Net

wor
kAdmi
nist
rat
orandTr
oubl
eshoot
ing
Yogi
taJat
la1Shwet 2
aPugaonkar kaBadugu3Pr
Moni of.Var e4Pr
shaBhosl of.
YashShah5
1
BE-I
NFTSt udent,Vidyal
ankarI nstit
uteofTechnology
,Wadala( E)
,
2
Mumbai BE-INFTSt udent,VidyalankarInst
it
uteofTechnology,
Wadal a
3
(E),Mumbai BE-INFTSt udent ,
Vi dyal
ankarI
nstit
uteofTechnology,
4
Wadal a( E),
Mumbai Pri
ncipal,Vidyal
ankarInst
it
uteofTechnology,
Wadal a( E),
Mumbai
5
Guide, Vi
dyalankarInsti
tuteofTechnol ogy,Wadala(E)
,Mumbai

Abst
ract-I
ntr
adi
ti
onalt
echni
queNet
wor
kadmi
nist
rat
ors,I
Tmanager
sandsecur
it
ypr
ofessi
onal
sfacea
never
-endi
ngbat
tl
e,const
ant
lychecki
ngonwhatexact
lyi
srunni
ngont
hei
rnet
wor
ksandt
hevul
ner
abi
li
ti
es
t
hatl
urkwi
thi
n.Thi
stooll
etsyou anal
yzenet
wor
ktr
aff
ici
nrealt
ime,and i
sof
tent
hebestt
oolf
or
t
roubl
eshoot
ingi
ssuesonyournet
wor
k.Admi
nist
rat
orscanusei
ttoi
dent
if
yfaul
tynet
wor
kappl
iancest
hat
ar
edr
oppi
ngpacket
s,l
atencyi
ssuescausedbymachi
nesr
out
ingt
raf
fi
chal
fwayar
oundt
henet
wor
k.
Thepr
oposednet
wor
kingToolcanbef
urt
herusedi
nor
gani
zat
ionsf
ormoni
tor
ingandanal
yzi
ngt
henet
wor
k
t
raf
fi
candi
nfor
mingvendori
ncasewear
efaci
nganynet
wor
krel
atedi
ssueswhi
chsavest
imeal
sol
ess
humani
nter
act
ion.I
tiski
ndoft
oolwhi
chl
etsy
oudi
ssectt
henet
wor
kpackett
othet
ini
estdet
ail
sandpul
lout
anynet
wor
krel
atedi
nfor
mat
ion.Wear
edevel
opi
ngt
hist
oolf
ormaki
ngal
lthecommuni
cat
ionsacr
osst
he
sy
stemst
orunsmoot
hly
.
.

Key d–Anal
wor yzi
ngt
raf
fi
c,l
esshumani
nter
act
ion,
Inf
ormi
ngVendor

I
. I
ntr
oduct
ion t
hatsecur
it
yinnet
wor
ktobeconsi
der
ed.

Net wor kAdmi ni

strat orTooli sanet worki ngt ool
for v ulnerabi l
ity scanni ng and net work anal yzing.
Net wor kadmi nistr
atorscanuset hi
st oolt oexami ne
the i ssue t hat occur r
ed i n t he net work, push
conf igur ationmechani sm ofswi tches,det ectingpor ts
and di scov ering host st hatar e av ai
lable and t he
serv i
ces t hey of fer,Toolcan adapt t o net wor k
condi tions congest i
on dur ing a scan i .
e.i nternet
connect ion management ,Mai ntenance management
forbet t
erper formance.
Thi st ooll etsy ouanal y senet wor ktraffi
ci nrealt i
me,
andi sof tent hebestt oolf ort roubl eshoot i
ngi ssues
ony ournet wor k.Admi nistr atorscanusei tt oi dent i
fy
faultynet wor kappl i
ancest hatar edr oppingpacket s,
l
at encyi ssues caused bymachi nes rout i
ng t r
affic
halfwayar oundt henet wor k.
Init
ially we ar e going t o anal y se the pr obl em by
moni toringt henet workcont i
nuousl ysot hatwecan
actual lydet ectwher eandwhatt hepr oblem occur red,
thenwear egoi ngtof ocusonswi tchandanal y sewhat
typeofer rorscanar iseandi nhow manyway st he
errorcanbeoccur redanddev elopamodul eforswi tch
mechani sm and t hen we ar e goi ng t o gat her
i
nf ormat ionaboutpacketsni f
fingf orpr operf low of
packet st henwear egoi ngl ater,wear egoi ngt of ocus
ont hepor tsi nnet wor ki .e.wear egoi ngt odet ect
whi chpor t
sar eopenandwhi chdev i
cesar eallot t
edso
I
I. Under
standi
ngt
heNATTool

Thet echni queused f ormoni t

oring net wor ki n an
organi zat ionasf oll
ows:
Ifanyor ganizat ionr equi rest okeept r
ackon
the t raf f
ict hati sf lowi ng i nt he net wor k ofan
organi zat ion,t hent heor gani zationnet wor kengi neer
needt omoni tort henet wor kcont inuousl yt okeep
trackoft het r
aff i
cort odet ectanypr obl em.I nt his
scenar iot hemai ndi sadv antagei st hatencount er sis
thereshoul dbesomeone24/ 7t okeepaney eont he
net wor kandsol v ethei ssuest hatwoul dbeoccur red
andsomet imes,i tbecomeshect ict ocont inuousl y
moni t
ort heby t
esandcr oss- checki ngt hel i
net ol ine
rather we ar e i mpl ement ing t his f eat ure by
represent ingt het raffici nt henet wor kint hef orm of
graphswhi chwi llhel pt headmi ni
st ratortor eadand
under st andt hegr aphsascompar edt otex tformat .
Wecamewi t
hat oolwher ewef ocusedon
somecor ef eat uresand i ncl uded i nt oolt hatwi l
l
ov ercomet heabov epr oblemsal sot hatwi l
lhel pt o
reducet hehumanef for tsandt imebyper formi ng
act i
onsj ustbyusi ngsi ngl ef eat ures.
Net wor kAdmi ni stratorandTr oubl eshoot ing
toolpr ojectwi llalsokeepupdat edt ot henet wor k
engi neer by emai l and al ertf eature and al so
display ingt heper f
or manceoft henet wor ki nt erms
ofgr aphwhi chwi l
l helpt ounder standeasi ly.
 The pr oject consi stoff oll
owi ng f eatures as
I
II
. Capt
uri
ngTheDat
apackat
es follows:Toolbased on GUIst arts wi th acti
v e
internetconnect ion.
NATnet workal ertf
eatureofferspresetalert
sand 1.Net wor k admi nistr
ator can check t he packet s
all
owsadmi nst ocustomi zealert
sacr ossthesy stem floating int he net worksel se mai lcan bechecked
orforspecif
icnodes.I ssuesthatcant ri
ggeralerts direct l
yifsomest rangeoccur r
edi nthenet work.
i
ncludeconfigur echanges, i
nter
netspeed, WithNAT 2.Gr aph/ char tgener ati
onf eaturei salsopr ov i
dedf or
networkalertfeature,
y oucaneasi l
yspecifythet i
me moni tori
ngoft ool performance.
ofdayortheday softheweekdur i
ngwhi chyouwi ll 3.Conf i
gurat i
onsofal lswitchesar emadeasonepush
recei
vespeci f
icnetwor kalert
sviaemai lortext,
or mechani sm t hatmeansconf i
gur ei noneswi t
chcan
othermeans.Whenyouopent hetool
,youseeascr een passt oal ltheot herswi tchespr esentint henet work.
thatshowsy oualistofalloft
henetwor kconnecti
onsyou
Di
4. splayFi l
ters changet heviewoft hecapt ureduring
canmoni tor.Youcansel ectoneormor eofthenetwork
i
nterfaces.Oncey ouhav ethenetworkinter
faceselect
ed, anal
ysi
s.Af
tery
ouhav
est
oppedt
hepacketcapt
ure,
you
youcanst artthecapture,andthereareseveralwaystodo
usedi
spl
ayf
il
ter
stonar
rowdownt
hepacket
sint
he
that.
PacketLi
stsoy
oucant
roubl
eshooty
ouri
ssue.

I
V Anal
ysi
ngDat
aPackat
s
Toolcanbeusedi nor ganizat
ionsf ormoni tori
ngand
Itshowsy out hr eedi fferentpanesf orinspect i
ng
analyzi
ngt henet wor kt r
affi
candi nformingv endori n
packetdat a.ThePacketLi st,thetoppane, isal istof
allt
hepacket sint hecapt ur e.Wheny oucli
ckona casewear ef acinganynet workr elatedi ssueswhi ch
packet,theot hert wopaneschanget oshowy out he savest i
meal sol esshumani nt er
action.I tiski ndof
detail
saboutt hesel ectedpacket .Youcanal sot elli
f toolwhichl etsy oudi ssectthenet wor kpackett ot he
thepacketi spar tofaconv ersati
on.Herear esome ti
niest details and pul lout any net wor kr elated
detail
sabouteachcol umni nt hetoppane: i
nfor mati
on.I tisusedbyourdepar tmentonl yandnot
No.:Thisi st henumberor deroft hepackett hatgot byev eryoneacr osst heor ganizati
on.Ourj obr equi res
captured.Thebr acketi ndicat esthatthispacketi spart maki ngallt hesy st emsandcommuni cat i
onsacr oss
ofaconv er sati
on. the systems t or un smoot hl
y.Al so itpr ov i
des t he
Time: Thiscol umnshowsy ouhowl ongaf teryou featureofgener at inggr aphsorchar tst odi splayt he
start
edt hecapt ur et hatthi spacketgotcapt ured.You performanceoft het oolweekl y,mont hly,quar ter l
yas
canchanget hisv aluei ntheSet ti
ngsmenui fyouneed pertherequi rementi frequir
ementwecanupgr adet he
somet hingdi f
fer entdi splay ed. toolift
hereisdegr adei nperformance.
Source:Thi sist headdr essoft hesystem t
hatsentt he
packet.
Destination: Thisi st headdr essofthedest i
nat ionof I
I. Net
wor
kPer
for
manceManagement
thatpacket .
Protocol: Thisi st het ypeofpacket ,
forexampl e, TCP, Somet imesi tt akesawhi let oident ifyapat t
er nof
DNS, DHCPv 6,orARP. per f
ormancei ssues.Anef fectivenet wor kmoni toring
Length:Thi scol umnshowsy outhelengthoft he tooll ogs al lper formance i ssues,i ncluding r elevant
packetinby t
es. i
nf ormat ionsuchasunderwhatci rcumst ancest hey
occur red.Bei ngabl et or efert oal ogofpastconcer ns
all
owsy ourt eam t oassesspr oblem ar east hatr equire
mor ei n-dept hi nv estigation or cl oser moni t
or i
ng.
I
. Net wor k per formance management r epresent s a
TheConceptofNATTool proact i
ve sol uti
on t hat hel ps i dent ify and r educe
i
nst ancesofbot tl
enecksornet wor kissuest hataf f
ect
notonl yt he end user ,butal so t he i nternalt asks
associ ated wi t
h mai ntaining busi ness oper at i
ons.
Net wor k per formance management i nv olves
establishing wor kflows,and net wor k oper ations t o
solve i ssues af fecti
ng net wor k per formance. A
compl exnet wor kgener atesawi der angeofdat a,and
sifti
ng t hrough t hati nf ormat ion t oi dent ifyr elevant
per f
ormance cl ues can be a chal lenge.Net wor k
moni toringt oolst reaml inet hepr ocessbyex ami ning
dat arelat ingt opacketl oss,net wor kt raffi
canal ysis,
Fi
g.1NATConcept alert per for mance,Push mechani sm per formance.
Relevanti nformat ioni st henconv eyedt oy ourteam f or
evaluat i
on, oranaly zedbynet wor kingt eam.
 conf
igur
ati
onchangest
hathav
eoccur
redont
hedev
ice.
I
II
. NATTechnol
ogi
es I
tisacomputerappli
cat
iont
hatanaly
zesnetwor
k
prot
ocol
sbyall
owinguserst
oiniter
ati
vel
ybrowse
Net worksecur i
tyisoneoft hemosti mpor t
ant andcapt
uret
raff
icrunni
ngonacomput ernet
work.I
t
aspect st oconsiderwhenwor kingov ert hei nt ernet, i
scompat
ibl
ewi
thav
ari
etyofoper
ati
ngsy
stems,
LANorot hermet hod,nomat terhowsmal lorbi gy our i
ncl
udi
ngWi
ndows,
OSXandLi ,
nuxandcanbeusedby
businessi s.Whi l
et hereisnonet workt hatisi mmune securi
tyexper
ts,net
workpr
ofessi
onal
sand
to attacks,a st able and ef ficientnet wor k secur it
y educator
sthroughoutt
heworl
d.
system i sessent i
alt opr otect i
ngcl i
entdat a.Agood
networ ksecur it
ysy stem hel psbusi nessr educet he
V. I
mpl
ement
ati
on
ri
skoff al
li
ngv i
cti
m ofdat athef tandsabot age.Get ti
ng
connect edt othei nternetmeanst haty ouwi l
lr eceive Iti
sanet wor kpacketanalyzer.Anet workpacket
l
ots of t raff
ic. Huge t raffic can cause st abi l
it
y analyzerwillt
rytocapturenet workpacket sandtries
problemsandmayl eadt ov ulner abil
it
iesi nt hesy stem. todisplaythatpacketdataasdet ai
ledaspossi bl
e.
Networ ksecur it
ypr omot esr eli
abi l
it
yofy ournet work Uses:-
by pr eventi
ng l aggi ng and downt imes t hrough Networ kadmi ni
str
atorsusei ttotroubleshootnetwork
continuousmoni toringofanysuspi cioust ransact i
on problems.
Networ ksecurit
yengineersusei ttoex aminesecur i
ty
thatcansabot aget hesy stem.Wi t
hdat asecur ityand
problems.
pri
vacygai ni
ngfocust oday ,thedemandf ornet wor king Developersusei tt
odebugpr otocolimplementations.
andsecur i
tyspeciali
stsisr i
sing. This tool i
s designed f or t r
acking t he network
performanceandsol vingsomeoft hecor eissues
I
V. Exper
imentandt
hePr
ocedur
e thatcanbecausedi nthenetwor k.
Measur ingandmoni toringofnet wor kper f
ormancei s
requiredf ortwoi mpor tantr easons.Thef irstistopr ov i
de VI
. I
mpactonUser
s
thet oolsnecessar ytov i
ewt henet wor kper f
or manceand
i
dent ifyanyst rategici ssueswhi chmayar ise(suchas Thi
stool
impact
slotonor
gani
zat
ionwhenyou
bottlenecks, poi ntsofunr eli
abil
ity,Qual i
tyofSer v i
ceneeds) . opent het ool ,youseeascr eent hatshowsy oual ist
Thesecondi st opr ov idet her equiredf eatureforsol vi
ng ofall oft henet wor kconnect ionsy oucanmoni tor.
networ ki ssues.Thi sdocumentout linesther equi rement s Youcansel ectoneormor eoft henet worki nt erfaces.
fornet wor kmoni toring.I tisapacketsni fferandanal ysis Oncey ouhav et henet wor kinter f
acesel ected, youcan
tool.Itcapt uresnet wor kt raffi
cont helocal networ kand startthecapt ure, andt her earesev eralway st odot hat
.
storest hatdat aforof fl
ineanal ysis.Itcapt uresnet wor k Itshowsy out hr eedi f
f erentpanesf orinspect i
ng
traf
ficf rom Et hernet ,Bluet ooth,Wi reless(IEEE.802. 11), packetdat a.ThePacketLi st,thet oppane, isal i
stof
TokenRi ng, FrameRel ayconnect ions, andmor e.A“ packet” allt
hepacket sint hecapt ure.Wheny ouclickona
i
sasi ngl emessagef rom anynet wor kpr otocol( i
.e.,TCP, packet , theot hert wopaneschanget oshowy out he
DNS, etc.)LANt raffi
ci si nbr oadcastmode, meani nga detailsaboutt hesel ect edpacket .Youcanal sot elli
f
singlecomput erwi thI tcanseet r
af fi
cbet weent woot her thepacketi spar tofaconv ersat i
on.
comput er s.Ify ouwantt oseet raffi
ct oanext ernalsi te,you Capt uringf ilt
ers  l
imi tt hecapt uredpacket sbyt hef il
ter
.
needt ocapt uret hepacket sont hel ocalcomput er.  Meani ngi fthepacket sdon’ tmat cht hef i
l
ter ,
Ital
lowsy outofil
terthelogei therbef orethecapture Wi r
eshar kwon’ tsav et hem.Her ear esomeex ampl es
ofcapt ur ef il
ters:
start
sordur i
nganal ysi
s,soy oucannar r
owdownand
hostI P- addr ess: thisf il
t erli
mi tst hecapt uret ot raffic
zerointowhaty ouarel ookingf orinthenet worktr
ace. toandf rom t heI Paddr ess
Forexampl e,youcansetaf il
tertoseeTCPt raf
fi
c net192. 168. 0.0/24: thisf i
ltercapt uresal lt
r af fi
con
betweent woI Paddresses.Youcanseti tonlytoshow thesubnet .
yout hepacketssentf r
om onecomput er
.Thef i
lt
ersin dsthostI P- address: capt urepacket ssentt ot he
Itareoneoft heprimaryr easonsi tbecamet he speci f
iedhost .
standardtoolforpacketanal ysis. port53: capt uret raf fi
conpor t53onl y .
portnot53andnotar p: captur eal ltraffi
cex ceptDNS
NATMet
hodol
ogy andARPt raffic

Int hi
st oolt he v er
yf i
rstf eature would be push
mechanism wher et hereispr obl
em inoneswi tchthen
theadmi nneednotr equiretoconf igur
einandev y VI
er I. Conclusion
singl
eswi tchbyj ustusingonef eatureofthet oolwill
helptoconf i
gurei nev eryswi t
cht hatisconnect edin Thissy stem impactsl otonent erpri
sebecause
thenetwor kandi fthepr oblem detectedinanyoft he Thet ool enabl
e sthen et
w or
ke ngi
neer t
os tayupdat ed
connectedswi tcht hent headmi ncanf ocusont hat w i
th respec tto net
w or
kt raf
fi
c vi
a al
e rt
ing through
singl
eswi t
chwhi chwi llr
educet hetime. ema il a nd a l
lowing network engi
n eer n ot t
o
May beanyadmi nistrat
orormay beahacker ,logged continuouslymoni torthenetworktr
affi
c, al
sot hemai n
i
nt othedev i
ceandper f
orm somechangesusi ngthe focuso f theto olistoredu cethehu ma ne f
fo rt
sa nd
tool,you as a net work engi neer or admi n will ti
me t o moni tor and anal yze the net wor k by
automaticall
y get not i
fied v i
a emai l about any implement ingsomeoft hecor efeaturesi nt het ool
whichwi l
lhel
pt osolv
esomeoft henetworkrel
ated
i
ssuest hr
oughnewway s.Intradi
ti
onal
approachthe
adminornetworkengineerneedt omanuall
ymonitor
the networkt r
affi
c cont i
nuousl
yt o anal
yzet he
networkortoident
ifytheissue.
 VI
II
. Ref
erences

RyanSpangl
er,“
PacketSni
ff
ingonLayer2Swit
chedLocalAreaNetwor
ks”
,Packet
wat
chResear
ch,
December2003.
Li
nk:htt
ps:/
/packet
watch.
net/
documents/
papers/
lay
er2sni
ffi
ng.
pdf

ThomasM.Chen,Luci
aHu, “
Int
ernetPerf
ormanceMonit
ori
ng”,Proceedi
ngsoftheIEEE,pp.1592-
1603,VOL.90,
NO.9,
Sept
ember2002.ht
tps:
//www.resear
chgate.
net
/publ
i
cati
on/267908713_Packet
_Snif
fi
ng_Network_Wi
retappi
ng

AaronLanoyandGordonW.Romney,“
AVirtualHoneyNetasaTeachi
ngResource”
,7t
hInt
ernat
ional
Conf
erenceon
I
nformati
onTechnol
ogyBasedHi
gherEducati
onandTraini
ng,
(ITHET'
06)
IEEE,Jul
y2006.

RyanSpangl
er,
“PacketSni
ff
erDet
ect
ionwi
thAnt
iSni
ff
”.
Uni
ver
sit
yofWi
sconsi
n,Depar
tmentofComput
erandNet
wor
k
Admini
str
ati
on,May2003.