Welcome to the Sophos User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

 
 
LinkBack Thread Tools Display Modes
Senior Member
Join Date: May 2003
Location: Vienna, Austria
Posts: 118
#11 (permalink)  
Old 08-20-2008, 07:41 AM
Default

So let's go back to this one.

I've updated the appliance to 7.290. The information is shown for now
but on the Monitoring - Resources page with the mouse over on the NET
only eth0 and eth1 are shown and on the Detailed page for this appliance
the same thing.

In the cache.dump in the Key: --> monitoring.resource the eth2 is missing.

I checked the appliance again and the eth2 is my external nic with type PPPoE.

On my ASG220 HA Cluster eth0 is a normal NIC, eth1 and eth7 is configured as a Bridge and eth3 is my cluster NIC.

I would say, that all NIC's should be shown, cause I want to now if there is a link or not.

Regards,
Henrik
megaposer's Avatar
Wizard
Join Date: May 2006
Location: Karlsruhe, Germany
Posts: 693
#12 (permalink)  
Old 08-20-2008, 10:49 AM
Default

Okay, that helps a bit, thanks.

1)

Per feature request in this UBB forum, only pure eth NICs are shown, everything else is excluded. Hence you will not see any bridge NICs. If you want to have that reversed, we would need to consider this for the next maintenance release after ASG V7.3.

2)

All interfaces of type eth which are contained in the file /etc/sysmond.ph on the respective device/appliance will be shown in the ACC after a short convergence period. If those interfaces are deactivated or deleted again, there is an issue that they are not removed from the /etc/sysmond.ph file during runtime. This will be fixed in a future maintenance release of ASG V7.3.

3)

As we depend on the contents of /etc/sysmond.ph for the monitoring of interfaces we cannot display any other information here. Additionally, it would not make sense to monitor interfaces you are not using. Hence, the monitoring only shows configured interfaces.

4)

Regarding bridge interfaces - I do not know whether the underlying eth interfaces are still included in the symond.ph file. If they are included, they should be reported and appear in the ACC. Additionally, your external PPPoE nic should show up, if it is included in the sysmond.ph file as underlying eth interface. Maybe I can ask you to send us the /etc/active_interfaces and /etc/sysmond.ph file from both devices in question (again?).

Thanks again for your excellent support and your patience.

Regards,
Henning
__________________
"Molest me not with this pocket calculator stuff."

Last edited by megaposer; 08-20-2008 at 11:48 AM.
Senior Member
Join Date: May 2003
Location: Vienna, Austria
Posts: 118
#13 (permalink)  
Old 08-20-2008, 11:08 AM
Default

Hi,

1) I do agree not to show a Bridged Interface in this list since you are also
showing the link state. But I think it is necessary to see all NIC's and there state even if they are part of a bridge.

2) I understand

3) I totally agree

4) My PPPoE Interface is listed in both /etc/active_interfaces and /etc/sysmond.ph but as ppp0 since this is the really interface. I still would
like to see this interface since this is also shown on the dashboard of the
appliance itself.

On my ASG HA Cluster the /etc/active_interfaces includes br0, eth0 and eth3. The same interfaces are shown in the sysmond.ph file. eth3 is not show in the ACC. I'll send the files to acc-beta@astaro.com

Regards,
Henrik
megaposer's Avatar
Wizard
Join Date: May 2006
Location: Karlsruhe, Germany
Posts: 693
#14 (permalink)  
Old 08-20-2008, 12:00 PM
Default

Hi,

thanks for the quick reaction. I have looked at the files and can report the following findings:

1) The basic eth interfaces making up the bridge are not contained in the active_interfaces or sysmond.ph files. Hence, we currently have no chance to report this data. We could only supply the monitoring info for the abstract br0 interface.

4) Same problem, the underlying eth interface is not reported.

As a possible workaround we can offer to report any interface contained in /etc/sysmond.ph except ipsecX interfaces, so you would at least see pppX and brX interfaces, although not the underlying ethX interfaces making them up.

Regarding the missing eth3 interface on your ASG 220 ... it should really be displayed and I am at loss why it is not working and I will reopen this as bug.

For all this effort you have had with this issue I award you four points (internally I am also awarding myself 8 points but I cannot use them for anything).

Thanks again Henrik!

Cheers,
Henning
__________________
"Molest me not with this pocket calculator stuff."
Senior Member
Join Date: May 2003
Location: Vienna, Austria
Posts: 118
#15 (permalink)  
Old 08-20-2008, 01:07 PM
Default

Hi Henning,

in that case I would suggest that the br0 and ppp0 interfaces are shown.
But what about if one link from the bridge is e.g. down? You wouldn't be
able to show it yellow or something similar right?

Thanks for the points.

Regards,
Henrik
megaposer's Avatar
Wizard
Join Date: May 2006
Location: Karlsruhe, Germany
Posts: 693
#16 (permalink)  
Old 08-20-2008, 01:18 PM
Default

Hi Henrik,

at the moment we cannot show this information. We will have to discuss this internally if the sysmond monitoring can be beefed up to show the underlying eth interfaces for bridges and point-to-point interfaces. We would have to check how this data would integrate in the Dashboard of the WebAdmin, because the sysmond information is reused here as well.

In any case, I will keep you posted on our decision and in which release the adjusted functionality will be available.

But look on the bright side: With the old ACC V1.4 you did not know anything about your interfaces or services on your devices/appliances

Cheers,
Henning
__________________
"Molest me not with this pocket calculator stuff."
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 07:19 AM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2015, Jelsoft Enterprises Ltd.

These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.