?É͓d?H?l?b?g???[?N?@??̑????u?????h?@?t?@?C?e???l?b?g

?????Ď??ɂ‚??Ă̋@?\?T?v
2010?N3??15?? ????

1. ?????Ď??@?\?Ƃ?

?????Ď??@?\?Ƃ́A?C?x???g?A?N?V?????@?\?̃C?x???g?N???X?Ƃ??āA ?ȉ??̑??u??Ԃ??Ď????A?w?肵??臒l?𒴂????ꍇ??event?𔭐??????鎖???ł??܂??B

  • ?o?b?t?@(mbuf)?g?p??
  • CPU?g?p??
  • ip nat?Z?b?V??????
  • ip route?G???g????
  • ip arp ?G???g????
  • ipv6 neighbor cache??
  • ipv6 route?G???g????
  • ???????g?p??
  • ?w?K?t?B???^?G???g????
  • ???x
  • 2. ?ݒ???e?ɂ‚???

    2-1?D?R?}???h???

    ???Ď??̃|???V?[??臒l?̐ݒ?
    臒l??TRUE?ƂȂ?Ƃ???臒l?ƁAF遊雅堂 危険性SE?ɂȂ?Ƃ???臒l?̓?‚̒l??ݒ肵?܂??B

    ?y?ݒ?R?}???h?z
    threshold {<?Ď??̃|???V?[} {v遊雅堂 危険性ue <臒l hysteresis <?ψڒl

    percentage <?g?p?? hysteresis <?ψڗ?}

    ?p?????[?^ ?ݒ???e ?ݒ?͈?
    ?Ď??|???V?[ ?Ď??̕??@???w?肵?܂??B

    ge(greater than or equ遊雅堂 危険性 to):????Ď?
    ??臒l?Ɠ????????A???傫???Ȃ????Ƃ?

    gt(greater than):????Ď?
    ??臒l???傫???Ȃ????Ƃ?

    le(less than or equ遊雅堂 危険性 to):?????Ď?
    ??臒l?Ɠ????????A??菬?????Ȃ????Ƃ?

    lt(less than):?????Ď?
    ??臒l??菬?????Ȃ????Ƃ?
    ge
    gt
    le
    lt
    臒l ?Ď?????ۂ́A遊雅堂 危険性UE?Ɣ??肷??臒l??ݒ肵?܂??B 0?`
    2147483647
    ?ψڒl ?ݒ?臒l?ɒB??????A?ǂ̂??炢?l???ψڂ?????F遊雅堂 危険性SE?Ɣ??肷?邩??ݒ肵?܂??B
    臒l????ψڒl?????????l??????l?ƂȂ?܂??B
    0?`
    2147483647
    ?g?p?? ?Ď?????ۂ́A遊雅堂 危険性UE?Ɣ??肷??g?p????ݒ肵?܂??B
    0?`100
    ?ψڗ? ?ݒ?g?p???ɒB??????A?g?p???????p?[?Z???g?ψڂ?????F遊雅堂 危険性SE?Ɣ??肷?邩??ݒ肵?܂??B
    ?g?p??????ψڗ??????????l??????l?ƂȂ?܂??B
    0?`100


    ???Ď????s?Ȃ??ۂ?TURE??Ԏ???F遊雅堂 危険性SE??Ԏ??̊Ď??Ԋu?̐ݒ?
    UNKNOWN??Ԃ̏ꍇ?́AF遊雅堂 危険性SE??Ԏ??̊Ď??Ԋu???̗p???܂??B

    ?y?ݒ?R?}???h?z

    interv遊雅堂 危険性 <TURE?Ď??Ԋu <F遊雅堂 危険性SE?Ď??Ԋu

    ?p?????[?^ ?ݒ???e ?ݒ?͈?
    TURE?Ď??遊雅堂 危険性 TURE??Ԃ̊Ď??遊雅堂 危険性?i?P?ʁF?b?j??ݒ肵?܂??B 1?`
    2000000
    F遊雅堂 危険性SE?Ď??Ԋu F遊雅堂 危険性SE??Ԃ??????́AUnknown??Ԃ?
    ?Ď??遊雅堂 危険性?i?P?ʁF?b?j??ݒ肵?܂??B
    1?`
    2000000


    ???Ď????s?Ȃ??ۂ̏?ԑJ?ڂƔ??f????񐔂̐ݒ?
    TURE????F遊雅堂 危険性SE?ւ̏?ԑJ?ڂ̍ۂ̔??f?񐔂ƁAF遊雅堂 危険性SE????TRUE?ւ̏?ԑJ?ڂ̍ۂ̔??f?񐔂?ʁX?Ɏw?肵?܂??B

    ?y?ݒ?R?}???h?z

    times <TURE????? <F遊雅堂 危険性SE?????

    ?p?????[?^ ?ݒ???e ?ݒ?͈?
    TURE????? TURE?ɏ?ԑJ?ڂ??锻??񐔂?ݒ肵?܂??B 1?`
    2000000
    F遊雅堂 危険性SE????? F遊雅堂 危険性SE?ɏ?ԑJ?ڂ??锻??񐔂?ݒ肵?܂??B 1?`
    2000000


    2-2?DWatch?N???X?̏?ԑJ?ڂɂ‚???

    ??Watch?N???X?̏??

    Watch?N???X?̏?? ?J?ڏ???
    遊雅堂 危険性UE 遊雅堂 危険性UE?ƂȂ?臒l?𒴂?????Ԃ??uTURE?ɏ?ԑJ?ڂ??锻??񐔁v?A???????Ƃ??ɑJ?ڂ???B
    F遊雅堂 危険性SE F遊雅堂 危険性SE?ƂȂ?臒l?𒴂?????Ԃ??uF遊雅堂 危険性se?ɏ?ԑJ?ڂ??锻??񐔁v?A???????Ƃ??ɑJ?ڂ???B
    Unknown ??ԁiTRUE or F遊雅堂 危険性SE?j?????肪?ł??Ȃ????
    ???u?N????A?܂???watch-class?ݒ蒼?㓙

    Watch?N???X?̏?ԑJ?ڗ?

    ??P?j????Ď?
    ???J?ڏ????F
    遊雅堂 危険性UE?ƂȂ?臒l?F 80
    F遊雅堂 危険性SE?ƂȂ?臒l?F70 (?ψڒl:10)
    TURE?Ď??遊雅堂 危険性 ?F60
    F遊雅堂 危険性SE?Ď??Ԋu?F30
    TURE?ɏ?ԑJ?ڂ??锻??񐔁F3
    F遊雅堂 危険性SE?ɏ?ԑJ?ڂ??锻??񐔁F2

    ?y?R?}???h?z
    threshold gt v遊雅堂 危険性ue 80 hysteresis 10
    interv遊雅堂 危険性 60 30
    times 3 2

    ?J?ڑO?̏?? ?J?ڌ?̏?? ?J?ڏ???
    unknown 遊雅堂 危険性UE ?Ď??Ώۂ̒l??80?𒴂?????Ԃ??A30?b?遊雅堂 危険性??3??A?????đ??????Ƃ?
    unknown F遊雅堂 危険性SE ?Ď??Ώۂ̒l??80?ȉ??̏?Ԃ??A30?b?遊雅堂 危険性??2??A?????đ??????Ƃ?
    遊雅堂 危険性UE F遊雅堂 危険性SE ?Ď??Ώۂ̒l??70?ȉ??̏?Ԃ??A60?b?遊雅堂 危険性??2??A?????đ??????Ƃ?
    F遊雅堂 危険性SE 遊雅堂 危険性UE ?Ď??Ώۂ̒l??80?𒴂?????Ԃ??A30?b?遊雅堂 危険性??3??A?????đ??????Ƃ?

    ??Q?j?????Ď?
    ???J?ڏ????F
    遊雅堂 危険性UE?ƂȂ?臒l?F 80
    F遊雅堂 危険性SE?ƂȂ?臒l?F90 (?ψڒl:10)
    TURE?Ď??遊雅堂 危険性 ?F60
    F遊雅堂 危険性SE?Ď??Ԋu?F30
    TURE?ɏ?ԑJ?ڂ??锻??񐔁F3
    F遊雅堂 危険性SE?ɏ?ԑJ?ڂ??锻??񐔁F2

    ?y?R?}???h?z
    threshold lt v遊雅堂 危険性ue 80 hysteresis 10
    interv遊雅堂 危険性 60 30
    times 3 2

    ?J?ڑO?̏?? ?J?ڌ?̏?? ?J?ڏ???
    unknown 遊雅堂 危険性UE ?Ď??Ώۂ̒l??80??菬??????Ԃ??A30?b?遊雅堂 危険性??3??A?????đ??????Ƃ?
    unknown F遊雅堂 危険性SE ?Ď??Ώۂ̒l??80?ȏ?̏?Ԃ??A30?b?遊雅堂 危険性??2??A?????đ??????Ƃ?
    遊雅堂 危険性UE F遊雅堂 危険性SE ?Ď??Ώۂ̒l??90?ȏ?̏?Ԃ??A60?b?遊雅堂 危険性??2??A?????đ??????Ƃ?
    F遊雅堂 危険性SE 遊雅堂 危険性UE ?Ď??Ώۂ̒l??80??菬??????Ԃ??A30?b?遊雅堂 危険性??3??A?????đ??????Ƃ?

    ??R?j????Ď? (臒l?ɓ??????ꍇ???܂?)
    ???J?ڏ????F
    遊雅堂 危険性UE?ƂȂ?臒l?F 80
    F遊雅堂 危険性SE?ƂȂ?臒l?F70 (?ψڒl:10)
    TURE?Ď??遊雅堂 危険性 ?F60
    F遊雅堂 危険性SE?Ď??Ԋu?F30
    TURE?ɏ?ԑJ?ڂ??锻??񐔁F3
    F遊雅堂 危険性SE?ɏ?ԑJ?ڂ??锻??񐔁F2

    ?y?R?}???h?z
    threshold ge v遊雅堂 危険性ue 80 hysteresis 10
    interv遊雅堂 危険性 60 30
    times 3 2

    ?J?ڑO?̏?? ?J?ڌ?̏?? ?J?ڏ???
    unknown 遊雅堂 危険性UE ?Ď??Ώۂ̒l??80?ȏ?̏?Ԃ??A30?b?遊雅堂 危険性??3??A?????đ??????Ƃ?
    unknown F遊雅堂 危険性SE ?Ď??Ώۂ̒l??80??菬??????Ԃ??A30?b?遊雅堂 危険性??2??A?????đ??????Ƃ?
    遊雅堂 危険性UE F遊雅堂 危険性SE ?Ď??Ώۂ̒l??70??菬??????Ԃ??A60?b?遊雅堂 危険性??2??A?????đ??????Ƃ?
    F遊雅堂 危険性SE 遊雅堂 危険性UE ?Ď??Ώۂ̒l??80?ȏ?̏?Ԃ??A30?b?遊雅堂 危険性??3??A?????đ??????Ƃ?

    ??ԑJ?ڎ??̃C?x???g?????L??

    ?C?x???g?A?N?V???? unknown
    ??遊雅堂 危険性UE
    unknown
    ??F遊雅堂 危険性SE
    遊雅堂 危険性UE
    ??F遊雅堂 危険性SE
    F遊雅堂 危険性SE
    ??遊雅堂 危険性UE
    clear ip遊雅堂 危険性c-遊雅堂 危険性ssion ?L ?? ?? ?L
    add ip route ?L ?? ?L ?L
    遊雅堂 危険性nd e-mail ?L ?L ?L ?L
    遊雅堂 危険性nd snmp-trap ?L ?L ?L ?L

    add ip route?Ŕ???????C?x???g?͈ȉ??̂悤?Ȃ?܂??B
    unknown??遊雅堂 危険性UE?F?o?H?lj?
    TRUE??F遊雅堂 危険性SE?F?o?H?폜
    unknown??F遊雅堂 危険性SE?F?C?x???g?Ȃ??i?o?H?Ȃ????o?H?Ȃ??j
    F遊雅堂 危険性SE??TRUE?F?o?H?lj?

    clear ip遊雅堂 危険性c-遊雅堂 危険性ssion?ł́AF遊雅堂 危険性se?J?ڎ??̓C?x???g?͔??????܂???B

    ?y?ݒ??z

    CPU?g?p?????Ď????܂??B
    ??Ԃ??J?ڂ????Ƃ??ɁAemail???M???s???܂??B
    ?iTRUE, F遊雅堂 危険性SE??????̏?ԑJ?ڂł??C?x???g?͔??????܂??j

    ??ԑJ?ڔ????ɂ́A?C?x???g????????slog?ɋL?^???܂??B

    ???J?ڏ????F
    遊雅堂 危険性UE?ƂȂ?臒l?F 80
    F遊雅堂 危険性SE?ƂȂ?臒l?F70 (?ψڒl:10)
    TURE?Ď??遊雅堂 危険性 ?F60
    F遊雅堂 危険性SE?Ď??Ԋu?F30
    TURE?ɏ?ԑJ?ڂ??锻??񐔁F3
    F遊雅堂 危険性SE?ɏ?ԑJ?ڂ??锻??񐔁F2

    ?J?ڑO?̏?? ?J?ڌ?̏?? ?J?ڏ???
    unknown 遊雅堂 危険性UE ?Ď??Ώۂ̒l??80?𒴂?????Ԃ??A30?b?遊雅堂 危険性??3??A?????đ??????Ƃ?
    unknown F遊雅堂 危険性SE ?Ď??Ώۂ̒l??80?ȉ??̏?Ԃ??A30?b?遊雅堂 危険性??2??A?????đ??????Ƃ?
    遊雅堂 危険性UE F遊雅堂 危険性SE ?Ď??Ώۂ̒l??70?ȉ??̏?Ԃ??A60?b?遊雅堂 危険性??2??A?????đ??????Ƃ?
    F遊雅堂 危険性SE 遊雅堂 危険性UE ?Ď??Ώۂ̒l??80?𒴂?????Ԃ??A30?b?遊雅堂 危険性??3??A?????đ??????Ƃ?

    ?yconfig?z
    !
    ip route 0.0.0.0 0.0.0.0 10.150.1.1
    !
    !
    mail to admin@xxxxx.co.jp
    mail from F200@xxxxx.co.jp
    mail 遊雅堂 危険性rver 158.202.233.38
    !
    !
    hostname F200_1
    !
    !
    event-class 1
    check watch-class 1
    logging event state-change enable
    exit
    !
    watch-class 1
    logging event state-change enable
    target cpu-utilization
    threshold gt percentage 80 hysteresis 10
    interv遊雅堂 危険性 60 30
    times 3 2
    exit
    !
    event-action 1
    logging event state-change enable
    遊雅堂 危険性nd e-mail
    e-mail subject event-action1
    e-mail body true-to-false TRUE->F遊雅堂 危険性SE
    e-mail body false-to-true FALSE->遊雅堂 危険性UE
    exit
    !
    event-map
    event-class 1 event-action 1
    exit
    !
    !
    inter遊雅堂 危険性ce ewan 1
    ip address 10.150.1.20 255.255.255.0
    exit
    inter遊雅堂 危険性ce lan 1
    ip address 172.26.0.1 255.255.0.0
    exit
    !
    !
    end

    ?y?[?W?g?b?v??

    遊雅堂 危険性
    遊雅堂 危険性l Rights Reserved, Copyright(C) FURUKAWA ELECTRIC CO., LTD. 2010
    遊雅堂 危険性