CISCO-NETINT-MIB

All MIBs › CISCO-NETINT-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2005-09-26

Category: Cisco Devices, Network Interfaces, Network Monitoring (RMON)

Description: Manages network interrupt statistics and coalescing configuration for CPU protection on Cisco routing platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-NETINT-MIB?

CISCO-NETINT-MIB is a Cisco enterprise MIB that manages network interrupt (netint) throttling on Cisco routing platforms, a CPU-protection mechanism that limits how often the router processes certain high-rate interrupt-driven events. It exposes a throttle table tracking, per interrupt cause, how many times throttling has been engaged. Its monitoring value is squarely about CPU/software health protection: a rising cniThrottleCount indicates the router's CPU was at risk of being overwhelmed by interrupt traffic and the platform's protection mechanism intervened, which is an early warning sign of a control-plane load problem or a potential attack (e.g., a packet flood hitting the CPU). It has no stated dependency on other MIBs beyond standard SNMPv2 conformance conventions. It is deployed on Cisco routers where CPU-protection/interrupt-throttling features are enabled to safeguard control-plane stability under high traffic load. Network engineers evaluating or troubleshooting this functionality can download the CISCO-NETINT-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-NETINT-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco router (CPU-protection/interrupt-throttling capable platform)

Monitoring Examples

An operator would poll cniThrottleTable/cniThrottleEntry rows to read cniThrottleCount for each monitored interrupt cause, watching for counts that climb rapidly during a traffic spike. A sudden jump in cniThrottleCount correlated with high CPU utilization elsewhere on the router would confirm that interrupt throttling is actively shielding the CPU from an unusual load, such as a routing flap storm or a denial-of-service condition hitting the control plane. Because the MIB centers on this single throttle table, sustained non-zero throttle counts over time would prompt investigation into the underlying traffic pattern causing the throttling.

What Can Be Monitored

interrupt throttle event count per cause

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From ENTITY-MIB

entPhysicalIndex

OBJECT-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using cniThrottleCount OID:

Select a Cisco router (CPU-protection/interrupt-throttling) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cniThrottleCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. This object indicates the number of times network interrupt throttle has become active. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoNetintMIB	1.3.6.1.4.1.9.9.490			This MIB module is for Network Interrupt information on Cisco device.
ciscoNetintMIBNotifs	1.3.6.1.4.1.9.9.490.0
ciscoNetintMIBObjects	1.3.6.1.4.1.9.9.490.1
cniThrottle	1.3.6.1.4.1.9.9.490.1.1
cniThrottleTable	1.3.6.1.4.1.9.9.490.1.1.1		not-accessible	This table provides the network interrupt throttle counter information. An entry in this table is populated for each physical entity in the managed system capable of providing this information.
cniThrottleEntry	1.3.6.1.4.1.9.9.490.1.1.1.1		not-accessible	An entry containing information about network interrupt throttle counter.
C32 cniThrottleCountEx	1.3.6.1.4.1.9.9.490.1.1.1.1.1	Counter32	read-only	This object indicates the number of times network interrupt throttle has become active.
ciscoNetintMIBConformance	1.3.6.1.4.1.9.9.490.2
ciscoNetintMIBCompliances	1.3.6.1.4.1.9.9.490.2.1
ciscoNetintMIBCompliance	1.3.6.1.4.1.9.9.490.2.1.1			The compliance statement for entities which implement the Cisco Netint MIB.
ciscoNetintMIBGroups	1.3.6.1.4.1.9.9.490.2.2
ciscoThrottleGroup	1.3.6.1.4.1.9.9.490.2.2.1			A collection of object providing network interrupt throttle count.

RFC description

Monitors network interrupt throttle counter information on Cisco devices for interrupt management.

Start monitoring Cisco router (CPU-protection/interrupt-throttling) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-NETINT-MIB