ããŒã1.ããŒã¿ã»ã³ã¿ãŒã®ãšã³ãžãã¢ãªã³ã°ã€ã³ãã©ã¹ãã©ã¯ãã£ã®ç£èŠã ãã€ã©ã€ãã
ããŒã2ãããŒã¿ã»ã³ã¿ãŒã®ãšãã«ã®ãŒäŸçµŠã®ç£èŠã¯ã©ãã§ããã
ããŒã3. NORD-4ããŒã¿ã»ã³ã¿ãŒã®äŸã䜿çšããå·åäŸçµŠã®ç£èŠã
ããŒã4.ãããã¯ãŒã¯ã€ã³ãã©ã¹ãã©ã¯ãã£ïŒç©ççãªæ©åšã
ããã«ã¡ã¯ãHabrïŒ ç§ã®ååã¯Alexey Bagaevã§ããDataLineã®ãããã¯ãŒã¯éšéã®è²¬ä»»è ã§ãã
ä»æ¥ã¯ãããŒã¿ã»ã³ã¿ãŒã®ã€ã³ãã©ã¹ãã©ã¯ãã£ã®ç£èŠã«é¢ããäžé£ã®èšäºãç¶ç¶ãããããã¯ãŒã¯ç£èŠã®çµç¹åã«ã€ããŠèª¬æããŸãã ããã¯èšå€§ãªãããã¯ãªã®ã§ãæ··ä¹±ãé¿ããããã«ã2ã€ã®èšäºã«åããŸããã ãã®èšäºã§ã¯ãç©çã¬ãã«ã§ã®ç£èŠã«çŠç¹ãåœãŠã次åã¯è«çã¬ãã«ã«ã€ããŠæ€èšããŸãã
ãŸãããããã¯ãŒã¯ç£èŠãžã®ã¢ãããŒãã説æãã次ã«ç£èŠããŠãããããã¯ãŒã¯æ©åšã®ãã¹ãŠã®ãã©ã¡ãŒã¿ãŒã詳现ã«èª¬æããŸãã
å 容ïŒ
ç§ãã¡ã®ã¢ãããŒã
ãããã¯ãŒã¯ç£èŠãšãããã¯ãŒã¯ç£èŠ
ãããã¯ãŒã¯ãã¹ãã¹ããŒã¿ã¹
枩床ã€ã³ãžã±ãŒã¿
ã¹ã€ããå ã®ãã¡ã³ã®ã¹ããŒã¿ã¹
é»æºã¢ãžã¥ãŒã«ã®ã¹ããŒã¿ã¹
ããŒãã¹ããŒã¿ã¹
ããã»ããµãŒã®ç¶æ
ã³ã³ãããŒã«ãã¬ãŒã³ããªã·ãŒïŒCPU䜿çšçã«å¯Ÿãããã©ãã£ãã¯ã®åœ±é¿
RAMç£èŠ
å°é¡ããŒãã¹
ç§ãã¡ã®ã¢ãããŒã
ããã¹ãŠãç£èŠããããšããç§ãã¡ã®ãã©ã¯ãã£ã¹ã¯ã5幎以äžã«ããã£ãŠç¶ããŠããŸãã äžéšã®å°åã§ã¯ãèªè»¢è»ãçºæãããæšæºçãªæ¹æ³ã§è¡åããŸãããã©ããã§ã詳现ã®ããã«æ±ºå®ã«é ŒããŸãã ç¹ã«ãããã¯ãããã¯ãŒã¯ã®è«çã¬ãã«ã®ç£èŠã«é¢ãããã®ã§ãããåè¿°ããããã«ãããã¯ä»åŸã®èšäºã®ãããã¯ã§ãã
ãããã¯ãŒã¯ã®ç©çå±€ãããŒãªã³ã°ããå Žåããã¹ãŠãéåžžã«ç°¡åã§ãã ãããã¯ãŒã¯ã€ã³ãã©ã¹ãã©ã¯ãã£ç£èŠã·ã¹ãã ã¯ããªãŒãã³ãœãŒã¹ããŒã«ã®NagiosãšCactiã«åºã¥ããŠããŸãã 念ã®ãããéããæãåºãããŠãã ãããNagiosã¯ã€ãã³ãããªã¢ã«ã¿ã€ã ã§ãã°ã«èšé²ããCactiã¯çµ±èšãéçŽãããã£ãŒããæ§ç¯ããé·æçã«ã€ã³ãžã±ãŒã¿ãŒã®ãã€ããã¯ã¹ã远跡ããŸãã
ãããã¯ãŒã¯æ©åšã®ã¹ããŒã¿ã¹ã¯ãæšæºã®SNMPãããã³ã«ã䜿çšãããªã¯ãšã¹ããéããŠç£èŠãããŸãã
ãµãŒããŒãšãŒãžã§ã³ãèŠæ±ïŒGetRequestããã³ãšãŒãžã§ã³ããµãŒã㌠èŠæ± ïŒãã©ããã
ãã¹ãŠã®ç®¡ç察象ãããã¯ãŒã¯æ©åšã®OSã«ã¯MIBããŒã¿ããŒã¹ããããŸãã éåžžã SNMPWalkã³ãã³ããŸãã¯MIB BrowserããŒã«ã䜿çšããŠããªããžã§ã¯ãã®ç®çã®OIDãèŠã€ããŸãã Redditã®è±èªãã©ã³ããžã®ãã®ãªã³ã¯ããã©ãããšãã§ããŸããã³ã¡ã³ãã«ã¯ããã®ãããã¯ã«é¢ããããã€ãã®è³¢æãªæšå¥šäºé ããããŸãã
ãã¡ãããæ©åšã¯å®æçã«å€æŽãããè¿ä»£åãããŠãããæ°ããã¿ã¹ã¯ã®ããã«ç£èŠã·ã¹ãã ãå®æãããŠããŸãã æ¬çªç°å¢ã«æ°ãããã¹ããå°å ¥ããåã«ããã¹ããšäžŠè¡ããŠããã®ãã¹ããç£èŠã·ã¹ãã ã«è¿œå ããç£èŠãããªããžã§ã¯ãã®ãªã¹ããå®çŸ©ããŸãã
æ¥ç¶ãããæ©åšã®åºæ¬çãªã¡ããªãã¯ãæãåºæ¬çãªãã®ããåéããŸã-ããã¯UP / DOWNã®ãã§ãã¯ã§ãã
äžè¬çã«ãç§ãã¡ã¯èå³ããããŸãïŒ
- å€éšèŠå ïŒæž©åºŠãæ é€ãªã©ïŒ;
- ããŒãã®ã¹ããŒã¿ã¹ïŒçŸåšã®ã¹ããŒã¿ã¹ãå¯çšæ§ïŒã
- ããã»ããµã®ã¹ããŒã¿ã¹ã
- èšæ¶
- æ©åšã®ã¿ã€ãã«å¿ãããéãã®ç¹ç°æ§ã
ããã¯ãããããŒããä»ã®ããŒããããéèŠã ãšããããšã§ã¯ãããŸããã çç£çãªãããã¯ãŒã¯-ã¢ããªã«ã§ãçç£çã§ãã ãç®è©°ãŸããã¡ã¢ãªãŸãã¯ããã»ããµã®éè² è·ã¯ããããã¯ãŒã¯å šäœã®å£åãç¹ã«ã¯ã©ã€ã¢ã³ãã®åé¡ãåŒãèµ·ããå¯èœæ§ããããŸãã ãããã¯ãŒã¯ã¢ã€ãã³ãç£èŠããéã®ãã¯ãã¿ã¹ã¯ã¯ãæ°ã¥ãåã®ã¿ã€ã ãªãŒãªäºé²ãšãã©ãã«ã·ã¥ãŒãã£ã³ã°ã§ãã
ãããã¯ãŒã¯ç£èŠãšãããã¯ãŒã¯ç£èŠ
ãããã¯ãŒã¯ç£èŠã§ã¯ãã€ã³ãã³ããšã¢ãŠããªã ãã³ãã® 2ã€ã®æ©åšã¢ã¯ã»ã¹æ¹æ³ã䜿çšããŸãã 垯åå€ãæãŸããã§ãããã®ã¹ããŒã ã§ã¯ãç£èŠã·ã¹ãã ã®ãã©ãã£ãã¯ã¯ã顧客ã«ãµãŒãã¹ãæäŸããããã«äœ¿çšãããçç£çãªãªã³ã¯ããã©ããŸããã
ç£èŠãããã¯ãŒã¯ã
ç£èŠã®ããã«ãç¹å¥ãªãããã¯ãŒã¯ããããŸãïŒå°çšãªã³ã¯ã«ãã£ãŠåãããã¯ãŒã¯ãã¹ãã®ããŒãã«æ¥ç¶ãããŠããŸãã æ¬çšŒåãªã³ã¯ã§åé¡ãçºçããå Žåã§ããç£èŠã¯å€±æããããšãªãæ©èœããŸãã
1ã€ã®ãªã³ã¯ã®åé¡ãåå ã§ããããã¯ãŒã¯ã®å€§éšåãç£èŠäžèœã«ãªã£ãŠããããšããããããŸãã ããã«ããããµããŒããã¹ã¯ãè€éã«ãªãããã©ãã«ã·ã¥ãŒãã£ã³ã°ããã»ã¹ãé ããªããŸãã 垯åå€ã¹ããŒã ã¯ãã®åé¡ã解決ããŸãã
ãã¹ãŠã®ãã¹ãã垯åå€ã§æ¥ç¶ã§ããããã§ã¯ãããŸããããããã®å Žåããã©ãã£ãã¯ã®ç£èŠãçç£çã§ãããšãã«åž¯åå ã䜿çšããŸãã å¥åŠãªããšã«ããã®ã¹ããŒã ã®æãããªæ¬ ç¹ã«ãããããããä¿¡é Œæ§ãšããç¬èªã®å©ç¹ããããŸãã
çç£çãªãªã³ã¯ã¯ãL2ããã³L3ã¬ãã«ã®ãããã³ã«ã«ãã£ãŠäºçŽãããŠããŸããã¡ã€ã³ãªã³ã¯ã«é害ãçºçãããšããã©ãã£ãã¯ã¯å¥ã®ãªã³ã¯ã«ã移åãããŸãã Nagiosã¯ããã«ãµãŒãã¹ã®ãã©ããã§å¯Ÿå¿ã§ããŸããããµããŒããµãŒãã¹ã¯åŒãç¶ãç£èŠãããŸãã
次ã«ããã¹ãŠã®ããŒããç©çãããã¯ãŒã¯æ©åšãç£èŠããããã«é çªã«é²ã¿ãŸãã
ãããã¯ãŒã¯ãã¹ãã¹ããŒã¿ã¹
ICMPãªã¯ãšã¹ãã管çIPã¢ãã¬ã¹ã«éä¿¡ããããšã«ããããã¹ãã®å¯çšæ§ã確èªããŸãã éåžžãããã¯æ©åšç®¡çãããã¯ãŒã¯ã®å°çšIPã§ãã
1åããšã« ãNagiosã®check_pingãã©ã°ã€ã³ãå®è¡ããŠãã¹ãããã§ãã¯ããŸãã åã³ãŒã«ã«ã¯ã1ç§ééã§4ã€ã®ICMPèŠæ±ãéä¿¡ãããŸãã 以äžã®ã¹ã¯ãªãŒã³ã·ã§ããã¯ãæåŸã®ãã§ãã¯ã«åæ Œããçµæããã±ããæ倱ã0ïŒ ã§ããããšã瀺ããŠããŸãã å¹³åRTAå¿çæéïŒåŸåŸ©å¹³åïŒã¯2.47ããªç§ã§ããã ãããæšæºã§ãã
ãã¹ãã®ç¶æ ã確èªããŠãã ããã UPã¹ããŒã¿ã¹ïŒãã±ããæ倱0ïŒ ãå¹³åRTAæé2.47ããªç§ã UPDïŒ
ã¹ã¯ãªãŒã³ã·ã§ãããå€æŽãããŸãããTortortorã®ç·šéã«æè¬ããŸã
誀åäœãçºçããããšãã©ã®ããã«ç解ããŸããïŒ ãã¡ããããã¹ãŠã®æ°åã®èŠ³æž¬ãåçŽãªäººã«ä»»ããããšã¯äžå¯èœã§ãããšã³ãžãã¢ã¯ã䟿å©ãªNagiosã€ã³ã¿ãŒãã§ãŒã¹ã§æ©åšã®ç¶æ ãç£èŠããŸãã WARNING ïŒäžèŠãªã€ã³ãžã±ãŒã¿ã«è¿ã¥ããŠããïŒããã³CRITICAL ïŒé倧ãªãããå€ãè¶ ããå°é家ã®ä»å ¥ãå¿ èŠïŒã¹ããŒã¿ã¹ãããªã¬ãŒããããã®æ€èšŒæžã¿ã®ãããå€ãæ¢ã«å«ãŸããŠããŸãã
åã®ã¹ã¯ãªãŒã³ã·ã§ããã®ããã©ãŒãã³ã¹ããŒã¿ããŒãã«ãããèŠãŠãã ããã[å€]åã«ã¯ã[ãã±ããæ倱]ãã©ã¡ãŒã¿ãŒã®çŸåšã®å€ãå«ãŸããŠããŸãã èŠåã¯ãéä¿¡ããããã±ããã®ç·æ°ã®å€±ããããã±ããã®80ïŒ ã«å°éãããšãã«çºè¡ãããŸããã¯ãªãã£ã«ã«-100ã2.47ããªç§ã®RTAïŒåŸåŸ©å¹³åïŒã¯ãå¹³åå¿çæéãæå³ããŸãã èŠåã¯3ããªç§ã«éãããšçºè¡ãããã¯ãªãã£ã«ã«ãããå€ã¯5ããªç§ã«èšå®ãããŸãã
åãç»é¢ã§ã次ã®ã€ã³ãžã±ãŒã¿ã®ç°¡åãªæŠèŠãååŸã§ããŸãã
- 次ã®ã¹ã±ãžã¥ãŒã«æžã¿ã¢ã¯ãã£ããã§ãã¯-次ã®ãã§ãã¯ã®æéã
- æçµç¶æ å€æŽ-ç¶æ ãæåŸã«å€æŽããããšãã
- æçµéç¥-ã·ã¹ãã ã«ãã£ãŠçºè¡ãããæåŸã®éç¥ã
- ã¹ã±ãžã¥ãŒã«ãããããŠã³ã¿ã€ã -éã¢ã¯ãã£ããªæéãèšç»ãããŠãããã©ããã
枩床ã€ã³ãžã±ãŒã¿
æè¿ãç§ã®ååã¯ããšã³ãžã³ã«ãŒã ã®å·æ°ã®ç£èŠã«ã€ããŠè©±ããŸãããããã§ã¯ãå·æ°éè·¯ããšã«3ã€ã®æž©åºŠã»ã³ãµãŒããããšè¿°ã¹ãŸããã ãããã®ã»ã³ãµãŒã¯ãå»äžã«æ²¿ã£ãŠäžè¬çãªã€ã³ãžã±ãŒã¿ãååŸããå·åŽã·ã¹ãã èªäœã®åäœãå€æã§ããããã«ããŸãã
ãããã¯ãŒã¯ã€ã³ãã©ã¹ãã©ã¯ãã£ãç£èŠããã«ã¯ãåæ©åšã®æž©åºŠã»ã³ãµãŒãç¥ãå¿ èŠããããŸãã ããã«ããããã¹ãã®éç±ã®å¯èœæ§ãç¹å®ããŠæé€ã§ããã ãã§ãªããããŒã«ã«ã©ãã¯ã®éç±ãæ©æã«ç¹å®ããããšãã§ããŸãã
ããã€ã¹ã®ã¹ããŒã¿ã¹ãååŸããã«ã¯ã snmpwalk <parameters> <device> |ãšãã圢åŒã®ãªã¯ãšã¹ããéä¿¡ããŸãã grep <ç§ãã¡ãæ¢ããŠãããã®>ãšæå®ããããã£ã«ã¿ãŒã®ãã¹ãŠã®OIDã®ãªã¹ããååŸããŸãã
Cisco ASR9006ã«ãŒã¿ã®æž©åºŠæž¬å®å€ãç §äŒããŸãã
çµè«ãæ€èšããåŸããã詳现ãªã¯ãšãªãäœæããŸãã
枩床å€ãååŸããããã«ãInlet Temperature Sensordieãã©ã¡ãŒã¿ããªã¯ãšã¹ãããŸãã
ããã«è©³çŽ°ïŒ
ãã©ã¡ãŒã¿NP1ããã³NP2ãéžæããŸãã
ãã®çµæãOID 1.3.6.1.4.1.9.9.91.1.1.1.1.4.indexãååŸããç®çã®æž©åºŠã»ã³ãµãŒã®æž¬å®å€ã远跡ã§ããŸã ã ãã®äŸã§ã¯ãå€ã¯590ãã€ãŸãææ°59床ã§ãã
Nagiosã®ã°ã©ãã£ãã¯è¡šç€ºã§ã¯ã調æ»çµæã¯æ¬¡ã®ããã«ãªããŸãã
ã¹ã¯ãªãŒã³ã·ã§ããã«ã¯æ¬¡ã®ããã«è¡šç€ºãããŸãã
- 枩床0 / 0ã0 / 1ã0 / 2-ASR9006ã«ãŒã¿ã®ã©ã€ã³ã«ãŒãã»ã³ãµãŒã
- RSP-ã«ãŒãã»ã³ãµãŒã«ãŒãã¹ã€ããããã»ããµã
- RSP / CPU-ã«ãŒãã¹ã€ããããã»ããµã«ãŒãã®CPU枩床ã»ã³ãµãŒã
ã¹ã€ããå ã®ãã¡ã³ã®ã¹ããŒã¿ã¹
ããŒã¿ã»ã³ã¿ãŒã®å·åŽã·ã¹ãã ãšå·å»ãšæž©å»ã®ã·ã¹ãã ã®å©ããåããŠãæ©åšãéç±ããªãããã«ããããã«ãå·å»ããã©ãã¯ãžã®ç©ºæ°ã®äžå®ã®æµããæäŸãããšåæã«ã枩颚ãæž©å»ã«ãå¹ã蟌ã¿ããŸãã æ©åšã«ç©ºæ°ãéã蟌ãããã³ããã®åœ¹å²ã¯ãã¹ã€ããå ã®ãã¡ã³ã«ãã£ãŠå®è¡ãããŸããã©ãã¯ã®ãã¡ã³ãšæ··åããªãã§ãã ããã æ©åšã®éç±ãé²ãããã«ãã¹ããŒã¿ã¹ãç£èŠããŠããŸãã
ãã¡ã³ãåæ¢ããå Žåã亀æããæéããããŸããããããªããšãæ©åšãæå·ããå¯èœæ§ããããŸãã
ãã¡ã³ã®çŸåšã®ã¹ããŒã¿ã¹ãååŸããã«ã¯ãäžèšã®ãããªãªã¯ãšã¹ããè¡ããŸãã
iso.3.6.1.4.1.9.9.117.1.1.2.1.2.24330783 = INTEGERïŒ2
åç2ã¯ãªã³ãæå³ããŸãã ãã¡ã³ã¯åäœããŠããŸãããNagiosã¯ãããã¯ç¶æ ã§ã¯ãããŸããã
ããã«ãããNagiosã®ãã¡ã³ã®ã¹ããŒã¿ã¹ã衚瀺ãããŸãã
ã¡ãã£ãšãã泚æïŒç£èŠã·ã¹ãã ãã»ããã¢ãããããšããåœç€Ÿã®å°é家ã¯ããã¹ãè² è·ãšãã¯ã©ãã·ã¥ãã¹ããããååŸãããããå€ããããå€ãšããŠäœ¿çšããŸãã ãéåžžã®ãç¯å²ãçµäºãããšãå·®ãè¿«ã£ãåé¡ãèŠåããããã¹ã ãŒãºãªããã©ãã«ã·ã¥ãŒãã£ã³ã°ã®æéããããŸãã ããã«ãå€ãã®å Žåããªã¢ã«ã¿ã€ã ã§ããåããŠãã/åããŠããªãããšããç°¡åãªæ瀺ã§ååã§ãã
é»æºã¢ãžã¥ãŒã«ã®ã¹ããŒã¿ã¹
ãã®ã€ã³ãžã±ãŒã¿ã¯éåžžã«æçœã§ãããã³ã¡ã³ããå¿ èŠãšããŸããã éç¥ã·ã¹ãã ã¯ããããã¯ãŒã¯æ©åšèªäœã®é»æºãŠãããã®èª€åäœãé»åäžè¶³ãéç¥ããã ãã§ãã
é»æºã倱ãããå Žåãå€åãµãŒãã¹ã¯ãã®çç±ãè¿ éã«ææ¡ããŸãã ããã¯ãé»æºã±ãŒãã«ã®åé¡ããã®å ¥åã®é»åäžè¶³ããŸãã¯ãŠãããèªäœã®åé¡ã®å¯èœæ§ããããŸãã éç¥ãåãåã£ããšã³ãžãã¢ã¯ã察çãè¬ããæ©åšã®éåžžã®åäœãå埩ããŸãã
é»æºã¢ãžã¥ãŒã«ã®OIDïŒ 1.3.6.1.4.1.9.9.117.1.1.2.1.2.index
ãªã¯ãšã¹ããéä¿¡ããŠã¹ããŒã¿ã¹ãååŸããŸãïŒ iso.3.6.1.4.1.9.9.117.1.1.2.1.2.53196292 = INTEGERïŒ2
é»æºã¢ãžã¥ãŒã«ã¯æ£åžžã§ãã
ãã®ãããé»æºã¢ãžã¥ãŒã«ã®ã¹ããŒã¿ã¹ã¯Nagiosã§ç£èŠãããŸãã
ããŒãã¹ããŒã¿ã¹
ãã©ã³ã¯ãšãµãã¹ã¯ã©ã€ããŒã®æ¥ç¶ãç£èŠããããã«ã次ã®ãã©ã¡ãŒã¿ãŒãç£èŠããŸãã
- ããŒãã®å¯çšæ§ã
- ä¿¡å·åŒ·åºŠïŒå ããŒãã®å ŽåïŒ;
- ãã©ãã£ãã¯éïŒããŒãé床ïŒ;
- ééãã
åãã©ã¡ãŒã¿ãŒã«ã€ããŠåå¥ã«èª¬æããŸãã
ããŒãã®åäœã¹ããŒã¿ã¹ã確èªããããã«ãæšæºã®OIDèŠæ±ãäœæããŸãã
ç®çã®ããŒãã®OIDãå ¥åããŸãïŒ 1.3.6.1.2.1.2.2.1.8.ifindex
çããåŸãããŸãïŒ iso.3.6.1.2.1.2.2.1.8.1073741829 = INTEGERïŒ2
Nagiosã§ã®å¿çã®èŠèŠåã
ããŒããå ã§ããå Žåã¯ãå ã®ä¿¡å·ã¬ãã«ã確èªããŸãã
1.çºä¿¡ä¿¡å·ã確èªããŸãã
OIDïŒ 1.3.6.1.4.1.9.9.91.1.1.1.1.4.txindex
åçïŒ iso.3.6.1.4.1.9.9.91.1.1.1.1.4.6869781 =æŽæ°ïŒ8580
2.次ã«ãçä¿¡ä¿¡å·ã確èªããŸãã
OIDïŒ 1.3.6.1.4.1.9.9.91.1.1.1.1.4.rxindex
åçïŒ iso.3.6.1.4.1.9.9.91.1.1.1.1.4.63630989 = INTEGERïŒ2499
äžèšã®äŸã®æ°åã解èªããŸãã ã¯ãšãªã¯ãmilliWattsã§å€ãè¿ããå°æ°ç¹ä»¥äž4æ¡ã瀺ããŸãã ã€ãŸããäžèšã®ã€ã³ãžã±ãŒã¿ã¯0.8 mWãš0.2 mWãæå³ããŸãã 次ã«ãCactiãã³ãã¬ãŒãã®çµã¿èŸŒã¿é¢æ°ãå€ãdBmïŒdecibel-milliWattïŒã«å€æããŸãã
å ãªã³ã¯æžè¡°çµ±èšã¯ããããã¯ãŒã¯ã®åé¡ã®åæã«åœ¹ç«ã¡ãŸãã Cactiã䜿çšãããšãããã©ãŒãã³ã¹ã®äœäžã®ãã€ããã¯ã¹ã確èªãããªã³ã¯äžã®åé¡ã®åå ãèŠã€ããããšãã§ããŸãã
å åŠãã©ãã¯ã®1ã€ã«ä¿¡å·ãããç°åžžãªã±ãŒã¹ããããŸããã äžã®ã°ã©ãã¯ãå ä¿¡å·ã®åä¿¡ã¬ãã«ã®äœäžã瀺ããŠããŸãã ãã®å€±æã¯1é±éç¶ããŸããããã¬ãã«ã¯çªç¶éåžžã®ç¶æ ã«ãè·³ãè¿ãããŸããã ãããäœã§ããããæšæž¬ããããšããã§ããŸããã ããããäœäººãã®è«è² æ¥è ãé»è©±äžæ°Žéã§äœæ¥ãè¡ã£ãåŸãéãã«ãã¹ãŠããã®å Žæã«æ»ããŸããã
Cactiã®å è·¯ã®ä¿¡å·çµ±èšã
ãã1ã€ã®éåžžã«éèŠãªãã©ã¡ãŒã¿ãŒã¯ãããŒãã®åž¯åå¹ ïŒé床ïŒã§ãã ãããã¯ãŒã¯ãªã³ã¯ã®è² è·ã®çšåºŠã«é¢ãããªã¢ã«ã¿ã€ã æ å ±ãåä¿¡ããå¿ èŠããããŸãã
ãã®ã¡ããªãã¯ã«ããããã©ãã£ãã¯ãèšç»ãããããã¯ãŒã¯å®¹éã管çã§ããŸãã ããã«ããªã³ã¯ã®ã¹ã«ãŒãããã«é¢ããçµ±èšæ å ±ããããããDDoSæ»æã®çµæãåæããå°æ¥ã®DDoSæ»æã®åœ±é¿ã軜æžããããã®å¯Ÿçãè¬ããããšãã§ããŸãã
éåä¿¡ãããæ å ±ã®ãã±ããæ°ã®æŠèŠãååŸããã«ã¯ãå床ã¯ãšãªã䜿çšããŸãã
1.åãåã£ãããã±ãŒãž
OIDïŒ 1.3.6.1.2.1.31.1.1.1.6.ifindex
åçïŒ iso.3.6.1.2.1.31.1.1.1.6.1073741831 = Counter64ïŒ109048713968
2.éä¿¡æžã¿ããã±ãŒãž
OIDïŒ 1.3.6.1.2.1.31.1.1.1.10.ifindex
çãïŒ iso.3.6.1.2.1.31.1.1.1.10.1073741831 = Counter64ïŒ67229991783
äžèšã®ã¯ãšãªã§åä¿¡ããæ°å€ã¯ãã€ãæ°ã§ãã Nç§/ Nã®ãããã®å€ã®å·®ã¯ããã€ãåäœã®åž¯åå¹ ã§ãã 8ãæãããšãããã/ sãåŸãããŸãã ããªãã¡ ç£èŠã¯1åã«1åå€ãèŠæ±ããåã®å€ãšæ¯èŒãã2ã€ã®å€ã®å·®ãèšç®ãããã€ãããããã«å€æããããã/ç§ã®é床ãååŸããŸãã
ãµããã³ããŒã¿ã¬ãŒãã°ã©ãã
å€ãã®å Žåãåœç€Ÿã®å å ¥è ã¯ãå²ãåœãŠããã垯åå¹ ããªãŒããŒãããŒãããããã€ã³ã¿ãŒããããã£ãã«ã®å£åãçµéšããŸãã å£åã®åå ãããã«ç¹å®ããããšã¯å°é£ã§ããå å ¥è åŽã®çç¶ã¯ããã±ããã®éšåçãªæ倱ã§ãã Nagiosã§ãã®åé¡ããã°ããèªèããããã«ãå¿çãããå€ãåãµãã¹ã¯ã©ã€ããŒãã£ãã«ã®åž¯åå¹ ã«èšå®ããŸãã
Nagiosããã·ã¥ããŒãã§ã¯ã次ã®ããã«ãªããŸãã
詳现ãªçµè«ïŒ
100ã®ã¬ããããã£ãã«ã§80 Gb / sã®é床ãããå€ãè¶ ããããšã¯å±éºãšèŠãªãããŸãããã®ãããªå Žåããã£ãã«ãã¢ã³ããŒããŸãã¯æ¡åŒµããæ段ãè¬ããŸãã èŠããŠãããŠãããªãã¯åžžã«ãæ瞊ã®äœå°ããããªãã¡ ãã©ãã£ãã¯ãæ¥æ¿ã«å¢å ããå Žåã®ç¡æã®åž¯åå¹ ã ããã¯ããªãœãŒã¹ã®åºåžãããã¯ã¢ããããŸãã¯ææªã®å ŽåDDoSã®ããŒã¯ã«ãªãå¯èœæ§ããããŸãã
æåŸã«ãããŒãããšã«ãšã©ãŒãç£èŠããŸãã ãšã©ãŒã«é¢ããçµ±èšã䜿çšããŠãåé¡ãããŒã«ã©ã€ãºããã³ä¿®æ£ããŸãã
1.ãšã©ãŒã®ããåä¿¡ãã±ããã®æ°ã調ã¹ãŸãã
OIDïŒ 1.3.6.1.2.1.2.2.1.14.ifindex
åçïŒ iso.3.6.1.2.1.2.2.1.14.1073741831 = Counter32ïŒ0
2.éä¿¡ãããªãã£ããã±ããã®æ°ã確èªããŸãã å«ãŸãããšã©ãŒïŒ
OIDïŒ 1.3.6.1.2.1.2.2.1.20.ifindex
åçïŒ iso.3.6.1.2.1.2.2.1.20.1073741831 = Counter32ïŒ0
Cactiã®çµ±èšã¯ã1ç§ãããã®ãã±ããéä¿¡äžã®ãšã©ãŒæ°ããã£ããã£ããŸãã
ãã£ãŒãã®In In / Outç Žæ£ããã³In / Out ãšã©ãŒã€ã³ãžã±ãŒã¿ã¯ãããŒã¿ãã±ãããäžäœã¬ãã«ã®ãããã³ã«ã«éä¿¡ãããªãå¯èœæ§ã®ãããã¹ãŠã®çç±ã®çµ±åãããã«ãŠã³ã¿ãŒã§ãã
ãšã©ãŒã远跡ãããªã³ã¯ã®åé¡ãèŠã€ããããã«ãNagiosã«ã¯åOIDã®éç¥ã·ã¹ãã ããããŸãã ãã ãããšã©ãŒãåžžã«è¿ éã«è¿œè·¡ã§ãããšã¯éããªããããå€åãšã³ãžãã¢ã«ã¿ã€ã ãªãŒã«éç¥ããããã«ãNagiosã¯ããŒããšã©ãŒç£èŠãµãŒãã¹ãè¿œå ã§æ§æããŸããã
ããã¯ãNagiosã§ã®ããŒããšã©ãŒãã§ãã¯ã®æ§åã§ãã
ããããããããã¯ãã¹ãŠãç£èŠããäž»èŠãªããŒãã¡ããªãã¯ã§ãã
éèŠãªç¹ã1ã€ã ãæããŸããCiscoCatalyst 6500ãªã©ã®Cisco IOSãªãã¬ãŒãã£ã³ã°ã·ã¹ãã ã§ã¹ã€ãããåèµ·åãããšããifindex-portããããã³ã°ãå€æŽãããŸãã ããã«ãããå¿ ç¶çã«ç£èŠã·ã¹ãã ã§SNMPèŠæ±ãåæ§æããå¿ èŠãçããŸãã ã€ã³ã¿ãŒãã§ã€ã¹ã®ã€ã³ããã¯ã¹ïŒifindexïŒã®å€ãä¿®æ£ããã«ã¯ãIOSã°ããŒãã«ã¢ãŒãã§snmp ifmib ifindex persistã³ãã³ããå ¥åããå¿ èŠããããŸãããã®åŸãMIBã®ifindexãåèµ·åããŠãå€æŽãããŸããã
ããã»ããµãŒã®ç¶æ
CPU䜿çšçã100ïŒ ã«è¿ããšããããã¯ãŒã¯ãã¹ããŸãã¯ãããã¯ãŒã¯å šäœã®ç¶æ ã«æªåœ±é¿ãåãŒãå¯èœæ§ããããŸãã ããã¯ã蚱容å¯èœãªãããå€ãè¶ ããããšãå³åº§ã«åŠç¿ããå¿ èŠãããå Žåã§ãã ãã®ããããã§ã«ç解ããããã«ãNagiosã䜿çšããŸãã Cactiã®ã°ã©ããç 究ããã·ã¹ãã ããªã¢ã«ã¿ã€ã ã§èŠ³å¯ããããšã§ãããã»ããµã®åŸåãšåšæçãªæ§è³ªãç解ããŠããŸãã ããããã¹ãŠãããããã¯ãŒã¯ã«åœ±é¿ãäžããåã«ããšã³ãžãã¢ãåé¡ãèŠã€ããŠäžåããã®ã«åœ¹ç«ã¡ãŸãã
ãããã¯ãŒã¯ããã€ã¹ã®ããã»ããµã¹ããŒã¿ã¹ãèŠæ±ããŸãã
OIDïŒ 1.3.6.1.4.1.9.9.109.1.1.1.1.7.index
åçïŒ iso.3.6.1.4.1.9.9.109.1.1.1.1.7.2098 = Gauge32ïŒ2
1åãããã®CPUè² è·ãååŸããŸãã
Nagiosã®CPUè² è·ã¹ããŒã¿ã¹ã
ããã»ããµã®ç¶æ ã«é¢ãã詳现æ å ±ãéããŸãã äžã®ã¹ã¯ãªãŒã³ã·ã§ããã®ããã©ãŒãã³ã¹ããŒã¿é ç®ã«æ³šç®ããŸãããã çŸåšã®ããã»ããµã®è² è·ãšãããå€ã«é¢ããæ å ±ãå«ãŸããŠããŸãã çŸåšã®è² è·ã¯3ïŒ ã§ãã ã·ã¹ãã ã¯ã50ïŒ ãããŒããããšèŠåãçºãã70ïŒ ã®ããŒãã§ã¯ãªãã£ã«ã«ä¿¡å·ãçºããŸãã
詳现ãªããã»ããµã¹ããŒã¿ã¹æ å ±ã ãã¹ãŠã®ã€ã³ãžã±ãŒã¿ã¯æ£åžžã§ãã
ã³ã³ãããŒã«ãã¬ãŒã³ããªã·ãŒïŒCPU䜿çšçã«å¯Ÿãããã©ãã£ãã¯ã®åœ±é¿
ãã®ã€ã³ãžã±ãŒã¿ã¯ãåè¿°ã®ããã»ããµäœ¿çšçã«é¢ããåºæ¬æ å ±ãè£å®ããŸãã çä¿¡ãã©ãã£ãã¯ã®äžéšã¯ããã»ããµã«ãã£ãŠåŠçããããã®ã¿ã€ããšéãåå¥ã«è¿œè·¡ããŸãã CPUè² è·ã®å¢å ã¯ãDDoSæ»æãšéåžžã«æå¹ãªãã©ãã£ãã¯ïŒICMPãARPèŠæ±ãªã©ïŒã®äž¡æ¹ãåŒãèµ·ããå¯èœæ§ããããŸãããããã¯åã«å€ãããŸãã
éå°ãªéã®ããŒã¿ãåŠçãããšããã¹ãŠã®ããã»ããµã¯ãã®æç¹ãŸã§èµ·åã§ããã«ãŒãã£ã³ã°ãããã³ã«ãªã©ã®ãµãŒãã¹ãã©ãã£ãã¯ãåŠçã§ããŸãããããšãã°ã ã«ãŒãã£ã³ã°ã¢ããããŒããhello / keepaliveãã±ãããªã©ã§ãã ãããã£ãŠãé£æ¥ãããããã¯ãŒã¯æ©åšãšã®çžäºäœçšãåæ¢ãããµãŒãã¹ãäœäžãŸãã¯äœäžããŸãã
å®éã®äŸã次ã«ç€ºããŸãã
IPv6ã«ãŒãã£ã³ã°ãããã³ã«ã®ãã±ããã¹ããªãŒã ã¬ãŒãã
CPUè² è·ã°ã©ãã
ã°ã©ãã¯ãIPv6ã«ãŒãã£ã³ã°ãããã³ã«ãã±ãããã¹ã€ããCPUã«ãããŒãããéå§ããæ¹æ³ã瀺ããŠããŸãã ãã®äºå®ã¯ã¿ã€ã ãªãŒã«èªèã§ãããIPv6ãã±ããã®ãããŒãå¢å ãããšããããã¯ãŒã¯äžã§éåžžã«çãäºä»¶ãçºçããå¯èœæ§ããããŸãã
ãããã¯ãŒã¯æ©åšã®ã¹ãã¬ã¹ãã¹ãã䜿çšããŠããããã¯ãŒã¯ããã€ã¹ã®åé¡ãåŒãèµ·ãããã©ãã£ãã¯ã®çš®é¡ãšéãç¹å®ãã ã³ã³ãããŒã«ãã¬ãŒã³ããªã·ã³ã°ã§åããã€ã¹ã«æé©ãªãããå€ãèšå®ããŸããã 以äžã®ã°ã©ãã¯ããããå€ãè¶ ããå€ã®ãžã£ã³ãã瀺ããŠããŸãã
補åã®ã¹ã€ããã®1ã€ã§CoPPïŒã³ã³ãããŒã«ãã¬ãŒã³ããªã·ã³ã°ïŒãç£èŠããäŸïŒ
ãã©ãã£ãã¯ãã±ããã®1ç§ãããã®ãããæ°ã ICMPã¯CPUã§åŠçãããŸãã
UDPãã±ããã
ãããã®ææšã芳å¯ããããšã§ãããã»ããµã®è² è·ã®å¢å ãé²ãããããã¯ãŒã¯ã®å®å®æ§ãç¶æã§ããŸãã ä»ã®ç£èŠããŒã¿ãšåæ§ã«ãCactiã䜿çšããŠå±¥æŽãåéããNagiosã䜿çšããŠã¢ãã¿ãŒã«çŸåšã®ç¶æ³ã衚瀺ããŸãã
RAMç£èŠ
ã©ã³ãã ã¢ã¯ã»ã¹ã¡ã¢ãªã®å Žåã®æãå±éºãªç¶æ³ã®1ã€ã¯ãã¡ã¢ãªãªãŒã¯ã§ãã çãééïŒæ¥ãé±ïŒã§ã空ãã¡ã¢ãªã®é ããé¿ããããªãæžå°ãåã«æ°ä»ããªãå Žåããããããã¿ã€ã ãªãŒã«ãããé²æ¢ããã³æé€ããããšãéèŠã§ãã
ãã®åé¡ã¯ãCactiã§é·æçµ±èšãåéããããšã§éšåçã«è§£æ±ºã§ããŸãã ã¡ã¢ãªãªãŒããŒãããŒã®åŸåã远跡ããæ©åšãåèµ·åããããã®æè¡çãªãŠã£ã³ããŠãã¹ã±ãžã¥ãŒã«ã§ããŸãã æ®å¿µãªãããã»ãšãã©ã®å Žåãããã¯ãªãŒã¯ããåŠçãããå¯äžã®çµ¶å¯Ÿçãªæ¹æ³ã§ãã
ãããã¯ãŒã¯ã®å¯¿åœããã®å¥ã®äŸã次ã«ç€ºããŸãã
ãšã³ãžãã¢ã¯ãã¢ãã¿ãªã³ã°ã€ã³ãžã±ãŒã¿ã®æ¬¡ã®åæã§ãã¹ã€ããã®1ã€ã®ç©ºãã¡ã¢ãªéãåæžãããã€ããã¯ã¹ãçºèŠããŸããã å€æŽã¯çãæéééã§ã¯ã»ãšãã©æç¥ã§ããŸããã§ãããã1ãæãŸã§ã®æéã¹ã±ãŒã«ãå¢ãããšã空ãã¡ã¢ãªãã¹ã ãŒãºã«æžå°ããåŸåãçŸããŸããã ã¡ã¢ãªããã£ã±ãã«ãªããšãã«ãŒãã£ã³ã°ãããã³ã«ã®å¥åŠãªæ¯ãèããŸã§ãã¹ã€ããã®çµæã¯äºæž¬ã§ããŸããã ããšãã°ãäžéšã®ã«ãŒãã¯ãã€ããŒã«ã¢ããã¿ã€ãºãããªããªããŸãã ãŸãã¯ãVSSã·ã¹ãã äžã®ã©ã³ãã ãªãã¢ãªã³ã¯ã倱æãå§ããŸãã
äžèšã®ç¶æ³ã¯éåžžã«ããŸãçµãããŸããã ã客æ§ã®ãã¯ãã«åæããã¹ã€ããããªããŒãããŸããã
ããã§ã¯ãç¶ããŸãããã ãµããã³ã°ã©ãã¯ããªãŒã¯ã®æ£ç¢ºãªéå§æéãå€æããã®ã«åœ¹ç«ã¡ããã°ãæ¯èŒããããšã§ãåå ãèŠã€ããŠãæ²»çãããŸãã
RAMã®ããŒãããªã¯ãšã¹ãããŸãã
OIDïŒ 1.3.6.1.4.1.9.9.221.1.1.1.1.18.index
åçïŒ iso.3.6.1.4.1.9.9.221.1.1.1.1.18.52690955.1 = Counter64ïŒ2734644292
å€ã¯ããªãã¬ãŒãã£ã³ã°ã·ã¹ãã ã䜿çšããã¡ã¢ãªããŒã«ã®ãã€ãæ°ã瀺ããŸãã
Cactiã®RAMããŒãçµ±èšã
å€åäžã®ãšã³ãžãã¢ã¯ã ã¡ã¢ãªäœ¿çšéãã©ã¡ãŒã¿ãŒã䜿çšããŠãç°åžžãªããããã空ãã¡ã¢ãªãŒã®äžå®ã®å å¡«ã®åŸåããªãããšã確èªããŸãã Cactiã®ã°ã©ãã«ã¯ãããã»ã¹ã®ã¡ã¢ãªãå ¥å/åºåãåèšã¡ã¢ãªã空ãã¡ã¢ãª/å æã¡ã¢ãªã®éã衚瀺ãããŸãã
ã¹ã€ããã®ç©ºãRAMã®çŸåšã®å€ã¯ãNagiosããã¢ã³ããŒãããŠããŸãã
ã¹ã¯ãªãŒã³ã·ã§ããã®äœææã«ã¯ãOPã®45503272ãã€ããç¡æã§ãããæäœã®ãããå€ãèšå®ãããŠããŸããã èŠåã®å Žå-35651584ã39845888ãã€ãã®ç¯å²ãã¯ãªãã£ã«ã«ã®å Žå-0ã35651584ãã€ã
å°é¡ããŒãã¹
ç£èŠã·ã¹ãã ãç·æ¥äºæ ãã©ã®ããã«éç¥ãããã«ã€ããŠãããã€ãã®èšèãæžããŸãã
ç§ãã¡èªèº«ã®ããããã³ãã§ã¯ãè·åãšã³ãžãã¢ãç»é¢äžã®ã€ã³ãžã±ãŒã¿ãç£èŠããåªããä»äºãããŠãããããè¿œå ã®é»åã¡ãŒã«ãSMSéç¥ã䜿çšããŸããã äŸå€ã¯åã ã®éèŠãªææšã§ããããã®å€åã¯äººçèŠå ã«é¢ä¿ãªãããã«ç¥ãå¿ èŠããããŸãã ãããã®ã€ã³ãžã±ãŒã¿ã«å¯ŸããŠãé»åã¡ãŒã«ãŸãã¯SMSã¡ãŒãªã³ã°ãèšå®ããŸãã ã¯ã©ã€ã¢ã³ãã®èŠæ±ã«å¿ããŠãæäœããšã«åå¥ã®ã¢ã©ãŒããæ§æã§ããŸãã ããã§ã¯ãã¹ãŠãåå¥ã§ãã Nagiosã®ããããã®ãã©ã¡ãŒã¿ãŒãhardã«éãããšãã·ã¹ãã ã¯ãã®ããã«æ§æããããšããã£ãã«ãéããŠé¡§å®¢ã«éç¥ããŸãã
ãããŠããäžã€ã®äºçŽ°ãªããšã§ããã楜ããã§ãã ç£èŠã·ã¹ãã ã䜿çšãããšãã€ãã³ãã«è¿ éã«å¯Ÿå¿ã§ããã ãã§ãªããå€åäžã®ãŠãŒã¶ãŒãåé¡ãè¿ éã«è§£æ±ºã§ããããã«ãªããŸãã ãããè¡ãã«ã¯ããã¹ããŸãã¯NagiosãµãŒãã¹ã®æ瀺ãžã®ãªã³ã¯ãé 眮ããŸãã
æ瀺ãèšèŒããããªãœãŒã¹ãžã®ãªã³ã¯ã¯ãRedmineã䜿çšããæ瀺ãèšèŒããããã¬ããžããŒã¹ãšããŠããã¬ããããã¯ãã¢ã€ã³ã³ïŒãšã¯ã¹ãã©ãã¹ãããŒãã®è¡šç€ºïŒã®äžã«ãããŸãã ã¢ãã³ãã³ãã¯ãªã³ã¯ããã©ãããã©ãã«ã·ã¥ãŒãã£ã³ã°ã®ã¢ã¯ã·ã§ã³ã®ã·ãŒã±ã³ã¹ãæå®ã§ããŸãã ã¹ã¯ãªãŒã³ã·ã§ããã®å·ŠåŽã«ã¯é»è©±ã®åœ¢ã®åçãããããããããã®ãµãŒãã¹ã«è²¬ä»»ã®ãããŠããããèŠã€ããããšãã§ããŸãããŸããåé¡ãçºçããå Žåãã€ã³ã·ãã³ãã¯æ¬éšã®ãã®ãŠãããã«ãšã¹ã«ã¬ãŒãããŸãã
çµè«ãšããŠãCisco IOSããã³XEãªãã¬ãŒãã£ã³ã°ã·ã¹ãã ã«ãããSNMPãããã³ã«ïŒããŒãžã§ã³1ã2cãããã³3ïŒã®ããªãé倧ãªè匱æ§ã«æ³šæãåèµ·ããããšæããŸãã ãã®è匱æ§ã«ãããæ»æè ã¯ã·ã¹ãã ãå®å šã«å¶åŸ¡ããããæ»æããããã¹ãã®ãªãã¬ãŒãã£ã³ã°ã·ã¹ãã ã®åèµ·åãéå§ãããã§ããŸãã ã·ã¹ã³ã¯2017幎6æ29æ¥ã«è匱æ§ãçºè¡šãã7æäžæ¬ä»¥éã«ãªãªãŒã¹ãããæ°ãããœãããŠã§ã¢ãªãªãŒã¹ã§ã¯ããŒãºãããŸããã äœããã®çç±ã§äžæçãªè§£æ±ºçãšããŠãœãããŠã§ã¢ãæŽæ°ã§ããªãå Žåã¯ã次ã®MIBãç¡å¹ã«ããããšããå§ãããŸãã
- ADSL-LINE-MIB
- ALPS-MIB
- CISCO-ADSL-DMT-LINE-MIB
- CISCO-BSTUN-MIB
- CISCO-MAC-AUTH-BYPASS-MIB
- CISCO-SLB-EXT-MIB
- CISCO-VOICE-DNIS-MIB
- CISCO-VOICE-NUMBER-EXPANSION-MIB
- TN3270E-RT-MIB
ããã«ããããããã¯ãŒã¯ã€ã³ãã©ã¹ãã©ã¯ãã£ã®ããŒããŠã§ã¢ã®ç£èŠãçµäºããŸãã ã³ã¡ã³ãã§è³ªåããŠãã ããã次åã¯ãè«çã¬ãã«ã§ã®ãããã¯ãŒã¯ã€ã³ãã©ã¹ãã©ã¯ãã£ã®ç£èŠã«ã€ããŠèª¬æããŸãã