[mrtg] Monitoring CISCO-IPSEC SNMP-tables with volatile index

[Michael Markstaller]

Hi,

I'm using mrtg for several years and very happy with it but quite new to the list and as I found nothing in the archives, I'm asking:
What I want to do is to monitor IPSec throughput (octets & packets) with CISCO-IPSEC-FLOW-MONITOR-MIB for EACH IPSec tunnel seperately; 
I have the right OID for the table and according values like in&out octets, but as the table is quite big and the index seems to change frequently, I had a look on cfgmaker and host-templates; Here's where I'm stuck as I'm no perl-guru ;)

Has somebody done such a thing and maybe a (host-/interface) template in which just the base-OID for walking any snmp-table could be exchanged by the one I need with the according values ?
>From what I understand it would be quite simple to walk any other table and create a config-file instead from using ifTable but I don't know how to do this.. I know how to use the example host-template for one value like CPU or mem but not for several entries with volatile index from a table ?


>From what I think a basic solution would be to generate a config-file based on active tunnel-indexes for all tunnels frequently and just delete old stats with inactive table-indexes, which would be ok for now, the optimum solution would be to refresh the mrtg-config frequently based on the ipsec-peer address (included as HEX-value for each entry enterprises.9.9.171.1.3.2.1.5.idx) independently of the tunnel-index-id and therefor make the stats more permanent (? I have no idea) 


As example, the table looks something like this:
# Index
enterprises.9.9.171.1.3.2.1.2.304 = 374
enterprises.9.9.171.1.3.2.1.2.315 = 383
# Peer as hex
enterprises.9.9.171.1.3.2.1.5.304 =  Hex: C3 91 D4 3E
enterprises.9.9.171.1.3.2.1.5.315 =  Hex: 8B 04 BD B2
# InOctets
enterprises.9.9.171.1.3.2.1.26.304 = Counter32: 25330504
enterprises.9.9.171.1.3.2.1.26.315 = Counter32: 18990544
# OutOctets
enterprises.9.9.171.1.3.2.1.39.304 = Counter32: 17465672
enterprises.9.9.171.1.3.2.1.39.315 = Counter32: 17780640


BTW: the OID's, in case somebody looks for them, are at http://www.cisco.com/cgi-bin/Support/Mibbrowser/unity.pl?o=1.3.6.1.4.1.9.9.171.1.3.2.1&t=yes&st=3#oid 
If anybody is looking for Cisco or APC OID's you could ask me ;)

thanks for any thoughts,


Michael

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi