Anyone know how to create an item that will combine the results of multiple dynamically-matched OID's into one for graphing?
To be more clear, this is what I'm trying to do:
I'm trying to collect _total_ in bytes/out bytes for a particular IPsec tunnel. In my case, I'm using a cisco IOS-based router using crypto maps (as opposed to VTI's)
Since there can be several IPsec phase-2 SA Flows per tunnel, I have to combine them all. Oh, and to make matters worse, the OID's are different every time a flow is built
So, in SNMP terms, here are the polls:
.1.3.6.1.4.1.9.9.171.1.3.2.1.26.[INDEX Number] gives me "input bytes"
.1.3.6.1.4.1.9.9.171.1.3.2.1.39.[INDEX Number] gives me "output bytes"
To find out the index number:
.1.3.6.1.4.1.9.9.172.1.2.1.1.4.[string match for desired remote peer]
Now, the problem? Since this IPSec Phase 2 we're talking about, multiple index numbers can be returned for the same peer, representing separate IPsec Flows.
I can't seem to find an OID that is an aggregate for all of the flows.
And I've dug through the damn mib so much my head hurts now.
Anyway, so the Zabbix format would be:
.1.3.6.1.4.1.9.9.172.1.2.1.1.26["index",".1.3.6.1.4.1.9.9.172.1.2.1.1.4","REMO TE-PEER-NAME"]
.1.3.6.1.4.1.9.9.172.1.2.1.1.39["index",".1.3.6.1.4.1.9.9.172.1.2.1.1.4","REMO TE-PEER-NAME"]
That part is working, but of course, I'm only getting data for whatever SA flow happens to be the first.
As of now I'm thinking about writing a little script to do this, and poll it using the zabbix agent on my local zabbix server, but I figured I'd ask here first if anyone knew of a better way..
To be more clear, this is what I'm trying to do:
I'm trying to collect _total_ in bytes/out bytes for a particular IPsec tunnel. In my case, I'm using a cisco IOS-based router using crypto maps (as opposed to VTI's)
Since there can be several IPsec phase-2 SA Flows per tunnel, I have to combine them all. Oh, and to make matters worse, the OID's are different every time a flow is built

So, in SNMP terms, here are the polls:
.1.3.6.1.4.1.9.9.171.1.3.2.1.26.[INDEX Number] gives me "input bytes"
.1.3.6.1.4.1.9.9.171.1.3.2.1.39.[INDEX Number] gives me "output bytes"
To find out the index number:
.1.3.6.1.4.1.9.9.172.1.2.1.1.4.[string match for desired remote peer]
Now, the problem? Since this IPSec Phase 2 we're talking about, multiple index numbers can be returned for the same peer, representing separate IPsec Flows.
I can't seem to find an OID that is an aggregate for all of the flows.
And I've dug through the damn mib so much my head hurts now.Anyway, so the Zabbix format would be:
.1.3.6.1.4.1.9.9.172.1.2.1.1.26["index",".1.3.6.1.4.1.9.9.172.1.2.1.1.4","REMO TE-PEER-NAME"]
.1.3.6.1.4.1.9.9.172.1.2.1.1.39["index",".1.3.6.1.4.1.9.9.172.1.2.1.1.4","REMO TE-PEER-NAME"]
That part is working, but of course, I'm only getting data for whatever SA flow happens to be the first.
As of now I'm thinking about writing a little script to do this, and poll it using the zabbix agent on my local zabbix server, but I figured I'd ask here first if anyone knew of a better way..
Comment