Script for netscreen vpn interfaces with ifSpeed

[nebj00la]

So, I'm trying to write a script that returns the following data to Cacti:

nsVpnMonIndex
1.3.6.1.4.1.3224.4.1.1.1.1.$

nsVpnMonVpnName
.1.3.6.1.4.1.3224.4.1.1.1.4.${nsVpnMonIndex}|sed 's/[^[:alnum:]_-]//g'`

nsVpnMonIfIndex
.1.3.6.1.4.1.3224.4.1.1.1.39.${nsVpnMonIndex}

nsifSpeed
.1.3.6.1.2.1.2.2.1.5.${nsVpnMonIfIndex}

The logic is based on an existing script that was used with MRTG. I'm having trouble making sense of how to iterate multiple table requests and parse the output.

There is an existing script on the forums that gets the listed information, but it's missing the ifSpeed value, which is rather funky to get (you have to make a relationship between 1.3.6.1.4.1.3224.4.1.1.1.39 and 1.3.6.1.2.1.2.2.1.5.

If any of this doesn't make sense, it's probably because my brain hurts right now from trying to figure it out

Assistance is greatly appreciated.

[nebj00la]

If any of this doesn't make sense, it's probably because my brain hurts right now from trying to figure it out

Assistance is greatly appreciated.

So I've got the following put together, and need some assistance getting the Data Query working properly:

Attached is the bash script that gathers the appropriate data from the Juniper device, and what I thought would work as an XML Data Query. Unfortunately, nothing useful is being output from the data query, whether I use input/output fields.

[nebj00la]

Here's the output of the bash script:

Code: Select all

[jtomawski@host]/scripts% ./netscreen_tunnel_interfaces.sh testhost notshowing
vpn1:0:125000000:0:0
vpn2:1:125000000:1447840704:1634286657
vpn3:2:125000000:2399037376:3980692710
vpn4:3:125000000:1790073088:3591907615
vpn5:4:125000000:1150631920:3389572220
vpn6:5:125000000:0:0
[jtomawski@host]/scripts%

[Howie]

I think you need an indexed query instead - the aim is to get one graph per vpn right? so the index is some identifier for each vpn (either the interface number if they are all tunnel interfaces, or the endpoint IP or something)...

For Cacti to do that, you need to write a script that understands a couple of arguments - index, num_indexes, get and query. It then presents either a list of the indexes, or the data for one of the VPNs. Then you make an XML file in resources/script_queries/ for it.

I don't know where I found example code for this, but here's one of mine:

Code: Select all

#!/usr/bin/perl

$statsfile = "/var/tmp/cacti-adsl-bgp-counts.txt";

$max_age = 500;
$nhosts = 0;

if ( open( STATS, $statsfile ) ) {
    while (<STATS>) {
        chomp;
        chomp;

        # m/^(\S+)\s*[=:]\s*(\S+)/m ;
        ( $key, $meta, $value ) = ( m/^\s*(\S+)\s*([=:])\s*(\S+)/ );

        if($meta eq ':') { $metadata{$key} = $value; }
        if($meta eq '=') { $data{$key} = $value; $nhosts++; }
    }

    close(STATS);
}

if ( $ARGV[0] eq 'index' ) {
    print join( "\n", sort keys %data );
    exit();
}

if ( $ARGV[0] eq "query" ) {
    push( @needed, sort keys %data );
}

if ( $ARGV[0] eq "get" ) {
    push( @needed, $ARGV[2] );
}

if($ARGV[0] eq 'num_indexes')
{
        print "$nhosts";
        exit();
}


foreach $index (@needed) {
    $value = 'U';

    if ( $ARGV[1] eq 'hostname' )   { $value = $index; }
    if ( $ARGV[1] eq 'count' ) { $value = $data{$index}; }

    if ( $ARGV[0] eq 'get' ) {
        print $value;
    }
    else {
        print $index. ":" . $value . "\n";
    }
}

obviously not for Netscreen VPNs, although I'd be interested to see that too

[nebj00la]

I think you need an indexed query instead - the aim is to get one graph per vpn right? so the index is some identifier for each vpn (either the interface number if they are all tunnel interfaces, or the endpoint IP or something)...

For Cacti to do that, you need to write a script that understands a couple of arguments - index, num_indexes, get and query. It then presents either a list of the indexes, or the data for one of the VPNs. Then you make an XML file in resources/script_queries/ for it.

Thanks for the reply, Howie. Yes, an indexed query is the target. One graph per vpn. The index would simply be the subinterface index value.

I understand what you're talking about, but I'll need examples and documentation on getting index, num_indexes, get and query to work in this situation. It's a bit over my head right now. I literally just started coding within the past few years, so I'm a typical code novice.

[md88dg]

Hello,

i have make a template to graph vpn tunnel stats. this template was craeted with cacti version 0.8.7d

netscreen_vpn_tunnel_stats.zip

Files for snmp queries and graph / data template

(8.92 KiB) Downloaded 190 times

[johnnylately]

md88dg, I tried importing the 3 xml files but I get "Error: XML: Hash version does not exist.". Is this specific to a version of Cacti? I'm using 0.8.7b.

Edit: Nevermind, hash shows your template created on newer version. Time for me to upgrade.