Observer Suite’s RMON Console
Observer Suite's RMON console adds RMON Probe device management and data collection integrated into the Observer interface. Utilizing the Observer Suite with the RMON console extends the functionality of the Observer Suite to any segment, switch, or device that contains an RMON Probe. The Observer Suite, including the RMON console offers a complete standards driven tool that is unmatched in functionality, ease of use, and integration.

Why Use RMON?
RMON (Remote Network Monitoring) is fast becoming the industry standard for traffic management and packet level data collection for multi-segment LANs and WANs. Using RMON as a standard across your entire network allows traffic analysis for all network segments and switches from a single management console running the Observer Suite.

RMON Management
RMON provides standard information that a network administrator can use to monitor, analyze, and troubleshoot a group of distributed local area networks (LANs) and interconnecting WANs from a central site.

RMON can be supported by hardware Probes (embedded in a switch or router) or through software Probes (such as Network Instruments RMON2 Probe running on a Windows 98/2000/XP system). Regardless of where the RMON Probe is located, Observer's RMON console can provide detailed RMON Probe reporting.

For example, many LAN switches include a firmware Probe that can track RMON information as traffic flows through the device. This hardware-based Probe gathers RMON information for presentation to the network administrator with a graphical user interface such as Observer's RMON console. Alternately, an administrator can install software based Probes on a server or workstation located on the segment that requires monitoring and collect RMON data for later display within Observer's RMON console.

RMON Probes may collect up to 19 types of information known as RMON groups, including packets sent, bytes sent, packets dropped, statistics by host, statistics by conversations between two sets of addresses, and lists of certain kinds of events which  have occurred. RMON1 tracks 9 different groups, RMON2 adds an additional 10 groups. As an example, RMON helps a network administrator discover how much bandwidth or traffic each user is imposing on the network and what errors have been seen. Alarms can be set to warn of impending problems.

RMON Data in a Familiar Format
The RMON console displays both RMON1 and RMON2 data in Observer Suite's easy to use graphical user interface. This makes the often cryptic RMON tables easily accessible to any network administrator. For administrators or consultants who are familiar with Observer, they can immediately master RMON analysis.

RMON Probe Control
In addition to helping collect network traffic from RMON Probes placed on various devices on the network, the RMON console can configure RMON tables or variables on a Probe. Since the RMON MIB can monitor virtually all network traffic, the RMON console contains the necessary tools to easily manage the myriad bits of information that can be collected from a LAN segment by an RMON Probe. Additionally, the RMON console will examine your RMON Probe and report back the Probe's capabilities (i.e. RMON1 and/or RMON2 conformance).

RMON Data Displays
The RMON console offers standard Observer displays for easy viewing of your RMON data. In addition to the Observer displays, the RMON console also offers a complete RMON table showing all 19 groups and their contents in a table format. Specific RMON console displays depend on which version of RMON your Probe supports.

RMON1 Displays:
Bandwidth Utilization - shows your LAN's or switch's current bandwidth.

Utilization History - shows minimum, average, and maximum bandwidth presented graphically and numerically.

Utilization Thermometer - shows current utilization, and a 1 minute and 5 minute average in a thermometer display.

Top Talkers - records top stations, receiving, sending and total traffic. Includes percent, total packets, broadcasts, multicasts (each per second) for each station on your LAN.

Pair Statistics (Matrix) - tracks all conversation pairs on the LAN. Allows zooming in on a specific conversation for easy viewing of troubled connections. Graphical Matrix shows pair conversations with lines that reflect total traffic flow.

Network Activity Display - shows critical network utilization and broadcast information graphed against a packet traffic reference line. This display can show you the health of a LAN at a glance and can warn of impending slowdowns due to broadcast or multicast storms. Includes % of broadcasts/multicasts relative to traffic volume. Grades current broadcast state with easy, color coded "heads-up" display.

Vital Signs Display - displays network errors for Ethernet or Token Ring.

Ethernet - packets too big/small, CRC+alignment, and collisions. Token Ring - 28 MAC layer errors reported by Type I, II, III and beacon (monitor errors are not supported by RMON).

RMON2 Displays:
Packet Capture & Decode - decodes all primary protocols and SubProtocols (over 500 protocols decoded - see Observer's protocol decode listings for more information).

Filters - directional, library of protocol presets and offsets, custom offsets with use of up to twenty offsets simultaneously.

Protocol Statistics - provides a breakdown of all traffic divided by protocols and subprotocols presented in table or graph format. Shows how your LAN's bandwidth is being utilized. Highlights "unexpected" protocols caused by incorrect system configuration. Allows your network to be designed around precise traffic flow measurements.

Web Observer - allows viewing of a Web server from the standpoint of traffic flow into and out of the server. Displays addresses on server and the percent of network traffic being generated by each address.

Router Observer - lets you focus Observer on a specific device (usually a router). Designed to provide a view of a router or device, and specifically, if that device's rated flow capacity is being overrun. Displays packets, bytes, packets and bytes/sec plus percent of the device's interface being used (i.e. percent of T1 connection). Also displays 1-minute and 1-hour average "pipe" utilization.

Triggers & Alarms - triggers can be set to flag a particular network activity. Preset triggers are available as well as the ability to define your own. Actions can be a pop-up window, printed trouble tickets, append to an event log, send an email, page, or execute a user defined program. Allows automatic notification and recording of specific network errors.

Discover Network Names - Discovers all MAC addresses and auto-aliases for IP addresses and DNS name resolution. Name import is also available for SNA, AppleTalk, DECnet and other environments.

RMON Table - Displays all RMON1/2 data exactly as it is stored in the RMON Probe.

RFC Support
The RMON console for Observer offers complete RMON RFC support. This includes RFC 1757/2819 (RMON1 Draft Standard - Ethernet old/revised), RFC RFC 1513 (Token Ring RMON consoles), RFC 2021 (RMON2) and RFC 2074 (Protocol Identifiers).