I sure would be nice if NPM had a custom poller and parser to monitor output from the cli of both routers & servers. For my particular need there are some stats for the Cisco crypto engine that are only accessible from the cli. For whatever reason Cisco has not made them accessible via SNMP. It sure would be nice to have some method to monitor these stats because they could indicate packet loss over our VPN encrypted WAN.
There are probably other instances were some stats are just not available via SNMP and having some method to pull them (even if its more CPU intense) would be better than none.
It should be fairly straight forward to do.
- specify cli command ie (show crypto engine accelerator stat)
- enter items with regex patten your looking for ie (ppq full error : #)
Then it would be great to have all the basic options of alerting and reporting on the changes in these values. It should be pretty easy to parse that type of data from the output generated by this command.
show crypto engine accelerator statDevice: AIM-VPN/SSL-2Location: AIM Slot: 0Virtual Private Network (VPN) Module in slot : 0 Statistics for Hardware VPN Module since the last clear of counters 132842 seconds ago 15324741 packets in 15324741 packets out 7986732824 bytes in 8040460120 bytes out 115 paks/sec in 115 paks/sec out 480 Kbits/sec in 484 Kbits/sec out 8222687 packets decrypted 7102032 packets encrypted 5488079608 bytes before decrypt 2552352944 bytes encrypted 5105154008 bytes decrypted 2881550480 bytes after encrypt 0 packets decompressed 0 packets compressed 0 bytes before decomp 0 bytes before comp 0 bytes after decomp 0 bytes after comp 0 packets bypass decompr 0 packets bypass compres 0 bytes bypass decompres 0 bytes bypass compressi 0 packets not decompress 0 packets not compressed 0 bytes not decompressed 0 bytes not compressed 1.0:1 compression ratio 1.0:1 overall 14170 commands out 14170 commands acknowledged Last 5 minutes: 5513 packets in 5513 packets out 18 paks/sec in 18 paks/sec out 27740 bits/sec in 27284 bits/sec out 327327 bytes decrypted 566036 bytes encrypted 8846 Kbits/sec decrypted 15298 Kbits/sec encrypted 1.0:1 compression ratio 1.0:1 overallErrors: ppq full errors : 1 ppq rx errors : 0 cmdq full errors : 0 cmdq rx errors : 0 ppq down errors : 0 cmdq down errors : 0 no buffer : 22 replay errors : 0 dest overflow : 0 authentication errors : 0 Other error : 0 Raw Input Underrun : 0 IPSEC Unsupported Option: 0 IPV4 Header Length : 0 ESP Pad Length : 0 IPSEC Decompression : 0 AH ESP seq mismatch : 0 AH Header Length : 0 AH ICV Incorrect : 0 IPCOMP CPI Mismatch : 0 IPSEC ESP Modulo : 0 Unexpected IPV6 Extensio: 0 Unexpected Protocol : 0 Dest Buf overflow : 0 IPSEC Pkt is fragment : 0 IPSEC Pkt src count : 0 Invalid IP Version : 0 Unwrappable : 0 SSL Output overrun : 0 SSL Decompress failure : 0 SSL BAD Decomp History : 0 SSL Version Mismatch : 0 SSL Input overrun : 0 SSL Conn Modulo : 0 SSL Input Underrun : 0 SSL Connection closed : 0 SSL Unrecognised content: 0 SSL record header length: 0 PPTP Duplicate packet : 0 PPTP Exceed max missed p: 0 RNG self test fail : 0 DF Bit set : 0 Hash Miscompare : 0 Unwrappable object : 0 Missing attribute : 0 Invalid attrribute value: 0 Bad Attribute : 0 Verification Fail : 0 Decrypt Failure : 0 Invalid Packet : 0 Invalid Key : 0 Input Overrun : 0 Input Underrun : 0 Output buffer overrun : 0 Bad handle value : 0 Invalid parameter : 0 Bad function code : 0 Out of handles : 0 Access denied : 0 Out of memory : 0 NR overflow : 0 pkts dropped : 1Warnings: sessions_expired : 0 packets_fragmented : 0 general: : 0HSP details: hsp_operations : 14185 hsp_sessions : 5
The output varies slightly based on the platform 2800/2900/7200 but some fields are always the same.
