I have several cisco routers with snmp traps configured to send traps to a nms server (whatsup or n-view from http://n-view.de).
I already use cacti to monitor others services but I woul like to use only cacti as nms server but I need the ability to receice traps from cisco devices in the same way of whatsup.
In fact i already tried to use thold but it simply checks snmp devices and, if they don't respond to snmp request, it shows a down host; this isn't the same thing.....

Can you add this future that in my opinion in needed in a tool like cacti?
Thanks!

Whole Cacti (and rrdtoold) concept is based on polling... any data Cacti receives come in synchronous manner every 5 min by default. SNMP traps however are asynchronous events and do not fit here in any way.

- Piotr

It will be just a great add-on extending the actual cacti capabilities.

I think, it's a killer feature

Regards

Pipol

Ok...

now I know it insn't possible. I hope some guru (THe witness, rony, cigamit.....etc) will add this wonderful future!!!!

Hi

An intellegent NOC will monitor their SYSLOG's and generate alarms using an event correlation engine. We can add traps to Cacti based upon HOST UP/DOWN events, but that's what the syslogging is all about.

TheWitness

Hi mitic Thewitness,

I apologize for my stupid question (and, maybe....my poor english knowledge) but your reply is not clear to me.

What is an intelligent noc?
you told: that's what the syslogging is all about.
I would like to configure cisco devices with something like this:
(The following example enables the router to send all traps to the host using the community string "public")

snmp-server enable traps snmp
snmp-server host 172.30.2.160 public snmp

(172.30.2.160 shoud be my cacti server)

Do you mean that is not possible to receive this traps with cacti? Why?
A lot of snmp software like whatsup and n-view.de or prtg are enabled. WHy cacti no?

Thanks

If you are talking of Cacti being a Trap receiver, the author was not interested in taking the product into that realm. Per the author/inventor of Cacti, the intent of product is to be a graphing solution, not an (adjectives removed) NMS.

There are several other packages that do that just fine. Now, three years from now, will the answer be the same, I don't know.

Regards,

TheWitness

Ok TheWitness,

I have understood the concept. This is not important for me, this was just a curiosity.
Cacti will be one of my favourites open source program!


Thanks!!!

by from Italy

You can use Cacti as an SNMP trapd receiver.
I do.

In fact, I have my SNMP traps get logged directly into Syslog.
One stop shopping for Traps and Syslogging.

You can see what I am doing here:
http://members.netjunkies.net/n3ncy/Fre ... t-SNMP.htm
Under Step 3 look at my changes.

I have Syslogd and Traplogd both dumping to /var/log/messages

I currently use Cacti as my only NMS platform.

I am working on a more advanced Trap and Syslog parsing, alerting and rules based database archiving using Syslog-NG
http://www.balabit.com/products/syslog_ng/

This would all eventually end up on the Syslog tab via the plugin architecture that is already built and tested by others.

you rule!

TheWitness

hi N3NCY

I think it would be a cool plug-in. I hope someone will integrate this future in cacti

Thanks for your suggestion!

I too have been working hard to get the SNMP Trap -> syslog work as well. I have been trying to get SNMPTT to work as well, which would make the traps more meaningful. So far, no luck. But, I do have the traps coming in, being logged, i can get them into Cacti syslog plug-in with no problem...getting them translated and broken down correctly, is a bit tougher. As well as getting the right color coding, like "ColdRestart" Warning or Critical.

I have to second what theWittness said. What cacti good is graph
reporting. Not NMS/alerting. I would like to see cacti focus on
reporting stuff, such as ability to build group of reports,
daily/weekly/yearly reports, top n reports...

syslog plugin is cool, but it should stay as plugin

Any luck on geting this setup with snmptt?? I'm trying to setup snmptrapd with snmptt...i already have syslog-ng setup with the haloe plugin here...that works great!! If I can have traps accepted using snmptrapd and translated into syslog it would be nice. I could then setup alerts on stuff// Anyone care to post their working configs for all this.


Thanks

What is the advantage of snmptt over the net-snmp tools?
I have snmptraplogd running ok with net-snmp.
I just never tried snmptt.