[Fwd: [Fwd: Re: Merging Joel Knight's SNMP MIB into net/net-snmp]]

Thu Jul 12 15:05:06 UTC 2007

My mail PFY tells me that my original send of this message never made it
through.... so here's the resend (a thread regarding Net-SNMP 5.4 +
OpenBSD 4.1 + PF-MIB).

~BAS

-------- Forwarded Message --------
From: Brian A. Seklecki <bseklecki at collaborativefusion.com>
To: Max Laier <max at love2party.net>
Subject: [Fwd: Re: Merging Joel Knight's SNMP MIB into net/net-snmp]
Date: Tue, 10 Jul 2007 09:03:18 -0400

email message attachment, "Forwarded message - Re: Merging Joel Knight's
SNMP MIB into net/net-snmp"
-------- Forwarded Message --------
From: Joel Knight <enabled at myrealbox.com>
To: ports at openbsd.org
Subject: Re: Merging Joel Knight's SNMP MIB into net/net-snmp
Date: Tue, 03 Jul 2007 12:16:45 -0600

Christopher Snell wrote:
> On 6/26/07, Christopher Snell <chris.snell at gmail.com> wrote:
> 
>> Has anybody considered merging Joel Knight's OpenBSD SNMP MIB work
>> into ports/net-snmp?  His patch works great and has been in production
>> here at Backcountry.com for six months now.  OpenBSD probably will
>> want it's own enterprise number, too.
> 
> Looks like I spoke too soon.  We hadn't had any problems with this MIB
> but as I was investigating it a little bit more deeply, I uncovered
> some problems:
> 
> 1) CPU utilization (system, user, idle) is always reported as 0.00%,
> regardless of actual utilization.  This is probably a flaw in
> net-snmp, not Joel's patch.

Indeed. My patch doesn't touch anything like that. I also don't have 
this issue:

UCD-SNMP-MIB::laLoad.1 = STRING: 0.07
UCD-SNMP-MIB::laLoad.2 = STRING: 0.10
UCD-SNMP-MIB::laLoad.3 = STRING: 0.08

> 2) I've never used Joel's CARP MIB stuff, so I never looked at it
> closely. Now that I look, it seems that it's not returning the objects
> that show the CARP status of my interfaces.  I'm running straight-up
> OpenBSD 4.1.

Again, no issue here.

OPENBSD-CARP-MIB::carpAllow.0 = INTEGER: true(1)
OPENBSD-CARP-MIB::carpPreempt.0 = INTEGER: true(1)
OPENBSD-CARP-MIB::carpLog.0 = INTEGER: false(2)
OPENBSD-CARP-MIB::carpArpbalance.0 = INTEGER: false(2)
OPENBSD-CARP-MIB::carpIfNumber.0 = INTEGER: 3
OPENBSD-CARP-MIB::carpIfIndex.1 = INTEGER: 1
OPENBSD-CARP-MIB::carpIfIndex.2 = INTEGER: 2
OPENBSD-CARP-MIB::carpIfIndex.3 = INTEGER: 3
OPENBSD-CARP-MIB::carpIfDescr.1 = STRING: "carp1"
OPENBSD-CARP-MIB::carpIfDescr.2 = STRING: "carp1000"
OPENBSD-CARP-MIB::carpIfDescr.3 = STRING: "carp998"
OPENBSD-CARP-MIB::carpIfVhid.1 = INTEGER: 1
OPENBSD-CARP-MIB::carpIfVhid.2 = INTEGER: 255
OPENBSD-CARP-MIB::carpIfVhid.3 = INTEGER: 253
OPENBSD-CARP-MIB::carpIfDev.1 = STRING: "em0"
OPENBSD-CARP-MIB::carpIfDev.2 = STRING: "vlan1000"
OPENBSD-CARP-MIB::carpIfDev.3 = STRING: "vlan998"
OPENBSD-CARP-MIB::carpIfAdvbase.1 = INTEGER: 1
OPENBSD-CARP-MIB::carpIfAdvbase.2 = INTEGER: 1
OPENBSD-CARP-MIB::carpIfAdvbase.3 = INTEGER: 1
OPENBSD-CARP-MIB::carpIfAdvskew.1 = INTEGER: 0
OPENBSD-CARP-MIB::carpIfAdvskew.2 = INTEGER: 0
OPENBSD-CARP-MIB::carpIfAdvskew.3 = INTEGER: 0
OPENBSD-CARP-MIB::carpIfState.1 = INTEGER: master(2)
OPENBSD-CARP-MIB::carpIfState.2 = INTEGER: master(2)
OPENBSD-CARP-MIB::carpIfState.3 = INTEGER: master(2)

jknight at prdcgfw01:/home/jknight% sysctl net.inet.carp
net.inet.carp.allow=1
net.inet.carp.preempt=1
net.inet.carp.log=0
net.inet.carp.arpbalance=0

jknight at prdcgfw01:/home/jknight% ifconfig carp | egrep "^carp|carp:"
carp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
         carp: MASTER carpdev em0 vhid 1 advbase 1 advskew 0
carp1000: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
         carp: MASTER carpdev vlan1000 vhid 255 advbase 1 advskew 0
carp998: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
         carp: MASTER carpdev vlan998 vhid 253 advbase 1 advskew 0

jknight at prdcgfw01:/home/jknight% uname -a
OpenBSD prdcgfw01.blah 4.1 GENERIC#0 i386

jknight at prdcgfw01:/home/jknight% pkg_info | grep snmp
net-snmp-5.1.3p5    extendable SNMP implementation

> 3) snmpd(8) died after I ran a bunch of snmpwalk(1)'s against it.  Not
> sure what's going on here.

I've had a patched snmpd running on a few 4.1 machines for many weeks 
now, no issues. Before that it ran on 4.0 without issue.

> Has anybody else encountered these problems?  I'm going to work on #1
> but I'm afraid that #2 and #3 are probably beyond my limited C skills.

If you're having issues, please provide information like 1) the output 
you're seeing, 2) how to reproduce the issue, 3) the commands you're 
running, etc.

I appreciate everyones interest in my little project.

.joel

email message attachment, "Forwarded message - Re: Merging Joel Knight's
SNMP MIB into net/net-snmp"
-------- Forwarded Message --------
From: Brian A. Seklecki <bseklecki at collaborativefusion.com>
To: Christopher Snell <chris.snell at gmail.com>
Cc: ports at openbsd.org, opti at openbsd.de, enabled at myrealbox.com
Subject: Re: Merging Joel Knight's SNMP MIB into net/net-snmp
Date: Thu, 28 Jun 2007 11:11:19 -0400

Oh god please yes!  

I'm working on pfsync and a general "OPENBSD-NETSTAT-MIB" for feeding
"netstat -s" stats into a MIB.

I've also written a small Nagios plugin that uses the Net-SNMP bindings
to walk the CARP Interface Status Table
("OPENBSD-CARP-MIB::carpIfTable") to check for proper active/standby
configs:

http://www.nagiosexchange.org/Networking.53.0.html?&tx_netnagext_pi1[p_view]=1021

There's also a check_pf:

http://www.nagiosexchange.org/Networking.53.0.html?&tx_netnagext_pi1[p_view]=895

Also, I'm hoping to switch one of or lab policy routers back to pf(4)
this weekend, and I'll be able to improve my OBENBSD-PF-MIB MRTG
Templates and upload them (*hopefully*) to:

http://howto.aphroland.org/HOWTO/MRTG//

Which seems to be the definitive MRTG Template/OID Reference (if such a
place exists -- MRTG is almost 10 years old and that idea never occurred
to anyone), but the site has been unresponsive as of late.

Might be time for a separate Wiki.

~BAS

On Tue, 2007-06-26 at 15:48 -0600, Christopher Snell wrote:
> Hi,
> 
> Has anybody considered merging Joel Knight's OpenBSD SNMP MIB work
> into ports/net-snmp?  His patch works great and has been in production
> here at Backcountry.com for six months now.  OpenBSD probably will
> want it's own enterprise number, too.
> 
> I'm willing to lend a hand, if it's needed.
> 
> Thanks,
> 
> Chris
> 

> 
email message attachment, "Forwarded message - Re: Merging Joel Knight's
SNMP MIB into net/net-snmp"
-------- Forwarded Message --------
From: Christopher Snell <chris.snell at gmail.com>
To: ports at openbsd.org
Cc: opti at openbsd.de, enabled at myrealbox.com
Subject: Re: Merging Joel Knight's SNMP MIB into net/net-snmp
Date: Thu, 28 Jun 2007 22:33:42 -0600

On 6/26/07, Christopher Snell <chris.snell at gmail.com> wrote:

> Has anybody considered merging Joel Knight's OpenBSD SNMP MIB work
> into ports/net-snmp?  His patch works great and has been in production
> here at Backcountry.com for six months now.  OpenBSD probably will
> want it's own enterprise number, too.

Looks like I spoke too soon.  We hadn't had any problems with this MIB
but as I was investigating it a little bit more deeply, I uncovered
some problems:

1) CPU utilization (system, user, idle) is always reported as 0.00%,
regardless of actual utilization.  This is probably a flaw in
net-snmp, not Joel's patch.

2) I've never used Joel's CARP MIB stuff, so I never looked at it
closely. Now that I look, it seems that it's not returning the objects
that show the CARP status of my interfaces.  I'm running straight-up
OpenBSD 4.1.

3) snmpd(8) died after I ran a bunch of snmpwalk(1)'s against it.  Not
sure what's going on here.

Has anybody else encountered these problems?  I'm going to work on #1
but I'm afraid that #2 and #3 are probably beyond my limited C skills.

Chris

email message attachment, "Forwarded message - Merging Joel Knight's
SNMP MIB into net/net-snmp"
-------- Forwarded Message --------
From: Christopher Snell <chris.snell at gmail.com>
To: ports at openbsd.org
Cc: opti at openbsd.de, enabled at myrealbox.com
Subject: Merging Joel Knight's SNMP MIB into net/net-snmp
Date: Tue, 26 Jun 2007 15:48:56 -0600

Hi,

Has anybody considered merging Joel Knight's OpenBSD SNMP MIB work
into ports/net-snmp?  His patch works great and has been in production
here at Backcountry.com for six months now.  OpenBSD probably will
want it's own enterprise number, too.

I'm willing to lend a hand, if it's needed.

Thanks,

Chris