Re: [nmrg] draft-irtf-nmrg-snmp-measure-06.txt: your conclusions?

Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de> Wed, 17 September 2008 20:59 UTC

Date: Wed, 17 Sep 2008 22:59:23 +0200
From: Juergen Schoenwaelder <j.schoenwaelder@jacobs-university.de>
To: Benoit Claise <bclaise@cisco.com>
Subject: Re: [nmrg] draft-irtf-nmrg-snmp-measure-06.txt: your conclusions?
Message-ID: <20080917205923.GA4615@elstar.local>
Mail-Followup-To: Benoit Claise <bclaise@cisco.com>, nmrg@ibr.cs.tu-bs.de
References: <48D15992.80201@cisco.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <48D15992.80201@cisco.com>
User-Agent: Mutt/1.5.18 (2008-05-17)
Cc: nmrg@ibr.cs.tu-bs.de
Precedence: list
Reply-To: j.schoenwaelder@jacobs-university.de

On Wed, Sep 17, 2008 at 12:25:06PM -0700, Benoit Claise wrote:

> I understand that this future RFC covers an approach to carrying out  
> large scale SNMP traffic measurements, and not what you observed.  
> However, have you published your observations somewhere?
> I'm specifically interested in
>
>     3.2.  Periodic vs. Aperiodic Traffic . . . . . . . . . . . . . .  9
>     3.5.  Table Retrieval Approaches . . . . . . . . . . . . . . . . 10
>     3.6.  Trap-Directed Polling - Myths or Reality?  . . . . . . . . 10
>     3.7.  Popular MIB Definitions  . . . . . . . . . . . . . . . . . 10

Gijs van den Broek, a student at the University of Twente, has been
working on 3.2 [1] and as far as I know he is working on a paper
writeup. We at Jacobs have been working on 3.5 and when we talked to
the people from Twente, we found out that we need common definitions
for our conversation to be effective since we did similar things but
slightly different and under different terms.

So we joined forces to get common definitions in place and work on 3.5
somewhat stalled. The definitions are meanwhile somewhat stable [2]
and we are now working on updating our implementations to use them and
then hopefully we can continue on 3.5. I am not sure much work has
been done on 3.6 yet.

Some early results concerning 3.7 can be found in [3]. We now have
some additional traces but still like to get more and perhaps some of
the analysis reported in [3] needs to be redone on a larger data set.

For [2], there was a working Internet-Draft which Gijs presented at
the NMRG meeting next to the Philadelphia IETF. We turned the draft
<draft-schoenw-nmrg-snmp-trace-definitions> into the conference paper
[2] in order to get quickly a citable document in place.

/js

[1] J.G. van den Broek: Periodicity of SNMP Traffic, BSc Thesis,
    University of Twente, August 2007.

[2] J.G. van den Broek, J. Sch"onw"alder, A. Pras, M. Harvan: SNMP
    Trace Analysis Definitions, Proc. 2nd International Conference on
    Autonomous Infrastructure, Management and Security (AIMS 2008)",
    LNCS 5127, July 2008.

[3] J. Sch"onw"alder, A. Pras, M. Harvan, J. Schippers, R. van de
    Meent: SNMP Traffic Analysis: Approaches, Tools, and First
    Results, Proc. 10th IFIP/IEEE International Symposium on
    Integrated Network Management (IM 2007), May 2007.

-- 
Juergen Schoenwaelder           Jacobs University Bremen gGmbH
Phone: +49 421 200 3587         Campus Ring 1, 28759 Bremen, Germany
Fax:   +49 421 200 3103         <http://www.jacobs-university.de/>

[nmrg] draft-irtf-nmrg-snmp-measure-06.txt: your … Benoit Claise
Re: [nmrg] draft-irtf-nmrg-snmp-measure-06.txt: y… Juergen Schoenwaelder