OID's I use on my 515's (I'm running 6.2.2 pix code) Current Active connections: .1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.7
Most Active connections since reboot: .1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6 Memory Utilization: .1.3.6.1.4.1.9.9.48.1.1.1.5.1 CPU Utilization: .1.3.6.1.4.1.9.9.109.1.1.1.1.4.1 Dan -----Original Message----- From: Keith E Johnson [mailto:[EMAIL PROTECTED] Sent: Thursday, February 20, 2003 11:45 AM To: [EMAIL PROTECTED] Subject: [mrtg] Re: PIX 515 CPU Usage Total To monitor the CPU on a pix with snmp, you need to be running at least 6.2. I got around this by using a script to telnet to the pix and download the stats. I also collect a few other stats Current Connections (SNMP) Current Connections - TCP Current Connections - UDP Fixups FTP Fixups HTTP Fixups TCP Urls being sent to Websense Current Xlates Memory (SNMP) Keith Johnson Lan Administrator Amcor Sunclipse North America 6600 Valley View Street, Buena Park, CA 90620 Voice: 714.562.6179 Fax: 714.562.2036 Email: [EMAIL PROTECTED] -----Original Message----- From: Degore, L R, SOLCM [mailto:[EMAIL PROTECTED] Sent: Thursday, February 20, 2003 11:06 AM To: Marcos Guerra; McDaniel, Scott; [EMAIL PROTECTED] Subject: [mrtg] Re: PIX 515 CPU Usage Total Guys, Not sure if you have seen this one, but if not give it a try: .1.3.6.1.4.1.9.9.147.1.2.1.1.1.1 The hardware type for which this row provides status information memory (1) disk (2) power (3) netInterface (4) cpu (5) primaryUnit (6) secondaryUnit (7) other (8) Rich DeGore [EMAIL PROTECTED] -----Original Message----- From: Marcos Guerra [mailto:[EMAIL PROTECTED] Sent: Thursday, February 20, 2003 1:49 PM To: McDaniel, Scott; [EMAIL PROTECTED] Subject: [mrtg] Re: PIX 515 CPU Usage Total Hi Scoot, You and I have the same problem. The only difference is that I'm using a PIX 520. I'm looking for the OID to monitor the CPU and it's almost impossible to find it. I tryed trought Cisco Web Site, Google and SnmpWalk. -----Original Message----- From: McDaniel, Scott [mailto:[EMAIL PROTECTED] Sent: Thursday, February 20, 2003 3:06 PM To: [EMAIL PROTECTED] Subject: [mrtg] PIX 515 CPU Usage Total I have found several references to OID's and reports for graphing the CPU usage on PIX firewalls, particularly the PIX 515. However, when I walk my PIX, I do not show the same values. I found the following section on Cisco's website: * PIX Firewall Software Versions 4.0 until 5.1: System and Interface groups of MIB-II but not the AT, ICMP, TCP, UDP, EGP, transmission, IP, or SNMP groups CISCO-SYSLOG-MIB-V1SMI.my <ftp://ftp.cisco.com/pub/mibs/v1/CISCO-SYSLOG-MIB-V1SMI.my> . * PIX Firewall Software Versions 5.1.X and later: Previous MIBs and CISCO-MEMORY-POOL-MIB.my <ftp://ftp.cisco.com/pub/mibs/v2/CISCO-MEMORY-POOL-MIB.my> and the cfwSystem branch of the CISCO-FIREWALL-MIB.my <ftp://ftp.cisco.com/pub/mibs/v2/CISCO-FIREWALL-MIB.my> . * PIX Firewall Software Versions 5.2.X and later: Previous MIBs and the ipAddrTable of the IP group. * PIX Firewall Software Versions 6.0.X and later: Previous MIBs and modification of the MIB-II OID to identify PIX by model (and enable CiscoView 5.2 support). The new object identifiers (OIDs) are found in the CISCO-PRODUCTS-MIB <ftp://ftp.cisco.com/pub/mibs/oid/CISCO-PRODUCTS-MIB.oid> ; for example, the PIX 515 has the OID 1.3.6.1.4.1.9.1.390. * PIX Firewall Software Versions 6.2.x and later: Previous MIBs and CISCO-PROCESS-MIB-V1SMI.my <ftp://ftp.cisco.com/pub/mibs/v1/CISCO-PROCESS-MIB-V1SMI.my> . Note: The supported section of the PROCESS MIB is the cpmCPUTotalTable branch of the cpmCPU branch of the ciscoProcessMIBObjects branch. There is no support for the ciscoProcessMIBNotifications branch, ciscoProcessMIBconformance branch, or the two tables, cpmProcessTable and cpmProcessExtTable, in the cpmProcess branch of the ciscoProcessMIBObjects branch of the MIB. I am running 6.0.x on my firewall, and the highest OID I find is .iso.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.7, which points at buffers. Nothing about CPU. The above points me at a different MIB which is supported with a higher version of the IOS than I have. Do I need to upgrade my IOS on the PIX or am I just missing something when it comes to adding MIB's into the correct place to walk it? Thanks in advance. If the answer is some sort of rtfm, would you point me at the right fm....? I feel like I am missing something "simple." Scott McDaniel -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi
