ISIS control plane monitoring in argus[-clients]-3.0.3.7

[Carter Bullard]

Gentle people,
As promised, new features are hitting argus, hopefully features that
are useful to you.  One of the to-do items is to add control plane flow
monitoring to argus.  This is a new topic for many, but the idea is to
generate flows that capture the semantics of control plane protocol
function, rather than just report a control plane flow as a generic flow.

Today I'm announcing that argus and its clients have implemented a
complete flow system for ISIS, a routing protocol that is near and dear
to the hearts of many ISP's and core network operators.  The strategy is
to track the basic elements of ISIS: adjacency establishment and
management (hello flows), and routing information propagation (LSP
advertisements), etc...  as flows and optionally capture enough
semantics so that we can extract real routing semantics, such as
topology information if needed.

If you are really interested in ISIS monitoring, send email to either the list
or me directly, and I can describe what we're doing and where we're
going in detail.  Now, ISIS is very close to OSPF, so if there is interest in
OSPF, rather than ISIS, please holler, and we'll see what we can do.

ISIS is not an IP protocol, but an ISO protocol, so this an example of how
argus can get out of the traditional flow box, so to speak.  ISO protocols are
really different.  The addresses can be 6-20 bytes long, so it should be
something interesting for all of us.

Now, what is the impact to argus development.

To accommodate a new set of argus clients that are being built, and should
be announced soon, I have restructured the argus-clients include directory
structure, and modified the install scripts so that the includes and argus libs
are installed to the PREFIX directory when you do a "make install".

If you grab this code and have any problems at all, send email and I'll try
to fix ASAP.

I've started a page on the site that is brief and just a blurb/introduction.  I plan to have
additions to all the man pages for ISIS in the next round, which should be ready
later this week, next week.

   http://qosient.com/argus/routing.shtml


I hope that all is most excellent,

Carter

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3815 bytes
Desc: not available
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20100427/ed15d96a/attachment.bin>