system resources snmp monitoring

[Laurent_Dormond]

Hello,

We have sometimes occurencies of network outage because of particular trafic that leads to high load on packet descriptor and packet buffer on our PaloAlto PA-5220.

We would like to snmp monitor the following values from the output of CLI command : show running resource-monitor

• packet descriptor (on-chip)
• packet buffer

By using a monitoring solution like Nagios in order to provide graphes and put thresholds.

Any idea how to proceed ? I didn't find anything related to these items in the MIBs

Regards,

Laurent

[OtakarKlier]

Hello,

I suggest setting up snmpv3 and have the monitoring solution reach in and grab the data. Once the monitoring solution can authenticate to the PAN, it should provide you with the different options that solution can monitor. We dont use Nagios so I cant really provide further guidance on that front. Also for netflow, you cannot use the management interface.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/device/device-setup-operation...

Hope this helps.

[Laurent_Dormond]

Hello,

Thanks for your answer.

Do you know which OIDs do I have to monitor in order to get the requested values (packet buffer and packet descriptor usage) ?

Indeed, I can't find any corresponding OID from all the supported MIB.

Regards,

[OtakarKlier]

Hello,

I do not sorry. However you can use a mib browser and see whats available.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/snmp-monitoring-and-traps/use-a...

Cheers!

[Abdul_Razaq]

Hi @Laurent_Dormond ,

Check if the document https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaSCAS helps you.

You can monitor the CPU of management and data plane separately, but the memory OID is common.

[RickyEfraimLie]

i'm looking same information to get info of packet descriptor (on chip) from snmp but no luck so far. have you got what you looking for? please share.