- observium - lists.observium.org

PIX 501 support
by Chris Stone 06 Apr '12

06 Apr '12

I have a couple of Cisco PIX 501's setup in Observium, but they are being seen only as Generic Devices: Cisco PIX Firewall Version 6.3(5) Operating System Generic Device Contact support(a)axint.net Location Denver, CO Uptime 291 days, 22h 45m 55s And the only graphs I am getting are Uptime and the ethernet port counters (traffic, packets, etc). Nothing for memory or cpu. Both firewalls are the same - here's the info on one of them: voip-fw# show ver Cisco PIX Firewall Version 6.3(5) Cisco PIX Device Manager Version 3.0(4) Compiled on Thu 04-Aug-05 21:40 by morlee voip-fw up 291 days 22 hours Hardware: PIX-501, 16 MB RAM, CPU Am5x86 133 MHz Flash E28F640J3 @ 0x3000000, 8MB BIOS Flash E28F640J3 @ 0xfffd8000, 128KB 0: ethernet0: address is 0016.c836.223a, irq 9 1: ethernet1: address is 0016.c836.223c, irq 10 Licensed Features: Failover: Disabled VPN-DES: Enabled VPN-3DES-AES: Enabled Maximum Physical Interfaces: 2 Maximum Interfaces: 2 Cut-through Proxy: Enabled Guards: Enabled URL-filtering: Enabled Inside Hosts: 10 Throughput: Unlimited IKE peers: 10 My understanding was that PIX firewalls were supported. Is what I am getting all the support there currently is? Or is there something else I need to do to enable cpu and memory counters. I had them setup in Cacti previously, so it would seem that the SNMP counters do exist. -- Chris Stone AxisInternet, Inc. www.axint.net

6 9

netstat graph broken
by Nikolay Shopik 05 Apr '12

05 Apr '12

Hey, Just noticed that netstat graphs seems broken, not all graphs are drawn, r2922 is here.

3 5

ATM interfaces not showing on Device Overview
by Bruce-Young Majola 04 Apr '12

04 Apr '12

Hi Adam, I am having a strange issues which I need your help in troubleshooting. I have this 7606 which has ATM interfaces configured but the problem is that when I discover this device, all the interfaces are discovered include ATM ones but as soon as the poller runs, they disappear again. I am not sure how to fix this issues. I am running the latest version of Observium. Thanks for your help. After discovery After poller has run Regards, Bruce Majola DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. SWIFTNET and any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Thank you.

5 13

Re: [Observium] [Observium-dev] r2955 - in observer/trunk: . includes includes/polling
by Paul Gear 04 Apr '12

04 Apr '12

On 05/04/12 04:10, observium-commits(a)observium.org wrote: > Author: adama > Date: 2012-04-04 19:10:45 +0100 (Wed, 04 Apr 2012) > New Revision: 2955 > ... > Log: > Add support for memcached to poller for current bps/pps for ports and ability to disable writing these values to MySQL. HIGHLY RECOMMENDED FOR LARGE INSTALLS. Also PROCEED WITH CAUTION. How many ports == "LARGE INSTALLS"?

3 4

Re: [Observium] poller doesn’t kick the apache-stats.py script
by Andrew Beals 04 Apr '12

04 Apr '12

Rather than modifying the poller script, simply commenting out the "mibs :" line at the bottom of /etc/snmp/snmp.conf on your Observium server box is sufficient to get the polling to work correctly. Ubuntu put that line in citing "licensing issues" with the MIBs.

3 4

rrd time selection is wrong
by Nikolay Shopik 04 Apr '12

04 Apr '12

It seems like when you select time to show graph it doesn't take in consideration timezone. Basically if I select from 18:00 till now and press update time in "From" field update to 22:00 (I have GMT+4 zone). You can click update multiply times and graph time will be moving after each click.

2 3

VRF Names truncated in version 0.12.4.2946
by Bruce-Young Majola 03 Apr '12

03 Apr '12

Hi, I just upgraded to the latest version of Observium and I noticed after running discovery that the VRF descriptions are now truncated, see below. Before upgrade: After upgrade Regards, Bruce Majola DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorized. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. SWIFTNET and any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Thank you.

1 0

SNMPv3 implementation
by Guillaume Leclanche 31 Mar '12

31 Mar '12

Hello, attached is the patch for the implementation of SNMPv3. I've been testing it on my system and devices, and it seems to be working properly. Since it's a core function of the soft, I guess it would be good that other people give it a try before it is committed. I use NET-SNMP version: 5.4.3. Be careful that a few files use direct calls to net-snmp instead of calling observium library functions. It means that those calls will not work with an snmpv3 device. includes/discovery/cisco-mac-accounting.inc.php: $datas = shell_exec($config['snmpbulkwalk'] . " -M ".$config['mibdir']." -m CISCO-IP-STAT-MIB -Oqn -".$device['snmpver']." -c ".$device['community']." ".$device['hostname']." cipMacSwitchedBytes"); includes/discovery/cisco-pw.inc.php: $oids = shell_exec($config['snmpwalk'] . " -M " . $config['mibdir'] . " -m CISCO-IETF-PW-MIB -CI -Ln -Osqn -" . $device['snmpver'] . " -c " . $device['community'] . " " . $device['hostname'].":".$device['port'] . " cpwVcID"); includes/discovery/cisco-pw.inc.php: list($cpw_remote_id) = explode(":", shell_exec($config['snmpget'] . " -M " . $config['mibdir'] . " -m CISCO-IETF-PW-MPLS-MIB -Ln -Osqnv -" . $device['snmpver'] . " -c " . $device['community'] . " " . $device['hostname'].":".$device['port'] . " cpwVcMplsPeerLdpID." . $cpwOid)); includes/discovery/cisco-pw.inc.php: $interface_descr = trim(shell_exec($config['snmpwalk'] . " -M " . $config['mibdir'] . " -m CISCO-IETF-PW-MIB -Oqvn -" . $device['snmpver'] . " -c " . $device['community'] . " " . $device['hostname'].":".$device['port'] . " cpwVcName." . $cpwOid)); includes/discovery/temperatures/adva.inc.php: $temperature_chassis = trim(shell_exec($config['snmpget'] . " -M " . $config['mibdir'] . " -O qv -$snmpver -c $community $hostname:$port $oid_chassis")); includes/discovery/temperatures/adva.inc.php: $temperature_stm16 = trim(shell_exec($config['snmpget'] . " -M " . $config['mibdir'] . " -O qv -$snmpver -c $community $hostname:$port $oid_stm16")); includes/discovery/temperatures/adva.inc.php: $temperature_hss1 = trim(shell_exec($config['snmpget'] . " -M " . $config['mibdir'] . " -O qv -$snmpver -c $community $hostname:$port $oid_hss1")); includes/discovery/temperatures/adva.inc.php: $temperature_hss2 = trim(shell_exec($config['snmpget'] . " -M " . $config['mibdir'] . " -O qv -$snmpver -c $community $hostname:$port $oid_hss2")); includes/discovery/cisco-vrf.inc.php: $vrf['name'] = trim(shell_exec($config['snmpget'] . " -M " . $config['mibdir'] . " -m MPLS-VPN-MIB -Ln -Osq -" . $device['snmpver'] . " -c " . $device['community'] . " " . $device['hostname'].":".$device['port'] . " mplsVpnVrfRouteDistinguisher.".$vrf['oid'])); includes/discovery/cisco-vrf.inc.php: $vrf['mplsVpnVrfDescription'] = trim(shell_exec($config['snmpget'] . " -M " . $config['mibdir'] . " -m MPLS-VPN-MIB -Ln -Osqvn -" . $device['snmpver'] . " -c " . $device['community'] . " " . $device['hostname'].":".$device['port'] . " mplsVpnVrfDescription.".$vrf['oid'])); includes/discovery/cisco-vrf.inc.php: $ports = shell_exec($config['snmpwalk'] . " -M " . $config['mibdir'] . " -m MPLS-VPN-MIB -CI -Ln -Osqn -" . $device['snmpver'] . " -c " . $device['community'] . " " . $device['hostname'].":".$device['port'] . " $ports_oid"); includes/polling/os/ironware.inc.php:$hardware = trim(exec($config['snmpget'] . " -M ".$config['mibdir'] . " -O vqs -m FOUNDRY-SN-AGENT-MIB:FOUNDRY-SN-ROOT-MIB -" . $device['snmpver'] . " -c " . $device['community'] . " " . includes/polling/os/ironware.inc.php:$version = trim(exec($config['snmpget'] . " -M ".$config['mibdir'] . " -O vqs -m FOUNDRY-SN-AGENT-MIB:FOUNDRY-SN-ROOT-MIB -" . $device['snmpver'] . " -c " . $device['community'] . " " . includes/polling/os/speedtouch.inc.php:$loop = shell_exec($config['snmpget'] . " -M ".$config['mibdir'] . ' -Ovq -v1 -c '.$device['community'].' '.$device['hostname'].' ifDescr.101'); I will send a patch to fix cisco-vrf after this mail, but the other files will still be incompatible with snmpv3 (keep your devices in SNMPv2 if you use any of the incompatible calls). Guillaume

1 1

Cisco-vrf discovery - huge performance improvement
by Guillaume Leclanche 31 Mar '12

31 Mar '12

Hi, As I wanted to make Cisco VRF discovery SNMPv3-compatible, I realized that it was actually very slow. So I change the philosophy of it (bulkwalk all SNMP info first then analyze in the code), and here's the result for a device with 500 VRFs: Old version : Discovered in 65.83 seconds New version : Discovered in 3.234 seconds At the same time I made it SNMPv3-compatible, and I added the support for CISCO-L3VPN-STD-MIB that is the more recent MIB and the only one supported on the latest releases of IOS/IOS-XR. I tested it with Cisco Hw and it's fine, but for the other vendors implementing the MIB, somebody else will have to test it :) Guillaume

1 0

Re: [Observium] Legend shows not-existent interfaces
by Nikolay Shopik 29 Mar '12

29 Mar '12

Adam, Thanks, you right. Forgot to purge these deleted interfaces, my bad. On 29/03/12 14:21, Adam Armstrong wrote: > The duplicate interfaces are almost certainly instances where the device > has rebooted and the interface has changed ifIndex. Check the ports > table for ports for that device_id, you'll probably find duplicated > ifDescrs with different ifIndexes, with the older copies being labelled > as deleted. > > We still draw these interfaces to keep the shape of the graph. (and > that's one of the reasons we keep deleted interfaces in the database). > > adam. > > > On 2012-03-29 11:18, Nikolay Shopik wrote: >> Hi Adam, >> >> Here is graph and debug output. >> >> On 29/03/12 13:11, Adam Armstrong wrote: >>> Do you have an example? >>> >>> run the graph URL with&debug=1 on the end. >>> >>> adam. >>> >>> >>> On 2012-03-29 09:06, Nikolay Shopik wrote: >>>> When you open Total Traffic graph, you may see in Legend interfaces >>>> which doesn't really exist on this device. >>>> Additionally sometimes you may see duplicate interfaces in Legend, >>>> which >>>> do exist. >>>> I wonder what may cause of this and to fix it? >>>> _______________________________________________ >>>> observium mailing list >>>> observium(a)observium.org >>>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> _______________________________________________ >>> observium mailing list >>> observium(a)observium.org >>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >

2 2