SNMP counters for "packets rate" / "throughput" show incorrect values - .1.3.6.1.4.1.2620.1.1.25.9 and .1.3.6.1.4.1.2620.1.1.25.16

Support Center > Search Results > SecureKnowledge Details

Solution ID	sk104882
Product	Security Gateway, ClusterXL, Cluster - 3rd party, VSX
Version	R75, R76, R77, R77.10, R77.20, R77.30
Platform / Model	All
Date Created	23-Feb-2015
Last Modified	10-May-2016

Symptoms

The following SNMP counters on Security Gateway R77.10 and above always show "0" value for dropped packets:
- .1.3.6.1.4.1.2620.1.1.25.9 (iso.org.dod.internet.private.enterprises.checkpoint.products.fw.fwPolicyStat.fwDroppedBytesTotalRate)
- .1.3.6.1.4.1.2620.1.1.25.16 (.iso.org.dod.internet.private.enterprises.checkpoint.products.fw.fwPolicyStat.fwDroppedTotalRate)
SecureXL drops that appear in the output of 'fwaccel stats -d' command, are not counted in SNMP total dropped packets counters:
- .1.3.6.1.4.1.2620.1.1.25.9 (iso.org.dod.internet.private.enterprises.checkpoint.products.fw.fwPolicyStat.fwDroppedBytesTotalRate)
- .1.3.6.1.4.1.2620.1.1.25.16 (.iso.org.dod.internet.private.enterprises.checkpoint.products.fw.fwPolicyStat.fwDroppedTotalRate)

Examples from VSX:

[Expert@HostName:0]# snmpwalk -n ctxname_vsid1 -v3 -l authNoPriv -u UserName -a MD5 -A Password localhost .1.3.6.1.4.1.2620.1.1.25.9
SNMPv2-SMI::enterprises.2620.1.1.25.9.0 = STRING: "0"

[Expert@HostName:0]# snmpwalk -n ctxname_vsid1 -v3 -l authNoPriv -u UserName -a MD5 -A Password localhost .1.3.6.1.4.1.2620.1.1.25.16
SNMPv2-SMI::enterprises.2620.1.1.25.16.0 = STRING: "0"

Cause

Issue #1 (01583464): Incorrect definition of the involved SNMP counters - these counters hold total values not rate values.
Issue #2 (01583510): In R77.10 and above, the way these counters are working was changed.
Issue #3 (01584275): SecureXL drop statistics is not collected correctly for SNMP counters.

Solution

Note: To view this solution you need to Sign In .