ip nbar in zabbix

[cosmobot]

Maybe you have no dhcp traffic.

Ok, attached is a Template for NBAR. The IN trafffic is on Port 1, and the OUT traffic is on Port 4, you will need to change the ports to suit your needs. The Template has Stacked graphs, but no triggers. Enjoy!

And here's one example graph:

Many thanks!

[DB601]

Many thanks

[DB601]

Hello
thanks for your help!
i just wanna know what's zabbix's version do you use?
because i have a problem, i don't know if it is in relation with the version of zabix , i can't export anything and import too! Do you have any idea of a solution to this problem?

thank you

[MrKen]

Hello
thanks for your help!
i just wanna know what's zabbix's version do you use?
because i have a problem, i don't know if it is in relation with the version of zabix , i can't export anything and import too! Do you have any idea of a solution to this problem?

thank you

The template is from 1.6.5, but that shouldn't matter because it is just an .xml file. There should be two templates called MyTemplate_Cisco_Nbar_In and MyTemplate_Cisco_Nbar_Out.

It should be in a group called Templates.

What version are you using? I believe there was a problem with Import/Export in 1.8.1

@cosmobot: Did you have any importing problems?

MrKen

[DB601]

ok I'll try
isn't matter if i put MyTemplate_Cisco_Nbar_In and MyTemplate_Cisco_Nbar_Out in the same template?

i use the version 1.8

thanks

[DB601]

yep

the export works! but i still have a problem with the import!!
when i importe i have a msg "imported successfully" but i don't find the template !
can you help me please

[maplesyrupghost]

Hey sorry to bring this thread back from the dead, but I am also having a problem importing that template, I just get an error, import failed. (Zabbix 2.0.2)

I did, however, make a template before finding this one. I attached it here, it's pretty snazzy, I just made it a few minutes ago, it's relatively complete.

The one thing is I'm not sure how to set up discovery to create the items automatically. I had to sit there and make them all one at a time, and if you enable a second interface, you might be SOL.

For example, a dynamic OID:

iso.org.dod.internet.private.enterprises.9.9.244.1 .2.1.1.9.2[index,iso.org.dod.internet.private.enterprises.9.9 .244.1.8.1.1.2,bgp]

Will show you the inbound traffic on the OID that matches 'bgp', however, that .2 in the search is my issue. Like: iso.org.dod.internet.private.enterprises.9.9.244.1 .2.1.1.9.2

Adding another interface, I'm pretty sure, would change that value to a .3, and thus the template isn't good anymore. How can I make this template grab the items based on discovery of them?

Any help would be appreciated!

[louis-m]

Sorry to bring this one up again but is anyone successfully monitoring VoIP traffic with this eg rtp?

[jojo]

Hi everyone,

This is my Cisco NBAR Template i wrote up. Tested in Zabbix 2.4.1 against Cisco ISR 2921's. nbar was configured on one interface - not sure if that means anything to anyone but i thought i'd mention.

The template uses low level discovery to pull in application names and displays in/out bit rates for each application it finds. I've also set up consolidated graphs for each application.

You need to set a {$SNMP_COMMUNITY} macro and set that to your snmp community. One is set by default in the template and is set to "public".

The template uses OIDs so it should just work.

This is actually the second time i've made an NBAR template. With each version, i seem to put less information in it. If i had done this earlier, i probably wouldn't have needed to recreate it from scratch.

I don't have access to the devices anymore to do any further testing so hopefully someone can take over from here.