Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
snthl
Explorer
Jump to solution

Firewall connection metrics in SNMP MIB

What does the snmp mib object vsxCountersDropCount (.1.3.6.1.4.1.2620.1.16.23.2.1.3)  show ? is it the Dropped packet count or dropped connection count ? 

The Mib definition says,

vsxCountersDropCount OBJECT-TYPE
SYNTAX Counter64
MAX-ACCESS read-only
STATUS current
DESCRIPTION
"Virtual System's drops due to instance fully utilized"
::= { vsxCountersDropEntry 3 }

There is also another mib table   object , fwFullyUtilizedDrops (.1.3.6.1.4.1.2620.1.1.25.26.0) . The Mib definition says,

fwFullyUtilizedDrops OBJECT-TYPE
    SYNTAX  Counter64
    MAX-ACCESS read-only
    STATUS  current
    DESCRIPTION
            "Total number of dropped packets due to instance being fully utilized"
    ::= { fwPolicyStat 26 }
 
Since the mib definition says , "total number of dropped packets" , I assume these are packet count and not connection drop count. 
 
Can anyone help confirm if vsxCountersDropCount gives the "connection drop" count  or the "packet drop count" ?
Also, if vsxCountersDropCount gives packet drop count , then this mib object gives same value as fwFullyUtilizedDrops ?
 
Thanks in advance.
 
Regards,
Senthil
0 Kudos
1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

vsxCounterDropCount would give you the number of connections dropped (i.e. new TCP SYN).
fwFullyUtilizedDrops gives you the number of packets dropped as a result. 

View solution in original post

0 Kudos
2 Replies
PhoneBoy
Admin
Admin

vsxCounterDropCount would give you the number of connections dropped (i.e. new TCP SYN).
fwFullyUtilizedDrops gives you the number of packets dropped as a result. 

0 Kudos
snthl
Explorer

Thanks a lot for confirming  vsxCounterDropCount  gives the connection drop count .

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events