All MIBs › H3C-SESSION-MIB
Organization: Hangzhou H3C Technologies Co., Ltd.
Last Updated: 2013-12-20
Category: Domain: Security, Vendor: H3C/HH3C
Description: H3C MIB for network session table management tracking active TCP/UDP sessions through firewall and NAT devices.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is H3C-SESSION-MIB?
H3C-SESSION-MIB is an H3C proprietary MIB for tracking network session-table state on H3C firewalls, NAT gateways, and multi-service routers, giving visibility into the volume and rate of active TCP/UDP sessions traversing the device. It exposes a per-chassis/slot/CPU session statistics table reporting current session counts and session creation rates. This is primarily a performance and capacity monitoring MIB: it lets an administrator detect when session table utilization approaches hardware/software limits (risking new-connection drops) or when session creation rate spikes abnormally, which can indicate a connection-flood attack or a misbehaving application. Because sessions are tracked per chassis, slot, and CPU, the MIB also has implicit ties to the device's multi-card/multi-CPU architecture, meaning correlating this data with hardware inventory (e.g. ENTITY-MIB) is useful for identifying which processing unit is under session pressure. It is deployed in H3C security gateways, firewalls, and high-end routers performing NAT/stateful session tracking, and administrators can download the H3C-SESSION-MIB file to load into their MIB browser for reference.
IPNetwork Monitor allows you to monitor SNMP objects defined in H3C-SESSION-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- H3C firewalls
- H3C NAT gateways and multi-service routers
Monitoring Examples
An operator would poll h3cSessionStatTable (h3cSessionStatEntry) indexed by h3cSessionStatChassis, h3cSessionStatSlot, and h3cSessionStatCPUID to read h3cSessionStatCount and h3cSessionStatCreateRate for each processing unit. A sustained high h3cSessionStatCreateRate combined with h3cSessionStatCount approaching the platform's known session ceiling would indicate either legitimate traffic growth or a SYN-flood/DoS condition worth investigating. The related h3cSessionTables object groups these statistics for bulk retrieval across all chassis/slot/CPU combinations in a stacked or multi-card device.
What Can Be Monitored
- active session count per chassis/slot/CPU
- session creation rate
- session table utilization
Imported Objects
From HUAWEI-3COM-OID-MIB
| h3cCommon | OBJECT-IDENTITY |
From SNMPv2-SMI
| MODULE-IDENTITY | |
| OBJECT-TYPE | |
| Unsigned32 |
OIDs
RFC description
H3C session configuration and statistics management including session counts and creation rates.
Start monitoring H3C firewall/NAT gateway/multi-service router (session table stats) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.