First TWSNMP FKFirst TWSNMP FK
Most popular SNMP manager in Japan

Copyright (c) 2023 Masayuki Yamai

1 / 177

First TWSNMP FK

At the beginning
TWSNMP is an SNMP manager that supports the most popular SNMPv3 in Japan forover 20 years.
It is TWSNMP FK that has been reprinted with the latest machine technology in 2023.
The TWSNMP FC that runs on the container is accessed from the web browser, but the
FK is a desktop app and does not require a browser.

Copyright (c) 2023 Masayuki Yamai

2 / 177

First TWSNMP FK

Microsoft Store
Windows version
https://www.microsoft.com/store/apps/9nsqn46p0mVL
You can buy it.

Copyright (c) 2023 Masayuki Yamai

3 / 177

First TWSNMP FK

App Store
The Mac version ishttps://apps.apple.com/jp/app/twsnmpfk/id6468539128
You can buy it.

Copyright (c) 2023 Masayuki Yamai

4 / 177

First TWSNMP FK

Starting TWSNMP FK
In the case of Windows, start from the start menu to the Mac OS in your favorite method, such as from the launcher.Welcome to thescreen.Start with the <Start> button.Stop the program with the <Stop> button.The explanation screen of how to use it is displayed withthe <Help> button.

Copyright (c) 2023 Masayuki Yamai

5 / 177

First TWSNMP FK

Select a folder to save data
Click the <Start> button on the screen to display a dialog to select a folder to save thedata.Please select a folder.You can also create a new one.

Copyright (c) 2023 Masayuki Yamai

6 / 177

First TWSNMP FKFirst map
Select a new folder and start a map without node.After a while, the log will be
displayed.

Copyright (c) 2023 Masayuki Yamai

7 / 177

First TWSNMP FK

Flow of the first map creation
The flow of creating a map is
Click the appropriate position on the map
Start "Automatic discovery" from the menu
The IP address range to be searched
Precrose automatic discovery
Move node on map
Line connection
You can now search for PCs, routers, servers, etc. connected to the managed networkand register on the map.
Copyright (c) 2023 Masayuki Yamai

8 / 177

First TWSNMP FK

Map
The map screen has three large parts.

Copyright (c) 2023 Masayuki Yamai

9 / 177

First TWSNMP FK

ScreenContents

ToolbarSwitch the screen.

Map

This is the part that displays the composition of the network.

Event Log Displays the latest 100 event logs.

Copyright (c) 2023 Masayuki Yamai

10 / 177

First TWSNMP FK

Light/dark mode switching
Click themark on the upper right to dark mode.I like dark mode.Probably the person
who aims for a white hacker likes dark mode.There are only white hackers in the cat
world.By Cat of the predecessor assistant.The current assistant cat seems to like bothbecause the pattern is black and white.

Copyright (c) 2023 Masayuki Yamai

11 / 177

First TWSNMP FK

Map menu
Right -click the location other than the node and drawing items on the map to display.

Copyright (c) 2023 Masayuki Yamai

12 / 177

First TWSNMP FK

Menu

Operation

Add node

Add the node to the map manually.

Draw item

Add drawing items to the map.

Check allReconfirm the node that has occurred.

Discover

Displays the automatic discovery screen.

Grid

Align the position of the node at the specified interval.

Backgrand
image

set backgrand image to map

ReloadUpdate the map to the latest state.

Edit mode

All drawing items are displayed regardless of the state of themap

Copyright (c) 2023 Masayuki Yamai

13 / 177

First TWSNMP FK

Node menu
Right -click the node on the map to display it.

Copyright (c) 2023 Masayuki Yamai

14 / 177

First TWSNMP FK

Menu

Operation

ReportDisplays the report screen related to the node.

Ping

Displays the ping screen.

MIB browser

Displays MIB browser.

gNMI Tool

Displays gNMI Tool.

Wake on LAN Wake on LAN packet.
Edit

Displays the screen to edit the node settings.

Polling

Displays a polling list related to nodes.

ReCheck

Relieve the condition of the node by executing the polling.

Copy

Create a node duplication.

Copyright (c) 2023 Masayuki Yamai

15 / 177

First TWSNMP FK

Draw item menu
Right -click the drawing item on the map to display it.

Copyright (c) 2023 Masayuki Yamai

16 / 177

First TWSNMP FK

Menu

Operation

Edit

Displays the screen to edit the drawing item settings.

Copy

Create drawing items.

Delete Delete drawing items.

Copyright (c) 2023 Masayuki Yamai

17 / 177

First TWSNMP FK

DiscoverAutomatic discovery screen.

Copyright (c) 2023 Masayuki Yamai

18 / 177

First TWSNMP FK

Items

Contents

Start IPThe first IP address range to search.

End IP

The end of the IP address range to search.

Timeout

This is the timeout of ping when searching.

Retry

This is the number of retrys of ping when searching.

Port scan

Perform a port scan on the found node.

add polling

Polling is automatically set on the found node.

<Start>Start automatic discovery.

<Auto IP range> Automatically set the search range from the PC IP address.
Copyright (c) 2023 Masayuki Yamai

19 / 177

First TWSNMP FK

Automatic discovery is being performed
The number of nodes you have executed or discovered is displayed.

Copyright (c) 2023 Masayuki Yamai

20 / 177

First TWSNMP FK

Automatic discovery is being executed (with port scanning)
The number of nodes you have executed or discovered is displayed.When performing
a port scan, the discovered server function is also displayed.

Copyright (c) 2023 Masayuki Yamai

21 / 177

First TWSNMP FK

Node editing
You can edit the node from the menu or button by selecting a node on the map screen
or node list.

Copyright (c) 2023 Masayuki Yamai

22 / 177

First TWSNMP FK

Items

Contents

Name

Node name.

IP address

Node IP address.

Addressmode

IP address fixation (default), MAC address fixing, host name fixed.

Icon

It is an icon to be displayed.

Auto recheck

When it is returned, it will be automatically normal.

SNMP mode

SNMP mode.There are SNMPv1, V2C, V3 (authentication andencryption).

Copyright (c) 2023 Masayuki Yamai

23 / 177

First TWSNMP FK

Items

Contents

SNMP Community Community name for SNMPV1, V2C.
User

User ID when accessing with SNMPv3.

Password

Password when accessing with SNMPv3.

Public key

This is the public key of the node when polling with SSH.
In the case of blank, automatically set at the first connection.

URL

URL when accessing with browser etc.
It will be displayed on the right -click menu.
You can specify multiple by separation of comma.

Description
Copyright (c) 2023 Masayuki Yamai

Supplementary information is described.
24 / 177

First TWSNMP FK

Drawing item (rectangle, elliptical)
It is an edit screen of drawing item (rectangle, elliptical).

Copyright (c) 2023 Masayuki Yamai

25 / 177

First TWSNMP FK

Items

Contents

Type

It is a type of drawing item.You can only change it when you add
it.

Width

The width of the drawing item.

Height

It is the height of the drawing item.

Color

It is the color of the drawing item.

Display
condition
Magnification

It is a state of the map that displays drawing items.
The display rate of drawing items.

Copyright (c) 2023 Masayuki Yamai

26 / 177

First TWSNMP FK

Drawing item (label)
It is the editing screen of the drawing item (label).

Copyright (c) 2023 Masayuki Yamai

27 / 177

First TWSNMP FK

Items

Contents

Type

It is a type of drawing item.You can only change it when you add
it.

Character size

Label character size.

Color

It is the color of the drawing item.

Display
condition

It is a state of the map that displays drawing items.

Character string

It is a string to be displayed.

Magnification

The display rate of drawing items.

Copyright (c) 2023 Masayuki Yamai

28 / 177

First TWSNMP FK

Drawing item (image)
It is the editing screen of drawing item (image).

Copyright (c) 2023 Masayuki Yamai

29 / 177

First TWSNMP FK

Items

Contents

Type

It is a type of drawing item.You can only change it when you add it.

Width

It is the width of the image.

Height

It is the height of the image.

Display
condition
Image
Magnification

It is a state of the map that displays drawing items.
It is an image to be displayed.Select an image file with the<Select> button.
The display rate of drawing items.

Copyright (c) 2023 Masayuki Yamai

30 / 177

First TWSNMP FK

Drawing item (polling result)
It is the editing screen of drawing item (polling result: text).

Copyright (c) 2023 Masayuki Yamai

31 / 177

First TWSNMP FK

Items

Contents

Type

It is a type of drawing item.You can only change it when you add it.

Size

Character size.

NodeThis is a node list for selecting polling.

Polling

Polling that displays results.

Variable name The name of the variable displayed from the polling results.
Display format Format when displaying.
Magnification

The display rate of drawing items.

Copyright (c) 2023 Masayuki Yamai

32 / 177

First TWSNMP FK

Drawing item (polling result: gauge)
It is the editing screen of drawing item (polling result: gauge).It can be used to display% data.

Copyright (c) 2023 Masayuki Yamai

33 / 177

First TWSNMP FK

Items

Contents

Type

It is a type of drawing item.You can only change it when
you add it.

Size

Gauge size.

NodeThis is a node list for selecting polling.

Polling

Polling that displays results.

Variable

The name of the variable displayed from the pollingnameresults.

Gauge label

This is a character string displayed under the gauge.

Magnification

The display rate of drawing items.

Copyright (c) 2023 Masayuki Yamai

34 / 177

First TWSNMP FK

Line editing
To edit the line, press the two nodes while pressing the shift key on the map screen.

Copyright (c) 2023 Masayuki Yamai

35 / 177

First TWSNMP FK

Items
Node1

Contents
This is the first node to connect the line.

This is the first node polling that determines the color on one side of the
Polling1
line.
Node2
Polling2This is the second node to connect the line.
This is the second node polling that determines the color on one side of theline.

Copyright (c) 2023 Masayuki Yamai

36 / 177

First TWSNMP FK

Items
Polling for information
Information

Contents
Polling for information displayed next to the line.
Specify the traffic monitor polling.
Set the character string to be displayed next to the line.
It will be overwritten by setting a polling for information.

Thickness of the line

It is the thickness of the line.

Port

Specify the port number used when displaying the panel.

Copyright (c) 2023 Masayuki Yamai

37 / 177

First TWSNMP FK

PINGThis is the screen to execute ping.
To get a location information, you need a Geoip database file.

Copyright (c) 2023 Masayuki Yamai

38 / 177

First TWSNMP FK

Items
IP address

Contents
This is the IP address to run ping.

Number of times Ping is the number of execution times.
Size
TTL
Result Graph

Ping packet size.
The change mode is executed while increasing the size.
TTL value of ping packet.
The trace route runs while increasing the TTL value.
Ping's execution result is a graph of the response time, TTL value.

Copyright (c) 2023 Masayuki Yamai

39 / 177

First TWSNMP FK

Items

Contents
Ping execution results.

Results As a result, the date and time of implementation, the response time, thesize, the transmission reception TTL, the source IP, the location
Beep

Ping will be informed by sound.

Start

Start ping.

Stop

Ping stops.

Close

Ends ping.

Copyright (c) 2023 Masayuki Yamai

40 / 177

First TWSNMP FK

PING Histogram
It is a histogram of response time.

Copyright (c) 2023 Masayuki Yamai

41 / 177

First TWSNMP FK

PING 3D analysis
The response time, size, and implementation date and time are displayed in 3D graphs.

Copyright (c) 2023 Masayuki Yamai

42 / 177

First TWSNMP FK

PING Line speed prediction
From the change in response time if the size is changed
This is a report that predicts the line speed.

Copyright (c) 2023 Masayuki Yamai

43 / 177

First TWSNMP FK

PING Route analysis
Display location information.It cannot be displayed without a GEOIP database.

Copyright (c) 2023 Masayuki Yamai

44 / 177

First TWSNMP FK

MIB browser
This is a screen to get MIB information of SNMP from the node.
It is necessary to set SNMP access information in the node setting.
If you want to use MIB other than built -in, save the MIB file to the extmibs of the data folder.

Copyright (c) 2023 Masayuki Yamai

45 / 177

First TWSNMP FK

Items

Contents

Object nameSpecify the object name of the MIB you want to get.
You can choose from the MIB tree.Example: System<MIB Tree>
Button

Display MIB tree.

History

It is the history of the object name obtained so far.You can select and
get it again.

Results

Acquired MIB information.In the case of MIB in a table format, it isautomatically displayed in a table format.

Copyright (c) 2023 Masayuki Yamai

46 / 177

First TWSNMP FK

Items

Contents
Displays the acquired MIB information without converting it.

Raw data

In the case of off, convert the time data to an easy -to -understanddisplay.

Acquisition Get MIB information.
CSV

Export the obtained MIB information of the CSV file.

Excel

Export the acquired MIB information of the Excel file.

Copyright (c) 2023 Masayuki Yamai

47 / 177

First TWSNMP FK

MIB treeThis is a screen for selecting the obtained MIB object name.
Open the tree and click the object name to see the explanation.
Double click to select.

Copyright (c) 2023 Masayuki Yamai

48 / 177

First TWSNMP FK

GNMI tool<!-_class: TinyText->
This is a screen to acquire management information from Node from GNMI.
You need to set the GNMI in the node settings.
Items

Contents

TargetSpecify the IP: port to access with GNMI.

Encoding

Specify GNMI encoding.(JSON

PATH

Specify the path to get.

History

Path history acquired so far.You can select and get it again.

ResultThis is the result of acquired.

C

C

Copyright (c) 2023 Masayuki Yamai

th

i d

lt
49 / 177

First TWSNMP FK

Location Map screen
This is a screen that displays the node on the map.
Map data can be used in OpenStreetMap, which is used in location information services.
You can select by clicking the node.You can move by dragging.Multiple choices cannot be selected.

Copyright (c) 2023 Masayuki Yamai

50 / 177

First TWSNMP FK

Items

Contents

Edit

Displays the screen of the selected node.

Polling

Displays the selected node polling.

DeleteDelete the selected node from the map screen.

ReportDisplays the selected node report screen.

Initialdisplay

Save the center and zoom level of the map.The next time you open themap screen, it will be in the same state.

ReloadUpdate the list of event logs to the latest state.

Copyright (c) 2023 Masayuki Yamai

51 / 177

First TWSNMP FK

Add node to location map
Right -click where you want to place the node on the map and the dialog to add is displayed.You can add it by selecting a node.

Copyright (c) 2023 Masayuki Yamai

52 / 177

First TWSNMP FK

Node list
A list of nodes to be managed.

Copyright (c) 2023 Masayuki Yamai

53 / 177

First TWSNMP FK

Items

Contents

State

Node condition.
Severe, mild, precautions, return, normal, unknown.

Name

Node name.

IP address

Node IP address.

MAC address Node MAC address.
Vendor

The name of the vendor corresponding to the MAC address.

Description

Supplementary information about nodes.

Copyright (c) 2023 Masayuki Yamai

54 / 177

First TWSNMP FK

Items

Contents

Edit

Edit node settings.

Polling

Displays a list of polling related to the selected node.

ReportDisplays the selected node analysis report.

DeleteDelete the selected node.

Reconfirm

Reconfirm the polling of the selected node.

Remost confirmation Reconfirm all nodes polling.
CSV

Export the node list to the CSV file.

Excel

Export the node list to the Excel file.

ReloadUpdate the node list to the latest state.

Copyright (c) 2023 Masayuki Yamai

55 / 177

First TWSNMP FK

Node polling list
A list of polling related to nodes.

Copyright (c) 2023 Masayuki Yamai

56 / 177

First TWSNMP FK

Items

Contents

State

Polling state.
Severe, mild, precautions, return, normal, unknown.

Name

Polling name.

Level

Pauling level.

Type

Polling type.
Ping, SNMP, TCP, etc.

Log

Log mode.

Last time This is the last date and time when polling was implemented.

Copyright (c) 2023 Masayuki Yamai

57 / 177

First TWSNMP FK

Items

Contents

Add

Add polling to nodes.

Edit

Edit the selected polling.

Copy

Create a selected polling copy.

ReportDisplays the selected polling analysis report.

DeleteDelete the selected polling.

Reload Update the polling list to the latest state.
Close

Copyright (c) 2023 Masayuki Yamai

Close the list of polling.

58 / 177

First TWSNMP FK

Basic information report
Basic information about nodes.

Copyright (c) 2023 Masayuki Yamai

59 / 177

First TWSNMP FK

node event log
This is an event log related to the node.

Copyright (c) 2023 Masayuki Yamai

60 / 177

First TWSNMP FK

Panel
Displays the appearance of the node.Displays the port from the acquisition of the interface mib by SNMP or the line connection
information.The <physical port> switch can only be displayed on the physical port.Rotate the panel display with the <rotation> switch.

Copyright (c) 2023 Masayuki Yamai

61 / 177

First TWSNMP FK

Host information
Displays the information of the host resource mib of SNMP.If it is not compatible with the host resource MIB, it cannot be displayed.

Copyright (c) 2023 Masayuki Yamai

62 / 177

First TWSNMP FK

Storage
Displays the storage information of SNMP host resource mib.When you select, the addition button of the polling will be displayed.If it is
not compatible with the host resource MIB, it cannot be displayed.

Copyright (c) 2023 Masayuki Yamai

63 / 177

First TWSNMP FK

DeviceDisplays the device information of the SNMP host resource MIB.If it is not compatible with the host resource MIB, it cannot be
displayed.

Copyright (c) 2023 Masayuki Yamai

64 / 177

First TWSNMP FK

File System
Displays File System, information on SNMP host sources MIB.If it is not compatible with the host resource MIB, it cannot be displayed.

Copyright (c) 2023 Masayuki Yamai

65 / 177

First TWSNMP FK

Process
Displays the process information of SNMP host resource mib.When you select, the addition button of the polling will be displayed.If it is
not compatible with the host resource MIB, it cannot be displayed.

Copyright (c) 2023 Masayuki Yamai

66 / 177

First TWSNMP FK

Polling list
A list of polling to be managed.

Copyright (c) 2023 Masayuki Yamai

67 / 177

First TWSNMP FK

Items
State

Contents
Polling state.
Severe, mild, precautions, return, normal, unknown.

Node name

Node related to polling.

Name

Polling name.

Level

Pauling disability level.

Type

Polling type.

Log

Polling log mode.

Final confirmation Polling final confirmation date and time.

Copyright (c) 2023 Masayuki Yamai

68 / 177

First TWSNMP FK

Items

Contents

Add

Add polling.

Edit

Edit the selected polling.

Copy

Copy the selected polling.

ReportDisplays the selected polling analysis report.

DeleteDelete the selected polling.

CSV

Export the polling list to the CSV file.

Excel

Export the polling list to the Excel file.

Reload Update the polling list to the latest state.
Copyright (c) 2023 Masayuki Yamai

69 / 177

First TWSNMP FK

Polling template selection
This is the selection screen of the template displayed when adding polling.

Copyright (c) 2023 Masayuki Yamai

70 / 177

First TWSNMP FK

Items

Contents

ID

Template number.

Name

Polling name.

Type
Mode

Polling type.
Ping, SNMP, TCP, etc.
Polling mode.

Description Polling explanation.

Copyright (c) 2023 Masayuki Yamai

Add

Select polling.

CancelPolling Closes.

71 / 177

First TWSNMP FK

Basic information
Basic information about polling.

Copyright (c) 2023 Masayuki Yamai

72 / 177

First TWSNMP FK

Polling log
This is a log of the polling result.It is displayed only when the log mode is not output.

Copyright (c) 2023 Masayuki Yamai

73 / 177

First TWSNMP FK

Time chart
In the log of the polling result, the numerical data is displayed in a chronological graph.The displayed items can be selected at the topof the graph.It is displayed only when the log mode is not output.

Copyright (c) 2023 Masayuki Yamai

74 / 177

First TWSNMP FK

Histogram
The numerical data in the log of the polling result is displayed on the histogram.The displayed items can be selected at the top of thegraph.It is displayed only when the log mode is not output.

Copyright (c) 2023 Masayuki Yamai

75 / 177

First TWSNMP FK

AI analysis
This is the result of AI analysis of numerical data in the log of the polling results.It is displayed only when the log mode is set to AI
analysis and sufficient data is obtained.

Copyright (c) 2023 Masayuki Yamai

76 / 177

First TWSNMP FK

Polling editing
Polling edit can be displayed from the button by selecting a polling list on the polling list.

Copyright (c) 2023 Masayuki Yamai

77 / 177

First TWSNMP FK

Items

Contents

Name

Polling name.

Level

Pauling disability level.

Type

Polling type.
Ping, SNMP, TCP, etc.

Mode

Operation mode depends on the type of polling.

Log mode How to save the polling result log.

Copyright (c) 2023 Masayuki Yamai

78 / 177

First TWSNMP FK

Items

Contents

Parameter

Polling type and mode -dependent parameters.

Filter

Polling type and filter condition that depends on mode.

Extract
patternThis is a GROK pattern that depends on the type of polling and themode.Use when extracting data from logs.

ScriptJava Script that determines disability and calculates variables.

Polling
interval

Polling interval.

Timeout

Timeout at the time of polling.

Retry

This is the number of retry times when polling.

Copyright (c) 2023 Masayuki Yamai

79 / 177

First TWSNMP FK

Address list
This is a list of IP address found by TWSNMP.Only the IP address in the same segment found in the ARP watch function isdisplayed.You can detect duplicate and the change in the address.

Copyright (c) 2023 Masayuki Yamai

80 / 177

First TWSNMP FK

Items
State

Contents
It is the state of the address.(Normal, duplicate, IP change, Macchange.)Address

IP address.

MAC
address

MAC address.

Node name

The name of the node registered on the map as a managementtarget.

Vendor

The name of the vendor corresponding to the MAC address.

Final changeThis is the last change date and time.

Copyright (c) 2023 Masayuki Yamai

81 / 177

First TWSNMP FK

Items

Contents

Add

Add the selected IP address to the map.It is displayed only when it is notnoderegistered.

DeleteDelete the selected IP address.

ReportDisplay the address list report.

clear

Clear all address lists.

CSV

Export the address list to the CSV file.

Excel

Export the address list to the Excel file.

ReloadUpdate the address list to the latest state.

Copyright (c) 2023 Masayuki Yamai

82 / 177

First TWSNMP FK

Relationship between IP and MAC address (force model)This is a report that shows the relationship between IP address and MAC address with an force model.The normal address is one -on one for the IP address and the MAC address.You can detect MAC addresses using the same IP address on multiple Macs or having
multiple IP addresses.

Copyright (c) 2023 Masayuki Yamai

83 / 177

First TWSNMP FK

Relationship between IP and MAC address (circular model)This is a report that shows the relationship between IP address and MAC address with a circular model.The normal address is one -on-one for the IP address and the MAC address.You can detect MAC addresses with the same IP address on multiple Macs or havemultiple IP addresses.

Copyright (c) 2023 Masayuki Yamai

84 / 177

First TWSNMP FK

Event Log
This is the event log screen.At the top, there is a graph showing the number of logs inchronological order.

Copyright (c) 2023 Masayuki Yamai

85 / 177

First TWSNMP FK

Items
Level

Contents
Log level.There is severe, mild, attention, return, and information.

Date and time The date and time of the log is recorded.
Type
Related node
Event

Log type. Polling, System, Oprate, User, ArpWatch,
Name of node related to logs.
The blank means that there is no related node.
This is an event that occurred.

Copyright (c) 2023 Masayuki Yamai

86 / 177

First TWSNMP FK

Items
FilterContents
Specify the search conditions and display the log.

Delete all logs Delete all event logs.
ReportDisplays the event log analysis report.

CSV

Export the event log to the CSV file.

Excel

Export the event log to the Excel file.

ReloadUpdate the list of event logs to the latest state.

Copyright (c) 2023 Masayuki Yamai

87 / 177

First TWSNMP FK

Event log filter
This is a dialog that specifies the search conditions for the event log.

Copyright (c) 2023 Masayuki Yamai

88 / 177

First TWSNMP FK

Items

Contents

Level

Log level.All, there are more attention, more than severe, mild.

Type

Log type. Polling, System, Oprate, User, ArpWatch,

Related node Search by node name related to the log.
Event

Search by the string of the event that occurred.

The string can be searched by regular expression.

Copyright (c) 2023 Masayuki Yamai

89 / 177

First TWSNMP FK

Event log count by stateThis is a report of the number of event logs by state (level).

Copyright (c) 2023 Masayuki Yamai

90 / 177

First TWSNMP FK

Event log Heatmap
This is a report of the number of cases of each event log on the heat map.

Copyright (c) 2023 Masayuki Yamai

91 / 177

First TWSNMP FK

Event log count by nodeThis is a report of the number of event logs by node.

Copyright (c) 2023 Masayuki Yamai

92 / 177

First TWSNMP FK

Operating rate
This is a report that uses a chronological graph of the value of the operating rate
(OPRATE) in the event log.

Copyright (c) 2023 Masayuki Yamai

93 / 177

First TWSNMP FK

ARP watchThis is a report of the value of the address usage rate (ARPWATCH) in the event log asa chronological graph.

Copyright (c) 2023 Masayuki Yamai

94 / 177

First TWSNMP FK

Syslog
Syslog screen.At the top, there is a graph showing the number of logs in chronologicalorder.

Copyright (c) 2023 Masayuki Yamai

95 / 177

First TWSNMP FK

Items
Level

Contents
Syslog level.There is severe, High,Low, Warn, and information.

Date and time It is the date and time when I received syslog.
Host

SYSLOG source host.

Type

Syslog Facility and priority string.

Tags

Syslog tag.Process and process ID.

Message

Syslog message.

Copyright (c) 2023 Masayuki Yamai

96 / 177

First TWSNMP FK

Items

Contents

Polling

Register the polling from the selected syslog.

FilterSpecify the search conditions and display syslog.

Delete all logs Delete all syslogs.
ReportDisplays Syslog analysis reports.

Export CSV

syslog to CSV file.

Excel

EXCEL file is exported to syslog.

ReloadUpdate the list of syslog to the latest state.

Copyright (c) 2023 Masayuki Yamai

97 / 177

First TWSNMP FK

Syslog Filter
This is a dialog that specifies the search conditions for syslog.

Copyright (c) 2023 Masayuki Yamai

98 / 177

First TWSNMP FK

Items
Level

Contents
Syslog level.
All, more than information, more than caution, mild or higher, more
severe.

Host

It is the source host.

Tags

The value of the syslog tag.

Message Syslog message.
*Host,Tag,Message can be searched in regular expressions.

Copyright (c) 2023 Masayuki Yamai

99 / 177

First TWSNMP FK

Syslog count by stateThis is a report of the number of syslogs by state.

Copyright (c) 2023 Masayuki Yamai

100 / 177

First TWSNMP FK

Syslog Heatmap
This is a report of the number of cases of syslog on the heat map.

Copyright (c) 2023 Masayuki Yamai

101 / 177

First TWSNMP FK

Syslog count by hostThis is a report of the number of syslogs by the source host.

Copyright (c) 2023 Masayuki Yamai

102 / 177

First TWSNMP FK

Syslog count by host (3D)This is a report displayed in three -dimensional graphs of Syslog, source host, priority,and time.

Copyright (c) 2023 Masayuki Yamai

103 / 177

First TWSNMP FK

Syslog FFTThis is a report that analyzes Syslog for each host and analyzes the number ofreceiving cases.

Copyright (c) 2023 Masayuki Yamai

104 / 177

First TWSNMP FK

SNMP TRAP
SNMP Trap log screen.At the top, there is a graph showing the number of logs inchronological order.

Copyright (c) 2023 Masayuki Yamai

105 / 177

First TWSNMP FK

Items

Contents

Date and time

This is the date and time of receiving SNMP Trap.

Sending source SNMP Trap's source host.
Type

SNMP Trap type.

Variables

Variables attached to SNMP Trap.

Copyright (c) 2023 Masayuki Yamai

106 / 177

First TWSNMP FK

Items

Contents

Polling

Register the polling from the selected SNMP Trap.

FilterSpecify the search conditions and display SNMP Trap.

Delete all logs Delete all syslogs.
ReportDisplays the analysis report of SNMP Trap.

CSVSport the SNMP Trap to the CSV file.

Excel

Export SNMP Trap to Excel file.

ReloadUpdate the SNMP Trap list to the latest state.

Copyright (c) 2023 Masayuki Yamai

107 / 177

First TWSNMP FK

SNMP TRAP Filter
This is a dialog that specifies the search conditions for SNMP Trap.

Copyright (c) 2023 Masayuki Yamai

108 / 177

First TWSNMP FK

Items

Contents

Sending source It is the source host.
Type

SNMP Trap type.

*Character strings can be searched in regular expressions.

Copyright (c) 2023 Masayuki Yamai

109 / 177

First TWSNMP FK

SNMP TRAP count by TRAP typeThis is a report of the number of SNMP traps by type.

Copyright (c) 2023 Masayuki Yamai

110 / 177

First TWSNMP FK

SNMP TRAP Heatmap
This is a report of the number of cases of SNMP TRAP on the heat map.

Copyright (c) 2023 Masayuki Yamai

111 / 177

First TWSNMP FK

SNMP TRAP count by hostThis is a report of the number of SNMP Trap receiving cases by source host.

Copyright (c) 2023 Masayuki Yamai

112 / 177

First TWSNMP FK

SNMP TRAP send source and type (3D)This is a report displayed in the source host, type, and three -dimensional graph of the SNMP Trap receiving log.

Copyright (c) 2023 Masayuki Yamai

113 / 177

First TWSNMP FK

NetFlow
This is the analysis screen of Netflow.

Copyright (c) 2023 Masayuki Yamai

114 / 177

First TWSNMP FK

Explanation of table items
Items
Date and time

Contents
The date and time of receiving Netflow.

Sending source It is the source IP.
Port

It is the port number of the source.

Location

It is the source of the source.GEOIP DB is required.

Address

IP for the destination.

Port

The destination port number.

Location

It is the destination position.GEOIP DB is required.

Copyright (c) 2023 Masayuki Yamai

115 / 177

First TWSNMP FK

Items

Contents

ProtocolProtocol such as TCP/UDP/ICMP.

TCP flag TCP flag.

Copyright (c) 2023 Masayuki Yamai

Packet

The number of sending packets.

Byte

The number of sending bytes.

PeriodFlow communication time.

116 / 177

First TWSNMP FK

ButtonItems
FilterContents
Specify the search conditions and display Netflow.

Delete all logs Delete all Netflow.
Copy

Copy the selected log.

ReportDisplays Netflow analysis reports.

CSV

Export Netflow to CSV file.

Excel

Export Netflow to Excel file.

UpdateUpdate the Netflow list to the latest state.

Copyright (c) 2023 Masayuki Yamai

117 / 177

First TWSNMP FK

Filter item
It is a filter for netflow search.

Copyright (c) 2023 Masayuki Yamai

118 / 177

First TWSNMP FK

Items
Start date andtime
End date andtimeContents
Specify the date and time of the search start.
Specify the date and time of the search termination.

Simple mode

Mode to apply IP, port, and position in both directions.

IP

In the case of simple mode, specify the source and destination
IP.

Port

In the case of simple mode, specify the source and destination
port.

Location
Copyright (c) 2023 Masayuki Yamai

Specify the source and destination position in the case of simple
119 / 177

First TWSNMP FK

Items

Contents

Sending source IP Specify the source IP.
Port

Specify the source port.

Location

Specify the source position.

Destination IP

Specify the destination IP.

PortSpecify the destination port.

Location

Specify the destination position.

ProtocolSpecify the protocol name.

TCP flagSpecify the TCP flag.

Copyright (c) 2023 Masayuki Yamai

120 / 177

First TWSNMP FK

Netflow report
Report nameContents

Heat Map

Heat map by time zone of Netflow's receiving number.

HistogramHistgram of numerical data.

Traffic

This is a time -series graph of traffic.

TOP List

This is a ranking report for each item.

TOP list (3D)

Ranking reports for each item are displayed in 3D graphs.

IP Pair Flow

The combination of communication is displayed in a graph.

Copyright (c) 2023 Masayuki Yamai

121 / 177

First TWSNMP FK

Report nameContents

FFT Analysis

Analyzing the communication cycle with FFT.

FFT Analysis(3D)

Analyze the communication cycle with FFT and display it on the
3D graph.

Map

Display the position of the IP address on the map.

Copyright (c) 2023 Masayuki Yamai

122 / 177

First TWSNMP FK

sFlow
This is the analysis screen of sFLOW.

Flow sample
Copyright (c) 2023 Masayuki Yamai

123 / 177

First TWSNMP FK

Items

Contents

Address

IP for the destination.

Port

The destination port number.

Location

It is the destination position.GEOIP DB is required.

Mac

This is the destination MAC address.

ProtocolProtocol such as TCP/UDP/ICMP.

TCP flag TCP flag.
Byte

Copyright (c) 2023 Masayuki Yamai

The number of sending bytes.

124 / 177

First TWSNMP FK

Description of button
Items

Contents

Counter

Switch between flow samples and counter samples.

FilterSpecify the search conditions and display sFlow.

Delete all logs Delete all sFlow.
Copy

Copyright (c) 2023 Masayuki Yamai

Copy the selected log.

125 / 177

First TWSNMP FK

Items

Contents

ReportDisplays SFLOW analysis reports.

CSV

Export sFlow to CSV file.

Excel

Export SFLOW to Excel file.

Update Update the SFLOW log to the latest state.

Copyright (c) 2023 Masayuki Yamai

126 / 177

First TWSNMP FK

Flow sample filter item
Items
Start date andtime
End date andtimeContents
Specify the date and time of the search start.
Specify the date and time of the search termination.

Simple mode

Mode to apply IP, port, and position in both directions.

IP

In the case of simple mode, specify the source and destination
IP.

Port

In the case of simple mode, specify the source and destination
port.

Copyright (c) 2023 Masayuki Yamai

127 / 177

First TWSNMP FK

Items

Contents

Port

Specify the source port.

Location

Specify the source position.

Destination IP Specify the destination IP.
PortSpecify the destination port.

Location

Specify the destination position.

ProtocolSpecify the protocol name.

TCP flagSpecify the TCP flag.

文字列は、正規表現で検索できます。

Copyright (c) 2023 Masayuki Yamai

128 / 177

First TWSNMP FKCounter sample
Items
Date and time

Contents
It is the date and time when the SFLOW sample received.

Sending source It is the source IP.
Type

The type of counter sample.(I/F, CPU, Memory, Disk, Netowk)

Data

Data of counter sample.

Copyright (c) 2023 Masayuki Yamai

129 / 177

First TWSNMP FKCounter sample filter item
Items

Contents

Start date and time Specify the date and time of the search start.
End date and time

Specify the date and time of the search termination.

SubmitSpecify the source.

TypeSpecify the type of counter sample.

The character string can be searched by regular expression.

Copyright (c) 2023 Masayuki Yamai

130 / 177

First TWSNMP FK

Flow sample report
Report nameContents

Heat map

Heat map showing the number of log time.

Communications

This is a time -series graph of communication volume.

TOP List

This is a ranking report for each item.

TOP list (3D)

Ranking reports for each item are displayed in 3D graphs.

IP Pair Flow

The combination of communication is displayed in a graph.

FFT Analysis

Analyzing the communication cycle with FFT.

FFT Analysis

Analyze the communication cycle with FFT and display it on the(3D)

3D graph.

Copyright (c) 2023 Masayuki Yamai

131 / 177

First TWSNMP FKCounter sample report
ReportContents

nameHeat map

Heat map showing the number of log time.

I/F BPS

This is a time -series graph of the communication volume (Bytes/Sec)
obtained from I/F sample.

I/F PPS

This is a time -series graph of the communication volume(Packets/Sec) obtained from I/F sample.

Copyright (c) 2023 Masayuki Yamai

132 / 177

First TWSNMP FK

ReportContents

nameCPU
MemoryDISK
Network

CPU usage rate and load time series graph acquired from CPU
sample.
Memory is a graph of memory usage and available capacity obtained
from a sample.
This is a graph of disk usage and access amount acquired from Disk
sample.
Network is a graph of network usage obtained from sample.

Copyright (c) 2023 Masayuki Yamai

133 / 177

First TWSNMP FK

ARP warch log
ARP watch log screen.
At the top, there is a graph showing the number of logs in chronological order.

Copyright (c) 2023 Masayuki Yamai

134 / 177

First TWSNMP FK

Items
State

Contents
Log status.Either new or change.

Date and time The date and time of the log.
IP address

IP address to log.

Node

The name of the node registered on the map.

New MAC

New discovery or MAC address after change.

New vendor

The vendor name of the new MAC address.

Old MAC

MAC address before change.

Old vendor

This vendor name of the old MAC address.

Copyright (c) 2023 Masayuki Yamai

135 / 177

First TWSNMP FK

Items

Contents

ReportDisplays the ARP watch log analysis report.

CSV

Export the ARP watch log to the CSV file.

Excel

Export the ARP watch log to the Excel file.

Reload Update the list of ARP watch logs to the latest state.

Copyright (c) 2023 Masayuki Yamai

136 / 177

First TWSNMP FK

ARP watch log count by IP addressThis is a report of the number of logs by IP address.The IP address with many changes is obvious at a glance.

Copyright (c) 2023 Masayuki Yamai

137 / 177

First TWSNMP FK

ARP watch log count by IP address (3D)This is a report of ARP watch logs from both IP addresses and time series.The time of new discoveries and changes is obvious at a
glance.

Copyright (c) 2023 Masayuki Yamai

138 / 177

First TWSNMP FK

AI analysis
The screen of the AI analysis list.Only the list is displayed in the polling log settings and the analysis is performed.

Copyright (c) 2023 Masayuki Yamai

139 / 177

First TWSNMP FK

Items
anomaly

Contents
A deviation value that indicates the degree of anomaly of AI analysis

score

results.
50 is average.Large values are highly anomaly.

Node name

The name of the node to be analyzed.

Polling

Polling for AI analysis.

Data countThe number of data to be analyzed AI.If you are small, the accuracy
will be low.

Last time

The last date and time of AI analysis.

Copyright (c) 2023 Masayuki Yamai

140 / 177

First TWSNMP FK

Items

Contents

ReportDisplays reports on the selected AI analysis results.

clear

Clear the selected AI analysis results.

Reload Update the AI analysis list to the latest state.

Copyright (c) 2023 Masayuki Yamai

141 / 177

First TWSNMP FK

AI anomaly score heatmap
This is a report showing an anomaly score on a daily heat map.It indicates that the red color is the time when the anomaly has
occurred.

Copyright (c) 2023 Masayuki Yamai

142 / 177

First TWSNMP FK

AI anomaly score percentage
The percentage of the anomaly score in the entire period is shown in a circular graph.

Copyright (c) 2023 Masayuki Yamai

143 / 177

First TWSNMP FK

AI anomaly score time chart
This is a report that displays an anomaly score in chronological order.

Copyright (c) 2023 Masayuki Yamai

144 / 177

First TWSNMP FK

SystemSystem information screen.At the top, there is a graph showing log resources and communication information in a chronological order.

Copyright (c) 2023 Masayuki Yamai

145 / 177

First TWSNMP FK

Items
Date and time

Contents
It is the date and time when System information isrecorded.

CPU

CPU usage rate.

MemoryMemory usage rate.

Disk

Data folder is the usage rate of disks.

Load

load.

Communication
amount

LAN port communication amount.

Connection number

TCP connection number.

Process

Total number of processes

Copyright (c) 2023 Masayuki Yamai

146 / 177

First TWSNMP FK

Items

Contents

Size prediction Database size and disk usage rate are forecast for one year.
BackupGet backup.

ReloadUpdate System information to the latest state.

Copyright (c) 2023 Masayuki Yamai

147 / 177

First TWSNMP FK

Size prediction
This is a year forecast for the database size and disk usage rate.

Copyright (c) 2023 Masayuki Yamai

148 / 177

First TWSNMP FK

Map settings
This is the screen to set the management map.

Copyright (c) 2023 Masayuki Yamai

149 / 177

First TWSNMP FK

Items
Map name

Contents
Map name.It will be displayed in the upper left of the screen.
Please give your favorite name.

Icon size

It is the size of the icon to be displayed on the map.

Polling
interval

Default polling interval.

Timeout

Default timeout.

Retry

Default number of retry times.

Log saving
days

It is the number of days to save the log.The log will be deleted
automatically after passing.

Copyright (c) 2023 Masayuki Yamai

150 / 177

First TWSNMP FK

Items
SNMP mode
SNMP
Community

Contents
SNMP version and type of encryption.(SNMPV1, SNMPv2C,
SNMPv3)
Community name for SNMPV1, V2C.

SNMP user

User name at SNMPv3.

SNMP password

Password name for SNMPv3.

SyslogReceive syslog.

SNMP Trap

Receive SNMP Trap.

SSH Seerver

SSH Server

ARP Watch

Enable ARP monitoring function

Copyright (c) 2023 Masayuki Yamai

151 / 177

First TWSNMP FK

When you want to change the receiving port of syslog, SNMP Trap
The port number is specified by the startup parameter of the program.
-syslogPort int
Syslog port (default 514)
-trapPort int
SNMP TRAP port (default 162)
-sshdPort int
SSH Server port (default 2022)*If SYSLOG or SNMP Trap cannot be received, check the OS and security software
firewall settings.

Copyright (c) 2023 Masayuki Yamai

152 / 177

First TWSNMP FK

Notification settings
This is the screen to set the notification.

Copyright (c) 2023 Masayuki Yamai

153 / 177

First TWSNMP FK

Items
Mail serverContents
Specify a mail server to send notification emails.
Host name or IP address: port number

Do not check the server

Check when the specified mail server is selfcertificate

certificate.

User

Set a user ID for authentication.

Password

Set the password for authentication

Form

Sending source email address.

To

Notification email destination email address.
You can specify multiple by separation of comma.

Copyright (c) 2023 Masayuki Yamai

154 / 177

First TWSNMP FK

Items

Contents

Subject

Notification email subject.

Notification level

Specify the monitoring level to send disability notifications.

Notification interval Specify the interval to check the notification.
Regular report

Send a daily report.

repair notification

We will also send an email when you repair.

Copyright (c) 2023 Masayuki Yamai

155 / 177

First TWSNMP FK

Items

Contents

Line Notification level Specify the monitoring level to send LINE notifications.
Repair notification

We will also send an email when you repair.

LINE Token

LINE Notify token

Copyright (c) 2023 Masayuki Yamai

156 / 177

First TWSNMP FK

Items

Contents
Run the command specified in the state parameter

Command execution

when the map changes.
$ Level is in the map.0: Severe, 1: Mild, 2: Note, 3:
Normal, -1: Unknown

Sounds played during severe

Specify the audio file to play when the state of thedisorders

map is severe.

Sounds played during mild

Specify the audio file to be played when the state ofdisability

the map is mild.

Copyright (c) 2023 Masayuki Yamai

157 / 177

First TWSNMP FK

Email send test
Click the <Test> button to send the test email with the configured content.
Click the <LINE Test> button to send the test LINE message with the configured
content.

Copyright (c) 2023 Masayuki Yamai

158 / 177

First TWSNMP FK

AI analysis settingThis is the screen to set AI analysis.

Copyright (c) 2023 Masayuki Yamai

159 / 177

First TWSNMP FK

Items

Contents

Level to behighSpecify the deviation level of AI analysis determined as severe
disorder.

Level to be low

Specify the deviation level of AI analysis determined as mild
disorder.

Level to bewarn

Specify the deviation level of AI analysis determined as a disorder.

Copyright (c) 2023 Masayuki Yamai

160 / 177

First TWSNMP FK

About AI analysis
The AI analysis is implemented by setting the log mode to "AI analysis" in thepolling settings.
An anomaly detection of the numerical data of the polling result in isolation forest.
The results are set to deviation values.
The deviation value is familiar to school results.It shows how rare it is.
So, the disability level setting is an expression of once every 10,000 times.

Copyright (c) 2023 Masayuki Yamai

161 / 177

First TWSNMP FK

Location map settings
This is the screen to set the map.

Copyright (c) 2023 Masayuki Yamai

162 / 177

First TWSNMP FK

Items
Style
Centralcoordinates

Contents
Specify the map style.Specify in URL or JSON.
The central coordinates on the map are in the order of longitude
and latitude.
Example: 135.3338576281734, 39.614306840830096

Zoom

Specify the enlargement level of the map.

Icon size

Specify the size of the icon to be displayed.

Copyright (c) 2023 Masayuki Yamai

163 / 177

First TWSNMP FK

About map style
The map is displayed using Maplibre GL JS.The map to be displayed is specified in thestyle.
You can specify it with URL or JSON.Search for MAPLIBRE GL JS and find something
suitable.
URL example
https://tile.openstreetmap.jp/styles/osm-bright-ja/style.json

Copyright (c) 2023 Masayuki Yamai

164 / 177

First TWSNMP FK

JSON example{}"version": 8,"sources": {"MIERUNEMAP": {"type": "raster","tiles": ["https://tile.mierune.co.jp/mierune_mono/{z}/{x}/{y}.png"],"tileSize": 256,
"attribution":"Maptiles by <a href='https://mierune.co.jp/' target='_blank'>MIERUNE</a>, under CC BY. Data by <a href='https://osm.org/copyright' target='_blank'>OpenStreetMap</a> contributors, under ODbL."}},"layers": [{"id": "MIERUNEMAP","type": "raster","source": "MIERUNEMAP","minzoom": 0,"maxzoom": 18}]

Copyright (c) 2023 Masayuki Yamai

165 / 177

First TWSNMP FK

Icon management
This is a screen that manages the icon.

Copyright (c) 2023 Masayuki Yamai

166 / 177

First TWSNMP FK

Items
Icon

Contents
It is an image of an icon.

Name Name when choosing.You can attach it freely.
Code

Copyright (c) 2023 Masayuki Yamai

icon code.

167 / 177

First TWSNMP FK

ButtonCopyright (c) 2023 Masayuki Yamai

Contents

Added

Add a new icon.

Edit

Edit the name of the selected icon.

DeleteDelete the selected icon.

Help

Display this help.

Close

Close the setting screen.

168 / 177

First TWSNMP FK

Icon editing screen

Copyright (c) 2023 Masayuki Yamai

169 / 177

First TWSNMP FK

Items

Contents

Icon

Select an icon.The name of the web font of the MDI icon.

Name Give the icon your favorite name.

Copyright (c) 2023 Masayuki Yamai

170 / 177

First TWSNMP FK

MIB management
This is a screen that manages SNMP MIB.

Copyright (c) 2023 Masayuki Yamai

171 / 177

First TWSNMP FK

Items

Contents

Type

It is a type of built -in or reading.

Name MIB module name.

Copyright (c) 2023 Masayuki Yamai

File

It is a read file name.

Error

An error when you read it.

172 / 177

First TWSNMP FK

ButtonContents

MIB Tree Displays MIB tree.

Copyright (c) 2023 Masayuki Yamai

Help

Display this help.

Close

Close the setting screen.

173 / 177

First TWSNMP FK

MIB tree screen

Copyright (c) 2023 Masayuki Yamai

174 / 177

First TWSNMP FK

File in the datastore
You can customize it by saving the following files in the data folder.
File
TWSNMPFK.db

Contents
Database file.If it does not exist, it will be createdautomatically.

Services.txt

This is a file to use the service name conversion.(Optional)

Mac-vendorsexport.csv

Mac A database that indicates the relationship between the
MAC address and the vendor name.(Optional)

Polling.json

Polling settings (optional)

Copyright (c) 2023 Masayuki Yamai

175 / 177

First TWSNMP FK

Usage
Usage of twsnmpfk:-datastore string
Path to data dtore directory-kioskKisok mode(frameless and full screen)-lang string
Language(en|jp)-lock string
Disable edit map and lock page(map or loc)
-maxDispLog int
Max log size to diplay (default 10000)-ping string
ping mode icmp or udp-syslogPort int
Syslog port (default 514)
-trapPort int
SNMP TRAP port (default 162)
-sshdPort int
SSH Server port (default 2022)

Copyright (c) 2023 Masayuki Yamai

176 / 177

First TWSNMP FK

Parameters

Description

dataStore

Datstore Pass

kiosk

Kiosk mode (frameless, full screen)lock <page>disable edit map and show fixed page

Maxdisplog <number> Maximum number of logs (default 10000)
ping <Mode>

Ping operation mode (ICMP or UDP)

syslogPort <PORT>

Syslog receiving port (default 514)

trapPort <Port>

SNMP TRAP Reception port (Default 162)

sshdPort <Port>

SSH server port (Default 162)

Copyright (c) 2023 Masayuki Yamai

177 / 177