Re: Cisco PIX / ASA Firewall CPU / Mem no value

Francois Mikus <[email protected]> Mon, 23 Mar 2009 09:16:52 -0400
Newsgroups gmane.network.cricket.user
Message-ID <[email protected]>
Hello,

This was certainly fixed in revisions in the move to genDevConfig.

I no longer patch genRtrConfig, as there is no reason not to move to =

genDevConfig. The update is backward compatible, except in rare cases, =

where the functionalit=E0y was already broken in genRtrConfig.

If anyone has OID updates and sysObjectId's for the latest PIX versions =

I can add those to genDevConfig.

Cheers,

Francois Mikus

Danilo Castro Dy NCS wrote:
>
> /Hi Francois,/
>
> / /
>
> /I=92m able to get a graph for Memory (both ASA and PIX). Since there is =

> a problem with Cricket=92s =93Defaults=94 OID for CPU. I did the followin=
g;/
>
> / /
>
> /-----------/
>
> /Defaults =96 Remove CPU from =93ds=94 and =93view=94/
>
> /-----------/
>
> /From=85/
>
> /targetType Cisco-PIX-Firewall/
>
> / ds =3D "cpmCPUTotal1min, cpmCPUTotal5min, mem5minUsed, mem5minFree"/
>
> / view =3D "cpu: cpmCPUTotal1min cpmCPUTotal5min,/
>
> / memory: mem5minUsed mem5minFree"/
>
> / /
>
> /To=85/
>
> /targetType Cisco-PIX-Firewall/
>
> / ds =3D "mem5minUsed, mem5minFree"/
>
> / view =3D " memory: mem5minUsed mem5minFree"/
>
> / /
>
> /-----------/
>
> /targets =96 Replace =93collect=94 with =93class=94 and =93target-type=94=
. Changes =

> to =93target-type=94 can be ignored since it has the same =93ds=94 and =
=93view=94 =

> with =93Generic-device=94. /
>
> /----------/
>
> /From=85./
>
> /target Chassis-Generic/
>
> / collect =3D false/
>
> / inst =3D 0/
>
> / long-desc =3D "Cisco Adaptive Security Appliance Version 8.0(4)"/
>
> / order =3D 999/
>
> / short-desc =3D " type of chassis"/
>
> / target-type =3D Generic-Device/
>
> / /
>
> /To=85/
>
> /target Chassis/
>
> / class =3D cisco/
>
> / inst =3D 0/
>
> / long-desc =3D "Cisco Adaptive Security Appliance Version 8.0(4)"/
>
> / order =3D 999/
>
> / short-desc =3D " type of chassis"/
>
> / target-type =3D Cisco-PIX-Firewall/
>
> / /
>
> / /
>
> /I will update Cricket=92s Defaults OID for CPU and inform you of the =

> result./
>
> / /
>
> /Regards,/
>
> /Dandy/
>
> / /
>
> /
> ------------------------------------------------------------------------
> /
>
> */From:/* Danilo Castro Dy NCS
> *Sent:* Monday, March 23, 2009 12:26 PM
> *To:* Francois Mikus
> *Cc:* [email protected]
> *Subject:* RE: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value
>
> / /
>
> /Hi Francois,/
>
> / /
>
> /Still not getting anything from the logs with =93debug level=94./
>
> / /
>
> /Using MRTG, I able to get a value. I use the following OID in MRTG/
>
> / /
>
> /Target[pix-asa-firewall.cpu]: =

> 1.3.6.1.4.1.9.9.109.1.1.1.1.5.1&1.3.6.1.4.1.9.9.109.1.1.1.1.4.1:community=
@pix-asa-firewall/
>
> /Target[pix-asa-firewall.mempercent]: =

> 1.3.6.1.4.1.9.9.48.1.1.1.5.1&1.3.6.1.4.1.9.9.48.1.1.1.6.1:community@pix-a=
sa-firewall/
>
> / /
>
> /In Cricket Defaults, the OID for memory are exactly the same with =

> MRTG but not the CPU./
>
> /OID mem5minUsed 1.3.6.1.4.1.9.9.48.1.1.1.5.1/
>
> /OID mem5minFree 1.3.6.1.4.1.9.9.48.1.1.1.6.1/
>
> /OID cpmCPUTotal1min 1.3.6.1.4.1.9.9.109.1.1.1.1.4/
>
> /OID cpmCPUTotal5min 1.3.6.1.4.1.9.9.109.1.1.1.1.5/
>
> / /
>
> /Regards,/
>
> /Dandy/
>
> / /
>
> /-----Original Message-----
> From: Danilo Castro Dy NCS [mailto:[email protected]]
> Sent: Monday, March 23, 2009 12:10 PM
> To: Francois Mikus
> Cc: [email protected]
> Subject: Re: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value/
>
> / /
>
> /Hi Francois,/
>
> / /
>
> / /
>
> / /
>
> /Thank you very much for replying. I will try your suggestions./
>
> / /
>
> / /
>
> / /
>
> /I have both PIX-515e and ASA5510/ASA5520 and all having the same problem/
>
> /- no graph for CPU and Memory but interfaces are okay./
>
> / /
>
> / /
>
> / /
>
> /Regards,/
>
> / /
>
> /Dandy/
>
> / /
>
> / /
>
> / /
>
> /-----Original Message-----/
>
> /From: Francois Mikus [mailto:[email protected]] /
>
> /Sent: Monday, March 23, 2009 5:34 AM/
>
> /To: Danilo Castro Dy NCS/
>
> /Cc: [email protected]/
>
> /Subject: Re: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value/
>
> / /
>
> / /
>
> / /
>
> /Hello Danilo,/
>
> / /
>
> / /
>
> / /
>
> /Increase your logging level and see if you are receiving data back from /
>
> / /
>
> /your firewall in your logs./
>
> / /
>
> / /
>
> / /
>
> /You can also try having genDevConfig/genRtrConfig try and recognize the /
>
> / /
>
> /device and create your target for you./
>
> / /
>
> / /
>
> / /
>
> /It could be that the MIBs have changed with the latest version of the /
>
> / /
>
> /ASA software. I have not tried it against a 8.x ASA./
>
> / /
>
> / /
>
> / /
>
> /Cheers,/
>
> / /
>
> / /
>
> / /
>
> /Francois Mikus/
>
> / /
>
> / /
>
> / /
>
> /Danilo Castro Dy NCS wrote:/
>
> / /
>
> /> Sry, sent the email fast :)/
>
> / /
>
> /> /
>
> / /
>
> /> Beside not getting anything from the graph, I don't received any error/
>
> / /
>
> /> in the cricket log and debugging./
>
> / /
>
> /> /
>
> / /
>
> /> Can anyone advice me what I may be doing wrong?/
>
> / /
>
> /> /
>
> / /
>
> /> Thanks in advance./
>
> / /
>
> /> /
>
> / /
>
> /> Dandy/
>
> / /
>
> /> /
>
> / /
>
> /> -----Original Message-----/
>
> / /
>
> /> From: Danilo Castro Dy NCS [mailto:[email protected]] /
>
> / /
>
> /> Sent: Sunday, March 22, 2009 3:45 PM/
>
> / /
>
> /> To: [email protected]/
>
> / /
>
> /> Subject: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value/
>
> / /
>
> /> /
>
> / /
>
> /> Hi,/
>
> / /
>
> /> /
>
> / /
>
> /> I'm not getting a value in my Cisco PIX / ASA CPU / Mem graph (no/
>
> / /
>
> /> problem with interfaces). I use genRtrConfig to generate the targets./
>
> / /
>
> /> /
>
> / /
>
> /> I have this for the chassis.../
>
> / /
>
> /> /
>
> / /
>
> /> ------------genRtrConfig default-------------/
>
> / /
>
> /> target Chassis-Generic/
>
> / /
>
> /> collect =3D false/
>
> / /
>
> /> inst =3D 0/
>
> / /
>
> /> long-desc =3D "Cisco Cisco PIX Security Appliance Version/
>
> / /
>
> /> 7.2(2)"/
>
> / /
>
> /> order =3D 999/
>
> / /
>
> /> short-desc =3D " type of chassis"/
>
> / /
>
> /> target-type =3D Generic-Device/
>
> / /
>
> /> /
>
> / /
>
> /> /
>
> / /
>
> /> I change it to this.../
>
> / /
>
> /> /
>
> / /
>
> /> -----------amended------------------/
>
> / /
>
> /> target Chassis-Generic/
>
> / /
>
> /> inst =3D 0/
>
> / /
>
> /> long-desc =3D "Cisco Cisco PIX Security Appliance Version/
>
> / /
>
> /> 7.2(2)"/
>
> / /
>
> /> order =3D 999/
>
> / /
>
> /> short-desc =3D " type of chassis"/
>
> / /
>
> /> target-type =3D Cisco-PIX-Firewall/
>
> / /
>
> /> /
>
> / /
>
> /> Thanks,/
>
> / /
>
> /> Dandy/
>
> / /
>
> /> /
>
> /------------------------------------------------------------------------/
>
> / /
>
> /> ------/
>
> / /
>
> /> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM)/
>
> /are/
>
> / /
>
> /> powering Web 2.0 with engaging, cross-platform capabilities. Quickly/
>
> /and/
>
> / /
>
> /> easily build your RIAs with Flex Builder, the Eclipse(TM)based/
>
> / /
>
> /> development/
>
> / /
>
> /> software that enables intelligent coding and step-through debugging./
>
> / /
>
> /> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com/
>
> / /
>
> /> _______________________________________________/
>
> / /
>
> /> cricket-users mailing list/
>
> / /
>
> /> [email protected]/
>
> / /
>
> /> https://lists.sourceforge.net/lists/listinfo/cricket-users/
>
> / /
>
> /> /
>
> / /
>
> /> /
>
> /------------------------------------------------------------------------/
>
> /------/
>
> / /
>
> /> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM)/
>
> /are/
>
> / /
>
> /> powering Web 2.0 with engaging, cross-platform capabilities. Quickly/
>
> /and/
>
> / /
>
> /> easily build your RIAs with Flex Builder, the Eclipse(TM)based/
>
> /development/
>
> / /
>
> /> software that enables intelligent coding and step-through debugging./
>
> / /
>
> /> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com/
>
> / /
>
> /> _______________________________________________/
>
> / /
>
> /> cricket-users mailing list/
>
> / /
>
> /> [email protected]/
>
> / /
>
> /> https://lists.sourceforge.net/lists/listinfo/cricket-users/
>
> / /
>
> /> /
>
> / /
>
> /------------------------------------------------------------------------=
------/
>
> /Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are/
>
> /powering Web 2.0 with engaging, cross-platform capabilities. Quickly and/
>
> /easily build your RIAs with Flex Builder, the Eclipse(TM)based =

> development/
>
> /software that enables intelligent coding and step-through debugging./
>
> /Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com/
>
> /_______________________________________________/
>
> /cricket-users mailing list/
>
> /[email protected]/
>
> /https://lists.sourceforge.net/lists/listinfo/cricket-users/
>


---------------------------------------------------------------------------=
---
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com