Cisco SNMP: extremely confused

[Javik]

Sorry, I must be an idiot or something. I just cannot figure this software out. I want to graph the broadcast traffic of every Cisco switch port in this building. The default counters do not seem to provide a way to do this, and I can't see how to add this as an "autoprobe" capability.

I have installed the most recent Ubuntu, and installed its included Cacti 1.1.38.

I want to generate broadcast packet in/out and multicast packet in/out for about 500 network switch ports.

I have been looking through the built-in default templates, and I do not see where the OID is specified for them to read SNMP data.

,

For example, SNMPwalk on chassis switch 172.20.0.131, a Cisco 4500E with two 48-port gigabit modules and two 10 gigabit uplinks, retrieve all this once a minute:

IF-MIB::ifHCInMulticastPkts.3 = Counter64: 8174395
IF-MIB::ifHCInBroadcastPkts.3 = Counter64: 16363473
IF-MIB::ifHCOutMulticastPkts.3 = Counter64: 49720554
IF-MIB::ifHCOutBroadcastPkts.3 = Counter64: 12139786

(EDIT: shorten, summarize this)

[netniV]

The OID is held against the data template/query.

[Javik]

?? I don't see it.

Left side: Templates -> Data Source -> Pick one ... "Interface - Traffic"


* Lots of stuff about SNMP, but no actual OID listed on the page.





Left side: Data Collection -> Data Queries -> Pick one ... "SNMP Interface Statistics"

* Lots of stuff about SNMP, but no actual OID listed on the page.





Left side: Data Collection -> Data Queries -> Pick one ... "SNMP Interface Statistics" ... Pick one .. Associated Graph Template: "In/Out bytes"

* Lots of stuff about SNMP, but no actual OID listed on the page.




This GUI drives me nuts. I don't see OIDs listed anywhere.

[Javik]

After randomly poking around some more, I have been able to discover OIDs for the items that say only "Get SNMP Data". However, for any item listed as "Get SNMP Data (Indexed)" there is no OID and nothing that I can find that indicates how it works.

Data source -> Pick one that is type "Get SNMP Data" -> OID is listed

Data source -> Pick one that is type "Get SNMP Data (Indexed)" -> No OID listed, and nothing on the GUI page explains how this data source is accessing an OID.

[netniV]

Take a look at Data Queries documentation.

[Javik]

I'm still not really getting this software. I've been wading through the documentation and the files..

The file "interfaces.xml" in file path in "/usr/share/cacti/resource/snmp_queries" doesn't look like the documentation at https://github.com/Cacti/documentation/ ... Queries.md

,

Why are all these OID queries jammed into a single XML file? Apparently every one of the subsections should have its own seven-line header group, not instead having them all smushed together..

Code: Select all

        <name>Get SNMP Interfaces</name>
        <description>Queries a host for a list of monitorable interfaces</description>
        <oid_index>.1.3.6.1.2.1.2.2.1.1</oid_index>
        <oid_num_indexes>.1.3.6.1.2.1.2.1.0</oid_num_indexes>
        <index_order>ifDescr:ifName:ifHwAddr:ifIndex</index_order>
        <index_order_type>numeric</index_order_type>
        <index_title_format>|chosen_order_field|</index_title_format>

,

Also why are these multiple SNMP queries listed in random OID numeric order? This random ordering of OIDs makes it virtually impossible to figure out what OIDs are missing from interfaces.xml, simply walking through a default SNMPwalk output.

Default OID order in interfaces.xml:
<oid>.1.3.6.1.2.1.2.2.1.1</oid>
<oid>.1.3.6.1.2.1.2.2.1.8</oid>
<oid>.1.3.6.1.2.1.2.2.1.2</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.1</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.18</oid>
<oid>.1.3.6.1.2.1.2.2.1.3</oid>
<oid>.1.3.6.1.2.1.2.2.1.5</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.15</oid>
<oid>.1.3.6.1.2.1.2.2.1.6</oid>
<oid>.1.3.6.1.2.1.2.2.1.10</oid>
<oid>.1.3.6.1.2.1.2.2.1.16</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.6</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.10</oid>
<oid>.1.3.6.1.2.1.4.31.3.1.5.1</oid>
<oid>.1.3.6.1.2.1.4.31.3.1.32.1</oid>
<oid>.1.3.6.1.2.1.4.31.3.1.6.1</oid>
<oid>.1.3.6.1.2.1.4.31.3.1.33.1</oid>
<oid>.1.3.6.1.2.1.4.31.3.1.5.2</oid>
<oid>.1.3.6.1.2.1.4.31.3.1.32.2</oid>
<oid>.1.3.6.1.2.1.4.31.3.1.6.2</oid>
<oid>.1.3.6.1.2.1.4.31.3.1.33.2</oid>
<oid>.1.3.6.1.2.1.2.2.1.13</oid>
<oid>.1.3.6.1.2.1.2.2.1.19</oid>
<oid>.1.3.6.1.2.1.2.2.1.12</oid>
<oid>.1.3.6.1.2.1.2.2.1.18</oid>
<oid>.1.3.6.1.2.1.2.2.1.11</oid>
<oid>.1.3.6.1.2.1.2.2.1.17</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.2</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.4</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.3</oid>
<oid>.1.3.6.1.2.1.31.1.1.1.5</oid>
<oid>.1.3.6.1.2.1.2.2.1.14</oid>
<oid>.1.3.6.1.2.1.2.2.1.20</oid>
<oid>.1.3.6.1.2.1.4.20.1.2</oid>

It's obvious which OIDs are missing from this list...

[netniV]

If you would like to help out and update the documentation, please feel free to submit a PR with the changes you believe are appropriate and we'll get them merged. The documentation has had some review/revisions over the past few months from others but it's far from perfect since we don't actually have a technical writer on our team.

[riversdev0]

I'm new to Cacti, so I may be totally off base here. But, in an effort to help, I thought I would point out that static OIDs are contained directly inside a template because the OID does not change from one device to another. OIDs such as what you're looking for (multicasts & broadcasts, per interface of a switch) do change from switch to switch because the interface identifier (called the index) changes. So the XML file helps Cacti gather the list of interface indexes so that it can collect the data you wish from the interfaces that you wish.

Having said that, what you're asking for (multicasts & broadcasts, per interface of a switch) is available by default on my version of Cacti. I'm running a stock installation of 1.2.10 and i can go to "Management > Devices > [device name] > Create Graphs for this Device", and there I see a list of all interfaces on the switch. I can check all the interface boxes, choose "In/Out (Broadcasts)" from the drop-down list and click Create. If I repeat the process and pick "In/Out (Multicasts)" from the drop-down, then isn't this exactly what your looking for?

Hope this helps you, or someone else.