Netgate snmp vs. net-snmp

jimp · Dec 11, 2019, 2:10 PM

It's unlikely. There is support for it in the bsnmpd daemon but since it's already fully implemented in the net-snmp, there is not much motivation to work on the base version since it is not as capable as net-snmpd (which may eventually replace bsnmpd)

Overlord · Dec 11, 2019, 2:16 PM

@jimp said in Netgate snmp vs. net-snmp:

It's unlikely. There is support for it in the bsnmpd daemon but since it's already fully implemented in the net-snmp, there is not much motivation to work on the base version since it is not as capable as net-snmpd (which may eventually replace bsnmpd)

I could be that I understand it wrong - but with snmp I can't have a secured connection and with net-snmp I have, but I can't have all modules loaded?

jimp · Oct 5, 2021, 9:56 AM

The only information not available in net-snmp is pf-related information, which is not a missing/not loaded module, it just isn't capable of reading it.

Overlord · Dec 11, 2019, 2:19 PM

Mhm I tried with check_mk and with snmp I got a lot of information like all virtual interfaces. With the net-snmp I got less information - no virtual interfaces. But it could be, that the virtual interfaces are stored in that pf-related information.

Edit
I have another question: With net-snmp I get information about the filesystem - with snmp not. Is it not possible for the snmp to read the information?

Sergei_Shablovsky · Oct 5, 2021, 9:56 AM

@jimp said in Netgate snmp vs. net-snmp:

The only information not available in net-snmp is pf-related information, which is not a missing/not loaded module, it just isn't capable of reading it.

Is any changes in this situation?

jimp · Oct 5, 2021, 6:23 PM

No.

Sergei_Shablovsky · Oct 5, 2021, 6:27 PM

@jimp said in Netgate snmp vs. net-snmp:

No.

Thank You for answering.

So, is this mean that Netgate company not see the SNMP monitoring (even on own-branded devices) as critical (because health of main firewall = health of all infrastructure of certain organizations) ?

P.S. BTW what system for real-time Monitoring You use for 5-10G pfSense connection?

jimp · Oct 5, 2021, 8:13 PM

There are two methods to get SNMP data. pf data is only available in one of them. It's not up to us to determine which SNMP packages support pf data, that's up to the authors of the SNMP daemons.

We may eventually add SNMPv3 to bsnmpd if it's viable.

But at no time does any of that even come close to implying what you are trying to twist it to mean.

Sergei_Shablovsky · Oct 7, 2021, 8:49 AM

@jimp ok, thank You for explaining.

Sergei_Shablovsky · Oct 10, 2021, 3:38 PM

@jimp P.S. BTW what system for real-time Monitoring You use for 5-10G pfSense device?