1 | # snmpd.conf
|
---|
2 |
|
---|
3 | # First, map the community name (COMMUNITY) into a security name
|
---|
4 | # (local and mynetwork, depending on where the request is coming
|
---|
5 | # from):
|
---|
6 |
|
---|
7 | # sec.name source community
|
---|
8 | com2sec local localhost public
|
---|
9 | com2sec mynetwork 172.16.0.0/12 public
|
---|
10 | com2sec mynetwork 10.0.0.0/8 public
|
---|
11 | com2sec mynetwork 192.168.0.0/16 public
|
---|
12 |
|
---|
13 |
|
---|
14 |
|
---|
15 | # Second, map the security names into group names:
|
---|
16 |
|
---|
17 | # sec.model sec.name
|
---|
18 | group MyRWGroup v1 local
|
---|
19 | group MyRWGroup v2c local
|
---|
20 | group MyRWGroup usm local
|
---|
21 | group MyROGroup v1 mynetwork
|
---|
22 | group MyROGroup v2c mynetwork
|
---|
23 | group MyROGroup usm mynetwork
|
---|
24 |
|
---|
25 |
|
---|
26 | # Third, create a view for us to let the groups have rights to:
|
---|
27 |
|
---|
28 | # incl/excl subtree mask
|
---|
29 | view all included .1 80
|
---|
30 |
|
---|
31 |
|
---|
32 | # Finally, grant the 2 groups access to the 1 view with different
|
---|
33 | # write permissions:
|
---|
34 |
|
---|
35 | # context sec.model sec.level match read write notif
|
---|
36 | access MyROGroup "" any noauth exact all none none
|
---|
37 | access MyRWGroup "" any noauth exact all all none
|
---|
38 |
|
---|
39 |
|
---|
40 | # System contact information
|
---|
41 |
|
---|
42 | sysLocation "Somewhere in or near Leiden"
|
---|
43 | sysContact "Stichting Wireless Leiden <beheer@lijst.wirelessleiden.nl> / +31 71 5139817"
|
---|
44 |
|
---|
45 |
|
---|
46 | # Process checks.
|
---|
47 |
|
---|
48 | # name max min
|
---|
49 | proc lvrouted 1 1
|
---|
50 | proc sshd 8 1
|
---|
51 | proc syslogd 1 1
|
---|
52 | proc ntpd 1 1
|
---|
53 | proc snmpd 1 1
|
---|
54 | proc dhcpd 1 1
|
---|
55 | proc pen 1 1
|
---|
56 | proc cron 2 1
|
---|
57 | proc named 1 1
|
---|
58 |
|
---|
59 |
|
---|
60 | # disk checks
|
---|
61 |
|
---|
62 | # path min
|
---|
63 | #disk / 90%
|
---|
64 | #disk /var 80%
|
---|
65 | #disk /usr 80%
|
---|
66 | #disk /tmp 60%
|
---|
67 | includeAllDisks 85%
|
---|
68 |
|
---|
69 |
|
---|
70 | # load average checks
|
---|
71 |
|
---|
72 | # 1max 5max 15max
|
---|
73 | load 12 14 14
|
---|
74 |
|
---|
75 |
|
---|
76 | # Pass through control
|
---|
77 |
|
---|
78 | # miboid exec-command
|
---|
79 | extend .1.3.6.1.4.1.2021.70 dhcp-users /bin/sh -c "cat /var/db/dnsmasq.leases \| awk '{ print $1,$2,$3 }'"
|
---|
80 | extend .1.3.6.1.4.1.2021.71 portal-users /bin/sh -c "cat /var/db/clients \| awk '{ print $1,$2,$3 }'"
|
---|
81 | extend .1.3.6.1.4.1.2021.72 arp-users /bin/sh -c "cat /var/db/connect.gone \| awk '{ print $1,$2,$3,$4,$5 }'"
|
---|
82 | extend .1.3.6.1.4.1.2012.73 proxy-users bin/sh -c "cat /var/log/tinyproxy.log \| grep -v 2cnode \| awk '/.wleiden.net/ { print $2,$3,$11 }' \| tr -d '[]' \| sort \| uniq "
|
---|
83 |
|
---|
84 | extend .1.3.6.1.4.1.2021.80 etc-checksum /bin/sh -c "cat `find /etc` \| md5"
|
---|
85 | extend .1.3.6.1.4.1.2021.81 local-list /bin/sh -c "find /usr/local/ \| wc -l"
|
---|
86 | extend .1.3.6.1.4.1.2021.82 build-box /bin/sh -c "uname -v \| awk '{ print $10 }' \| cut -d \\: -f 1"
|
---|
87 | extend .1.3.6.1.4.1.2021.83 freebsd-ver /bin/sh -c "uname -r"
|
---|
88 | extend .1.3.6.1.4.1.2021.84 wl-ver /bin/sh -c "cat /tools/wl-release.txt | awk '/Revision/ {print $2 }' "
|
---|
89 | extend .1.3.6.1.4.1.2021.85 wl-date /bin/sh -c "cat /tools/wl-release.txt | awk '/Changed\ Date/ {print $4,$5 }'"
|
---|
90 |
|
---|
91 | extend .1.3.6.1.4.1.2021.90 uptime /bin/sh -c "uptime"
|
---|
92 | extend .1.3.6.1.4.1.2021.91 vmstat /bin/sh -c "vmstat 1 2"
|
---|
93 | extend .1.3.6.1.4.1.2021.92 uptime /bin/sh -c "uptime \| awk '{ split($5,a,\":\"); print ($3*60*24+a[1]*60+a[2]) }'"
|
---|
94 | extend .1.3.6.1.4.1.2021.93 soa /bin/sh -c "drill +short soa wleiden.net @localhost \| awk '{ print $3 }' \| tail -1"
|
---|
95 | extend .1.3.6.1.4.1.2021.94 physmem /bin/sh -c "sysctl -n hw.physmem"
|
---|
96 | extend .1.3.6.1.4.1.2021.95 internet-status /bin/sh -c "awk '/internet/ {print}' /tmp/network.status"
|
---|
97 | extend .1.3.6.1.4.1.2021.96 proxy-status /bin/sh -c "awk '/proxy/ {print}' /tmp/network.status"
|
---|
98 |
|
---|