| 1 | # snmpd.conf
|
|---|
| 2 |
|
|---|
| 3 | # First, map the community name (COMMUNITY) into a security name
|
|---|
| 4 | # (local and mynetwork, depending on where the request is coming
|
|---|
| 5 | # from):
|
|---|
| 6 |
|
|---|
| 7 | # sec.name source community
|
|---|
| 8 | com2sec local localhost public
|
|---|
| 9 | com2sec mynetwork 172.16.0.0/12 public
|
|---|
| 10 | com2sec mynetwork 10.0.0.0/8 public
|
|---|
| 11 | com2sec mynetwork 192.168.0.0/16 public
|
|---|
| 12 |
|
|---|
| 13 |
|
|---|
| 14 |
|
|---|
| 15 | # Second, map the security names into group names:
|
|---|
| 16 |
|
|---|
| 17 | # sec.model sec.name
|
|---|
| 18 | group MyRWGroup v1 local
|
|---|
| 19 | group MyRWGroup v2c local
|
|---|
| 20 | group MyRWGroup usm local
|
|---|
| 21 | group MyROGroup v1 mynetwork
|
|---|
| 22 | group MyROGroup v2c mynetwork
|
|---|
| 23 | group MyROGroup usm mynetwork
|
|---|
| 24 |
|
|---|
| 25 |
|
|---|
| 26 | # Third, create a view for us to let the groups have rights to:
|
|---|
| 27 |
|
|---|
| 28 | # incl/excl subtree mask
|
|---|
| 29 | view all included .1 80
|
|---|
| 30 |
|
|---|
| 31 |
|
|---|
| 32 | # Finally, grant the 2 groups access to the 1 view with different
|
|---|
| 33 | # write permissions:
|
|---|
| 34 |
|
|---|
| 35 | # context sec.model sec.level match read write notif
|
|---|
| 36 | access MyROGroup "" any noauth exact all none none
|
|---|
| 37 | access MyRWGroup "" any noauth exact all all none
|
|---|
| 38 |
|
|---|
| 39 |
|
|---|
| 40 | # System contact information
|
|---|
| 41 |
|
|---|
| 42 | sysLocation "Somewhere in or near Leiden"
|
|---|
| 43 | sysContact "Stichting Wireless Leiden <beheer@lijst.wirelessleiden.nl> / +31 71 5139817"
|
|---|
| 44 |
|
|---|
| 45 |
|
|---|
| 46 | # Process checks.
|
|---|
| 47 |
|
|---|
| 48 | # name max min
|
|---|
| 49 | proc lvrouted.opt 1 1
|
|---|
| 50 | proc sshd 8 1
|
|---|
| 51 | proc syslogd 1 1
|
|---|
| 52 | proc ntpd 1 1
|
|---|
| 53 | proc snmpd 1 1
|
|---|
| 54 | proc dhcpd 1 1
|
|---|
| 55 | proc pen 1 1
|
|---|
| 56 | proc cron 2 1
|
|---|
| 57 | proc named 1 1
|
|---|
| 58 |
|
|---|
| 59 |
|
|---|
| 60 | # disk checks
|
|---|
| 61 |
|
|---|
| 62 | # path min
|
|---|
| 63 | #disk / 90%
|
|---|
| 64 | #disk /var 80%
|
|---|
| 65 | #disk /usr 80%
|
|---|
| 66 | #disk /tmp 60%
|
|---|
| 67 | includeAllDisks 85%
|
|---|
| 68 |
|
|---|
| 69 |
|
|---|
| 70 | # load average checks
|
|---|
| 71 |
|
|---|
| 72 | # 1max 5max 15max
|
|---|
| 73 | load 12 14 14
|
|---|
| 74 |
|
|---|
| 75 |
|
|---|
| 76 | # Pass through control
|
|---|
| 77 |
|
|---|
| 78 | # miboid exec-command
|
|---|
| 79 | extend .1.3.6.1.4.1.2021.70 dhcp-users /bin/sh -c "cat /var/db/dnsmasq.leases \| awk '{ print $1,$2,$3 }'"
|
|---|
| 80 | extend .1.3.6.1.4.1.2021.71 portal-users /bin/sh -c "cat /var/db/clients \| awk '{ print $1,$2,$3 }'"
|
|---|
| 81 | extend .1.3.6.1.4.1.2021.72 arp-users /bin/sh -c "cat /var/db/connect.gone \| awk '{ print $1,$2,$3,$4,$5 }'"
|
|---|
| 82 | extend .1.3.6.1.4.1.2012.73 proxy-users bin/sh -c "cat /var/log/tinyproxy.log \| grep -v 2cnode \| awk '/.wleiden.net/ { print $2,$3,$11 }' \| tr -d '[]' \| sort \| uniq "
|
|---|
| 83 |
|
|---|
| 84 | extend .1.3.6.1.4.1.2021.80 etc-checksum /bin/sh -c "cat `find /etc` \| md5"
|
|---|
| 85 | extend .1.3.6.1.4.1.2021.81 local-list /bin/sh -c "find /usr/local/ \| wc -l"
|
|---|
| 86 | extend .1.3.6.1.4.1.2021.82 build-box /bin/sh -c "uname -v \| awk '{ print $10 }' \| cut -d \\: -f 1"
|
|---|
| 87 | extend .1.3.6.1.4.1.2021.83 freebsd-ver /bin/sh -c "uname -r"
|
|---|
| 88 | extend .1.3.6.1.4.1.2021.84 wl-ver /bin/sh -c "cat /tools/wl-release.txt | awk '/Revision/ {print $2 }' "
|
|---|
| 89 | extend .1.3.6.1.4.1.2021.85 wl-date /bin/sh -c "cat /tools/wl-release.txt | awk '/Changed\ Date/ {print $4,$5 }'"
|
|---|
| 90 |
|
|---|
| 91 | extend .1.3.6.1.4.1.2021.90 uptime /bin/sh -c "uptime"
|
|---|
| 92 | extend .1.3.6.1.4.1.2021.91 vmstat /bin/sh -c "vmstat 1 2"
|
|---|
| 93 | extend .1.3.6.1.4.1.2021.92 uptime /bin/sh -c "uptime \| awk '{ split($5,a,\":\"); print ($3*60*24+a[1]*60+a[2]) }'"
|
|---|
| 94 | extend .1.3.6.1.4.1.2021.93 soa /bin/sh -c "drill +short soa wleiden.net @localhost \| awk '{ print $3 }' \| tail -1"
|
|---|
| 95 | extend .1.3.6.1.4.1.2021.94 physmem /bin/sh -c "sysctl -n hw.physmem"
|
|---|
| 96 | extend .1.3.6.1.4.1.2021.95 internet-status /bin/sh -c "awk '/internet/ {print}' /tmp/network.status"
|
|---|
| 97 | extend .1.3.6.1.4.1.2021.96 proxy-status /bin/sh -c "awk '/proxy/ {print}' /tmp/network.status"
|
|---|
| 98 |
|
|---|