Nagios Support Forum

Hello,

I am having an issue monitoring a Cisco device with subinterfaces. Specifically only one out of two sub-interface registers bandwidth values. There are 2 Interfaces with 2 sub-interfaces each.

I only get data for 1 of them under each physical interface. The first erroneous sub-interface has this error: /var/lib/mrtg/x.x.x.x_9.rrd does not exist. The same error apears for its corresponding physical interface while the other sub-interface under it works correctly.

The other physical interface and its subs don't report any errors but one of the two sub-interfaces always reports 0 bandwidth which is not correct.

Doing an snmp walk with ifHCInOctets reports values for all the interfaces except the physical which is the expected behaviour.

We need the rrd format of the graphs of the interface display (both in and out traffic) as we use these on our monthly report we submit to the client. The wizard I used is Router/Switch.

Run the following and provide me with the mrtg.txt it creates:
I'd also like to get a copy of /etc/mrtg/ and the address of the device and interface numbers.

I have pm'ed you the data

Both _8 and _9 are throwing the "rrd does not exist" messages and this would appear to be due to both of these being down:

### The following interface is commented out because:
### * it is administratively DOWN

make sure that both these ports are up on the devices end.

_13 and _11 are showing 0 bandwidth and this could be due to the unit set on the check. Edit each of these and try setting the unit to 'M'. See attached for example. You'll also want to move the rrd files for these two checks and allow new ones to be created. The rrd files are found under /usr/local/nagios/share/perfdata/<hostname>/<servicedesc>.rrd.

The interface MPLS doesn't seem to be down, I pm'ed you with the part of the mrtg.txt

It looks like the config may have changed and now the check is looking for a .rrd file that doesn't exist. Modify the check(see the previous screenshot) so that ARG1 points to xxx.xxx.xxx.xxx_17.rrd.

This is not the correct mapping though, as the status check for 17 seems to be administratively down, and the reported by that rrd is always 0 which is impossible as it is the mpls interface.

With the router / switch wizard the mpls interface (which is a sub-interface) shows up as port 9. So an rrd 9 should be created in /var/lib/mrtg/ as : IP_9.rrd

In that folder I have 18 rrd files, while in the wizzard i get 14 ports to be monitored.

ports in /var/lib/mrtg/
2_10.rrd
2_11.rrd
2_12.rrd
2_13.rrd
2_14.rrd
2_15.rrd
2_16.rrd
2_17.rrd
2_18.rrd
2_19.rrd
2_20.rrd
2_21.rrd
2_2.rrd
2_3.rrd
2_4.rrd
2_5.rrd
2_6.rrd
2_7.rrd

Ports in wizard:
2
3
4
5
6
7
8
9
10
11
12
13
14
21

How can I map this device properly and why isn't rrd 9 created ?

The configuration for _9 is commented out in it's mrtg.cfg file. The configuration for _17 seems to be active though. If _9 is the MPLS interface that you are expecting data on then you should be able to run the wizard again, select 9 to re-add it, and then see in the configuration file that it is no longer commented out.

OK nothing changed - even if it did it would be wrong because rrd 9 is a different interface (its administratively down) the interface I wish to monitor is 17 which is not commented out.

still : /var/lib/mrtg/xxxxx_9.rrd does not exist.

again mpls tag apears as interface 17 in the .cfg.

I have completely removed the services and re-added them via the wizard nothing changed and removed the rrd files manually and re-added the host without any different outcome.

snmpwalk with ".1.3.6.1.2.1.2.2.1.2"
IF-MIB::ifDescr.9 = STRING: Adaptive Security Appliance 'MPLS' interface
IF-MIB::ifDescr.17 = STRING: Adaptive Security Appliance 'Ethernet1/8' interface

cfg file:
Interface 9 >> Descr: 'Adaptive-Security-Appliance-'GigabitEthernet0/6'-interface' | Name: 'GigabitEthernet0/6' | Ip: 'No Ip' | Eth: '58-f3-9c-89-7f-ec'

the 0/6 doesn't even exist anymore its : 'Ethernet1/6' interface
IF-MIB::ifDescr.15 = STRING: Adaptive Security Appliance 'Ethernet1/6' interface

So I am guessing there is somewhere some config file or DB entry that maps the interfaces like in the old device (the device has been upgraded and its IP has changed too but interface descriptions stayed the same).

How can I reset this?

I would delete the services from Admin > Core Config Manager > Services:
- Then I would delete /etc/mrtg/conf.d/XX.XXX.XXX.XXX.cfg AND really any related RRD files in /var/lib/mrtg for that device (so they get recreated)
- Make sure to delete the /usr/local/nagios/share/perfdata/HOSTNAME/SERVICENAME.rrd as well
- Then re-run the wizard against it
- Delete the mrtg files from /usr/local/nagiosxi/tmp for this device

Then run this command and send me the resulting /tmp/FILES.zip file:
See here for a great explanation of the architecture:

https://support.nagios.com/kb/article.php?id=62