Setting up A Network Monitoring and Inventory System: Difference between revisions

From Alpine Linux
(Added mental ramblings to try to figure out how to implement)
m (Formatting)
Line 26: Line 26:
Nmap -> OpenAudit
Nmap -> OpenAudit


1) Scheduled nmap ping sweep of subnets (one at a time)
# Scheduled nmap ping sweep of subnets (one at a time)
2) Check if hosts have been audited recently
# Check if hosts have been audited recently
3) If not, trigger an nmap OS detection
# If not, trigger an nmap OS detection
4) If Windows, trigger a remote audit
# If Windows, trigger a remote audit
5) If other device type, do ___ to audit
# If other device type, do ___ to audit


OpenAudit -> Nagios (or Cacti, or Smokeping)
OpenAudit -> Nagios (or Cacti, or Smokeping)


1) Schedule a query of Windows Servers from OpenAudit + installed software
# Schedule a query of Windows Servers from OpenAudit + installed software
2) Check that nagiosql has each server in it
# Check that nagiosql has each server in it
3) If it doesn't, add host monitoring + base services
# If it doesn't, add host monitoring + base services
4) For each MS software (such as Exchange, SQL, DPM), add services
# For each MS software (such as Exchange, SQL, DPM), add services


For bonus points:
For bonus points:


1) Query LLDP to find out where device is and set up dependencies automatically
# Query LLDP to find out where device is and set up dependencies automatically
2) SNMPTT integration to Nagios (setup based on device info in OpenAudit)
# SNMPTT integration to Nagios (setup based on device info in OpenAudit)

Revision as of 22:46, 6 September 2010

This material is work-in-progress ...

Do not follow instructions here until this notice is removed.
(Last edited by Jbilyk on 6 Sep 2010.)

This guide will set up (list subject to change):

Goal

Basic concept is to combine the above apps/utilities to create an easy to set up and low upkeep monitoring system that also tracks inventory thanks to OpenAudit. Redundant entries in configs will be kept to a minimum (hopefully). New devices should be auto-added to monitoring systems, along with associated services (for example, a Windows server running MS Exchange might have basic services such as CPU load, HD free space, running services and Exchange queues monitored, whereas a router running on Alpine Linux would might need the routing table, throughput, and opennhrp monitored). Also, software licensing should be monitored so that Windows boxes do not exceed purchased licenses.

Progress Log

Set up Alpine server with Lighttpd 1.4.28-r0, PHP 5.3.3-r2 and MySQL 5.1.50-r0 with OpenAudit 09.12.23. Windows box can be audited with results returned to Alpine.
Set up test cacti system and made sure the basics work with the new aport.
SNMPTT receives snmp traps properly and sends them on to Nagios but they aren't parsed in any way yet.
Installed Nagiosql, need to investigate potential usage + OpenAudit integration.

Operational Concept

Nmap -> OpenAudit

  1. Scheduled nmap ping sweep of subnets (one at a time)
  2. Check if hosts have been audited recently
  3. If not, trigger an nmap OS detection
  4. If Windows, trigger a remote audit
  5. If other device type, do ___ to audit

OpenAudit -> Nagios (or Cacti, or Smokeping)

  1. Schedule a query of Windows Servers from OpenAudit + installed software
  2. Check that nagiosql has each server in it
  3. If it doesn't, add host monitoring + base services
  4. For each MS software (such as Exchange, SQL, DPM), add services

For bonus points:

  1. Query LLDP to find out where device is and set up dependencies automatically
  2. SNMPTT integration to Nagios (setup based on device info in OpenAudit)