Netflow

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Mike
Posts: 76
Joined: Wed Apr 03, 2013 11:37 am

Re: Netflow

Post by Mike »

Hello ,


Ok, Lets make it simple

i have a clients requirements, please let us know whether the below points are possible.
Till what extent i can assure the client that below points are possible.

1) Net flow Analyzer (Application IN/Out - IP wise) reports - Sample Reports attached (Utilization report.pdf)

2) Syslog events Co-relation and analyzing, Alerts of User logon failure, Mail Box over quota, Event monitoring through event ID, etc.

3) Process wise server performance report.(CPU Utilization, Memory Utilization, HDD I/O rates). Sample report attached (Server Performance Process Wise.pdf)

4) H/W pre-failure alert notification.
(RAID failure alerts, SCSI drive failure, Power supply failure.)


Thanks,
You do not have the required permissions to view the files attached to this post.
Mike
Posts: 76
Joined: Wed Apr 03, 2013 11:37 am

Re: Netflow

Post by Mike »

Hello ,

i hope this will be clear.....

please go through the nagios plugin

http://exchange.nagios.org/directory/Pl ... rs/details

i have two question on this...

1) Can this plugin modified to top 10 or Top 20 CPU-Memory consuming processes instead of TOP 5.

2) can the same output be seen through graphs
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: Netflow

Post by slansing »

You can change the following command line in the script:

Code: Select all

ps -e -o pcpu,comm,pid | sort -n -r | grep -v "%CPU" | head -5
To:

Code: Select all

ps -e -o pcpu,comm,pid | sort -n -r | grep -v "%CPU" | head -20
Being a shell script, it is easy to open and find what commands are being ran within it and change them thusly.

As to this being reported as perfdata, if the plugin does create a template with a dataset that shows the top processes then this should effect the change there, but it would be hard to tell unless you actually try the plugin out.
User avatar
lmiltchev
Bugs find me
Posts: 13589
Joined: Mon May 23, 2011 12:15 pm

Re: Netflow

Post by lmiltchev »

Besides changing line 193 as suggested by slansing, you may need to change line 197 from this:

Code: Select all

OUTPUT=";Top 5 CPU Processes(cpu%,pname,pid):"   ;
to this:

Code: Select all

OUTPUT=";Top 20 CPU Processes(cpu%,pname,pid):"   ;
:)
Be sure to check out our Knowledgebase for helpful articles and solutions!
Mike
Posts: 76
Joined: Wed Apr 03, 2013 11:37 am

Re: Netflow

Post by Mike »

Hello ,

The client is having Cisco routers/switches , is it possible to monitor netflow. As i have gone through the below URL .
http://exchange.nagios.org/directory/Tu ... XI/details

Is this in the Beta or we can use this for monitoring netflow?

Thanks
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: Netflow

Post by slansing »

Yes you can use the Switch / Router monitoring wizard to set up checks to the switches and routers. You can then use the bandwidth report to get similar data though I would not call it complete netflow, that can be done via the Nagios Network Analyzer.

http://labs.nagios.com/2012/10/16/nagio ... blic-beta/
Mike
Posts: 76
Joined: Wed Apr 03, 2013 11:37 am

Re: Netflow

Post by Mike »

Hello,
Is NNA and cisco netflow same ?
both are in beta ?
as i see in below link there are more features compared to Bandwidth utilization , can i use Cisco netflow presently.
http://exchange.nagios.org/directory/Tu ... I/details/

As i am waiting for the NNA but presently i would require it to implement for one of our client.just want to confirm whether i can use cisco netflow presently
slansing
Posts: 7698
Joined: Mon Apr 23, 2012 4:28 pm
Location: Travelling through time and space...

Re: Netflow

Post by slansing »

The video you found is of a merged project, that is now part of the bandwidth usage graph, and the rest was forked off to our NNA project. The video is also not of something created by us, it uses nfdump which is part of the NNA project, as well as rrdtools.
Locked