This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Monitor harddisk sophos UMT 9 by PRTG

Tam Le over 7 years ago

Hi All,

I just set up monitor my sophos UTM 9 by PRTG follow topic:

https://kb.paessler.com/en/topic/73179-how-can-i-monitor-sophos-utm-devices-with-prtg

i can monitor CPU, RAM,.. but it not have monitor hard disk

who can help me monitor harddisk of UTM 9 by PRTG

Thanks All!

This thread was automatically locked due to age.

Parents

0 ChrisBKA over 7 years ago

Hi,

Tam Le said:

i cant monitor CPU, RAM,.. but it not have monitor hard disk

So you can NOT monitor anything ?

Tam Le said:

i cant monitor CPU, RAM

Cheers,

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Le over 7 years ago in reply to ChrisBKA

Hi Chris,

Thanks your reply,

Sorry my typing error, i can monitor CPU, RAM,.. but i can not monitor harddisk

Tks!
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis-M over 7 years ago in reply to Tam Le

Have you tried a plain old linux mib etc?
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Le over 7 years ago in reply to Louis-M

Hi Louis-M,

You can introduce me about it?

I've been tried down MIB file from my sophos and import to PRTG but nothing was created.

I've been tried change snmpd.conf of sophos to collect disk info but not success. Can my change is not correct.

Show me true way to do this!

Tks!
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis-M over 7 years ago in reply to Tam Le

It's been years since I looked at PTRG. I purely use Zabbix now. There should be something in PTRG for monitoring linux servers. Just point that at the UTM and see what comes back.

In Zabbix, there's a linux template that you just apply and voila....

You could do a snmp walk but it gets a little complex as you might have to manipulate the values returned eg bytes to gigabytes etc

Try and look for a linux template or something that you can import to PTRG.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Louis-M over 7 years ago in reply to Tam Le

It's been years since I looked at PTRG. I purely use Zabbix now. There should be something in PTRG for monitoring linux servers. Just point that at the UTM and see what comes back.

In Zabbix, there's a linux template that you just apply and voila....

You could do a snmp walk but it gets a little complex as you might have to manipulate the values returned eg bytes to gigabytes etc

Try and look for a linux template or something that you can import to PTRG.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Tam Le over 7 years ago in reply to Louis-M

Hi,

I've been tried import template but infomation about harddisk can not collect :V

i'm not sure whether Sophos provides data about hard disks at all by SNMP, and it's problem

Oke thanks Louis-M
Cancel
Vote Up 0 Vote Down

Cancel
0 ChrisBKA over 7 years ago in reply to Tam Le

Hi,

have you tried snmpwalk on that box?

You should get info at OID: .1.3.6.1.4.1.2021.9.1

from http://www.debianadmin.com/linux-snmp-oids-for-cpumemory-and-disk-statistics.html :

Disk Statistics The snmpd.conf needs to be edited. Add the following (assuming a machine with a single ‘/' partition): disk / 100000 (or) includeAllDisks 10% for all partitions and disks The OIDs are as follows Path where the disk is mounted: .1.3.6.1.4.1.2021.9.1.2.1 Path of the device for the partition: .1.3.6.1.4.1.2021.9.1.3.1 Total size of the disk/partion (kBytes): .1.3.6.1.4.1.2021.9.1.6.1 Available space on the disk: .1.3.6.1.4.1.2021.9.1.7.1 Used space on the disk: .1.3.6.1.4.1.2021.9.1.8.1 Percentage of space used on disk: .1.3.6.1.4.1.2021.9.1.9.1 Percentage of inodes used on disk: .1.3.6.1.4.1.2021.9.1.10.1

Cheers

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Le over 7 years ago in reply to ChrisBKA

Thanks for your help, Chris

I've tried config file snmpd.config, but it not work, this config work on other linux i tried.

Thank You!
Cancel
Vote Up 0 Vote Down

Cancel
0 ChrisBKA over 7 years ago in reply to Tam Le

Hi,

Tam Le said:

Thanks for your help, Chris

You are welcome...thats how a community works :-)

Tam Le said:
I've tried config file snmpd.config, but it not work

What do you mean by this?

did you #snmpwalk on the prtg box to sophos utm ?

Pls post the output of your snmpwalk.

Cheers,

Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Le over 7 years ago in reply to ChrisBKA

Hi Chris,

This is my config on snmpd.conf in /var/chroot-snmp/etc

Because Sophos not have snmpwalk i try by tool of PRTG, and it not collect data reverse

i sure tool work because i check:

RAM Total RAM used: .1.3.6.1.4.1.2021.4.6.0

have value reverse

i think this is problem of snmp Sophos.

Thank Chris!
Cancel
Vote Up 0 Vote Down

Cancel

0 ChrisBKA over 7 years ago in reply to Tam Le

Hi,

just found out that sophos utilizes the following OIDs

from www.oidview.com/.../HOST-RESOURCES-MIB.html

hrDiskStorageTable 1.3.6.1.2.1.25.3.6

hrDiskStorageEntry 1.3.6.1.2.1.25.3.6.1

hrDiskStorageAccess 1.3.6.1.2.1.25.3.6.1.1

hrDiskStorageMedia 1.3.6.1.2.1.25.3.6.1.2

hrDiskStorageRemoveble 1.3.6.1.2.1.25.3.6.1.3

hrDiskStorageCapacity 1.3.6.1.2.1.25.3.6.1.4

hrPartitionTable 1.3.6.1.2.1.25.3.7

hrPartitionEntry 1.3.6.1.2.1.25.3.7.1

hrPartitionIndex 1.3.6.1.2.1.25.3.7.1.1

hrPartitionLabel 1.3.6.1.2.1.25.3.7.1.2

hrPartitionID 1.3.6.1.2.1.25.3.7.1.3

hrPartitionSize 1.3.6.1.2.1.25.3.7.1.4

hrPartitionFSIndex 1.3.6.1.2.1.25.3.7.1.5

Found this in a forum post ... hth ...

Cheers,

Chris

0 Tam Le over 7 years ago in reply to ChrisBKA

Hi Chris,

OIDs follow link http://www.oidview.com/mibs/0/HOST-RESOURCES-MIB.html not work

I think MIB file of Sophos not support for disk

This problem from 2012 https://ideas.sophos.com/forums/17359-sg-utm/suggestions/3479804-more-mibs-oids

community.sophos.com/.../network-snmp-oids

Thanks Chris
Cancel
Vote Up 0 Vote Down

Cancel
0 ChrisBKA over 7 years ago in reply to Tam Le

Hi,

as the admin user says: declined - default oids work ...

AdminAlan Toews (Sr. Product Manager, Sophos Features & Ideas Laboratory) responded Aug 27, 2015

Sophos UTM uses standard namespaces for these basic options, so no additional MIBs are necessary.

Have to check it myself ... will respond after i did.

Cheers,

Chris
- Cancel
- Vote Up 0 Vote Down
- Cancel

0 ChrisBKA over 7 years ago in reply to Tam Le

Hi,

when i do: #snmpwalk -v2c -cpublic <sophos ip> 1.3.6.1.2.1.25.2
i get:

iso.3.6.1.2.1.25.2.2.0 = INTEGER: 8101372
iso.3.6.1.2.1.25.2.3.1.1.1 = INTEGER: 1
iso.3.6.1.2.1.25.2.3.1.1.3 = INTEGER: 3
iso.3.6.1.2.1.25.2.3.1.1.6 = INTEGER: 6
iso.3.6.1.2.1.25.2.3.1.1.7 = INTEGER: 7
iso.3.6.1.2.1.25.2.3.1.1.8 = INTEGER: 8
iso.3.6.1.2.1.25.2.3.1.1.10 = INTEGER: 10
iso.3.6.1.2.1.25.2.3.1.1.31 = INTEGER: 31
iso.3.6.1.2.1.25.2.3.1.1.32 = INTEGER: 32
iso.3.6.1.2.1.25.2.3.1.2.1 = OID: iso.3.6.1.2.1.25.2.1.2
iso.3.6.1.2.1.25.2.3.1.2.3 = OID: iso.3.6.1.2.1.25.2.1.3
iso.3.6.1.2.1.25.2.3.1.2.6 = OID: iso.3.6.1.2.1.25.2.1.1
iso.3.6.1.2.1.25.2.3.1.2.7 = OID: iso.3.6.1.2.1.25.2.1.1
iso.3.6.1.2.1.25.2.3.1.2.8 = OID: iso.3.6.1.2.1.25.2.1.1
iso.3.6.1.2.1.25.2.3.1.2.10 = OID: iso.3.6.1.2.1.25.2.1.3
iso.3.6.1.2.1.25.2.3.1.2.31 = OID: iso.3.6.1.2.1.25.2.1.4
iso.3.6.1.2.1.25.2.3.1.2.32 = OID: iso.3.6.1.2.1.25.2.1.4
iso.3.6.1.2.1.25.2.3.1.3.1 = STRING: "Physical memory"
iso.3.6.1.2.1.25.2.3.1.3.3 = STRING: "Virtual memory"
iso.3.6.1.2.1.25.2.3.1.3.6 = STRING: "Memory buffers"
iso.3.6.1.2.1.25.2.3.1.3.7 = STRING: "Cached memory"
iso.3.6.1.2.1.25.2.3.1.3.8 = STRING: "Shared memory"
iso.3.6.1.2.1.25.2.3.1.3.10 = STRING: "Swap space"
iso.3.6.1.2.1.25.2.3.1.3.31 = STRING: "/var/storage"
iso.3.6.1.2.1.25.2.3.1.3.32 = STRING: "/var/log"
iso.3.6.1.2.1.25.2.3.1.4.1 = INTEGER: 1024
iso.3.6.1.2.1.25.2.3.1.4.3 = INTEGER: 1024
iso.3.6.1.2.1.25.2.3.1.4.6 = INTEGER: 1024
iso.3.6.1.2.1.25.2.3.1.4.7 = INTEGER: 1024
iso.3.6.1.2.1.25.2.3.1.4.8 = INTEGER: 1024
iso.3.6.1.2.1.25.2.3.1.4.10 = INTEGER: 1024
iso.3.6.1.2.1.25.2.3.1.4.31 = INTEGER: 4096
iso.3.6.1.2.1.25.2.3.1.4.32 = INTEGER: 4096
iso.3.6.1.2.1.25.2.3.1.5.1 = INTEGER: 8101372
iso.3.6.1.2.1.25.2.3.1.5.3 = INTEGER: 13344244
iso.3.6.1.2.1.25.2.3.1.5.6 = INTEGER: 8101372
iso.3.6.1.2.1.25.2.3.1.5.7 = INTEGER: 3750520
iso.3.6.1.2.1.25.2.3.1.5.8 = INTEGER: 191612
iso.3.6.1.2.1.25.2.3.1.5.10 = INTEGER: 5242872
iso.3.6.1.2.1.25.2.3.1.5.31 = INTEGER: 10347307
iso.3.6.1.2.1.25.2.3.1.5.32 = INTEGER: 13570120
iso.3.6.1.2.1.25.2.3.1.6.1 = INTEGER: 6868892
iso.3.6.1.2.1.25.2.3.1.6.3 = INTEGER: 6868892
iso.3.6.1.2.1.25.2.3.1.6.6 = INTEGER: 489484
iso.3.6.1.2.1.25.2.3.1.6.7 = INTEGER: 3750520
iso.3.6.1.2.1.25.2.3.1.6.8 = INTEGER: 191612
iso.3.6.1.2.1.25.2.3.1.6.10 = INTEGER: 0
iso.3.6.1.2.1.25.2.3.1.6.31 = INTEGER: 939030
iso.3.6.1.2.1.25.2.3.1.6.32 = INTEGER: 195627

according to http://www.oidview.com/mibs/0/HOST-RESOURCES-MIB.html

this should be:

hrStorageTable 1.3.6.1.2.1.25.2.3

hrStorageEntry 1.3.6.1.2.1.25.2.3.1

hrStorageIndex 1.3.6.1.2.1.25.2.3.1.1

hrStorageType 1.3.6.1.2.1.25.2.3.1.2

hrStorageDescr 1.3.6.1.2.1.25.2.3.1.3

hrStorageAllocationUnits 1.3.6.1.2.1.25.2.3.1.4

hrStorageSize 1.3.6.1.2.1.25.2.3.1.5

hrStorageUsed 1.3.6.1.2.1.25.2.3.1.6

hrStorageAllocationFailures 1.3.6.1.2.1.25.2.3.1.7

cheers,

Chris

0 rsenio over 7 years ago in reply to ChrisBKA

I use Zenoss for my monitoring, and I dont get HDD of the UTM either.