Chapter 23: RMON Configuration Guide318 SmartSwitch Router User Reference ManualA row in the control table is created for each port on the SSR, with the owner set to“monitor”. If you want, you can change the owner by using the appropriate rmoncommand. See the section “Configuring RMON Groups” in this chapter for more thecommand to configure a specific group.Note: Control tables other than the default control tables must be configured with CLIcommands, as described in “Configuring RMON Groups”.Using RMONRMON on the SSR allows you to analyze network traffic patterns, set up alarms to detectpotential problems before they turn into real congestive situations, identify heavynetwork users to assess their possible candidacy for moves to dedicated or higher speedports, and analyze traffic patterns to facilitate more long-term network planning.RMON 1 provides layer 2 information. Traffic flowing through the SSR’s layer 2 ASIC iscollected by RMON 1 groups. RMON 2 in the SSR provides layer 3 traffic information forIP and IPX protocols. Traffic flowing through the SSR’s layer 3 ASIC is collected by RMON2 groups. The SSR’s RMON 2 protocol directory contains over 500 protocols that can bedecoded for UDP and TCP ports. You can use RMON to see the kinds of protocol trafficbeing received on a given port.For example, use the rmon show protocol-distribution command to see the kinds oftraffic received on a given port:In the example output above, only HTTP and ICMP traffic is being received on this port.To find out which host or user is using these applications/protocols on this port, use thessr# rmon show protocol-distribution et.5.5RMON II Protocol Distribution TableIndex: 506, Port: et.1.7, Owner: monitorPkts Octets Protocol---- ------ --------19 1586 ether219 1586 ether2.ip-v419 1586 *ether2.ip-v42 192 *ether2.ip-v4.icmp17 1394 *ether2.ip-v4.tcp17 1394 *ether2.ip-v4.tcp.www-http