# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# CherryBlossom -- Installation Guide

19 July, 2012

- 1
- 2
…
- 12
- 13
- 14
- 15
- 16
…
- 20
- 21

SECRET//20350112
snmpwalk –v 1 IP_address_of_CB_Server –c public .
1.3.6.1.4.1.2021.11.ssCpuUser
(U) The suggested “WARN” and “CRITICAL” levels are:
WARN if >= 80 (i.e., 80%)
CRITICAL if >= 90 (i.e., 90 %)
(U) The rationale for these values is as follows: 90% CPU usage is still more than
adequate to run diagnostic utilities while still allowing the system to function normally,
both with Cherry Web Users performing typical functions, and with Flytraps beaconing
regularly.
(U) This value is the same “Cpu x.x%us” value reported by the “top” program.
7.4 (U) Hard Disk Usage
(U) The percentage of hard disk usage can be retrieved by issuing the following
command from the SNMP Monitoring Server:
snmpwalk –v 1 IP_address_of_CB_Server –c public .
1.3.6.1.4.1.2021.9.1.dskPercent.1
(U) The suggested “WARN” and “CRITICAL” levels are:
WARN if >= 80 (i.e., 80%)
CRITICAL if >= 90 (i.e., 90 %)
(U) The rationale for these values is as follows: at 90% hard disk usage (i.e., 30
Gigabytes of total 300 Gigabytes), the system could still handle 1000 Flytraps harvesting
4 kilobytes/hour for over 300 days, and is still more than adequate to run diagnostic
utilities while still allowing the system to function normally, both with Cherry Web Users
performing typical functions, and with Flytraps beaconing regularly.
(U) This value is the same value reported by the “df” program.
7.5 (U) Master/Slave Roles
(U) The proper Master/Slave Role for both CB servers can be checked by issuing the
following command from the SNMP Monitoring Server:
snmpwalk –v 1 IP_address_of_CB_Server –c public .
1.3.6.1.4.1.2021.50.100.1
(U) The command returns 0 if OK, or non-zero if there is a problem.
(U) A more descriptive Master/Slave Role string can be retrieved by issuing the
following command from the SNMP Monitoring Server:
snmpwalk –v 1 IP_address_of_CB_Server –c public .
1.3.6.1.4.1.2021.50.101.1
SECRET//20350112
14

- 1
- 2
…
- 12
- 13
- 14
- 15
- 16
…
- 20
- 21