Monitoring Software-data collection methods

Currently, there are two popular monitoring data collection methods: active and passive.

• Active Mode

The active mode obtains monitoring information by directly accessing the Monitored object through the monitoring terminal/server. This method is extremely difficult to implement because it requires a lot of technical requirements and complex implementation, especially when different firewall software is installed on the monitoring terminal. In addition, because the monitoring server needs to monitor multiple monitoring terminals, when the number of monitoring terminals is large, the performance pressure on the monitoring server will be relatively high, and may even cause monitoring failure, or the monitoring server monitoring delay is caused by the network delay of one or more monitoring terminals.
The advantages of the active method are also obvious. It does not need to install any software on the client, and can directly obtain monitoring data, in addition, no additional work will be performed due to the increase or decrease of the monitoring terminal. The monitoring server will automatically determine based on the addition or decrease of the monitoring terminal.
Currently, the active mode is usually implemented by enabling the monitoring port on the client to allow the monitoring server to access the monitoring terminal. The defect of this method is that the monitoring port must be enabled on the monitoring terminal, set the monitoring port to the firewall access port, which means that the monitoring server can operate or control the monitoring terminal.

• Passive Mode 

The other is passive mode. Passively, a terminal is installed on the Monitored object to obtain the monitoring information. Then, the monitoring terminal uploads the collected information to the monitoring server for information collection.
The passive method does not need to solve technical difficulties such as crossing the firewall, so it is easy to implement. Because the monitoring terminal actively submits data to the monitoring server, the performance of the monitoring server is much higher than that of the Active Server.
However, the passive method requires that the client be installed on the monitoring terminal, that is, the monitoring party must have full control over the monitoring terminal to monitor the client and occupy certain monitoring terminal resources. When a monitoring terminal crashes or network delay occurs when a client is installed on the monitoring terminal, the network disconnection of a single node does not affect the monitoring server. In addition, due to the change (increase and decrease) of the monitoring terminal, additional operations for installing the monitoring terminal are required. When the number of monitoring terminals is large, the workload is huge. Second, because the monitoring terminal needs to upload data to the monitoring server, when the monitoring server is installed with a firewall, access to the monitoring terminal will be restricted. Therefore, the passive method only needs to solve the firewall of the monitoring server, which is much less difficult than the active method.

 

The following figure shows the comparison of the two collection methods:

Collection Method	Advantages	Disadvantages
Active Mode	L no software needs to be installed on the client L does not occupy any client resources L increase and decrease of monitoring terminals and automatic determination by monitoring servers	L cross-firewall is required, which has high technical requirements and complicated implementation. especially when different firewall software is installed on the monitoring terminal, it is extremely difficult to implement L when there are many monitoring terminals, the monitoring server has a high performance pressure L network latency of one or more monitoring terminals leads to monitoring server latency
Passive Mode	L simple implementation L good server performance monitoring L The monitoring server will not be affected by the crash of a monitoring terminal or network delay	L need to control the monitoring terminal and install additional software on it L occupy certain monitoring terminal Resources L additional work is required to monitor the changes in the number of monitoring terminals

 

Due to time issues, the writing is not very complete. I hope you will understand it ~~~