Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Firewalls
[Top] [All Lists]

RE: PIX firewall SNMP interfaces stats

Subject: RE: PIX firewall SNMP interfaces stats
Date: Sun, 24 Oct 2004 23:50:39 -0400
Larry -

You can query using 1 of 2 different areas. The standards mibs only use 16 bit integers so if you are in a high bandwidth environment you will want to use the 32 bit OID as they won't roll over so fast. This may be the problem that you are seeing.

16 Bit OID - Mib-II (1.3.6.1.2.1.2 )

<http://www.ibr.cs.tu-bs.de/cgi-bin/sbrowser.cgi?HOST=&OID=IF-MIB%21ifInOctets>ifInOctets 1.3.6.1.2.1.2.2.1.10
<http://www.ibr.cs.tu-bs.de/cgi-bin/sbrowser.cgi?HOST=&OID=IF-MIB%21ifOutOctets>ifOutOctets 1.3.6.1.2.1.2.2.1.16


32 Bit OID - IF-Mib IfXTable (1.3.6.1.2.1.31)

<http://www.ibr.cs.tu-bs.de/cgi-bin/sbrowser.cgi?HOST=&OID=IF-MIB%21ifHCOutOctets>ifHCOutOctets 1.3.6.1.2.1.31.1.1.1.6
<http://www.ibr.cs.tu-bs.de/cgi-bin/sbrowser.cgi?HOST=&OID=IF-MIB%21ifHCOutOctets>ifHCOutOctets 1.3.6.1.2.1.31.1.1.1.10



I suppose you could use the Cisco MIB but they are big and I prefer not to wade thru them if it's not necessary.


-Dan




At 04:39 PM 10/21/2004, Larry Pitcher wrote:
I don't know how it gets the info, but mrtg reports five minute averages from my PIX. You might check the source...

Larry Pitcher

Internet Product Manager
Baker Boyer Bank
509.526.1429
pitcherl@bakerboyer.com
-----Original Message-----
From: Philippe Blavier [mailto:Philippe.Blavier@vu-games.com]
Sent: Thursday, October 21, 2004 4:40 AM
To: firewalls@securityfocus.com
Subject: PIX firewall SNMP interfaces stats

I was browsing the MIB for the PIX Firewall but I cant find the OID to query input or output rate !!

I just cand query the connection count :/



Does anyone how to report interface usage for the PIX series firewall ?







Philippe BLAVIER
International Network Administrator
+33 1.30.67.30.65
<mailto:Philippe.Blavier@vu-games.com>Philippe.Blavier@vu-games.com




<Prev in Thread] Current Thread [Next in Thread>