Ad Widget

Collapse

Sonicwall - Bulk Requests

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Daniel4711
    Senior Member
    • Jul 2014
    • 126

    #1

    Sonicwall - Bulk Requests

    Hello guys!

    If someone has problems with monitoring a Dell Sonicwall NSA2600 with Firmware 6.2.5.1-26n , he should disable the bulk requests.

    A query of sonicSAStatUserName from the MIB SONICWALL-FIREWALL-IP-STATISTICS-MIB provides incorrect values, which are confirmed by a snmpbulkrequest command.

    HTML Code:
    snmpbulkwalk -v2c -c public -Cn0 -Cr14 192.168.100.233 .1.3.6.1.4.1.8741.1.3.2.1.1.1.14
    
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.335039153 = Hex-STRING: 56 50 4E 2D 48 61 67 65 6E 2D 4C 61 6E 63 6F 6D 00
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.461377057 = STRING: "VPN-Hagen-Lan"
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.2712169472 = STRING: "VPN-Hagen-Lancom"
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.3057154726 = STRING: "VPN-Hagen-Lancom"
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.3989336164 = STRING: "VPN-Hagen-Lancom"
    The Ideal Output should be like this:
    Code:
    Befehl: snmpbulkwalk -v2c -c public -Cn0 -Cr14 192.168.100.233 .1.3.6.1.4.1.8741.1.3.2.1.1.1.14
    
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.335039153 = STRING: "VPN Connection 1"
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.461377057 = STRING: "VPN Connection 2"
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.2712169472 = STRING: "VPN Connection 3"
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.3057154726 = STRING: "VPN Connection 4"
    SNMPv2-SMI::enterprises.8741.1.3.2.1.1.1.14.3989336164 = STRING: "VPN Connection 5"
    I have opened a case at Sonicwall and will add an entry to http://zabbix.org/wiki/Bulk_SNMP_req...vice_blacklist if this wont be fixed.
  • troffasky
    Senior Member
    • Jul 2008
    • 568

    #2
    What is the problem you are describing? From what I can see in the output, the only difference is the name of the SA but how would bulk vs. not-bulk change the name returned by the query?

    Comment

    Working...