Transcript OBJECT TYPE

Chapter 4
SNMPv1: Organization and
Information Models
Internet SNMP Management
• Internet Engineering Task Force (IETF)
• 1990 SNMPv1
• 1995 SNMPv2
• 1998 SNMPv3
• Internet documents:
• Request for Comments (RFC)
http://www.ietf.org/
• IETF STD Internet Standard
• FYI For your information
http://www.ietf.org/rfc.html
http://www.ietf.org/rfc/rfcNNNN.txt
SNMP
Management
Documents
RFC 1065
SMI
RFC 1155
STD 16
SNMPv1
Traps
RFC 1215
RFC 1066
MIB I
RFC 1156
Concise SMI
RFC 1212
STD 16
RFC 1067
RFC 1098
SNMPv1
RFC 1157
STD 15
RFC 1158
MIB II
RFC 1213
STD 17
RFC 1442
SMIv2
RFC 1902
SMIv2
RFC 2578
RFC 1443
SMIv2 Txt
Conventions
RFC 1903
RFC 1444
SMIv2
Conformances
RFC 1904
SMIv2
Conventions
`
RFC 2579
SMIv2
Conformances
RFC 2580
RFC 1448
SNMPv2
Protocol Ops
1905
MIB II for
SNMPv2
RFC 1907
SNMP
MIB
SNMP
MIB
SNMP
MIB
RFC
3418
RFC
3418
RFC 3418
Figure 4.4 SNMP Document Evolution
SNMPv2
Protocol Ops
RFC 3416
RFC 1449
SNMPv2
Transport Map.
RFC 1906
SNMP Model
• Organization Model
• Relationship between network element, agent, and
manager
• Hierarchical architecture
• Information Model
• Uses ASN.1 syntax
• SMI (Structure of Management Information
• MIB (Management Information Base)
• Communication Model
• Transfer syntax
• SNMP over TCP/IP
• Communication services addressed by messages
• Security framework community-based model
Two-Tier Organization Model
SNMP
Manager
SNMP
Manager
SNMP
Manager
SNMPAgent
Network Agent
Network
Element
Network
Element
ne Manager - One Agent Model
(b) Multiple Managers - One Agent Model
Three-Tier Organization Model: RMON
• RMON
Remote Monitoring
• RMON I
• RMON II
SNMP
Manager
RMON
Probe
Managed
Objects
Three-Tier Organization Model: Proxy
SNMP
Manager
Proxy
Server
Non-SNMP
Managed
Objects
SNMP
Managed
Objects
SNMP System Architecture
Network Elements (NEs)
Management
Station
Host
Router
Manager
Agent
Agent
SNMP
UDP
IP
SNMP
UDP
IP
Network
Management
Protocol
SNMP
UDP
IP
網路介面
SNMP
網路介面
Network
...
網路介面
SNMP Services
Get, Set, GetNext Request
Manager
Get Response
Agent(s)
Trap

Four Services


Get, Set, GetNext, Trap
Five SNMP Messages

GetRequest, SetRequest, GetNextRequest, GetResponse, Trap
SNMP Services
Get
Get Request
Manager
Get Response
Agent
GetNext Request
GetNext
Manager
Get Response
Agent
Set Request
Set
Trap
Manager
Manager
Get Response
Trap Request
Agent
Agent
SNMP Services (cont.)

Get Request:


Get-Next Request:


Retrieve the values of the next objects in the MIB of an agent.
Set Request:


Retrieve the values of objects in the MIB of an agent.
Update the values of objects in the MIB of an agent.
Trap Request

Report extraordinary events to the manager.
4.7 Information Model
• Structure of Management Information (SMI)
(RFC 1155, RFC 1212)
• Managed Object
• Scalar
• Aggregate or tabular object
• Management Information Base (RFC 1213)
Managed Object
Object
Object
Type
Name:
OBJECT
IDENTIFIER
Syntax:
ASN.1
Object
Instance
Encoding:
BER
FigureObject
4.10 Managed
Type Object : Type and Instance
Object Instance
Managed Object: Multiple Instances
Object
Object
Type
Name:
OBJECT
IDENTIFIER
Object
Instance 3
Object
Instance 2
Syntax:
ASN.1
Object Type
Encoding:
BER
Object
Instance 1
Object Instance
Figure 4.11 Managed Object : Type with Multiple Instances
Object Name
• Object is uniquely defined by
• DESCRIPTOR
• OBJECT IDENTIFIER
internet OBJECT IDENTIFIER ::=
{iso org(3) dod(6) 1 }.
internet OBJECT IDENTIFIER ::= {iso(1) standard(3) dod(6) internet(1)}
internet OBJECT IDENTIFIER ::= {1 3 6 1}
internet OBJECT IDENTIFIER ::= {iso standard dod internet }
internet OBJECT IDENTIFIER ::= { iso standard dod(6) internet(1) }
internet OBJECT IDENTIFIER ::= { iso(1) standard(3) 6 1 }
Internet Subnodes
Internet
{1 3 6 1}
directory
(1)
directory
mgmt
(2)
experimental
(3)
private
(4)
OBJECT IDENTIFIER ::= {internet 1}
Figure 4.13 Subnodes under Internet Node in SNMPv1
mgmt
OBJECT IDENTIFIER ::= {internet 2}
experimental
OBJECT IDENTIFIER ::= {internet 3}
private
OBJECT IDENTIFIER ::= {internet 4}
0
ccitt
0
std
1.3.6.1.2.1.2
1
system interface
1
2
mgmt
1
MIB II
at
3
IP
4
2
joint-iso-ccitt
3
org
6
dod
1
internet
3
2
experimental
2
member
body
1
reg
authority
directory
root
1
iso
ICMP TCP
5
6
UDP
7
1.3.6.1.2.1
1.3.6.1.4.1
4
private
1
enterprises
EGP
8
Trans.
10
SNMP
11
Private MIB Example
Internet
{1 3 6 1}
private
(4)
http://www.iana.org/
enterprises
(1)
Enterprise Number
cisco
(9)
hp
(11)
3Com
(43)
Cabletron
(52)
Figure
4.14 Private Subtree for Commercial Vendors
http://www.iana.org/assignments/enterprise-numbers
SNMP ASN.1 Data Type
SNMP ASN.1
Data Type
Tag
Structure
Number
Class
Simple
or
Primitive
Defined
or
Application
Constructor
or
Structured
Universal
Application
Figure 4.15 SNMP ASN.1 Data Type
Contextspecific
Private
Primitive Data Types
Structure
Primitive types
Data Type
INTEGER
OCTET STRING
OBJECT IDENTIFIER
NULL
Comments
Subtype INTEGER (n1..nN)
Special case: Enumerated
INTEGER type
8-bit bytes binary and textual data
Subtypes can be specified by either
range or fixed
Object position in MIB
Placeholder
• subtype:
• INTEGER (0..255)
• OCTET STRING (SIZE 0..255)
• OCTET STRING (SIZE 8)
Enumerated
• Special case of INTEGER data type
error-status INTEGER {
noError(0),
tooBig(1),
genErr(5),
authorizationError(16)
}
Defined or Application Data Type
Defined types
NetworkAddress Not used
Dotted decimal IP address
IpAddress
Wrap-around, non-negative integer,
Counter
Gauge
TimeTicks
Opaque
monotonically increasing, max 2^32 1
Capped, non-negative integer,
increase or decrease
Non-negative integer in hundredths of
second units
Application-wide arbitrary ASN.1
syntax, double wrapped OCTET
STRING
Constructor or Structured Data Type:
SEQUENCE

List Marker
SEQUENCE { <type1>, <type2>,…, <typeN> }
IpAddrEntry ::=
SEQUENCE {
ipAdEntAddr
ipAdEntIfIndex
ipAdEntNetMask
ipAdEntBcastAddr
ipAdEntReasmMaxSize
}
IpAddress,
INTEGER,
IpAddress,
INTEGER,
INTEGER (0..65535)
Constructor or Structured Data Type:
SEQUENCE OF
SEQUENCE OF <entry>
where <entry> is a list constructor
ipAddrTable OBJECT-TYPE
SYNTAX SEQUENCE OF IpAddrEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"The table of addressing information relevant to
this entity's IP addresses."
::= { ip 20 }
Example: IP Address Table
• Each row (table entry) is a sequence: IpAddrEntry.
• The ipAddrTable table is a sequence of rows (entries), i.e.
a sequence of ipAddrEntry.
Encoding
• Basic Encoding Rules (BER)
- Type, Length, and Value (TLV)
Type
Class
(7-8th bits)
Length
P/C
(6th bit)
Value
Tag Number
(1-5th bits)
SNMP Data Types and Tags
Type
Tag
OBJECT IDENTIFIER
SEQUENCE
IpAddress
Counter
Gauge
TimeTicks
Opaque
UNIVERSAL 6
UNIVERSAL 16
APPLICATION 0
APPLICATION 1
APPLICATION 2
APPLICATION 3
APPLICATION 4
4.7.3 Managed Object: Structure
OBJECT:
sysDescr:
Syntax:
Definition:
Access:
Status:
{ system 1 }
OCTET STRING
"A textual description of the entity. This value
should include the full name and version
identification of the system's hardware type,
software operating-system, and networking
software. It is mandatory that this only contain
printable ASCII characters."
read-only
mandatory
Figure 4.17 Specifications for System Description
SMIv1, SMIv2

SMIv1:




SMI (RFC 1155)
Concise MIB (RFC 1212)
Trap-Type (RFC 1215)
SMIv2:



SMIv2 (RFC 2578)
Textual Conventions (RFC 2579)
Conformance Statements (RFC 2580)
Object-Type Macro (RFC 1155)
OBJECT-TYPE MACRO ::= BEGIN
TYPE NOTATION ::=
"SYNTAX" type (TYPE ObjectSyntax)
"ACCESS" Access
"STATUS" Status
VALUE NOTATION ::= value (VALUE ObjectName)
Access ::= "read-only" | "read-write" | "write-only
| "not-accessible"
Status ::= "mandatory" | "optional"
END
| "obsolete"
OBJECT-TYPE MACRO (RFC1212)
OBJECT-TYPE MACRO ::=
BEGIN
TYPE NOTATION ::=
"SYNTAX" type(ObjectSyntax) 
"ACCESS" Access 
"STATUS" Status

DescrPart

ReferPart

IndexPart

DefValPart 
VALUE NOTATION ::= value (VALUE ObjectName)
ObjectName ::= OBJECT IDENTIFIER
OBJECT-TYPE Example
sysLocation OBJECT-TYPE
SYNTAX DisplayString (SIZE (0..255))
ACCESS read-write
STATUS mandatory
DESCRIPTION
"The physical location of this node (e.g.,
`telephone closet, 3rd floor')."
::= { system 6 }
DisplayString ::=
OCTET STRING (SIZE (0..255))
Go to Next Example
"SYNTAX" type(ObjectSyntax)
ObjectSyntax ::=
CHOICE {
simple
application-wide
}
SimpleSyntax ::=
CHOICE {
number INTEGER,
string
OCTET STRING,
object
OBJECT IDENTIFIER,
empty
NULL
}
SimpleSyntax,
ApplicationSyntax
ApplicationSyntax ::=
CHOICE {
address NetworkAddress,
counter Counter,
gauge
Gauge,
ticks
TimeTicks,
arbitrary Opaque
}
Back to OBJECT TYPE
ApplicationSyntax
0 .. 232-1
NetworkAddress ::=
CHOICE {
internet
IpAddress
}
IpAddress ::=
[APPLICATION 0] IMPLICIT OCTET STRING (SIZE (4))
Counter ::=
[APPLICATION 1] IMPLICIT INTEGER (0..4294967295)
Gauge ::=
[APPLICATION 2] IMPLICIT INTEGER (0..4294967295)
TimeTicks ::=
[APPLICATION 3] IMPLICIT INTEGER (0..4294967295)
Opaque ::=
[APPLICATION 4] IMPLICIT OCTET STRING
Back to OBJECT TYPE
"ACCESS" Access "STATUS" Status
Access ::= "read-only"
| "read-write"
| "write-only"
| "not-accessible
Status ::= "mandatory"
| "optional"
| "obsolete"
| "deprecated"
Back to OBJECT TYPE
DescrPart
DescrPart ::=
"DESCRIPTION" value (description DisplayString)
| empty
ReferPart
ReferPart ::=
"REFERENCE" value (reference DisplayString)
| empty
Back to OBJECT TYPE
DefValPart
DefValPart ::=
"DEFVAL" "{" value (defvalue ObjectSyntax) "}"
| empty
Example: ifNumber OBJECT-TYPE
SYNTAX INTEGER
ACCESS read-only
STATUS mandatory
DEFVAL 1
DESCRIPTION
"The number of network interfaces (regardless of
their current state) present on this system.“
::= { interfaces 1 }
Back to OBJECT TYPE
IndexPart
IndexPart ::=
"INDEX" "{" IndexTypes "}"
IndexSyntax ::=
CHOICE {
number
INTEGER (0..MAX),
string
OCTET STRING,
IndexType ::=
object
value (indexobject ObjectName)
OBJECT IDENTIFIER,
address
| type (indextype)
NetworkAddress,
ipAddress
IpAddress
}
IndexTypes ::=
IndexType
| IndexTypes "," IndexType
Back to OBJECT TYPE
instance-identifier (INDEX)

integer-valued


string-valued, fixed-length strings



“IIS Admin”  9.73.73.83.32.65.100.109.105.110
object identifier-valued
 1.3.6.1.2  5.1.3.6.1.2
NetworkAddress-valued


‘004096563c2e’H  0.64.150.86.60.46
string-valued, variable-length strings


3  3
163.22.20.16  1.163.22.20.16
IpAddress-valued

163.22.20.16  163.22.20.16
Index - variable-length string
svSvcTable OBJECT-TYPE
SYNTAX SEQUENCE OF SvSvcEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"A list of service entries describing
network services installed on this
server.“
::= { server 3 }
svSvcEntry OBJECT-TYPE
SYNTAX SvSvcEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"The names of the network services
installed on this server."
INDEX { svSvcName }
::= { svSvcTable 1 }
Back to OBJECT TYPE
OBJECT-TYPE Example
dot1dBasePortEntry OBJECT-TYPE
SYNTAX Dot1dBasePortEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"A list of information for each port of the bridge."
REFERENCE
"IEEE 802.1D-1990: Section 6.4.2, 6.6.1"
INDEX { dot1dBasePort }
::= { dot1dBasePortTable 1 }
Aggregate Object
• A group of objects
Table of Objects
• Also called tabular objects
• Can be represented by a table with
List of Objects
• Columns of objects
• Rows of instances
Objects
Aggregate M.O. Macro: Table Object
ipAddrTable OBJECT-TYPE
SYNTAX SEQUENCE OF IpAddrEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"The table of addressing information
relevant to this entity's IP addresses."
::= {ip 20}
Aggregate M.O. Macro: Entry Object
ipAddrEntry OBJECT-TYPE
SYNTAX IpAddrEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"The addressing information for one of
this entity's IP addresses."
INDEX { ipAdEntAddr }
::= { ipAddrTable 1 }
ipAddrEntry: OBJECT-TYPE
IpaddrEntry: SYNTAX
Aggregate M.O. Macro: Entry Object
IpAddrEntry ::=
SEQUENCE {
ipAdEntAddr
IpAddress,
ipAdEntIfIndex
INTEGER,
ipAdEntNetMask
IpAddress,
ipAdEntBcastAddr INTEGER,
ipAdEntReasmMaxSize INTEGER (0..65535)
}
Aggregate M.O. Macro: Columnar Objects
ipAdEntAddr OBJECT-TYPE
SYNTAX IpAddress
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The IP address to which this entry's
addressing information pertains.”
::= { ipAddrEntry 1 }
Tabular Representation of Aggregate Object
TABLE
T
ENTRY
E
COLUMNAR
OBJECT 1
COLUMNAR
OBJECT 2
COLUMNAR
OBJECT 3
COLUMNAR
OBJECT 4
Figure 4.22(a) Multiple Instance Managed Object
COLUMNAR
OBJECT 5
Tabular Representation of Aggregate Object
T
T.E
T.E.1.1
T.E.2.1
T.E.3.1
T.E.4.1
T.E.5.1
T.E.1.2
T.E.2.2
T.E.3.2
T.E.4.2
T.E.5.2
T.E.1.3
T.E.2.3
T.E.3.3
T.E.4.3
T.E.5.3
T.E.1.4
T.E.2.4
T.E.3.4
T.E.4.4
T.E.5.4
Multiple Instances of Aggregate Managed
Object
ipAddrTable {1.3.6.1.2.1.4.20}
ipAddrEntry (1)
ipAdEntAddr (1)
ipAdEntIfIndex (2)
ipAdEntNetMask (3)
ipAdEntBcastAddr (4)
ipAdEntReasmMaxSize (5)
Columnar object ID of ipAdEntBcastAddr is (1.3.6.1.2.1.4.20.1.4):
iso org dod internet mgmt mib ip ipAddrTable ipAddrEntry ipAdEntBcastAddr
1 3 6
1
2 1 4
20
1
4
Figure 4.23(a) Columnar objects under ipAddrEntry
Example
Row
ipAdEntAddr
ipAdEntIfIndex
IpAdEntNetMask
IpAdEntBcastAddr
IpAdEntReasmMaxSize
1
2
3
4
123.45.2.1
123.45.3.4
165.8.9.25
9.96.8.138
1
3
2
4
255.255.255.0
255.255.0.0
255.255.255.0
255.255.255.0
0
1
0
0
12000
12000
10000
15000
Figure 4.23(b) Object instances of ipAddrTable (1.3.6.1.2.1.4.20)
Columnar Object
ipAdEntAddr
1.3.6.1.2.1.4.20.1.1
ipAdEntIfIndex
1.3.6.1.2.1.4.20.1.2
ipAdEntBcastAddr
1.3.6.1.2.1.4.20.1.4
IpAdEntReasmMaxSize
1.3.6.1.2.1.4.20.1.5
Row # in (b)
Object Identifier
2
{1.3.6.1.2.1.4.20.1.1.123.45.3.4}
3
{1.3.6.1.2.1.4.20.1.2.165.8.9.25}
1
{1.3.6.1.2.1.4.20.1.4.123.45.2.1}
4
{1.3.6.1.2.1.4.20.1.5.9.96.8.138}
Figure 4.23(c) Object Id for specific instance
Identification of Managed Objects

Use Object Identifier (OID)

OID = Object Type OID
Object Type OID:



Each Object type has a unique OID
Instance Identifier:


. Instance Identifier
Identify instances of object type
E.g
.mib-2.interface.ifTable.ifEntry.ifDescr.2
Two Kinds of Managed Objects

Type-Specific Objects:

sysDescr OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..255))
::= {system 1}


OID: mib-2.system.1.0
Columnar Objects

OID:
mib-2.interface.ifTable.ifEntry.ifDescr.2
mib-2.interface.ifTable.ifEntry.ifDescr.6
mib-2.interface.ifTable.ifEntry.ifType.2
mib-2.interface.ifTable.ifEntry.ifType.6
Columnar Objects
ifTable OBJECT-TYPE
SYNTAX SEQUENCE OF IfEntry
…
::= { interface 2 }
ifEntry OBJECT-TYPE
SYNTAX IfEntry
…
INDEX {ifIndex }
::= { ifTable 1}
IfEntry ::= SEQUENCE {
ifIndex
INTEGER,
ifDescr
DisplayString,
ifType INTEGER,
…
}
ifDescr OBJECT-TYPE
SYNTAX DisplayString (SIZE(0..255))
ACCESS read-only
STATUS madatory
...
::= {ifEntry 2}
Columnar Objects
.ifTable.ifEntry.1 (1.3.6.1.2.1.2.2.1.1)
.ifTable.ifEntry.2 (1.3.6.1.2.1.2.2.1.2)
.ifTable.ifEntry.3 (1.3.6.1.2.1.2.2.1.3)
ifIndex ifDescr
ifType
...
1
le0
6
...
6
llc0
1
...
7
lo0
24
...
9
le1
6
...
1.3.6.1.2.1.2.2.1.2.6
1.3.6.1.2.1.2.2.1.3.7
Index in MIB II








ifEntry
atEntry
ipAddrEntry
ipRouteEntry
ipNetToMediaEntry
{ifIndex}
{atNetIfIndex, atNetAddress}
{ipAdEntAddr }
{ipRouteDest}
{ipNetToMediaIfIndex,
ipNetToMediaNetAddress}
tcpConnEntry
{tcpConnLocalAddress, tcpConnLocalPort,
tcpConnRemoteAddress, tcpConnRemotePort}
udpEntry
{udpLocalAddress, udpLocalPort}
egpNeighEntry
{egpNeighAddr}
Index Example

To get the state of the TCP connection:
10.10.13.137: 3125 ===> 61.30.91.235: 80

Use snmp_get_req. to get the “tcpConnState” of the
tcpConnTable in MIB II.
tcpConnState ==> 1.3.6.1.2.1.6.13.1.1
1.3.6.1.2.1.6.13.1.1.10.10.13.137.3125.61.30.91.235.80
tcpConnTable
4.7.4 MIB-II
• MIB-II (RFC 1213) is superset of MIB-I
• Objects that are related grouped into object
groups
• MIB module comprises module name, imports
from other modules, and definitions of current
module
• RFC 1213 defines eleven groups
MIB II (RFC 1213)





System Group
 Provide general information about the managed system.
Interfaces Group
 Contains generic information about the physical interfaces.
Address-Translation Group
 Contains information about the mapping between network addresses
and physical addresses for each physical interface.
IP Group
 Contains information about the implementation and operation of IP at
the managed system.
ICMP Group
 Contains information about the implementation and operation of ICMP
at the managed system.
MIB-II (cont.)

TCP Group


UDP Group


Placeholder for OSI (CMIP Over TCP/IP)
Transmission Group


Contains information about the implementation and operation of
EGP at the managed system.
CMOT Group


Contains information about the implementation and operation of
UDP at the managed system.
EGP Group


Contains information about the implementation and operation of
TCP at the managed system.
Provides details about the underlying transmission media for each
interface.
SNMP Group

Provides the statistics of SNMP operations at the managed
system.
Internet
{1 3 6 1}
directory
(1)
mgmt
(2)
experimental
(3)
mib-2
(1)
system (1)
interfaces (2)
at (3)
snmp (11)
transmission (10)
cmot (9)
ip (4)
icmp (5)
egp (8)
udp (7)
tcp (6)
private
(4)
System Group
system
(mib-2 1)
sysDescr (1)
sysObjectId
(2)
sysUpTime (3)
sysServices (7)
sysLocation (6)
sysName (5)
sysContact (4)
Figure 4.27 System Group
System Group
Entity
sysDescr
sysObjectID
sysUpTime
sysContact
sysName
sysLocation
sysServices
OID
system 1
system 2
system 3
system 4
system 5
system 6
system 7
Description (brief)
Textual description
OBJECT IDENTIFIER of the entity
Time (in hundredths of a second since last reset)
Contact person for the node
Administrative name of the system
Physical location of the node
Value designating the layer services provided by the
entity
72= 8 + 64
01000100
sysServices OBJECT-TYPE
SYNTAX INTEGER (0..127)
ACCESS read-only
STATUS mandatory
DESCRIPTION
"A value which indicates the set of services that
this entity primarily offers.
The value is a sum. This sum initially takes the
value zero, Then, for each layer, L, in the range
1 through 7, that this node performs transactions
for, 2 raised to (L - 1) is added to the sum. For
example, a node which performs primarily routing
functions would have a value of 4 (2^(3-1)). In
contrast, a node which is a host offering
application services would have a value of 72
(2^(4-1) + 2^(7-1)). Note that in the context of
the Internet suite of protocols, values should be
calculated accordingly:
layer functionality
1 physical (e.g., repeaters)
2 datalink/subnetwork (e.g., bridges)
3 internet (e.g., IP gateways)
4 end-to-end (e.g., IP hosts)
7 applications (e.g., mail relays)
For systems including OSI protocols, layers 5 and
6 may also be counted."
::= { system 7 }
System Information
Interfaces Group
ifNumber
(1)
interfaces
(mib-2 2)
ifTable
(2)
ifEntry
(1)
ifIndex (1)
ifSpecific (22)
ifDescr (2)
ifOutQLen (21)
ifType (3)
ifMtu (4)
ifOutErrors (20)
ifOutDiscards (19)
ifSpeed (5)
ifPhysAddress (6)
ifAdminstatus (7)
ifOperStatus (8)
ifLastChange (9)
ifInOctets (10)
ifInUcastPkts (11)
ifOutNUcastPkts (18)
ifOutUcastPkts (17)
ifOutOctets (16)
ifUnknownProtos (15)
ifInErrors (14)
ifInDiscards (13)
ifInNUcastPkts (12)
iFEntry
ifEntry OBJECT-TYPE
SYNTAX IfEntry
ACCESS not-accessible
STATUS mandatory
DESCRIPTION
"An interface entry containing
objects at the subnetwork layer and
below for a particular interface."
INDEX {ifIndex}
::= {ifTable 1}
ifType
ifType OBJECT-TYPE
SYNTAX INTEGER {
other(1),
-- none of the following
regular1822(2),
hdh1822(3),
ddn-x25(4),
rfc877-x25(5),
ethernet-csmacd(6),
iso88023-csmacd(7),
iso88024-tokenBus(8),
iso88025-tokenRing(9),
iso88026-man(10),
starLan(11),
proteon-10Mbit(12),
proteon-80Mbit(13),
hyperchannel(14),
fddi(15),
lapb(16),
sdlc(17),
ds1(18),
-- T-1
e1(19),
-- european equiv. of T-1
basicISDN(20),
primaryISDN(21), -- proprietary serial
propPointToPointSerial(22),
ppp(23),
……….
http://www.iana.org/assignments/smi-numbers
ifAdminStatus OBJECT-TYPE
SYNTAX INTEGER {
up(1),
-- ready to pass packets
down(2),
testing(3) -- in some test mode
}
ACCESS read-write
STATUS mandatory
DESCRIPTION
"The desired state of the interface. The testing(3) state indicates
that no operational packets can be passed."
::= { ifEntry 7 }
ifOperStatus OBJECT-TYPE
SYNTAX INTEGER {
up(1),
-- ready to pass packets
down(2),
testing(3) -- in some test mode
}
ACCESS read-only
STATUS mandatory
DESCRIPTION
"The current operational state of the interface. The testing(3)
state indicates that no operational packets can be passed."
::= { ifEntry 8 }
ifTable
ifTable (cont.)
IP Group
ip
(mib-2 4)
ipForwarding (1)
ipRoutingDiscards (23)
ipDefaultTTL (2)
ipNetToMediaTable (22)
ipInReceives (3)
ipRouteTable (21)
ipInHdrErrors (4)
ipAddrTable (20)
ipInAddrErrors (5)
ipFragCreates (19)
ipFragFails (18)
ipForwDatagrams (6)
ipInUnknow nProtos (7)
ipFragOKs (17)
ipInDiscards (8)
ipReasmFails (16)
ipInDelivers (9)
ipReasmOKs (15)
ipOutRequests(10)
ipOutDiscards (11)
ipReasmReqds (14)
ipReasmTimeout (13)
ipOutNoRoutes (12)
IP Group
• ipForwarding:
• forwarding(1)
• not-forwarding(2)
• IP Address Table contains table of IP addresses
• IP Route Table contains an entry for each route
• IP Network-to-Media Table is address translation
table mapping IP addresses to physical addresses
IP Address Table
ipAddrTable
(ip 20)
ipAddrEntry
(ipAddrTable 1)
ipAdEntReasmMaxSize (5)
ipAdEntAddr (1)
ipAdEntBcastAddr (4)
ipAdEntIfIndex (2)
ipAdEntNetMask
(3)
Legend: INDEX in bold
Figure 4.30 IP Address Table
ipAddrTable
IP Routing Table
ipRouteTable
(ip 21)
ipRouteEntry
ipRouteTable (1)
ipRouteDest (1)
ipRouteIfIndex (2)
ipRouteInfo (13)
ipRouteMetric5
(12)
ipRouteMetric1 (3)
ipRouteMask 11)
ipRouteMetric2 (4)
ipRouteAge (10)
ipRouteMetric3 (5)
ipRouteProto (9)
ipRouteMetric4 (6)
ipRouteType (8)
ipRouteNextHop (7)
Figure 4.31 IP Routing Table
IP Routing Table
Entity
ipRouteTable
ipRouteEntry
ipRouteDest
ipRouteIfIndex
ipRouteMetric1
ipRouteMetric2
ipRouteMetric3
ipRouteMetric4
ipRouteNextHop
ipRouteType
ipRouteProto
ip 21
ipRouteTable 1
ipRouteEntry 1
ipRouteEntry 2
ipRouteEntry 3
ipRouteEntry 4
ipRouteEntry 5
ipRouteEntry 6
ipRouteEntry 7
ipRouteEntry 8
ipRouteEntry 9
ipRouteAge
ipRouteMask
ipRouteEntry 10
ipRouteEntry 11
ipRouteMetric5
ipRouteInfo
ipRouteEntry 12
ipRouteEntry 13
OID
Description (brief)
IP routing table
Route to a particular destination
Destination IP address of this route
Index of interface, same as ifIndex
Primary routing metric for this route
An alternative routing metric for this route
An alternative routing metric for this route
An alternative routing metric for this route
IP address of the next hop
Type of route
Routing mechanism by which this route was
learned
Number of seconds since routing was last updated
Mask to be logically ANDed with the destination
address before comparing with the ipRouteDest
field
An alternative metric for this route
Reference to MIB definition specific to the routing
protocol
ipRouteTable Example
other(1),
invalid(2),
direct(3),
indirect(4)
Sec.
other(1),
local(2),
netmgmt(3),
icmp(4),
egp(5),
ggp(6),
hello(7),
rip(8),
is-is(9),
s-is(10),
ciscoIgrp(11),
bbnSpfIgp(12),
ospf(13),
bgp(14)
IP Address Translation Table
ipNetToMediaTable
(ip 22)
ipNetToMediaEntry (1)
ipNetToMediaIfIndex (1)
ipNetToMediaPhysAddress (2)
ipNetToMediaType (4)
ipNetToMediaNetAddress (3)
Figure 4.32 IP Address Translation Table
IP Address Translation Table
Entity
ipNetToMediaTable
OID
ip 22
ipNetToMediaEntry
IpNetToMediaTable 1
ipNetToMediaIfIndex
IpNetToMediaEntry 1
ipNetToMediaPhysAddress IpNetToMediaEntry 2
ipNetToMediaNetAddress IpNetToMediaEntry 3
ipNetToMediaType
IpNetToMediaEntry 4
Description (brief)
Table mapping IP addresses to
physical addresses
IP address to physical address
for the particular interface
Interfaces on which this entry's
equivalence is effective; same
as ifIndex
Media dependent physical
address
IP address
Type of mapping
IPNetToMediaTable
other(1),
read-write invalid(2),
dynamic(3),
static(4)
= ARP Table
ICMP Group
icmp
(mib-2 5)
icmpInMsgs (1)
icmpInErrors (2)
icmpInDestUnreachs (3)
icmpInTimeExcds (4)
icmpInParmProbe (5)
icmpInSrcQuenchs (6)
icmpInRedirects (7)
icmpInEchos (8)
icmpInEchoReps (9)
icmpInTimestamps (10)
icmpInTimestampReps (11)
icmpInAddrMasks (12)
icmpInAddrMaskReps (13)
icmpOutAddrMaskReps (26)
icmpOutAddrMasks (25)
icmpOutTimestampReps (24)
icmpOutTimestamps (23)
icmpOutEchoReps (22)
icmpOutEchos (21)
icmpOutRedirects (20)
icmpOutSrcQuenchs (19)
icmpOutParmProbe (18)
icmpOutTimeExcds (17)
icmpOutDestUnreachs (16)
icmpOutErrors (15)
icmpInMsgs (14)
ICMP
• Objects associated with ping
• icmpOutEchos
- # ICMP echo messages sent
• icmpInEchoReps
- # ICMP echo reply messages received
• Objects associated with traceroute/tracert
• icmpInTimeExcs
• # ICMP time exceeded messages received
TCP Group
tcp
(mib-2 6)
tcpOutRsts (15)
tcpRtoAlgorithm (1)
tcpInErrors (14)
tcpRtoMin (2)
tcpConnTable 13)
tcpRtoMax (3)
tcpRetranSegs (12)
tcpMaxConn (4)
tcpActiveOpens (5)
tcpOutSegs (11)
tcpPassiveOpens (6)
tcpInSegs (10)
tcpAttemptFails (7)
tcpCurrEstab (9)
tcpEstabResets (8)
Figure 4.35 TCP Group
TCP Connection Table
tcpConnTable
(tcp 13)
tcpConnEntry
(1)
tcpConnState (1)
tcpCommRemPort (5)
tcpConnLocalAddress (2)
tcpConnRemAddress(4)
tcpConnLocalPort (3)
Figure 4.36 TCP Connection Table
TCP Connection Table
Entity
tcpConnTable
tcpconnEntry
OID
tcp 13
TcpConnTable 1
TcpConnEntry 1
tcpConnState
tcpConnLocalAddressTcpConnEntry 2
TcpConnEntry 3
tcpConnLocalPort
tcpConnRemAddress TcpConnEntry 4
TcpConnEntry 5
tcpConnRemPort
Description (brief)
TCO connection table
Information about a particular TCP
connection
State of the TCP connection
Local IP address
Local port number
Remote IP address
Remote port number
TCP Connection State
tcpConnState OBJECT-TYPE
SYNTAX INTEGER {
closed(1),
listen(2),
synSent(3),
synReceived(4),
established(5),
finWait1(6),
finWait2(7),
closeWait(8),
lastAck(9),
closing(10),
timeWait(11),
deleteTCB(12)
}
ACCESS read-write
STATUS mandatory
…
::= { tcpConnEntry 1 }
tcpConnTable
UDP Group
udp
(mib-2 7)
udpInDatagrams
(1)
udpNoPorts
(2)
udpInErrors
(3)
udpOutDatagrams
(4)
udpTable
(5)
udpEntry
(1)
udpLocAddress
(1)
Figure 4.37 UDP Group
udpLocalPort
(2)
UDP Group
Entity
udpInDatagrams
OID
udp 1
udpNoPorts
udp 2
udpInErrors
udpOutDatagrams
udpTable
udpEntry
udp 3
udp 4
udp 5
udpTable 1
udpLocalAddress
udpLocalPort
udpEntry 1
udpEntry 2
Description (brief)
Total number of datagrams delivered to the
users
Total number of received datagrams for
which there is no application
Number of received datagrams with errors
Total number of datagrams sent
UDP Listener table
Information about a particular connection or
UDP listener
Local IP address
Local UDP port
udpTable