SNMP counters

[Alexandr_P]

Hello all!

Summit X670G2
ExtremeXOS version 15.6.2.12 There is a problem to show counters by SNMP.

ACL:

entry METROSET {
if match all {
vlan-id 316 ;
} then {
permit;
byte-count ob;
}
}

* sw3-gdr.ki.4 # show access-list port 1 egress
#Policy Entries
1 METROSET

Counter is growing:
* sw3-gdr.ki.5 # show access-list counter egress
Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
kvant-o * 1 egress
ob 4269938561645


There is need to take counters value by SNMP. And now we have a problem:
counter valuevalue is given by the SNMP - does not increase until we execute command 'show access-list counter egress'.

<20:00:28> # snmpwalk -v2c -c Dm4Aldiadm sw3-gdr extremeAclByteCount.0
EXTREME-CLEARFLOW-MIB::extremeAclByteCount.0.1001 = Counter64: 842327552

<20:01:16> # snmpwalk -v2c -c Dm4Aldiadm sw3-gdr extremeAclByteCount.0
EXTREME-CLEARFLOW-MIB::extremeAclByteCount.0.1001 = Counter64: 842327552


Execute command
* sw3-gdr.ki.4 # show access-list counter egress
Policy Name Vlan Name Port Direction
Counter Name Packet Count Byte Count
==================================================================
kvant-o * 1 egress
ob 73403219719


<20:02:20> # snmpwalk -v2c -c Dm4Aldiadm sw3-gdr extremeAclByteCount.0
EXTREME-CLEARFLOW-MIB::extremeAclByteCount.0.1001 = Counter64: 73403219719

... and further it does not grow again until the command is executed
'show access-list counter egress'.

Thank you!

[Alexandr_P]

Thank you all for help!!!

[Henrique]

Hi Alexandr, I have done a quick test and got same behavior.

The issue is related to ACL egress counter only. When using ingress it works as expected.

I saw this issue with 15.7 and 16.1.3 releases.

Seems to be a SW bug. An alternative is to use (if possible) ingress ACL counters.

Also, I would recommend you to open a GTAC case so this issue/fix could be tracked.

[Jarek]

Hello Alexandr,

I know that this is not the solution, but for a workaround you can use upm
and execute a script with show access-list...

Regards
--
Jarek