sl360 Tool Suite User Guide

(1)

sl360 Tool Suite

User Guide

(2)

Introduction

3 Key Features of sl360 Tool Suite

3 Contacting ScriptLogic Corporation

6 Copyright Notice

7 Trademarks

8 Getting Started

9 Minimal Configurations

9 Enabling WMI on Windows

10 Enabling SNMP on Windows Vista

12 Enabling SNMP on Windows XP

17 Encrypted Credential Store

23 Upgrading the Tool Suite

25 sl360 Tool Suite

26 Cisco Configuration Tools

26 Dashboard and Gadgets

29 Device Groups

44 DNS Audit

45 Enhanced Ping

46 Favorites

47 Graphical Ping

48 MAC Scan

50 NetFlow Listener

51 Network Discovery / Inventory

53 Ping Scan

57 Port Scan

58 SNMP Scan

59 Switch Port Mapper

61 Syslog Server

64 TFTP Server

66 Trace Route

67 Traffic Jam

69 Wake on LAN

71 WHOIS

73 WMI Scan

74

(3)

Introduction

This section will give you a brief introduction to ScriptLogic Corporation and our award winning products.

Key Features of sl360 Tool Suite

ScriptLogic's sl360 Tool Suite consolidates the ScriptLogic free network management tools into a real time reporting solution and replaces disparate IT tools from multiple vendors. Why use individual point tools when you can exploit the value of these utilities in a consolidated suite that also includes integration with browser-based open source networking tools such as Nagios, OpenNMS, and others? Create custom dashboards, flow results between tools, and save network settings and favorites. The powerful, yet easy to use sl360 helps you tame your network. Networks are complicated. Network

Management doesn't have to be. sl360 Tool Suite – At a Glance

ScriptLogic Dashboard is a “network management dashboard” with a summary display of key performance indicators (KPIs) and diagnostic metrics of network performance and availability. Managers and operations staff can continuously monitor key assets at chosen intervals with customizable gadgets.

ScriptLogic Quick Launch provides one-click access to all key areas of the Tool Suite and allows for conv enient flow of results between tools. Comprised of several components: Running Tools, Recent Tools, Favorites and Device Groups, the Quick Launch also has useful resources such as ScriptLogic Help and Product Updates.

ScriptLogic Favorites allows you to configure device groups, general criteria, and your favorite tool all wrapped as one custom tool. This gives you the ability to perform one-click runs of critical diagnostics specific to your network.

ScriptLogic Device Groups allow you to treat selected network targets as one consolidated target of IPs and Subnets, grouped together for quick access when running a tool.

sl360 Network Discovery performs a lightning quick scan of the entire network to discover all devices. Leveraging SNMP, the tool provides a complete set of attributes for each device that has been discovered and the results are piped into a cutting-edge iGoogle-like user interface.

 Gather all technical data including hardware, software, and processes for each device.

 Identify devices by responding, status, protocols, type, and operating system

 Scan a single device, a subnet, or a range of subnets.

 Interact with ScriptLogic Encrypted Credential Store for user access to devices.

sl360 Network Inventory creates a detailed repository of all devices on your network. It provides operating system, interface and port details, IP addresses, installed Windows software and many other details. The Network Inventory utility has robust searching and reporting capabilities as well.

 Take full control of all network assets you care about

 No special agents or data collectors are needed

 Store all inventory information locally for quick access

 Utilize SNMP protocols in the network discovery engine

 Search for granular information across all devices for additional analysis

 Generate reports for each or all devices and export to HTML or .CSV

ScriptLogic Encrypted Credential Store consolidates Windows, SNMP, and Telnet credentials in a single location for quick and simple diagnostics. The Credential Store utilizes 256-bit AES Encryption and provides password key access for additional protection.

ScriptLogic Cisco Config eases configuration and change management of Cisco® devices in lieu of one-off non-integrated point tools.

(4)

 Archive Cisco® router startup and running network configurations

 Upload configuration changes to routers or switches via SNMP or Telnet

 Compare the running config of a Cisco® router with the startup config or archive config

 Go To and Find any section within the config file quickly

 Decrypt any Cisco® type-7 passwords for routers and switches for lost password recovery

ScriptLogic Syslog Server receives, logs and displays syslog messages from hosts such as routers, switches, and any other syslog enabled device.

 Real-time display of syslog messages with date/time, host name, priority, and message.

 Archive messages for quick future reference

 Filter messages by Facility, Severity, date/time, host name, and key words

 Forward messages to another syslog server

 Export messages to HTML, .csv, and XML

ScriptLogic TFTP Server is a multi-threaded, highly scalable TFTP server. It supports unlimited simultaneous transfers and offers extended option negotiation between client and server, including clock size, transfer size, and timeout. Specify all and individual client connections for ultimate security. TFTP Server is commonly used to move executable images and configurations to and from routers, switches, hubs, XTerminals, and other network resources.

ScriptLogic DNS Audit matches each IP Address in a specified range of IP Addresses to its domain name, and then checks back from the domain name to the IP Address to see if the resolution is the same forward and in rev erse. DNS Audit also displays NetBIOS Host Name, Host, and LMHost for complete visibility.

ScriptLogic Ping Scan fires ICMP ECHO requests across a range of IP addresses and rapidly builds a spreadsheet for a quick visual display of which IP addresses are in use and which are not. DNS lookup information is provided by Ping Scan for each responding address.

ScriptLogic Port Scan tests for open TCP ports on specified individual machines and ports as well as within targeted ranges of IP addresses and ports. The most common port names are conveniently preloaded, but custom service names can be added easily. Port Scan is fast and easy to configure for a high degree of personal customization in the resulting view. Port scans can be scaled to match particular machine abilities, characteristics and firewall policies. Multiple export formats make for optimal presentation of the data in differing circumstances and situations.

ScriptLogic SNMP Scan discovers the contents of network subnets quickly and simply by combining SNMP discovery capabilities with a Ping Scan of a designated range of IP Addresses. Used and unused IP addresses are all identified and logged by SNMP Scan as well.

ScriptLogic Enhanced Ping continuously logs running response times and exports data on demand to HTML, XML and CSV files. Enhanced Ping reports register current response time and running average response time in milliseconds as well as the current rate of packet loss.

ScriptLogic Trace Route finds the route from an IP address to any other address by sending specially configured packets in a series of hops from node to node. By sending packets designed to time out and get returned after differing numbers of hops, and examining the ICMP and SNMP data returned, Trace Route can rapidly assemble a real-time display of resolved DNS, machine type, ISO level, boot and response time.

ScriptLogic WMI Scan provides key information on the system and WMI Status for devices on the network. The results can be quickly and easily exported on demand from WMI Scan to HTML, XML and CSV files.

ScriptLogic Graphical Ping is a powerful and versatile graphing tool which offers graphing functions (spline chart, bar chart, and area chart) and variable ICMP parameters to optimize data collection for differing situations and purposes.

(5)

ScriptLogic WHOIS quickly accesses multiple public domain records databases and performs a search by IP address or domain name. It then creates a detailed report on domain names, URLs, IP addresses, network addresses and e-mail addresses. The WHOIS report can be exported to a HTML file.

ScriptLogic Traffic Jam is a random traffic generator for the WAN. Packet size, circuit bandwidth, and load percentage are variable and customizable. Traffic Jam bombards WAN pipes and links with specified loads of random packets to measure network performance under known load conditions. It can be used to simulate the latency issues, jitter, high loss and drop rates experienced under peak usage conditions for critical applications and thus allows for solving small problems before they grow into large costly problems.

ScriptLogic Wake On LAN will boot any networked machine with previously enabled capability in the BIOS by means of a “magic packet” from a remote location. Because an enabled network interface card is still receiving power, even on a shut down device, it keeps listening for the unique “magic” created for its MAC address. Upon reception, the network adapter alerts the computer to power on just as if the power button had been pressed. (Occasionally it will be necessary to reserve power for the card.) Wake On LAN is for those who have the thankless task of updating the many far flung machines of a large organization, for those who have left a digital asset on a shut down PC somewhere else, or for those who just need a little magic on the network.

(6)

Contacting ScriptLogic Corporation

You can contact ScriptLogic Corporation in multiple ways:

Division Contact Information

Sales Sales (800) 813-6415 or (561) 886-2400

[email protected]

Support http://www.scriptlogic.com/support/overview/

Company http://www.scriptlogic.com/

(7)

Copyright Notice

Under the copyright laws, this manual or the software described within, can not be copied, in whole or part, without the written consent of the manufacturer, except in the normal use of the software to make a backup copy. The same proprietary and copyright notices must be affixed to any permitted copies as were affixed to the original. This exception does not allow copies to be made for others, whether or not sold, but all of the material purchased (with all backup copies) can be sold, given, or loaned to another person. Under the law, copying includes translating into another language or format.

(8)

Trademarks

The name ScriptLogic Corporation, the software, the product name ScriptLogic sl360 Tool Suite, ScriptLogic Perspectiv e, and the ScriptLogic logo are registered trademarks of ScriptLogic Corporation. ScriptLogic Corporation (the Software) is copyright 2010 by ScriptLogic Corporation. All rights are reserved.

Microsoft Windows 98, Windows NT, Windows 2000, Windows XP, Windows Server 2003, Vista, Windows 7, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation.

Adobe, Acrobat, and Acrobat Reader are either registered trademarks or trademarks of Adobe Systems Incorporated in the U.S. and/or other countries.

Firefox is a trademark of the Mozilla Foundation.

Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies and are the sole property of their respective manufacturers.

(9)

Getting Started

Minimum Configurations

The ScriptLogic sl360 Tool Suite is a light weight application that can run on almost any Windows-based machine. As a general guideline, the minimum specifications are:

Software / Hardware Requirement

Operating System One of the following 32-bit or 64-bit operating system is required:

o

Windows 2003 Server SP1 or later

o

Windows 2008 Server

o

Windows XP SP2 or later

o

Windows Vista SP1 (all versions)

o

Windows 7

CPU Pentium III or higher

Memory 256MB or more

Hard Drive Space 40MB or more

Network Must be accessible from the computer on which sl360 Tool Suite is installed to successfully use any network tools

(10)

Enabling WMI on Windows

WMI comes pre-installed on XP/Vista by default. To insure accessibility via WMI the user should check that the following service(s) are started:

Windows Management Instrumentation

Windows Management Instrumentation Driver Extensions

Step 1: Go to the Control Panel and double click ‘Administrative Tools’.

(11)

Step 3: Expand Services and Applications, right click on WMI Control and follow the Windows menus.

Additional Resources

Windows XP: http://support.microsoft.com/kb/875605

(12)

Enabling SNMP on Windows Vista

Enabling SNMP on targeted devices is necessary if one wants to receive SNMP information from those dev ices. This information includes monitoring CPU and memory usage via ScriptLogic sl360 Tool Suite.

Enable SNMP on Windows Vista

Step 1: Navigate to the Control Panel and double click ‘Programs and Features

Step 2: Click ‘Turn Windows features on or off’.

(13)

Step 4: Now go back to the Control Panel and double click ‘Administrative Tools’.

(14)

Step 6: Under ‘Services and Applications’ click ‘Services’

(15)

Step 8: Double click the ‘SNMP Service’ and navigate to the ‘Security’ tab. Make sure the ‘Accept SNMP packets from any host’ is selected. For routine public enablement, under ‘Accepted community names’ click ‘Add’. Leave ‘Community rights’ as ‘READ ONLY’ and enter ‘Public’ for the ‘Community Name’. (A customized SNMP Community string can also be used.)

(16)

Step 9: Click ‘Ok’ twice until you’re back at the above ‘Services’ screen. Right click the ‘SNMP Service’ and select ‘Start’. Done!

Additional Resources

An article containing useful information on SNMP can be found on the CISCO site at: http://www.cisco.com/warp/public/535/3.html

Configuring SNMP Support for Cisco Devices:

(17)

Enabling SNMP on Windows XP

Enabling SNMP on targeted devices is necessary if one wants to receive SNMP information from those dev ices.

Enable SNMP on Windows XP

Step 1: Navigate to the Control Panel and double click ‘Programs and Features’.

(18)

(19)

(20)

Step 6: When that configuration is completed, click finish. Return to the Control Panel and double- click ‘Administrative Tools’.

(21)

Step 8: Under ‘Services and Applications’ click ‘Services’ and then scroll down to the ‘SNMP Service’ in the right hand pane.

(22)

host’ is selected. For routine public enablement, under ‘Accepted community names’ click ‘Add’. Leave ‘Community rights’ as ‘READ ONLY’ and enter ‘Public’ for the ‘Community Name’. ( A customized SNMP Community string can also be used.)

Step 10: Click ‘Ok’ twice until you’re back at the above ‘Services’ screen. Right click the ‘SNMP Service’ and select ‘Start’. Done!

(23)

Encrypted Credential Store

ScriptLogic Encrypted Credential Store is a convenient, protected store of SNMP and WMI credentials shared by all tools and gadgets which require them. It uses standard AES 256-bit encryption.

Configuring Encrypted Credential Store

Step 1: Click on Edit in the Windows menu. Select Encrypted Credential Store. Step 2: In the opened dialogue box, click on New.

Step 3: From the dropdown menu next to Type select the type of credential protocol you wish to configure and save. The configuration of each of the three choices displayed is described in the following three sections.

Configuring SNMP V1 and SNMP V2c

Step 1: From the dropdown menu next to Type select SNMP V1/2c Step 2: Enter a friendly Name.

Step 3: Enter the appropriate Community string.

Step 4: Check Show if you wish the community string characters to be displayed in the dialogue box. Leave it unchecked if you wish the characters to be obfuscated.

Step 5: Click Save. Your friendly name and related community string will appear in the dropdown menu of the dialogue box for any relevant tool or gadget.

Configuring SNMP V3

Step 1: From the dropdown menu next to Type, select SNMP V3 Step 2: Enter a friendly Name.

Step 3: If a Context is necessary for the protocol being defined, check the enable box next to Context and enter the context name in the text box.

Step 4: In User name enter the name of the user with access to the device.

Step 5: In the Authentication section in the dropdown next to Type, select the appropriate hash function type for the protocol being defined.

Step 6: Enter the Password and renter to verify.

Step 7: In the Encryption section in the dropdown next to Type, select the appropriate encryption type for the protocol being defined.

Step 8: Enter the Password and renter to verify.

Step 9: Click Save to save the protocol for use in any relevant tool or gadget.

Configuring WMI

(24)

Step 2: Enter a friendly Name.

Step 3: Enter the Domain name and the User Name and enter the Password (renter to verify). Step 4: Click Save to save the credential for use in any relevant tool or gadget.

Configuring Telnet/SSH

Step 1: From the dropdown menu next to Type, select Telnet Step 2: Enter a friendly Name.

Step 3: Enter the User Name and enter the Password (renter to verify).

Step 4: Enter the Cisco Enable Password (renter to verify). If left blank, the sl360 Cisco Config will use your Telnet password.

(25)

Upgrading the Tool Suite

ScriptLogic has developed a robust framework for updating software to make sure your sl360 Tool Suite is running the latest version currently available. There are two ways the sl360 Tool Suite will update. One approach is manual update and the other approach is auto update.

Manual Update

Step 1: Select Help -> Check for Software Updates from the top Menu Bar. Step 2: Select Check for Software Updates button to see if an update is available.

Step 3: Select Update Now to pull down the software updates and apply them. sl360 Tool Suite will close and open automatically .

Step 4: Verify the current version in Help -> About. If the version numbers is not accurate, please contact support at http://www.scriptlogic.com/support/overview/.

Auto Update

Upon launch, the sl360 Tool Suite will check for any updates available at the ScriptLogic patch server. The software will automatically pull the updates and store in cache. They will be applied the next time sl360 Tool Suite is launched.

(26)

sl360 Tool Suite

ScriptLogic's sl360 Tool Suite consolidates the ScriptLogic free network management tools into a real time reporting solution and replaces disparate IT tools from multiple vendors. Why use individual point tools when you can exploit the value of these utilities in a consolidated suite that also includes integration with browser-based open source networking tools such as Nagios, OpenNMS, and others? Create custom dashboards, flow results between tools, and save network settings and favorites. The powerful, yet easy to use sl360 helps you tame your network. Networks are complicated . Network

Management doesn't have to be.

Cisco Configuration Tools

ScriptLogic Cisco Config eases management of Cisco® devices with tools for real-time configuration and router management.

 Download device configuration files from a Cisco® devices

 Save Cisco® router running network configurations and automatically archive them

 Upload configuration changes to routers or switches via SNMP or Telnet/SSH

 Compare the running config of a Cisco® router with the startup config

 Decrypt any Cisco® type-7 passwords for routers and switches for lost password recovery

View Configuration File

Use this feature to view a device configuration file that resides in multiple locations. To view a configuration file on disk:

Step 1: Click Open to view config file that resides on disk Step 2: Select the file path and name

Step 3: Click Open to view the file To view a configuration file on a device:

Step 1: Click Download to pull the startup or running config from the device Step 2: Enter the IP address or Domain Name of the device

Step 3: Select the appropriate Credentials. Use Manage Credentials to edit your Credential Store. If you want to test the Credentials, click Test

Step 4: Select what Config to download

Step 5: Click Download to run. When downloading a configuration file, the ScriptLogic TFTP Server starts automatically.

(27)

Step 2: Enter the IP address or Domain Name of the device

Step 4: Select what Config to download

Step 5: Click Download to run. When downloading a configuration file, the ScriptLogic TFTP Server starts automatically. Step 6: Click Compare to view another config file. It can be pulled from disk (open) or download from the device.

Step 7: After downloading both configurations, the comparison is displayed in Editor View. Any differences between the two config files will be highlighted to easy identification.

Edit Configuration File

This feature allows you to edit and upload configuration changes to a Cisco router. You can change the entire config or just one or two parameters.

Step 1: Click Open to view config file that resides on disk or;

Click Download to pull the startup or running config from the device; or Click New to create a new config file

Step 2: Begin to Edit the config file

Go To Section Quickly go to any section of the config file

Find Search for key words in the config file

Undo Will undo the last change made to the config file Redo Applies the last edit to the config file again

Print Print the config file

Step 3: Click Upload to put the config file on the device. Step 4: Enter the IP address or Domain Name of the device

Step 6: Click Upload to run the process

Decrypting Passwords

ScriptLogic Cisco Config can decrypt type 7 passwords. Step 1: Click Decrypt Password

Step 2: Enter a Cisco type 7 password to decrypt Step 3: Click Decrypt

(28)

Configure Settings

ScriptLogic Cisco Config allows you to modify a number of general properties. To configure click the Settings button.

 Default File Path

Location of files that are being viewed and edited.

 Cisco configuration history path

Location of all history of configuration files. This is treated as an archive and should be used for any historical comparison.

 Local TFTP Server IP Address

Enter the IP Address of the local machine that is running the sl360 Cisco Config tool. TFTP Server is used to communication with the device.

 Use external TFTP Server without prompting

Select if you want to use another TFTP Server for Cisco Config.

 Telnet Timeout (seconds)

Set the amount of time that Telnet will be use to communicate with a device.

 SNMP Timeout (seconds)

Set the amount of time that SNMP will be use to communicate with a device.

 Download/Upload Timeout (seconds)

Set the amount of time that sl360 will be use to communicate with a device.

Save (Archive) Configuration File

ScriptLogic Cisco Config tool automatically saves config files with every download and upload, creating a robust archive. In addition, you can Save at any time.

Step 1: Click Save button

Step 2: Select Location to save file and enter file name Step 3: Select Save As File Type

(29)

Dashboard and Gadgets

ScriptLogic Dashboard is a “network management dashboard” with a summary display of key performance indicators (KPIs) and diagnostic metrics of network performance and availability. Managers and operations staff can continuously monitor key assets at chosen intervals with customizable gadgets.

Overview

 Monitor and indicator gadgets for your mission critical devices

 Gadgets with charts, gauges, lists, text, and web links

 Drag and drop gadgets on the dashboard to create a custom view

 Dashboard and gadgets auto resize to your screen size

Configure a Dashboard

The Dashboard can be customized to meet your needs.

 Add Tab

Create multiple dashboards full of key gadgets. For example, create a dashboard for routers, create one for servers, and even create one for your web properties to make sure they are up and running.

 Full Screen

Run the dashboard so it fills the entire screen and cycles through multiple tabs at user defined intervals.

 All Gadgets

A list of gadgets to use on the dashboard. They encompass a broad suite of mission critical data like device application, networking, devices, availability, and web-based tools. Please see Configure a Gadget for more details.

 Configure Columns

Set the number of columns for your dashboard page. Gadgets will resize automatically based on the number of columns.

 Rename Tab

Give every dashboard tab a friendly name for easy navigation across your multiple dashboards.

 Clear Gadgets

Will clear the dashboard of any gadgets and allow you to start fresh in configuring the dashboard.

 Close Tab

Will permanently remove the dashboard tab and all its associated gadgets.

Configure a Gadget

The Dashboard gadgets can be configured for specific monitoring needs

 Active Directory

(30)

o Name – enter a friendly name

o Refresh Interval – determine how often the gadget executes o Display Mode – IP Address or DNS Name

o Target - enter the host name or IP Address

o WMI Timeout (ms) - Designate the maximum amount of time in milliseconds that WMI will wait for a response from the target. If the target does not respond within the number of milliseconds set, it is assumed down

o WMI Credential – Set the proper credential store for the network of the device you are going to monitor. To configure the credential store, please see the section titled Credential Settings.

o Performance Counters Configuration – select the Active Directory performance counters that you would like to monitor in the gadget

 DRA Inbound Bytes Total / Sec - This counter displays the number of bytes received through inbound Active Directory related replication. If this number is consistently equal to zero, it means that replication is not occurring. Low numbers may indicate that there is a network bottleneck or that the server's NIC is too busy with other traffic to receive the requests in a timely manner.

 DRA Inbound Object Updates Remaining in Packet - This counter displays the number of Active Directory objects that have been received through replication, but that have not yet been applied. This number may start high, but should diminish very quickly. If this value takes a while to diminish, it is a clue that the serv er's hardware might not be fast enough to keep up with the demand.

 DRA Outbound Bytes Total / Sec - This counter displays the total number of bytes (compressed and uncompressed) that are being transmitted each second as a result of the replication process. A lack of activity often indicates insufficient hardware.  DRA Pending Replication Synchronization - This number indicates the number of

objects which must be synchronized. Like the DRA Inbound Object Updated

Remaining in Packet counter, this value may start high, but should quickly dissipate. If this counter's value remains high, it usually means that the hardware is having trouble keeping pace with the demands being made of it.

 DS Threads in Use - This counter indicates the number of threads that are currently servicing client API calls. You can use this value to determine whether or not the domain controller could benefit from additional processors.

 Kerberos Authentications - The value from this counter indicates the number of times each second that clients use a ticket to authenticate to the domain controller. A lack of activity sometimes indicates that network problems are preventing requests from reaching the domain controller.

 LDAP Bind Time - This counter indicates the number of milliseconds that the last successful LDAP bind took to complete. This value should remain consistently low. Longer bind times can be an indication of network problems or of hardware that needs to be upgraded.

 LDAP Client Sessions - This number indicates the number of LDAP sessions that are connected to the domain controller at the moment. The appropriate value depends on your network, but if this value remains at zero, it means that you probably have some network problems that are preventing client sessions from connecting with the server.

 LDAP Searches / Sec - The LDAP Searches / Sec counter indicates the number of LDAP queries made by clients each second. I recommend viewing this counter along with the LDAP Successful Binds / Sec counter, which shows the number of

successful LDAP binds each second. The biggest thing that you are looking for in these two counters is activity. A lack of activity would almost always indicate that network problems are disrupting the client's ability to interact with the domain controller.

 Availability Chart

(31)

o Target - type the host name(s) or IP Address(es)

o Ping Timeout (ms) - Designate the maximum amount of time in milliseconds that Ping will wait for a response from the target. If the target does not respond within the number of milliseconds set, Ping Scan will assume it is down.

o Ping Packet TTL (Time-To-Live) – Designate the number of hops along the way to the specified address. With a setting of 32, your Ping Scan could pass through up to 32 different routers on the way to the remote address before being thrown away by the network.

o Pings Per Node - Set the number of Ping attempts to send each address during a scan. o Delay Between Pings - Designate the time in milliseconds between each successive Ping

to the target address. Setting this value very low will send a constant stream of Pings to the target IP address.

o Chart Type - Select the type from Spline or Area.

o Chart Zoom - Select the zoom level interval: 15 minutes, 30 minutes, 45 minutes, and 1 hour.

 Availability Gauge

Indicates the availability of a node based on response time and average packet loss. o Name – enter a friendly name

o Target - type the host name or IP Address

o Percent Thresholds – Set the warning and critical percent levels for your gauges. When the warning threshold is met, the gauge will turn yellow; and when the critical threshold is met, the gauge will turn red.

o Response Time Thresholds - Set the warning and critical percent levels for your gauges. When the warning threshold is met, the gauge will turn yellow; and when the critical threshold is met, the gauge will turn red.

 Availability List

Indicates the availability of a list of node(s) by showing the response time and a color indicator bar.

(32)

 Availability Text

Indicates the availability of a node by changing the color of the text. Green indicates the ping was successful and red indicates the ping failed to reach the target.

 CPU Chart

Monitors the CPU usage percentage of a device. o Name – enter a friendly name

o SNMP Timeout (ms) - Designate the maximum amount of time in milliseconds that SNMP will wait for a response from the target. If the target does not respond within the number of milliseconds set, SNMP will assume it is down

o SNMP V1/2c Credential – Set the proper credential store for the network of the device you are going to monitor with the CPU Gauge. To configure the credential store, please see the section titled Credential Settings.

o SNMP V3 Credential –Set the proper credential store for the network of the device you are going to monitor with the CPU Gauge. To configure the credential store, please see the section titled Credential Settings.

 CPU Gauge

Monitors the CPU usage percentage and average usage percentage of a device. o Name – enter a friendly name

o SNMP V1/2c Credential – Set the proper credential store for the network of the device you are going to monitor with the CPU Gauge. To configure the credential store, please

(33)

 CPU List

Monitors the CPU usage percentage of device(s) within in network. o Name – enter a friendly name

 CPU/Memory Chart

Monitors the CPU and memory usage percentage of a device. o Name – enter a friendly name

 CPU/Memory Gauge

Monitors the CPU and memory usage percentage of a device. o Name – enter a friendly name

o SNMP V1/2c Credential – Set the proper credential store for the network of the device you are going to monitor with the Memory Gauge. To configure the credential store, please see the section titled Credential Settings.

o SNMP V3 Credential –Set the proper credential store for the network of the device you are going to monitor with the Memory Gauge. To configure the credential store, please see the section titled Credential Settings.

(34)

the warning threshold is met, the gauge will turn yellow; and when the critical threshold is met, the gauge will turn red.

 CPU/Memory List

Monitors the CPU and memory usage percentage of a device(s). o Name – enter a friendly name

o Refresh Interval – determine how often the gadget executes o Display Mode – show IP Address or DNS Name

o Target – enter IP Address ranges or device groups

 Disk Volume Chart

Monitors the disk utilization on a hard drive of a specific device. o Name – enter a friendly name

o Storage Filters – Display storage capacity greater than a number of megabytes, gigabytes, or terabytes.

 Disk Volume List

Monitors the disk utilization of each drive as a percent of capacity for a device. o Name – enter a friendly name

(35)

o Percent Thresholds – Set the warning and critical percent levels for your list. When the warning threshold is met, the value will turn yellow; and when the critical threshold is met, the value will turn red.

o Storage Filters – Display storage capacity greater than a number of megabytes, gigabytes, or terabytes.

 Memory Chart

Monitors the memory usage percentage of a device. o Name – enter a friendly name

 Memory Gauge

Monitors the memory usage percentage and average usage percentage of a device. o Name – enter a friendly name

 Memory List

Monitors the memory usage percentage of device(s) within in network. o Name – enter a friendly name

(36)

see the section titled Credential Settings.

 MS Exchange

Monitors the performance counters for MS Exchange server. o Name – enter a friendly name

o Performance Counters Configuration – select the MS Exchange performance counters that you would like to monitor in the gadget

o Exchange 2007

 MSExchangeAD Topology - Provides Active Directory topology information to Exchange services. If this service is stopped, most Exchanges services are unable to start.

 MSExchangeAntiSpamUpdate - The Microsoft Forefront Security for Exchange Server anti-spam update service.

 MSExchangeEdgeSync - The Microsoft Exchange EdgeSync Service.  MSExchangeFDS - Microsoft Exchange File Distribution Service.

 MSExchangeImap4 Provides Internet Message Access Protocol (IMAP4) Services to client. If this service is stopped, clients are unable to connect to this computer using the IMAP4 protocol.

 MSExchangeIS - Manages the Microsoft Exchange Information Store. This includes mailbox stores and public folder stores. If this service is stopped, mailbox stores and public folder stores on this computer are unavailable.

 MSExchangeMailboxAssistants - Performs background processing of mailboxes in the Exchange store.

 MSExchangeMail Submission - Submits messages from the Mailbox server to the Hub Transport servers.

 MSExchangeMonitoring - Allows applications to call the Exchange diagnostic cmdlets.

 MSExchangePop3 - Provides Post Office Protocol version (POP3) Services to clients. If this service is stopped, clients are unable to connect to this computer using the POP3 protocol.

 MSExchangeRepl - The Microsoft Exchange Replication Service provides replication functionality for Mailbox server role databases and is used by local continuous replication and cluster continuous replication.

 MSExchangeSA - Forwards directly lookups to a global catalog server for legacy Outlook clients, generates email addresses and offline address books, updates free/busy information for legacy clients, and maintains permissions and group memberships for the server.

 MSExchangeSearch - Quickly creates full-text indexes on content and properties of structured and semi-structured data to allow fast linguistic searches on this data.  MSExchangeServiceHost - Provides a host for several Microsoft Exchange

services.

 MSExchangeTransport - The Microsoft Exchange Transport Service.  MSExchangeTransportLogSearch - Provides remote search capability for

(37)

 Store – Processor Time - Amount of processor being used by the Information Store.  Inetinfo – Processor Time - Amount of processor being used by the Microsoft

Internet Information Services.

 Transport Queues - This counter displays the number of bytes received through inbound Active Directory related replication. If this number is consistently equal to zero, it means that replication is not occurring. Low numbers may indicate that there is a network bottleneck or that the server's NIC is too busy with other traffic to receive the requests in a timely manner.

 RPC Packets/sec - The rate of Remote Procedure Call (RPC) packets

 RPC Average Latency - This indicates the Remote Procedure Call (RPC) averaged latency in milliseconds for the past 1024 packets.

 Disk Transfers/sec - The average sum of all random read/write input/output (I/O) operations to the Microsoft Exchange Database disk volumes (both .edb and .stm files).

o Exchange 2003

 IMAP4Svc - Provides Microsoft Exchange IMAP4 Services.

 MSExchangeES - Monitors folders and fires events, for Exchange 5.5-compatible server applications.

 MSExchangeIS - Manages Microsoft Exchange Information Storage.

 MSExchangeMGMT - Provides Microsoft Exchange management information through WMI.

 MSExchangeMTA - Provides Microsoft Exchange X.400 services

 MSExchangeSA - Provides system related services for Microsoft Exchange  MSExchangeSRS - No entry

 POP3Svc - Provides Microsoft Exchange POP3 Services  RESvc - Processes Microsoft Exchange routing information

 System – Processor Time - Amount of processor being used by the System Resources.

 Store – Processor Time - Amount of processor being used by the Information Store.  Inetinfo – Processor Time - Amount of processor being used by the Microsoft

Internet Information Services.

 RPC Packets/sec - The rate of Remote Procedure Call (RPC) packets

 Averaged Latency - This indicates the Remote Procedure Call (RPC) averaged latency.

 Disk Transfers/sec - The average sum of all random read/write input/output (I/O) operations to the Microsoft Exchange Database disk volumes (both .edb and .stm files).

 Local Queue Length - The number of messages in the local queue waiting delivery to local users.

o Exchange 2000

 IMAP4Svc - Provides Microsoft Exchange IMAP4 Services.

 MSExchangeES - Monitors folders and fires events, for Exchange 5.5-compatible server applications.

 MSExchangeIS - Manages Microsoft Exchange Information Storage.

 MSExchangeMGMT - Provides Microsoft Exchange management information through WMI.

 MSExchangeMTA - Provides Microsoft Exchange X.400 services

 MSExchangeSA - Provides system related services for Microsoft Exchange  MSExchangeSRS - No entry

 POP3Svc - Provides Microsoft Exchange POP3 Services  RESvc - Processes Microsoft Exchange routing information  SMTPSVC - Transports electronic mail across the network

 Inetinfo – Processor Time -Amount of processor being used by the Microsoft Internet Information Services.

 MAD – Processor Time - Amount of processor being used by the Exchange System Attendant Service. The process called mad.exe is a core part of Microsoft Exchange. It performs a number of key functions, for example, it will manage the loading of additional dlls when you make config changes to Exchange. It also performs the message tracking logging. You should leave this process running if you use Microsoft Exchange. If you find that it is using a large amount of resources (e.g. 90% CPU) you

(38)

should check to see if there are any updates available for Exchange, from Microsoft.  Store – Processor Time - Amount of processor being used by the Information Store.  Local Queue Length - Local Queue Length indicates the number of messages in

the local SMTP queue.

 Messages Delivered/sec - Messages Delivered/sec indicates the rate that messages are being delivered to local mailboxes.

 Messages Received/sec - Messages Received/sec indicates the rate that messages are being received.

 Messages Sent/sec - Messages Sent/sec indicates the rate that messages are being sent.

 Messages Open/Sec - Message Opens/sec indicates the rate that requests to open messages are submitted to the Exchange store.

 Folder Opens/sec - Folder Opens/sec indicates the rate that requests to open folders are submitted to the Exchange store.

 Local Delivery Rate - Local Delivery Rate indicates the rate at which messages are being delivered locally.

 RPC Operations/sec - RPC Operations/sec indicates the rate that RPC operations occur. This counter tells you how many RPC requests are outstanding. If Outlook is notifying users that it cannot contact their Exchange server, it is likely that this counter will show significant spikes.

 RPC Requests - RPC Requests indicates the number of client requests that are currently being processed by the Exchange store. This counter should not exceed 100. You should also use this counter to establish a baseline of normal server performance.

 Network Interface Chart

Monitors the network interface performance for a device by showing the percent of capacity or throughput.

o Traffic Display Mode – Percent of capacity or throughput o Select the network interface to display

 Network Interface List

Monitors the network interface performance for a device by showing the percent of capacity or throughput.

(39)

see the section titled Credential Settings.

o Traffic Display Mode – Percent of capacity or throughput o Hide inactive interface – will not be displayed in results

o Include all network interfaces or select specific network interfaces to display – Customize the view for your gadget.

 Open Source Web Viewer

Monitors the CPU performance of a list of node(s) by showing the usage percentage and a color indicator bar.

o Name – enter a friendly name.

o URL – enter the URL for the browser-based open source network management tool or website.

o Enable Refresh – allow the gadget to refresh. Note that many websites have auto refresh so you might consider disabling the refresh option.

o Enable Scroll Bar – allow for a scroll bar on the gadget to move up and down

 Server Gadget

Monitors the key performance counters for any WMI-enabled machine such as a server, workstation, or laptop.

o Performance Counters – select the server performance counters that you would like to monitor in the gadget

 Total Free Space - Indicates the amount of physical memory (in MB) immediately available for allocation to a process or for system use. The amount of memory available is equal to the sum of memory assigned to the standby (cached), free, and zero page lists.

 Total Pages/sec - Indicates the rate at which pages are read from or written to disk to resolve hard page faults. This counter is a primary indicator of the types of faults that cause system-wide delays. It includes pages retrieved to satisfy page faults in the file system cache. These pages are usually requested by applications.

 Avg Processor Time - The percentage of time the processor was busy during the sampling interval. Although you might sometimes see high values for the

Processor\% Processor Time counter (70 percent or greater depending on your workload and environment), it might not indicate a problem; you need more data to understand this activity. For example, high processor-time values typically occur when you are starting a new process and should not cause concern.

 Avg User Time - The percentage of time a process was running in user mode.  Disk Time - Reports the percentage of time that the selected disk drive is busy

servicing read or write requests. Because this counters data can span more than one sample, and consequently overstate disk utilization, compare this value against % Idle Time for a more accurate picture. By default this counter cannot exceed 100 percent; however, you can reset the registry to allow System Monitor to display percentages exceeding 100 percent if appropriate

(40)

a disk during the sample interval, as well as requests in service. As a result, this might overstate activity. If more than two requests are continuously waiting on a single-disk system, the disk might be a bottleneck.

 Processor Queue - An instantaneous count of threads that are in the processor queue.

 Total Bytes/sec - The Bytes Total/sec performance counter shows the rate at which the network adaptor is processing data bytes. This counter includes all application and file data, in addition to protocol information, such as packet headers.

 SQL Server

Monitors the performance counters for SQL Server. o Name – enter a friendly name

o Select Instance – Select the specific SQL Instance that you want to monitor o SQL Server Version – Displays the version of SQL Server

o Select Database(s) – Select the SQL Database(s) that you want to monitor. Use SHIFT, CTRL keys to select multiple items.

o Performance Counters Configuration – select the SQL Server performance counters that you would like to monitor in the gadget

 Databases-Transactions/Sec - This counter measures the number of transactions started per second. Transactions are the basis of everything in SQL Server, and most queries are implicit transactions. This measurement is extremely handy for

determining if the load has substantially increased over time. This also gives you an indicator to how the workload is on your system.

 Access Methods-Full Scan/Sec - This counter should always be captured. It shows how often a table index is not being used and results in sequential I/O. This is defined as the number of unrestricted full scans. These can be either base table or full index scans. Missing or incorrect indexes can result in reduced performance because of too high disk access.

 Buffer Manager - This counter shows the percentage of pages that are found in SQL Server’s buffer pool without having to incur a read from disk. A well-balanced system will have hit ratio values greater than 80%. The hit ratio ought to be 90% or better for OLTP-type databases.

 Latches-Latch Waits/sec - This counter measures the average amount of time, in milliseconds, that a latch request had to wait before it was serviced. Over time it is a good indicator for a general performance problem or if a performance issue is specific to one user.

 Locks – Average Wait Time - This counter measures the average amount of time, in milliseconds, that a user is waiting for a lock. Over time it is a good indicator for a general performance problem or if a performance issue is specific to one user. Locks are inevitable but a sometimes a blocking or a deadlock can skew the v alues. Having said that, less this wait the better it is.

 Wait Stats - The SQLServer:Wait Statistics performance object contains performance counters that report information about wait status.

 Lock waits - Statistics for processes waiting on a lock.

 Log write waits - Statistics for processes waiting for log buffer to be written.  Network IO waits - Statistics relevant to wait on network I/O.

(41)

Monitors the CPU performance of a list of node(s) by showing the usage percentage and a color indicator bar.

 Top 10 – Average Memory Usage (%)

Monitors the memory performance of a list of node(s) by showing the usage percentage and a color indicator bar.

 Top 10 – Average Packet Loss (%)

Indicates the average packet loss of a list of node(s) by showing the response time and a color indicator bar.

 Top 10 – Disk Volume Usage (%)

Indicates the highest average disk volume usage as a percentage of drive capacity for a list of devices by showing capacity used and a color indicator bar.

sl360 Tool Suite User Guide

sl360 Tool Suite

User Guide

Table of Contents

Introduction

3

Key Features of sl360 Tool Suite

3

Contacting ScriptLogic Corporation

6

Copyright Notice

7

Trademarks

8

Getting Started

9

Minimal Configurations

9

Enabling WMI on Windows

10

Enabling SNMP on Windows Vista

12

Enabling SNMP on Windows XP

17

Encrypted Credential Store

23

Upgrading the Tool Suite

25

sl360 Tool Suite

26

Cisco Configuration Tools

26

Dashboard and Gadgets

29

Device Groups

44

DNS Audit

45

Enhanced Ping

46

Favorites

47

Graphical Ping

48

MAC Scan

50

NetFlow Listener

51

Network Discovery / Inventory

53

Ping Scan

57

Port Scan

58

SNMP Scan

59

Switch Port Mapper

61

Syslog Server

64

TFTP Server

66

Trace Route

67

Traffic Jam

69

Wake on LAN

71

WHOIS

73

WMI Scan

74

Introduction

Key Features of sl360 Tool Suite

Contacting ScriptLogic Corporation

Copyright Notice

Trademarks

Getting Started

Minimum Configurations

o