@althornin:

@tim.mcmanus:

This may be a bug in BSD.

The RRD graphs had a similar problem where the WAN graph would show "real" traffic metrics, but the LAN graph would show 2x WAN.  I think the root cause of that was a bug in the version of BSD that pfSense uses.

The two may be related, but I am not entirely sure.  The RRD graphs in 2.2 report properly.

Ok, maybe I can clarify this some.  I'm running 2.2.2 (now) and still have the problem.  Yes, the RRD graphs in pfSense are correct.  However, like many people, I use SNMP to monitor all of my routers (in this case, via MRTG).

SNMP numbers are incorrect on the router at my main site, and now at one remote site.  I am using OpenVPN.  I can't just reverse LAN numbers, because I'm multi-WAN at most sites - I want to see separate bandwidth for each WAN connection.  When I say incorrect, in this case, it means that my outbound traffic numbers are doubled.  Inbound traffic is correct.

So, the second site started showing this symptom after I started messing about with the traffic shaping that was on at the remote site.  Now, even with traffic shaping off, I am seeing the doubled numbers.  I can't fathom why messing about with traffic shaping would cause this to start…but it appears that it did.

Just an FYI - I can report that upgrading from 2.2.2 to 2.2.4 has resolved this for me on all of my pfSense routers.
SNMP is now reporting correct values.

You can always do an snmpwalk from another machine to get all of the MIB/OID information.

Most monitoring systems can do just that, they'll walk the system and be able to pull out the OIDs to monitor.

Ok Tnk

Just tested 2.2.3-RELEASE and it's back again, yieih!!!

On the Web-UI under "Status"->"RRD-Graphs" there is a tab called Quality.

If you set the option Graphs on "Allgraphs" you can see some Quality Graphs.

Is there any other solution to get these state-informations live via SNMP?

Regards

http://blog.logicmonitor.com/2013/06/18/extend-net-snmp-how-to-teach-an-old-snmpd-new-tricks/

You should be able to pull the temperature from the system by running the command:

sysctl -a | grep tempe

I've used the extend to graph OpenVPN users from Linux before and I guessing that can probably be used to graph the temperature of the CPUs from FreeBSD.

I get a list of known IP addresses and the interface they have been seen on

C:\usr\bin>snmpwalk -v 1 -m ALL 192.168.1.1 public .1.3.6.1.2.1.4.22.1.1.2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.1 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.10 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.11 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.12 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.13 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.14 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.152 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.154 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.155 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.160 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.162 = 2
ip.ipNetToMediaTable.ipNetToMediaEntry.ipNetToMediaIfIndex.2.192.168.1.171 = 2

It is not currently possible.

None of those are exposed over SNMP that I'm aware of. Of them all, the only one that might possibly be there is temperature, but that may depend on hardware and the modules loaded.

Well, that's too bad, but thanks for reply…

We include a standard MIB, plus some additional options for pf stats. For determining whether a connection is down, there isn't anything in SNMP that checks gateway status. You'd probably just use the interface counters and alarm when it has less throughput than what's normal for that day and time of day.

AFAIK there isn't anything in the SNMP OIDs that would show up differently.

Note that you'll also need additional MIBs found here: http://files.pfsense.org/misc/mibs/

Hi,

thanks for the reply. Looks like my used check_mk does not find those interfaces. I will take a closer look how I can tweak check_mk to find those MIB entries.

Regards,

Darko

thank you

See above. Package? Perhaps, Base? Never.