[mrtg] PIX 515 CPU Usage Total

[McDaniel, Scott]

I have found several references to OID's and reports for graphing the CPU
usage on PIX firewalls, particularly the PIX 515.  However, when I walk my
PIX, I do not show the same values.  I found the following section on
Cisco's website:

*	PIX Firewall Software Versions 4.0 until 5.1: System and Interface
groups of MIB-II but not the AT, ICMP, TCP, UDP, EGP, transmission, IP, or
SNMP groups CISCO-SYSLOG-MIB-V1SMI.my
<ftp://ftp.cisco.com/pub/mibs/v1/CISCO-SYSLOG-MIB-V1SMI.my> .
*	PIX Firewall Software Versions 5.1.X and later: Previous MIBs and
CISCO-MEMORY-POOL-MIB.my
<ftp://ftp.cisco.com/pub/mibs/v2/CISCO-MEMORY-POOL-MIB.my>  and the
cfwSystem branch of the CISCO-FIREWALL-MIB.my
<ftp://ftp.cisco.com/pub/mibs/v2/CISCO-FIREWALL-MIB.my> .
*	PIX Firewall Software Versions 5.2.X and later: Previous MIBs and
the ipAddrTable of the IP group.
*	PIX Firewall Software Versions 6.0.X and later: Previous MIBs and
modification of the MIB-II OID to identify PIX by model (and enable
CiscoView 5.2 support). The new object identifiers (OIDs) are found in the
CISCO-PRODUCTS-MIB <ftp://ftp.cisco.com/pub/mibs/oid/CISCO-PRODUCTS-MIB.oid>
; for example, the PIX 515 has the OID 1.3.6.1.4.1.9.1.390.
*	PIX Firewall Software Versions 6.2.x and later: Previous MIBs and
CISCO-PROCESS-MIB-V1SMI.my
<ftp://ftp.cisco.com/pub/mibs/v1/CISCO-PROCESS-MIB-V1SMI.my> .
Note: The supported section of the PROCESS MIB is the cpmCPUTotalTable
branch of the cpmCPU branch of the ciscoProcessMIBObjects branch. There is
no support for the ciscoProcessMIBNotifications branch,
ciscoProcessMIBconformance branch, or the two tables, cpmProcessTable and
cpmProcessExtTable, in the cpmProcess branch of the ciscoProcessMIBObjects
branch of the MIB.

I am running 6.0.x on my firewall, and the highest OID I find is
.iso.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.7, which points at buffers.  Nothing
about CPU.  The above points me at a different MIB which is supported with a
higher version of the IOS than I have.  Do I need to upgrade my IOS on the
PIX or am I just missing something when it comes to adding MIB's into the
correct place to walk it?  

Thanks in advance.  If the answer is some sort of rtfm, would you point me
at the right fm....?  I feel like I am missing something "simple."

Scott McDaniel


--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi