Re: Cisco PIX / ASA Firewall CPU / Mem no value

"Danilo Castro Dy NCS" <[email protected]> Mon, 23 Mar 2009 13:19:40 +0800
Newsgroups gmane.network.cricket.user
Message-ID <7F921417E319DC4298A6726B1DECFE3C01C92FFE@ncsmailsg03.ncs.corp.int-ads>
Hi Francois,

 

I'm able to get a graph for Memory (both ASA and PIX). Since there is a
problem with Cricket's "Defaults" OID for CPU. I did the following;

 

-----------

Defaults - Remove CPU from "ds" and "view"

-----------

From...

targetType         Cisco-PIX-Firewall

            ds                     =          "cpmCPUTotal1min,
cpmCPUTotal5min, mem5minUsed, mem5minFree"

            view      =          "cpu: cpmCPUTotal1min cpmCPUTotal5min,

                 memory: mem5minUsed mem5minFree"

 

To...

targetType         Cisco-PIX-Firewall

            ds                     =          "mem5minUsed, mem5minFree"

            view      =          " memory: mem5minUsed mem5minFree"

 

-----------

targets - Replace "collect" with "class" and "target-type". Changes to
"target-type" can be ignored since it has the same "ds" and "view" with
"Generic-device". 

----------

From....

target Chassis-Generic

  collect             = false

   inst                            = 0

   long-desc                   = "Cisco Adaptive Security Appliance
Version 8.0(4)"

   order              = 999

   short-desc                  = " type of chassis"

   target-type                  = Generic-Device

 

To...

target Chassis

   class             = cisco

   inst                            = 0

   long-desc                   = "Cisco Adaptive Security Appliance
Version 8.0(4)"

   order              = 999

   short-desc                  = " type of chassis"

   target-type                  = Cisco-PIX-Firewall

 

 

I will update Cricket's Defaults OID for CPU and inform you of the
result.

 

Regards,

Dandy

 

________________________________

From: Danilo Castro Dy NCS 
Sent: Monday, March 23, 2009 12:26 PM
To: Francois Mikus
Cc: [email protected]
Subject: RE: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value

 

Hi Francois,

 

Still not getting anything from the logs with "debug level".

 

Using MRTG, I able to get a value. I use the following OID in MRTG

 

Target[pix-asa-firewall.cpu]:
1.3.6.1.4.1.9.9.109.1.1.1.1.5.1&1.3.6.1.4.1.9.9.109.1.1.1.1.4.1:communit
y@pix-asa-firewall

Target[pix-asa-firewall.mempercent]:
1.3.6.1.4.1.9.9.48.1.1.1.5.1&1.3.6.1.4.1.9.9.48.1.1.1.6.1:community@pix-
asa-firewall

 

In Cricket Defaults, the OID for memory are exactly the same with MRTG
but not the CPU.

OID   mem5minUsed             1.3.6.1.4.1.9.9.48.1.1.1.5.1

OID   mem5minFree             1.3.6.1.4.1.9.9.48.1.1.1.6.1

OID     cpmCPUTotal1min             1.3.6.1.4.1.9.9.109.1.1.1.1.4

OID     cpmCPUTotal5min             1.3.6.1.4.1.9.9.109.1.1.1.1.5

 

Regards,

Dandy

 

-----Original Message-----
From: Danilo Castro Dy NCS [mailto:[email protected]] 
Sent: Monday, March 23, 2009 12:10 PM
To: Francois Mikus
Cc: [email protected]
Subject: Re: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value

 

Hi Francois,

 

 

 

Thank you very much for replying. I will try your suggestions.

 

 

 

I have both PIX-515e and ASA5510/ASA5520 and all having the same problem

- no graph for CPU and Memory but interfaces are okay.

 

 

 

Regards,

 

Dandy

 

 

 

-----Original Message-----

From: Francois Mikus [mailto:[email protected]] 

Sent: Monday, March 23, 2009 5:34 AM

To: Danilo Castro Dy NCS

Cc: [email protected]

Subject: Re: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value

 

 

 

Hello Danilo,

 

 

 

Increase your logging level and see if you are receiving data back from 

 

your firewall in your logs.

 

 

 

You can also try having genDevConfig/genRtrConfig try and recognize the 

 

device and create your target for you.

 

 

 

It could be that the MIBs have changed with the latest version of the 

 

ASA software. I have not tried it against a 8.x ASA.

 

 

 

Cheers,

 

 

 

Francois Mikus

 

 

 

Danilo Castro Dy NCS wrote:

 

> Sry, sent the email fast :)

 

> 

 

> Beside not getting anything from the graph, I don't received any error

 

> in the cricket log and debugging.

 

> 

 

> Can anyone advice me what I may be doing wrong?

 

> 

 

> Thanks in advance.

 

> 

 

> Dandy

 

> 

 

> -----Original Message-----

 

> From: Danilo Castro Dy NCS [mailto:[email protected]] 

 

> Sent: Sunday, March 22, 2009 3:45 PM

 

> To: [email protected]

 

> Subject: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value

 

> 

 

> Hi,

 

> 

 

> I'm not getting a value in my Cisco PIX / ASA CPU / Mem graph (no

 

> problem with interfaces). I use genRtrConfig to generate the targets.

 

> 

 

> I have this for the chassis...

 

> 

 

> ------------genRtrConfig default-------------

 

> target Chassis-Generic

 

>    collect            = false

 

>    inst               = 0

 

>    long-desc          = "Cisco Cisco PIX Security Appliance Version

 

> 7.2(2)"

 

>    order        = 999

 

>    short-desc         = " type of chassis"

 

>    target-type        = Generic-Device

 

> 

 

> 

 

> I change it to this...

 

> 

 

> -----------amended------------------

 

> target Chassis-Generic

 

>    inst               = 0

 

>    long-desc          = "Cisco Cisco PIX Security Appliance Version

 

> 7.2(2)"

 

>    order        = 999

 

>    short-desc         = " type of chassis"

 

>    target-type        = Cisco-PIX-Firewall

 

> 

 

> Thanks,

 

> Dandy

 

> 

------------------------------------------------------------------------

 

> ------

 

> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM)

are

 

> powering Web 2.0 with engaging, cross-platform capabilities. Quickly

and

 

> easily build your RIAs with Flex Builder, the Eclipse(TM)based

 

> development

 

> software that enables intelligent coding and step-through debugging.

 

> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com

 

> _______________________________________________

 

> cricket-users mailing list

 

> [email protected]

 

> https://lists.sourceforge.net/lists/listinfo/cricket-users

 

> 

 

> 

------------------------------------------------------------------------

------

 

> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM)

are

 

> powering Web 2.0 with engaging, cross-platform capabilities. Quickly

and

 

> easily build your RIAs with Flex Builder, the Eclipse(TM)based

development

 

> software that enables intelligent coding and step-through debugging.

 

> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com

 

> _______________________________________________

 

> cricket-users mailing list

 

> [email protected]

 

> https://lists.sourceforge.net/lists/listinfo/cricket-users

 

>   

 

------------------------------------------------------------------------
------

Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are

powering Web 2.0 with engaging, cross-platform capabilities. Quickly and

easily build your RIAs with Flex Builder, the Eclipse(TM)based
development

software that enables intelligent coding and step-through debugging.

Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com

_______________________________________________

cricket-users mailing list

[email protected]

https://lists.sourceforge.net/lists/listinfo/cricket-users

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com