Results 1 to 8 of 8

Thread: SNMP feed to a network monitor

  1. #1
    Join Date
    Feb 2006
    Location
    CA
    Posts
    13
    Rep Power
    9

    Default SNMP feed to a network monitor

    Our netadmins would like to query the test boxen I just set up

    it doesn't seem to respond to snmpwalk

    I query it as follows:

    snmpwalk -Os -c zimbra -v 2c localhost:162 system

    just to make sure I know the who/what/wheres

    Thoughts on outside SNMP queries against the MIB?

    server status (via the web gui ) says it is running. (at least it has a check next to it ....)

  2. #2
    Join Date
    Aug 2005
    Location
    San Mateo, CA
    Posts
    4,789
    Rep Power
    19

    Default

    Is snmp running? ie did you install it?

    zmcontrol status should report it
    Looking for new beta users -> Co-Founder of Acompli. Previously worked at Zimbra (and Yahoo! & VMware) since 2005.

  3. #3
    Join Date
    Feb 2006
    Location
    CA
    Posts
    13
    Rep Power
    9

    Default snmp status check

    class-osx-06:~ zimbra$ zmcontrol status
    Host class-osx-06.ga-adm.class.csupomona.edu
    antispam Running
    antivirus Running
    ldap Running
    logger Running
    mailbox Running
    mta Running
    snmp Running
    spell Running

    says its running

    but I can find no process running for snmp

    the zimbra included snmp suite don't seem to be "mac happy" so i am going to play with swatchrc in the morning and have it point to the built in OSX 10.4.4 server components....

    Anyone else having issues with snmpd and the like?

  4. #4
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default snmp

    snmp isn't really a process - and it doens't include snmpd. All it does is send traps out to whatever trap host you define, based on server stops/starts as detected in the logfiles by swatch.

  5. #5
    Join Date
    Feb 2006
    Location
    CA
    Posts
    13
    Rep Power
    9

    Default What Happens If....

    on OSX server - if we enable SNMP and add/move the zimbra snmp.conf file to /etc (where OSX expects such a file to exist) -

    and then modify line 9 of swatchrc
    perlcode 0 my $snmptrap="/opt/zimbra/snmp/bin/snmptrap $snmpargs";

    to

    perlcode 0 my $snmptrap="/usr/bin/snmptrap $snmpargs";

    maybe even removing "/opt/zimbra/snmp/bin" from the $PATH in .bashrc

    OSX 10.4.4 uses NET-SNMP 5.2.1 on both client and server

    are there specific reasons to stay with build 5.1.2 rather than leveraging what comes with the system?

  6. #6
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default nope

    you can use what's shipped with the system, as long as you're aware that your changes will be overwritten on upgrade.

  7. #7
    Join Date
    Feb 2006
    Location
    CA
    Posts
    13
    Rep Power
    9

    Default SNMP and uses - MarcMac

    I realize that changes made to swatchrc will be overwritten on any give update, but my question was =>

    are there specific reasons to use the included internal build of 5.1.2?

    a) there are Secunia alerts against it.
    b) for the position of hardening the "system" the OS build of 5.2.1 is covered by OS updates and security policies.

    I'm looking for a balance here I guess

    that would be one less component you folks would have to include in your bundle if you relied on the OS to handle it. Just write a script to add your MIB handlers to the various conf files and either start/restart the daemons as needed.

  8. #8
    Join Date
    Feb 2006
    Location
    CA
    Posts
    13
    Rep Power
    9

    Default more OSX 10.4.4 info

    in a flash of "duh...."

    OSX server now uses clamAV (I had forgotten this)

    class-osx-06:/usr/bin zimbra$ ./freshclam --version
    ClamAV 0.87.1/685/Wed Jan 26 01:08:24 2005
    class-osx-06:/usr/bin zimbra$ ./clamscan --version
    ClamAV 0.87.1/685/Wed Jan 26 01:08:24 2005
    class-osx-06:/usr/bin zimbra$ spamassassin --version
    SpamAssassin version 3.0.1
    running on Perl version 5.8.6

    so again - to leverage a smaller install package (or not) - depending on the Security policies of your organization - clamAV and SpamAssassin are in OSX 10.4.4

    I typically replace MySQL on my servers with version 5

    10.4.4 comes with openldap 2.2.19 so that is a few revs behind

    can anyone think of any other "System" level features that for security policy reasons should be left to OS level policy and not Application level policy?

Similar Threads

  1. Replies: 1
    Last Post: 12-19-2006, 01:58 PM
  2. SNMP Problems
    By zimsteve in forum Installation
    Replies: 4
    Last Post: 10-08-2006, 06:32 AM
  3. Zimbra stops working following network failure
    By jsachs in forum Administrators
    Replies: 1
    Last Post: 08-17-2006, 09:09 PM
  4. Network M2 slow/"slow to respond" issues
    By Sam Hunter in forum Installation
    Replies: 8
    Last Post: 12-29-2005, 10:26 AM
  5. Network edition - strange behavior
    By goetzi in forum Installation
    Replies: 6
    Last Post: 11-16-2005, 02:08 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •