Re: pfstat and queueing

[Stuart Henderson]

On 2018-02-16, Predrag Punosevac  wrote:
> Stuart Henderson wrote:
>
>> It can already be monitored to some extent, base snmpd does already
>> support a number of things in OPENBSD-PF-MIB, but not queues yet.
>
> Any chance that you share with us how you plot the data you recover with
> snmpwalk from those MIBs.

I'm not collecting pf stats here, but simple MRTG or anything else
that can poll a numeric value from SNMP and plot it would do the
trick.

A walk starting from .1.3.6.1.4.1.30155 to see what's available already
(snmpwalk's default OID doesn't end up recursing into the OpenBSD MIBs).

(I am collecting sensors data via LibreNMS which has support for
OPENBSD-SENSORS-MIB committed upstream).

> I would be most interested in
> LibreNMS/Observium. Also how difficult would be to write PF plugin for
> PF? Somebody apparently tried
>
> https://github.com/darinkes/collectd-pf

That's a hacked-up 7 year old copy of pfctl with the license removed,
it's not going to be all that much use now.

> https://collectd.org/wiki/index.php/Plugin:PF

>From a quick look at the code I think this collects information about
number of states etc, like pfctl -si shows, collecting it from PF
rather than via snmpd where the information is also available.
It really depends what you're interested in monitoring as to whether
it will be useful.

Re: pfstat and queueing

[Predrag Punosevac]

Stuart Henderson wrote:

> It can already be monitored to some extent, base snmpd does already
> support a number of things in OPENBSD-PF-MIB, but not queues yet.

Any chance that you share with us how you plot the data you recover with
snmpwalk from those MIBs. I would be most interested in
LibreNMS/Observium. Also how difficult would be to write PF plugin for
PF? Somebody apparently tried


https://github.com/darinkes/collectd-pf
https://collectd.org/wiki/index.php/Plugin:PF

Any hints?

Best,
Predrag

Re: pfstat and queueing

[Stuart Henderson]

On 2018-02-15, Kaya Saman  wrote:
>
>
> On 02/15/2018 01:34 PM, Stuart Henderson wrote:
>> On 2018/02/15 13:27, Kaya Saman wrote:
>>>
>>> On 02/15/2018 12:13 PM, Stuart Henderson wrote:
 On 2018-02-15, Kaya Saman  wrote:
> does queueing still function with pfstat? As far as I'm aware it still
> uses the old altq method which has long been abandoned.
 you're correct, pfstat hasn't been updated to follow changes in PF for
 a long time. the only change in pfstat since 2007 has been adding the
 -f flag to copy/clean the database.


>>> Thanks Stuart for the confirmation.
>>>
>>>
>>> Hmm looks like this might be a feature request to Daniel then. or
>>> someone who's working on pfstat :-)
>> Nobody is visibly working on pfstat.
>>
>> If anyone did want to work on queue monitoring I'd encourage them to
>> look at adding to snmpd instead (it will need a custom MIB). There are
>> plenty of things that can monitor SNMP stats, and as it's in base,
>> there are no real worries about ABI getting out of sync.
>>
> Interesting!
>
> I think I agree with SNMP. It would be great if pf could be monitored 
> through net-snmp or the built in snmp. To be able to see what PF is 
> doing in something like Observium, Zabbix, Cacti or any other SNMP based 
> monitoring software would be a really nice asset.

It can already be monitored to some extent, base snmpd does already
support a number of things in OPENBSD-PF-MIB, but not queues yet.

Re: pfstat and queueing

[Kaya Saman]

On 02/15/2018 01:34 PM, Stuart Henderson wrote:

On 2018/02/15 13:27, Kaya Saman wrote:


On 02/15/2018 12:13 PM, Stuart Henderson wrote:

On 2018-02-15, Kaya Saman  wrote:

does queueing still function with pfstat? As far as I'm aware it still
uses the old altq method which has long been abandoned.

you're correct, pfstat hasn't been updated to follow changes in PF for
a long time. the only change in pfstat since 2007 has been adding the
-f flag to copy/clean the database.



Thanks Stuart for the confirmation.


Hmm looks like this might be a feature request to Daniel then. or
someone who's working on pfstat :-)

Nobody is visibly working on pfstat.

If anyone did want to work on queue monitoring I'd encourage them to
look at adding to snmpd instead (it will need a custom MIB). There are
plenty of things that can monitor SNMP stats, and as it's in base,
there are no real worries about ABI getting out of sync.


Interesting!

I think I agree with SNMP. It would be great if pf could be monitored 
through net-snmp or the built in snmp. To be able to see what PF is 
doing in something like Observium, Zabbix, Cacti or any other SNMP based 
monitoring software would be a really nice asset.


Regards,

Kaya

Re: pfstat and queueing

[Stuart Henderson]

On 2018/02/15 13:27, Kaya Saman wrote:
> 
> 
> On 02/15/2018 12:13 PM, Stuart Henderson wrote:
> > On 2018-02-15, Kaya Saman  wrote:
> > > does queueing still function with pfstat? As far as I'm aware it still
> > > uses the old altq method which has long been abandoned.
> > you're correct, pfstat hasn't been updated to follow changes in PF for
> > a long time. the only change in pfstat since 2007 has been adding the
> > -f flag to copy/clean the database.
> > 
> > 
> 
> Thanks Stuart for the confirmation.
> 
> 
> Hmm looks like this might be a feature request to Daniel then. or
> someone who's working on pfstat :-)

Nobody is visibly working on pfstat.

If anyone did want to work on queue monitoring I'd encourage them to
look at adding to snmpd instead (it will need a custom MIB). There are
plenty of things that can monitor SNMP stats, and as it's in base,
there are no real worries about ABI getting out of sync.

Re: pfstat and queueing

[Kaya Saman]

On 02/15/2018 12:13 PM, Stuart Henderson wrote:

On 2018-02-15, Kaya Saman  wrote:

does queueing still function with pfstat? As far as I'm aware it still
uses the old altq method which has long been abandoned.

you're correct, pfstat hasn't been updated to follow changes in PF for
a long time. the only change in pfstat since 2007 has been adding the
-f flag to copy/clean the database.




Thanks Stuart for the confirmation.


Hmm looks like this might be a feature request to Daniel then. or 
someone who's working on pfstat :-)



Regards,


Kaya

Re: pfstat and queueing

[Stuart Henderson]

On 2018-02-15, Kaya Saman  wrote:
>
> does queueing still function with pfstat? As far as I'm aware it still 
> uses the old altq method which has long been abandoned.

you're correct, pfstat hasn't been updated to follow changes in PF for
a long time. the only change in pfstat since 2007 has been adding the
-f flag to copy/clean the database.

pfstat and queueing

[Kaya Saman]

Hi,


does queueing still function with pfstat? As far as I'm aware it still 
uses the old altq method which has long been abandoned.



It would be great if pfstat would graph queues again but the config 
example in: /usr/local/share/examples/pfstat/pfstat.conf still has the 
old altq style?



Whenever I try to run it, the output is "queueing not supported". As I'm 
on -current the last os update broke it as referenced in the @list 
previously so will wait on the fix before testing again.



Regards,


Kaya