Analyse von Netzwerkpaketen im LHCONE Netzwerk mit Logstash/Elasticsearch/Kibana/Grafana: Difference between revisions
From Lsdf
Jump to navigationJump to search
(Created page with "= Description = The GridKa Tier-1 data center is connected to the LHCONE overlay network [0]. Due to the complex setup of this network and trust relations between participati...") |
No edit summary |
||
Line 17: | Line 17: | ||
= References = |
= References = |
||
: [0] [http://lhcone.web.cern.ch/] |
: [0] [http://lhcone.web.cern.ch/ LHCONE] |
||
: [1] [https://www.elastic.co/products/beats/packetbeat] |
: [1] [https://www.elastic.co/products/beats/packetbeat Packetbeat] |
||
: [2] [https://www.elastic.co/products/elasticsearch] |
: [2] [https://www.elastic.co/products/elasticsearch Elasticsearch] |
||
: [3] [https://grafana.com] |
: [3] [https://grafana.com Grafana] |
Revision as of 20:44, 25 March 2019
Description
The GridKa Tier-1 data center is connected to the LHCONE overlay network [0]. Due to the complex setup of this network and trust relations between participation sites, it is very important to understand the origin of network packets which have been wrongly routed into this network. The problematic packets are mirrored from the border routers to special hosts for analysis. The goal of the project is to prepare a pipeline to analyse and store problematic network packets and create a visualizations for the external network admins to help them with diagnosing the problem.
Tasks
- familiarization with Packetbeat [1] , ElasticSearch [2], Grafana [3]
- configuration of Packetbeat
- development of a data storage model in ElasticSearch
- creating of dashboards in Kibana or Grafana
Requirements
- good Linux knowledge
- experience with scripting (bash/Python)
References
- [0] LHCONE
- [1] Packetbeat
- [2] Elasticsearch
- [3] Grafana