[mrtg] Re: using MRTG with a Cisco Pix 520 firewall

[Kerry Cox]

Larry Prikockis wrote:
> 
> greetings... This may be a silly question, but I've scoured the available
> documentation and whatnot and am still not quite sure of the answer...
> 
> We are using a Cisco Pix firewall, and I'd like to be able to not only graph
> traffic throughput (I've sucessfully used MRTG to do that), but get a
> breakdown by subnet (e.g., total bandwidth for 172.16.5.* vs. total
> bandwidth for 172.16.6.*).
> 
> Is there someone out there who's set up this type of monitoring using MRTG
> with a Pix?  Do I need some additional software to parse out the information
> I want?  Am I totally on the wrong track?  Basically, I'd like to find a
> quick & dirty way to get some basic numbers on bandwidth utilization without
> buying an expensive software package (e.g. WebTrends).
> 
> any clues would be appreciated...
> thanks-
> 
> +
> Larry J. Prikockis
> Internet Systems Specialist, ABI
> (effective in November, ABI will be known as NatureServe)
> ph:703-908-1833 / fax:703-908-1917 / Email:larry_prikockis at abi.org
> www.abi.org * www.natureserve.org * www.infornatura.org
> +
> All parts should go together without forcing.  You must remember that the
> parts you are reassembling were disassembled by you.  Therefore, if you
> can't get them together again, there must be a reason.  By all means, do not
> use a hammer.
>          -- IBM maintenance manual, 1925
> 
> --
> Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
> Archive     http://www.ee.ethz.ch/~slist/mrtg
> FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
> WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi


Larry,
I'm using MRTG (the latest version) to track just the interfaces on a
PIX 525 with no problem. You just need to specifiy the snmp-server host
name or IP address and make certain all the interfaces are live.
I have not tried to break it down by subnets since I have a Cisco 5500
into which all the subnets converge and it is there I trace out the
bandwidth.
If you have need of further details, you can contact me directly.
Hope that helps.
Kerry

-- 

/-----------------------------\  /--------------------------\
|        Kerry J. Cox         |__|    kerry.cox at ksl.com     |
|  System Administrator KSL    __      (801) 575-7771       |
|     http://www.ksl.com/     |  |      ICQ#37681165        |
\-----------------------------/  \--------------------------/

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi