[mrtg] Re: What is the IP of generating hosts?

Jim Bennett JBennett at sevencounties.org
Tue Nov 4 14:19:14 MET 2003


Thanks to everyone that reply.  I have been able to isolate the ip address.  But what is interesting is that MRTG, CISCO, and FLUKE all referred the same index number.  Cisco and Fluke referred both the index and the port numbers the same.  But on my MRTG graph, the port titles are different than what Fluke and Cisco say they are.  If you right click on the graph, the Save image (10.10.3.1_64-week.png).... is correct as the right index number.   Here is a sample of the mrtg.cfg file.

### Interface 1 >> Descr: 'sc0' | Name: 'sc0' | Ip: '10.10.3.1' | Eth: '00-07-50-a8-19-ff' ###

Target[10.10.3.1_1]: 1:public at 10.10.3.1
SetEnv[10.10.3.1_1]: MRTG_INT_IP="10.10.3.1" MRTG_INT_DESCR="sc0"
MaxBytes[10.10.3.1_1]: 1250000
Title[10.10.3.1_1]: #sc0 -- sw0_corp_00
PageTop[10.10.3.1_1]: <H1>#sc0 -- sw0_corp_00</H1>
 <TABLE>
   <TR><TD>System:</TD>     <TD>sw0_corp_00 in Corporate Basement</TD></TR>
   <TR><TD>Maintainer:</TD> <TD>MIS</TD></TR>
   <TR><TD>Description:</TD><TD>sc0  </TD></TR>
   <TR><TD>ifType:</TD>     <TD>ethernetCsmacd (6)</TD></TR>
   <TR><TD>ifName:</TD>     <TD>sc0</TD></TR>
   <TR><TD>Max Speed:</TD>  <TD>10.0 Mbits/s</TD></TR>
   <TR><TD>Ip:</TD>         <TD>10.10.3.1 (sw0_corp_00.sevencounties.org)</TD></TR>
 </TABLE>

Am I missing something???
Thanks, Jim

>>> "Peter P. Benac" <ppbenac at emacolet.com> 11/03/03 07:21PM >>>
Jim,

   On any Cisco device the IP address reported for the device via SNMP is
always the lowest IP address found on the device or if configured the
Loopback address.

   MRTG uses the IP address that was given to the cfgmaker.  As Ken said and
in your case 64 is the ifIndex of the port.  This could change if a new
blade is inserted into the device prior to the one MRTG discovered unless
ifIndex persist is configured on the device.

   Switches get their IP address(es) from what VLAN's that are configured on
the device. 

   I would suspect that the IP address on the Fluke is different because it
discovered a different IP address then MRTG was given.

Regards,
Pete
----
Peter P. Benac, CCNA
Emacolet Networking Services, Inc
Providing Systems and Network Consulting, Training, Web Hosting Services
Phone: 919-847-1740 or 866-701-2345
Web: http://www.emacolet.com 
Need quick reliable Systems or Network Management advice visit
http://www.nmsusers.org 

To have principles...
             First have courage.. With principles comes integrity!!!

 

> -----Original Message-----
> From: mrtg-bounce at list.ee.ethz.ch 
> [mailto:mrtg-bounce at list.ee.ethz.ch] On Behalf Of Jim Bennett
> Sent: Monday, November 03, 2003 13:03
> To: mrtg at list.ee.ethz.ch 
> Subject: [mrtg] What is the IP of generating hosts?
> 
> 
> Probably a dumb question, but I'll ask it anyway.
> 
> What is the best/easiest way to determine the IP address of 
> the host that is generating the traffic.
> 
> On a Cisco 4000 switch, MRTG graph labels it as "#3/6 - sw0 
> xxxx xx".  All the ports are label in this matter, and they 
> go as high as "#3/48 - sw0 xxxx xx".  We have a Fluke 
> Optiview and it labels the ports the  same.  But I have some 
> reservation about the accuracy of locating the IP address 
> using the Fluke.  It appears that the IP address that the 
> Fluke has identified to that port does appeared to be the one 
> that MRTG says the port is. I know MRTG will identify the 
> port as an IP address of 10.10.3.1_64.  This means the 64th 
> port on the switch.  Right???  But what physical port does 
> that relate to on the switch?  And what is the IP address of 
> the host generating the traffic?
> 
> Thanks for any help or insight in the matter.
> Jim



CONFIDENTIALITY NOTICE:
This e-mail message, including any attachments, is for the sole
use of the intended recipient(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure 
or distribution is prohibited.  If you are not the intended recipient, 
please contact the sender immediately by reply e-mail and destroy all
copies of the original message.
<<<<gwavasig>>>>

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi



More information about the mrtg mailing list