【正文】 用戶以金融銀行業(yè)、電信局和外企為主。Figure 1：nGenius的功能可以直接從HP OpenView上啟動(dòng)六、 國(guó)內(nèi)成功案例NetScout Systems公司的nGenius Probes (探針) 和 nGenius Performance Manager以其豐富的產(chǎn)品功能，開放的平臺(tái)，高質(zhì)量的產(chǎn)品保障，良好的售后服務(wù)，對(duì)客戶的負(fù)責(zé)態(tài)度，在全球的各行各業(yè)得到廣泛的使用，并獲到高度的評(píng)價(jià)和重視。 SNMP Manager可以發(fā)現(xiàn)/察覺網(wǎng)上存在的探針；167。對(duì)網(wǎng)段的流量進(jìn)行特征性描述流量統(tǒng)計(jì)信息由PM從探針上收集，進(jìn)行分析與報(bào)表生成對(duì)未來(lái)帶寬需求進(jìn)行預(yù)測(cè)由PM根據(jù)長(zhǎng)時(shí)間的收集的數(shù)據(jù)進(jìn)行統(tǒng)計(jì)學(xué)上的分析針對(duì)每個(gè)網(wǎng)段進(jìn)行分析，易于發(fā)現(xiàn)網(wǎng)絡(luò)瓶頸用戶可以針對(duì)NetScout采集的信息進(jìn)行二次開發(fā)PM使用業(yè)界通用的RDBMS數(shù)據(jù)庫(kù)，廠家提供相關(guān)的驅(qū)動(dòng)軟件以及有關(guān)數(shù)據(jù)庫(kù)結(jié)構(gòu)的描述，用戶可以提取及加工這些數(shù)據(jù)做多種用途。可針對(duì)具有攻擊特征的流量進(jìn)行監(jiān)控和告警通過(guò)PM制定特定協(xié)議的異常流量特征，再指示探針對(duì)這些特征進(jìn)行實(shí)時(shí)監(jiān)控，若發(fā)生，則發(fā)出告警在最近發(fā)現(xiàn)的針對(duì)SNMP漏洞進(jìn)行的攻擊中，用戶可以利用nGenius即時(shí)偵測(cè)到攻擊行為。可以設(shè)定上升（Rising）、下降（Falling）閥值VoIP監(jiān)控通過(guò)探針上的VoIP MIB，得到IP電話用戶列(含電話號(hào)碼) 、網(wǎng)絡(luò)上開銷、通話雙方延遲和丟包情況等資料。四、 實(shí)現(xiàn)功能描述q通過(guò)這個(gè)方案的實(shí)施，能夠?qū)崿F(xiàn)以下功能：功能實(shí)現(xiàn)方式注釋異常流量變化告警通過(guò)PM在探針上設(shè)置閥值，觸及閥值可以產(chǎn)生告警。除非需要登陸nGenius PM 或Ciscoworks2000 RTM，否則PC上是不需要安裝任何JAVA驅(qū)動(dòng)程式。 報(bào)告閱覽情況廣域網(wǎng)NetScout probe 總行RTM module in Ciscoworks2000 (Windows)NetScout probe 35省分行RTM module in Ciscoworks2000 (Windows)NetScout probe RTM module in Ciscoworks2000 (Windows)NetScout probe RTM module in Ciscoworks2000 (Windows)NetScout probe nGenius Remote NewsStand 產(chǎn)品號(hào): 9555Client (瀏覽器)Client (瀏覽器)Client (瀏覽器)nGenius PM Workgroup (Windows) 四套 產(chǎn)品號(hào): 9595閱覽報(bào)告可以通過(guò)任何一部PC的瀏覽器，以HTML的格式，訪問總行的nGenius Remote NewsStand Server。nGenius PM會(huì)自動(dòng)執(zhí)行報(bào)告生成的進(jìn)程，當(dāng)中包含數(shù)據(jù)集中和關(guān)聯(lián)，基準(zhǔn)分析和預(yù)測(cè)估算。每次收集時(shí)間大概需要幾分鐘(少于5分鐘)，每個(gè)探針大約傳送300KB的資料，總資料量(36部探針)是每15分鐘10MB。收集間隔最小為15分鐘一次，收集時(shí)nGenius PM會(huì)透過(guò)廣域網(wǎng)訪問探針，需要占用廣域網(wǎng)傳送資料。以最小15秒的間隔，實(shí)時(shí)監(jiān)控時(shí)，SNMP包所占用的帶寬大概為每15秒2040 kbps，%%占用量。數(shù)據(jù)同樣能有最小15秒的間隔。收集的信息能提供最小15秒的間隔，也就是說(shuō)探針最快每15秒傳送資料到 PM 一次。下面的討論會(huì)以四臺(tái)nGenius PM Workgroup Server為基礎(chǔ)。能生成40份報(bào)告，代表了能為所有36個(gè)地方(包括總行和35省級(jí)分行) 每地方生成1份報(bào)告。Paging size: 每硬盤起碼預(yù)留2GB作Paging。 簡(jiǎn)易的、基于URL的信息導(dǎo)航 216。216。 網(wǎng)站訪問次數(shù)(Hit Rate)216。216。216。216。表格 20：一旦發(fā)覺響應(yīng)時(shí)間太長(zhǎng)，可以分析Server Processing Time vs. Flight Time vs. Client roundtrip，知道響應(yīng)時(shí)間長(zhǎng)是網(wǎng)絡(luò)造成還是Server/Application本身造成。 區(qū)分網(wǎng)絡(luò)傳輸時(shí)間與服務(wù)器響應(yīng)時(shí)間 216。 數(shù)據(jù)具體到每種應(yīng)用、每個(gè)服務(wù)器與用戶216。 應(yīng)用層響應(yīng)時(shí)間監(jiān)控216。216。216。 Top Conversations– In vs. Out Utilization– In vs. Out Volume– In vs. Out Throughput– In vs. Out Errors– Total Broadcasts– Total Multicasts– Packet Distribution– Summarized Table For Individual Statistics. Table showing In Utilization, Out Utilization, and Errors/sec on a hourbyhour basism MostUtilized Circuits. Shows Most Utilized Circuits. Drilldowns are the same as MostUtilized Segments, listed above.m MostUtilized VLANs. Shows Most Utilized VLANs. Drilldowns are the same as MostUtilized Segments, listed above.m Most Utilized Switch Ports. Drilldowns include:– Total Utilization– Total Errors– Summarized Table For Individual Statisticsm LeastUtilized Segments. Shows the TopN least utilized segments. Drilldowns are the same as MostUtilized Segments, listed above.m LeastUtilized Circuits. Shows TopN least utilized circuits. Drilldowns are the same as MostUtilized Segments, listed above.m LeastUtilized VLANs. Shows Most Utilized VLANs. Drilldowns are the same as MostUtilized Segments, listed above.m MostCongested Circuits (Frame Relay) (FECNs/BECNs). Drilldowns are the same as MostUtilized Segments, listed above.m MostCongested Circuits (ATM) CLPs Congestion (packets/sec). Drilldowns include In vs. Out Errors, CLP Congestion, and Summarized Table For Individual Statistics m Most Active Applications (volume)m Most Active Network Protocols (volume)m ATM Circuits Detailed Listingm Frame Relay Circuits Detailed Listingm Segments Detailed Listingm Top AL Conversationsm Top AL Hostsm Top NL Conversationsm Top NL Hosts需要關(guān)注信息m Segment Utilization Forecast. Drilldowns are the same as MostUtilized Segments, listed above.m Circuit Utilization Forecast. Drilldowns are the same as MostUtilized Segments, listed above.m Appli