演講的演示文件教師光盤tnq200

1、Slide Master LayoutUseful for revisions and projector testFirst-level bullet Second levelsThird levelFourth levelFifth levelDrop body text block to +1.67 if more than two lines of text in titleNext horizontal guide set at +1.17Left vertical guide set at -4.58Colors In This TemplateUseful for testing

2、 projectors during setupHow To Analyze And Optimize Windows NT 4.0 Network TrafficBrent LaneOakRidge Consulting GroupSession PrerequisitesWindows NT 4.0 Server knowledge and experienceFamiliarity with planning and implementing a Windows NT networkFamiliarity with Transmission Control Protocol / Inte

3、rnet Protocol (TCP/IP) terminology and concepts is mendedOverviewWindows NT 4.0 Network Traffic Analysis OverviewAnalyzing and Optimizing Client initialization trafficClient/server trafficServer/server trafficOptimizeAnalyzeNetwork Traffic AnalysisOverviewNetLogonLogon validation andaccount synchron

4、izationWINSName registration and resolutionComputer browserLocate network resources throughout enterpriseDirectory replicatorAutomated duplicationof directoriesDHCPAdministration of TCP/IP addresses and configuration parametersWorkstation and serverNetwork resource accessDNSName resolution of TCP/IP

5、 host names into IP addressesInternet BrowserAccess to World Wide WebNetwork ServicesInternet Browsing 48%Browser 31%Host announcement every 12 minutesRetrieve browse list five times per dayWINS 1%Register and renew four names every three daysResolve five names per dayDHCP 1%Lease duration based on

6、three daysFile session 12%Assuming that seven sessions established per dayDNS 1%Five host queries a dayLogon validation 6%One logon validation per day102030405060708090Browse two times/day, 64KB pagesNetwork ServicesTraffic percentagesNetwork ServicesAnalysisBest PracticesAsk Necessary QuestionsWhat

7、 kind of traffic is generated?How often is it generated?What is the relative impact on the network?Use an isolated networkUse a network capturing and analysis toolCapture the appropriate trafficIdentify each frame in the captureNetwork Monitor OverviewAnalyzing And Optimizing Client Initialization T

8、rafficPercentage of Client Traffic on a NetworkInternet Browsing 48%Browser 31%Host announcement every 12 minutesRetrieve browse list five times per dayWINS 1%Register and renew four names every three daysResolve five names per dayDHCP 1%Lease duration based on three daysFile session 12%Assuming tha

9、t seven sessions established per dayDNS 1%Five host queries a dayLogon validation 6%One logon validation per day102030405060708090Browse two times/day, 64KB pagesNetwork ServicesAnalysisDHCP = 1 %DHCP = 1 %Lease Renewal684 bytesLease renewal684 bytesLease Acquisition1368 bytesLease acquisition1,368

10、bytesOne time per clientEvery startup or1/2-lease durationFrequency:DHCP = 1%DHCP TrafficAnalyzingDiscoverOfferRequestACKDHCP TrafficOptimizingLease durationLonger lease if many extra addressesShorter lease if few extra addressesDHCP Relay thresholdsDHCP Traffic DemonstrationLogon validation = 6 %Fr

11、equency: Every logonFinding LogonServerFinding logonserver4+ frames =700+ bytesPreparationPreparationValidationValidation4-20 frames = 765-3,725 bytesSessionTerminationSessiontermination5 frames =360 bytes11 frames = 1,280-1,370 bytesLogon Validation TrafficAnalyzing Logon Validation Traffic Optimiz

12、ing Determine the number of domain controllersIncrease simultaneous logon validationsDetermine domain controller placementSAMCPURAMPagefile3,0007,50010,00015,00020,00030,00030,0005 MB10 MB15 MB22.5 MB30 MB45 MB45 MB486DX/33486DX/66Pentium or RISC-basedPentium or RISC-based16 MB32 MB48 MB64 MB96 MB12

13、8 MB128 MB32 MB64 MB96 MB128 MB192 MB256 MB256 MBRegistrysize limitDefault30 (MB)50 (MB)75 (MB)75 (MB)PagedPool SizePagedpool sizeDefaultDefault75 (MB)75 (MB)100 (MB)100 (MB)128 (MB)128 (MB)Numberof usersLogon Validation TrafficOptimizing Determining hardware requirementsLogon Validation Traffic Dem

14、onstrationWINS Client TrafficAnalyzingWINS = 1 %Frequency:Many times per day depending on network activityEvery three daysEvery shut downRenewalRenewal214 bytesResolutionResolution196 bytesReleaseRelease214 bytesRegistrationRegistration214 bytesEach service startupRequestResponseRenewalResponseWINS

15、Client TrafficOptimizingDisable unnecessary servicesIncrease NetBIOS name cacheImplement LMHOSTSAdjust renewal rateWINS Client Traffic DemonstrationFile Session TrafficAnalyzing File session = 12 %Frequency:EveryconnectionAddressResolutionAddressresolution120 bytesTCPSessionTCPsession180 bytesEstabl

16、ishNetBIOSEstablishNetBIOSsession186 bytesSMB ProtocolNegotiationSMB protocolnegotiation 365 bytesConnectionSequenceConnectionsequence 360 bytesSessionTerminationSessiontermination360 bytesEvery connectionattemptFinal disconnectfrom each serverEvery initial connect to serverFile Session TrafficOptim

17、izing Remove excess protocolsConnection requests sent over all protocols simultaneouslyProvide close proximity between clients and serversFile Session Traffic DemonstrationAnalyzing And Optimizing Client/Server TrafficBrowser = 31 %Frequency:RarelyFirst browser attemptEach server = 12 minutesEvery b

18、rowse attemptElectionElection225 bytesGetBackup ListGetbackup list 445 bytesAnnounce-mentAnnounce-ment243 bytesGet Share ListGet share list16-19 packets =1,900-3,300 bytesGet Browse ListGet browse list19 packets =2,150 bytesClient Browser TrafficAnalyzingBrowserBrowserClient Browser TrafficOptimizin

19、g Disable unnecessary server componentsControl potential browsersEliminate protocolsClient Browser Traffic DemonstrationDNS = 1 %Frequency:Every name resolutionLookupsLookups200 bytesEvery name lookup not localDNS RecursionDNS recursion200 bytesEvery name lookup not localIntegrating withWINSIntegrat

20、ing withWINS196 + 200 bytesDNS TrafficAnalyzing DNS1DNS2DNS Recursive LookupsDNS1DNS2DNS TrafficOptimizingReduce recursionDNS Traffic DemonstrationIntranet Browsing TrafficAnalyzingIntranet browsing 48%Frequency:Each connection attemptConnecting to aWeb SiteConnecting to aWeb site180 bytesMultiple p

21、er pageRequesting aWeb PageRequesting aWeb page350+ bytesBrowsingSecurityBrowsingsecurity bytesMultiple per pageConnecting To A Web SiteRequest a Web server nameTCP session established for every pageRequest a Web pageHTTP GET command for every file needed to complete the pageTCP session for every fi

22、le, uses different portNumber of responses depends on size of fileIntranet Browsing SecurityDefault allows anonymous connectionsWindows NT challenge/response securityEvery HTTP GET receives access deniedClient establishes new TCP sessionServer sends encryption keyClient sends encrypted authenticatio

23、nServer processes requestIntranet Browsing TrafficOptimizing Keep Web pages smallLimit the size of graphicsIncrease client hard disk cache spaceConsider security needsAnalyzing And Optimizing Server-Server TrafficDirectory services 31%Two changes per hour = 39,400 bytes; three BDCsWINS replication 8

24、%Three record changes per hour = 32,400 bytesTrust relationships 5%Assuming that seven sessions established per dayApproximate percentage of server traffic on a networkDNS 1%Directory replication 4%Two file changes per day = 26,000 bytes102030405060708090One zone transfer per hour of six recordsBrow

25、ser 51%Four server announcements every 12 minutes; three BDCsExchange browse list every 12 minutesbased on an 8-hour dayServer-To-Server TrafficAnalysisDirectory services = 31 %Frequency:Every changeSynchronizeDatabaseSynchronizedatabase2,000+ bytesEveryrebootPossiblyevery changeEvery rebootFind PDC

26、Find PDC745 bytesSessionEstablishmentSessionestablishment1,280 bytesSecure ChannelEstablishmentSecure channelestablishment1,550 bytesVerifydatabase1,350 bytesAnnounce-mentAnnounce-ment400 bytesAccount Synchronization TrafficAnalyzingBandwidthReplicationGovernorPulseAccount Synchronization TrafficOpt

27、imizingReplicationGovernorOther optimization parametersPulsePulseMaximumChangeLogSizePulseConcurrencyAccount Synchronization Traffic DemonstrationFrequency:Trust relationships = 5 %Every access of newserver in trusting domainOne timeEstablish TrustEstablish Trust110 packets = 16,000 bytesEvery impor

28、t attemptImport AccountsImport Accounts115 packets = 18,600 bytesPass-ThoughAuthenticationPass-Though20 packets = 3,200 bytesTrust Relationship TrafficAnalyzingTrustTrust Relationship TrafficOptimizingReduce the number of trustsUse group accounts rather than individual accountsServer browser = 51 %F

29、requency:One server/domain/subnetElectionElection20 packets = 5,300 bytesBrowse List ExchangeBrowse list exchange36 packets = 3,900 bytesHost Host 243 bytesLocalMasterLocalmaster250 bytesWorkgroupWork-group250 bytesAnnouncementsAnnouncementsEvery serverevery 12 min.Every 12 min.Every 15 min.Every re

30、start of domain controllerEvery 12 minutes 2,000 by one server 1,900 by each backup browserServer Browser TrafficAnalyzingDomainmaster browserMasterPeriodicityMasterbrowserBackupbrowserBackupPeriodicityBrowselistReduce network protocolsReducing browser entriesDisable server componentOptimization par

31、ametersAdjust MasterPeriodicityAdjust BackupPeriodicityServer Browser TrafficOptimizingServer Browser Traffic DemonstrationWINS = 8 %Frequency:Once per replication partnerEvery replication eventEstablish RelationshipEstablish Relationship20 packets = 2,300 bytesEvery replication eventUpdate of Datab

32、aseUpdate of Database14 packets = 1,200 bytesVerification ofDatabaseVerification ofDatabase12 packets = 900 bytesWINS Replication TrafficAnalyzingWINS Replication TrafficOptimizingPush partner configurationRecord count updatePull partner configurationStarting timeConfigured intervalWINS Replication

33、Traffic DemonstrationDirectory Replication TrafficAnalyzingFrequency:Directory replication = 4 %Every changeone to each import computerAnnounce-ment Announce-ment 340 bytesEstablish SessionEstablish Session11 frames = 1,280 bytesVerify DirectoriesVerify Directories30 frames = 5,100 bytesX frames YbytesUpdate DirectoryPossibly every changeper import computerEvery changeper import comput