Cisco PIX problem

Post by **rony** » Tue Jul 20, 2004 2:08 pm

peanut,

The description is being truncated, but personally, I veiw this as a problem with the PIX, not cacti. The PIX is being "cute" and having an overly long interface description. I had toyed with the idea of modifing the query function so it it see "PIX Firewall" it would remove the rubbish, but I decided not to.

Ghandi,

The error you are getting when you view the Device is normal for the pix, one of the OID's that the SNMP function is attempting to retrieve does not exist. I have not investigated it, because the device screen is the only place that does that. Just a nice feature to help you know what the device is.

Gluck,
Rony

Ghandi · Post by **Ghandi** » Wed Jul 21, 2004 5:45 am

hi rony,

thanks for your answer, but why the description in my case was function in the past on the old machine? nothing changed, only the ip adress of the cacti machine..

hmmmm

Post by **rony** » Wed Jul 21, 2004 9:17 am

Did you upgrade the PIX? I haven't tested any PIX earlier than 6.x, well, because I upgraded them all before I started playing with the new version of cacti.

Other than that, I'm sorry, but I'm clueless as to why it worked on the other computer.

Rony

Ghandi · Post by **Ghandi** » Thu Jul 22, 2004 1:48 am

hi,

no upgrade has been modified nothing on pix has changed, i also doesn't understand this mystery, what shells, the main thing is working -> stats

thanks for your help, if i will resolve this problem i will post my knowledge.

Post by **rony** » Thu Jul 22, 2004 12:01 pm

Well I found the issue to the truncated names. It's because the name is longer then 15 chars and the default "Data Queries - Maximum Field Length" is 15.

So, after banging my head on the counter for being stupid

, I have changed the "Cacti Settings" -> "Visual " -> "Data Queries - Maximum Field Length" to 30. Now the names are not truncated and the appear on the graphs correctly.

Once again, it's the simple approach that fixes the problem.

Rony

TheMog · Post by **TheMog** » Fri Aug 13, 2004 8:58 am

We had the same problem with our Pixes finally we found a workaround (before I stepped on this forum!). wa ma de a change to the file interface.xml wich is found there: /var/www/html/cacti/resource/snmp_queries

the new file looks like this:

<interface>
<name>Get SNMP Interfaces</name>
<description>Queries a host for a list of monitorable interfaces</description>
<oid_index>.1.3.6.1.2.1.2.2.1.1</oid_index>

<fields>
<ifIndex>
<name>Index</name>
<method>walk</method>
<source>value</source>
<direction>input</direction>
<oid>.1.3.6.1.2.1.2.2.1.1</oid>
</ifIndex>
<ifDescr>
<name>Description</name>
<method>walk</method>
<source>VALUE/REGEXP:.*'([^']*)'.*$</source>
<direction>input</direction>
<oid>.1.3.6.1.2.1.2.2.1.2</oid>
</ifDescr>

and then no other changes.

Regards

Ghandi · Post by **Ghandi** » Fri Aug 13, 2004 9:21 am

hi,

i have copy your text into my interface.xml now my file looks like:

Code: Select all

 <interface> 
<name>Get SNMP Interfaces</name> 
<description>Queries a host for a list of monitorable interfaces</description> 
<oid_index>.1.3.6.1.2.1.2.2.1.1</oid_index> 

<fields> 
<ifIndex> 
<name>Index</name> 
<method>walk</method> 
<source>value</source> 
<direction>input</direction> 
<oid>.1.3.6.1.2.1.2.2.1.1</oid> 
</ifIndex> 
<ifDescr> 
<name>Description</name> 
<method>walk</method> 
<source>VALUE/REGEXP:.*'([^']*)'.*$</source> 
<direction>input</direction> 
<oid>.1.3.6.1.2.1.2.2.1.2</oid> 
</ifDescr> 


		<ifName>
			<name>Name (IF-MIB)</name>
			<method>walk</method>
			<source>value</source>
			<direction>input</direction>
			<oid>.1.3.6.1.2.1.31.1.1.1.1</oid>
		</ifName>
		<ifAlias>
			<name>Alias (IF-MIB)</name>
			<method>walk</method>
			<source>value</source>
			<direction>input</direction>
			<oid>.1.3.6.1.2.1.31.1.1.1.18</oid>
		</ifAlias>
		<ifType>
			<name>Type</name>
			<method>walk</method>
			<source>value</source>
			<direction>input</direction>
			<oid>.1.3.6.1.2.1.2.2.1.3</oid>
		</ifType>
		<ifSpeed>
			<name>Speed</name>
			<method>walk</method>
			<source>value</source>
			<direction>input</direction>
			<oid>.1.3.6.1.2.1.2.2.1.5</oid>
		</ifSpeed>
		<ifHwAddr>
			<name>Hardware Address</name>
			<method>walk</method>
			<source>value</source>
			<direction>input</direction>
			<oid>.1.3.6.1.2.1.2.2.1.6</oid>
		</ifHwAddr>
		<ifInOctets>
			<name>Bytes In</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.10</oid>
		</ifInOctets>
		<ifOutOctets>
			<name>Bytes Out</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.16</oid>
		</ifOutOctets>
		<ifHCInOctets>
			<name>Bytes In - 64-bit Counters</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.31.1.1.1.6</oid>
		</ifHCInOctets>
		<ifHCOutOctets>
			<name>Bytes Out - 64-bit Counters</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.31.1.1.1.10</oid>
		</ifHCOutOctets>
		<ifInDiscards>
			<name>Discarded Packets In</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.13</oid>
		</ifInDiscards>
		<ifOutDiscards>
			<name>Discarded Packets Out</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.19</oid>
		</ifOutDiscards>
		<ifInNUcastPkts>
			<name>Non-Unicast Packets In</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.12</oid>
		</ifInNUcastPkts>
		<ifOutNUcastPkts>
			<name>Non-Unicast Packets Out</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.18</oid>
		</ifOutNUcastPkts>
		<ifInUcastPkts>
			<name>Unicast Packets In</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.11</oid>
		</ifInUcastPkts>
		<ifOutUcastPkts>
			<name>Unicast Packets Out</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.17</oid>
		</ifOutUcastPkts>
		<ifInErrors>
			<name>Errors In</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.14</oid>
		</ifInErrors>
		<ifOutErrors>
			<name>Errors Out</name>
			<method>walk</method>
			<source>value</source>
			<direction>output</direction>
			<oid>.1.3.6.1.2.1.2.2.1.20</oid>
		</ifOutErrors>
		<ifIP>
			<name>IP Address</name>
			<method>walk</method>
			<source>OID/REGEXP:.*\.([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})$</source>
			<direction>input</direction>
			<oid>.1.3.6.1.2.1.4.20.1.2</oid>
		</ifIP>
	</fields>
</interface>

but nothing changed, i also have delete the device and rebuild it. but no change, always the SNMP error.

Bioman · Post by **Bioman** » Mon Nov 15, 2004 10:25 am

Hi !
In order to fix this interface naming problem on the PIXes, you can add the following lines :

$string = ereg_replace("PIX Firewall ", "", $string);
$string = ereg_replace(" interface", "", $string);

where the patch Cacti-0.8.5a-snmp_single_quote.patch.gz (see above) adds its line...

Basically, it will be on the cacti/lib directory, right after the line $string = str_replace("'", "", $string); (which was added by the patch).

Cisco PIX problem

Who is online