Allegro Packets Network Multimeter – Analysis and Measurement Modules
The Allegro Network Multimeter provides a variety of implemented modules for different use cases. Here you can find a list of modules and a short description, detailed documentation is provided per your request.
The Incidents Reports module allows for (e-mail) notifications to be created when certain network incidents are detected.
The capture module lists all running captures which have been started interactively in any other module. It also allows for starting new captures with specific filters.
Packet Ring Buffer
The ring buffer feature allows to create a buffer of fixed size on an external storage device to which all processed packets will be recorded. If the fixed size buffer is full then the oldest packets in the buffer will be replaced with new packets in a round robin fashion.
Pcap analysis module
The pcap analysis module allows analyzing pcap files by sending them to the device. After analyzing the pcap, the web interface shows all the metadata as if the packets are live traffic at the time of the pcap recording.
This module allows to measure packet loss and latency between two multimeter installation.
The MAC module gathers information about all seen MAC addresses, including the used protocols, traffic, communication peers and MAC/IP mappings.
Packet size Module
The packet size module accounts the size of all packets (layer 2 with CRC) and provides a packet size distribution.
The ARP module monitors ARP packets for tracking MAC addresses and announced IP addresses
The VLANs module accounts traffic per VLAN tag seen on the network.
The MAC protocols module accounts traffic of all different MAC protocols.
The STP module shows information about the Spanning Tree Protocol.
The IP module gathers information about all seen IPv4 and IPv6 addresses, including the used protocol, traffic, communication peers, and connection.
The Network Multimeter uses a geolocation library to identify countries for IP addresses. The country information are shown in other modules, but this web page lists all countries and their corresponding amount of traffic. It also shows detailed statistics per country including all IP addresses seen for that country.
The DHCP module tracks requests and answers for dynamic IP assignments in networks.
DNS name resolving is done passively by processing all DNS requests and response seen by the system. This module lists all IP addresses and names known by system. These information are used by other modules to lookup names.
The NetBIOS module monitors NetBIOS packets for tracking announced host names for IP addresses.
The TCP module measures the TCP handshake time for connection setup. It allows to identify slow responding servers in the network.
Layer 4 Server Ports Module
The Layer 4 server ports module measures traffic per TCP and UDP server port.
The SSL module keeps track of SSL server names and common names in SSL/TLS encrypted traffic. It allows to get the name resolved even if no DNS has been seen.
The HTTP module keeps track of HTTP host names requested in HTTP connections. It allows to get the name resolved even if no DNS has been seen and to see which virtual host are handled by a given server.
The L7 module gathers information about all supported layer 7 protocols. This includes information on how much traffic for each protocol was seen for each IPv4 and IPv6 address.
Response Time Analysis
The Response time analysis FOO
The SMB module gathers information about all SMB servers handling unencrypted traffic. It shows which shares have been accessed and which files together with detailed per file statistics.
The SIP statistics includes all SIP calls and their associated metadata. Analysis functionality includes: automatic SIP + RTP pairing, sip flow overview, passive MOS scoring, min/max levels, audio extraction and more.
The PTP module stores the PTP members and their associated metadata like the PTP version.
The NTP module shows detailed information about used servers of the Network Time Protocol and their corresponding clients in the network.
The RTP module shows detailed information about used RTP codecs.
The multicast module analyzes IGMP traffic and shows detailed information about multicast groups and members.
The stp module analysis STP traffic and shows a history of the seen root bridges with their configuration.
The Profinet module analysis Profinet RT cyclic and acyclic traffic and shows details about all devices and their communication relations.
The Burst analysis module measures throughput per interface or MAC address and displays utilization graphs for fast recognition of bursts.
The IPSec module shows information about IPSec ESP traffic and sequence counter correctness.
The ICMP module shows information about ICMP traffic and certain packet types.
The OPC-UA module shows information about OPC-UA binary protocol traffic and performs reponse time measurement.
The MPLS module shows information about all seen MPLS labels (single label and double stacked).
The QoS module processes and displays traffic with QoS tags for IP DSCP on layer 3 and VLAN PCP and MPLS TC on layer 2.
Allegro Packets Network Multimeter