This is probably something you need mike to look at, he's way more familiar with the changes around the snmp code than I am :D

adam. On 01/03/2016 23:40:01, Cameron Murray cameron@techpath.com.au wrote: Hi Adam,   Here are the details of our install:   Version Information Observium 0.16.2.7635 (29th February 2016) OS Linux 2.6.32-573.3.1.el6.x86_64 [amd64] (CentOS 6.7) Apache 2.2.15 (CentOS) PHP 5.5.28 Python 2.6.6 MySQL 5.1.73 (extension: mysqli 5.1.73) SNMP NET-SNMP 5.5 RRDtool 1.3.8       Regards,   Cameron Murray Senior Communications Manager   TechPath   P: 1300 033 300 F: 07 3809 3999 E: cameron@techpath.com.au   Unit 2/55 Tradelink Rd, Hillcrest QLD 4118 Formerly Betta Computer Services   www.techpath.com.au   Note: This message may contain privileged and confidential information that is the property of the intended recipient. The information herein is intended only for use of the addressee. If you are not the intended recipient, then you are requested to return e-mail to TechPath Pty Ltd and destroy any copies made. Copying or disseminating any of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of TechPath Pty Ltd. -----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: Tuesday, 1 March 2016 9:31 AM To: Observium Network Observation System observium@observium.org Subject: Re: [Observium] SNMP access via poller issues   Hi Cameron,   That's odd. We did recently add code to try to reduce false positive failed SNMP queries, are you running stable or trunk? (The new code is only in trunk)   Adam.   On Feb 29, 2016 23:12, Cameron Murray <cameron@techpath.com.au [mailto:cameron@techpath.com.au]> wrote:

Guys,       Overnight we received a lot of alerts for device going offline however these were false positives. We’ve found that the poller is having issues connecting to some devices.       Brocade ICX Switch   Cisco 2900 series   RouterOS       SNMP is working via snmpwalk on the machine running obs and also from other test locations however the poller times out on them. We’ve reset the configuration for the devices in obs however access still fails. Access appears to come and go. We’ve confirmed obs is up to date and have rebooted the services.       Regards,   Cameron Murray Senior Communications Manager   How am I doing? Please click here to rate my work.       P 1300 033 300 F 07 3809 3999 E cameron@techpath.com.au [mailto:cameron@techpath.com.au]   www.techpath.com.au [http://www.techpath.com.au]   Unit 2/55 Tradelink Rd, Hillcrest QLD 4118   Note: This message may contain privileged and confidential information that is the property of the intended recipient. The information herein is intended only for use of the addressee. If you are not the intended recipient, then you are requested to return e-mail to TechPath Pty Ltd and destroy any copies made. Copying or disseminating any of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of TechPath Pty Ltd.

_______________________________________________ observium mailing list observium@observium.org [mailto:observium@observium.org] http://postman.memetic.org/cgi-bin/mailman/listinfo/observium [http://postman.memetic.org/cgi-bin/mailman/listinfo/observium]

Adam,

The two devices are still showing as offline. Both are very much online.

ALERT

Modifyhttp://cacti.bettacomputers.com.au/device/device=61/tab=alert/alert_entry=2407/

Alert

Device is offline

Entity

bne-fuji-os33-rtr01.tp.dchttp://cacti.bettacomputers.com.au/device/device=61/

Conditions

device_status equals 0 (0)

Metrics

device_status = 0

Duration

3 days, 21m 37s (2016-03-01 07:58:37)

Device

Device

bne-fuji-os33-rtr01.tp.dchttp://cacti.bettacomputers.com.au/device/device=61/

Hardware

x86

Operating System

Mikrotik RouterOS 6.29.1 Level 4

Location

Fujitsu - Eight Mile Plains

Uptime

Down 3 days, 21m 37s

ALERT

Modifyhttp://cacti.bettacomputers.com.au/device/device=62/tab=alert/alert_entry=3336/

Alert

Device is offline

Entity

bne-fuji-rtr01.tp.dchttp://cacti.bettacomputers.com.au/device/device=62/

Conditions

device_status equals 0 (0)

Metrics

device_status = 0

Duration

3 days, 10m 21s (2016-03-01 08:00:21)

Device

Device

bne-fuji-rtr01.tp.dchttp://cacti.bettacomputers.com.au/device/device=62/

Hardware

snFastIronStackICX6450PRouter

Operating System

Brocade FastIron/IronWare 07.4.00T313

Location

Fujitsu EMP

Uptime

Down 3 days, 10m 21s

Regards,

Cameron Murray Senior Communications Manager How am I doing? Please click herehttp://www.techpath.com.au/contact-us/feedback/ to rate my work. [cid:image001.png@01D175EF.DA063B10]http://www.techpath.com.au/

P 1300 033 300 F 07 3809 3999 E cameron@techpath.com.au

www.techpath.com.auhttp://www.techpath.com.au

Unit 2/55 Tradelink Rd, Hillcrest QLD 4118 [Facebook]http://www.facebook.com/techpathau

[Twitter]http://twitter.com/techpathau

[LinkedIn]http://www.linkedin.com/company/techpathau

Note: This message may contain privileged and confidential information that is the property of the intended recipient. The information herein is intended only for use of the addressee. If you are not the intended recipient, then you are requested to return e-mail to TechPath Pty Ltd and destroy any copies made. Copying or disseminating any of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of TechPath Pty Ltd. From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: Wednesday, 2 March 2016 9:44 AM To: observium@observium.org Subject: Re: [Observium] SNMP access via poller issues

This is probably something you need mike to look at, he's way more familiar with the changes around the snmp code than I am :D

adam.

On 01/03/2016 23:40:01, Cameron Murray <cameron@techpath.com.aumailto:cameron@techpath.com.au> wrote:

Hi Adam,

Here are the details of our install:

Version Information Observium

0.16.2.7635 (29th February 2016)

OS

Linux 2.6.32-573.3.1.el6.x86_64 [amd64] (CentOS 6.7)

Apache

2.2.15 (CentOS)

PHP

5.5.28

Python

2.6.6

MySQL

5.1.73 (extension: mysqli 5.1.73)

SNMP

NET-SNMP 5.5

RRDtool

1.3.8

Regards,

Cameron Murray

Senior Communications Manager

TechPath

P: 1300 033 300

F: 07 3809 3999

E: cameron@techpath.com.aumailto:cameron@techpath.com.au

Unit 2/55 Tradelink Rd, Hillcrest QLD 4118

Formerly Betta Computer Services

www.techpath.com.auhttp://www.techpath.com.au

Note: This message may contain privileged and confidential information that is the property of the intended recipient. The information herein is intended only for use of the addressee. If you are not the intended recipient, then you are requested to return e-mail to TechPath Pty Ltd and destroy any copies made. Copying or disseminating any of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of TechPath Pty Ltd.

-----Original Message----- From: observium [mailto:observium-bounces@observium.org] On Behalf Of Adam Armstrong Sent: Tuesday, 1 March 2016 9:31 AM To: Observium Network Observation System <observium@observium.orgmailto:observium@observium.org> Subject: Re: [Observium] SNMP access via poller issues

Hi Cameron,

That's odd. We did recently add code to try to reduce false positive failed SNMP queries, are you running stable or trunk? (The new code is only in trunk)

Adam.

On Feb 29, 2016 23:12, Cameron Murray <cameron@techpath.com.aumailto:cameron@techpath.com.au> wrote:

Guys,

Overnight we received a lot of alerts for device going offline however these were false positives. We’ve found that the poller is having issues connecting to some devices.

Brocade ICX Switch

Cisco 2900 series

RouterOS

SNMP is working via snmpwalk on the machine running obs and also from other test locations however the poller times out on them. We’ve reset the configuration for the devices in obs however access still fails. Access appears to come and go. We’ve confirmed obs is up to date and have rebooted the services.

Regards,

Cameron Murray

Senior Communications Manager

How am I doing? Please click here to rate my work.

P 1300 033 300

F 07 3809 3999

E cameron@techpath.com.aumailto:cameron@techpath.com.au

www.techpath.com.auhttp://www.techpath.com.au

Unit 2/55 Tradelink Rd, Hillcrest QLD 4118

Note: This message may contain privileged and confidential information that is the property of the intended recipient. The information herein is intended only for use of the addressee. If you are not the intended recipient, then you are requested to return e-mail to TechPath Pty Ltd and destroy any copies made. Copying or disseminating any of this message is prohibited. Any views expressed in this message are those of the individual sender and may not necessarily reflect the views of TechPath Pty Ltd.

_______________________________________________

observium mailing list

observium@observium.orgmailto:observium@observium.org

http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Hi,

If you run the poller in debug, you'll see the SNMP queries, whcih will probably verify that for some reason, some fo these devices are not exposing the IPSEC in SNMP.

Not at all uncommon for devices to randomly not expose data via SNMP. Most vendors have horribly bad QA on their SNMP stacks.

./poller.php -h <host> -m cipsec-tunnels -d

adam.

Sent from Mailbird [http://www.getmailbird.com/?utm_source=Mailbird&utm_medium=email&utm...] On 04/03/2016 03:24:37, Warren Daly (OPUS) warren@opus.com.kh wrote: Hi, thanks for Observium. Excellent install, and day to day experience with this fine product.

We have 10x Cisco 5510 ASA firewalls on our WAN. They all run IOS 9.1.6. There are various IKEv1 and v2 VPN tunnels setup between them. There are no routing protocols such as BGP, OSPF activated on any of them. Pretty basic configs to be honest. Every one of them has at least 1 default route in the config. Reverse route injection on the tunnel.

My main goal is to monitor traffic in/out of the VPN tunnels. This was easily achieved on most of the devices... after polling the routing tab appeared in Observium web interface. When I click on 'Routing' I can see the ipsec tunnels being graphed.

Wondering why a number of the CIsco ASA do not show a routing tab in the Observium menu. And the ones that do have a routing tab are missing some tunnel info and graphs. I've diff'd the Cisco configs, but can't spot anything that would affect the poller not detecting the IPSec tunnels. I tried to search the archives for a similar issue but the link 404's on this page http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

The device that have no routing tab on the web interface are polled and show this

##### Module Start: cipsec-tunnels ##### o Module time 0.1326s

as you can see there is no Tunnel detected.

On the other devices with routing menu on the web interface, some ipsec tunnel graphs are missing. When I run the poller it shows this..... ##### Module Start: cipsec-tunnels ##### Tunnel 5292 (21958656) Address x.x.x.x HC Tunnel 7713 (36671488) Address y.y.y.y HC Tunnel 7714 () Address HC o Module time 4.6601s

Notice how HC Tunnel 7714 has no ip. Odd, as this tunnel is up and passing traffic. This graph is missing from the web interface. It's only IKEv2 wondering if this causes an issue?

Devices are all polled using SNMP v2c The monitoring machine runs Version: CE 0.16.1.7533 Ubuntu 14.04.4 LTS 64 Bit

Any help is greatly appreciated. Regards, Warren

-- Warren Daly Chief Technical Officer

_______________________________________________ observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium