# snmpd.conf

# First, map the community name (COMMUNITY) into a security name
# (local and mynetwork, depending on where the request is coming
# from):

#	sec.name  source	community
com2sec	local	  localhost	 public
com2sec	mynetwork 172.16.0.0/12	 public
com2sec	mynetwork 10.0.0.0/8	 public
com2sec	mynetwork 192.168.0.0/16 public



# Second, map the security names into group names:

#		sec.model sec.name
group MyRWGroup	v1	  local
group MyRWGroup	v2c	  local
group MyRWGroup	usm	  local
group MyROGroup	v1	  mynetwork
group MyROGroup	v2c	  mynetwork
group MyROGroup	usm	  mynetwork


# Third, create a view for us to let the groups have rights to:

#	 incl/excl subtree mask
view all included  .1	   80


# Finally, grant the 2 groups access to the 1 view with different
# write permissions:

#		 context sec.model sec.level match read	write notif
access MyROGroup ""	 any	   noauth    exact all	none  none
access MyRWGroup ""	 any	   noauth    exact all	all   none


# System contact information

sysLocation "Somewhere in or near Leiden"
sysContact "Stichting Wireless Leiden <beheer@lijst.wirelessleiden.nl> / +31 71 5139817"


# Process checks.

#    name	  max min
proc lvrouted 1   1
proc sshd	  8   1
proc syslogd  1   1
proc ntpd	  1   1
proc snmpd	  1   1
proc dhcpd	  1   1
proc pen	  1   1
proc cron	  2   1
proc named	  1   1


# disk checks

#    path min
disk /    5%
disk /var 20%
#disk /usr 80%
disk /tmp 220%
#includeAllDisks 85%


# load average checks

#    1max 5max 15max
load 12   14   14


# Pass through control

#    miboid		  exec-command
extend .1.3.6.1.4.1.2021.70 dhcp-users /bin/sh -c "cat /var/db/dnsmasq.leases \| awk '{ print $1,$2,$3 }'"
extend .1.3.6.1.4.1.2021.71 portal-users /bin/sh -c "cat /var/db/clients \| awk '{ print $1,$2,$3 }'"
extend .1.3.6.1.4.1.2021.72 arp-users /bin/sh -c "cat /var/db/connect.gone \| awk '{ print $1,$2,$3,$4,$5 }'"
extend .1.3.6.1.4.1.2012.73 proxy-users bin/sh -c "cat /var/log/tinyproxy.log \| grep -v 2cnode \| awk '/.wleiden.net/ { print $2,$3,$11 }' \| tr -d '[]' \| sort \| uniq "

extend .1.3.6.1.4.1.2021.80 etc-checksum /bin/sh -c "cat `find /etc` \| md5"
extend .1.3.6.1.4.1.2021.81 local-list /bin/sh -c "find /usr/local/ \| wc -l"
extend .1.3.6.1.4.1.2021.82 build-box /bin/sh -c "uname -v \| awk '{ print $10 }' \| cut -d \\: -f 1"
extend .1.3.6.1.4.1.2021.83 freebsd-ver /bin/sh -c "uname -r"
extend .1.3.6.1.4.1.2021.84 wl-ver /bin/sh -c "cat /tools/wl-release.txt \| awk '/Revision/ {print $2 }' "
extend .1.3.6.1.4.1.2021.85 wl-date /bin/sh -c "cat /tools/wl-release.txt | awk '/Changed\ Date/ {print $4,$5 }'"

extend .1.3.6.1.4.1.2021.90 uptime /bin/sh -c "uptime"
extend .1.3.6.1.4.1.2021.91 vmstat /bin/sh -c "vmstat 1 2"
extend .1.3.6.1.4.1.2021.92 uptime /bin/sh -c "uptime \| awk '{ split($5,a,\":\"); print ($3*60*24+a[1]*60+a[2]) }'"
extend .1.3.6.1.4.1.2021.93 soa /bin/sh -c "dig +short soa wleiden.net @localhost \| awk '{ print $3 }' \| tail -1"
extend .1.3.6.1.4.1.2021.94 physmem /bin/sh -c "sysctl -n hw.physmem"