you during this end-of-the-conference session. Come find out what CA Network Flow Analysis tells us about bandwidth usage at this year’s event. It’s not reality TV, but a reality session. Daniel Brzoska CA Technologies Advisor, Presales
- 6. 6 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD Network Traffic Analysis Network Device Performance Application Response Time Analysis Unified Communications QoE Anomaly Detection Common Dashboard & Reporting Core Capabilities Network Traffic Analysis Visibility into network traffic composition, behavior, utilization and the impact on application performance • Identify applications running on the network • Identify the bandwidth associated with each application • Link capacity for future growth
- 8. 8 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD CA Network Flow Analysis § Easy. Single, data center-based collection point for network traffic analysis, without requiring probes or hardware appliances to be deployed & maintained in each location § Comprehensive. 100% visibility into how the network is being used— who’s consuming network resources, what users are doing, where their traffic is going and how the network is prioritizing their traffic to ensure high quality user experiences § Proactive. Plan and manage network performance with QoS policy validation, capacity trends and analysis and anomaly detection. § Cisco IVT Certified. Enhanced application visibility with Cisco’s AVC- enabled devices for rich accounting, classification and reporting of applications running on the network 100% Visibility into Network Traffic and Behavior §
- 10. 10 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD App Awareness with Cisco Application Visibility/Control Pervasive App Visibility Business Policy-based Rules Comprehensive Reporting • No additional hardware • Rich data collection using NetFlow v9/IPFIX • Easy to integrate into many reporting tools • No need for complex IP and port ACLs • See inside HTTP flows to identify specific Cloud applications • Better use of costly bandwidth • Per-branch and per-application level reporting VISIBILITY TO 1000+ APPS SMART CAPACITY PLANNINGNO PROBES Private Cloud Branch DC/Headquarters WAN NetFlow v9 Enterprise Edge AVC AVC CSR Proliferation of Devices Users/ Machines 60% of IT Professionals Cite Performance as Key Challenge for Cloud ISR ASR AVC AVC
- 13. 13 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD AVC Operation – NBAR2 § Detect over one thousand applications in its first release; its heuristic analysis engine allows NBAR2 to identify applications regardless of ports applications may be running on § Support of NBAR2 Protocol Pack (PP) allows updating application signature while the routers are running; new Protocol Pack is released every month § Application categorization uses NBAR2 attributes to group similar applications to simplify application management for both classification and reporting § Extract information from application such as HTTP URL, HTTP User Agent, SIP URL, for export or classification
- 15. 15 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD Perf. and Collection – Traffic Statistics – Classification § 1 byte of Classification Engine ID; the Classification Engine can be considered as a specific registry for application assignments § 3 bytes of Selector ID; the Selector ID length varies depending on the Classification Engine ID § Classification Engine ID defines the context for the Selector ID; values can be IANA (L3 protocol, L4 port), NBAR (NBAR2 custom application) or Cisco (NBAR2 Deep Packet Inspection) § CA Network Flow Analysis currently only supports Engine ID 13
- 17. 17 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD Cisco Platform Requirements § AVC requires a license to enable the functionality presented § License Info: – ISR G2 (Cisco 880/890) – Advanced IP Services – ISR G2/CSR1000 – AX License – ASR 1000 - Advanced IP Services (AIS) or Advanced Enterprise Services (AES) license, and in addition, AVC license (FLASR1- AVC-RTU)
- 19. 19 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD Configuring AVC § Create a flow exporter § Create a flow monitor § Apply to interfaces (LAN/WAN/Tunnel/Port- Channel)
- 21. 21 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD You can add a complete set of default NBAR2 application mapping rules in a batch import operation; you perform this task on the command line by using the nbar2.csv file that comes with the product Follow these steps: 1. Log in to the CA Network Flow Analysis console server or stand-alone server as a user who is a member of the Administrators group 2. Open a command prompt 3. Navigate to the directory that contains the nbar2.csv file: Enter the following command: cd <install_path>reporterracmd where: 4. <install_path> is the product installation path; the default path is C:CANFA 5. Enter the following command: racmd -import nbar2.csv 6. If any errors occur during the import, error messages are shown; if no message is returned, the import succeeded with no problems Import Application Mapping Rules
- 22. 22 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD Validate NBAR2 Application Mapping Rules § Open up the CA Network Flow Analysis UI § Click Administration – Application Definitions § There should be ~11 pages of rules § Key Items to look for: – Rules with NBAR2 Engine ID and Application ID
- 25. 25 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD Thank you. Stay connected at communities.ca.com
- 26. 26 © 2016 CA. ALL RIGHTS RESERVED.@CAWORLD #CAWORLD DevOps – Agile Ops For more information on DevOps – Agile Ops, please visit: http://cainc.to/wYXSg6