RADLAN-TCPSESSIONS

All MIBs › RADLAN-TCPSESSIONS

Category: System Management, Vendor: RADLAN/Cisco SB

Description: Monitors active TCP session counts and connection statistics on Radlan devices.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RADLAN-TCPSESSIONS?

RADLAN-TCPSESSIONS is a Marvell/RADLAN private enterprise MIB exposing the switch's own local TCP connection table, i.e., TCP sessions terminated on the switch's management CPU (SSH, HTTP/HTTPS, Telnet) rather than transit traffic. It provides a session table with local/remote address (type-aware, IPv4/IPv6) and port, TCP state, and the name of the application/service owning the session. This is a management-plane health and security-monitoring MIB: it shows who is currently connected to the switch's management services, detects unexpected or excessive open sessions (a stuck management client or a security concern), and confirms expected services are listening, complementing host-resources CPU/software status with a live-connections view. It parallels the IETF TCP-MIB connection-table model (referencing the tcp OID subtree) while being a RADLAN private extension. It is typically deployed on RADLAN-based switches to give admins visibility into active management-session connectivity for security auditing. Engineers can download the RADLAN-TCPSESSIONS file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in RADLAN-TCPSESSIONS. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Marvell/RADLAN-based managed Ethernet switch
OEM switches licensing the RADLAN software stack

Monitoring Examples

Polling rlTcpSessionTable/rlTcpSessionEntry returns rlTcpSessionLocalAddress, rlTcpSessionLocalPort, rlTcpSessionRemAddress, rlTcpSessionRemPort, rlTcpSessionState, and rlTcpSessionAppName for each session, letting an admin confirm only expected management clients hold sessions to the switch's SSH or web port. An unusually large number of entries with the same rlTcpSessionAppName stuck in a non-ESTABLISHED rlTcpSessionState can indicate a management app failing to close sessions or a scanning attempt against the switch. rlTcpSessionLocalAddrType shows whether the session was IPv4 or IPv6.

What Can Be Monitored

active TCP sessions to the switch's management interfaces
session local/remote address and port
TCP connection state
application/service name owning a session

Imported Objects

From INET-ADDRESS-MIB

InetAddress
InetAddressType

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32
mib-2

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION

How to Use in IPNetwork Monitor

Example using rlTcpSessionState OID:

Select a Marvell/RADLAN-based managed Ethernet switch, OEM switch (management-plane TCP session table) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type rlTcpSessionState into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The state of this TCP connection. The only value which may be set by a management station is deleteTCB(12). On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is an INTEGER-type OID, Value bounds is the most useful condition here — trigger an alert if the value stays in a mid-handshake state (synSent/synReceived) longer than a normal connection setup, or the value is unexpectedly 'closed' when you expect an established session. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
tcp	1.3.6.1.2.1.6
rlTcpSessionTable	1.3.6.1.2.1.6.16		not-accessible	A table containing TCP sessions information.
rlTcpSessionEntry	1.3.6.1.2.1.6.16.1		not-accessible
IPt rlTcpSessionLocalAddrType	1.3.6.1.2.1.6.16.1.1	InetAddressType	not-accessible	The type of the rlTcpSessionLocalAddress address
IP rlTcpSessionLocalAddress	1.3.6.1.2.1.6.16.1.2	InetAddress	not-accessible	The local IP address for this TCP connection. In the case of a connection in the listen state which is willing to accept connections for any IP interface associated with the node, the value 0.0.0.0 is used.
INT rlTcpSessionLocalPort	1.3.6.1.2.1.6.16.1.3	INTEGER	not-accessible	The local port number for this TCP connection.
IPt rlTcpSessionRemAddrType	1.3.6.1.2.1.6.16.1.4	InetAddressType	not-accessible	The type of the rlTcpSessionRemAddress address
IP rlTcpSessionRemAddress	1.3.6.1.2.1.6.16.1.5	InetAddress	not-accessible	The remote IP address for this TCP connection.
INT rlTcpSessionRemPort	1.3.6.1.2.1.6.16.1.6	INTEGER	not-accessible	The remote port number for this TCP connection.
INT rlTcpSessionStateEx	1.3.6.1.2.1.6.16.1.7	INTEGER	read-write	The state of this TCP connection. The only value which may be set by a management station is deleteTCB(12). Accordingly, it is appropriate for an agent to return a `badValue' response if a management station attempts to set this object to any other value. If a management station sets this object to the value deleteTCB(12), then this has the effect of deleting the TCB (as defined in RFC 793) of the corresponding connection on the managed node, resulting in immediate termination of the connection. As an implementation-specific option, a RST segment may be sent from the managed node to the other TCP endpoint (note however that RST segments are not sent reliably).
STR rlTcpSessionAppName	1.3.6.1.2.1.6.16.1.8	DisplayString	read-only	The name of the application for this TCP connection.

RFC description

Monitors TCP session information including local/remote addresses, ports, and connection state.

Start monitoring Marvell/RADLAN-based managed Ethernet switch, OEM switches (management-plane TCP session table) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RADLAN-TCPSESSIONS