Page 2 of 2

Re: Netflow

Posted: Thu Jul 04, 2013 12:53 pm
by Mike
Hello ,


Ok, Lets make it simple

i have a clients requirements, please let us know whether the below points are possible.
Till what extent i can assure the client that below points are possible.

1) Net flow Analyzer (Application IN/Out - IP wise) reports - Sample Reports attached (Utilization report.pdf)

2) Syslog events Co-relation and analyzing, Alerts of User logon failure, Mail Box over quota, Event monitoring through event ID, etc.

3) Process wise server performance report.(CPU Utilization, Memory Utilization, HDD I/O rates). Sample report attached (Server Performance Process Wise.pdf)

4) H/W pre-failure alert notification.
(RAID failure alerts, SCSI drive failure, Power supply failure.)


Thanks,

Re: Netflow

Posted: Mon Jul 08, 2013 1:04 pm
by Mike
Hello ,

i hope this will be clear.....

please go through the nagios plugin

http://exchange.nagios.org/directory/Pl ... rs/details

i have two question on this...

1) Can this plugin modified to top 10 or Top 20 CPU-Memory consuming processes instead of TOP 5.

2) can the same output be seen through graphs

Re: Netflow

Posted: Mon Jul 08, 2013 4:39 pm
by slansing
You can change the following command line in the script:

Code: Select all

ps -e -o pcpu,comm,pid | sort -n -r | grep -v "%CPU" | head -5
To:

Code: Select all

ps -e -o pcpu,comm,pid | sort -n -r | grep -v "%CPU" | head -20
Being a shell script, it is easy to open and find what commands are being ran within it and change them thusly.

As to this being reported as perfdata, if the plugin does create a template with a dataset that shows the top processes then this should effect the change there, but it would be hard to tell unless you actually try the plugin out.

Re: Netflow

Posted: Mon Jul 08, 2013 4:50 pm
by lmiltchev
Besides changing line 193 as suggested by slansing, you may need to change line 197 from this:

Code: Select all

OUTPUT=";Top 5 CPU Processes(cpu%,pname,pid):"   ;
to this:

Code: Select all

OUTPUT=";Top 20 CPU Processes(cpu%,pname,pid):"   ;
:)

Re: Netflow

Posted: Tue Jul 09, 2013 1:06 pm
by Mike
Hello ,

The client is having Cisco routers/switches , is it possible to monitor netflow. As i have gone through the below URL .
http://exchange.nagios.org/directory/Tu ... XI/details

Is this in the Beta or we can use this for monitoring netflow?

Thanks

Re: Netflow

Posted: Tue Jul 09, 2013 1:37 pm
by slansing
Yes you can use the Switch / Router monitoring wizard to set up checks to the switches and routers. You can then use the bandwidth report to get similar data though I would not call it complete netflow, that can be done via the Nagios Network Analyzer.

http://labs.nagios.com/2012/10/16/nagio ... blic-beta/

Re: Netflow

Posted: Tue Jul 09, 2013 1:56 pm
by Mike
Hello,
Is NNA and cisco netflow same ?
both are in beta ?
as i see in below link there are more features compared to Bandwidth utilization , can i use Cisco netflow presently.
http://exchange.nagios.org/directory/Tu ... I/details/

As i am waiting for the NNA but presently i would require it to implement for one of our client.just want to confirm whether i can use cisco netflow presently

Re: Netflow

Posted: Tue Jul 09, 2013 2:50 pm
by slansing
The video you found is of a merged project, that is now part of the bandwidth usage graph, and the rest was forked off to our NNA project. The video is also not of something created by us, it uses nfdump which is part of the NNA project, as well as rrdtools.