Cisco outside traffic

Kris · Post by **Kris** » Fri Nov 01, 2013 3:32 am

Hiya all,

I'm trying to monitor traffic on the outside interface of a Cisco.
I've tried SNMP, but I can't find anything useful, or even some counter I would recognize as being traffic.
Although OID 1.3.6.1.2.1.2.2.1.10.3 looks promising, I can't seem to tweak it to make look anything like the traffic graph in ASDM.
I'm not sure if something could be done with SSH or telnet or whatever.

Anyone ever achieved this?

Thanks!

KS-Soft · Post by **KS-Soft** » Fri Nov 01, 2013 5:26 am

Traffic Monitor test does not work with this device?

Regards
Alex

Kris · Post by **Kris** » Fri Nov 01, 2013 5:42 am

Not really...
When I try to list or select the interface(s), I get an error "Error: Interface index: invalid number"...
The interface is "Ethernet0/0" btw

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Nov 01, 2013 6:47 pm

Looks like device returns incorrect Interface count.
As a workaround you may try the following steps:
1. Create Traffic Monitor test with "monitor traffic on all interfaces" option
2. Export this test settings using menu File -> Export to Text file
3. Modify exported file according to interface name & number
IntIndex = 1
IntDescr = ethernet0/0
4. Import modified text file using menu File -> Import to Text file

Kris · Post by **Kris** » Mon Nov 04, 2013 3:10 am

Still no joy.
I get a timeout now.

KS-Soft Europe · Post by **KS-Soft Europe** » Mon Nov 04, 2013 8:14 am

Have you tried to specify different values for IntIndex ?
This value depends on device vendor and model.
If changing value will not help, could you capture traffic on UDP port 161 between HostMonitor and device using network sniffer (e.g. WireShark)?

Kris · Post by **Kris** » Mon Nov 04, 2013 9:20 am

I sent an email....

Kris · Post by **Kris** » Mon Nov 04, 2013 10:21 am

OK, got it all sorted now.

For anyone who might run into this, here's what I modified in the export file before reloading it:

-----------------------------------------------------------------------------
IntIndex = 3
IntDescr = Adaptive Security Appliance 'outside' interface
-----------------------------------------------------------------------------

I got these exact values from SNMP walking the ASA.

Thanks guys, again a big thumbs up for your support

KS-Soft Europe · Post by **KS-Soft Europe** » Mon Nov 04, 2013 11:19 am

OK, got it all sorted now.

Great.
Unfortunately some SNMP devices return wrong interface count.
That may cause errors like in your case.

Thanks guys, again a big thumbs up for your support

Thank you