EXTRAHOP-MIB

Description: Monitors ExtraHop network performance management appliance health, capture statistics, and alert notifications.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

The EXTRAHOP-MIB is a vendor-specific SNMP module published by ExtraHop for its network detection and response (NDR) / wire-data analytics appliances that passively monitor network traffic for performance and security insight. It exposes two general categories of data: system/software identification (a nested version structure with major, minor, branch-release, and revision components) and an alerting subsystem that reports alert names, comments, related object types/names, trigger expressions, current values, and timestamps. It is used primarily to monitor the software status of the appliance (confirming exactly which firmware build is deployed) and to surface operational and performance faults raised by ExtraHop's analytics engine as SNMP traps, rather than to expose low-level hardware sensors like temperature or fans. As a self-contained proprietary MIB it has no explicit dependency on other vendor MIBs, though it is commonly polled alongside standard system MIBs (e.g., SNMPv2-MIB) for baseline uptime. It is typically deployed in enterprise or service-provider data centers where ExtraHop Reveal(x) appliances feed alerts and health data into a central network management or SIEM platform through EXTRAHOP-MIB SNMP monitoring.

An administrator would poll extrahopInfoVersionString together with extrahopInfoVersionMajor/Minor/Revision to confirm the exact firmware build running on the appliance after an upgrade. When an anomaly is detected the appliance populates extrahopAlertName, extrahopAlertObjectType, extrahopAlertObjectName, extrahopAlertExpr, and extrahopAlertValue, then emits a notification from extrahopTraps that an NMS can correlate to the specific monitored object and threshold expression that fired. Tracking extrahopAlertTime lets an operator determine how long an alert condition has persisted.

Manages SNMP notifications and alerts for ExtraHop network performance monitoring appliances.