For the Checkpoint MIB you need to look in $CPDIR/lib/snmp/chkpnt.mib Use this file with your mib browser or snmpwalk / get to find what is available. Most of what you've mentioned is included.
Here are some excerpts from my mrtg.cfg: >>>> LoadMIBs: /usr/share/snmp/mibs/chkpnt.mib # Connections table entries Target[fwtab]: fwNumConn.0&fwNumConn.0:[EMAIL PROTECTED]:260 SetEnv[fwtab]: MRTG_INT_IP="172.16.39.1" MRTG_INT_DESCR="fw-1 Active connections" Options[fwtab]: nopercent,gauge,noinfo,absolute,noo Title[fwtab]: Number of Firewall-1 Connections Table entries Maxbytes[fwtab]: 12000 AbsMax[fwtab]: 25000 YLegend[fwtab]: FW-1 Conns ShortLegend[fwtab]: | LegendI[fwtab]: entries Legend1[fwtab]: Firewall-1 Connections Legend3[fwtab]: Max FW-1 Connections PageTop[fwtab]: <H1>Number of Firewall-1 Connections Table entries</H1> # FW-1 Accepted Packets (another way of doing it using explicit OID doesn't need # LoadMIBs) Target[fwaccepts]: .1.3.6.1.4.1.2620.1.1.4.0&.1.3.6.1.4.1.2620.1.1.4.0:[EMAIL PROTECTED]:2 60 SetEnv[fwaccepts]: MRTG_INT_IP="172.16.39.1" MRTG_INT_DESCR="fw-1 total Accepts" Options[fwaccepts]: nopercent,noinfo,perminute,noo Title[fwaccepts]: Number of Firewall-1 total Accepted Packets MaxBytes[fwaccepts]: 100000 YLegend[fwaccepts]: FW-1 Accepts / min ShortLegend[fwaccepts]: | LegendI[fwaccepts]: packets Legend1[fwaccepts]: FW-1 Accepted Packets Legend3[fwaccepts]: Max FW-1 Accepted Packets PageTop[fwaccepts]: <H1>Number of Firewall-1 Accepted Packets</H1> <<<< As for configuring mrtg the MRTG Configuration reference is an excellent resource. There is also a good MRTG list HTH, Don Harvie -----Original Message----- From: Shane Presley [mailto:[EMAIL PROTECTED] Sent: Thursday, 1 July 2004 12:00 AM To: [EMAIL PROTECTED] Subject: [FW-1] MRTG Config This is related to my previous email about monitoring a FW-1 system for throughput. Thanks for the comments. I've made some progress getting SmartView Monitor to do what I need! If I want to setup MRTG as well, does anyone have any hints or references? I have MRTG setup and running, monitoring a cisco router. That was pretty easy. But I'm having trouble getting a working mrtg.cfg for monitoring the CheckPoint specific MIBs. I'm especially interested in connections, accepted/dropped connections, etc. I'm not very familiar with OID's or MIB files, so that may be my problem. But I've enabled SNMP from my host to the firewall, turned on the CheckPoint SNMP agent on port 260. I also poked around in $FWDIR/lib/snmp, and the only file there is wellfleet.mib and I'm having trouble interpreting it, and setting up mrtg.cfg to use it? This is NG AI R55 on Solaris 8. Thanks! Shane ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
