[mrtg] Getting No Response messages, but I see the traffic

[Ed Stafford]

I have a setup that doesn't seem to be working correctly:

A Cisco 2501(191.1.7.1), OpenBSD 2.7 system(191.1.7.2 / 191.1.5.1), and RH Linux 6.2 system (191.1.7.1).

The OpenBSD system is acting as a firewall between the Cisco and RH systems running an ipf ruleset.  The RH system has MRTG on it.  If I run cfgmaker public at 191.1.7.1, all it does is gives me no response errors that look like:

--base: Get Device Info on public at 191.1.7.1SNMP Error:
no response received
SNMPv1_Session (remote host: "191.1.7.1" [191.1.7.1].161)
                  community: "public"
                 request ID: 1821081878
                PDU bufsize: 8000 bytes
                    timeout: 2s
                    retries: 5
                    backoff: 1)
SNMPGET Problem for sysDescr sysContact sysName sysLocation sysObjectID on public at 191.1.7.1:
 at ./cfgmaker line 448
--base: Vendor Id: 
--base: Populating confcache
SNMP Error:
no response received
SNMPv1_Session (remote host: "191.1.7.1" [191.1.7.1].161)
                  community: "public"
                 request ID: 1821081879
                PDU bufsize: 8000 bytes
                    timeout: 2s
                    retries: 5
                    backoff: 1)
SNMPWALK Problem for 1.3.6.1.2.1.2.2.1.2 on public at 191.1.7..1:
 at /usr/local/mrtg/bin/../lib/mrtg2/MRTG_lib.pm line 1218

I do have rules in /etc/ipf.rules that allow  port 161 and 162 traffic to go back and forth between the RH and Cisco boxes.  If I monitor the traffic on the OpenBSD box, I get a TON of traffic listed.  I don't understand why MRTG doesn't work.  Here is a snippet of the ipf log:

May 17 17:10:10 wishbone ipmon[18498]: 17:10:10.144597             fxp0 @0:64 b 191.1.7.1,161 -> 191.1.5.2,1864 PR udp len 20 79  IN 
May 17 17:10:12 wishbone ipmon[18498]: 17:10:12.143497             fxp0 @0:64 b 191.1.7.1,161 -> 191.1.5.2,1864 PR udp len 20 79  IN 

I'm not wholey familiar with OpenBSD ipf rulesets, so it's entirely possible I don't have something set up quite right.  Please let me know.  I don't have spare equipment to throw around :(

Ed Stafford

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi