where:
"CheckPoint CPU Load" is the interface type name
46 is the host id
10004 is the interface type id
04:25:19 H 46 : IT 10004 : Autodiscovering CheckPoint CPU Load
array(1) {
[1]=>
array(3) {
["interface"]=>
string(3) "CPU"
["oper"]=>
string(10) "INTEGER: 2"
["description"]=>
string(24) "uso do cpu do checkpoint"
}
}
04:25:19 H 46 : IT 10004 : I : DB : inte: CPU | chec: DS:checkpointcpu:GAUGE:600:0:10000
04:25:19 H 46 : IT 10004 : I : HOST: Not Found
04:25:19 H 46 : IT 10004 : I : RES : Not Found in Host
04:25:19 New Event (4529219): 2006-08-08 04:25:19 - 25 - 46 - CPU - alert - autodiscovery - Not Found in Host - Deleted -
04:25:19 H 46 : IT 10004 : I 1 : DB : Not Found
04:25:19 H 46 : IT 10004 : I 1 : HOST: inte: CPU | chec:
04:25:19 H 46 : IT 10004 : I 1 : RES : Nothing Done.
04:25:19 H 46 : Autodiscovery took 97086 msec.
On 8/7/06,
Homero Valiatti <[EMAIL PROTECTED]> wrote:
When i tcpdump my jffnms server to check the packets during the discoveruing process, i get the followinf packages:
(I changed the jffnms and checkpoint name server and the community to "SNMP-COMM", due to sec reasons)
22:49:39.345809 IP JFF-SERVER.60003 > CHECKPOINT-FW.snmp: C=SNMP-COMM GetRequest(28) system.sysObjectID.0
0x0000: 4500 0047 0000 4000 4011 0940 0ab2 10d4 [EMAIL PROTECTED]@[EMAIL PROTECTED]
0x0010: 0a7f 0b62 ea63 00a1 0033 31ab 3029 0201 ...b.c...31.0)..
0x0020: 0004 0653 4f43 2d52 4fa0 1c02 047b 954f ...SNMP-COMM....{.O
0x0030: 3102 0100 0201 0030 0e30 0c06 082b 0601 1......0.0...+..
0x0040: 0201 0102 0005 00 .......
22:49:39.356033 IP CHECKPOINT-FW.snmp > JFF-SERVER.60003: C=SNMP-COMM GetResponse(28) [EMAIL PROTECTED] system.sysObjectID.0=
0x0000: 4500 0049 7b3d 0000 3c11 d200 0a7f 0b62 E..I{=..<......b
0x0010: 0ab2 10d4 00a1 ea63 0035 c771 3082 0029 .......c.5.q0..)
0x0020: 0201 0004 0653 4f43 2d52 4fa2 1c02 047b .....SNMP-COMM....{
0x0030: 954f 3102 0102 0201 0130 0e30 0c06 082b .O1......0.0...+
0x0040: 0601 0201 0102 0005 00 .........
22:49:39.357422 IP JFF-SERVER.60003 > CHECKPOINT-FW.snmp: C=SNMP-COMM GetNextRequest(33) E:9600.1.1.1.1.1.2
0x0000: 4500 004c 0000 4000 4011 093b 0ab2 10d4 [EMAIL PROTECTED]@..;....
0x0010: 0a7f 0b62 ea63 00a1 0038 31b0 302e 0201 ...b.c...81.0...
0x0020: 0004 0653 4f43 2d52 4fa1 2102 047b 954f ...SNMP-COMM.!..{.O
0x0030: 3202 0100 0201 0030 1330 1106 0d2b 0601 2......0.0...+..
0x0040: 0401 cb00 0101 0101 0102 0500 ............
22:49:39.366033 IP CHECKPOINT-FW.snmp > JFF-SERVER.60003: C=SNMP-COMM GetResponse(33) [EMAIL PROTECTED] E:9600.1.1.1.1.1.2=
0x0000: 4500 004e 7b3e 0000 3c11 d1fa 0a7f 0b62 E..N{>..<......b
0x0010: 0ab2 10d4 00a1 ea63 003a de64 3082 002e .......c.:.d0...
0x0020: 0201 0004 0653 4f43 2d52 4fa2 2102 047b .....SNMP-COMM.!..{
0x0030: 954f 3202 0102 0201 0130 1330 1106 0d2b .O2......0.0...+
0x0040: 0601 0401 cb00 0101 0101 0102 0500 ..............
22:49:39.456185 IP JFF-SERVER.60003 > CHECKPOINT-FW.snmp: C=SNMP-COMM GetNextRequest(31) 33.1.3.3.1.1
0x0000: 4500 004a 0000 4000 4011 093d 0ab2 10d4 [EMAIL PROTECTED]@..=....
0x0010: 0a7f 0b62 ea63 00a1 0036 31ae 302c 0201 ...b.c...61.0,..
0x0020: 0004 0653 4f43 2d52 4fa1 1f02 047b 954f ...SNMP-COMM....{.O
0x0030: 3302 0100 0201 0030 1130 0f06 0b2b 0601 3......0.0...+..
0x0040: 0201 2101 0303 0101 0500 ..!.......
22:49:39.465024 IP CHECKPOINT-FW.snmp > JFF-SERVER.60003: C=SNMP-COMM GetResponse(44) E:2620.1.1.1.0=[|snmp]
0x0000: 4500 005b 7b3f 0000 3c11 d1ec 0a7f 0b62 E..[{?..<......b
0x0010: 0ab2 10d4 00a1 ea63 0047 8947 3082 003b .......c.G.G0..;
0x0020: 0201 0004 0653 4f43 2d52 4fa2 8200 2c02 .....SNMP-COMM...,.
0x0030: 047b 954f 3302 0100 0201 0030 8200 1c30 .{.O3......0...0
0x0040: 8200 1806 0b2b 0601 0401 943c 0101 0100 .....+.....<....
0x0050: 0409 ..
22:49:39.465258 IP JFF-SERVER.60003 > CHECKPOINT-FW.snmp: C=SNMP-COMM GetNextRequest(31) 33.1.4.4.1.1
0x0000: 4500 004a 0000 4000 4011 093d 0ab2 10d4 [EMAIL PROTECTED]@..=....
0x0010: 0a7f 0b62 ea63 00a1 0036 31ae 302c 0201 ...b.c...61.0,..
0x0020: 0004 0653 4f43 2d52 4fa1 1f02 047b 954f ...SNMP-COMM....{.O
0x0030: 3402 0100 0201 0030 1130 0f06 0b2b 0601 4......0.0...+..
0x0040: 0201 2101 0404 0101 0500 ..!.......
22:49:39.474025 IP CHECKPOINT-FW.snmp > JFF-SERVER.60003: C=SNMP-COMM GetResponse(44) E:2620.1.1.1.0=[|snmp]
0x0000: 4500 005b 7b40 0000 3c11 d1eb 0a7f 0b62 [EMAIL PROTECTED]<......b
0x0010: 0ab2 10d4 00a1 ea63 0047 8847 3082 003b .......c.G.G0..;
0x0020: 0201 0004 0653 4f43 2d52 4fa2 8200 2c02 .....SNMP-COMM...,.
0x0030: 047b 954f 3402 0100 0201 0030 8200 1c30 .{.O4......0...0
0x0040: 8200 1806 0b2b 0601 0401 943c 0101 0100 .....+.....<....
0x0050: 0409 ..
22:49:39.475231 IP JFF-SERVER.60003 > CHECKPOINT-FW.snmp: C=SNMP-COMM GetRequest(30) 33.1.1.5.0
0x0000: 4500 0049 0000 4000 4011 093e 0ab2 10d4 [EMAIL PROTECTED]@..>....
0x0010: 0a7f 0b62 ea63 00a1 0035 31ad 302b 0201 ...b.c...51.0+..
0x0020: 0004 0653 4f43 2d52 4fa0 1e02 047b 954f ...SNMP-COMM....{.O
0x0030: 3502 0100 0201 0030 1030 0e06 0a2b 0601 5......0.0...+..
0x0040: 0201 2101 0105 0005 00 ..!......
22:49:39.483520 IP CHECKPOINT-FW.snmp > JFF-SERVER.60003: C=SNMP-COMM GetResponse(30) [EMAIL PROTECTED] 33.1.1.5.0=
0x0000: 4500 004b 7b41 0000 3c11 d1fa 0a7f 0b62 E..K{A..<......b
0x0010: 0ab2 10d4 00a1 ea63 0037 9a67 3082 002b .......c.7.g0..+
0x0020: 0201 0004 0653 4f43 2d52 4fa2 1e02 047b .....SNMP-COMM....{
0x0030: 954f 3502 0102 0201 0130 1030 0e06 0a2b .O5......0.0...+
0x0040: 0601 0201 2101 0105 0005 00 ....!......
22:49:39.486337 IP JFF-SERVER.60003 > CHECKPOINT-FW.snmp: C=SNMP-COMM GetNextRequest(30) 25.2.3.1.1
0x0000: 4500 0049 0000 4000 4011 093e 0ab2 10d4 [EMAIL PROTECTED]@..>....
0x0010: 0a7f 0b62 ea63 00a1 0035 31ad 302b 0201 ...b.c...51.0+..
0x0020: 0004 0653 4f43 2d52 4fa1 1e02 047b 954f ...SNMP-COMM....{.O
0x0030: 3602 0100 0201 0030 1030 0e06 0a2b 0601 6......0.0...+..
0x0040: 0201 1902 0301 0105 00 .........
22:49:39.495022 IP CHECKPOINT-FW.snmp > JFF-SERVER.60003: C=SNMP-COMM GetResponse(44) E: 2620.1.1.1.0=[|snmp]
0x0000: 4500 005b 7b42 0000 3c11 d1e9 0a7f 0b62 E..[{B..<......b
0x0010: 0ab2 10d4 00a1 ea63 0047 8647 3082 003b .......c.G.G0..;
0x0020: 0201 0004 0653 4f43 2d52 4fa2 8200 2c02 .....SNMP-COMM...,.
0x0030: 047b 954f 3602 0100 0201 0030 8200 1c30 .{.O6......0...0
0x0040: 8200 1806 0b2b 0601 0401 943c 0101 0100 .....+.....<....
0x0050: 0409 ..
22:49:39.498893 IP JFF-SERVER.60003 > CHECKPOINT-FW.snmp: C=SNMP-COMM GetRequest(28) system.sysObjectID.0
0x0000: 4500 0047 0000 4000 4011 0940 0ab2 10d4 [EMAIL PROTECTED]@[EMAIL PROTECTED]
0x0010: 0a7f 0b62 ea63 00a1 0033 31ab 3029 0201 ...b.c...31.0)..
0x0020: 0004 0653 4f43 2d52 4fa0 1c02 047b 954f ...SNMP-COMM....{.O
0x0030: 3702 0100 0201 0030 0e30 0c06 082b 0601 7......0.0...+..
0x0040: 0201 0102 0005 00 .......
22:49:39.507519 IP CHECKPOINT-FW.snmp > JFF-SERVER.60003: C=SNMP-COMM GetResponse(28) [EMAIL PROTECTED] system.sysObjectID.0=
0x0000: 4500 0049 7b45 0000 3c11 d1f8 0a7f 0b62 E..I{E..<......b
0x0010: 0ab2 10d4 00a1 ea63 0035 c171 3082 0029 .......c.5.q0..)
0x0020: 0201 0004 0653 4f43 2d52 4fa2 1c02 047b .....SNMP-COMM....{
0x0030: 954f 3702 0102 0201 0130 0e30 0c06 082b .O7......0.0...+
0x0040: 0601 0201 0102 0005 00 .........
22:49:39.511054 IP JFF-SERVER.60003 > CHECKPOINT-FW.snmp: C=SNMP-COMM GetNextRequest(29) 25.8.1.1
0x0000: 4500 0048 0000 4000 4011 093f 0ab2 10d4 [EMAIL PROTECTED]@..?....
0x0010: 0a7f 0b62 ea63 00a1 0034 31ac 302a 0201 ...b.c...41.0*..
0x0020: 0004 0653 4f43 2d52 4fa1 1d02 047b 954f ...SNMP-COMM....{.O
0x0030: 3802 0100 0201 0030 0f30 0d06 092b 0601 8......0.0...+..
0x0040: 0201 1908 0101 0500 ........
22:49:39.519522 IP CHECKPOINT-FW.snmp > JFF-SERVER.60003: C=SNMP-COMM GetResponse(44) E:2620.1.1.1.0=[|snmp]
0x0000: 4500 005b 7b46 0000 3c11 d1e5 0a7f 0b62 E..[{F..<......b
0x0010: 0ab2 10d4 00a1 ea63 0047 8447 3082 003b .......c.G.G0..;
0x0020: 0201 0004 0653 4f43 2d52 4fa2 8200 2c02 .....SNMP-COMM...,.
0x0030: 047b 954f 3802 0100 0201 0030 8200 1c30 .{.O8......0...0
0x0040: 8200 1806 0b2b 0601 0401 943c 0101 0100 .....+.....<....
0x0050: 0409 ..On 8/7/06, la Bigmac < [EMAIL PROTECTED] > wrote:Can you use your JFFNMS box to discover other devices , routers, servers or whatever? - Just checking your PHP status, SNMP module is loaded.
If you are able to SNMP other devices. And are using CPFW-1 no install on Windows srv then you could check the packets are reaching the firewall by using tcpdump in the incoming interface and greping for your jffnms server IP address.
ifconfig - a to list interfaces.
tcpdump -i eth... |grep 10.0.0.10
Where eth... is incoming interface and 10.0.0.10 is the IP of your jffnms box. This will show you the incoming and out going traffic between the firewall and your JFFNMS box.
When I have got nothing back from an SNMP scan in the past is because I have forgotten something.
Regards,
Mat.
Date: Mon, 7 Aug 2006 05:16:11 -0300
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
CC: jffnms-users@lists.sourceforge.net
Subject: Re: [jffnms-users] JFFNMS + Checkpoint
Hi Matthew,
Yeah, all the permissions, comunities, service, etc are ok...
When i try snmpwalk command from the jffnms server, everything works fine.
Do you want any information to try to debug any error?
Homer
On 8/7/06, Matthew MacAulay <[EMAIL PROTECTED]> wrote:Does your JFFNMS box have permission within the FW-1 rule base to SNMP to your firewall enforcement module? Can you use another SNMP browser to view the firewall? Worth checking SNMP service is listening, correct string public / private etc.
Mat.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ] On Behalf Of Homero Valiatti
Sent: 06 August 2006 08:03
To: jffnms-users@lists.sourceforge.net
Subject: [jffnms-users] JFFNMS + Checkpoint
Does anyone knows (or already did) how to add checkpoint interfaces on jffnms?
I tried manual discovery with and w/o portscan... nothhing worked. I´m wondering to add the interfaces manually, does anyone knows how?!
I created a new pooler item with the oid (1.3.6.1.4.1.2620.1.6.7.2.4) but i got nothing.
Any clue?
homer______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ jffnms-users mailing list jffnms-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/jffnms-users
