Stokkenes Vidar | 1 Feb 15:00 2010
Picon

CiscoRTTMonTcpConnect difficulties with Cisco 7200 VXR series

Hello folks,

I seem to be having problems with doing RTT checks via SNMP using a Cisco 7204 VXR router as the probe device.
We are currently running Smokeping v2.004002 on the server.

Here is a sample of my config:

Global probe config:

+ CiscoRTTMonTcpConnect

forks = 5
offset = 50%
step = 300
timeout = 60

Host config:

++++++ LocationAtoB
menu = LocationAtoB
title = Roundtrip from Location A to Location B
probe = CiscoRTTMonTcpConnect
host = routerB.domain.com
port = 22
ioshost = community <at> routerA.domain.com

But my logfile says the following:

Feb  1 14:28:16 server smokeping[9574]: SNMP Error: Received SNMP response with error code   error status:
commitFailed   index 1 (OID: 1.3.6.1.4.1.9.9.42.1.2.1.1.9.9574) SNMPv2c_Session (remote host:
(Continue reading)

Rune Thorsplass | 1 Feb 19:54 2010
Picon

Re: CiscoRTTMonTcpConnect difficulties with Cisco7200 VXR series

Hi
What is your snmp (rw) community for IP SLA MIB on RouterA? Is it 
"community" ?

Here is what I'm using.

++++ Office1
menu = Office1
title = City 1
probe = CiscoRTTMonTcpConnect # if the default probe is something else
host=10.174.200.4    # DB server at Office1
ioshost= private <at> 10.174.0.124   # private is my snmp write community
iosint = 10.174.200.161    # Using ip address from Lan-interface of the 
router
port = 2025
pings = 3
tos = 160

RuneT
----- Original Message ----- 
From: "Stokkenes Vidar" <Vidar.Stokkenes <at> hn-ikt.no>
To: <smokeping-users <at> lists.oetiker.ch>
Sent: Monday, February 01, 2010 3:00 PM
Subject: [smokeping-users] CiscoRTTMonTcpConnect difficulties with Cisco7200 
VXR series

> Hello folks,
>
> I seem to be having problems with doing RTT checks via SNMP using a Cisco 
> 7204 VXR router as the probe device. We are currently running Smokeping 
(Continue reading)

Kim Ford | 2 Feb 18:45 2010
Picon

SmokePing permission

Hi,

 

This is my first time trying to install SmokePing.  I installed using ports on a FreeBSD machine to learn.

 

I’m getting the following error trying to start SmokePing:

 

Starting smokeping.

### assuming you are using an fping copy reporting in milliseconds

ERROR: mkdir /usr/local/etc/smokeping/tmp/data/mysite2: Permission denied

/usr/local/etc/rc.d/smokeping: WARNING: failed to start smokeping

 

I created the tmp directory under /usr/local/etc/smokeping/ for lack of any documentation I could dig up.

 

Permissions on this directory are:

 

[root <at> freebsd /usr/local/etc/smokeping]# ls -al tmp

total 8

drwxr-xr-x  4 www   www    512 Feb  3 00:11 .

drwxr-xr-x  3 root  wheel  512 Feb  3 00:12 ..

drwxr-xr-x  2 www   www    512 Feb  3 00:11 data

drwxr-xr-x  2 www   www    512 Feb  3 00:11 var

 

I’m assuming that smokeping runs under the Apache www account.  Everything does work if chmod 777 the temp dir, but I don’t think that’s good practice.

 

What’s the proper permission to set here?

 

Thanks mucho,

 

Kim

_______________________________________________
smokeping-users mailing list
smokeping-users <at> lists.oetiker.ch
https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
Peter Kristolaitis | 2 Feb 18:56 2010
Picon

Re: SmokePing permission

The SmokePing poller typically does not run under the Apache user's context -- it will typically run under its own account (smokeping, _smokeping, etc), depending on your particular platform and how you've configured it.

You should check what user was created during the port install, and set that user to be the owner of that directory.

- Peter


Kim Ford wrote:
<!-- /* Font Definitions */ <at> font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} <at> font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri","sans-serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:"Calibri","sans-serif"; color:windowtext;} .MsoChpDefault {mso-style-type:export-only;} <at> page Section1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.Section1 {page:Section1;} -->

Hi,

 

This is my first time trying to install SmokePing.  I installed using ports on a FreeBSD machine to learn.

 

I’m getting the following error trying to start SmokePing:

 

Starting smokeping.

### assuming you are using an fping copy reporting in milliseconds

ERROR: mkdir /usr/local/etc/smokeping/tmp/data/mysite2: Permission denied

/usr/local/etc/rc.d/smokeping: WARNING: failed to start smokeping

 

I created the tmp directory under /usr/local/etc/smokeping/ for lack of any documentation I could dig up.

 

Permissions on this directory are:

 

[root <at> freebsd /usr/local/etc/smokeping]# ls -al tmp

total 8

drwxr-xr-x  4 www   www    512 Feb  3 00:11 .

drwxr-xr-x  3 root  wheel  512 Feb  3 00:12 ..

drwxr-xr-x  2 www   www    512 Feb  3 00:11 data

drwxr-xr-x  2 www   www    512 Feb  3 00:11 var

 

I’m assuming that smokeping runs under the Apache www account.  Everything does work if chmod 777 the temp dir, but I don’t think that’s good practice.

 

What’s the proper permission to set here?

 

Thanks mucho,

 

Kim

_______________________________________________ smokeping-users mailing list smokeping-users <at> lists.oetiker.ch https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
_______________________________________________
smokeping-users mailing list
smokeping-users <at> lists.oetiker.ch
https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
Kim Ford | 2 Feb 19:19 2010
Picon

Re: SmokePing permission

Hi Peter,

 

Thanks for this quick response.  I did a quick check and it’s using the (…duh) smokeping user:

 

[root <at> freebsd /usr/local/etc/smokeping/tmp]# ls -la data

total 10

drwxrwxrwx  5 www        www  512 Feb  3 00:46 .

drwxrwxrwx  4 www        www  512 Feb  3 00:11 ..

drwxr-xr-x  2 smokeping  www  512 Feb  3 01:11 __sortercache

drwxr-xr-x  2 smokeping  www  512 Feb  3 00:42 mysite1

drwxr-xr-x  2 smokeping  www  512 Feb  3 00:42 mysite2

 

I appreciate your help.

 

Kind Regards,

 

Kim

 

From: Peter Kristolaitis [mailto:alter3d <at> alter3d.ca]
Sent: Wednesday, February 03, 2010 12:56 AM
To: Kim Ford
Cc: smokeping-users <at> lists.oetiker.ch
Subject: Re: [smokeping-users] SmokePing permission

 

The SmokePing poller typically does not run under the Apache user's context -- it will typically run under its own account (smokeping, _smokeping, etc), depending on your particular platform and how you've configured it.

You should check what user was created during the port install, and set that user to be the owner of that directory.

- Peter


Kim Ford wrote:

Hi,

 

This is my first time trying to install SmokePing.  I installed using ports on a FreeBSD machine to learn.

 

I’m getting the following error trying to start SmokePing:

 

Starting smokeping.

### assuming you are using an fping copy reporting in milliseconds

ERROR: mkdir /usr/local/etc/smokeping/tmp/data/mysite2: Permission denied

/usr/local/etc/rc.d/smokeping: WARNING: failed to start smokeping

 

I created the tmp directory under /usr/local/etc/smokeping/ for lack of any documentation I could dig up.

 

Permissions on this directory are:

 

[root <at> freebsd /usr/local/etc/smokeping]# ls -al tmp

total 8

drwxr-xr-x  4 www   www    512 Feb  3 00:11 .

drwxr-xr-x  3 root  wheel  512 Feb  3 00:12 ..

drwxr-xr-x  2 www   www    512 Feb  3 00:11 data

drwxr-xr-x  2 www   www    512 Feb  3 00:11 var

 

I’m assuming that smokeping runs under the Apache www account.  Everything does work if chmod 777 the temp dir, but I don’t think that’s good practice.

 

What’s the proper permission to set here?

 

Thanks mucho,

 

Kim

 

 

_______________________________________________

smokeping-users mailing list

smokeping-users <at> lists.oetiker.ch

https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users

 

_______________________________________________
smokeping-users mailing list
smokeping-users <at> lists.oetiker.ch
https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
Schaibley Dean | 2 Feb 19:21 2010

Forcing SNMP over TCP vs. UDP

Need some help here.  Is there a way to Force SNMP to use TCP 161 or UDP 161?  Most all of our smokeping traffic is using UDP 161, but somehow, we do have some that is using TCP 161 (not sure how/why).
 
Our firewalls are only config'd for allowing UDP 161, so when the Smokeping process tries to use TCP it is failing at the firewall (and Security won't allow TCP without justification).
 
We are running Smokeping 2.3.6 with the CiscoRTTMonEchoICMP as the Probe.
 
Any help/tips would be greatly appreciated.
 

Dean Schaibley

_______________________________________________
smokeping-users mailing list
smokeping-users <at> lists.oetiker.ch
https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
Peter Kristolaitis | 2 Feb 19:38 2010
Picon

Re: Forcing SNMP over TCP vs. UDP

That probe uses the Net::SNMP module to manage SNMP queries.  IIRC, Net::SNMP defaults to using UDP, however it will switch to TCP if it can't reach the host via UDP.

Can you confirm whether you can reach the router with UDP from the server hosting Smokeping by using other SNMP tools (e.g. snmpwalk, etc)?

- Peter


Schaibley Dean wrote:
Need some help here.  Is there a way to Force SNMP to use TCP 161 or UDP 161?  Most all of our smokeping traffic is using UDP 161, but somehow, we do have some that is using TCP 161 (not sure how/why).
 
Our firewalls are only config'd for allowing UDP 161, so when the Smokeping process tries to use TCP it is failing at the firewall (and Security won't allow TCP without justification).
 
We are running Smokeping 2.3.6 with the CiscoRTTMonEchoICMP as the Probe.
 
Any help/tips would be greatly appreciated.
 

Dean Schaibley

_______________________________________________ smokeping-users mailing list smokeping-users <at> lists.oetiker.ch https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
_______________________________________________
smokeping-users mailing list
smokeping-users <at> lists.oetiker.ch
https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
Kim Ford | 2 Feb 19:38 2010
Picon

SmokePing Displaying source code in browser.

Hi,

 

I installed smokeping using ports on FreeBSD. 

 

SmokePing is displaying source code in browser.  Below is a snippet:

 

#!/usr/local/bin/speedy -w

# -*-perl-*-

 

use strict;

use warnings;

 

use lib qw(/usr/local/smokeping/lib);

 

use CGI::Carp qw(fatalsToBrowser);

 

use Smokeping 2.004002;

 

Smokeping::cgi("/usr/local/etc/smokeping/config");

 

I’ve checked and speedy is locate in /usr/local/bin/speedy.

 

I’ve added the following in my httpd.conf

 

Under IfModule

 

    ScriptAlias /smokeping.cgi "/usr/local/smokeping/htdocs/smokeping.cgi"

    ScriptAlias /tr.cgi "/usr/local/smokeping/htdocs/tr.cgi"

 

Under IfModule dir_module

 

    DirectoryIndex index.html index.php smokeping.cgi

 

And the following at the bottom

 

Alias /smokeping/ /usr/local/smokeping/htdocs/

<Directory "/usr/local/smokeping/htdocs">

AllowOverride None

Options ExecCGI

Order allow,deny

Allow from all

</Directory>

 

I’m near sure I’ve got all of the dependencies as I’ve installed from ports (though I could be wrong), and I’m thinking this is just a *dumb* configuration error on my part.

 

Thanks in advance for any light you can shed.

 

Regards,

 

Kim

_______________________________________________
smokeping-users mailing list
smokeping-users <at> lists.oetiker.ch
https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
Schaibley Dean | 2 Feb 19:51 2010

Re: Forcing SNMP over TCP vs. UDP

Peter,
 
Thanks for the quick response.  We can see a successful SNMP via UDP from Smokeping to the router's Loopback.  However, all of our configs are done to use the Interface IP and that is what is sending TCP to this 1 specific router.  All other routers successfully go with UDP.
 
Here is an example of our config:
 
*** General ***
 
owner    = Network Management Services
contact  = SmokepingAdministrator <at> company.com
mailhost = mail.host.com
sendmail = /usr/lib/sendmail
imgcache = /usr/local/smokeping/cache
imgurl   = cache
datadir  = /opt/ens/smoke/data
piddir  = /opt/ens/smoke/var
cgiurl   = http://host.name.com/smokeping.cgi
smokemail = /usr/local/smokeping/etc/smokemail
tmail = /usr/local/smokeping/etc/tmail
# specify this to get syslog logging
syslogfacility = local0
# each probe is now run in its own process
# disable this to revert to the old behaviour
# concurrentprobes = no
 
*** Alerts ***
to = administrator <at> company.com
from = smokealert <at> company.com
 
+someloss
type = loss
# in percent
pattern = >0%,*12*,>0%,*12*,>0%
comment = loss 3 times  in a row
 
*** Database ***
 
step     = 300
pings    = 20
 
# consfn mrhb steps total
 
AVERAGE  0.5   1  1008
AVERAGE  0.5  12  4320
    MIN  0.5  12  4320
    MAX  0.5  12  4320
AVERAGE  0.5 144   720
    MAX  0.5 144   720

 *** Presentation ***
 
template = /usr/local/smokeping/htdocs/basepage.html
 
+ charts
 
menu = Charts
title = The most interesting destinations
 
++ stddev
sorter = StdDev(entries=>4)
title = Top Standard Deviation
menu = Std Deviation
format = Stdandard Deviation %f
 
++ max
sorter = Max(entries=>5)
title = Top Max Roundtrip Time
menu = by Max
format = Max Roundtrip Time %f seconds
 
++ loss
sorter = Loss(entries=>5)
title = Top Packet Loss
menu = Loss
format = Packets Lost %f
 
++ median
sorter = Median(entries=>5)
title = Top Median Roundtrip Time
menu = by Median
format = Median RTT %f seconds
 
+ overview
 
width = 600
height = 50
range = 10h
 
+ detail

width = 600
height = 200
unison_tolerance = 2
 
"Last 3 Hours"    3h
"Last 30 Hours"   30h
"Last 10 Days"    10d
"Last 30 Days"    30d
"Last 400 Days"   400d
 
*** Probes ***
 
+CiscoRTTMonEchoICMP
 
forks = 32
offset = 50%
step = 300
timeout = 15
 
# The following variables can be overridden in each target section
ioshost = CommunityString <at> HomeRouter_FQDN # mandatory
# iosint = 10.33.22.11
packetsize = 56
pings = 5
# tos = 160
# vrf = INTERNET
 
+ FPing
 
binary = /usr/local/fping/fping
 
*** Slaves ***
secrets=/usr/local/smokeping/etc/smokeping_secrets
+boomer
display_name=boomer
color=0000ff
+slave2
display_name=boomer
color=0000ff
 
*** Targets ***
 
probe = FPing
 
menu = Top
title = Network Latency Grapher
remark = Welcome to the SmokePing website for company name. \
         Here you will learn all about the latency of our network.
 
+ VPN
menu = VPN Links #
title = VPN Links #
 
++ WINNAME
menu = WINNAME HomeSite to RemoteSite#
title = WINNAME HomeRouter to RemoteRouter #
probe = CiscoRTTMonEchoICMP #
host = RemoteInterfaceIP # RemoteRouter
ioshost = CommunityString <at> HomeRouter_FQDN # mandatory
iosint = HomeInterfaceIP # HomeRouter Tunnel1
 

Dean Schaibley

 

From: Peter Kristolaitis [mailto:alter3d <at> alter3d.ca]
Sent: Tuesday, February 02, 2010 12:38 PM
To: Schaibley Dean
Cc: smokeping-users <at> lists.oetiker.ch
Subject: Re: [smokeping-users] Forcing SNMP over TCP vs. UDP

That probe uses the Net::SNMP module to manage SNMP queries.  IIRC, Net::SNMP defaults to using UDP, however it will switch to TCP if it can't reach the host via UDP.

Can you confirm whether you can reach the router with UDP from the server hosting Smokeping by using other SNMP tools (e.g. snmpwalk, etc)?

- Peter


Schaibley Dean wrote:
Need some help here.  Is there a way to Force SNMP to use TCP 161 or UDP 161?  Most all of our smokeping traffic is using UDP 161, but somehow, we do have some that is using TCP 161 (not sure how/why).
 
Our firewalls are only config'd for allowing UDP 161, so when the Smokeping process tries to use TCP it is failing at the firewall (and Security won't allow TCP without justification).
 
We are running Smokeping 2.3.6 with the CiscoRTTMonEchoICMP as the Probe.
 
Any help/tips would be greatly appreciated.
 

Dean Schaibley

_______________________________________________ smokeping-users mailing list smokeping-users <at> lists.oetiker.ch https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
_______________________________________________
smokeping-users mailing list
smokeping-users <at> lists.oetiker.ch
https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users
Peter Kristolaitis | 2 Feb 20:06 2010
Picon

Re: Forcing SNMP over TCP vs. UDP

Hmm.... I don't have Cisco gear handy to test with, nor am I a Cisco expert, so I'm just guessing here, but here's some things to consider/try:

- IOS version -- is that router running at least IOS 12.0(3)T ?  The probe documentation states that the iosint function isn't available to IOS versions prior to that.

- Double-check that the address you have for the iosint parameter is actually an address bound to an interface on that router.

- Are SNMP privileges sufficient to allow the operation? (e.g. do you need to grant specific SNMP privileges to the community/host in order to do source-address binding?)

- Do you have the right versions of the dependencies, specifically SNMP_Session.pm?  You need at least v0.97 according to the probe documentation.   Run something like    grep '$VERSION' `find / -name SNMP_Session.pm`  (or check your distribution's package manifests, etc)


- Peter


Schaibley Dean wrote:
Peter,
 
Thanks for the quick response.  We can see a successful SNMP via UDP from Smokeping to the router's Loopback.  However, all of our configs are done to use the Interface IP and that is what is sending TCP to this 1 specific router.  All other routers successfully go with UDP.
 
Here is an example of our config:

_______________________________________________
smokeping-users mailing list
smokeping-users <at> lists.oetiker.ch
https://lists.oetiker.ch/cgi-bin/listinfo/smokeping-users

Gmane