Multiple Subnet Monitoring

Post support questions that directly relate to Linux/Unix operating systems.

Moderators: Developers, Moderators

Post Reply
Fyre2012
Posts: 4
Joined: Fri May 18, 2007 3:10 pm

Multiple Subnet Monitoring

Post by Fyre2012 »

Hi everyone =)

I'm interested in polling traffic statistics from my network. We're currently using mrtg with netacct-mysql and netacct-mrtg system, and it's just getting ugly to maintain.

We're building a new router to replace the old, and we're using OpenBSD for this with Carp and PF. I understand there are some MIB modules I can get for those, however I had issues installing them.

So, I'm not sure how to get Cacti to do the following:

Create graphs for each IP within our 3 C class subnets (3 x /24) while only needing to poll from the single router.

Set up alerts for any IP that goes down (can Cacti do this, or would it be best to use nagios or zenoss or something?)

I've been finally able to at least get Cacti to pull snmp from the router, but it only shows traffic for each physical interface, and I'd really love it to seperate the traffic by each IP's usage and create a graph for that.

I hope someone can offer a suggestion or 2 as to how I might be able to get this done.

Thanks so much!
User avatar
Howie
Cacti Guru User
Posts: 5508
Joined: Thu Sep 16, 2004 5:53 am
Location: United Kingdom
Contact:

Re: Multiple Subnet Monitoring

Post by Howie »

Fyre2012 wrote:Hi everyone =)

I'm interested in polling traffic statistics from my network. We're currently using mrtg with netacct-mysql and netacct-mrtg system, and it's just getting ugly to maintain.

We're building a new router to replace the old, and we're using OpenBSD for this with Carp and PF. I understand there are some MIB modules I can get for those, however I had issues installing them.

So, I'm not sure how to get Cacti to do the following:

Create graphs for each IP within our 3 C class subnets (3 x /24) while only needing to poll from the single router.

Set up alerts for any IP that goes down (can Cacti do this, or would it be best to use nagios or zenoss or something?)

I've been finally able to at least get Cacti to pull snmp from the router, but it only shows traffic for each physical interface, and I'd really love it to seperate the traffic by each IP's usage and create a graph for that.

I hope someone can offer a suggestion or 2 as to how I might be able to get this done.

Thanks so much!
pfflowd takes data from the pfsync part of pf and makes it available as Cisco Netflow data, which is a fairly standard format for collecting flow information.

There are many things around that will process Netflow and slice it however you want (IP, service, whatever). Native netflow tools include nfsen, flow-tools, cflow and flowscan. If you hunt around on the forums here, you'll find some info about linking netflow data into Cacti, too.

There are a few other alternatives to pfflowd that do the same job by packet-sniffing with BPF, but pfflowd should be almost 'free' in resources as it uses data that pf was tracking anyway.

(disclaimer: I've never tried this with pf/pflowd, although I have with FreeBSD's ng_netflow)

Not sure how this would let you know the difference between an IP that is down and one that is really quiet though.
Weathermap 0.98a is out! & QuickTree 1.0. Superlinks is over there now (and built-in to Cacti 1.x).
Some Other Cacti tweaks, including strip-graphs, icons and snmp/netflow stuff.
(Let me know if you have UK DevOps or Network Ops opportunities, too!)
Fyre2012
Posts: 4
Joined: Fri May 18, 2007 3:10 pm

Post by Fyre2012 »

Thanks for the info, I'll check out pfflowd and see how that goes.

I am using pfsync for carp, however... hopefully this doesn't affect the sync between the two servers, as that would be a show stopper.
Post Reply

Who is online

Users browsing this forum: No registered users and 9 guests