RE: [Devmon] Cisco switchport in monitor mode

[Schwimmer, E. E *H. <EE...@hs...>]

We have something similar here (firewall/IDS boxes, port is in monitor,
but in SNMP
it shows up as Up/Down).

The way to get around this is to use the except() option on the DEVMON
tag
in your bb-hosts file;  this is outlined in the docs/USING (or
docs/using.html).

A quick example.  Say our bb-hosts file looks like:

10.0.0.1   7606router # DEVMON

and our monitor ports were FastEthernet 2/12 and FastEthernet 2/14, we
could
put them into "no alarm" mode (which means that Devmon will monitor and
display their
status, but will not alarm on them) by changing the bb-hosts file to
look like this:

10.0.0.1   7606router # DEVMON:except(if_stat;ifName;na:Fa2/12|Fa2/14)

The statement after the 'na:' is a regular expression, telling the 'no
alarm'
exception (hence the 'na:') not to alarm on any table entries whose
primary
alias named ifName contains data that matches the strings 'Fa/12' or
'Fa/14'
(the savvy regexp user could rewrite the na exception to read
'na:Fa2/1[24]').

If you wanted to completely ignore the interfaces (don't display, don't
alarm), you could use 'i' (ignore) instead of 'na'.  You could also
apply
the exception to all tests (instead of if_stat) by replacing the if_stat
variable with 'all'.  For example, to ignore interface Fa2/12 on all=20
repeater tables:

10.0.0.1   7606router # DEVMON:except(all;ifName;i:Fa2/12)

HTH,
-Eric

> -----Original Message-----
> From: dev...@li...=20
> [mailto:dev...@li...] On Behalf=20
> Of Bill Finizia
> Sent: Monday, February 27, 2006 4:56 PM
> To: dev...@li...
> Subject: [Devmon] Cisco switchport in monitor mode
>=20
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>=20
> Hi,
>=20
> I've gotten Devmon up and running on my 6509 (sup720) and it is =20
> running great!  My only question is:  I have a number of ports in =20
> "monitor" mode for my IDS stuff and Devmon is altering on=20
> them.  I've =20
> fiddled about with it a bit but have been unable to figure=20
> out how to =20
> add in this mode.
>=20
> BillF-
>=20
>=20
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.1 (Darwin)
>=20
> iD8DBQFEA3WP/Ol32NgyEZgRAnp9AJ4/BxN8+8G1swL+j9wtc2LMR8oDvQCgkpjA
> hNRic2rDNbefywFoU96Ds0I=3D
> =3DA6pi
> -----END PGP SIGNATURE-----
>=20
>=20
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking=20
> scripting language
> that extends applications into web and mobile media. Attend=20
> the live webcast
> and join the prime developer group breaking into this new=20
> coding territory!
> http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D110944&bid=3D241720&
> dat=3D121642
> _______________________________________________
> Devmon-support mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devmon-support
>=20