real-time visibility into high speed networks

www.wildpackets.com© WildPackets, Inc.

Jay BotelhoDirector of Product Management, [email protected]

Real-time Visibility into High Speed Networks

John Delfeld Director, [email protected]

© WildPackets, Inc.#wildpackets_ixia

Administration

• All callers are on mute‒ If you have problems, please let us know via the Chat window

• There will be Q&A‒ Feel free to type a question at any time

• Slides and recording will be available‒ Notification within 48 hours via a follow-up email

2


Agenda

• Network Analysis in Fast Networks – a Partnership with IXIA

• Comprehensive Statistics and Scalable Deep Packet Inspection with WildPackets

• WildPackets Demo

• IXIA Anue Network Visibility Solution – Getting WildPackets the Data It Needs

• IXIA Demo

3


The Facts

• Cloud and virtualization are driving more mission critical operations to the network

• Networks are getting larger, faster, and more complex

‒ 10G 40G 100G & beyond

• Network down time, problems, and poor performance are not acceptable

4


10G Rollouts

5

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11-696667.html


The Requirements

• Shortest time to resolution of network issues is a priority

• Metrics and statistics indicate symptoms but don’t tell you the cause

• Deep packet inspection is the key to complete troubleshooting

• Real-time visibility is mandatory

6


Strategy for Monitoring 10G Ethernet

Other

All set - our mirroring sol'n converts 10G to 1G

All set - tools already support 10G

Can't afford upgrading tools to 10G

Want to keep 1G tools as long as possible

Our tools don't support 10G

0% 10% 20% 30% 40% 50%

4.1%

14.4%

21.9%

21.9%

32.9%

41.1%

Which of the following apply to your strategy for monitoring 10G segments? (Select all that apply)

SOURCE: Benchmarking Network and Security Operations: Tools, Processes, and Enabling Technologies Study, Enterprise Management Associates. n=124


10Gig Network Analysis Workflow

At 10Gig – 24x7 Is EssentialIdentify Key Analysis Pts

Deploy 24x7 Monitoring

Alarms/Alerts

Problem?

Rewind Data Analyze

Tune if Necessary

NO

YES


On the Network

9


The Challenges

• Store every single packet with no packet loss

• Provide critical network health statistics in real-time

• Generate comprehensive analytics for in-depth post-capture analysis and data retrieval

• Ensure packet access for deep packet inspection and complete troubleshooting

• And do it all FAST like the network itself

10

Importance: Packet-based PM tools remain only truly effective approach to definitive monitoring and definitive troubleshooting –

Jim Frey, Enterprise Management Associates, Inc.


10G Network Data Storage

• 1Gbps steady-state traffic assuming no storage overhead:7.68 GB/min460 GB/hr11 TB/day2.9 days in a 32TB appliance

• 10Gbps:76.8GB/min4.6 TB/hr110 TB/day7.0 hours in a 32TB appliance


10G Network Data Capture

12


The Solution

• Intelligent, dynamic load-balancing, filtering and time-stamping of highly-utilized network traffic

‒ To capture and store every single packet‒ To eliminate capturing unnecessary traffic‒ To provide high precision time-stamping for accurate latency

measurement and time synchronization

• Gather high-level, flow-based statistics‒ To monitor the network health‒ To narrow down post-capture analysis criteria

• Make packets readily and quickly available‒ To provide in-depth troubleshooting and deep packet inspection

• Aggregate and display the load-balanced traffic in a single view ‒ To make it trivial for the user to monitor, analyze, and troubleshoot

demanding networks

13


Joint Solution from WildPackets & IXIA Network Visibility Solutions

14


Meeting the 10G Challenge – TimeLine

• Fastest network recording and real-time statistical display — simultaneously

‒ 12 Gbps sustained capture with zero packet loss‒ Network statistics display in TimeLine visualization format

• Rapid, intuitive forensics search and retrieval‒ Historical network traffic analysis and quick data rewinding‒ Several pre-defined forensics search templates making

searches easy and fast

• A natural extension to the WildPackets product line

• Turnkey bundled solution‒ Appliance + OmniEngine, OmniAdapter, OmniPeek Connect


IXIA Network Visibility Solutions (NVS)

20

How to Get WildPackets the Data it Needs


Customer Challenges Deploying Monitoring Tools

• Lack of SPAN and TAP ports

• Getting tools all the traffic visibility needed

• Constantly increasing bandwidths

• Duplicate and un-needed traffic

• Changing troubleshooting & monitoring requirements

21


How The IXIA NVS & WildPackets Products are Deployed

22


Key Joint Solution Benefits

• Complete network visibility

• Accelerate root cause analysis

• Simplify deployment

• Easily Scalable in 10G, 40G and 100G environments

• Time Stamping for highly accurate latency measurement

23


WildPackets Demo


IXIA Network Visibility Solutions


IXIA Demo


Summary

• 10G Is Here – 40G Is on the Way

• 10G Speeds Change the Game for Network Analysis

• Many Networks Are Not Prepared

• The Solution Traffic Management with IXIA AnueNetwork Management with WildPackets

27


Q&A

Show us your tweets!Use today’s webinar hashtag:

#wildpackets_ixiawith any questions, comments, or feedback.

Follow us @wildpackets

Follow us on SlideShare!Check out today’s slides on SlideShare

www.slideshare.net/wildpackets

Jay BotelhoDirector of Product Management [email protected]

John Delfeld Director, [email protected]


WildPackets Corporate Overview

Optimizing Network and Application Performance


Corporate Background

• Experts in network monitoring, analysis, and troubleshooting‒ Founded: 1990 / Headquarters: Walnut Creek, CA‒ Offices throughout the US, EMEA, and APAC

• Customers spanning leading edge organizations‒ Mid-market and enterprise lines of business‒ Financial, manufacturing, ISPs, major federal agencies,

state and local governments, universities‒ Over 7,000 customers / 60+ countries / 80% of Fortune 1,000

• Award-winning solutions that improve network performance‒ Internet Telephony, Network Magazine, Network Computing awards‒ United States Patent 5,787,253 issued July 28, 1998

• “Apparatus and Method of Analyzing Internet Activity”


Why Our Customers Need Us

• VoIP, video, cloud, virtualization, and key business applications are saturating critical network services

• Evolving network technologies create discontinuities‒ 1 Gig 10 Gig 40 Gig 100 Gig networks‒ Wireless, BYOD initiatives

• Users and business can not tolerate network problems for mission critical services

Increasing demand for better real-time network visibility, network analytics, network forensics, and DPI


How We Create Value

We provide innovative, industry-leading, real-time network performance management solutions

‒ Easy-to-use, easy-to-learn user interface

‒ Uniquely extensible solutions

‒ Wireless network leadership

‒ Detailed analytics related to network applications

‒ Fastest network traffic capture appliance in its class

‒ Technical superiority at competitive price point

WildPackets has continually advanced its solution to meet the needs of its customers


ROOT-CAUSE ANALYSISOmniPeek network analyzer performs deep packet inspection and can reconstruct all network activity, including e-mail and IM, as well as analyze VoIP and video traffic quality.

UNDERSTAND END-USER PERFORMANCETimeLine and Omnipliance network recorders monitorand analyze performance across critical networksegments, virtual environments, and remote sites.

NETWORK HEALTHWatchPoint can manage and report on keydevice performance and availability acrossthe entire network, from anywhere on the network.

GLOBAL

DISTRIBUTED

DPI

Unprecedented Network Visibility


A History of Innovation

2003Distributed real-time

troubleshooting

2001• First 802.11 wireless analyzer• First network analyzer with automated expert analysis

2005Combined distributed network and VoIP network analysis

2008Enterprise-wide

Monitoring and Reporting

2009Innovative dashboard with drill-down for VoIP and video

2012• Capture, record, and

analyze from 40G network segments

• First wireless network analyzer to support

801.11ac, k, r, u, v, w

2011• Total visibility with zero packet loss• First wireless network analyzer to support capture and analysis of 802.11n 3-stream wireless

2010First to achieve 11 Gbps

sustained capture-to-disk


Product Line Overview


OmniPeekEnterprise Packet Capture, Decode and Analysis

• Ethernet,1/10 Gigabit, 802.11, and voice and video over IP• Portable capture and OmniEngine console • Aggregate analysis data across multiple capture points

Omnipliance / TimeLineDistributed Enterprise Network Forensics

• High-performance packet capture and real-time analysis• Stream-to-disk for forensics analysis• Integrated OmniAdapter network analysis cards up to 40G

WatchPointCentralized Enterprise Network Monitoring Appliance

• Aggregation and graphical display of network data• WildPackets OmniEngines• NetFlow and sFlow

Omni Distributed Analysis Platform


Omni Distributed Analysis PlatformSoftware and Turnkey Solutions

• Enterprise monitoring and reporting‒ WatchPoint Server‒ OmniFlow, NetFlow, and sFlow Collectors

• Software probes and network recorders‒ Omnipliance network recorders – Edge, Core‒ TimeLine network recorders‒ OmniAdapter analysis cards

• Distributed analysis software‒ OmniPeek – Enterprise, Professional, Basic, Connect‒ OmniEngine – Enterprise, Desktop, OmniVirtual

• Portable solutions‒ OmniPeek network analyzer‒ Omnipliance Portable


Key New Features in v7

• 40G network support

• Analyze issues from end to end: Multi-Segment Analysis (MSA)

• Collect data from non-technical end users:OmniPeek Remote Assistant (ORA)

• Single, interactive dashboard for utilization, top talkers, top protocols, latency, Experts, flows, and wireless signal strength

• New wireless specifications‒ 802.11ac 802.11k‒ 802.11r 802.11u‒ 802.11v 802.11w


OmniPeek Network Analyzer

• Distributed analysis manager‒ Connect to and configure distributed OmniEngines, Omnipliances,

and TimeLines

• Comprehensive dashboards present network traffic in real-time‒ Vital statistics and graphs display trends on network and application

performance‒ Visual peer-map shows conversations and protocols‒ Intuitive drill-down for root-cause analysis of performance bottlenecks

• Visual Expert diagnosis speeds problem resolution‒ Packet and payload visualizers provide business-centric views

• Automated analytics and problem detection 24/7‒ Easily create filters, triggers, scripting, advanced alarms, and alerts


Omnipliance Network Recorders

• Captures and analyzes all network traffic 24x7‒ Runs WildPackets OmniEngine software probe‒ Generates vital statistics on network and application performance‒ Intuitive root-cause analysis of performance bottlenecks

• Expert analysis speeds problem resolution‒ Fault analysis, statistical analysis, and independent notification

• Multiple issue digital forensics‒ Real-time and post capture data mining for compliance and troubleshooting

• Intelligent data transport‒ Network data analyzed locally‒ Detailed analysis passed to OmniPeek on demand‒ Summary statistics sent to WatchPoint for long term trending and reporting‒ Efficient use of network bandwidth

• User-extensible platform‒ Plug-in architecture and SDK


TimeLine Network Recorder

• Continuous network recording and comprehensive real-time statistical display — simultaneously

‒ 12Gbps sustained capture with zero packet loss‒ Network statistics display in TimeLine visualization format

• Rapid, intuitive forensics search and retrieval‒ Historical network traffic analysis and quick data rewinding‒ Several pre-defined forensics search templates making

searches easy and fast

• A natural extension to the WildPackets product line

• Turnkey bundled solution‒ Appliance + OmniEngine, OmniAdapter, OmniPeek Connect


Price/Performance Solutions for Every Application

Portable Edge Core TimeLine

Ruggedized Troubleshooting

Small NetworksRemote Offices

Datacenter WorkhorseEasily Expandable

Enterprise, Highly-Utilized Networks

Aluminum chassis / 17” LCD 1U rack mountable chassis 3U rack mountable chassis 3U rack mountable chassis

Dual 2.13 GHz Quad-Core Intel Xeon L5630 "Westmere"

Quad-Core Intel Xeon X3460 2.80Ghz

Dual Intel Xeon Quad Core E5530 2.4GHz

Dual Intel Xeon Quad Core X5560 2.8GHz

24GB RAM 4GB RAM 6GB RAM 18GB RAM

2 PCI-E Slots 2 PCI-E Slots 4 PCI-E Slots 4 PCI-E Slots

2 Built-in Ethernet Ports 2 Built-in Ethernet Ports 2 Built-in Ethernet Ports 2 Built-in Ethernet Ports

6TB SATA storage capacity 1TB SATA storage capacity 8/16TB SATA storage capacity

8/16/32/48TB SATA storage capacity

4.5Gbps CTD 1.1Gbps CTD 3Gbps CTD 12Gbps CTD

WildPackets Network Recorders


Centralized Monitoring for Distributed Enterprise Networks

• High-level, aggregated view of all network segments– Monitor per campus, per

region, per country• Wide range of network

data– NetFlow, sFlow, OmniFlow

• Web-based, customizable network dashboards

• Flexible detailed reports• Direct link to detailed,

packet-based analysis

WatchPoint


Comprehensive Support and Services Standard Support

Maintenance and upgrades Telephone and email contacts Knowledgebase MyPeek Portal

Premier Support 24 x 7 x 365 Dedicated escalation manager 2 customer contacts per site Plug-in reconfiguration assistance

WildPackets Training Academy Public, web-based, and on-site classes Complete curriculum: technology and product focused Practical applications and labs covering network analysis,

wireless, VoIP monitoring and advanced troubleshooting

Consulting and Custom Development Services Deployment, configuration, and assessment engagement Systems integration and testing Application integration, driver, decode, interface development


WildPackets Key Differentiators

• Visual Expert intelligence with intuitive drill-down‒ Let computer do the hard work, and return results, real-time ‒ Packet /payload visualization is faster than packet-per-packet diagnostics‒ Experts and analytics can be memorized and automated

• Automated capture analytics‒ Filters, triggers, scripting, and advanced alarming system combine to provide

automated network problem detection 24x7

• Multiple issue network forensics‒ Can be tracked by one or more people simultaneously‒ Real-time or post capture

• User-extensible platform‒ Plug-in architecture and SDK

• Aggregated network views and reporting‒ NetFlow, sFlow, and OmniFlow


24x7 Network Monitoring,Analysis, and Troubleshooting


Thank You!

WildPackets, Inc.1340 Treat Boulevard, Suite 500Walnut Creek, CA 94597(925) 937-3200

real-time visibility into high speed networks

Technology

ixia nvs wildpackets

ixia demo

ixia strategy

ixia agenda network

ixia administration

network networks

network recording

g network data capture