[Nagios-users] Trend Micro Officescan snmp-trap
Hi there, does anyone know how to get the monitoring of Trend Micro Officescan running. I´am completely new to snmp. So I tried to learn something about it. But by now, I couldn´t find a source for reading and understanding it. What are OIDs and MIBs? Where do I get them? And how can I configure it? The only thing I know is, that I can configure a snmp-trap in the web-interface of Officescan, where I can type in the IP and community. The TMOS-Server runs with Win-Server 2008 R2 and the Nagios 3.2.3 on a Debian-Squeeze-machine. I would be very thankful. With kind regards, Michael Böckmann -- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Trend Micro Officescan snmp-trap
I'm not sure the specifics of getting Trend to send traps (I simply asked my Trend admin person to set it up!). Trend should be able to provide you with the relevant MIB file. To configure Nagios to receive the traps, I recommend you use snmptt. The specific instructions relating to Nagios are at: http://www.snmptt.org/docs/snmptt.shtml#Nagios-Netsaint You will need to use the snmpttconvertmib utility to convert Trend's MIB file to a config for snmptt. Note I found that the format of the OID's for the traps generated from our Trend systems didn't always match what was in the MIB, so I had to create some new config entries for snmptt based on the ones translated using snmpttconvertmib, but with the OIDs edited to match what we were receiving - for example: # These traps are pretty much same as from trend.mib, but with .999. instead of .141. EVENT virusFound .1.3.6.1.4.1.6101.999.3.3 Status Events critical FORMAT Virus Found Trap: $* SDESC This event trap will be sent when a virus is found Variables: 1: tvcsEventTrapVar PREEXEC /bin/echo $s | /bin/sed -e s/ok/0/ -e s/warning/1/ -e s/critical/2/ EXEC /usr/local/nagios/libexec/eventhandlers/submit_check_result $A SNMP-Trap-Trend $p1 $N $* EDESC # # # Note the PREEXEC and EXEC entries which are used to translate the incoming trap in to a format which can be submitted as a passive check to Nagios via Nagios' command interface. You may need to edit the EVENT line in each config entry to change the severity as appropriate to ok, warning, or critical so it can be processed by the PREEXEC line. I hope that helps a little. Cheers, Jim -- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Nagios Install
I am using debian. When I say custom, I mean when you get the option from the cd installer - custom, automated, or another custom (I cant read it - text cuts off screen). I chose only one profile which is the sensor profile. There is no nagios directory in /usr/local/ It installs correctly with the automated install. From: Deniz Yoldüz [mailto:dyol...@gmail.com] Sent: Tuesday, April 05, 2011 4:49 PM To: Nagios Users List Subject: Re: [Nagios-users] Nagios Install What distribution are you using? What do you mean by custom install? Compiling from source? Did you checked /usr/local/nagios/etc ? On Tue, Apr 5, 2011 at 6:39 PM, Cory Clouse cclo...@fecon.com wrote: When I do a custom install and do a sensor only, there is no Nagios3 folder in /etc/. Does that mean it is not installed? I selected it when I was asked what packages need installed. What is the best way to install it if it isn't installed? Cory Clouse Fecon Inc. (513) 696-4430 cclo...@fecon.com -- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null image001.gif-- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Configuration Planning
I have read a decent amount of nagios documentation. I was looking for an easy answer for question 2. But as for question 1... this is an ossim specific question whether the asset page adds hosts for nagios. I have looked through the nagios documentation and there is not much mention of ossim. - I only ask because I did not see any new data coming in after I added a host into a config file. From: Yueh-Hung Liu [mailto:yuehung@gmail.com] Sent: Tuesday, April 05, 2011 10:06 PM To: Nagios Users List Subject: Re: [Nagios-users] Configuration Planning all your questions can be answered within here: http://nagios.sourceforge.net/docs/nagioscore/3/en/ On Tue, Apr 5, 2011 at 8:30 PM, Cory Clouse cclo...@fecon.com wrote: Ok, I am still pretty shallow into the subject so my questions may be a little easy/un-researched. 1. With nagios, are you supposed to define hosts in the cfg files in a folder you have to create called objects? Or is this done through the website through the asset page. 2. Also, I feel like my server is not communicating with my nagios sensor. I was trying to test that by sending a command but I get the Sorry Dave error. In regards to that, I had the use_authentication in the cgi.cfg set to 0 just to test if I could send a command and I still got that same error. So how do I set that up securely? What passwords need to match where? This will help me get started with the nagios configuration. If you have any other suggestions or pointers they would be greatly appreciated Thanks a lot, Cory From: Greg Pangrazio [mailto:pangr...@gmail.com] Sent: Monday, April 04, 2011 5:55 PM To: Nagios Users List Subject: Re: [Nagios-users] Configuration Planning Cory, If you have specific questions about the nagios install on alienvault we may be able to help you. There is probably a different list that would be better for these questions. Greg Pangrazio On Mon, Apr 4, 2011 at 3:18 PM, Cory Clouse cclo...@fecon.com wrote: Hello, This is my first time using AlienVault and I would really like some directions to take for planning my system. I have tried picking function by function to install but I cannot get anything working. I would really appreciate someone telling me what I need to work on first so that I can correctly walk through each specific task. My plan is to have one central server which is hosted on a VM. This will not have any sensors, just the framework, server, and the database. I will also have two sensors with 2 network cards a piece. I want one of them to do snort and then I want the other sensor dealing with nagios and ntop. Thanks Cory Fecon Inc. -- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null -- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null image001.gif-- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Nagios Install
try this; find -name nagios -type d and i recommend you to compile nagios from source as shown in centreon wiki ( http://wiki.centreon.com - See Section Setup ) . It's the easiest and most explained way of installing. also if you have init scripts installed in /etc/init.d/ just start nagios and do this ps aux | grep nagios and it will show you which config file it reads. On Wed, Apr 6, 2011 at 3:34 PM, Cory Clouse cclo...@fecon.com wrote: I am using debian. When I say custom, I mean when you get the option from the cd installer – custom, automated, or another custom (I cant read it – text cuts off screen). I chose only one profile which is the sensor profile. There is no nagios directory in /usr/local/ It installs correctly with the automated install. *From:* Deniz Yoldüz [mailto:dyol...@gmail.com] *Sent:* Tuesday, April 05, 2011 4:49 PM *To:* Nagios Users List *Subject:* Re: [Nagios-users] Nagios Install What distribution are you using? What do you mean by custom install? Compiling from source? Did you checked /usr/local/nagios/etc ? On Tue, Apr 5, 2011 at 6:39 PM, Cory Clouse cclo...@fecon.com wrote: When I do a custom install and do a sensor only, there is no Nagios3 folder in /etc/. Does that mean it is not installed? I selected it when I was asked what packages need installed. What is the best way to install it if it isn’t installed? Cory Clouse Fecon Inc. (513) 696-4430 cclo...@fecon.com [image: mini logo] -- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null -- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null image001.gif-- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Correct syntax to check paging file usage on Windows 2008 R2 64-bit server
Hi there --
I am running Nagios 3.1.2 with OpMon, formally NSClient, agent 2.0 installed on
a Windows 2008 R2 64-bit system. I have several
counters that are being monitored on the client including CPU Load, Disk Usage,
Memory Usage, Server Uptime, and Paging File Usage.
All counters except Paging File Usage appear to be running without issue.
The error message that I am seeing with Paging File Usage is the following:
NSClient - ERROR INVALID COUNTER - PagingFile(_Total)% Usage - ERROR CODE:
0xCBB8 -
I have a Windows 2003 R2 64-bit server that is being monitored with the same
counters, and the Paging File Usage counter does not
return an error. The syntax for the command in question, taken from the
commands.cfg file, is shown below:
# 'check_nt_pagingfile' command
define command{
command_namecheck_nt_pagingfile
command_line$USER1$/check_nt -H $HOSTADDRESS$ -p 5667 -v COUNTER -l
\\PagingFile(_Total)\\% Usage,Paging Fileusage is %.2f%% -w $ARG1$ -c $ARG2$
}
Does anyone know what change(s) are needed to the above command, assuming it can
still be used, in order for it to accurately
keep track of the paging file in the Windows 2008 server?
Thanks.
The information in this e-mail is intended only for the person to whom it is
addressed. If you believe this e-mail was sent to you in error and the e-mail
contains patient information, please contact the Partners Compliance HelpLine at
http://www.partners.org/complianceline . If the e-mail was sent to you in error
but does not contain patient information, please contact the sender and properly
dispose of the e-mail.
--
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue.
::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Nagios Install
On 4/6/2011 7:34 AM, Cory Clouse wrote: I am using debian. When I say custom, I mean when you get the option from the cd installer -- custom, automated, or another custom (I cant read it -- text cuts off screen). I chose only one profile which is the sensor profile. There is no nagios directory in /usr/local/ It installs correctly with the automated install. I believe you are again referring to AlienVault issues, not Nagios ones. You should be contacting them for help instead - http://alienvault.com/services/support . -- Tony Yarusso Technical Team ___ Nagios Enterprises, LLC Email: tyaru...@nagios.com Web:www.nagios.com -- Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
