SonicWALL email security 3300 mib

[chief]

I'm trying to add our SonicWALL email security devices into zabbix. I've just used a linux snmpv2 template and all the device info I require is picked up, apart from CPU usage, which is what I need, as if it hits 100% it usually means somethings wrong!

I've done an snmp walk with the OID from the template and it returns a

HOST-RESOURCES-MIB::hrProcessorLoad.768 = No Such Instance currently exists at this OID

I've done an snmp walk to gain some info into what the device gives out, but I'm not sure what I'm looking for. The only references to Processor or CPU are

HOST-RESOURCES-MIB::hrDeviceType.768 = OID: HOST-RESOURCES-TYPES::hrDeviceProcessor

Plus a couple of other items. How would I get the OID for this device to change in the template?

Thanks

[kaspars.mednis]

Hello,

Are you looking for the numerical oid values ?
you can look at http://www.oidview.com/mibs/0/HOST-RESOURCES-MIB.html

it starts at 1.3.6.1.2.1.25

try this command:

snmpwalk -On -v2c -c COMMUNITY DEVICE_IP 1.3.6.1.2.1.25

replace COMMUNITY and DEVICE_IP with your values
-On flag returns numerical oids, that can be used everywhere without MIBs

Regards,
Kaspars

[chief]

Yes, the OID values. As I am getting the errors described above.

Doing the search using the commands you gave above for the snmpwalk, I don't seem to see the CPU % usage. As I understand it, it should be the "768" value. So looking at the output around that, I can't see the value I would use to pull in that data.

Below is the section from the snmpwalk.

.1.3.6.1.2.1.25.3.2.1.1.768 = INTEGER: 768
.1.3.6.1.2.1.25.3.2.1.1.1025 = INTEGER: 1025
.1.3.6.1.2.1.25.3.2.1.1.1026 = INTEGER: 1026
.1.3.6.1.2.1.25.3.2.1.1.1027 = INTEGER: 1027
.1.3.6.1.2.1.25.3.2.1.1.1552 = INTEGER: 1552
.1.3.6.1.2.1.25.3.2.1.1.1553 = INTEGER: 1553
.1.3.6.1.2.1.25.3.2.1.1.3072 = INTEGER: 3072
.1.3.6.1.2.1.25.3.2.1.2.768 = OID: .1.3.6.1.2.1.25.3.1.3
.1.3.6.1.2.1.25.3.2.1.2.1025 = OID: .1.3.6.1.2.1.25.3.1.4
.1.3.6.1.2.1.25.3.2.1.2.1026 = OID: .1.3.6.1.2.1.25.3.1.4
.1.3.6.1.2.1.25.3.2.1.2.1027 = OID: .1.3.6.1.2.1.25.3.1.4
.1.3.6.1.2.1.25.3.2.1.2.1552 = OID: .1.3.6.1.2.1.25.3.1.6
.1.3.6.1.2.1.25.3.2.1.2.1553 = OID: .1.3.6.1.2.1.25.3.1.6
.1.3.6.1.2.1.25.3.2.1.2.3072 = OID: .1.3.6.1.2.1.25.3.1.12
.1.3.6.1.2.1.25.3.2.1.3.768 = STRING: GenuineIntel: Intel(R) Celeron(R) D CPU        440  @ 2.00GHz
.1.3.6.1.2.1.25.3.2.1.3.1025 = STRING: network interface lo
.1.3.6.1.2.1.25.3.2.1.3.1026 = STRING: network interface eth0
.1.3.6.1.2.1.25.3.2.1.3.1027 = STRING: network interface eth1
.1.3.6.1.2.1.25.3.2.1.3.1552 = STRING: SCSI disk (/dev/sda)
.1.3.6.1.2.1.25.3.2.1.3.1553 = STRING: SCSI disk (/dev/sdb)
.1.3.6.1.2.1.25.3.2.1.3.3072 = STRING: Guessing that there's a floating point co-processor
.1.3.6.1.2.1.25.3.2.1.4.768 = OID: .0.0
.1.3.6.1.2.1.25.3.2.1.4.1025 = OID: .0.0
.1.3.6.1.2.1.25.3.2.1.4.1026 = OID: .0.0
.1.3.6.1.2.1.25.3.2.1.4.1027 = OID: .0.0
.1.3.6.1.2.1.25.3.2.1.4.1552 = OID: .0.0
.1.3.6.1.2.1.25.3.2.1.4.1553 = OID: .0.0
.1.3.6.1.2.1.25.3.2.1.4.3072 = OID: .0.0
.1.3.6.1.2.1.25.3.2.1.5.1025 = INTEGER: running(2)
.1.3.6.1.2.1.25.3.2.1.5.1026 = INTEGER: running(2)
.1.3.6.1.2.1.25.3.2.1.5.1027 = INTEGER: running(2)
.1.3.6.1.2.1.25.3.2.1.6.1025 = Counter32: 0
.1.3.6.1.2.1.25.3.2.1.6.1026 = Counter32: 0
.1.3.6.1.2.1.25.3.2.1.6.1027 = Counter32: 0
.1.3.6.1.2.1.25.3.3.1.1.768 = OID: .0.0

[kaspars.mednis]

Hello,

what 1.3.6.1.2.1.25.3.2.1.1 gives is the device index table.

.768 = GenuineIntel: Intel(R) Celeron(R) D CPU
1025 = network interface lo and so on

for CPU load it seems you need 1.3.6.1.2.1.25.3.3.1.2

hrProcessorTable 	1.3.6.1.2.1.25.3.3
hrProcessorEntry hrProcessorEntry 	1.3.6.1.2.1.25.3.3.1
hrProcessorFrwID hrProcessorFrwID 	1.3.6.1.2.1.25.3.3.1.1
hrProcessorLoad hrProcessorLoad 	1.3.6.1.2.1.25.3.3.1.2

so you have

.1.3.6.1.2.1.25.3.3.1.1.768 = OID: .0.0 , it is hrProcessorFrwID,
but i can't see here the needed oid .1.3.6.1.2.1.25.3.3.1.2.768, which will be CPU load hrProcessorLoad

From your dump it seems you are not getting this value from the hardware


Regards,
Kaspars

[kaspars.mednis]

why you are not trying to use SonicWall's own mibs ?

they start with .1.3.6.1.4.1.8741

https://www.sonicwall.com/en-us/support/knowledge-base/170503581936826

in MIB files there must be detailed description for each OID

Regards,
Kaspars

[chief]

Thanks for the help.

I have loaded the Sonicwall mibs in, but they don't seem to pull the info from this device. It's not actually a Sonicwall firewall, it's the email security device, that must have slightly different OID's.

I'll keep digging around to try and find it.