!! This page has been converted to the OID/MIB's of the 7.40 versions !! CPU .1.3.6.1.4.1.9.9.368.1.34.17.1.14 (5 min) .1.3.6.1.4.1.9.9.368.1.34.17.1.13 (instant) Again, the release notes for the CSS MIB changes http://cisco.com/en/US/products/hw/contnetw/ps792/prod_release_note09186a00803a7c04.html#wp182120 You can find more of them here: http://cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_guide_chapter09186a0080158354.html#wp1049415 The updated version http://cisco.com/en/US/products/hw/contnetw/ps792/products_configuration_guide_chapter09186a0080405717.html#wp1049415 See the BELOW for a complete list and explainations of the below (converted to 7.40 and after) ASN Name: apChassisMgrExtSubModuleInstalledMemory Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.17.1.12 ASN Name: apChassisMgrExtSubModuleSystemHeapFree Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.17.1.10 ASN Name: apChassisMgrExtSubModuleCPUInstantaneous Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.17.1.13 ASN Name: apChassisMgrExtSubModuleCPUAverage Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.17.1.14 ASN Name: apChassisMgrExtSubModuleBufferSize Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.4 ASN Name: apChassisMgrExtSubModuleBufferCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.5 ASN Name: apChassisMgrExtSubModuleBufferAvailable Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.6 ASN Name: apChassisMgrExtSubModuleBufferFailures Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.7 ASN Name: apChassisMgrExtSubModuleBufferLowBufferCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.8 ASN Name: apCntName Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.2 ASN Name: apCntHits Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.18 ASN Name: apCntRedirects Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.19 ASN Name: apCntDrops Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.20 ASN Name: apCntRejNoServices Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.21 ASN Name: apCntRejServOverload Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.22 ASN Name: apCntByteCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.25 ASN Name: apCntFrameCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.26 ASN Name: apCntPrimarySorryHits Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.60 ASN Name: apCntSecondSorryHits Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.60 ASN Name: apCntAvgLocalLoad Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.65 ASN Name: apCntsvcHits Object Identifier: 1.3.6.1.4.1.9.9.368.1.18.2.1.4 ASN Name: apCntsvcBytes Object Identifier: 1.3.6.1.4.1.9.9.368.1.18.2.1.5 ASN Name: apCntsvcFrames Object Identifier: 1.3.6.1.4.1.9.9.368.1.18.2.1.6 ASN Name: apSvcNames Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.1 ASN Name: apSvcShortLoad Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.18 ASN name: apSvcAvgLoad Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.40 ASN Name: apSvcLongLoad Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.28 ASN Name: apSvcConnections Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.20 ASN Name: apGrpHitCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.17.2.1.10 ASN Name: apFlowMgrExtDosTotalAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.18 ASN Name: apFlowMgrExtDosTotalSynAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.19 ASN Name: apFlowMgrExtDosTotalLandAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.20 ASN Name: apFlowMgrExtDosTotalZeroPortAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.21 ASN Name: apFlowMgrExtDosTotalIllegalSourceAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.22 ASN Name: apFlowMgrExtDosTotalIllegalDestinationAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.23 ASN Name: apFlowMgrExtDosTotalPingOfDeathAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.24 ASN Name: apFlowMgrExtDosTotalSmurfAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.25 )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((( )))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))) (((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((( CLI Command Line Equivalence = show system-resources CS800# show system-resources System Resources for 7/1: Installed Memory: 134,217,728 (128 MB) Free Memory: 74,477,312 (71 MB) CPU: 3% Buffer Statistics: Buffer Pool: 0 Size: 256 Total:1000 Available:1000 Failures: 0 Low Buffer Count: 996 Buffer Pool: 1 Size:1600 Total:2500 Available:2500 Failures: 0 Low Buffer Count: 2498 SCM (Switch Control Module) and SFM (Switch Fabric Module) are the essential modules of CSS11800. SCM goes into slot 7 and/or slot 8, and only the active (primary) SCM can be monitored. SFM goes into slot 6/slot 9 (active/primary) and/or slot 5/slot 10 (passive/standby). SFM in slot 6/slot 5 provides the switch fabric for slot 1 through slot 4 while the SFM in slot 9/slot 10 provides the switch fabric for slot 11 through slot 14. Slot 6 can only be pair with slot 9, while slot 5 can only be pair with slot 10. Each SFM has 2 SFPs (Switch Fabric Processor), and the SFP is responsible for processing the port-mapping information. 2.1.1 Installed Memory ASN Name: apChassisMgrExtSubModuleInstalledMemory Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.17.1.12 Index Value: . Description: This object specifies the amount of memory present on the submodule. For example: To obtain the amount of memory installed on SCM 7/1: snmpget -c .1.3.6.1.4.1.9.9.368.1.34.17.1.12.7.1 To obtain the amount of memory installed on SFM 6/2: snmpget -c .1.3.6.1.4.1.9.9.368.1.34.17.1.12.6.2 2.1.2 Free Memory ASN Name: apChassisMgrExtSubModuleSystemHeapFree Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.17.1.10 Index Value: . Description: This object identifies the amount of available system memory. This OID should be monitored periodically. For example: To monitor the amount of free memory on SCM 7/1: snmpget -c .1.3.6.1.4.1.9.9.368.1.34.17.1.10.7.1 To monitor the amount of free memory on SFM 9/1: snmpget -c .1.3.6.1.4.1.9.9.368.1.34.17.1.10.9.1 2.1.3 CPU For Instantaneous CPU load: ASN Name: apChassisMgrExtSubModuleCPUInstantaneous Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.17.1.13 Index Value: . Description: This object specifies the instantaneous CPU utilization. For five-minute-average CPU load: ASN Name: apChassisMgrExtSubModuleCPUAverage Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.17.1.14 Index Value: . Description: This object specifies the average CPU utilization This OID should be monitored periodically. For Example: To monitor the Instantaneous CPU load on SCM 7/1 snmpget -c .1.3.6.1.4.1.9.9.368.1.34.17.1.13.7.1 To monitor the 5-minute-average CPU load on SCM 7/1 snmpget -c .1.3.6.1.4.1.9.9.368.1.34.17.1.14.7.1 2.1.4 Buffer - Buffer Pool Size There are two buffer pools (pool 0 and pool 1) per each CPU (1 on SCM and 2 on SFM). ASN Name: apChassisMgrExtSubModuleBufferSize Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.4 Index Value: .. Description: This object specifies the buffer pool size. For example: To obtain the buffer pool size of pool 0 on SCM 7/1 snmpget -c .1.3.6.1.4.1.9.9.368.1.34.18.1.4.0.7.1 2.1.5 Buffer - Buffer Pool Total ASN Name: apChassisMgrExtSubModuleBufferCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.5 Index Value: .. Description: This object specifies the buffer pool count. For example: To obtain the total buffer of pool 1 on SFM 9/2 snmpget -c .1.3.6.1.4.1.9.9.368.1.34.18.1.5.1.9.2 2.1.6 Buffer - Buffer Available ASN Name: apChassisMgrExtSubModuleBufferAvailable Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.6 Index Value: .. Description: This object specifies the number of available buffers in the buffer pool. This OID should be monitored periodically. To monitor the buffer available from pool 0 on SFM 6/2 snmpget -c .1.3.6.1.4.1.9.9.368.1.34.18.1.6.0.6.2 2.1.7 Buffer - Buffer Failure ASN Name: apChassisMgrExtSubModuleBufferFailures Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.7 Index Value: .. Description: This object specifies the number of buffer pool failures. This OID should be monitored periodically. To monitor the buffer failure from pool 1 on SFM 6/2 snmpget -c .1.3.6.1.4.1.9.9.368.1.34.18.1.7.1.6.2 2.1.8 Buffer - Low Buffer Count ASN Name: apChassisMgrExtSubModuleBufferLowBufferCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.34.18.1.8 Index Value: .. Description: This object specifies the buffer low threshold count. To obtain the buffer low threshold count from pool 0 on SFM 9/2 snmpget -c .1.3.6.1.4.1.9.9.368.1.34.18.1.8.0.9.2 2.2 Content Rules Monitoring The equivalent show commands for content rules monitoring are show rule show rule show rule CS800# show rule abc get_from_netcache >>>>>>> > Name: get_from_netcache Owner: abc Author: Local Index: 10 State: Active Type: HTTP IP Redundancy: Master L3: 172.21.55.143 L4: TCP/Any Url: URQL: EQL: DQL: Header Field Group: Total Bytes: 1208620 Total Frames: 9601 Total Redirects: 0 Total Rejects: 0 Overload Rejects: 0 Balance: Least Connections Advanced Balance: None Sticky Mask: 255.255.255.255 Sticky Inactivity timeout: 0 minutes Sticky No Cookie Found Action: Balance Sticky Server Down Failover: Balance ArrowPoint Cookie Path: / ArrowPoint Cookie Expiration: Browser Exit ArrowPoint Cookie Text: None ArrowPoint Cookie Url: None Arrowpoint Cookie display url in header: Enabled String Match Criteria: String Range: 1 - 100 String Prefix: "" String Eos-Char: "" String Ascii-Conversion: Enabled String Skip-Len: 0 String Process-Len: 0 String Operation: Match-Service-Cookie Redirect: "" Persistence: Enabled Param-Bypass: Disabled Services: Local Load Threshold: 254 PrimarySorryServer/Hits: abcweb01/9 SecondSorryServer: abcweb02/10 Name: Hits: Wgt: State: Ld: KAlive: Conn: DNS: ----- ----- ---- ------ --- ------- ----- ---- abcnc01 769 S-1 Alive 21 ICMP 0 0 abcnc02 145 S-1 Alive 19 ICMP 1 0 abcnc03 12 S-1 Alive 14 ICMP 0 0 DNS Names: DNS TTL: DNS Balance: roundrobin Hotlist: Disabled Size: 10, Type: HitCount, Threshold 0, Interval 1 Associated ACLs: 2.2.1 Content Rule - Name In order to use SNMP to obtain individual values of OID monitored for each content rule, the content rule name is converted into ASCII value in decimal format. (For example: lower case g = 103, please see Appendix A for ASCII table.) Other than using the ASCII value for each individual content rules, the SCM also assigns unique internal number for each content rule. In order to find out those number, SNMPWALK is require to obtain those value before proceeding into the following sections. ASN Name: apCntName Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.2 Description: This object shows the internal index value for each content rule. For example: $ snmpwalk 172.21.55.139 CSSpublic .1.3.6.1.4.1.9.9.368.1.16.4.1.2 1.3.6.1.4.1.9.9.368.1.16.4.1.2.3.97.98.99.5.104.116.116.112.115 = "https" 1.3.6.1.4.1.9.9.368.1.16.4.1.2.3.97.98.99.16.103.101.116.95.102.114.111.109.95.11 9.101.98.102.97.114.109 = "get_from_webfarm" 1.3.6.1.4.1.9.9.368.1.16.4.1.2.3.97.98.99.17.103.101.116.95.102.114.111.109.95.11 0.101.116.99.97.99.104.101 = "get_from_netcache" The Index is in the format of (SCM-owner)."owner's name".(SCM-content rule)."content rule name" 2.2.2 Content Rule - Hits ASN Name: apCntHits Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.18 Description: Number of times user request was detected which invoked this content rule. This OID is broken. (CSCdv81235) 2.2.3 Content Rule - Redirects ASN Name: apCntRedirects Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.19 Description: Number of times this content rule caused a redirect request. This OID should be monitored periodically. For example: == The output from show command == CS800# show rule abc abc.com/denim >>>>>>> > Name: abc.com/denim Owner: abc Author: Local Index: 2 State: Active Type: HTTP IP Redundancy: Master L3: 172.21.55.143 L4: TCP/80 Url: //172.21.55.143/denim* URQL: EQL: DQL: Header Field Group: Total Bytes: 0 Total Frames: 0 Total Redirects: 132 Total Rejects: 0 Overload Rejects: 0 == The value obtained via SNMP == $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.16.4.1.19.3.97.98.99 .13.97.98.99.46.99.111.109.47.100.101.110.105.109 1.3.6.1.4.1.9.9.368.1.16.4.1.19.3.97.98.99.13.97.98.99.46.99.111.109.47.100.101 .110.105.109 = Counter32: 132 2.2.4 Content Rule - Drops ASN Name: apCntDrops Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.20 Description: Number of times this content rule was unable to establish a connection. This OID should be monitored periodically. For example: To obtain how many drops for the content rule : abc.com/denim $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.16.4.1.20.3.97.98.99 .13.97.98.99.46.99.111.109.47.100.101.110.105.109 1.3.6.1.4.1.9.9.368.1.16.4.1.20.3.97.98.99.13.97.98.99.46.99.111.109.47.100.101 .110.105.109 = Counter32: 0 2.2.5 Content Rule - Reject - No Services ASN Name: apCntRejNoServices Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.21 Description: Number of times this content rule rejected a connection for want of a service. This OID should be monitored periodically. 2.2.6 Content Rule - Reject - Service Overload ASN Name: apCntRejServOverload Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.22 Description: Number of times this content rule rejected a connection because of overload on the designated service(s). This OID should be monitored periodically. 2.2.7 Content Rule - Byte Count ASN Name: apCntByteCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.25 Description: Total number of bytes passed using this content rule. This OID should be monitored periodically. For example: The CLI equivalent for getting Bytes/Frames counts: show rule CS800# show rule abc get_from_netcache >>>>>>> > Name: get_from_netcache Owner: abc Author: Local Index: 10 State: Active Type: HTTP IP Redundancy: Master L3: 172.21.55.143 L4: TCP/Any Url: URQL: EQL: DQL: Header Field Group: Total Bytes: 1208620 Total Frames: 9601 Total Redirects: 0 Total Rejects: 0 Overload Rejects: 0 For example: To find out how many bytes passed using the content rule "get_from_netcache" via SNMP: $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.16.4.1.25.3.97.98.99 .17.103.101.116.95.102.114.111.109.95.110.101.116.99.97.99.104.101 1.3.6.1.4.1.9.9.368.1.16.4.1.25.3.97.98.99.17.103.101.116.95.102.114.111.109.95.1 10.101.116.99.97.99.104.101 = Counter32: 1208620 2.2.8 Content Rule - Frame Count ASN Name: apCntFrameCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.26 Description: Total number of frames passed using this content rule. This OID should be monitored periodically. For example: To find out how many frames passed using the content rule "get_from_netcache" via SNMP: $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.16.4.1.26.3.97.98.99 .17.103.101.116.95.102.114.111.109.95.110.101.116.99.97.99.104.101 1.3.6.1.4.1.9.9.368.1.16.4.1.26.3.97.98.99.17.103.101.116.95.102.114.111.109.95.1 10.101.116.99.97.99.104.101 = Counter32: 9601 2.2.9 Content Rule - Primary Sorry Server Hits ASN Name: apCntPrimarySorryHits Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.60 Description: Total number of hits to the primary sorry server. This OID should be monitored periodically if Primary Sorry Server was defined for the content rule. CS800# sh rule abc get_from_netcache Partial output of "show rule abc get_from_netcache" Services: Local Load Threshold: 254 PrimarySorryServer/Hits: abcweb01/9 SecondSorryServer: abcweb02/10 For Example: To find out total number of hits to the primary sorry server for "get_from_netcache": $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.16.4.1.60.3.97.98.99.17.103.101.116.95. 102.114.111.109.95.110.101.116.99.97.99.104.101 1.3.6.1.4.1.9.9.368.1.16.4.1.60.3.97.98.99.17.103.101.116.95. 102.114.111.109.95.110.101.116.99.97.99.104.101 = Counter32: 9 2.2.10 Content Rule - Secondary Sorry Server Hits ASN Name: apCntSecondSorryHits Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.60 Description: Total number of hits to the secondary sorry server. This OID should be monitored periodically if Secondary Sorry Server was defined for the content rule. For example: To find out total number of hits to the secondary sorry server for "get_from_netcache": $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.16.4.1.61. 3.97.98.99.17.103.101.116.95.102.114.111.109.95.110.101.116.99.97. 99.104.101 1.3.6.1.4.1.9.9.368.1.16.4.1.61.3.97.98.99.17.103.101.116.95.102.114. 111.109.95.110.101.116.99.97.99.104.101 = Counter32: 10 2.2.11 Content Rule - Average Load for Local Services ASN Name: apCntAvgLocalLoad Object Identifier: 1.3.6.1.4.1.9.9.368.1.16.4.1.65 Description: The currently sensed average load for all local services under this rule. This OID should be monitored periodically. For example: To get the average load for all local services under "get_from_netcache" via SNMP: $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.16.4.1.65.3.97.98.99 .17.103.101.116.95.102.114.111.109.95.110.101.116.99.97.99.104.101 1.3.6.1.4.1.9.9.368.1.16.4.1.65.3.97.98.99.17.103.101.116.95.102.114.111.109.95.1 10.101.116.99.97.99.104.101 = 2 (255 = maximum) 2.2.12 Content Rule - Hits for Individual Services The following three monitoring OIDs are for the individual services under each content rule. The SCM value for each service is needed before proceeding. To obtain the SCM value for each service: $ snmpwalk 172.21.55.139 CSSpublic .1.3.6.1.4.1.9.9.368.1.15.2.1.1 1.3.6.1.4.1.9.9.368.1.15.2.1.1.7.97.98.99.110.99.48.49 = "abcnc01" 1.3.6.1.4.1.9.9.368.1.15.2.1.1.7.97.98.99.110.99.48.50 = "abcnc02" 1.3.6.1.4.1.9.9.368.1.15.2.1.1.7.97.98.99.110.99.48.51 = "abcnc03" So, the SCM value for abcnc01-abcnc03 is 7. Therefore, the index value for the individual services under content rule is (SCM- Owner)."owner".(SCM-Content Rule)."content-rule".(SCM-service)."service" ASN Name: apCntsvcHits Object Identifier: 1.3.6.1.4.1.9.9.368.1.18.2.1.4 Description: The number of flows placed onto this service for this content rule. This OID should be monitored periodically. For example: To get how many hits on abcnc01 under the content rule "get_from_netcache" via SNMPget: $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.18.2.1.4. 3.97.98.99.17.103.101.116.95.102.114.111.109.95.110.101.116.99.97.99.104.101.7.97.98.99.110.99.48.49 1.3.6.1.4.1.9.9.368.1.18.2.1.4.3.97.98.99.17.103.101.116.95.102.114. 111.109.95.110.101.116.99.97.99.104.101.7.97.98.99.110.99.48.49 = Counter32: 769 The equivalent show command output CS800# show rule abc get_from_netcache >>>>>>> > Name: get_from_netcache Owner: abc ---- Output Omitted ---- Name: Hits: Wgt: State: Ld: KAlive: Conn: DNS: ----- ----- ---- ------ --- ------- ----- ---- abcnc01 769 S-1 Alive 2 ICMP 0 0 abcnc02 145 S-1 Alive 2 ICMP 1 0 abcnc03 12 S-1 Alive 2 ICMP 0 0 ---- Output Omitted ---- 2.2.13 Content Rules - Bytes Count for Individual Services ASN Name: apCntsvcBytes Object Identifier: 1.3.6.1.4.1.9.9.368.1.18.2.1.5 Description: The number of flows in bytes moved by this service for this content rule. This OID should be monitored periodically. For example: To get how many bytes moved by abcnc02 under the content rule "get_from_netcache" via SNMPget: $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.18.2.1.5. 3.97.98.99.17.103.101.116.95.102.114.111.109.95.110.101.116.99.97.99.104.101.7.97.98.99.110.99.48.50 1.3.6.1.4.1.9.9.368.1.18.2.1.5.3.97.98.99.17.103.101.116.95.102.114. 111.109.95.110.101.116.99.97.99.104.101.7.97.98.99.110.99.48.50 = Counter32: 195736 There is no equivalent show command for this. 2.2.14 Content Rules - Frames Count for Individual Services ASN Name: apCntsvcFrames Object Identifier: 1.3.6.1.4.1.9.9.368.1.18.2.1.6 Description: Total number of frames moved by this service for this content rule. This OID should be monitored periodically. For example: To get how many frames moved by abcnc03 under the content rule "get_from_netcache" via SNMPget: $ snmpget -c CSSpublic 172.21.55.139 .1.3.6.1.4.1.9.9.368.1.18.2.1.6. 3.97.98.99.17.103.101.116.95.102.114.111.109.95.110.101.116.99.97.99.104.101.7.97.98.99.110.99.48.51 1.3.6.1.4.1.9.9.368.1.18.2.1.6.3.97.98.99.17.103.101.116.95.102.114. 111.109.95.110.101.116.99.97.99.104.101.7.97.98.99.110.99.48.51 = Counter32: 98 There is no equivalent show command for this. 2.3 Services Monitoring 2.3.1 Services - Service Name ASN Name: apSvcNames Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.1 Description: The name of individual services. For example: To obtain the SCM value for each service: $ snmpwalk 172.21.55.139 CSSpublic .1.3.6.1.4.1.9.9.368.1.15.2.1.1 1.3.6.1.4.1.9.9.368.1.15.2.1.1.7.97.98.99.110.99.48.49 = "abcnc01" 1.3.6.1.4.1.9.9.368.1.15.2.1.1.7.97.98.99.110.99.48.50 = "abcnc02" 1.3.6.1.4.1.9.9.368.1.15.2.1.1.7.97.98.99.110.99.48.51 = "abcnc03" Note: Every CSS service is referred with a SCM-value, and it might be different value from services-to-services, and box-to-box. Please verify with SNMPWALK before obtain other values via SNMP. 2.3.2 Services - Service Load ASN Name: apSvcShortLoad Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.18 Description: The Service currently sensed load for Short Lived Flows. This OID should be monitored periodically. ASN name: apSvcAvgLoad Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.40 Description: The Service currently sensed average load. This OID should be monitored periodically. ASN Name: apSvcLongLoad Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.28 Description: The Service currently sensed load for Long Lived Flows. This OID should be monitored periodically. The CLI equivalent command: show service CS800# show service abcnc01 Name: abcnc01 Index: 2 Type: Local State: Alive Rule ( 204.71.141.148 TCP ANY ) Redirect Domain: Redirect String: Keepalive: (ICMP 5 3 5 ) Mtu: 1500 State Transitions: 2 Connections: 0 Max Connections: 0 Total Connections: 205 Total Reused Conns: 0 Weight: 1 Load: 2 2.3.3 Services - Service Current Connections ASN Name: apSvcConnections Object Identifier: 1.3.6.1.4.1.9.9.368.1.15.2.1.20 Description: The current number of TCP connections to this service. This OID should be monitored periodically. Note: The current connection counter for CS800 is still broken. 2.4 Source Group Monitoring 2.4.1 Group - Hit Counts ASN Name: apGrpHitCount Object Identifier: 1.3.6.1.4.1.9.9.368.1.17.2.1.10 Description: Number of times the group has been used This OID should be monitored periodically. For example: The CLI equivalent command is show group CS800# show group abc abc - Index: 1 Active (172.21.55.144 Master) Associated ACLs: Source Services: NONE Destination Services: DNS Name: Hits: State: Load: Trans: Keepalive: Conn: ----- -------- ------ ----- ------ ---------- ----- abcweb01 64 Alive 2 2 ICMP 1 Group Cummulative Counters: Hits/Frames/Bytes: 991/0/0 Connections Total/Current: 0/0 FTP Control Total/Current: 0/0 2.5 Denial of Service Monitoring The CLI equivalent command: show dos CS800# show dos Denial of Service Attack Summary: Total Attacks: 0 SYN Attacks: 0 Maximum per second: 0 LAND Attacks: 0 Maximum per second: 0 Zero Port Attacks: 0 Maximum per second: 0 Illegal Src Attacks: 0 Maximum per second: 0 Illegal Dst Attacks: 0 Maximum per second: 0 Smurf Attacks: 0 Maximum per second: 0 No attacks detected 2.5.1 DOS - Total Attacks ASN Name: apFlowMgrExtDosTotalAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.18 Description: This object specifies the total number of Denial Of Service (DOS) attacks detected by the flowmgr. This OID should be monitored periodically. 2.5.2 DOS - Total SYN Attacks ASN Name: apFlowMgrExtDosTotalSynAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.19 Description: This object specifies the total number of Denial Of Service (DOS) SYN attacks detected by the flowmgr. This OID should be monitored periodically. 2.5.3 DOS - Total LAND Attacks ASN Name: apFlowMgrExtDosTotalLandAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.20 Description: This object specifies the total number of Denial Of Service (DOS) LAND attacks detected by the flowmgr. This OID should be monitored periodically. 2.5.4 DOS - Total Zero Port Attacks ASN Name: apFlowMgrExtDosTotalZeroPortAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.21 Description: This object specifies the total number of Denial Of Service (DOS) attacks to a source or destination port of zero detected by the flowmgr. This OID should be monitored periodically. 2.5.5 DOS - Illegal Source Address Attack ASN Name: apFlowMgrExtDosTotalIllegalSourceAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.22 Description: This object specifies the total number of Denial Of Service (DOS) attacks to an illegal source address detected by the flowmgr. This OID should be monitored periodically. 2.5.6 DOS - Illegal Destination Address Attack ASN Name: apFlowMgrExtDosTotalIllegalDestinationAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.23 Description: This object specifies the total number of Denial Of Service (DOS) attacks to an illegal destination address detected by the flowmgr. This OID should be monitored periodically. 2.5.7 DOS - Ping of Death Attacks ASN Name: apFlowMgrExtDosTotalPingOfDeathAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.24 Description: This object specifies the total number of Denial Of Service (DOS) Ping of Death attacks detected by the flowmgr. This OID should be monitored periodically. 2.5.8 DoS - Smurf Attacks ASN Name: apFlowMgrExtDosTotalSmurfAttacks Object Identifier: 1.3.6.1.4.1.9.9.368.1.36.25 Description: This object specifies the total number of Denial Of Service (DOS) Smurf attacks detected by flowmgr. This OID should be monitored periodically.