Transfer Historical data to another instance of Observium?

Dano, Leo

28 Mar 2016 28 Mar '16

5:55 p.m.

Good morning all,

I was wondering if there was a way to move some historical data from one Observium to another? Or is there mysql issues with ID's, etc?

Thanks, ----------------------- Leo Dano

Attachments:

attachment.html (text/html — 2.1 KB)

Show replies by date

Adam Armstrong

28 Mar 28 Mar

6:04 p.m.

New subject: Transfer Historical data to another instance of Observium?

You can clone an instance and then delete the data you don't want. You can't move data to another existing install, because IDs would clash.

adam. On 28/03/2016 16:56:08, Dano, Leo ldano@qualcomm.com wrote: Good morning all, I was wondering if there was a way to move some historical data from one Observium to another? Or is there mysql issues with ID’s, etc? Thanks, ----------------------- Leo Dano

Peter.Hine＠familycourt.gov.au

29 Mar 29 Mar

1:44 a.m.

New subject: Transfer Historical data to another instance of Observium? [SEC=UNCLASSIFIED]

if the historical info your after is just graphs, copying the rrd's will work.

thanks

Peter

********************************************************************** The information contained in this e-mail (including any attachments) is for the exclusive use of the addressee. If you are not the intended recipient please notify the sender immediately and delete this e-mail. It is noted that legal privilege is not waived because you have read this e-mail. **********************************************************************

Adam Armstrong

1:45 a.m.

New subject: Transfer Historical data to another instance of Observium? [SEC=UNCLASSIFIED]

Yeah, Peter is correct.

If you add the devices to the new instance and copy over the rrds, that'll work fine.

I'm not sure why I didn't think of that!

Adam.

Sent from BlueMail

On Mar 29, 2016, 00:44, at 00:44, Peter.Hine@familycourt.gov.au wrote:

...

if the historical info your after is just graphs, copying the rrd's will work.

thanks

Peter

The information contained in this e-mail (including any attachments) is for the exclusive use of the addressee. If you are not the intended recipient please notify the sender immediately and delete this e-mail. It is noted that legal privilege is not waived because you have read this e-mail.

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Warren Daly (OPUS)

7:26 a.m.

New subject: snmpwalk observations Cisco ASA 5505

This is related to an IPSEC post I mailed a few weeks ago. I know this is not an Observium issue. Sorry for posting here, but I'm wondering if anybody else noticed this issue. Cisco ASA 5505 Security Plus license. Same IOS version 9.1.6, 1024Mb RAM. Almost identical configurations.

Why would 1 device report cikeTun* values, and the other say 'No Such Object available on this agent at this OID'

Both have active IPSEC tunnels that pass traffic. Any thoughts most welcome. Thank you.

/usr/bin/snmpwalk -v2c -c *** -Pu -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco 'udp':'192.168.1.254':'161' cikeTunnelEntry *cikeTunnelEntry = No Such Object available on this agent at this OID** ** */usr/bin/snmpwalk -v2c -c *** -Pu -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco 'udp':'192.168.20.254':'161' cikeTunnelEntry*

*cikeTunLocalType.10067968 = ipAddrPeer cikeTunLocalType.10207232 = ipAddrPeer cikeTunLocalType.10293248 = ipAddrPeer cikeTunLocalValue.10067968 = x.x.x.x cikeTunLocalValue.10207232 = x.x.x.x cikeTunLocalValue.10293248 = x.x.x.x cikeTunLocalAddr.10067968 = "D2 18 81 82 " cikeTunLocalAddr.10207232 = "D2 18 81 82 " cikeTunLocalAddr.10293248 = "D2 18 81 82 "

Adam Armstrong

7:57 a.m.

New subject: snmpwalk observations Cisco ASA 5505

Excellent Cisco software quality assurance? :D

Adam.

Sent from BlueMail

On Mar 29, 2016, 06:26, at 06:26, "Warren Daly (OPUS)" warren@opus.com.kh wrote:

...

This is related to an IPSEC post I mailed a few weeks ago. I know this is not an Observium issue. Sorry for posting here, but I'm wondering if

anybody else noticed this issue. Cisco ASA 5505 Security Plus license. Same IOS version 9.1.6, 1024Mb RAM. Almost identical configurations.

Why would 1 device report cikeTun* values, and the other say 'No Such Object available on this agent at this OID'

Both have active IPSEC tunnels that pass traffic. Any thoughts most welcome. Thank you.

/usr/bin/snmpwalk -v2c -c *** -Pu -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco

'udp':'192.168.1.254':'161' cikeTunnelEntry *cikeTunnelEntry = No Such Object available on this agent at this OID** ** */usr/bin/snmpwalk -v2c -c *** -Pu -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco

'udp':'192.168.20.254':'161' cikeTunnelEntry*

*cikeTunLocalType.10067968 = ipAddrPeer cikeTunLocalType.10207232 = ipAddrPeer cikeTunLocalType.10293248 = ipAddrPeer cikeTunLocalValue.10067968 = x.x.x.x cikeTunLocalValue.10207232 = x.x.x.x cikeTunLocalValue.10293248 = x.x.x.x cikeTunLocalAddr.10067968 = "D2 18 81 82 " cikeTunLocalAddr.10207232 = "D2 18 81 82 " cikeTunLocalAddr.10293248 = "D2 18 81 82 "

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Warren Daly (OPUS)

9:03 a.m.

New subject: snmpwalk observations Cisco ASA 5505

Totally! The ASA 9.1.6 version has the IKE buffer overflow vulnerability CVE-2016-1287.... So we upgraded to 9.1.7 and found out the Cisco patch was borked, so we had to downgrade to 9.1.6. Pretty sloppy from Cisco. Now they're saying to upgrade to 9.1.7(4).... Somewhat apprehensive ;)

...

Excellent Cisco software quality assurance? :D

Adam.

Sent from BlueMail http://www.bluemail.me/r

On Mar 29, 2016, at 06:26, "Warren Daly (OPUS)" <warren@opus.com.kh mailto:warren@opus.com.kh> wrote:

This is related to an IPSEC post I mailed a few weeks ago. I know
this is not an Observium issue. Sorry for posting here, but I'm
wondering if anybody else noticed this issue.
Cisco ASA 5505 Security Plus license. Same IOS version 9.1.6,
1024Mb RAM. Almost identical configurations.

Why would 1 device report cikeTun* values, and the other say 'No
Such Object available on this agent at this OID'

Both have active IPSEC tunnels that pass traffic. Any thoughts
most welcome. Thank you.

/usr/bin/snmpwalk -v2c -c *** -Pu  -OQUs -m
CISCO-IPSEC-FLOW-MONITOR-MIB -M
/var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco
'udp':'192.168.1.254':'161' cikeTunnelEntry
*cikeTunnelEntry = No Such Object available on this agent at this
OID* *
* *
*/usr/bin/snmpwalk -v2c -c *** -Pu  -OQUs -m
CISCO-IPSEC-FLOW-MONITOR-MIB -M
/var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco
'udp':'192.168.20.254':'161' cikeTunnelEntry *

*cikeTunLocalType.10067968 = ipAddrPeer
cikeTunLocalType.10207232 = ipAddrPeer
cikeTunLocalType.10293248 = ipAddrPeer
cikeTunLocalValue.10067968 = x.x.x.x
cikeTunLocalValue.10207232 = x.x.x.x
cikeTunLocalValue.10293248 = x.x.x.x
cikeTunLocalAddr.10067968 = "D2 18 81 82 "
cikeTunLocalAddr.10207232 = "D2 18 81 82 "
cikeTunLocalAddr.10293248 = "D2 18 81 82 "


------------------------------------------------------------------------

observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

-- Warren Daly Chief Technical Officer +855 (0) 89 288 107 Skype: warrendaly OPUS +855 (0) 23 987 014 www.opus.com.kh Suite 3FN1 - VTrust Office Centre Parkway Square | Phnom Penh, Cambodia

Pedrosi, Derek G.

2:38 p.m.

New subject: snmpwalk observations Cisco ASA 5505

We had the same issues with our 5505s. Cisco pointed us to 9.1.7(4), and we installed it 2 weeks ago. No problems since the upgrade.

derek

From: observium [mailto:observium-bounces@observium.org] On Behalf Of Warren Daly (OPUS) Sent: Tuesday, March 29, 2016 3:03 AM To: Adam Armstrong; Observium Network Observation System Subject: Re: [Observium] snmpwalk observations Cisco ASA 5505

Excellent Cisco software quality assurance? :D

Adam.

Sent from BlueMailhttp://www.bluemail.me/r On Mar 29, 2016, at 06:26, "Warren Daly (OPUS)" <warren@opus.com.khmailto:warren@opus.com.kh> wrote: This is related to an IPSEC post I mailed a few weeks ago. I know this is not an Observium issue. Sorry for posting here, but I'm wondering if anybody else noticed this issue. Cisco ASA 5505 Security Plus license. Same IOS version 9.1.6, 1024Mb RAM. Almost identical configurations.

Why would 1 device report cikeTun* values, and the other say 'No Such Object available on this agent at this OID'

Both have active IPSEC tunnels that pass traffic. Any thoughts most welcome. Thank you.

cikeTunLocalType.10067968 = ipAddrPeer cikeTunLocalType.10207232 = ipAddrPeer cikeTunLocalType.10293248 = ipAddrPeer cikeTunLocalValue.10067968 = x.x.x.x cikeTunLocalValue.10207232 = x.x.x.x cikeTunLocalValue.10293248 = x.x.x.x cikeTunLocalAddr.10067968 = "D2 18 81 82 " cikeTunLocalAddr.10207232 = "D2 18 81 82 " cikeTunLocalAddr.10293248 = "D2 18 81 82 "

________________________________

observium mailing list

observium@observium.orgmailto:observium@observium.org

http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Warren Daly

Chief Technical Officer

+855 (0) 89 288 107 Skype: warrendaly

OPUS

+855 (0) 23 987 014

www.opus.com.khhttp://www.opus.com.kh

Suite 3FN1 - VTrust Office Centre

Parkway Square | Phnom Penh, Cambodia

Warren Daly (OPUS)

30 Mar 30 Mar

2:47 p.m.

New subject: snmpwalk observations Cisco ASA 5505

So I upgraded to ASA 9.1.7(4) and I still can't monitor IPSEC tunnels on 1 of the Firewalls.... (so that would point at a Cisco configuration issue?)

FW1 - working /usr/bin/snmpwalk -v2c -c *** -Pu -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco 'udp':'192.168.20.254':'161' cikeTunnelEntry cikeTunLocalType.260030464 = ipAddrPeer cikeTunLocalType.260034560 = ipAddrPeer .....

FW2 - No such OID /usr/bin/snmpwalk -v2c -c dfdl-snmp -Pu -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco 'udp':'192.168.1.254':'161' cikeTunnelEntry *cikeTunnelEntry = No Such Object available on this agent at this OID*

FW2 - will show entries for OID cikePeerActiveTunnelIndex /usr/bin/snmpwalk -v2c -c dfdl-snmp -Pu -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /var/www/observium/mibs/rfc:/var/www/observium/mibs/net-snmp:/var/www/observium/mibs/cisco 'udp':'bkk-asa':'161' cikePeerActiveTunnelIndex cikePeerActiveTunnelIndex.ipAddrPeer."x.x.x.x".ipAddrPeer."x.x.x.x".500 = 40960 cikePeerActiveTunnelIndex.ipAddrPeer."x.x.x.x".ipAddrPeer."x.x.x.x".500 = 20480 cikePeerActiveTunnelIndex.ipAddrPeer."x.x.x.x".ipAddrPeer."x.x.x.x".500 = 12288

On both Cisco 5505 firewalls I run /show snmp-server oidlist/, and neither list cikeTunnelEntry .1.3.6.1.4.1.9.9.171.1.2.3.1 yet 1 firewall will respond to a walk and the other will not. Pulling my hair out.

[344] 1.3.6.1.4.1.9.9.171.1.2.3.1.2. cikeTunLocalType [345] 1.3.6.1.4.1.9.9.171.1.2.3.1.3. cikeTunLocalValue [346] 1.3.6.1.4.1.9.9.171.1.2.3.1.4. cikeTunLocalAddr [347] 1.3.6.1.4.1.9.9.171.1.2.3.1.5. cikeTunLocalName [348] 1.3.6.1.4.1.9.9.171.1.2.3.1.6. cikeTunRemoteType [349] 1.3.6.1.4.1.9.9.171.1.2.3.1.7. cikeTunRemoteValue [350] 1.3.6.1.4.1.9.9.171.1.2.3.1.8. cikeTunRemoteAddr [351] 1.3.6.1.4.1.9.9.171.1.2.3.1.9. cikeTunRemoteName [352] 1.3.6.1.4.1.9.9.171.1.2.3.1.10. cikeTunNegoMode [353] 1.3.6.1.4.1.9.9.171.1.2.3.1.11. cikeTunDiffHellmanGrp [354] 1.3.6.1.4.1.9.9.171.1.2.3.1.12. cikeTunEncryptAlgo [355] 1.3.6.1.4.1.9.9.171.1.2.3.1.13. cikeTunHashAlgo [356] 1.3.6.1.4.1.9.9.171.1.2.3.1.14. cikeTunAuthMethod [357] 1.3.6.1.4.1.9.9.171.1.2.3.1.15. cikeTunLifeTime [358] 1.3.6.1.4.1.9.9.171.1.2.3.1.16. cikeTunActiveTime [359] 1.3.6.1.4.1.9.9.171.1.2.3.1.17. cikeTunSaRefreshThreshold [360] 1.3.6.1.4.1.9.9.171.1.2.3.1.18. cikeTunTotalRefreshes [361] 1.3.6.1.4.1.9.9.171.1.2.3.1.19. cikeTunInOctets [362] 1.3.6.1.4.1.9.9.171.1.2.3.1.20. cikeTunInPkts [363] 1.3.6.1.4.1.9.9.171.1.2.3.1.21. cikeTunInDropPkts [364] 1.3.6.1.4.1.9.9.171.1.2.3.1.22. cikeTunInNotifys [365] 1.3.6.1.4.1.9.9.171.1.2.3.1.23. cikeTunInP2Exchgs [366] 1.3.6.1.4.1.9.9.171.1.2.3.1.24. cikeTunInP2ExchgInvalids [367] 1.3.6.1.4.1.9.9.171.1.2.3.1.25. cikeTunInP2ExchgRejects [368] 1.3.6.1.4.1.9.9.171.1.2.3.1.26. cikeTunInP2SaDelRequests [369] 1.3.6.1.4.1.9.9.171.1.2.3.1.27. cikeTunOutOctets [370] 1.3.6.1.4.1.9.9.171.1.2.3.1.28. cikeTunOutPkts [371] 1.3.6.1.4.1.9.9.171.1.2.3.1.29. cikeTunOutDropPkts [372] 1.3.6.1.4.1.9.9.171.1.2.3.1.30. cikeTunOutNotifys [373] 1.3.6.1.4.1.9.9.171.1.2.3.1.31. cikeTunOutP2Exchgs [374] 1.3.6.1.4.1.9.9.171.1.2.3.1.32. cikeTunOutP2ExchgInvalids [375] 1.3.6.1.4.1.9.9.171.1.2.3.1.33. cikeTunOutP2ExchgRejects [376] 1.3.6.1.4.1.9.9.171.1.2.3.1.34. cikeTunOutP2SaDelRequests [377] 1.3.6.1.4.1.9.9.171.1.2.3.1.35. cikeTunStatus

3235

Age (days ago)

3237

Last active (days ago)

List overview

Download

8 comments

5 participants

tags (0)

participants (5)

Adam Armstrong
Dano, Leo
Pedrosi, Derek G.
Peter.Hine＠familycourt.gov.au
Warren Daly (OPUS)