Re: Looking for SNMP myths

2009-10-06 Thread Traiano Welcome
Hi


Michael Schwartzkopff wrote:
 Hi,

 I am preparing a talk about the SNMP protocol and especially about the net-
 snmp implementation on a network monitoring conference. I am looking for the 
 most common and most widespread prejudice against using SNMP. Of course 
 anybody heard about SNMP not beeing safe, SNMP filling up the network or SNMP 
 not beeing reliable.

 Please mail me any other myths about SNMP you heard. My talk should 
 invalidate 
 all these claims.

   

One of the most common excuses I hear is Too much SNMP Polling will 
load the router CPU too much, with respect to polling or walking 
certain sub-trees of router mibs for high-end cisco routers. Although it 
is possible to place some router models under resource strain if you 
really try, I hear this excuse used often to create obstacles to 
monitoring certain router/switch sub-trees. I think it would be 
excellent if you could clear up once and for all what kind of load SNMP 
polling patterns would place on various common series of 
routers/switches. Bearing in mind many high end routers effectively 
implement their SNMP agents in dedicated feature cards, so overloading 
the route processors is not possible ...

 Thanks for interesting mails.

   

Regards,
Traiano Welcome

TENET

--
Come build with us! The BlackBerryreg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9#45;12, 2009. Register now#33;
http://p.sf.net/sfu/devconf
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Tools for Statistical Processing of snmptrapd data

2009-09-04 Thread Traiano Welcome
Many thanks, Mike! This has been helpful.

Regards,
T.


Mike Ayers wrote:
 From: Traiano Welcome [mailto:twelc...@tenet.ac.za]
 Sent: Thursday, September 03, 2009 2:43 AM
 

   
 It looks like best option would be to script something to parse
 snmptrapd logs and draw these stats periodically.
 

   You can also customize the format that traps are logged in, which 
 should help make parsing easier.

   
 Looking at my snmptrapd.log, I see traps come through  with what seems
 to identify the sending host:  [UDP: [196.21.61.1]:64714]:

 ---
 2009-09-03 11:33:45 UNKNOWN [UDP: [196.21.61.1]:64714]:
 .1.3.6.1.2.1.1.3.0 = Timeticks: (325635303) 37 days, 16:32:33.03
 .1.3.6.1.6.3.1.1.4.1.0 = OID: .1.3.6.1.6.3.1.1.5.5
 .1.3.6.1.4.1.9.2.1.5.0 = IpAddress: 196.26.130.34
 .1.3.6.1.4.1.9.9.412.1.1.1.0 = INTEGER: ipv4(1)
 .1.3.6.1.4.1.9.9.412.1.1.2.0 = STRING:
 ---

 Although the host specified above might be  proxy for other hosts, I'd
 be able to differentiate knowing the location of the agents, and still
 draw some kind of rough statistics on the 'highest sending proxy'. Does
 this sound reasonable?
 

   Yes, you seem to understand the key issue - forwarded traps don't have 
 an indication of their source.  One workaround for this is to use different 
 community names for each source engine, but this has its drawbacks, mostly in 
 administrative overhead.

   
  I was hoping for builtin features :-) Anyhow, I think the best option
 here would be to use a generic munin plugin to monitor snmptrapd.
 

   You could also install snmpd with the host resources MIBs, if they're 
 supported on your system.


   HTH,

 Mike

   


--
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Re: Tools for Statistical Processing of snmptrapd data

2009-09-03 Thread Traiano Welcome
Hi Mike


Mike Ayers wrote:
 From: Traiano Welcome [mailto:twelc...@tenet.ac.za]
 Sent: Wednesday, September 02, 2009 1:40 AM
 


   
  Are there any widely used scripts for extracting performance statistics
 from snmptrapd and it's logs? We would like to monitor the trap
 collector and get stats like the following:

  1. What hosts are sending traps to the collector, and what is the
 highest sending host by volume for a given day
  2. Which host is sending traps at the highest rate?
  3. What is the most frequently sent trap in any given time interval (15
 mins - 60 mins)
 

   Intermediary logic (glue logic) like this is rarely prepackaged, 
 because it is specific to the data generator, the target presentation system, 
 and the data you wish to display.  You may want to review the available free 
 NMS packages to see what they may provide out of the box.

   Note that community based (v1/v2c) traps do not contain source 
 identifiers.

   

It looks like best option would be to script something to parse 
snmptrapd logs and draw these stats periodically.

Looking at my snmptrapd.log, I see traps come through  with what seems 
to identify the sending host:  [UDP: [196.21.61.1]:64714]:

---
2009-09-03 11:33:45 UNKNOWN [UDP: [196.21.61.1]:64714]: 
.1.3.6.1.2.1.1.3.0 = Timeticks: (325635303) 37 days, 16:32:33.03
.1.3.6.1.6.3.1.1.4.1.0 = OID: .1.3.6.1.6.3.1.1.5.5  
.1.3.6.1.4.1.9.2.1.5.0 = IpAddress: 196.26.130.34
.1.3.6.1.4.1.9.9.412.1.1.1.0 = INTEGER: ipv4(1) 
.1.3.6.1.4.1.9.9.412.1.1.2.0 = STRING:
---

Although the host specified above might be  proxy for other hosts, I'd 
be able to differentiate knowing the location of the agents, and still 
draw some kind of rough statistics on the 'highest sending proxy'. Does 
this sound reasonable?


 Also, are there any tools available to monitor the resource utilisation
 of snmptrapd, i.e cpu, memory?
 

   Use whatever you use to monitor any other process on your system.  
 There's nothing special about snmptrapd that way.

   

 I was hoping for builtin features :-) Anyhow, I think the best option 
here would be to use a generic munin plugin to monitor snmptrapd.


   HTH,

 Mike

   
Many Thanks,
T.G.W



--
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users


Tools for Statistical Processing of snmptrapd data

2009-09-02 Thread Traiano Welcome
Hi List

 Are there any widely used scripts for extracting performance statistics 
from snmptrapd and it's logs? We would like to monitor the trap 
collector and get stats like the following:

 1. What hosts are sending traps to the collector, and what is the 
highest sending host by volume for a given day
 2. Which host is sending traps at the highest rate?
 3. What is the most frequently sent trap in any given time interval (15 
mins - 60 mins)

Also, are there any tools available to monitor the resource utilisation 
of snmptrapd, i.e cpu, memory?

Thanks in Advance,
T.G.W

TENET (Tertiary Education and Research Network)

--
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
___
Net-snmp-users mailing list
Net-snmp-users@lists.sourceforge.net
Please see the following page to unsubscribe or change other options:
https://lists.sourceforge.net/lists/listinfo/net-snmp-users