Re: [tkined] Traffic flow MIB/app?

Doug Hughes (Doug.Hughes@Eng.Auburn.EDU)
Thu, 5 Nov 1998 09:56:24 -0600

>Hello,
> I was interested in monitoring traffic flow through a router or
>through a host (acts as a router). The two things I would like to do
>is:
>
>1) Monitor the % used based on knowing how large the pipe is or find the
>MB/s

There are some vendor specific mib extentions for this (such as cisco's
ifLoad parameter) that can tell you this right off.
Or, you can take the ifInOctets and sample it over a time interval, then
subtrace the old value from the new value and divide by the time interval.
Likewise for ifOutOctets. You need to do this for each interface.

Cisco's more specific indentifier would look something like this:
lifTable.lifEntry.locIfLoad.661 1

>2) Identify source and destination of the traffic flows (kind of like a
>graphical snoop with flow rates).
>
You need some pretty spiffy mib support for this. I don't think you'll be
able to do this at all on an arbitrary basis. However, some of the rmon
groups let you pick different things that let you do this to some extent
(top talkers, etc - depends on vendor RMON support)
Don't think you'll find this at all in most host-based MIBS.

>I would prefer a MIB value or scotty-pluggabe app, but could do with a
>separate app also. I would be running this on a SPARC solaris machine.
>

I'm not aware of an RMON MIB implementation for Solaris, not to say there
isn't one. I haven't looked at the 2.6 snmp agent in any detail.
Kind of doubt it though. 

--
!! This message is brought to you via the `tkined & scotty' mailing list.
!! Please do not reply to this message to unsubscribe. To subscribe or
!! unsubscribe, send a mail message to <tkined-request@ibr.cs.tu-bs.de>.
!! See http://wwwsnmp.cs.utwente.nl/~schoenw/scotty/ for more information.