Guest

Cisco Network Analysis Module Software

Release Notes for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Software Release 3.3

Table Of Contents

Release Notes for the Network Analysis Module Software Release 3.3

Network Analysis Module Orderable Software Image Matrix

System Requirements

Supported Hardware

Browser Requirements

Product Documentation

Upgrading NAM Software

NAM Disk Partitioning

Limitations and Restrictions

Known and Resolved Problems

Open Source License Acknowledgements

OpenSSL/Open SSL Project

Obtaining Documentation

Cisco.com

Ordering Documentation

Documentation Feedback

Obtaining Technical Assistance

Cisco TAC Website

Opening a TAC Case

TAC Case Priority Definitions

Obtaining Additional Publications and Information


Release Notes for the Network Analysis Module Software Release 3.3


Product Numbers:

WS-SVC-NAM-1
WS-SVC-NAM-2

Revised: February 6, 2008

These release notes describe the guidelines and caveats for the Network Analysis Module (NAM), software release 3.3.


Note For detailed installation and configuration procedures for the NAM, see the Quick Start Guide for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module, Installation and Configuration Note for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Release 3.3 and User Guide for the Network Analysis Module Traffic Analyzer Release 3.3.


These release notes provide:

Network Analysis Module Orderable Software Image Matrix

System Requirements

Product Documentation

Limitations and Restrictions

Known and Resolved Problems

Open Source License Acknowledgements

Obtaining Documentation

Obtaining Technical Assistance

Obtaining Additional Publications and Information

Network Analysis Module Orderable Software Image Matrix

Table 1 lists the software version and the applicable ordering information.

Table 1 Network Analysis Module Software Version/Orderable Product Number Matrix 

Module
Software
Release
NAM Maintenance Image Release
Orderable Product Number
Minimum Cisco IOS
Software Version
Minimum Catalyst OS Software Version

WS-SVC-NAM-1
WS-SVC-NAM-2

3.3

1.1(1)
2.1(1)

SC-SVC-NAM-3.3

Release 12.1(13)E1 or later with a Supervisor Engine 2 with an MSFC2.

Release 12.1(19E)1 or later with a Supervisor Engine 1A with an MSFC2.

Release 12.2(14)SX1 or later with a WS-SUP720.

Release 7.3(1) or later with Supervisor Engine 1A or 2.

Release 8.2(1) or later with a WS-SUP720.

1 If you are running a 12.1(13)E-based release, we recommend a later 13E release, for example 12.1(13)E11 over 12.1(13)E3.


System Requirements

These sections describe the system requirements.

Supported Hardware

Browser Requirements

Supported Hardware

Table 2 lists the NAM hardware versions supported by Cisco IOS software.

Table 2 NAM Hardware Compatibility

Module
Running Catalyst OS Software...
Running Cisco IOS Software...

WS-SVC-NAM-1
WS-SVC-NAM-2

Supervisor Engine 1A or 2

WS-SUP720

Supervisor Engine 1A or 2 with an MSFC2

WS-SUP720


Browser Requirements

Table 3 lists the web browsers supported by the NAM Traffic Analyzer.

Table 3 Browser Requirements

Module
Supported Browsers
Java Plug-In Support1

WS-SVC-NAM-1
WS-SVC-NAM-2

Windows 2000:

Internet Explorer 5.5 and 6.0

Netscape 7.0 and 7.1

1.3.1_03

1.4.1_02

Solaris:

Netscape 7.0 and 7.1

1.4.0_01

1 Traffic Analyzer might not require a Java plug-in if your browser has a built in Java Virtual Machine (JVM). The plug-in versions listed have been tested for the indicated browsers.


Product Documentation


Note We sometimes update the printed and electronic documentation after original publication. Therefore, you should also review the documentation on Cisco.com for any updates.


This release includes the NAM Traffic Analyzer application, which you can use for monitoring and troubleshooting the availability and health of your network. The NAM Traffic Analyzer is embedded in the NAM and provides browser-based access to the NAM monitoring features.

For additional information about the NAM Traffic Analyzer, see these publications:

For information about enabling the NAM Traffic Analyzer, see the Quick Start Guide for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module and the User Guide for the Network Analysis Module Traffic Analyzer Release 3.3.

For information about using the NAM Traffic Analyzer, use the application online help or see the PDF version of the User Guide for the Network Analysis Module Traffic Analyzer Release 3.3 in the online help.

For information about configuring the NAM for the Real-Time Monitor (RTM), see Configuring the Catalyst 6000 Network Analysis Module with nGenius Real-Time Monitor at this location:

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/fam_mod/rel2_1_2/ol_2428.htm

Table 4 describes all of the product documentation that is available

Table 4 Product Documentation 

Document Title
Available Formats

Quick Start Guide for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module

Printed document that was included with the product.

On Cisco.com:

a. Log into Cisco.com.

b. Select Products & Services > Network Management CiscoWorks > Cisco Network Analysis Module Software > Technical Documentation > Quick Start .

Installation and Configuration Note for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Release 3.3

Printed document that was included with the product.

On Cisco.com:

a. Log into Cisco.com.

b. Select Products & Services > Switches and Hubs > Cisco Catalyst 6500 Series Switches > Technical Documentation > Installation and Configuration Guides .

User Guide for the Network Analysis Module Traffic Analyzer Release 3.3

PDF in the product online help.

On Cisco.com:

a. Log into Cisco.com.

b. Select Products & Services > Network Management CiscoWorks > Cisco Network Analysis Module Software > Technical Documentation > User Guides.

Printed document available by order (part number DOC-7815958=).1

Context-sensitive online help

Select an option from the navigation tree, then click Help in the upper right-hand corner of the browser window.

Network Analysis Module Command Reference, 3.3

On Cisco.com:

a. Log into Cisco.com.

b. Select Products & Services > Network Management CiscoWorks > Cisco Network Analysis Module Software > Technical Documentation > Command References.

1 See the "" section.


Upgrading NAM Software

To upgrade NAM 3.3 to version 3.5.1a, enter the NAM CLI command upgrade while in maintenance mode. NAM 3.5.1a is a complete software release, not a patch. For information about the upgrade command see the Network Analysis Module 3.5 Command Reference Release at the following URL:

http://www.cisco.com/en/US/products/hw/switches/ps708/products_command_reference_chapter09186a00805e34f0.html#wp1048351

You can apply the NAM 3.5.1 Crypto K9 patch, nam-app.3-5.cryptoK9.patch.1-0.bin, on top of NAM 3.5.1a using NAM CLI command patch.

NAM Disk Partitioning

NAMs that shipped prior to NAM 3.3 might still be using an older and less efficient disk partitioning system. The NAM 3.3 release increased the size of the /storage partition to 12 gigabytes to handle the NAM's increased data capture capabilities.


Note This condition affects the NAM-1 and NAM-2 but not the NM-NAM.


If your NAM's /storage partition is only 3.4 GB, you can increase its size to 12 GB by reloading the NAM software with the 3.5(1) image using the --install option.

You can check your disk's partitioning using the GUI by clicking Admin > Diagnostics > Tech Support and checking the df heading. The following shows an example of the old partitioning with only 3.4GB of space /storage:

Filesystem           1K-blocks       Used  Available   Use% Mounted on
LABEL=/                4128320     243476    3675108     7% /
/dev/hdc2              1032056      33460     946156     4% /nvram
/dev/hdc3              3451192     183208    3092668     6% /storage
/dev/hda1                15860      10089       4947    68% /mnt/mp

The following shows an example of the newer partitioning with only 12 GB of space /storage:

Filesystem          1K-blocks       Used  Available   Use% Mounted on
LABEL=/               4128320     243912    3674672     7% /
/dev/hdc2             1032056      34284     945332     4% /nvram
/dev/hdc3            12385072     197792   11558112     2% /storage
/dev/hda1               15860      10102      4934     68% /mnt/mp


Note You can also check your disk partition sizes using the OS shell command df.


To increase your disk partitioning to the correct size, you can reload the 3.5(1) image using a command like the following:

upgrade ftp://ftpusername@ftp-server-ip/path/nam-image-filename --install

Where:

ftpusername is the username of the individual performing the FTP access.

ftp-server-ip is the IP address or hostname of the FTP server.

path is the path to the image on the FTP server.

nam-image-filename is the filename of the NAM image to install.

Limitations and Restrictions

This section describes the limitations and restrictions for the NAM software release 3.3:

Before using the NAM, read the Quick Start Guide for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module and Installation and Configuration Note for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module Release 3.3.

You must now configure the local time zone for the NAM regardless of the time synchronization source (switch or NTP). For more information on configuring the local time zone using Traffic Analyzer, see the User Guide for the Network Analysis Module Traffic Analyzer Release 3.3.

If you change the NAM IP address, the default gateway resets to 0.0.0.0. Enter the new default gateway for the new IP address to an address other than one on the current subnet.

Known and Resolved Problems

Table 5 describes problems known to exist in this release. Table 6 describes problems resolved since the last release of the NAM Software for the WS-SVC-NAM-1 and WS-SVC-NAM-2 platforms.


Note To obtain more information about known problems, access the Cisco Software Bug Toolkit at http://www.cisco.com/cgi-bin/Support/Bugtool/home.pl. (You will be prompted to log into Cisco.com.)


Table 5 Known Problems in Network Analysis Module Software Release 3.3  

Bug ID
Summary
Explanation

CSCea80763

Trap destinations are not differentiated using community strings.

Although the NAM allows you to specify a community string for each trap destination and a community string when configuring alarm thresholds, SNMP traps generated by the alarm thresholds are sent to all trap destinations regardless of their configured community strings. This caveat occurs under all conditions.

CSCeb05132

When viewing historical reports, the report selector applet sometimes does not work properly with certain Netscape-Java/JVM combinations. The check marks in some folders might not be properly displayed.

To work around this problem, use Internet Explorer, or close your Netscape browser window and then reopen it.

You can also try a different Java plug-in version or JVM.

CSCeb17633

Cannot enable collections for DiffServ on a profile created in the NAM CLI.

If you create a profile from the NAM CLI, you will not be able to create DiffServ collections for that profile.

To work around this problem, resubmit the DiffServ profile configuration from the Setup > Monitor > DiffServ > Profile screen.

CSCec88748

You cannot enter hostnames without a domain name after upgrading with the reformat option.

If you upgrade the NAM with the reformat hard disk drive option and enable the ip http server in the NAM CLI without specifying the nameserver and domain information, you will not be able to enter data source or other hostname fields unless you provide the full hostname and domain.

To work around this problem, you can reset the NAM. You must also configure all of the required ip information before starting the ip http server. For more information on configuring the ip information, see the Quick Start Guide for the Catalyst 6500 Series and Cisco 7600 Series Network Analysis Module.

CSCee14443

The switch module sometimes does not appear on the Create Port Stats Report screen.

Some switch modules/ports appear on the Setup > Data Sources > Create SPAN Session screen but are missing in other NAM screens such as the Reports > Basic Reports > Create > Create Port Stats screen. This occurs because the supervisor maximum SNMP packetsize value has been set too small using the snmp-server packetsize value command (in Cisco IOS), or you are using the 96 port line card in Catalyst OS.

To work around this problem, for switches running Cisco IOS, set the SNMP packet size to a larger value (such as 1510).


Table 6 Resolved Problems in Network Analysis Module Software Release 3.3 

Bug ID
Summary

CSCea24898

While using the NAM CLI, if you use a "?" after a command argument or at the end of the command (to access Help), then the "Invalid Syntax" message is displayed.

CSCea93640

When the reports included in Custom Reports are deleted, the Custom Report shows no data but does not display an error message.

CSCeb08913

After a NAM reset, Application Statistics alarms for user defined protocols might be re-initialized to a different protocol than originally specified, or for no protocol at all.

CSCeb09120

In Netscape version 7 on Solaris, when repeatedly switching back and forth between the capture settings screen and the decode screen, the packet decoder sometimes fails to respond. The java console shows threads and other exceptions.

CSCdx83603

After resetting the NAM, in some rare cases a filtered capture that was collecting packets before the reset will no longer collect the expected packets after the reset. This problem may occur if the capture filter is set to a protocol that you manually added to the protocol directory.


Open Source License Acknowledgements

The following acknowledgements pertain to this software license.

OpenSSL/Open SSL Project

© 1998-2008 The OpenSSL Project. All rights reserved.

© 1995-1998 Eric Young (eay@cryptsoft.com). All rights reserved.

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/).

This product includes cryptographic software written by Eric Young (eay@cryptsoft.com).

This product includes software written by Tim Hudson (tjh@cryptsoft.com).

License 1:

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. All advertising materials mentioning features or use of this software must display the following acknowledgment: "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)."

4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact openssl-core@openssl.org.

5. Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior written permission of the OpenSSL Project.

6. Redistributions of any form whatsoever must retain the following acknowledgment: "This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)."

THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT "AS IS'" AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License 2:

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the copyright notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions, and the following disclaimer in the documentation and/or other materials provided with the distribution.

3. All advertising materials mentioning features or use of this software must display the following acknowledgement: "This product includes cryptographic software written by Eric Young (eay@cryptsoft.com)."

THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABL FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOOD OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation on the World Wide Web at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

International Cisco websites can be accessed from this URL:

http://www.cisco.com/public/countries_languages.shtml

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

Registered Cisco.com users (Cisco direct customers) can order Cisco product documentation from the Ordering tool:

http://www.cisco.com/en/US/partner/ordering/index.shtml

Nonregistered Cisco.com users can order documentation through a local account representative by calling Cisco Systems Corporate Headquarters (California, USA) at 408 526-7208 or, elsewhere in North America, by calling 800 553-NETS (6387).

Documentation Feedback

You can submit e-mail comments about technical documentation to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

For all customers, partners, resellers, and distributors who hold valid Cisco service contracts, the Cisco Technical Assistance Center (TAC) provides 24-hour-a-day, award-winning technical support services, online and over the phone. Cisco.com features the Cisco TAC website as an online starting point for technical assistance. If you do not hold a valid Cisco service contract, please contact your reseller.

Cisco TAC Website

The Cisco TAC website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The Cisco TAC website is available 24 hours a day, 365 days a year. The Cisco TAC website is located at this URL:

http://www.cisco.com/tac

Accessing all the tools on the Cisco TAC website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a login ID or password, register at this URL:

http://tools.cisco.com/RPF/register/register.do

Opening a TAC Case

Using the online TAC Case Open Tool is the fastest way to open P3 and P4 cases. (P3 and P4 cases are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Case Open Tool automatically recommends resources for an immediate solution. If your issue is not resolved using the recommended resources, your case will be assigned to a Cisco TAC engineer. The online TAC Case Open Tool is located at this URL:

http://www.cisco.com/tac/caseopen

For P1 or P2 cases (P1 and P2 cases are those in which your production network is down or severely degraded) or if you do not have Internet access, contact Cisco TAC by telephone. Cisco TAC engineers are assigned immediately to P1 and P2 cases to help keep your business operations running smoothly.

To open a case by telephone, use one of the following numbers:

Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447

For a complete listing of Cisco TAC contacts, go to this URL:

http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml

TAC Case Priority Definitions

To ensure that all cases are reported in a standard format, Cisco has established case priority definitions.

Priority 1 (P1)—Your network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.

Priority 2 (P2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.

Priority 3 (P3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.

Priority 4 (P4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.

Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online and printed sources.

Cisco Marketplace provides a variety of Cisco books, reference guides, and logo merchandise. Go to this URL to visit the company store:

http://www.cisco.com/go/marketplace/

The Cisco Product Catalog describes the networking products offered by Cisco Systems, as well as ordering and customer support services. Access the Cisco Product Catalog at this URL:

http://cisco.com/univercd/cc/td/doc/pcat/

Cisco Press publishes a wide range of general networking, training and certification titles. Both new and experienced users will benefit from these publications. For current Cisco Press titles and other information, go to Cisco Press online at this URL:

http://www.ciscopress.com

Packet magazine is the Cisco quarterly publication that provides the latest networking trends, technology breakthroughs, and Cisco products and solutions to help industry professionals get the most from their networking investment. Included are networking deployment and troubleshooting tips, configuration examples, customer case studies, tutorials and training, certification information, and links to numerous in-depth online resources. You can access Packet magazine at this URL:

http://www.cisco.com/packet

iQ Magazine is the Cisco bimonthly publication that delivers the latest information about Internet business strategies for executives. You can access iQ Magazine at this URL:

http://www.cisco.com/go/iqmagazine

Internet Protocol Journal is a quarterly journal published by Cisco Systems for engineering professionals involved in designing, developing, and operating public and private internets and intranets. You can access the Internet Protocol Journal at this URL:

http://www.cisco.com/ipj

Training—Cisco offers world-class networking training. Current offerings in network training are listed at this URL:

http://www.cisco.com/en/US/learning/index.html