[mrtg] Bandwidth per user session - VPN 3000 & ASA

[Martin77]

MRTG Guru's,

I've been looking at the conf files too long and can't figure out why this
works on one device, but not the other.

Trying to graph bandwidth utilization of a single user session connected to
a VPN gateway. Don't care about any particular users or top users or
anything, just a simple 'current interface utilization / current number
users = bandwidth per user' type expression.

Running MRTG 2.16.2.

These conf snippets running against a VPN 3000 work perfectly:
Target[brm-vpn-srh-1.bw_in]: 1:public at brm-vpn-srh-1:
Target[brm-vpn-srh-1.bw_out]: 2:public at brm-vpn-srh-1:
Target[brm-vpn-srh-1.bw_per_user]: 1:public at brm-vpn-srh-1 /
.1.3.6.1.4.1.9.9.171.1.3.1.1.0&.1.3.6.1.4.1.9.9.
171.1.3.1.1.0:public at brm-vpn-srh-1

MaxBytes[brm-vpn-srh-1.bw_per_user]: 12500000
Options[brm-vpn-srh-1.bw_per_user]: bits

Graph pattern follows i/f utilization graph, with numbers scaled down to
appropriate value based on how many people logged in at that time.

On an ASA, I have these conf snippets:
Target[sca-vpn-srh-1.counts]:
.1.3.6.1.4.1.9.9.392.1.3.1.0&.1.3.6.1.4.1.9.9.392.1.3.1.0:public at sca-vpn-srh-1
-mgmt
Target[sca-vpn-srh-1.bw_in]: #inside:public at sca-vpn-srh-1-mgmt:::::2
Target[sca-vpn-srh-1.bw_out]: #outside:public at sca-vpn-srh-1-mgmt:::::2
Target[sca-vpn-srh-1.bw_per_user]: #outside:public at sca-vpn-srh-1-mgmt:::::2
/ .1.3.6.1.4.1.9.9.392.1.3.1.0&.
1.3.6.1.4.1.9.9.392.1.3.1.0:public at sca-vpn-srh-1-mgmt:::::2

MaxBytes[sca-vpn-srh-1.bw_per_user]: 125000000
Options[sca-vpn-srh-1.bw_per_user]: bits

The result here is that the graph jumps up and down between almost nothing,
and
the 125M max set in MaxBytes.

I think what it's doing in the 2nd case is dividing the actual value of the
byte counter by user count.
Using indexes & version 1 like on the 3k makes no difference.

Can anyone see what I'm doing wrong to get different expression eval
behavior between these 2?
Any way to make it use the utilization of an interface in the expression,
instead of the raw counter value?

Thanks & Regards,
-Martin.
-- 
View this message in context: http://n2.nabble.com/Bandwidth-per-user-session-VPN-3000-ASA-tp4178963p4178963.html
Sent from the MRTG Users Mailinglist mailing list archive at Nabble.com.