Hi Mohan
Hi all

> I've worked on using wondershaper on LEAF. I would now like to show flow
> statistics using rrdtool or the likes.
I'm using the 'wondershaper' for 1/2 year now, but on Dachstein. (with CBQ)
AFAIK, rrdtool is the follower of MRTG, isn't it? I've never used rrdtool,
but I'm using MRTG to monitor my Dachstein Firewall.

> 1. Where is the class based flow info stored? How do I retrieve it?
I view my class statistics from time to time via console:
tc -s class show dev eth[number]

If you want to collect these values via SNMP, you have to write a shell
script which parses the output and then add the script to your SNMP
configuration. Then, everytime you "ask" your Firewall for this information,
the script is executed.
I'm using this to monitor the number (amount) of masq'ed connections:
/usr/sbin/masqstat.sh:
<sof>
#!/bin/sh
ipchains -M -L -nv|grep -c -
<eof>

in /usr/share/snmp/snmpd.conf:
<snip>
###################################################
# Executables/scripts
#
<snip>
exec masqstat /usr/sbin/masqstat.sh
exec otherscript /usr/sbin/otherscript.sh

Then you can access these values via:
snmpwalk [host] [community string] .1.3.6.1.4.1.2021.8.1.101.1 -> result of
masqstat.sh
snmpwalk [host] [community string] .1.3.6.1.4.1.2021.8.1.101.2 -> result of
otherscript.sh

Or in the MRTG config file (for masqstat.sh):
Target[192.168.10.254_masqstat]:.1.3.6.1.4.1.2021.8.1.101.1&.1.3.6.1.4.1.202
1.8.1.101.1:[EMAIL PROTECTED]
MaxBytes[192.168.10.254_masqstat]: 50
Title[192.168.10.254_masqstat]: Number of MASQ'ed Connections
PageTop[192.168.10.254_masqstat]: <H1>Number of MASQ'ed Connections</H1>
Unscaled[192.168.10.254_masqstat]: ymwd
Options[192.168.10.254_masqstat]: gauge,integer,nopercent,growright
ShortLegend[192.168.10.254_masqstat]: #
YLegend[192.168.10.254_masqstat]: # of Connections
Legend1[192.168.10.254_masqstat]: #
LegendI[192.168.10.254_masqstat]: Conn.

> 2. Has anyone tried SNMP agent on LEAF? experience - has it been good? If
> good, which modules/ packages and sequence of modules to be loaded.
Yes, I'm using Net-SNMPD shipped with Dachstein in conjunction with my MRTG
statistics.
It works well, no problems yet. You can get this package at:
http://leaf.sourceforge.net/devel/cstein/files/diskimages/dachstein-CD/CD-Co
ntents/netsnmpd.lrp

> 3. Has anyone done this before and am I reinventing the wheel?
AFAIK, nobody (on the list) is using MRTG or rrdtool to monitor TC class
statistics

> 4. Is rrdtool available as a package on Bering? If not, can
> someone compile it and publish it please? I wish I had the
> wherewithal to do so - still not experienced enough.
I'm running MRTG on a seperate Linux server, not on the firewall itself.
MRTG is perl, so I only had to install perl on my server to get MRTG
running.

> 5. Has anyone tried running perl on a LEAF box?
No, I don't know if this is a good idea...

Hope this helps

--
Sandro Minola           | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch    | http://leaf.sourceforge.net/devel/sminola




-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to