[XML] Netscreen CPU Memory and Session stats

[tsanchez37]

I don't think it's a path issue anymore.

None of my external scripts work with cactid - so I think it's a cactid issue.

The canned stuff works fine, but nothing else seems to work.

I'm going to keep plugging away at it and see what happens.

[tsanche37]

Okay, so here's what I did.

I gave up using the script and the templates included and instead created a whole passel of new SNMP-based stuff.

Attached is a zip file with all the host, graph and data templates I am using now.

It is working on my install - YMMV

[pineh]

Thanks to you guys for making this template, saved me a lot of time trying to figure it out myself.

On my own, I managed to query subinterface traffic. It was fairly easy actually, I just copied the normal interface data source and was able to poll ETHERNET1.7 for example, which is my interface for VLAN7 on my NS25, then just copied the graph config from a main interface graph and changed the data sources as appropriate.

I assume this will also work with my vpn tunnel interfaces, but I haven't gotten that far yet.

I'm sort of lost on making these templates, but I'd be happy to go over my findings with anyone interested in developing a broader netscreen template.

Thanks again,

Hunter

[romp]

Okay, so here's what I did.
...
Attached is a zip file with all the host, graph and data templates I am using now.
It is working on my install - YMMV
...

Sorry,

I found no way to import these templates.
They just not appear after import.

# tested on Cacti v0.8.5a, verified by import another (cisco) template -> which works

any idea.
thanks
Christian

[pdb]

Hi,

I just installed it, and installation went fine, though only traffic monitoring works.

After further investigation I see that my Netscreen only exports very limited information through SNMP.

Is there any command needed to be run to get other stats?

I'm currently using a NetScreen 5GT... ScreenOS 5.x series

With what NetScreen's did you test this?

Thanks,
Pascal de Bruijn

[romp]

Hi,

after I upgraded last week to "cacti-0.8.6c" all works fine.
GROOVY & thx.

The only modifications I did to the original template were to include max sessions in the session graph [lg scale]

[on cacti-0.8.5 I used the script version before]


@ pdb
> After further investigation I see that my Netscreen only
> exports very limited information through SNMP.

Your NS didn't "export" information (only traps if wished), you ASK for information. and that's massive

Check out:
http://5xt.support.juniper.safeharbor.c ... skb718.htm

cheers
Christian

[dan.dycus]

When I run the netscreen_stats.pl script, I can see the values being returned from the firewall using tcpdump, but all the fields are left blank...

What should I do?

linux:/usr/local/cacti/scripts # perl netscreen_stats.pl 192.168.1.1 cpu1: cpu5: cpu15: memory_allocated: memoryAvailable: memoryFragmented: sessionsAllocated: sessionsMaximum: sessionsFailed: linux:/usr/local/cacti/scripts #

tcpdump proof that the firewall is answering:

11:42:17.724049 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(28 ) E:3224.16 (DF)
11:42:17.730269 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.1.1.0=3
11:42:17.730474 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.1.1.0 (DF)
11:42:17.738766 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.1.2.0=7
11:42:17.738871 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.1.2.0 (DF)
11:42:17.746636 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.1.3.0=8
11:42:17.746714 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.1.3.0 (DF)
11:42:17.754259 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.1.4.0=7
11:42:17.754338 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.1.4.0 (DF)
11:42:17.761631 192.168.1.1.snmp > linux.local.43060: GetResponse(35) E:3224.16.2.1.0=71921904
11:42:17.761707 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.2.1.0 (DF)
11:42:17.770377 192.168.1.1.snmp > linux.local.43060: GetResponse(35) E:3224.16.2.2.0=29436672
11:42:17.770454 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.2.2.0 (DF)
11:42:17.778998 192.168.1.1.snmp > linux.local.43060: GetResponse(33) E:3224.16.2.3.0=7021
11:42:17.779074 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.2.3.0 (DF)
11:42:17.786995 192.168.1.1.snmp > linux.local.43060: GetResponse(33) E:3224.16.3.2.0=11612
11:42:17.787070 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.3.2.0 (DF)
11:42:17.794117 192.168.1.1.snmp > linux.local.43060: GetResponse(34) E:3224.16.3.3.0=128000
11:42:17.794192 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.3.3.0 (DF)
11:42:17.802488 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.3.4.0=0
11:42:17.802563 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.3.4.0 (DF)
11:42:17.809985 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.17.1.1.0=0

Thanks all...

OR, perhaps there is a better solution out there right now for monitoring Netscreen firewalls with Cacti?

I was able to import the XML files and everything else ok in the cacti interface, (seeing as it displays the firewall's S/N and contact info) but I'm not getting any charts.

Regards

[romp]

[quote=
OR, perhaps there is a better solution out there right now for monitoring Netscreen firewalls with Cacti?

I was able to import the XML files and everything else ok in the cacti interface, (seeing as it displays the firewall's S/N and contact info) but I'm not getting any charts.

Regards[/quote]

Try to use the "netscreen_stats.zip" Version without (netscreen_stats.pl) script.

[starkie]

Thanks to you guys for making this template, saved me a lot of time trying to figure it out myself.

On my own, I managed to query subinterface traffic. It was fairly easy actually, I just copied the normal interface data source and was able to poll ETHERNET1.7 for example, which is my interface for VLAN7 on my NS25, then just copied the graph config from a main interface graph and changed the data sources as appropriate.

I assume this will also work with my vpn tunnel interfaces, but I haven't gotten that far yet.

I'm sort of lost on making these templates, but I'd be happy to go over my findings with anyone interested in developing a broader netscreen template.

Thanks again,

Hunter

Hi Hunter.

i am trying to do the same and I am getting stuck. Any help would be appreciated

[aboyz]

Thanks Fletch for the work you've done. Hope you don't mind I fixed a few bugs I found and repackaged everything:
+The script assumes the community is public it now gets it from the Device entry snmp_community
+Input String of Data Input Method tried to find the script in a static location now it uses the <path_cacti> macro.
+Create a Host Template called Netscreen that also includes Associated Data Queries SNMP - Interface Statistics and Unix - Get Mounted Partitions

This is my first attempted at giving back to the Open Source community as well as Cacti so go easy on me if I messed up somewhere.

Where do you change the community to public to something else? I don't see that in the .pl script?

[jrichardson]

The script runs fine for me locally:

perl netscreen_stats.pl 172.16.1.1

cpu1:2 cpu5:2 cpu15:2 memory_allocated:28785520 memoryAvailable:76753856 memoryFragmented:2834 sessionsAllocated:177 sessionsMaximum:16000 sessionsFailed:0

But my graphs still show Nan inside cacti. My interface traffic graphs are working fine, just the netscreen_stats graphs aren't working.

I've seen this happen if the script is saved in DOS mode and you're on a unix box.

[stevenrh]

Where do you change the community to public to something else? I don't see that in the .pl script?

-c public

should be changed to

-c <your_community_string>.

[Setarcos]

Hi Folks,

Here is another version that doesn't require use of a script to retrieve the data.

Note: There is a mix of numeric OIDs and MIB variables. In order to use this host template as-is you will need the Netscreen MIBs installed.

[starkie]

Hi Folks,

Here is another version that doesn't require use of a script to retrieve the data.

Note: There is a mix of numeric OIDs and MIB variables. In order to use this host template as-is you will need the Netscreen MIBs installed.

Looks cool,

Can the traffic graphs, graph sub interfaces???

Thanks

[bpowers7]

I can not seem to get the graphs to work.
This is what my graph output looks like in Cacti:
(attached)
I can run the script successfully (I receive valid output), but I can not get the graphs to paint.
Shell output:

(shell)./netscreen_stats.pl xxx.xxx.xxx.xxx public
cpu1:2 cpu5:2 cpu15:2 memory_allocated:75820336 memoryAvailable:21487264 memoryFragmented:194 sessionsAllocated:1291 sessionsMaximum:128064 sessionsFailed:0

I have validated that cactiuser has permissions to the /rra folder as well as deleted/re-added my devices and data sources. Also tried clearing the polling cache as well.

Something interesting to note, is that when I attempt to view the graph properties for the grpahs, it indicates an 'rra' file to reference but that rra file does not exist! It never gets created...

I have also tried leveraging other existing templates and data queries on this site, but still have issue getting the graph's to actually paint.
Any help would be greatly appreciated.
Thanks in advance.