H3C-DAR-MIB

All MIBs › H3C-DAR-MIB

Organization: Hangzhou H3C Technologies Co., Ltd.

Last Updated: 2010-11-03

Category: Domain: Security, Vendor: H3C/HH3C

Description: H3C MIB for Deep Application Recognition (DAR) managing application identification and traffic classification policies.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is H3C-DAR-MIB?

H3C-DAR-MIB is an H3C proprietary MIB for Deep Application Recognition (DAR), a deep-packet-inspection feature that identifies application-layer protocols traversing a network device for QoS and traffic-classification purposes. It exposes per-protocol packet and byte statistics, in/out bit rates, and maximum observed bit rates in a table indexed by protocol ID and name, plus per-interface DAR statistics objects. While primarily a traffic-classification and performance MIB rather than a hardware-health MIB, it supports performance monitoring by letting an administrator see live and peak bandwidth consumption per recognized application, useful for capacity planning and anomaly detection on the device's classification engine. It is an H3C-proprietary extension with no direct dependency on IETF standard MIBs, though it is commonly deployed alongside standard IF-MIB interface statistics for correlation. It is deployed on H3C routers and switches with DPI/application-recognition capability enabled on their interfaces, where H3C-DAR-MIB SNMP monitoring supports per-application bandwidth visibility for capacity planning.

IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-DAR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

H3C router
H3C switch

Monitoring Examples

An operator would poll h3cDarStatisticsTable/h3cDarStatisticsEntry (indexed by h3cDarStatisticsProtocolID) to see h3cDarStatisticsProtocolName mapped to h3cDarStatisticsInBytes/OutBytes and h3cDarStatisticsInBitRate/OutBitRate, spotting an unexpected application such as P2P traffic consuming bandwidth near h3cDarStatisticsMaxInBitRate. Comparing current bit rates against the recorded maximums helps confirm whether a traffic spike is a new peak requiring QoS policy adjustment.

What Can Be Monitored

per-protocol packet counts
per-protocol byte counts
current in/out bit rate per protocol
maximum observed in/out bit rate per protocol
per-interface DAR statistics

Imported Objects

From HUAWEI-3COM-OID-MIB

h3cCommon

OBJECT-IDENTITY

From IF-MIB

ifIndex

OBJECT-TYPE

From SNMPv2-SMI

Counter64
MODULE-IDENTITY
OBJECT-TYPE

From SNMPv2-TC

TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using h3cDarStatisticsInPkts OID:

Select an H3C router/switch (Deep Application Recognition) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type h3cDarStatisticsInPkts into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The number of incoming packets of the specific protocol. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
h3cDar	1.3.6.1.4.1.2011.10.2.112			The MIB is designed to get DAR packet statistics.
h3cDarIfObjects	1.3.6.1.4.1.2011.10.2.112.1
h3cDarIfStatisticsObjects	1.3.6.1.4.1.2011.10.2.112.1.1
h3cDarStatisticsTable	1.3.6.1.4.1.2011.10.2.112.1.1.1		not-accessible	The table contains packet statistics of DAR.
h3cDarStatisticsEntry	1.3.6.1.4.1.2011.10.2.112.1.1.1.1		not-accessible	Entry items.
H3C h3cDarStatisticsProtocolID	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.1	H3cDarProtocol	not-accessible	Protocol id.
OCT h3cDarStatisticsProtocolName	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.2	OCTET STRING	read-only	Protocol name.
C64 h3cDarStatisticsInPktsEx	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.3	Counter64	read-only	The number of incoming packets of the specific protocol.
C64 h3cDarStatisticsInBytes	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.4	Counter64	read-only	The number of incoming octets of the specific protocol.
C64 h3cDarStatisticsInBitRate	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.5	Counter64	read-only	Incoming bitrate of the specific protocol in last 5 minutes.
C64 h3cDarStatisticsMaxInBitRate	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.6	Counter64	read-only	Max incoming bitrate of the specific protocol in last 5 minutes.
C64 h3cDarStatisticsOutPkts	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.7	Counter64	read-only	The number of outgoing packets of the specific protocol.
C64 h3cDarStatisticsOutBytes	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.8	Counter64	read-only	The number of outgoing octets of the specific protocol.
C64 h3cDarStatisticsOutBitRate	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.9	Counter64	read-only	Outgoing bitrate of the specific protocol in last 5 minutes.
C64 h3cDarStatisticsMaxOutBitRate	1.3.6.1.4.1.2011.10.2.112.1.1.1.1.10	Counter64	read-only	Max outgoing bitrate of the specific protocol in last 5 minutes.

RFC description

H3C Deeper Application Recognition MIB tracking packet statistics for multiple network protocols including BGP, HTTP, and DNS.

Start monitoring H3C router/switch (Deep Application Recognition) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download H3C-DAR-MIB