Graphing Connections for Cisco PIX 501

[kelbyc]

I've been able to graph traffic, memory use and cpu use for my PIX 501. It is running OS version 6.3(5). My problems is getting Connections to graph. When I do an snmpwalk for the Active connections OID as follows:
snmpwalk -v 1 -c public (Host IP) 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6
I get the following results:
SNMPv2-SMI::enterprises.9.9.147.1.2.2.2.1.5.40.6 = Gauge32: 84

So, I'm getting the data I need when I do the walk but in Cacti I get the following entry in the Log when it polls the device using this OID which doesn't graph anything:
09/01/2006 04:28:06 PM - CMDPHP: Poller[0] Host[16] DS[183] SNMP: v1: 198.1.2.3, dsname: cisco_pix_conn, oid: 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6, output: U
09/01/2006 04:28:06 PM - CMDPHP: Poller[0] Host[16] DS[183] WARNING: Result from SNMP not valid. Partial Result:

Any help would be greatly appreciated

[gandalf]

snmpwalk -v 1 -c public (Host IP) 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6
I get the following results:
SNMPv2-SMI::enterprises.9.9.147.1.2.2.2.1.5.40.6 = Gauge32: 84

Seems to indicate a SNMP V2 OID (although you've used v1 in your statement, so I'm not quite sure). May you please change your hosts definition to V2 and retry?
Reinhard

[kelbyc]

When I set -V to 2c it says "host is not responding". Do I need to change the PIX snmp version to 2? the PIX only seems to respond to Version 1 snmp requests.

[gandalf]

No, please cancel my request. Please retry v1 using -O fntev. These are options used by cacti when querying the device
Reinhard

[kelbyc]

I reran it with the option you suggested and it worked fine. The result said
Gauge32: 148

Any idea why Cacti isn't getting the same result? I have pasted my info below if it helps.

Cacti Version - 0.8.6h
Poller Type - CMD.php
Server Info - Windows NT 5.1
Web Server - Microsoft-IIS/5.1
PHP - 5.0.5
PHP Extensions - bcmath, calendar, com_dotnet, ctype, ftp, iconv, odbc, pcre, session, SPL, SQLite, standard, tokenizer, zlib, libxml, dom, SimpleXML, wddx, xml, ISAPI, mysql, snmp, sockets, mbstring
MySQL - 4.1.15-nt
RRDTool - 1.2.15
SNMP - -version' is not recognized as an internal or external command,
operable program or batch file.
Plugins

• Thresholds (thold - v0.3.0)
  Device Monitoring (monitor - v0.7)
  Host Info (hostinfo - v0.1)
  Update Checker (update - v0.3)

[TheWitness]

In the Cacti console, please click on the Big Cacti and then scroll to the bottom of the center screen and read off the snmp support installed and your version.

I would also like to know what version of net-snmp you are running.

Thanks,

TheWitness

[kelbyc]

Here is what is listed:
Cacti Variables
Operating System: win32
PHP SNMP Support: yes

I have Net-snmp 5.2.2 installed but I'm not using it. In the Paths section under Settings I do not have any of my snmp files referenced because Cacti is working great (other than this one OID) without it and is configured to use PHP snmp. However, I did point insert valid paths for all the net-snmp files and tried running a debug poll and didn't get any different results from when I had those fields blank.

[TheWitness]

This is going to seem complicated, but do the following:

0) Turn logging to medium in Cacti
1) Edit <path_cacti>/lib/snmp.php
2) Search for the function format_snmp_string
3) Right after the function declaration add the following: print $string . "\n";
4) Save the file
5) Open a command line
6) cd to <path_cacti>
7) run "php <path_cacti>/cmd.php hostid hostid" where hostid is the host in question.

Post the output. Then back out the change. To keep the poller happy.

TheWitness

[TheWitness]

This is going to seem complicated, but do the following:

0) Turn logging to medium in Cacti
1) Edit <path_cacti>/lib/snmp.php
2) Search for the function format_snmp_string
3) Right after the function declaration add the following: print $string . "\n";
4) Save the file
5) Open a command line
6) cd to <path_cacti>
7) run "php <path_cacti>/cmd.php hostid hostid" where hostid is the host in question.

Post the output. Then back out the change. To keep the poller happy.

TheWitness

[kelbyc]

I must be doing something wrong. After following your directions very carefully 2 times I get the same output which I have pasted below.

09/11/2006 03:11:20 PM - CMDPHP: Poller[0] ERROR: Either there are no items in the cache or polling is disabled
09/11/2006 03:11:20 PM - CMDPHP: Poller[0] ERROR: SQL Cell Failed "SELECT count(*) from poller_item WHERE (action=2 AND (host_id >= 10.1.10.50 and host_id <= 10.1.10.50))"
09/11/2006 03:11:20 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed "SELECT * from poller_item WHERE (host_id >= 10.1.10.50 and host_id <= 10.1.10.50) ORDER by host_id"
09/11/2006 03:11:20 PM - CMDPHP: Poller[0] ERROR: SQL Assoc Failed "select * from host where (disabled = '' and id >= 10.1.10.50 and id <= 10.1.10.50) ORDER by id"

[TheWitness]

Yes, well you assumed "host_id" is equal to "ip_address" which it is not. Edit the host in Cacti and then look at the url. You will see "http:/...?id=XX" where "XX" is the "host_id".

Sorry fo the confusion. Now that you have that information, try again.

TheWitness

[kelbyc]

Thanks for sticking with me on this. I got it right this time. Here is the output from the Cacti Log. I have also attached a screenshot of the output I got in DOS.

09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Time: 0.1073 s, Theads: N/A, Hosts: 1
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[175] SNMP: v1: 10.1.1.50, dsname: traffic_out, oid: .1.3.6.1.2.1.2.2.1.16.2, output: 1012982383
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[174] SNMP: v1: 10.1.1.50, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.1, output: 3690590483
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[180] SNMP: v1: 10.1.1.50, dsname: CPUPIX, oid: .1.3.6.1.4.1.9.9.109.1.1.1.1.5.1, output: 2
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[181] SNMP: v1: 10.1.1.50, dsname: mem_free, oid: .1.3.6.1.4.1.9.9.48.1.1.1.6.1, output: 1800712
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[175] SNMP: v1: 10.1.1.50, dsname: traffic_in, oid: .1.3.6.1.2.1.2.2.1.10.2, output: 907602938
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[174] SNMP: v1: 10.1.1.50, dsname: traffic_out, oid: .1.3.6.1.2.1.2.2.1.16.1, output: 3586328828
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[200] SNMP: v1: 10.1.1.50, dsname: cisco_pix_conn, oid: 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6, output: U
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[200] WARNING: Result from SNMP not valid. Partial Result:
09/12/2006 08:49:56 AM - CMDPHP: Poller[0] Host[16] DS[182] SNMP: v1: 10.1.1.50, dsname: mem_used, oid: .1.3.6.1.4.1.9.9.48.1.1.1.5.1, output: 14976504


I'm also having similar issues when trying to poll the CPU usage on an HP Procurve 2824 switch. If I do an snmpwalk I get the correct results but in Cacti I'm getting the same U for my output and the "partial result" warning.

[TheWitness]

So, if you look at the second line of the output, you will see that net-snmp is not returning data as it should. This is not so good. You may have a MIB file conflict. So, to test, open a shell and set the following environment variable:

MIBS=rfc-1215

then run php cmd.php <host_id> <host_id> again.

TheWitness

[kelbyc]

You are correct. The result I got in DOS states:

Cannot find module (rfc-1215): At line 1 in (none)


What do I need to do to resolve this? I have tried reinstalling net-snmp and have made sure my mibsdir is pointing to the right place but neither has helped.

[TheWitness]

1) Make sure you have the MIBDIRS environment variable set as well. It need's to point to the location where the RFC-1215 (.txt) file exists.
2) Make sure the MIBS="xxxx" includes the file extension if it has one.

TheWitness