Nav-users

nav-users@lister.sikt.no

1379 discussions

Re: Fortigate firewall
by Morten Brekkevold 10 Jan '23

10 Jan '23

On Mon, 9 Jan 2023 11:42:42 +0100 Biselx Nicolas <nicolas.biselx(a)epfl.ch> wrote: > In attachement, the debug with the list of ports It did find some 118 interfaces on the Fortigate, but no IP address information. Apparently, if found nothing useful in the IP-MIB: > 2023-01-09 11:27:03,353 [DEBUG plugins.prefix.prefix] [inventory fortigate] Trying address tables from IP-MIB > 2023-01-09 11:27:03,371 [WARNING plugins.prefix.prefix] [inventory fortigate] device has strange SNMP implementation of IP-MIB; ignoring retrieved IP address data: IPv4 address length is not 4: OID('.1.10.0.2.49.143') > 2023-01-09 11:27:03,371 [DEBUG plugins.prefix.prefix] [inventory fortigate] Found 0 addresses in IP-MIB: set() That is, it seems to have found *something*, but it didn't quite conform to that is expected in the MIB (the 1.10.0.2.49.143 value is invalid, as it is marked as a 4-octet IP address, but it contains 5 octets). Do you have the NET-SNMP command line tools and basic MIBs available on your system? Might be interesting to get a raw view of that the device presents, using something like these two commands: snmptable -v2c <community> <fortigate-ip-addr> IP-MIB::ipAddrTable snmptable -v2c <community> <fortigate-ip-addr> IP-MIB::ipAddressTable -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

Fortigate firewall
by Biselx Nicolas 02 Jan '23

02 Jan '23

Hi, We have a Fortigate firewall that I introduced with the GW category (routers layer 3 device), all information seems ok according to the capture. But when I look at the tools > watchdog there is a problem with the routing interfaces not being recognized ? It's a same with GSW Is there a solution to fix this? Regards, Nicolas

2 3

Correcting NAV topology after a physical reconfiguration
by tom.daae＠lom.kommune.no 21 Des '22

21 Des '22

Hi, I'm a new user of NAV and have found it to be a very useful tool. Among other things, it has helped us discover and plan improvements to our network topology. After implementing said improvements however, I find myself in a bit of a predicament. Two of my switches were previously connected via a link (in practice a daisy-chain), which is no longer physically present. NAV, of course, does not know the difference between a link that is temporarily down and one that is never coming back up, so the link remains in our netmap. I have not found a way of removing this link from NAV, short of deleting and re-registering the switches on either end of the link. This would of course mean losing a lot of traffic stats, so I'm wondering if there is any way to tell NAV do forget this specific link? Am I just misunderstanding something fundamental here?

2 1

Fortigate firewall
by Biselx Nicolas 20 Des '22

20 Des '22

1 0

Any documentation about contrib/isc_dhpcd_graphite.py ?
by Ingeborg Hellemo 21 Nov '22

21 Nov '22

FreeBSD 12.3 python38-3.8.15 isc-dhcp44-server-4.4.3P1 dhcpd-pools-3.1 I try to use isc_dhpcd_graphite.py but stumble quite early: ./isc_dhpcd_graphite.py -n <graphiteserver> Traceback (most recent call last): File "/root/bin/isc_dhpcd_graphite.py", line 205, in <module> main() File "/root/bin/isc_dhpcd_graphite.py", line 194, in main output = render(jsonblob, args.actual_prefix, args.protocol) File "/root/bin/isc_dhpcd_graphite.py", line 134, in render return _render_text(jsonblob, prefix) File "/root/bin/isc_dhpcd_graphite.py", line 139, in _render_text input = _tuplify(jsonblob, prefix) File "/root/bin/isc_dhpcd_graphite.py", line 163, in _tuplify vlan = _clean_vlan(vlan_stat["location"]) File "/root/bin/isc_dhpcd_graphite.py", line 173, in _clean_vlan return regex.group() AttributeError: 'NoneType' object has no attribute 'group' Where to begin debugging? Any flags to dhcpd-pools that are implicit to Linux and I am missing? If I get this to work, examples of how to display the results via NAV are welcome. --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

3 4

how to export cabling table ?
by FOUR Ludovic (EXT) 11 Nov '22

11 Nov '22

Hello, Sorry if the question was already asked. Can we export cabling into dump file or csv ? Best regards, Ludovic FOUR Faculté de Pharmacie - Support Informatique Université de Strasbourg / CNRS France

2 1

NAV 5.5.2: ipdevpoll will not start
by Ingeborg Hellemo 10 Nov '22

10 Nov '22

FreeBSD 12.3 python38-3.8.15 The error is not specific til 5.5.2 since I am upgrading from NAV 5.2.1. ipdevpoll will not start: Traceback (most recent call last): File "/usr/local/bin/ipdevpolld", line 19, in <module> from nav.ipdevpoll.epollreactor2 import install File "/usr/local/lib/python3.8/site-packages/nav/ipdevpoll/epollreactor2.py", line 24, in <module> from twisted.internet import epollreactor File "/usr/local/lib/python3.8/site-packages/twisted/internet/epollreactor.py ", line 16, in <module> from select import epoll, EPOLLHUP, EPOLLERR, EPOLLIN, EPOLLOUT ImportError: cannot import name 'epoll' from 'select' (/usr/local/lib/python3.8/lib-dynload/select.cpython-38.so) Am I missing a library or a module? This is a bit urgent since I really don't want to downgrade... --Ingeborg -- Ingeborg Østrem Hellemo -- ingeborg.hellemo(a)uit.no Dep. of Information Technology --- Univ. of Tromsø

2 2

Announcement: NAV 5.5.2 released
by Morten Brekkevold 10 Nov '22

10 Nov '22

The second maintenance release of the 5.5 series of NAV is now out, fixing a couple of serious collection and trap processing issues! The source code is available for download at GitHub [1]. New packages for Debian 10 (Buster) and 11 (Bullseye) are available in our APT repository [2] as usual. Please be extra aware of config file changes. Look out for `*.dpkg-dist` files in `/etc/nav` and make sure to update your running config. The virtual appliance will be updated, but currently, the automated GitHub workflows aren't working due to changes at GitHub. Fixes ===== - Fix serious collection breakdown in ipdevpoll by re-generating a valid Python representation of CISCO-ENHANCED-MEMPOOL-MIB (#2494, #2495) - Fix broken trap processing in snmptrapd (#2497, #2498) Release notes ============= We always advise you to have a look at NAV's accompanying release notes [3] before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-5 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

Announcement: NAV 5.5.1 released
by Morten Brekkevold 09 Nov '22

09 Nov '22

The first maintenance release of the 5.5 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 10 (Buster) and 11 (Bullseye) are available in our APT repository [2] as usual. Please be extra aware of config file changes. Look out for `*.dpkg-dist` files in `/etc/nav` and make sure to update your running config. The virtual appliance will be updated, but currently, the automated GitHub workflows aren't working due to changes at GitHub. Fixes ===== - Delete and ignore module devices with fake serial number `BUILTIN`, as reported by Juniper equipment, in order to avoid spamming with `device[SFH]wUpgrade` alerts (#2491, #2492) Release notes ============= We always advise you to have a look at NAV's accompanying release notes [3] before upgrading. This maintenance release was made to fix an ugly issue for those who monitor Juniper equipment using NAV (of which there are quite a few). We've added the following note: Juniper ``BUILTIN`` devices --------------------------- Juniper equipment tends to report soldered-on linecards as field-replaceable modules through their implementation of ``ENTITY-MIB::entPhysicalTable``. These modules are also all reported as having the same serial number: ``BUILTIN``. NAV versions prior to 5.5.1 did not safeguard against this Juniper bug. This would cause NAV installations that monitor Juniper equipment to have a single device with the ``BUILTIN`` serial number, which was shared between all monitored Juniper netboxes. The attributes of ``BUILTIN`` devices (such as software or firmware revision) would be different across most Juniper netboxes, causing them to compete for updates of the attributes in the NAV database. This went under the radar until NAV 5.5.0 re-introduced the ``device*Upgrade`` set of alerts. Now, every time a Juniper netbox is polleed and the shared ``BUILTIN`` device's software/hardware/firmware revision was changed, an alert would be generated. For those unfortunate enough to subscribe to all NAV alerts, this would lead to a storm of alerts. Subsequently, NAV 5.5.1 deletes this shared ``BUILTIN`` device from the database, and adds functionality to ignore any module or entity that reports this as its serial number. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-5 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

Announcement: NAV 5.5.0 released
by Morten Brekkevold 04 Nov '22

04 Nov '22

The initial feature release of the 5.5 series of NAV is now out! The source code is available for download at GitHub [1]. New packages for Debian 10 (Buster) and 11 (Bullseye) are available in our APT repository [2] as usual. Please be extra aware of config file changes. Look out for `*.dpkg-dist` files in `/etc/nav` and make sure to update your running config. The virtual appliance will be updated automatically. Changed ======= - Bump lxml from 4.6.5 to 4.9.1 in /tests (#2443) - Links and documented references to the NAV mailing lists have changed to the lister.sikt.no domain. Added ===== - Add link to #nav irc channel on Libera.Chat to README file (#2475) - Add mac_addresses attribute to /netbox/ API endpoint (#2487, #2490) - Add ability to filter by alert severity in the status tool (#2467) - Support for fetching ARP cache entries from all Arista VRF instances (#2262, #2454)) - Link aggregation information added to NAV API (#1765, #2440) - Support fetching memory stats from CISCO-ENHANCED-MEMPOOL-MIB (#2236, #2439) - Added a flag to navcheckservice that shows all available handler plugins (#2378, #2437) - Post deviceHwUpgrade/deviceSwUpgrade/deviceFwUpgrade events when changes are detected to devices' hardware, software or firmware revisions (#2393, #2413) - Call a cleanup() method for individual container objects after ipdevpoll save stage (#2421) - Added Device methods to resolve and return related objects/entities (chassis, modules, fans, power supplied) and extended device descriptions (#2428) Fixed ===== - Avoid potential resource leaks by properly closing configuration files after reading them (#2451) - Geomap "link to this configuration" now actually opens the correct location at the correct zoom level (#2412, #2488) - snmptrapd can now identify an SNMP agent from any of its interface addresses (#2387, #2461) - PortAdmin now ignores incorrectly configured VLAN tags (tagged as NA) on Juniper switches, instead of crashing (#2452, #2453) - Fix potential ipdevpoll crashes due to database fetches in wrong thread (#2478, #2480) - Handle Graphite connection issues gracefully in ranked statistics page (#2459) - Handle Graphite connection issues gracefully in device group detail page (#2345, #2434) - Removed needless carbon data chunking from activeipcollector (#1696, #2462) - Evaluate 0.0 as a valid numeric metric value during threshold rule evaluations (#2447) - Updated dead links in Geomap documentation (#2419) - Link from IPAM to reserve prefixed in SeedDB now works again (#2410, #2422) - Improved inefficient database queries in Arnold (#2425) - Updated tox examples in hacking documentation (#2427, #2430) - Fixed an AttributeError crash bug in the naventity command line program (#2433, #2444) Release notes ============= We always advise you to have a look at NAV's accompanying release notes [3] before upgrading. Happy NAVing everyone! Links ===== [1] https://github.com/Uninett/nav/releases [2] https://nav.uninett.no/install-instructions/#debian [3] https://nav.readthedocs.io/en/latest/release-notes.html#nav-5-5 -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research

1 0

← Newer
1
...
5
6
7
8
9
10
11
...
138
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Nav-users