Re: SNMP Query Optimisation Suggestions

MaxOIDs is your throttle.

Sent from my iPad

On May 21, 2012, at 5:37 AM, Kerry Milestone <[email protected]> wrote:

> Hello there,
> 
> this is perhaps something that the project should maybe look at, as an
> additional option to throttle snmp queries for particular hosts.
> 
> We have a multitude of switches/routers that we poll.  They are modern, some
> stacked with hundreds of ports and in some cases the management CPU is dual core.
> 
> However, the switches and routers are designed such that almost all compute is
> done on FPGA chips as close to the physical port as possible - and obviously
> very good for networking performance.
> 
> The functions that are left over, are done on the main CPU.  One such function
> is of course SNMP.
> 
> We have a couple of monitoring systems and cacti which all use SNMP.  As with
> Robert, I have seen the CPU hit 100% which times out queries.  Investigation
> pointed to the SNMP process on the switch and mitigation was to stagger the
> crons on the various monitoring tools from overlapping.
> 
> 
> I do like the shear volume of queries that can be sent with cacti in a single
> go, and the threaded polling on cacti is rather good.
> 
> 
> As a workaround, it could be possible I guess to use SNMPd in a proxy format and
> fire this off through something like twistedsnmp
> (http://twistedsnmp.sourceforge.net/) for throttling but I suspect that trying
> to buffer UDP will cause more trouble than it's worth.
> 
> 
> Regards,
> Kerry.
> 
> 
> 
> 
> 
> On 14/05/12 22:35, Gandalf wrote:
>> I'm not aware of any throttling mechanism. In fact, we try to fire as many
>> requests as possible against our targets to be able to poll more items within a
>> given time. Sp, personally, I'm not aware of any workaround
>> Reinhard
> -- 
> --------------------------------------
> .- Kerry Milestone                  -.
> .- Principle Network Engineer       -.
> .- Wellcome Trust Sanger Institute  -.
> --------------------------------------
> 
> 
> -- 
> The Wellcome Trust Sanger Institute is operated by Genome Research 
> Limited, a charity registered in England with number 1021457 and a 
> company registered in England with number 2742969, whose registered 
> office is 215 Euston Road, London, NW1 2BE. 
> 
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and 
> threat landscape has changed and how IT managers can respond. Discussions 
> will include endpoint security, mobile security and the latest in malware 
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> cacti-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/cacti-user

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/