View previous topic :: View next topic |
Author |
Message |
BretErickson
Joined: 14 Dec 2007 Posts: 2
|
Posted: Fri Dec 14, 2007 3:53 pm Post subject: SNMP and 3COM SuperStack |
|
|
We've got it talking to the switch perfectly. Can you specify which port is giving the problem if you choose in/out traffic on all interfaces? Is their a variable that can be sent with the alert? Such as %interface% ?? |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12806 Location: USA
|
Posted: Sat Dec 15, 2007 9:38 am Post subject: |
|
|
Quote: | Can you specify which port is giving the problem if you choose in/out traffic on all interfaces? |
What kind of problem? High traffic? How can we define what is "port problem" if you monitor total amount of traffic? E.g. you set HostMonitor to alert you when total amount of traffic on all interfaces is over 100Mb/sec; 4 interfaces indicates traffic like 45, 25, 35 and 30Mb/sec. Total traffic = 135Mb/sec but how can we tell which port is giving the problem? Non of them? All of them?
Probably you need new option, like "alert if in/out traffic on ANY interface is over N MB/sec"? Then HostMonitor should check each interface separately, if necessary set some macro variables (list of intefaces)...?
Or may be we can create new test "Dominant interface" similar to "Dominant Process" test method
http://www.ks-soft.net/hostmon.eng/news.htm#dominant700
Regards
Alex |
|
Back to top |
|
|
BretErickson
Joined: 14 Dec 2007 Posts: 2
|
Posted: Sun Dec 16, 2007 8:11 am Post subject: |
|
|
Thank you for your respnse. Yes, quite simply I want to know if an individual computer is using an unusually large amount of bandwidth or a port is getting a large amount of errors. We are new to this and looking for some advice. I did a good deal of reading the documentation but it didn't get very deep into this.
I'm hoping to not have to create 60 plus rules for each port. |
|
Back to top |
|
|
AlexL
Joined: 18 Jul 2006 Posts: 62 Location: Switzerland
|
Posted: Mon Dec 17, 2007 4:16 am Post subject: |
|
|
For my switches, I am using "monitor trafic on all interfaces" with alerting for "In Errors" and for "Out Errors". I would be happy to have an indication about which port originated the errors. For this, your idee about "Dominant..." ("...port" in this case) would be an enormous relief, because now I have to start a script which looks at the error counters at each port and compares to previous values of those counters - a very cumbersome procedure.
For errors, the "dominant" port is most probably the only one, which would make such an option very useful.
TIA
Alex |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12806 Location: USA
|
Posted: Mon Dec 17, 2007 6:57 am Post subject: |
|
|
Quote: | Yes, quite simply I want to know if an individual computer is using an unusually large amount of bandwidth or a port is getting a large amount of errors. |
Then you should create 1 test item for each port. 60 ports - 60 tests, sorry.
Quote: | I would be happy to have an indication about which port originated the errors. For this, your idee about "Dominant..." ("...port" in this case) would be an enormous relief |
Yes, such test should help but it will provide infomation about sinle port only (the "worst" one). What if you already know about this port and you want to check other interfaces? May be we should add an option to exclude specific ports from the test...
I see another posible solution: add GUI option like "create separate test items for each interface" or improve Replicator to scan interfaces
Do you prefer to deal with smaller set of tests ("Dominant" tests)?
Regards
Alex |
|
Back to top |
|
|
AlexL
Joined: 18 Jul 2006 Posts: 62 Location: Switzerland
|
Posted: Mon Dec 17, 2007 11:04 am Post subject: |
|
|
> Do you prefer to deal with smaller set of tests ("Dominant" tests)?
For switches it is not practical to have tests for each port, even if they would be automatically generated: although we are a relatively small company, we have nevertheless about 1000 ports, even excluding the VoIP switches.
The possibility for "monitor traffic on all interfaces" to return the "worst" port is definitely a big step forward for the "In/Out Errors", because the "worst" port would in fact be the only one - for a reasonably short (1-2-3 minutes) repeat interval.
The very best would be for such tests to return (in Reply) a list with the "worst" N ports, with N being a user-defined number. An example of Reply could be in this case something like "1/40,1/13,2/15" for a core switch with several modules, or even "1/40[2143],1/13[312],2/15[5]" with the corresponding values within [].
Further, the whole concept of "Dominant" could be generalized to "Dominant-N", as above ... but maybe I am begining to dream here ...
Regards
AlexL |
|
Back to top |
|
|
JuergenF
Joined: 26 Jan 2003 Posts: 331 Location: Germany, North Rhine-Westphalia
|
Posted: Wed Dec 19, 2007 12:52 pm Post subject: |
|
|
Just a suggestion.
Use SYSLOG to collect the Messages from the Switches
i.e for Cisco:
Dec 18 21:30:59 192.168.168.115 22276: Dec 18 21:29:50: %LINK-4-ERROR: FastEthernet0/22 is experiencing errors
and use TextLog method to track those messages from HostMonitor |
|
Back to top |
|
|
AlexL
Joined: 18 Jul 2006 Posts: 62 Location: Switzerland
|
Posted: Sat Dec 29, 2007 12:46 pm Post subject: |
|
|
JuergenF wrote: | Use SYSLOG to collect the Messages from the Switches.. | Thanks Jurgen.
My switches do not support SYSLOG, but I will check if SNMP traps could be useful.
Still, an implementation of the idea of generalized, "top N" or "dominant N", tests, would spare the user a lot of sometimes complex scripting.
What does Alex think of this?
Regards
AlexL |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12806 Location: USA
|
Posted: Sat Dec 29, 2007 1:24 pm Post subject: |
|
|
I think we should implement "Dominant Interface" test. I am not so sure about "Dominant N", its hard to show information about several interfaces in single Reply field
Regards
Alex |
|
Back to top |
|
|
AlexL
Joined: 18 Jul 2006 Posts: 62 Location: Switzerland
|
Posted: Sat Dec 29, 2007 4:45 pm Post subject: |
|
|
Thank you, Alex !
Regarding the way to show the test result, for a reasonably small N it could still be the Result field, with something similar to "1/40,1/13,2/15", or else put it in a macro variable or a (special?) log file.
Thanks again
AlexL |
|
Back to top |
|
|
AlexL
Joined: 18 Jul 2006 Posts: 62 Location: Switzerland
|
Posted: Wed Feb 09, 2011 6:55 am Post subject: |
|
|
KS-Soft wrote: | I think we should implement "Dominant Interface" test. I am not so sure about "Dominant N", its hard to show information about several interfaces in single Reply field
Regards
Alex |
Any plans to implement this?
Regards, Alex |
|
Back to top |
|
|
AlexL
Joined: 18 Jul 2006 Posts: 62 Location: Switzerland
|
Posted: Mon Feb 14, 2011 10:32 am Post subject: |
|
|
KS-Soft wrote: | I think we should implement "Dominant Interface" test. I am not so sure about "Dominant N", its hard to show information about several interfaces in single Reply field
Regards
Alex |
Any plans to implement such a "Dominant Interface" test ?
Alex |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12806 Location: USA
|
Posted: Mon Feb 14, 2011 11:36 am Post subject: |
|
|
Sorry, missed your question.
Yes, this task still in our "to do" list, medium priority. I hope it will be implemented in version 9.xx
Regards
Alex |
|
Back to top |
|
|
AlexL
Joined: 18 Jul 2006 Posts: 62 Location: Switzerland
|
Posted: Wed Feb 16, 2011 4:47 am Post subject: |
|
|
Thank you Alex!
Alex |
|
Back to top |
|
|
|