Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How would I go about retrieving 64 bit counters for network traffic on windows (Server 2008 specifically)? I'm seeing too many rollovers on the 32 bit counters for our polling interval, leading to gaps in the data.

We feed the data through RRDTool, which can successfully handle one rollover per polling period, but can't deal with two. 64bit counters would prevent this issue, but I can't seem to find a way to enable them on windows

share|improve this question
Can your graphing tool only poll SNMP? I had to use WMI or RPC to access perfmon counters in Zenoss, fixed this for me. – SpacemanSpiff Apr 5 '11 at 15:55
up vote 3 down vote accepted

According to Tiger Li, a moderator on Microsoft's TechNet, it's not possible:

share|improve this answer
If anyone stumbles on this... I believe the only way to do this is via the 3rd party Informant SNMP agent: – Keith Dec 24 '11 at 5:37
snmp-informant won't work well because it doesn't use counters like the natvice 32-bit snmp--it uses deltas (that is, its output is Bytes/sec). So it you poll every 5 min, and download a huge file for the middle 3 minutes of an otherwise idle connection, at both poll times the Bytes/sec value will be 0. You need an absolute like BytesReceived which the 32-bit snmp counter gave you. – Ryan Horrisberger Mar 18 '13 at 18:36

In general these would be keep in the HC counters: IF-MIB::ifHCInOctets

If you can't pull these from Windows, I think your best bet might to be if your switch has these counters in their IF-MIB table and pull it from there.

share|improve this answer

Although there are no 64-bit SNMP counters on Windows (as Keith mentioned), and perfmon counters won't give reliable information because they are already rate values (bytes/sec) if you don't mind installing nsclient you can pretty easily use WMI

share|improve this answer
We ended up writing our own SNMP agent to return the 64bit counters. WMI would have required throwing away all our existing monitoring infrastructure. – devicenull Mar 20 '13 at 19:28

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.