Palo Alto Networks Knowledgebase: Session Monitoring with MRTG
Session Monitoring with MRTG
Created On 02/07/19 23:59 PM - Last Updated 02/07/19 23:59 PM
Multi Router Traffic Grapher (MRTG) is an open source tool that monitors network interface traffic and other SNMP objects. MRTG can even be extended to non-SNMP monitoring via external scripting. When used to monitor Palo Alto Networks, MRTG can monitor any SNMP Object-IDs (OIDs) available in the standard or Palo Alto Networks MIBs. The Palo Alto Networks MIBs for each version of PAN-OS are available on the Technical Documentation page.
Use the following MRTG configuration file to monitor the number of TCP, UDP, and ICMP sessions in use and compare to the total number of sessions. When modified to use the appropriate MaxBytes parameter for a given hardware platform, the MRTG output displays the session utilization as a percentage of the platform's overall session capacity.
# File: /etc/mrtg/paloalto.cfg
# An MRTG configuration file for monitoring session tables on a Palo Alto Networks firewall