Ben Donohue wrote:
I have MRTG running on a RH7.1 box.
it logs several serial interfaces on a cisco router.
one log stopped updating sometime in october at about 3AM.
all the other logs and links work fine even the one not producing a log anymore.
Are you able to ascertain that nothing has been changed up to that time on that specific cisco router ? I understand in your statement below nothing has changed in your RH7.1 box . If you are convinced that nothing changed including a 'reboot', then its time to investigate that maybe that router has been interfered with, without your knowledge. I presume this router is on the internet. Remember, hackers don't disable their prey; they just use it as a vehicle for some other ulterior motive.
I'm yet to find this by RTFM but what produces the log file that MRTG makes it's graphs from?
It must be MRTG polling the router but why is not the router not responding on that particular interface. Nothing changed on the MRTG box (as far as I can tell) so i'm assuming the router is not sending out SNMP on that particular port perhaps?
You're right, MRTG on RH box grabs statistics from the cisco router using SNMP. MRTG
on RH queries SNMP on cisco for a snapshot of the statistics like, inbound and outbound
traffic. MRTG does not obtain its statistics from a log but obtains them directly as an SNMP
snapshot and produces logs or graphs that becomes part of html.
A number of items must be checked on the cisco router to ensure statistics maybe gathered
from that router using SNMP.
1. snmp is configured and running
2. snmp is configured so that a specific user/client/password is permitted to access these
statistics. Your SNMP client from RH MRTG must have user/password with access to
snmp in cisco router.
You may have several cron jobs running on RH polling each snmp server to collect data.
Ensure that the cron job for this specific router is still running on RH.
You may also need to check your /var/log/messages and /var/log/snmp.log
-- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
