RMONitor-MIB

All MIBs › RMONitor-MIB

Category: Network Monitoring (RMON), RMON

Description: Implements RMON remote network monitoring objects for traffic statistics, history, alarms, and events.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is RMONitor-MIB?

RMONitor-MIB is a legacy, unbranded proprietary MIB (registered under enterprises(2), with no vendor identified in its source) implementing an early RMON-style traffic-monitoring/security framework — despite its RMON-suggestive name, it is not the official IETF RMON MIB (RFC 1271/2819). Its objects cover an SNMP-community authentication table (type of access, action on match), a subscription table (IP address, community, action), an authentication-failure table (index, IP address, community), and protocol-distribution control/data tables tracking network-layer protocol mix on a monitored data source. As a security/performance MIB it lets an administrator audit which communities are authorized to access the agent and review protocol-distribution statistics for a monitored segment. It is deployed on this vendor's legacy network-monitoring probe. Engineers searching for an "RMONitor-MIB RFC" should note this module is not the official IETF RMON MIB (RFC 1271/RFC 2819) despite the name resemblance — it is an unrelated legacy proprietary module implementing similar traffic-monitoring concepts under a non-standard enterprise OID.

IPNetwork Monitor allows you to monitor SNMP objects defined in RMONitor-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Legacy network-monitoring probe (unbranded, enterprise OID 2)

Monitoring Examples

An administrator reviews authFailTable to identify repeated unauthorized SNMP access attempts against a legacy network-monitoring probe implementing this early RMON-style security framework.

What Can Be Monitored

SNMP community authentication/failure log
protocol-distribution statistics

Imported Objects

From RFC1155-SMI

Counter
IpAddress
OBJECT-TYPE
TimeTicks
enterprises

From SNMPv2-TC

DisplayString

OIDs

OID symbolic	OID numeric	Type	Access	Description
mib_2	1.3.6.1.2.1
ibm	1.3.6.1.4.1.2
ibmProd	1.3.6.1.4.1.2.6
rmonitor	1.3.6.1.4.1.2.6.45
security	1.3.6.1.4.1.2.6.45.1
authTable	1.3.6.1.4.1.2.6.45.1.1		not-accessible	The entries for the authentication table.
authEntry	1.3.6.1.4.1.2.6.45.1.1.1		not-accessible	The entries for authentication table.
OCT authCommunity	1.3.6.1.4.1.2.6.45.1.1.1.1	OCTET STRING	read-write	The community string identifying an authentic/authorized manager.
INT authTypeAccess	1.3.6.1.4.1.2.6.45.1.1.1.2	INTEGER	read-write	The type of access allowed for the community string identifying an authentic/authorized manager.
INT authActions	1.3.6.1.4.1.2.6.45.1.1.1.3	INTEGER	read-write	The action on a row of the authentication table.
subscriptTable	1.3.6.1.4.1.2.6.45.1.2		read-write	The entries for the subscription table.
subscriptEntry	1.3.6.1.4.1.2.6.45.1.2.1		read-write	The entries for subscription table.
IP subscriptIpAddress	1.3.6.1.4.1.2.6.45.1.2.1.1	IpAddress	read-write	The IP address of the manager subscribing to traps.
STR subscriptCommunity	1.3.6.1.4.1.2.6.45.1.2.1.2	DisplayString	read-write	The community string to be used in trap PDUs sent to the subscribing manager.
INT subscriptActions	1.3.6.1.4.1.2.6.45.1.2.1.3	INTEGER	read-write	The action on a row of the subscription table.
authFailTable	1.3.6.1.4.1.2.6.45.1.3		read-write	The entries for the authentication failure table.
authFailEntry	1.3.6.1.4.1.2.6.45.1.3.1		read-write	The entries for authentication failure table.
INT authFailIndex	1.3.6.1.4.1.2.6.45.1.3.1.1	INTEGER	read-only	The index for this entry in the authentication failure table.
IP authFailIPAddress	1.3.6.1.4.1.2.6.45.1.3.1.2	IpAddress	read-only	The IP address of the manager that sent the SNMP request that caused the authentication failure.
STR authFailCommunity	1.3.6.1.4.1.2.6.45.1.3.1.3	DisplayString	read-only	The community string used in the SNMP request that caused the authentication failure.
protocols	1.3.6.1.4.1.2.6.45.2
protocolDistControlTable	1.3.6.1.4.1.2.6.45.2.1		not-accessible
protocolDistControlEntry	1.3.6.1.4.1.2.6.45.2.1.1		not-accessible
INT protocolDistControlIndex	1.3.6.1.4.1.2.6.45.2.1.1.1	INTEGER	read-only
OID protocolDistControlDataSource	1.3.6.1.4.1.2.6.45.2.1.1.2	OBJECT IDENTIFIER	read-write	This object identifies the source of the data for which protocol distribution data is collected. This source can be any interface on this device. In order to identify a particular interface, this object shall identify the instance of the ifIndex object, for the desired interface. For example, if an entry were to receive data from interface #1, this object would be set to ifIndex.1. This object may not be modified if the associated protocolDistControlStatus object is equal to valid(1).
TIK protocolDistControlLastDeleteTime	1.3.6.1.4.1.2.6.45.2.1.1.3	TimeTicks	read-only
STR protocolDistControlOwner	1.3.6.1.4.1.2.6.45.2.1.1.4	OwnerString	read-write	The entity that created this entry in the protocol distribution control table, and is therefore using the resources associated with it.
ENT protocolDistControlStatus	1.3.6.1.4.1.2.6.45.2.1.1.5	EntryStatus	read-write	The status of this protocol distribution control entry.
protocolDistTable	1.3.6.1.4.1.2.6.45.2.2		not-accessible	A table of protocol types and associated counts including entries for each different protocol seen by the monitor. Note that protocols are identified by examining the 'ethertype' field of DIX Ethernet frames, the SNAP protocol on IEEE 802 network frames, or the DSAP field of the LLC protocol, also found on IEEE 802 networks.
protocolDistEntry	1.3.6.1.4.1.2.6.45.2.2.1		not-accessible	A set of counts maintained for each different protocol seen by the agent.
INT protocolDistIndex	1.3.6.1.4.1.2.6.45.2.2.1.1	INTEGER	read-only	A value uniquely identifying this protocol distribution control table entry.
OCT protocolDistEthertype	1.3.6.1.4.1.2.6.45.2.2.1.2	OCTET STRING	read-only	A protocol type identified by the 'ethertype' field found in DIX Ethernet, or in the SNAP protocol on IEEE 802 networks or the DSAP protocol on 802.5 networks.
CTR protocolDistPkts	1.3.6.1.4.1.2.6.45.2.2.1.3	Counter	read-only	A count of the number of packets seen using the protocol identified by the corresponding protocolDistEthertype.
CTR protocolDistOctets	1.3.6.1.4.1.2.6.45.2.2.1.4	Counter	read-only	A count of the number of octets in packets seen using the protocol identified by the corresponding protocolDistEthertype.

RFC description

IBM RMONitor agent MIB for security authentication and community access management on OS/2 platforms.

Start monitoring legacy network-monitoring probe, unbranded enterprise OID 2 (community authentication/protocol distribution) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download RMONitor-MIB

What Is RMONitor-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description