Network Interface Monitoring
Event Type: PH_DEV_MON_NET_INTF_UTIL
Description: Event containing network interface utilization metrics Source – almost all devices via SNMP:
Cisco IOS (SNMP), , Cisco NX-OS, Extreme ExtremeOS, Foundry Ironware, HP ProCurve
Cisco ASA/PIX/FWSM (SNMP), Checkpoint FW-1, Juniper SSG/ISG, Palo Alto Firewall, Sonicwall SonicOS, Fortinet FortiOS Cisco IPS (SNMP), Tippingpoint IPS (SNMP)
NetApp DataONTAP (SNMP)
Microsoft Windows (SNMP or WMI), Linux (SNMP), Solaris (SNMP), HP-UX (SNMP), IBM AIX (SNMP)
Sample event
[PH_DEV_MON_NET_INTF_UTIL]:[eventSeverity]=PHL_INFO,[fileName]=phIn tfFilter.cpp,[lineNumber]=275,[intfName]=GigabitEthernet4/41,[intfA lias]=Connection to Internet,[hostName]=SJ-Main-Cat6500,[hostIpAddr]=192.168.0.1,[pollI ntv]=177,[recvBytes]=0,[recvBitsPerSec]=0.000000,[inIntfUtil]=0.000 000,[sentBytes]=0,[sentBitsPerSec]=0.000000,[outIntfUtil]=0.000000,
[recvPkts]=0,[sentPkts]=0,[inIntfPktErr]=0,[inIntfPktErrPct]=0.0000 00,[outIntfPktErr]=0,[outIntfPktErrPct]=0.000000,[inIntfPktDiscarde d]=0,[inIntfPktDiscardedPct]=0.000000,[outIntfPktDiscarded]=0,[outI ntfPktDiscardedPct]=0.000000,[outQLen]=0,[intfSpeed64]=1000000000,[ intfAdminStatus]=up,[intfOperStatus]=down,[daysSinceLastUse]=487,[p hLogDetail]=
Key Attributes:
| Name | Id | Type | Description |
| Event Type | eventType | string | Event type set to PH_DEV_MON_NET_INTF_UTIL |
| Event
Severity |
eventSeverity | uint16 | Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity) |
| Event
Severity Category |
eventSeverityCat | string | Set to Low. IN general, takes the values Low, Medium and High. Event Severities 0-4 are mapped to Low, 5-8 are mapped to Medium and 9-10 are mapped to High |
| Event
Receive Time |
phRecvTime | Date | Time at which AccelOps generated this event |
| Reporting IP | reptDevIpAddr | Date | IP address of device reporting this event. In this case set to the device reporting the utilization (same as Host name attribute) |
| Relaying IP | relayDevIpAddr | Date | IP address of device relaying this event from the source to AccelOps. In general it could be a syslog-ng IP address but in this, since AccelOps talks to the device directly, Relaying IP is set to AccelOps IP Address. |
| Raw Event
Log |
rawEventMsg | string | Raw event containing all attributes in comma separated “[Attribute] = value” format. |
| Host name | hostName | string | Host name (as in AccelOps CMDB) of the device whose CPU utilization is being reported |
| Host IP
Address |
hostIpAddr | IP | Access IP (as in AccelOps CMDB) of the device whose CPU utilization is being reported |
| Host Intf
Name |
intfName | string | The name of the network interface for which this statistics applies |
| In Intf Util | inIntfUtil | double | Inbound (or received) network utilization (between 0-100). |
| Received
Bytes |
recvBytes | uint32 | Inbound (or received) bytes during this interval |
| Received
Byte Rate (/sec) |
recvBytesPerSec | double | Inbound (or received) byte rate during this interval |
| Received
Packets |
recvPkts | uint32 | Inbound (or received) packets received during this interval |
| In Packet
Error |
inIntfPktErr | uint32 | Inbound (or received) packet errors |
| In Packet
Error Pct |
inIntfPktErrPct | double | Inbound (or received) packet error as a percentage of total packets |
| In Packet
Discards |
inIntfPktDiscarded | uint32 | Inbound (or received) packet discarded |
| In Packet
Discard Pct |
inIntfPktDiscardedPct | double | Inbound (or received) packet discarded as a percentage of total packets |
| Out Intf Util | outIntfUtil | double | Outbound (or sent) network utilization (between 0-100). |
| Sent Bytes | sentBytes | uint32 | Outbound (or sent) bytes during this interval |
| Sent Byte
Rate (/sec) |
sentBytesPerSec | double | Inbound (or received) byte rate during this interval |
| Sent Packets | sentPkts | uint32 | Outbound (or sent) packets sent during this interval |
| Out Packet
Error |
outIntfPktErr | double | Outbound (or sent) packet errors |
| Out Packet
Error Pct |
outIntfPktErrPct | double | Outbound (or sent) packet error as a percentage of total packets |
| Out Packet
Discards |
outIntfPktDiscarded | uint32 | Outbound (or sent) packet discarded |
| Out Packet
Discard Pct |
outIntfPktDiscardedPct | double | Outbound (or sent) packet discarded as a percentage of total packets |
| Out Queue
Length |
outQLen | uint32 | Length of output queue |
| Poll Interval | pollIntv | uint32 | Polling interval in seconds |
| Name | Id | Type | Description |
| Event Type | eventType | string | Event type set to PH_DEV_MON_SYS_DISK_TREND_DAY |
| Event Severity | eventSeverity | uint16 | Set to 1. In general, a number between 0 (lowest severity) and 10 (highest severity) |