GENWiki

Premier IT Outsourcing and Support Services within the UK

User Tools

Site Tools


rfc:rfc3729

Network Working Group S. Waldbusser Request for Comments: 3729 March 2004 Category: Standards Track

              Application Performance Measurement MIB

Status of this Memo

 This document specifies an Internet standards track protocol for the
 Internet community, and requests discussion and suggestions for
 improvements.  Please refer to the current edition of the "Internet
 Official Protocol Standards" (STD 1) for the standardization state
 and status of this protocol.  Distribution of this memo is unlimited.

Copyright Notice

 Copyright (C) The Internet Society (2004).  All Rights Reserved.

Abstract

 This memo defines a portion of the Management Information Base (MIB)
 for use with network management protocols in TCP/IP-based internets.
 In particular, it defines objects for measuring the application
 performance as experienced by end-users.

Table of Contents

 1.  The Internet-Standard Management Framework . . . . . . . . . .  2
 2.  Overview . . . . . . . . . . . . . . . . . . . . . . . . . . .  2
     2.1.  Report Aggregation . . . . . . . . . . . . . . . . . . .  4
     2.2.  AppLocalIndex Linkages . . . . . . . . . . . . . . . . .  8
     2.3.  Measurement Methodology. . . . . . . . . . . . . . . . . 10
     2.4.  Instrumentation Architectures. . . . . . . . . . . . . . 10
           2.4.1.  Application Directory Caching. . . . . . . . . . 10
           2.4.2.  Push Model . . . . . . . . . . . . . . . . . . . 11
     2.5.  Structure of this MIB Module . . . . . . . . . . . . . . 12
           2.5.1.  The APM Application Directory Group. . . . . . . 13
           2.5.2.  The APM User Defined Applications Group. . . . . 13
           2.5.3.  The APM Report Group . . . . . . . . . . . . . . 13
           2.5.4.  The APM Transaction Group. . . . . . . . . . . . 13
           2.5.5.  The APM Exception Group. . . . . . . . . . . . . 14
           2.5.6.  The APM Notification Group . . . . . . . . . . . 14
 3.  Definitions. . . . . . . . . . . . . . . . . . . . . . . . . . 14
 4.  Security Considerations. . . . . . . . . . . . . . . . . . . . 58
 5.  References . . . . . . . . . . . . . . . . . . . . . . . . . . 60
     5.1.  Normative References . . . . . . . . . . . . . . . . . . 60
     5.2.  Informative References . . . . . . . . . . . . . . . . . 60

Waldbusser Standards Track [Page 1] RFC 3729 APM MIB March 2004

 6.  Author's Address . . . . . . . . . . . . . . . . . . . . . . . 60
 7.  Full Copyright Statement . . . . . . . . . . . . . . . . . . . 61

1. The Internet-Standard Management Framework

 For a detailed overview of the documents that describe the current
 Internet-Standard Management Framework, please refer to section 7 of
 RFC 3410 [8].
 Managed objects are accessed via a virtual information store, termed
 the Management Information Base or MIB.  MIB objects are generally
 accessed through the Simple Network Management Protocol (SNMP).
 Objects in the MIB are defined using the mechanisms defined in the
 Structure of Management Information (SMI).  This memo specifies a MIB
 module that is compliant to the SMIv2, which is described in STD 58,
 RFC 2578 [1], STD 58, RFC 2579 [2] and STD 58, RFC 2580 [3].

2. Overview

 This document continues the architecture created in the RMON MIB [7]
 by providing analysis of application performance as experienced by
 end-users.
 Application performance measurement measures the quality of service
 delivered to end-users by applications.  With this perspective, a
 true end-to-end view of the IT infrastructure results, combining the
 performance of the application, desktop, network, and server, as well
 as any positive or negative interactions between these components.
 Despite all the technically sophisticated ways in which networking
 and system resources can be measured, human end-users perceive only
 two things about an application: availability and responsiveness.
    Availability - The percentage of the time that the application is
    ready to give a user service.
    Responsiveness - The speed at which the application delivers the
    requested service.
 A transaction is an action initiated by a user that starts and
 completes a distributed processing function.  A transaction begins
 when a user initiates a request for service (i.e., pushing a submit
 button) and ends when the work is completed (i.e., information is
 provided or a confirmation is delivered).  A transaction is the
 fundamental item measured by the APM MIB.

Waldbusser Standards Track [Page 2] RFC 3729 APM MIB March 2004

 A failed transaction is a transaction that fails to provide the
 service requested by the end user, regardless of whether it is due to
 a processing failure or transport failure.
 An application protocol (e.g., POP3) may implement different commands
 or application "verbs" (e.g., POP3 Login and POP3 Retrieval).  It
 will often be interesting to monitor these verbs separately because:
 1) The verbs may have widely differing performance characteristics
    (in fact some may be response time oriented while others are
    throughput oriented)
 2) The verbs have varying business significance
 3) It provides more granularity of exactly what might be performing
    poorly
 This MIB Module allows the measurement of a parent application, its
 component verbs, or both.  If monitoring both, one can watch the
 top-level application and then drill down to the verbs when trouble
 is spotted to learn which subcomponents are in trouble.  Each
 application verb is registered separately in the Protocol Directory
 [5] [6] as a child of its parent application.
 Application protocols implement one of three different types of
 transactions: transaction-oriented, throughput-oriented, or
 streaming-oriented.  While the availability metric is the same for
 all three types, the responsiveness metric varies:
    Transaction-Oriented: These transactions have a fairly constant
    workload to perform for all transactions.  In particular, to the
    degree that the workload may vary, it doesn't vary based on the
    amount of data to be transferred but based on the parameters of
    the transaction.  The responsiveness metric for transaction-
    oriented applications is application response time, the elapsed
    time between the user's request for service (e.g., pushing the
    submit button) and the completion of the request (e.g., displaying
    the results) and is measured in milliseconds.  This is commonly
    referred to as end-user response time.
    Throughput-Oriented: These transactions have widely varying
    workloads based on the amount of data requested.  The
    responsiveness metric for throughput-oriented applications is
    kilobits per second.
    Streaming-Oriented: These transactions deliver data at a constant
    metered rate of speed regardless of excess capacity in the
    networking and computing infrastructure.  However, when the
    infrastructures cannot deliver data at this speed, interruption of
    service or degradation of service can result.  The responsiveness

Waldbusser Standards Track [Page 3] RFC 3729 APM MIB March 2004

    metric for streaming-oriented applications is the signal quality
    ratio of time that the service is degraded or interrupted to the
    total service time.  This metric is measured in parts per million.

2.1. Report Aggregation

 This MIB Module provides functions to aggregate measurements into
 higher level summaries.
 Every transaction is identified by its application, server, and
 client and has an availability measure as well as a responsiveness
 measure.  The appropriate responsiveness measure is context-sensitive
 depending on whether the application is transaction-oriented,
 throughput-oriented, or streaming- oriented.  For example, in a 5
 minute period several transactions might be recorded:
 Application  Client  Server    Successful    Responsiveness
 HTTP         Jim     Sales     1             6 sec.
 SAP/R3       Jane    Finance   1             17 sec.
 HTTP         Joe     HR        0             -
 FTP          Jim     FTP       1             212 Kbps
 HTTP         Joe     HR        1             25 sec.
 RealVideo    Joe     Videoconf 1             100.0%
 HTTP         Jane    HR        1             5 sec.
 These transactions can be aggregated in several ways, providing
 statistical summaries - for example summarizing all HTTP
 transactions, or all HTTP transactions to the HR Server.  Note that
 data from different applications may not be summarized because:
 1. The performance characteristics of different applications differ
    widely enough to render statistical analysis meaningless.
 2. The responsiveness metrics of different applications may be
    different, making a statistical analysis impossible (in other
    words, one application may be transaction-oriented, while another
    is throughput-oriented).
 Aggregating transactions collected over a period requires an
 aggregation algorithm.  In this MIB Module, transaction aggregation
 always results in the following statistics:
 TransactionCount
    The total number of transactions during this period

Waldbusser Standards Track [Page 4] RFC 3729 APM MIB March 2004

 SuccessfulTransactions
    The total number of transactions that were successful.  The
    management station can derive the percent success by dividing
    SuccessfulTransactions by the TransactionCount.
 ResponsivenessMean
    The average of the responsiveness metric for all aggregated
    transactions that completed successfully.
 ResponsivenessMin
    The minimum responsiveness metric for all aggregated transactions
    that completed successfully.
 ResponsivenessMax
    The maximum responsiveness metric for all aggregated transactions
    that completed successfully.
 ResponsivenessBx
    The count of successful transactions whose responsiveness metric
    fell into the range specified for Bx.  There are 7 buckets
    specified.  Because the performance of different applications
    varies widely, the bucket ranges are specified separately for each
    application (in the apmAppDirTable) so that they may be tuned to
    typical performance of each application.
 For example, when aggregating the previous set of transactions by
 application we get (for simplicity the example only shows
 TransactionCount, SuccessfulTransactions, and ResponsivenessMean):
 Application  Count Successful      ResponsivenessMean
 HTTP         4     3               12 sec.
 SAP/R3       1     1               17 sec.
 FTP          1     1               212 Kbps.
 RealVideo    1     1               100.0%
 There are four different types of aggregation.
    The flows(1) aggregation is the simplest.  All transactions that
    share common application/server/client 3-tuples are aggregated
    together, resulting in a set of metrics for all such unique 3-
    tuples.
    The clients(2) aggregation results in somewhat more aggregation
    (i.e., fewer resulting records).  All transactions that share
    common application/client tuples are aggregated together,
    resulting in a set of metrics for all such unique tuples.

Waldbusser Standards Track [Page 5] RFC 3729 APM MIB March 2004

    The servers(3) aggregation usually results in still more
    aggregation (i.e., fewer resulting records).  All transactions
    that share common application/server tuples are aggregated
    together, resulting in a set of metrics for all such unique
    tuples.
    The applications(4) aggregation results in the most aggregation
    (i.e., the fewest resulting records).  All transactions that share
    a common application are aggregated together, resulting in a set
    of metrics for all such unique applications.
 For example, if in a 5 minute period the following transactions
 occurred:
 Actual Transactions:
 #   App      Client  Server   Successful    Responsiveness
 1   HTTP     Jim     CallCtr  N             -
 2   HTTP     Jim     HR       Y             12 sec.
 3   HTTP     Jim     Sales    Y             7 sec.
 4   HTTP     Jim     CallCtr  Y             5 sec.
 5   Email    Jim     Pop3     Y             12 sec.
 6   HTTP     Jane    CallCtr  Y             3 sec.
 7   SAP/R3   Jane    Finance  Y             19 sec.
 8   Email    Jane    Pop3     Y             16 sec.
 9   HTTP     Joe     HR       Y             18  sec.
 The flows(1) aggregation results in the following table.  Note that
 the first record (HTTP/Jim/CallCtr) is the aggregation of
 transactions #1 and #4:

Flow Aggregation: App Client Server Count Succe- Rsp Rsp Rsp RspB1 RspB2

                               ssful   Mean   Min   Max

HTTP Jim CallCtr 2 1 5 5 5 1 0 HTTP Jim HR 1 1 12 12 12 0 1 HTTP Jim Sales 1 1 7 7 7 1 0 Email Jim Pop3 1 1 12 12 12 0 1 HTTP Jane CallCtr 1 1 3 3 3 1 0 SAP/R3 Jane Finance 1 1 19 19 19 0 1 Email Jane Pop3 1 1 16 16 16 0 1 HTTP Joe HR 1 1 18 18 18 0 1

 (Note: Columns above such as RspMean and RspB1 are abbreviations for
 objects in the apmReportTable)
 The clients(2) aggregation results in the following table.  Note that
 the first record (HTTP/Jim) is the aggregate of transactions #1, #2,
 #3 and #4:

Waldbusser Standards Track [Page 6] RFC 3729 APM MIB March 2004

 Client Aggregation:
 App     Client   Count  Succe-  Rsp    Rsp   Rsp   RspB1  RspB2 ...
                         ssful   Mean   Min   Max
 HTTP    Jim      4      3       8      5     12    2      1
 Email   Jim      1      1       12     12    12    0      1
 HTTP    Jane     1      1       3      3     3     1      0
 SAP/R3  Jane     1      1       19     19    19    0      1
 Email   Jane     1      1       16     16    16    0      1
 HTTP    Joe      1      1       18     18    18    0      1
 The servers(3) aggregation results in the following table.  Note that
 the first record (HTTP/CallCtr) is the aggregation of transactions
 #1, #4 and #6:
 Server Aggregation:
 App     Server   Count  Succe-  Rsp    Rsp   Rsp   RspB1  RspB2 ...
                         ssful   Mean   Min   Max
 HTTP    CallCtr  3      2       4      3     5     2      0
 HTTP    HR       2      2       15     12    18    0      2
 HTTP    Sales    1      1       7      7     7     1      0
 Email   Pop3     2      2       14     12    16    0      2
 SAP/R3  Finance  1      1       19     19    19    0      1
 The applications(4) aggregation results in the following table.  Note
 that the first record (HTTP) is the aggregate of transactions #1, #2,
 #3, #5, #6 and #9:
 Application Aggregation:
 App      Count  Succe-  Rsp    Rsp   Rsp   RspB1  RspB2 ...
                 ssful   Mean   Min   Max
 HTTP     6      5       9      3     18    3      2
 Email    2      2       14     12    16    0      2
 SAP/R3   1      1       19     19    19    0      1
 The apmReportControlTable provides for a historical set of the last
 'X' reports, combining the historical records found in history tables
 with the periodic snapshots found in TopN tables.  Conceptually the
 components are:
 apmReportControlTable
    Specifies data collection and summarization parameters, including
    the number of reports to keep and the size of each report.
 apmReport
    Each APM Report contains an aggregated list of records that
    represent data collected during a specific time period.

Waldbusser Standards Track [Page 7] RFC 3729 APM MIB March 2004

    An apmReportControlEntry causes a family of APM Reports to be
    created, where each report summarizes different, successive,
    contiguous periods of time.
    While the conceptual model of APM Reports shows them as distinct
    entities, they are all entries in a single apmReportTable, where
    entries in report 'A' are separated from entries in report 'B' by
    different values of the apmReportIndex.
    +-----------------------+
    |                       |
    | apmReportControlTable |
    |                       |      +-----------+
    +-----------------------+      |           |
                               +-----------+   |
                               |           |   |
                           +-----------+   |---+
                           |           |   |
                       +----------+    |---+
                       |          |    |               apmReport
                       |apmReport |----+  +-----------------------+
                       |          |       |Thu Mar 30 12-1PM      |
                       +----------+       |                       |
                                          |CLNT SERV  PROT  stats |
                                          |                       |
                                          |Joe  News  HTTP  data  |
                                          |Jan  POP   POP3  data  |
                                          |Jan  POP   SMTP  data  |
                                          |Bob  HR    PSOFT data  |
                                          |...                    |
                                          |...                    |
                                          +-----------------------+

2.2. AppLocalIndex Linkages

    The following set of example tables illustrates a few points:
 1. How protocolDirEntries, apmHttpFilterEntries and
    apmUserDefinedAppEntries(not shown) all result in entries in the
    apmAppDirTable.
 2. How a single appLocalIndex may be represented multiple times in
    the apmAppDirTable and apmReportTable if the agent measures
    multiple responsiveness types for that application.
 A convention in the formatting of these tables is that the columns to
 the left of the '|' separator are index columns for the table.

Waldbusser Standards Track [Page 8] RFC 3729 APM MIB March 2004

 Assuming the following entries in the RMON2 protocolDirectory:
 protocolDirectory
 ID (*)     Parameters   |    LocalIndex ...
 WWW        None         |    1
 WWW Get    None         |    2
 SAP/R3     None         |    3
   (*) These IDs are represented here symbolically.  Consult [5] for
       more detail in their format
 and the following entry in the apmHttpFilterTable:
 ApmHttpFilterTable
 Index   |  AppLocalIndex  ServerAddress   URLPath    MatchType ...
 5       |  20             hr.example.com  /expense   prefix(3) ...
 the apmAppDirTable would be populated with the following
 entries:
 apmAppDir
 AppLocalIndex  ResponsivenessType       | Config  ...
 1              transaction(1)           | On      ...
 1              throughput(2)            | On      ...
 2              transaction(1)           | On      ...
 2              throughput(2)            | On      ...
 3              transaction(1)           | On      ...
 20             transaction(1)           | On      ...
 20             throughput(2)            | On      ...
 The entries in the apmAppDirTable with an appLocalIndex of 1, 2 and 3
 correspond to the identically named entries in the protocolDirectory
 table.  appLocalIndex #1 results in 2 entries, one to measure the
 transaction responsiveness of WWW and one to measure its throughput
 responsiveness.  In contrast, appLocalIndex #3 results in only a
 transaction entry because the agent does not measure the throughput
 responsiveness for SAP/R3 (probably because it isn't very
 meaningful).  Finally, appLocalIndex #20 corresponds to the entry in
 the apmHttpFilterTable and has transaction responsiveness and
 throughput responsiveness measurements available.
 If a report was configured using application aggregation, entries in
 that report might look like:

Waldbusser Standards Track [Page 9] RFC 3729 APM MIB March 2004

 apmReportTable
 CtlIndex Index AppLocalIdx  ResponsivenessType | TransactionCount ...
 1        1     1            transaction(1)     | counters...
 1        1     1            throughput(2)      | counters...
 1        1     2            transaction(1)     | counters...
 1        1     2            throughput(2)      | counters...
 1        1     3            transaction(1)     | counters...
 1        1     20           transaction(1)     | counters...
 1        1     20           throughput(2)      | counters...
 Note that the index items protocolDirLocalIndex,
 apmReportServerAddress and apmReportClientID were omitted from
 apmReportTable example for brevity because they would have been equal
 to zero due to the use of the application aggregation in this
 example.

2.3. Measurement Methodology

 There are many different measurement methodologies available for
 measuring application performance (e.g., probe-based, client-based,
 synthetic-transaction, etc.).  This specification does not mandate a
 particular methodology - it is open to any that meet the minimum
 requirements.  Conformance to this specification requires that the
 collected data match the semantics described herein.  In particular,
 a data collection methodology must be able to measure response time,
 throughput, streaming responsiveness and availability as specified.
 Note that in some cases a transaction may run for a long time but
 ultimately be successful.  The measurement software shouldn't
 prematurely classify lengthy transactions as failures but should wait
 as long as the client application will wait for a successful
 response.

2.4. Instrumentation Architectures

 Different architectural approaches and deployment strategies may be
 taken towards implementation of this specification.  If a highly
 distributed approach is desired (e.g., an agent per desktop), one or
 both of the two approaches below may be used to make it more
 practical.

2.4.1. Application Directory Caching

 It is necessary for the manager to have a copy of the tables that
 define the Application Directory in order to interpret APM
 measurements.  It is likely that in a highly distributed network of

Waldbusser Standards Track [Page 10] RFC 3729 APM MIB March 2004

 thousands of APM agents, this Application Directory will be the same
 on many, if not all of the agents.  Repeated downloads of the
 Application Directory may be inefficient.
 The apmAppDirID object is a single object that identifies the
 configuration of all aspects of the Application Directory when it is
 equal to a well-known, registered configuration.  Thus, when a
 manager sees an apmAppDirID value that it recognizes, it need not
 download the Application Directory from that agent.  In fact, the
 manager may discover a new registered Application Directory
 configuration on one agent and then re-use that configuration on
 another agent that shares the same apmAppDirID value.
 Application directory registrations are unique within an
 administrative domain, allowing an administrator to create a custom
 application directory configuration without the need to assign it a
 globally-unique registration.

2.4.2. Push Model

 When APM agents are installed on "desktops" (including laptops), a
 few issues make polling difficult:
 1. Desktops often have dynamically-assigned addresses so there is no
    long-lived address to poll.
 2. Desktops are not available as much as infrastructure components
    due to crashes, user-initiated reboots and shutdowns and user
    control over monitoring software.  Thus a desktop may not be
    available to answer a poll at the moment when the manager is
    scheduled to poll that desktop.
 3. Laptops that are connected via dialup connections are only
    sporadically connected and will routinely be unreachable when the
    manager is scheduled to poll.
 As a consequence, a push model is usually more appropriate for
 desktop-based agents.  To achieve this, the agent should follow the
 following rules in deciding what data to send in notifications.

Waldbusser Standards Track [Page 11] RFC 3729 APM MIB March 2004

 APM Reports
     If an agent wishes to push APM reports to a manager, it
     must send:
         apmAppDirID
         apmNameTable (any data updated since the last push)
     For each report the agent wishes to upload, it must
     send the entire apmReportControlEntry associated with
     that report and the associated entries in the
     apmReportTable that have changed since the last report.
 APM Transactions
     If an agent wishes to push APM transactions to
     a manager, it must send:
         apmAppDirID
         apmNameTable (any data updated since the last push)
         apmTransactionTable (relevant entries)
 APM Exceptions
     The agent must send:
         apmAppDirID
         apmNameTable (any data updated since the last push)
         apmTransactionEntry (of exception transaction)
         apmExceptionEntry (entry that generated exception)
   [Note that this list supersedes the information in the
   OBJECTS clauses of the apmTransactionResponsivenessAlarm
   and apmTransactionUnsuccessfulAlarm when the agent is
   using a push model.  This additional information
   eliminates the need for the manager to request additional
   data to understand the exception.]
 The order of varbinds and where to segment varbinds into PDUs is at
 the discretion of the agent.

2.5. Structure of this MIB Module

 The objects are arranged into the following groups:
  1. APM Application Directory Group
  1. APM User Defined Applications Group
  1. APM Report Group
  1. APM Transaction Group
  1. APM Exception Group
  1. APM Notification Group

Waldbusser Standards Track [Page 12] RFC 3729 APM MIB March 2004

 These groups are the basic unit of conformance.  If an agent
 implements a group, then it must implement all objects in that group.
 While this section provides an overview of grouping and conformance
 information for this MIB Module, the authoritative reference for such
 information is contained in the MODULE-COMPLIANCE and OBJECT-GROUP
 macros later in this MIB Module.
 These groups are defined to provide a means of assigning object
 identifiers, and to provide a method for implementors of managed
 agents to know which objects they must implement.

2.5.1. The APM Application Directory Group

 The APM Application Directory group contains configuration objects
 for every application or application verb monitored on this system.
 This group consists of the apmAppDirTable.

2.5.2. The APM User Defined Applications Group

 The APM User Defined Applications Group contains objects that allow
 for the tracking of applications or application verbs that aren't
 registered in the protocolDirTable.  This group consists of the
 apmHttpFilterTable and the apmUserDefinedAppTable.

2.5.3. The APM Report Group

 The APM Report Group is used to prepare regular reports that
 aggregate application performance by flow, by client, by server, or
 by application.  This group consists of the apmReportControlTable and
 the apmReportTable.

2.5.4. The APM Transaction Group

 The APM Transaction Group is used to show transactions that are
 currently in progress and ones that have ended recently, along with
 their responsiveness metric.
 Because many transactions last a very short time and because an agent
 may not retain completed transactions very long, transactions may
 exist in this table for a very short time.  Thus, polling this table
 isn't an effective mechanism for retrieving all transactions unless
 the value of apmTransactionsHistorySize is suitably large for the
 transactions being monitored.
 One important benefit of this table is that it allows a management
 station to check on the status of long-lived transactions.  Because
 the apmReport and apmException mechanisms act only on transactions
 that have finished, a network manager may not have visibility for

Waldbusser Standards Track [Page 13] RFC 3729 APM MIB March 2004

 some time into the performance of long-lived transactions such as
 streaming applications, large data transfers, or (very) poorly
 performing transactions.  In fact, by their very definition, the
 apmReport and apmException mechanisms only provide visibility into a
 problem after nothing can be done about it.  This group consists
 primarily of the apmTransactionTable.

2.5.5. The APM Exception Group

 The APM Exception Group is used to generate immediate notifications
 of transactions that cross certain thresholds.  The apmExceptionTable
 is used to configure which thresholds are to be checked for which
 types of transactions.  The apmTransactionResponsivenessAlarm
 notification is sent when a transaction occurs with a responsiveness
 that crosses a threshold.  The apmTransactionUnsuccessfulAlarm
 notification is sent when a transaction fails for which exception
 checking was configured.  This group consists primarily of the
 apmExceptionTable.

2.5.6. The APM Notification Group

 The APM Notification Group contains 2 notifications that are sent
 when thresholds in the APM Exception Table are exceeded.

3. Definitions

APM-MIB DEFINITIONS ::= BEGIN IMPORTS

  MODULE-IDENTITY, OBJECT-TYPE,
  NOTIFICATION-TYPE,
  Counter32, Unsigned32                        FROM SNMPv2-SMI
  TEXTUAL-CONVENTION, RowStatus, TimeStamp,
  TimeInterval, TruthValue, DateAndTime,
  StorageType                                  FROM SNMPv2-TC
  MODULE-COMPLIANCE, OBJECT-GROUP,
  NOTIFICATION-GROUP                           FROM SNMPv2-CONF
  SnmpAdminString                              FROM SNMP-FRAMEWORK-MIB
  rmon, OwnerString                            FROM RMON-MIB
  protocolDirLocalIndex                        FROM RMON2-MIB;

– Application Performance Measurement MIB

apm MODULE-IDENTITY

  LAST-UPDATED "200402190000Z"  -- February 19, 2004
  ORGANIZATION "IETF RMON MIB Working Group"
  CONTACT-INFO
      "Author:
                   Steve Waldbusser

Waldbusser Standards Track [Page 14] RFC 3729 APM MIB March 2004

           Phone:  +1-650-948-6500
           Fax :   +1-650-745-0671
           Email:  waldbusser@nextbeacon.com
       Working Group Chair:
                   Andy Bierman
                   Cisco Systems, Inc.
           Postal: 170 West Tasman Drive
                   San Jose, CA USA 95134
              Tel: +1 408 527-3711
           E-mail: abierman@cisco.com
       Working Group Mailing List: <rmonmib@ietf.org>
       To subscribe send email to: <rmonmib-request@ietf.org>
      "
  DESCRIPTION
      "The MIB module for measuring application performance
      as experienced by end-users.
      Copyright (C) The Internet Society (2004). This version of
      this MIB module is part of RFC 3729; see the RFC itself for
      full legal notices."
  REVISION "200402190000Z"    -- February 19, 2004
  DESCRIPTION
      "The original version of this MIB Module, published as
      RFC3729."
  ::= { rmon 23 }

apmMibObjects OBJECT IDENTIFIER ::= { apm 1 } apmConformance OBJECT IDENTIFIER ::= { apm 2 } apmCompliances OBJECT IDENTIFIER ::= { apmConformance 1 } apmGroups OBJECT IDENTIFIER ::= { apmConformance 2 }

AppLocalIndex ::= TEXTUAL-CONVENTION

  STATUS       current
  DESCRIPTION
      "A locally arbitrary unique identifier associated with an
      application or application verb.
      All objects of type AppLocalIndex are assigned by the agent
      out of a common number space. In other words, AppLocalIndex
      values assigned to entries in one table must not overlap with
      AppLocalIndex values assigned to entries in another
      table. Further, every protocolDirLocalIndex value registered
      by the agent automatically assigns the same value out of the

Waldbusser Standards Track [Page 15] RFC 3729 APM MIB March 2004

      AppLocalIndex number space.
      For example, if the protocolDirLocalIndex values { 1, 3, 5, 7 }
      have been assigned, and the apmHttpFilterAppLocalIndex values
      { 6, 8, 9 } have been assigned:
  1. Assignment of new AppLocalIndex values must not use the

values { 1, 3, 5, 6, 7, 8, 9 }.

  1. AppLocalIndex values { 1, 3, 5, 7 } are automatically

assigned and are associated with the identical value of

            protocolDirLocalIndex. In particular, an entry in the
            apmAppDirTable indexed by a value provides further
            information about a protocol indexed by the same value
            in the protocolDirTable of RMON2.
      The value for each supported application must remain constant
      at least from one re-initialization of the entity's network
      management system to the next re-initialization, except that
      if an application is deleted and re-created, it must be
      re-created with a new value that has not been used since the
      last re-initialization.
      The specific value is meaningful only within a given SNMP
      entity. An AppLocalIndex value must not be re-used until the
      next agent restart."
  SYNTAX       Unsigned32 (1..2147483647)

ProtocolDirNetworkAddress ::= TEXTUAL-CONVENTION

  STATUS       current
  DESCRIPTION
      "A network level address whose semantics and encoding are
      specified by an associated protocolDirLocalIndex
      value. Objects of this type must specify which
      protocolDirLocalIndex value is used. This value is encoded
      according to the encoding rules for the identified
      protocolDirectory entry.
      For example, if the associated protocolDirLocalIndex indicates
      an encapsulation of ip, this object is encoded as a length
      octet of 4, followed by the 4 octets of the ip address,
      in network byte order.
      Objects of this type may allow this value to be the zero
      length string. If so, they must identify they meaning of this
      value."
  SYNTAX        OCTET STRING (SIZE(0..255))

DataSourceOrZero ::= TEXTUAL-CONVENTION

Waldbusser Standards Track [Page 16] RFC 3729 APM MIB March 2004

  STATUS       current
  DESCRIPTION
      "Identifies the source of the data that the associated
      function is configured to analyze. This source can be any
      interface on this device.
      In order to identify a particular interface, this
      object shall identify the instance of the ifIndex
      object, defined in [4], for the desired interface.
      For example, if an entry were to receive data from
      interface #1, this object would be set to ifIndex.1.
      If the source of the data isn't an interface or cannot be
      localized to an interface, this object would be set to 0.0"
  REFERENCE    "The DataSource textual convention is defined in
               RFC 2021 [5]."
  SYNTAX       OBJECT IDENTIFIER

RmonClientID ::= TEXTUAL-CONVENTION

  STATUS      current
  DESCRIPTION
       "A long-lived unique ID assigned to an end-system. This ID is
       assigned by the agent using an implementation-specific
       algorithm.
       Because a client machine may be assigned multiple addresses
       over any time period it can be difficult to attribute
       behavior to a particular client based solely on its
       address. A ClientID may be assigned to provide a more
       stable handle for referencing that client. The entity that
       assigns the ClientID may use various implementation
       techniques to keep track of a client but if the assigning
       entity is unable to track client address mappings, it may map
       client identifiers to client addresses rather than to
       distinct client machines.
       This is named ClientID because it helps to solve a problem
       seen in network clients (servers usually have well-known,
       long-lived addresses). However, ClientID's may be assigned to
       any end-system regardless of its role on the network."
  SYNTAX      Unsigned32 (0..4294967295)

TransactionAggregationType ::= TEXTUAL-CONVENTION

  STATUS      current
  DESCRIPTION

Waldbusser Standards Track [Page 17] RFC 3729 APM MIB March 2004

      "Specifies one of 4 different techniques for aggregating
      transactions.
      The metrics for a single transaction are the responsiveness of
      the transaction and whether the transaction succeeded (a
      boolean). When such metrics are aggregated in this MIB Module,
      these metrics are replaced by averages and distributions of
      responsiveness and availability. The metrics describing
      aggregates are constant no matter which type of aggregation is
      being performed. These metrics may be found in the
      apmReportTable.
      The flows(1) aggregation is the simplest. All transactions
      that share common application/server/client 3-tuples are
      aggregated together, resulting in a set of metrics for all
      such unique 3-tuples.
      The clients(2) aggregation results in somewhat more
      aggregation (i.e., fewer resulting records). All transactions
      that share common application/client tuples are aggregated
      together, resulting in a set of metrics for all such unique
      tuples.
      The servers(3) aggregation usually results in still more
      aggregation (i.e., fewer resulting records). All transactions
      that share common application/server tuples are aggregated
      together, resulting in a set of metrics for all such unique
      tuples.
      The applications(4) aggregation results in the most
      aggregation (i.e., the fewest resulting records). All
      transactions that share a common application are aggregated
      together, resulting in a set of metrics for all such unique
      applications.
      Note that it is not meaningful to aggregate applications, as
      different applications have widely varying characteristics. As a
      result, this set of aggregations is complete."
  SYNTAX      INTEGER {
                flows(1),    -- Least Aggregation
                clients(2),
                servers(3),
                applications(4) -- Most Aggregation
              }

– The APM Application Directory Group

– The Application Directory Table contains a record for every

Waldbusser Standards Track [Page 18] RFC 3729 APM MIB March 2004

– application monitored by this agent. This table is also used to – configure whether or not an application will be measured and which – bucket boundaries will be used for the application. – – The bucket boundaries define the break-points between bins of a – histogram analysis for that application. As an example of how this – works, consider an entry representing response-time for http. – If the boundaries are set as follows: – Boundary1: 500 milliseconds – Boundary2: 1 second – Boundary3: 2 seconds – Boundary4: 5 – Boundary5: 15 – Boundary6: 60 – – If the following measurements are made (all in milliseconds): – 377, 8645, 1300, 487, 1405, 775, 1115, 850, 945, 1054, 7745, 9380 – – A report run during this interval would report the following – counts: – Bucket1: 2 – Bucket2: 3 – Bucket3: 4 – Bucket4: 0 – Bucket5: 3 – Bucket6: 0 – Bucket7: 0

apmAppDirTable OBJECT-TYPE

  SYNTAX      SEQUENCE OF ApmAppDirEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "The APM MIB directory of applications and application
      verbs. The agent will populate this table with all
      applications/verbs of any responsivenessType it has the
      capability to monitor. Since the agent populates this table
      with every entry it has the capability to monitor, the
      entries in this table are read-write, allowing the management
      station to modify parameters in this table but not to add new
      entries or delete entries (however, entries may be
      disabled). If new entries are added to the apmHttpFilterTable
      or the apmUserDefinedAppTable, the agent will add the
      corresponding entries to this table.
      It is an implementation-dependent matter as to how the agent
      sets these default parameters. For example, it may leave
      certain entries in this table 'off(0)' if the agent developer

Waldbusser Standards Track [Page 19] RFC 3729 APM MIB March 2004

      believes that combination will be infrequently used, allowing
      a manager that needs that capability to set it to 'on(1)'.
      Some applications are registered in the RMON2 protocol
      directory and some are registered in other tables in this
      MIB Module. Regardless of where an application is originally
      registered, it is assigned an AppLocalIndex value that is the
      primary index for this table.
      The contents of this table affect all reports and exceptions
      generated by this agent. Accordingly, modification of this
      table should be performed by a manager acting in the role of
      administrator. In particular, management software should not
      require or enforce particular configuration of this table - it
      should reflect the preferences of the site administrator, not
      the software author. As a practical matter, this requires
      management software to allow the administrator to configure
      the values it will use so that it can be adapted to the site
      policy."
  ::= { apmMibObjects 1 }

apmAppDirEntry OBJECT-TYPE

  SYNTAX      ApmAppDirEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "The APM MIB directory of applications and application
      verbs. An entry will exist in this table for all applications
      for which application performance measurement is supported."
  INDEX { apmAppDirAppLocalIndex,
          apmAppDirResponsivenessType }
  ::= { apmAppDirTable 1 }

ApmAppDirEntry ::= SEQUENCE {

  apmAppDirAppLocalIndex            AppLocalIndex,
  apmAppDirResponsivenessType       INTEGER,
  apmAppDirConfig                   INTEGER,
  apmAppDirResponsivenessBoundary1  Unsigned32,
  apmAppDirResponsivenessBoundary2  Unsigned32,
  apmAppDirResponsivenessBoundary3  Unsigned32,
  apmAppDirResponsivenessBoundary4  Unsigned32,
  apmAppDirResponsivenessBoundary5  Unsigned32,
  apmAppDirResponsivenessBoundary6  Unsigned32

}

apmAppDirAppLocalIndex OBJECT-TYPE

  SYNTAX      AppLocalIndex
  MAX-ACCESS  not-accessible

Waldbusser Standards Track [Page 20] RFC 3729 APM MIB March 2004

  STATUS      current
  DESCRIPTION
      "The AppLocalIndex assigned for this application Directory
      entry."
  ::= { apmAppDirEntry 1 }

apmAppDirResponsivenessType OBJECT-TYPE

  SYNTAX      INTEGER {
                transactionOriented(1),
                throughputOriented(2),
                streamingOriented(3)
              }
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "This object describes and configures the agent's support for
      application performance measurement for this application.
      There are 3 types of measurements for different types of
      applications:
      Transaction-Oriented applications have a fairly constant
      workload to perform for all transactions. The responsiveness
      metric for transaction-oriented applications is application
      response time (from first request to final delivery of
      service) and is measured in milliseconds. This is
      commonly referred to as end-user response time.
      Throughput-Oriented applications have widely varying workloads
      based on the nature of the client request. In particular,
      throughput-oriented applications vary widely in the amount of
      data that must be transported to satisfy the request. The
      responsiveness metric for throughput-oriented applications is
      kilobits per second.
      Streaming-Oriented applications deliver data at a constant
      metered rate of speed regardless of the responsiveness of the
      networking and computing infrastructure. This constant rate of
      speed is generally specified to be below (sometimes well
      below) the nominal capability of the infrastructure. However,
      when the infrastructures cannot deliver data at this speed,
      interruption of service or degradation of service can
      result. The responsiveness metric for streaming-oriented
      applications is the ratio of time that the service is degraded
      or interrupted to the total service time. This metric is
      measured in parts per million.
      Note that for some applications, measuring more than one
      responsiveness type may be interesting. For agents that wish

Waldbusser Standards Track [Page 21] RFC 3729 APM MIB March 2004

      to support more than one measurement for a application, they
      will populate this table with multiple entries for that
      application, one for each type."
  ::= { apmAppDirEntry 2 }

apmAppDirConfig OBJECT-TYPE

  SYNTAX      INTEGER {
                off(1),
                on(2)
              }
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "This object describes and configures support for application
      performance measurement for this application.
      If the value of this object is on(2), the agent supports
      measurement of application performance metrics for this
      application and is configured to measure such metrics for all
      APM MIB functions and all interfaces.  If the value of this
      object is off(1), the agent supports measurement of
      application performance for this application but is configured
      to not measure these metrics for any APM MIB functions or
      interfaces.  Whenever this value changes from on(2) to off(1),
      the agent shall delete all related entries in all tables in
      this MIB Module.
      The value of this object must persist across reboots."
  ::= { apmAppDirEntry 3 }

apmAppDirResponsivenessBoundary1 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "The boundary value between bucket1 and bucket 2. If this
      value is modified, all entries in the apmReportTable must be
      deleted by the agent.
      The value of this object must persist across reboots."
  ::= { apmAppDirEntry 4 }

apmAppDirResponsivenessBoundary2 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "The boundary value between bucket2 and bucket 3. If this

Waldbusser Standards Track [Page 22] RFC 3729 APM MIB March 2004

      value is modified, all entries in the apmReportTable must be
      deleted by the agent.
      The value of this object must persist across reboots."
  ::= { apmAppDirEntry 5 }

apmAppDirResponsivenessBoundary3 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "The boundary value between bucket3 and bucket 4. If this
      value is modified, all entries in the apmReportTable must be
      deleted by the agent.
      The value of this object must persist across reboots."
  ::= { apmAppDirEntry 6 }

apmAppDirResponsivenessBoundary4 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "The boundary value between bucket4 and bucket 5. If this
      value is modified, all entries in the apmReportTable must be
      deleted by the agent.
      The value of this object must persist across reboots."
  ::= { apmAppDirEntry 7 }

apmAppDirResponsivenessBoundary5 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "The boundary value between bucket5 and bucket 6. If this
      value is modified, all entries in the apmReportTable must be
      deleted by the agent.
      The value of this object must persist across reboots."
  ::= { apmAppDirEntry 8 }

apmAppDirResponsivenessBoundary6 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "The boundary value between bucket6 and bucket 7. If this

Waldbusser Standards Track [Page 23] RFC 3729 APM MIB March 2004

      value is modified, all entries in the apmReportTable must be
      deleted by the agent.
      The value of this object must persist across reboots."
  ::= { apmAppDirEntry 9 }

– Scalars related to the Application Directory table

apmBucketBoundaryLastChange OBJECT-TYPE

  SYNTAX     TimeStamp
  MAX-ACCESS read-only
  STATUS     current
  DESCRIPTION
      "The value of sysUpTime the last time that any bucket boundary
      in any appDirEntry was changed. This object can help to
      determine if two managers are both trying to enforce different
      configurations of this table."
  ::= { apmMibObjects 2 }

apmAppDirID OBJECT-TYPE

  SYNTAX     OBJECT IDENTIFIER
  MAX-ACCESS read-write
  STATUS     current
  DESCRIPTION
      "This object allows managers to avoid downloading application
      directory information when the directory is set to a known
      (usually fixed) configuration.
      If the value of this object isn't 0.0, it signifies
      that the entire contents of the apmAppDirTable,
      apmHttpFilterTable, apmUserDefinedAppTable and
      protocolDirTable are equal to a known state identified
      by the value of this object. If a manager recognizes this
      value as identifying a directory configuration it has a local
      copy of, it may use this local copy rather than downloading
      these tables. Note that it may have downloaded this local copy
      (and the ID) from another agent and used this copy for all
      other agents that advertised the same ID.
      If an agent recognizes that the entire contents of the
      apmAppDirTable, apmHttpFilterTable,
      apmUserDefinedAppTable and protocolDirTable are equal to
      a known state to which an ID has been assigned, it should set
      this object to that ID.
      In many cases when this feature is used, the application
      directory information will be in read-only memory and thus the
      tables may not be modified via SNMP requests. In the event

Waldbusser Standards Track [Page 24] RFC 3729 APM MIB March 2004

      that the tables are writable and a modification is made, the
      agent is responsible for setting this object to 0.0 if it
      cannot determine that the state is equal to a known state.
      An agent is not obligated to recognize and advertise all such
      registered states as it may not have knowledge of all states.
      Thus, a manager may encounter agents whose DirectoryID value
      is 0.0 even though the contents of the directory were equal to
      a registered state.
      Note that the contents of those tables includes the
      protocolDirLocalIndex and appLocalIndex values. In other
      words, these values can't be assigned randomly on each agent,
      but must be equal to values that are part of the known
      state. While it is possible for a manager to download
      application directory details using SNMP and to set the
      appropriate directoryID, the manager would need to have some
      scheme to ensure consistent values of LocalIndex variables
      from agent to agent. Such schemes are outside the scope of
      this specification.
      Application directory registrations are unique within an
      administrative domain.
      Typically these registrations will be made by an agent
      software developer who will set the application directory
      tables to a read-only state and assign a DirectoryID to that
      state. Thus, all agents running this software would share the
      same DirectoryID. As the application directory might change
      from one software release to the next, the developer may
      register different DirectoryID's for each software release.
      A customer could also create a site-wide application directory
      configuration and assign a DirectoryID to that configuration
      as long as consistent values of LocalIndex variables can be
      ensured.
      The value of this object must persist across reboots."
   ::= { apmMibObjects 3 }

– APM HTTP Filter Table

– The HTTP Filter Table creates virtual applications which measure the – performance of certain web pages or sets of web pages. Some – circumstances where this is particularly useful are: – – - An Intranet or ASP scenario where a business application is – running on one or more web pages or scripts.

Waldbusser Standards Track [Page 25] RFC 3729 APM MIB March 2004

– (i.e., /expense/submit.cgi?employeeID=3426&…) – - A web-hosting scenario where one wants to measure the – service level for a particular customer – - An e-commerce scenario where the performance of certain – pages needs to be monitored more closely. – (i.e., shopping cart, shipping, credit card authorization)

apmHttpFilterTable OBJECT-TYPE

  SYNTAX      SEQUENCE OF ApmHttpFilterEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A table that creates virtual applications which measure the
      performance of certain web pages or sets of web pages.
      When an entry is added to this table, the agent will
      automatically create one or more entries in the
      apmAppDirTable (one for each responsivenessType it is
      capable of measuring).
      Note that when entries exist in this table some HTTP
      transactions will be summarized twice: in applications
      represented here as well as the HTTP application. If entries
      in this table overlap, these transactions may be summarized
      additional times.
      The contents of this table affect all reports and exceptions
      generated by this agent. Accordingly, modification of this
      table should be performed by a manager acting in the role of
      administrator. In particular, management software should not
      require or enforce particular configuration of this table - it
      should reflect the preferences of the site administrator, not
      the software author."
  ::= { apmMibObjects 4 }

apmHttpFilterEntry OBJECT-TYPE

  SYNTAX      ApmHttpFilterEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A virtual application which measure the performance of certain
      web pages or sets of web pages."
  INDEX { apmHttpFilterIndex }
  ::= { apmHttpFilterTable 1 }

ApmHttpFilterEntry ::= SEQUENCE {

  apmHttpFilterIndex              Unsigned32,
  apmHttpFilterAppLocalIndex      AppLocalIndex,

Waldbusser Standards Track [Page 26] RFC 3729 APM MIB March 2004

  apmHttpFilterServerProtocol     Unsigned32,
  apmHttpFilterServerAddress      ProtocolDirNetworkAddress,
  apmHttpFilterURLPath            OCTET STRING,
  apmHttpFilterMatchType          INTEGER,
  apmHttpFilterOwner              OwnerString,
  apmHttpFilterStorageType        StorageType,
  apmHttpFilterRowStatus          RowStatus

}

apmHttpFilterIndex OBJECT-TYPE

  SYNTAX      Unsigned32 (0..65535)
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "An index that uniquely identifies an entry in the
      apmHttpFilterTable."
  ::= { apmHttpFilterEntry 1 }

apmHttpFilterAppLocalIndex OBJECT-TYPE

  SYNTAX      AppLocalIndex
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The AppLocalIndex that represents HTTP transactions
      that match this entry.
      This object is read-only. A value is created by the agent from
      an unused AppLocalIndex value when this apmHttpFilterEntry is
      created."
  ::= { apmHttpFilterEntry 2 }

apmHttpFilterServerProtocol OBJECT-TYPE

  SYNTAX      Unsigned32 (1..2147483647)
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The protocolDirLocalIndex value of the network level protocol
      of the apmHttpFilterServerAddress."
  ::= { apmHttpFilterEntry 3 }

apmHttpFilterServerAddress OBJECT-TYPE

  SYNTAX      ProtocolDirNetworkAddress
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "This entry will only represent transactions coming from the
      network address specified in this object.

Waldbusser Standards Track [Page 27] RFC 3729 APM MIB March 2004

      This is represented as an octet string with
      specific semantics and length as identified
      by the associated apmHttpFilterServerProtocol object.
      If this object is the zero-length string, then this entry will
      match one of the addresses represented by the 'host' component
      of the associated apmHttpFilterURLPath object, where the
      format if a URL [9] is
      http://<host>:<port>/<path>?<searchpart>."
  ::= { apmHttpFilterEntry 4 }

apmHttpFilterURLPath OBJECT-TYPE

  SYNTAX      OCTET STRING (SIZE(0..65535))
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "This entry will only represent HTTP transactions
      where the URL path component in the request matches this
      value. This value represents the requested path regardless of
      any substitution that the server might perform.
      Prior to the matching, the URL is stripped of any server
      address or DNS name and consists solely of the path name on
      that server.
      If the length of this object is zero, then this entry will
      match if the associated apmHttpFilterServerAddress match. If
      the length of that object is also zero, then this entry will
      match nothing.
      The value of the associated apmHttpFilterMatchType dictates
      the type of matching that will be attempted."
  ::= { apmHttpFilterEntry 5 }

apmHttpFilterMatchType OBJECT-TYPE

  SYNTAX      INTEGER {
                  exact(1),
                  stripTrailingSlash(2),
                  prefix(3)
              }
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The matching algorithm used to compare the URL pathname.
      If the value is exact(1), then the pathname component will be
      compared with the associated apmHttpFilterURLPath and
      will only be associated with this entry if it matches exactly.

Waldbusser Standards Track [Page 28] RFC 3729 APM MIB March 2004

      If the value is stripTrailingSlash(2), then the pathname
      component will be compared with the associated
      apmHttpFilterURLPath and will only be associated with this
      entry if it matches exactly or if the pathname ends with a '/'
      symbol and matches apmHttpFilterURLPath if the '/' symbol is
      removed from the pathname. This option exists for those paths
      where an optional trailing slash is possible but for which a
      prefix match would be too broad.
      If the value is prefix(3), then the pathname component will be
      compared with the associated apmHttpFilterURLPath and will
      only be associated with this entry if the beginning of the
      pathname matches every octet of this value. Octets that extend
      beyond the length of this value are ignored."
  ::= { apmHttpFilterEntry 6 }

apmHttpFilterOwner OBJECT-TYPE

  SYNTAX      OwnerString
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The entity that configured this entry and is
      therefore using the resources assigned to it."
  ::= { apmHttpFilterEntry 7 }

apmHttpFilterStorageType OBJECT-TYPE

  SYNTAX      StorageType
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The storage type of this apmHttpFilterEntry. If the value of
      this object is 'permanent', no objects in this row need to be
      writable."
  ::= { apmHttpFilterEntry 8 }

apmHttpFilterRowStatus OBJECT-TYPE

  SYNTAX      RowStatus
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The status of this apmHttpFilterEntry. No objects in this row
      may be modified while the row's status is 'active'."
  ::= { apmHttpFilterEntry 9 }

apmHttpIgnoreUnregisteredURLs OBJECT-TYPE

  SYNTAX      TruthValue
  MAX-ACCESS  read-write
  STATUS      current

Waldbusser Standards Track [Page 29] RFC 3729 APM MIB March 2004

  DESCRIPTION
      "When true, APM measurements of HTTP transactions will only
      measure transactions relating to URLs that match a filter in
      the apmHttpFilterTable. Thus, measurements for the HTTP
      application will present aggregated statistics for
      URL-matching HTTP transactions and measurements for the HTTP
      GET application verb will present aggregated statistics for
      URL-matching HTTP GET transactions.
      This will be used in environments that wish to monitor only
      targeted URLs and to ignore large volumes of internet web
      browsing traffic.
      This object affects all APM reports and exceptions generated
      by this agent. Accordingly, modification of this object should
      be performed by a manager acting in the role of
      administrator. In particular, management software should not
      require or enforce particular configuration of this object -
      it should reflect the preferences of the site administrator,
      not the software author.
      The value of this object must persist across reboots."
  ::= { apmMibObjects 5 }

apmHttp4xxIsFailure OBJECT-TYPE

  SYNTAX      TruthValue
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "When true, this agent will recognize HTTP errors in the range
      of 400 through 499 and will treat them as unavailable
      transactions. When false or when this object isn't supported,
      they will be treated as successful transactions.
      This object allows such error pages to be tracked at the
      possible expense of having user typos treated as poor service
      on the part of the web server.
      This object affects all reports and exceptions generated by
      this agent. Accordingly, modification of this object should be
      performed by a manager acting in the role of administrator. In
      particular, management software should not require or enforce
      particular configuration of this object - it should reflect
      the preferences of the site administrator, not the software
      author.
      The value of this object must persist across reboots."
  ::= { apmMibObjects 6 }

Waldbusser Standards Track [Page 30] RFC 3729 APM MIB March 2004

– The APM User-Defined Application Table

– Many application protocols will never be registered with a – standards body (and thus included in a protocol directory standard) – because they are custom, in-house or proprietary – applications. Nevertheless, implementation strategies exist for – monitoring the end-user experience of these applications. – – This read-only table provides a means for the agent to advertise – which user-defined applications it is monitoring and to associate – each with an AppLocalIndex value. It is an implementation-dependent – matter as to how the agent learns how to monitor these – applications.

apmUserDefinedAppTable OBJECT-TYPE

  SYNTAX      SEQUENCE OF ApmUserDefinedAppEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A table that advertises user-defined applications that the
      agent is measuring.
      The agent will automatically create one or more entries in the
      apmAppDirTable (one for each responsivenessType it is
      capable of measuring) for each entry in this table.
      Note that when entries exist in this table some
      transactions can be summarized more than once if there is
      overlap between applications defined here and applications
      defined in the protocol directory or in the httpFilter table."
  ::= { apmMibObjects 7 }

apmUserDefinedAppEntry OBJECT-TYPE

  SYNTAX      ApmUserDefinedAppEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A user-defined application that the agent is measuring, along
      with its AppLocalIndex assignment.
      The apmAppDirAppLocalIndex value in the index identifies
      the agent-assigned AppLocalIndex value for this user-defined
      application."
  INDEX { apmAppDirAppLocalIndex }
  ::= { apmUserDefinedAppTable 1 }

ApmUserDefinedAppEntry ::= SEQUENCE {

  apmUserDefinedAppParentIndex    Unsigned32,

Waldbusser Standards Track [Page 31] RFC 3729 APM MIB March 2004

  apmUserDefinedAppApplication    SnmpAdminString

}

apmUserDefinedAppParentIndex OBJECT-TYPE

  SYNTAX      Unsigned32 (1..2147483647)
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The protocolDirLocalIndex value of the highest-layer
      protocol defined in the protocolDirTable that this
      application is a child of."
  ::= { apmUserDefinedAppEntry 1 }

apmUserDefinedAppApplication OBJECT-TYPE

  SYNTAX      SnmpAdminString
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "A human readable descriptive tag for this application."
  ::= { apmUserDefinedAppEntry 2 }

– The APM Name Table

apmNameTable OBJECT-TYPE

  SYNTAX      SEQUENCE OF ApmNameEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A client machine may have multiple addresses during a period
      of monitoring. The apmNameTable assigns a long-lived
      identifier to a client and records what addresses were
      assigned to that client for periods of time. Various
      implementation techniques exist for tracking this mapping but
      if an agent is unable to track client address mappings, it may
      map client identifiers to client addresses rather than to
      distinct client machines.
      A particular apmNameClientID should be a constant attribute of
      a particular client. When available, the agent may also record
      the machine name and/or user name which may be valuable for
      displaying to humans. The apmNameMachineName and
      apmNameUserName are relatively constant, changing only if
      these attributes actually change on the client.
      The agent will store a historical log of these entries, aging
      out old entries as the log becomes too large. Since this table
      contains information vital to the interpretation of other
      tables (e.g., the apmReportTable), the agent should ensure that

Waldbusser Standards Track [Page 32] RFC 3729 APM MIB March 2004

      the log doesn't age out entries that would be referenced by
      data in those tables.
      Note that an entry for a clientID is active from its
      StartTime until the StartTime of another entry (for the same
      clientID) that supersedes it, or 'now' if none supersede
      it. Therefore, if a clientID only has a single entry, it is by
      definition very new and should never be aged out. No entry for
      a clientID should be aged out unless it has been updated by a
      new entry for the client (i.e., with an updated address) and
      only if the new entry is 'old' enough.
      To determine how old is old enough, compute the maximum value
      of Interval * (NumReports + 1) of all entries in the
      apmReportControlTable (the '+ 1' is to allow a reasonable
      period of time for the report to be downloaded). Then take the
      larger of this value and the age in seconds of the oldest
      entry in the current transaction table. If an entry for a
      clientID is superseded by another entry whose StartTime is
      more than this many seconds ago, then the older entry may be
      deleted."
  ::= { apmMibObjects 8 }

apmNameEntry OBJECT-TYPE

  SYNTAX      ApmNameEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "An entry in the APM name table. An entry exists for each
      period of time that a client has been associated with a
      particular address.
      The protocolDirLocalIndex value in the index identifies
      the network layer protocol for the ClientAddress for this
      entry.
      Note that some combinations of index values may result in an
      index that exceeds 128 sub-identifiers in length which exceeds
      the maximum for the SNMP protocol. Implementations should take
      care to avoid such combinations."
  INDEX { apmNameClientID,
          protocolDirLocalIndex, apmNameClientAddress,
          apmNameMappingStartTime }
  ::= { apmNameTable 1 }

ApmNameEntry ::= SEQUENCE {

  apmNameClientID                  RmonClientID,
  apmNameClientAddress             ProtocolDirNetworkAddress,

Waldbusser Standards Track [Page 33] RFC 3729 APM MIB March 2004

  apmNameMappingStartTime          DateAndTime,
  apmNameMachineName               SnmpAdminString,
  apmNameUserName                  SnmpAdminString

}

apmNameClientID OBJECT-TYPE

  SYNTAX      RmonClientID
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
       "A unique ID assigned to the machine represented by this
       mapping. This ID is assigned by the agent using an
       implementation-specific algorithm."
  ::= { apmNameEntry 1 }

apmNameClientAddress OBJECT-TYPE

  SYNTAX      ProtocolDirNetworkAddress (SIZE(1..255))
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "The network client address for this client when this mapping
      was active.
      This is represented as an octet string with specific semantics
      and length as identified by the protocolDirLocalIndex
      component of the index. This object may not be the zero length
      string.
      Since this object is an index variable, it is encoded in the
      index according to the index encoding rules.  For example, if
      the protocolDirLocalIndex component of the index indicates an
      encapsulation of ip, this object is encoded as a length octet
      of 4, followed by the 4 octets of the ip address, in network
      byte order. Care should be taken to avoid values of this
      object that, in conjunction with the other index variables,
      would result in an index longer than SNMP's maximum of 128
      subidentifiers."
  ::= { apmNameEntry 2 }

apmNameMappingStartTime OBJECT-TYPE

  SYNTAX      DateAndTime
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "The time that the agent first discovered this mapping
      as active."
  ::= { apmNameEntry 3 }

Waldbusser Standards Track [Page 34] RFC 3729 APM MIB March 2004

apmNameMachineName OBJECT-TYPE

  SYNTAX      SnmpAdminString
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The human readable name of the client machine.
      If the client has no machine name or the agent is
      unable to learn the machine name, this object will be
      a zero-length string."
  ::= { apmNameEntry 4 }

apmNameUserName OBJECT-TYPE

  SYNTAX      SnmpAdminString
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The human readable name of a human user using the client
      machine. If more than one user name are available
      simultaneously, it is an implementation-dependent matter as to
      which is used here. However, if the user name changes, this
      object should change to reflect that change.
      Non-human user names like 'root' or 'administrator' aren't
      intended as values for this object. If the client has no
      recorded user name or the agent is unable to learn a user
      name, this object will be a zero-length string."
  ::= { apmNameEntry 5 }

– The APM Report Group

apmReportControlTable OBJECT-TYPE

  SYNTAX      SEQUENCE OF ApmReportControlEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "Parameters that control the creation of a set of reports that
      aggregate application performance."
  ::= { apmMibObjects 9 }

apmReportControlEntry OBJECT-TYPE

  SYNTAX      ApmReportControlEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A conceptual row in the apmReportControlTable.
      An example of the indexing of this table is

Waldbusser Standards Track [Page 35] RFC 3729 APM MIB March 2004

      apmReportControlInterval.3"
  INDEX { apmReportControlIndex }
  ::= { apmReportControlTable 1 }

ApmReportControlEntry ::= SEQUENCE {

  apmReportControlIndex            Unsigned32,
  apmReportControlDataSource       DataSourceOrZero,
  apmReportControlAggregationType  TransactionAggregationType,
  apmReportControlInterval         Unsigned32,
  apmReportControlRequestedSize    Unsigned32,
  apmReportControlGrantedSize      Unsigned32,
  apmReportControlRequestedReports Unsigned32,
  apmReportControlGrantedReports   Unsigned32,
  apmReportControlStartTime        TimeStamp,
  apmReportControlReportNumber     Unsigned32,
  apmReportControlDeniedInserts    Counter32,
  apmReportControlDroppedFrames    Counter32,
  apmReportControlOwner            OwnerString,
  apmReportControlStorageType      StorageType,
  apmReportControlStatus           RowStatus

}

apmReportControlIndex OBJECT-TYPE

  SYNTAX      Unsigned32 (1..65535)
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "An index that uniquely identifies an entry in the
      apmReportControlTable.  Each such entry defines a unique
      report whose results are placed in the apmReportTable on
      behalf of this apmReportControlEntry."
  ::= { apmReportControlEntry 1 }

apmReportControlDataSource OBJECT-TYPE

  SYNTAX      DataSourceOrZero
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The source of the data for APM Reports generated on
      behalf of this apmReportControlEntry.
      If the measurement is being performed by a probe, this should
      be set to interface or port where data was received for
      analysis. If the measurement isn't being performed by a probe,
      this should be set to the primary interface over which the
      measurement is being performed. If the measurement isn't being
      performed by a probe and there is no primary interface or this

Waldbusser Standards Track [Page 36] RFC 3729 APM MIB March 2004

      information isn't known, this object should be set to 0.0.
      This object may not be modified if the associated
      apmReportControlStatus object is equal to active(1)."
  ::= { apmReportControlEntry 2 }

apmReportControlAggregationType OBJECT-TYPE

  SYNTAX      TransactionAggregationType
          --    INTEGER {
          --      flows(1),
          --      clients(2),
          --      servers(3),
          --      applications(4)
          --    }
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The type of aggregation being performed for this set of
      reports.
      The metrics for a single transaction are the responsiveness of
      the transaction and whether the transaction succeeded (a
      boolean). When such metrics are aggregated in this MIB Module,
      these metrics are replaced by averages and distributions of
      responsiveness and availability. The metrics describing
      aggregates are constant no matter which type of aggregation is
      being performed. These metrics may be found in the
      apmReportTable.
      The flows(1) aggregation is the simplest. All transactions
      that share common application/server/client 3-tuples are
      aggregated together, resulting in a set of metrics for all
      such unique 3-tuples.
      The clients(2) aggregation results in somewhat more
      aggregation (i.e., fewer resulting records). All transactions
      that share common application/client tuples are aggregated
      together, resulting in a set of metrics for all such unique
      tuples.
      The servers(3) aggregation usually results in still more
      aggregation (i.e., fewer resulting records). All transactions
      that share common application/server tuples are aggregated
      together, resulting in a set of metrics for all such unique
      tuples.
      The applications(4) aggregation results in the most
      aggregation (i.e., the fewest resulting records). All

Waldbusser Standards Track [Page 37] RFC 3729 APM MIB March 2004

      transactions that share a common application are aggregated
      together, resulting in a set of metrics for all such unique
      applications.
      Note that it is not meaningful to aggregate applications, as
      different applications have widely varying characteristics.
      As a result, this set of aggregations is complete.
      This object may not be modified if the associated
      apmReportControlStatus object is equal to active(1)."
  ::= { apmReportControlEntry 3 }

apmReportControlInterval OBJECT-TYPE

  SYNTAX      Unsigned32
  UNITS       "Seconds"
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The interval in seconds over which data is accumulated before
      being aggregated into a report in the apmReportTable.  All
      reports with the same apmReportControlIndex will be based on
      the same interval. This object must be greater than zero.
      Many users desire that these reports be synchronized to within
      seconds of the beginning of the hour because the results may
      be correlated more meaningfully to business behavior and so
      that data from multiple agents is aggregated over the same
      time periods. Thus management software may take extra effort
      to synchronize reports to the beginning of the hour and to one
      another. However, the agent must not allow reports to 'drift'
      over time as they will quickly become unsynchronized. In
      particular, if there is any fixed processing delay between
      reports, the reports should deduct this time from the interval
      so that reports don't drift.
      This object may not be modified if the associated
      apmReportControlStatus object is equal to active(1)."
  DEFVAL { 3600 }
  ::= { apmReportControlEntry 4 }

apmReportControlRequestedSize OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The number of entries requested to be allocated for each
      report generated on behalf of this entry."
  ::= { apmReportControlEntry 5 }

Waldbusser Standards Track [Page 38] RFC 3729 APM MIB March 2004

apmReportControlGrantedSize OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of entries per report the agent has allocated
      based on the requested amount in apmReportControlRequestedSize.
      Since multiple reports are saved, the total number of entries
      allocated will be this number multiplied by the value of
      apmReportControlGrantedReports, or 1 if that object doesn't
      exist.
      When the associated apmReportControlRequestedSize object is
      created or modified, the agent should set this object as
      closely to the requested value as is possible for the
      particular implementation and available resources. When
      considering resources available, the agent must consider its
      ability to allocate this many entries for all reports.
      Note that while the actual number of entries stored in the
      reports may fluctuate due to changing conditions, the agent
      must continue to have storage available to satisfy the full
      report size for all reports when necessary. Further, the agent
      must not lower this value except as a result of a set to the
      associated apmReportControlRequestedSize object."
  ::= { apmReportControlEntry 6 }

apmReportControlRequestedReports OBJECT-TYPE

  SYNTAX      Unsigned32 (0..65535)
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The number of saved reports requested to be allocated on
      behalf of this entry."
  ::= { apmReportControlEntry 7 }

apmReportControlGrantedReports OBJECT-TYPE

  SYNTAX      Unsigned32 (0..65535)
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of saved reports the agent has allocated
      based on the requested amount in
      apmReportControlRequestedReports. Since each report can have
      many entries, the total number of entries allocated will be
      this number multiplied by the value of
      apmReportControlGrantedSize, or 1 if that object doesn't
      exist.

Waldbusser Standards Track [Page 39] RFC 3729 APM MIB March 2004

      When the associated apmReportControlRequestedReports object is
      created or modified, the agent should set this object as
      closely to the requested value as is possible for the
      particular implementation and available resources. When
      considering resources available, the agent must consider its
      ability to allocate this many reports each with the number of
      entries represented by apmReportControlGrantedSize, or 1 if
      that object doesn't exist.
      Note that while the storage required for each report may
      fluctuate due to changing conditions, the agent must continue
      to have storage available to satisfy the full report size for
      all reports when necessary. Further, the agent must not lower
      this value except as a result of a set to the associated
      apmReportControlRequestedSize object."
  ::= { apmReportControlEntry 8 }

apmReportControlStartTime OBJECT-TYPE

  SYNTAX      TimeStamp
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The value of sysUpTime when the system began processing the
      report in progress. Note that the report in progress is not
      available.
      This object may be used by the management station to figure
      out the start time for all previous reports saved for this
      apmReportControlEntry, as reports are started at fixed
      intervals."
  ::= { apmReportControlEntry 9 }

apmReportControlReportNumber OBJECT-TYPE

  SYNTAX      Unsigned32 (1..4294967295)
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of the report in progress. When an
      apmReportControlEntry is activated, the first report will be
      numbered one."
  ::= { apmReportControlEntry 10 }

apmReportControlDeniedInserts OBJECT-TYPE

  SYNTAX      Counter32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of failed attempts to add an entry to reports for

Waldbusser Standards Track [Page 40] RFC 3729 APM MIB March 2004

      this apmReportControlEntry because the number of entries
      would have exceeded apmReportControlGrantedSize.
      This number is valuable in determining if enough entries have
      been allocated for reports in light of fluctuating network
      usage. Note that since an entry that is denied will often be
      attempted again, this number will not predict the exact number
      of additional entries needed, but can be used to understand
      the relative magnitude of the problem.
      Also note that there is no ordering specified for the entries
      in the report, thus there are no rules for which entries will
      be omitted when not enough entries are available. As a
      consequence, the agent is not required to delete 'least
      valuable' entries first."
  ::= { apmReportControlEntry 11 }

apmReportControlDroppedFrames OBJECT-TYPE

  SYNTAX      Counter32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
     "The total number of frames which were received by the agent
      and therefore not accounted for in the *StatsDropEvents, but
      for which the agent chose not to count for this entry for
      whatever reason.  Most often, this event occurs when the agent
      is out of some resources and decides to shed load from this
      collection.
      This count does not include packets that were not counted
      because they had MAC-layer errors.
      This counter is only relevant if this apm report is based on
      a data source whose collection methodology is based on
      analyzing network traffic.
      Note that if the apmReportTables are inactive because no
      applications are enabled in the application directory, this
      value should be 0.
      Note that, unlike the dropEvents counter, this number is the
      exact number of frames dropped."
  ::= { apmReportControlEntry 12 }

apmReportControlOwner OBJECT-TYPE

  SYNTAX      OwnerString
  MAX-ACCESS  read-create
  STATUS      current

Waldbusser Standards Track [Page 41] RFC 3729 APM MIB March 2004

  DESCRIPTION
      "The entity that configured this entry and is
      therefore using the resources assigned to it."
  ::= { apmReportControlEntry 13 }

apmReportControlStorageType OBJECT-TYPE

  SYNTAX      StorageType
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The storage type of this apmReportControlEntry. If the value
      of this object is 'permanent', no objects in this row need to
      be writable."
  ::= { apmReportControlEntry 14 }

apmReportControlStatus OBJECT-TYPE

  SYNTAX      RowStatus
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The status of this apmReportControlEntry.
      An entry may not exist in the active state unless all
      objects in the entry have an appropriate value. The only
      objects in the entry that may be modified while the entry is
      in the active state are apmReportControlRequestedSize and
      apmReportControlRequestedReports.
      If this object is not equal to active(1), all
      associated entries in the apmReportTable shall be deleted
      by the agent."
  ::= { apmReportControlEntry 15 }

– The APM Report Table

apmReportTable OBJECT-TYPE

  SYNTAX      SEQUENCE OF ApmReportEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "The data resulting from aggregated APM reports. Consult the
      definition of apmReportControlAggregationType for the
      definition of the various types of aggregations."
  ::= { apmMibObjects 10 }

apmReportEntry OBJECT-TYPE

  SYNTAX      ApmReportEntry
  MAX-ACCESS  not-accessible

Waldbusser Standards Track [Page 42] RFC 3729 APM MIB March 2004

  STATUS      current
  DESCRIPTION
      "A conceptual row in the apmReportTable.
      The apmReportControlIndex value in the index identifies the
      apmReportControlEntry on whose behalf this entry was created.
      The apmReportIndex value in the index identifies which report
      (in the series of reports) this entry is a part of.
      The apmAppDirAppLocalIndex value in the index identifies
      the common application of the transactions aggregated in this
      entry.
      The apmAppDirResponsivenessType value in the index
      identifies the type of responsiveness metric reported by
      this entry and uniquely identifies this entry when more
      than one responsiveness metric is measured for a flow.
      Entries will only exist in this table for those
      combinations of AppLocalIndex and ResponsivenessType
      that are configured 'on(1)'.
      The protocolDirLocalIndex value in the index identifies
      the network layer protocol of the apmReportServerAddress.
      When the associated apmReportControlAggregationType value is
      equal to applications(4) or clients(2), this
      protocolDirLocalIndex value will equal 0.
      The apmReportServerAddress value in the index identifies the
      network layer address of the server in transactions aggregated
      in this entry.
      The apmNameClientID value in the index identifies the
      client in transactions aggregated in this entry. If the
      associated apmReportControlAggregationType is equal to
      applications(4) or servers(3), then this protocolDirLocalIndex
      value will equal 0.
      An example of the indexing of this entry is
      apmReportTransactionCount.3.15.3.1.8.4.192.168.1.2.3232235788
      Note that some combinations of index values may result in an
      index that exceeds 128 sub-identifiers in length which exceeds
      the maximum for the SNMP protocol. Implementations should take
      care to avoid such combinations."
  INDEX { apmReportControlIndex, apmReportIndex,
          apmAppDirAppLocalIndex,
          apmAppDirResponsivenessType,
          protocolDirLocalIndex, apmReportServerAddress,
          apmNameClientID }
  ::= { apmReportTable 1 }

ApmReportEntry ::= SEQUENCE {

  apmReportIndex                  Unsigned32,
  apmReportServerAddress          ProtocolDirNetworkAddress,

Waldbusser Standards Track [Page 43] RFC 3729 APM MIB March 2004

  apmReportTransactionCount       Unsigned32,
  apmReportSuccessfulTransactions Unsigned32,
  apmReportResponsivenessMean     Unsigned32,
  apmReportResponsivenessMin      Unsigned32,
  apmReportResponsivenessMax      Unsigned32,
  apmReportResponsivenessB1       Unsigned32,
  apmReportResponsivenessB2       Unsigned32,
  apmReportResponsivenessB3       Unsigned32,
  apmReportResponsivenessB4       Unsigned32,
  apmReportResponsivenessB5       Unsigned32,
  apmReportResponsivenessB6       Unsigned32,
  apmReportResponsivenessB7       Unsigned32

}

apmReportIndex OBJECT-TYPE

  SYNTAX      Unsigned32 (1..4294967295)
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "The value of apmReportControlReportNumber for the report to
      which this entry belongs."
  ::= { apmReportEntry 1 }

apmReportServerAddress OBJECT-TYPE

  SYNTAX      ProtocolDirNetworkAddress
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "The network server address for this apmReportEntry.
      This is represented as an octet string with
      specific semantics and length as identified
      by the protocolDirLocalIndex component of the index.
      Since this object is an index variable, it is encoded in the
      index according to the index encoding rules.  For example, if
      the protocolDirLocalIndex indicates an encapsulation of ip,
      this object is encoded as a length octet of 4, followed by the
      4 octets of the ip address, in network byte order. Care
      should be taken to avoid values of this object that, in
      conjunction with the other index variables, would result in an
      index longer than SNMP's maximum of 128 subidentifiers.
      If the associated apmReportControlAggregationType is equal to
      applications(4) or clients(2), then this object will be a null
      string and will be encoded simply as a length octet of 0."
  ::= { apmReportEntry 2 }

Waldbusser Standards Track [Page 44] RFC 3729 APM MIB March 2004

apmReportTransactionCount OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The total number of transactions aggregated into this record."
  ::= { apmReportEntry 3 }

apmReportSuccessfulTransactions OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The total number of successful transactions aggregated into
      this record."
  ::= { apmReportEntry 4 }

apmReportResponsivenessMean OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The arithmetic mean of the responsiveness metrics for all
      successful transactions aggregated into this record."
  ::= { apmReportEntry 5 }

apmReportResponsivenessMin OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The minimum of the responsiveness metrics for all
      successful transactions aggregated into this record."
  ::= { apmReportEntry 6 }

apmReportResponsivenessMax OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The maximum of the responsiveness metrics for all
      successful transactions aggregated into this record."
  ::= { apmReportEntry 7 }

– Note that when updating a report entry, a transaction will not be – counted in more than 1 bucket in an entry. It will be counted in – the first bucket that matches, starting with Bucket 1 (B1). Note – that if a transaction matches 2 application types, it will update

Waldbusser Standards Track [Page 45] RFC 3729 APM MIB March 2004

– one bucket in each of 2 entries in this table.

apmReportResponsivenessB1 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of successful transactions aggregated into this
      record whose responsiveness was less than boundary1 value for
      this application."
  ::= { apmReportEntry 8 }

apmReportResponsivenessB2 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of successful transactions aggregated into this
      record whose responsiveness did not fall into Bucket 1 and was
      greater than or equal to the boundary1 value for this
      application and less than the boundary2 value for this
      application."
  ::= { apmReportEntry 9 }

apmReportResponsivenessB3 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of successful transactions aggregated into this
      record whose responsiveness did not fall into Bucket 1 or 2
      and as greater than or equal to the boundary2 value for this
      application and less than the boundary3 value for this
      application."
  ::= { apmReportEntry 10 }

apmReportResponsivenessB4 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of successful transactions aggregated into this
      record whose responsiveness did not fall into Buckets 1
      through 3 and was greater than or equal to the boundary3 value
      for this application and less than the boundary4 value for
      this application."
  ::= { apmReportEntry 11 }

Waldbusser Standards Track [Page 46] RFC 3729 APM MIB March 2004

apmReportResponsivenessB5 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of successful transactions aggregated into this
      record whose responsiveness did not fall into Buckets 1
      through 4 and was greater than or equal to the boundary4 value
      for this application and less than the boundary5 value for
      this application."
  ::= { apmReportEntry 12 }

apmReportResponsivenessB6 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of successful transactions aggregated into this
      record whose responsiveness did not fall into Buckets 1
      through 5 and was greater than or equal to the
      boundary5 value for this application and less than the
      boundary6 value for this application."
  ::= { apmReportEntry 13 }

apmReportResponsivenessB7 OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The number of successful transactions aggregated into this
      record whose responsiveness did not fall into Buckets 1
      through 6 and was greater than or equal to the boundary6 value
      for this application."
  ::= { apmReportEntry 14 }

– APM Transaction Table

apmTransactionTable OBJECT-TYPE

  SYNTAX      SEQUENCE OF ApmTransactionEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "This table contains transactions that are currently running
      or have recently finished."
  ::= { apmMibObjects 11 }

apmTransactionEntry OBJECT-TYPE

  SYNTAX      ApmTransactionEntry

Waldbusser Standards Track [Page 47] RFC 3729 APM MIB March 2004

  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A conceptual row in the apmTransactionTable.
      The apmAppDirAppLocalIndex value in the index identifies
      the application of the transaction represented by this entry.
      The apmAppDirResponsivenessType value in the index
      identifies the type of responsiveness metric reported by
      this entry and uniquely identifies this entry when more
      than one responsiveness metric is measured for a flow.
      Entries will only exist in this table for those
      combinations of AppLocalIndex and ResponsivenessType
      that are configured 'on(1)'.
      The protocolDirLocalIndex value in the index identifies
      the network layer protocol of the apmTransactionServerAddress.
      The apmTransactionServerAddress value in the index identifies
      the network layer address of the server in the transaction
      represented by this entry.
      The apmNameClientID value in the index identifies the
      client in the transaction represented by this entry.
      An example of the indexing of this entry is
      apmTransactionCount.3.1.8.4.192.168.1.2.3232235788.2987
      Note that some combinations of index values may result in an
      index that exceeds 128 sub-identifiers in length which exceeds
      the maximum for the SNMP protocol. Implementations should take
      care to avoid such combinations."
  INDEX { apmAppDirAppLocalIndex,
          apmAppDirResponsivenessType,
          protocolDirLocalIndex, apmTransactionServerAddress,
          apmNameClientID, apmTransactionID }
  ::= { apmTransactionTable 1 }

ApmTransactionEntry ::= SEQUENCE {

  apmTransactionServerAddress      ProtocolDirNetworkAddress,
  apmTransactionID                 Unsigned32,
  apmTransactionResponsiveness     Unsigned32,
  apmTransactionAge                TimeInterval,
  apmTransactionSuccess            TruthValue

}

apmTransactionServerAddress OBJECT-TYPE

  SYNTAX      ProtocolDirNetworkAddress (SIZE (1..255))
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION

Waldbusser Standards Track [Page 48] RFC 3729 APM MIB March 2004

      "The network server address for this apmTransactionEntry.
      This is represented as an octet string with specific semantics
      and length as identified by the protocolDirLocalIndex
      component of the index. This object may not be the zero length
      string.
      For example, if the protocolDirLocalIndex indicates an
      encapsulation of ip, this object is encoded as a length octet
      of 4, followed by the 4 octets of the ip address, in network
      byte order. Care should be taken to avoid values of this
      object that, in conjunction with the other index variables,
      would result in an index longer than SNMP's maximum of 128
      subidentifiers."
  ::= { apmTransactionEntry 1 }

apmTransactionID OBJECT-TYPE

  SYNTAX      Unsigned32 (0..4294967295)
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A unique value for this transaction amongst other
      transactions sharing the same application layer protocol and
      server and client addresses. Implementations may choose to use
      the value of the client's source port, when possible."
  ::= { apmTransactionEntry 2 }

apmTransactionResponsiveness OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The current value of the responsiveness metric for this
      transaction. If this transaction has completed, the final
      value of the metric will be available.
      Note that this value may change over the lifetime of the
      transaction and it is the final value of this metric that is
      recorded as the responsiveness of the transaction for use in
      other APM MIB functions."
  ::= { apmTransactionEntry 3 }

apmTransactionAge OBJECT-TYPE

  SYNTAX      TimeInterval
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "If this transaction is still executing, this value shall be

Waldbusser Standards Track [Page 49] RFC 3729 APM MIB March 2004

      the length of time since it was started. If it has completed,
      this value shall be the length of time it was executing."
  ::= { apmTransactionEntry 4 }

apmTransactionSuccess OBJECT-TYPE

  SYNTAX      TruthValue
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The success of this transaction up to this time. Once a
      transaction has been marked as failed, it cannot move back
      into the successful state."
  ::= { apmTransactionEntry 5 }

apmTransactionsRequestedHistorySize OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "The maximum number of completed transactions desired to be
      retained in the apmTransactionTable. If the agent doesn't have
      enough resources to retain this many, it will retain as many as
      possible. Regardless of this value, the agent must attempt to
      keep records for all current transactions it is monitoring.
      The value of this object must persist across reboots."
  ::= { apmMibObjects 12 }

– The APM Exception table – The APM Exception Table creates filters so that a management – station can get immediate notification of a transaction that has – had poor availability or responsiveness. – – This function is particularly helpful in unaggregated situations – where the numbers of agents is relatively high and the transaction – rate per agent is relatively low (such as agents for desktops or – dedicated to small workgroups). Polling agents in such an – environment would either cause scalability problems (high rate) or – lead to long notification delays (low rate).

apmExceptionTable OBJECT-TYPE

  SYNTAX      SEQUENCE OF ApmExceptionEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "This table creates filters so that a management station can
      get immediate notification of a transaction that has had poor

Waldbusser Standards Track [Page 50] RFC 3729 APM MIB March 2004

      availability or responsiveness.
      Each apmExceptionEntry is associated with a particular type of
      transaction and is applied to all transactions of that
      type. Multiple apmExceptionEntries may be associated with a
      particular type of transaction. A transaction type is
      identified by the value of the apmAppDirAppLocalIndex
      component of the index.
      Because the quality of a transaction is not known until it is
      completed, these thresholds are only applied after the
      transaction has completed."
  ::= { apmMibObjects 13 }

apmExceptionEntry OBJECT-TYPE

  SYNTAX      ApmExceptionEntry
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION
      "A conceptual row in the apmExceptionTable.
      The apmAppDirAppLocalIndex value in the index identifies
      the application this entry will monitor.
      The apmAppDirResponsivenessType value in the index
      identifies the type of responsiveness metric this entry will
      monitor."
  INDEX { apmAppDirAppLocalIndex,
          apmAppDirResponsivenessType, apmExceptionIndex }
  ::= { apmExceptionTable 1 }

ApmExceptionEntry ::= SEQUENCE {

  apmExceptionIndex                       Unsigned32,
  apmExceptionResponsivenessComparison    INTEGER,
  apmExceptionResponsivenessThreshold     Unsigned32,
  apmExceptionUnsuccessfulException       INTEGER,
  apmExceptionResponsivenessEvents        Counter32,
  apmExceptionUnsuccessfulEvents          Counter32,
  apmExceptionOwner                       OwnerString,
  apmExceptionStorageType                 StorageType,
  apmExceptionStatus                      RowStatus

}

apmExceptionIndex OBJECT-TYPE

  SYNTAX      Unsigned32 (1..65535)
  MAX-ACCESS  not-accessible
  STATUS      current
  DESCRIPTION

Waldbusser Standards Track [Page 51] RFC 3729 APM MIB March 2004

      "An index that uniquely identifies an entry in the
      apmExceptionTable amongst other entries with equivalent index
      values for apmAppDirAppLocalIndex and
      apmAppDirResponsivenessType. Each such entry sets up
      thresholds for a particular measurement of a particular
      application."
  ::= { apmExceptionEntry 1 }

apmExceptionResponsivenessComparison OBJECT-TYPE

  SYNTAX      INTEGER {
                  none(1),
                  greater(2),
                  less(3)
              }
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "If this value is greater(2) or less(3), the associated
      apmExceptionResponsivenessThreshold will be compared to this
      value and an exception will be created if the responsiveness
      is greater than the threshold (greater(2)) or less than the
      threshold (less(3))."
  ::= { apmExceptionEntry 2 }

apmExceptionResponsivenessThreshold OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The threshold that responsiveness metrics are compared to."
  ::= { apmExceptionEntry 3 }

apmExceptionUnsuccessfulException OBJECT-TYPE

  SYNTAX      INTEGER {
                  off(1),
                  on(2)
              }
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "If this value is on(2), an exception will be created if a
      transaction of the associated type is unsuccessful."
  ::= { apmExceptionEntry 4 }

apmExceptionResponsivenessEvents OBJECT-TYPE

  SYNTAX      Counter32
  MAX-ACCESS  read-only
  STATUS      current

Waldbusser Standards Track [Page 52] RFC 3729 APM MIB March 2004

  DESCRIPTION
      "The total number of responsiveness exceptions generated. This
      counter will be incremented even if no notification was sent
      due to notifications not being configured or due to exceeding
      the apmNotificationMaxRate value."
  ::= { apmExceptionEntry 5 }

apmExceptionUnsuccessfulEvents OBJECT-TYPE

  SYNTAX      Counter32
  MAX-ACCESS  read-only
  STATUS      current
  DESCRIPTION
      "The total number of unsuccessful exceptions generated. This
      counter will be incremented even if no notification was sent
      due to notifications not being configured or due to exceeding
      the apmNotificationMaxRate value."
  ::= { apmExceptionEntry 6 }

apmExceptionOwner OBJECT-TYPE

  SYNTAX      OwnerString
  MAX-ACCESS  read-create
  STATUS      current
  DESCRIPTION
      "The entity that configured this entry and is
      therefore using the resources assigned to it."
  ::= { apmExceptionEntry 7 }

apmExceptionStorageType OBJECT-TYPE

  SYNTAX     StorageType
  MAX-ACCESS read-create
  STATUS     current
  DESCRIPTION
      "The storage type of this apmReportControlEntry. If the value
      of this object is 'permanent', no objects in this row need to
      be writable."
  ::= { apmExceptionEntry 8 }

apmExceptionStatus OBJECT-TYPE

  SYNTAX     RowStatus
  MAX-ACCESS read-create
  STATUS     current
  DESCRIPTION
      "The status of this apmExceptionEntry. The only objects in the
      entry that may be modified while the entry is in the active
      state are apmExceptionResponsivenessComparison,
      apmExceptionResponsivenessThreshold and
      apmExceptionUnsuccessfulException."
  ::= { apmExceptionEntry 9 }

Waldbusser Standards Track [Page 53] RFC 3729 APM MIB March 2004

apmThroughputExceptionMinTime OBJECT-TYPE

  SYNTAX      Unsigned32
  UNITS       "seconds"
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "Because the responsiveness for throughput-oriented
      transactions is divided by the elapsed time, it can be very
      sensitive to short-term performance variations for
      transactions that take a short period of time. For example,
      when downloading a very short file, a single dropped packet
      could double or triple the total response time.
      Further, throughput is usually examined for applications that
      transfer a lot of data, and when doing so it is helpful to
      conceptualize transaction costs that are proportional to the
      amount of data separately from those costs that are relatively
      fixed (i.e., independent of the amount of data).  For very
      short transactions, these fixed transaction costs (handshake,
      setup time, authentication, round-trip time) may dominate the
      total response time for the transaction, resulting in
      throughput measurements that aren't really proportional to the
      network's, server's and client's combined data throughput
      capability.
      This object controls the minimum number of seconds that an
      throughput-based transaction must exceed before an exception
      can be generated for it. If this object is set to zero, then
      all throughput-based transactions are candidates for
      exceptions.
      The value of this object must persist across reboots."
  DEFVAL     { 10 }
  ::= { apmMibObjects 14 }

apmNotificationMaxRate OBJECT-TYPE

  SYNTAX      Unsigned32
  MAX-ACCESS  read-write
  STATUS      current
  DESCRIPTION
      "The maximum number of notifications that can be generated
      from this agent by the apmExceptionTable in any 60 second
      period.
      The value of this object must persist across reboots."
  DEFVAL { 1 }
  ::= { apmMibObjects 15 }

Waldbusser Standards Track [Page 54] RFC 3729 APM MIB March 2004

– APM Notifications

apmNotifications OBJECT IDENTIFIER ::= { apm 0 }

apmTransactionResponsivenessAlarm NOTIFICATION-TYPE

  OBJECTS     { apmExceptionResponsivenessThreshold,
                apmTransactionResponsiveness }
  STATUS      current
  DESCRIPTION
      "Notification sent when a transaction exceeds a threshold
      defined in the apmException table. The index of the
      included apmExceptionResponsivenessThreshold object identifies
      the apmExceptionEntry that specified the threshold. The
      apmTransactionResponsiveness variable identifies the actual
      transaction and its responsiveness.
      Agent implementors are urged to include additional data
      objects in the alarm that may explain the reason for the
      alarm. It is helpful to include such data in the alarm because
      it describes the situation at the time the alarm was
      generated, where polls after the fact may not provide
      meaningful information. Examples of such information are CPU
      load, memory utilization, network utilization, and transaction
      statistics."
  ::= { apmNotifications 1 }

apmTransactionUnsuccessfulAlarm NOTIFICATION-TYPE

  OBJECTS     { apmExceptionResponsivenessThreshold }
  STATUS      current
  DESCRIPTION
      "Notification sent when a transaction is unsuccessful.
      The index of the included apmExceptionResponsivenessThreshold
      object identifies both the type of the transaction that caused
      this notification as well as the apmExceptionEntry that
      specified the threshold.
      Agent implementors are urged to include additional data
      objects in the alarm that may explain the reason for the
      alarm. It is helpful to include such data in the alarm because
      it describes the situation at the time the alarm was
      generated, where polls after the fact may not provide
      meaningful information. Examples of such information are CPU
      load, memory utilization, network utilization, and transaction
      statistics."
  ::= { apmNotifications 2 }

apmCompliance MODULE-COMPLIANCE

  STATUS  current

Waldbusser Standards Track [Page 55] RFC 3729 APM MIB March 2004

  DESCRIPTION
      "Describes the requirements for conformance to
      the APM MIB"
  MODULE  -- this module
      MANDATORY-GROUPS { apmAppDirGroup, apmReportGroup }
      GROUP apmUserDefinedApplicationsGroup
        DESCRIPTION
            "Implementation of the apmUserDefinedApplicationsGroup
            is optional."
      GROUP apmTransactionGroup
        DESCRIPTION
            "Implementation of the apmTransactionGroup is optional."
      GROUP apmExceptionGroup
        DESCRIPTION
            "Implementation of the apmExceptionGroup is optional."
      GROUP apmNotificationGroup
        DESCRIPTION
            "Implementation of the apmNotificationGroup is optional."
  ::= { apmCompliances 1 }

apmAppDirGroup OBJECT-GROUP

  OBJECTS { apmAppDirConfig,
            apmAppDirResponsivenessBoundary1,
            apmAppDirResponsivenessBoundary2,
            apmAppDirResponsivenessBoundary3,
            apmAppDirResponsivenessBoundary4,
            apmAppDirResponsivenessBoundary5,
            apmAppDirResponsivenessBoundary6,
            apmBucketBoundaryLastChange, apmAppDirID,
            apmNameMachineName, apmNameUserName }
  STATUS  current
  DESCRIPTION
      "The APM MIB directory of applications and application verbs."
  ::=  { apmGroups 1 }

apmUserDefinedApplicationsGroup OBJECT-GROUP

  OBJECTS {     apmHttpFilterAppLocalIndex,
                apmHttpFilterServerProtocol,
                apmHttpFilterServerAddress, apmHttpFilterURLPath,
                apmHttpFilterMatchType, apmHttpFilterOwner,
                apmHttpFilterStorageType, apmHttpFilterRowStatus,
                apmHttpIgnoreUnregisteredURLs, apmHttp4xxIsFailure,
                apmUserDefinedAppParentIndex,

Waldbusser Standards Track [Page 56] RFC 3729 APM MIB March 2004

                apmUserDefinedAppApplication }
  STATUS  current
  DESCRIPTION
      "Objects used for creating and managing user-defined
      applications."
  ::= { apmGroups 2 }

apmReportGroup OBJECT-GROUP

  OBJECTS { apmReportControlDataSource,
            apmReportControlAggregationType,
            apmReportControlInterval,
            apmReportControlRequestedSize,
            apmReportControlGrantedSize,
            apmReportControlRequestedReports,
            apmReportControlGrantedReports,
            apmReportControlStartTime,
            apmReportControlReportNumber,
            apmReportControlDeniedInserts,
            apmReportControlDroppedFrames,
            apmReportControlOwner,
            apmReportControlStorageType,
            apmReportControlStatus,
            apmReportTransactionCount,
            apmReportSuccessfulTransactions,
            apmReportResponsivenessMean,
            apmReportResponsivenessMin,
            apmReportResponsivenessMax,
            apmReportResponsivenessB1,
            apmReportResponsivenessB2,
            apmReportResponsivenessB3,
            apmReportResponsivenessB4,
            apmReportResponsivenessB5,
            apmReportResponsivenessB6,
            apmReportResponsivenessB7 }
  STATUS  current
  DESCRIPTION
      "The apm report group controls the creation and retrieval of
      reports that aggregate application performance."
  ::=  { apmGroups 3 }

apmTransactionGroup OBJECT-GROUP

  OBJECTS { apmTransactionResponsiveness,
            apmTransactionAge, apmTransactionSuccess,
            apmTransactionsRequestedHistorySize }
  STATUS  current
  DESCRIPTION
      "The apm transaction group contains statistics for
      individual transactions."

Waldbusser Standards Track [Page 57] RFC 3729 APM MIB March 2004

  ::=  { apmGroups 4 }

apmExceptionGroup OBJECT-GROUP

  OBJECTS { apmExceptionResponsivenessComparison,
            apmExceptionResponsivenessThreshold,
            apmExceptionUnsuccessfulException,
            apmExceptionResponsivenessEvents,
            apmExceptionUnsuccessfulEvents,
            apmExceptionOwner, apmExceptionStorageType,
            apmExceptionStatus, apmThroughputExceptionMinTime,
            apmNotificationMaxRate }
  STATUS  current
  DESCRIPTION
      "The apm exception group causes notifications to be sent
      whenever transactions are detected that had poor availability
      or responsiveness."
  ::=  { apmGroups 5 }

apmNotificationGroup NOTIFICATION-GROUP

  NOTIFICATIONS { apmTransactionResponsivenessAlarm,
                  apmTransactionUnsuccessfulAlarm }
  STATUS        current
  DESCRIPTION
      "Notifications sent by an APM MIB agent."
  ::= { apmGroups 6 }

END

4. Security Considerations

 There are a number of management objects defined in this MIB module
 with a MAX-ACCESS clause of read-write and/or read-create.  Such
 objects may be considered sensitive or vulnerable in some network
 environments.  The support for SET operations in a non-secure
 environment without proper protection can have a negative effect on
 network operations.
 Specifically, most of the read-write and read-create objects in this
 MIB module may be used to configure an agent to reveal network
 addresses, application usage information and conversation statistics
 that may be considered sensitive in some environments.
 Some of the readable objects in this MIB module (i.e., objects with a
 MAX-ACCESS other than not-accessible) may be considered sensitive or
 vulnerable in some network environments.  It is thus important to
 control even GET and/or NOTIFY access to these objects and possibly
 to even encrypt the values of these objects when sending them over
 the network via SNMP.

Waldbusser Standards Track [Page 58] RFC 3729 APM MIB March 2004

 Specifically, this MIB contains network addresses, machines names,
 user names, application usage information, and conversation
 statistics.  Data of this nature should be considered sensitive and
 the privacy of the users from whom it was gathered protected.
 Administrators should restrict read access to this data to
 specifically authorized individuals or agents that recognize the
 privacy implications of its release.  In situations where read access
 to this data cannot be restricted, it should not be gathered.
 Systems that implement the objects in this MIB module have the
 capability of measuring the time taken to execute transactions.
 Depending on the transaction type, some or all of this transaction
 time may be associated with the time taken to perform security
 calculations.  Such data may help an attacker to use timing attacks
 to extract secrets from the systems involved in the transactions.
 See [10] for more information.
 SNMP versions prior to SNMPv3 did not include adequate security.
 Even if the network itself is secure (for example by using IPSec),
 even then, there is no control as to who on the secure network is
 allowed to access and GET/SET (read/change/create/delete) the objects
 in this MIB module.
 It is RECOMMENDED that implementers consider the security features as
 provided by the SNMPv3 framework (see [8], section 8), including full
 support for the SNMPv3 cryptographic mechanisms (for authentication
 and privacy).
 Further, deployment of SNMP versions prior to SNMPv3 is NOT
 RECOMMENDED.  Instead, it is RECOMMENDED to deploy SNMPv3 and to
 enable cryptographic security.  It is then a customer/operator
 responsibility to ensure that the SNMP entity giving access to an
 instance of this MIB module is properly configured to give access to
 the objects only to those principals (users) that have legitimate
 rights to indeed GET or SET (change/create/delete) them.

Waldbusser Standards Track [Page 59] RFC 3729 APM MIB March 2004

5. References

5.1. Normative References

 [1]  McCloghrie, K., Perkins, D. and J. Schoenwaelder, "Structure of
      Management Information Version 2 (SMIv2)", STD 58, RFC 2578,
      April 1999.
 [2]  McCloghrie, K., Perkins, D. and J. Schoenwaelder, "Textual
      Conventions for SMIv2", STD 58, RFC 2579, April 1999.
 [3]  McCloghrie, K., Perkins, D. and J. Schoenwaelder, "Conformance
      Statements for SMIv2", STD 58, RFC 2580, April 1999.
 [4]  McCloghrie, K. and F. Kastenholz, "The Interfaces Group MIB",
      RFC 2863, June 2000.
 [5]  Waldbusser, S., "Remote Network Monitoring Management
      Information Base Version 2 using SMIv2", RFC 2021, January 1997.
 [6]  Bierman, A., Bucci, C. and R. Iddon, "Remote Network Monitoring
      MIB Protocol Identifiers", RFC 2895, August 2000.
 [7]  Waldbusser, S., "Remote Network Monitoring Management
      Information Base", STD 59, RFC 2819, May 2000.

5.2. Informative References

 [8]  Case, J., Mundy, R., Partain, D. and B. Stewart, "Introduction
      and Applicability Statements for Internet-Standard Management
      Framework", RFC 3410, December 2002.
 [9]  Berners-Lee, T., Masinter, L. and M. McCahill, "Uniform Resource
      Locators (URL)", RFC 1738, December 1994.
 [10] Boneh, D. and D. Brumley, "Remote timing attacks are practical",
      Proceedings of 12th USENIX Security Symposium, August 2003.

6. Author's Address

 Steven Waldbusser
 EMail: waldbusser@nextbeacon.com

Waldbusser Standards Track [Page 60] RFC 3729 APM MIB March 2004

7. Full Copyright Statement

 Copyright (C) The Internet Society (2004).  This document is subject
 to the rights, licenses and restrictions contained in BCP 78 and
 except as set forth therein, the authors retain all their rights.
 This document and the information contained herein are provided on an
 "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS
 OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET
 ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED,
 INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE
 INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED
 WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.

Intellectual Property

 The IETF takes no position regarding the validity or scope of any
 Intellectual Property Rights or other rights that might be claimed to
 pertain to the implementation or use of the technology described in
 this document or the extent to which any license under such rights
 might or might not be available; nor does it represent that it has
 made any independent effort to identify any such rights.  Information
 on the procedures with respect to rights in RFC documents can be
 found in BCP 78 and BCP 79.
 Copies of IPR disclosures made to the IETF Secretariat and any
 assurances of licenses to be made available, or the result of an
 attempt made to obtain a general license or permission for the use of
 such proprietary rights by implementers or users of this
 specification can be obtained from the IETF on-line IPR repository at
 http://www.ietf.org/ipr.
 The IETF invites any interested party to bring to its attention any
 copyrights, patents or patent applications, or other proprietary
 rights that may cover technology that may be required to implement
 this standard.  Please address the information to the IETF at ietf-
 ipr@ietf.org.

Acknowledgement

 Funding for the RFC Editor function is currently provided by the
 Internet Society.

Waldbusser Standards Track [Page 61]

/data/webs/external/dokuwiki/data/pages/rfc/rfc3729.txt · Last modified: 2004/03/01 22:19 by 127.0.0.1

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki