barracuda spam firewall [without SNMP]

mcutting · Post by **mcutting** » Wed Dec 20, 2006 11:33 am

You need to install the plugin architecture - has a look at www.cactiusers.org for details of where to download this, and how to install it. You can then download the plugins that you require.

cpt_ahab · Post by **cpt_ahab** » Thu Dec 21, 2006 5:58 am

i sometimes get errors when i open the xml on a windowsbox and try to import it then. try to open the file in a editor(UE32 for example) and dont convert it to windows. copy the xml and import it directly.

greez ahab

mcutting · Post by **mcutting** » Thu Dec 21, 2006 7:09 am

Hi cpt_ahab.

The Barracuda charts are excellent. I was wondering if you could explain the "u" and "m" values to me, as management are asking what the exact values are ?

Thanks

cpt_ahab · Post by **cpt_ahab** » Thu Dec 21, 2006 7:29 am

it is mails/second thats why the m and u are there.
so 500 m is 0.5 mails per second
and 500 u should be 0.0005 mails /second

edit: I updated the templates and now the value is mails/minute
I also added a new graph template that shows the "bad" mails (blocked, viruses,..) as negative values.

i updated the screenshots and the zip-file
get the new templates from there.
the opposit graph uses the same datasource like the total graph,
so you dont have to delete your datasources for these changes.
its just the graph templates that changed.
And a new CDEF function.

greez ahab

mcutting · Post by **mcutting** » Tue Jan 02, 2007 6:26 am

Hi cpt_ahab,

Since upgading my templates with the new ones, I now get the below error on the Total graph

ERROR: opening '/var/www/html/rra/ny_barracuda_allowed_897.rrd': No such file or directory

The RRD file is not being created as far as I can see, although it seems to work fine for the storage and temp graphs. Any ideas ?

Thanks

mcutting · Post by **mcutting** » Tue Jan 02, 2007 8:19 am

SOLVED: I noticed after running poller.php from the CLI that there was actually a duplicate DS called "tagged". Cacti 0.8.6i doesn't allow for duplicate data sources, and after I removed this, the graphs started to appear.

Just waiting for the scripts to populate the graphs now.

Regds

thaihoamai · Post by **thaihoamai** » Tue Jan 02, 2007 2:42 pm

mcutting or cpt_ahab,

I am using cactiez v0.2b and things seems to be working fine. I am able to manually run the barracuda_*.php scripts against our Barracuda 300 appliance and return data.

Cacti can't seem to crate the RRD files. Like mcutting, there was a duplicate data source of 'Total' (instead of tagged) and I deleted it but to no avail.

Do you have an insight as to what my prevent the RRD files from being created?

Thai

mcutting · Post by **mcutting** » Wed Jan 03, 2007 2:18 am

There would be a number of reasons as to why this doesn't work.

1. Where are the PHP scripts located ? They should be in /var/www/html/scripts

2. What account is the poller cron job using ? It should be apache if you are using the CactiEZCD. Does this account have rights on the rra folder ?

3. Is the path correct in the Data source ?

4. Can you set the log to debug for ONE PASS ONLY, and post the results that are relevant to the Barracuda box ?

5. Post screenshots of the Graph Template, Data Source, and the Data Input Method for the Barracuda. If you are running 0.8.6i, then no duplicate data sources are allowed.

thaihoamai · Post by **thaihoamai** » Wed Jan 03, 2007 5:16 pm

Answers:
1) scripts are in /var/www/html/scripts/ and apache has rwx

2) using cactid (default of CactiEZ) and it's running as apache. apache has 775 on the rra folder

3) the path for all 3 DS looks like: <path_rra>/barracuda_mail_storage_used_669.rrd (which looks like the DS of all other linux hosts that we're monitoring)

4) strange: set to debug level, cacti.log does not contain any reference to the barracuda box (either by hostname or ip addr)

5) screen shots are in the attached PDF file.

Thanks for helping out!

mcutting · Post by **mcutting** » Thu Jan 04, 2007 3:30 am

Thanks for the reply.

The script path seems to be fine. Did you leave the SNMP details blank for the host ? This is a PHP script that does not require SNMP to work, therefore, you won't see much in the cacti log.

If you run poller.php from the CLI, you should see live info being posted to the log. Have a look in here, and see if there are any strange results being posted for the host ID

Also, could you turn on graph debugging for this host, and post the results of this ?

Thanks

thaihoamai · Post by **thaihoamai** » Thu Jan 04, 2007 1:51 pm

The SNMP setting for the host has the default entries (public community, port 161 and 500 timeout). When I try to remove them, I get an error.

I'm a newb with Cacti, so bear with me. Since this host is monitored with php scripts, how do I tell cacti to ignore snmp and use scripts? maybe that's the problem?

I turn logging to DEBUG and ran poller.php and didn't see anything referring to the host id.

Let me know what you think.

Thai

mcutting · Post by **mcutting** » Fri Jan 05, 2007 2:13 am

If you set the host type to "None" then the SNMP part will be ignored.

The paths appear to be correct, but could you post the output of the RRDTool by clicking on Graph Management, choosing the affected graph, and then click on "Turn on graph debugging' ?

I think the issue lies here. If you are able to return data using the script, then something is wrong with the graph itself.

Regds

thaihoamai · Post by **thaihoamai** » Fri Jan 05, 2007 12:59 pm

mcutting,

here's the RRDTool output in debug mode. From first glance, there's nothing that would indicate why the rrd files aren't being created.

RRDTool Command:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Barracuda - Total Performance" \
--rigid \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="# of Mails" \
--slope-mode \
DEF:a="/var/www/html/rra/barracuda_allowed_671.rrd":viruses:AVERAGE \
DEF:b="/var/www/html/rra/barracuda_allowed_671.rrd":quarantined:AVERAGE \
DEF:c="/var/www/html/rra/barracuda_allowed_671.rrd":allowed:AVERAGE \
DEF:d="/var/www/html/rra/barracuda_allowed_671.rrd":blocked:AVERAGE \
CDEF:cdefa=a,60,* \
CDEF:cdefb=a,300,* \
CDEF:cdefe=b,60,* \
CDEF:cdeff=b,300,* \
CDEF:cdefi=a,60,* \
CDEF:cdefj=a,300,* \
CDEF:cdefbc=c,60,* \
CDEF:cdefbd=c,300,* \
CDEF:cdefbg=d,60,* \
CDEF:cdefbh=d,300,* \
AREA:cdefa#FF7D00:"Viruses" \
GPRINT:cdefb:LAST:" Current\:%8.00lf %s" \
GPRINT:cdefb:AVERAGE:"Average\:%8.00lf %s" \
GPRINT:cdefb:MAX:"Maximum\:%8.00lf %s\n" \
AREA:cdefe#862F2F:"Quarantined":STACK \
GPRINT:cdeff:LAST:"Current\:%8.0lf %s" \
GPRINT:cdeff:AVERAGE:"Average\:%8.0lf %s" \
GPRINT:cdeff:MAX:"Maximum\:%8.0lf %s\n" \
AREA:cdefi#00A348:"Tagged":STACK \
GPRINT:cdefj:LAST:" Current\:%8.0lf %s" \
GPRINT:cdefj:AVERAGE:"Average\:%8.0lf %s" \
GPRINT:cdefj:MAX:"Maximum\:%8.0lf %s\n" \
AREA:cdefbc#00FF00:"Allowed":STACK \
GPRINT:cdefbd:LAST:" Current\:%8.0lf %s" \
GPRINT:cdefbd:AVERAGE:"Average\:%8.0lf %s" \
GPRINT:cdefbd:MAX:"Maximum\:%8.0lf %s\n" \
AREA:cdefbg#6DC8FE:"Blocked":STACK \
GPRINT:cdefbh:LAST:" Current\:%8.0lf %s" \
GPRINT:cdefbh:AVERAGE:"Average\:%8.0lf %s" \
GPRINT:cdefbh:MAX:"Maximum\:%8.0lf %s\n"

RRDTool Says:

ERROR: opening '/var/www/html/rra/barracuda_allowed_671.rrd': No such file or directory

mcutting · Post by **mcutting** » Fri Jan 05, 2007 1:04 pm

I had the same issue as this, and it turned out to be an issue with a duplicate data source. Have another look here.

Might be worth deleting and reimporting the template again to be completely sure.

pennmanor · Post by **pennmanor** » Mon Jan 29, 2007 12:14 pm

I am getting an XML parse error when I try to import the template. I tried importing from the file and by pasting in the XML. I am running 0.8.6j. Has anyone else had this problem and is there anyway to debug and import ? I turned on debugging and looked in the cacti log but it didn't have any info on this

Cacti

barracuda spam firewall [without SNMP]

No rrd files

Who is online