Cacti (home)ForumsDocumentation
Cacti: offical forums and support
It is currently Thu Jun 27, 2019 5:16 am

All times are UTC - 5 hours




Post new topic Reply to topic  [ 17 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Checkpoint Firewall Packet Statistics
PostPosted: Sun May 14, 2006 10:35 pm 
Offline

Joined: Fri Mar 18, 2005 12:25 am
Posts: 26
Hi All,

Below are some checkpoint firewall templates for accepted packets, dropped packets and rejected packets.

These have been tested on checkpoint NG R55 server installed on a windows box with SNMP enabled.

Cheers

Brett


Attachments:
cacti_data_template_checkpoint_rejected_packets.xml [2.44 KiB]
Downloaded 2690 times
cacti_data_template_checkpoint_dropped_packets.xml [2.43 KiB]
Downloaded 2204 times
cacti_data_template_checkpoint_accepted_packets.xml [2.44 KiB]
Downloaded 2017 times
cacti_graph_template_checkpoint_firewall_packet_statistics.xml [8.65 KiB]
Downloaded 2689 times
cacti_fw_stats.JPG
cacti_fw_stats.JPG [ 33.27 KiB | Viewed 39621 times ]
Top
 Profile  
 
 Post subject:
PostPosted: Mon Oct 09, 2006 8:36 am 
Offline

Joined: Wed Aug 23, 2006 9:07 am
Posts: 4
Anyone else experiencing large (14+ million packets) spikes when installing the policy through SmartDashboard? If I leave the firewall policy(s) alone, the graphs are okay, and it contains usable information. However, when I install a policy after updating a rule, etc., all packet counters spike up to over 14 million, then immediately drop off.

I've already tried running removespikes.pl against the related rrd files, but nothing changes. :-?


Top
 Profile  
 
 Post subject: Trouble importing Checkpoint Firewall Packet Statistics
PostPosted: Tue Jan 09, 2007 11:10 am 
Offline
User avatar

Joined: Thu Nov 09, 2006 10:39 am
Posts: 29
Hi, i've got some trouble importing "Checkpoint Firewall Packet Statistics" templates..
This is the reply of cacti after my import..

Thanks for the kindness

Za


Attachments:
File comment: Importing cacti_graph_template_checkpoint_firewall_packet_statistics.xml
screnShot.JPG
screnShot.JPG [ 19.49 KiB | Viewed 37968 times ]
Top
 Profile  
 
 Post subject: figure it out?
PostPosted: Mon Jan 22, 2007 1:35 pm 
Offline
Cacti User
User avatar

Joined: Mon Jan 22, 2007 9:41 am
Posts: 97
Location: Ottawa,Canada
Did you ever figure out your import issue? I am having the same problem.


Top
 Profile  
 
 Post subject:
PostPosted: Mon Jan 22, 2007 1:39 pm 
Offline
Developer
User avatar

Joined: Thu Dec 02, 2004 2:46 am
Posts: 22376
Location: Muenster, Germany
You may want to pay attention to the correct importing sequence. Data stuff goes first, graph stuff last (without having looked deeper into the templates)
Reinhard

_________________
Official Cacti Documentation
Official Debugging Help
Central Plugin Repository
Central Templates Repository


Top
 Profile  
 
 Post subject: right
PostPosted: Mon Jan 22, 2007 1:45 pm 
Offline
Cacti User
User avatar

Joined: Mon Jan 22, 2007 9:41 am
Posts: 97
Location: Ottawa,Canada
And that is what I did. I important the data templates in first, and the graph template afterwards.


Top
 Profile  
 
 Post subject: data queries?
PostPosted: Mon Jan 22, 2007 1:48 pm 
Offline
Cacti User
User avatar

Joined: Mon Jan 22, 2007 9:41 am
Posts: 97
Location: Ottawa,Canada
We missing some data queries with these templates?


Top
 Profile  
 
 Post subject: Any ideas how to make this work with SecurePlatform
PostPosted: Tue Oct 23, 2007 7:54 pm 
Offline

Joined: Wed Sep 12, 2007 12:17 pm
Posts: 25
We're still on NG 50 and the OS is Checkpoints SecurePlatform. Anyone know how to enable SNMP on this hardened Linux Distro?


Top
 Profile  
 
 Post subject: Fixed data templates.
PostPosted: Fri Aug 22, 2008 6:49 am 
Offline

Joined: Thu Nov 22, 2007 5:05 am
Posts: 13
I've managed to fix the data templates so they should import cleanly - lot of info was missing in the xml..
Having a bit more trouble with the graph template, but will post here if I manage to fix.


Attachments:
File comment: cacti_data_template_checkpoint_rejected_packets.xml
cacti_data_template_checkpoint_rejected_packets.xml [6.04 KiB]
Downloaded 1244 times
File comment: cacti_data_template_checkpoint_dropped_packets.xml
cacti_data_template_checkpoint_dropped_packets.xml [6.04 KiB]
Downloaded 1062 times
File comment: cacti_data_template_checkpoint_accepted_packets.xml
cacti_data_template_checkpoint_accepted_packets.xml [6.04 KiB]
Downloaded 1129 times
Top
 Profile  
 
 Post subject:
PostPosted: Wed Nov 05, 2008 6:18 am 
Offline

Joined: Tue Jul 05, 2005 10:44 am
Posts: 20
I'm having the following error while importing the graph template (I already have imported the data templates):

Cacti has imported the following items:

Graph Template
[success] Checkpoint Firewall Packet Statistics [update]
+ Unmet Dependency: (Data Template Item) fwAccepted
+ Unmet Dependency: (GPRINT Preset) Normal
+ Unmet Dependency: (Data Template Item) fwDropped
+ Unmet Dependency: (Data Template Item) fwRejected

I'm using cacti 0.8.7b
Thanks for any comment.


Top
 Profile  
 
 Post subject:
PostPosted: Thu Jan 15, 2009 4:50 am 
Offline

Joined: Fri Jan 07, 2005 6:15 am
Posts: 24
what do these stats mean exactly ?

actually the checkpoint support is not able to answer :D

does that mean accepted packets per seconds ? since the last policy install ?

in other words what is the time reference ?


Top
 Profile  
 
 Post subject:
PostPosted: Mon Aug 03, 2009 3:41 am 
Offline

Joined: Mon Aug 03, 2009 3:40 am
Posts: 1
I have managed to import the data templates fine (the 2nd versions, the initial ones gave errors).

Has anyone else managed to fix the problem with importing the graph template?

I get the following message when I import it.

Quote:
Import Results
Cacti has imported the following items:

Graph Template

[success] Checkpoint Firewall Packet Statistics [update]
+ Unmet Dependency: (Data Template Item) fwAccepted
+ Unmet Dependency: (GPRINT Preset) Normal
+ Unmet Dependency: (Data Template Item) fwDropped
+ Unmet Dependency: (Data Template Item) fwRejected


Top
 Profile  
 
 Post subject: Checkpoint Packet Statistics
PostPosted: Tue Aug 11, 2009 4:40 am 
Offline
Cacti User

Joined: Fri Apr 10, 2009 1:57 am
Posts: 90
Nobody fix this???
I have the same problem with my cacti 0.8.7d run on fedora 9, and this is my RRD tool say:


RRDTool Command:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="CheckPoint FW1 - Checkpoint Packet Statistics" \
--rigid \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="Packets" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:10: \
--font UNIT:8: \
DEF:a="/usr/share/cacti/rra/checkpoint_fw1_fwacceptpcktsin_157.rrd":fwAcceptPcktsIn:AVERAGE \
DEF:b="/usr/share/cacti/rra/checkpoint_fw1_fwacceptpcktsin_157.rrd":fwDropPcktsIn:AVERAGE \
DEF:c="/usr/share/cacti/rra/checkpoint_fw1_fwacceptpcktsin_157.rrd":fwRejectPcktsIn:AVERAGE \
AREA:a#00CF00FF:"Accepted Packets\:" \
GPRINT:a:LAST:"Current\:" \
GPRINT:a:AVERAGE:"Average\:" \
GPRINT:a:MAX:"Maximum\:\n" \
AREA:b#FF0000FF:"Dropped Packets\:" \
GPRINT:b:LAST:" Current\:" \
GPRINT:b:AVERAGE:"Average\:" \
GPRINT:b:MAX:"Maximum\:\n" \
AREA:c#FFAB00FF:"Rejected Packets\:" \
GPRINT:c:LAST:"Current\:" \
GPRINT:c:AVERAGE:"Average\:" \
GPRINT:c:MAX:"Maximum\:\n"
RRDTool Says:

ERROR: bad format for GPRINT in 'Current:'


Top
 Profile  
 
 Post subject:
PostPosted: Mon Nov 02, 2009 4:35 am 
Offline
Cacti User

Joined: Fri Apr 10, 2009 1:57 am
Posts: 90
Just upgrade new kernel, new cacti, new plugin.... everything will be fine!

I solved it with new installation!


Top
 Profile  
 
 Post subject:
PostPosted: Sat Nov 07, 2009 9:34 am 
Offline
Cacti User
User avatar

Joined: Tue Sep 12, 2006 3:06 am
Posts: 116
rickyboone wrote:
Anyone else experiencing large (14+ million packets) spikes when installing the policy through SmartDashboard? If I leave the firewall policy(s) alone, the graphs are okay, and it contains usable information. However, when I install a policy after updating a rule, etc., all packet counters spike up to over 14 million, then immediately drop off.

I've already tried running removespikes.pl against the related rrd files, but nothing changes. :-?



Yes,
I can confirm that happens on ALL Checkpoint versions, at least in the Nokia IPSO environment... from my point of view, it's something related with the Checkpoint/Nokia SNMP agent, has nothing to do with Cacti.

As a side effect... you can track WHEN you installed a new Policy directly from Cacti :lol:

I've identified a firewall cluster problem related with the policy installation process THROUGH this! :D


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 17 posts ]  Go to page 1, 2  Next

All times are UTC - 5 hours


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Protected by Anti-Spam ACP Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group