Network Vision Software Database Audit and Analysis for Network Vision Software Inc. Newburyport, MA Maintenance Technician Report ivBackup_2014_1112_1542_692.pdf This is a sample Diagnostic Report created with a simulated problems on a test network. It is intended to demonstrate the issues and actions identified if a problem occurs. If there is no problem with a specific issue the Report will indicate a Good condition and no suggestions will be listed, thus not all actions are listed on this sample report. This report is based on the database, ivBackup_2014_1112_1542_692.zzz Report generated on Nov 12, 2014 version 140917 page 1 of 14 1 Database Statistics 1 Database Statistics 1 Database Statistics Introduction This Maintenance Report is intended to provide insight and guidance on the issues captured in the IntraVUE Database. Data will be organized in sections to highlight key parts and help simplify support. The maintenance report will contain sections to: - Provide details on the version and running time of the IntraVUE system List of Networks configured List of Devices in each Network Configuration Review to provide suggestions to improve the configuration and reporting of IntraVUE Network Analysis reviewing key parameters to identify devices having issues and make suggestions The report uses database data from various periods but is focused on data from the last 30 days. If a potential problem is identified it will also contain details on a course of action to be taken. Email: [email protected] Phone: +1 978-499-7800 page 2 of 14 1 Database Statistics 1 Database Statistics Time used for this report: First event: 2014-09-12 09:59:44.0 Last event: 2014-09-17 14:08:06.0 First scanner data time: 2014-09-12 10:00 Last scanner data time: 2014-09-17 14:08 Number of days from first event to last scanner time: 6 Last Version of Intravue: 2.3.0a11 Product Key: 3ALT7-XX03E-DA999-S3999-98954 Node count limit: 2048 page 3 of 14 2. Summary of Findings This section highlights notable findings from the analysis. Only those networks having signficant events will be shown here. Network 1 There were 1 devices with disconnects exceeding 10 in 6 hours or 30 in 60 hours There were devices reporting link speed changes within the last 60 hours. There were verified devices with more than 3 moves within 6 hours or more than 10 within 60 hours There are probable duplicate IP(s) based on moves and mac changes. page 4 of 14 3. Table of Networks The following table will list each network contained in the IntraVUE database. Each network contained in this list will be individually analyzed for issues occurring on the network. It is important when configuring IntraVUE that Local Area Networks (LANs and VLANS) be configured as separate IntraVUE networks with names that help identify each. List of IntraVUE networks Network Name Count Network 1 63 Licensed for 2048, total found 63 Top Parent 10.1.1.71 Good: global default community is set to public allowing commmon out-of-the-box device snmp to be discovered and used. page 5 of 14 4. Network Analysis: Network 1 4.1. General Network Details: Network 1 The Top Parent of this network is 10.1.1.71 List of network scan ranges: From To 10.1.1.1 10.1.1.254 Summary of Connection and Verification States: Connected Disconnected Totals Known & Verified 52 8 60 page 6 of 14 New & Not Verified 3 0 3 Total 55 8 63 NOTE: The connection and verification status are as of the time the database was saved, Sep 17, 2014. NOTE: All devices should be verified. This will provide important details and better maintenance on device additions and moves. C = Connection Status Connected Disconected W Wireless Connected W Wireless Disconnected V = Verified Status K = KPI Critical Status ? Unknown -- Ignored I Intermittent Critical Known and Verified New or not Verified Device Move or conflict with new location verified Move or conflict with new location not A Always On Critical verified W - wireless access point w - wireless device Device Information: IP Address 10.1.1.13 C V K Device Name A stswshd1.st3483 -- Mycom 5 10.1.1.15 I Banner Bar Code 10.1.1.1 10.1.1.20 10.1.1.49 A I -A --- 10.1.1.55 A 10.1.1.38 10.1.1.40 w 10.1.1.42 10.1.1.48 10.1.1.56 10.1.1.57 10.1.1.59 w w W Camera RECEIVING Location Name Vendor Model Referigeration Rockwell Automation/AllenBradley Banner Engineering Corporation 1763-L16AWA B/8.00 Palletizer B Panel FactoryTalk View HMI AGSNVIVOSTRO Hand sacnner Packaging Panel Hand sacnner Warehouse BRN001BA9B18D6 F Refrigeration PLC5 PLC Room above Boiler Rockwell Control Room Automation/AllenBradley Hand sacnner Warehouse --- Cisco AP A Spiral Freezer Cisco AP-111B Spiral Panel Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley 1756-ENBT/A I X-Large Cutter Cutter Deck I Line 1 Wexxar Packaging Micrologix 10.1.1.62 PLC-5/40E F/A - DC 3.40 Warehouse Roof Controllogix 10.1.1.61 Banner Presence Plus page 7 of 14 1761-NET-ENI/D 1761-NET-ENI/C IP Address 10.1.1.65 C V K Device Name A Boiler BMC Location Name Vendor Model Boiler Room Rockwell Automation/AllenBradley 1756-ENBT/A Rockwell Automation/AllenBradley 1761-NET-ENI/D Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley PLC-5/40E F/A - DC 3.34 Rockwell Automation/AllenBradley PLC-5/40E F/A - DC 3.40 Controllogix 10.1.1.67 -- Hand sacnner I Small Cutter Warehouse Warehouse 10.1.1.74 -- Hand sacnner I MARK-PC A Boiler PLC5 10.1.1.75 A Receiving PLC5 Electrical Room 4 w 10.1.1.69 Cutter Deck Micrologix 10.1.1.70 w 10.1.1.71 10.1.1.77 I Titan Sorter 10.1.1.78 I BRN001BA9784CE 7 Co-Product PLC5 PLC Room Above Boiler Control Room PLC-5/40E F/A - DC 3.40 Titan Sorter Upper Cabinet 10.1.1.81 A 10.1.1.83 -- CLAIRE-DESKTOP Lower Floor Cutter Area I MMI5_CUTG Packaging Rockwell I Line 4 Wexxar 1761-NET-ENI/C A Line 5 Fryer Electrical Room 2 1756-ENBT/A -- Hand sacnner I DIM1100 Warehouse 10.1.1.84 10.1.1.85 10.1.1.89 Electrical Room 3 Controllogix 10.1.1.91 10.1.1.92 10.1.1.98 10.1.1.106 10.1.1.110 w I -- Mycom 3 I Med Cutter Unknown (edit /etc/snmp/snmpd.conf) Refrigeration Cutter Deck Micrologix 10.1.1.137 10.1.1.140 10.1.1.141 10.1.1.142 10.1.1.144 10.1.1.155 A Cisco Switch 2 I Line 23 Feeder Enclosure 23B A Anderson Panel Boiler Room Controller Anderson SLC 5/05 I Air Compressor 2 -- Mycom 2 I Air Compressor 3 Automation/AllenBradley Rockwell Automation/AllenBradley Enclosure 23B Boiler Room Refrigeration Boiler Room page 8 of 14 Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley Cisco 1763-L16AWA B/8.00 PLC to control conveyor line 2 Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley Electrical Group 1761-NET-ENI/D 2955 1747-L552/C C/11 - DC 3.46 1763-L16AWA B/5.00 1763-L16AWA B/8.00 1763-L16AWA B/4.00 IP Address 10.1.1.160 C V K Device Name I Air Compressor 1 10.1.1.161 I PLANTSV_CC1 10.1.1.163 10.1.1.165 I MMI4_PEEL A Line 5 Fryer PLC5 10.1.1.169 A Palletizer C SLC 5/05 10.1.1.170 Location Name Vendor Model Boiler Room Rockwell Automation/AllenBradley 1763-L16AWA B/5.00 Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley PLC-5/40E F/A - DC 3.40 Rockwell Automation/AllenBradley 1747-L552/C C/9 - DC 3.33 Rockwell Automation/AllenBradley 1763-L16AWA B/5.00 3rd Computer Control Room Line 5 Peeler Electrical Room 2 Packaging Palletizer C Panel A 3Com SuperStack II 3Com Switch dell switch 171 A A Palletizer A SLC scannerbench 5/05 Packaging Palletizer A Panel Support Office 10.1.1.181 A Cisco3550Switch -- Mycom 1 10.1.1.188 A N-TRON Switch Mobile, AL 36609 10.1.1.171 10.1.1.172 10.1.1.174 10.1.1.190 10.1.1.192 10.1.1.195 10.1.1.203 10.1.1.210 10.1.1.224 10.1.1.226 I Refrigeration ff:43:00 PROCESS_CC2 2nd Computer Control Room MMI6_WETGRAD Line 6 Sorter I A MIS_SERVER A MICE MM2 I Line 5 Cutters I Hardy Scale I Data Highway Control Room NVI Lab Electrical Room 3 Starch Panel Comm Closet 3 Gateway 10.1.1.230 -- Receiving Elevator Receiving 10.1.1.234 -- Mycom 6 Refrigeration 10.1.1.244 A Cisco_Switch I ENGINEERING A cisco2950switch Cisco 10.1.1.250 10.1.1.252 1747-L552/C C/9 - DC 3.33 Electrical Shop 4.2. Configuration Review page 9 of 14 Rockwell 1756-ENBT/A Automation/AllenBradley Hardy Instruments, Inc. Hardy 4050 Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley Rockwell Automation/AllenBradley 1756-ENBT/A 1761-NET-ENI/D 1763-L16AWA B/9.00 This section will analyze the database to identify general configuration issues that may improve IntraVUE's ability to provide better diagnostics. Any issues will appear as a 'Warning' and will include an 'Action Required' for proper deployment and to take full advantage of the IntraVUE diagnostics. Good. 98 per cent of the devices in this network are Admin Verified. Good. Less than 5% of the devices in this network do not have names assigned. Good: no unresolved node Good: No auto-inserted nodes having a managed switch as a child. Good: There are less than 5 devices in this network that are unverified, disconnected devices. WARNING: There are 2 red filled nodes in this network. Red filled nodes represent the original location of a device that has been admin verified and configured not to move. They are red filled to force your attention to them. Device Move. If a verified device is moved from the verified location a red filled box indicates the old, verified location and a tan filled box will represent the new location. ACTION REQUIRED. Move the device back and the red box will turn back blue, otherwise delete the red box and verify the new location. Duplicate IP or conflict. Duplicate IPs will make a device appear in two locations based on the two different macs of the devices with the same IP. The red filled and tan filled boxes show you the locations of the conflict. ACTION REQUIRED. Change the IP of one of the devices. Switch Move. Switches connected to (both) redundant routers have their packets take multiple paths, see 'trunking' under Help. Switches connected in a spanning tree ring that changes will cause red boxes at the verified positions of the ring, for those switches that change. ACTION REQUIRED: Edit the trunkingdefs.txt file in the case of redundant routers; Either delete the red boxes or cause the ring to return to its original configuration for spanning tree changes. 4.3. General Network Details: Network 1 page 10 of 14 4.3.1. Connection Issues Devices with connections issues: Reporting devices that have the highest connection problems (ping failures). You may want to check the connections, wire, and port speed settings to minimize or eliminate these issues Devices with Ping Failures 30 Day 60 Hour 6 Hour 2 hr 10 min 1 min counts counts counts IP Address Device Name 10.1.1.57 Cisco AP 118 144 10.1.1.70 Hand sacnner 80 135 10.1.1.137 Cisco Switch 2 116 73 116 68 10.1.1.42 10.1.1.224 Hardy Scale 98 82 10.1.1.91 Hand sacnner 45 97 10.1.1.56 Hand sacnner 61 73 10.1.1.181 Mycom 1 80 12 10.1.1.141 Anderson SLC 5/05 44 24 10.1.1.160 Air Compressor 1 19 47 10.1.1.142 Air Compressor 2 35 12 10.1.1.49 BRN001BA9B18D6F 24 5 10.1.1.140 Line 23 Feeder Controller 9 12 10.1.1.78 BRN001BA9784CE7 14 4 10.1.1.48 Hand sacnner 16 10.1.1.234 Mycom 6 10 3 Devices with Disconnection Events: Reporting devices that have the highest disconnect events (EXCEPT 'auto-connect' devices). IP Address Devices with Disconnections Device Name 10.1.1.56 Hand sacnner 67 10.1.1.67 Hand sacnner 19 10.1.1.91 Hand sacnner 4 6 10.1.1.70 Hand sacnner 6 3 10.1.1.61 X-Large Cutter Micrologix 8 page 11 of 14 Last 30 Last 60 Last 6 Days Hours Hours 24 10.1.1.48 Hand sacnner 7 10.1.1.57 Cisco AP 5 10.1.1.155 Air Compressor 3 1 10.1.1.59 Spiral Freezer Controllogix 3 10.1.1.83 CLAIRE-DESKTOP 3 10.1.1.42 3 2 10.1.1.137 Cisco Switch 2 2 10.1.1.65 Boiler BMC Controllogix 1 10.1.1.226 Data Highway Gateway 1 10.1.1.89 Line 5 Fryer Controllogix 1 10.1.1.169 Palletizer C SLC 5/05 1 Devices with Link Speed changes: Reporting devices that changed their link speed. IP Address(:Port) Devices with Link Speed Changes Device Name Last 30 Last 60 Last 6 Days Hours Hours 10.1.1.42:1 1 10.1.1.42:6 1 10.1.1.172:4 Palletizer A SLC 5/05 3 10.1.1.172:8 Palletizer A SLC 5/05 10.1.1.188:1 N-TRON Switch ff:43:00 2 10.1.1.188:14 N-TRON Switch ff:43:00 6 3 1 4.3.1.1. Device Issues Ping Response time issues: Reporting devices having periods in which the ping response threshold is exceeded for 2 or more consecutive minutes in the last 6 hours of scanning. Reported devices could be overloaded or having internal issues. They may be devices which should have their thresholds increased from the default, like wireless devices. IP Address Name Threshold Avg Max Minutes Over 10.1.1.56 10.1.1.62 10.1.1.91 10.1.1.252 Hand sacnner Line 1 Wexxar Hand sacnner cisco2950switch 30.0 290.0 30.0 520.0 406.3 589.2 547.2 604.2 359 359 359 359 page 12 of 14 63.9 328.0 109.0 298.2 135 225 200 7 Conseq. Over 117 144 195 1 10.1.1.244 Cisco_Switch 210.0 288.7 589.4 359 259 187 Device Moves: Reporting devices which moved in the last 30 days which are admin verified and not enabled for automatic moves. Configuration Note: If any of these devices are allowed to move, the IntraVUE administrator should check the Auto Connect checkbox in Device Configuration. 10.1.1.110 2014-09-17 08:45:19.0 10.1.1.155 2014-09-17 12:45:53.0 2014-09-17 13:22:32.0 2014-09-17 13:33:30.0 Med Cutter Micrologix Device 10.1.1.110 moved from 10.1.1.42:1 to 10.1.1.42:4 Air Compressor 3 Device 10.1.1.155 moved from 10.1.1.172:4 to 10.1.1.252:1 Device 10.1.1.155 moved from 10.1.1.252:1 to 10.1.1.172:4 Device 10.1.1.155 moved from 10.1.1.172:4 to 10.1.1.252:1 4.3.1.1.1. Addressing Issues Changed MAC addresses (potential duplicate IPs): These devices had changes in their MAC address in the last 30 days which might indicate a duplicate IP address. If this device has also been reported in the 'Device Moves' section, it is VERY likely to be a duplicate ip address. WARNING: IP 10.1.1.155 has move and mac change events and is probably a duplicate IP. 10.1.1.155 2014-09-17 12:45:50.0 Air Compressor 3 Device 10.1.1.155 changed mac from f0:ad:4e:01:db:9e to f0:ad:4e:00:c9:d9 Changed IP Addresses (potential duplicate MAC addresses): These devices had changes in their IP address in the last 30 days which might indicate a duplicate MAC address. 10.1.1.155 2014-09-17 12:45:53.0 Air Compressor 3 Device 10.1.1.6 (F0 AD 4E 00 C9 D9) changed IP to 10.1.1.155 page 13 of 14 4.3.1.1.1.1. Broadcast Issues Switches with 'Lost' SNMP. Reporting switches having lost SNMP events in the last 30 days. 10.1.1.42 2014-09-15 16:18:28.0 10.1.1.137 2014-09-17 07:35:43.0 10.1.1.188 2014-09-17 13:45:50.0 SNMP currently Active, changed state 2 times Cisco Switch 2 SNMP currently Active, changed state 6 times N-TRON Switch ff:43:00 SNMP currently Lost, changed state 3 times Potential broadcast storms in last month: Reporting times when at least one device has more than 50.0% transmit bandwidth and at least 3 other devices have greater than 50.0% receive bandwidth (Switches excluded). GOOD: No broadcast storms detected Point to Point traffic: The following end devices had simultaneous bursts in trasmitted and received traffic that exceeded 40% bandwidth in the last 60 hours. This could be a large file transfer between these two devices. Between 2014-09-17 09:07 and 2014-09-17 09:09 10.1.1.92 DIM1100 10.1.1.98 Between 2014-09-17 09:09 and 2014-09-17 09:19 10.1.1.92 DIM1100 10.1.1.98 page 14 of 14 Transmit 1.0 40.9 Transmit 1.8 67.0 Receive 42.3 2.4 Receive 68.4 3.1