[mrtg] Re: PIX-515 Graphs for CPU/Connections

Mike Wren mwren at burnsmcd.com
Tue Feb 25 16:27:47 MET 2003


The CPU part looks OK, I assume that the OID is not on the same line as
the "TARGET" option due to e-mail software wrapping lines.

The Connection part I think needs a larger MaxBytes value.  I usually
have close to 1000 connections, with peaks up to 3000 on my graph.

Michael Wren
Senior Network Analyst
Burns & McDonnell Engineering
P.O. Box 419173
Kansas City, MO 64141-6173
mwren at burnsmcd.com
816-822-3160


>>> Bill Parker <dogbert at netnevada.net> 02/25/2003 1:37:58 AM >>>

Hi All,

	When I use this in MRTG, I get graphs for the interfaces, but NO
values 
for the CPU Usage and Connections.

#####################################################################
#
# Section for PIX-515E Firewalls (Primary/Backup
#
#####################################################################

#  to get bits instead of bytes and graphs growing to the right
Options[_]: growright, bits

######################################################################
# System: pix
# Description: Cisco PIX Firewall Version 6.2(2)
#
# Contact: Mark Gavin/Bill Parker
# Location:
######################################################################

Target[pix_515E.cpu]:
1.3.6.1.4.1.9.9.109.1.1.1.1.4.1&1.3.6.1.4.1.9.9.109.1.1.1.1.5.1:dbsinfo at 172.21.4.253

YLegend[pix_515E.cpu]: Percent
ShortLegend[pix_515E.cpu]: %
Legend1[pix_515E.cpu]: 1 Min. CPU Util.
Legend2[pix_515E.cpu]: 5 Min. CPU Util.
Legend3[pix_515E.cpu]: Maximum 1 Min. CPU Util.
Legend4[pix_515E.cpu]: Maximum 5 Min. CPU Util.
LegendI[pix_515E.cpu]: &nbsp;1Min CPU:&nbsp;
LegendO[pix_515E.cpu]: &nbsp;5Min CPU:&nbsp;
WithPeak[pix_515E.cpu]: ywm
MaxBytes[pix_515E.cpu]: 100
Options[pix_515E.cpu]: growright, gauge, nopercent
Title[pix_515E.cpu]: Pix PIX-515E CPU Utilization
#Directory[pix_515E.cpu]: PIX-515E
PageTop[pix_515E.cpu]: <H1>PIX-515E (Primary) CPU Utilization</H1>
   <TABLE>
     <TR><TD>System:</TD><TD>PIX-515E (Primary) </TD></TR>
     <TR><TD>Description:</TD><TD>PIX-515E (Primary)</TD></TR>
     <TR><TD>Maintainer:</TD><TD>Mark Gavin/Bill Parker</TD></TR>
     <TR><TD>Resource:</TD><TD>PIX-515E CPU Usage</TD></TR>
   </TABLE>

#---------------------------------------------------------------
# This Report File Template measures Connections on a PIX Firewall
# number of connections currently in use by the entire firewall
# Example CFGNAME : [DEVICE NAME]-cisco_pix_connections

Target[conn]:
1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6&.1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.7:dbsinfo at 172.21.4.253

YLegend[conn]: Connections
ShortLegend[conn]: connections
MaxBytes[conn]: 50
Options[conn]: nopercent, gauge, unknaszero
Unscaled[conn]: dwmy
Legend1[conn]: PIX-515E (Primary) User Connections
Legend2[conn]: Max Connections since reboot
Legend3[conn]: Max value per interval on graph
Legend4[conn]: .
LegendI[conn]: Reading.
LegendO[conn]: Since Reboot.
Title[conn]: PIX Firewall
PageTop[conn]: <H1>PIX-515E Firewall (Primary) - Connection
stats.</H1>
Colours[conn]: GREEN#00eb0c,BLUE#0000ff,GRAY#AAAAAA,VIOLET#ff00ff
WithPeak[conn]: ymw


### Interface 1 >> Descr: 'PIX Firewall 'outside' interface' | Name: ''
| 
Ip: '12.110.34.253' | Eth: '00-09-b7-f7-68-c0' ###

Target[172.21.4.253_1]: 1:dbsinfo at 172.21.4.253: 
SetEnv[172.21.4.253_1]: MRTG_INT_IP="xx.xxx.xx.xxx" MRTG_INT_DESCR="PIX

Firewall 'outside' interface"
MaxBytes[172.21.4.253_1]: 12500000
Title[172.21.4.253_1]: Traffic Analysis for PIX-515E (Primary) -
Outside
PageTop[172.21.4.253_1]: <H1>Traffic Analysis for PIX-515E (Primary) -

Outside</H1>
  <TABLE>
    <TR><TD>System:</TD>     <TD>PIX-515E (Primary) </TD></TR>
    <TR><TD>Maintainer:</TD> <TD>Mark Gavin/Bill Parker</TD></TR>
    <TR><TD>Description:</TD><TD>PIX-515E Firewall 'outside' interface

(Primary)</TD></TR>
    <TR><TD>ifType:</TD>     <TD>Ethernet CSMA/CD</TD></TR>
    <TR><TD>ifName:</TD>     <TD>PIX-515E Outside Interface</TD></TR>
    <TR><TD>Max Speed:</TD>  <TD>12.5 MBytes/s</TD></TR>
    <TR><TD>Ip:</TD>         <TD>xx.xxx.xx.xxx (External IP address for

PIX-515E (Primary))</TD></TR>
  </TABLE>


### Interface 2 >> Descr: 'PIX Firewall 'inside' interface' | Name: ''
| 
Ip: '172.21.4.253' | Eth: '00-09-b7-f7-68-c1' ###
    <TR><TD>System:</TD>     <TD>PIX-515E (Primary) </TD></TR>
    <TR><TD>Maintainer:</TD> <TD>Mark Gavin/Bill Parker</TD></TR>
    <TR><TD>Description:</TD><TD>PIX-515E Firewall 'outside' interface

(Primary)</TD></TR>
    <TR><TD>ifType:</TD>     <TD>Ethernet CSMA/CD</TD></TR>
    <TR><TD>ifName:</TD>     <TD>PIX-515E Outside Interface</TD></TR>
    <TR><TD>Max Speed:</TD>  <TD>12.5 MBytes/s</TD></TR>
    <TR><TD>Ip:</TD>         <TD>xx.xxx.xx.xxx (External IP address for

PIX-515E (Primary))</TD></TR>
  </TABLE>


### Interface 2 >> Descr: 'PIX Firewall 'inside' interface' | Name: ''
| 
Ip: '172.21.4.253' | Eth: '00-09-b7-f7-68-c1' ###

Target[172.21.4.253_2]: 2:dbsinfo at 172.21.4.253: 
SetEnv[172.21.4.253_2]: MRTG_INT_IP="172.21.4.253" MRTG_INT_DESCR="PIX

Firewall 'inside' interface"
MaxBytes[172.21.4.253_2]: 12500000
Title[172.21.4.253_2]: Traffic Analysis for PIX-515E (Primary) -
Inside
PageTop[172.21.4.253_2]: <H1>Traffic Analysis for PIX-515E (Primary) -

Inside</H1>
  <TABLE>
    <TR><TD>System:</TD>     <TD>PIX-515E (Primary) </TD></TR>
    <TR><TD>Maintainer:</TD> <TD>Mark Gavin/Bill Parker</TD></TR>
    <TR><TD>Description:</TD><TD>PIX-515E Firewall 'inside' interface 
(Primary)</TD></TR>
    <TR><TD>ifType:</TD>     <TD>Ethernet CSMA/CD</TD></TR>
    <TR><TD>ifName:</TD>     <TD>PIX-515E Inside Interface</TD></TR>
    <TR><TD>Max Speed:</TD>  <TD>12.5 MBytes/s</TD></TR>
    <TR><TD>Ip:</TD>         <TD>172.21.4.253 (Internal IP address for

PIX-515E (Primary))</TD></TR></TD></TR>
  </TABLE>


### Interface 6 >> Descr: 'PIX Firewall 'Stateful_Failover' interface'
| 
Name: '' | Ip: '' | Eth: '00-e0-b6-06-99-38' ###

Target[172.21.4.253_6]: 6:dbsinfo at 172.21.4.253: 
SetEnv[172.21.4.253_6]: MRTG_INT_IP="" MRTG_INT_DESCR="PIX Firewall 
'Stateful_Failover' interface"
MaxBytes[172.21.4.253_6]: 12500000
Title[172.21.4.253_6]: Traffic Analysis for PIX-515E (Primary) -
Failover
PageTop[172.21.4.253_6]: <H1>Traffic Analysis for PIX-515E (Primary) -

Failover</H1>
  <TABLE>
    <TR><TD>System:</TD>     <TD>PIX-515E (Primary) </TD></TR>
    <TR><TD>Maintainer:</TD> <TD>Mark Gavin/Bill Parker</TD></TR>
    <TR><TD>Description:</TD><TD>PIX-515E Firewall 'Stateful Failover'

Interface</TD></TR>
    <TR><TD>ifType:</TD>     <TD>Ethernet CSMA/CD</TD></TR>
    <TR><TD>ifName:</TD>     <TD>PIX-515E Stateful Failover
Interface</TD></TR>
    <TR><TD>Max Speed:</TD>  <TD>12.5 MBytes/s</TD></TR>
  </TABLE>

What am I doing wrong for the CPU and Connections, if someone could
give me 
a clue :)

-Bill

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe 
Archive     http://www.ee.ethz.ch/~slist/mrtg 
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org 
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi 



--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi



More information about the mrtg mailing list