Managing your IronPorts via snmp

[richard.doiron_ironport]

So who out there uses snmp tools like HP Openview to mange their boxes? Any open source tools? How practical is it?

[david.shoesmith]

I am attempting to use Solarwinds Network Performance manager to monitor and manage via SNMP, however I needed to submit the MIBS to Solarwinds so I could get the added features. Have not heard back from them as of yet.
Hopefully they will add it soon and I can have a play with it.

David

[salware_ironport]

Hello:

I'm using Zabbix, http://www.zabbix.com, which is freeware.

It can be used for retrieving SNMP values from the MIB, like MRTG.

I'm getting graphs of workqueue, use of CPU, use of memory, use of disk for delivery queue and I can rise alarms when the value exceed any threshold, for instance when I have more that 1000 messages in the workqueue.

Regards.

[oh_ironport]

We use RRDtool and monitor things like CPU, memory, diskIO, and workqueue.

http://oss.oetiker.ch/rrdtool/

[seveneyes_ironport]

take a look at cacti.

http://cacti.net/

[Rayman_Jr]

I'm using Zabbix, http://www.zabbix.com, which is freeware.

It can be used for retrieving SNMP values from the MIB, like MRTG. 

I have Zabbix installed but I can't get ironPort MIB working. I have placed ASYNCOS-MAIL-MIB.txt under /usr/share/snmp/mibs directory but it's not visible in Zabbix.

I'm sorry, beeing newbie but how to import MIB to Zabbix. Any help would be highly appriciated.

[Rayman_Jr]

The problem where in Zabbix 1.4.1 (This doesn't exactly belong to this forum)

There is nothing wrong with IronPort MIB (This belongs to this forum :lol: )

FYI: There is bug in Zabbix SNMP which doesn't show correctly the SNMP values with type "Gauge32". For those type of SNMP queries the OID number must be used and not clear text from MIB

For example:
Works: SNMP OID - .1.3.6.1.4.1.15497.1.1.1.11.0
Doesn't work: SNMP OID - workQueueMessages.0

[cwling2008]

Hi,

Where can i download ironport SNMP OID ?

Thanks.

Alex Ling

[steven_geerts]

Hi Guys,

Since we are strugeling with the monitoring of our ironports I would be interrested to see your configuration files.

is it possible to post them somehwere so that we can use them as "source of inspiration"?

thanks! Steven

[martinc8306]

This is quite a nice shell script that interfaces with Nagios

http://www.nagiosexchange.org/cgi-bin/jump.cgi?ID=1513&view=File1;d=1

This is a script to check RAM, CPU, QUEUE, Work Queue, and Mail Rate on Ironport Appliances.
It was tested on C series appliances, working with no problems on AsyncOS 5.x, and Nagios 2.9 over Linux.
It is based on XML status file obtained via HTTPS.
It need HTTPS enabled, a at least a \\\"guest\\\" user to autentication.

[cwling2008]

Hi Jariih,

Can you explain the follow OID description?

.1.3.6.1.4.1.15497.1.1.1.12.1.4.1 = Gauge32: 0
.1.3.6.1.4.1.15497.1.1.1.12.1.4.2 = Gauge32: 86473329
.1.3.6.1.4.1.15497.1.1.1.12.1.4.3 = Gauge32: 0
.1.3.6.1.4.1.15497.1.1.1.12.1.4.4 = Gauge32: 86473328
.1.3.6.1.4.1.15497.1.1.1.12.1.4.5 = Gauge32: 8647332
.1.3.6.1.4.1.15497.1.1.1.13.1.3.1 = Counter32: 165
.1.3.6.1.4.1.15497.1.1.1.13.1.3.2 = Counter32: 165
.1.3.6.1.4.1.15497.1.1.1.13.1.4.1 = Counter32: 0
.1.3.6.1.4.1.15497.1.1.1.13.1.4.2 = Counter32: 0
.1.3.6.1.4.1.15497.1.1.1.14.0 = Gauge32: 260372
.1.3.6.1.4.1.15497.1.1.1.15.0 = Gauge32: 1
.1.3.6.1.4.1.15497.1.1.1.16.0 = Gauge32: 0
.1.3.6.1.4.1.15497.1.1.1.17.0 = Counter32: 0
.1.3.6.1.4.1.15497.1.1.1.19.0 = Gauge32: 404
.1.3.6.1.4.1.15497.1.1.1.20.0 = Gauge32: 135

Thanks.

Alex Ling

[steven_geerts]

It took me a while to figure it out but the first of these represent the remaining time for your licenses.
First you have the 12.1.2 series, describing the license names, then the 12.1.3 series that indicates if this license is perpetual or expiring, finally you have the 12.1.4 series that is indicating the remaining time for each license.

.1.3.6.1.4.1.15497.1.1.1.12.1.2.1 = STRING: Bounce Verification
.1.3.6.1.4.1.15497.1.1.1.12.1.2.2 = STRING: Virus Outbreak Filters
.1.3.6.1.4.1.15497.1.1.1.12.1.2.3 = STRING: IronPort Anti-Spam
.1.3.6.1.4.1.15497.1.1.1.12.1.2.4 = STRING: Incoming Mail Handling
.1.3.6.1.4.1.15497.1.1.1.12.1.2.5 = STRING: Symantec Brightmail Anti-Spam
.1.3.6.1.4.1.15497.1.1.1.12.1.2.6 = STRING: Sophos Anti-Virus
.1.3.6.1.4.1.15497.1.1.1.12.1.2.7 = STRING: Centralized Management
.1.3.6.1.4.1.15497.1.1.1.12.1.3.1 = INTEGER: true(1)
.1.3.6.1.4.1.15497.1.1.1.12.1.3.2 = INTEGER: false(2)
.1.3.6.1.4.1.15497.1.1.1.12.1.3.3 = INTEGER: false(2)
.1.3.6.1.4.1.15497.1.1.1.12.1.3.4 = INTEGER: true(1)
.1.3.6.1.4.1.15497.1.1.1.12.1.3.5 = INTEGER: false(2)
.1.3.6.1.4.1.15497.1.1.1.12.1.3.6 = INTEGER: false(2)
.1.3.6.1.4.1.15497.1.1.1.12.1.3.7 = INTEGER: false(2)
.1.3.6.1.4.1.15497.1.1.1.12.1.4.1 = Gauge32: 0
.1.3.6.1.4.1.15497.1.1.1.12.1.4.2 = Gauge32: 56376965
.1.3.6.1.4.1.15497.1.1.1.12.1.4.3 = Gauge32: 56376964
.1.3.6.1.4.1.15497.1.1.1.12.1.4.4 = Gauge32: 0
.1.3.6.1.4.1.15497.1.1.1.12.1.4.5 = Gauge32: 2592000
.1.3.6.1.4.1.15497.1.1.1.12.1.4.6 = Gauge32: 56376965
.1.3.6.1.4.1.15497.1.1.1.12.1.4.7 = Gauge32: 56376964

What the other OID's are I can not figure out but I hope I helped you a little further.

Reards Steven

[mackay_ironport]

Also have a read of the ASYNCOS-MAIL-MIB.txt, follow the MIB Tree within the text and look for DESCRIPTION of each OID. The other are:


.1.3.6.1.4.1.15497.1.1.1.13.1.2 = DisplayString: "Name of service for which update has been done."
.1.3.6.1.4.1.15497.1.1.1.13.1.3.1 = Counter32: 165 "Number of updates."
.1.3.6.1.4.1.15497.1.1.1.13.1.3.2 = Counter32: 165 "Number of updates."
.1.3.6.1.4.1.15497.1.1.1.13.1.4.1 = Counter32: 0 "Number of update failures."
.1.3.6.1.4.1.15497.1.1.1.13.1.4.2 = Counter32: 0 "Number of update failures."

.1.3.6.1.4.1.15497.1.1.1.14.0 = Gauge32: 260372 "The number of seconds the oldest message has been in queue"

.1.3.6.1.4.1.15497.1.1.1.15.0 = Gauge32: 1 "Number of DNS requests that have been sent but for which no reply has been received."

.1.3.6.1.4.1.15497.1.1.1.16.0 = Gauge32: 0 "Number of DNS requests waiting to be sent."

.1.3.6.1.4.1.15497.1.1.1.17.0 = Counter32: 0 "Number of RAID events."

.1.3.6.1.4.1.15497.1.1.1.19.0 = Gauge32: 404 "Number of open files or sockets."

.1.3.6.1.4.1.15497.1.1.1.20.0 = Gauge32: 135 "Number of threads that perform some task related to transferring mail."

[cwling2008]

Hi mackay,

Thanks a lots.

May i know what is the OID for cpu, memory , disk space usage by snmp?

Thanks again.

Alex Ling

[Rayman_Jr]

Here you can find the full list of OIDs with their MIB descriptions

http://riihimaki.dyndns.org/ironport_oids.html