[XML] Netscreen CPU Memory and Session stats

Templates, scripts for templates, scripts and requests for templates.

Moderators: Moderators, Developers

Author
Message
tsanchez37

#16 Post by tsanchez37 » Tue Oct 05, 2004 9:30 am

I don't think it's a path issue anymore.

None of my external scripts work with cactid - so I think it's a cactid issue.

The canned stuff works fine, but nothing else seems to work.

I'm going to keep plugging away at it and see what happens.

tsanche37

#17 Post by tsanche37 » Tue Oct 05, 2004 12:17 pm

Okay, so here's what I did.

I gave up using the script and the templates included and instead created a whole passel of new SNMP-based stuff.

Attached is a zip file with all the host, graph and data templates I am using now.

It is working on my install - YMMV
Attachments
netscreen_stats.zip
host, graph and data templates for Memory, Session and CPU stats on a Netscreen firewall
(25.07 KiB) Downloaded 2620 times

pineh
Posts: 1
Joined: Mon Dec 27, 2004 4:04 am

#18 Post by pineh » Mon Dec 27, 2004 4:20 am

Thanks to you guys for making this template, saved me a lot of time trying to figure it out myself.

On my own, I managed to query subinterface traffic. It was fairly easy actually, I just copied the normal interface data source and was able to poll ETHERNET1.7 for example, which is my interface for VLAN7 on my NS25, then just copied the graph config from a main interface graph and changed the data sources as appropriate.

I assume this will also work with my vpn tunnel interfaces, but I haven't gotten that far yet.

I'm sort of lost on making these templates, but I'd be happy to go over my findings with anyone interested in developing a broader netscreen template.

Thanks again,

Hunter

romp
Posts: 6
Joined: Wed Dec 08, 2004 11:27 pm

#19 Post by romp » Thu Dec 30, 2004 10:29 am

tsanche37 wrote:Okay, so here's what I did.
...
Attached is a zip file with all the host, graph and data templates I am using now.
It is working on my install - YMMV
...
Sorry,

I found no way to import these templates.
They just not appear :-( after import.

# tested on Cacti v0.8.5a, verified by import another (cisco) template -> which works

any idea.
thanks
Christian

pdb
Posts: 11
Joined: Wed Mar 23, 2005 6:57 am

#20 Post by pdb » Thu Apr 21, 2005 8:28 am

Hi,

I just installed it, and installation went fine, though only traffic monitoring works.

After further investigation I see that my Netscreen only exports very limited information through SNMP.

Is there any command needed to be run to get other stats?

I'm currently using a NetScreen 5GT... ScreenOS 5.x series

With what NetScreen's did you test this?

Thanks,
Pascal de Bruijn
Regards,
Pascal de Bruijn

romp
Posts: 6
Joined: Wed Dec 08, 2004 11:27 pm

#21 Post by romp » Fri Apr 22, 2005 2:51 am

Hi,

after I upgraded last week to "cacti-0.8.6c" all works fine.
GROOVY & thx.

The only modifications I did to the original template were to include max sessions in the session graph [lg scale]

[on cacti-0.8.5 I used the script version before]


@ pdb
> After further investigation I see that my Netscreen only
> exports very limited information through SNMP.

Your NS didn't "export" information (only traps if wished), you ASK for information. and that's massive

Check out:
http://5xt.support.juniper.safeharbor.c ... skb718.htm

cheers
Christian

dan.dycus
Posts: 1
Joined: Wed May 18, 2005 11:43 am
Contact:

#22 Post by dan.dycus » Wed May 18, 2005 11:52 am

When I run the netscreen_stats.pl script, I can see the values being returned from the firewall using tcpdump, but all the fields are left blank...

What should I do?
linux:/usr/local/cacti/scripts # perl netscreen_stats.pl 192.168.1.1 cpu1: cpu5: cpu15: memory_allocated: memoryAvailable: memoryFragmented: sessionsAllocated: sessionsMaximum: sessionsFailed: linux:/usr/local/cacti/scripts #
tcpdump proof that the firewall is answering:
11:42:17.724049 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(28 ) E:3224.16 (DF)
11:42:17.730269 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.1.1.0=3
11:42:17.730474 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.1.1.0 (DF)
11:42:17.738766 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.1.2.0=7
11:42:17.738871 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.1.2.0 (DF)
11:42:17.746636 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.1.3.0=8
11:42:17.746714 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.1.3.0 (DF)
11:42:17.754259 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.1.4.0=7
11:42:17.754338 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.1.4.0 (DF)
11:42:17.761631 192.168.1.1.snmp > linux.local.43060: GetResponse(35) E:3224.16.2.1.0=71921904
11:42:17.761707 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.2.1.0 (DF)
11:42:17.770377 192.168.1.1.snmp > linux.local.43060: GetResponse(35) E:3224.16.2.2.0=29436672
11:42:17.770454 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.2.2.0 (DF)
11:42:17.778998 192.168.1.1.snmp > linux.local.43060: GetResponse(33) E:3224.16.2.3.0=7021
11:42:17.779074 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.2.3.0 (DF)
11:42:17.786995 192.168.1.1.snmp > linux.local.43060: GetResponse(33) E:3224.16.3.2.0=11612
11:42:17.787070 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.3.2.0 (DF)
11:42:17.794117 192.168.1.1.snmp > linux.local.43060: GetResponse(34) E:3224.16.3.3.0=128000
11:42:17.794192 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.3.3.0 (DF)
11:42:17.802488 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.16.3.4.0=0
11:42:17.802563 linux.local.43060 > 192.168.1.1.snmp: GetNextRequest(31) E:3224.16.3.4.0 (DF)
11:42:17.809985 192.168.1.1.snmp > linux.local.43060: GetResponse(32) E:3224.17.1.1.0=0
Thanks all...

OR, perhaps there is a better solution out there right now for monitoring Netscreen firewalls with Cacti? :)

I was able to import the XML files and everything else ok in the cacti interface, (seeing as it displays the firewall's S/N and contact info) but I'm not getting any charts. :(

Regards

romp
Posts: 6
Joined: Wed Dec 08, 2004 11:27 pm

#23 Post by romp » Fri May 20, 2005 5:12 am

[quote=
OR, perhaps there is a better solution out there right now for monitoring Netscreen firewalls with Cacti? :)

I was able to import the XML files and everything else ok in the cacti interface, (seeing as it displays the firewall's S/N and contact info) but I'm not getting any charts. :(

Regards[/quote]

Try to use the "netscreen_stats.zip" Version without (netscreen_stats.pl) script.

starkie
Posts: 30
Joined: Mon Nov 22, 2004 2:35 pm

#24 Post by starkie » Thu Jun 23, 2005 5:14 pm

pineh wrote:Thanks to you guys for making this template, saved me a lot of time trying to figure it out myself.

On my own, I managed to query subinterface traffic. It was fairly easy actually, I just copied the normal interface data source and was able to poll ETHERNET1.7 for example, which is my interface for VLAN7 on my NS25, then just copied the graph config from a main interface graph and changed the data sources as appropriate.

I assume this will also work with my vpn tunnel interfaces, but I haven't gotten that far yet.

I'm sort of lost on making these templates, but I'd be happy to go over my findings with anyone interested in developing a broader netscreen template.

Thanks again,

Hunter

Hi Hunter.

i am trying to do the same and I am getting stuck. Any help would be appreciated

aboyz

#25 Post by aboyz » Tue Jul 26, 2005 4:00 pm

Caliban wrote:Thanks Fletch for the work you've done. Hope you don't mind I fixed a few bugs I found and repackaged everything:
+The script assumes the community is public it now gets it from the Device entry snmp_community
+Input String of Data Input Method tried to find the script in a static location now it uses the <path_cacti> macro.
+Create a Host Template called Netscreen that also includes Associated Data Queries SNMP - Interface Statistics and Unix - Get Mounted Partitions

This is my first attempted at giving back to the Open Source community as well as Cacti so go easy on me if I messed up somewhere.

Where do you change the community to public to something else? I don't see that in the .pl script?

jrichardson
Cacti User
Posts: 66
Joined: Tue Mar 22, 2005 10:11 am

RE:

#26 Post by jrichardson » Tue Jul 26, 2005 4:04 pm

Anonymous wrote:The script runs fine for me locally:

perl netscreen_stats.pl 172.16.1.1

cpu1:2 cpu5:2 cpu15:2 memory_allocated:28785520 memoryAvailable:76753856 memoryFragmented:2834 sessionsAllocated:177 sessionsMaximum:16000 sessionsFailed:0

But my graphs still show Nan inside cacti. My interface traffic graphs are working fine, just the netscreen_stats graphs aren't working.
I've seen this happen if the script is saved in DOS mode and you're on a unix box.

User avatar
stevenrh
Posts: 3
Joined: Thu Apr 28, 2005 8:53 am

#27 Post by stevenrh » Thu Aug 25, 2005 10:29 pm

aboyz wrote: Where do you change the community to public to something else? I don't see that in the .pl script?
-c public

should be changed to

-c <your_community_string>.

User avatar
Setarcos
Cacti User
Posts: 143
Joined: Mon Dec 13, 2004 2:55 pm
Location: San Jose, CA
Contact:

Another version

#28 Post by Setarcos » Fri Aug 26, 2005 2:09 pm

Hi Folks,

Here is another version that doesn't require use of a script to retrieve the data.

Note: There is a mix of numeric OIDs and MIB variables. In order to use this host template as-is you will need the Netscreen MIBs installed.
Attachments
cacti_host_template_netscreen.xml
Netscreen host template
(148.69 KiB) Downloaded 2542 times

starkie
Posts: 30
Joined: Mon Nov 22, 2004 2:35 pm

Re: Another version

#29 Post by starkie » Fri Aug 26, 2005 5:27 pm

Setarcos wrote:Hi Folks,

Here is another version that doesn't require use of a script to retrieve the data.

Note: There is a mix of numeric OIDs and MIB variables. In order to use this host template as-is you will need the Netscreen MIBs installed.
Looks cool,

Can the traffic graphs, graph sub interfaces???

Thanks

bpowers7
Posts: 9
Joined: Tue Apr 04, 2006 10:32 am

No graphs

#30 Post by bpowers7 » Mon Jun 26, 2006 3:34 pm

I can not seem to get the graphs to work.
This is what my graph output looks like in Cacti:
(attached)
I can run the script successfully (I receive valid output), but I can not get the graphs to paint.
Shell output:

(shell)./netscreen_stats.pl xxx.xxx.xxx.xxx public
cpu1:2 cpu5:2 cpu15:2 memory_allocated:75820336 memoryAvailable:21487264 memoryFragmented:194 sessionsAllocated:1291 sessionsMaximum:128064 sessionsFailed:0


I have validated that cactiuser has permissions to the /rra folder as well as deleted/re-added my devices and data sources. Also tried clearing the polling cache as well.

Something interesting to note, is that when I attempt to view the graph properties for the grpahs, it indicates an 'rra' file to reference but that rra file does not exist! It never gets created...

I have also tried leveraging other existing templates and data queries on this site, but still have issue getting the graph's to actually paint.
Any help would be greatly appreciated.
Thanks in advance.
Attachments
graphs.JPG
graphs.JPG (65.03 KiB) Viewed 14972 times
- BP7

Post Reply