Confuse with PIX open connections

Post general support questions here that do not specifically fall into the Linux or Windows categories.

Moderators: Developers, Moderators

Post Reply
monarak
Posts: 3
Joined: Wed May 02, 2007 12:34 am

Confuse with PIX open connections

Post by monarak »

I've created a graph for PIX connectinon from template that I downloaded. I run it for a while but I don't understand for some details.

1. What is open connections? first, I understand that it is connection open through PIX but after I run it for a while It's not what I understand. Please help to explain that.

2. From picture, Why current conn > Max conns???

how can I query active vpn users? I downloaded template from this forum but when I query, It got no value back.

Thank you!!!
Attachments
Result from my cacti.
Result from my cacti.
snap00502.jpg (17.2 KiB) Viewed 2417 times
crackrocksteady
Posts: 45
Joined: Wed Dec 06, 2006 12:02 am
Location: Perth , Australia

Post by crackrocksteady »

Firstly to expain your numbers read here:

http://forums.cacti.net/viewtopic.php?t=8168

Secondly,

A connection on a pix as I understand is the number of current UDP/TCP conections through the pix. You can view these on the pix with the command "Show Conn"

note: the Max Value given by this command won't necessarily match the Max value in cacti because cacti only checks the current value every polling cycle and bases it's max value on these polled values. Your numbers seem very low though, how many users do you have behind your pix? My average value is around 300 connections.

As for the vpn script, show me the forum topic about the template and I will look at it for you.
monarak
Posts: 3
Joined: Wed May 02, 2007 12:34 am

Post by monarak »

Hi crackrocksteady, Thank you for your reply.

I couldn't remember exactly where I get that template from, but I think that it should come from here

http://forums.cacti.net/viewtopic.php?t ... ht=pixconn

If that value show the number of TCP/UDP connections through PIX, why it show the decimal value??

Thank you!!.
crackrocksteady
Posts: 45
Joined: Wed Dec 06, 2006 12:02 am
Location: Perth , Australia

Post by crackrocksteady »

The decimal in alot of things always confuses me. Cacti is only as accurate as the data it recieves from the SNMP get. It is always a bit of on oddity but you can veryify your data by doing an snmpget on that oid and seeing if the data is consistent with what is being presented by cacti.
crackrocksteady
Posts: 45
Joined: Wed Dec 06, 2006 12:02 am
Location: Perth , Australia

Post by crackrocksteady »

That template doesn't show vpn connections
monarak
Posts: 3
Joined: Wed May 02, 2007 12:34 am

Post by monarak »

I export my template and attached here.

Thank you.
Attachments
cacti_graph_template_pix_connections.xml
(10.39 KiB) Downloaded 201 times
User avatar
gandalf
Developer
Posts: 22383
Joined: Thu Dec 02, 2004 2:46 am
Location: Muenster, Germany
Contact:

Re: Confuse with PIX open connections

Post by gandalf »

monarak wrote:I've created a graph for PIX connectinon from template that I downloaded. I run it for a while but I don't understand for some details.

1. What is open connections? first, I understand that it is connection open through PIX but after I run it for a while It's not what I understand. Please help to explain that.
To answer this, please have a look at the OID defined to the according data template. This will tell you, what source is used
2. From picture, Why current conn > Max conns???
Wrong. m=milli!
how can I query active vpn users? I downloaded template from this forum but when I query, It got no value back.

Thank you!!!
If this is part of the Template, please post this question to the topic where the template was published
Reinhard
Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests