Re: rmon possibilities?

[Dave S. <D.T...@cs...>]

>                                                       essentially, the
> goal of all of this is to send out traps based on certain values being
> exceeded/reached elsewhere in the MIBs (so if someone knows of another way
> to do this, please advise!)...

This is actually one of the goals of the Distributed Management working
group (DisMan).   There are a series of MIBs (most specifically the
Event MIB) that are designed to provide exactly this facility.
   They build on the concepts of the RMON work, but are aimed at a more
general monitoring facility.

  And before you ask, no the UCD/Net-SNMP agent doesn't support these
either.  A number of people (including me) have been making noises about
implementing these MIBs, but it hasn't happened yet.
   But that's perhaps the most primising line of approach for your needs.
Full RMON support has a number of other knotty problems (like promiscuous
access and analysis of all network traffic).

Dave