utilities

March 2003 Utilities 1

NetCache Utilities


Objectives

When you have completed this module you will be able to do the following:

• Flush objects and DNS entries form the NetCache• Describe NetCache Utilities• Use trace analysis application to evaluate packet

traces• Describe statistics available• Configure custom error pages• State how to contact Network Appliance Technical

Support


NetCache Utilities

NetCache Utilities This page provides tools and options useful to administering and testing the NetCache.


Utilities > User Interface > General

Utilities- User Interface This page allows you to control how statistical data will be displayed.


Numerical Display

Real-Time Charts

Data Display Options

Statistics may be displayed numerically or graphically


Statistics Graphs


Statistics Graphs cont’d


Flush

Flush The flush command empties the cache of all objects or all cached DNS entries, if DNS caching is enabled (Utilities tab > Cache Objects > Flush).


diag command• Syntax 1: diag dump [-i ifile]

The file containing the \n separated commands to be executed (default: /etc/diag.conf)

• Syntax 2: diag delete [ filename.diag]+• Syntax 3: diag list• Example:

netcache> diag dumpDumping diagnostic data to file (default time is < 2 mins) ...Diagnostic data successfully dumped to file: /20020814_084229.diagnetcache> diag list

List of diagnostic files:

20020814_084229.diag 2002.08.14.08.43 596974netcache>

diag command Use the diag command to manage appliance diagnostics data files.

Note: By default, diagnostic commands in etc/diag.cont are executed and their output is written to a diagnostics file. Default diagnostics might take more than two minutes to complete, during which the CLI is not available.

Four options are supported:

1. Delete a file that is no longer needed

2. Copy a file to a specified location

3. Send a file to an FTP or Web server

4. Send a copy of the file to Network Appliance Technical Support

Note: Sending a file leaves the original file in place.


diag Command Outputconfig.cli.show_chunk = 0config.cli.alias = \\config.port.http config.http.ports<snip>status.asffill.failure = 0status.asffill.success = 0status.auth.basicntlm.expired = 0<snip>status.ftp.requests.cache.hit = \\01 sec 5 sec 10 sec 30 sec 1 min0 0 0 0 05 min 10 min 30 min 1 hour 2 hour0 0 0 0 0<snip>


diag Command Output cont’dCPU URLs/s Net kB/s Disk kB/s BW

savings/stot hit miss in out read write

4% 0 0 0 0 0 0 0 0%2% 0 0 0 0 0 248 360 0%7% 0 0 0 0 0 0 0 0%1% 0 0 0 1 0 0 0 0%3% 0 0 0 1 0 0 0 0%

<snip>Sun Aug 18 00:00:00 GMT [log_rotate:notice]: System

netcache205 (ID 0016803056) is running NetApp Release 5.3.1X13

Sun Aug 18 00:18:03 GMT [console_login_mgr:info]: root logged in from console

Sun Aug 18 01:00:00 GMT [kern.uptime.nc:info]: 1:00am up 2 days, 2:42 0 URLs

Sun Aug 18 01:18:04 GMT [console_login_mgr:info]: root logged in from console

Sun Aug 18 02:00:00 GMT [kern.uptime.nc:info]: 2:00am up 2 days, 3:42 0 URLs


/etc/diag.conf filenetcache> rdfile /etc/diag.confshow config.*show status.*optionssysstat -c 30 1show status.*sysstat -c 30 -x 1show status.*ifstat -anetstat -p tcpnetstat -rnsysconfig -asysconfig -vnfsstat -lnfsstat -cnclog -ta -2000 httpnclog -v messagesnetcache>


Utilities > Diagnostics > Data Dump


Utilities -> Diagnostics -> Packet Trace

pktt command: Syntax 1: pktt start [if | all] [-m <pklen>]

[-b <bsize>] [-i <ipaddr> -i <ipaddr>]

Syntax 2: pktt pause [if | all] Syntax 3: pktt dump [if | all] Syntax 4: pktt stop [if | all] Syntax 5: pktt status [if | all] -v

Option Definition [if | all] [-m <pklen>] [-b <bsize>]

[-i <ipaddr> List IP addresses. -v View the status.


Utilities -> Diagnostics -> Packet Trace -> Diskless Packet Tracing


Sysstat Commandedu2-C760> sysstat 1

CPU URLs/s Net kB/s Disk kB/s BW savings/s

tot hit miss in out read write

4% 0 0 0 1 0 0 0 0%

1% 0 0 0 1 0 80 168 0%

4% 0 0 0 0 0 0 0 0%

0% 0 0 0 1 0 0 0 0%

4% 0 0 0 1 0 0 0 0%

2% 0 0 0 0 0 560 240 0%

4% 0 0 0 1 0 0 0 0%

Sysstat Command The sysstat command is used to display performance statistics, such as the current CPU usage, the amount of network I/O, and the amount of disk I/O.

Refer to the command line help for syntax and option information.


netdiag Examples

netdiag -s -- presents a summary of physical, transport, and network layer diagnostic results

netdiag -s -p -I ns0 -- presents a summary of diagnostic results restricted to interface ns0 on the physical layer

netdiag -v -e -- presents diagnostic results in verbose mode with error codes displayed

Netdiag Command The netdiag command runs automated diagnostic analysis routines on the on the physical, network, and transport layers of the NetCache appliance and displays the results in summary, verbose, or debug format.



Other netdiag Commands

edu2-C760> netdiag -nPerforming network layer diagnostics.....OK

edu2-C760> netdiag -tPerforming transport layer diagnostics.....OK

edu2-C760> netdiag -pPerforming physical layer diagnostics.....OK


Packet Trace

netcache> pktt start allnetcache> pktt dump allMon Aug 14 21:26:51 GMT [rc:info]: pktt: 3617 packets seen, 0 dropped, 130102 by tes written to /ns0.trcnetcache> pktt stop allns0: Tracing stopped and packet trace buffers released.netcache>

Usage: pktt start <if>|all [-m pklen] [-b bsize] [-i ipaddr -i ...]pktt pause <if>|allpktt dump <if>|allpktt stop <if>|allpktt status [<if>|all] [-v]

Example:

Syntax

Packet Trace When helping you to troubleshoot problems, Network Appliance Technical Support might instruct you to run a packet trace by using the pktt command. The pktt command creates a packet trace file, which contains information about your network.

Refer to the NetCache 5.4 Administration Guide, Chapter 13, “Troubleshooting” for additional information.


Packet Trace Utility

Refer to On Line Help for configuration information.


Network Statistics

netcache> netstat ?usage: netstat [-an]

netstat -mnrsnetstat {-i | -I interface} [-dn] [-w interval]

netstat [-p protocol]

Netstat Use the netstat command to display the network status.

Syntax 1: netstat [-an]

Syntax 2: netstat -mnrs

Syntax 3: netstat -i [-I <interface>] [-dn]

Syntax 4: netstat -w <interval> -i [-I <interface>] [-dn]

Syntax 5: netstat -p <protocol>



Routing Table

netcache> netstat -rRouting tables

Internet:Destination Gateway Flags Refs Use Interfacedefault wiley-120.sim.neta UGS 21 624 ns010.120.4/22 link#1 UC 0 0 ns0wiley-120.sim.ne 0:e0:52:81:ed:0 UHL 1 0 ns0localhost localhost UH 0 0 lonetcache>



Routing Statistics

netcache> netstat -rsrouting:

0 bad routing redirects0 dynamically created routes0 new gateways due to redirects0 destinations found unreachable0 uses of a wildcard route

netcache>



Active Socketsnetcache> netstat -anActive TCP connections (including servers)Local Address Remote Address Swind Send-Q Rwind Recv-Q State10.120.4.220.23 10.10.20.138.45543 8760 0 8760 0 ESTABLISHED10.120.4.220.1132 128.11.10.251.80 31856 0 8760 0 CLOSE_WAIT10.120.4.220.1131 128.11.10.249.80 31856 0 8760 0 10.120.4.220.1054 204.71.168.9.554 31856 0 32768 0 LISTEN*.3132 *.* 0 0 0 0

Active UDP sockets (including servers)Local Address Remote Address Send-Q Recv-Q10.120.4.220.554 10.32.17.73.6972 0 010.120.4.220.554 10.32.17.73.6970 0 0*.161 *.* 0 0*.1025 *.* 0 0*.1755 *.* 0 0*.3130 *.* 0 0127.0.0.1.520 *.* 0 010.120.4.220.520 *.* 0 0



Memory Buffers

netcache> netstat -m168 mbufs out of 1050 in use:12 mbufs allocated to socket names and addresses54 out of 500 large buffers in use102 out of 500 small buffers in use12 out of 50 non-data mbufs in use938 Kbytes allocated to network (12% in use)0 requests for memory deniednetcache>



Interface Statistics

netcache> ifstat -ausage: ifstat [-z] -a | <interface>

netcache> ifstat e0

-- interface e0 (2 hours, 55 minutes, 18 seconds) --

RECEIVEPackets: 108k | Bytes: 58881k | Errors: 0Queue full: 0TRANSMITPackets: 165k | Bytes: 61642k | Errors: 0Collisions: 0

Ifstat Command Displays network interface statistics for each interface.



System Statistics


Maintenance > Software > Error Pages

Error Pages Use options on this page to download error pages for editing and then uploading the pages to this NetCache Appliance after you have finished editing the pages.

Refer to On Line Help for additional information.


status.windows.domain_behavior

netcache> show status.windows.domain_behaviorstatus.windows.domain_behavior = \\Domain Response Failures Attempts(All) 0.02s 475 803NTAPNC 0.02s 20 348BAD-DOMAIN 0.02s 455 455\\


General Use for status.windows.domain_behavior

• Evaluate the windows environment• Determine if specific domains are the problem,

or if everything is broken• Some possible problems:

– Poor response times– Flaky networks– Overloaded servers– Broken trust relationships


Domain Behaviour in SyslogMessages

Tue May 7 22:42:45 GMT [sthread_loop:warning]: For 2 of 2 windows domains(s), average response time is above 1.00s.

Tue May 7 22:42:45 GMT [sthread_loop:warning]: For 2 of 2 windows domain(s), 60-second failure rate is above 40%.

Tue May 7 22:42:45 GMT [sthread_loop:warning]: Top response time(s): NTAPNC=3.01s BAD-DOMAIN=3.01s

Tue May 7 22:42:45 GMT [sthread_loop:warning]: Top failure rate(s): NTAPNC=116/150 BAD-DOMAIN=503/503

Tue May 7 22:42:45 GMT [sthread_loop:warning]: You might want to check domain connectivity, availability, and trust relationships.


Domain Behavior in Syslog Messages

• Triggered by the same status information – High response times– High failure rates

• Must pass threshold of 20 attempts to count

• Issued about every five minutes while possible problem persists

• Name domains with worst response times and failure rates


Setup > Authentication > NTLM and KerberosTest Environment Tab

• Exposes the new windiag command on the GUI• Windows NT only


Contacting Network Appliance Technical Support

• Telephone– For U.S. customers:

(888) 4-NETAPP (US and Canada)(1-888-463-8277)(408) 822-4700

– For European customers:00-800-44-638277 Europe31-23-567-9605 Europe

– For all other international customers:+1 408 822-4700 (Ask for Technical Support.)

• Web address http://www.netapp.com/supporthttp://now.netapp.com


Utilities Exercises

• Netdiag Command• Packet Trace


Exercises

• 15 minutes in length• Use breakout rooms• Instructor will visit all rooms• Broadcast announcement 5 minutes

prior to regroup• Stay focussed, start telnet, start GUI• Share microphones, or no one else can

be heard


NetCache Utilities Exercises Objectives Use NetCache tools to evaluate NetCache performance.

Exercise Overview The purpose of this activity is for you to perform the procedures to provide experience in using troubleshooting tools. During these exercises, you will be guided through each step in the process, and you will have an opportunity to verify that each step was successfully completed.

• Time Estimate: 15 Minutes

• Required Hardware, Software, and Tools

Hardware

• Workstation

• NetCache machine

Software

• NetCache 5.4

• Windows 2000

• Netscape 4.7

• Internet Explorer 5.5 and later


Netdiag Command Use the following procedure to practice using the netdiag command:

1. At the NetCache CLI prompt, enter each of the following netdiag variants and observe the results. Identify when you would use each of these.

netdiag -n = network layer

netdiag -t = transport layer

netdiag -p = physical layer

netdiag -s = summary

netdiag -d = debug

Note: Use ifconfig –a to get information about the NetCache physical interfaces.

2. Use the appropriate netdiag command switch to answer the following questions:

Which netdiag command will display status information for the NetCache’s interfaces?

3. Which command line option(s) should be used to specify physical layer analysis of a particular interface?

4. What does the netdiag command without any options tell you?


Packet Trace In this exercise you will use the Packet Trace utility to capture a trace.

Start a packet trace and generate network traffic to the filer.

1. Open the NetCache Manager

2. Select Utilities > Network Tests > Packet Trace

3. Select Start to begin a trace

4. Ensure that you have a browser proxied through your cache.

5. Browse to a couple of Web sites (to generate data).

6. Select Stop to end the trace

7. Scroll to Current Packet Trace Files and verify the trace you just finished is on the list.

.


NetCache Admin Review Exercise You are to configure your NetCache appliance to add a new group comprised of the users identified in newusers.cfg on the PDC. These people are to be restricted from URLs containing pornographic, gambling, job search or entertainment materials. In addition, these users must be denied access to www.cnn.com during working hours (8:00 a.m. to 5:00 p.m.).

Configure your NetCache to require authentication for this group .

Verify that the NetCache is properly configured by testing the setup and reviewing the configuration settings and the logs.

utilities

Documents

diag syntax

diag command syntax

diagnostics file

ifilethe file

original file

file default time

flush command

diag list example