Juniper-PACKET-MIRROR-MIB

All MIBs › Juniper-PACKET-MIRROR-MIB

Organization: Juniper Networks, Inc.

Last Updated: 2009-10-28

Category: Vendor: Juniper

Description: Juniper Networks MIB for configuring and monitoring packet mirroring sessions used for traffic capture on Juniper E-series platforms.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is Juniper-PACKET-MIRROR-MIB?

Juniper-PACKET-MIRROR-MIB is a Juniper Networks enterprise MIB for configuring and monitoring packet mirroring (traffic capture/lawful intercept style) sessions on E-series platforms. It exposes objects for mirror session identifiers, trigger conditions, analyzer destination addresses, and associated policy or application names, plus error reporting fields. Its main monitoring value is on the software/operational side: it surfaces packet-mirror session error causes and error strings (juniPacketMirrorErrorCause, juniPacketMirrorErrorString), letting an operator detect when a mirroring session fails to start or breaks, and it defines traps (juniPacketMirrorTraps) for asynchronous notification of such faults. It is a self-contained enterprise MIB with no strong dependency beyond standard SNMP notification conventions (SNMPv2-MIB TRAP conventions) for its trap definitions. It is deployed on service provider or enterprise Juniper E-series routers used for traffic capture, security monitoring, or regulatory intercept. Network engineers evaluating or troubleshooting this functionality can download the Juniper-PACKET-MIRROR-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in Juniper-PACKET-MIRROR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Juniper Networks E-series broadband routers

Monitoring Examples

An administrator would poll juniPacketMirrorSessionIdentifier and juniPacketMirrorAnalyzerAddress to confirm a mirror session is correctly forwarding captured traffic to the intended analyzer, and check juniPacketMirrorTriggerType against juniPacketMirrorTrigger to verify what condition started the capture. If a session fails, juniPacketMirrorErrorCause and juniPacketMirrorErrorString would reveal the specific failure reason (e.g. misconfigured analyzer or policy). Enabling juniPacketMirrorTrapEnable lets the router proactively send juniPacketMirrorTraps when mirroring problems occur rather than relying purely on polling.

What Can Be Monitored

packet mirror session status
trigger type and condition
analyzer destination address
mirror error cause/string
associated policy and user name
trap notifications for mirror faults

Imported Objects

From IF-MIB

InterfaceIndex
InterfaceIndexOrZero
ifIndex	OBJECT-TYPE

From Juniper-MIBs

juniMibs

MODULE-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter64
Gauge32
Integer32
IpAddress
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
DisplayString
RowStatus
TEXTUAL-CONVENTION
TruthValue

OIDs

OID symbolic	OID numeric	Type	Access	Description
juniPacketMirrorMIB	1.3.6.1.4.1.4874.2.2.77			The Packet Mirror MIB for the Juniper Networks enterprise.
juniPacketMirrorTrapEnables	1.3.6.1.4.1.4874.2.2.77.2
T/F juniPacketMirrorTrapEnable	1.3.6.1.4.1.4874.2.2.77.2.1	TruthValue	read-write	Set to true to enable packet mirroring traps.
juniPacketMirrorTraps	1.3.6.1.4.1.4874.2.2.77.3
juniPacketMirrorTrapPrefix	1.3.6.1.4.1.4874.2.2.77.3.0
NTF juniPacketMirrorRadiusBasedMirroringFailure	1.3.6.1.4.1.4874.2.2.77.3.0.1			The juniPacketMirrorRadiusBasedMirroringFailure Trap indicates that packet mirroring operation failed in RADIUS based mirroring configuration.
NTF juniPacketMirrorCliTriggerBasedMirroringFailure	1.3.6.1.4.1.4874.2.2.77.3.0.2			The juniPacketMirrorCliTriggerBasedMirroringFailure Trap indicates that packet mirroring operation failed in CLI trigger based mirroring configuration.
NTF juniPacketMirrorInterfaceDeleted	1.3.6.1.4.1.4874.2.2.77.3.0.3			The juniPacketMirrorInterfaceDeleted Trap indicates that the interface that was being mirrored is now deleted.
NTF juniPacketMirrorAnalyzerUnreachable	1.3.6.1.4.1.4874.2.2.77.3.0.4			The juniPacketMirrorAnalyzerUnreachable Trap indicates that an analyzer is now unreachable.
NTF juniPacketMirrorSessionStart	1.3.6.1.4.1.4874.2.2.77.3.0.5			The juniPacketMirrorSessionStart Trap indicates that an access (targeIp = 0) or packet (targetIp != 0) mirroring session has started.
NTF juniPacketMirrorSessionEnd	1.3.6.1.4.1.4874.2.2.77.3.0.6			The juniPacketMirrorSessionEnd Trap indicates that an access or packet mirroring session has ended, depending on the analyzer interpretation of juniPacketMirrorTerminationReason.
NTF juniPacketMirrorInterfaceSessionActivated	1.3.6.1.4.1.4874.2.2.77.3.0.7			The juniPacketMirrorSessionActivated Trap indicates that a packet mirroring session on an existing interface has started.
NTF juniPacketMirrorInterfaceSessionDeactivated	1.3.6.1.4.1.4874.2.2.77.3.0.8			The juniPacketMirrorSessionDeactivated Trap indicates that a data mirroring session on an existing interface has ended.
NTF juniPacketMirrorSessionReject	1.3.6.1.4.1.4874.2.2.77.3.0.9			The juniPacketMirrorSessionReject Trap indicates that a user session on a mirrored interface was not authorized.
NTF juniPacketMirrorSessionFailed	1.3.6.1.4.1.4874.2.2.77.3.0.10			The juniPacketMirrorSessionFailed Trap indicates that a mirroring access or packet session failed, depending on the analyzer interpretation of juniPacketMirrorTerminationReason.
juniPacketMirrorNotificationObjects	1.3.6.1.4.1.4874.2.2.77.3.1
U32 juniPacketMirrorIdentifier	1.3.6.1.4.1.4874.2.2.77.3.1.1	Unsigned32	accessible-for-notify	The mirror identifier.
U32 juniPacketMirrorSessionIdentifier	1.3.6.1.4.1.4874.2.2.77.3.1.2	Unsigned32	accessible-for-notify	The session identifier.
STR juniPacketMirrorTrigger	1.3.6.1.4.1.4874.2.2.77.3.1.3	DisplayString	accessible-for-notify	The trigger that caused mirroring.
INT juniPacketMirrorTriggerType	1.3.6.1.4.1.4874.2.2.77.3.1.4	INTEGER	accessible-for-notify	The trigger type.
INT juniPacketMirrorConfigurationSource	1.3.6.1.4.1.4874.2.2.77.3.1.5	INTEGER	accessible-for-notify	The configuration source of this mirroring.
INT juniPacketMirrorErrorCause	1.3.6.1.4.1.4874.2.2.77.3.1.6	INTEGER	accessible-for-notify	The error cause.
STR juniPacketMirrorErrorString	1.3.6.1.4.1.4874.2.2.77.3.1.7	DisplayString	accessible-for-notify	The error string as reported by the application in the E-Series.
INT juniPacketMirrorApplicationName	1.3.6.1.4.1.4874.2.2.77.3.1.8	INTEGER	accessible-for-notify	The name of application in the E-Series reporting the trap.
IP juniPacketMirrorAnalyzerAddress	1.3.6.1.4.1.4874.2.2.77.3.1.9	IpAddress	accessible-for-notify	The IP address of analyzer.
STR juniPacketMirrorUserName	1.3.6.1.4.1.4874.2.2.77.3.1.10	DisplayString	accessible-for-notify	The login name of the user who's traffic is being mirrored.
STR juniPacketMirrorPolicyName	1.3.6.1.4.1.4874.2.2.77.3.1.11	DisplayString	accessible-for-notify	The secure policy name.
U32 juniPacketMirrorPolicyId	1.3.6.1.4.1.4874.2.2.77.3.1.12	Unsigned32	accessible-for-notify	The secure policy UID.
DAT juniPacketMirrorDateAndTime	1.3.6.1.4.1.4874.2.2.77.3.1.13	DateAndTime	accessible-for-notify	The time of event.
U32 juniPacketMirrorRouterId	1.3.6.1.4.1.4874.2.2.77.3.1.14	Unsigned32	accessible-for-notify	The user or interface router UID in the E-Series.
INT juniPacketMirrorDirection	1.3.6.1.4.1.4874.2.2.77.3.1.15	INTEGER	accessible-for-notify	The mirroring direction.
IP juniPacketMirrorTargetIpAddress	1.3.6.1.4.1.4874.2.2.77.3.1.16	IpAddress	accessible-for-notify	IP address of the mirrored interface.
INT juniPacketMirrorTerminationReason	1.3.6.1.4.1.4874.2.2.77.3.1.17	INTEGER	accessible-for-notify	The reason for ending a mirroring session which the analyzer may interpret as an access or packet session event.
juniPacketMirrorConformance	1.3.6.1.4.1.4874.2.2.77.4
juniPacketMirrorCompliances	1.3.6.1.4.1.4874.2.2.77.4.1
juniPacketMirrorCompliance	1.3.6.1.4.1.4874.2.2.77.4.1.1			Compliance statement for entities which implement the Juniper Packet Mirror MIB.
juniPacketMirrorGroups	1.3.6.1.4.1.4874.2.2.77.4.2
juniPacketMirrorNotificationGroup	1.3.6.1.4.1.4874.2.2.77.4.2.1			Deprecated collection of objects for Packet Mirror notifications in a Juniper product after new objects were added to comply with LAES draft for lawful intercept LAES-2006-014.
juniPacketMirrorNotificationObjectsGroup	1.3.6.1.4.1.4874.2.2.77.4.2.2			Deprecated collection of objects for Packet Mirror notifications in a Juniper product after new objects were added to comply with LAES draft for lawful intercept LAES-2006-014.
juniPacketMirrorNotificationGroup2	1.3.6.1.4.1.4874.2.2.77.4.2.3			Collection of objects for Packet Mirror notifications in a Juniper product.
juniPacketMirrorNotificationObjectsGroup2	1.3.6.1.4.1.4874.2.2.77.4.2.4			Collection of objects for Packet Mirror notifications in a Juniper product.

RFC description

Juniper-private MIB for packet mirroring and traffic replication on routing platforms.

Start monitoring Juniper Networks E-series broadband router (packet mirroring/lawful intercept) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download Juniper-PACKET-MIRROR-MIB

What Is Juniper-PACKET-MIRROR-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description