Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: [Full-Disclosure] server administration
From: Mohit Muthanna (mohit.muthannagmail.com)
Date: Fri Jun 25 2004 - 09:58:19 CDT
> Having said that, you're going to be disappointed in what snmp will
> provide unless you want to start writing MIBs (you don't). So you will
> be doing some sort of client/server model maybe with *NIX tools like
> vmstat and traceroute and wget. We did something similar in 1998 I
I wouldn't discount SNMP so easily. A good SNMP agent will provide a
lot of useful information related to the system. Eg. see net-snmp
(opensource) or sysedge (Commercial).
You don't _ever_ have to write a MIB unless you're developing an SNMP
agent/layer for a custom application.
I've worked in environments (ISPs and Telecos) where we've had to
manange servers with numbers in the thousands. And generally the first
question we ask when a new device comes in is: "Is it SNMP enabled?"
Standard UNIX tools vmstat, traceroute, etc. are cool when you're
trying to debug a problem on a machine. Or when you have only a few
machines to maintain. But as soon as you hit about 30 - 40 machines,
your'e going to have problems.
SNMP (v1 and v2c) does, OTOH, have security drawbacks since the
packets pretty much "in the air". But with good host and network
security, you can work around them. SNMPv3 addresses most of the
security issues with the earlier versions.
Mohit Muthanna [mohit (at) muthanna (uhuh) com]
"There are 10 types of people. Those who understand binary, and those
Full-Disclosure - We believe in it.