Ok,
Here are the first results
I have set up loopback addresses with the same ip address on two
receivers (for testing). (A.A.A.10)
Each receiver has unique external ip adresses in the same subnet as the
$nms_if
First, I created this rule :
pass in on $int_if dup-to ( $nms_if $nms_broadcastad
Hello again,
Ok, I think we are getting closer to a resolution.
I like the loopback solution (never thought of that), it should work for
udp at least since it is connection-less, and it would work for my
scenario and netflow alike.
Then you could add multiple loopbacks to "subscribe" to different
Simen Stavdal wrote:
: Worth submitting a feature request?
: --- I looks like this would be the best solution ---
Sounds like you have your desired solution. So long as the OBSD developers
accept your request as valid.
: --- The subject of my posting is "Duplicating incoming packe
Simen Stavdal wrote, sometime around 05/11/08 15:25:
Hi Russell,
Thanks for your answer.
Sending traps to multicast addresses seems like a good idea, except it
would be up to the receiver to decide whether to use the trap or not
(taking away the possibility to filter which hosts gets copied the
Hi Russell,
Thanks for your answer.
Sending traps to multicast addresses seems like a good idea, except it
would be up to the receiver to decide whether to use the trap or not
(taking away the possibility to filter which hosts gets copied the traps
(multicast traps to predefined destinations)).
I
Hi Damian,
Nothing like a fiery discussion :)
On Wed Nov 5 15:39 , Damian Gerow sent:
Simen Stavdal wrote:
: I am not trying to escape the fact that one needs systems in place
: to manage large installations, I am merely looking for what *I*
: think would be a better way to deploy resour
Simen Stavdal wrote:
: I am not trying to escape the fact that one needs systems in place
: to manage large installations, I am merely looking for what *I*
: think would be a better way to deploy resources.
I'm just going to drop this part of the thread.
: As a service provide
Simen Stavdal wrote, sometime around 05/11/08 14:14:
Hi Damian/misc,
I appreciate your input -I really do.
Please see my comments below.
I am not trying to escape the fact that one needs systems in place to
manage large installations, I am merely looking for what *I* think
would be a bett
Hi Damian/misc,
I appreciate your input -I really do.
Please see my comments below.
Cheers,
Simon.
On Wed Nov 5 14:46 , Damian Gerow sent:
Simen Stavdal wrote:
: 1) Less configuration on the devices (and also less load, though
not a
: big problem anymore). This is not really a problem f
Simen Stavdal wrote:
:1) Less configuration on the devices (and also less load, though not a
:big problem anymore). This is not really a problem for small
:installations, but once you have 500+ devices to configure, it is easy
:to do the maths.
You should always have systems in pla
Hello Damian/Claer/misc,
Thanks for your feedback,
Just a bit more background...
Here is some of my reasoning for wanting to do trap handling and
duplications
There are several advantages to having the devices send only one trap to
a central system.
1) Less configuration on the devices (and a
Claer wrote:
: > Thanks for the answer, I guess dup-to isn4t the right tool then...
: > Has anyone tried to achieve what I am trying to do though?
: > I am obviously open to other ideas.
: Maybe I'll give you a wrong path but, did you looked at "proxying" the
: trap with net-snmp ?
: Direct the or
On Tue, Nov 04 2008 at 02:19, Simen Stavdal wrote:
> Hi Giancarlo/misc,
Hello,
> Thanks for the answer, I guess dup-to isn4t the right tool then...
> Has anyone tried to achieve what I am trying to do though?
> I am obviously open to other ideas.
Maybe I'll give you a wrong path but, did you looke
Simen Stavdal escreveu:
Hi Giancarlo/misc,
Thanks for the answer, I guess dup-to isn4t the right tool then...
Has anyone tried to achieve what I am trying to do though?
I am obviously open to other ideas.
The main objective though, is to preserve the source address, while
replacing the destina
Hi Giancarlo/misc,
Thanks for the answer, I guess dup-to isn4t the right tool then...
Has anyone tried to achieve what I am trying to do though?
I am obviously open to other ideas.
The main objective though, is to preserve the source address, while
replacing the destination address to multiple h
Simen Stavdal escreveu:
Hello,
I have the following scenario.
A router (let's call it router A) is sending snmp traps to an nms
(Network Monitoring System).
Between the router A and the nms (let's call it nms-a) is a Dell
PowerEdge 860 running OpenBSD 4.1 i386 (bsd.mp) and pf.
On the same segme
Hello,
I have the following scenario.
A router (let's call it router A) is sending snmp traps to an nms
(Network Monitoring System).
Between the router A and the nms (let's call it nms-a) is a Dell
PowerEdge 860 running OpenBSD 4.1 i386 (bsd.mp) and pf.
On the same segment as nms-a, is nms-b, nms
17 matches
Mail list logo