topic Re: zabbix monitor fw kernel memory with snmp in Firewall and Security Management

zabbix monitor fw kernel memory with snmp

Jeff_Gao — Sat, 10 Aug 2019 06:05:17 GMT

Hi all

I want to monitor fw kernel memory utilization with zabbix by snmp,but i can not found the oid,i just only found real memory iod,who can offer fw kernel memory oid give me ,thanks .

Re: zabbix monitor fw kernel memory with snmp

Kim_Moberg — Sun, 11 Aug 2019 09:02:23 GMT

did you try to follow this guide?

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk90860&t=1565514034624

Re: zabbix monitor fw kernel memory with snmp

Jeff_Gao — Sun, 11 Aug 2019 12:26:36 GMT

I had added oid to zabbix monitor follow that guid,but there is a wrong:

Re: zabbix monitor fw kernel memory with snmp

PhoneBoy — Mon, 12 Aug 2019 00:57:52 GMT

Usually with most SNMP Managers, you have to import the appropriate MIBs in.
Have you done that?
Can you see any traffic originating from your SNMP Management station hitting your Security Gateway?

Re: zabbix monitor fw kernel memory with snmp

Jeff_Gao — Mon, 12 Aug 2019 04:22:33 GMT

I just add a ".1" at the end of ,it's ok
.1.3.6.1.4.1.2620.1.6.7.4.3.1

Re: zabbix monitor fw kernel memory with snmp

Jeff_Gao — Mon, 12 Aug 2019 04:32:02 GMT

But,i want to get fw kernel memory,this is aim of this topic

Re: zabbix monitor fw kernel memory with snmp

PhoneBoy — Mon, 12 Aug 2019 17:40:21 GMT

There is not an SNMP MIB for that.
If you can find the command that shows the parameter(s) you're interested in, you can set up a custom MIB for that as described here:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk90860
Note that our Best Practices guide doesn't mention monitoring firewall kernel memory, just overall free/used memory.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106126

Re: zabbix monitor fw kernel memory with snmp

genisis__ — Sun, 26 Feb 2023 19:23:59 GMT

Did you ever get this working?

Re: zabbix monitor fw kernel memory with snmp

Chris_Atkinson — Sun, 26 Feb 2023 20:08:26 GMT

Skyline probably is the best shot at exposing this and other cpview metrics though I've not checked this attribute specifically ...

Re: zabbix monitor fw kernel memory with snmp

genisis__ — Sun, 26 Feb 2023 20:31:21 GMT

Surely Skyline is basically an SNMP monitor, so there must be a way to determine what OID's are needed?

Personally, I'm actually after the Physical, Used, Free and Cached Memory.

Its my understand that cached memory counts towards free memory, if its needed cached memory would be released.

Re: zabbix monitor fw kernel memory with snmp

Chris_Atkinson — Sun, 26 Feb 2023 20:56:50 GMT

sk90860 section VI (B) & sk32206 outline the existing memory OIDs that are exposed via SNMP.

Otherwise as @PhoneBoy suggests you can extend using scripts to publish output of other commands via SNMP as required such as:

free -k -t

fw ctl pstat

Re: zabbix monitor fw kernel memory with snmp

genisis__ — Sun, 26 Feb 2023 22:57:47 GMT

SK32206 looks like it might do the job, so will have a play with this.

Re: zabbix monitor fw kernel memory with snmp

PhoneBoy — Mon, 27 Feb 2023 18:22:06 GMT

Skyline is not using SNMP to retrieve data, it's using OpenTelemetry.

Re: zabbix monitor fw kernel memory with snmp

genisis__ — Mon, 27 Feb 2023 20:20:54 GMT

ok that would explain it then.