I'm trying to get iptables conntrack count and max values for several firewalls I manage.
I've installed and configured SNMPD on this firewalls and I'm using the "extend" funcionality in order to catch these values.
From my CACTI host I can do:
Code: Select all
$ snmpwalk -On -v1 -c public remote.upc.es UCD-SNMP-MIB::ucdavis.51
.1.3.6.1.4.1.2021.51.1.0 = INTEGER: 1
.1.3.6.1.4.1.2021.51.2.1.2.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = STRING: "/usr/local/sbin/current_conntrack_count.sh"
.1.3.6.1.4.1.2021.51.2.1.3.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = ""
.1.3.6.1.4.1.2021.51.2.1.4.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = ""
.1.3.6.1.4.1.2021.51.2.1.5.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = INTEGER: 5
.1.3.6.1.4.1.2021.51.2.1.6.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = INTEGER: 1
.1.3.6.1.4.1.2021.51.2.1.7.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = INTEGER: 1
.1.3.6.1.4.1.2021.51.2.1.20.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = INTEGER: 4
.1.3.6.1.4.1.2021.51.2.1.21.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = INTEGER: 1
.1.3.6.1.4.1.2021.51.3.1.1.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = STRING: "current_conntrack_count: 14164"
.1.3.6.1.4.1.2021.51.3.1.2.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = STRING: "current_conntrack_count: 14164
max_conntrack: 131072"
.1.3.6.1.4.1.2021.51.3.1.3.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = INTEGER: 2
.1.3.6.1.4.1.2021.51.3.1.4.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107 = INTEGER: 0
.1.3.6.1.4.1.2021.51.4.1.2.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107.1 = STRING: "current_conntrack_count: 14164"
.1.3.6.1.4.1.2021.51.4.1.2.17.99.117.114.114.101.110.116.95.99.111.110.110.116.114.97.99.107.2 = STRING: "max_conntrack: 131072"
I've read this howto and this documentation, but I don't understand. Can anyone help me?
Thanks in advance!