<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=windows-1255">
<meta name=ProgId content=Word.Document>
<meta name=Generator content="Microsoft Word 9">
<meta name=Originator content="Microsoft Word 9">
<link rel=File-List href="cid:filelist.xml@01BF35CD.A3E5AFD0">
<title>RE: MRTG and Exchange</title>
<!--[if gte mso 9]><xml>
<o:OfficeDocumentSettings>
<o:DoNotRelyOnCSS/>
</o:OfficeDocumentSettings>
</xml><![endif]--><!--[if gte mso 9]><xml>
<w:WordDocument>
<w:Zoom>0</w:Zoom>
<w:DocumentKind>DocumentEmail</w:DocumentKind>
<w:EnvelopeVis/>
<w:Compatibility>
<w:ForgetLastTabAlignment/>
<w:DoNotUseHTMLParagraphAutoSpacing/>
</w:Compatibility>
</w:WordDocument>
</xml><![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
        {font-family:"ARIAL \(HEBREW\)";
        panose-1:2 11 6 4 2 2 2 2 2 4;
        mso-font-charset:177;
        mso-generic-font-family:swiss;
        mso-font-pitch:variable;
        mso-font-signature:31367 -2147483648 8 0 255 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {mso-style-parent:"";
        margin:0cm;
        margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:12.0pt;
        font-family:"Times New Roman";
        mso-fareast-font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;
        text-underline:single;}
a:visited, span.MsoHyperlinkFollowed
        {color:blue;
        text-decoration:underline;
        text-underline:single;}
p
        {margin-right:0cm;
        mso-margin-top-alt:auto;
        mso-margin-bottom-alt:auto;
        margin-left:0cm;
        mso-pagination:widow-orphan;
        font-size:12.0pt;
        font-family:"Times New Roman";
        mso-fareast-font-family:"Times New Roman";}
span.EmailStyle18
        {mso-style-type:personal-compose;
        mso-ansi-font-size:10.0pt;
        mso-bidi-font-size:10.0pt;
        mso-ascii-font-family:Arial;
        mso-hansi-font-family:Arial;
        mso-bidi-font-family:Arial;
        color:blue;}
/* Page Definitions */
@page
        {mso-endnote-numbering-style:alpha-lower;}
@page Section1
        {size:595.3pt 841.9pt;
        margin:72.0pt 90.0pt 72.0pt 90.0pt;
        mso-header-margin:36.0pt;
        mso-footer-margin:36.0pt;
        mso-paper-source:0;
        mso-gutter-direction:rtl;}
div.Section1
        {page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue style='tab-interval:36.0pt'>
<div class=Section1 dir=RTL>
<p class=MsoNormal dir=LTR><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue'>Well, just made it work!</span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>It is
possible to produce graphs of the internal workings of Exchange Server with MRTG,
this includes the MTA and IMC.</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>Right now I
used off-the-shelf counters and did not compile my own.</span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>Steps needed
to install the counters and sub-agent:</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=3 color=blue face="Times New Roman"><span
style='font-size:12.0pt;color:blue'> </span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>1. Install
the SNMP service on your ExSrv (Exchange Server) machine. Set up the community
name (DO NOT leave the default "Public") and set it to READ ONLY!
Leave the traps alone for now.</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>2. Reapply
the latest NT service pack (very important!).</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>3. Insert
the Exchange server 5.5 CD into the Exchange machine, point to
X:\SERVER\SUPPORT\SNMP\I386 (where X is your CD drive and you run on Intel
machine) and initiate install.bat. This batch will copy the needed files to
system32 and write the needed registry values.</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>4. At this
point I reapplied Exchange Server SP3 - to be on the safe side.</span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>5. On the monitoring
machine, install ActiveState Perl from <a href="http://www.activestate.com">www.activestate.com</a></span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>6. Install
GetIF (MIB browser, my favorite) from <a
href="http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/pub/">http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/pub/</a></span></font><font
size=2 color=blue><span style='font-size:10.0pt;mso-ascii-font-family:"ARIAL \(HEBREW\)";
mso-bidi-font-family:"ARIAL \(HEBREW\)";color:blue'> </span></font><font
size=2 color=blue face="ARIAL (HEBREW)"><span style='font-size:10.0pt;
font-family:"ARIAL \(HEBREW\)";color:blue'>and put the file exchange.mib from
the Exchange Server snmp CD directory into the MIBS folder at the location
where you installed GetIF.</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>7. Download
MRTG from <a href="http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/pub/">http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/pub/</a></span></font><font
size=2 color=blue><span style='font-size:10.0pt;mso-ascii-font-family:"ARIAL \(HEBREW\)";
mso-bidi-font-family:"ARIAL \(HEBREW\)";color:blue'> </span></font><font
size=2 color=blue face="ARIAL (HEBREW)"><span style='font-size:10.0pt;
font-family:"ARIAL \(HEBREW\)";color:blue'>(2.8.9 or better), read the manual
and follow the instructions at <a
href="http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/nt-guide.html">http://ee-staff.ethz.ch/~oetiker/webtools/mrtg/nt-guide.html</a></span></font><font
size=2 color=blue><span style='font-size:10.0pt;mso-ascii-font-family:"ARIAL \(HEBREW\)";
mso-bidi-font-family:"ARIAL \(HEBREW\)";color:blue'> </span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>8. DO NOT
install any other PerfMIB on the destination machine at this time, as it will
override the exchange counters you just installed. There are other SNMP
counters packages for NT that add many NT counters but do not include the ExSrv
ones. To have both, I will probably need to compile them myself... :-(</span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>9. Point
GetIf to your ExSrv machine and start the MIB browser. you should see the ExSrv
counters under the OID
.iso.org.dod.internet.private.enterprises.microsoft.software.systems.os.winnt.performance
(.1.3.6.1.4.1.311.1.1.3.1.1).</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>9. Run
"perl cfgmaker " with your ExSrv machine as the destination to
produce a preliminary .cfg file, which you will experiment with later. It will
have your ExSrv's NIC settings when done.</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>the syntax
is: path\Perl \path\cfgmaker <community string>@IP > exchange.cfg</span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>10. Make
sure to make the necessary modifications to the .cfg file (at least the
"WorkDir" parameter which tells MRTG where to save the produced html,
log and graphics files).</span></font><font color=blue><span style='color:blue;
mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>11. Make
sure MRTG is running at least EVERY 5 minutes! I recommend the "MRTG
Statistic Updater" at <a href="http://www.queso.com/mrtgstatupdater.htm">http://www.queso.com/mrtgstatupdater.htm</a></span></font><font
size=2 color=blue><span style='font-size:10.0pt;mso-ascii-font-family:"ARIAL \(HEBREW\)";
mso-bidi-font-family:"ARIAL \(HEBREW\)";color:blue'> </span></font><font
size=2 color=blue face="ARIAL (HEBREW)"><span style='font-size:10.0pt;
font-family:"ARIAL \(HEBREW\)";color:blue'>.</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>12. Start
experimenting!</span></font><font color=blue><span style='color:blue;
mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=3 color=blue face="Times New Roman"><span
style='font-size:12.0pt;color:blue'> </span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>some
valuable OIDs I found on my machine include:</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=3 color=blue face="Times New Roman"><span
style='font-size:12.0pt;color:blue'> </span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>Total
kilobytes of message data queued in the Internet Mail Service queues:<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.29.0</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>Total
messages waiting in the Internet Mail Service queues:<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.28.0</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>The hourly
rate at which inbound connections were received: </span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>.1.3.6.1.4.1.311.1.1.3.1.1.3.27.0<br>
The hourly rate at which outbound connections were made (hourly):<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.26.0</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>The total
number of outbound messages delivered to their destinations:<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.21.0<br>
The total number of Internet messages delivered into MS Exchange Server:<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.20.0</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>The total
number of Non-delivery reports generated for inbound mail:<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.16.0<br>
The total number of Non-delivery reports generated for outbound mail:<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.17.0</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>The number
of messages received from the Internet destined for MS Exchange Server:<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.15.0<br>
The number of messages from MS Exchange Server, that are queued to be delivered
to the Internet:<br>
.1.3.6.1.4.1.311.1.1.3.1.1.3.14.0</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=3 color=blue face="Times New Roman"><span
style='font-size:12.0pt;color:blue'> </span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face="ARIAL (HEBREW)"><span
style='font-size:10.0pt;font-family:"ARIAL \(HEBREW\)";color:blue'>And there
are many more!</span></font><font color=blue><span style='color:blue;
mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=3 color=blue face="Times New Roman"><span
style='font-size:12.0pt;color:blue'> </span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue'>if you cannot seem to get
a response from your machine, check that the destination SNMP service is
started.</span></font><font color=blue><span style='color:blue;mso-color-alt:
windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue'>if it is, parse the snmp
install script (install.bat) on the ExSrv CD and check that the files were
indeed copied and registry values written into the registry. Check that you use
the correct community name.</span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue'>You can e-mail me for
assistance.</span></font><font color=blue><span style='color:blue;mso-color-alt:
windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue'>Then you need to modify
the .cfg file MRTG will work with to add the ExSrv OIDs. I am currently
experimenting at building one and will share my findings.</span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=3 color=blue face="Times New Roman"><span
style='font-size:12.0pt;color:blue'> </span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue'>Good luck,</span></font><font
color=blue><span style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
<p class=MsoNormal dir=LTR><font size=2 color=blue face=Arial><span
style='font-size:10.0pt;font-family:Arial;color:blue'>alexf</span></font><font
color=blue><span style='color:blue'> </span></font><font color=blue><span
style='color:blue;mso-color-alt:windowtext'><o:p></o:p></span></font></p>
</div>
</body>
</html>