Graphing with MRTG something other than active leases?

[Brad Dameron]

Might want to look at ntop. It's a non-intrusive way to do it live. It can be dumped to RRD graphs. Here's an example:
 
http://www.ntopsupport.com/192.168.42.35.html
 
Brad Dameron
Clearw're

________________________________

From: dhcp-users-bounce at isc.org on behalf of Frank Bulk
Sent: Tue 10/14/2008 6:21 PM
To: dhcp-users at isc.org
Subject: RE: Graphing with MRTG something other than active leases?



Rather than pipe it to 'wc', just use the '-c' option in grep.

Frank

-----Original Message-----
From: dhcp-users-bounce at isc.org [mailto:dhcp-users-bounce at isc.org] On Behalf
Of Jerimiah Cole
Sent: Friday, October 10, 2008 9:40 AM
To: dhcp-users at isc.org
Subject: Re: Graphing with MRTG something other than active leases?

On Fri, 2008-10-10 at 12:58 +0200, Leif Arne Neset wrote:
> Nomad skrev:
> > Is anybody else using MRTG to create graphs for ISC DHCP?  I have graphs
for
> > the active and known leases but I've been asked to do the same for the
> > number of DHCPDISCOVER and other messages.  We've had several instances
of
> > clients going nuts and flooding our servers with DHCPDISCOVER and we'd
like
> > to keep track of this.
> > Any thoughts?  Suggestions?  Currently we're running v3.1.0 on a redhat
> > enterprise v4 server.
> >
>
> We are starting a small script from the MRTG server that uses tcpdump,
> on the dhcp servers, for 10 sec. to count the number of incoming dhcp
> packets and returns a value to MRTG.

That will only capture a small snapshot of traffic, and ignores
potential peaks across the entire interval that MRTG is averaging
against (usually 5 minutes).  Why not just:

grep DISCOVER /var/log/dhcp.log | wc -l

I think MRTG is smart enough to realize when the log rotates and the
count plummets.

Jerimiah






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20081014/f0ff991c/attachment.html>