MIBS... MIBS... and more MIBS

[khutton]

I am having a hard time with trying to access the CPU utilization on my Cisco PIX. I can't seem to find out what the actual OID is. I have tried to find it on Cisco's site for about 2 hours now ... I also don't know if I need to export the MIB CISCO-PROCESS-MIB-V1SMI.my onto my RedHat box or just use the OID?

If I do not have to install the MIB I simply need to create a new datasource using Get SNMP Data, the right IP, community and the OID. I am just confused on how to get my snmpget command to return a value from my PIX?

I just wanted to add that I can perform an

snmpwalk -Cc -O n firewall.ip community.string

and I get several OID's back. They are all in sets of 3, seems correct since I have 3 interfaces on the firewall. But everything deals with the interfaces. The only thing that looks different is the 3 listings of total system memory. I can't seem to get a return for the CPU utilization.

Any help is greatly appreciated.

[bulek]

What have you been doing during these 2 hours???

http://www.cisco.com/univercd/cc/td/doc ... m#xtocid51

And you can use just an OID (numerical one) for a query.

Regards,
- bulek

[khutton]

I found the number for the MIB I was looking for.

1.3.6.1.4.1.9.9.109.1.1.1.1.5

Is the OID for 5min average of processor utilization. or so that is what Cisco says ftp://ftp.cisco.com/pub/mibs/oid/

The problem is I get this error now when I run "snmpget 65.167.xxx.xxx community 1.3.6.1.4.1.9.9.109.1.1.1.1.5"

Unlinked OID in CISCO-PROCESS-MIB: ciscoProcessMIB ::= { ciscoMgmt 109 }
Undefined identifier: ciscoMgmt near line 32 of /usr/local/snmp/mibs/CISCO-PROCESS-MIB.my
Error in packet
Reason: (noSuchName) There is no such variable name in this MIB.
Failed object: system.sysUpTime.6.1.4.1.9.9.109.1.1.1.1.5

Can anyone give me some insight into this?

[raX]

Hmm... I don't see why you would be getting MIB errors when you are using just the OID. Try using snmpwalk to narrow down the cause. I would try something like:

Code: Select all

snmpwalk host community 1.3.6.1.4.1.9.9.109.1.1.1.1

(Notice I took off the last number)

I would keep trying that until it works. Is it possible that you are trying to request an OID that does not exist? Or maybe there is something wrong with the MIB, in which case I have no idea

-Ian

[khutton]

Same error

well I guess I will retry the MIBS and see if I can find another OID that works for something else. That should at least tell me the process I am using is correct.

[raX]

OK, that sounds good to me.

Does it continue to give the same error if you keep taking off a number and retrying the snmpwalk?

You could also try running snmpwalk with the '-O n' option. Perhaps the error is being caused by snmpwalk try to "reverse lookup" the OID...

-Ian

[khutton]

I get the same error until i am using a 1 as the entire OID. Then I get system info. I am tinking the OID I have is a suffix of some sort????? that there are some numbers I am missing in the beginning???? I am not sure but if I look at the OIDs contained in the MIB I have it says I have the correct one. The link I have above for cisco is the list of OIDs for all the MIBs. If you look at CISCO-PROCESS-MIB.my, it says

"cpmCPUTotalTable" "1.3.6.1.4.1.9.9.109.1.1.1"
"cpmCPUTotalEntry" "1.3.6.1.4.1.9.9.109.1.1.1.1"
"cpmCPUTotalIndex" "1.3.6.1.4.1.9.9.109.1.1.1.1.1"
"cpmCPUTotalPhysicalIndex" "1.3.6.1.4.1.9.9.109.1.1.1.1.2"
"cpmCPUTotal5sec" "1.3.6.1.4.1.9.9.109.1.1.1.1.3"
"cpmCPUTotal1min" "1.3.6.1.4.1.9.9.109.1.1.1.1.4"
"cpmCPUTotal5min" "1.3.6.1.4.1.9.9.109.1.1.1.1.5"
"cpmCPUTotal5secRev" "1.3.6.1.4.1.9.9.109.1.1.1.1.6"
"cpmCPUTotal1minRev" "1.3.6.1.4.1.9.9.109.1.1.1.1.7"
"cpmCPUTotal5minRev" "1.3.6.1.4.1.9.9.109.1.1.1.1.8"

The cpmCPUTotal5min is the info I am looking for. It's really weird.

[raX]

There very well be numbers you are missing at the beginning. I am not an expert at the makup of MIB files, but from what I know they aren't always obvious when looking at them.

Not like I really expected it to work, but I tried that OID against a Cisco 2600 Router and got nothing. What happens if you move the MIB our of the MIB's directory and try again? Theoretically you won't need that file since you are just querying the OID.

-Ian

[khutton]

I renamed the CISCO-PROCESS-MIB.my to OLD-CISCO.... and when I run the snmp get or walk I get

/usr/local/snmp/mibs/CSCO-PROCESS-MIB.my: No such file or directory.

I have also found I want #8 not #5 as the last number. I think the MIB file is wrong or I am missing another MIB file. Let me see what is going on and I will get back to you.

[bulek]

khutton,

Let me repeat that you don't really need MIB files in place to query your PIX device. Two hints from my side:

1. You should use rather the following snmpget command instead of yours:

snmpget 65.167.xxx.xxx community .1.3.6.1.4.1.9.9.109.1.1.1.1.5.0

Notice "." (dot) at the beginning of OID and ".0" at the end.

2. Check version of your PIX box - according to cisco docs the OIDs are available starting from version 6.2.

- bulek

[khutton]

I got you the first time, but was intrigued on what I can do with the MIB's installed. I was having a rough time trying to get the MIB's squared away. I have not tried the first period and the 0 at the end, but I am now able to get snmpwalk to give me the full list, with the human readable, OID's. I did this by adding .iso to my snmpwalk command

snmpwalk 65.167.xxx.xxx community .iso

This will walk the entire tree on the unit. If you have the MIB's it gives you a nice printout of what each value returned is.

I want to thank both raX and bulek in their help with this issue. I hope this thread or at least part of it can be used for helping others understand how to use MIB's or how not to use MIB's.

[cyberkatis]

Have you been to mibcentral yet?