Codima autoAnalyzer™ FAQs

Following are some frequently asked questions specifically about the autoAnalyzer™ Consultancy Kit. Click each FAQ to view the answer.

autoAnalyzer™ Background Information

1. What is the autoAnalyzer™ Consultancy Kit? What is the autoAnalyzer™ Consultancy Kit?
   The autoAnalyzer™ Consultancy Kit is used for Trend Analysis and troubleshooting. In simple terms the autoAnalyzer™ application operates on Microsoft Windows® XP/2003 Server Platforms, using standard Network Adapters/NICs. It includes:

   • Monitoring functionality – statistical analysis
   • Protocol Analysis functionality – packet analysis with expert system
   • SNMP Management/Agent functionality
   • autoMap™ - Discovery process restricted to a set number of managed devices

   Analysis can be undertaken with a single autoAnalyzer™ Consultancy Kit or you can use a autoAnalyzer™ probe in conjunction with a Remote Manager to extend the domain.

   Segment Map

   The autoAnalyzer™ also has a map display created by monitoring frames on the segment. This should not be confused with the autoMap™, which is an active enterprise level discovery tool.

   Hide this FAQ
2. What is the Remote Manager? What is the Remote Manager?
   In simple terms the Remote Manager is a component of the Remote Management System. Which can be supplied as an add on. It provides the console view to show the information supplied by the Probes.
   Hide this FAQ
3. What are Probes? What are Probes?
   There are a range of Probe types:

   • Probe Type 1:
     autoVoIP™ functions only
   • Probe Type 2:
     Monitoring functions (statistical analysis); Analyzer functions (protocol analysis with Expert system); SNMP Management/Agent functionality
   • Probe Type 3:
     Combines Probe type 1 and 2

   Hide this FAQ

Scope / Applications:

1. What are the applications for the autoAnalyzer™ tools? What are the applications for the autoAnalyzer™ tools?
   Troubleshooting and Trend Analysis

   • Provision of real-time traffic, error and protocol patterns (Segment Map)
   • Provision of traffic profiles for trend analysis (Traffic Module): Top Talkers, Traffic error patterns, Traffic distribution by protocol
   • Provision of time-related fault information (History Module)
   • Provision of reports in HTML, CSV and TSV format covering traffic and error trends (Reports Module)
   • Isolation of faults on the monitored segment
     • Using statistical analysis features associated with Traffic and History Modules and Reports module to provide evidence
     • Using Capture/Review Module and autoFilters to gather capture frames to provide evidence
     • Using the Expert Packet Analysis facility to analyze frames in capture buffer and pre-captured frame files
   • Provision of information for Network Planning (Traffic Module)
   • Provision of a central point for viewing information (Segment Map)
   • Provision of an early warning system. Using the Alarm and Events Module, emails can be sent out automatically when thresholds breached or new devices identified on the network.
   • Logging of network changes
     • New MAC Address monitored
     • New Unit type identified
     • IP address identified
     • Node Names discovered
     • Logging of events associated with network security
     • Logging of important network and node events
   • Learning about normal operation (Capture/Review Frames Module and autoFilters). E.g., What are the dialogs associated with users accessing specific applications?

   SNMP Manager Operations

   • Browsing Local SNMP Nodes and displaying the SNMP Information obtained
   • Maintaining a database of SNMP statistics and events
   • Logging Alarms and Events associated specifically with SNMP statistics, i.e., following threshold breaches and status changes.
   • Logging any SNMP Traps monitored on the local segment

   SNMP Agent Operations

   • Responding to SNMP Requests from SNMP Managers. SNMP Managers would compile the Codima MIB and be able to browse autoAnalyzer™ to obtain current and historical information covering both SNMP devices monitored by the autoAnalyzer™ and non SNMP devices identified through passive analysis of the frames on the segment.
   • Issuing SNMP Traps to SNMP Managers. SNMP Managers would compile the Codima MIB and be able to read the Trap issued by autoAnalyzer, traps would cover events and threshold breaches associated with both SNMP devices monitored by the autoAnalyzer™ and non SNMP devices identified through passive analysis of the frames on the segment.

   Hide this FAQ
2. Are there any limits to the number of devices/nodes the autoAnalyzer™ monitors? Are there any limits to the number of devices/nodes the autoAnalyzer™ monitors?

   Yes, the system will automatically filter on the first 450 unique MAC addresses it monitors and store them in the Node database, which is used to create the Segment Map and Node level Traffic Views. However the nodes selected can be controlled, using a New Node Filter facility which enables the user to define the traffic level which should be applied before a node is added to the Node Database.

   This is to ensure that the Map does not get filled with Nodes which do not transmit more than a few frames onto the segment. This process allows you to make the best use of the 450 Node level Filters.

   This limit is on a per system basis, so if using multiple probes, it will be 450 per probe.

   Hide this FAQ
3. Can I integrate with SNMP Managers? Can I integrate with SNMP Managers?

   The Codima Toolbox includes tools which provide SNMP Manager Integration, e.g., autoAnalyzer™ Consultancy Kit, autoVoIP™ Consultancy Kit, Probes.

   This is done by accessing the fully integrated SNMP Module. This module can add value to an already installed SNMP Manager, in a number of ways.

   Extend SNMP Managers Range to Cover Non-SNMP Nodes:

   • Issue Traps to the Manager in respect of problems associated with Non-SNMP Compliant Nodes, immediately extending the SNMP Managers range.
   • Issue Traps in respect of all the Traffic/Errors on a Segment. (i.e., monitoring actual real time loading and errors, not the loading/error information obtained from SNMP compliant nodes), providing the manager with a complete/impartial view of the segments traffic.

   This will use information obtained from Passive Analysis of the Network. Traps can be issued to multiple SNMP Managements systems, for full information, Contact Us.

   Note: The SNMP Manager must have compiled the Codima MIB. The MIB {Enterprise.226} is included in the file set installed with the Codima Toolbox.

   Hide this FAQ