Active FTP/SSH/Telnet/Samba Connections - Uses SNMP+BASH

[jgtm]

I could not find this anywhere so I did it myself.

Please feel free to provide feedback here.

Installation Instructions

1) Put tcp_conns.sh in your cacti scripts directory - /usr/local/cacti/scripts on mine.
2) Edit tcp_conns.sh: Change "public" to whatever your snmp community name is.
2) Import the graph xml files using the Cacti console.
3) Create the graphs and when you do this you shall have to enter

IP address of interface of the tcp connection
IP address of target device to query
Local port number of the tcp connection

For FTP it will obviously be local port number 21.

The data templates for each graph all use the data input method "SNMP - Get TCP Connections By IP And Port Number Of Remote Machine" which is passed the above 3 parameters. This data input method is the tcp_conns.sh script which executes the net-snmp command "snmpwalk" and returns the number of matching connections given your parameters.

tcp_conns.sh :

Code: Select all

#!/bin/sh

conns=`snmpwalk -On -c public -v 1 $3 .1.3.6.1.2.1.6.13.1.3.$1.$2 | wc -l`

echo $conns

Simple huh?

Example graphs from my system:

[jgtm]

XML templates/script are attached.

[tigra]

hm, got some problem with this, result in cacti always 0

when I run script manually, as it should be by poller (call string from view poller cache), all ok. when I manualy return number - all ok (echo 100 in tcp_conns.sh). what wrong?
Tried manually as root, as cactiuser, all ok, from poller - always 0

net-snmp-5.2.1.2 - ports collection
cacti 0.8.6g - ports collection
FreeBSD 4.11-S

PS: SOLVED! hint: PATH (/usr/local/bin/snmpwalk)

[rhamburg]

I have the same issues as tigra. And for sure the paths are correct.

Any tips and pointers ?

#!/bin/sh

conns=`snmpwalk -On -c public -v 1 $3 .1.3.6.1.2.1.6.13.1.3.$1.$2 | wc -l`

echo $conns

Can some one explain what i should enter for the variables:

$1 => host ?
$2 => port ?
$3 => ??

[muraping]

I have the same issues as tigra. And for sure the paths are correct.

Any tips and pointers ?

#!/bin/sh

conns=`snmpwalk -On -c public -v 1 $3 .1.3.6.1.2.1.6.13.1.3.$1.$2 | wc -l`

echo $conns

Can some one explain what i should enter for the variables:

$1 => host ?
$2 => port ?
$3 => ??

#snmpwalk -On -c public -v XXX.XXX.XXX.XXX .1.3.6.1.2.1.6.13.1.3.$1.$2 | wc -l
display a number.i tounght $3 maybe is host_ip,i didn't know $1,$2 mening.
i try find it by google,but no presentation:(,plaease tell me

[JJX]

i think:

$3 host ip

port has nothimg to do with snmp

i am not sure for the rest

[acacioas]

I made some modifications on the script and on the graph_template..

Now, you need only to choose what interface to check the connections and the port.

The graph title may be modified (this is important if you have more than one IP per host to check, like me..)

The community and the IP of the server (where the snmpwalk will query) are derived from the host configuration..

[muraping]

I made some modifications on the script and on the graph_template..

Now, you need only to choose what interface to check the connections and the port.

The graph title may be modified (this is important if you have more than one IP per host to check, like me..)

The community and the IP of the server (where the snmpwalk will query) are derived from the host configuration..

remove old tcp_conns.sh,i used your way do it.in the data template ,i can see "SNMP - Active HTTP Connections",i added query community force.add date sources,
this is my data source debug

/usr/local/rrdtool/bin/rrdtool create \
/www/htdocs/cacti/rra/219_235_226_34www_http_conns_60.rrd \
--step 300 \
DS:http_conns:GAUGE:600:0:1000 \
RRA:AVERAGE:0.5:1:600 \
RRA:AVERAGE:0.5:6:700 \
RRA:AVERAGE:0.5:24:775 \
RRA:AVERAGE:0.5:288:797 \
RRA:MIN:0.5:1:600 \
RRA:MIN:0.5:6:700 \
RRA:MIN:0.5:24:775 \
RRA:MIN:0.5:288:797 \
RRA:MAX:0.5:1:600 \
RRA:MAX:0.5:6:700 \
RRA:MAX:0.5:24:775 \
RRA:MAX:0.5:288:797 \
RRA:LAST:0.5:1:600 \
RRA:LAST:0.5:6:700 \
RRA:LAST:0.5:24:775 \
RRA:LAST:0.5:288:797 \

but in graph data also is 0,why?
i can't find any tools to test this proess,so i do not know where are matter?

[acacioas]

I made some modifications on the script and on the graph_template..

Now, you need only to choose what interface to check the connections and the port.

The graph title may be modified (this is important if you have more than one IP per host to check, like me..)

The community and the IP of the server (where the snmpwalk will query) are derived from the host configuration..

remove old tcp_conns.sh,i used your way do it.in the data template ,i can see "SNMP - Active HTTP Connections",i added query community force.add date sources,
this is my data source debug

/usr/local/rrdtool/bin/rrdtool create \
/www/htdocs/cacti/rra/219_235_226_34www_http_conns_60.rrd \
--step 300 \
DS:http_conns:GAUGE:600:0:1000 \
RRA:AVERAGE:0.5:1:600 \
RRA:AVERAGE:0.5:6:700 \
RRA:AVERAGE:0.5:24:775 \
RRA:AVERAGE:0.5:288:797 \
RRA:MIN:0.5:1:600 \
RRA:MIN:0.5:6:700 \
RRA:MIN:0.5:24:775 \
RRA:MIN:0.5:288:797 \
RRA:MAX:0.5:1:600 \
RRA:MAX:0.5:6:700 \
RRA:MAX:0.5:24:775 \
RRA:MAX:0.5:288:797 \
RRA:LAST:0.5:1:600 \
RRA:LAST:0.5:6:700 \
RRA:LAST:0.5:24:775 \
RRA:LAST:0.5:288:797 \

but in graph data also is 0,why?
i can't find any tools to test this proess,so i do not know where are matter?

You can test the script in a shell..
./tcp_conns.sh <ip> <port> <host> <community>

Have you removed the old graphic and added this new one, or just changed the graph_template?

This worked fine for me in three different hosts (remove the old and add a new one) ..

[fakechris]

I got the SAME PROBLEM! I run sh tcp_conns.sh and got corrent result.

I made some modifications on the script and on the graph_template..

Now, you need only to choose what interface to check the connections and the port.

The graph title may be modified (this is important if you have more than one IP per host to check, like me..)

The community and the IP of the server (where the snmpwalk will query) are derived from the host configuration..

remove old tcp_conns.sh,i used your way do it.in the data template ,i can see "SNMP - Active HTTP Connections",i added query community force.add date sources,
this is my data source debug

/usr/local/rrdtool/bin/rrdtool create \
/www/htdocs/cacti/rra/219_235_226_34www_http_conns_60.rrd \
--step 300 \
DS:http_conns:GAUGE:600:0:1000 \
RRA:AVERAGE:0.5:1:600 \
RRA:AVERAGE:0.5:6:700 \
RRA:AVERAGE:0.5:24:775 \
RRA:AVERAGE:0.5:288:797 \
RRA:MIN:0.5:1:600 \
RRA:MIN:0.5:6:700 \
RRA:MIN:0.5:24:775 \
RRA:MIN:0.5:288:797 \
RRA:MAX:0.5:1:600 \
RRA:MAX:0.5:6:700 \
RRA:MAX:0.5:24:775 \
RRA:MAX:0.5:288:797 \
RRA:LAST:0.5:1:600 \
RRA:LAST:0.5:6:700 \
RRA:LAST:0.5:24:775 \
RRA:LAST:0.5:288:797 \

but in graph data also is 0,why?
i can't find any tools to test this proess,so i do not know where are matter?

[UKS-Gavin]

For anyone that's using the script above I've updated it;

Code: Select all

#!/bin/bash
# Code updated by Gavin Conway
# Gavin@Essociate.co.uk

#------- User customisation area --------------#
SNMPWALKBINARY=/usr/bin/snmpwalk
ECHOBINARY=/bin/echo
WCBINARY=/usr/bin/wc
#-------- Do not edit below this line ----------#


SYSTEMNAME=$1
PORT=$2
IPADDRESS=$3
COMMUNITY=$4


if [[ -z $SYSTEMNAME || -z $PORT || -z $IPADDRESS || -z $COMMUNITY ]]
then
        echo "Usage: tcp_conns.sh hostname port ipaddress community"
fi

CONNECTIONS=`$SNMPWALKBINARY -On -c $COMMUNITY -v1 $IPADDRESS .1.3.6.1.2.1.6.13.1.3.$SYSTEMNAME.$PORT | $WCBINARY -l`

let "CONNECTIONS = $CONNECTIONS -1"
$ECHOBINARY $CONNECTIONS

[super-hornet]

Hi UKS-Gavin

Thanks for this new bash script.... but I think the above graph template need to modify also. The reason is that, previously, the community name is hardcoded in the tcp_connection.sh script. Now, your new script get the community script from cacti...and it is not supply by cacti.

SH

For anyone that's using the script above I've updated it;

Code: Select all

#!/bin/bash
# Code updated by Gavin Conway
# Gavin@Essociate.co.uk

#------- User customisation area --------------#
SNMPWALKBINARY=/usr/bin/snmpwalk
ECHOBINARY=/bin/echo
WCBINARY=/usr/bin/wc
#-------- Do not edit below this line ----------#


SYSTEMNAME=$1
PORT=$2
IPADDRESS=$3
COMMUNITY=$4


if [[ -z $SYSTEMNAME || -z $PORT || -z $IPADDRESS || -z $COMMUNITY ]]
then
        echo "Usage: tcp_conns.sh hostname port ipaddress community"
fi

CONNECTIONS=`$SNMPWALKBINARY -On -c $COMMUNITY -v1 $IPADDRESS .1.3.6.1.2.1.6.13.1.3.$SYSTEMNAME.$PORT | $WCBINARY -l`

let "CONNECTIONS = $CONNECTIONS -1"
$ECHOBINARY $CONNECTIONS

[sizulku]

got "0" result from all above script. any update?

[UKS-Gavin]

Change the script to be like this instead;

Code: Select all

#!/bin/bash
# Code updated by Gavin Conway
# Gavin@Essociate.co.uk

#------- User customisation area --------------#
SNMPWALKBINARY=/usr/bin/snmpwalk
ECHOBINARY=/bin/echo
WCBINARY=/usr/bin/wc
#-------- Do not edit below this line ----------#


SYSTEMNAME=$1
PORT=$2
IPADDRESS=$3
COMMUNITY=PUTYOURCOMMUNITYNAMEHEREIFYOUWANTTHISTOWORK!!!!!!!


if [[ -z $SYSTEMNAME || -z $PORT || -z $IPADDRESS || -z $COMMUNITY ]]
then
        echo "Usage: tcp_conns.sh hostname port ipaddress community"
fi

CONNECTIONS=`$SNMPWALKBINARY -On -c $COMMUNITY -v1 $IPADDRESS .1.3.6.1.2.1.6.13.1.3.$SYSTEMNAME.$PORT | $WCBINARY -l`

let "CONNECTIONS = $CONNECTIONS -1"
$ECHOBINARY $CONNECTIONS

[/quote][/quote]

[heygazeebo]

Hello, I have tried all the scripts, but no matter what I do they only return 0 or -1 respectively, even if i have many HTTP connections to the server.
Did anyone ever find a solution for this?

Thanks,

Brian