sFlow.org Peter Phaal http://www.sFlow.org/ InMon Corp. info@sflow.org Neil McKee InMon Corp. February 2015 sFlow Host TCP/IP Counters Copyright Notice Copyright (C) sFlow.org (2015). All Rights Reserved. Abstract This memo describes sFlow version 5 structures for exporting host IP, ICMP, UDP and TCP counters. Table of Contents 1. Overview ...................................................... 1 2. sFlow Datagram Extension ...................................... 1 3. References .................................................... 3 4. Author's Addresses ............................................ 4 1. Overview This document describes additional structures that allow an sFlow agent to export information relating to Host IP, ICMP, TCP and UDP performance based on MIB-II [1]. sFlow version 5 is an extensible protocol that allows the addition of new data structures without impacting existing collectors. This document does not change the sFlow version 5 protocol [2], it simply defines an additional, optional, data structure that a host device can use to report IP related metrics. 2. sFlow Datagram Extension The sFlow version 5 specification already defines structures for reporting MIB-II ifTable statistics. This document defines structures for reporting statistics from the IP, ICMP, TCP and UDP groups. This information is particularly relevant to hosts exporting sFlow Host Structures [3]. FINAL sFlow.org [Page 1] FINAL sFlow Host TCP/IP Counters February 2015 /* IP Group - see MIB-II */ /* opaque = counter_data; enterprise = 0; format = 2007 */ struct mib2_ip_group { unsigned int ipForwarding; unsigned int ipDefaultTTL; unsigned int ipInReceives; unsigned int ipInHdrErrors; unsigned int ipInAddrErrors; unsigned int ipForwDatagrams; unsigned int ipInUnknownProtos; unsigned int ipInDiscards; unsigned int ipInDelivers; unsigned int ipOutRequests; unsigned int ipOutDiscards; unsigned int ipOutNoRoutes; unsigned int ipReasmTimeout; unsigned int ipReasmReqds; unsigned int ipReasmOKs; unsigned int ipReasmFails; unsigned int ipFragOKs; unsigned int ipFragFails; unsigned int ipFragCreates; } /* ICMP Group - see MIB-II */ /* opaque = counter_data; enterprise = 0; format = 2008 */ struct mib2_icmp_group { unsigned int icmpInMsgs; unsigned int icmpInErrors; unsigned int icmpInDestUnreachs; unsigned int icmpInTimeExcds; unsigned int icmpInParamProbs; unsigned int icmpInSrcQuenchs; unsigned int icmpInRedirects; unsigned int icmpInEchos; unsigned int icmpInEchoReps; unsigned int icmpInTimestamps; unsigned int icmpInAddrMasks; unsigned int icmpInAddrMaskReps; unsigned int icmpOutMsgs; unsigned int icmpOutErrors; unsigned int icmpOutDestUnreachs; unsigned int icmpOutTimeExcds; unsigned int icmpOutParamProbs; unsigned int icmpOutSrcQuenchs; unsigned int icmpOutRedirects; FINAL sFlow.org [Page 2] FINAL sFlow Host TCP/IP Counters February 2015 unsigned int icmpOutEchos; unsigned int icmpOutEchoReps; unsigned int icmpOutTimestamps; unsigned int icmpOutTimestampReps; unsigned int icmpOutAddrMasks; unsigned int icmpOutAddrMaskReps; } /* TCP Group - see MIB-II */ /* opaque = counter_data; enterprise = 0; format = 2009 */ struct mib2_tcp_group { unsigned int tcpRtoAlgorithm; unsigned int tcpRtoMin; unsigned int tcpRtoMax; unsigned int tcpMaxConn; unsigned int tcpActiveOpens; unsigned int tcpPassiveOpens; unsigned int tcpAttemptFails; unsigned int tcpEstabResets; unsigned int tcpCurrEstab; unsigned int tcpInSegs; unsigned int tcpOutSegs; unsigned int tcpRetransSegs; unsigned int tcpInErrs; unsigned int tcpOutRsts; unsigned int tcpInCsumErrs; } /* UDP Group - see MIB-II */ /* opaque = counter_data; enterprise = 0; format = 2010 */ struct mib2_udp_group { unsigned int udpInDatagrams; unsigned int udpNoPorts; unsigned int udpInErrors; unsigned int udpOutDatagrams; unsigned int udpRcvbufErrors; unsigned int udpSndbufErrors; unsigned int udpInCsumErrors; } 3. References [1] McCloghrie, K. and Rose, M. "Management Information Base for Net- work Management of TCP/IP-based internets: MIB-II", RFC 1213, March 1991 FINAL sFlow.org [Page 3] FINAL sFlow Host TCP/IP Counters February 2015 [2] Phaal, P. and Lavine, M., "sFlow Version 5", http://www.sflow.org/sflow_version_5.txt, July 2006 [3] Phaal, P. and Jordan, R., "sFlow Host Structures", http://www.sflow.org/sflow_host.txt July 2010 4. Author's Address Peter Phaal InMon Corp. 1 Sansome Street, 35th Floor San Francisco, CA 94104 Phone: (415) 946-8901 EMail: peter.phaal@inmon.com Neil McKee InMon Corp. 1 Sansome Street, 35th Floor San Francisco, CA 94104 Phone: (415) 946-8902 EMail: neil.mckee@inmon.com FINAL sFlow.org [Page 4]