We have accomplished some really great things with our Linux box. We are running Red Hat 9 on a Dell rack mount server with a P3-600, 380MB Ram, and a couple SCSI hard drives.

We have 4 total network cards. 3 PCI cards that are bridged together and have spanning tree implemented on them. The on board network interface is used as the link to the outside world/Internet. The machine is working great along with our IPTables firewall.

We want to use MRTG on our internal windows box to watch traffic on our Linux router just like our current Cisco router. So I guess we want to use SNMP on the windows box to request data on the Linux router via the SNMPD. I'm sure someone has done this before. I would like to know what files I need to setup to watch traffic, cpu, etc... But I really want to be able to watch traffic first.

I know that I can setup webalizer on the router but we do not want to install software or open ports that aren't needed. If we install webalizer then we have to open port and run apache. I also know I am opening a port to run SNMPD but that is not my point.

Is setting up SNMPD the best way to log traffic on our Linux router? And if so, where do I get started?

Thanks
Casey

this question must be to advanced for the people here. I know i can't answer it. I hate when people just ignore you so that's why i am replying here. I hope you get it figured out.

way to go I'd say Nezzo, have you ever noticed that button/link "show all threads with 0 replies"? I know for a fact a lot of user use that function, I know I do.
I can't answer that question either, but at least I don't bump a thread that's only 4 hours old.

you know what the weird thing is, iceman, you probably wouldn't have replied if i'd not said a single word. and neither would anyone else. nobody even has the decency to say...sorry, but no one here can answer your question. which is most likely the truth.

Dude; look at this: http://www.linuxquestions.org/questi...lies&forumid=2
People who could answer this thread even when it was on page 7 could press that link and see threads with 0 replies.
You've blown that chance for wkm001.
Don't reply if you have nothing constructive to say.

iceman, blow wkm001's chance??? i doubt that...we are keeping it going like mad if you ask me. And you think this is constructive..... http://www.linuxquestions.org/questi...hreadid=112394 ...people do this crap all the time just because you are doing something they wouldn't do! It's proposterous! (spelling on that one is wierd)

Look, I'm going to try to explain it to you one last time, I'll make it simple for you ok?

- There is an option to view all threads with 0 replies
- People use that function
- Even if thread is on page 7 people can see it with that function
- You posted and thread had 1 reply then so thread isn't anymore on the 0 reply thread list
- People who use that function cannot see it now
- Eventually this thread will go on another pase, 'cause I won't reply anymore to you
and you can't bump this thread 'till someone who knows the answer sees it.
- People can't see it anymore then.
- You've blown wkm001's chances for ceveral replies from user who use that function.

-> So don't post the first reply if it's nothing constructive.

iceman, i understand what you are saying. it's not that hard to figure out. but you and i both know that no one is gonna answer this question. just like they are not gonna answer all the rest of the questions that go back to the year 2000. and what about all the thread with 1 replies where some idiot says "get a new computer" or something else stupid of that nature. is someone gonna go back and give the right answer? nope. so the point i am getting at is why wait until 2006 to let wkm001 know that no one here can answer the question.

I wasn't going to reply, but...

I'm very pleased you can look into the future, maybe you can teach me that.

It wouldn't be the first time someone answers a question after two days, but you allready know that, as you can look into the future...


wft are you still doing on this board if you don't give 79,489 (minus 3 - you me and wkm001 obviously) users credit?


Now I really won't reply anymore.

wkm001,
apolgies....you seem smart enough to look stuff up on the net but in case you haven't come across these, maybe they will help you out. Good luck.

http://ai3.asti.dost.gov.ph/sdm300a/

http://www.bjou.de/mrts/

http://kief.com/Syslog/

http://194.165.8.172/CyberClassroom/.../14_3/text.htm

I haven't looked at the links from the last post yet but..... Thanks for the posts anyway. They have at the very least entertained me this morning.

I am not taking credit for this solution. All I did was copy and paste from another post. This post is the answer I was looking I just didn't know it until a full day of research and reading.

The snmpd.conf file has to be modified to allow the information you want to be accesses. This example allows all information to be accessed because of the .1 in the subtree. You will have access to the full tree. This is good and bad. There are a lot of MIB files in /usr/share/snmp/mibs. You should not allow all of that to be logged to a database unless you need all of the MIB files active. If you do not want to log something like ethernet traffic then you should rename "IF-MIB.txt" to ".IF-MIB.txt"

Casey


The default settings of the SNMP were too restrictive for MTRG to access what it needed. Here is the revised section of the snmpd.conf file:

code:
####
# First, map the community name "public" into a "security name"

# sec.name source community
com2sec linuxbox default public

####
# Second, map the security name into a group name:

# groupName securityModel securityName
group mrtggrp v1 linuxbox
group mrtggrp v2c linuxbox

####
# Third, create a view for us to let the group have rights to:

# name incl/excl subtree mask(optional)
view mrtgview included .1 80

####
# Finally, grant the group read-only access to the systemview view.

# group context sec.model sec.level prefix read write notif
access mrtggrp "" any noauth exact mrtgview none none

# -----------------------------------------------------------------------------

I hope moderators will not punish me in any way for this, but this thread helped me to get mrtg running

snmp snmp snmp snmp snmp snmp snmp snmp snmp snmp snmp snmp snmp snmp snmp snmp
snmpd snmpd snmpd snmpd snmpd snmpd snmpd snmpd snmpd snmpd snmpd snmpd snmpd snmpd
mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg mrtg

now this thread will be found faster