Re: Cisco PIX / ASA Firewall CPU / Mem no value

Hi,

 =


I'm able to get a graph for memory for both ASA and PIX. I'm not able to ge=
t the CPU graph. The reason I used genRtrConfig is because its in stable ve=
rsion. I tried using genDevConfig but I receive a lot of errors. Since I'm =
already monitoring a lot of devices, I will not force to move to genDevConf=
ig for this time.

 =


Thanks,

Dandy

 =


-----Original Message-----
From: Francois Mikus [mailto:[email protected]] =

Sent: Monday, March 23, 2009 9:17 PM
To: Danilo Castro Dy NCS
Cc: [email protected]
Subject: Re: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value

 =


Hello,

 =


This was certainly fixed in revisions in the move to genDevConfig.

 =


I no longer patch genRtrConfig, as there is no reason not to move to =


genDevConfig. The update is backward compatible, except in rare cases, =


where the functionalit=E0y was already broken in genRtrConfig.

 =


If anyone has OID updates and sysObjectId's for the latest PIX versions =


I can add those to genDevConfig.

 =


Cheers,

 =


Francois Mikus

 =


Danilo Castro Dy NCS wrote:

> =


> /Hi Francois,/

> =


> / /

> =


> /I'm able to get a graph for Memory (both ASA and PIX). Since there is =


> a problem with Cricket's "Defaults" OID for CPU. I did the following;/

> =


> / /

> =


> /-----------/

> =


> /Defaults - Remove CPU from "ds" and "view"/

> =


> /-----------/

> =


> /From.../

> =


> /targetType Cisco-PIX-Firewall/

> =


> / ds =3D "cpmCPUTotal1min, cpmCPUTotal5min, mem5minUsed, mem5minFree"/

> =


> / view =3D "cpu: cpmCPUTotal1min cpmCPUTotal5min,/

> =


> / memory: mem5minUsed mem5minFree"/

> =


> / /

> =


> /To.../

> =


> /targetType Cisco-PIX-Firewall/

> =


> / ds =3D "mem5minUsed, mem5minFree"/

> =


> / view =3D " memory: mem5minUsed mem5minFree"/

> =


> / /

> =


> /-----------/

> =


> /targets - Replace "collect" with "class" and "target-type". Changes =


> to "target-type" can be ignored since it has the same "ds" and "view" =


> with "Generic-device". /

> =


> /----------/

> =


> /From..../

> =


> /target Chassis-Generic/

> =


> / collect =3D false/

> =


> / inst =3D 0/

> =


> / long-desc =3D "Cisco Adaptive Security Appliance Version 8.0(4)"/

> =


> / order =3D 999/

> =


> / short-desc =3D " type of chassis"/

> =


> / target-type =3D Generic-Device/

> =


> / /

> =


> /To.../

> =


> /target Chassis/

> =


> / class =3D cisco/

> =


> / inst =3D 0/

> =


> / long-desc =3D "Cisco Adaptive Security Appliance Version 8.0(4)"/

> =


> / order =3D 999/

> =


> / short-desc =3D " type of chassis"/

> =


> / target-type =3D Cisco-PIX-Firewall/

> =


> / /

> =


> / /

> =


> /I will update Cricket's Defaults OID for CPU and inform you of the =


> result./

> =


> / /

> =


> /Regards,/

> =


> /Dandy/

> =


> / /

> =


> /

> ------------------------------------------------------------------------

> /

> =


> */From:/* Danilo Castro Dy NCS

> *Sent:* Monday, March 23, 2009 12:26 PM

> *To:* Francois Mikus

> *Cc:* [email protected]

> *Subject:* RE: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value

> =


> / /

> =


> /Hi Francois,/

> =


> / /

> =


> /Still not getting anything from the logs with "debug level"./

> =


> / /

> =


> /Using MRTG, I able to get a value. I use the following OID in MRTG/

> =


> / /

> =


> /Target[pix-asa-firewall.cpu]: =


> 1.3.6.1.4.1.9.9.109.1.1.1.1.5.1&1.3.6.1.4.1.9.9.109.1.1.1.1.4.1:community=
@pix-asa-firewall/

> =


> /Target[pix-asa-firewall.mempercent]: =


> 1.3.6.1.4.1.9.9.48.1.1.1.5.1&1.3.6.1.4.1.9.9.48.1.1.1.6.1:community@pix-a=
sa-firewall/

> =


> / /

> =


> /In Cricket Defaults, the OID for memory are exactly the same with =


> MRTG but not the CPU./

> =


> /OID mem5minUsed 1.3.6.1.4.1.9.9.48.1.1.1.5.1/

> =


> /OID mem5minFree 1.3.6.1.4.1.9.9.48.1.1.1.6.1/

> =


> /OID cpmCPUTotal1min 1.3.6.1.4.1.9.9.109.1.1.1.1.4/

> =


> /OID cpmCPUTotal5min 1.3.6.1.4.1.9.9.109.1.1.1.1.5/

> =


> / /

> =


> /Regards,/

> =


> /Dandy/

> =


> / /

> =


> /-----Original Message-----

> From: Danilo Castro Dy NCS [mailto:[email protected]]

> Sent: Monday, March 23, 2009 12:10 PM

> To: Francois Mikus

> Cc: [email protected]

> Subject: Re: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value/

> =


> / /

> =


> /Hi Francois,/

> =


> / /

> =


> / /

> =


> / /

> =


> /Thank you very much for replying. I will try your suggestions./

> =


> / /

> =


> / /

> =


> / /

> =


> /I have both PIX-515e and ASA5510/ASA5520 and all having the same problem/

> =


> /- no graph for CPU and Memory but interfaces are okay./

> =


> / /

> =


> / /

> =


> / /

> =


> /Regards,/

> =


> / /

> =


> /Dandy/

> =


> / /

> =


> / /

> =


> / /

> =


> /-----Original Message-----/

> =


> /From: Francois Mikus [mailto:[email protected]] /

> =


> /Sent: Monday, March 23, 2009 5:34 AM/

> =


> /To: Danilo Castro Dy NCS/

> =


> /Cc: [email protected]/

> =


> /Subject: Re: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value/

> =


> / /

> =


> / /

> =


> / /

> =


> /Hello Danilo,/

> =


> / /

> =


> / /

> =


> / /

> =


> /Increase your logging level and see if you are receiving data back from /

> =


> / /

> =


> /your firewall in your logs./

> =


> / /

> =


> / /

> =


> / /

> =


> /You can also try having genDevConfig/genRtrConfig try and recognize the /

> =


> / /

> =


> /device and create your target for you./

> =


> / /

> =


> / /

> =


> / /

> =


> /It could be that the MIBs have changed with the latest version of the /

> =


> / /

> =


> /ASA software. I have not tried it against a 8.x ASA./

> =


> / /

> =


> / /

> =


> / /

> =


> /Cheers,/

> =


> / /

> =


> / /

> =


> / /

> =


> /Francois Mikus/

> =


> / /

> =


> / /

> =


> / /

> =


> /Danilo Castro Dy NCS wrote:/

> =


> / /

> =


> /> Sry, sent the email fast :)/

> =


> / /

> =


> /> /

> =


> / /

> =


> /> Beside not getting anything from the graph, I don't received any error/

> =


> / /

> =


> /> in the cricket log and debugging./

> =


> / /

> =


> /> /

> =


> / /

> =


> /> Can anyone advice me what I may be doing wrong?/

> =


> / /

> =


> /> /

> =


> / /

> =


> /> Thanks in advance./

> =


> / /

> =


> /> /

> =


> / /

> =


> /> Dandy/

> =


> / /

> =


> /> /

> =


> / /

> =


> /> -----Original Message-----/

> =


> / /

> =


> /> From: Danilo Castro Dy NCS [mailto:[email protected]] /

> =


> / /

> =


> /> Sent: Sunday, March 22, 2009 3:45 PM/

> =


> / /

> =


> /> To: [email protected]/

> =


> / /

> =


> /> Subject: [cricket-users] Cisco PIX / ASA Firewall CPU / Mem no value/

> =


> / /

> =


> /> /

> =


> / /

> =


> /> Hi,/

> =


> / /

> =


> /> /

> =


> / /

> =


> /> I'm not getting a value in my Cisco PIX / ASA CPU / Mem graph (no/

> =


> / /

> =


> /> problem with interfaces). I use genRtrConfig to generate the targets./

> =


> / /

> =


> /> /

> =


> / /

> =


> /> I have this for the chassis.../

> =


> / /

> =


> /> /

> =


> / /

> =


> /> ------------genRtrConfig default-------------/

> =


> / /

> =


> /> target Chassis-Generic/

> =


> / /

> =


> /> collect =3D false/

> =


> / /

> =


> /> inst =3D 0/

> =


> / /

> =


> /> long-desc =3D "Cisco Cisco PIX Security Appliance Version/

> =


> / /

> =


> /> 7.2(2)"/

> =


> / /

> =


> /> order =3D 999/

> =


> / /

> =


> /> short-desc =3D " type of chassis"/

> =


> / /

> =


> /> target-type =3D Generic-Device/

> =


> / /

> =


> /> /

> =


> / /

> =


> /> /

> =


> / /

> =


> /> I change it to this.../

> =


> / /

> =


> /> /

> =


> / /

> =


> /> -----------amended------------------/

> =


> / /

> =


> /> target Chassis-Generic/

> =


> / /

> =


> /> inst =3D 0/

> =


> / /

> =


> /> long-desc =3D "Cisco Cisco PIX Security Appliance Version/

> =


> / /

> =


> /> 7.2(2)"/

> =


> / /

> =


> /> order =3D 999/

> =


> / /

> =


> /> short-desc =3D " type of chassis"/

> =


> / /

> =


> /> target-type =3D Cisco-PIX-Firewall/

> =


> / /

> =


> /> /

> =


> / /

> =


> /> Thanks,/

> =


> / /

> =


> /> Dandy/

> =


> / /

> =


> /> /

> =


> /------------------------------------------------------------------------/

> =


> / /

> =


> /> ------/

> =


> / /

> =


> /> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM)/

> =


> /are/

> =


> / /

> =


> /> powering Web 2.0 with engaging, cross-platform capabilities. Quickly/

> =


> /and/

> =


> / /

> =


> /> easily build your RIAs with Flex Builder, the Eclipse(TM)based/

> =


> / /

> =


> /> development/

> =


> / /

> =


> /> software that enables intelligent coding and step-through debugging./

> =


> / /

> =


> /> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com/

> =


> / /

> =


> /> _______________________________________________/

> =


> / /

> =


> /> cricket-users mailing list/

> =


> / /

> =


> /> [email protected]/

> =


> / /

> =


> /> https://lists.sourceforge.net/lists/listinfo/cricket-users/

> =


> / /

> =


> /> /

> =


> / /

> =


> /> /

> =


> /------------------------------------------------------------------------/

> =


> /------/

> =


> / /

> =


> /> Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM)/

> =


> /are/

> =


> / /

> =


> /> powering Web 2.0 with engaging, cross-platform capabilities. Quickly/

> =


> /and/

> =


> / /

> =


> /> easily build your RIAs with Flex Builder, the Eclipse(TM)based/

> =


> /development/

> =


> / /

> =


> /> software that enables intelligent coding and step-through debugging./

> =


> / /

> =


> /> Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com/

> =


> / /

> =


> /> _______________________________________________/

> =


> / /

> =


> /> cricket-users mailing list/

> =


> / /

> =


> /> [email protected]/

> =


> / /

> =


> /> https://lists.sourceforge.net/lists/listinfo/cricket-users/

> =


> / /

> =


> /> /

> =


> / /

> =


> /------------------------------------------------------------------------=
------/

> =


> /Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are/

> =


> /powering Web 2.0 with engaging, cross-platform capabilities. Quickly and/

> =


> /easily build your RIAs with Flex Builder, the Eclipse(TM)based =


> development/

> =


> /software that enables intelligent coding and step-through debugging./

> =


> /Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com/

> =


> /_______________________________________________/

> =


> /cricket-users mailing list/

> =


> /[email protected]/

> =


> /https://lists.sourceforge.net/lists/listinfo/cricket-users/

> =


---------------------------------------------------------------------------=
---
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com