Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-05-17 Thread Dorn Hetzel
ASN.1 is quite concrete, and specifys several encoding methods (I prefer BER myself) :) I'm not saying everyone would consider it pretty, but it's quite concrete ... Check out http://lionet.info/asn1c/ On 5/17/07, Travis H. [EMAIL PROTECTED] wrote: On Wed, May 09, 2007 at 10:25:14AM +0100,

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-05-09 Thread michael.dillon
but I'm still unclear on what an MIB actually _is_, A MIB is the database schema for an object-oriented hierarchical database. The key words there are schema and hierarchical. Schema means that it describes how the data is organized and hierarchical means that it is *NOT* organized in tables

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-05-09 Thread Joe Abley
On 9-May-2007, at 05:25, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: but I'm still unclear on what an MIB actually _is_, A MIB is the database schema for an object-oriented hierarchical database. I believe that (some?) purists would assert that there is but one MIB, and that all other

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-05-09 Thread Steve Sobol
On Wed, 9 May 2007 [EMAIL PROTECTED] wrote: keys into your application code, or better yet, into your application's config file. MIBs have lots of stuff that you probably don't need unless you are allowing users to browse through and query arbitrary data. ...for example, if you're running a

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-05-08 Thread Travis H.
Hey folks, I am following up to an ancient email because I'm curious if anyone has some SNMP-related resources. Basically, there's a lot of how-to or manpage sort of information, but I'm still unclear on what an MIB actually _is_, what problem ASN.1 actually solves, and more to the point how the

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-02-08 Thread Aaron Glenn
On 2/7/07, Ray Burkholder [EMAIL PROTECTED] wrote: Going back to this thread, http://www.kx.com/ deals in financial transaction databases where they store millions of ticks. They appear to have a transactional based language with a solution that appears to be robust and fail resistant. I'm

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-02-07 Thread Ray Burkholder
How about something like: http://www.hdfgroup.org/whatishdf5.html I don't think they support transactional updates, which makes it hard to use for live data. (A simple crash, and you need to recover from backup.) Going back to this thread, http://www.kx.com/ deals in financial

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-25 Thread michael.dillon
how do you define your schema? how long does it take to insert/index/whatnot the data? This is a much bigger deal than most people realize. Poor schema design will cause your system to choke bade when you try to scale it. In fact, relational databases are not the ideal way to store this kind

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-25 Thread Ray Burkholder
But to start with, just solving the data storage problem is a good place to start. If someone can create a specialized network monitoring database that scales, then the rest of the toolkit will be much easier to deal with. Note that people have done a lot of research on this sort of

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-25 Thread Jason LeBlanc
This is where dbms' designed for data warehouses might come into play, something like SybaseIQ. It is adapted for long term storage and retrieval. [EMAIL PROTECTED] wrote: how do you define your schema? how long does it take to insert/index/whatnot the data? This is a much bigger

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-25 Thread michael.dillon
But to start with, just solving the data storage problem is a good place to start. How about something like: http://www.hdfgroup.org/whatishdf5.html That certainly has a lot of support in the scientific community in similar applications such as astronomy and high-energy physics.

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-25 Thread michael.dillon
This is where dbms' designed for data warehouses might come into play, something like SybaseIQ. It is adapted for long term storage and retrieval. If you understand the finer details of schema design for data warehousing such as star schemas and snowflake schemas then you will probably

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-25 Thread Florian Weimer
* Ray Burkholder: How about something like: http://www.hdfgroup.org/whatishdf5.html I don't think they support transactional updates, which makes it hard to use for live data. (A simple crash, and you need to recover from backup.) -- Florian Weimer[EMAIL PROTECTED] BFK

monitoring software design, was Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-25 Thread Travis H.
On Wed, Jan 24, 2007 at 08:05:24PM +, Paul Vixie wrote: glibly said, sir. but i disasterously underestimated the amount of time and money it would take to build BIND9. While I can't question your credentials at creating serious network infrastructure, I wonder about the comparison between

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-25 Thread Travis H.
On Wed, Jan 24, 2007 at 02:12:01PM -0400, Ray Burkholder wrote: I've done some work with Cricket and have figured out a way to get at it's schema. I've been looking at mating Cricket' s 'getter and schema with Drraw and genDevConfig tools and putting a Mason based HTML wrapper around the

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Jason LeBlanc
I would say somewhere around 4000 network interfaces (6-8 stats per int) and around 1000 servers (8-10 stats per server) we started seeing problems, both with navigation in the UI and with stats not reliably updating. I did not try that poller, perhaps its worth trying it again using it. I

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Paul Vixie
[EMAIL PROTECTED] (Jason LeBlanc) writes: After looking for 'the ideal' tool for many years, it still amazes me that no one has built it. Bulk gets, scalable schema and good portal/UI. RTG is better than MRTG, but the config/db/portal are still lacking. if funding were available, i know

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Jeroen Massar
Paul Vixie wrote: [EMAIL PROTECTED] (Jason LeBlanc) writes: After looking for 'the ideal' tool for many years, it still amazes me that no one has built it. Bulk gets, scalable schema and good portal/UI. RTG is better than MRTG, but the config/db/portal are still lacking. [..] been there,

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Ray Burkholder
, Cisco's Quality of Service, etc. Would anyone be interested in such a contraption? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Vixie Sent: Wednesday, January 24, 2007 13:43 To: nanog@merit.edu Subject: Re: [cacti-announce] Cacti 0.8.6j

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Mark Boolootian
I see a reference in the response to RTG. RTG's claim to fame looks like speed. In comparison to RRDTOOL-based applications, RTG stores raw values rather than cooked averages, allowing for a great deal more flexibility in analysis. And you aren't limited to a temporally fixed window of

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Andrew Kirch
: Wednesday, January 24, 2007 1:12 PM To: nanog@merit.edu Subject: RE: [cacti-announce] Cacti 0.8.6j Released (fwd) I see a reference in the response to RTG. RTG's claim to fame looks like speed. I've done some work with Cricket and have figured out a way to get at it's schema. I've been looking

RE: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Ray Burkholder
Maybe this is overly naïve, but what about the ability to auto-magically import and search various vendor SNMP/WMI MIBs? I can think of 3 open source NMS that do a good job if you set up all 3 to monitor the network, but they all overlap and none of them really do a good job.

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Paul Vixie
[EMAIL PROTECTED] (Jeroen Massar) writes: ..., $5M over three years? spread out over 50 network owners that's $3K a month. i don't see that happening in a consolidation cycle like this one, but hope springs eternal. give randy and hank the money, they'll take care of this for us once

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Jared Mauch
On Wed, Jan 24, 2007 at 08:34:19AM -0500, Jason LeBlanc wrote: I would say somewhere around 4000 network interfaces (6-8 stats per int) and around 1000 servers (8-10 stats per server) we started seeing problems, both with navigation in the UI and with stats not reliably updating. I did

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Eric A. Hall
On 1/24/2007 3:05 PM, Paul Vixie wrote: glibly said, sir. but i disasterously underestimated the amount of time and money it would take to build BIND9. since i'm talking about a scalable pluggable portable F/L/OSS framework that would serve disparite interests and talk to devices that

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread Eric A. Hall
On 1/24/2007 2:46 PM, Ray Burkholder wrote: WMI requires Windows Authentication, and if one is running Linux tools, there are issues. I havn't come a cross an easy way to get to WMI from Linux yet. Anyone have any suggestions? I've been working on this for a while actually. WMI is WBEM,

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-24 Thread william(at)elan.net
On Wed, 24 Jan 2007, Mark Boolootian wrote: I see a reference in the response to RTG. RTG's claim to fame looks like speed. In comparison to RRDTOOL-based applications, RTG stores raw values rather than cooked averages, allowing for a great deal more flexibility in analysis. And you aren't

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-23 Thread Jon Lewis
On Mon, 22 Jan 2007, Jason LeBlanc wrote: Anyone thats seen MRTG (simple, static) on a large network realizes that decoupling the graphing from the polling is necessary. The disk i/o is brutal. Cacti has a slick interface, but also doesn't scale all that well for large networks. I prefer

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-22 Thread Jason LeBlanc
Anyone thats seen MRTG (simple, static) on a large network realizes that decoupling the graphing from the polling is necessary. The disk i/o is brutal. Cacti has a slick interface, but also doesn't scale all that well for large networks. I prefer RTG, though I haven't seen a nice

Re: FW: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-21 Thread Travis H.
On Thu, Jan 18, 2007 at 02:33:10PM -0700, Berkman, Scott wrote: NMS Software should not be placed in the public domain/internet. By the time anyone who would like to attack Cacti itself can access the server and malform an HTTP request to run this attack, then can also go see your entire

Re: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-21 Thread Chris Owen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Jan 21, 2007, at 11:35 PM, Travis H. wrote: That is, most of the dynamically-generated content doesn't need to be generated on demand. If you're pulling data from a database, pull it all and generate static HTML files. Then you don't even

FW: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-18 Thread Gadi Evron
Many of us run cacti. FYI. -- Forwarded message -- Date: Thu, 18 Jan 2007 08:26:37 -0500 From: Warner Moore [EMAIL PROTECTED] To: bugtraq@securityfocus.com Subject: FW: [cacti-announce] Cacti 0.8.6j Released That's right, it's not vendor specific guys. Yay!

Re: FW: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-18 Thread Jeremy Chadwick
On Thu, Jan 18, 2007 at 11:40:06AM -0600, Gadi Evron wrote: Many of us run cacti. FYI. Thanks for posting this, even though it's slightly OT. Not to start an opinion war, but those who do run Cacti should really consider removing this software from their boxes permanently.

Re: FW: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-18 Thread Jon Lewis
On Thu, 18 Jan 2007, Jeremy Chadwick wrote: For those who don't have the time/care enough to go look at the Secunia report, I'll summarise it: 1) cmd.php and copy_cacti_user.php both blindly pass arguments passed in the URL to system(). This, IMHO, is reason enough to not run this

RE: FW: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-18 Thread Berkman, Scott
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Lewis Sent: Thursday, January 18, 2007 3:40 PM To: Jeremy Chadwick Cc: Gadi Evron; nanog@merit.edu Subject: Re: FW: [cacti-announce] Cacti 0.8.6j Released (fwd) On Thu, 18 Jan 2007, Jeremy Chadwick wrote: For those who don't have the time

RE: FW: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-18 Thread william(at)elan.net
On Thu, 18 Jan 2007, Berkman, Scott wrote: NMS Software should not be placed in the public domain/internet. By the time anyone who would like to attack Cacti itself can access the server and malform an HTTP request to run this attack, then can also go see your entire topology and access your

RE: FW: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-18 Thread Jim Popovitch
On Thu, 2007-01-18 at 14:33 -0700, Berkman, Scott wrote: There is this Network Management theory called Out of Band Management. Which is rarely properly applied. I lost count of the data centers that block mgmt traffic from external customers, but leave internal systems (which are often sublet

Re: FW: [cacti-announce] Cacti 0.8.6j Released (fwd)

2007-01-18 Thread Henning Brauer
* Berkman, Scott [EMAIL PROTECTED] [2007-01-18 22:34]: Cacti is a free open source tool, and in my opinion these should never be expected to be 100% free of bugs, errors, and exploits. very much opposed to commercial software, where you can be 100% sure that they are full of bugs, errors, and