CISCO ASA plugin CPU load issue

[kalyan1709]

Hi Team,

I am getting a below alert from Nagios frequently:

***** Nagios *****

Notification Type: PROBLEM

Service: System Load
Host: Main Firewall
Address: 10.1.124.1
State: CRITICAL

Date/Time: Thu Apr 3 12:23:59 XXX 2014

Additional Info:

Cisco ASA CPU : 5sec = 6 %, 2min = 8 %, 5min = 4294965 % : 4294965 50 : CRITICAL



From this alert the 5min % is showing wrong (5min = 4294965 %)

Below is my Command definition
--------------------------

define command{
command_name check_Cisco_CPU
command_line $USER1$/check_cisco_ips.pl -H $HOSTADDRESS$ -2c -C default -f -T cpu -w 70%,50%,40% -c 90%,70%,50%
}


I have attached the plugin which I used.
Can anyone suggest me to fix these unwanted alerts?

[tmcdonald]

What model number are you using? The plugin author specified he tested on a 5520. Your OIDs may be different.

[sreinhardt]

Let's try seeing what is at that oid, my guess would be, that the plugin expecting something quite different than what the device is sending.

Code: Select all

snmpwalk -O n -v 2c -c default 10.1.124.1 1.3.6.1.4.1.9.9.109.1.1.1.1.5.1
snmpwalk -O n -v 2c -c default 10.1.124.1 1.3.6.1.4.1.9.9.109.1.1.1.1

[kalyan1709]

Mine is ASA_5510. Is there any plugin for this model to monitor CPU System load.

[sreinhardt]

Well it certainly seems that most of the information is there, let's try running those commands I posted and see what we get.

[kalyan1709]

[root@nagios ~]# snmpwalk -O n -v 2c -c default 10.1.124.1 1.3.6.1.4.1.9.9.109.1.1.1.1.5.1
.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1 = Gauge32: 8

[root@nagios ~]# snmpwalk -O n -v 2c -c default 10.1.124.1 1.3.6.1.4.1.9.9.109.1.1.1.1
.1.3.6.1.4.1.9.9.109.1.1.1.1.2.1 = INTEGER: 1
.1.3.6.1.4.1.9.9.109.1.1.1.1.2.2 = INTEGER: 1
.1.3.6.1.4.1.9.9.109.1.1.1.1.2.3 = INTEGER: 1
.1.3.6.1.4.1.9.9.109.1.1.1.1.3.1 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.3.2 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.3.3 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.4.1 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.4.2 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.4.3 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.5.2 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.5.3 = Gauge32: 8
.1.3.6.1.4.1.9.9.109.1.1.1.1.9.1 = Gauge32: 5
.1.3.6.1.4.1.9.9.109.1.1.1.1.9.2 = Gauge32: 5
.1.3.6.1.4.1.9.9.109.1.1.1.1.9.3 = Gauge32: 5
.1.3.6.1.4.1.9.9.109.1.1.1.1.10.1 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.10.2 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.10.3 = Gauge32: 14
.1.3.6.1.4.1.9.9.109.1.1.1.1.11.1 = Gauge32: 0
.1.3.6.1.4.1.9.9.109.1.1.1.1.11.2 = Gauge32: 0
.1.3.6.1.4.1.9.9.109.1.1.1.1.11.3 = Gauge32: 0

[sreinhardt]

Well that's strange, it seems that it reports a perfectly normal number, and the plugin does not math to modify the value that would be displayed here. Let's remove your % signs from the command and try running it via cli, since the plugin really doesn't have a % of load. Also how often is this happening, all the time, once in a while, almost never?

Code: Select all

./check_cisco_ips.pl -H 10.1.124.1 -2c -C default -f -T cpu -w 70,50,40 -c 90,70,50
./check_cisco_ips.pl -H 10.1.124.1 -2c -C default -f -T cpu -w 70%,50%,40% -c 90%,70%,50%

[kalyan1709]

[root@nagios libexec]# ./check_cisco_ips.pl -H 10.1.124.1 -2c -C default -f -T cpu -w 70,50,40 -c 90,70,50
Cisco ASA CPU : 5sec = 8 %, 2min = 8 %, 5min = 8 % : OK | load_5_sec=8%;70;90 load_1_min=8%;50;70 load_5_min=8%;40;50

[root@nagios libexec]# ./check_cisco_ips.pl -H 10.1.124.1 -2c -C default -f -T cpu -w 70%,50%,40% -c 90%,70%,50%
Cisco ASA CPU : 5sec = 10 %, 2min = 8 %, 5min = 8 % : OK | load_5_sec=10%;70;90 load_1_min=8%;50;70 load_5_min=8%;40;50

[sreinhardt]

OK so the % signs have no bearing on the output. However since this is working now, would I be correct in understanding this is an intermittent issue?

[kalyan1709]

Yes, The wrong % is triggering in week or a months or not regularly.
I wonder where is the problem exactly !!! ?