cacti原理和安装

最新推荐文章于 2023-03-08 11:20:51 发布

weixin_33834679

最新推荐文章于 2023-03-08 11:20:51 发布

阅读量536

点赞数

文章标签： php 开发工具运维

原文链接：http://blog.51cto.com/smoke520/2360941

版权

Network Monitoring

SNMP
command
remote script(ssh)

SNMP（监控工具）
RRDTool（绘图）
cacti(php)
展示
时间序列数据
Nagios
on->Off

Simple Network Management Protocol(SNMP)
The core of SNMP is a simple set of operations (and the information these operations gather)that gives administrators the ability to get or change the state of some SNMP-based device

SNMPv1
the initial version of the SNMP protocol
SNMPv1's security is based on communities,which are nothing more than passwords:plain-text strings that allow any SNMP-based application that knows the strings to goin access to a device's management information
There are typically three communities in SNMPv1:read-only(只读) read-write（读写，关机）,and trap（捕获，通知，被监控端主动发送信息给监控端）
SNMPv2
It is often referred to as community-string-based SNMPv2
This version of SNMP is technically called SNMPv2c
SNMPv3
It adds support for strong authentication and private communication between managed entities

Managers and Agents
A manager is a server running some kind of software system that can handle management tasks for a network
A poll,in the context of network management,is the act of querying an agent(router,switch,Unix server,etc.)for some piece of informaiton
A trap is a way for the agent to tell the NMS that some thing has happened
Traps are sent asynchronously,not in response to queries from the NMS

MIBs（管理信息库）
The Structur of Management Information(SMI) defines how management information is grouped and named;allowed operations;permitted data types;and the syntax for specifying MIBs
The Management Information Base(MIB) can be thought of as a database of managed objects that the agent tracks
An agent may implement many MIBs,but all agents implement a particular MIB clled MIB-II

The Concept of Network Management
Fault Management（故障管理）
To detect,log,and notify users of systems or networks of problems
Configuration Management（配置管理）
To monitor network and system configuration information
Such as the number of hard disks
Accounting Management（记账管理）
To ensure that computing and network resources are used fairly by all groups or individuals who access them
Performance Mnagement（性能管理）
To measure and report on various aspects of network or system performance
Security Management（安全管理）

TCP/IP communication model and SNMP
cacti原理和安装

SNMP Communities
SNMPv1 and SNMPv2 use the notion of communities to establish trust between managers and agents
An agent is configured with three community names: read-only, read-write, and trap
The community names are essentially passwords
public and private

SMI object tree
cacti原理和安装

MIB-II subtree
cacti原理和安装

Brief description of the MIB-II groups
cacti原理和安装

SNMP Operations
Each of the following SNMP operations has a standard PDU format
get （获取一个指定oid的信息）
getnext（获取指定节点下的所有子节点的相关信息）
getbulk(SNMPv2 and SNMPv3)（获取指定节点下的所有子节点及子子节点相关信息，递归）
set（发去控制指令）
getresponse（客户端发起的获取响应）
trap（由trap端发起）
notification(SNMPv2 and SNMPv3)
inform(SNMPv2 and SNMPv3)
report(SNMPv2 and SNMPv3)

get request sequence
cacti原理和安装

The getnext Operation
The getnext operation lets you issue a sequence of commands to retrieve a group of values from a MIB
# snmpwalk -v 1 -c public 127.0.0.1 system

The getbulk Operation
SNMPv2 defines the getbulk operation,which allows a management application to retrieve a large section of a table at once
The standard get operation can attempt to retrieve more than one MIB object at ance,but message sizes are limited by the agent's capabilities

Host Management Revisited
Managing your hosts is an important part of network management
The Host Resources MIB deines the fllowing seven groups:
cacti原理和安装

hrsystem: 系统
hrstorage: 存储
hrdevice: 设备
hrswrun: 获取操作系统版本
hrswrunperf: 系统性能
hrswinstalled: 操作系统安装那些软件；

Host Management Revisited
The host OID is 1.3.6.1.2.1.25
The hrSystem(1.3.6.1.2.1.25.1) group deines objects that pertion to the system itself.These objects include uptime.system date,system users,and system processes
The hrDevice(1.3.6.1.2.1.25.3) and Storate(1.3.6.1.2.1.25.2) groups define objects pertaining to filesystems and system storage,such as system memory,disk utilization,and CPU nonidle percentage
The hrSWRun(1.3.6.1.2.1.25.4),hrSWRunPerf(1.3.6.1.2.1.25.5),and hrSWInstalled(1.3.6.1.2.1.25.6) groups deine objects that represent various aspects of software running or installed on the system
From these groups,you can determine what operating system is running on the host,as well as what programs the host is currently running
The hrSWInstalled group can be used to track which software packages are installed

net-snmp（Agent）被监控端
net-snmp-utils（NMS::command）监控端，监控端要使用trap功能还要安装net-snmp，并启用snmptrapd服务；

RRDTool:
RRA: Round Robin Archive 轮转归档信息

About RRDTool
Round Robin Database Tool
It aims to handle time-series data like network bandwidth,temperatures,CPU load,etc
The data are stored in a round-robin database(circular buffer),thus the system storage footprint remains constant over time
It also includes tools to extract RRD data in a graphical format,for which it was originally intended

300s, PDP: Primary Data Ponit 主数据节点
CDP: Consolidation Data Point 聚合数据节点
解析度：resolution

rrd文件:
DS:(Data Source)数据源
cacti原理和安装

rrdtool
rrdtool - [workdir]| function
create（创建空的轮转数据库）
Set up a new Round Robin Database(RRD)
update（向空库填充数据）
Store new data values into an RRD
updatev
Operationally equivalent to update except for output
graph（做绘图）
Create a graph from data stored in one or several RRDs
Apart from generating graphs,data can also be extracted to stdout
dump（将数据取出来）
Dump the contents of an RRD in plain ASCII.In connection with restore you can use this to move an RRD from one computer architecture to another
restore
Restore an RRD in XML format to a binary RRD
fetch（只取一个数据）
Get data for a certain time period from a RRD.The graph function uses fetch to retrieve its data from an RRD
tune
Alter setup of an RRD
last（只看上个数据）
Find the last update time of an RRD
info
Get information about an RRD
rrdresize
Change the size of individual RRAs
xport
Export data retrieved from one or several RRDs
flushcached
Flush the values for a specific RRD file from memory
rrdcgi
This is a standalone tool for producing RRD graphs on the fly

rrdtool create（创建初始化的rrd数据库文件）
rrdtool create filname（文件名字路径） [--start|-b start time]（指定起始时间） [--step|-s step]（解析度，时间跨度）[--no-overwrite]
[DS:ds-name:DST:dst arguments]（指定数据源）
[RRA（关键字）:CF（聚合函数）:cf arguments（聚合函数参数）]（如何做聚合）

--start|-b start time(default: now - 10s)
--step|-s step(default:300 seconds)

DS（关键字）:ds-name（数据源名字）:DST（数据源类型）:dst arguments（数据源类型参数）
A single RRD can accept input from several data sources(DS)
ds-name is the name you will use to reference this particular data source from anRRD
A ds-name must be 1 to 19 characters long in the characters[a-zA-Z0-9]（ds-name最长19个字符，只能包含字母和数字下划线）
DST define the Data Source Type

For GAUGE,（没做任何修改的值）COUNTER,（保存相对值，相对上个值而言，必须处于一直递增的数据）DERIVE,（保存相对值，相对上个值而言，无所谓增减）and ABSOLUTE（初始值最最原始的值来取得一个相对值） the format for a data source entry is:（数据源类型GAUGE,COUNTER,DERIVE,and ABSOLUTE）
DS:ds-name:GAUGE|COUNTER|DERIVE|ABSOLUTE:heartbeat（当我们数据来了以后在最长多长时间内认为是对应时间槽的数据，如果在规定时间内没有到来就标记为UNKNOWN）:min（最小值）:max（最大值）
heartbeat defines the maximum number of seconds that may pass between two updates of this data source before the value of the data source is assumed to be UNKNOWN
min and max define the expected range vlues for data supplied by a data source
For COMPUTE data sources,the format is:
DS:ds-name:COMPUTE:rpn-expression

RRA:CF:cf arguments
The purpose of an RRD is to store data in the round robin archives(RRA)
RRA:AVERAGE（指定聚合函数）|MIN|MAX|LAST:xff（定义unknown比例是多大的时候把它定义为unknown）:steps（用于定义聚合函数对几个pdp组合起来进行聚合的）:rows（计算过去每59秒为一个平均，而且保存两天平均）
xff The xfiles factor defines what part of a consolidation interval may be mode up from UNKNOWN data while the consolidated value is still regarded as known
It is given as the ratio of allowed UNKNOWN PDPs to the number of PDPs in the interval.Thus,it ranges from 0 to 1(exclusive)
steps defines how many of these primary data points are used to build a consolidated data point which then goes into the archive
rows defines how many generations of data values are kept in an RRA

5s, 生成随机数-->
5s
50s
100s

02 3 6 9
GAUGE: 2 3 6 9
COMPUTE: 2 1 3 3（每个在前面基础上减去的结果，不能接受负值）
DERIVE: 2 1 3 3（每个在前面基础上减去的结果，可以接受负值）
ABSOLUTE: 2 3 6 9（相对于初始值减去的结果，初始值为0，所以还是2 3 6 9，如果初始值为1结果为1 2 5 8）

5s,PDP
10,RRA

rrdtool update（在指定时间间隔内向rrdtool create所创建的数据库文件提供数据）
rrdtool {update | updatev} filename（数据库文件） [--template|-t ds-name[:ds-name]...]
[--]N|timestamp（时间戳）:value[:value...（值）]

filename
--template|-t ds-name[:ds-name]...

rrd,
DS
DS
rrdtool update test.rrd timestamp:32:24

rrdtool create test.rrd DS:ds1 DS:ds2
rrdtool update test.rrd N:30:40
rrdtool update test.rrd -t ds2:ds1 40:30

rrdtool graph（绘图命令）
rrdtool graph|graphy filename（生成图片的文件名） [option ...]
[data definition ...]（取得数据） [data calculation ...]（运算）
[variable definition ...]（变量） [graph element ...]（图形元素）
[print element ...]（显示图形）

X-Axis（指定横轴使用标识）
[-x|--x-grid GTM:GST（基准网格线）:MTM:MST（主网格线）:LTM:LST（横轴网格线对应标志多久显示一次）:LPR:LFM]（时间显示格式）
[-x|--x-grid none]
e.g --x-grid MINUTE:10:HOUR:1:HOUR:4:0:%X

Y-Axis（指定纵轴刻度）
[-y|--y-grid grid step:label factor]（多长时间显示纵轴刻度，卷表显示时间）
[-y|--y-grid none]
[-Y|--alt-y-grid]

Miscellaneous
[-c--color COLORTAG#rrggbb[aa]]（指定线槽颜色）
BACK backgroud（背景色）
CANVAS for the background of the actual graph（画布色）
SHADEA for the left and top border（左边和上边边界线颜色）
SHADEB for the right and bottom border（下边和右边边界线颜色）
GRID,MGRID for the major grid（主网格线颜色）
FONT for the color of the font（字体色）
AXIS for the axis of the graph（坐标色）
FRAME for the line around the color spots（边框色）
ARROW for the arrow head pointing up and forward（箭头色）
-n|--font FONTTAG:size:[font]（指定字体）
[-R|--font-render-mode {normal,light,mono}]（字体格式）
[-a|--imgformat PNG|SVG|EPS|PDF]（图片输出格式）
[-W|--watermark string]（图片加水印）

Data and variables（获取数据）
DEF:vname=rrdfile:ds-（定义数据获取方式）
name（数据源名称）:CF[:step=step][:start=time][:end=time]
CDEF:vname=RRN expression
VDEF:vname=RPN expression
You need at least one DEF and
one LINE,AREA,GPRINT,PRINT statement to generate anything useful

graph
LINE（线状图）[width]:value（变量内容绘图）[#color]（线条颜色）[:[legend][:STACK]][:dashes[=on_s[,off_s[,on_s,off_s]...]][:dash-offset=offsef]]
AREA（面积图）:value[#color][:[legend][:STACK]]
width can be a floating point number
If the color is not specified,the drawing is done 'invisibly'
Also optional is the legend box and string which will be printed in the legend section if specified
The valuecan be generated by DEF,VDEF,and CDEF
If the optional STACK modifier is used,this line is stacked on top of the previous element which can be a LINE or an AREA

GPRINT(在图上打印字符串):vname（变量值）:CF（聚合函数）:format（格式）
COMMENT:text

cacti
rrdtool create
周期性执行能够取得数据的命令，并将取回的数据保存至刚创建的rrd文件当中
利用rrdtool绘图并展示

php开发网页程序
LAMP, LNMP
--enable-sockets php安装选项
插件机制
thold 报警功能
模版：
图形模版定义图是如何绘制
数据模版定义如何获得数据，获得以后怎么保存，保存到什么文件中
主机模版归好类的图形模版和数据模版

cacti
脚本
SNMP
ssh
保存数据
图形模版

/var/www/html/cacti

http://172.16.100.1/cacti/

/web/vhosts/cacti

http://cacti.magedu.com/cacti

poller.php单线程，速度慢，在大批量要将poller.php缓存spine（官网提供）

收集方法：数据收集方法
数据查询：一些事先定义好的xml格式数据手机方法
数据输入方法：命令或者脚本
脚本：
只需要指定如何获取数据，并且获取到的数据经过处理后要按规定格式输出；
TAG:data TAG:data（标签加数据格式，不能有多余空格）
input:30 output:40

cacti官网：https://www.cacti.net
cacti论坛：https://forums.cacti.net #Scripts and Templates别人定义好的模板脚本可以使用

snmp：

[root@cacti ~]# yum -y install net-snmp net-snmp-utils
[root@cacti ~]# service snmpd start
正在启动 snmpd：                                           [确定]
[root@cacti ~]# netstat -unlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address               Foreign Address             State       PID/Program name
udp        0      0 0.0.0.0:68                  0.0.0.0:*                               1500/dhclient
udp        0      0 0.0.0.0:161                 0.0.0.0:*                               1645/snmpd
[root@cacti ~]# snmpwalk -v 2c -c public localhost host
HOST-RESOURCES-MIB::hrSystemUptime.0 = Timeticks: (144158) 0:24:01.58
HOST-RESOURCES-MIB::hrSystemUptime.0 = No more variables left in this MIB View (It is past the end of the MIB tree)
[root@cacti ~]# vim /etc/snmp/snmpd.conf
view    systemview    included   .1.3.6.1.2.1.1
view    systemview    included   .1.3.6.1.2.1.25.1.1
[root@cacti ~]# snmpget -v 2c -c public localhost HOST-RESOURCES-MIB::hrSystemUptime.0
[root@cacti ~]# vim /etc/snmp/snmpd.conf
view    systemview    included   .1.3.6.1.2.1.1
view    systemview    included   .1.3.6.1.2.1.25.1.1
view    systemview    included   .1.3.6.1.2.1.6
[root@cacti ~]# service snmpd restart
停止 snmpd：                                               [确定]
正在启动 snmpd：                                           [确定]
[root@cacti ~]# snmpwalk -v 2c -c public localhost tcp
[root@cacti ~]# snmpwalk -v 2c -c public localhost tcp | grep established | wc -l
[root@cacti ~]# vim /etc/snmp/snmpd.conf
\#       sec.name  source          community
#com2sec notConfigUser  default       public
com2sec notConfigUser  127.0.0.1       mypublic
com2sec notConfigUser  172.16.100.0/24       mypublic
[root@cacti ~]# service snmpd restart
停止 snmpd：                                               [确定]
正在启动 snmpd：                                           [确定]
[root@cacti ~]# snmpwalk -v 2c -c mypublic 172.16.100.1 tcp
[root@cacti ~]# snmpnetstat -v 2c -c mypublic -Can -Cp tcp 172.16.100.1
Active Internet (tcp) Connections (including servers)
Proto Local Address          Remote Address         (state)
tcp   *.22                   *.*                   LISTEN
tcp   127.0.0.1.25           *.*                   LISTEN
tcp   127.0.0.1.199          *.*                   LISTEN
tcp   127.0.0.1.6010         *.*                   LISTEN
tcp   127.0.0.1.6011         *.*                   LISTEN
tcp   172.16.100.1.22        172.16.100.254.6230   ESTABLISHED
tcp   172.16.100.1.22        172.16.100.254.6231   ESTABLISHED
tcp   172.16.100.1.22        172.16.100.254.14263  ESTABLISHED
tcp   172.16.100.1.22        172.16.100.254.14264  ESTABLISHED
[root@cacti ~]# chkconfig snmpd on

rrdtool：

[root@cacti ~]# ll
总用量 1228
-rw-------. 1 root root    1010 7月  25 18:59 anaconda-ks.cfg
-rw-r--r--. 1 root root   13111 7月  25 18:59 install.log
-rw-r--r--. 1 root root    3482 7月  25 18:57 install.log.syslog
-rw-r--r--. 1 root root 1159701 7月  27 18:36 rrdtool-1.4.5-1.el5.wrl.i386.rpm
-rw-r--r--. 1 root root   11917 7月  27 18:36 rrdtool-devel-1.4.5-1.el5.wrl.i386.rpm
-rw-r--r--. 1 root root   55940 7月  27 18:36 rrdtool-perl-1.4.5-1.el5.wrl.i386.rpm
[root@cacti ~]# yum -y --nogpgcheck install rrdtool-1.4.5-1.el5.wrl.i386.rpm rrdtool-perl-1.4.5-1.el5.wrl.i386.rpm
[root@cacti ~]# rrdtool create test.rrd --step 5 DS:testds:GAUGE:8:0:U RRA:AVERAGE:0.5:1:17280 RRA:AVERAGE:0.5:10:3456 RRA:AVERAGE:0.5:100:1210（创建test.rrd文件，--step 5每5秒接受一个值，不指定300秒，--start指定开始时间，不指定从10秒之前开始，DS数据源，testds数据源名称自己取，GAUGE数据源类型，8所能接受数据最长时间，8秒内来就接受，来不了就不接受，0最小值，U最大值不确定，RRA做聚合，AVERAGE求平均值，0.5每5秒平均一次，1每一个平均一次，17280=86400/5保存一天的，）
[root@cacti ~]# rrdtool info test.rrd
filename = "test.rrd"
rrd_version = "0003"
step = 5
last_update = 1469616594
header_size = 932
ds[testds].index = 0
ds[testds].type = "GAUGE"
ds[testds].minimal_heartbeat = 8
ds[testds].min = 0.0000000000e+00
ds[testds].max = NaN
ds[testds].last_ds = "U"
ds[testds].value = 0.0000000000e+00
ds[testds].unknown_sec = 4
rra[0].cf = "AVERAGE"
rra[0].rows = 17280
rra[0].cur_row = 10592
rra[0].pdp_per_row = 1
rra[0].xff = 5.0000000000e-01
rra[0].cdp_prep[0].value = NaN
rra[0].cdp_prep[0].unknown_datapoints = 0
rra[1].cf = "AVERAGE"
rra[1].rows = 3456
rra[1].cur_row = 1171
rra[1].pdp_per_row = 10
rra[1].xff = 5.0000000000e-01
rra[1].cdp_prep[0].value = NaN
rra[1].cdp_prep[0].unknown_datapoints = 8
rra[2].cf = "AVERAGE"
rra[2].rows = 1210
rra[2].cur_row = 515
rra[2].pdp_per_row = 100
rra[2].xff = 5.0000000000e-01
rra[2].cdp_prep[0].value = NaN
rra[2].cdp_prep[0].unknown_datapoints = 18
[root@cacti ~]# rrdtool update test.rrd N:$RANDOM（给test.rrd数据文件提供随机数据，N当前时间，$RANDOM随机值，环境变量）
[root@cacti ~]# rrdtool fetch test.rrd AVERAGE（从test.rrd取得数据做聚合函数）
[root@cacti ~]# vim genval.sh
#!/bin/bash
\#
while true;do
  rrdtool update test.rrd N:$RANDOM
  sleep 5
done
[root@cacti ~]# bash -x genval.sh
[root@cacti ~]# rrdtool fetch -r 5 test.rrd AVERAGE（从test.rrd取得数据做聚合函数，-r指定每5秒平均值）
1469704440: 8.0566083688e+03
1469704445: 2.2388294860e+04
1469704450: 2.5708090118e+04
1469704455: 1.7025331697e+04
1469704460: 1.3199633971e+04
1469704465: 2.3700131829e+04
1469704470: 2.5429701728e+04
1469704475: 2.6962323128e+04
1469704480: 1.2382106555e+04
1469704485: 6.3431372328e+03
1469704490: 1.6555205005e+04
1469704495: 2.1484472517e+04
1469704500: 8.4028245818e+03
1469704505: 1.5710498867e+04
1469704510: 6.3045618384e+03
1469704515: 1.6441063176e+04
1469704520: 1.7218126726e+04
1469704525: 4.5320233830e+03
1469704530: 1.6073711416e+04
1469704535: 2.2368801388e+04
1469704540: 2.1513770316e+04
1469704545: 6.3628359270e+03
1469704550: 1.4628699328e+04
1469704555: 9.7876476548e+03
1469704560: 1.2794460491e+04
1469704565: 4.9265956646e+03
1469704570: 1.6089015496e+04
1469704575: 6.7290863496e+03
1469704580: 7.2770784148e+03
1469704585: 2.0019338304e+04
1469704590: 1.1439154560e+04
1469704595: 9.4721386748e+03
1469704600: 1.4290655953e+04
1469704605: 1.7942355416e+04
[root@cacti ~]# rrdtool graph a.png --step 5 -s 1469704440 -t Test -v vtest DEF:vtest=test.rrd:testds:AVERAGE LINE1:vtest#ff0000:testline（--step指定解析度，-s指定起始时间，DEF:vtest=test.rrd从test.rrd取得数据，AVERAGE聚合函数）