2.4.12 Remote Network Monitoring (rmonmib)

NOTE: This charter is a snapshot of the 49th IETF Meeting in San Diego, California. It may now be out-of-date. Last Modified: 04-Dec-00


Andy Bierman <abierman@cisco.com>

Operations and Management Area Director(s):

Randy Bush <randy@psg.com>
Bert Wijnen <bwijnen@lucent.com>

Operations and Management Area Advisor:

Bert Wijnen <bwijnen@lucent.com>

Technical Advisor(s):

Steven Waldbusser <waldbusser@nextbeacon.com>

Mailing Lists:

General Discussion:rmonmib@ietf.org
To Subscribe: http://www.ietf.org/mailman/listinfo/rmonmib
Archive: www.ietf.org/mail-archive/working-groups/rmonmib/current/maillist.htm

Description of Working Group:

The RMON MIB Working Group is chartered to define a set of managed objects for remote monitoring of networks. These objects will be the minimum necessary to provide the ability to monitor multiple network layers of traffic in remote networks; providing fault, configuration, and performance management, and will be consistent with the SNMP framework and existing SNMP standards.

The following list of features for this RMON has been previously discussed in relation to existing RMON functionality and is included to focus these RMON activities. It is recognized that other issues may be considered and that certain of the following issues may not be part of the final specification(s):

1) Application Performance Measurement Monitoring support for the measurement and characterization of network application protocols, striving to measure an application user's experience as closely as possible. The RMON-2 MIB (RFC 2021) contains a protocol directory that will be used to identify applications for monitoring purposes.

While it is important to measure the performance of computing and network resources, these measurements don't give an insight to the actual service delivered to end-users. This end-user experience is best measured by the response-time and availability of application transactions because users interact directly with applications. This working group will create extensions to the RMON-2 MIB that will allow Application Performance Measurements to be retrieved with SNMP, no matter which technology is used to perform the measurements.

The goal of the working group is to provide a common framework and set of MIB objects, within the current RMON framework, for the identification and characterization of application responsiveness and availability, and the reporting of test results produced by such mechanisms. Common metrics and derived metrics will be characterized and reported in a manner consistent with the IP Performance Metrics Framework (RFC 2330).

It is an explicit non-goal of the working group to select one or more mechanisms as the preferred or standard RMON application performance measurement mechanism. However, it is possible that one or more standard mechanisms will be developed in the future, after significant implementation experience has been gained by the working group.

2) Differentiated Services Statistics Collection Monitoring support for Differentiated Services (DS) statistics collection, for the purpose of DS codepoint usage analysis and possibly other statistics related to DS deployment and performance tuning.

3) Interface TopN Reporting It is often too slow or difficult to determine the busiest ports in devices such as high port-density switches, using existing RMON mechanisms. New monitoring support is needed for quickly determining the most congested (highest utilized) physical ports and links in an RMON-capable device with multiple interfaces.

4) TR-RMON MIB Advancement The Token Ring RMON MIB (RFC 1513) is ready for standards track advancement. An interoperability and deployment survey has already been completed, but the MIB must be updated in SMIv2 format before it can be advanced on the standards track.

Goals and Milestones:



Activation of working group, call for suggested MIB modules.



Reach agreement on the functional scope of the charter, and finalize the document deliverables.



Submit initial Internet-Draft for Differentiated Services Monitoring



Submit initial Internet-Draft for Interface TopN Reporting



Submit initial Internet-Draft for TR-RMON MIB in SMIv2 Format



Begin Working Group Last Call for TR-RMON MIB in SMIv2 Format



Submit initial Internet-Draft for Application Performance Metrics



Begin Working Group Last Call for Differentiated Services Monitoring



Begin Working Group Last Call for Interface TopN Reporting



Submit Final Draft of TR-RMON MIB in SMIv2 Format



Begin Working Group Last Call for Application Performance Metrics



Submit Final Draft of Differentiated Services Monitoring to IESG for standards track action



Submit Final Draft of Interface TopN Reporting to IESG for standards track action

Nov 00


Submit Final Draft of Application Performance Metrics to IESG for standards track action


Request For Comments:






Remote Network Monitoring Management Information Base Version 2 using SMIv2



Remote Network Monitoring MIB Extensions for Switch Networks Version 1.0



Remote Network Monitoring Management Information Base



Remote Network Monitoring MIB Protocol Identifier Reference



Remote Network Monitoring MIB Protocol Identifier Macros

Current Meeting Report

OPS Area
RMONMIB WG Meeting Minutes
49th IETF
December 11 & 13, 2000
Minutes by Andy Bierman

Review Material

(A) draft-bierman-rmonmib-vds-mib-01.txt
(B) draft-bullard-pcap-00.txt
(C) draft-ietf-rmonmib-apm-mib-02.txt
(D) draft-ietf-rmonmib-appverbs-01.txt
(E) draft-ietf-rmonmib-dsmon-mib-03.txt
(F) draft-ietf-rmonmib-hcrmon-06.txt
(G) draft-ietf-rmonmib-iftopn-mib-03.txt
(H) draft-ietf-rmonmib-tokenring-00.txt
(I) draft-ietf-rmonmib-tpm-mib-01.txt
(J) draft-kalbfleisch-sspmmib-01.txt


1) WG Status
- new RFCs
- RMON Protocol Identifier Reference (2895)
- RMON Protocol Identifier Macros (2896)
- HC-RMON MIB documentation update (F)
2) Transport Performance Metrics MIB (I)
3) Application Performance Measurement MIB (C)
4) RMON Extensions for Identifying Application Protocol Verbs (D)
5) Token Ring Extensions to the RMON MIB (H)
6) RMON Extensions for Differentiated Services (E)
7) RMON Extensions for Interface Parameters Monitoring (G)
8) Remote Packet Capture (B)
9) Definition of Managed Objects for Synthetic Sources for
Performance Monitoring Algorithms. (J)
10) RMON Extensions for Virtual Data Sources (A)


1) Status of Internet Drafts under IESG review

The WG Chair presented a status summary of the I-Ds before the WG. All HC-RMON issues have now been resolved, and the HC-RMON MIB (F) will soon be completed.

The RMON1-HC MIB and the RMON2-HC MIB will be terminated as Internet Drafts. The MIB modules within these documents will be extracted and archived at an 'official' WEB site, (such as the RFC Editor pages site). The HC-RMON MIB will contain pointers to these updated MIB modules.

Refer to the slides for more details on these issues.


The latest Transport Performance Measurement MIB (I) was presented and discussed. The highlights of the discussion are listed here. Refer to the TPM slides for details on the presentation.

The purpose of TPM is troubleshooting. The expected usage: APM reports that a transaction is out of scope (e.g. delay too long or service unavailable). TPM provides the drilldown into a (potentially) complex application transaction by collecting transport metrics relevant to the particular application being measured.

The group discussed streaming protocols and how APM/TPM handles some applications of this type. Metrics such as message jitter and stream jitter are difficult to describe in a generic way (for all applications).

There is also concern that the APM and TPM metrics need to be defined in a rigorous manner, consistent with the existing set of IPPM metric definitions (perhaps by the IPPM WG instead of the RMONMIB WG). The specification of APM and TPM metrics remains an open issue.

Changes expected in the next revision of the TPM MIB:
- The metric definitions are still missing. They must be added soon, or perhaps defined by the IPPM WG
- The 'study capabilities' MIB objects from the PM-CAPS MIB (now defunct) need to be adapted, and moved to this MIB.
- Any INDEX linkages between APM and TPM or SPPM and TPM need to be finalized


The latest Application Performance Metrics MIB (C) was presented and discussed. The highlights of the discussion are listed here. Refer to the APM slides for details on the presentation.

The WG discussed the notion of user-defined applications, and their representation in the apmUserDefinedAppTable and/or the protocolDirTable from the RMON2-MIB module. It is unlikely that an application developer will be able to support user-defined applications in a vendor-independent manner, since there are no real guidelines for populating values of the apmUserDefinedAppApplication object for a given application.

This new feature is in conflict with the PD user-extensibility design, as specified in RFC 2895. Protocols which cannot be identified within the 4-octet-per-layer scheme are given static assignments by the WG, within the 'ianaAssigned' base layer number space.

The WG also discussed the behavior of an APM agent for measurements of the availability metric for streaming protocols. It is difficult to describe the criteria for distinguishing between degraded service and unavailable service, in a generic manner. The APM algorithm for measuring availability needs to be specified in more detail. Currently, there is no notion of measuring degraded service at a given moment in time. The availability 'singleton' metric is a '0' or '100' score, with no possible values in between. The WG discussed how this measurement could be achieved and conveyed in the MIB. There was no group consensus that a new 'degraded service' metric, or changes to the existing availability metric, are desirable or achievable. The issue will be discussed further on the mailing list.


The 'Protocol Directory Extensions for Application Verbs' (D) draft was presented and then discussed. Only minor changes and corrections were made to the latest draft. There were no comments on this draft. The WG mailing will be used for comments and suggestions for application verb additions, The next version of this document will contain more application verb definitions.


The group briefly discussed the Token Ring RMON MIB I-D (H), which is needed for the TR-RMON MIB to advance from Proposed to Draft Standard (RFC 1513 is in SMIv1 format).

The WG Editor will make some minor changes, and the new draft will then be subject to a WG Last Call.


The group discussed the latest version of the Diffserv Monitoring MIB (E), and mailing list comments related to this MIB. The draft will be updated and subject to a 2 week WG Last Call.

A summary of the recommendations reached by group consensus is listed here. Refer to the slides for more details.

- a DSMON capabilities scalar object of type BITS will be added, similar to the probeCapabilities object in RFC 2021.
- the dsmonPdistTimeMark TimeFilter INDEX in the dsmonPdistStatsEntry will not be removed
- the INDEX order of the dsmonPdistStatsEntry will not be changed. [Ed. note - actually, Lester is right; the order of the protocolDirLocalIndex and dsmonAggGroupIndex INDEX components should be reversed. The current ordering forces the NMS to retrieve virtually the entire table to determine which protocols are present on an interface, which share the same aggregation group ID. The instance fan-out will be at the protocol INDEX, not the aggGroup INDEX.]
- smilint errors
- dsmonHostAddress must have SIZE restriction
This error exists in RMON2 as well. A range of (0..65535) will be added to remove the error without changing the semantics of the object at all.
- some identifier names longer than 32 characters
These names will be shortened in the following manner:
- dsmonPdistControl* -> dsmonPdistCtl*
- dsmonPdistTopNControl* -> dsmonPdistTopNCtl*
- dsmonPdistTopNControlGeneratedReports -> dsmonPdistTopNCtlGeneratedReprts
- dsmonHosttControl* -> dsmonHosttCtl*
- dsmonHostTopNControl* -> dsmonHostTopNCtl*


The Interface TopN MIB (G) was presented and then discussed.
There was some discussion clarifying the normalization mechanisms. There are some smilint errors (refer to the slides) that will be addressed by the author. A new version of the draft will be posted soon and subject to a 2 week WG Last Call.

8) Remote Packet Capture

A proposal for a new approach to packet capture (B) was presented and then discussed. A probe, router, or switch would save a timestamp for each packet as it was received on the monitored interface. A new packet is created, containing the desired packet slice to be captured, and a header is prepended which contains packet info such as the real packet length, ifIndex of the ingress interface, the ingress timestamp, etc. This new packet is then sent to a pre-configured IP host for collection and analysis of the captured packet slice. Refer to the slides for details.

The group did not seem eager to take on this work at this time, although this work could be viewed as an extension of the SMON portCopyTable. This proposal should be discussed further on the WG mailing list to determine interest and feasibility.


The SSPM Framework draft (J) was not discussed at this meeting, although a new version has been published. The WG is waiting until APM and TPM are more stable before officially starting work on configuration of synthetic traffic sources for performance management. Hopefully, this work can begin soon after IETF #50.


The Virtual Data Source MIB (A) was not discussed at this meeting. A new version has been published, containing minor enhancements and corrections. The WG will possibly consider this document for future work, after the current work is substantially completed.


The Performance Metrics Capabilities document has been withdrawn, and was not discussed at this meeting. The dynamic and variable nature of the PM Study is not applicable to APM. This functionality will be moved (in some form) to the TPM MIB.

12) SMON MIB Advancement

This topic should have been on the agenda, but was missed. The WG will start the required tasks needed to advance the SMON MIB (RFC 2613) from Proposed to Draft Standard. Commercial implementations are already available, and this MIB is eligible for advancement. An announcement will be sent to the WG mailing list soon.


Synthetic Sources for Performance Monitoring
Transport Performance Metric MIB
APM MIB Update