Proofpoint Protection Server Templates

[btomjack]

i did a quick browse over things and was unable to find any readily available sources or working references to anyone using scripts for a Proofpoint Protection Server (in my case version 5). If anyone who is using cacti to monitor the specifics of this appliance would happen to have templates to share or tips to point int the right direction i would greatly appreciate it!

[rony]

Never heard of this "Server".

What does it do?

[minmei]

Here's what we set up for these:

Let me know - i Just exported the host template and hoped that cacti exported the dependencies (graph, data).

[btomjack]

sorry was on a little trip out of town, however we are using it as an anti-spam appliance, went from a barracuda appliance to this. it has many other features that can be licensed but it is plenty loaded down with just anti-spam.

however, i will try these templates and see what i can get going.


thanks in advance for them!

[btomjack]

had to do a lil cacti upgrade since i wasnt caught up, but after taht they imported successfullly. all but the mail queues seems to be working. im going to try and fiddle around a little that one and see if i can get it to populate too, as this is the one that i would use the most. thanks!

[minmei]

SNMP info from Proofpoint servers are based on the sendmail data - 4 data templates that look in the .1.3.6.1.2.1.28 tree for messages and KB boht received (inbound usually) and allowed (not spam). The graph templates do a bit of math to determine the difference (spam).

Feel free to respond if this does not work...

Chad

[stevewalsh]

Hi Minmei

I'm trying this on 0:0.8.7b-2 on Centos 5.2 using the rpmforge package against 2 proofpoint 5.0.4.176 units in cluster. The normal system stuff renders the graphs fine, but I don't get the sendmail kbyte or sendmail messages graphs even rendering. When I run the graph in debug; I get the following

RRDTool Command:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Sendmail Kbytes" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="Kbytes per second" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:10: \
--font UNIT:8: \
DEF:a="/var/www/cacti/rra/proofpoint_kbrecd_2524.rrd":kbrecd:LAST \
DEF:b="/var/www/cacti/rra/proofpoint_kbrecd_2524.rrd":kbrecd:MAX \
DEF:c="/var/www/cacti/rra/proofpoint_kballd_2523.rrd":kballd:LAST \
DEF:d="/var/www/cacti/rra/proofpoint_kballd_2523.rrd":kballd:MAX \
CDEF:cdefi=a,c,- \
LINE2:a#000000FF:"Inbound Received" \
GPRINTLAST:"Current\:%8.2lf %s" \
GPRINTAVERAGE:"Average\:%8.2lf %s" \
GPRINTMAX:"Maximum\:%8.2lf %s\n" \
AREA:c#7EE600FF:"Inbound Allowed" \
GPRINT:c:LAST:" Current\:%8.2lf %s" \
GPRINT:d:AVERAGE:"Average\:%8.2lf %s" \
GPRINT:d:MAX:"Maximum\:%8.2lf %s\n" \
AREA:cdefi#dd0000FF:"Inbound Spam":STACK \
GPRINT:cdefi:LAST:" Current\:%8.2lf %s" \
GPRINT:cdefi:AVERAGE:"Average\:%8.2lf %s" \
GPRINT:cdefi:MAX:"Maximum\:%8.2lf %s"

RRDTool Says:

ERROR: the RRD does not contain an RRA matching the chosen CF

Should I change it to averages, or will that screw up the graph generation?