Forum Discussion

Philipp_Stadler's avatar
Philipp_Stadler
Icon for Nimbostratus rankNimbostratus
May 02, 2014

SNMP VLAN Statistics

I'm playing around with SNMP monitoring to get traffic statistics by VLAN. Now I figured out, that almost all VLAN interfaces have the same bytes in counters (also all other counters are the same above different VLANs).

I'm using F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn (OID:.1.3.6.1.4.1.3375.2.1.2.13.6.2.1.3) for the stats

If I do a

snmpwalk -v 2c -c public localhost F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn

I got an output like that

F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Part1/VLAN1" = Counter64: 15443375678382
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Part2/VLAN2" = Counter64: 15443375678382
F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Part1/VLAN3" = Counter64: 15443375678382
....

Can anybody confirm same behaviour? - I've tried that on 11.3 and 11.4 Big-IPs and got same results.

regards, Philipp

14 Replies

  • Got different results (v11.5.1HF2) with slightly different query:

     snmpwalk -v 2c -c public localhost F5-BIGIP-SYSTEM-MIB::sysVlanStat
    F5-BIGIP-SYSTEM-MIB::sysVlanStatNumber.0 = INTEGER: 2
    F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/synchro" = STRING: /Common/synchro
    F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/production" = STRING: /Common/production
    F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsIn."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsIn."/Common/production" = Counter64: 88
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/production" = Counter64: 5280
    F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsOut."/Common/synchro" = Counter64: 15
    F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsOut."/Common/production" = Counter64: 129
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut."/Common/synchro" = Counter64: 938
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut."/Common/production" = Counter64: 6802
    F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastIn."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastIn."/Common/production" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastOut."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastOut."/Common/production" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsIn."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsIn."/Common/production" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsOut."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsOut."/Common/production" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsIn."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsIn."/Common/production" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsOut."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsOut."/Common/production" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatCollisions."/Common/synchro" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatCollisions."/Common/production" = Counter64: 0
    
  • it is sum of member interfaces. you may monitor ifTable instead.

    sysVlanStatTable OBJECT-TYPE
            SYNTAX SEQUENCE OF SysVlanStatEntry
            MAX-ACCESS not-accessible
            STATUS current
            DESCRIPTION
                    "Vlan statistics, sum of its interfaces interface_stat."
            ::= { sysVlanStat 2 }
    
    
    • Philipp_Stadler's avatar
      Philipp_Stadler
      Icon for Nimbostratus rankNimbostratus
      but sysIfTable has only physical interfaces, no VLAN interfaces. (and ifTable doesn't exist)
  • it is sum of member interfaces. you may monitor ifTable instead.

    sysVlanStatTable OBJECT-TYPE
            SYNTAX SEQUENCE OF SysVlanStatEntry
            MAX-ACCESS not-accessible
            STATUS current
            DESCRIPTION
                    "Vlan statistics, sum of its interfaces interface_stat."
            ::= { sysVlanStat 2 }
    
    
    • Philipp_Stadler's avatar
      Philipp_Stadler
      Icon for Nimbostratus rankNimbostratus
      but sysIfTable has only physical interfaces, no VLAN interfaces. (and ifTable doesn't exist)
  • I had 11.3.0 some issue of sysVlanStatTable or sysVlanxStatTable.

    snmpwalk -m F5-BIGIP-SYSTEM-MIB -c public -v 2c f5_host .1.3.6.1.4.1.3375.2.1.2.13.2.2.1

    F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/HA"."1.3" = STRING: 1.3
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/LAN"."1.4" = STRING: 1.4
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/WAN"."1.1" = STRING: 1.1
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/WAN2"."1.2" = STRING: 1.2
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberVmname."/Common/WAN3"."1.2" = STRING: 1.2
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/HA"."1.3" = STRING: /Common/HA
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/LAN"."1.4" = STRING: /Common/LAN
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/WAN"."1.1" = STRING: /Common/WAN
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/WAN2"."1.2" = STRING: /Common/WAN2
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberParentVname."/Common/WAN3"."1.2" = STRING: /Common/WAN3
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/HA"."1.3" = INTEGER: false(0)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/LAN"."1.4" = INTEGER: false(0)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/WAN"."1.1" = INTEGER: false(0)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/WAN2"."1.2" = INTEGER: true(1)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberTagged."/Common/WAN3"."1.2" = INTEGER: true(1)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/HA"."1.3" = INTEGER: interface(0)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/LAN"."1.4" = INTEGER: interface(0)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/WAN"."1.1" = INTEGER: interface(0)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/WAN2"."1.2" = INTEGER: interface(0)
    F5-BIGIP-SYSTEM-MIB::sysVlanMemberType."/Common/WAN3"."1.2" = INTEGER: interface(0)
    

    snmpwalk -m F5-BIGIP-SYSTEM-MIB -c public -v 2c f5_host .1.3.6.1.4.1.3375.2.1.2.13.6.2.1.3

    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/HA" = Counter64: 14227914980
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/LAN" = Counter64: 1083712031397
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/WAN" = Counter64: 300664146409
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/WAN2" = Counter64: 142056782281
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/WAN3" = Counter64: 142056782281
    

    snmpwalk -m F5-BIGIP-SYSTEM-MIB -c public -v 2c f5_host .1.3.6.1.4.1.3375.2.1.2.13.7.2.1.6

    F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/HA" = Counter64: 14227919270
    F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/LAN" = Counter64: 1083712916719
    F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/WAN" = Counter64: 300664161169
    F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/WAN2" = Counter64: 142056798677
    F5-BIGIP-SYSTEM-MIB::sysVlanxStatHcInOctets."/Common/WAN3" = Counter64: 142056798677
    

    Can see WAN2 and WAN3 at the 1.2, but they have the same statistical value.

    • Philipp_Stadler's avatar
      Philipp_Stadler
      Icon for Nimbostratus rankNimbostratus
      I've got an answer to my case: ID382157 states that the statistics exposed via tables sysVlanStatTable and sysVlanxStatTable represent the sum of the vlan's interfaces/ifx stats, not the stats for the individual vlan. In reality this means that any vlans enabled for the same interfaces, will display the same stats. If there is anything unclear, please let me know and I will try to answer your question. Unfortunately there is no fix or workaround available for this issue. so this means there is a bug, which confirms this behaviour and it will be fixed only in 11.5.
  • Hi

     

    Did anyone work out a way to get the Bandwidth stats per vlan from LTM? I have tried F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn and F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut and get the same values across all vlans in the same trunk i.e summation. I need individual stats per vlan

     

    I have tried the IP-MIB also (32bit counter) which is inaccurate - potentially loops around?

     

    snmpwalk -O n -v 2c-c public sdvip2 IF-MIB::ifInOctets.1184 .1.3.6.1.2.1.2.2.1.10.1184 = Counter32: 361794194 snmpwalk -O n -v 2c-c public sdvip2 IF-MIB::ifOutOctets.1184 .1.3.6.1.2.1.2.2.1.16.1184 = Counter32: 360878034

     

    64 bit IF-MIB does not work snmpwalk -v 2c -c public xxxx .1.3.6.1.2.1.31.1.1.1.10 IF-MIB::ifHCOutOctets = No Such Object available on this agent at this OID snmpwalk -v 2c -c public xxxx .1.3.6.1.2.1.31.1.1.1.6 IF-MIB::ifHCInOctets = No Such Object available on this agent at this OID

     

    If anyone got this to work for a specific vlan please let me know how. Im on 11.5

     

    thanks

     

    Chris

     

    • Philipp_Stadler's avatar
      Philipp_Stadler
      Icon for Nimbostratus rankNimbostratus
      Hi Chris, I realized the same issue - so this isn't fixed in 11.5. I don't know how I've tested this in my lab. Now on productive system I couldn't find any way to get correct stats. (neither with sysVlanStat nor sysVlanxStat) I've no 11.6 production system right now, so I cannot answer, if this issue is fixed with 11.6 Philipp
    • Christopher_Ach's avatar
      Christopher_Ach
      Icon for Nimbostratus rankNimbostratus
      thanks F5 Support have told me this afternoon, that its a bug and they are creating a eng patch for me Chris
  • i understand ID382157 is fixed in 11.5.2 hf1. it is not fixed in 11.6.0. as you know, support team may be able to provide engineering hotfix.

    anyway, if i do not misunderstand, result of the fix is to obsolete F5-BIGIP-SYSTEM-MIB::sysVlanStatTable and use IF-MIB::ifXTable instead.

    ID382157 - vlan stats reported by sflow do not match other sources

    [root@B4200-R77-S7:Active:Standalone] config  tmsh show sys version | head
    Sys::Version
    Main Package
      Product  BIG-IP
      Version  11.5.2
      Build    1.0.169
      Edition  Hotfix HF1
      Date     Sun Mar 29 05:30:28 PDT 2015
    
    [root@B4200-R77-S7:Active:Standalone] config  snmpwalk -v 2c -c public localhost f5 | grep sysVlanStat
    F5-BIGIP-SYSTEM-MIB::sysVlanStatNumber.0 = INTEGER: 2
    F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/external" = STRING: /Common/external
    F5-BIGIP-SYSTEM-MIB::sysVlanStatVlanName."/Common/internal" = STRING: /Common/internal
    F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsIn."/Common/external" = Counter64: 196874
    F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsIn."/Common/internal" = Counter64: 196874
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/external" = Counter64: 37185243
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesIn."/Common/internal" = Counter64: 37185243
    F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsOut."/Common/external" = Counter64: 46
    F5-BIGIP-SYSTEM-MIB::sysVlanStatPktsOut."/Common/internal" = Counter64: 46
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut."/Common/external" = Counter64: 3697
    F5-BIGIP-SYSTEM-MIB::sysVlanStatBytesOut."/Common/internal" = Counter64: 3697
    F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastIn."/Common/external" = Counter64: 131818
    F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastIn."/Common/internal" = Counter64: 131818
    F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastOut."/Common/external" = Counter64: 16
    F5-BIGIP-SYSTEM-MIB::sysVlanStatMcastOut."/Common/internal" = Counter64: 16
    F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsIn."/Common/external" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsIn."/Common/internal" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsOut."/Common/external" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatErrorsOut."/Common/internal" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsIn."/Common/external" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsIn."/Common/internal" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsOut."/Common/external" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatDropsOut."/Common/internal" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatCollisions."/Common/external" = Counter64: 0
    F5-BIGIP-SYSTEM-MIB::sysVlanStatCollisions."/Common/internal" = Counter64: 0
    
    [root@B4200-R77-S7:Active:Standalone] config  tmctl ifc_stats -w 999
    name                 type if_index in_discards in_errors in_unknown_protos out_discards out_errors hc_in_octets hc_in_ucast_pkts hc_in_multicast_pkts hc_in_broadcast_pkts hc_out_octets hc_out_ucast_pkts hc_out_multicast_pkts hc_out_broadcast_pkts
    -------------------- ---- -------- ----------- --------- ----------------- ------------ ---------- ------------ ---------------- -------------------- -------------------- ------------- ----------------- --------------------- ---------------------
    /Common/external        1      896           0         0                 0            0          0          605                6                    0                    1          2139                 6                     8                    13
    /Common/http-tunnel     3        0           0         0                 0            0          0            0                0                    0                    0             0                 0                     0                     0
    /Common/internal        1      912           0         0                 0            0          0         7745               27                    0                   20          5224                10                     8                    28
    /Common/socks-tunnel    3        0           0         0                 0            0          0            0                0                    0                    0             0                 0                     0                     0
    tmm0                    1        0           0         0                 0            0          0     13256352            18144                    0                    4        845772             14097                    22                    44
    tmm_bp                  1        0           0         0                 0            0          0            0                0                    0                    0          2048                 0                    16                    16
    
    [root@B4200-R77-S7:Active:Standalone] config  snmpwalk -v 2c -c public localhost ifxtable | grep 896
    IF-MIB::ifName.896 = STRING: /Common/external
    IF-MIB::ifInMulticastPkts.896 = Counter32: 0
    IF-MIB::ifInBroadcastPkts.896 = Counter32: 1
    IF-MIB::ifOutMulticastPkts.896 = Counter32: 8
    IF-MIB::ifOutBroadcastPkts.896 = Counter32: 13
    IF-MIB::ifHCInOctets.896 = Counter64: 605
    IF-MIB::ifHCInUcastPkts.896 = Counter64: 6
    IF-MIB::ifHCInMulticastPkts.896 = Counter64: 0
    IF-MIB::ifHCInBroadcastPkts.896 = Counter64: 1
    IF-MIB::ifHCOutOctets.896 = Counter64: 2139
    IF-MIB::ifHCOutUcastPkts.896 = Counter64: 6
    IF-MIB::ifHCOutMulticastPkts.896 = Counter64: 8
    IF-MIB::ifHCOutBroadcastPkts.896 = Counter64: 13
    IF-MIB::ifLinkUpDownTrapEnable.896 = INTEGER: disabled(2)
    IF-MIB::ifHighSpeed.896 = Gauge32: 0
    IF-MIB::ifPromiscuousMode.896 = INTEGER: false(2)
    IF-MIB::ifConnectorPresent.896 = INTEGER: false(2)
    IF-MIB::ifCounterDiscontinuityTime.896 = Timeticks: (0) 0:00:00.00
    
    [root@B4200-R77-S7:Active:Standalone] config  snmpwalk -v 2c -c public localhost ifxtable | grep 912
    IF-MIB::ifName.912 = STRING: /Common/internal
    IF-MIB::ifInMulticastPkts.912 = Counter32: 0
    IF-MIB::ifInBroadcastPkts.912 = Counter32: 20
    IF-MIB::ifOutMulticastPkts.912 = Counter32: 8
    IF-MIB::ifOutBroadcastPkts.912 = Counter32: 28
    IF-MIB::ifHCInOctets.912 = Counter64: 7745
    IF-MIB::ifHCInUcastPkts.912 = Counter64: 27
    IF-MIB::ifHCInMulticastPkts.912 = Counter64: 0
    IF-MIB::ifHCInBroadcastPkts.912 = Counter64: 20
    IF-MIB::ifHCOutOctets.912 = Counter64: 5224
    IF-MIB::ifHCOutUcastPkts.912 = Counter64: 10
    IF-MIB::ifHCOutMulticastPkts.912 = Counter64: 8
    IF-MIB::ifHCOutBroadcastPkts.912 = Counter64: 28
    IF-MIB::ifLinkUpDownTrapEnable.912 = INTEGER: disabled(2)
    IF-MIB::ifHighSpeed.912 = Gauge32: 0
    IF-MIB::ifPromiscuousMode.912 = INTEGER: false(2)
    IF-MIB::ifConnectorPresent.912 = INTEGER: false(2)
    IF-MIB::ifCounterDiscontinuityTime.912 = Timeticks: (0) 0:00:00.00
    
  • the IF-MIB does not work either, theres a 32bit one that seems to rollover and the 64 bit one does not provide a result.

     

    Message from F5 Support I have received update on this issue

     

    1) We have hit a known bug ID515764

     

    2) There is a workaround (if PVA is disabled), need to create create custom SNMP OID based on sol13596 and uses 'hc_in_octets' and 'hc_out_octets' base on tmctl ifc_stats output

     

    3) Engineering Hotfix would be required base on ID515764, to fix the issue when PVA is enabled. Where pva traffic stats into flow's ifc ingress and egress pva stats per vlan could be inferred from ingress stats of peer vlans usually.

     

    Im opting for Eng Patch i cant remove PVA

     

    Chris