Allegro Packets Network Multimeter – Analysis and Measurement Modules
The Allegro Network Multimeter provides a variety of implemented modules for different use cases. Here you can find a list of modules and a short description, detailed documentation is provided per your request.
The capture module lists all running captures which have been started interactively in any other module. It also allows for starting new captures with specific filters.
This module allows to measure packet loss and latency between two multimeter installation.
Packet ring buffer
The ring buffer feature allows to create a buffer of fixed size on an external storage device to which all processed packets will be recorded. If the fixed size buffer is full then the oldest packets in the buffer will be replaced with new packets in a round robin fashion.
Pcap analysis module
The pcap analysis module allows analyzing pcap files by sending them to the device. After analyzing the pcap, the web interface shows all the metadata as if the packets are live traffic at the time of the pcap recording.
The Incidents module allows for notifications to be created when certain network incidents are detected.
— L2 – Ethernet layer —
The MAC module gathers information about all seen MAC addresses, including the used protocols, traffic, communication peers and MAC/IP mappings.
Packet size module
The packet size module accounts the size of all packets (layer 2 with CRC) and provides a packet size distribution.
The ARP module monitors ARP packets for tracking MAC addresses and announced IP addresses
The VLAN module accounts traffic per VLAN tag seen on the network.
MAC protocols module
The MAC protocols module accounts traffic of all different MAC protocols.
The stp module analysis STP traffic and shows a history of the seen root bridges with their configuration.
The MPLS module shows information about all seen MPLS labels (single label and double stacked).
The LLDP module extracts information from LLDP messages (Link Layer Discovery Protocol) and correlates this information to the respective MAC and IP addresses.
The Burst analysis module measures throughput per interface or MAC address and displays utilization graphs for fast recognition of bursts.
— L3 – IP —
The IP module gathers information about all seen IPv4 and IPv6 addresses, including the used protocol, traffic, communication peers, and connection.
The QoS module processes and displays traffic with QoS tags for IP DSCP on layer 3 and VLAN PCP and MPLS TC on layer 2.
The Network Multimeter uses a geolocation library to identify countries for IP addresses. The country information are shown in other modules, but this web page lists all countries and their corresponding amount of traffic. It also shows detailed statistics per country including all IP addresses seen for that country.
The DHCP module tracks requests and answers for dynamic IP assignments in networks.
DNS name resolving is done passively by processing all DNS requests and response seen by the system. This module lists all IP addresses and names known by system. These information are used by other modules to lookup names.
The NetBIOS module monitors NetBIOS packets for tracking announced host names for IP addresses.
The ICMP module shows information about ICMP traffic and certain packet types.
The multicast module analyzes IGMP traffic and shows detailed information about multicast groups and members.
— L4 – Transport —
The connections module gives access to a list of connections of all IPs aggregated together based on chose sort and filter parameters.
The TCP module measures the TCP handshake time for connection setup. It allows to identify slow responding servers in the network.
Layer 4 server ports module
The Layer 4 server ports module measures traffic per TCP and UDP server port.
The IPSec module shows information about IPSec ESP traffic and sequence counter correctness.
— L7 – Application —
The SSL module keeps track of SSL server names and common names in SSL/TLS encrypted traffic. It allows to get the name resolved even if no DNS has been seen.
The HTTP module keeps track of HTTP host names requested in HTTP connections. It allows to get the name resolved even if no DNS has been seen and to see which virtual host are handled by a given server.
The L7 module gathers information about all supported layer 7 protocols. This includes information on how much traffic for each protocol was seen for each IPv4 and IPv6 address.
Response time analysis
The Response time analysis module allows to define own protocol request and response pattern and measure the response time and request/response loss.
The SMB module gathers information about all SMB servers handling unencrypted traffic. It shows which shares have been accessed and which files together with detailed per file statistics.
SIP module (VoIP)
The SIP statistics includes all SIP calls and their associated metadata. This includes trending graphs for request and response types, global packet loss & jitter and per call & call-side (RTP) passive MOS, packet loss, jitter, audio level in dBFS and used codec.
The NTP module shows detailed information about used servers of the Network Time Protocol and their corresponding clients in the network.
The PTP module stores the PTP members and their associated metadata like the PTP version.
The Profinet module analysis Profinet RT cyclic and acyclic traffic and shows details about all devices and their communication relations.
The OPC-UA module shows information about OPC-UA binary protocol traffic and performs reponse time measurement.
The RTP module shows detailed information about used RTP codecs.