Monitoring
Monitoring service includes monitoring of the quality of service and connections in AMRES network, reporting on relevant statistics (links status and usage), the so-called. SLA (Service Level Agreement) and the monitoring of network traffic structure.
RCUB performs regular monitoring of the Internet connections and the backbone of AMRES network, including connections and services for faculties and other institutions linked to RCUB. All relevant data including statistics of AMRES infrastructure are available at netiis.rcub.bg.ac.rs . Authorized representative of each institution linked with RCUB (network administrator) receives a monthly e-mail report on statistics and quality of Internet and their communication links.
Faculties and other institutions in AMRES network may require additional monitoring of their internal servers and services, or of other parameters of their special interest. In case that this additional information is not foreseen for public use it will be available to authorized representatives of the institutions only (which will access the system with username and password).
RCUB performs monitoring of the traffic structure at institutions that is visible at central communication device via the Cisco NetFlow protocol. In this way RCUB is collecting statistics of the traffic bandwidth, volume, quality and type for individual institutions. The traffic bandwidth is monitored in bits per second (bps), packets per second (pps) and connections per second (fps - flows per second). Type of traffic is monitored at the level of individual networks and devices within the institution, the communications services - applications (web, email, FTP, DNS, etc..), Protocols (TCP, UDP, ICMP, etc..), autonomous systems (Telekom Serbia, Facebook , Google, etc..) and applied quality of service – so called QoS markers.
The system for monitoring of the quantity and type of traffic is not publicly available. Authorized representatives of universities and other institutions in AMRES network can, however, get user accounts and passwords in order to access it.
Monitoring of the quantity and type of traffic is extremely important, because it often points to security incidents. Therefore, this method of monitoring is conducted by CSIRT service.
Contact: This email address is being protected from spambots. You need JavaScript enabled to view it.
What is being monitored?
Within the group of monitors, following monitors can be found:
• Port monitor for link status monitoring
• Traffic monitor for the link traffic view
• Ping monitor detecting availability of insitution routers and delays
How the data are organized?
NetIIS system data are organised in several folders:
• Members – List of AMRES members organised by regions
• Monitors – Folder with most important monitors for devices and AMRES links monitoring
• Graphs – Folder with several graphs for a quick overview of the network status
• Black List – List of IP addresses blocked due to network security violations
• Looking Glass – Service for executing basic troubleshoting commands on AMRES devices
Under the Members folder, users can find every member institution grouped by region.
Under every „Location“ general information can be found of selected member institution, IP address space, group of monitors, device which the insitution uses and information on LAN administrator and it's connections towards AMRES.
Information on LAN administrators of every AMRES member must contain the following:
• Name and surname
• Function
• E-mail address
• Contact phone
This information enables quick response should there be a technical problem for the given member institution.
What is additional offered to users?
• user accounts for accessing the system
• monitoring their own services, and servers / or devices using their own user privileges
• Traffic analysis via NetFlow server institutions in RCUB-in. The analysis provides an overview of consumer traffic to the IP addresses of hosts, services over TCP / UDP ports, protocols, QoS markers and autonomous systems.
The member receives login information (should there be some information which unauthorised users may not see). For given additional functionality, authorised person for this institution has to send an email to: This email address is being protected from spambots. You need JavaScript enabled to view it. .
SLA reporting
PSLA reports (Service Level Agreement) are generated on monthly basis and sent to institutional representatives via email. These reports include the percentage of the connection availability, along with a list of all disruptions during the month including time, duration and description of the problem.