Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How would I go about retrieving 64 bit counters for network traffic on windows (Server 2008 specifically)? I'm seeing too many rollovers on the 32 bit counters for our polling interval, leading to gaps in the data.

We feed the data through RRDTool, which can successfully handle one rollover per polling period, but can't deal with two. 64bit counters would prevent this issue, but I can't seem to find a way to enable them on windows

share|improve this question
    
Can your graphing tool only poll SNMP? I had to use WMI or RPC to access perfmon counters in Zenoss, fixed this for me. –  SpacemanSpiff Apr 5 '11 at 15:55
add comment

3 Answers 3

up vote 3 down vote accepted

According to Tiger Li, a moderator on Microsoft's TechNet, it's not possible:

http://social.technet.microsoft.com/Forums/en-CA/winservergen/thread/07b62ff0-94f6-40ca-a99d-d129c1b33d70

share|improve this answer
    
If anyone stumbles on this... I believe the only way to do this is via the 3rd party Informant SNMP agent: snmp-informant.com –  Keith Dec 24 '11 at 5:37
    
snmp-informant won't work well because it doesn't use counters like the natvice 32-bit snmp--it uses deltas (that is, its output is Bytes/sec). So it you poll every 5 min, and download a huge file for the middle 3 minutes of an otherwise idle connection, at both poll times the Bytes/sec value will be 0. You need an absolute like BytesReceived which the 32-bit snmp counter gave you. –  Ryan Horrisberger Mar 18 '13 at 18:36
add comment

In general these would be keep in the HC counters: IF-MIB::ifHCInOctets

If you can't pull these from Windows, I think your best bet might to be if your switch has these counters in their IF-MIB table and pull it from there.

share|improve this answer
add comment

Although there are no 64-bit SNMP counters on Windows (as Keith mentioned), and perfmon counters won't give reliable information because they are already rate values (bytes/sec) if you don't mind installing nsclient you can pretty easily use WMI

share|improve this answer
    
We ended up writing our own SNMP agent to return the 64bit counters. WMI would have required throwing away all our existing monitoring infrastructure. –  devicenull Mar 20 '13 at 19:28
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.