Problems with Catalyst 6509

Grogman · Cacti User Joined: 21 Feb 2006 Posts: 52 Location: Spain

Hi Larry,

Just in case somebody is interested, I have modified the MAC/IP report form in order to allow filtering by the Vlan ID and Port Number fields (I needed to filter by those fields for my work). I've attached the modified files.

And regarding the IP spoofing detection functionality I talked about, I hope will make some progress this week. The functionality will search on the mactrack_ports table looking for temporal differences between entries which are indicative of IP-spoofing, like an IP changing of associated mac between two polling cycles. I'm planning to create incident items that could be stored in another table and showed by another form, maybe with options for acknowledge and delete it or so. I'm also considering some form of alerting of those incidents...

Thanks!

TheWitness · Posted: Wed Aug 30, 2006 6:41 am Post subject:

Talk with Cigamit about how alerting should take place before you burn lot's of cycles. He may have some shortcuts. Thanks for the Contrib!! I also have some changes, I only lack time at this point.

Regards,

Larry

Grogman · Cacti User Joined: 21 Feb 2006 Posts: 52 Location: Spain

Hi Larry,

Going back to the origin of the post, after the modification in the mysql code, I realized that not all the macs of some of my catalyst switches are showing in the tables. After doing some research, it looks like that the missing macs are the ones defined statically in the switch (by the port-security feature).

Is there any reason for this mac's to not being gathered?

Thanks!!!

Edited: Solved!!!

Just substituted:

if (@$port_status[$key] == "3") {

by

if ((@$port_status[$key] == "3") || (@$port_status[$key] == "5")) {

in the get_base_dot1dTpFdbEntry_ports function of mactrack_functions.php in order to include the macs with mgmt status.

TheWitness · Posted: Tue Jan 02, 2007 12:50 am Post subject:

Grogman,

I am currently working on v1.0. If you have any specific feature requests or code contribs, please post them there. I you have any updated files from your previous post, please provide updates.

Here is the link to the "official how's Larry doing" post.

TheWitness

http://forums.cacti.net/viewtopic.php?t=18876