snmp traps like others nms

mlist · Post by **mlist** » Sat Nov 12, 2005 11:20 am

I have several cisco routers with snmp traps configured to send traps to a nms server (whatsup or n-view from http://n-view.de).
I already use cacti to monitor others services but I woul like to use only cacti as nms server but I need the ability to receice traps from cisco devices in the same way of whatsup.
In fact i already tried to use thold but it simply checks snmp devices and, if they don't respond to snmp request, it shows a down host; this isn't the same thing.....

Can you add this future that in my opinion in needed in a tool like cacti?
Thanks!

bulek · Post by **bulek** » Tue Nov 15, 2005 6:16 am

Whole Cacti (and rrdtoold) concept is based on polling... any data Cacti receives come in synchronous manner every 5 min by default. SNMP traps however are asynchronous events and do not fit here in any way.

- Piotr

ppollet73 · Post by **ppollet73** » Tue Nov 15, 2005 6:24 am

It will be just a great add-on extending the actual cacti capabilities.

I think, it's a killer feature

Regards

Pipol

mlist · Post by **mlist** » Tue Nov 15, 2005 8:49 am

Ok...

now I know it insn't possible. I hope some guru (THe witness, rony, cigamit.....etc) will add this wonderful future!!!!

Hi

Post by **TheWitness** » Tue Nov 15, 2005 3:17 pm

An intellegent NOC will monitor their SYSLOG's and generate alarms using an event correlation engine. We can add traps to Cacti based upon HOST UP/DOWN events, but that's what the syslogging is all about.

TheWitness

mlist · Post by **mlist** » Tue Nov 15, 2005 3:35 pm

Hi mitic Thewitness,

I apologize for my stupid question (and, maybe....my poor english knowledge) but your reply is not clear to me.

What is an intelligent noc?
you told: that's what the syslogging is all about.
I would like to configure cisco devices with something like this:
(The following example enables the router to send all traps to the host using the community string "public")

snmp-server enable traps snmp
snmp-server host 172.30.2.160 public snmp

(172.30.2.160 shoud be my cacti server)

Do you mean that is not possible to receive this traps with cacti? Why?
A lot of snmp software like whatsup and n-view.de or prtg are enabled. WHy cacti no?

Thanks

Post by **TheWitness** » Tue Nov 15, 2005 6:14 pm

If you are talking of Cacti being a Trap receiver, the author was not interested in taking the product into that realm. Per the author/inventor of Cacti, the intent of product is to be a graphing solution, not an (adjectives removed) NMS.

There are several other packages that do that just fine. Now, three years from now, will the answer be the same, I don't know.

Regards,

TheWitness

mlist · Post by **mlist** » Wed Nov 16, 2005 2:39 pm

Ok TheWitness,

I have understood the concept. This is not important for me, this was just a curiosity.
Cacti will be one of my favourites open source program!

Thanks!!!

by from Italy

N3NCY · Post by **N3NCY** » Sat Mar 11, 2006 12:52 am

You can use Cacti as an SNMP trapd receiver.
I do.

In fact, I have my SNMP traps get logged directly into Syslog.
One stop shopping for Traps and Syslogging.

You can see what I am doing here:
http://members.netjunkies.net/n3ncy/Fre ... t-SNMP.htm
Under Step 3 look at my changes.

I have Syslogd and Traplogd both dumping to /var/log/messages

I currently use Cacti as my only NMS platform.

I am working on a more advanced Trap and Syslog parsing, alerting and rules based database archiving using Syslog-NG
http://www.balabit.com/products/syslog_ng/

This would all eventually end up on the Syslog tab via the plugin architecture that is already built and tested by others.

Post by **TheWitness** » Sat Mar 11, 2006 8:06 am

you rule!

TheWitness

mlist · Post by **mlist** » Sat Mar 11, 2006 9:37 am

hi N3NCY

I think it would be a cool plug-in. I hope someone will integrate this future in cacti

Thanks for your suggestion!

ccsdnoc · Post by **ccsdnoc** » Tue Mar 14, 2006 7:15 pm

I too have been working hard to get the SNMP Trap -> syslog work as well. I have been trying to get SNMPTT to work as well, which would make the traps more meaningful. So far, no luck. But, I do have the traps coming in, being logged, i can get them into Cacti syslog plug-in with no problem...getting them translated and broken down correctly, is a bit tougher. As well as getting the right color coding, like "ColdRestart" Warning or Critical.

cactiuser0 · Post by **cactiuser0** » Fri Apr 21, 2006 2:13 pm

I have to second what theWittness said. What cacti good is graph
reporting. Not NMS/alerting. I would like to see cacti focus on
reporting stuff, such as ability to build group of reports,
daily/weekly/yearly reports, top n reports...

syslog plugin is cool, but it should stay as plugin

spoonman · Post by **spoonman** » Tue Sep 12, 2006 8:32 am

Any luck on geting this setup with snmptt?? I'm trying to setup snmptrapd with snmptt...i already have syslog-ng setup with the haloe plugin here...that works great!! If I can have traps accepted using snmptrapd and translated into syslog it would be nice. I could then setup alerts on stuff// Anyone care to post their working configs for all this.

Thanks

N3NCY · Post by **N3NCY** » Tue Sep 12, 2006 1:35 pm

What is the advantage of snmptt over the net-snmp tools?
I have snmptraplogd running ok with net-snmp.
I just never tried snmptt.

Cacti

snmp traps like others nms

snmp traps like others nms

We'll wait this future

Who is online