AIX 5.2/5.3 traffic analyse

[diti]

Hello All

Any one have experience with traffic analyse on each port related to iface

what I need is analyse of in/out trafic on the port

ip xxx.xxx.xxx.xxx port ex. 80 and I would like to know if it is possible using zabbix.

otherwase if You have any ideas how I can analyse such traffic on AIX and collect data I'll be happy for any answer


regards
marcin

[nonaka_nona_to]

traffic analysis by port

Hello diti.

There is no traffic counter or mesure by port in net-snmp or basic OS function, as of my knowledge.

But, there can be some workarounds.

1. Apache httpd's status module may help you.

In apache-2.x case, using mod_status you can have following output.

$ curl http://localhost/server-status?auto
Total Accesses: 188673
Total kBytes: 599103
CPULoad: .016017
Uptime: 43766
ReqPerSec: 4.31095
BytesPerSec: 14017.3
BytesPerReq: 3251.56
BusyWorkers: 6
IdleWorkers: 16
Scoreboard: K.__W.._____.._..K.___._K__...**snip**

add zabbix-agentd.conf

UserParameter=httpd.access,/usr/bin/curl --silent 'http://localhost/server-status?auto' | /bin/grep 'Total Accesses:' | /bin/sed 's/Total Accesses: //;'
UserParameter=httpd.busyworkers,/usr/bin/curl --silent 'http://localhost/server-status?auto' | /bin/grep 'BusyWorkers:' | /bin/sed 's/BusyWorkers: //;'
UserParameter=httpd.idleworkers,/usr/bin/curl --silent 'http://localhost/server-status?auto' | /bin/grep 'IdleWorkers:' | /bin/sed 's/IdleWorkers: //;'

Now you can measure httpd.access, httpd.busyworkers and httpd.idleworkers using zabbix-agent.
There is 'Total kBytes' field for measuring traffic.
Note that httpd.access is accumulated counter.

2. OS Firewall module may have counter
In FreeBSD's case, configure firewall using ipfw command.
"ipfw show" output has packet and byte count for each rule.

But not in Cisco PIX's case. I want packet/byte count for each firewall rules, but not available (yet?).

still, AIX may have counter that satisfies you.

[diti]

Hello diti.

There is no traffic counter or mesure by port in net-snmp or basic OS function, as of my knowledge.

But, there can be some workarounds.

1. Apache httpd's status module may help you.

In apache-2.x case, using mod_status you can have following output.

$ curl http://localhost/server-status?auto
Total Accesses: 188673
Total kBytes: 599103
CPULoad: .016017
Uptime: 43766
ReqPerSec: 4.31095
BytesPerSec: 14017.3
BytesPerReq: 3251.56
BusyWorkers: 6
IdleWorkers: 16
Scoreboard: K.__W.._____.._..K.___._K__...**snip**

add zabbix-agentd.conf

UserParameter=httpd.access,/usr/bin/curl --silent 'http://localhost/server-status?auto' | /bin/grep 'Total Accesses:' | /bin/sed 's/Total Accesses: //;'
UserParameter=httpd.busyworkers,/usr/bin/curl --silent 'http://localhost/server-status?auto' | /bin/grep 'BusyWorkers:' | /bin/sed 's/BusyWorkers: //;'
UserParameter=httpd.idleworkers,/usr/bin/curl --silent 'http://localhost/server-status?auto' | /bin/grep 'IdleWorkers:' | /bin/sed 's/IdleWorkers: //;'

Now you can measure httpd.access, httpd.busyworkers and httpd.idleworkers using zabbix-agent.
There is 'Total kBytes' field for measuring traffic.
Note that httpd.access is accumulated counter.

2. OS Firewall module may have counter
In FreeBSD's case, configure firewall using ipfw command.
"ipfw show" output has packet and byte count for each rule.

But not in Cisco PIX's case. I want packet/byte count for each firewall rules, but not available (yet?).

still, AIX may have counter that satisfies you.

Thansk for Your answer

but I can not install Apache httpd's status because of some reasons,

regards
marcin