Cisco IPS SNMP Checks

Project Notes

Checks for CPU, Traffic and IPS status. Tested with AIP-SSM modules for Cisco ASA.

Some examples:

host$ ./check_cisco_ips.pl -H -C -2 -T cpu -w 70%,50%,40% -c 90%,70%,50%
Cisco IPS CPU : 5sec = 13 %, 2min = 13 %, 5min = 18 % : OK

host$ ./check_cisco_ips.pl -H -C -2 -T mem -w 60% -c 80%
Cisco IPS Memory : used = 977 MB, free = 1018 MB, utilization = 48 % : OK

host$ ./check_cisco_ips.pl -H -C -2 -T health -w 1,0,1,1 -c 0,1,5,5
Cisco IPS Health : inactive = 0, memory critical = 0, packet loss = 0 %, packet deny rate = 0 % : OK

host$ ./check_cisco_ips_int.pl -H -C -2 -n ge0_[0,1] -k -w 10000,10000 -c 20000,20000 –label
ge0_1:Unpaired (in=597.9KBps/out=597.9KBps), ge0_0:UP (in=0.4KBps/out=4.1KBps) : 2 UP : OK

Tested with AIP-IPS-20 modules hosted in an ASA5540. May have still bugs, any feedback is welcome.