[sysmon-help] snmp survey

[Jared Mauch]

On Sat, Apr 19, 2003 at 07:53:53AM +0200, Bengt Gördén wrote:
> 
> Hi!
> 
> I would really like to have traps implemented in sysmon. Also, a delta

	What would you like the traps to do?  How should an alert
generated from a trap be 'cleared'?

	What if receipt of a trap from a host queues all the
checks for that host for an active polling.  The trap would
just indicate that something happened, then sysmon would go out
and check the device.

> between two variables with a hysteresis to trigger an alarm would be
> nice. 
> 

	Would a 'rate' type clause work?

	I'm thinking about how I want to handle interfaces and
want the ability to generate an alert if they
get close to full as well as if the pps rate is higher than some
multiple of the average over the past 24 hours, or if it's a massive
spike over previous pps rates on an interface.

	eg: if an interface has never peaked over 130Mb/s in the past
24 hours, and it begins doing 440m suddenly it should generate some
sort of traffic level alert until the stats averaging over the past
24 hours (or longer, this will likely be configurable) makes the rate
fall into the formula.

	- jared

-- 
Jared Mauch  | pgp key available via finger from jared at puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.