Basic TippingPoint IPS Host Template

[Xumet]

Hi!

I've created a very basic host template for TP IPS. Now only graphs CPU, Mem and Temp.
I'll trying to improve it.

See you
Xavier

PS: Version 0.8.7d

[charlesdf23]

this would be awesome if you could get most of the info. We have been trying to accomplish in our spare time little results.

[yreddy]

Hi,

I made a TippingPoint IPS template with the following graphs:
- Attack Per Action
- Attack Per Protocol
- Attack Per Severity
- CPU Usage
- Memory Usage
- Packets (incoming, outgoing, discarded due to congestion)
- Blocked Streams
- Rate Limited Streams
- System Log Entries
- Temperature
- uptime
- Network Interface

Download the template on the official template site :
http://docs.cacti.net/usertemplate:host ... ppingpoint

Let me know if you see any bugs and I'll try to fix them.
Youri

[Linegod]

If you get a chance, please post these to the templates site:

http://docs.cacti.net/templates
http://docs.cacti.net/templates.guidelines

[yreddy]

Ok it is on the template site now:
http://docs.cacti.net/usertemplate:host ... ppingpoint

Youri

[Linegod]

Thanks...

[Deviloper]

Big Thx for posting your template!

[Deviloper]

Using the Syslog-Template I got this error:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="b-***EDIT***.de - System Log Entries" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="log entry per 5 minutes" \
--slope-mode \
--font TITLE:9: \
--font AXIS:8: \
--font LEGEND:8: \
--font UNIT:8: \
DEF:a="/var/www/cacti-0.8.7e/rra/b-_de_tplogin_58561.rrd":TPLOGIN:LAST \
DEF:b="/var/www/cacti-0.8.7e/rra/b-_de_tplogwa_58562.rrd":TPLOGWA:LAST \
DEF:c="/var/www/cacti-0.8.7e/rra/b-_de_tploger_58560.rrd":TPLOGER:LAST \
DEF:d="/var/www/cacti-0.8.7e/rra/b-_de_tplogcr_58559.rrd":TPLOGCR:AVERAGE \
CDEF:cdefa=a,300,* \
CDEF:cdefe=b,300,* \
CDEF:cdefi=c,300,* \
CDEF:cdefbc=d,300,* \
LINE1:cdefa#0000FFFF:"Info" \
GPRINT:cdefa:LAST:" Last\:%8.2lf %s" \
GPRINT:cdefa:AVERAGE:"Avg\:%8.2lf %s" \
GPRINT:cdefa:MAX:"Max\:%8.2lf %s\n" \
LINE1:cdefe#FFF200FF:"Warning" \
GPRINT:cdefe:LAST:" Last\:%8.2lf %s" \
GPRINT:cdefe:AVERAGE:"Avg\:%8.2lf %s" \
GPRINT:cdefe:MAX:"Max\:%8.2lf %s\n" \
LINE1:cdefi#FF7D00FF:"Error" \
GPRINT:cdefi:LAST:" Last\:%8.2lf %s" \
GPRINT:cdefi:AVERAGE:"Avg\:%8.2lf %s" \
GPRINT:cdefi:MAX:"Max\:%8.2lf %s\n" \
LINE1:cdefbc#FF0000FF:"Critical" \
GPRINT:cdefbc:LAST:"Last\:%8.2lf %s" \
GPRINT:cdefbc:AVERAGE:"Avg\:%8.2lf %s" \
GPRINT:cdefbc:MAX:"Max\:%8.2lf %s\n" \
COMMENT:"Graph Last Updated\: Wed 10 Mar 13\:01\:23 CET 2010\n"

RRDTool Says:

ERROR: the RRD does not contain an RRA matching the chosen CF

[yreddy]

Hi,

I changed the CF "LAST" for CF "AVERAGE" in the Graph Templates "TippingPoint - System Log Entries" and I believe it should have fixed the issue. Let me know if it not the case, new version is cacti087d_tippingpoint_ips-20100315.zip:
http://docs.cacti.net/usertemplate:host ... gpoint:ips

Youri

(updated on 2010-05-19: URLs revised)

[zillian]

Hi,
I'm new to cacti and i'm getting following error when i turn on graph debug mode.

RRDTool Command:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Total packets per second in" \
--rigid \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="packets/sec" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:10: \
--font UNIT:8: \
AREA:#4444FFFF:"Total Packets per Second In" \
GPRINT::LAST:"Current\:%8.2lf %s" \
GPRINT::AVERAGE:"Average\:%8.2lf %s" \
GPRINT::MAX:"Maximum\:%8.2lf %s\n"

RRDTool Says:

ERROR: parameter '#4444FFFF' does not represent a number in line AREA:#4444FFFF:Total Packets per Second In

Any idea?
thank in advance.

[yreddy]

Zilian,

I forgot to include the snmp_query file last time I've updated the template... It's now fixed (file cacti087e_tippingpoint_ips-yrg-20100511.zip), you can download it here:

http://docs.cacti.net/usertemplate:host ... gpoint:ips
(click on download and follow instructions)

Youri

(updated on 2010-05-19: URLs revised)

[freeman118]

Hi Yreddy;

Base on your tipping point ips instruction, I have import the file “cacti_host_template_*.xml” and upload tippingpoint_interface.xml to “resource/snmp_queries/ in the directory. However,

RRDTools say
ERROR: I don't understand ': Thu 29 Jul 15:55:02 HKT 2010\n' in command: 'COMMENT:Graph Last Updated: Thu 29 Jul 15:55:02 HKT 2010\n'.

Please, see attached docmunet for further information and any provide advise.

Thanks

freeman118