Checkpoint FW mibs vs snmp generator

Vasilii Mazyliuk

unread,

Nov 19, 2020, 10:08:32 AM11/19/20

to Prometheus Users

Hey!

I have such issue.

Trying to generate snmp.yml config from checkpoint mibs and receiving huge amount of errors.

Checkpoint Mibs are taken from here (R80.40 version): https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk90470

root@ubuntu:~/go/src/github.com/prometheus/snmp_exporter/generator# ./generator parse_errors | wc -l
level=info ts=2020-11-19T13:26:00.958Z caller=net_snmp.go:142 msg="Loading MIBs" from=mibs
level=warn ts=2020-11-19T13:26:00.969Z caller=main.go:120 msg="NetSNMP reported parse error(s)" errors=4356
4356

Errors look like this:

...
id not find 'fwLSConnOverallDesc' in module CHECKPOINT-MIB (mibs/chkpnt-trap.mib)
Did not find 'fwLocalLoggingDesc' in module CHECKPOINT-MIB (mibs/chkpnt-trap.mib)
Did not find 'fwLocalLoggingStat' in module CHECKPOINT-MIB (mibs/chkpnt-trap.mib)
Did not find 'fwLocalLoggingDesc' in module CHECKPOINT-MIB (mibs/chkpnt-trap.mib)
Did not find 'fwLocalLoggingStat' in module CHECKPOINT-MIB (mibs/chkpnt-trap.mib)
Did not find 'fwLocalLoggingDesc' in module CHECKPOINT-MIB (mibs/chkpnt-trap.mib)
Did not find 'fwLocalLoggingStat' in module CHECKPOINT-MIB (mibs/chkpnt-trap.mib)
Unlinked OID in CHECKPOINT-TRAP-MIB: checkpoint ::= { enterprises 2620 }
Undefined identifier: enterprises near line 67 of mibs/chkpnt-trap.mib
Cannot adopt OID in CHECKPOINT-MIB: memDiskTransfers64 ::= { svnMem64 7 }
Cannot adopt OID in CHECKPOINT-MIB: memSwapsSec64 ::= { svnMem64 6 }
Cannot adopt OID in CHECKPOINT-MIB: memFreeReal64 ::= { svnMem64 5 }
Cannot adopt OID in CHECKPOINT-MIB: memActiveReal64 ::= { svnMem64 4 }
...

generator.yml I'm trying:

# CheckPoint FW R80.40

modules:

cpfw:

walk:

- fwIfIndex

- fwIfName

- fwAcceptPcktsIn

auth:

community: <...>

Version of generator is the last from master.

Could you please point me if I'm doing something wrong?

Ben Kochie

unread,

Nov 19, 2020, 11:54:01 AM11/19/20

to Vasilii Mazyliuk, Prometheus Users

Usually the problem is printed at the top of the parse_errors output, typically you either have conflicting files, or are missing something from the "IMPORTS" section of the CHECKPOINT-MIB.

CHECKPOINT-MIB DEFINITIONS ::= BEGIN

-- SUBTREE: 1.3.6.1.4.1.2620.1
-- iso.org.dod.internet.private.enterprises.checkpoint.products

IMPORTS
MODULE-IDENTITY, OBJECT-TYPE, Integer32, Unsigned32, IpAddress, Counter32, NOTIFICATION-TYPE, enterprises
FROM SNMPv2-SMI
OBJECT-GROUP
FROM SNMPv2-CONF
DisplayString
FROM SNMPv2-TC;

--
You received this message because you are subscribed to the Google Groups "Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/766f080b-3b68-4433-aaf9-df8a8fd6fb89n%40googlegroups.com.

Vasilii Mazyliuk

unread,

Nov 20, 2020, 4:18:37 AM11/20/20

to Prometheus Users

Top of the parse_errors looks like this:

root@ubuntu:~/go/src/github.com/prometheus/snmp_exporter/generator# ./generator parse_errors

level=info ts=2020-11-20T08:23:56.422Z caller=net_snmp.go:142 msg="Loading MIBs" from=/root/go/src/github.com/prometheus/snmp_exporter/generator/mibs

level=warn ts=2020-11-20T08:23:56.431Z caller=main.go:120 msg="NetSNMP reported parse error(s)" errors=4356

MIB search path: /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs

Cannot find module (SNMPv2-SMI): At line 19 in /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/GaiaTrapsMIB.mib

Cannot find module (SNMPv2-TC): At line 23 in /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/GaiaTrapsMIB.mib

Cannot find module (SNMPv2-SMI): At line 9 in /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/chkpnt.mib

Cannot find module (SNMPv2-TC): At line 13 in /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/chkpnt.mib

Did not find 'enterprises' in module #-1 (/root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/chkpnt.mib)

Did not find 'DisplayString' in module #-1 (/root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/chkpnt.mib)

Unlinked OID in CHECKPOINT-MIB: checkpoint ::= { enterprises 2620 }

Undefined identifier: enterprises near line 15 of /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/chkpnt.mib

Ben Kochie

unread,

Nov 20, 2020, 4:30:40 AM11/20/20

to Vasilii Mazyliuk, Prometheus Users

Exactly as I said, you're missing MIB files for required includes

Cannot find module (SNMPv2-SMI): At line 19 in /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/GaiaTrapsMIB.mib

Cannot find module (SNMPv2-TC): At line 23 in /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/GaiaTrapsMIB.mib

Cannot find module (SNMPv2-SMI): At line 9 in /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/chkpnt.mib

Cannot find module (SNMPv2-TC): At line 13 in /root/go/src/github.com/prometheus/snmp_exporter/generator/mibs/chkpnt.mib

To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/bacdd823-20bb-4637-81dc-4eb4a1c0dd7dn%40googlegroups.com.

Vasilii Mazyliuk

unread,

Nov 20, 2020, 4:38:38 AM11/20/20

to Prometheus Users

Actually I don't know what does it mean here by Cannot find module
Because lines 17-23 in GaiaTrapsMIB.mib looks like this:

17 IMPORTS

18 MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE, enterprises

19 FROM SNMPv2-SMI

20 NOTIFICATION-GROUP

21 FROM SNMPv2-CONF

22 DisplayString

23 FROM SNMPv2-TC

And the same for other mib file

Vasilii Mazyliuk

unread,

Nov 20, 2020, 7:57:11 AM11/20/20

to Prometheus Users

Ok I fugured it out
I needed all MIBs from `make mibs` as well and I have tried only checkpoint mibs.