OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Development and Code Review (Moderator: fabian) »
  • SNMP
« previous next »
  • Print
Pages: [1]

Author Topic: SNMP  (Read 13169 times)

Zeitkind

  • Full Member
  • ***
  • Posts: 178
  • Karma: 25
    • View Profile
SNMP
« on: February 24, 2016, 08:17:38 pm »
Hi,
fyi: there are still some remnant of pfsense left in snmp stuff. I see things like "pfSense Packet Disposition", "pfSense State Table Entries", "pfSense State Table Operations", "pfSense Source Node Count" and "pfSense Source Node Operations" when collecting data with openNSM. I guess noone used it? ^^
Logged

AdSchellevis

  • Administrator
  • Hero Member
  • *****
  • Posts: 850
  • Karma: 163
    • View Profile
Re: SNMP
« Reply #1 on: February 25, 2016, 08:46:35 am »
Hi Zeitkind,

Which version are you using?
The SNMP code is still up for a refresh (before 16.7), but I can't find the text your mentioning in the current version.

Regards,

Ad
Logged

Zeitkind

  • Full Member
  • ***
  • Posts: 178
  • Karma: 25
    • View Profile
Re: SNMP
« Reply #2 on: February 25, 2016, 07:32:39 pm »
Versions    OPNsense 16.1.3-i386
FreeBSD 10.2-RELEASE-p12
OpenSSL 1.0.2f 28 Jan 2016

Some screenshots:



Logged

Zeitkind

  • Full Member
  • ***
  • Posts: 178
  • Karma: 25
    • View Profile
Re: SNMP
« Reply #3 on: February 25, 2016, 08:00:21 pm »
Just switched to devel, the same with OPNsense 16.7.a_328-i386
Logged

AdSchellevis

  • Administrator
  • Hero Member
  • *****
  • Posts: 850
  • Karma: 163
    • View Profile
Re: SNMP
« Reply #4 on: February 25, 2016, 08:12:20 pm »
Was this previously a pfSense config?
Can you check if the product name is in /var/etc/snmpd.conf?
Logged

Zeitkind

  • Full Member
  • ***
  • Posts: 178
  • Karma: 25
    • View Profile
Re: SNMP
« Reply #5 on: February 25, 2016, 08:27:21 pm »
Looks normal:

root@firewall:/ # cat /var/etc/snmpd.conf
location := "xxxx"
contact := "xx"
read := "xxx"
# SNMP Trap support.
traphost := 192.168.x.y
trapport := 162
trap := "mytrap"

system := 1
%snmpd
sysDescr      = "OPNsense (hostname) 16.1.3-cbe0cef57 OPNsense FreeBSD 10.2-RELEASE-p12 i386"
[..]

Contains the stuff I defined via GUI (location, trap server etc.)
Didn't update the version string in sysDesc after switching to devel - bug?
Logged

AdSchellevis

  • Administrator
  • Hero Member
  • *****
  • Posts: 850
  • Karma: 163
    • View Profile
Re: SNMP
« Reply #6 on: February 25, 2016, 08:30:59 pm »
strange, do you know how I can query the same on a machine at my end? (snmpwalk/get command?)
To update the sysDescr you probably have to restart the service.
Logged

Zeitkind

  • Full Member
  • ***
  • Posts: 178
  • Karma: 25
    • View Profile
Re: SNMP
« Reply #7 on: February 25, 2016, 11:03:48 pm »
I looked at the source code of my openNMS page. A variable came up called "pfSense.disposition" - which led to the source of openNMS
https://github.com/opennms-config-modules/pfsense/blob/master/graphs/pfsense.graph.properties

Seems like openNMS somehow guesses that my host is a pfsense firewall and therefor uses this graphing modul. Have no idea how or why, there must be some kind of match to trigger it.
Logged

AdSchellevis

  • Administrator
  • Hero Member
  • *****
  • Posts: 850
  • Karma: 163
    • View Profile
Re: SNMP
« Reply #8 on: February 26, 2016, 09:18:06 am »
Yes, it's part of your openNMS plugin, if you want to change it, you have to do it in their plugin :)
Logged

Zeitkind

  • Full Member
  • ***
  • Posts: 178
  • Karma: 25
    • View Profile
Re: SNMP
« Reply #9 on: February 26, 2016, 12:39:24 pm »
I still wonder how openNMS guesses that this host is a pfsense firewall. I only told openNMS to scan this host and it automatically took the pfsense plugin for that.
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13701
  • Karma: 1178
    • View Profile
Re: SNMP
« Reply #10 on: February 27, 2016, 05:16:21 pm »
Maybe the box's MIB is recognised as such--we've made no adjustments in that area so it it looks the same over SNMP.
Logged

Zeitkind

  • Full Member
  • ***
  • Posts: 178
  • Karma: 25
    • View Profile
Re: SNMP
« Reply #11 on: February 28, 2016, 11:31:56 am »
Yeah, must be some kind of predefined good guess. I don't care much if my firewalls show up as a pfsenses, prob. someone makes an openNMS module for opnsense one day. I'm not a real expert in SNMP.. :/
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Development and Code Review (Moderator: fabian) »
  • SNMP
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2