EXTREME-CLEARFLOW-MIB

All MIBs › EXTREME-CLEARFLOW-MIB

Organization: Extreme Networks, Inc.

Last Updated: 2005-03-22

Category: Technology: Network Monitoring, Vendor: Extreme Networks

Description: Manages Extreme Networks ClearFlow programmable analytics rules and action policies for network visibility.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is EXTREME-CLEARFLOW-MIB?

EXTREME-CLEARFLOW-MIB is a vendor-specific Extreme Networks MIB for the CLEAR-Flow feature, a programmable packet-processing/analytics engine on Extreme switches that triggers actions based on observed traffic patterns. It exposes configuration of ClearFlow rules and their associated actions/policies — essentially a policy-configuration data set rather than raw traffic counters. Its monitoring value lies mainly in confirming software/configuration status: which rules are active and what actions (e.g., mirroring, rate-limiting, notification) they trigger, functioning as an automated anomaly-detection layer rather than exposing hardware health metrics directly. It builds on Extreme's proprietary MIB hierarchy and interoperates with Extreme's ACL/QoS infrastructure. It's typically deployed on ExtremeXOS-based switches in networks that need automated traffic-anomaly detection or response (e.g., DoS mitigation, SLA verification) without a separate external monitoring system. Network engineers evaluating or troubleshooting this functionality can download the EXTREME-CLEARFLOW-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in EXTREME-CLEARFLOW-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Extreme Networks ExtremeXOS-based switch

Monitoring Examples

No sample objects were provided in the source data for this module, so exact rule/table object names can't be confirmed; based on its description, an admin would typically poll ClearFlow rule status objects to confirm which rules are enabled and check counters showing how many times a rule's match conditions have fired, which would reveal an anomalous traffic pattern (e.g., a rate-limit rule triggering repeatedly) worth investigating.

What Can Be Monitored

ClearFlow rule status
rule trigger counts
configured actions/policies

Imported Objects

From EXTREME-BASE-MIB

extremeAgent

OBJECT-IDENTITY

From RFC1213-MIB

DisplayString

From SNMPv2-SMI

Counter64
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

How to Use in IPNetwork Monitor

Example using extremeAclPktCount OID:

Select an Extreme Networks ExtremeXOS-based switch (CLEAR-Flow programmable packet-processing/analytics) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type extremeAclPktCount into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The access control list packet count. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
extremeClearflow	1.3.6.1.4.1.1916.1.30			CLEAR-Flow MIB
extremeClearflowTraps	1.3.6.1.4.1.1916.1.30.0
extremeClearflowTrapsPrefix	1.3.6.1.4.1.1916.1.30.0.0
NTF extremeClearflowMessage	1.3.6.1.4.1.1916.1.30.0.0.1			CLEAR-Flow message trap
U32 extremeClearflowMsgId	1.3.6.1.4.1.1916.1.30.1	Unsigned32	accessible-for-notify	User-defined message id
STR extremeClearflowMsg	1.3.6.1.4.1.1916.1.30.2	DisplayString	accessible-for-notify	User-defined message
STR extremeClearflowPolicyName	1.3.6.1.4.1.1916.1.30.3	DisplayString	accessible-for-notify	Policy file name
STR extremeClearflowRuleName	1.3.6.1.4.1.1916.1.30.4	DisplayString	accessible-for-notify	Rule name which triggered this message
C64 extremeClearflowRuleValue	1.3.6.1.4.1.1916.1.30.5	Counter64	accessible-for-notify	Calculated rule value
C64 extremeClearflowRuleThreshold	1.3.6.1.4.1.1916.1.30.6	Counter64	accessible-for-notify	Rule threshold value
U32 extremeClearflowRuleInterval	1.3.6.1.4.1.1916.1.30.7	Unsigned32	accessible-for-notify	Rule sampling and evaluation interval
STR extremeClearflowVlanName	1.3.6.1.4.1.1916.1.30.8	DisplayString	accessible-for-notify	Vlan name on which this policy is applied
STR extremeClearflowPortName	1.3.6.1.4.1.1916.1.30.9	DisplayString	accessible-for-notify	Port name on which this policy is applied
extremeAclListTable	1.3.6.1.4.1.1916.1.30.10		not-accessible	This table lists Access control list information that exist within a device. A single entry exists in this list for each VLAN and Port interface in the system.
extremeAclListEntry	1.3.6.1.4.1.1916.1.30.10.1		not-accessible	An individual Access control list entry.
I32 extremeAclPortIfIndex	1.3.6.1.4.1.1916.1.30.10.1.1	Integer32	read-only	An port index that uniquely identifies an entry in the acl list table.
I32 extremeAclVlanIfIndex	1.3.6.1.4.1.1916.1.30.10.1.2	Integer32	read-only	An vlan index that uniquely identifies an entry in the acl list table.
STR extremeAclCounterName	1.3.6.1.4.1.1916.1.30.10.1.3	DisplayString	read-only	The access control list counter name
STR extremeAclVlanName	1.3.6.1.4.1.1916.1.30.10.1.4	DisplayString	read-only	Vlan name on which this policy is applied
STR extremeAclPolicyName	1.3.6.1.4.1.1916.1.30.10.1.5	DisplayString	read-only	The access control list name
I32 extremeAclDirection	1.3.6.1.4.1.1916.1.30.10.1.6	Integer32	read-only	The interface direction.
C64 extremeAclPktCountEx	1.3.6.1.4.1.1916.1.30.10.1.7	Counter64	read-only	The access control list packet count
C64 extremeAclByteCount	1.3.6.1.4.1.1916.1.30.10.1.8	Counter64	read-only	The access control list byte count
extremeTrafficQueueStatsTable	1.3.6.1.4.1.1916.1.30.11		not-accessible	This table lists traffic queue statistics information that exist within a device. A single entry exists in this list for each traffic queue in the system.
extremeTrafficQueueStatsTableEntry	1.3.6.1.4.1.1916.1.30.11.1		not-accessible	An individual traffic queue stats table entry.
STR extremeTrafficQueueName	1.3.6.1.4.1.1916.1.30.11.1.1	DisplayString	read-only	The traffic queue name that uniquely identifies an entry in the traffic queue table.
I32 extremeTrafficQueueDirection	1.3.6.1.4.1.1916.1.30.11.1.2	Integer32	read-only	Indicates the direction of traffic queue
C64 extremeTrafficQueueHighPassedPkts	1.3.6.1.4.1.1916.1.30.11.1.3	Counter64	read-only	Maximum number of packets passed for this traffic queue
C64 extremeTrafficQueueHighPassedBytes	1.3.6.1.4.1.1916.1.30.11.1.4	Counter64	read-only	Maximum number of bytes passed for this traffic queue
C64 extremeTrafficQueueHighDroppedPkts	1.3.6.1.4.1.1916.1.30.11.1.5	Counter64	read-only	Maximum number of packets dropped for this traffic queue
C64 extremeTrafficQueueHighDroppedBytes	1.3.6.1.4.1.1916.1.30.11.1.6	Counter64	read-only	Maximum number of bytes dropped for this traffic queue
C64 extremeTrafficQueueMedPassedPkts	1.3.6.1.4.1.1916.1.30.11.1.7	Counter64	read-only	Medium number of packets passed for this traffic queue
C64 extremeTrafficQueueMedPassedBytes	1.3.6.1.4.1.1916.1.30.11.1.8	Counter64	read-only	Medium number of bytes passed for this traffic queue
C64 extremeTrafficQueueMedDroppedPkts	1.3.6.1.4.1.1916.1.30.11.1.9	Counter64	read-only	Medium number of packets dropped for this traffic queue
C64 extremeTrafficQueueMedDroppedBytes	1.3.6.1.4.1.1916.1.30.11.1.10	Counter64	read-only	Medium number of bytes dropped for this traffic queue
C64 extremeTrafficQueueLowPassedPkts	1.3.6.1.4.1.1916.1.30.11.1.11	Counter64	read-only	Minimum number of packets passed for this traffic queue
C64 extremeTrafficQueueLowPassedBytes	1.3.6.1.4.1.1916.1.30.11.1.12	Counter64	read-only	Minimum number of bytes passed for this traffic queue
C64 extremeTrafficQueueLowDroppedPkts	1.3.6.1.4.1.1916.1.30.11.1.13	Counter64	read-only	Minimum number of packets dropped for this traffic queue
C64 extremeTrafficQueueLowDroppedBytes	1.3.6.1.4.1.1916.1.30.11.1.14	Counter64	read-only	Minimum number of bytes dropped for this traffic queue
C64 extremeTrafficQueueAggPassedPkts	1.3.6.1.4.1.1916.1.30.11.1.15	Counter64	read-only	Aggregate number of packets passed for this traffic queue
C64 extremeTrafficQueueAggPassedBytes	1.3.6.1.4.1.1916.1.30.11.1.16	Counter64	read-only	Aggregate number of bytes passed for this traffic queue
C64 extremeTrafficQueueAggDroppedPkts	1.3.6.1.4.1.1916.1.30.11.1.17	Counter64	read-only	Aggregate number of packets dropped for this traffic queue
C64 extremeTrafficQueueAggDroppedBytes	1.3.6.1.4.1.1916.1.30.11.1.18	Counter64	read-only	Aggregate number of bytes dropped for this traffic queue
extremeTrafficQueueUtilTable	1.3.6.1.4.1.1916.1.30.12		not-accessible	This table lists traffic queue statistics information that exist within a device. A single entry exists in this list for each traffic queue in the system.
extremeTrafficQueueUtilTableEntry	1.3.6.1.4.1.1916.1.30.12.1		not-accessible	An each traffic queue related utilization information
STR extremeUtilTrafficQueueName	1.3.6.1.4.1.1916.1.30.12.1.1	DisplayString	read-only	The traffic queue name that uniquely identifies an entry in the traffic queue table.
I32 extremeUtilTrafficQueueDirection	1.3.6.1.4.1.1916.1.30.12.1.2	Integer32	read-only	Indicates the direction of traffic queue
STR extremeTrafficQueueHighUtilization	1.3.6.1.4.1.1916.1.30.12.1.3	DisplayString	read-only	High level utilization of the traffic queue
STR extremeTrafficQueueMedUtilization	1.3.6.1.4.1.1916.1.30.12.1.4	DisplayString	read-only	Medium level utilization of the traffic queue
STR extremeTrafficQueueLowUtilization	1.3.6.1.4.1.1916.1.30.12.1.5	DisplayString	read-only	Low level utilization of the traffic queue

RFC description

Extreme Networks CLEAR-Flow MIB for configuring and monitoring CLEAR-Flow security policies, traffic classification rules, and monitoring on ExtremeXOS switches.

Start monitoring Extreme Networks ExtremeXOS-based switch (CLEAR-Flow programmable packet-processing/analytics) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download EXTREME-CLEARFLOW-MIB