IBM Support

SNMP OID list for IBM Security Network Protection (XGS)

Question & Answer


Question

In order to better monitor the device health by using Simple Network Management Protocol (SNMP), which Object Identifiers (OIDs) can be useful to monitor?

Answer

CPU and Memory Statistics

OID Description
.1.3.6.1.4.1.8072.1.3.2.4.1.2.11.120.103.115.46.99.112.117.112.101.114.102.2 Data Plane - CPU Usage
.1.3.6.1.4.1.8072.1.3.2.4.1.2.17.120.103.115.46.99.111.110.116.114.111.108.95.112.108.97.110.101.2 Control Plane - CPU Usage
.1.3.6.1.4.1.8072.1.3.2.4.1.2.7.120.103.115.46.109.101.109.2 Memory Utilization (%)

Notes:

  • Data Plane - CPU Usage: Displays the amount of CPU that the Network Protection appliance is using to process network data.
  • Control Plane CPU Usage: Displays the amount of CPU that the Network Protection appliance is using for system maintenance that is not directly related to processing network data.
 
  • Click to display example snmpwalk output.


    $ snmpwalk -v2c -c public 9.55.214.70 .1.3.6.1.4.1.8072.1.3.2.4.1.2.7.120.103.115.46.99.112.117.2 NET-SNMP-EXTEND-MIB::nsExtendOutLine."xgs.cpu".2 = STRING: idlecpu = 74
    $ snmpwalk -v2c -c public 9.55.214.70 .1.3.6.1.4.1.8072.1.3.2.4.1.2.7.120.103.115.46.109.101.109.2 NET-SNMP-EXTEND-MIB::nsExtendOutLine."xgs.mem".2 = STRING: memoryused = 25

IPS Sensor Statistics

OID Description
.1.3.6.1.4.1.8072.1.3.2.3.1.2.10.120.103.115.46.101.118.101.110.116.115 Event Summary Table
.1.3.6.1.4.1.8072.1.3.2.3.1.2.7.120.103.115.46.112.97.109 PAM Statistics Table
.1.3.6.1.4.1.8072.1.3.2.4.1.2.10.120.103.115.46.101.118.101.110.116.115.2 IPS Event Count
.1.3.6.1.4.1.8072.1.3.2.4.1.2.10.120.103.115.46.101.118.101.110.116.115.3 Lost Events
.1.3.6.1.4.1.8072.1.3.2.4.1.2.10.120.103.115.46.101.118.101.110.116.115.4 Network Access Policy Event Count
.1.3.6.1.4.1.8072.1.3.2.4.1.2.10.120.103.115.46.101.118.101.110.116.115.5 URL Event Count
.1.3.6.1.4.1.8072.1.3.2.4.1.2.7.120.103.115.46.112.97.109 PAM Statistics
Note: The OID for PAM Statistics reports the entire table for PAM Statistics. To get each value separately, you can walk individual OIDs from.1.3.6.1.4.1.8072.1.3.2.4.1.2.7.120.103.115.46.112.97.109.1 through.1.3.6.1.4.1.8072.1.3.2.4.1.2.7.120.103.115.46.112.97.109.505

  • Click to display example snmpwalk output.

    $ snmpwalk -v2c -c public 9.55.214.70 .1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.3
    NET-SNMP-EXTEND-MIB::nsExtendOutLine."xgs.packetif".3 = STRING: 1_1_drp_frames = 0


Network Interface Port Statistics
 
OID Description
.1.3.6.1.4.1.8072.1.3.2.3.1.2.12.120.103.115.46.108.105.110.107.95.109.103.116 Management Interface Summary Table
.1.3.6.1.4.1.8072.1.3.2.3.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102 Protection Interface Traffic Summary Table
.1.3.6.1.4.1.8072.1.3.2.3.1.2.13.120.103.115.46.108.105.110.107.95.112.114.111.116 Protection Interface Link Status Table
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.108.105.110.107.95.109.103.116.1 Port Status of M.1 (Management 1)
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.108.105.110.107.95.109.103.116.2 Port Status of M.2 (Management 2)
.1.3.6.1.4.1.8072.1.3.2.4.1.2.13.120.103.115.46.108.105.110.107.95.112.114.111.116.2 Port Status - 1.1
.1.3.6.1.4.1.8072.1.3.2.4.1.2.13.120.103.115.46.108.105.110.107.95.112.114.111.116.3 Port Status - 1.2
.1.3.6.1.4.1.8072.1.3.2.4.1.2.13.120.103.115.46.108.105.110.107.95.112.114.111.116.4 Port Status - 1.3
.1.3.6.1.4.1.8072.1.3.2.4.1.2.13.120.103.115.46.108.105.110.107.95.112.114.111.116.5 Port Status - 1.4
.1.3.6.1.4.1.8072.1.3.2.4.1.2.13.120.103.115.46.108.105.110.107.95.112.114.111.116.x As the last number increases, you can monitor the status of each protection interface.

  • Click to display example snmpwalk output.


    $ snmpwalk -v2c -c public 9.55.214.70 .1.3.6.1.4.1.8072.1.3.2.3.1.2.12.120.103.115.46.108.105.110.107.95.109.103.116
    NET-SNMP-EXTEND-MIB::nsExtendOutputFull."xgs.link_mgt" = STRING: Interface: M.1, status: up, speed:
    100Mb/s, duplex: Full
    Interface: M.2, status: down

Network Interface Driver Statistics

OID Description
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.2 Port 1.1 - Congested
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.3 Port 1.1 - Dropped Frames
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.4 Port 1.1 - Forwarded frames
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.5 Port 1.1 - Injected Frames
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.6 Port 1.1 - Local Frames
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.7 Port 1.1 - Modified Frames
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.8 Port 1.1 - RX Errors
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.9 Port 1.1 - RX Frames
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.10 Port 1.1 - RX Lost
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.11 Port 1.1 - RX Octets
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.12 Port 1.1 - TX Errors
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.13 Port 1.1 - TX Failures
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.14 Port 1.1 - TX Frames
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.15 Port 1.1 - TX Octets
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.16 Port 1.1 - TX Retried
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.17 Port 1.1 - Unanalyzed
Notes:
  • You can monitor for specific driver details by using OID groups of 16 starting with.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.2 though.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.17 for interface 1.1. For example, if your device had 32 protection interfaces, you would use all OIDs thorough.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102.513.
  • As the OID increments, you see statistics for additional interfaces.
 
  • Click to display example snmpwalk output.


    $ snmpwalk -v2c -c public 9.55.214.70 .1.3.6.1.4.1.8072.1.3.2.3.1.2.12.120.103.115.46.112.97.99.107.101.116.105.102
    NET-SNMP-EXTEND-MIB::nsExtendOutputFull."xgs.packetif" = STRING: Mon Aug 31 05:13:52 2015
    1_1_congested = 0
    1_1_drp_frames = 231
    1_1_fwd_frames = 11337
    1_1_inj_frames = 276778538
    1_1_local_frames = 0
    1_1_mod_frames = 275765316
    1_1_rx_errors = 321
    1_1_rx_frames = 275776884
    1_1_rx_lost = 0
    1_1_rx_octets = 22616083213
    1_1_tx_errors = 0
    1_1_tx_failures = 17347
    1_1_tx_frames = 276907332
    1_1_tx_octets = 335482659763
    1_1_tx_retries = 8717095
    1_1_unanalyzed = 0
    1_2_congested = 0
    1_2_drp_frames = 1783
    1_2_fwd_frames = 146117
    1_2_inj_frames = 11188
    1_2_local_frames = 23
    1_2_mod_frames = 9668
    1_2_rx_errors = 0
    1_2_rx_frames = 157613
    1_2_rx_lost = 0
    1_2_rx_octets = 15829236
    1_2_tx_errors = 0
    1_2_tx_failures = 0
    1_2_tx_frames = 22586
    1_2_tx_octets = 4044676
    1_2_tx_retries = 0
    1_2_unanalyzed = 2
    1_3_congested = 0
    1_3_drp_frames = 0
    1_3_fwd_frames = 0
    1_3_inj_frames = 0
    1_3_local_frames = 0
    1_3_mod_frames = 0
    1_3_rx_errors = 0
    1_3_rx_frames = 0
    1_3_rx_lost = 0
    1_3_rx_octets = 0
    1_3_tx_errors = 0
    1_3_tx_failures = 0
    1_3_tx_frames = 0
    1_3_tx_octets = 0
    1_3_tx_retries = 0
    1_3_unanalyzed = 0
    1_4_congested = 0
    1_4_drp_frames = 0
    1_4_fwd_frames = 0
    1_4_inj_frames = 0
    1_4_local_frames = 0
    1_4_mod_frames = 0
    1_4_rx_errors = 0
    1_4_rx_frames = 0
    1_4_rx_lost = 0
    1_4_rx_octets = 0
    1_4_tx_errors = 0
    1_4_tx_failures = 0
    1_4_tx_frames = 0
    1_4_tx_octets = 0
    1_4_tx_retries = 0
    1_4_unanalyzed = 0

Outbound SSL Inspection Statistics

OID Description
.1.3.6.1.4.1.8072.1.3.2.3.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121 Outbound SSL Inspection Summary Table
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.2 ActiveConnections
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.3 ActiveConns1
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.4 ActiveConns2
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.5 CancelConnections
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.6 ClientError
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.7 InspPayloadBytes
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.8 NumThreads
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.9 ServerError
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.10 SkipConnections
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.11 TotalConnections
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.12 TotalConns1
.1.3.6.1.4.1.8072.1.3.2.4.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121.13 TotalConns2
  • Click to display example snmpwalk output.


    $ snmpwalk -v2c -c public 9.55.214.70 .1.3.6.1.4.1.8072.1.3.2.3.1.2.12.120.103.115.46.115.115.108.112.114.111.120.121
    NET-SNMP-EXTEND-MIB::nsExtendOutputFull."xgs.sslproxy" = STRING: Wed Sep 2 04:31:56 2015
    ActiveConnections = 0
    ActiveConns1 = 0
    ActiveConns2 = 0
    CancelConnections = 0
    ClientError = 0
    InspPayloadBytes = 488879
    NumThreads = 2
    ServerError = 0
    SkipConnections = 0
    TotalConnections = 24
    TotalConns1 = 0
    TotalConns2 = 0

Inbound SSL Inspection Statistics

OID Description
.1.3.6.1.4.1.8072.1.3.2.3.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101 Inbound SSL Inspection Summary Table
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.2 ActiveConnections
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.3 ActiveConns1
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.4 ActiveConns2
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.5 CancelConnections
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.6 ClientError
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.7 InspPayloadBytes
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.8 NumThreads
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.9 ServerError
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.10 SkipConnections
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.11 TotalConnections
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.12 TotalConns1
.1.3.6.1.4.1.8072.1.3.2.4.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101.13 TotalConns2
  • Click to display example snmpwalk output.


    $ snmpwalk -v2c -c public 9.55.214.70 .1.3.6.1.4.1.8072.1.3.2.3.1.2.14.120.103.115.46.115.115.108.112.97.115.115.105.118.101
    NET-SNMP-EXTEND-MIB::nsExtendOutputFull."xgs.sslpassive" = STRING: Tue Sep 1 23:47:22 2015
    ActiveConnections = 0
    ActiveConns1 = 0
    ActiveConns2 = 0
    InspPayloadBytes = 0
    NumThreads = 2
    TotalConnections = 0
    TotalConns1 = 0
    TotalConns2 = 0

Related Information

[{"Product":{"code":"SSHLHV","label":"IBM Security Network Protection"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"Firmware","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.3.1;5.3.2;5.3.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
23 January 2021

UID

swg21883739