添加链接
link管理
链接快照平台
  • 输入网页链接,自动生成快照
  • 标签化管理网页链接
ip-assignment: static ipv6-address: unknown ipv6-link-local-address: fe80::a66:1fff:fe02:1eb3/64 ipv6-default-gateway: mac-address: 08:66:1f:02:1e:b3 time: Thu Nov 12 00:12:29 2020 uptime: 8 days, 1:56:55 family: 3200 model: PA-3260 serial: 016xxxxxxxxx cloud-mode: non-cloud sw-version: 8.1.15-h3 global-protect-client-package-version: 5.1.5 app-version: 8320-6305 app-release-date: 2020/09/15 11:51:02 PDT av-version: 0 av-release-date: threat-version: 8320-6305 threat-release-date: 2020/09/15 11:51:02 PDT wf-private-version: 0 wf-private-release-date: unknown url-db: paloaltonetworks wildfire-version: 0 wildfire-release-date: url-filtering-version: 0000.00.00.000 global-protect-datafile-version: unknown global-protect-datafile-release-date: unknown global-protect-clientless-vpn-version: 88-203 global-protect-clientless-vpn-release-date: logdb-version: 8.1.8 platform-family: 3200 vpn-disable-mode: off multi-vsys: off operational-mode: normal device-certificate-status: None admin@Lab-FW>
user@linux->  snmpwalk -v 2c -c public 10.1.1.1 sysUpTime
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (69512883) 8 days, 1:05:28.83



Environment


帕洛阿尔托网络防火墙监控 SNMP

Cause


  • sysUpTime 是一个定义 OID 为"自系统网络管理部分上次重新初始化以来的时间(以百分之一秒为百分之一秒)" 的标准。 这意味着此值不等于系统正常运行时间,但等于 snmp 进程正常运行时间。(rfc3418)
  • 您可以 firewall 通过 小时系统更新时间(1.3.6.1.2.1.1.25.1.1.0) 获得实际系统正常运行时间



Resolution


  • 预期系统正常运行时间值与系统正常运行时间不同
  • 重新启动 snmpd 进程时,将重置 sysUpTime。
    admin@Lab-FW> debug software restart process snmpd
    Process snmpd was restarted by user admin
    admin@Lab-FW>
    !! before restart snmpd process user@linux-> snmpwalk -v 2c -c public 10.1.1.1 sysUpTime DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (69586212) 8 days, 1:17:42.12 !! after restart snmpd process user@linux-> snmpwalk -v 2c -c public 10.1.1.1 sysUpTime DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (555) 0:00:05.55 user@linux-> snmpwalk -v 2c -c public 10.1.1.1 sysUpTime DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (1561) 0:00:15.6
  • 您可以 firewall 通过 小时系统更新时间(1.3.6.1.2.1.1.25.1.1.0) 获得实际系统正常运行时间
    admin@Lab-FW> show system info | match uptime
    uptime: 8 days, 2:19:12
    admin@Lab-FW>
    user@linux-> snmpwalk -v 2c -c public 10.1.1.1 1.3.6.1.2.1.25.1.1.0 HOST-RESOURCES-MIB::hrSystemUptime.0 = Timeticks: (69955383) 8 days, 2:19:13.83