I'm playing around with SNMP monitoring to get traffic statistics by VLAN. Now I figured out, that almost all VLAN interfaces have the same bytes in counters (also all other counters are the same above different VLANs). I'm using F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn (OID:.1.3.6.1.4.1.3375.2.1.2.13.6.2.1.3) for the stats If I do a snmpwalk -v 2c -c public localhost F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn I got an output like that F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Part1/VLAN1" = Counter64: 15443375678382 F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Part2/VLAN2" = Counter64: 15443375678382 F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Part1/VLAN3" = Counter64: 15443375678382 .... Can anybody confirm same behaviour? - I've tried that on 11.3 and 11.4 Big-IPs and got same results. regards, Philipp

but sysIfTable has only physical interfaces, no VLAN interfaces. (and ifTable doesn't exist)

SNMP VLAN Statistics

14 Replies

StephanManthey

Nacreous

May 02, 2014

Got different results (v11.5.1HF2) with slightly different query:

 snmpwalk -v 2c -c public localhost F5-BIGIP-SYSTEM-MIB::sysVlanStat
F5-BIGIP-SYSTEM-MIB::sysVlanStatNumber.0 = INTEGER: 2
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/synchro" = STRING: /Common/synchro
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/production" = STRING: /Common/production
F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsIn."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsIn."/Common/production" = Counter64: 88
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/production" = Counter64: 5280
F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsOut."/Common/synchro" = Counter64: 15
F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsOut."/Common/production" = Counter64: 129
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut."/Common/synchro" = Counter64: 938
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut."/Common/production" = Counter64: 6802
F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastIn."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastIn."/Common/production" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastOut."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastOut."/Common/production" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsIn."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsIn."/Common/production" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsOut."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsOut."/Common/production" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsIn."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsIn."/Common/production" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsOut."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsOut."/Common/production" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatCollisions."/Common/synchro" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatCollisions."/Common/production" = Counter64: 0

nitass

Employee

May 03, 2014

it is sum of member interfaces. you may monitor ifTable instead.

sysVlanStatTable OBJECT-TYPE
        SYNTAX SEQUENCE OF SysVlanStatEntry
        MAX-ACCESS not-accessible
        STATUS current
        DESCRIPTION
                "Vlan statistics, sum of its interfaces interface_stat."
        ::= { sysVlanStat 2 }

Philipp_Stadler
Nimbostratus
May 05, 2014
but sysIfTable has only physical interfaces, no VLAN interfaces. (and ifTable doesn't exist)

nitass_89166
Noctilucent
May 03, 2014
it is sum of member interfaces. you may monitor ifTable instead.

sysVlanStatTable OBJECT-TYPE SYNTAX SEQUENCE OF SysVlanStatEntry MAX-ACCESS not-accessible STATUS current DESCRIPTION "Vlan statistics, sum of its interfaces interface_stat." ::= { sysVlanStat 2 }
- Philipp_Stadler
  Nimbostratus
  May 05, 2014
  but sysIfTable has only physical interfaces, no VLAN interfaces. (and ifTable doesn't exist)

Jacky_Hung_1606

Nimbostratus

Jun 12, 2014

I had 11.3.0 some issue of sysVlanStatTable or sysVlanxStatTable.

snmpwalk -m F5-BIGIP-SYSTEM-MIB -c public -v 2c f5_host .1.3.6.1.4.1.3375.2.1.2.13.2.2.1

F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/HA"."1.3" = STRING: 1.3
F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/LAN"."1.4" = STRING: 1.4
F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/WAN"."1.1" = STRING: 1.1
F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/WAN2"."1.2" = STRING: 1.2
F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/WAN3"."1.2" = STRING: 1.2
F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/HA"."1.3" = STRING: /Common/HA
F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/LAN"."1.4" = STRING: /Common/LAN
F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/WAN"."1.1" = STRING: /Common/WAN
F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/WAN2"."1.2" = STRING: /Common/WAN2
F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/WAN3"."1.2" = STRING: /Common/WAN3
F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/HA"."1.3" = INTEGER: false(0)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/LAN"."1.4" = INTEGER: false(0)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/WAN"."1.1" = INTEGER: false(0)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/WAN2"."1.2" = INTEGER: true(1)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/WAN3"."1.2" = INTEGER: true(1)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/HA"."1.3" = INTEGER: interface(0)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/LAN"."1.4" = INTEGER: interface(0)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/WAN"."1.1" = INTEGER: interface(0)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/WAN2"."1.2" = INTEGER: interface(0)
F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/WAN3"."1.2" = INTEGER: interface(0)

snmpwalk -m F5-BIGIP-SYSTEM-MIB -c public -v 2c f5_host .1.3.6.1.4.1.3375.2.1.2.13.6.2.1.3

F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/HA" = Counter64: 14227914980
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/LAN" = Counter64: 1083712031397
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/WAN" = Counter64: 300664146409
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/WAN2" = Counter64: 142056782281
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/WAN3" = Counter64: 142056782281

snmpwalk -m F5-BIGIP-SYSTEM-MIB -c public -v 2c f5_host .1.3.6.1.4.1.3375.2.1.2.13.7.2.1.6

F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/HA" = Counter64: 14227919270
F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/LAN" = Counter64: 1083712916719
F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/WAN" = Counter64: 300664161169
F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/WAN2" = Counter64: 142056798677
F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/WAN3" = Counter64: 142056798677

Can see WAN2 and WAN3 at the 1.2, but they have the same statistical value.

Philipp_Stadler
Nimbostratus
Jun 16, 2014
I've got an answer to my case: ID382157 states that the statistics exposed via tables sysVlanStatTable and sysVlanxStatTable represent the sum of the vlan's interfaces/ifx stats, not the stats for the individual vlan. In reality this means that any vlans enabled for the same interfaces, will display the same stats. If there is anything unclear, please let me know and I will try to answer your question. Unfortunately there is no fix or workaround available for this issue. so this means there is a bug, which confirms this behaviour and it will be fixed only in 11.5.

Christopher_Ach
Nimbostratus
May 12, 2015
Hi

Did anyone work out a way to get the Bandwidth stats per vlan from LTM? I have tried F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn and F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut and get the same values across all vlans in the same trunk i.e summation. I need individual stats per vlan

I have tried the IP-MIB also (32bit counter) which is inaccurate - potentially loops around?

snmpwalk -O n -v 2c-c public sdvip2 IF-MIB::ifInOctets.1184 .1.3.6.1.2.1.2.2.1.10.1184 = Counter32: 361794194 snmpwalk -O n -v 2c-c public sdvip2 IF-MIB::ifOutOctets.1184 .1.3.6.1.2.1.2.2.1.16.1184 = Counter32: 360878034

64 bit IF-MIB does not work snmpwalk -v 2c -c public xxxx .1.3.6.1.2.1.31.1.1.1.10 IF-MIB::ifHCOutOctets = No Such Object available on this agent at this OID snmpwalk -v 2c -c public xxxx .1.3.6.1.2.1.31.1.1.1.6 IF-MIB::ifHCInOctets = No Such Object available on this agent at this OID

If anyone got this to work for a specific vlan please let me know how. Im on 11.5

thanks

Chris
- Philipp_Stadler
  Nimbostratus
  May 13, 2015
  Hi Chris, I realized the same issue - so this isn't fixed in 11.5. I don't know how I've tested this in my lab. Now on productive system I couldn't find any way to get correct stats. (neither with sysVlanStat nor sysVlanxStat) I've no 11.6 production system right now, so I cannot answer, if this issue is fixed with 11.6 Philipp
- Christopher_Ach
  Nimbostratus
  May 13, 2015
  thanks F5 Support have told me this afternoon, that its a bug and they are creating a eng patch for me Chris

nitass

Employee

May 13, 2015

i understand ID382157 is fixed in 11.5.2 hf1. it is not fixed in 11.6.0. as you know, support team may be able to provide engineering hotfix.

anyway, if i do not misunderstand, result of the fix is to obsolete F5-BIGIP-SYSTEM-MIB::sysVlanStatTable and use IF-MIB::ifXTable instead.

ID382157 - vlan stats reported by sflow do not match other sources

[root@B4200-R77-S7:Active:Standalone] config  tmsh show sys version | head
Sys::Version
Main Package
  Product  BIG-IP
  Version  11.5.2
  Build    1.0.169
  Edition  Hotfix HF1
  Date     Sun Mar 29 05:30:28 PDT 2015

[root@B4200-R77-S7:Active:Standalone] config  snmpwalk -v 2c -c public localhost f5 | grep sysVlanStat
F5-BIGIP-SYSTEM-MIB::sysVlanStatNumber.0 = INTEGER: 2
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/external" = STRING: /Common/external
F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/internal" = STRING: /Common/internal
F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsIn."/Common/external" = Counter64: 196874
F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsIn."/Common/internal" = Counter64: 196874
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/external" = Counter64: 37185243
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/internal" = Counter64: 37185243
F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsOut."/Common/external" = Counter64: 46
F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsOut."/Common/internal" = Counter64: 46
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut."/Common/external" = Counter64: 3697
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut."/Common/internal" = Counter64: 3697
F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastIn."/Common/external" = Counter64: 131818
F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastIn."/Common/internal" = Counter64: 131818
F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastOut."/Common/external" = Counter64: 16
F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastOut."/Common/internal" = Counter64: 16
F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsIn."/Common/external" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsIn."/Common/internal" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsOut."/Common/external" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsOut."/Common/internal" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsIn."/Common/external" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsIn."/Common/internal" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsOut."/Common/external" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsOut."/Common/internal" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatCollisions."/Common/external" = Counter64: 0
F5-BIGIP-SYSTEM-MIB::sysVlanStatCollisions."/Common/internal" = Counter64: 0

[root@B4200-R77-S7:Active:Standalone] config  tmctl ifc_stats -w 999
name                 type if_index in_discards in_errors in_unknown_protos out_discards out_errors hc_in_octets hc_in_ucast_pkts hc_in_multicast_pkts hc_in_broadcast_pkts hc_out_octets hc_out_ucast_pkts hc_out_multicast_pkts hc_out_broadcast_pkts
-------------------- ---- -------- ----------- --------- ----------------- ------------ ---------- ------------ ---------------- -------------------- -------------------- ------------- ----------------- --------------------- ---------------------
/Common/external        1      896           0         0                 0            0          0          605                6                    0                    1          2139                 6                     8                    13
/Common/http-tunnel     3        0           0         0                 0            0          0            0                0                    0                    0             0                 0                     0                     0
/Common/internal        1      912           0         0                 0            0          0         7745               27                    0                   20          5224                10                     8                    28
/Common/socks-tunnel    3        0           0         0                 0            0          0            0                0                    0                    0             0                 0                     0                     0
tmm0                    1        0           0         0                 0            0          0     13256352            18144                    0                    4        845772             14097                    22                    44
tmm_bp                  1        0           0         0                 0            0          0            0                0                    0                    0          2048                 0                    16                    16

[root@B4200-R77-S7:Active:Standalone] config  snmpwalk -v 2c -c public localhost ifxtable | grep 896
IF-MIB::ifName.896 = STRING: /Common/external
IF-MIB::ifInMulticastPkts.896 = Counter32: 0
IF-MIB::ifInBroadcastPkts.896 = Counter32: 1
IF-MIB::ifOutMulticastPkts.896 = Counter32: 8
IF-MIB::ifOutBroadcastPkts.896 = Counter32: 13
IF-MIB::ifHCInOctets.896 = Counter64: 605
IF-MIB::ifHCInUcastPkts.896 = Counter64: 6
IF-MIB::ifHCInMulticastPkts.896 = Counter64: 0
IF-MIB::ifHCInBroadcastPkts.896 = Counter64: 1
IF-MIB::ifHCOutOctets.896 = Counter64: 2139
IF-MIB::ifHCOutUcastPkts.896 = Counter64: 6
IF-MIB::ifHCOutMulticastPkts.896 = Counter64: 8
IF-MIB::ifHCOutBroadcastPkts.896 = Counter64: 13
IF-MIB::ifLinkUpDownTrapEnable.896 = INTEGER: disabled(2)
IF-MIB::ifHighSpeed.896 = Gauge32: 0
IF-MIB::ifPromiscuousMode.896 = INTEGER: false(2)
IF-MIB::ifConnectorPresent.896 = INTEGER: false(2)
IF-MIB::ifCounterDiscontinuityTime.896 = Timeticks: (0) 0:00:00.00

[root@B4200-R77-S7:Active:Standalone] config  snmpwalk -v 2c -c public localhost ifxtable | grep 912
IF-MIB::ifName.912 = STRING: /Common/internal
IF-MIB::ifInMulticastPkts.912 = Counter32: 0
IF-MIB::ifInBroadcastPkts.912 = Counter32: 20
IF-MIB::ifOutMulticastPkts.912 = Counter32: 8
IF-MIB::ifOutBroadcastPkts.912 = Counter32: 28
IF-MIB::ifHCInOctets.912 = Counter64: 7745
IF-MIB::ifHCInUcastPkts.912 = Counter64: 27
IF-MIB::ifHCInMulticastPkts.912 = Counter64: 0
IF-MIB::ifHCInBroadcastPkts.912 = Counter64: 20
IF-MIB::ifHCOutOctets.912 = Counter64: 5224
IF-MIB::ifHCOutUcastPkts.912 = Counter64: 10
IF-MIB::ifHCOutMulticastPkts.912 = Counter64: 8
IF-MIB::ifHCOutBroadcastPkts.912 = Counter64: 28
IF-MIB::ifLinkUpDownTrapEnable.912 = INTEGER: disabled(2)
IF-MIB::ifHighSpeed.912 = Gauge32: 0
IF-MIB::ifPromiscuousMode.912 = INTEGER: false(2)
IF-MIB::ifConnectorPresent.912 = INTEGER: false(2)
IF-MIB::ifCounterDiscontinuityTime.912 = Timeticks: (0) 0:00:00.00

Christopher_Ach
Nimbostratus
May 13, 2015
the IF-MIB does not work either, theres a 32bit one that seems to rollover and the 64 bit one does not provide a result.

Message from F5 Support I have received update on this issue

1) We have hit a known bug ID515764

2) There is a workaround (if PVA is disabled), need to create create custom SNMP OID based on sol13596 and uses 'hc_in_octets' and 'hc_out_octets' base on tmctl ifc_stats output

3) Engineering Hotfix would be required base on ID515764, to fix the issue when PVA is enabled. Where pva traffic stats into flow's ifc ingress and egress pva stats per vlan could be inferred from ingress stats of peer vlans usually.

Im opting for Eng Patch i cant remove PVA

Chris
- nitass
  Employee
  May 14, 2015
  thanks for the ID.
sthon_202655
Nimbostratus
Nov 01, 2017
any News about this issue ? Looks like, that the bux is not fixed yet

Forum Discussion

SNMP VLAN Statistics

14 Replies

AppWorld 2026: Save the Date and Join Our Community In Person!

Introducing the F5 AI Assistant for BIG-IP

Recent Discussions

Expired client-certificate

F5 Big-IP Trust Internal CA Chain certificates for Web Servers

XC - geo LB to the origin servers

Floating Ip Problem

F5 rSeries || Upgrade tenant

Related Content

Migrating between sites using stretched VLANs

VS STATISTICS

SNMP: Capturing SSL Statistics per Virtual Server

snmp-check external monitor

VLAN Group and Asymmetric Deployment

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS