zabbix monitor fw kernel memory with snmp

[Jeff_Gao]

Hi  all

      I want to monitor fw kernel memory utilization with zabbix by snmp,but i can not found the oid,i just only found real memory iod,who can offer fw kernel memory oid give me ,thanks . 

[Kim_Moberg]

Hi

did you try to follow this guide?

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Jeff_Gao]

Hi

    I  had added oid to zabbix monitor follow  that guid,but there is a wrong:

[PhoneBoy]

Usually with most SNMP Managers, you have to import the appropriate MIBs in.
Have you done that?
Can you see any traffic originating from your SNMP Management station hitting your Security Gateway?

[Jeff_Gao]

I just add a ".1" at the end of ,it's ok
.1.3.6.1.4.1.2620.1.6.7.4.3.1

[Jeff_Gao]

But,i want to get fw kernel memory,this is aim of this topic

[PhoneBoy · Accepted solution]

There is not an SNMP MIB for that.
If you can find the command that shows the parameter(s) you're interested in, you can set up a custom MIB for that as described here:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
Note that our Best Practices guide doesn't mention monitoring firewall kernel memory, just overall free/used memory.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[genisis__]

Did you ever get this working?

[Chris_Atkinson]

Skyline probably is the best shot at exposing this and other cpview metrics though I've not checked this attribute specifically ...

[genisis__]

Surely Skyline is basically an SNMP monitor, so there must be a way to determine what OID's are needed? 

Personally, I'm actually after the Physical, Used, Free and Cached Memory.

Its my understand that cached memory counts towards free memory, if its needed cached memory would be released.

[Chris_Atkinson]

sk90860 section VI (B) & sk32206 outline the existing memory OIDs that are exposed via SNMP.

Otherwise as @PhoneBoy suggests you can extend using scripts to publish output of other commands via SNMP as required such as:

free -k -t

fw ctl pstat

[genisis__]

SK32206 looks like it might do the job, so will have a play with this.

[PhoneBoy]

Skyline is not using SNMP to retrieve data, it's using OpenTelemetry.

[genisis__]

ok that would explain it then.