[mrtg] Re: PIX 515 CPU Usage Total

Keith E Johnson kj at sunclipse.com
Thu Feb 20 20:44:44 MET 2003 


To monitor the CPU on a pix with snmp, you need to be running at least 6.2.

I got around this by using a script to telnet to the pix and download the
stats.

I also collect a few other stats
Current Connections (SNMP)
Current Connections - TCP
Current Connections - UDP
Fixups FTP
Fixups HTTP
Fixups TCP
Urls being sent to Websense
Current Xlates
Memory (SNMP)


Keith Johnson
Lan Administrator
Amcor Sunclipse North America
6600 Valley View Street, Buena Park, CA 90620
Voice: 714.562.6179 Fax: 714.562.2036
Email: keith.johnson at sunclipse.com


-----Original Message-----
From: Degore, L R, SOLCM [mailto:rdegore at att.com] 
Sent: Thursday, February 20, 2003 11:06 AM
To: Marcos Guerra; McDaniel, Scott; mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: PIX 515 CPU Usage Total


Guys,

Not sure if you have seen this one, but if not give it a try:

.1.3.6.1.4.1.9.9.147.1.2.1.1.1.1


The hardware type for which this row provides status information


memory (1)
disk (2)
power (3)
netInterface (4)
cpu (5)
primaryUnit (6)
secondaryUnit (7)
other (8)

Rich DeGore
rdegore at att.com



-----Original Message-----
From: Marcos Guerra [mailto:Marcos.Guerra at br.flextronics.com]
Sent: Thursday, February 20, 2003 1:49 PM
To: McDaniel, Scott; mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: PIX 515 CPU Usage Total



Hi Scoot,

You and I have the same problem. 
The only difference is that I'm using a PIX 520.
I'm looking for the OID to monitor the CPU and it's almost impossible to
find it. I tryed trought Cisco Web Site, Google and SnmpWalk.

-----Original Message-----
From: McDaniel, Scott [mailto:mcdaniel.scott at bgsd.k12.wa.us]
Sent: Thursday, February 20, 2003 3:06 PM
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] PIX 515 CPU Usage Total


I have found several references to OID's and reports for graphing the CPU
usage on PIX firewalls, particularly the PIX 515.  However, when I walk my
PIX, I do not show the same values.  I found the following section on
Cisco's website:

*	PIX Firewall Software Versions 4.0 until 5.1: System and Interface
groups of MIB-II but not the AT, ICMP, TCP, UDP, EGP, transmission, IP, or
SNMP groups CISCO-SYSLOG-MIB-V1SMI.my
<ftp://ftp.cisco.com/pub/mibs/v1/CISCO-SYSLOG-MIB-V1SMI.my> .
*	PIX Firewall Software Versions 5.1.X and later: Previous MIBs and
CISCO-MEMORY-POOL-MIB.my
<ftp://ftp.cisco.com/pub/mibs/v2/CISCO-MEMORY-POOL-MIB.my>  and the
cfwSystem branch of the CISCO-FIREWALL-MIB.my
<ftp://ftp.cisco.com/pub/mibs/v2/CISCO-FIREWALL-MIB.my> .
*	PIX Firewall Software Versions 5.2.X and later: Previous MIBs and
the ipAddrTable of the IP group.
*	PIX Firewall Software Versions 6.0.X and later: Previous MIBs and
modification of the MIB-II OID to identify PIX by model (and enable
CiscoView 5.2 support). The new object identifiers (OIDs) are found in the
CISCO-PRODUCTS-MIB <ftp://ftp.cisco.com/pub/mibs/oid/CISCO-PRODUCTS-MIB.oid>
; for example, the PIX 515 has the OID 1.3.6.1.4.1.9.1.390.
*	PIX Firewall Software Versions 6.2.x and later: Previous MIBs and
CISCO-PROCESS-MIB-V1SMI.my
<ftp://ftp.cisco.com/pub/mibs/v1/CISCO-PROCESS-MIB-V1SMI.my> .
Note: The supported section of the PROCESS MIB is the cpmCPUTotalTable
branch of the cpmCPU branch of the ciscoProcessMIBObjects branch. There is
no support for the ciscoProcessMIBNotifications branch,
ciscoProcessMIBconformance branch, or the two tables, cpmProcessTable and
cpmProcessExtTable, in the cpmProcess branch of the ciscoProcessMIBObjects
branch of the MIB.

I am running 6.0.x on my firewall, and the highest OID I find is
.iso.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.7, which points at buffers.  Nothing
about CPU.  The above points me at a different MIB which is supported with a
higher version of the IOS than I have.  Do I need to upgrade my IOS on the
PIX or am I just missing something when it comes to adding MIB's into the
correct place to walk it?  

Thanks in advance.  If the answer is some sort of rtfm, would you point me
at the right fm....?  I feel like I am missing something "simple."

Scott McDaniel


--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi



--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

More information about the mrtg mailing list