CISCO-SDWAN-OPER-APP-MIB

All MIBs › CISCO-SDWAN-OPER-APP-MIB

Organization: Cisco Systems, Inc.

Last Updated: 2021-05-26

Category: Cisco Devices

Description: Provides operational statistics for applications detected by Cisco SD-WAN DPI on vEdge/vManage platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is CISCO-SDWAN-OPER-APP-MIB?

CISCO-SDWAN-OPER-APP-MIB is a Cisco SD-WAN (Viptela-derived vEdge/vManage) operational MIB exposing application-level statistics gathered via the device's built-in Deep Packet Inspection (DPI)/cflowd flow monitoring. It reports flow-level counters such as data and template packet counts, and flow lifecycle events like refresh, ageout, forced end, and detected end, along with flow export template configuration (active/inactive timeouts, refresh interval). It is used to monitor the software-level health and performance of the SD-WAN device's application-visibility/flow-export subsystem -- for example, whether flows are being dropped due to rate limiting (appCflowdStatisticsFlowRateLimitDrop) or ending abnormally rather than gracefully. It relates to the broader Cisco SD-WAN OPER MIB family and standard NetFlow/cflowd concepts for flow export. Typical deployment is on Cisco SD-WAN vEdge routers at branch/WAN edge sites where administrators monitor application traffic visibility and flow-export health. Engineers can download the CISCO-SDWAN-OPER-APP-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-SDWAN-OPER-APP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco SD-WAN vEdge routers
Cisco vManage-managed WAN edge devices

Monitoring Examples

An operator would poll appCflowdStatisticsTotalPackets and appCflowdStatisticsDataPackets to gauge overall DPI-monitored traffic volume, and check appCflowdStatisticsFlowRateLimitDrop for evidence that flow records are being dropped due to exceeding the export rate limit. Comparing appCflowdStatisticsFlowEndForced against appCflowdStatisticsFlowEndDetected reveals whether flows are mostly ending normally or being forcibly terminated (e.g. due to resource pressure). The appCflowdTemplateFlowActiveTimeout and appCflowdTemplateFlowInactiveTimeout objects show configured timeout values controlling when a flow is considered aged out, useful for tuning flow-export granularity.

What Can Be Monitored

DPI flow packet counts
flow refresh/ageout events
forced vs detected flow end counts
flow rate-limit drops
flow template timeout configuration

Imported Objects

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

TEXTUAL-CONVENTION
TruthValue

How to Use in IPNetwork Monitor

Example using appCflowdStatisticsDataPackets OID:

Select a Cisco SD-WAN vEdge routers / vManage-managed device as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type appCflowdStatisticsDataPackets into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of IPFIX data record packets created. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
ciscoSdwanOperAppMIB	1.3.6.1.4.1.9.9.1007			This module defines the data model for app operation
ciscoSdwanOperAppMIBNotifs	1.3.6.1.4.1.9.9.1007.0
ciscoSdwanOperAppMIBObjects	1.3.6.1.4.1.9.9.1007.1
app	1.3.6.1.4.1.9.9.1007.1.6
appCflowd	1.3.6.1.4.1.9.9.1007.1.6.1
appCflowdStatistics	1.3.6.1.4.1.9.9.1007.1.6.1.3
C64 appCflowdStatisticsDataPacketsEx	1.3.6.1.4.1.9.9.1007.1.6.1.3.1	Counter64	read-only	Number of IPFIX data record packets created
C64 appCflowdStatisticsTemplatePackets	1.3.6.1.4.1.9.9.1007.1.6.1.3.2	Counter64	read-only	Number of IPFIX template packets created
C64 appCflowdStatisticsTotalPackets	1.3.6.1.4.1.9.9.1007.1.6.1.3.3	Counter64	read-only	Number of IPFIX packets transmitted
C64 appCflowdStatisticsFlowRefresh	1.3.6.1.4.1.9.9.1007.1.6.1.3.4	Counter64	read-only	Number of flow active timeouts to be reported
C64 appCflowdStatisticsFlowAgeout	1.3.6.1.4.1.9.9.1007.1.6.1.3.5	Counter64	read-only	Number of flow idle timeouts to be reported
C64 appCflowdStatisticsFlowEndDetected	1.3.6.1.4.1.9.9.1007.1.6.1.3.6	Counter64	read-only	Number of flows whose end was detected by fastpath
C64 appCflowdStatisticsFlowEndForced	1.3.6.1.4.1.9.9.1007.1.6.1.3.7	Counter64	read-only	Number of flow that were forcibly removed
C64 appCflowdStatisticsFlowRateLimitDrop	1.3.6.1.4.1.9.9.1007.1.6.1.3.8	Counter64	read-only	Flows that were dropped due to FTM rate limit
appCflowdTemplate	1.3.6.1.4.1.9.9.1007.1.6.1.4
OCT appCflowdTemplateName	1.3.6.1.4.1.9.9.1007.1.6.1.4.1	OCTET STRING	read-only	cflowd template name
U32 appCflowdTemplateFlowActiveTimeout	1.3.6.1.4.1.9.9.1007.1.6.1.4.2	Unsigned32	read-only	Timeout value for active flows in secs
U32 appCflowdTemplateFlowInactiveTimeout	1.3.6.1.4.1.9.9.1007.1.6.1.4.3	Unsigned32	read-only	Timeout value for inactive flows in secs
U32 appCflowdTemplateTemplateRefresh	1.3.6.1.4.1.9.9.1007.1.6.1.4.4	Unsigned32	read-only	Refresh value for template in secs
ciscoSdwanOperAppMIBNotifObjects	1.3.6.1.4.1.9.9.1007.2
ciscoSdwanOperAppMIBConform	1.3.6.1.4.1.9.9.1007.3
ciscoSdwanOperAppMIBCompliances	1.3.6.1.4.1.9.9.1007.3.1
ciscoSdwanOperAppMIBCompliance	1.3.6.1.4.1.9.9.1007.3.1.1			The compliance statement for the SNMP entities that implement the ciscoSdwanOperAppMIB module.
ciscoSdwanOperAppMIBGroups	1.3.6.1.4.1.9.9.1007.3.2
cSdwanAppCflowdStatisticsGroup	1.3.6.1.4.1.9.9.1007.3.2.1			This is a collection of objects of app cflowd statistics.
cSdwanAppCflowdTemplateGroup	1.3.6.1.4.1.9.9.1007.3.2.2			This is a collection of objects of app cflowd template.

RFC description

Operational management for Cisco SD-WAN application data. Monitors cFlow statistics, template packets, and application-level metrics.

Start monitoring Cisco SD-WAN vEdge routers / vManage-managed devices with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-SDWAN-OPER-APP-MIB