topic Re: MRTG with snmp in Network Security

MRTG with snmp

bma — Mon, 11 Mar 2019 10:50:47 GMT

Pix 6.3, enable snmp-server host to a windows 2003 server running MRTG. When MRTG try to get traffic from PIX inside interface, nothing show up. No errors in pix and windows, ping is fine. Could help to list some documents about PIX 6.3 snmp setup with MRTG?

Thanks

ben

Re: MRTG with snmp

Patrick Iseli — Sat, 28 Jul 2007 04:31:22 GMT

Try with that ! Replace the community string and IP. Hope that helps.

======== BEGINNING ===========================

# Created by v4only

### Global Config Options

# for UNIX

WorkDir: /var/www/localhost/htdocs/mrtg

Htmldir: /var/www/localhost/htdocs/mrtg

Imagedir: /var/www/localhost/htdocs/mrtg

IconDir: /var/www/localhost/htdocs/mrtg/icons

EnableIPv6: no

Target[pix-cpu]:.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1&.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1:snmp-password@111.111.111.1

RouterUptime[pix-cpu]:snmp-password@111.111.111.1

Title[pix-cpu]: PIX 501 CPU LOAD

PageTop[pix-cpu]:

PIX 501 : CPU Load %

MaxBytes[pix-cpu]:100

ShortLegend[pix-cpu]:%

XSize[pix-cpu]:380

YSize[pix-cpu]:100

YLegend[pix-cpu]: CPU Utilization

Legend1[pix-cpu]: 5 sec CPU load %

Legend2[pix-cpu]: 1 min CPU load %

Legend3[pix-cpu]: Maximal 5 sec CPU load %

Legend4[pix-cpu]: Maximal 1 min CPU load %

LegendI[pix-cpu]: 5 sec load:

LegendO[pix-cpu]: 1 min load:

Options[pix-cpu]: gauge, growright, nopercent

### Interface 1 >> Descr: 'PIX-Firewall-'outside'-interface' | Name: ''| Ip: '111.111.111.1' | Eth: '00-0a-f4-cc-ee-cc' ###

### The following interface is commented out because:

### * --ifref=name is not unique for this interface

Target[pix_outside]: 1:snmp-password@111.111.111.1

SetEnv[pix_outside]: MRTG_INT_IP="111.111.111.1"

#MRTG_INT_DESCR="PIX-Firewall-'outside'-interface"

MaxBytes[pix_outside]: 1250000

Title[pix_outside]: 1 -- PIX501

PageTop[pix_outside]:

Outside -- PIX501

System:	PIX501 in Neverland
Maintainer:	admin@domain.com
Description:	PIX Firewall outside interface
ifType:	ethernetCsmacd (6)
ifName:
Max Speed:	10.0 Mbits/s
Ip:	111.111.111.1 ()

### Interface 2 >> Descr: 'PIX-Firewall-'inside'-interface' | Name: '' |Ip: '192.168.1.1' | Eth: '00-0a-f4-bb-ff-ee' ###

### The following interface is commented out because:

### * --ifref=name is not unique for this interface

Target[pix_inside]: 2:snmp-password@111.111.111.1

SetEnv[pix_inside]: MRTG_INT_IP="192.168.1.1"

#MRTG_INT_DESCR="PIX Firewall inside interface"

MaxBytes[pix_inside]: 12500000

Title[pix_inside]: INSIDE -- PIX 501

PageTop[pix_inside]:

INSIDE -- PIX 501

System:	PIX501 in Neverland
Maintainer:
Description:	PIX Firewall inside interface
ifType:	ethernetCsmacd (6)
ifName:
Max Speed:	100.0 Mbits/s
Ip:	192.168.1.1

======== END =============================

sincerely

Patrick

Re: MRTG with snmp

bma — Sat, 28 Jul 2007 17:02:41 GMT

thanks.

do you have simple utility to test snmp?

ben

Re: MRTG with snmp

Patrick Iseli — Wed, 01 Aug 2007 14:34:13 GMT

Try SNMP Walk.

http://net-snmp.sourceforge.net/docs/FAQ.html

http://www.solarwinds.com/products/toolsets/engineer.aspx

sincerely

Patrick

Re: MRTG with snmp

thomasdzubin — Wed, 01 Aug 2007 20:55:38 GMT

If you are running MS-Windows, My favorite quick tool to test snmp is "Getif" both the 2.2 and 2.3.1 versions work great for quick "point-at-a-device-and see-the-basic-mib-2-stuff"

It can do an snmpwalk too

Re: MRTG with snmp

bma — Wed, 01 Aug 2007 22:25:11 GMT

Thanks

ben

Re: MRTG with snmp

alvaroadp — Fri, 03 Aug 2007 02:44:29 GMT

Well, it is not a browser, but this is great to get instant traffic graphs, the tool is called STG

http://leonidvm.chat.ru/ and if it works, you got snmp running ok.