<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Also if you miss the trap for whatever
      reason you won't know about the state change.<br>
      <br>
      If you are writing scripts then polling would probably be the most
      robust.<br>
      <br>
      On 14/04/16 15:02, Paul Wilkins wrote:<br>
    </div>
    <blockquote
cite="mid:CAMmROTLqQ5LvUiWA3_sjup0T-9V_Csd_AH50kj42rqjaGBAs3g@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>
          <div>The problem with traps, is you may have ports you never
            hear from. eg. If you have a mix of 24 and 48 ports, and you
            haven't heard from the top half of a switch. Essentially
            you'd have to create your own inventory of switchport
            interfaces.<br>
          </div>
          <div><br>
          </div>
          Kind regards<br>
          <br>
        </div>
        Paul Wilkins<br>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On 14 April 2016 at 14:31, Nathan
          Phelan <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:nathan@interconnekt.com.au" target="_blank">nathan@interconnekt.com.au</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div link="blue" vlink="purple" lang="EN-AU">
              <div>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Logging
                    SNMP traps to some sort of database (as per BB’s
                    suggestion) sounds like the way to go.</span></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">If
                    you don’t feel like rolling your own though you
                    could try
                    <a moz-do-not-send="true"
                      href="http://www.librenms.org/" target="_blank">http://www.librenms.org/</a>
                    (it’s a fork of Observium) – it has a per device
                    event log (stored in mysql) which is searchable.</span></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Cheers,</span></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Nathan</span></p>
                <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span></p>
                <p class="MsoNormal"><b><span
                      style="font-size:11.0pt;font-family:"Calibri",sans-serif"
                      lang="EN-US">From:</span></b><span
                    style="font-size:11.0pt;font-family:"Calibri",sans-serif"
                    lang="EN-US"> AusNOG [mailto:<a
                      moz-do-not-send="true"
                      href="mailto:ausnog-bounces@lists.ausnog.net"
                      target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:ausnog-bounces@lists.ausnog.net">ausnog-bounces@lists.ausnog.net</a></a>]
                    <b>On Behalf Of </b>Ben Buxton<span class=""><br>
                      <b>Sent:</b> Thursday, 14 April 2016 1:39 PM<br>
                    </span><b>To:</b> Tim Raphael <<a
                      moz-do-not-send="true"
                      href="mailto:raphael.timothy@gmail.com"
                      target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:raphael.timothy@gmail.com">raphael.timothy@gmail.com</a></a>>;
                    Paul Wilkins <<a moz-do-not-send="true"
                      href="mailto:paulwilkins369@gmail.com"
                      target="_blank">paulwilkins369@gmail.com</a>><br>
                    <b>Cc:</b> <<a moz-do-not-send="true"
                      href="mailto:ausnog@lists.ausnog.net"
                      target="_blank">ausnog@lists.ausnog.net</a>>
                    <<a moz-do-not-send="true"
                      href="mailto:ausnog@lists.ausnog.net"
                      target="_blank">ausnog@lists.ausnog.net</a>><span
                      class=""><br>
                      <b>Subject:</b> Re: [AusNOG] Switch Port
                      Utilisation Monitoring</span></span></p>
                <p class="MsoNormal"> </p>
                <div>
                  <div>
                    <p class="MsoNormal"> </p>
                  </div>
                  <p class="MsoNormal">Define "used".</p>
                  <div>
                    <div class="h5">
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal">Link up or actually
                          carrying (meaningful) traffic?<br>
                          <br>
                          For the former, you'd want to capture events
                          as they happen, typically via snmp traps. Then
                          just look at  how many reported a link up trap
                          (including those that havent reported link
                          down since the last interval).</p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                      </div>
                      <div>
                        <p class="MsoNormal">For the latter, a raw
                          packet count might suffice, but you'll have
                          difficulty differentiating idle/keepalive
                          traffic if the amount is low.<br>
                          <br>
                          Personally, I'd go with snmp traps/polls
                          injected into Prometheus, but many people
                          havent the time or inclination to change their
                          mindset into vector/timeseries based systems
                          (despite the advantages).</p>
                      </div>
                      <div>
                        <p class="MsoNormal"><br>
                          BB</p>
                      </div>
                      <div>
                        <p class="MsoNormal"> </p>
                        <div>
                          <div>
                            <p class="MsoNormal">On Thu, Apr 14, 2016 at
                              1:28 PM Tim Raphael <<a
                                moz-do-not-send="true"
                                href="mailto:raphael.timothy@gmail.com"
                                target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:raphael.timothy@gmail.com">raphael.timothy@gmail.com</a></a>>
                              wrote:</p>
                          </div>
                          <blockquote
                            style="border:none;border-left:solid #cccccc
                            1.0pt;padding:0cm 0cm 0cm
                            6.0pt;margin-left:4.8pt;margin-right:0cm">
                            <div>
                              <div>
                                <p class="MsoNormal">Lets assume I have
                                  SNMP available.</p>
                              </div>
                              <div>
                                <p class="MsoNormal"> </p>
                              </div>
                              <div>
                                <p class="MsoNormal">Will Cacti be able
                                  to tell me over (for example) a week
                                  how many and which switch ports are
                                  used?</p>
                              </div>
                            </div>
                            <div>
                              <div>
                                <p class="MsoNormal"> </p>
                              </div>
                              <div>
                                <p class="MsoNormal">- Tim</p>
                              </div>
                            </div>
                            <div>
                              <div>
                                <p class="MsoNormal"> </p>
                              </div>
                              <div>
                                <p class="MsoNormal"> </p>
                              </div>
                              <div>
                                <p class="MsoNormal"> </p>
                              </div>
                              <p class="MsoNormal"> </p>
                              <div>
                                <blockquote
                                  style="margin-top:5.0pt;margin-bottom:5.0pt">
                                  <div>
                                    <p class="MsoNormal">On 14 Apr 2016,
                                      at 11:27 AM, Paul Wilkins <<a
                                        moz-do-not-send="true"
                                        href="mailto:paulwilkins369@gmail.com"
                                        target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:paulwilkins369@gmail.com">paulwilkins369@gmail.com</a></a>>
                                      wrote:</p>
                                  </div>
                                  <p class="MsoNormal"> </p>
                                  <div>
                                    <div>
                                      <div>
                                        <div>
                                          <p class="MsoNormal"
                                            style="margin-bottom:12.0pt">MRTG
                                            and/or Cacti.</p>
                                        </div>
                                        <div>
                                          <p class="MsoNormal">(Assuming
                                            a "managed" switch ie. SNMP)</p>
                                        </div>
                                        <div>
                                          <p class="MsoNormal"> </p>
                                        </div>
                                        <p class="MsoNormal"
                                          style="margin-bottom:12.0pt">Kind
                                          regards</p>
                                      </div>
                                      <p class="MsoNormal">Paul Wilkins</p>
                                    </div>
                                    <div>
                                      <p class="MsoNormal"> </p>
                                      <div>
                                        <p class="MsoNormal">On 14 April
                                          2016 at 13:20, Tim Raphael
                                          <<a moz-do-not-send="true"
href="mailto:raphael.timothy@gmail.com" target="_blank">raphael.timothy@gmail.com</a>>
                                          wrote:</p>
                                        <blockquote
                                          style="border:none;border-left:solid
                                          #cccccc 1.0pt;padding:0cm 0cm
                                          0cm
                                          6.0pt;margin-left:4.8pt;margin-right:0cm">
                                          <p class="MsoNormal">Hi All,<br>
                                            <br>
                                            I would like a tool that
                                            could tell me exactly how
                                            many switch ports are in use
                                            across a given time period.<br>
                                            This is an enterprise
                                            environment so it’s not just
                                            the case of taking a
                                            snapshot in time, devices
                                            turn on and off so I’d want
                                            something that could monitor
                                            the port counts for a week
                                            or so and spit out a report.<br>
                                            <br>
                                            Also, as per usual, the
                                            cheaper (free?) the better!<br>
                                            <br>
                                            Any ideas?<br>
                                            <br>
                                            - Tim<br>
                                            <br>
                                            <br>
_______________________________________________<br>
                                            AusNOG mailing list<br>
                                            <a moz-do-not-send="true"
                                              href="mailto:AusNOG@lists.ausnog.net"
                                              target="_blank">AusNOG@lists.ausnog.net</a><br>
                                            <a moz-do-not-send="true"
                                              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                              target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a></p>
                                        </blockquote>
                                      </div>
                                      <p class="MsoNormal"> </p>
                                    </div>
                                  </div>
                                </blockquote>
                              </div>
                              <p class="MsoNormal"> </p>
                            </div>
                            <p class="MsoNormal">_______________________________________________<br>
                              AusNOG mailing list<br>
                              <a moz-do-not-send="true"
                                href="mailto:AusNOG@lists.ausnog.net"
                                target="_blank">AusNOG@lists.ausnog.net</a><br>
                              <a moz-do-not-send="true"
                                href="http://lists.ausnog.net/mailman/listinfo/ausnog"
                                target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a></p>
                          </blockquote>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
            <br>
            _______________________________________________<br>
            AusNOG mailing list<br>
            <a moz-do-not-send="true"
              href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
            <a moz-do-not-send="true"
              href="http://lists.ausnog.net/mailman/listinfo/ausnog"
              rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
            <br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>