For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

KevinN_50601's avatar
KevinN_50601
Icon for Nimbostratus rankNimbostratus
Nov 16, 2011

Understanding SNMP metrics

It took me a bit to get snmpwalk to show me the results that I needed, but now that I have it going I'm not sure I understand the metrics.

 

 

I'm looking for total concurrent connections as well as connections to each Virtual Server.

 

The MIB/OID that I'm using is

 

1.3.6.1.4.1.3375.2.2.10.2.3.1.12 which produces the below result:

 

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS-FORWARDING" = Counter64: 7778

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 14

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."S--443" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 1

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 20

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 1

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--80" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--FTP" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--FTP" = Counter64: 1

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 1

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 4

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 40

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 55

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 0

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 7

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 32

 

F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns."VS--443" = Counter64: 0

 

 

 

 

Many of the connections look right, but the top entry (which I assume is total connections?) seems way off. The sum of all the connections to the VS is WAY less than the 'VS-FORWARDING' entry. Does anyone have any idea why?!

 

 

In addition the OID

 

1.3.6.1.4.1.3375.2.1.1.2.1.8

 

gives the result

 

F5-BIGIP-SYSTEM-MIB::sysStatClientCurConns.0 = Counter64: 8087

 

 

which seems to jive with the VS-FORWARDING entry from above. What is the difference and why?

 

 

management
monitoring

9 Replies

  • nitass_89166's avatar
    nitass_89166
    Icon for Noctilucent rankNoctilucent
    Nov 17, 2011
    i understand these are current connections. the first one is per virtual server and the second one is for all the virtuals.

     

     

    [root@ve1023:Active] config snmptranslate .1.3.6.1.4.1.3375.2.2.10.2.3.1.12

     

    F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns

     

     

    [root@ve1023:Active] config snmptranslate .1.3.6.1.4.1.3375.2.1.1.2.1.8.0

     

    F5-BIGIP-SYSTEM-MIB::sysStatClientCurConns.0

     

     

    and these are total connections (since last resetting).

     

     

    [root@ve1023:Active] config snmptranslate .1.3.6.1.4.1.3375.2.2.10.2.3.1.11

     

    F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientTotConns

     

     

    [root@ve1023:Active] config snmptranslate .1.3.6.1.4.1.3375.2.1.1.2.1.7.0

     

    F5-BIGIP-SYSTEM-MIB::sysStatClientTotConns.0
    • Service_Support's avatar
      Service_Support
      Icon for Nimbostratus rankNimbostratus
      Nov 07, 2017

      I have a question about this OID :

       

      1.3.6.1.4.1.3375.2.2.10.2.3.1.11 ltmVirtualServStatClientTotConns

       

      Documentation says that : "The total connections from client-side to the specified virtual server."

       

      Is it connections between the client to the virtual server or the full connection : client <=> F5 VS <=> pool member ?

       

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Nov 17, 2011
    i understand these are current connections. the first one is per virtual server and the second one is for all the virtuals.

     

     

    [root@ve1023:Active] config snmptranslate .1.3.6.1.4.1.3375.2.2.10.2.3.1.12

     

    F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientCurConns

     

     

    [root@ve1023:Active] config snmptranslate .1.3.6.1.4.1.3375.2.1.1.2.1.8.0

     

    F5-BIGIP-SYSTEM-MIB::sysStatClientCurConns.0

     

     

    and these are total connections (since last resetting).

     

     

    [root@ve1023:Active] config snmptranslate .1.3.6.1.4.1.3375.2.2.10.2.3.1.11

     

    F5-BIGIP-LOCAL-MIB::ltmVirtualServStatClientTotConns

     

     

    [root@ve1023:Active] config snmptranslate .1.3.6.1.4.1.3375.2.1.1.2.1.7.0

     

    F5-BIGIP-SYSTEM-MIB::sysStatClientTotConns.0
    • Service_Support's avatar
      Service_Support
      Icon for Nimbostratus rankNimbostratus
      Nov 07, 2017

      I have a question about this OID :

       

      1.3.6.1.4.1.3375.2.2.10.2.3.1.11 ltmVirtualServStatClientTotConns

       

      Documentation says that : "The total connections from client-side to the specified virtual server."

       

      Is it connections between the client to the virtual server or the full connection : client <=> F5 VS <=> pool member ?

       

  • KevinN_50601's avatar
    KevinN_50601
    Icon for Nimbostratus rankNimbostratus
    Nov 17, 2011
    I'm using the .1.3.6.1.4.1.3375.2.2.10.2.3.1.12 MIB currently. I guess my real question is what is the 'VS-FORWARDING' entry and why is it's number so high? Is that a rollup number or something alltogether?

     

     

    The .1.3.6.1.4.1.3375.2.1.1.2.1.8.0 OID just produced a number of 4479, but in the .1.3.6.1.4.1.3375.2.2.10.2.3.1.12 OID if I add up the counters for my virtual servers the number is only 128. If I include the 'VS-FORWARDING' entry its 4359. So which number is the true number of total concurrent connections? I know I dont have 4300 people connected to me right now.

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Nov 17, 2011
    guess my real question is what is the 'VS-FORWARDING' entry and why is it's number so high? Is that a rollup number or something alltogether? i think it is one of your virtual server name. it is not a rollup number or something like that.

     

     

  • KevinN_50601's avatar
    KevinN_50601
    Icon for Nimbostratus rankNimbostratus
    Nov 17, 2011
    I will ask the hosting provider what that entry is and see what they say. It's throwing off all my graphs!

     

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Dec 04, 2011
    I suspect it's a forwarding VS used to forward traffic to the pool members from outside the network (Or from the pool members to outside the network).

     

     

     

    H
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Dec 04, 2011
    Posted By Hamish on 12/04/2011 01:14 PM

     

    I suspect it's a forwarding VS used to forward traffic to the pool members from outside the network (Or from the pool members to outside the network).

     

     

     

    H

     

    That's a guess BTW on looking att he naming scheme they've used in the rest of the VS's...

     

     

    H