snmp traps like others nms

mlist · Cacti User Joined: 26 May 2005 Posts: 50

I have several cisco routers with snmp traps configured to send traps to a nms server (whatsup or n-view from http://n-view.de).
I already use cacti to monitor others services but I woul like to use only cacti as nms server but I need the ability to receice traps from cisco devices in the same way of whatsup.
In fact i already tried to use thold but it simply checks snmp devices and, if they don't respond to snmp request, it shows a down host; this isn't the same thing.....

Can you add this future that in my opinion in needed in a tool like cacti?
Thanks!

bulek · Posted: Tue Nov 15, 2005 6:16 am Post subject:

Whole Cacti (and rrdtoold) concept is based on polling... any data Cacti receives come in synchronous manner every 5 min by default. SNMP traps however are asynchronous events and do not fit here in any way.

- Piotr

ppollet73 · Joined: 01 Feb 2005 Posts: 32 Location: Grenoble - France

It will be just a great add-on extending the actual cacti capabilities.

I think, it's a killer feature

Regards

Pipol

mlist · Cacti User Joined: 26 May 2005 Posts: 50

Ok...

now I know it insn't possible. I hope some guru (THe witness, rony, cigamit.....etc) will add this wonderful future!!!!

Hi

TheWitness · Posted: Tue Nov 15, 2005 3:17 pm Post subject:

An intellegent NOC will monitor their SYSLOG's and generate alarms using an event correlation engine. We can add traps to Cacti based upon HOST UP/DOWN events, but that's what the syslogging is all about.

TheWitness

mlist · Cacti User Joined: 26 May 2005 Posts: 50

Hi mitic Thewitness,

I apologize for my stupid question (and, maybe....my poor english knowledge) but your reply is not clear to me.

What is an intelligent noc?
you told: that's what the syslogging is all about.
I would like to configure cisco devices with something like this:
(The following example enables the router to send all traps to the host using the community string "public")

snmp-server enable traps snmp
snmp-server host 172.30.2.160 public snmp

(172.30.2.160 shoud be my cacti server)

Do you mean that is not possible to receive this traps with cacti? Why?
A lot of snmp software like whatsup and n-view.de or prtg are enabled. WHy cacti no?

Thanks

TheWitness · Posted: Tue Nov 15, 2005 6:14 pm Post subject:

If you are talking of Cacti being a Trap receiver, the author was not interested in taking the product into that realm. Per the author/inventor of Cacti, the intent of product is to be a graphing solution, not an (adjectives removed) NMS.

There are several other packages that do that just fine. Now, three years from now, will the answer be the same, I don't know.

Regards,

TheWitness

mlist · Cacti User Joined: 26 May 2005 Posts: 50

Ok TheWitness,

I have understood the concept. This is not important for me, this was just a curiosity.
Cacti will be one of my favourites open source program!

Thanks!!!

by from Italy

N3NCY · Posted: Sat Mar 11, 2006 12:52 am Post subject:

You can use Cacti as an SNMP trapd receiver.
I do.

In fact, I have my SNMP traps get logged directly into Syslog.
One stop shopping for Traps and Syslogging.

You can see what I am doing here:
http://members.netjunkies.net/n3ncy/FreeBSD60/Net-SNMP.htm
Under Step 3 look at my changes.

I have Syslogd and Traplogd both dumping to /var/log/messages

I currently use Cacti as my only NMS platform.

I am working on a more advanced Trap and Syslog parsing, alerting and rules based database archiving using Syslog-NG
http://www.balabit.com/products/syslog_ng/

This would all eventually end up on the Syslog tab via the plugin architecture that is already built and tested by others.

TheWitness · Posted: Sat Mar 11, 2006 8:06 am Post subject:

you rule!

TheWitness

mlist · Cacti User Joined: 26 May 2005 Posts: 50

hi N3NCY

I think it would be a cool plug-in. I hope someone will integrate this future in cacti

Thanks for your suggestion!

ccsdnoc · Joined: 18 Feb 2006 Posts: 6 Location: Meadville, PA

I too have been working hard to get the SNMP Trap -> syslog work as well. I have been trying to get SNMPTT to work as well, which would make the traps more meaningful. So far, no luck. But, I do have the traps coming in, being logged, i can get them into Cacti syslog plug-in with no problem...getting them translated and broken down correctly, is a bit tougher. As well as getting the right color coding, like "ColdRestart" Warning or Critical.

cactiuser0 · Joined: 07 Apr 2006 Posts: 6

I have to second what theWittness said. What cacti good is graph
reporting. Not NMS/alerting. I would like to see cacti focus on
reporting stuff, such as ability to build group of reports,
daily/weekly/yearly reports, top n reports...

syslog plugin is cool, but it should stay as plugin

spoonman · Cacti User Joined: 03 May 2005 Posts: 281

Any luck on geting this setup with snmptt?? I'm trying to setup snmptrapd with snmptt...i already have syslog-ng setup with the haloe plugin here...that works great!! If I can have traps accepted using snmptrapd and translated into syslog it would be nice. I could then setup alerts on stuff// Anyone care to post their working configs for all this.

Thanks

N3NCY · Posted: Tue Sep 12, 2006 1:35 pm Post subject:

What is the advantage of snmptt over the net-snmp tools?
I have snmptraplogd running ok with net-snmp.
I just never tried snmptt.