JUNIPER-SERVICES-MIB

All MIBs › JUNIPER-SERVICES-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2004--0-1-

Category: Vendor: Juniper

Description: MIB from Juniper Networks for tracking statistics from Adaptive Services (AS) and Multiservices PIC on its service router platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is JUNIPER-SERVICES-MIB?

This Juniper enterprise MIB covers the Adaptive Services (AS) and Multiservices PIC, the service-card hardware/software on Juniper routers that performs flow-based services such as NAT, stateful firewall, and IPsec. It exposes aggregate flow-table statistics: current, maximum, created, freed, and idle-freed flow counts, broken out for both general flows and TCP-specific flows. Monitoring emphasis is primarily on software/service-load status — these counters reveal how heavily the services PIC's flow table is utilized and whether flows are created and torn down normally or accumulating (signaling a leak or a flood/DoS condition), acting as a load and capacity health indicator for the card. It complements Juniper's chassis/FPC MIBs for physical PIC context and interacts with NAT/firewall service configuration on the same platform. It is deployed on Juniper routers (M/MX series) equipped with Adaptive Services or Multiservices PICs providing inline NAT, firewall, or IPsec services. Engineers can download the JUNIPER-SERVICES-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in JUNIPER-SERVICES-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper router with Adaptive Services/Multiservices PIC (M/MX Series)

Monitoring Examples

Polling jnxSvcFlowTableAggStatsTable/jnxSvcFlowTableAggStatsEntry gives jnxSvcAggFlow against jnxSvcAggFlowMaximum to see how close the services PIC's flow table is to capacity. Comparing jnxSvcAggFlowCreated to jnxSvcAggFlowFreed and jnxSvcAggFlowIdleFreed reveals whether flows are aging out normally or accumulating toward the maximum. The TCP-specific counters jnxSvcAggFlowTcp, jnxSvcAggFlowTcpCreated, and jnxSvcAggFlowTcpFreed let an operator isolate whether a flow-table pressure event is being driven specifically by TCP traffic.

What Can Be Monitored

current vs. maximum flow table utilization
flow creation/free rate
idle flow expiration count
TCP-specific flow statistics

Imported Objects

From IF-MIB

ifIndex

OBJECT-TYPE

From JUNIPER-SMI

jnxMibs

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Gauge32
MODULE-IDENTITY
OBJECT-TYPE

How to Use in IPNetwork Monitor

Example using jnxSvcAggFlowPktErr OID:

Select a Juniper router with Adaptive Services/Multiservices PIC (M/MX Series) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type jnxSvcAggFlowPktErr into the Find box to locate it in the OID tree, then select it and click OK. It reports the total number of packets found to be in invalid in processing by all flows. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter64-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases between polls, since a rising count of errors, failures, or discards often points to a real underlying problem. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
jnxServicesInfoMib	1.3.6.1.4.1.2636.3.27			This is Juniper Networks' implementation of enterprise specific MIB for monitoring services properties
G32 jnxSvcAggFlow	1.3.6.1.4.1.2636.3.27.1.1.1	Gauge32	read-only	Total number of flows of any kind in the flow table.
C64 jnxSvcAggFlowByte	1.3.6.1.4.1.2636.3.27.1.1.18	Counter64	read-only	Total number of bytes for packets processed by all flows.
C64 jnxSvcAggFlowByteErr	1.3.6.1.4.1.2636.3.27.1.1.19	Counter64	read-only	Total number of bytes for packets found to be in invalid in processing by all flows.
C64 jnxSvcAggFlowCreated	1.3.6.1.4.1.2636.3.27.1.1.3	Counter64	read-only	Total number of flows of any kind that have been created in the flow table.
C64 jnxSvcAggFlowFreed	1.3.6.1.4.1.2636.3.27.1.1.4	Counter64	read-only	Total number of flows of any kind that have been freed from the flow table for any reason.
C64 jnxSvcAggFlowIcmpByte	1.3.6.1.4.1.2636.3.27.1.1.23	Counter64	read-only	Total number of bytes for all ICMP packets processed.
C64 jnxSvcAggFlowIcmpByteErr	1.3.6.1.4.1.2636.3.27.1.1.24	Counter64	read-only	Total number of bytes for all ICMP packets found to be in invalid.
C64 jnxSvcAggFlowIcmpPkt	1.3.6.1.4.1.2636.3.27.1.1.20	Counter64	read-only	Total number of ICMP packets processed.
C64 jnxSvcAggFlowIcmpPktErr	1.3.6.1.4.1.2636.3.27.1.1.21	Counter64	read-only	Total number of ICMP packets found to be in invalid for any reason.
C64 jnxSvcAggFlowIcmpPktErrBadFlow	1.3.6.1.4.1.2636.3.27.1.1.22	Counter64	read-only	Total number of ICMP packets found to be in invalid because the flow was invalid.
C64 jnxSvcAggFlowIdleFreed	1.3.6.1.4.1.2636.3.27.1.1.5	Counter64	read-only	Total number of flows of any kind that have been freed from the flow table by idle flow detection.
G32 jnxSvcAggFlowMaximum	1.3.6.1.4.1.2636.3.27.1.1.2	Gauge32	read-only	Maximum number of flows of any kind in the flow table (high water mark).
C64 jnxSvcAggFlowPkt	1.3.6.1.4.1.2636.3.27.1.1.16	Counter64	read-only	Total number of packets processed by all flows.
C64 jnxSvcAggFlowPktErrEx	1.3.6.1.4.1.2636.3.27.1.1.17	Counter64	read-only	Total number of packets found to be in invalid in processing by all flows.
G32 jnxSvcAggFlowTcp	1.3.6.1.4.1.2636.3.27.1.1.6	Gauge32	read-only	Total number of TCP flows in the flow table.
C64 jnxSvcAggFlowTcpByte	1.3.6.1.4.1.2636.3.27.1.1.28	Counter64	read-only	Total number of bytes for all TCP packets processed.
C64 jnxSvcAggFlowTcpByteErr	1.3.6.1.4.1.2636.3.27.1.1.29	Counter64	read-only	Total number of bytes for all TCP packets found to be in invalid
C64 jnxSvcAggFlowTcpCreated	1.3.6.1.4.1.2636.3.27.1.1.8	Counter64	read-only	Total number of TCP flows that have been created in the flow table.
C64 jnxSvcAggFlowTcpFreed	1.3.6.1.4.1.2636.3.27.1.1.9	Counter64	read-only	Total number of TCP flows that have been freed from the flow table for any reason.
C64 jnxSvcAggFlowTcpIdleFreed	1.3.6.1.4.1.2636.3.27.1.1.10	Counter64	read-only	Total number of TCP flows that have been freed from the flow table by idle flow detection.
G32 jnxSvcAggFlowTcpMaximum	1.3.6.1.4.1.2636.3.27.1.1.7	Gauge32	read-only	Maximum number of TCP flows in the flow table (high water mark).
C64 jnxSvcAggFlowTcpPkt	1.3.6.1.4.1.2636.3.27.1.1.25	Counter64	read-only	Total number of TCP packets processed.
C64 jnxSvcAggFlowTcpPktErr	1.3.6.1.4.1.2636.3.27.1.1.26	Counter64	read-only	Total number of TCP packets found to be in invalid for any reason.
C64 jnxSvcAggFlowTcpPktErrBadFlow	1.3.6.1.4.1.2636.3.27.1.1.27	Counter64	read-only	Total number of TCP packets found to be in invalid because the flow was invalid.
G32 jnxSvcAggFlowUdp	1.3.6.1.4.1.2636.3.27.1.1.11	Gauge32	read-only	Total number of UDP flows in the flow table.
C64 jnxSvcAggFlowUdpByte	1.3.6.1.4.1.2636.3.27.1.1.33	Counter64	read-only	Total number of bytes for all UDP packets processed.
C64 jnxSvcAggFlowUdpByteErr	1.3.6.1.4.1.2636.3.27.1.1.34	Counter64	read-only	Total number of bytes for all TCP packets found to be in invalid.
C64 jnxSvcAggFlowUdpCreated	1.3.6.1.4.1.2636.3.27.1.1.13	Counter64	read-only	Total number of TCP flows that have been created in the flow table.
C64 jnxSvcAggFlowUdpFreed	1.3.6.1.4.1.2636.3.27.1.1.14	Counter64	read-only	Total number of UDP flows that have been freed from the flow table for any reason.
C64 jnxSvcAggFlowUdpIdleFreed	1.3.6.1.4.1.2636.3.27.1.1.15	Counter64	read-only	Total number of TCP flows that have been freed from the flow table by idle flow detection.
G32 jnxSvcAggFlowUdpMaximum	1.3.6.1.4.1.2636.3.27.1.1.12	Gauge32	read-only	Maximum number of TCP flows in the flow table (high water mark).
C64 jnxSvcAggFlowUdpPkt	1.3.6.1.4.1.2636.3.27.1.1.30	Counter64	read-only	Total number of UDP packets processed.
C64 jnxSvcAggFlowUdpPktErr	1.3.6.1.4.1.2636.3.27.1.1.31	Counter64	read-only	Total number of UDP packets found to be in invalid for any reason.
C64 jnxSvcAggFlowUdpPktErrBadFlow	1.3.6.1.4.1.2636.3.27.1.1.32	Counter64	read-only	Total number of UDP packets found to be in invalid because the flow was invalid.
jnxSvcFlowTableAggStatsEntry	1.3.6.1.4.1.2636.3.27.1.1		not-accessible	An entry containing aggregated statistics for all flow tables for a particular service pic interface.
jnxSvcFlowTableAggStatsGroup	1.3.6.1.4.1.2636.3.27.20.2.1			Basic aggregate statistics for flow table activity.
jnxSvcFlowTableAggStatsTable	1.3.6.1.4.1.2636.3.27.1		not-accessible	Aggregated statistics information about all flow tables on the service PIC interface.
jnxSvcMIBCompliance	1.3.6.1.4.1.2636.3.27.20.1.1			Compliance statement for the Juniper enterprise-specific service PIC interface service information MIB.
jnxSvcMIBCompliances	1.3.6.1.4.1.2636.3.27.20.1
jnxSvcMIBConformance	1.3.6.1.4.1.2636.3.27.20
jnxSvcMIBGroups	1.3.6.1.4.1.2636.3.27.20.2
C64 jnxSvcServIdByte	1.3.6.1.4.1.2636.3.27.2.1.2	Counter64	read-only	Total bytes for all packets processed by service.
C64 jnxSvcServIdErrByte	1.3.6.1.4.1.2636.3.27.2.1.4	Counter64	read-only	Total butes for all packets found to be in invalid by this service during or as a result of processing.
C64 jnxSvcServIdErrHTTPTxn	1.3.6.1.4.1.2636.3.27.2.1.31	Counter64	read-only	Number of packets found to be in invalid because the HTTP transaction or flow was in an error state.
C64 jnxSvcServIdErrPkt	1.3.6.1.4.1.2636.3.27.2.1.3	Counter64	read-only	Total number of all packets found to be in invalid by this service during or as a result of processing.
C64 jnxSvcServIdErrWAPTxn	1.3.6.1.4.1.2636.3.27.2.1.30	Counter64	read-only	Number of packets found to be in invalid because the WAP transaction or flow was in an error state.
C64 jnxSvcServIdHeadExByte	1.3.6.1.4.1.2636.3.27.2.1.6	Counter64	read-only	Bytes for all packets processed by the service header examination function. This is the first packet for a flow for any service set specifying a header inspection rule set.
C64 jnxSvcServIdHeadExFailCfgState	1.3.6.1.4.1.2636.3.27.2.1.32	Counter64	read-only	Number of header inspections that failed due to internal configuration state.
C64 jnxSvcServIdHeadExFlow	1.3.6.1.4.1.2636.3.27.2.1.7	Counter64	read-only	Packets processed by the service header examination function. This is the first packet for a flow for any service set specifying a header inspection rule set and only includes processing of packets that result in the creation of a flow.
C64 jnxSvcServIdHeadExFlowMtch	1.3.6.1.4.1.2636.3.27.2.1.8	Counter64	read-only	Flows that matched any rule configured for the header examination function for the service set associated with the flow.
C64 jnxSvcServIdHeadExHttpProtoReq	1.3.6.1.4.1.2636.3.27.2.1.14	Counter64	read-only	Flows identified by header examination function as potentially requiring HTTP protocol inspection and URI extraction.
C64 jnxSvcServIdHeadExPkt	1.3.6.1.4.1.2636.3.27.2.1.5	Counter64	read-only	Packets processed by the service header examination function. This is the first packet for a flow for any service set specifying a header inspection rule set.
C64 jnxSvcServIdHeadExProtoReq	1.3.6.1.4.1.2636.3.27.2.1.13	Counter64	read-only	Flows identified as requiring protocol inspection and URI extraction as a result of the header examination function.
C64 jnxSvcServIdHeadExWapProtoReq	1.3.6.1.4.1.2636.3.27.2.1.15	Counter64	read-only	Flows identified by header examination function as potentially requiring WAP protocol inspection and URI extraction.
jnxSvcServIdiceGroup	1.3.6.1.4.1.2636.3.27.20.2.2			Basic aggregate statistics for the Service Identification service.
C64 jnxSvcServIdPkt	1.3.6.1.4.1.2636.3.27.2.1.1	Counter64	read-only	Total count for all packets processed by service.
C64 jnxSvcServIdPktTcpMalform	1.3.6.1.4.1.2636.3.27.2.1.28	Counter64	read-only	Number of TCP packets found to be in invalid due to being malformed, for an incorrect sequence number, or other reason.
G32 jnxSvcServIdProtFlow	1.3.6.1.4.1.2636.3.27.2.1.16	Gauge32	read-only	Flows currently undergoing protocol inspection and URI extraction. Does not include flows that have been marked as no longer requiring inspection or flows that are in an error state.
C64 jnxSvcServIdProtInsByte	1.3.6.1.4.1.2636.3.27.2.1.18	Counter64	read-only	Total bytes for all packets processed by protocol inspection function while attempting to parse a transaction and extract URIs.
C64 jnxSvcServidProtInsErrParseTx	1.3.6.1.4.1.2636.3.27.2.1.44	Counter64	read-only	Number of flows which experienced a transaction parse error or any kind that prevented URI extraction. This does not include length limitations or processing errors.
C64 jnxSvcServIdProtInsFailCfgState	1.3.6.1.4.1.2636.3.27.2.1.33	Counter64	read-only	Number of URI inspections that failed due to internal configuration state.
C64 jnxSvcServIdProtInsFlowInsp	1.3.6.1.4.1.2636.3.27.2.1.19	Counter64	read-only	Total number of flows that have been inspected or are at present being inspected by the protocol inspection and identification function.
C64 jnxSvcServIdProtInsFlowProtIdent	1.3.6.1.4.1.2636.3.27.2.1.20	Counter64	read-only	Flows for which the protocol inspection and identification function has determined the protocol in use and begun transaction processing.
C64 jnxSvcServIdProtInsHttpUri	1.3.6.1.4.1.2636.3.27.2.1.24	Counter64	read-only	Number of HTTP transactions that have successfully extracted a URI.
C64 jnxSvcServIdProtInsHttpUriMtch	1.3.6.1.4.1.2636.3.27.2.1.25	Counter64	read-only	Number of HTTP transaction URIs that were matched by a URI rule configured for the active service set.
C64 jnxSvcServIdProtInsPkt	1.3.6.1.4.1.2636.3.27.2.1.17	Counter64	read-only	Total number of packets processed by protocol inspection function while attempting to parse a transaction and extract URIs.
C64 jnxSvcServidProtInsUriErrNoRes	1.3.6.1.4.1.2636.3.27.2.1.45	Counter64	read-only	Number of URIs that were not processed due to lack of system resources.
C64 jnxSvcServidProtInsUriErrProcess	1.3.6.1.4.1.2636.3.27.2.1.42	Counter64	read-only	Number of URIs that failed to process due to internal processing error.
C64 jnxSvcServidProtInsUriErrTooLong	1.3.6.1.4.1.2636.3.27.2.1.43	Counter64	read-only	Number of URIs that were not processed because they exceeded the maximum supported URI length.
C64 jnxSvcServIdProtInsWapUri	1.3.6.1.4.1.2636.3.27.2.1.26	Counter64	read-only	Number of WAP transactions that have successfully extracted a URI.
C64 jnxSvcServIdProtInsWapUriMtch	1.3.6.1.4.1.2636.3.27.2.1.27	Counter64	read-only	Number of WAP transaction URIs that were matched by a URI rule configured for the active service set.
jnxSvcServIdTable	1.3.6.1.4.1.2636.3.27.2		not-accessible	Information about the service-identification service for the service PIC interface.
jnxSvcServIdTableEntry	1.3.6.1.4.1.2636.3.27.2.1		not-accessible	An entry containing aggregate Service Identification service information applicable to particular service pic interfaces.
C64 jnxSvcServIdWAPInvalidTxn	1.3.6.1.4.1.2636.3.27.2.1.29	Counter64	read-only	Numbee of packets found to be in invalid due to invalid WAP transaction identifier.
C64 jnxSvcTransactionHttpCreated	1.3.6.1.4.1.2636.3.27.2.1.38	Counter64	read-only	Number of HTTP transaction sessions created.
C64 jnxSvcTransactionHttpFreed	1.3.6.1.4.1.2636.3.27.2.1.40	Counter64	read-only	Number of WAP transaction sessions freed.
C64 jnxSvcTransactionHttpIdleFreed	1.3.6.1.4.1.2636.3.27.2.1.41	Counter64	read-only	Number of WAP transaction sessions freed by idle clean-up.
G32 jnxSvcTransactionHttpMaximum	1.3.6.1.4.1.2636.3.27.2.1.39	Gauge32	read-only	Peak number of simultaneous of HTTP transaction sessions since start.
C64 jnxSvcTransactionWapCreated	1.3.6.1.4.1.2636.3.27.2.1.34	Counter64	read-only	Number of WAP transaction sessions created.
C64 jnxSvcTransactionWapFreed	1.3.6.1.4.1.2636.3.27.2.1.36	Counter64	read-only	Number of WAP transaction sessions freed.
C64 jnxSvcTransactionWapIdleFreed	1.3.6.1.4.1.2636.3.27.2.1.37	Counter64	read-only	Number of WAP transaction sessions freed by idle clean-up.
G32 jnxSvcTransactionWapMaximum	1.3.6.1.4.1.2636.3.27.2.1.35	Gauge32	read-only	Peak number of simultaneous of WAP transaction sessions since start.

RFC description

Juniper Networks MIB for monitoring Adaptive Services (AS) and Multiservices PIC statistics on Juniper service router platforms.

Start monitoring Juniper router with Adaptive Services/Multiservices PIC (M/MX Series) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download JUNIPER-SERVICES-MIB