Re: Snmp monitor

ciscopaul · ‎10-22-2004

Hi all,

I am trying to setup MRTG to monitor my pix 515 for incoming and outgoing traffic.

I installed MRTG and perl, then create a cfg file.

See below for my file:

# Cisco Pix 515

WorkDir: c:\Inetpub\wwwroot\mrtg

Target[mbcpix]: public@10.1.1.1

MaxBytes[mbcpix]: 1250000

Title[mbcpix]: CiscoPix ():ether0

PageTop[mbcpix]: <H1>Traffic Analysis for ether0</H1>

<TABLE>

<TR><TD>System:</TD><TD>LC-Bridge inAndover</TD></TR>

<TR><TD>Maintainer:</TD><TD>Administrator</TD></TR>

<TR><TD>Interface:</TD><TD>ether0(1)</TD></TR>

<TR><TD>IP:</TD><TD>Cisco-Pix(10.1.1.1)</TD></TR>

<TR><TD>Max Speed:</TD>

<TD>1250.0 kBytes/s (ethernetCsmacd)</TD></TR>

</TABLE>

Target[mbcpix.2]: public@10.1.1.1

MaxBytes[mbcpix.2]: 1250000

Title[mbcpix.2]: CiscoPix (): ulink0

PageTop[mbcpix.2]: <H1>Traffic Analysis for ulink0</H1>

<TABLE>

<TR><TD>System:</TD><TD>LC-Bridge inAndover</TD></TR>

<TR><TD>Maintainer:</TD><TD>Administrator</TD></TR>

<TR><TD>Interface:</TD><TD>ulink0(2)</TD></TR>

<TR><TD>Max Speed:</TD>

<TD>1250.0 kBytes/s (ethernetCsmacd)</TD></TR>

</TABLE>

When I ran: perl mrtg mrtg.cfg

I get these errors:

C:\mrtg\bin>perl mrtg mrtg.cfg

ERROR: Target[mbcpix][_IN_] 'public@10.1.1.1' (warn): Array found where operator

expected at (eval 6) line 1, at end of line

ERROR: Target[mbcpix][_OUT_] 'public@10.1.1.1' (warn): Array found where operato

r expected at (eval 7) line 1, at end of line

I would really appreciate any response from any network guru.

Paul Hong

paddyxdoyle · ‎10-22-2004

Paul,

Its a shot in the dark but did you make the config file yourself, or did you use cfgmaker to generate it and discover the interfaces on your PIX. To be honest your mrtg.cfg looks fine to me, however it might (if you didn't originally) be worth creating it using cfgmaker as there could be a slight inconsistancy.

Here is how i create my initial mrtg config file, i then remove the interfaces i don't want to monitor or comment them out.

perl /usr/local/mrtg-2/bin/cfgmaker --ifref=name --ifdesc=name --global 'WorkDir: /usr/local/mrtg-2/site.mrtg/htdocs/mrtg-html' --global 'Options[_]: bits,growright' --output /usr/local/mrtg-2/site.mrtg/htdocs/mrtg-config/*my_device_name* public@*my_device_name*

This is from a router tho' and not tested on a PIX so you may have to remove the --ifref and --ifdesc bits!!

HTH

Paddy

ciscopaul · ‎10-25-2004

Paddy,

Thanks for your response.

Actually, when I ran the cfgmaker, it said the device did not response. I assume that it did not dectect the Pix.

I check the SNMP settings on the pix and I had the snmp enable.

How can I check to see if SNMP is working fine on the Pix?

paddyxdoyle · ‎10-28-2004

Hi,

I believe you can do an SNMP walk from your MRTG server to the PIX, this will walk through the mib tree and you should see the results on your screen.

I think the syntax is :

snmpwalk -v version -c community_string host_ip_address

Are you allowing SNMP to the PIX on your inside interface access-list?

You could also use the capture command on the PIX to see if SNMP is hitting your box.

HTH

Paddy