BIND 8/9 based DNS monitoring

[Guest]

Okay here is my problem and I hope someone can help. When I add the pass line to the snmpd.conf file, snmpd will no longer run. If I check the log files in /var/log/snmpd.log I see the following.

/usr/local/share/snmp/snmpd.conf: line 138: Error: Already have an entry for this process.
/usr/local/share/snmp/snmpd.conf: line 141: Error: Already have an entry for this process.
/usr/local/share/snmp/snmpd.conf: line 144: Error: Already have an entry for this process.

I checked and that does not make sense, as soon as I remove the pass line everything starts up just fine. What am I missing?

[zekyl314]

Oh yea, I am running RH 7.2 and the latest net-snmp.

[zekyl314]

Alright, I figured out the problem. For some reason calling the snmpd.conf file was the issue. As soon as I just started snmpd with no options everything worked. How strange. I looked for duplicate snmpd.conf files and found none. Anyhow everything works like a charm now.

[chzdhippt]

I have written a PHP script (but I am calling it the old script/command way, with PHP -q script <args>) to collect DNS Query data from an Infoblox DNSOne server, but I seem to be having a little glitch with my graph template. I know that the poller.php is getting the proper data back as far as my numbers of queries goes, but the graphs still show either 1 or 0 for MIN and MAX, and AVERAGE shows a %8.2lf number between 0 and 1.

Anyway, here is the code to make it work.

Code: Select all

<?php
$no_http_headers = true;
error_reporting(E_ERROR);
include_once(dirname(__FILE__) . "/../include/config.php");
include_once(dirname(__FILE__) . "/../lib/snmp.php");

$items[] = array(
        "names" => "query_Success",
        "oids" => ".1.3.6.1.4.1.7779.1.1.1.1",
        "values" => "0"
        );
$items[] = array(
        "names" => "query_Referral",
        "oids" => ".1.3.6.1.4.1.7779.1.1.1.2",
        "values" => "0"
        );
$items[] = array(
        "names" => "query_NxRRset",
        "oids" => ".1.3.6.1.4.1.7779.1.1.1.3",
        "values" => "0"
        );
$items[] = array(
        "names" => "query_NxDomain",
        "oids" => ".1.3.6.1.4.1.7779.1.1.1.4",
        "values" => "0"
        );
$items[] = array(
        "names" => "query_Recursion",
        "oids" => ".1.3.6.1.4.1.7779.1.1.1.5",
        "values" => "0"
        );
$items[] = array(
        "names" => "query_Failure",
        "oids" => ".1.3.6.1.4.1.7779.1.1.1.6",
        "values" => "0"
        );

$hostname = $_SERVER["argv"][1];
$snmp_community = $_SERVER["argv"][2];
$snmp_version = $_SERVER["argv"][3];
/* This was for debugging
$hostname = "<somehost>";
$snmp_community = "<somecommunity>";
$snmp_version = "1";
*/

for ($i=0;($i<sizeof($items));$i++) {
        $oid = $items[$i]["oids"];
        $data = reindex(cacti_snmp_walk($hostname, $snmp_community, "$oid", $snmp_version, "", "", 161, 1000));
        $items[$i]["values"] = "$data[0]";
}

for ($i=0;($i<sizeof($items));$i++) {
                print $items[$i]["names"] . ":" . $items[$i]["values"] . " ";
}
/* this is here because i had a problem with cacti not reading the last item */
print "#:# ";

function reindex($arr) {
        $return_arr = array();

        for ($i=0;($i<sizeof($arr));$i++) {
                $return_arr[$i] = $arr[$i]["value"];
        }

        return $return_arr;
}

?>

If someone could turn it into PHP Script Server code, I would be eternally grateful. I tried to do it with very little success.

[chzdhippt]

Actually, you could edit this script to work for ANY item you need to collect a bunch of individual data for, since the OIDs and output names are configured in the $items[] array.

Hope it is useful to someone, I use it for tons of things.

[mtimbroims]

"he data seems to return fine when using the bind9-stats.pl script manually, and the stat generation script is running perfectly in crontab, and the poller seems to be working (all my other graphs are fine.)

But my bind graphs continue to show nothing but nan as values."

Try checking your permission rights on the rra directory; I did so and that was the problem.

[pprice]

I'm having the same problem:
+ Running data query [11].
+ Found type = '3' [snmp query].
+ Found data query XML file at '/usr/local/apache/htdocs/cacti/resource/snmp_queries/bind9-stats-snmp.xml'
+ XML file parsed ok.
+ Executing SNMP walk for list of indexes @ '.1.3.6.1.4.1.2021.55.1'
+ No SNMP data returned
+ Found data query XML file at '/usr/local/apache/htdocs/cacti/resource/snmp_queries/bind9-stats-snmp.xml'
+ Found data query XML file at '/usr/local/apache/htdocs/cacti/resource/snmp_queries/bind9-stats-snmp.xml'
+ Found data query XML file at '/usr/local/apache/htdocs/cacti/resource/snmp_queries/bind9-stats-snmp.xml'

Freebsd 4.8
Perl 5.005_03

If I use the test.sh example listed in an earlier message here, I can snmpwalk the data. Not so with bind9-stats-snmpd.pl

The oidstats() routine is the last thing printed if I set DEBUG 1

My named.stats file is being written and is readable

There appears to be something wrong with bind9-stats-snmpd.pl but I'm not a Perl programmer....

[turbo]

I've been rewriting a perl script by Dobrica Pavlinusic (which used 'rndc stats') to output a indexed SNMP table.
With this came some serious thinking on how a MIB is written and how Cacti (v0.8.6c) should be setup to utilize this.

I can finaly release what I did (I'm waiting for confirmation on the subscription of the cacti user list so I can announce it there to).

I'm not perfectly happy about the actuall graph output. I'm not sure if that's how it should look, so take the XML template with a bucket of salt


http://www.bayour.com/bind9-snmp/

[havok1977]

Hey guys, i was wondering if anyone could help me out, i have downloaded and configured everything to get the bind9-snmp-stats.pl script working, and now im generating the statistics file and getting it thru snmp like this:

metroweb:/var/www/cacti/log# snmpwalk -v1 -On -c XXXXXXX ZZZ.ZZ.ZZ.Z .1.3.6.1.4.1.8767.2.1
.1.3.6.1.4.1.8767.2.1.1.0 = INTEGER: 6
.1.3.6.1.4.1.8767.2.1.2.0 = INTEGER: 6
.1.3.6.1.4.1.8767.2.1.3.1.1.1 = INTEGER: 1
.1.3.6.1.4.1.8767.2.1.3.1.1.2 = INTEGER: 2
.1.3.6.1.4.1.8767.2.1.3.1.1.3 = INTEGER: 3
.1.3.6.1.4.1.8767.2.1.3.1.1.4 = INTEGER: 4
.1.3.6.1.4.1.8767.2.1.3.1.1.5 = INTEGER: 5
.1.3.6.1.4.1.8767.2.1.3.1.1.6 = INTEGER: 6
.1.3.6.1.4.1.8767.2.1.3.1.2.1 = STRING: "success"
.1.3.6.1.4.1.8767.2.1.3.1.2.2 = STRING: "referral"
.1.3.6.1.4.1.8767.2.1.3.1.2.3 = STRING: "nxrrset"
.1.3.6.1.4.1.8767.2.1.3.1.2.4 = STRING: "nxdomain"
.1.3.6.1.4.1.8767.2.1.3.1.2.5 = STRING: "recursion"
.1.3.6.1.4.1.8767.2.1.3.1.2.6 = STRING: "failure"
.1.3.6.1.4.1.8767.2.1.3.1.3.1 = Counter32: 879906
.1.3.6.1.4.1.8767.2.1.3.1.3.2 = Counter32: 9
.1.3.6.1.4.1.8767.2.1.3.1.3.3 = Counter32: 50872
.1.3.6.1.4.1.8767.2.1.3.1.3.4 = Counter32: 498960
.1.3.6.1.4.1.8767.2.1.3.1.3.5 = Counter32: 850803
.1.3.6.1.4.1.8767.2.1.3.1.3.6 = Counter32: 51132
.1.3.6.1.4.1.8767.2.1.3.1.4.1 = Counter32: 23889
.1.3.6.1.4.1.8767.2.1.3.1.4.2 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.3.1.4.3 = Counter32: 654
.1.3.6.1.4.1.8767.2.1.3.1.4.4 = Counter32: 50184
.1.3.6.1.4.1.8767.2.1.3.1.4.5 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.3.1.4.6 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.3.1.5.1 = Counter32: 618
.1.3.6.1.4.1.8767.2.1.3.1.5.2 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.3.1.5.3 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.3.1.5.4 = Counter32: 19
.1.3.6.1.4.1.8767.2.1.3.1.5.5 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.3.1.5.6 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.1.1 = INTEGER: 1
.1.3.6.1.4.1.8767.2.1.4.1.1.2 = INTEGER: 2
.1.3.6.1.4.1.8767.2.1.4.1.1.3 = INTEGER: 3
.1.3.6.1.4.1.8767.2.1.4.1.1.4 = INTEGER: 4
.1.3.6.1.4.1.8767.2.1.4.1.1.5 = INTEGER: 5
.1.3.6.1.4.1.8767.2.1.4.1.1.6 = INTEGER: 6
.1.3.6.1.4.1.8767.2.1.4.1.2.1 = STRING: "0.in-addr.arpa"
.1.3.6.1.4.1.8767.2.1.4.1.2.2 = STRING: "127.in-addr.arpa"
.1.3.6.1.4.1.8767.2.1.4.1.2.3 = STRING: "255.in-addr.arpa"
.1.3.6.1.4.1.8767.2.1.4.1.2.4 = STRING: "XXXX.com.mx"
.1.3.6.1.4.1.8767.2.1.4.1.2.5 = STRING: "localhost"
.1.3.6.1.4.1.8767.2.1.4.1.2.6 = STRING: "YYYYY.com.mx"
.1.3.6.1.4.1.8767.2.1.4.1.3.1 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.3.2 = Counter32: 618
.1.3.6.1.4.1.8767.2.1.4.1.3.3 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.3.4 = Counter32: 117
.1.3.6.1.4.1.8767.2.1.4.1.3.5 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.3.6 = Counter32: 23397
.1.3.6.1.4.1.8767.2.1.4.1.4.1 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.4.2 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.4.3 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.4.4 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.4.5 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.4.6 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.5.1 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.5.2 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.5.3 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.5.4 = Counter32: 1
.1.3.6.1.4.1.8767.2.1.4.1.5.5 = Counter32: 1
.1.3.6.1.4.1.8767.2.1.4.1.5.6 = Counter32: 647
.1.3.6.1.4.1.8767.2.1.4.1.6.1 = Counter32: 19
.1.3.6.1.4.1.8767.2.1.4.1.6.2 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.6.3 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.6.4 = Counter32: 34
.1.3.6.1.4.1.8767.2.1.4.1.6.5 = Counter32: 1
.1.3.6.1.4.1.8767.2.1.4.1.6.6 = Counter32: 50145
.1.3.6.1.4.1.8767.2.1.4.1.7.1 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.7.2 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.7.3 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.7.4 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.7.5 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.7.6 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.8.1 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.8.2 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.8.3 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.8.4 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.8.5 = Counter32: 0
.1.3.6.1.4.1.8767.2.1.4.1.8.6 = Counter32: 0

I bumped into something when creating the graphs in the cacti console, first i imported the templates and copied the snmp queries to the corresponding folder, i figured that i had two choices of querying and so i created a softlink from bind9-stats_domains.xml to bind9-stats-snmp.xml to get stats for each domain. Then i associated the BIND 9 Statistics (SNMP) Data Query to the desired device within Cacti and cool, it works:

+ Running data query [10].
+ Found type = '3' [snmp query].
+ Found data query XML file at '/var/www/cacti/resource/snmp_queries/bind9-stats-snmp.xml'
+ XML file parsed ok.
+ Executing SNMP walk for list of indexes @ '.1.3.6.1.4.1.8767.2.1.4.1.1'
+ Located input field 'b9stIndexDomains' [walk]
+ Executing SNMP walk for data @ '.1.3.6.1.4.1.8767.2.1.4.1.1'
+ Found item [b9stIndexDomains='1'] index: 1 [from value]
+ Found item [b9stIndexDomains='2'] index: 2 [from value]
+ Found item [b9stIndexDomains='3'] index: 3 [from value]
+ Found item [b9stIndexDomains='4'] index: 4 [from value]
+ Found item [b9stIndexDomains='5'] index: 5 [from value]
+ Found item [b9stIndexDomains='6'] index: 6 [from value]
+ Located input field 'b9stDomainName' [walk]
+ Executing SNMP walk for data @ '.1.3.6.1.4.1.8767.2.1.4.1.2'
+ Found item [b9stDomainName='0.in-addr.arpa'] index: 1 [from value]
+ Found item [b9stDomainName='127.in-addr.arpa'] index: 2 [from value]
+ Found item [b9stDomainName='255.in-addr.arpa'] index: 3 [from value]
+ Found item [b9stDomainName='conecta.com.mx'] index: 4 [from value]
+ Found item [b9stDomainName='localhost'] index: 5 [from value]
+ Found item [b9stDomainName='metrored.com.mx'] index: 6 [from value]
+ Found data query XML file at '/var/www/cacti/resource/snmp_queries/bind9-stats-snmp.xml'
+ Found data query XML file at '/var/www/cacti/resource/snmp_queries/bind9-stats-snmp.xml'
+ Found data query XML file at '/var/www/cacti/resource/snmp_queries/bind9-stats-snmp.xml'
+ Found data query XML file at '/var/www/cacti/resource/snmp_queries/bind9-stats-snmp.xml'
+ Found data query XML file at '/var/www/cacti/resource/snmp_queries/bind9-stats-snmp.xml'

Then i created the graphs for two of there domains from the "Create Graphs for this Host" option, i realized that for some reason the data sources were not created cleanly, this is what the rrdtool debug shows:

Data Source Debug

/usr/bin/rrdtool create \
/var/www/cacti/rra/metrodns_nxrrset_93.rrd \
--step 300 \
DS:nxrrset:DERIVE:600:0:100 \
DS:success:DERIVE:600:0:U \
DS:referral:DERIVE:600:0:100 \
DS:recursion:DERIVE:600:0:100 \
DS:nxdomain:DERIVE:600:0:100 \
DS:failure:DERIVE:600:0:100 \
DS:success:DERIVE:600:0:U \
DS:failure:DERIVE:600:0:100 \
DS:nxdomain:DERIVE:600:0:100 \
DS:recursion:DERIVE:600:0:100 \
DS:referral:DERIVE:600:0:100 \
DS:nxrrset:DERIVE:600:0:100 \
DS:nxrrset:DERIVE:600:0:100 \
DS:success:DERIVE:600:0:U \
DS:referral:DERIVE:600:0:100 \
DS:recursion:DERIVE:600:0:100 \
DS:nxdomain:DERIVE:600:0:100 \
DS:failure:DERIVE:600:0:100 \
DS:success:DERIVE:600:0:U \
DS:failure:DERIVE:600:0:100 \
DS:nxdomain:DERIVE:600:0:100 \
DS:recursion:DERIVE:600:0:100 \
DS:referral:DERIVE:600:0:100 \
DS:nxrrset:DERIVE:600:0:100 \
RRA:AVERAGE:0.5:1:600 \
RRA:AVERAGE:0.5:6:700 \
RRA:AVERAGE:0.5:24:775 \
RRA:AVERAGE:0.5:288:797 \
RRA:MIN:0.5:1:600 \
RRA:MIN:0.5:6:700 \
RRA:MIN:0.5:24:775 \
RRA:MIN:0.5:288:797 \
RRA:MAX:0.5:1:600 \
RRA:MAX:0.5:6:700 \
RRA:MAX:0.5:24:775 \
RRA:MAX:0.5:288:797 \
RRA:LAST:0.5:1:600 \
RRA:LAST:0.5:6:700 \
RRA:LAST:0.5:24:775 \
RRA:LAST:0.5:288:797 \


As you can see, the DS's get repeated several times and i have no idea why, i ran the creation from command line without the repeated DS's and i tought that would fix it, i can even see a blank graph now.

BUT - The graph is not being populated the cacti log doesnt show the corresponding SNMP calls to the host and i got stuck, can anyone help me out?

[schef4711]

Hello,

maybe anybody can help me. I use SuSE Linux 9.1 with cacti0.8.6e-2.3 and the DNS (bind 9.3.1-3) on a different SuSE Linux 8.2 server.

So was going through the TXT file and installed alle the files on the server (cacti) and also on the DNS server but I don't find the /etc/snmp.conf because this file don't exist on SuSE Linux.

So I don't know where I must add the line "mibs....." ? Any idea ??

On Cacti I don't only the following Query :

+ Running data query [11].
+ Unknown type = ''
+ Found data query XML file at '/usr/share/cacti/resource/snmp_queries/bind9-stats.xml'
+ Found data query XML file at '/usr/share/cacti/resource/snmp_queries/bind9-stats.xml'
+ Found data query XML file at '/usr/share/cacti/resource/snmp_queries/bind9-stats.xml'

SNMP - Local - Bind9 Statistics (Verbose Query) Success [0 Items, 0 Rows]

So I don't know if there is any trouble because I use 2 different servers for cacti and DNS but the snmp.conf file is the same on both servers.

bye alex

[jforman]

I've been rewriting a perl script by Dobrica Pavlinusic (which used 'rndc stats') to output a indexed SNMP table.
With this came some serious thinking on how a MIB is written and how Cacti (v0.8.6c) should be setup to utilize this.

I can finaly release what I did (I'm waiting for confirmation on the subscription of the cacti user list so I can announce it there to).

I'm not perfectly happy about the actuall graph output. I'm not sure if that's how it should look, so take the XML template with a bucket of salt


http://www.bayour.com/bind9-snmp/

i am having a great deal of issues trying to find the correct way to run the perl script. any examples you can provide would be greatly appreciated.

[dwllnet]

Hello,

maybe anybody can help me. I use SuSE Linux 9.1 with cacti0.8.6e-2.3 and the DNS (bind 9.3.1-3) on a different SuSE Linux 8.2 server.

So was going through the TXT file and installed alle the files on the server (cacti) and also on the DNS server but I don't find the /etc/snmp.conf because this file don't exist on SuSE Linux.

So I don't know where I must add the line "mibs....." ? Any idea ??

On Cacti I don't only the following Query :

+ Running data query [11].
+ Unknown type = ''
+ Found data query XML file at '/usr/share/cacti/resource/snmp_queries/bind9-stats.xml'
+ Found data query XML file at '/usr/share/cacti/resource/snmp_queries/bind9-stats.xml'
+ Found data query XML file at '/usr/share/cacti/resource/snmp_queries/bind9-stats.xml'

SNMP - Local - Bind9 Statistics (Verbose Query) Success [0 Items, 0 Rows]

So I don't know if there is any trouble because I use 2 different servers for cacti and DNS but the snmp.conf file is the same on both servers.

bye alex

schef4711,
I got the same error message, I traced it down to be a missing assignment in the snmp_query table.

Look in the snmp_query table and find the bind9* rows, change the data_input_id field from 0 to 2 and every should work.

[belainex]

How can i have sure the dns service is working in my computer? In the Administrative Tools - Services is up and running but how can i see if my computer is responding? i don't find any command to see if is actually running, because i think Kaspersky anti-virus disable the service....
_____________________________
yahoo keyword tool ~ overture ~ traffic estimator ~ adwords traffic estimator

[aggie]

How can i have sure the dns service is working in my computer? In the Administrative Tools - Services is up and running but how can i see if my computer is responding? i don't find any command to see if is actually running, because i think Kaspersky anti-virus disable the service....

This wouldn't appear to be a Cacti related question? It wouldn't even appear to be a Bind (DNS Server) related question? You appear to be talking about the Windows - DNS Server.

I would suggest posing this question on a completely different forum (something Windows server related maybe?!)

[Count Zero]

Recently I developed a Perl SNMP Subagent to monitor Bind9 Statistics parsing the new stats file format (I don't know since which Bind9 version it changed).

You can find information about the Installation and configuration of the agent at http://www.l3jane.net/wiki/factory:projects:b9agent_en.

Keep in mind that I doesn't speak english very well, and I'm not a very good perl programmer (don't scare if you look at the code).

Probably it could be better (any suggestions will be agreed) but works for me. (tested it in Debian/Ubuntu)