Messaging Gateway

 View Only
  • 1.  Brightmail 8.0.3-11 message rate monitoring

    Posted Feb 04, 2010 12:44 PM

    The SNMP OIDs mentioned in http://service1.symantec.com/support/ent-gate.nsf/854fa02b4f5013678825731a007d06af/11f2e43d15a07fba802573c50040ea62?OpenDocument

    for messageRate and connections do not report any information. Other OIDs such as queue size work correctly.

    Is there a way to enable the messageRate monitoring on these brightmail scanners?



  • 2.  RE: Brightmail 8.0.3-11 message rate monitoring

    Posted Feb 04, 2010 02:45 PM
    What is your hardware?  Are other OIDs returning values?

    Can you paste the output of (you will need to use support account to run the following command)?

    snmpwalk -v2c -m all -c local 127.0.0.1 .1.3.6.1.4.1.393.200.130.2.2.1.1

    Also compare it with the output of admin level CLI command mta-stats.




  • 3.  RE: Brightmail 8.0.3-11 message rate monitoring

    Posted Feb 04, 2010 03:25 PM
    As you can see below, when I run the above mentioned commands on my lab box (running version 8.0.3-11), I do get values:

    a) from snmp walk (using support account):
    [support@vm-sflabga support]$ snmpwalk -v2c -m all -c local 127.0.0.1 .1.3.6.1.4.1.393.200.130.2.2.1.1
    SYMANTEC-EMAIL-SECURITY::instanceIndex.1 = INTEGER: 1
    SYMANTEC-EMAIL-SECURITY::instanceIndex.2 = INTEGER: 2
    SYMANTEC-EMAIL-SECURITY::instanceIndex.3 = INTEGER: 3
    SYMANTEC-EMAIL-SECURITY::instanceDescr.1 = STRING: delivery
    SYMANTEC-EMAIL-SECURITY::instanceDescr.2 = STRING: inbound
    SYMANTEC-EMAIL-SECURITY::instanceDescr.3 = STRING: outbound
    SYMANTEC-EMAIL-SECURITY::connections.1 = Gauge32: 10
    SYMANTEC-EMAIL-SECURITY::connections.2 = Gauge32: 10
    SYMANTEC-EMAIL-SECURITY::connections.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::dataRate.1 = Gauge32: 2790
    SYMANTEC-EMAIL-SECURITY::dataRate.2 = Gauge32: 1014
    SYMANTEC-EMAIL-SECURITY::dataRate.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::deferredMessages.1 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::deferredMessages.2 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::deferredMessages.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::messageRate.1 = Gauge32: 5
    SYMANTEC-EMAIL-SECURITY::messageRate.2 = Gauge32: 6
    SYMANTEC-EMAIL-SECURITY::messageRate.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::queueSize.1 = Gauge32: 4
    SYMANTEC-EMAIL-SECURITY::queueSize.2 = Gauge32: 1
    SYMANTEC-EMAIL-SECURITY::queueSize.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::queuedMessages.1 = Gauge32: 17
    SYMANTEC-EMAIL-SECURITY::queuedMessages.2 = Gauge32: 2
    SYMANTEC-EMAIL-SECURITY::queuedMessages.3 = Gauge32: 0


    b) from mta-stats command as admin:
    vm-sflabga> mta-stats
    delivery_connections: 10
    delivery_data_rate: 2610 bytes/sec
    delivery_deferred_msgs: 0
    delivery_msg_rate: 5 msg/sec
    delivery_queue_size: 3 KB
    delivery_queued_msgs: 9
    inbound_deferred_msgs: 0
    inbound_listener_connections: 10
    inbound_listener_data_rate: 1014 bytes/sec
    inbound_listener_msg_rate: 6 msg/sec
    inbound_queue_size: 0 KB
    inbound_queued_msgs: 2
    outbound_deferred_msgs: 0
    outbound_listener_connections: 0
    outbound_listener_data_rate: 0 bytes/sec
    outbound_listener_msg_rate: 0 msg/sec
    outbound_queue_size: 0 KB
    outbound_queued_msgs: 0



  • 4.  RE: Brightmail 8.0.3-11 message rate monitoring

    Posted Feb 04, 2010 07:40 PM
    I'm running the VMware virtual machine and this particular scanner has processed over a 1000 messages in the last hour.

    ccook@waits:~$ snmpwalk -v2c -m ~/SYMANTEC-EMAIL-SECURITY.txt -c public smtp-paul .1.3.6.1.4.1.393.200.130.2.2.1.1
    SYMANTEC-EMAIL-SECURITY::instanceIndex.1 = INTEGER: 1
    SYMANTEC-EMAIL-SECURITY::instanceIndex.2 = INTEGER: 2
    SYMANTEC-EMAIL-SECURITY::instanceIndex.3 = INTEGER: 3
    SYMANTEC-EMAIL-SECURITY::instanceDescr.1 = STRING: delivery
    SYMANTEC-EMAIL-SECURITY::instanceDescr.2 = STRING: inbound
    SYMANTEC-EMAIL-SECURITY::instanceDescr.3 = STRING: outbound
    SYMANTEC-EMAIL-SECURITY::connections.1 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::connections.2 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::connections.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::dataRate.1 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::dataRate.2 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::dataRate.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::deferredMessages.1 = Gauge32: 44
    SYMANTEC-EMAIL-SECURITY::deferredMessages.2 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::deferredMessages.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::messageRate.1 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::messageRate.2 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::messageRate.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::queueSize.1 = Gauge32: 142
    SYMANTEC-EMAIL-SECURITY::queueSize.2 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::queueSize.3 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::queuedMessages.1 = Gauge32: 45
    SYMANTEC-EMAIL-SECURITY::queuedMessages.2 = Gauge32: 0
    SYMANTEC-EMAIL-SECURITY::queuedMessages.3 = Gauge32: 0

    and :
    admin@smtp-paul's password:
    smtp-paul> mta-stats
    delivery_connections: 0
    delivery_data_rate: 0 bytes/sec
    delivery_deferred_msgs: 44
    delivery_msg_rate: 0 msg/sec
    delivery_queue_size: 142 KB
    delivery_queued_msgs: 45
    inbound_deferred_msgs: 0
    inbound_listener_connections: 0
    inbound_listener_data_rate: 0 bytes/sec
    inbound_listener_msg_rate: 0 msg/sec
    inbound_queue_size: 0 KB
    inbound_queued_msgs: 0
    outbound_deferred_msgs: 0
    outbound_listener_connections: 0
    outbound_listener_data_rate: 0 bytes/sec
    outbound_listener_msg_rate: 0 msg/sec
    outbound_queue_size: 0 KB
    outbound_queued_msgs: 0


  • 5.  RE: Brightmail 8.0.3-11 message rate monitoring

    Posted Feb 04, 2010 08:09 PM
    Thanks for providing the data.  Actually, I am also running in the vmware environment. 

    As you can see in the mta-stats output as well that the message rate is showing as 0.  When I run these commands on my box, it was "actively" processing messages.  This means that the message rate is not a cumulative counter; it just gives you the snapshot when you actually query it, so if no messages are being processed at the time you run the queury, you will get 0.

    Hope this explains the behavior you are seeing.

    Adnan


  • 6.  RE: Brightmail 8.0.3-11 message rate monitoring

    Posted Feb 04, 2010 08:19 PM
    This scanner is  being actively used and I have Cacti graphing it every minute. It has never shown anything other then zero. I have another scanner with the same configuration also showing zero. It's not a lack of traffic.

    More specifics. These are scanner only installs with only "Ethernet Interface 1" defined, that interface also has "Virtual 1:1" defined on it for outbound traffic (though right now there is only inbound traffic).


  • 7.  RE: Brightmail 8.0.3-11 message rate monitoring
    Best Answer

    Posted Feb 04, 2010 09:22 PM
    Try running mta-stats in monitoring mode like this...

    mta-stats -w

    ...and see if you get any data for m/s (message rate) and B/s (data rate).

    I still think, you just don't have the traffic flowing when you are running the mta-stats or querying the snmp OID, as the mta-stats output you provided also did not show values other than 0.



  • 8.  RE: Brightmail 8.0.3-11 message rate monitoring

    Posted Feb 05, 2010 12:41 PM
    That command works.

    I do see connections, bytes, and messages being refelcted. I'm surprised at the sustained traffic that must be requred to make the spot measurments useful, but I do now see that they are working.

    Thanks