RMON Commands

This chapter contains the following sections:

clear rmon statistics

To clear all Remote Monitoring (RMON) statistics or to clear the RMON statistics for a specific interface or for a range of interfaces, use the clear rmon statistics Privileged EXEC mode command.

Syntax

clear rmon statistics [interfaces interface-id]

Parameters

interfaces interface-id—(Optional) Specifies an interface or a list of interfaces to be sampled.

Command Mode

Privileged EXEC mode

Example

The following example clears the RMON statistics for port 1:

switchxxxxxx# clear rmon statistics interfaces gi1

rmon alarm

To configure a RMON alarm, use the rmon alarm Global Configuration mode command.

To delete a RMON alarm, use the no form of this command.

Syntax

rmon alarm index interface interface-id {variableinterval {absolute | delta}} rising rising-threshold rising-event falling falling-threshold falling-event startup {rising | rising-falling | falling} [owner NAME]

no rmon alarm index

Parameters

index—Alarm index number. (Range: 1 to 65535)

interface interface-id—Specifies the interface to be sampled.

variable—Specifies the MIB object to monitor. The possible values are:

  • broadcast-pkts—Broadcast packets.

  • collisions—Collision.

  • crc-align-errors—CRC alignment error.

  • drop-events—Total number of events received in which the packets were dropped.

  • fragments—Total number of packet fragment.

  • jabbers—Total number of packet jabber.

  • multicast-pkts—Multicast packets.

  • octets—Octets.

  • oversize-pkts—Number of oversized packets.

  • pkts—Number of packets.

  • pkts1024to1518octets—Number of packets size 1024 to 1518 octets.

  • pkts512to1023octets—Number of packets size 512 to 1023 octets.

  • pkts256to511octets—Number of packets size 256 to 511 octets.

  • pkts128to255octets—Number of packets size 128 to 255 octets.

  • pkts65to127octets—Number of packets size 65 to 127 octets.

  • pkts64octets—Number of packets size 64 octets.

  • undersize-pkts—Number of undersized packets.

    interval—The interval in seconds during which the data is sampled and compared with rising and falling thresholds. (Range: 1 to 2147483647)

    {absolute | delta}—Specifies the method used for sampling the selected variable and calculating the value to be compared against the thresholds. The possible values are:

  • absolute—The selected variable value is compared directly with the thresholds at the end of the sampling interval.

  • delta—The selected variable value of the last sample is subtracted from the current value, and the difference is compared with the thresholds.

    rising-threshold—The rising threshold value. (Range: 0 to 2147483647)

    rising-event—The index of the event triggered when a rising threshold is crossed. (Range: 0 to 65535)

    falling-threshold—The falling counter value that triggers the falling threshold alarm. (Range: 0 to 2147483647)

    falling-event—The index of the event triggered when a falling threshold is crossed. (Range: 0 to 65535)

    startup {rising | rising-falling | falling}—Specifies the alarm that may be sent when this entry becomes valid. The possible values are:

  • rising—A single rising alarm is generated if the first sample (after this entry becomes valid) is greater than or equal to the rising threshold.

  • rising-falling—A single rising alarm is generated if the first sample (after this entry becomes valid) is greater than or equal to the rising threshold. If the first sample (after this entry becomes valid) is less than or equal to the falling threshold, a single falling alarm is generated.

  • falling—A single falling alarm is generated if the first sample (after this entry becomes valid) is less than or equal to the falling threshold.

    owner NAME—(Optional) Specifies the name of the user or network management system that receives the RMON alarm.

Default Configuration

The default method type is absolute.

The default startup direction is rising-falling.

If the owner name is not specified, the default is an empty string.

Command Mode

Global Configuration mode

Example

switchxxxxxx(config)# rmon alarm 1000 interface gi11 collisions 10 delta rising 100 1 falling 20 2 startup rising owner public

rmon event

To configure a RMON event, use the rmon event Global Configuration mode command.

To delete a RMON event, use the no form of this command.

Syntax

rmon event index {log | trap COMMUNITY | log trap COMMUNITY} [description DESCRIPTION] [owner NAME]

no rmon event index

Parameters

index—The event index. (Range: 1 to 65535)

log—Specifies that a notification entry is generated in the log table by the switch for this event.

trap COMMUNITY—Specifies that an SNMP trap community is sent to one or more management stations by the switch for this event.

log trap COMMUNITY—Specifies that an entry is generated in the log table and an SNMP trap is sent to one or more management stations by the switch for this event.

description DESCRIPTION—(Optional) Specifies the comment describing this event. (Length: 0 to 127 characters)

owner NAME—(Optional) Specifies the name of the person who configured this event.

Default Configuration

If the owner name is not specified, the default is an empty string.

Command Mode

Global Configuration mode

Example

The following example configures an event identified as index 10, for which the switch generates a notification in the log table:

switchxxxxxx(config)# rmon event 10 log

rmon history

To configure a RMON MIB history on an Ethernet interface, use the rmon history Global Configuration command.

To remove a RMON history, use the no form of this command.

Syntax

rmon history index interface interface-id [buckets bucket-number] [interval seconds | owner NAME]

no rmon history index

Parameters

index—The history index. (Range: 1 to 65535)

interface interface-id—Specifies the interface to be sampled.

buckets bucket-number—(Optional) Specifies the maximum number of buckets desired for the RMON collection history. (Range: 1 to 50)

interval seconds—(Optional) Specifies the interval in seconds during which the data is sampled and compared with the rising and falling thresholds. (Range: 1 to 3600)

owner NAME—(Optional) Specifies the name of the person who configured this history.

Default Configuration

The default bucket value is 50.

The default interval value is 180 seconds.

Command Mode

Global Configuration mode

Example

switchxxxxxx(config)# rmon history 1 interface fa11 buckets 50 interval 300 owner john

show rmon alarm

To display information for a specific RMON alarm or for all RMON alarms, use the show rmon alarm Privileged EXEC mode command.

Syntax

show rmon alarm {all | index}

Parameters

all—Displays all alarms.

index—Information for a specific RMON alarm. (Range: 1 to 65535)

Command Mode

Privileged EXEC mode

Example

The following example displays information of the RMON alarm 1:

switchxxxxxx# show rmon alarm 1
Alarm 1
-------
OID: 1.3.6.1.2.1.2.2.1.10.1
Last sample Value: 878128
Interval: 30
Sample Type: delta
Startup Alarm: rising
Rising Threshold: 8700000
Falling Threshold: 78
Rising Event: 1
Falling Event: 1
Owner: CLI

The following table describes the significant fields shown in the example:

Field

Description

Alarm

Alarm index.

OID

Monitored variable OID.

Last Sample Value

Value of the statistic during the last sampling period. For example, if the sample type is delta, this value is the difference between the samples at the beginning and end of the period. If the sample type is absolute, this value is the sampled value at the end of the period.

Interval

Interval in seconds over which the data is sampled and compared with the rising and falling thresholds.

Sample Type

Method of sampling the variable and calculating the value compared against the thresholds. If the value is absolute, the variable value is compared directly with the thresholds at the end of the sampling interval. If the value is delta, the variable value at the last sample is subtracted from the current value, and the difference is compared with the thresholds.

Startup Alarm

Alarm that is sent when this entry is first set. If the first sample is greater than or equal to the rising threshold, and startup alarm is equal to rising or rising-falling, then a single rising alarm is generated. If the first sample is less than or equal to the falling threshold, and startup alarm is equal falling or rising-falling, then a single falling alarm is generated.

Rising Threshold

Sampled statistic rising threshold. When the current sampled value is greater than or equal to this threshold, and the value at the last sampling interval is less than this threshold, a single event is generated.

Falling Threshold

Sampled statistic falling threshold. When the current sampled value is less than or equal to this threshold, and the value at the last sampling interval is greater than this threshold, a single event is generated.

Rising Event

Event index used when a rising threshold is crossed.

Falling Event

Event index used when a falling threshold is crossed.

Owner

Entity that configured this entry.

show rmon event

To show information for a specific RMON event or for all entries in the RMON event table, use the show rmon event Privileged EXEC mode command.

Syntax

show rmon event { all | index}

Parameters

all—Displays all RMON events.

index—The RMON event index to be displayed. (Range: 1 to 65535)

Command Mode

Privileged EXEC mode

Example

The following example displays all entries in the RMON event table:

switchxxxxxx# show rmon event all
Rmon Event Index       : 10
Rmon Event Type        : Log
Rmon Event Community   :
Rmon Event Description :
Rmon Event Last Sent   :  (0) 0:00:00.00
Rmon Event Owner       :

The following table describes significant fields shown in the example:

Field

Description

Index

Unique index that identifies this event.

Type

Type of notification that the device generates about this event. The available values are none, log, trap, and log-trap. In the case of log, an entry is made in the log table for each event. In the case of trap, a SNMP trap is sent to one or more management stations.

Community

If a SNMP trap is to be sent, it is sent with the SNMP community string specified by this octet string.

Description

Comment describing this event.

Last Sent

The time that this entry last generated an event. If this entry has not generated any events, this value is zero.

Owner

The entity configured this event.

show rmon event log

To show information for RMON events in the RMON log table, use the show rmon event log Privileged EXEC mode command.

Syntax

show rmon event [index] log

Parameters

index—(Optional) The RMON event index. (Range: 1 to 65535)

Command Mode

Privileged EXEC mode

Example

The following example shows information for the event 1 in the RMON log table:

switchxxxxxx# show rmon event 1 log
Maximum table size: 500 (800 after reset)
Event   Description            Time
-----   --------------         -------------------
1       MIB Var.:              Jan 18 2006 23:48:19
        1.3.6.1.2.1.2.2.1.10.
        53, Delta, Rising,
        Actual Val: 800,
        Thres.Set: 100,
        Interval (sec):1

show rmon history

To show information for all RMON histories or for a specific RMON history, use the show rmon history Privileged EXEC mode command.

Syntax

show rmon history {all | index } [statistic]

Parameters

all—Displays all histories.

index—The set of samples. (Range: 1 to 65535)

statistic—(Optional) Displays the statistics for a specific RMON history.

Command Mode

Privileged EXEC mode

Example

The following example displays all RMON histories:

switchxxxxxx# show rmon history all
Rmon History Index       : 1
Rmon Collection Interface: 11
Rmon History Bucket      : 60
Rmon history Interval    : 300
Rmon History Owner       : john

The following table describes the significant fields shown in the example:

Field

Description

Index

The history index.

Collection Interface

The interface to be sampled.

Bucket

The maximum number of buckets desired for the RMON collection history group of statistics.

Interval

The interval in seconds during which the data is sampled and compared with the rising and falling thresholds.

Owner

The name of the person who configured this history.

show rmon statistics interfaces

To show the RMON statistics for all Ethernet interfaces or a specific Ethernet interface, use the show rmon statistics interfaces Privileged EXEC mode command.

Syntax

show rmon statistics interfaces interface-id

Parameters

interface-id—An interface ID or a list of interface IDs. The interface can be one of these types: Ethernet port or port channel.

Command Mode

Privileged EXEC mode

Example

The following example displays the RMON statistics for fa1:

switchxxxxxx# show rmon statistics interfaces gi1
==== Port gi1 =============================
etherStatsDropEvents            : 0
etherStatsOctets                : 178566
etherStatsPkts                  : 2261
etherStatsBroadcastPkts         : 299
etherStatsMulticastPkts         : 147
etherStatsCRCAlignErrors        : 0
etherStatsUnderSizePkts         : 0
etherStatsOverSizePkts          : 0
etherStatsFragments             : 0
etherStatsJabbers               : 0
etherStatsCollisions            : 0
etherStatsPkts64Octets          : 1848
etherStatsPkts65to127Octets     : 218
etherStatsPkts128to255Octets    : 170
etherStatsPkts256to511Octets    : 25
etherStatsPkts512to1023Octets   : 0
etherStatsPkts1024to1518Octets  : 0

The following table describes the significant fields shown in the example:

Field

Description

Dropped Events

Total number of events in which packets were dropped by the probe due to lack of resources. Note that this number is not necessarily the number of packets dropped. It is the number of times that this condition was detected.

Octets

Total number of octets of data (including those in bad packets) received on the network (excluding framing bits but including FCS octets).

Packets

Total number of packets (including bad packets, broadcast packets, and multicast packets) received.

Broadcast Packets

Total number of good packets received and directed to the broadcast address. This does not include multicast packets.

Multicast Packets

Total number of good packets received and directed to a multicast address. This number does not include packets directed to the broadcast address.

CRC Align Errors

Total number of packets received with a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but with either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error).

Undersize Packets

Total number of packets received, less than 64 octets long (excluding framing bits, but including FCS octets) and otherwise well formed.

Oversize Packets

Total number of packets received, longer than 1518 octets (excluding framing bits, but including FCS octets) and otherwise well formed.

Fragments

Total number of packets received, less than 64 octets in length (excluding framing bits but including FCS octets) and either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error).

Jabbers

Total number of packets received, longer than 1518 octets (excluding framing bits, but including FCS octets), and either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error).

Collisions

Best estimate of the total number of collisions on this Ethernet segment.

64 Octets

Total number of packets (including bad packets) received that are 64 octets in length (excluding framing bits but including FCS octets).

65 to 127 Octets

Total number of packets (including bad packets) received that are between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets).

128 to 255 Octets

Total number of packets (including bad packets) received that are between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).

256 to 511 Octets

Total number of packets (including bad packets) received that are between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).

512 to 1023 Octets

Total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets.

1024 to 1518 Octets

Total number of packets (including bad packets) received that were between 1024 octets and 1518 octets in length inclusive (excluding framing bits but including FCS octets).