[ previous ] [ next ] [ threads ]
 From:  Rolf Sommerhalder <rolf dot sommerhalder at alumni dot ethz dot ch>
 To:  m0n0wall at lists dot m0n0 dot ch
 Cc:  paul at dugas dot cc
 Subject:  Re: Traffic Shaper Stats?
 Date:  Sun, 12 Jun 2005 11:32:05 +0200
After having researched the very same question yesterday, I found about 
the following solution scenarios:

1. implement some bar graph indicators in the Web user interface 
m0n0wall itself, such as the CPU indicator;

2. write an (non-Perl) exec script that is triggered by snmpd and 
returns byte and packet counters after mangling the output of 'ipfw pipe 
show', depending on the OID reveived by SNMP GET;

3. write an snmpd agent extension as documented in the ucd-snmp package 
that reads ipfw counters directly and returns them to SNMP GET queries.
Actually, there is already a good basis that does exactly this for ipfw1 
and ipfw2 from http://howto.aphroland.org/HOWTO/MRTG/IPFWCountersWithMRTG

Solution 3 appears to be the most elegant (run-time efficient, small 
image footprint, ...), and also integrates well with all kind of 
monitoring tools, such as 'cacti' of which I am an avid user.

Right now, I am building a fresh snmpd for 1.2b8 which includes the 
ipfw2 MIB module from the above URL. After testing and maybe some 
extension, I intend to publish generic-PC and wrap 1.2b8_rs1 images that 
include this extended snmpd. Also, I might include some cacti config 
files to complement it.

In the meantime, you may also want to look at my image 1.2b8_rs0 which 
supports 'nProbe' to export NetFlows. Monitoring flows may also provide 
you with precious insight into your traffic patterns, and the effect of 
shaping using pipes and queues.

Please contact me if you already have experience with scenario 3. above 
- maybe we can go a bit faster together and get some additional 
parameters of m0n0wall accessible via SNMP.