SNMP OID for User List

RouterOS The Dude
1

which is the OID for > System > user > User List - Active Users ?

I want to monitor, if someone is logging into the device.


found only this for the wireless users 1.3.6.1.4.1.14988.1.1.1.2.1.3 ,

https://exchange.nagios.org/index.php?option=com_mtree&task=search&Itemid=74&searchword=MIKROTIK


but I need winbox or SSH users


and

/user active >>> print oid

is no output there. Maybe not suportet?

2

I see, nobody want to have an alert when there are successfully logins in mikrotik boxes.

So we will see in future more of this.

http://www.tagesschau.de/inland/hacker-angriff-strunz-101.html

http://www.heise.de/newsticker/meldung/Nach-Trojaner-Angriff-Bundestag-soll-neues-Computer-Netzwerk-benoetigen-2687521.html

3

You could use Syslog and alarm monitoring for logon events.
http://wiki.mikrotik.com/wiki/Manual:System/Log#Example:Webproxy_logging

4

yes, but tricky,

check_user -nagios/icinga- would be the easiest way

5

Log into the device, snmpwalk the device, wait till finished, search for your id with “find” in snmpwalk, log out, snmpwalk device, check same oid for your usename. If you find the oid create a function/probe that generates a notification…

6

have you tried it? I cant find OID for a active user with a snmp-walk.

7

Sounds like it is not supported, maybe try on a couple different operating systems?

If it is a Mikrotik box you could use execute to run the command and return a value. Execute is a pain in the ass but once you get it working it is fine.