topic Re: MRTG on PIX in Network Security

MRTG on PIX

tyagivijay — Fri, 21 Feb 2020 07:55:50 GMT

Dear All,

How can we monitor the PIX connection details with the help of MRTG on windows platform?

Thanks in advance.

Vijay

Re: MRTG on PIX

Patrick Iseli — Thu, 10 Feb 2005 12:52:34 GMT

Hi Vijay,

See my post from yesterday with the config files example.

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1dd753c6

Follow this install guide:

http://people.ee.ethz.ch/~oetiker/webtools/mrtg/mrtg-nt-guide.html

sincerely

Patrick

Re: MRTG on PIX

tyagivijay — Fri, 11 Feb 2005 12:08:42 GMT

Dear Patrick,

Thanks a lot for the information, but on PIX can we also check the Internet bandwidth utilization by LAN IP address.

We are doing natting on the PIX.

Thanks again

Vijay

Re: MRTG on PIX

Patrick Iseli — Fri, 11 Feb 2005 16:01:47 GMT

Hi Vijay,

what exatly do you mean with " Internet bandwidth utilization by LAN IP address".

sincerely

Patrick

Re: MRTG on PIX

tyagivijay — Sat, 12 Feb 2005 07:18:24 GMT

Dear Patrick,

Thanks a lot for the reply.

Basically the Problem is that we are having 2 MB of Internet link.

Almost every day our Internet link get completely choked due to the heavy traffic from the LAN users, so we want to check the Internet Bandwidth utilization by the individual LAN users.

Thanks

Vijay

Re: MRTG on PIX

noc — Sat, 12 Feb 2005 08:45:17 GMT

No.

The mrtg per ip monitors (in the contrib directory) use a combination of ip accounting, and snmp write strings to do periodic resets of the data. So obviously this was designed to work on IOS only.

To monitor whats coming off the inside pix interface setup a cheap linux box (red hat is best!) and run ntop (see ntop.org). this is very easy to do and will get you far better results than anything mrtg can do. Now you will just need a span port or a real layer 1 hub to catch the data off the pix inside int.

Re: MRTG on PIX

Patrick Iseli — Sun, 13 Feb 2005 18:50:09 GMT

Uufortunently this is not possible, have not found yet, with the MRTG stats.

Yes NTOP could help to figure out your TOP 10 hosts that are consuming all the bandwith. But ntop is more a Real time analyzing tool and resets the statistics after a few days. But still a great tool to analyze users. http://www,ntop.org/ntop.html

What you would need is a RMON Tool to do lonf time stats.

sincerely

Patrick