topic Re: system resources snmp monitoring in General Topics

system resources snmp monitoring

Laurent_Dormond — Thu, 12 Nov 2020 16:59:48 GMT

Hello,

We have sometimes occurencies of network outage because of particular trafic that leads to high load on packet descriptor and packet buffer on our PaloAlto PA-5220.

We would like to snmp monitor the following values from the output of CLI command : show running resource-monitor

packet descriptor (on-chip)
packet buffer

By using a monitoring solution like Nagios in order to provide graphes and put thresholds.

Any idea how to proceed ? I didn't find anything related to these items in the MIBs

Regards,

Laurent

Re: system resources snmp monitoring

OtakarKlier — Thu, 12 Nov 2020 22:45:57 GMT

Hello,

I suggest setting up snmpv3 and have the monitoring solution reach in and grab the data. Once the monitoring solution can authenticate to the PAN, it should provide you with the different options that solution can monitor. We dont use Nagios so I cant really provide further guidance on that front. Also for netflow, you cannot use the management interface.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-setup-operations/enable-snmp-monitoring

Hope this helps.

Re: system resources snmp monitoring

Laurent_Dormond — Fri, 13 Nov 2020 16:26:42 GMT

Hello,

Thanks for your answer.

Do you know which OIDs do I have to monitor in order to get the requested values (packet buffer and packet descriptor usage) ?

Indeed, I can't find any corresponding OID from all the supported MIB.

Regards,

Re: system resources snmp monitoring

OtakarKlier — Fri, 13 Nov 2020 22:33:39 GMT

Hello,

I do not sorry. However you can use a mib browser and see whats available.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/snmp-monitoring-and-traps/use-an-snmp-manager-to-explore-mibs-and-objects/identify-the-oid-for-a-system-statistic-or-trap

Cheers!

Re: system resources snmp monitoring

Abdul_Razaq — Mon, 16 Nov 2020 06:17:57 GMT

Hi @Laurent_Dormond ,

Check if the document https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaSCAS helps you.

You can monitor the CPU of management and data plane separately, but the memory OID is common.

Re: system resources snmp monitoring

RickyEfraimLie — Tue, 02 Jul 2024 09:09:30 GMT

i'm looking same information to get info of packet descriptor (on chip) from snmp but no luck so far. have you got what you looking for? please share.

Re: system resources snmp monitoring

RaymondLeeDOT — Tue, 03 Dec 2024 20:03:19 GMT

I found out that the MIB to poll is the standard HOST-RESOURCES-MIB. Take a look near the bottom of this page: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HBjNCAW

However, I've found that the SNMP-polled values for packet descriptor (on chip) are vastly different from the values returned by the CLI command 'show running resource-monitor'. I have a case open with Palo right now to investigate why that is.