[mrtg] Re: Pix firewall config and funny results

[Joseph Pierini]

Check for viruses or worms. I use MRTG as an indicator of unauthorized
traffic, you may have something on that network you didn't expect.

Joe


-----Original Message-----
From: Britt Tabor [mailto:Britt_Tabor at Jabil.com] 
Sent: Monday, August 09, 2004 7:55 AM
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: Pix firewall config and funny results

Could be someone sharing music files or something. The results that you see
are probably correct and not an MRTG problem. I would check the PIX logs and
see where the traffic is coming from (internal IP) and see what kind of
traffic it is. If your PIX does supply that info use a sniffer.



Britt Tabor
I.T. Infrastructure Engineer



-----Original Message-----
From: Mark Haney [mailto:MHaney at interactsys.com] 
Sent: Monday, August 09, 2004 10:35 AM
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] Pix firewall config and funny results

I just setup mrtg (on Windows 2000, it's an all MS shop here unfortunately)
to monitor traffic on our 2 PIX firewalls, one in Atlanta and one here in
Asheville.  The one in Atltanta monitors just fine, the results are pretty
much what I expected them to be.  However, the results for the Asheville PIX
are very odd.  The office is closed at night and on the weekends so there
should be little if any traffic on the PIX. However, at nights and this
weekend, mrtg continually showed the PIX with a constant usage of about
32KB/s in and 14KB/s out.  It never changes, just a constant plateau in the
graph.  The configs are the same (except IPs obviously) for both PIXs.  Is
this an mrtg issue?  A config issue or a PIX issue?

-------------------------------------------------------------------------
Alea iacta est.

Mark Haney
Network Administrator
Interact Public Safety Systems

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi


--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi