Appendix G MIB Objects
This appendix provides a summary of the objects contained in various management information bases (MIBs), including the Internet-standard MIB (MIB-II) (see RFC 1213), the Remote Network Monitoring MIB for Ethernet (see RFC 1757), token ring (see RFC 1513), and RMON2 (see RFC 2021). Within each MIB, the object identifier (OID) of each major group is also noted.
Groups in MIB II
MIB-II is the Internet-standard MIB. That MIB contains the following groups (see Figure 3.1):
- System provides demographic information about the managed nodes configuration, location, etc.
- Interfaces is a table containing information about the managed nodes interfaces.
- Address Translation is used to convert IP to Physical addresses (now deprecated).
- IP contains Internet Protocolrelated statistics and tables.
- ICMP contains Internet Control Message Protocolrelated input/output statistics.
- TCP contains Transmission Control Protocolrelated connection information and statistics.
- UDP contains User Datagram Protocolrelated information and datagram statistics.
- EGP contains Exterior Gateway Protocolrelated message statistics and a table of neighbor information.
- OIM contains OSI Internet Managementrelated information (defined in RFC 1214 as an arc within MIB-II, but not used with SNMP).
- Transmission contains information about the physical transmission medium.
- SNMP contains Simple Network Management Protocolrelated information and statistics.
The System Group {1.3.6.1.2.1.1}
The System group provides a textual description of the entity in printable ASCII characters. Descriptions include a system description, OID, the length of time since its network management entity was reinitialized, and other administrative details. Implementation of the System group is mandatory. Objects within this group (see Figure 3-2) include:
- sysDescr is a textual description of the entity in printable ASCII characters.
- sysObjectID is the vendors identification of the object.
- sysUpTime is the amount of time (measured in hundredths of seconds) since the network management portion of the system was last reinitialized.
- sysContact is the textual identification of the contact person for this managed node.
- sysName is an administratively assigned name for this node, i.e., the domain name.
- sysLocation is the physical location of the node.
- sysServices is the set of services that the entity primarily provides.
The Interfaces Group {1.3.6.1.2.1.2}
Information about the various hardware interfaces on a managed device is provided by the Interfaces group and presented in a table format (see Figure 3-3) . The first object (ifNumber) indicates the number of interfaces on that device. For each interface, a row is made in the table, with 22 column entries per row. The column entries provide information regarding those interfaces:
- ifNumber is the number of network interfaces present on this system.
- ifTable is a list of interface entries, with the number of entries given by the value of ifNumber.
- ifEntry is an interface entry containing objects at the subnetwork layer and below for a particular interface.
- ifIndex is a unique value, between 1 and the value of ifNumber, for each interface.
- ifDescr is a text string containing information about the interface.
- ifType is the specific type of interface, such as Ethernet, token ring, FDDI, frame relay, etc. (RFC 1213 lists the values for this object.)
- ifMTU is the largest IP datagram, measured in octets, that can be sent/received on this interface.
- ifSpeed is an estimate of the interfaces current bandwidth measured in bits per second.
- ifPhysAddress is the interfaces address at the protocol layer immediately below IP.
- ifAdminStatus is the desired state of the interface.
- ifOperStatus is the current operational state of the interface.
- ifLastChange is the value of sysUpTime at the time that the interface entered its current operational state.
- ifInOctets is the total number of octets received on the interface.
- ifInUcastPkts is the number of subnetwork-unicast packets delivered to a higher-layer protocol.
- ifInNUcastPkts is the number of subnetwork nonunicast packets delivered to a higher-layer protocol.
- ifInDiscards is the number of inbound packets that were discarded for reasons other than errors.
- ifInErrors is the number of inbound packets that contained errors, preventing their delivery to a higher-layer protocol.
- ifInUnknownProtos is the number of packets received but discarded because of an unknown or unsupported protocol.
- ifOutOctets is the total number of octets transmitted out of the interface.
- ifOutUcastPkts is the total number of packets that higher-level protocols requested be transmitted to a subnet-unicast address, including those that were discarded or not sent.
- ifOutNUcastPkts is the total number of packets that higher-level protocols requested be transmitted to a nonunicast (i.e., subnetwork broadcast or subnetwork multicast) address, including those that were discarded or not sent.
- ifOutDiscards is the number of outbound packets that were discarded for reasons other than errors.
- ifOutErrors is the number of outbound packets that could not be transmitted because of errors.
- ifOutQLen is the length, in packets, of the output packet queue.
- ifSpecific is a reference to MIB definitions specific to the particular media being used to realize the interface. This value provides additional information on that interface.
The Address Translation Group {1.3.6.1.2.1.3}
The Address Translation group (see Figure 3-4) was included in MIB-I, but deprecated in MIB-II. The purpose of the Address Translation group was to provide a table that translated between IP addresses and physical (hardware) addresses. In MIB-II and future releases, each protocol group will contain its own translation tables. The Address Translation group contains the following objects:
- atTable is comprised of the Address Translation tables containing NetworkAddress to physical address equivalences.
- atEntry, where each entry contains one NetworkAddress to physical address equivalence.
- atIfIndex is an interface identifier that has the same value as ifIndex.
- atPhysAddress is the media-dependent physical address.
- atNetAddress is the NetworkAddress (IP address) that corresponds to the physical address.
The IP Group {1.3.6.1.2.1.4}
The IP (Internet Protocol) group (see Figure 3-5) provides specific information on the usage of that protocol by the various hosts and routers; it is mandatory for all managed nodes. Three tables are included in this group: an address table (ipAddrTable), an IP to physical address translation table (ipNetToMediaTable), and an IP forwarding table (ipForwardTable, which is defined in RFC 1354). The IP forwarding table replaces and obsoletes the IP route table that was included in MIB-II. The IP subtree contains the following objects:
- ipForwarding indicates whether or not this entity is acting as an IP router (a gateway, in Internet terminology).
- ipDefaultTTL is the default value inserted in the IP headers time-to-live field.
- ipInReceives is the total number of input datagrams received.
- ipInHdrErrors is the number of input datagrams discarded due to errors in their IP headers.
- ipInAddrErrors is the number of input datagrams discarded because the IP address in their IP headers destination field was not a valid address to be received at this entity.
- ipForwDatagrams is the number of IP datagrams for which this entity was not their final destination, and for which forwarding to another entity was required.
- ipInUnknownProtos is the number of datagrams received but discarded because of an unknown or unsupported protocol.
- ipInDiscards is the number of input datagrams received but discarded for reasons other than errors.
- ipInDelivers is the total number of input datagrams successfully delivered to IP user protocols, including ICMP.
- ipOutRequests is the total number of IP datagrams that local IP user-protocols (including ICMP) supplied to IP in request for transmission.
- ipOutDiscards is the number of output IP datagrams that were discarded for reasons other than errors.
- ipOutNoRoutes is the number of IP datagrams discarded because no route could be found to transmit them to their destination.
- ipReasmTimeout is the maximum number of seconds that received fragments are held while they are awaiting reassembly at this entity.
- ipReasmReqds is the number of IP fragments received that needed to be reassembled at this entity.
- ipReasmOKs is the number of IP datagrams successfully reassembled.
- ipReasmFails is the number of failures detected by the IP reassembly algorithm.
- ipFragOKs is the number of IP datagrams that have been successfully fragmented at this entity.
- ipFragFails is the number of IP datagrams that have been discarded at this entity because they could not be fragmented.
- ipFragCreates is the number of IP datagram fragments that have been created as a result of fragmentation at this entity.
- ipAddrTable is the table of addressing information relevant to this entrys IP addresses. There are five columns in this table.
- ipAddrEntry is the addressing information for one of this entitys IP addresses.
- ipAdEntAddr is the IP address to which this entrys addressing information pertains.
- ipAdEntIfIndex is the index value that identifies the interface to which this entry applies; it has the same value as ifIndex.
- ipAdEntNetMask is the subnet mask associated with the IP address of this entry.
- ipAdEntBcastAddr is the value of the least significant bit in the IP broadcast address.
- ipAdEntReasmMaxSize is the size of the largest IP datagram that this entity can reassemble.
- ipRoutingTable has been replaced and obsoleted by the ipForwardTable, {ip 24}, below.
- ipNetToMediaTable is the IP translation table used for mapping from IP addresses to physical addresses. This table contains the four columns below.
- ipNetToMediaEntry, where each entry contains one IPAddress to physical address equivalence.
- ipNetToMediaIfIndex is the interface on which this entrys equivalence is effective; it has the same value as ifIndex.
- ipNetToMediaPhysAddress is the media-dependent physical address.
- ipNetToMediaNetAddress is the IpAddress corresponding to the media-dependent physical address.
- ipNetToMediaType is the type of mapping.
- ipRoutingDiscards is the number of routing entries that were chosen to be discarded even though they are valid.
- ipForward is the IP forwarding table.
- ipForwardNumber is the number of current ipForwardTable entries that are not invalid.
- ipForwardTable is this entitys IP routing table, containing 15 columns.
- ipForwardEntry is a particular route to a particular destination.
- ipForwardDest is the destination IP address of this route.
- ipForwardMask contains the subnet mask.
- ipForwardPolicy is the general set of conditions that would cause the selection of one multipath route.
- ipForwardNextHop, on remote routes, is the address of the next system en route.
- ipForwardIfIndex is the ifIndex value that identifies the local interface through which the next hop of this route should be reached.
- ipForwardType is the type of route.
- ipForwardProto is the routing mechanism by which this route was learned.
- ipForwardAge is the number of seconds since this route was last updated.
- ipForwardInfo is a reference to MIB definitions specific to the particular routing protocol which is responsible for this route.
- ipForwardNextHopAS is the Autonomous System number of the next hop.
- ipForwardMetric1 is the primary routing metric for this route.
- ipForwardMetric2 is an alternate routing metric for this route.
- ipForwardMetric3 is an alternate routing metric for this route.
- ipForwardMetric4 is an alternate routing metric for this route.
- ipForwardMetric5 is an alternate routing metric for this route.
The ICMP Group {1.3.6.1.2.1.5}
The ICMP (Internet Control Message Protocol) group (see Figure 3-6) is mandatory for all implementations. This group represents various operations of ICMP within the managed entity; it contains 26 scalar objects:
- icmpInMsgs is the total number of ICMP messages that the entity received.
- icmpInErrors is the number of ICMP messages that the entity received but determined as having ICMP-specific errors.
- icmpInDestUnreachs is the number of ICMP Destination Unreachable messages received.
- icmpInTimeExcds is the number of ICMP Time Exceeded messages received.
- icmpInParmProbs is the number of ICMP Parameter Problem messages received.
- icmpInSrcQuenchs is the number of ICMP Source Quench messages received.
- icmpInRedirects is the number of ICMP Redirect messages received.
- icmpInEchos is the number of ICMP Echo (request) messages received.
- icmpInEchoReps is the number of ICMP Echo Reply messages received.
- icmpInTimestamps is the number of ICMP Timestamp (request) messages received.
- icmpInTimestampReps is the number of ICMP Timestamp Reply messages received.
- icmpInAddrMasks is the number of ICMP Address Mask Request messages received.
- icmpInAddrMaskReps is the number of ICMP Address Mask Reply messages received.
- icmpOutMsgs is the total number of ICMP messages that this entity attempted to send.
- icmpOutErrors is the number of ICMP messages that this entity did not send because of ICMPrelated problems.
- icmpOutDestUnreachs is the number of ICMP Destination Unreachable messages sent.
- icmpOutTimeExcds is the number of ICMP Time Exceeded messages sent.
- icmpOutParmProbs is the number of ICMP Parameter Problem messages sent.
- icmpOutSrcQuenchs is the number of ICMP Source Quence messages sent.
- icmpOutRedirects is the number of ICMP Redirect messages sent.
- icmpOutEchos is the number of ICMP Echo (request) messages sent.
- icmpOutEchoReps is the number of ICMP Echo Reply messages sent.
- icmpOutTimestamps is the number of ICMP Timestamp (request) messages sent.
- icmpOutTimestampReps is the number of ICMP Timestamp Reply messages sent.
- icmpOutAddrMasks is the number of ICMP Address Mask Request messages sent.
- icmpOutAddrMaskReps is the number of ICMP Address Mask Reply messages sent.
The TCP Group {1.3.6.1.2.1.6}
The TCP (Transmission Control Protocol) group (see Figure 3-7) is mandatory and provides information regarding TCP operation and connections. This group contains one table with the connection information (tcpConnTable) and 14 scalars:
- tcpRtoAlgorithm is the algorithm used to determine the timeout value used for retransmitting unacknowledged octets.
- tcpRtoMin is the minimum value (measured in milliseconds) permitted by a TCP implementation for the retransmission timeout.
- tcpRtoMax is the maximum value (measured in milliseconds) permitted by a TCP implementation for the retransmission timeout.
- tcpMaxConn is the limit on the total number of TCP connections the entity can support.
- tcpActiveOpens is the number of times TCP connections have made a transition to the SYN-SENT state from the CLOSED state.
- tcpPassiveOpens is the number of times TCP connections have made a direct transition to the SYN-REVD state from the LISTEN state.
- tcpAttemptFails is the number of failed connection attempts.
- tcpEstabResets is the number of resets that have occurred.
- tcpCurrEstab is the number of TCP connections having a current state of either ESTABLISHED or CLOSE-WAIT.
- tcpInSegs is the total number of segments received.
- tcpOutSegs is the total number of segments sent.
- tcpRetransSegs is the total number of segments retransmitted.
- tcpConnTable is a table containing information about this entitys existing TCP connections. There are five columns in this table (see below).
- tcpConnEntry has information about a particular current TCP connection.
- tcpConnState is the state of this TCP connection.
- tcpConnLocalAddress is the local IP address for this TCP connection.
- tcpConnLocalPort is the local port number for this TCP connection.
- tcpConnRemAddress is the remote IP address for this TCP connection.
- tcpConnRemPort is the remote port number for this TCP connection.
- tcpInErrs is the total number of segments received in error.
- tcpOutRsts is the number of TCP segments sent containing the RST flag.
The UDP Group {1.3.6.1.2.1.7}
The UDP (User Datagram Protocol) group (see Figure 3-8) is mandatory and provides information regarding UDP operation. This group is much smaller than the TCP group, given that UDP is a connectionless protocol unlike TCPs connection orientation. Therefore, no connection attempt, establishment, reset, or other such information needs to be compiled. The UDP group contains four scalars and one table (udpTable):
- udpInDatagrams is the total number of UDP datagrams delivered to UDP users.
- udpNoPorts is the total number of received UDP datagrams for which there was not an application at the destination port.
- udpInErrors is the number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port.
- udpOutDatagrams is the total number of UDP datagrams sent from this entity.
- udpTable is a table containing UDP listener information, providing details about the UDP end points that are accepting datagrams.
- udpEntry contains information about a particular UDP listener. There are two columns in this table, as shown below.
- udpLocalAddress is the local IP address for this UDP listener.
- udpLocalPort is the local port number for this UPD listener.
The EGP Group {1.3.6.1.2.1.8}
The EGP (Exterior Gateway Protocol) group is mandatory for all systems that implement the EGP. This protocol is used for communication between autonomous (i.e., self-contained) systems, and is described in detail in RFC 904. This group (see Figure 3-9) includes five scalar objects and one table containing EGP neighbor information:
- egpInMsgs is the number of EGP messages received without error.
- egpInErrors is the number of EGP messages received that proved to be in error.
- egpOutMsgs is the total number of locally generated EGP messages.
- egpOutErrors is the number of locally generated EGP messages not sent due to resource limitations within an EGP entity.
- egpNeighTable is the EGP neighbor table.
- egpNeighEntry contains information about this entitys relationship with a particular EGP neighbor. This table contains 15 columns, listed below.
- egpNeighState is the EGP state of the local systems with respect to this entrys EGP neighbor.
- egpNeighAddr is the IP address of this entrys EGP neighbor.
- egpNeighAs is the autonomous system of this EGP peer.
- egpNeighInMsgs is the number of EGP messages received without error from this EGP peer.
- egpNeighInErrs is the number of EGP messages received from this EGP peer that contain errors.
- egpNeighOutMsgs is the number of locally generated EGP messages to this EGP peer.
- egpNeighOutErrs is the number of locally generated EGP messages not sent to this EGP peer due to resource limitations within an EGP entity.
- egpNeighInErrMsgs is the number of EGP-defined error messages received from this EGP peer.
- egpNeighOutErrMsgs is the number of EGP-defined error messages sent to this EGP peer.
- egpNeighStateUps is the number of EGP state transitions to the UP state with this EGP peer.
- egpNeighStateDowns is the number of EGP state transitions from the UP state to any other state with this EGP peer.
- egpNeighIntervalHello is the interval (measured in hundredths of a second) between EGP Hello command retransmissions.
- egpNeighIntervalPoll is the interval (measured in hundredths of a second) between EGP poll command retransmissions.
- egpNeighMode is the polling mode of this EGP entity.
- egpNeighEventTrigger is a control variable used to trigger operator-initiated Start and Stop events.
- egpAs is the autonomous system number of this EGP entity.
The CMOT (OIM) Group {1.3.6.1.2.1.9}
The CMOT (Common Management Information Protocol [CMIP] over TCP/IP) group is given a placeholder in MIB-II. At one time in the development of the Internet Network Management Framework, an effort was underway to use SNMP as an interim step, with CMOT as the long-term and OSI-compliant solution. As a result, this CMOT group was placed within MIB-II. The details of that subtree are given in RFC 1214, which specifies the OSI Internet Management (OIM) MIB. At the present time, it has a historical status.
The Transmission Group {1.3.6.1.2.1.10}
The Transmission group (see Figure 3-10) contains objects that relate to the transmission of the data. None of these objects are explicitly defined in RFC 1213. Mention is made in that document, however, of these transmission objects residing in the experimental subtree (1.3.6.1.3) until they are proven. The Assigned Numbers document (currently RFC 1700) lists the following objects under the Transmission group:
- {1.3.6.1.2.1.10.5}, X.25 Packet Layer objects (RFC 1382)
- {1.3.6.1.2.1.10.7}, CSMA/CD-like objects (RFC 1643)
- {1.3.6.1.2.1.10.8}, Token Bus-like objects (RFC 1230)
- {1.3.6.1.2.1.10.9}, Token Ring-like objects (RFC 1748)
- {1.3.6.1.2.1.10.15}, FDDI objects (RFC 1512)
- {1.3.6.1.2.1.10.16}, X.25 LAPB objects (RFC 1381)
- {1.3.6.1.2.1.10.18}, DS1 Interface objects (RFC 1406)
- {1.3.6.1.2.1.10.19}, E1 Interface objects (RFC 1406)
- {1.3.6.1.2.1.10.23}, Point-to-Point Protocol objects (RFC 1471)
- {1.3.6.1.2.1.10.30}, DS3/E3 Interface objects (RFC 1407)
- {1.3.6.1.2.1.10.31}, SMDS Interface objects (RFC 1694)
- {1.3.6.1.2.1.10.32}, Frame Relay DTE objects (RFC 1315)
- {1.3.6.1.2.1.10.33}, RS-232 objects (RFC 1659)
- {1.3.6.1.2.1.10.34}, Parallel printer objects (RFC 1660)
- {1.3.6.1.2.1.10.35}, ARCNET objects)
- {1.3.6.1.2.1.10.36}, ARCNETPLUS objects
- {1.3.6.1.2.1.10.37}, ATM objects (RFC 1695)
- {1.3.6.1.2.1.10.38}, X.25 Interconnect objects (RFC 1461)
- {1.3.6.1.2.1.10.39}, SONET objects (RFC 1595)
- {1.3.6.1.2.1.10.44}, Frame Relay Service objects (RFC 1604)
The SNMP Group {1.3.6.1.2.1.11}
The SNMP group (see Figure 3-18) provides information on SNMP objects. There are a total of 30 scalar objects in this group:
- snmpInPkts is the total number of messages delivered to the SNMP entity from the transport service.
- snmpOutPkts is the total number of SNMP messages that were passed from the SNMP protocol entity to the transport service.
- snmpInBadVersions is the total number of SNMP messages that were for an unsupported SNMP version.
- snmpInBadCommunityNames is the total number of SNMP messages that used an SNMP community name not known to that entity.
- snmpInBadCommunityUses is the total number of SNMP messages that represented an SNMP operation that was not allowed by the SNMP community name in the message.
- snmpInASNParseErrs is the total number of ASN.1 or BER errors encountered.
- {snmp 7}. This is not used.
- snmpInTooBigs is the total number of SNMP PDUs received with the tooBig error-status field.
- snmpInNoSuchNames is the total number of SNMP PDUs received with the noSuchName error-status field.
- snmpInBadValues is the total number of SNMP PDUs received with the badValue error-status field.
- snmpInReadOnlys is the total number of SNMP PDUs received with the readOnly error-status field.
- snmpInGenErrs is the total number of SNMP PDUs received with the genErr error-status field.
- snmpInTotalReqVars is the total number of MIB objects that have been retrieved.
- snmpInTotalSetVars is the total number of MIB objects that have been altered.
- snmpInGetRequests is the total number of SNMP Get-Request PDUs accepted and processed.
- snmpInGetNexts is the total number of SNMP Get-Next PDUs received.
- snmpInSetRequests is the total number of SNMP Set-Request PDUs received.
- snmpInGetResponses is the total number of SNMP Get-Response PDUs received.
- snmpInTraps is the total number of SNMP Trap PDUs received.
- snmpOutTooBigs is the total number of SNMP PDUs sent with the tooBig error-status field.
- snmpOutNoSuchNames is the total number of SNMP PDUs sent with the noSuchName error-status field.
- snmpOutBadValues is the total number of SNMP PDUs sent with the badValue error-status field.
- {snmp 23}. This is not used.
- snmpOutGenErrs is the total number of SNMP PDUs sent with the genErr error-status field.
- snmpOutGetRequests is the total number of SNMP Get-Request PDUs sent.
- snmpOutGetNexts is the total number of SNMP Get-Next PDUs sent.
- snmpOutSetRequests is the total number of SNMP Set-Request PDUs sent.
- snmpOutGetResponses is the total number of SNMP Get-Response PDUs sent.
- snmpOutTraps is the total number of SNMP Trap PDUs sent.
- snmpEnableAuthenTraps indicates whether the SNMP agent process is permitted to generate authentication-failure traps.
The Ethernet RMON MIB {1.3.6.1.2.1.16}
The Remote Network Monitoring (RMON) MIB was developed for the purpose of standardizing the management information that is sent to and from remote network monitoring probes; it is presented in RFC 1757. SNMP agents supporting the RMON MIB can be located in a variety of distributed internetwork hardware, such as bridges or routers. The RMON MIB contains nine groups (see Figure 3-19). All of these groups are considered optional (not mandatory), but the implementation of certain groups also requires the use of other groups. For example, implementing the Filter group also requires the Packet Capture group. The nine Ethernet groups are summarized as follows:
- Statistics contains probe-measured statistics, such as the number and sizes of packets, broadcasts, collisions, etc.
- History records periodic statistical samples over time that can be used for trend analysis.
- Alarms compares statistical samples with preset thresholds, generating alarms when a particular threshold is crossed.
- Host maintains statistics of the hosts on the network, including the MAC addresses of the active hosts.
- HostTopN provides reports that are sorted by host table statistics, indicating which hosts are at the top of the list in a particular category.
- Matrix stores statistics in a traffic matrix regarding conversations between pairs of hosts.
- Filter allows packets to be matched according to a filter equation.
- Packet Capture allows packets to be captured after they pass through a logical channel.
- Event controls the generation and notification of events, which may also include the use of SNMP trap messages.
The Ethernet RMON Statistics Group {1.3.6.1.2.1.16.1}
The Statistics group is optional and contains a table of statistics that are measured by the probe. This information is available for each interface on the managed device. Each etherStatsEntry is a row in the table, containing the objects listed below:
- etherStatsTable is a list of Ethernet statistics entries.
- etherStatsEntry is a collection of statistics kept for a particular Ethernet interface.
- etherStatsIndex is an identifier of the etherStats entry.
- etherStatsDataSource is an identifier of the source of the data, i.e., the particular interface.
- etherStatsDropEvents is the total number of events that packets were dropped by the probe due to lack of resources.
- etherStatsOctets is the total number of octets of data received on the network.
- etherStatsPkts is the total number of packets received.
- etherStatsBroadcastPkts is the total number of good packets received that were directed to the broadcast address.
- etherStatsMulticastPkts is the total number of good packets received that were directed to a multicast address.
- etherStatsCRCAlignErrors is the total number of packets received that had alignment or Frame Check Sequence (FCS) errors.
- etherStatsUndersizePkts is the total number of packets received that were less than 64 octets long.
- etherStatsOversizePkts is the total number of packets received that were longer than 1518 octets.
- etherStatsFragments is the total number of packets received that had an alignment error or bad FCS and were less than 64 octets in length.
- etherStatsJabbers is the total number of packets received that had an alignment error or bad FCS and were longer than 1518 octets.
- etherStatsCollisions is the best estimate of the total number of collisions on this Ethernet segment.
- etherStatsPkts64Octets is the total number of packets received that were 64 octets in length.
- etherStatsPkts65to127Octets is the total number of packets received that were between 65 and 127 octets in length.
- etherStatsPkts128to255Octets is the total number of packets received that were between 128 and 255 octets in length.
- etherStatsPkts256to511Octets is the total number of packets received that were between 256 and 511 octets in length.
- etherStatsPkts512to1023Octets is the total number of packets received that were between 512 and 1023 octets in length.
- etherStatsPkts1024to1518Octets is the total number of packets received that were between 1024 and 1518 octets in length.
- etherStatsOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- etherStatsStatus is the status of this etherStats entry.
The Ethernet RMON History Group {1.3.6.1.2.1.16.2}
The History group is optional and records periodic statistical sample information from a particular network, allowing this information to be subsequently retrieved. This group contains two tables, historyControlTable and etherHistoryTable. The historyControlTable is used to store configuration entries defining the interface, polling period, etc. RFC 1757 suggests two polling periods: 30 seconds for short-term polls and 30 minutes for long-term ones. The etherHistoryTable stores Ethernet-specific statistics. Objects in this group include the following:
- historyControlTable is a list of history control entries.
- historyControlEntry is a list of parameters that set up a periodic sampling of statistics.
- historyControlIndex is an index that identifies an entry in the historyControl table.
- historyControlDataSource is an identifier of the source of the data.
- historyControlBucketsRequested is the requested number of discrete time intervals over which data is to be saved.
- historyControlBucketsGranted is the number of discrete time intervals over which data shall be saved.
- historyControlInterval is the interval between 1 and 3600 seconds over which the data is sampled for each bucket.
- historyControlOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- historyControlStatus is the status of this historyControl entry.
- etherHistoryTable is a list of Ethernet history entries.
- etherHistoryEntry is a historical sample of Ethernet statistics on a particular Ethernet interface.
- etherHistoryIndex is the history of which this entry is a part; it is identified by the same value of historyControlIndex.
- etherHistorySampleIndex is an index that uniquely identifies the particular sample this entry represents.
- etherHistoryIntervalStart is the value of sysUpTime at the start of the interval over which this sample was measured.
- etherHistoryDropEvents is the total number of events in which packets were dropped by the probe due to lack of resources during this interval.
- etherHistoryOctets is the total number of octets of data received on the network.
- etherHistoryPkts is the number of packets received during this sampling interval.
- etherHistoryBroadcastPkts is the number of good packets received during this sampling interval that were directed to the broadcast address.
- etherHistoryMulticastPkts is the number of good packets received during this sampling interval that were directed to a multicast address.
- etherHistoryCRCAlignErrors is the number of packets received during this sampling interval that had alignment or FCS errors.
- etherHistoryUndersizePkts is the number of packets received during this interval that were less than 64 octets long.
- etherHistoryOversizePkts is the number of packets received during this sampling interval that were longer than 1518 octets.
- etherHistoryFragments is the number of packets received during this sampling interval that had an alignment error or bad FCS and were less than 64 octets in length.
- etherHistoryJabbers is the number of packets received during this interval that were longer than 1518 octets.
- etherHistoryCollisions is the best estimate of the total number of collisions on this Ethernet segment during this interval.
- etherHistoryUtilization is the best estimate, in hundredths of a percent, of the mean Physical layer network utilization on this interface during this interval.
The Ethernet RMON Alarm Group {1.3.6.1.2.1.16.3}
The Alarm group is optional, but it requires the implementation of the Events group. The Alarm group compares statistical samples from variables in the probe with preconfigured thresholds. The statistical information is stored in the alarmTable in twelve columns. When a particular sample crosses one of the preset thresholds, an event is generated. This group contains the following objects:
- alarmTable is a list of alarm entries.
- alarmEntry is a list of parameters that set up a periodic checking for alarm conditions.
- alarmIndex is an index that uniquely identifies an entry in the alarm table.
- alarmInterval is the interval, in seconds, over which data is sampled and compared with the rising and falling thresholds.
- alarmVariable is the object identifier of the particular variable to be sampled.
- alarmSampleType is the method of sampling the selected variable and calculating the value to be compared against the thresholds.
- alarmValue is the value of the statistic during the last sampling period.
- alarmStartupAlarm is the alarm that may be sent when this entry is first set to valid.
- alarmRisingThreshold is a threshold that generates a single event when the current sampled value is greater than or equal to this threshold, and the value at the last sampling interval was less than this threshold.
- alarmFallingThreshold is a threshold that generates a single event when the current sampled value is less than or equal to this threshold, and the value at the last sampling interval was greater than this threshold.
- alarmRisingEventIndex is the index of the eventEntry that is used when a rising threshold is crossed.
- alarmFallingEventIndex is the index of the eventEntry that is used when a falling threshold is crossed.
- alarmOwner is the entity that configured this entry and is using the resources assigned to it.
- alarmStatus is the status of this alarm entry.
The Ethernet RMON Host Group {1.3.6.1.2.1.16.4}
The Host group is an optional group that maintains information and statistics regarding the various hosts that are discovered to be active on the network. To do this, three tables are compiled. The first, hostControlTable, is six columns wide; it keeps information regarding the host discovery process and the interfaces that are being used. The second, hostTable, uses ten columns to maintain statistics on each host that is discovered and indexed by MAC address. The third table, hostTimeTable, contains the same information, but is indexed by the hostTimeCreationOrder. The Host group contains the following objects:
- hostControlTable is a list of host table control entries.
- hostControlEntry is a list of parameters that set up the discovery and collection of statistics of hosts on a particular interface.
- hostControlIndex is an index that uniquely identifies an entry in the hostControl table, placing those statistics in the hostTable and the hostTimeTable.
- hostControlDataSource is an identifier of the source of the data for this instance of the host function.
- hostControlTableSize is the number of hostEntries in the hostTable and the hostTimetable.
- hostControlLastDeleteTime is the value of sysUpTime when the last entry was deleted.
- hostControlOwner is the entity that configured this entry and is using the resources assigned to it.
- hostControlStatus is the status of this hostControl entry.
- hostTable is a list of host entries.
- hostEntry is a collection of statistics for a particular host that has been discovered on an interface of this device.
- hostAddress is the physical address of this host.
- hostCreationOrder is an index that defines the relative ordering of the creation time of hosts captured for a particular hostControlEntry.
- hostIndex is the set of collected host statistics of which this entry is a part.
- hostInPkts is the number of error-free packets transmitted to this address since it was added to the hostTable.
- hostOutPkts is the number of packets including errors transmitted by this address since it was added to the hostTable.
- hostInOctets is the number of error-free octets transmitted to this address since it was added to the hostTable.
- hostOutOctets is the number of octets transmitted by this address since it was added to the hostTable.
- hostOutErrors is the number of error packets transmitted by this address since it was added to the hostTable.
- hostOutBroadcastPkts is the number of good packets transmitted by this address to the broadcast address since this host was added to the hostTable.
- hostOutMulticastPkts is the number of good packets transmitted by this address to a multicast address since this host was added to the hostTable.
- hostTimeTable is a list of time-ordered host table entries.
- hostTimeEntry is a collection of statistics, in relative ordering of creation time, for a particular host that has been discovered on an interface of this device.
- hostTimeAddress is the physical address of this host.
- hostTimeCreationOrder is an index that uniquely defines an entry in the hostTime table. The ordering of the indexes is based on the order of each entrys insertion into the table.
- hostTimeIndex is the set of collected host statistics of which this entry is a part.
- hostTimeInPkts is the number of error-free packets transmitted to this address since it was added to the hostTimeTable.
- hostTimeOutPkts is the number of packets including errors transmitted by this address since it was added to the hostTimeTable.
- hostTimeInOctets is the number of error-free octets transmitted to this address since it was added to the hostTimeTable.
- hostTimeOutOctets is the number of octets transmitted by this address since it was added to the hostTimeTable.
- hostTimeOutErrors is the number of error packets transmitted by this address since it was added to the hostTimeTable.
- hostTimeOutBroadcastPkts is the number of good packets transmitted by this address to the broadcast address since this host was added to the hostTimeTable.
- hostTimeOutMulticastPkts is the number of good packets transmitted by this address to a multicast address since this host was added to the hostTimeTable.
The Ethernet RMON HostTopN Group {1.3.6.1.2.1.16.5}
The HostTopN group is an optional group that requires the implementation of the Host group. The HostTopN group is used to prepare reports describing hosts at the top of a list that is ordered by a particular statistic. Two tables are contained in this group. The hostTopNControlTable contains ten columns and initiates the generation of a particular report. The prepared report creates four columns in the hostTopNTable. This group has the following objects:
- hostTopNControlTable is a list of top N host control entries.
- hostTopNControlEntry is a set of parameters that control the creation of a report of the top N hosts according to several metrics. There are 10 columns in this table.
- hostTopNControlIndex is an index that uniquely identifies an entry in the hostTopNControl table, with each entry defining one report per interface.
- hostTopNHostIndex is the host table for which a top N report will be prepared on behalf of this entry; it is associated with the host table identified by the same value of hostIndex.
- hostTopNRateBase is the variable for each host that the hostTopNRate variable is based on.
- hostTopNTimeRemaining is the number of seconds left in the report currently being collected.
- hostTopNDuration is the number of seconds that this report has collected during the last sampling interval.
- hostTopNRequestSize is the maximum number of hosts requested for the top N table.
- hostTopNGrantedSize is the maximum number of hosts in the top N table.
- hostTopNStartTime is the value of sysUpTime when this top N report was last started.
- hostTopNOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- hostTopNStatus is the status of this hostTopNControl entry.
- hostTopNTable is a list of top N host entries.
- hostTopNEntry is a set of statistics for a host that is part of a top N report. There are four columns in this table, listed below.
- hostTopNReport identifies the top N report of which this entry is a part.
- hostTopNIndex is an index that uniquely identifies an entry in the hostTopN table among those in the same report.
- hostTopNAddress is the physical address of this host.
- hostTopNRate is the amount of change in the selected variable during this sampling interval. The selected variable is this hosts instance of the object selected by hostTopNRateBase.
The Ethernet RMON Matrix Group {1.3.6.1.2.1.16.6}
The Matrix group is an optional group that records statistics regarding conversations between pairs of addresses. In other words, this group compiles a traffic matrix of inter-node communication. To do this, three tables are generated, each having six columns. The matrixControlTable contains matrix parameters, the matrixSDTable is indexed by source and destination MAC addresses, and the matrixDSTable is indexed by the destination and source MAC addresses. This group contains the following objects:
- matrixControlTable is a list of information entries for the traffic matrix on each interface.
- matrixControlEntry contains information about a traffic matrix on a particular interface.
- matrixControlIndex is an index that uniquely identifies an entry in the matrixControl table. Each of these entries places statistical information in the matrixSDTable and the matrixDSTable.
- matrixControlDataSource identifies the source of the data from which this entry creates a traffic matrix.
- matrixControlTableSize is the number of entries in the matrixSDTable and the matrixDSTable for this interface.
- matrixControlLastDeleteTime is the value of sysUpTime when the last entry was deleted from the portion of the matrixSDTable or matrixDSTable associated with this matrixControlEntry.
- matrixControlOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- matrixControlStatus is the status of this matrixControl entry.
- matrixSDTable is a list of traffic matrix entities indexed by source and destination MAC addresses.
- matrixSDEntry is a collection of statistics for communications between two addresses on a particular interface.
- matrixSDSourceAddress is the source physical address.
- matrixSDDestAddress is the destination physical address.
- matrixSDIndex is the set of collected matrix statistics of which this entry is a part; it has the same value as matrixControlIndex.
- matrixSDPkts is the number of packets transmitted from the source address to the destination address.
- matrixSDOctets is the number of octets contained in all packets transmitted from the source address to the destination address.
- matrixSDErrors is the number of error packets transmitted from the source address to the destination address.
- matrixDSTable is a list of traffic matrix entities indexed by the destination and source MAC addresses.
- matrixDSEntry is a collection of statistics for communications between two addresses on a particular interface.
- matrixDSSourceAddress is the source physical address.
- matrixDSDestAddress is the destination physical address.
- matrixDSIndex is the set of collected matrix statistics of which this entry is a part; it has the same value as matrixControlIndex.
- matrixDSPkts is the number of packets transmitted from the source address to the destination address.
- matrixDSOctets is the number of octets contained in all packets transmitted from the source address to the destination address.
- matrixSDErrors is the number of error packets transmitted from the source address to the destination address.
The Ethernet RMON Filter Group {1.3.6.1.2.1.16.7}
The Filter group is an optional group that allows packets to be captured based on a filter. This is similar to a filter that can be set by a protocol analyzer that selectively captures packets containing data of a certain protocol, bit pattern, or length. The net effect of these filters is to create logical channels that match that particular filter pattern. This group contains two tables. The filterTable, with eleven columns, stores filter parameters. The channelTable, with twelve columns, is a list of packet channel entries. The Filter group contains the following objects:
- filterTable is a list of packet filter entries.
- filterEntry is a set of parameters for a packet filter applied on a particular interface.
- filterIndex is an index that uniquely identifies an entry in the filter table. Each entry defines one filter that is to be applied to every packet received on an interface.
- filterChannelIndex identifies the channel of which this filter is a part; it has the same value as the value of the channelIndex object.
- filterPktDataOffset is the offset from the beginning of each packet where a match of packet data will be attempted.
- filterPktData is the data that is to be matched with the input packet.
- filterPktDataMask is the mask that is applied to the match process.
- filterPktDataNotMask is the inversion mask that is applied to the match process.
- filterPktStatus is the status that is to be matched with the input packet.
- filterPktStatusMask is the mask that is applied to the status match process.
- filterPktStatusNotMask is the inversion mask that is applied to the status match process.
- filterOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- filterStatus is the status of this filter entry.
- channelTable is a list of packet channel entries.
- channelEntry is a set of parameters for a packet channel applied on a particular interface.
- channelIndex is an index that uniquely identifies an entry in the channel table. Each entry defines one channel, which is a logical data and event stream.
- channelIfIndex uniquely identifies the interface on this remote network monitoring device to which the associated filters are applied.
- channelAcceptType controls the action of the filters associated with this channel.
- channelDataControl controls the flow of data through this channel.
- channelTurnOnEventIndex identifies the event that is configured to turn the associated channelDataControl from off to on when the event is generated.
- channelTurnOffEventIndex identifies the event that is configured to turn the associated channelDataControl from on to off when the event is generated.
- channelEventIndex identifies the event that is configured to be generated when the associated channelDataControl is on and a packet is matched.
- channelEventStatus is the event status of this channel.
- channelMatches is the number of times this channel has matched a packet.
- channelDescription is a comment describing this channel.
- channelOwner is the entity that configured this entry and is using the resources assigned to it.
- channelStatus is the status of this channel entry.
The Ethernet RMON Packet Capture Group {1.3.6.1.2.1.16.8}
The Packet Capture group is optional, but it requires the implementation of the Filter group. The Packet Capture group allows packets to be captured when a particular filter is matched. Two tables are defined in this group. The bufferControlTable, with thirteen columns, controls the captured packets output from a particular channel. The captured packets are then contained in the captureBufferTable, which contains seven columns. The Packet Capture group contains the following objects:
- bufferControlTable is a list of buffer control entries.
- bufferControlEntry is a set of parameters that control the collection of a stream of packets that have matched filters.
- bufferControlIndex is an index that uniquely describes an entry in the bufferControl table. Each entry defines one set of packets that is captured and controlled by one or more filters.
- bufferControlChannelIndex is an index that identifies the channel that is the source of packets for this bufferControl table; it has the same value as the channelIndex object.
- bufferControlFullStatus shows whether the buffer has room to accept new packets or whether it is full.
- bufferControlFullAction controls the action of the buffer when it reaches the full status.
- bufferControlCaptureSliceSize is the maximum number of octets of each packet that will be saved in this capture buffer.
- bufferControlDownloadSliceSize is the maximum number of octets of each packet in this capture buffer that will be returned in an SNMP retrieval of that packet.
- bufferControlDownloadOffset is the offset of the first octet of each packet in this capture buffer that will be returned in an SNMP retrieval of that packet.
- bufferControlMaxOctetsRequested is the requested maximum number of octets to be saved in this captureBuffer, including any implementation-specific overhead.
- bufferControlMaxOctetsGranted is the maximum number of octets that can be saved in this captureBuffer, including overhead.
- bufferControlCapturedPackets is the number of packets currently in this captureBuffer.
- bufferControlTurnOnTime is the value of sysUpTime when this capture buffer was first turned on.
- bufferControlOwner is the entity that configured this entry and is using the resources assigned to it.
- bufferControlStatus is the status of this buffer Control Entry.
- captureBufferTable is a list of packets captured off of a channel.
- captureBufferEntry is a packet captured off of an attached network.
- captureBufferControlIndex is the index of the bufferControlEntry with which this packet is associated.
- captureBufferIndex is an index that uniquely identifies an entry in the captureBuffer table associated with a particular bufferControlEntry.
- captureBufferPacketID is an index that describes the order of packets that are received on a particular interface.
- capturebufferPacketData is the data inside the packet.
- captureBufferPacketLength is the actual length (off the wire) of the packet stored in this entry.
- captureBufferPacketTime is the number of milliseconds that have passed since this capture buffer was first turned on when this packet was captured.
- captureBufferPacketStatus is a value that indicates the error status of this packet.
The Ethernet RMON Event Group {1.3.6.1.2.1.16.9}
The Event group is optional and controls the generation and notification of events on a particular device. A particular event may cause a log entry to be made and/or an SNMP Trap message to be sent. Two tables are included in this group: the eventTable, with seven columns, and the logTable, with four columns. This group contains the following objects:
- eventTable is a list of events to be generated.
- eventEntry is a set of parameters that describe an event to be generated when certain conditions are met.
- eventIndex is an index that uniquely identifies an entry in the event table. Each entry defines one event that is to be generated when the appropriate conditions occur.
- eventDescription is a comment describing this event entry.
- eventType is the type of notification that the probe will make about this event.
- eventCommunity. If an SNMP trap is to be sent, it will be sent to the SNMP community specified by this octet string.
- eventLastTimeSent is the value of sysUpTime at the time this event entry last generated an event.
- eventOwner is the entity that configured this entry and is using the resources assigned to it.
- eventStatus is the status of this event entry.
- logTable is a list of events that have been logged.
- logEntry is a set of data describing an event that has been logged.
- logEventIndex is the event entry that generated this log entry and has the same value of eventIndex.
- logIndex is an index that uniquely identifies an entry in the log table among those generated by the same eventEntries.
- logTime is the value of sysUpTime when this log entry was created.
- logDescription is an implementation-dependent description of the event that activated this log entry.
The Token Ring RMON MIB {1.3.6.1.2.1.16}
The token ring RMON MIB was developed as an extension to the Ethernet RMON MIB discussed in the previous section. Recall that the Ethernet RMON MIB defines nine groups, Statistics through Events. The token ring RMON MIB extends two of these groups, Statistics and History, and adds one group (see Figure 3-20) that is unique. This new group is known as tokenRing, with object identifier {rmon 10}.
The Statistics extensions allow for the collection of both token ring MAC-Layer errors and promiscuous errors. The MAC-Layer errors are specific to the token ring protocol, while the promiscuous errors are more general in nature. In a similar manner, the History information is divided into MAC-Layer and promiscuous details. The Token Ring group is used to record token ringspecific statistics, such as source routing information.
Token Ring RMON MAC-Layer Statistics Group {1.3.6.1.2.1.16.1.2}
The token ring MAC-Layer Statistics group contains one table, tokenRingMLStatsTable, which records token ring networkspecific errors. This group is optional and contains the following objects:
- tokenRingMLStatsTable is a list of MAC-Layer token ring statistics entries.
- tokenRingMLStatsEntry is a collection of MAC-Layer statistics kept for a particular token ring interface.
- tokenRingMLStatsIndex uniquely identifies this tokenRingMLStats entry.
- tokenRingMLStatsDataSource identifies the source of the data that this tokenRingMLStats entry is configured to analyze.
- tokenRingMLStatsDropEvents is the total number of events in which packets were dropped by the probe due to lack of resources.
- tokenRingMLStatsMacOctets is the total number of error-free octets of data in MAC packets received on the network.
- tokenRingMLStatsMacPkts is the total number of error-free MAC packets received.
- tokenRingMLStatsRingPurgeEvents is the total number of times that the ring enters the ring purge state from the normal ring state.
- tokenRingMLStatsRingPurgePkts is the total number of Ring Purge MAC packets detected by the probe.
- tokenRingMLStatsBeaconEvents is the total number of times that the ring enters the beaconing state.
- tokenRingMLStatsBeaconTime is the total number of times that the ring has been in the beaconing state.
- tokenRingMLStatsBeaconPkts is the total number of Beacon MAC packets detected by the probe.
- tokenRingMLStatsClaimTokenEvents is the total number of times the ring enters the monitor contention state.
- tokenRingMLStatsClaimTokenPkts is the total number of Claim Token MAC packets detected by the probe.
- tokenRingMLStatsNAUNChanges is the total number of NAUN changes detected by the probe.
- tokenRingMLStatsLineErrors is the total number of line errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsInternalErrors is the total number of adapter internal errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsBurstErrors is the total number of burst errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsACErrors is the total number of AC (address copied) errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsAbortErrors is the total number of abort delimiters reported in error-reporting packets detected by the probe.
- tokenRingMLStatsLostFrameErrors is the total number of lost frame errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsCongestionErrors is the total number of receive-congestion errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsFrameCopiedErrors is the total number of frame-copied errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsFrequencyErrors is the total number of frequency errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsTokenErrors is the total number of token errors reported in error-reporting packets detected by the probe.
- tokenRingMLStatsSoftErrorReports is the total number of soft error-report frames detected by the probe.
- tokenRingMLStatsRingPollEvents is the total number of ring poll events detected by the probe.
- tokenRingMLStatsOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- tokenRingMLStatsStatus is the status of this tokenRingMLStats entry.
Token Ring RMON Promiscuous Statistics Group {1.3.6.1.2.1.16.1.3}
The Token Ring Promiscuous Statistics group is used to collect promiscuous statistics, i.e., those that are token ringspecific but that may not be collected by all management systems. The information is compiled in a single table, the tokenRingPStatsTable. This group is optional and contains the following objects:
- tokenRingPStatsTable is a list of promiscuous token ring statistics entries.
- tokenRingPStatsEntry is a collection of promiscuous statistics kept for a particular token ring interface.
- tokenRingPStatsIndex is the value of this object, which uniquely identifies this tokenRingPStats entry.
- tokenRingPStatsDataSource represents the source of the data that this tokenRingPStats entry is configured to analyze.
- tokenRingPStatsDropEvents is the total number of events in which packets were dropped due to lack of resources.
- tokenRingPStatsDataOctets is the total number of error-free octets of data received on the network.
- tokenRingPStatsDataPkts is the total number of error-free packets received.
- tokenRingPStatsDataBroadcastPkts is the total number of good non-MAC packets received that were directed to an LLC broadcast address.
- tokenRingPStatsDataMulticastPkts is the total number of good non-MAC packets received that were directed to a local or global multicast or functional address.
- tokenRingPStatsDataPkts18to63Octets is the total number of error-free non-MAC packets received that were between 18 and 63 octets in length.
- tokenRingPStatsDataPkts64to127Octets is the total number of error-free non-MAC packets received that were between 64 and 127 octets in length.
- tokenRingPStatsDataPkts128to255Octets is the total number of error-free non-MAC packets received that were between 128 and 255 octets in length.
- tokenRingPStatsDataPkts256to511Octets is the total number of error-free non-MAC packets received that were between 256 and 511 octets in length.
- tokenRingPStatsDataPkts512to1023Octets is the total number of error-free non-MAC packets received that were between 512 and 1023 octets in length.
- tokenRingPStatsDataPkts1024to2047Octets is the total number of error-free non-MAC packets received that were between 1024 and 2047 octets in length.
- tokenRingPStatsDataPkts2048to4095Octets is the total number of error-free non-MAC packets received that were between 2048 and 4095 octets in length.
- tokenRingPStatsDataPkts4096to8191Octets is the total number of error-free non-MAC packets received that were between 4096 and 8191 octets in length.
- tokenRingPStatsDataPkts8192to18000Octets is the total number of error-free non-MAC packets received that were between 8192 and 18,000 octets in length.
- tokenRingPStatsDataPktsGreaterThan18000Octets is the total number of error-free non-MAC packets received that were greater than 18,000 octets in length.
- tokenRingPStatsOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- tokenRingPStatsStatus is the status of this tokenRingPStats entry.
Token Ring RMON MAC-Layer History Group {1.3.6.1.2.1.16.2.3}
The Token Ring Nonpromiscuous History group is similar to its counterpart in the Statistics group, but is measured over a particular sampling interval. It contains one table, tokenRingMLHistoryTable, with 27 columns. This group is optional and contains the following objects:
- tokenRingMLHistoryTable is a list of MAC-Layer token ring statistics entries.
- tokenRingMLHistoryEntry is a collection of MAC-Layer statistics kept for a particular token ring interface.
- tokenRingMLHistoryIndex is the history of which this entry is a part; it has the same value as that of historyControlIndex.
- tokenRingMLHistorySampleIndex is an index that uniquely identifies the particular MAC-Layer sample.
- tokenRingMLHistoryIntervalStart is the value of sysUpTime at the start of the interval over which this sample was measured.
- tokenRingMLHistoryDropEvents is the total number of events in which packets were dropped by the probe due to lack of resources during this sampling interval.
- tokenRingMLHistoryMacOctets is the total number of error-free octets of data in MAC packets received on the network during this sampling interval.
- tokenRingMLHistoryMacPkts is the total number of error-free MAC packets received during this sampling interval.
- tokenRingMLHistoryRingPurgeEvents is the total number of times that the ring entered the ring purge state from the normal ring state during the sampling interval.
- tokenRingMLHistoryRingPurgePkts is the total number of Ring Purge MAC packets detected by the probe during this sampling interval.
- tokenRingMLHistoryBeaconEvents is the total number of times that the ring entered the beaconing state during this sampling interval.
- tokenRingMLHistoryBeaconTime is the amount of time that the ring has been in the beaconing state during this sampling interval.
- tokenRingMLHistoryBeaconPkts is the total number of Beacon MAC packets detected by the probe during this sampling interval.
- tokenRingMLHistoryClaimTokenEvents is the total number of times that the ring entered the monitor contention state from normal ring state or ring purge state during this sampling interval.
- tokenRingMLHistoryClaimTokenPkts is the total number of Claim Token MAC packets detected by the probe during this sampling interval.
- tokenRingMLHistoryNAUNChanges is the total number of NAUN changes detected by the probe during this sampling interval.
- tokenRingMLHistoryLineErrors is the total number of line errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryInternalErrors is the total number of adapter internal errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryBurstErrors is the total number of burst errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryACErrors is the total number of AC (address copied) errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryAbortErrors is the total number of abort delimiters reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryLostFrameErrors is the total number of lost-frame errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryCongestionErrors is the total number of receive congestion errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryFrameCopiedErrors is the total number of frame-copied errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryFrequencyErrors is the total number of frequency errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistoryTokenErrors is the total number of token errors reported in error-reporting packets detected by the probe during this sampling interval.
- tokenRingMLHistorySoftErrorReports is the total number of soft error report frames detected by the probe during this sampling interval.
- tokenRingMLHistoryRingPollEvents is the total number of ring poll events detected by the probe during this sampling interval.
- tokenRingMLHistoryActiveStations is the maximum number of active stations on the ring detected by the probe during this sampling interval.
Token Ring RMON Promiscuous History Group {1.3.6.1.2.1.16.2.4}
The Token Ring Promiscuous History group is similar to its counterpart in the Statistics group, but is measured over a particular sampling interval. It contains one table, tokenRingPHistoryTable, with 18 columns. This group is optional and contains the following objects:
- tokenRingPHistoryTable is a list of promiscuous token ring statistics entries.
- tokenRingPHistoryEntry is a collection of promiscuous statistics kept for a particular token ring interface.
- tokenRingPHistoryIndex is a history of which this entry is a part; it has the same value as that of historyControlIndex.
- tokenRingPHistorySampleIndex is an index that uniquely identifies the particular sample this entry represents.
- tokenRingPHistoryIntervalStart is the value of sysUpTime at the start of the interval over which this sample was measured.
- tokenRingPHistoryDropEvents is the total number of events in which packets were dropped by the probe due to lack of resources during this sampling period.
- tokenRingPHistoryDataOctets is the total number of error-free octets of data received in non-MAC packets on the network.
- tokenRingPHistoryDataPkts is the total number of error-free non-MAC packets received during this sampling interval.
- tokenRingPHistoryDataBroadcastPkts is the total number of good non-MAC packets received during this sampling interval that were directed to an LLC broadcast address.
- tokenRingPHistoryDataMulticastPkts is the total number of good non-MAC packets received during this sampling interval that were directed to a local or global multicast or functional address.
- tokenRingPHistoryDataPkts18to63Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 18 and 63 octets in length.
- tokenRingPHistoryDataPkts64to127Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 64 and 127 octets in length.
- tokenRingPHistoryDataPkts128to255Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 128 and 255 octets in length.
- tokenRingPHistoryDataPkts256to511Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 256 and 511 octets in length.
- tokenRingPHistoryDataPkts512to1023Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 512 and 1023 octets in length.
- tokenRingPHistoryDataPkts1024to2047Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 1024 and 2047 octets in length.
- tokenRingPHistoryDataPkts2048to4095Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 2048 and 4095 octets in length.
- tokenRingPHistoryDataPkts4096to8191Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 4096 and 8191 octets in length.
- tokenRingPHistoryDataPkts8192to18000Octets is the total number of error-free non-MAC packets received during this sampling interval that were between 8192 and 18,000 octets in length.
- tokenRingPHistoryDataPktsGreaterThan18000Octets is the total number of error-free non-MAC packets received during this sampling interval that were greater than 18,000 octets in length.
Token Ring RMON Ring Station Group {1.3.6.1.2.1.16.10}
The Ring Station group is unique to the token ring RMON MIB and is optional. It consists of tables with token ring and source routing information. The tables include the ringStationControlTable {tokenRing 1}; the ringStationTable {tokenRing 2}; the ringStationOrderTable {tokenRing 3}; the ringStationConfigControlTable {tokenRing 4}; the ringStationConfigTable {tokenRing 5}; and the sourceRoutingStatsTable {tokenRing 6}. The Ring Station group is assigned OID {rmon 10}. Following is a description of the individual tables and their objects.
The ringStationControlTable {1.3.6.1.2.1.16.10.1} contains information relating to the discovery ofand statistics regardingthe various stations on the ring:
- ringStationControlTable is a list of ringStation table control entries.
- ringStationControlEntry is a list of parameters that set up the discovery of stations on a particular interface and the collection of statistics about these stations.
- ringStationControlIfIndex uniquely identifies the interface on this remote network monitoring device from which ringStation data is collected; it has the same value as ifIndex.
- ringStationControlTableSize is the number of ringStationEntries in the ringStationTable associated with this ringStationControlEntry.
- ringStationControlActiveStations is the number of active ringStationEntries in the ringStationTable associated with this ringControlEntry.
- ringStationControlRingState is the current status of this ring.
- ringStationControlBeaconSender is the address of the sender of the last Beacon frame received on this ring.
- ringStationControlBeaconNAUN is the address of the NAUN in the last Beacon frame received on this ring.
- ringStationControlActiveMonitor is the address of the Active Monitor on this segment.
- ringStationControlOrderChanges is the address of add and delete events in the ringStationControlTable associated with this ringStationControlEntry.
- ringStationControlOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- ringStationControlStatus is the status of this ringStationControl entry.
The ringStationTable {1.3.6.1.2.1.16.10.2} contains entries for each station that has been or is currently on the ring. The objects include:
- ringStationTable is a list of ring station entries.
- ringStationEntry is a collection of statistics for a particular station that has been discovered on a ring monitored by this device.
- ringStationIfIndex uniquely identifies the interface on this remote network monitoring device on which this station was detected; it has the same value as ifIndex.
- ringStationMacAddress is the physical address of this station.
- ringStationLastNAUN is the physical address of the last known NAUN of this station.
- ringStationStationStatus is the status of this station on the ring.
- ringStationLastEnterTime is the value of sysUpTime at the time this station last entered the ring.
- ringStationLastExitTime is the value of sysUpTime at the time this station last exited the ring.
- ringStationDuplicateAddresses is the number of times this station experienced a duplicate address error.
- ringStationInLineErrors is the total number of line errors reported by this station in error-reporting packets detected by the probe.
- ringStationOutLineErrors is the total number of line errors reported in error-reporting packets sent by the nearest active downstream neighbor of this station and detected by the probe.
- ringStationInternalErrors is the total number of adapter internal errors reported by this station in error-reporting packets detected by the probe.
- ringStationInBurstErrors is the total number of burst errors reported by this station in error-reporting packets detected by the probe.
- ringStationOutBurstErrors is the total number of burst errors reported in error-reporting packets sent by the nearest active downstream neighbor of this station and detected by the probe.
- ringStationACErrors is the total number of AC (address copied) errors pertaining to this station reported in error-reporting packets detected by the probe.
- ringStationAbortErrors is the total number of abort delimiters pertaining to this station reported in error-reporting packets detected by the probe.
- ringStationLostFrameErrors is the total number of lost-frame errors pertaining to this station reported in error-reporting packets detected by the probe.
- ringStationCongestionErrors is the total number of receive congestion errors pertaining to this station reported in error-reporting packets detected by the probe.
- ringStationFrameCopiedErrors is the total number of frame-copied errors pertaining to this station reported in error-reporting packets detected by the probe.
- ringStationFrequencyErrors is the total number of frequency errors pertaining to this station reported in error-reporting packets detected by the probe.
- ringStationTokenErrors is the total number of token errors pertaining to this station reported in error-reporting packets detected by the probe.
- ringStationInBeaconErrors is the total number of beacon frames sent by this station and detected by the probe.
- ringStationOutBeaconErrors is the total number of beacon frames detected by the probe that name this station as the NAUN.
- ringStationInsertions is the number of times the probe detected this station inserting onto the ring.
The ringStationOrder table {1.3.6.1.2.1.16.10.3} provides a list of ring station entries in ring-order sequence:
- ringStationOrderTable is a list of ring station entries for active stations, ordered by their ring-order.
- ringStationOrderEntry is a collection of statistics for a particular station that has been discovered on a ring monitored by this device.
- ringStationOrderIfIndex uniquely identifies the interface on this remote network monitoring device on which this station was detected; it has the same value as ifIndex.
- ringStationOrderOrderIndex denotes the location of this station with respect to other stations on the ring; it is equal to the number of hops downstream that this station is from the rmon probe.
- ringStationOrderMacAddress is the physical address of this station.
The ringStationConfig group {1.3.6.1.2.1.16.10.4} manages token ring nodes through active means, removing a station or updating that stations information as required:
- ringStationConfigControlTable is a list of token ring station configuration control entries.
- ringStationConfigControlEntry controls active management of stations by the probe. One entry exists in this table for each entry in the ringStationOrderTable.
- ringStationConfigControlIfIndex uniquely identifies the interface on this remote network monitoring device on which this station is detected; it has the same value as the ifIndex object.
- ringStationConfigControlMacAddress is the physical address of this station.
- ringStationConfigControlRemove: setting this object to removing causes a Remove Station MAC frame to be sent.
- ringStationConfigControlUpdateStats: setting this object to updating causes the configuration information associated with this entry to be updated.
The ringStationConfig table {1.3.6.1.2.1.16.10.5} is used to record entries that are obtained with the ringStationConfigControlUpdateStats variable (listed immediately above):
- ringStationConfigTable is a list of configuration entries for stations on a ring monitored by this probe.
- ringStationConfigEntry is a collection of statistics for a particular station that has been discovered on a ring monitored by this probe.
- ringStationConfigIfIndex uniquely identifies the interface on this remote network monitoring device on which this station is detected; it has the same value as the ifIndex object.
- ringStationConfigMacAddress is the physical address of this station.
- ringStationConfigUpdateTime is the value of sysUpTime at the time this configuration information was last updated (completely).
- ringStationConfigLocation is the assigned physical location of this station.
- ringStationConfigMicrocode is the microcode EC level of this station.
- ringStationConfigGroupAddress is the low-order 4 octets of the group address recognized by this station.
- ringStationConfigFunctionalAddress is the functional address recognized by this station.
The sourceRoutingStatsTable {1.3.6.1.2.1.16.10.6} collects data from the source routing information that may be contained within token ring packets:
- sourceRoutingStatsTable is a list of source routing statistics entries.
- sourceRoutingStatsEntry is a collection of source routing statistics kept for a particular token ring interface.
- sourceRoutingStatsIfIndex uniquely identifies the interface on this remote network monitoring device on which source routing statistics will be detected; it has the same value as the ifIndex object.
- sourceRoutingStatsRingNumber is the ring number of the ring monitored by this entry.
- sourceRoutingStatsInFrames is the count of frames sent into this ring from another ring.
- sourceRoutingStatsOutFrames is the count of frames sent from this ring to another ring.
- sourceRoutingStatsThroughFrames is the count of frames sent through this ring to another ring.
- sourceRoutingStatsAllRoutesBroadcastFrames is the total number of good frames received that were All Routes Broadcast.
- sourceRoutingStatsSingleRouteBroadcastFrames is the total number of good frames received that were Single Route Broadcast.
- sourceRoutingStatsInOctets is the count of octets in good frames sent into this ring from another ring.
- sourceRoutingStatsOutOctets is the count of octets in good frames sent from this ring to another ring.
- sourceRoutingStatsThroughOctets is the count of octets in good frames sent through this ring to another ring.
- sourceRoutingStatsAllRoutesBroadcastOctets is the total number of octets in good frames received that were All Routes Broadcast.
- sourceRoutingStatsSingleRoutesBroadcastOctets is the total number of octets in good frames received that were Single Route Broadcast.
- sourceRoutingStatsLocalLLCFrames is the total number of frames received that had no routing information.
- sourceRoutingStats1HopFrames is the total number of frames received whose route had 1 hop.
- sourceRoutingStats2HopsFrames is the total number of frames received whose route had 2 hops.
- sourceRoutingStats3HopsFrames is the total number of frames received whose route had 3 hops.
- sourceRoutingStats4HopsFrames is the total number of frames received whose route had 4 hops.
- sourceRoutingStats5HopsFrames is the total number of frames received whose route had 5 hops.
- sourceRoutingStats6HopsFrames is the total number of frames received whose route had 6 hops.
- sourceRoutingStats7HopsFrames is the total number of frames received whose route had 7 hops.
- sourceRoutingStats8HopsFrames is the total number of frames received whose route had 8 hops.
- sourceRoutingStatsMoreThan8HopsFrames is the total number of frames received whose route had more than 8 hops.
- sourceRoutingStatsOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- sourceRoutingStatsStatus is the status of this sourceRoutingStats entry.
The RMON2 MIB {1.3.6.1.2.1.16}
The Remote Network Monitoring version 2 (RMON2) MIB upgrades the capabilities of the original RMON Ethernet and token ring MIBs (RFCs 1757 and 1513, respectively) by providing analysis up to the Application layer. RMON2 is defined in RFC 2021. RMON2 enhances the existing RMON groups, {1.3.6.1.2.1.16.1} through {1.3.6.1.2.1.16.10}; for example, the DroppedFrames and LastCreateTime conventions are added to each of the existing tables within RMON. RMON2 also adds new groups, {1.3.6.1.2.1.16.11} through {1.3.6.1.2.1.16.20} (see Figures 3-21 and 3-22), as follows:
- Protocol Directory lists the inventory of protocols the probe has the capability of monitoring.
- Protocol Distribution collects the relative amounts of octets and packets for the different protocols detected.
- Address Map lists MAC address to network address bindings discovered by the probe.
- Network Layer Host counts the amount of traffic sent from and to each network address discovered by the probe.
- Network Layer Matrix counts the amount of traffic sent between each pair of network addresses discovered by the probe.
- Application Layer Host counts the amount of traffic, by protocol, sent from and to each network address discovered by the probe.
- Application Layer Matrix counts the amount of traffic, by protocol, sent between each pair of network addresses discovered by the probe.
- User History Collection combines mechanisms seen in the Alarm and History groups to provide user-specified history collections.
- Probe Configuration controls the configuration of various operating parameters of the probe.
- RMON Conformance describes the requirements for conformance to the RMON2 MIB.
Extensions to the RMON 1 MIB for RMON 2 Devices
RFC 2021 adds some objects and tables that extend both the Ethernet and token ring RMON MIBs. These extensions are shown below, illustrated with a summary of objects from the Ethernet and token ring MIBs for completeness. For clarity, the original objects are shown as placeholders only, without descriptions (the descriptions were provided in the sections above). The extension objects are shown with descriptions, as follows:
- statistics
- etherStatsTable
- tokenRingMLStatsTable
- tokenRingPStatsTable
- etherStats2Table contains the RMON-2 augmentations to RMON-1.
- etherStats2Entry contains the RMON-2 augmentations to RMON-1.
- etherStatsDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- etherStatsCreateTime is the value of sysUpTime when this control entry was last activated.
- tokenRingMLStats2Table contains the RMON-2 augmentations to RMON-1.
- tokenRingMLStats2Entry contains the RMON-2 augmentations to RMON-1.
- tokenRingMLStatsDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- tokenRingMLStatsCreateTime is the value of sysUpTime when this control entry was last activated.
- tokenRingPStats2Table contains the RMON-2 augmentations to RMON-1.
- tokenRingPStats2Entry contains the RMON-2 augmentations to RMON-1.
- tokenRingPStatsDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- tokenRingPStatsCreateTime is the value of sysUpTime when this control entry was last activated.
- history
- historyControlTable
- etherHistoryTable
- tokenRingMLHistoryTable
- tokenRingPHistoryTable
- historyControl2Table contains the RMON-2 augmentations to RMON-1.
- historyControl2Entry contains the RMON-2 augmentations to RMON-1.
- historyControlDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- alarm
- hosts
- hostControlTable
- hostTable
- hostTimeTable
- hostControl2Table contains the RMON-2 augmentations to RMON-1.
- hostControl2Entry contains the RMON-2 augmentations to RMON-1.
- hostControlDroppedFrames is the total number of frames which were received by the probe and not counted otherwise.
- hostControlCreateTime is the value of sysUpTime when this control entry was last activated.
- hostTopN
- matrix
- matrixControlTable
- matrixSDTable
- matrixDSTable
- matrixControl2Table contains the RMON-2 augmentations to RMON-1.
- matrixControl2Entry contains the RMON-2 augmentations to RMON-1.
- matrixControlDroppedFrames is the total number of frames which were received by the probe and not counted otherwise.
- matrixControlCreateTime is the value of sysUpTime when this control entry was last activated.
- filter
- filterTable
- channelTable
- channel2Table contains the RMON-2 augmentations to RMON-1.
- channel2Entry contains the RMON-2 augmentations to RMON-1.
- channelDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- channelCreateTime is the value of sysUpTime when this control entry was last activated.
- filter2Table provides a variable-length packet filter feature to the RMON-2 filter table.
- filter2Entry provides a variable-length packet filter feature to the RMON-2 filter table.
- filterProtocolDirDataLocalIndex defines the packet filtering operations.
- filterProtocolDirLocalIndex defines the packet filtering operations.
- capture
- event
- tokenRing
- ringStationControlTable
- ringStationTable
- ringStationOrderTable
- ringStationConfigControlTable
- ringStationConfigTable
- sourceRouteStatsTable
- ringStationControl2Table contains the RMON-2 augmentations to RMON-1.
- ringStationControl2Entry contains the RMON-2 augmentations to RMON-1.
- ringStationControlDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- ringStationControlCreateTime is the value of sysUpTime when this control entry was last activated.
- sourceRouteStats2Table contains the RMON-2 augmentations to RMON-1.
- sourceRouteStats2Entry contains the RMON-2 augmentations to RMON-1.
- sourceRouteStatsDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- sourceRouteStatsCreateTime is the value of sysUpTime when this control entry was last activated.
The RMON2 Protocol Directory Group {1.3.6.1.2.1.16.11}
The Protocol Directory group lists the protocols the probe has the capability of monitoring; it allows the modification of entries in this list. This group consists of one scalar and one table, protocolDirTable. The objects in this group are:
- protocolDirLastChange is the value of sysUpTime at the time the protocol directory was last modified.
- protocolDirTable is a list of the protocols that this agent has the capability to decode and count.
- protocolDirEntry is a conceptual row in the protocolDirTable.
- protocolDirID is a unique identifier for a particular protocol.
- protocolDirParameters is a set of parameters for the associated protocolDirID.
- protocolDirLocalIndex is a unique identifier associated with this protocolDir entry.
- protocolDirDescr is a textual description of the protocol encapsulation.
- protocolDirType describes two attributes of this protocol directory entry.
- protocolDirAddressMapConfig describes and configures the probes support for address mapping for this protocol.
- protocolDirHostConfig describes and configures the probes support for the host tables for this protocol.
- protocolDirMatrixConfig describes and configures the probes support for the matrix tables for this protocol.
- protocolDirOwner is the entity that configured this entry and is using the resources assigned to it.
- protocolDirStatus is the status of this protocol directory entry.
The RMON2 Protocol Distribution Group {1.3.6.1.2.1.16.12}
The Protocol Distribution group collects the relative amounts of octets and packets for the different protocols detected on a network segment. This group consists of two tables, the protocolDistControlTable and the protocolDistStatsTable:
- protocolDistControlTable controls the setup of protocol type distribution statistics tables.
- protocolDistControlEntry is a conceptual row in the protocolDistControlTable.
- protocolDistControlIndex is a unique index for this protocolDistControlEntry.
- protocolDistControlDataSource is the source of data for this protocol distribution.
- protocolDistControlDroppedFrames is the total number of frames which were received by the probe and not counted otherwise.
- protocolDistControlCreateTime is the value of sysUpTime when this control entry was last activated.
- protocolDistControlOwner is the entity that configured this entry and is using the resources assigned to it.
- protocolDistControlStatus is the status of this protocol directory entry.
- protocolDistStatsTable is a table that contains one entry for every protocol in the protocolDirTable which has seen at least one packet.
- protocolDistStatsEntry is a conceptual row in the protocolDistStatsTable.
- protocolDistStatsPkts is the number of packets of this protocol type received without errors.
- protocolDistStatsOctets is the number of octets in packets received of this protocol type since it was added to the protocolDistStatsTable.
The RMON2 Address Map Group {1.3.6.1.2.1.16.13}
The Address Map group lists MAC address to network address bindings discovered by the probe, as well as what interface they were last seen on. This group contains scalar objects and two tables, the addressMapControlTable and the addressMapTable, as follows:
- addressMapInserts is the number of times an address mapping entry has been inserted into the addressMapTable.
- addressMapDeletes is the number of times an address mapping entry has been deleted from the addressMapTable (for any reason).
- addressMapMaxDesiredEntries is the maximum number of entries that are desired in the addressMapTable.
- addressMapControlTable is a table to control the collection of network layer address to physical address to interface mappings.
- addressMapControlEntry is a conceptual row in the addressMapControlTable.
- addressMapControlIndex is a unique index for this entry in the addressMapControlTable.
- addressMapControlDataSource is the source of the data for this addressMapControlEntry.
- addressMapControlDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- addressMapControlOwner is the entity that configured this entry and is using the resources assigned to it.
- addressMapControlStatus is the status of this addressMap control entry.
- addressMapTable is a table of network layer address to physical address to interface mappings.
- addressMapEntry is a conceptual row in the addressMapTable.
- addressMapTimeMark is a TimeFilter for this entry.
- addressMapNetworkAddress is the network address for this relation.
- addressMapSource is the interface or port on which the associated network address was most recently seen.
- addressMapPhysicalAddress is the last source physical address on which the associated network address was seen.
- addressMapLastChange is the value of sysUpTime at the time this entry was last created or the values of the physical address were changed.
The RMON2 Network Layer Host group {1.3.6.1.2.1.16.14}
The Network Layer Host group counts the amount of traffic sent from and to each network address discovered by the probe:
- hlHostControlTable is a list of higher layer (non-MAC) host table control entries.
- hlHostControlEntry is a conceptual row in the hlHostControlTable.
- hlHostControlIndex is an index that uniquely identifies an entry in the hlHostControlTable.
- hlHostControlDataSource is the source of data for the associated host tables.
- hlHostControlNlDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- hlHostControlNlInserts is the number of times an nlHost entry has been inserted into the nlHost table.
- hlHostControlNlDeletes is the number of times an nlHost entry has been deleted from the nlHost table.
- hlHostControlNlMaxDesiredEntries is the maximum number of entries that are desired in the nlHostTable on behalf of this control entry.
- hlHostControlAlDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- hlHostControlAlInserts is the number of times an alHost entry has been inserted into the alHost table.
- hlHostControlAlDeletes is the number of times an alHost entry has been deleted from the alHost table.
- hlHostControlAlMaxDesiredEntries is the maximum number of entries that are desired in the alHostTable on behalf of this control entry.
- hlHostControlOwner is the entity that configured this entry and is using the resources assigned to it.
- hlHostControlStatus is the status of this hlHostControlEntry.
- nlHostTable is a collection of statistics for a particular network layer address that has been discovered on an interface of this device.
- nlHostEntry is a conceptual row in the nlHostTable.
- nlHostTimeMark is a TimeFilter for this entry.
- nlHostAddress is the network address for this nlHostEntry.
- nlHostInPkts is the number of packets without errors transmitted to this address since it was added to the nlHostTable.
- nlHostOutPkts is the number of packets without errors transmitted by this address since it was added to the nlHostTable.
- nlHostInOctets is the number of octets transmitted to this address since it was added to the nlHostTable.
- nlHostOutOctets is the number of octets transmitted by this address since it was added to the nlHostTable.
- nlHostOutMacNonUnicastPkts is the number of packets without errors transmitted by this address that were directed to any MAC broadcast addresses or to any MAC multicast addresses since this host was added to the nlHostTable.
- nlHostCreateTime is the value of sysUpTime when this entry was last activated.
The RMON2 Network Layer Matrix Group {1.3.6.1.2.1.16.15}
The Network Layer Matrix group counts the amount of traffic sent between each pair of network addresses discovered by the probe. This group consists of five tables: hlMatrixControlTable, nlMatrixSDTable, nlMatrixDSTable, nlMatrixTopNControlTable, and the nlMatrixTopNTable:
- hlMatrixControlTable is a list of higher layer (non-MAC) matrix control entries.
- hlMatrixControlEntry is a conceptual row in the hlMatrixControlTable.
- hlMatrixControlIndex is an index that uniquely identifies an entry in the hlMatrixControlTable.
- hlMatrixControlDataSource is the source of the data for the associated matrix tables.
- hlMatrixControlNlDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- hlMatrixControlNlInserts is the number of times an nlMatrix entry has been inserted into the nlMatrix tables.
- hlMatrixControlNlDeletes is the number of times an nlMatrix entry has been deleted from the nlMatrix tables.
- hlMatrixControlNlMaxDesiredEntries is the maximum number of entries that are desired in the nlMatrix tables on behalf of this control entry.
- hlMatrixControlAlDroppedFrames is the total number of frames that were received by the probe and not counted otherwise.
- hlMatrixControlAlInserts is the number of times an alMatrix entry has been inserted into the alMatrix tables.
- hlMatrixControlAlDeletes is the number of times an alMatrix entry has been deleted from the alMatrix tables.
- hlMatrixControlAlMaxDesiredEntries is the maximum number of entries that are desired in the alMatrix tables on behalf of this control entry.
- hlMatrixControlOwner is the entity that configured this entry and is using the resources assigned to it.
- hlMatrixControlStatus is the status of this hlMatrixControlEntry.
- nlMatrixSDTable is a list of traffic matrix entries that collect statistics for conversations between two network-level addresses, indexed by the source and destination addresses.
- nlMatrixSDEntry is a conceptual row in the nlMatrixSDTable.
- nlMatrixSDTimeMark is a TimeFilter for this entry.
- nlMatrixSDSourceAddress is the network source address for this nlMatrixSDEntry.
- nlMatrixSDDestAddress is the network destination address for this nlMatrixSDEntry.
- nlMatrixSDPkts is the number of packets transmitted without errors from the source address to the destination address since this entry was added to the nlMatrixSDTable.
- nlMatrixSDOctets is the number of octets transmitted from the source address to the destination address since this entry was added to the nlMatrixSDTable.
- nlMatrixSDCreateTime is the value of sysUpTime when this entry was last activated.
- nlMatrixDSTable is a list of traffic matrix entries that collect statistics for conversations between two network-level addresses, indexed by the destination and source addresses.
- nlMatrixDSEntry is a conceptual row in the nlMatrixDSTable.
- nlMatrixDSTimeMark is a TimeFilter for this entry.
- nlMatrixDSSourceAddress is the network source address for this nlMatrixDSEntry.
- nlMatrixDSDestAddress is the network destination address for this nlMatrixDSEntry.
- nlMatrixDSPkts is the number of packets transmitted without errors from the source address to the destination address since this entry was added to the nlMatrixDSTable.
- nlMatrixDSOctets is the number of octets transmitted from the source address to the destination address since this entry was added to the nlMatrixDSTable.
- nlMatrixDSCreateTime is the value of sysUpTime when this entry was last activated.
- nlMatrixTopNControlTable is a set of parameters that control the creation of a report of the top N matrix entries according to a selected metric.
- nMatrixTopNControlEntry is a conceptual row in the nlMatrixTopNControlTable.
- nlMatrixTopNControlIndex is an index that uniquely identifies an entry in the nlMatrixTopNControlTable.
- nlMatrixTopNControlMatrixIndex is the nlMatrix [SD/DS] table for which a top N report will be prepared on behalf of this entry.
- nlMatrixTopNControlRateBase is the variable for each nlMatrix [SD/DS] entry that the nlMatrixTopNEntries are sorted by.
- nlMatrixTopNControlTimeRemaining is the number of seconds left in the report currently being collected.
- nlMatrixTopNControlGeneratedReports is the number of reports that have been generated by this entry.
- nlMatrixTopNControlDuration is the number of seconds that this report has collected during the last sampling interval.
- nlMatrixTopNControlRequestedSize is the maximum number of matrix entries requested for this report.
- nlMatrixTopNControlGrantedSize is the maximum number of matrix entries in this report.
- nlMatrixTopNControlStartTime is the value of sysUpTime when this top N report was last started.
- nlMatrixTopNControlOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- nlMatrixTopNControlStatus is the status of this nMatrixTopNControlEntry.
- nlMatrixTopNTable is a set of statistics for those network layer matrix entries that have counted the highest number of octets or packets.
- nlMatrixTopNEntry is a conceptual row in the nlMatrixTopNTable.
- nlMatrixTopNIndex is an index that uniquely identifies an entry in the nlMatrixTopNTable.
- nlMatrixTopNProtocolDirLocalIndex is the protocolDirLocalIndex of the network layer protocol of this entrys network address.
- nlMatrixTopNSourceAddress is the network layer address of the source host in this conversation.
- nlMatrixTopNDestAddress is the network layer address of the destination host in this conversation.
- nlMatrixTopNPktRate is the number of packets seen from the source host to the destination host during this sampling interval.
- nlMatrixTopNReversePktRate is the number of packets seen from the destination host to the source host during this sampling interval.
- nlMatrixTopNOctetRate is the number of octets seen from the source host to the destination host during this sampling interval.
- nlMatrixTopNReverseOctetRate is the number of octets seen from the destination host to the source host during this sampling interval.
The RMON2 Application Layer Host Group {1.3.6.1.2.1.16.16}
The Application Layer Host group counts the amount of traffic, by protocol, sent from and to each network address discovered by the probe. Implementation of this group requires implementation of the Network Layer Host group. This group consists of one table, the alHostTable, with the following objects:
- alHostTable is a collection of statistics for a protocol from a particular network address that has been discovered on an interface of this device.
- alHostEntry is a conceptual row in the alHostTable.
- alHostTimeMark is a TimeFilter for this entry.
- alHostInPkts is the number of packets of this protocol type transmitted without errors to this address since it was added to the alHostTable.
- alHostOutPkts is the number of packets of this protocol type transmitted without errors by this address since it was added to the alHostTable.
- alHostInOctets is the number of octets of this protocol type transmitted to this address since it was added to the alHostTable.
- alHostOutOctets is the number of octets of this protocol type transmitted by this address since it was added to the alHostTable.
- alHostCreateTime is the value of sysUpTime when this entry was last activated.
The RMON2 Application Layer Matrix Group {1.3.6.1.2.1.16.17}
The Application Layer Matrix group counts the amount of traffic, by protocol, sent between each pair of network addresses discovered by the probe. Implementation of this group requires implementation of the Network Layer Matrix group. This group consists of four tables: the alMatrixSDTable, the alMatrixDSTable, the alMatrixTopNControlTable, and the alMatrixTopNTable, as follows:
- alMatrixSDTable is a list of application traffic matrix entries that collect statistics for conversations of a particular protocol between two network-level addresses, indexed by the source and destination addresses.
- alMatrixSDEntry is a conceptual row in the alMatrixSDTable.
- alMatrixSDTimeMark is a TimeFilter for this entry.
- alMatrixSDPkts is the number of packets of this protocol type transmitted without errors from the source address to the destination address since this entry was added to the alMatrixSDTable.
- alMatrixSDOctets is the number of octets in packets of this protocol type transmitted from the source address to the destination address since this entry was added to the alMatrixSDTable.
- alMatrixSDCreateTime is the value of sysUpTime when this entry was last activated.
- alMatrixDSTable is a list of traffic matrix entries that collect statistics for conversations of a particular protocol type between two network-level addresses, indexed by the destination and source addresses.
- alMatrixDSEntry is a conceptual row in the alMatrixDSTable.
- alMatrixDSTimeMark is a TimeFilter for this entry.
- alMatrixDSPkts is the number of packets of this protocol type transmitted without errors from the source address to the destination address since this entry was added to the alMatrixDSTable.
- alMatrixDSOctets is the number of octets in packets of this protocol type transmitted from the source address to the destination address since this entry was added to the alMatrixDSTable.
- alMatrixDSCreateTime is the value of sysUpTime when this entry was last activated.
- alMatrixTopNControlTable is a set of parameters that control the creation of a report of the top N matrix entries according to a selected metric.
- aMatrixTopNControlEntry is a conceptual row in the alMatrixTopNControlTable.
- alMatrixTopNControlIndex is an index that uniquely identifies an entry in the alMatrixTopNControlTable.
- alMatrixTopNControlMatrixIndex is the alMatrix [SD/DS] table for which a top N report will be prepared on behalf of this entry.
- alMatrixTopNControlRateBase is the variable for each alMatrix [SD/DS] entry that the alMatrixTopNEntries are sorted by.
- alMatrixTopNControlTimeRemaining is the number of seconds left in the report currently being collected.
- alMatrixTopNControlGeneratedReports is the number of reports that have been generated by this entry.
- alMatrixTopNControlDuration is the number of seconds that this report has collected during the last sampling interval.
- alMatrixTopNControlRequestedSize is the maximum number of matrix entries requested for this report.
- alMatrixTopNControlGrantedSize is the maximum number of matrix entries in this report.
- alMatrixTopNControlStartTime is the value of sysUpTime when this top N report was last started.
- alMatrixTopNControlOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- alMatrixTopNControlStatus is the status of this aMatrixTopNControlEntry.
- alMatrixTopNTable is a set of statistics for those application layer matrix entries that have counted the highest number of octets or packets.
- alMatrixTopNEntry is a conceptual row in the alMatrixTopNTable.
- alMatrixTopNIndex is an index that uniquely identifies an entry in the alMatrixTopNTable.
- alMatrixTopNProtocolDirLocalIndex is the protocolDirLocalIndex of the network layer protocol of this entrys network address.
- alMatrixTopNSourceAddress is the network layer address of the source host in this conversation.
- alMatrixTopNDestAddress is the network layer address of the destination host in this conversation.
- alMatrixTopNAppProtocolDirLocalIndex is the type of protocol counted by this matrix entry.
- alMatrixTopNPktRate is the number of packets seen of this protocol from the source host to the destination host during this sampling interval.
- alMatrixTopNReversePktRate is the number of packets seen of this protocol from the destination host to the source host during this sampling interval.
- alMatrixTopNOctetRate is the number of octets seen of this protocol from the source host to the destination host during this sampling interval.
- alMatrixTopNReverseOctetRate is the number of octets seen of this protocol from the destination host to the source host during this sampling interval.
The RMON2 User History Collection Group {1.3.6.1.2.1.16.18}
The User History Collection group combines mechanisms seen in the Alarm and History groups to provide user-specified history collection. It uses two additional control tables, usrHistoryControlTable and usrHistoryObjectTable, and one additional data table, usrHistoryTable. This function has traditionally been performed by the network management applications, but may now be off-loaded to the probe. The objects are:
- usrHistoryControlTable is a list of data-collection configuration entries.
- usrHistoryControlEntry is a list of parameters that set up a group of user-defined MIB objects to be sampled periodically (called a bucket group).
- usrHistoryControlIndex is an index that uniquely identifies an entry in the usrHistoryControlTable.
- usrHistoryControlObjects is the number of MIB objects to be collected in the portion of usrHistoryTable associated with this usrHistoryControlEntry.
- usrHistoryControlBucketsRequested is the requested number of discrete time intervals over which data is to be saved.
- usrHistoryControlBucketsGranted is the number of discrete time intervals over which data will be saved.
- usrHistoryControlInterval is the interval in seconds over which the data is sampled for each bucket.
- usrHistoryControlOwner is the entity that configured this entry and is therefore using the resources assigned to it.
- usrHistoryControlStatus is the status of this variable history control entry.
- usrHistoryObjectTable is a list of data-collection configuration entries.
- usrHistoryObjectEntry is list of MIB instances to be sampled periodically.
- usrHistoryObjectIndex is an index used to uniquely identify an entry in the usrHistoryObjectTable.
- usrHistoryObjectVariable is the object identifier of the particular variable to be sampled.
- usrHistoryObjectSampleType is the method of sampling the selected variable for storage in the usrHistoryTable.
- usrHistoryTable is a list of user-defined history entries.
- usrHistoryEntry is a historical sample of user-defined variables.
- usrHistorySampleIndex is an index that uniquely identifies the particular sample this entry represents.
- usrHistoryIntervalStart is the value of sysUpTime at the start of the interval over which this sample was measured.
- usrHistoryIntervalEnd is the value of j at the end of the interval over which this sample was measured.
- usrHistoryAbsValue is the absolute value of the user-specified statistic during the last sampling period.
- usrHistoryValStatus indicates the validity and sign of the data in the associated instance of userHistoryAbsValue.
The RMON2 Probe Configuration Group {1.3.6.1.2.1.16.19}
The Probe Configuration group controls the configuration of various operating parameters of the probe. This group contains a number of scalars, plus four tables: serialConfigTable, netConfigTable, trapDestTable, and serialConnectionTable. The objects are:
- probeCapabilities is an indication of the RMON MIB groups supported on at least one interface by this probe.
- probeSoftwareRev is the software revision of the device.
- probeHardwareRev is the hardware revision of the device.
- probeDateTime is the probes current date and time.
- probeResetControl defines the probes actions during boot or run times.
- probeDownloadFile is the file name to be downloaded from the TFTP server hen a download is next requested via this MIB.
- probeDownloadTFTPServer is the IP address of the TFTP server that contains the boot image.
- probeDownloadAction defines the probes actions when downloading the boot image.
- probeDownloadStatus defines the status of the last download procedure.
- serialConfigTable is a table of serial interface configuration entries.
- serialConfigEntry is a set of configuration parameters for a particular serial interface on this device.
- serialMode is the type of incoming connection to expect on this serial interface.
- serialProtocol is the type of data link encapsulation to be used on this serial interface.
- serialTimeout is the timeout value used when the management station has initiated the conversation over the serial link.
- serialModemInitString is a control string that controls how a modem attached to this serial interface should be initialized.
- serialModemHangupString is a control string that specifies how to disconnect a modem connection on this serial interface.
- serialModemConnectResp is an ASCII string that describes the expected modem connection response code and associated bit rate.
- serialModemNoConnectResp is an ASCII string that reports why a connection attempt failed.
- serialDialoutTimeout is the number of seconds of inactivity allowed before terminating the connection on this serial interface.
- serialStatus is the status of this serialConfigEntry.
- netConfigTable is a table of netConfigEntries.
- netConfigEntry is a set of configuration parameters for a particular network interface on this device.
- netConfigIPAddress is the IP address of this Net interface.
- netConfigSubnetMask is the subnet mask of this Net interface.
- netConfigStatus is the status of this netConfigEntry.
- netDefaultGateway is the IP address of the default gateway.
- trapDestTable defines the destination addresses for traps generated from the device.
- trapDestEntry includes a destination IP address to which to send traps for this community.
- trapDestIndex is a value that uniquely identifies this trapDestEntry.
- trapDestCommunity is a community to which this destination address belongs.
- trapDestProtocol is the protocol with which to send this trap.
- trapDestAddress is the address to send traps to on behalf of this entry.
- trapDestOwner is the entity that configured this entry and is using the resources assigned to it.
- trapDestStatus is the status of this trap destination entry.
- serialConnectionTable stores the parameters for a SLIP connection between the management station and the device.
- serialConnectionEntry is a configuration for a SLIP link over a serial line.
- serialConnectIndex is a value that uniquely identifies this serialConnectionEntry.
- serialConnectDestIPAddress is the IP address that can be reached at the other end of this serial connection.
- serialConnectType is the type of outgoing connection to make.
- serialConnectDialString is a control string that specifies how to dial the phone number in order to establish a modem connection.
- serialConnectSwitchConnectSeq is a control string that specifies how to establish a data switch connection.
- serialConnectSwitchDisconnectSeq is a control string that specifies how to terminate a data switch connection.
- serialConnectSwitchResetSeq is a control string that specifies how to reset a data switch in the event of a timeout.
- serialConnectOwner is the entity that configured this entry and is using the resources assigned to it.
- serialConnectStatus is the status of this serialConnectionEntry.
The RMON2 RMON Conformance Group {1.3.6.1.2.1.16.20}
The RMON Conformance group specifies the requirements for conformance to the RMON2 MIB. This group consists of two groups of scalar objects: rmon2MIBCompliances and rmon2MIBGroups:
- rmon2MIBCompliances describes various conformance requirements.
- rmon2MIBCompliance describes the requirements for conformance to the RMON2 MIB.
- rmon2MIBApplicationLayerCompliance describes the requirements for conformance to the RMON2 MIB with Application Layer enhancements.
- rmon2MIBGroup describes various object groups.
- protocolDirectoryGroup lists the inventory of protocols the probe has the capability of monitoring and allows the addition, deletion, and configuration of entries in this list.
- protocolDistributionGroup collects the relative amount of octets and packets for the different protocols detected on a network segment.
- addressMapGroup lists MAC address to network address bindings discovered by the probe, as well as what interface they were last seen on.
- nlHostGroup counts the amount of traffic sent from and to each network address discovered by the probe.
- nlMatrixGroup counts the amount of traffic sent between each pair of network addresses discovered by the probe.
- alHostGroup counts the amount of traffic, by protocol, sent from and to each network address discovered by the probe.
- alMatrixGroup counts the amount of traffic, by protocol, sent between each pair of network addresses discovered by the probe.
- usrHistoryGroup provides user-defined connection of historical information from MIB objects on the probe.
- probeInformationGroup describes the various operating parameters of the probe as well as controlling the local time of the probe.
- probeConfigurationGroup controls the configuration of the various operating parameters of the probe.
- rmon1EnhancementGroup adds some enhancements to RMON-1 that help management stations.
- rmon1EthernetEnhancementGroup adds some enhancements to RMON-1 that help management stations.
- rmon1TokenRingEnhancementGroup adds some enhancements to RMON-1 that help management stations.
|