IPv6_mrtg

1. IPv6 mrtg 流量監測 中央大學 電算中心 楊素秋 民國 100 年 11 月

5. 1. 建構 IPv6 Network (cont.)

9. 1. 建構 IPv6 Network (cont.)

10. 1. 建構 IPv6 Network (cont.)

13. 3. Cisco router 之 IPv6 MIB Get some ipv6 traffic param. # show interface accounting ” GigabitEthernet2/8 ### 國立中央大學 ### Protocol Pkts In Chars In Pkts Out Chars Out IP 1654364275530 1003146055719738 885231569418 590190241240774 DEC MOP 0 0 48709 6283461 ARP 305354 18321240 739678 82843936 IPv6 17637976 9652740892 3709526564 4112091137764 GigabitEthernet2/9 TYC-to-CYCU (140.135.0.0) Protocol Pkts In Chars In Pkts Out Chars Out IP 772909362921 366967798769448 580600995235 312548112347136 DEC MOP 0 0 48711 6283719 ARP 24395 1463700 69849 7823088 IPv6 57 5554 154624 26273960

14. 3. Cisco router 之 IPv6 MIB (cont.) IP-MIB.oid . iso (1) . org (3) . dod (6) . internet (1) . mgmt (2) . mib-2 (1) . ip (4) . ipTrafficStats (31) (6509 router : Not implement) "ipIfStatsEntry" "1.3.6.1.2.1.4.31.3.1" “ ipIfStatsIPVersion" "1.3.6.1.2.1.4.31.3.1.1" “ ipIfStatsIfIndex" "1.3.6.1.2.1.4.31.3.1.2" … "ipIfStatsInOctets" "1.3.6.1.2.1.4.31.3.1.5" "ipIfStatsHCInOctets" "1.3.6.1.2.1.4.31.3.1.6" … "ipIfStatsOutOctets" "1.3.6.1.2.1.4.31.3.1.32" "ipIfStatsHCOutOctets" "1.3.6.1.2.1.4.31.3.1.33"

15. 3. Cisco router 之 IPv6 MIB (cont.) IPV6-MIB.oid (6509 router : Not implement) "ipv6IfEntry" "1.3.6.1.2.1.55.1.5.1" "ipv6IfIndex" "1.3.6.1.2.1.55.1.5.1.1" "ipv6IfDescr" "1.3.6.1.2.1.55.1.5.1.2" "ipv6IfIdentifier" "1.3.6.1.2.1.55.1.5.1.6" … . "ipv6IfStatsEntry" "1.3.6.1.2.1.55.1.6.1" "ipv6IfStatsInReceives" "1.3.6.1.2.1.55.1.6.1.1“ … "ipv6IfStatsOutForwDatagrams" "1.3.6.1.2.1.55.1.6.1.10" "ipv6IfStatsOutRequests" "1.3.6.1.2.1.55.1.6.1.11“ …

16. 3. Cisco router 之 IPv6 MIB (cont.) RFC4293 (  rfc-2011) (6509 router : Not implement) IpIfStatsEntry ::= { ipIfStatsIPVersion InetVersion , ipIfStatsIfIndex InterfaceIndex, ipIfStatsInReceives Counter32, ipIfStatsHCInReceives Counter64, ipIfStatsInOctets Counter32, ipIfStatsHCInOctets Counter64, ipIfStatsInHdrErrors Counter32, ipIfStatsInNoRoutes Counter32, ipIfStatsInAddrErrors Counter32, … . ipIfStatsOutOctets Counter32, ipIfStatsHCOutOctets Counter64, … . , ipIfStatsRefreshRate Unsigned32 }

17. 3. Cisco router 之 IPv6 MIB (cont.) OLD-CISCO-INTERFACES-MIB.oid (Cisco-SMI or SNMPV2-SMI) "locIfipInPkts" "1.3.6.1.4.1.9.2.2.1.1.42" "locIfipOutPkts" "1.3.6.1.4.1.9.2.2.1.1.43" "locIfipInOctets" "1.3.6.1.4.1.9.2.2.1.1.44" "locIfipOutOctets" "1.3.6.1.4.1.9.2.2.1.1.45 " ------------------------------------------ SNMPv2-SMI::enterprises.9.2.2.1.1.45.82 = Counter32: 2223932009 SNMPv2-SMI::enterprises.9.2.2.1.1.45.83 = Counter32: 2411945666 SNMPv2-SMI::enterprises.9.2.2.1.1.45.84 = Counter32: 0 SNMPv2-SMI::enterprises.9.2.2.1.1.45.85 = Counter32: 2121510125 SNMPv2-SMI::enterprises.9.2.2.1.1.45.86 = Counter32: 3949812438 SNMPv2-SMI::enterprises.9.2.2.1.1.45.87 = Counter32: 497226196 SNMPv2-SMI::enterprises.9.2.2.1.1.45.88 = Counter32: 0 SNMPv2-SMI::enterprises.9.2.2.1.1.45.89 = Counter32: 2595499782 SNMPv2-SMI::enterprises.9.2.2.1.1.45.90 = Counter32: 1402998647 SNMPv2-SMI::enterprises.9.2.2.1.1.45.110 = Counter32: 0 SNMPv2-SMI::enterprises.9.2.2.1.1.45.111 = Counter32: 83559617 SNMPv2-SMI::enterprises.9.2.2.1.1.45.112 = Counter32: 2700879959

18. 3. Cisco router 之 IPv6 MIB (cont.) CISCO-SWITCH-ENGINE-MIB . iso (1) . org (3) . dod (6) . internet (1) . private (4) . enterprises (1) . cisco (9) . ciscoMgmt (9) . ciscoSwitchEngineMIB (97) . cseMIBObjects (1) . cseL3Objects (4) -- cseL3Objects (4) + -- cseL3StatsTable (1) - -- cseL3VlanStatsTable (2) | - -- cseL3VlanStatsEntry (1) object Details | | -- cseL3VlanIndex (1) | | -- cseL3VlanInPkts (2) | | -- cseL3VlanInOctets (3) | | -- cseL3VlanOutPkts (4) | | -- cseL3VlanOutOctets (5) | | -- cseL3VlanInUnicastPkts (6) | | -- cseL3VlanInUnicastOctets (7) | | -- cseL3VlanOutUnicastPkts (8) | | -- cseL3VlanOutUnicastOctets (9) |

19. SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.1.1006 = Counter32: 3540473092 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.1.2006 = Counter32: 1649206378 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.1.3021 = Counter32: 3278444802 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.1.4008 = Counter32: 2865104007 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.1.5006 = Counter32: 1692158510 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.2.1006 = Counter64: 7828674924853378 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.2.2006 = Counter64: 5894807785811313 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.2.3021 = Counter64: 109506806884008 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.2.4008 = Counter64: 5713000850624076 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.2.5006 = Counter64: 1415152122007054 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.3.1006 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.3.2006 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.3.3021 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.3.4008 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.3.5006 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.4.1006 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.4.2006 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.4.3021 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.4.4008 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.4.5006 = Counter32: 0 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.5.1006 = Gauge32: 130943 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.5.2006 = Gauge32: 76630 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.5.3021 = Gauge32: 106838 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.5.4008 = Gauge32: 130944 SNMPv2-SMI::enterprises.9.9.97.1.4.1.1.5.5006 = Gauge32: 2 3. Cisco router 之 IPv6 MIB (cont.)

23. 4. 區網 IPv6 mrtg 流量監看 (cont.) FileReader fileReader = new FileReader("Data/10211200"); String patternStr = "Tunnel|FastEthernet|GigabitEthernet|Vlan"; String patternStr_ipv6 = " IPv6"; Scanner scan = new Scanner(fileReader);//get user input while (scan.hasNext()) { String passwordStr = scan.nextLine(); Pattern p = Pattern.compile(patternStr); Pattern p6 = Pattern.compile(patternStr_ipv6); Matcher m = p.matcher(passwordStr); Matcher m6 = p6.matcher(passwordStr); if ( m.find()) { if_index=passwordStr; stat_if = true; } if ( m6.find()) { ip_traffic=passwordStr; stat_ipv6=true; } if ( stat_if && stat_ipv6 ) { temp_if = if_index.split("s+"); temp_ipv6 = ip_traffic.split("s+"); System.out.println( temp_if[0] + " :: " + temp_ipv6[3] + " " + temp_ipv6[5]); stat_if = false ; stat_ipv6 = false ; } }

25. 4. 區網 IPv6 mrtg 流量監看 (cont.) if ( stat_if && stat_ipv6 ) { temp_if = if_index.split("s+"); // System.out.println( if_index); // System.out.println( temp_if); temp_ipv6 = ip_traffic.split("s+"); // System.out.println( ip_traffic); // System.out.println( temp_if); out.write( temp_if[0] + " :: " + temp_ipv6[3] + " " + temp_ipv6[5] + ""); // System.out.println( temp_if[0] + " :: " + temp_ipv6[2] + " " + temp_ipv6[3]); stat_if = false ; stat_ipv6 = false ; query1 = " insert into counter (ip, in_counter, out_counter,time) values (?,?,?,?)"; preparedStatement1 = connection.prepareStatement(query1); preparedStatement1.setString(1,temp_if[0]); preparedStatement1.setString(2,temp_ipv6[3]); preparedStatement1.setString(3, temp_ipv6[5]); // java.sql.Date sqlDate = new java.sql.Date(new java.util.Date().getTime()); preparedStatement1.setString(4,cur_time); preparedStatement1.executeUpdate(); } //end_if_ipv6 } // end_while scan.close(); out.close();

29. 4. 區網 IPv6 mrtg 流量監看 (cont.) ## FileName: smurf.conf # Created by … WorkDir: /opt/apache-tomcat-6.0.32/webapps/ROOT/smurf Options[_]: growright, nopercent Language: UTF-8 Target[smurf_km]:.1.3.6.1.2.1.2.2.1.11. 65 &.1.3.6.1.2.1.2.2.1.17. 65 :publicxx@203.72.x.x: SetEnv[smurf_km]: MRTG_INT_DESCR=&quot; 金門縣網 &quot; MaxBytes[smurf_km]: 125000000 Title[smurf_km]: IP Packets : TANET_Km PageTop[smurf_km]: <H3>IP Packets : TANET- 金門縣網 GE 3/7</H3> YLegend[smurf_km]: IP Packet Count Target[smurf_mts]:.1.3.6.1.2.1.2.2.1.11. 66 &.1.3.6.1.2.1.2.2.1.17. 6 6:publicxx@203.72.x.x: SetEnv[smurf_mts]: MRTG_INT_DESCR=&quot; 連江縣網 &quot; MaxBytes[smurf_mts]: 125000000 Title[smurf_mts]: IP Packets : TANET_MTS PageTop[smurf_mts]: <H3>IP Packets : TANet-- 連江縣網 GE 3/8</H3> YLegend[smurf_mts]: IP Packet Count Mrtg.conf 例

31. 4. 區網 IPv6 mrtg 流量監看 (cont.) mrtg.ipv6_28.sh #!/bin/bash # 提供 ipv6 inoctet/outoctet to mrtg configure y=`date +%Y` d=`date +%m%d%H` m=`date +%M` m=`expr $m / 10` d=&quot;$d&quot;&quot;$m&quot;&quot;0&quot; # 1. ipv6 inoctet/outoct echo `cat /home/Expect/IPv6/$d | grep GigabitEthernet2/8 |awk '{print $3}'` echo `cat /home/Expect/IPv6/$d | grep GigabitEthernet2/8 |awk '{print $4}'` # 2. UpTime & interface name UPtime=`/usr/bin/uptime | awk '{print $3 &quot; &quot; $4 &quot; &quot; $5}'` echo $UPtime echo &quot;GigabitEthernet2/8&quot;

32. 4. 區網 IPv6 mrtg 流量監看 (cont.) ## # m h dom mon dow command ## 0 12 * * * /usr/sbin/ntpdate -s ntp2.usno.navy.mil > /dev/null & ## # Probe IPv6 Traffic from TYRC router */10 * * * * /home/Expect/expect.sh >> /home/Expect/log_ ## # Extract IPv6 inOctet/outOctet counter for each interfaces */10 * * * * /home/Expect/run.sh >> /home/Expect/logs/expect ## # Cron execute mrtg 8-58/10 * * * * env LANG=C /home/mrtg-2.17.2/bin/mrtg /home/mrtg-2.17.2/bin/mrtg.cfg ## crontab

33. 4. 區網 IPv6 mrtg 流量監看 (cont.) http://ayang.tyc.edu.tw/mrtg/

36. 感謝你的耐心聆聽 ! Q&A