The Monitor one network monitoring tools

This page provides an overview of some important Monitor one network monitoring tools. Note that all tools and/or options are bundled in one package and that the number of tools is not dependent of the license type! Licensing is based on the size of the network to monitor.

Graphical network topology map

Monitor one lets you create an intuitive multi-level hierarchical network topology map that closely matches your actual network. The maps can be made easier to understand and more attractive by adding geographical maps or floor plans as backgrounds.
The maps are accessible via the console or via a web browser
Status information for each device is displayed on the map.
SnipMons appear as small images just below a device icon on the map. They collect important statistics or performance data from a device through SNMP. They are updated in real-time and are especially useful for having important or critical device information always directly at hand (CPU or interface utilization, Allocated disk space etc).
The network topology can be discovered semi-automatically. IP address ranges can be defined and scanned for existing nodes. The discovered IP nodes be added to the network maps.

The maximum number of IP nodes that can be added to the topology map depends on the purchased license type. (L-type = max = 5000)

The monitor one hierarcical multi-level network map. The graphical network map uses colors and icons to indicate network status at a glance. The Map makes it easy to view the IP subnets and the IP hosts. Click the image to enlarge.

Uptime monitoring

Monitor one performs ICMP pings to check up/down status for IP enabled devices.
If ICMP cannot be used because of a firewall blocking this protocol, Monitor one can also use SNMP data collected from a device to verify up/down status.
The polling interval for the status checks is configurable per device (10..90 seconds)
Monitor one performs duplicate alarm suppression. In Monitor one terminology called: "Error control"

Error control (EC) is a powerful feature that helps you quickly locate a problem, prevents superfluous alerting and incorrect interpretation of a problem. Click the image to enlarge.

SNMP monitoring / Network performance monitoring / Network traffic and bandwidth monitoring

SNMP polling (CPU utilization, traffic load etc) is supported by using Shooters, (request definitions)
The Shooter feature allows you define which MIB values (SNMP OID's) to query, how to process the retrieved responses and how to display these values. New shooters can be build with just a few mouse-clicks. Shooter definitions are stored in the database and can be executed to poll whatever MIB values.
For real-time monitoring, retrieved values can be shown in Tables, Graphs (3D), Pies and Meters. The Graphs and Meters are highly customizable (Bar, Area, Line, 3D graphs and old style VDO.
Monitor one supports SNMPv1 + SNMPv2

Monitor one allows you to define an alternative port for SNMP polling (not only port 161)

	A real-time Graph that shows the load on a switchport. The portnumber is chosen at runtime. Click the image to enlarge.
	Besides Graphs, Monitor one can also show real-time SNMP information in Pies,Meters and Tables. Monitor one makes it easy to collect any SNMP information available and display it in the most suitable way. Click the image for more screenshots.

SNMP trap receiver

Monitor one provides a trap listener with an overload protection system and intelligent filtering capabilities.
Traps can be filtered/blocked by user defined logic.

A snapshot of the Monitor one Trap receiver / listener window. Click the image to enlarge.

Syslog listener/server

Monitor one provides a Syslog receiver with overload protection system and filtering capabilities.

TFTP listener/server

Many devices like routers and terminal-servers can use a TFTP server to load their program images. Usually a separate server is used to provide this functionality. This is not a very cost effective solution. Monitor one provides a TFTP server to eliminate the need of a separate server.

Threshold monitoring

Threshold monitoring with Monitor one is done through the use of "Threshold Shooters". The powerful Shooter mechanism provides the possibility to compare collected SNMP data with user defined threshold values. Monitor one can be configured to send out alerts when values exceed these thresholds. With Threshold Shooters you can easily monitor the interface status of thousands of router- or switch ports, CPU utilization of servers, Free disk-space on servers, power loss on UPS systems etc...

A snapshot of the Threshold monitoring control screen. Click the image to enlarge.

SNMP MIBs / MIB browser / MIB compiler

Monitor one provides a MIB browser and a MIB compiler
The default MIB tree contains about 7000 nodes (OID's) from the most frequently used rfc MIB files.
New MIB files can be added to the MIB tree by using the Monitor one MIB compiler
The MIB tree can be used to build new shooters

A snapshot of the Monitor one MIB tree. This window is the main window for creating and modifying Shooters. Click the image to enlarge.

Event logging

Event details are stored to the so called Monitor one "Logbook". The logbook content can be accessed by using the Monitor one logbook viewer or can easily be exported to a CSV file for use in a spreadsheet or database.

Alerting

Monitor one can send alerts for the following events: Status events ('No response, 'Responding again', 'Status unknown'), Threshold events ('Threshold exceeded', 'Under threshold value'), Trap received events, Sensitivity events, Syslog message received events.
Alerting can be accomplished by any of the following methods: Audible alerting (beeping or speech), Visual alerting (flashing lights), alerting by email, alerting via SMS, pager or cell phone. Alerts can also trigger the execution of a program or script.
In order to prevent superfluous alerting, the decision whether or not to alert is determined by the so called "Alerter". The alerting scheme is highly customizable and the decision is based on the priority level of the device causing the alert and the event severity.

A snapshot of the Monitor one Alert table. This window is the main window for setting up and finetuning alerting. Click the image to enlarge.

Extensive Monitoring

Extensive monitoring is an powerful feature that is able to scan enterprise networks for bad interfaces, auto-sensing problems on switch-ports, poor performing WAN links etc.