[mrtg] SNMP stats from Cisco ASA
Brian A. Seklecki
lavalamp at spiritual-machines.org
Sat Feb 16 03:45:58 CET 2008
Looks right...what about:
unix$ snmptable -Cw 70 -v2c -c foobar ha12 IF-MIB::ifTable
SNMP table: IF-MIB::ifTable
ifIndex ifDescr
1 Cisco PIX Security Appliance 'Physical0' interface
2 Cisco PIX Security Appliance 'PubDMZ' interface
3 Cisco PIX Security Appliance 'Management' interface
4 Cisco PIX Security Appliance 'CorpPub' interface
5 Cisco PIX Security Appliance 'CorpMgmnt' interface
6 Cisco PIX Security Appliance 'BDB' interface
7 Cisco PIX Security Appliance 'Pivman' interface
8 Cisco PIX Security Appliance 'IS' interface
9 Cisco PIX Security Appliance 'Customer00Pub' interface
10 Cisco PIX Security Appliance 'Customer1Pub' interface
11 Cisco PIX Security Appliance 'Customer2Pub' interface
12 Cisco PIX Security Appliance 'Customer0' interface
13 Cisco PIX Security Appliance 'Customer1' interface
14 Cisco PIX Security Appliance 'Customer2' interface
15 Cisco PIX Security Appliance 'Stateful' interface
SNMP table IF-MIB::ifTable, part 2
ifType ifMtu ifSpeed ifPhysAddress ifAdminStatus
ethernetCsmacd 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
l2vlan 1500 100000000 0:7:eb:9b:57:26 up
ethernetCsmacd 1500 100000000 0:7:eb:9b:57:27 up
SNMP table IF-MIB::ifTable, part 3
ifOperStatus ifLastChange ifInOctets ifInUcastPkts ifInNUcastPkts
up 0:0:05:03.00 3540818245 1666853626 3166219
up 0:0:05:03.00 3771829764 285855761 0
up 0:0:05:03.00 3064772244 551616571 0
up 0:0:05:03.00 3596352 46630 0
up 0:0:05:04.00 1219273370 21972047 0
up 0:0:05:04.00 782277490 166283171 0
up 0:0:05:04.00 2002674515 95981058 0
up 0:0:05:04.00 2558638352 129986361 0
up 0:0:05:04.00 4085524637 21947238 0
up 0:0:05:04.00 506 11 0
up 0:0:05:04.00 506 11 0
up 0:0:05:04.00 1731327723 392067436 0
up 0:0:05:04.00 46 1 0
up 0:0:05:04.00 46 1 0
up 0:0:04:46.00 56839572 618985 209
SNMP table IF-MIB::ifTable, part 4
ifInDiscards ifInErrors ifInUnknownProtos ifOutOctets ifOutUcastPkts
0 9 ? 2686921218 1668406097
224622 0 ? 3916663618 279524043
91433 0 ? 299554745 705194520
0 0 ? 3225740 38817
9373 0 ? 3730400237 19117625
6409 0 ? 2968045552 165280332
397115 0 ? 3054769302 65133196
15716 0 ? 4116225650 98401686
1090 0 ? 2183354082 22386269
0 0 ? 28 1
0 0 ? 28 1
67912 0 ? 3456054464 313502831
0 0 ? 28 1
0 0 ? 28 1
0 0 ? 3993715460 33608482
On Fri, 15 Feb 2008, Wixted, Joe wrote:
>
> snmp-server host inside 10.0.0.10 community *********
> snmp-server location
> snmp-server contact Joe Wixted
> snmp-server community *******
> snmp-server enable traps snmp authentication linkup linkdown coldstart
> snmp-server enable traps syslog
>
> -----Original Message-----
> From: Brian A. Seklecki [mailto:lavalamp at spiritual-machines.org]
> Sent: Friday, February 15, 2008 8:27 PM
> To: Wixted, Joe
> Cc: mrtg at lists.oetiker.ch
> Subject: Re: [mrtg] SNMP stats from Cisco ASA
>
>
>
>
> On Sat, 2008-02-09 at 20:23 -0500, Wixted, Joe wrote:
>> I need a bit of help. We recently replaced our PIX with an ASA 5510.
>> I used to use STG to track 2 second intervals (to get a nearly
>
> What does:
>
> ASAPIX# sh run | include snmp
>
> Reveal about your snmp agent in-kernel in the ASA?
>
> ~BAS
>
>
>> realtime graph of usage) of the connections. On the PIX, OIDs
>> 1.3.6.1.2.1.2.2.1.10.2 and 1.3.6.1.2.1.2.2.1.16.2 would give me
>> inbound and outbound traffic on the interface. On the ASA, however, I
>> get nothing. Walking the tree with Getif returns a value, but it
>> doesnÿÿt change.
>>
>>
>>
>> Iÿÿm sure one of you has worked this out already. Could you share with
>> me?
>>
>>
>>
>> TIA!
>>
>>
>>
>> -Joe
>>
>>
>>
>>
>> _______________________________________________
>> mrtg mailing list
>> mrtg at lists.oetiker.ch
>> https://lists.oetiker.ch/cgi-bin/listinfo/mrtg
>
>
l8*
-lava (Brian A. Seklecki - Pittsburgh, PA, USA)
http://www.spiritual-machines.org/
"Guilty? Yeah. But he knows it. I mean, you're guilty.
You just don't know it. So who's really in jail?"
~Maynard James Keenan
More information about the mrtg
mailing list