Help required with monitoring Cisco PIX Memory & Connect

[simonb]

Hi,

I have searched thru the various posts here, and tried all of the possible configs and answers...

... I just /cannot/ get this to work. Now, when I snmpwalk the two PIX's I'm trying to monitor, I get the following info back:

snmpwalk -Os -c STRING -v 1 HOSTNAME
...

sysDescr.0 = STRING: Cisco PIX Firewall Version 6.3(5)

sysObjectID.0 = OID: enterprises.9.1.451
sysUpTime.0 = Timeticks: (44581100) 5 days, 3:50:11.00
sysContact.0 = STRING:
sysName.0 = STRING: REMOVED
sysLocation.0 = STRING:
sysServices.0 = INTEGER: 4
ifNumber.0 = INTEGER: 3
ifIndex.1 = INTEGER: 1
ifIndex.2 = INTEGER: 2
ifIndex.3 = INTEGER: 3
ifDescr.1 = STRING: PIX Firewall 'outside' interface
ifDescr.2 = STRING: PIX Firewall 'inside' interface
ifDescr.3 = STRING: PIX Firewall 'dmz' interface
ifType.1 = INTEGER: ethernetCsmacd(6)
ifType.2 = INTEGER: ethernetCsmacd(6)
ifType.3 = INTEGER: ethernetCsmacd(6)
ifMtu.1 = INTEGER: 1500
ifMtu.2 = INTEGER: 1500
ifMtu.3 = INTEGER: 1500
ifSpeed.1 = Gauge32: 100000000
ifSpeed.2 = Gauge32: 100000000
ifSpeed.3 = Gauge32: 100000000
ifPhysAddress.1 = STRING: 0:f:34:81:28:4b
ifPhysAddress.2 = STRING: 0:f:34:81:28:4c
ifPhysAddress.3 = STRING: 0:2:b3:ed:15:cc
ifAdminStatus.1 = INTEGER: up(1)
ifAdminStatus.2 = INTEGER: up(1)
ifAdminStatus.3 = INTEGER: up(1)
ifOperStatus.1 = INTEGER: up(1)
ifOperStatus.2 = INTEGER: up(1)
ifOperStatus.3 = INTEGER: up(1)
ifLastChange.1 = Timeticks: (0) 0:00:00.00
ifLastChange.2 = Timeticks: (1786000000) 206 days, 17:06:40.00
ifLastChange.3 = Timeticks: (0) 0:00:00.00
ifInOctets.1 = Counter32: 1279735872
ifInOctets.2 = Counter32: 1796560481
ifInOctets.3 = Counter32: 2089138957
ifInUcastPkts.1 = Counter32: 1821864
ifInUcastPkts.2 = Counter32: 4591837
ifInUcastPkts.3 = Counter32: 8357491
ifInNUcastPkts.1 = Counter32: 8
ifInNUcastPkts.2 = Counter32: 66116
ifInNUcastPkts.3 = Counter32: 882
ifInDiscards.1 = Counter32: 0
ifInDiscards.2 = Counter32: 0
ifInDiscards.3 = Counter32: 0
ifInErrors.1 = Counter32: 0
ifInErrors.2 = Counter32: 0
ifInErrors.3 = Counter32: 0
ifInUnknownProtos.1 = Counter32: 0
ifInUnknownProtos.2 = Counter32: 0
ifInUnknownProtos.3 = Counter32: 0
ifOutOctets.1 = Counter32: 449935588
ifOutOctets.2 = Counter32: 2382594972
ifOutOctets.3 = Counter32: 2316178699
ifOutUcastPkts.1 = Counter32: 2318871
ifOutUcastPkts.2 = Counter32: 7700404
ifOutUcastPkts.3 = Counter32: 4656213
ifOutNUcastPkts.1 = Counter32: 0
ifOutNUcastPkts.2 = Counter32: 0
ifOutNUcastPkts.3 = Counter32: 0
ifOutDiscards.1 = Counter32: 0
ifOutDiscards.2 = Counter32: 0
ifOutDiscards.3 = Counter32: 0
ifOutErrors.1 = Counter32: 0
ifOutErrors.2 = Counter32: 0
ifOutErrors.3 = Counter32: 0
ifOutQLen.1 = Gauge32: 0
ifOutQLen.2 = Gauge32: 0
ifOutQLen.3 = Gauge32: 0
ifSpecific.1 = OID: zeroDotZero
ifSpecific.2 = OID: zeroDotZero
ifSpecific.3 = OID: zeroDotZero
ipAdEntAddr.xx.xx.255.214 = IpAddress: xx.xx.255.214
ipAdEntAddr.xx.xx.xx.189 = IpAddress: xx.xx.xx.189
ipAdEntAddr.xx.xx.xx.254 = IpAddress: xx.xx.xx.254
ipAdEntIfIndex.xx.xx.255.214 = INTEGER: 1
ipAdEntIfIndex.xx.xx.xx.189 = INTEGER: 2
ipAdEntIfIndex.xx.xx.xx.254 = INTEGER: 3
ipAdEntNetMask.xx.xx.255.214 = IpAddress: 255.255.255.252
ipAdEntNetMask.xx.xx.xx.189 = IpAddress: 255.255.255.192
ipAdEntNetMask.xx.xx.xx.254 = IpAddress: 255.255.255.192
ipAdEntBcastAddr.xx.xx.255.214 = INTEGER: 0
ipAdEntBcastAddr.xx.xx.xx.189 = INTEGER: 0
ipAdEntBcastAddr.xx.xx.xx.254 = INTEGER: 0
ipAdEntReasmMaxSize.xx.xx.255.214 = INTEGER: 65535
ipAdEntReasmMaxSize.xx.xx.xx.189 = INTEGER: 65535
ipAdEntReasmMaxSize.xx.xx.xx.254 = INTEGER: 65535

...

Is there even a MIB for memory or connections in there? Because I just can't see it.

How on earth are others managing to get this information out of their pixes?

Any help greatfully appreciated.

S.

[_JPL_]

I used this OID to get the pix connections
1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6

I used the cisco memory data template that I think came with cacti. If not the OIDs are:
for free memory: .1.3.6.1.4.1.9.9.48.1.1.1.6.1
for used memory: .1.3.6.1.4.1.9.9.48.1.1.1.5.1

You'll have to create your own graph templates and such.

You might want to try the template found here http://forums.cacti.net/viewtopic.php?t ... hlight=pix instead as all the work is already done for you.