[mrtg] Re: MRTG and Cisco NBAR Assistance needed
Koelstra, J. (Jan)
JKoelstra at MINSZW.NL
Mon Apr 4 16:14:41 MEST 2005
Steve,
The NBAR traffic values are incrementing counters, so you should not use the "gauge" option unless you want to see sawteeth graphs.
For very slow changing counters it is possible to use the "gauge" option, but in that case you should put the "MaxBytes" value to the rollover value of the counter (2^32 for normal counters). 2500000 is probably too low.
Have a look at the first line of the Router01FA01web.log file, this shows the value that MRTG collected from its last poll. If this value is above the MaxBytes value it is ignored in the graph.
Hth,
Jan.
-----Original Message-----
From: mrtg-bounce at list.ee.ethz.ch [mailto:mrtg-bounce at list.ee.ethz.ch] On Behalf Of Steve WOODIN
Sent: Monday, April 04, 2005 2:47 PM
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] MRTG and Cisco NBAR Assistance needed
Hello,
I am relatively new to MRTG and have run into some trouble getting MRTG to graph the Bandwidth data on a Cisco NBAR configured protocol. (Specifically it won't graph the data for http traffic) Can't figure out why and I am hoping someone out there can help. And please don't tell me to use RRDTool, I realize the general feeling out there is that it is MUCH improved over MRTG, but we just got permission from Management to begin implementation of MRTG, so that is what we are stuck with for now. (Unless we want to wait another 6 months to a year, which we don't)
Now, I have NBAR configured for several protocols, and all the others work fine, http is the only one not showing any data in the graph or for the Max/avg/current fields (shows 0.0 all across for these).
I have already confirmed the OID for the http protocol using getif and then walking the tree at .1.3.6.1.4.1.9.9.244.1.8.1.1.2 to get the list of supported protocols.
By then going to: .1.3.6.1.4.1.9.9.244.1.2.1.1.5.2 I can see the supported protocol traffic coming IN on interface #2 (FA0/1), and by refreshing the view I can see that the value for the nbar http oid IS in fact changing (and thus should be showing in the MRTG graph). I should mention that MRTG does not spit out ANY errors, as far as I can see it is running properly. I have tried stopping the mrtg daemon, deleting all the html/PNG/log files created, and then restarting mrtg. Wait for a few updates and HTTP is still the only one not showing.
And yes there is http traffic on that port, there is actually more http traffic than https traffic, which shows up no problem, all of this has been confirmed by going into the router and viewing the nbar traffic showing on it
Anyway, the following is my config file,all lines start at line 1 and the ip address/community strings have been modified to protect the guilty.
(And yes it is on a Win2k machine at the moment (my personal WS), as this config file is currently in the testing phase, and my supervisor will not authorize it to be transferred to the collection server until it is working properly. The collection server itself is running Suse9.0.
)
Thanks in advance, I hope someone out there can assist me!
Steve Woodin, A+,CNA
OJT Student
PEI Provincial Goverment
Dept of Telecommunications
sjwoodin at gov.pe.ca
Network device being monitored: Cisco 2600 Router, IOS version
12.3(6c)
Config File being run:
#Global Defaults
Workdir: c:\mrtgdata\router01
Interval:5
runasdaemon: Yes
#Router01 NBAR Stats MRTG Config File
# NBAR - Custom01
Target[Router01FA01netware]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.18&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.18:public at 10.10.0.1
SetEnv[Router01FA01netware]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01netware]: 2500000
Title[Router01FA01netware]: Router01
PageTop[Router01FA01netware]: <H1>Router01 R - FastEthernet 0/1 Netware Traffic</H1>
Options[Router01FA01netware]: gauge, growright
Unscaled[Router01FA01netware]: dwmy
#end NBAR Custom01
Target[Router01FA01web]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.8&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.8:public at 10.10.0.1
SetEnv[Router01FA01web]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01web]: 2500000
Title[Router01FA01web]: Router01
PageTop[Router01FA01web]: <H1>Router01 Router - FastEthernet 0/1 HTTP
(Web) Traffic</H1>
Options[Router01FA01web]: gauge, growright
Unscaled[Router01FA01web]: dwmy
Target[Router01FA01https]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.59&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.59:public at 10.10.0.1
SetEnv[Router01FA01https]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01https]: 2500000
Title[Router01FA01https]: Router01
PageTop[Router01FA01https]: <H1>Router01 - FastEthernet 0/1 HTTPS
(Web) Traffic</H1>
Options[Router01FA01https]: gauge, growright
Unscaled[Router01FA01https]: dwmy
Target[Router01FA01ftp]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.72&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.72:public at 10.10.0.1
SetEnv[Router01FA01ftp]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01ftp]: 2500000
Title[Router01FA01ftp]: Router01
PageTop[Router01FA01ftp]: <H1>Router01 - FastEthernet 0/1 Ftp Traffic</H1>
Options[Router01FA01ftp]: gauge, growright
Unscaled[Router01FA01ftp]: dwmy
Target[Router01FA01icmp]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.69&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.69:public at 10.10.0.1
SetEnv[Router01FA01icmp]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01icmp]: 2500000
Title[Router01FA01icmp]: Router01
PageTop[Router01FA01icmp]: <H1>Router01 - FastEthernet 0/1 Icmp Traffic</H1>
Options[Router01FA01icmp]: gauge, growright
Unscaled[Router01FA01icmp]: dwmy
Target[Router01FA01sqlnet]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.23&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.23:public at 10.10.0.1
SetEnv[Router01FA01sqlnet]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01sqlnet]: 2500000
Title[Router01FA01sqlnet]: Router01
PageTop[Router01FA01sqlnet]: <H1>Router01 - FastEthernet 0/1 Sqlnet Traffic</H1>
Options[Router01FA01sqlnet]: gauge, growright
Unscaled[Router01FA01sqlnet]: dwmy
Target[Router01FA01sqlserver]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.50&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.50:public at 10.10.0.1
SetEnv[Router01FA01sqlserver]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01sqlserver]: 2500000
Title[Router01FA01sqlserver]: Router01
PageTop[Router01FA01sqlserver]: <H1>Router01 - FastEthernet 0/1 Sqlserver Traffic</H1>
Options[Router01FA01sqlserver]: gauge, growright
Unscaled[Router01FA01sqlserver]: dwmy
Target[Router01FA01snmp]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.36&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.36:public at 10.10.0.1
SetEnv[Router01FA01snmp]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01snmp]: 2500000
Title[Router01FA01snmp]: Router01
PageTop[Router01FA01snmp]: <H1>Router01 - FastEthernet 0/1 SNMP Traffic</H1>
Options[Router01FA01snmp]: gauge, growright
Unscaled[Router01FA01snmp]: dwmy
Target[Router01FA01netbios]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.49&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.49:public at 10.10.0.1
SetEnv[Router01FA01netbios]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01netbios]: 2500000
Title[Router01FA01netbios]: Router01
PageTop[Router01FA01netbios]: <H1>Router01 - FastEthernet 0/1 NETBIOS Traffic</H1>
Options[Router01FA01netbios]: gauge, growright
Unscaled[Router01FA01netbios]: dwmy
Target[Router01FA01dns]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.62&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.62:public at 10.10.0.1
SetEnv[Router01FA01dns]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01dns]: 2500000
Title[Router01FA01dns]: Router01
PageTop[Router01FA01dns]: <H1>Router01 - FastEthernet 0/1 DNS Traffic</H1>
Options[Router01FA01dns]: gauge, growright
Unscaled[Router01FA01dns]: dwmy
Target[Router01FA01dhcp]: 1.3.6.1.4.1.9.9.244.1.2.1.1.5.2.63&1.3.6.1.4.1.9.9.244.1.2.1.1.6.2.63:public at 10.10.0.1
SetEnv[Router01FA01dhcp]: MRTG_INT_IP="" MRTG_INT_DESCR=""
MaxBytes[Router01FA01dhcp]: 2500000
Title[Router01FA01dhcp]: Router01
PageTop[Router01FA01dhcp]: <H1>Router01 - FastEthernet 0/1 Dhcp Traffic</H1>
Options[Router01FA01dhcp]: gauge, growright
Unscaled[Router01FA01dhcp]: dwmy
--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive http://www.ee.ethz.ch/~slist/mrtg
FAQ http://faq.mrtg.org Homepage http://www.mrtg.org
WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi
_________________________________________________________
Het ministerie van Sociale Zaken en Werkgelegenheid sluit elke aansprakelijkheid uit in verband met het niet juist, onvolledig of niet tijdig overkomen van de informatie in deze e-mail.
Aan dit bericht kunnen geen rechten worden ontleend.
Dit bericht is alleen bestemd voor de geadresseerde. Indien dit bericht niet voor u bestemd is, verzoeken wij u dit onmiddellijk aan ons te melden en de inhoud van dit bericht te vernietigen.
_________________________________________________________
The ministry of Social Affairs and Employment is not liable for any incorrect or incomplete transmission of the information in this e-mail or for any delay in its receipt.
This message shall not constitute any obligations.
This message is intended solely for the addressee.
If you have received this message in error, please inform us immediately and delete its content.
_________________________________________________________
--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive http://www.ee.ethz.ch/~slist/mrtg
FAQ http://faq.mrtg.org Homepage http://www.mrtg.org
WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi
More information about the mrtg
mailing list